Edit tour

Windows Analysis Report
https://all.accor.com/a/en/new-app-offer.html

Overview

General Information

Sample URL:	https://all.accor.com/a/en/new-app-offer.html
Analysis ID:	1545205
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Connects to several IPs in different countries

HTML page contains hidden javascript code

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5460 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 928 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=2000,i,4908088389632724178,9141779666674835467,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6280 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://all.accor.com/a/en/new-app-offer.html" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6304 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://accor.onelink.me/5GRx/5m1nc8of?af_qr=true MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6684 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1716 --field-trial-handle=2024,i,10245821585614290726,11001642237239521171,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://all.accor.com/a/en/new-app-offer/app-download.html?source_caller=bulk&af_qr=true&shortlink=5m1nc8of&c=20241013_ALL_AppBonusingMobileLp&af_ad=QR_code_20241013_ALL_AppBonusingMobileLp&pid=QR_code&deep_link_value=accor%3A%2F%2Fsearch%2Foffer%3Fpage_id%3Dddc8e830-2fc5-4492-ae7f-a63574b202f4&af_adset=EN

HTTP Parser: Base64 decoded: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 266 266"> <path d="M258,265.6H191.3l-41.9-97.4c-24.5,13.3-38.6,44-63.4,64.4a147.83386,147.83386,0,0,1-45.9,25.9c-8.4,2.8-22.6,6.5-27.9,7-2.3.2-3.8.9-4.1.1-.2-.6.3-1.8,2.7-3,2.7-1.3,13.9-6,21-10.8,8.8-...

Source: https://all.accor.com/a/en/new-app-offer.html	HTTP Parser: No favicon
Source: https://all.accor.com/a/en/new-app-offer/app-download.html?source_caller=bulk&af_qr=true&shortlink=5m1nc8of&c=20241013_ALL_AppBonusingMobileLp&af_ad=QR_code_20241013_ALL_AppBonusingMobileLp&pid=QR_code&deep_link_value=accor%3A%2F%2Fsearch%2Foffer%3Fpage_id%3Dddc8e830-2fc5-4492-ae7f-a63574b202f4&af_adset=EN	HTTP Parser: No favicon
Source: https://all.accor.com/a/en/new-app-offer/app-download.html?source_caller=bulk&af_qr=true&shortlink=5m1nc8of&c=20241013_ALL_AppBonusingMobileLp&af_ad=QR_code_20241013_ALL_AppBonusingMobileLp&pid=QR_code&deep_link_value=accor%3A%2F%2Fsearch%2Foffer%3Fpage_id%3Dddc8e830-2fc5-4492-ae7f-a63574b202f4&af_adset=EN	HTTP Parser: No favicon
Source: https://all.accor.com/a/en/new-app-offer/app-download.html?source_caller=bulk&af_qr=true&shortlink=5m1nc8of&c=20241013_ALL_AppBonusingMobileLp&af_ad=QR_code_20241013_ALL_AppBonusingMobileLp&pid=QR_code&deep_link_value=accor%3A%2F%2Fsearch%2Foffer%3Fpage_id%3Dddc8e830-2fc5-4492-ae7f-a63574b202f4&af_adset=EN	HTTP Parser: No favicon
Source: https://all.accor.com/a/en/new-app-offer/app-download.html?source_caller=bulk&af_qr=true&shortlink=5m1nc8of&c=20241013_ALL_AppBonusingMobileLp&af_ad=QR_code_20241013_ALL_AppBonusingMobileLp&pid=QR_code&deep_link_value=accor%3A%2F%2Fsearch%2Foffer%3Fpage_id%3Dddc8e830-2fc5-4492-ae7f-a63574b202f4&af_adset=EN	HTTP Parser: No favicon
Source: https://all.accor.com/a/en/new-app-offer/app-download.html?source_caller=bulk&af_qr=true&shortlink=5m1nc8of&c=20241013_ALL_AppBonusingMobileLp&af_ad=QR_code_20241013_ALL_AppBonusingMobileLp&pid=QR_code&deep_link_value=accor%3A%2F%2Fsearch%2Foffer%3Fpage_id%3Dddc8e830-2fc5-4492-ae7f-a63574b202f4&af_adset=EN	HTTP Parser: No favicon
Source: https://all.accor.com/a/en/new-app-offer/app-download.html?source_caller=bulk&af_qr=true&shortlink=5m1nc8of&c=20241013_ALL_AppBonusingMobileLp&af_ad=QR_code_20241013_ALL_AppBonusingMobileLp&pid=QR_code&deep_link_value=accor%3A%2F%2Fsearch%2Foffer%3Fpage_id%3Dddc8e830-2fc5-4492-ae7f-a63574b202f4&af_adset=EN	HTTP Parser: No favicon
Source: https://all.accor.com/a/en/new-app-offer/app-download.html?source_caller=bulk&af_qr=true&shortlink=5m1nc8of&c=20241013_ALL_AppBonusingMobileLp&af_ad=QR_code_20241013_ALL_AppBonusingMobileLp&pid=QR_code&deep_link_value=accor%3A%2F%2Fsearch%2Foffer%3Fpage_id%3Dddc8e830-2fc5-4492-ae7f-a63574b202f4&af_adset=EN	HTTP Parser: No favicon
Source: https://all.accor.com/a/en/new-app-offer/app-download.html?source_caller=bulk&af_qr=true&shortlink=5m1nc8of&c=20241013_ALL_AppBonusingMobileLp&af_ad=QR_code_20241013_ALL_AppBonusingMobileLp&pid=QR_code&deep_link_value=accor%3A%2F%2Fsearch%2Foffer%3Fpage_id%3Dddc8e830-2fc5-4492-ae7f-a63574b202f4&af_adset=EN	HTTP Parser: No favicon
Source: https://all.accor.com/a/en/new-app-offer/app-download.html?source_caller=bulk&af_qr=true&shortlink=5m1nc8of&c=20241013_ALL_AppBonusingMobileLp&af_ad=QR_code_20241013_ALL_AppBonusingMobileLp&pid=QR_code&deep_link_value=accor%3A%2F%2Fsearch%2Foffer%3Fpage_id%3Dddc8e830-2fc5-4492-ae7f-a63574b202f4&af_adset=EN	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:50209 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:50288 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:50371 version: TLS 1.2

Source: unknown

Network traffic detected: IP country count 10

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /a/en/new-app-offer.html HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /.rum/@adobe/helix-rum-js@%5E2/dist/rum-standalone.js HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/a/en/new-app-offer.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==
Source: global traffic	HTTP traffic detected: GET /b94aa70a4593f812b35d5a8922257b6f80ccf6aa708f58b8266f4ba917eb0e0e/resources/fonts/icomoon.woff HTTP/1.1Host: static-p46175-e229011.adobeaemcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://all.accor.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b94aa70a4593f812b35d5a8922257b6f80ccf6aa708f58b8266f4ba917eb0e0e/resources/fonts/montserrat-bold.woff2 HTTP/1.1Host: static-p46175-e229011.adobeaemcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://all.accor.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b94aa70a4593f812b35d5a8922257b6f80ccf6aa708f58b8266f4ba917eb0e0e/resources/fonts/roboto-bold.woff2 HTTP/1.1Host: static-p46175-e229011.adobeaemcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://all.accor.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b94aa70a4593f812b35d5a8922257b6f80ccf6aa708f58b8266f4ba917eb0e0e/theme.css HTTP/1.1Host: static-p46175-e229011.adobeaemcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b94aa70a4593f812b35d5a8922257b6f80ccf6aa708f58b8266f4ba917eb0e0e/resources/fonts/roboto-medium.woff2 HTTP/1.1Host: static-p46175-e229011.adobeaemcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://all.accor.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b94aa70a4593f812b35d5a8922257b6f80ccf6aa708f58b8266f4ba917eb0e0e/resources/fonts/roboto-regular.woff2 HTTP/1.1Host: static-p46175-e229011.adobeaemcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://all.accor.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b94aa70a4593f812b35d5a8922257b6f80ccf6aa708f58b8266f4ba917eb0e0e/resources/fonts/unna-italic.woff2 HTTP/1.1Host: static-p46175-e229011.adobeaemcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://all.accor.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /beacon/accorsa/accor/scripts/evergage.min.js HTTP/1.1Host: cdn.evgnet.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /a/etc.clientlibs/ace/clientlibs/clientlib-pos.lc-7cbb91b972378ab814dfaf40d82939a8-lc.min.js HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/a/en/new-app-offer.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==
Source: global traffic	HTTP traffic detected: GET /a/etc.clientlibs/ace/clientlibs-modules/clientlib-core.lc-63e399c5722b54df72093811820263e0-lc.min.js HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/a/en/new-app-offer.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==
Source: global traffic	HTTP traffic detected: GET /a/etc.clientlibs/ace/components/structure/base-page/clientlib-one-trust/one-trust.lc-91acfe7ca172af47f628e88402176079-lc.min.js HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://all.accor.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/a/en/new-app-offer.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==
Source: global traffic	HTTP traffic detected: GET /a/etc.clientlibs/ace/clientlibs/uc-webview.lc-44cb9ce2e83ba56026a41fce0a867816-lc.min.js HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/a/en/new-app-offer.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==
Source: global traffic	HTTP traffic detected: GET /a/etc/cloudsettings.kernel.js/conf/all/settings/cloudsettings/default/contexthub HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/a/en/new-app-offer.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==
Source: global traffic	HTTP traffic detected: GET /a/etc.clientlibs/ace/clientlibs-modules/components/clientlib-login-connect.lc-1f5662ce4b387990f20cf119603729fb-lc.min.js HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://all.accor.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/a/en/new-app-offer.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==
Source: global traffic	HTTP traffic detected: GET /a/content/dam/all/global-marketing/brand-identity/logos/all-paris-2024/msa_l_0000184.svg HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://all.accor.com/a/en/new-app-offer.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==
Source: global traffic	HTTP traffic detected: GET /a/etc.clientlibs/ace/clientlibs-modules/components/clientlib-image/v2/clientlib-image.lc-a10b68a2427438cc306ea4813a9677b5-lc.min.css HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://all.accor.com/a/en/new-app-offer.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==
Source: global traffic	HTTP traffic detected: GET /scripttemplates/otSDKStub.js HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /a/content/dam/generic/icons/amenities/default.svg HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://all.accor.com/a/en/new-app-offer.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==
Source: global traffic	HTTP traffic detected: GET /styles/styles-footer-light.css HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://all.accor.com/a/en/new-app-offer.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all
Source: global traffic	HTTP traffic detected: GET /scripts/main-footer-light.js HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/a/en/new-app-offer.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all
Source: global traffic	HTTP traffic detected: GET /b94aa70a4593f812b35d5a8922257b6f80ccf6aa708f58b8266f4ba917eb0e0e/theme.js HTTP/1.1Host: static-p46175-e229011.adobeaemcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /a/etc.clientlibs/ace/clientlibs/uc-webview.lc-44cb9ce2e83ba56026a41fce0a867816-lc.min.js HTTP/1.1Host: all.accor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all
Source: global traffic	HTTP traffic detected: GET /beacon/accorsa/accor/scripts/evergage.min.js HTTP/1.1Host: cdn.evgnet.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /a/etc.clientlibs/ace/clientlibs/clientlib-pos.lc-7cbb91b972378ab814dfaf40d82939a8-lc.min.js HTTP/1.1Host: all.accor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all
Source: global traffic	HTTP traffic detected: GET /a/etc.clientlibs/ace/components/structure/base-page/clientlib-one-trust/one-trust.lc-91acfe7ca172af47f628e88402176079-lc.min.js HTTP/1.1Host: all.accor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all
Source: global traffic	HTTP traffic detected: GET /a/etc.clientlibs/ace/clientlibs-modules/clientlib-core.lc-63e399c5722b54df72093811820263e0-lc.min.js HTTP/1.1Host: all.accor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all
Source: global traffic	HTTP traffic detected: GET /a/etc.clientlibs/ace/clientlibs-modules/components/clientlib-login-connect.lc-1f5662ce4b387990f20cf119603729fb-lc.min.js HTTP/1.1Host: all.accor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all
Source: global traffic	HTTP traffic detected: GET /a/etc.clientlibs/ace/clientlibs/clienlibs-3rd-parties/clientlib-vue.lc-f35b543fbf132ab69f5c12eebf271456-lc.min.js HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/a/en/new-app-offer.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all
Source: global traffic	HTTP traffic detected: GET /a/etc.clientlibs/ace/clientlibs-modules/components/clientlib-customer-api.lc-cda7e9186c25de421f8b91a0daf62395-lc.min.js HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/a/en/new-app-offer.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all
Source: global traffic	HTTP traffic detected: GET /a/content/dam/all/global-marketing/brand-identity/logos/all-paris-2024/msa_l_0000184.svg HTTP/1.1Host: all.accor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all
Source: global traffic	HTTP traffic detected: GET /a/etc.clientlibs/core/wcm/components/commons/datalayer/v2/clientlibs/core.wcm.components.commons.datalayer.v2.lc-1e0136bad0acfb78be509234578e44f9-lc.min.js HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/a/en/new-app-offer.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all
Source: global traffic	HTTP traffic detected: GET /a/etc.clientlibs/core/wcm/components/commons/datalayer/acdl/core.wcm.components.commons.datalayer.acdl.lc-bf921af342fd2c40139671dbf0920a1f-lc.min.js HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/a/en/new-app-offer.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all
Source: global traffic	HTTP traffic detected: GET /_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3&ns=1&cb=1949606252 HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/a/en/new-app-offer.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all
Source: global traffic	HTTP traffic detected: GET /components/footer/assets/images/logo-fevad.jpg HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://all.accor.com/a/en/new-app-offer.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /scripttemplates/otSDKStub.js HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b94aa70a4593f812b35d5a8922257b6f80ccf6aa708f58b8266f4ba917eb0e0e/theme.js HTTP/1.1Host: static-p46175-e229011.adobeaemcloud.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/sling/servlets/ace/getposcookies?siteCode=all&languageCodeFromPage=en&pointOfSaleCodeFromPage= HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://all.accor.com/a/en/new-app-offer.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D
Source: global traffic	HTTP traffic detected: GET /consent/87c4fef0-8732-44e4-bee3-f4faa4ce5a9d/87c4fef0-8732-44e4-bee3-f4faa4ce5a9d.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://all.accor.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /a/content/dam/generic/icons/amenities/default.svg HTTP/1.1Host: all.accor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D
Source: global traffic	HTTP traffic detected: GET /styles/styles-footer-light.css HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://all.accor.com/a/en/new-app-offer.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7DIf-Modified-Since: Mon, 28 Oct 2024 11:00:52 GMT
Source: global traffic	HTTP traffic detected: GET /scripts/main-footer-light.js HTTP/1.1Host: all.accor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D
Source: global traffic	HTTP traffic detected: GET /a/etc.clientlibs/core/wcm/components/commons/datalayer/v2/clientlibs/core.wcm.components.commons.datalayer.v2.lc-1e0136bad0acfb78be509234578e44f9-lc.min.js HTTP/1.1Host: all.accor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D
Source: global traffic	HTTP traffic detected: GET /a/etc.clientlibs/ace/clientlibs/clienlibs-3rd-parties/clientlib-vue.lc-f35b543fbf132ab69f5c12eebf271456-lc.min.js HTTP/1.1Host: all.accor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D
Source: global traffic	HTTP traffic detected: GET /scripts/main-footer-light.js HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/a/en/new-app-offer.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7DIf-Modified-Since: Mon, 28 Oct 2024 11:00:52 GMT
Source: global traffic	HTTP traffic detected: GET /a/etc.clientlibs/ace/clientlibs-modules/components/clientlib-customer-api.lc-cda7e9186c25de421f8b91a0daf62395-lc.min.js HTTP/1.1Host: all.accor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D
Source: global traffic	HTTP traffic detected: GET /a/content/sling/servlets/ace/getposcookies?siteCode=all&languageCodeFromPage=en&pointOfSaleCodeFromPage= HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://all.accor.com/a/en/new-app-offer.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; x-aem-variant=undefined; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=uXhrmD2Na/K1uglc4DSccWmUi3lwT6U0aN5NKqvcu8d5WGWybG4+Fjgl4ne6nVjifX1jzgyPIuRTBhS6nanmMOLamS/KiojPrxeLcFng8UzPO+81sa87bs4RFhGAg5SdnTRio+RJdn41ZezkVQzm+QQNKVTMJBE8fIzHUqlLtmYsp4GqzAo9Tqkn29+6s06cnyhW9Bg2AjaE3z+uY1Kha+K1N+xGE1wxY+ov1hMjJJFJQKo0Zzr8yVUmc0uGx6VyOI/GCYB98MMi2baM/noo1d0GCT/eTJnamWBVosFVl6rGjGRpxA8WWwcog7Ny/HlQVp6w8cTkKFTg/8KjIPnCBapACqcVA8DvW2Oym2gj1AtBv4YYfUMq3TEu4mXRkOJJVmAh7NCUHwLhEc4aXJBIqbW6JkrW0slp4+M4RmDR1e+A3GrFYXelb56QL3DRn/v55w+TZWXTMoZhYCD+Z9T66/W2fG7kaYRCiPpRV3/M6OxDVf5BkDxttvLDvvMv/DJqAaiNGVqVzzYMCm8U+45nsSA7env9GeR8uB0LoV4ERAyWKrr3E/7hYhnuxZjnTrqI7EShEtI2bhqWxw4D+7O5V0jhqVJ6Kt+VJt8kHuibJ32MnSNTDcghmiznReMDgyfWMK0eFSAbPxsIAHbmvCzgOF+fzAQ+p+UbrextrAP7Vkyu3FpKAX3CvQiB8F4LLeUMyAQohO46W/17/OILyjP4Qg1ZcLPLMo10tR+DfkZgHVqktba5wUI6DYkjA0JWgPWOCcwmyGAx+SH2pIziF5ODigRCgc+cSM3YU6Yn6LiLUn0zyElDhCIr9247ezsoEzVI8Vdxrux7DHF450ZNRq3nMxaYC4t+YWBMvidou52xETfnc2G1nknzL0buSjf4CHKEILXJykk93DfWEch5lSVX9OtMvlIwcK+vihsFYBWL8eVz6A5GtmG0JuIalTZMpL0ATFNxSN7KGMRWoULDrYcfeA/qLJfjQEQaRNSyptUWMy7x6XW5y3z40s7gNaqUon3RYArMOj1Mfb6XkfJdVVGRy+OCYqVaDFMm57DQVp5MSicZxXGxAPFQQZBIMcOb12QDgR1R1cW97zKZHTFTbXixTA+v037F6UhEwBMtOrJSQojLi9vKKQScRaBJDYEC/UZpbKNVR+Abw/RQu1sfiRDOb85cHmuABeDkRkwuWvYJMPxLScAvXTC2AjJxVSZBy9DpWpu/Zj2ejJMfhGuOVSf9pU4jDITA9Beah0KMO/q+q7ViCt4YtwbRP43LY1bRXHdwSsuOnTdOoVRY9/+1PVNtsgtJ9yzN5NRjTLs7Z2WSeXAOQhucfnealtKQZ1mX7fq4UIhmso81cIGRcr8swpYouQnEFDfQNqpF158ue8zV/ZIUvr7AJsbsaXYumGEikG0mOL6mgdXi4mB1uRfb0Vg9qdA2K6I3ITLM0ELiPPNnoGabN3zePB9sK+rp1OspSQN1Vz3kFtVmkVJyIg/O9EiOc/0B5EWh2ytrXYT0MFYmEM/MZIHHoduwILrvvKkVzyKrONcKgH3+rh3NGx5jIMI3NeWSBRilHbaE0o3zWF67AYc3QECHV3bksC0PUO7aYFYuZ5rqWDz9rI3UbF5RX4Vfu3hiQ7VQ+m7TaQLjSaAKctWIkcvkOykMyZdTPaw8mJYGv+C1YEYYlH0DMGHhI1jktF8r1oxfGBpQDAlBRkrLuiQaGlXc+ySJy028bn1WtD8Ke8nHtqVHhde1E7GMXUjzoHJIMFYAxqUvAM3njwonp0dewzYXIWvo3b9CBknSC
Source: global traffic	HTTP traffic detected: GET /authentication/v2.0/authorization?appId=all.accor&prompt=none&redirect_uri=https%3A%2F%2Fall.accor.com%2Fenroll-loyalty%2Fcheck-authent.html HTTP/1.1Host: api.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: org=evy
Source: global traffic	HTTP traffic detected: GET /a/etc.clientlibs/core/wcm/components/commons/datalayer/acdl/core.wcm.components.commons.datalayer.acdl.lc-bf921af342fd2c40139671dbf0920a1f-lc.min.js HTTP/1.1Host: all.accor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; x-aem-variant=undefined; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==
Source: global traffic	HTTP traffic detected: GET /consent/87c4fef0-8732-44e4-bee3-f4faa4ce5a9d/87c4fef0-8732-44e4-bee3-f4faa4ce5a9d.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://all.accor.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/fonts/roboto/regular/roboto-regular.woff2 HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://all.accor.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D
Source: global traffic	HTTP traffic detected: GET /as/authorization.oauth2?client_id=all.accor&response_type=code&accorregister=false&request=eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJjbGllbnRfaWQiOiJhbGwuYWNjb3IiLCJyZXNwb25zZV90eXBlIjoiY29kZSIsInJlZGlyZWN0X3VyaSI6Imh0dHBzOi8vYWxsLmFjY29yLmNvbS9lbnJvbGwtbG95YWx0eS9jaGVjay1hdXRoZW50Lmh0bWw_YXBwSWQ9YWxsLmFjY29yIiwic2NvcGUiOiJvcGVuaWQgQVBJV0VCLlVTRVIuQUxMIEFQU1IuQUxMIiwicHJvbXB0Ijoibm9uZSIsInN0YXRlIjoiZjM1NjBlZDJhOGM0NmFmNDE5OWVmOCIsIm5vbmNlIjoiMjFkMGEwZTVlZDhjNTY1NmRmMjhmNiIsImV4cCI6MTczMDI3NjE4NCwiaWF0IjoxNzMwMjc0Mzg0fQ.JqW-FJonJZaBZ70gGCenAbMXo9rjX6xBHmOikyeJWff9TYPsHiEm2nyGsFwTZGiPCVFqqqcO1M_Yvkt7VUyLecb-TvSbJELKeUvOU6uMhEh14T8jl7C58LPgZ2eSJpiAtTU4LENGWdfsuwwegu6ccUWllDNThuUWFc56LtkI_gOvNyoBdKCtyK7rWHw_gTmA-4nfTNNbGrpg7UNBJlU1yve8RsdoULVgkswCql1EolEC9rnT7Y8UEPzo6BiyHMv8YYTH0JW7BB6qzEdBZ93zpAkSPViX7UtSp0sEvmBBETlsoI_-Ba1f3R6UrMsVDMzrwmCh4oVFxqadPxxUlmUnuA&prompt=none HTTP/1.1Host: login.accor.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: org=evy; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa
Source: global traffic	HTTP traffic detected: GET /components/footer/assets/images/logo-fevad.jpg HTTP/1.1Host: all.accor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; x-aem-variant=undefined; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==
Source: global traffic	HTTP traffic detected: GET /_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3&ns=1&cb=1949606252 HTTP/1.1Host: all.accor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; x-aem-variant=undefined; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=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
Source: global traffic	HTTP traffic detected: GET /referential/v1/pos/currencies?groupByContinent=true HTTP/1.1Host: api.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"apikey: asHOCgjzKWHp8O7qXPKOfBTZ4k9Sq6IAsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://all.accor.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: org=evy; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; OAU_all.accor=eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJhcHBfaWQiOiJhbGwuYWNjb3IiLCJzdGF0ZSI6ImYzNTYwZWQyYThjNDZhZjQxOTllZjgiLCJub25jZSI6IjIxZDBhMGU1ZWQ4YzU2NTZkZjI4ZjYiLCJyZWRpcmVjdF9zaXRlX3VyaSI6Imh0dHBzOi8vYWxsLmFjY29yLmNvbSIsInByb21wdCI6Im5vbmUiLCJleHAiOjE3MzAyNzYxODQsImlhdCI6MTczMDI3NDM4NH0.T264QRl7YWH19MgynN8-Xaq1G1flI3hkXf6P-98bxX9zquvQYl9l1yVvirNK7SO9IARz9C1cgTuaozOE3ITULDlEyLbPAquuYSLfESRfVzyb0HFEhbkdMISJ5nmsUq2QiYFJRgGSRoU7UjHDLoo8646JuA_ZnO1550QeNYS8xuV9EoK4B4oFEgezMDX9rf6Or31D63HUbbL51dSeHY26E7TwHYN6SeodaZL7NeaUEJN-G93F7ktNq824Z5C11HTL2mkWUM6Aaz0nua4XKjGekRh9_QQpoOau3wMyp586RfBxn38C0agFPUi7WA_4FusMHRg-90n9XBuE3e_0KE46Uw
Source: global traffic	HTTP traffic detected: GET /referential/v1/pos/countries?siteCode=all HTTP/1.1Host: api.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"apikey: asHOCgjzKWHp8O7qXPKOfBTZ4k9Sq6IAsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://all.accor.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: org=evy; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; OAU_all.accor=eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJhcHBfaWQiOiJhbGwuYWNjb3IiLCJzdGF0ZSI6ImYzNTYwZWQyYThjNDZhZjQxOTllZjgiLCJub25jZSI6IjIxZDBhMGU1ZWQ4YzU2NTZkZjI4ZjYiLCJyZWRpcmVjdF9zaXRlX3VyaSI6Imh0dHBzOi8vYWxsLmFjY29yLmNvbSIsInByb21wdCI6Im5vbmUiLCJleHAiOjE3MzAyNzYxODQsImlhdCI6MTczMDI3NDM4NH0.T264QRl7YWH19MgynN8-Xaq1G1flI3hkXf6P-98bxX9zquvQYl9l1yVvirNK7SO9IARz9C1cgTuaozOE3ITULDlEyLbPAquuYSLfESRfVzyb0HFEhbkdMISJ5nmsUq2QiYFJRgGSRoU7UjHDLoo8646JuA_ZnO1550QeNYS8xuV9EoK4B4oFEgezMDX9rf6Or31D63HUbbL51dSeHY26E7TwHYN6SeodaZL7NeaUEJN-G93F7ktNq824Z5C11HTL2mkWUM6Aaz0nua4XKjGekRh9_QQpoOau3wMyp586RfBxn38C0agFPUi7WA_4FusMHRg-90n9XBuE3e_0KE46Uw
Source: global traffic	HTTP traffic detected: GET /5GRx/5m1nc8of?af_qr=true HTTP/1.1Host: accor.onelink.meConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /as/authorization.oauth2?client_id=all.accor&response_type=code&accorregister=false&request=eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJjbGllbnRfaWQiOiJhbGwuYWNjb3IiLCJyZXNwb25zZV90eXBlIjoiY29kZSIsInJlZGlyZWN0X3VyaSI6Imh0dHBzOi8vYWxsLmFjY29yLmNvbS9lbnJvbGwtbG95YWx0eS9jaGVjay1hdXRoZW50Lmh0bWw_YXBwSWQ9YWxsLmFjY29yIiwic2NvcGUiOiJvcGVuaWQgQVBJV0VCLlVTRVIuQUxMIEFQU1IuQUxMIiwicHJvbXB0Ijoibm9uZSIsInN0YXRlIjoiZjM1NjBlZDJhOGM0NmFmNDE5OWVmOCIsIm5vbmNlIjoiMjFkMGEwZTVlZDhjNTY1NmRmMjhmNiIsImV4cCI6MTczMDI3NjE4NCwiaWF0IjoxNzMwMjc0Mzg0fQ.JqW-FJonJZaBZ70gGCenAbMXo9rjX6xBHmOikyeJWff9TYPsHiEm2nyGsFwTZGiPCVFqqqcO1M_Yvkt7VUyLecb-TvSbJELKeUvOU6uMhEh14T8jl7C58LPgZ2eSJpiAtTU4LENGWdfsuwwegu6ccUWllDNThuUWFc56LtkI_gOvNyoBdKCtyK7rWHw_gTmA-4nfTNNbGrpg7UNBJlU1yve8RsdoULVgkswCql1EolEC9rnT7Y8UEPzo6BiyHMv8YYTH0JW7BB6qzEdBZ93zpAkSPViX7UtSp0sEvmBBETlsoI_-Ba1f3R6UrMsVDMzrwmCh4oVFxqadPxxUlmUnuA&prompt=none HTTP/1.1Host: login.accor.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: org=evy; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; visid_incap_2545443=x63MuavjQSixxrfQIYQ8PVHkIWcAAAAAQUIPAAAAAAD7hEgkFIFfLMg2zvFAlnfu; incap_ses_170_2545443=JXk2KzhmDUb9sg2vRfZbAlHkIWcAAAAAZwwpmYkZ8jK3gatMO3ubIQ==
Source: global traffic	HTTP traffic detected: GET /scripts/main-footer-light.js HTTP/1.1Host: all.accor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=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
Source: global traffic	HTTP traffic detected: GET /a/content/sling/servlets/ace/getposcookies?siteCode=all&languageCodeFromPage=en&pointOfSaleCodeFromPage= HTTP/1.1Host: all.accor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=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
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202409.2.0/otBannerSdk.js HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /a/en/new-app-offer/app-download.html?source_caller=bulk&af_qr=true&shortlink=5m1nc8of&c=20241013_ALL_AppBonusingMobileLp&af_ad=QR_code_20241013_ALL_AppBonusingMobileLp&pid=QR_code&deep_link_value=accor%3A%2F%2Fsearch%2Foffer%3Fpage_id%3Dddc8e830-2fc5-4492-ae7f-a63574b202f4&af_adset=EN HTTP/1.1Host: all.accor.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=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
Source: global traffic	HTTP traffic detected: GET /enroll-loyalty/check-authent.html?appId=all.accor&error_description=Authentication+is+required.&state=f3560ed2a8c46af4199ef8&error=login_required HTTP/1.1Host: all.accor.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=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
Source: global traffic	HTTP traffic detected: GET /_Incapsula_Resource?SWKMTFSR=1&e=0.7699246514200098 HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://all.accor.com/a/en/new-app-offer.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=uXhrmD2Na/K1uglc4DSccWmUi3lwT6U0aN5NKqvcu8d5WGWybG4+Fjgl4ne6nVjifX1jzgyPIuRTBhS6nanmMOLamS/KiojPrxeLcFng8UzPO+81sa87bs4RFhGAg5SdnTRio+RJdn41ZezkVQzm+QQNKVTMJBE8fIzHUqlLtmYsp4GqzAo9Tqkn29+6s06cnyhW9Bg2AjaE3z+uY1Kha+K1N+xGE1wxY+ov1hMjJJFJQKo0Zzr8yVUmc0uGx6VyOI/GCYB98MMi2baM/noo1d0GCT/eTJnamWBVosFVl6rGjGRpxA8WWwcog7Ny/HlQVp6w8cTkKFTg/8KjIPnCBapACqcVA8DvW2Oym2gj1AtBv4YYfUMq3TEu4mXRkOJJVmAh7NCUHwLhEc4aXJBIqbW6JkrW0slp4+M4RmDR1e+A3GrFYXelb56QL3DRn/v55w+TZWXTMoZhYCD+Z9T66/W2fG7kaYRCiPpRV3/M6OxDVf5BkDxttvLDvvMv/DJqAaiNGVqVzzYMCm8U+45nsSA7env9GeR8uB0LoV4ERAyWKrr3E/7hYhnuxZjnTrqI7EShEtI2bhqWxw4D+7O5V0jhqVJ6Kt+VJt8kHuibJ32MnSNTDcghmiznReMDgyfWMK0eFSAbPxsIAHbmvCzgOF+fzAQ+p+UbrextrAP7Vkyu3FpKAX3CvQiB8F4LLeUMyAQohO46W/17/OILyjP4Qg1ZcLPLMo10tR+DfkZgHVqktba5wUI6DYkjA0JWgPWOCcwmyGAx+SH2pIziF5ODigRCgc+cSM3YU6Yn6LiLUn0zyElDhCIr9247ezsoEzVI8Vdxrux7DHF450ZNRq3nMxaYC4t+YWBMvidou52xETfnc2G1nknzL0buSjf4CHKEILXJykk93DfWEch5lSVX9OtMvlIwcK+vihsFYBWL8eVz6A5GtmG0JuIalTZMpL0ATFNxSN7KGMRWoULDrYcfeA/qLJfjQEQaRNSyptUWMy7x6XW5y3z40s7gNaqUon3RYArMOj1Mfb6XkfJdVVGRy+OCYqVaDFMm57DQVp5MSicZxXGxAPFQQZBIMcOb12QDgR1R1cW97zKZHTFTbXixTA+v037F6UhEwBMtOrJSQojLi9vKKQScRaBJDYEC/UZpbKNVR+Abw/RQu1sfiRDOb85cHmuABeDkRkwuWvYJMPxLScAvXTC2AjJxVSZBy9DpWpu/Zj2ejJMfhGuOVSf9pU4jDITA9Beah0KMO/q+q7ViCt4YtwbRP43LY1bRXHdwSsuOnTdOoVRY9/+1PVNtsgtJ9yzN5NRjTLs7Z2WSeXAOQhucfnealtKQZ1mX7fq4UIhmso81cIGRcr8swpYouQnEFDfQNqpF158ue8zV/ZIUvr7AJsbsaXYumGEikG0mOL6mgdXi4mB1uRfb0Vg9qdA2K6I3ITLM0ELiPPNnoGabN3zePB9sK+rp1OspSQN1Vz3kFtVmkVJyIg/O9EiOc/0B5EWh2ytrXYT0MFYmEM/MZIHHoduwILrvvKkVzyKrONcKgH3+rh3NGx5jIMI3NeWSBRilHbaE0o3zWF67AYc3QECHV3bksC0PUO7aYFYuZ5rqWDz9rI3UbF5RX4Vfu3hiQ7VQ+m7TaQLjSaAKctWIkcvkOykMyZdTPaw8mJYGv+C1YEYYlH0DMGHhI1jktF8r1oxfGBpQDAlBRkrLuiQaGlXc+ySJy028bn1WtD8Ke8nHtqVHhde1E7GMXUjzoHJIMFYAxqUvAM3njwonp0dewzYXIWvo3b9CBknSCQoJIjz5nEvyrd5
Source: global traffic	HTTP traffic detected: GET /referential/v1/best-visit/cookie-attribution HTTP/1.1Host: api.accor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: org=evy; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; OAU_all.accor=eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJhcHBfaWQiOiJhbGwuYWNjb3IiLCJzdGF0ZSI6ImYzNTYwZWQyYThjNDZhZjQxOTllZjgiLCJub25jZSI6IjIxZDBhMGU1ZWQ4YzU2NTZkZjI4ZjYiLCJyZWRpcmVjdF9zaXRlX3VyaSI6Imh0dHBzOi8vYWxsLmFjY29yLmNvbSIsInByb21wdCI6Im5vbmUiLCJleHAiOjE3MzAyNzYxODQsImlhdCI6MTczMDI3NDM4NH0.T264QRl7YWH19MgynN8-Xaq1G1flI3hkXf6P-98bxX9zquvQYl9l1yVvirNK7SO9IARz9C1cgTuaozOE3ITULDlEyLbPAquuYSLfESRfVzyb0HFEhbkdMISJ5nmsUq2QiYFJRgGSRoU7UjHDLoo8646JuA_ZnO1550QeNYS8xuV9EoK4B4oFEgezMDX9rf6Or31D63HUbbL51dSeHY26E7TwHYN6SeodaZL7NeaUEJN-G93F7ktNq824Z5C11HTL2mkWUM6Aaz0nua4XKjGekRh9_QQpoOau3wMyp586RfBxn38C0agFPUi7WA_4FusMHRg-90n9XBuE3e_0KE46Uw; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjoiQUgiLCJyZXRhaW5lZG1lcmNoYW50aWQiOiJBSCJ9
Source: global traffic	HTTP traffic detected: GET /referential/v1/pos/currencies?groupByContinent=true HTTP/1.1Host: api.accor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: org=evy; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; OAU_all.accor=eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJhcHBfaWQiOiJhbGwuYWNjb3IiLCJzdGF0ZSI6ImYzNTYwZWQyYThjNDZhZjQxOTllZjgiLCJub25jZSI6IjIxZDBhMGU1ZWQ4YzU2NTZkZjI4ZjYiLCJyZWRpcmVjdF9zaXRlX3VyaSI6Imh0dHBzOi8vYWxsLmFjY29yLmNvbSIsInByb21wdCI6Im5vbmUiLCJleHAiOjE3MzAyNzYxODQsImlhdCI6MTczMDI3NDM4NH0.T264QRl7YWH19MgynN8-Xaq1G1flI3hkXf6P-98bxX9zquvQYl9l1yVvirNK7SO9IARz9C1cgTuaozOE3ITULDlEyLbPAquuYSLfESRfVzyb0HFEhbkdMISJ5nmsUq2QiYFJRgGSRoU7UjHDLoo8646JuA_ZnO1550QeNYS8xuV9EoK4B4oFEgezMDX9rf6Or31D63HUbbL51dSeHY26E7TwHYN6SeodaZL7NeaUEJN-G93F7ktNq824Z5C11HTL2mkWUM6Aaz0nua4XKjGekRh9_QQpoOau3wMyp586RfBxn38C0agFPUi7WA_4FusMHRg-90n9XBuE3e_0KE46Uw; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjoiQUgiLCJyZXRhaW5lZG1lcmNoYW50aWQiOiJBSCJ9
Source: global traffic	HTTP traffic detected: GET /referential/v1/pos/countries?siteCode=all HTTP/1.1Host: api.accor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: org=evy; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; OAU_all.accor=eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJhcHBfaWQiOiJhbGwuYWNjb3IiLCJzdGF0ZSI6ImYzNTYwZWQyYThjNDZhZjQxOTllZjgiLCJub25jZSI6IjIxZDBhMGU1ZWQ4YzU2NTZkZjI4ZjYiLCJyZWRpcmVjdF9zaXRlX3VyaSI6Imh0dHBzOi8vYWxsLmFjY29yLmNvbSIsInByb21wdCI6Im5vbmUiLCJleHAiOjE3MzAyNzYxODQsImlhdCI6MTczMDI3NDM4NH0.T264QRl7YWH19MgynN8-Xaq1G1flI3hkXf6P-98bxX9zquvQYl9l1yVvirNK7SO9IARz9C1cgTuaozOE3ITULDlEyLbPAquuYSLfESRfVzyb0HFEhbkdMISJ5nmsUq2QiYFJRgGSRoU7UjHDLoo8646JuA_ZnO1550QeNYS8xuV9EoK4B4oFEgezMDX9rf6Or31D63HUbbL51dSeHY26E7TwHYN6SeodaZL7NeaUEJN-G93F7ktNq824Z5C11HTL2mkWUM6Aaz0nua4XKjGekRh9_QQpoOau3wMyp586RfBxn38C0agFPUi7WA_4FusMHRg-90n9XBuE3e_0KE46Uw; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjoiQUgiLCJyZXRhaW5lZG1lcmNoYW50aWQiOiJBSCJ9
Source: global traffic	HTTP traffic detected: GET /assets/fonts/roboto/medium/roboto-medium.woff2 HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://all.accor.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=uXhrmD2Na/K1uglc4DSccWmUi3lwT6U0aN5NKqvcu8d5WGWybG4+Fjgl4ne6nVjifX1jzgyPIuRTBhS6nanmMOLamS/KiojPrxeLcFng8UzPO+81sa87bs4RFhGAg5SdnTRio+RJdn41ZezkVQzm+QQNKVTMJBE8fIzHUqlLtmYsp4GqzAo9Tqkn29+6s06cnyhW9Bg2AjaE3z+uY1Kha+K1N+xGE1wxY+ov1hMjJJFJQKo0Zzr8yVUmc0uGx6VyOI/GCYB98MMi2baM/noo1d0GCT/eTJnamWBVosFVl6rGjGRpxA8WWwcog7Ny/HlQVp6w8cTkKFTg/8KjIPnCBapACqcVA8DvW2Oym2gj1AtBv4YYfUMq3TEu4mXRkOJJVmAh7NCUHwLhEc4aXJBIqbW6JkrW0slp4+M4RmDR1e+A3GrFYXelb56QL3DRn/v55w+TZWXTMoZhYCD+Z9T66/W2fG7kaYRCiPpRV3/M6OxDVf5BkDxttvLDvvMv/DJqAaiNGVqVzzYMCm8U+45nsSA7env9GeR8uB0LoV4ERAyWKrr3E/7hYhnuxZjnTrqI7EShEtI2bhqWxw4D+7O5V0jhqVJ6Kt+VJt8kHuibJ32MnSNTDcghmiznReMDgyfWMK0eFSAbPxsIAHbmvCzgOF+fzAQ+p+UbrextrAP7Vkyu3FpKAX3CvQiB8F4LLeUMyAQohO46W/17/OILyjP4Qg1ZcLPLMo10tR+DfkZgHVqktba5wUI6DYkjA0JWgPWOCcwmyGAx+SH2pIziF5ODigRCgc+cSM3YU6Yn6LiLUn0zyElDhCIr9247ezsoEzVI8Vdxrux7DHF450ZNRq3nMxaYC4t+YWBMvidou52xETfnc2G1nknzL0buSjf4CHKEILXJykk93DfWEch5lSVX9OtMvlIwcK+vihsFYBWL8eVz6A5GtmG0JuIalTZMpL0ATFNxSN7KGMRWoULDrYcfeA/qLJfjQEQaRNSyptUWMy7x6XW5y3z40s7gNaqUon3RYArMOj1Mfb6XkfJdVVGRy+OCYqVaDFMm57DQVp5MSicZxXGxAPFQQZBIMcOb12QDgR1R1cW97zKZHTFTbXixTA+v037F6UhEwBMtOrJSQojLi9vKKQScRaBJDYEC/UZpbKNVR+Abw/RQu1sfiRDOb85cHmuABeDkRkwuWvYJMPxLScAvXTC2AjJxVSZBy9DpWpu/Zj2ejJMfhGuOVSf9pU4jDITA9Beah0KMO/q+q7ViCt4YtwbRP43LY1bRXHdwSsuOnTdOoVRY9/+1PVNtsgtJ9yzN5NRjTLs7Z2WSeXAOQhucfnealtKQZ1mX7fq4UIhmso81cIGRcr8swpYouQnEFDfQNqpF158ue8zV/ZIUvr7AJsbsaXYumGEikG0mOL6mgdXi4mB1uRfb0Vg9qdA2K6I3ITLM0ELiPPNnoGabN3zePB9sK+rp1OspSQN1Vz3kFtVmkVJyIg/O9EiOc/0B5EWh2ytrXYT0MFYmEM/MZIHHoduwILrvvKkVzyKrONcKgH3+rh3NGx5jIMI3NeWSBRilHbaE0o3zWF67AYc3QECHV3bksC0PUO7aYFYuZ5rqWDz9rI3UbF5RX4Vfu3hiQ7VQ+m7TaQLjSaAKctWIkcvkOykMyZdTPaw8mJYGv+C1YEYYlH0DMGHhI1jktF8r1oxfGBpQDAlBRkrLuiQaGlXc+ySJy028bn1WtD8Ke8nHtqVHhde1E7GMXUjzoHJIMFYAxqUvAM3njwonp0dewzYXIWvo3b9CBknSCQoJIjz5nEvyrd5NLbl0QNGjedZXxm/97zSY/z+oUJNT6gHOqvap5dnKfofv4F6CRat9J582c38aH
Source: global traffic	HTTP traffic detected: GET /a/etc.clientlibs/core/wcm/components/page/v2/page/clientlibs/site/skiptomaincontent.lc-696ce9a06faa733b225ffb8c05f16db9-lc.min.css HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://all.accor.com/a/en/new-app-offer/app-download.html?source_caller=bulk&af_qr=true&shortlink=5m1nc8of&c=20241013_ALL_AppBonusingMobileLp&af_ad=QR_code_20241013_ALL_AppBonusingMobileLp&pid=QR_code&deep_link_value=accor%3A%2F%2Fsearch%2Foffer%3Fpage_id%3Dddc8e830-2fc5-4492-ae7f-a63574b202f4&af_adset=ENAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=uXhrmD2Na/K1uglc4DSccWmUi3lwT6U0aN5NKqvcu8d5WGWybG4+Fjgl4ne6nVjifX1jzgyPIuRTBhS6nanmMOLamS/KiojPrxeLcFng8UzPO+81sa87bs4RFhGAg5SdnTRio+RJdn41ZezkVQzm+QQNKVTMJBE8fIzHUqlLtmYsp4GqzAo9Tqkn29+6s06cnyhW9Bg2AjaE3z+uY1Kha+K1N+xGE1wxY+ov1hMjJJFJQKo0Zzr8yVUmc0uGx6VyOI/GCYB98MMi2baM/noo1d0GCT/eTJnamWBVosFVl6rGjGRpxA8WWwcog7Ny/HlQVp6w8cTkKFTg/8KjIPnCBapACqcVA8DvW2Oym2gj1AtBv4YYfUMq3TEu4mXRkOJJVmAh7NCUHwLhEc4aXJBIqbW6JkrW0slp4+M4RmDR1e+A3GrFYXelb56QL3DRn/v55w+TZWXTMoZhYCD+Z9T66/W2fG7kaYRCiPpRV3/M6OxDVf5BkDxttvLDvvMv/DJqAaiNGVqVzzYMCm8U+45nsSA7env9GeR8uB0LoV4ERAyWKrr3E/7hYhnuxZjnTrqI7EShEtI2bhqWxw4D+7O5V0jhqVJ6Kt+VJt8kHuibJ32MnSNTDcghmiznReMDgyfWMK0eFSAbPxsIAHbmvCzgOF+fzAQ+p+UbrextrAP7Vkyu3FpKAX3CvQiB8F4LLeUMyAQohO46W/17/OILyjP4Qg1ZcLPLMo10tR+DfkZgHVqktba5wUI6DYkjA0JWgPWOCcwmyGAx+SH2pIziF5ODigRCgc+cSM3YU6Yn6LiLUn0zyElDhCIr9247ezsoEzVI8Vdxrux7DHF450ZNRq3nMxaYC4t+YWBMvidou52xETfnc2G1nknzL0buSjf4CHKEILXJykk93DfWEch5lSVX9OtMvlIwcK+vihsFYBWL8eVz6A5GtmG0JuIalTZMpL0ATFNxSN7KGMRWoULDrYcfeA/qLJfjQEQaRNSyptUWMy7x6XW5y3z40s7gNaqUon3RYArMOj1Mfb6XkfJdVVGRy+OCYqVaDFMm57DQVp5MSicZxXGxAPFQQZBIMcOb12QDgR1R1cW97zKZHTFTbXixTA+v037F6UhEwBMtOrJSQojLi9vKKQScRaBJDYEC/UZpbKNVR+Abw/RQu1sfiRDOb85cHmuABeDkRkwuWvYJMPxLScAvXTC2AjJxVSZBy9DpWpu/Zj2ejJMfhGuOVSf9pU4jDITA9Beah0KMO/q+q7ViCt4YtwbRP43LY1bRXHdwSsuOnTdOoVRY9/+1PVNtsgtJ9yzN5NRjTLs7Z2WSeXAOQhucfnealtKQZ1mX7fq4UIhmso81cIGRcr8swpYouQnEFDfQNqpF158ue8zV/ZIUvr7AJsbsaXYumGEikG0mOL6mgdXi4mB1uRfb0Vg9qdA2K6I3ITLM0ELiPPNnoGabN3zePB9sK+rp1OspSQN1Vz3kFtVmkVJyIg/O9EiOc/0B5EWh2ytrXYT0
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202409.2.0/otBannerSdk.js HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consent/87c4fef0-8732-44e4-bee3-f4faa4ce5a9d/0191bc5d-2eb7-7479-9d95-740d90885831/en.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://all.accor.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /kameleoon.js HTTP/1.1Host: qchmhd61sj.kameleoon.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_Incapsula_Resource?SWKMTFSR=1&e=0.7699246514200098 HTTP/1.1Host: all.accor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=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
Source: global traffic	HTTP traffic detected: GET /styles/styles-aem-header.css HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://all.accor.com/a/en/new-app-offer/app-download.html?source_caller=bulk&af_qr=true&shortlink=5m1nc8of&c=20241013_ALL_AppBonusingMobileLp&af_ad=QR_code_20241013_ALL_AppBonusingMobileLp&pid=QR_code&deep_link_value=accor%3A%2F%2Fsearch%2Foffer%3Fpage_id%3Dddc8e830-2fc5-4492-ae7f-a63574b202f4&af_adset=ENAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=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
Source: global traffic	HTTP traffic detected: GET /ruxitagentjs_ICA7NVfhqrux_10285240307101407.js HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=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
Source: global traffic	HTTP traffic detected: GET /a/etc/cloudsettings.kernel.js/conf/all/settings/cloudsettings/default/contexthub HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/a/en/new-app-offer/app-download.html?source_caller=bulk&af_qr=true&shortlink=5m1nc8of&c=20241013_ALL_AppBonusingMobileLp&af_ad=QR_code_20241013_ALL_AppBonusingMobileLp&pid=QR_code&deep_link_value=accor%3A%2F%2Fsearch%2Foffer%3Fpage_id%3Dddc8e830-2fc5-4492-ae7f-a63574b202f4&af_adset=ENAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=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
Source: global traffic	HTTP traffic detected: GET /components/header-aem/scripts/main.js HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/a/en/new-app-offer/app-download.html?source_caller=bulk&af_qr=true&shortlink=5m1nc8of&c=20241013_ALL_AppBonusingMobileLp&af_ad=QR_code_20241013_ALL_AppBonusingMobileLp&pid=QR_code&deep_link_value=accor%3A%2F%2Fsearch%2Foffer%3Fpage_id%3Dddc8e830-2fc5-4492-ae7f-a63574b202f4&af_adset=ENAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=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
Source: global traffic	HTTP traffic detected: GET /styles-v2410/styles-global.css HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=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
Source: global traffic	HTTP traffic detected: GET /styles/styles-footer-light.css HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://all.accor.com/a/en/new-app-offer/app-download.html?source_caller=bulk&af_qr=true&shortlink=5m1nc8of&c=20241013_ALL_AppBonusingMobileLp&af_ad=QR_code_20241013_ALL_AppBonusingMobileLp&pid=QR_code&deep_link_value=accor%3A%2F%2Fsearch%2Foffer%3Fpage_id%3Dddc8e830-2fc5-4492-ae7f-a63574b202f4&af_adset=ENAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=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
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202409.2.0/assets/otFlat.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://all.accor.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consent/87c4fef0-8732-44e4-bee3-f4faa4ce5a9d/0191bc5d-2eb7-7479-9d95-740d90885831/en.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202409.2.0/assets/otCommonStyles.css HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://all.accor.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /kameleoon.js HTTP/1.1Host: qchmhd61sj.kameleoon.euConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/static/ot_close.svg HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/fonts/roboto/bold/roboto-bold.woff2 HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://all.accor.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=uXhrmD2Na/K1uglc4DSccWmUi3lwT6U0aN5NKqvcu8d5WGWybG4+Fjgl4ne6nVjifX1jzgyPIuRTBhS6nanmMOLamS/KiojPrxeLcFng8UzPO+81sa87bs4RFhGAg5SdnTRio+RJdn41ZezkVQzm+QQNKVTMJBE8fIzHUqlLtmYsp4GqzAo9Tqkn29+6s06cnyhW9Bg2AjaE3z+uY1Kha+K1N+xGE1wxY+ov1hMjJJFJQKo0Zzr8yVUmc0uGx6VyOI/GCYB98MMi2baM/noo1d0GCT/eTJnamWBVosFVl6rGjGRpxA8WWwcog7Ny/HlQVp6w8cTkKFTg/8KjIPnCBapACqcVA8DvW2Oym2gj1AtBv4YYfUMq3TEu4mXRkOJJVmAh7NCUHwLhEc4aXJBIqbW6JkrW0slp4+M4RmDR1e+A3GrFYXelb56QL3DRn/v55w+TZWXTMoZhYCD+Z9T66/W2fG7kaYRCiPpRV3/M6OxDVf5BkDxttvLDvvMv/DJqAaiNGVqVzzYMCm8U+45nsSA7env9GeR8uB0LoV4ERAyWKrr3E/7hYhnuxZjnTrqI7EShEtI2bhqWxw4D+7O5V0jhqVJ6Kt+VJt8kHuibJ32MnSNTDcghmiznReMDgyfWMK0eFSAbPxsIAHbmvCzgOF+fzAQ+p+UbrextrAP7Vkyu3FpKAX3CvQiB8F4LLeUMyAQohO46W/17/OILyjP4Qg1ZcLPLMo10tR+DfkZgHVqktba5wUI6DYkjA0JWgPWOCcwmyGAx+SH2pIziF5ODigRCgc+cSM3YU6Yn6LiLUn0zyElDhCIr9247ezsoEzVI8Vdxrux7DHF450ZNRq3nMxaYC4t+YWBMvidou52xETfnc2G1nknzL0buSjf4CHKEILXJykk93DfWEch5lSVX9OtMvlIwcK+vihsFYBWL8eVz6A5GtmG0JuIalTZMpL0ATFNxSN7KGMRWoULDrYcfeA/qLJfjQEQaRNSyptUWMy7x6XW5y3z40s7gNaqUon3RYArMOj1Mfb6XkfJdVVGRy+OCYqVaDFMm57DQVp5MSicZxXGxAPFQQZBIMcOb12QDgR1R1cW97zKZHTFTbXixTA+v037F6UhEwBMtOrJSQojLi9vKKQScRaBJDYEC/UZpbKNVR+Abw/RQu1sfiRDOb85cHmuABeDkRkwuWvYJMPxLScAvXTC2AjJxVSZBy9DpWpu/Zj2ejJMfhGuOVSf9pU4jDITA9Beah0KMO/q+q7ViCt4YtwbRP43LY1bRXHdwSsuOnTdOoVRY9/+1PVNtsgtJ9yzN5NRjTLs7Z2WSeXAOQhucfnealtKQZ1mX7fq4UIhmso81cIGRcr8swpYouQnEFDfQNqpF158ue8zV/ZIUvr7AJsbsaXYumGEikG0mOL6mgdXi4mB1uRfb0Vg9qdA2K6I3ITLM0ELiPPNnoGabN3zePB9sK+rp1OspSQN1Vz3kFtVmkVJyIg/O9EiOc/0B5EWh2ytrXYT0MFYmEM/MZIHHoduwILrvvKkVzyKrONcKgH3+rh3NGx5jIMI3NeWSBRilHbaE0o3zWF67AYc3QECHV3bksC0PUO7aYFYuZ5rqWDz9rI3UbF5RX4Vfu3hiQ7VQ+m7TaQLjSaAKctWIkcvkOykMyZdTPaw8mJYGv+C1YEYYlH0DMGHhI1jktF8r1oxfGBpQDAlBRkrLuiQaGlXc+ySJy028bn1WtD8Ke8nHtqVHhde1E7GMXUjzoHJIMFYAxqUvAM3njwonp0dewzYXIWvo3b9CBknSCQoJIjz5nEvyrd5NLbl0QNGjedZXxm/97zSY/z+oUJNT6gHOqvap5dnKfofv4F6CRat9J582c38aH2vqZ
Source: global traffic	HTTP traffic detected: GET /assets/fonts/roboto/regular/roboto-regular.woff2 HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://all.accor.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://all.accor.com/a/en/new-app-offer/app-download.html?source_caller=bulk&af_qr=true&shortlink=5m1nc8of&c=20241013_ALL_AppBonusingMobileLp&af_ad=QR_code_20241013_ALL_AppBonusingMobileLp&pid=QR_code&deep_link_value=accor%3A%2F%2Fsearch%2Foffer%3Fpage_id%3Dddc8e830-2fc5-4492-ae7f-a63574b202f4&af_adset=ENAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=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
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202409.2.0/assets/otFlat.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/fonts/roboto/medium/roboto-medium.woff2 HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://all.accor.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://all.accor.com/a/en/new-app-offer/app-download.html?source_caller=bulk&af_qr=true&shortlink=5m1nc8of&c=20241013_ALL_AppBonusingMobileLp&af_ad=QR_code_20241013_ALL_AppBonusingMobileLp&pid=QR_code&deep_link_value=accor%3A%2F%2Fsearch%2Foffer%3Fpage_id%3Dddc8e830-2fc5-4492-ae7f-a63574b202f4&af_adset=ENAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=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
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202409.2.0/assets/otCommonStyles.css HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /a/libs/granite/csrf/token.json HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://all.accor.com/a/en/new-app-offer/app-download.html?source_caller=bulk&af_qr=true&shortlink=5m1nc8of&c=20241013_ALL_AppBonusingMobileLp&af_ad=QR_code_20241013_ALL_AppBonusingMobileLp&pid=QR_code&deep_link_value=accor%3A%2F%2Fsearch%2Foffer%3Fpage_id%3Dddc8e830-2fc5-4492-ae7f-a63574b202f4&af_adset=ENAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=uXhrmD2Na/K1uglc4DSccWmUi3lwT6U0aN5NKqvcu8d5WGWybG4+Fjgl4ne6nVjifX1jzgyPIuRTBhS6nanmMOLamS/KiojPrxeLcFng8UzPO+81sa87bs4RFhGAg5SdnTRio+RJdn41ZezkVQzm+QQNKVTMJBE8fIzHUqlLtmYsp4GqzAo9Tqkn29+6s06cnyhW9Bg2AjaE3z+uY1Kha+K1N+xGE1wxY+ov1hMjJJFJQKo0Zzr8yVUmc0uGx6VyOI/GCYB98MMi2baM/noo1d0GCT/eTJnamWBVosFVl6rGjGRpxA8WWwcog7Ny/HlQVp6w8cTkKFTg/8KjIPnCBapACqcVA8DvW2Oym2gj1AtBv4YYfUMq3TEu4mXRkOJJVmAh7NCUHwLhEc4aXJBIqbW6JkrW0slp4+M4RmDR1e+A3GrFYXelb56QL3DRn/v55w+TZWXTMoZhYCD+Z9T66/W2fG7kaYRCiPpRV3/M6OxDVf5BkDxttvLDvvMv/DJqAaiNGVqVzzYMCm8U+45nsSA7env9GeR8uB0LoV4ERAyWKrr3E/7hYhnuxZjnTrqI7EShEtI2bhqWxw4D+7O5V0jhqVJ6Kt+VJt8kHuibJ32MnSNTDcghmiznReMDgyfWMK0eFSAbPxsIAHbmvCzgOF+fzAQ+p+UbrextrAP7Vkyu3FpKAX3CvQiB8F4LLeUMyAQohO46W/17/OILyjP4Qg1ZcLPLMo10tR+DfkZgHVqktba5wUI6DYkjA0JWgPWOCcwmyGAx+SH2pIziF5ODigRCgc+cSM3YU6Yn6LiLUn0zyElDhCIr9247ezsoEzVI8Vdxrux7DHF450ZNRq3nMxaYC4t+YWBMvidou52xETfnc2G1nknzL0buSjf4CHKEILXJykk93DfWEch5lSVX9OtMvlIwcK+vihsFYBWL8eVz6A5GtmG0JuIalTZMpL0ATFNxSN7KGMRWoULDrYcfeA/qLJfjQEQaRNSyptUWMy7x6XW5y3z40s7gNaqUon3RYArMOj1Mfb6XkfJdVVGRy+OCYqVaDFMm57DQVp5MSicZxXGxAPFQQZBIMcOb12QDgR1R1cW97zKZHTFTbXixTA+v037F6UhEwBMtOrJSQojLi9vKKQScRaBJDYEC/UZpbKNVR+Abw/RQu1sfiRDOb85cHmuABeDkRkwuWvYJMPxLScAvXTC2AjJxVSZBy9DpWpu/Zj2ejJMfhGuOVSf9pU4jDITA9Beah0KMO/q+q7ViCt4YtwbRP43LY1bRXHdwSsuOnTdOoVRY9/+1PVNtsgtJ9yzN5NRjTLs7Z2WSeXAOQhucfnealtKQZ1mX7fq4UIhmso81cIGRcr8swpYouQnEFDfQNqpF158ue8zV/ZIUvr7AJsbsaXYumGEikG0mOL6mgdXi4mB1uRfb0Vg9qdA2K6I3ITLM0ELiPPNnoGabN3zePB9sK+rp1OspSQN1Vz3kFtVmkVJyIg/O9EiOc/0B5EWh2ytrXYT0MFYmEM/MZIHHoduwILrvvKkVzyKrONcKgH3+rh3NGx5jIMI3NeWSBRilHbaE0o3zWF67AYc3QECHV3bksC0PUO7aYFYuZ5rqWDz9rI3UbF5RX4Vfu3hiQ7
Source: global traffic	HTTP traffic detected: GET /conf/all/settings/wcm/segments.seg.js HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, /; q=0.01X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://all.accor.com/a/en/new-app-offer/app-download.html?source_caller=bulk&af_qr=true&shortlink=5m1nc8of&c=20241013_ALL_AppBonusingMobileLp&af_ad=QR_code_20241013_ALL_AppBonusingMobileLp&pid=QR_code&deep_link_value=accor%3A%2F%2Fsearch%2Foffer%3Fpage_id%3Dddc8e830-2fc5-4492-ae7f-a63574b202f4&af_adset=ENAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=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
Source: global traffic	HTTP traffic detected: GET /logos/static/ot_close.svg HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /accorApi/header?brand=all&lang=en&pos=usa HTTP/1.1Host: aem-api.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://all.accor.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ruxitagentjs_ICA7NVfhqrux_10285240307101407.js HTTP/1.1Host: all.accor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=uXhrmD2Na/K1uglc4DSccWmUi3lwT6U0aN5NKqvcu8d5WGWybG4+Fjgl4ne6nVjifX1jzgyPIuRTBhS6nanmMOLamS/KiojPrxeLcFng8UzPO+81sa87bs4RFhGAg5SdnTRio+RJdn41ZezkVQzm+QQNKVTMJBE8fIzHUqlLtmYsp4GqzAo9Tqkn29+6s06cnyhW9Bg2AjaE3z+uY1Kha+K1N+xGE1wxY+ov1hMjJJFJQKo0Zzr8yVUmc0uGx6VyOI/GCYB98MMi2baM/noo1d0GCT/eTJnamWBVosFVl6rGjGRpxA8WWwcog7Ny/HlQVp6w8cTkKFTg/8KjIPnCBapACqcVA8DvW2Oym2gj1AtBv4YYfUMq3TEu4mXRkOJJVmAh7NCUHwLhEc4aXJBIqbW6JkrW0slp4+M4RmDR1e+A3GrFYXelb56QL3DRn/v55w+TZWXTMoZhYCD+Z9T66/W2fG7kaYRCiPpRV3/M6OxDVf5BkDxttvLDvvMv/DJqAaiNGVqVzzYMCm8U+45nsSA7env9GeR8uB0LoV4ERAyWKrr3E/7hYhnuxZjnTrqI7EShEtI2bhqWxw4D+7O5V0jhqVJ6Kt+VJt8kHuibJ32MnSNTDcghmiznReMDgyfWMK0eFSAbPxsIAHbmvCzgOF+fzAQ+p+UbrextrAP7Vkyu3FpKAX3CvQiB8F4LLeUMyAQohO46W/17/OILyjP4Qg1ZcLPLMo10tR+DfkZgHVqktba5wUI6DYkjA0JWgPWOCcwmyGAx+SH2pIziF5ODigRCgc+cSM3YU6Yn6LiLUn0zyElDhCIr9247ezsoEzVI8Vdxrux7DHF450ZNRq3nMxaYC4t+YWBMvidou52xETfnc2G1nknzL0buSjf4CHKEILXJykk93DfWEch5lSVX9OtMvlIwcK+vihsFYBWL8eVz6A5GtmG0JuIalTZMpL0ATFNxSN7KGMRWoULDrYcfeA/qLJfjQEQaRNSyptUWMy7x6XW5y3z40s7gNaqUon3RYArMOj1Mfb6XkfJdVVGRy+OCYqVaDFMm57DQVp5MSicZxXGxAPFQQZBIMcOb12QDgR1R1cW97zKZHTFTbXixTA+v037F6UhEwBMtOrJSQojLi9vKKQScRaBJDYEC/UZpbKNVR+Abw/RQu1sfiRDOb85cHmuABeDkRkwuWvYJMPxLScAvXTC2AjJxVSZBy9DpWpu/Zj2ejJMfhGuOVSf9pU4jDITA9Beah0KMO/q+q7ViCt4YtwbRP43LY1bRXHdwSsuOnTdOoVRY9/+1PVNtsgtJ9yzN5NRjTLs7Z2WSeXAOQhucfnealtKQZ1mX7fq4UIhmso81cIGRcr8swpYouQnEFDfQNqpF158ue8zV/ZIUvr7AJsbsaXYumGEikG0mOL6mgdXi4mB1uRfb0Vg9qdA2K6I3ITLM0ELiPPNnoGabN3zePB9sK+rp1OspSQN1Vz3kFtVmkVJyIg/O9EiOc/0B5EWh2ytrXYT0MFYmEM/MZIHHoduwILrvvKkVzyKrONcKgH3+rh3NGx5jIMI3NeWSBRilHbaE0o3zWF67AYc3QECHV3bksC0PUO7aYFYuZ5rqWDz9rI3UbF5RX4Vfu3hiQ7VQ+m7TaQLjSaAKctWIkcvkOykMyZdTPaw8mJYGv+C1YEYYlH0DMGHhI1jktF8r1oxfGBpQDAlBRkrLuiQaGlXc+ySJy028bn1WtD8Ke8nHtqVHhde1E7GMXUjzoHJIMFYAxqUvAM3njwonp0dewzYXIWvo3b9CBknSCQoJIjz5nEvyrd5NLbl0QNGjedZXxm/97zSY/z+oUJNT6gHOqvap5dnKfofv4F6CRat9J582c38aH2vqZsscTtI+ylB5ZXwCKFLeJc74tVfxF+9L91KrsH22r/1YZbbPZp2JuEsWfZOd6L8MCeQxC7NK8ahoS7/6QtmoWTJvCURsmdszSmA4qvKr1RBgqRVx/l4RWaQnSn6pA+i4oqX5s8CloBF9G2WUCzrxHYiMQ6wpJHNtNYsGJzu9CqgQYKAyw3RtCAcVko19N+lO3qRY3
Source: global traffic	HTTP traffic detected: GET /a/etc/cloudsettings.kernel.js/conf/all/settings/cloudsettings/default/contexthub HTTP/1.1Host: all.accor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=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
Source: global traffic	HTTP traffic detected: GET /services/business-referer/scripts-v2410/main.js HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=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
Source: global traffic	HTTP traffic detected: GET /geolocation HTTP/1.1Host: data.kameleoon.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://all.accor.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /components/header-aem/scripts/main.js HTTP/1.1Host: all.accor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=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
Source: global traffic	HTTP traffic detected: GET /authentication/v2.0/authorization?appId=all.accor&prompt=none&redirect_uri=https%3A%2F%2Fall.accor.com%2Fenroll-loyalty%2Fcheck-authent.html HTTP/1.1Host: api.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: org=evy; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; OAU_all.accor=eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJhcHBfaWQiOiJhbGwuYWNjb3IiLCJzdGF0ZSI6ImYzNTYwZWQyYThjNDZhZjQxOTllZjgiLCJub25jZSI6IjIxZDBhMGU1ZWQ4YzU2NTZkZjI4ZjYiLCJyZWRpcmVjdF9zaXRlX3VyaSI6Imh0dHBzOi8vYWxsLmFjY29yLmNvbSIsInByb21wdCI6Im5vbmUiLCJleHAiOjE3MzAyNzYxODQsImlhdCI6MTczMDI3NDM4NH0.T264QRl7YWH19MgynN8-Xaq1G1flI3hkXf6P-98bxX9zquvQYl9l1yVvirNK7SO9IARz9C1cgTuaozOE3ITULDlEyLbPAquuYSLfESRfVzyb0HFEhbkdMISJ5nmsUq2QiYFJRgGSRoU7UjHDLoo8646JuA_ZnO1550QeNYS8xuV9EoK4B4oFEgezMDX9rf6Or31D63HUbbL51dSeHY26E7TwHYN6SeodaZL7NeaUEJN-G93F7ktNq824Z5C11HTL2mkWUM6Aaz0nua4XKjGekRh9_QQpoOau3wMyp586RfBxn38C0agFPUi7WA_4FusMHRg-90n9XBuE3e_0KE46Uw; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjoiQUgiLCJyZXRhaW5lZG1lcmNoYW50aWQiOiJBSCJ9; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+30+2024+03%3A46%3A29+GMT-0400+(Eastern+Daylight+Time)&version=202409.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&genVendors=V62%3A0%2CV37%3A0%2CV67%3A0%2CV38%3A0%2CV64%3A0%2CV58%3A0%2CV25%3A0%2CV26%3A0%2CV42%3A0%2CV9%3A0%2CV8%3A0%2CV27%3A0%2CV51%3A0%2CV39%3A0%2CV23%3A0%2CV55%3A0%2CV5%3A0%2CV34%3A0%2CV10%3A0%2CV53%3A0%2CV59%3A0%2CV74%3A0%2CV36%3A0%2CV49%3A0%2CV65%3A0%2CV19%3A0%2CV33%3A0%2CV57%3A0%2CV52%3A0%2CV48%3A0%2CV29%3A0%2CV17%3A0%2CV11%3A0%2CV56%3A0%2CV12%3A0%2CV72%3A0%2CV13%3A0%2CV41%3A0%2CV40%3A0%2CV68%3A0%2CV60%3A0%2CV50%3A0%2CV15%3A0%2CV54%3A0%2CV28%3A0%2CV30%3A0%2CV46%3A0%2CV4%3A0%2CV14%3A0%2CV61%3A0%2CV7%3A0%2CV45%3A0%2CV16%3A0%2CV32%3A0%2CV21%3A0%2CV69%3A0%2CV63%3A0%2CV73%3A0%2CV6%3A0%2CV18%3A0%2CV31%3A0%2CV44%3A0%2CV71%3A0%2CV43%3A0%2CV35%3A0%2CV47%3A0%2C&consentId=9ab4f1d3-b3a4-433f-a62e-3731c85af8dc&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer.html&groups=C0001%3A1%2CC0003%3A0%2CC0002%3A0%2CC0007%3A0%2CC0004%3A0%2CC0005%3A0%2CC0008%3A1%2CC0009%3A0; rxVisitor=1730274389683JLIBD8T14271V8K1PF60
Source: global traffic	HTTP traffic detected: GET /enroll-loyalty/assets/verifyEnroll-D5kC1PyP.js HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://all.accor.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=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
Source: global traffic	HTTP traffic detected: GET /a/conf/all/settings/wcm/segments.seg.js HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, /; q=0.01X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://all.accor.com/a/en/new-app-offer/app-download.html?source_caller=bulk&af_qr=true&shortlink=5m1nc8of&c=20241013_ALL_AppBonusingMobileLp&af_ad=QR_code_20241013_ALL_AppBonusingMobileLp&pid=QR_code&deep_link_value=accor%3A%2F%2Fsearch%2Foffer%3Fpage_id%3Dddc8e830-2fc5-4492-ae7f-a63574b202f4&af_adset=ENAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=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
Source: global traffic	HTTP traffic detected: GET /scripts/main-footer-light.js HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/a/en/new-app-offer/app-download.html?source_caller=bulk&af_qr=true&shortlink=5m1nc8of&c=20241013_ALL_AppBonusingMobileLp&af_ad=QR_code_20241013_ALL_AppBonusingMobileLp&pid=QR_code&deep_link_value=accor%3A%2F%2Fsearch%2Foffer%3Fpage_id%3Dddc8e830-2fc5-4492-ae7f-a63574b202f4&af_adset=ENAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=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
Source: global traffic	HTTP traffic detected: GET /.rum/@adobe/helix-rum-js@%5E2/dist/rum-standalone.js HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/a/en/new-app-offer/app-download.html?source_caller=bulk&af_qr=true&shortlink=5m1nc8of&c=20241013_ALL_AppBonusingMobileLp&af_ad=QR_code_20241013_ALL_AppBonusingMobileLp&pid=QR_code&deep_link_value=accor%3A%2F%2Fsearch%2Foffer%3Fpage_id%3Dddc8e830-2fc5-4492-ae7f-a63574b202f4&af_adset=ENAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=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
Source: global traffic	HTTP traffic detected: GET /a/libs/granite/csrf/token.json HTTP/1.1Host: all.accor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=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
Source: global traffic	HTTP traffic detected: GET /_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3&ns=1&cb=1220902006 HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/a/en/new-app-offer/app-download.html?source_caller=bulk&af_qr=true&shortlink=5m1nc8of&c=20241013_ALL_AppBonusingMobileLp&af_ad=QR_code_20241013_ALL_AppBonusingMobileLp&pid=QR_code&deep_link_value=accor%3A%2F%2Fsearch%2Foffer%3Fpage_id%3Dddc8e830-2fc5-4492-ae7f-a63574b202f4&af_adset=ENAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=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
Source: global traffic	HTTP traffic detected: GET /components/footer/assets/images/logo-fevad.jpg HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://all.accor.com/a/en/new-app-offer/app-download.html?source_caller=bulk&af_qr=true&shortlink=5m1nc8of&c=20241013_ALL_AppBonusingMobileLp&af_ad=QR_code_20241013_ALL_AppBonusingMobileLp&pid=QR_code&deep_link_value=accor%3A%2F%2Fsearch%2Foffer%3Fpage_id%3Dddc8e830-2fc5-4492-ae7f-a63574b202f4&af_adset=ENAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=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
Source: global traffic	HTTP traffic detected: GET /as/authorization.oauth2?client_id=all.accor&response_type=code&accorregister=false&request=eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJjbGllbnRfaWQiOiJhbGwuYWNjb3IiLCJyZXNwb25zZV90eXBlIjoiY29kZSIsInJlZGlyZWN0X3VyaSI6Imh0dHBzOi8vYWxsLmFjY29yLmNvbS9lbnJvbGwtbG95YWx0eS9jaGVjay1hdXRoZW50Lmh0bWw_YXBwSWQ9YWxsLmFjY29yIiwic2NvcGUiOiJvcGVuaWQgQVBJV0VCLlVTRVIuQUxMIEFQU1IuQUxMIiwicHJvbXB0Ijoibm9uZSIsInN0YXRlIjoiOTQzMTU5YmZmM2UyODM0N2E1NzZiNCIsIm5vbmNlIjoiZjJiNTM0ZWViYzY1MGJmZjI3NDJmMCIsImV4cCI6MTczMDI3NjE5MiwiaWF0IjoxNzMwMjc0MzkyfQ.Ol8o9CD0gi2mEfGt4p-2D2dm40hKH0kbxSF5f5RnJxiASxPmciJCNWVLYzD_Ju8vWMvvRBvf616h8cG5hDiZzj7dts_dw5hoSwkHCV7l_Gj3FIUds8Tg7lWkkGHvYFP0xQleWQkubTwZ3eDglRjEHt3gNX9gLKhGIzZkLWkU8sYNiYMlg_e0cbk6dk0ax-3HSszRKV9QGVlx6v2TYUEG-zCGGIFYq1j7w3_AqrNXpdXKmLkYEm34j_pM0QLsNr2ckvWPCle0HiRuZOptsqqupb-CVOTLITv2BsV1Qay30fxSgFjqJie5-UuMfkmAb7_1Sf-CJlnoJaKRQzwEKN-K6A&prompt=none HTTP/1.1Host: login.accor.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: org=evy; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; visid_incap_2545443=x63MuavjQSixxrfQIYQ8PVHkIWcAAAAAQUIPAAAAAAD7hEgkFIFfLMg2zvFAlnfu; incap_ses_170_2545443=JXk2KzhmDUb9sg2vRfZbAlHkIWcAAAAAZwwpmYkZ8jK3gatMO3ubIQ==; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjoiQUgiLCJyZXRhaW5lZG1lcmNoYW50aWQiOiJBSCJ9; PF=rzKdP15zeTktpJEnKeJiir; nlbi_2545443_2409386=KQ4PXT8ThySMkp7Cfgr57wAAAAC8n1r1/3YJSkZts8tTePag; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+30+2024+03%3A46%3A29+GMT-0400+(Eastern+Daylight+Time)&version=202409.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&genVendors=V62%3A0%2CV37%3A0%2CV67%3A0%2CV38%3A0%2CV64%3A0%2CV58%3A0%2CV25%3A0%2CV26%3A0%2CV42%3A0%2CV9%3A0%2CV8%3A0%2CV27%3A0%2CV51%3A0%2CV39%3A0%2CV23%3A0%2CV55%3A0%2CV5%3A0%2CV34%3A0%2CV10%3A0%2CV53%3A0%2CV59%3A0%2CV74%3A0%2CV36%3A0%2CV49%3A0%2CV65%3A0%2CV19%3A0%2CV33%3A0%2CV57%3A0%2CV52%3A0%2CV48%3A0%2CV29%3A0%2CV17%3A0%2CV11%3A0%2CV56%3A0%2CV12%3A0%2CV72%3A0%2CV13%3A0%2CV41%3A0%2CV40%3A0%2CV68%3A0%2CV60%3A0%2CV50%3A0%2CV15%3A0%2CV54%3A0%2CV28%3A0%2CV30%3A0%2CV46%3A0%2CV4%3A0%2CV14%3A0%2CV61%3A0%2CV7%3A0%2CV45%3A0%2CV16%3A0%2CV32%3A0%2CV21%3A0%2CV69%3A0%2CV63%3A0%2CV73%3A0%2CV6%3A0%2CV
Source: global traffic	HTTP traffic detected: GET /referential/v1/pos/countries?siteCode=all HTTP/1.1Host: api.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"content-type: application/jsonapikey: LJreOkXhuneMHZaeenwDZAl8DKlZGdDOsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://all.accor.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: org=evy; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; OAU_all.accor=eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJhcHBfaWQiOiJhbGwuYWNjb3IiLCJzdGF0ZSI6ImYzNTYwZWQyYThjNDZhZjQxOTllZjgiLCJub25jZSI6IjIxZDBhMGU1ZWQ4YzU2NTZkZjI4ZjYiLCJyZWRpcmVjdF9zaXRlX3VyaSI6Imh0dHBzOi8vYWxsLmFjY29yLmNvbSIsInByb21wdCI6Im5vbmUiLCJleHAiOjE3MzAyNzYxODQsImlhdCI6MTczMDI3NDM4NH0.T264QRl7YWH19MgynN8-Xaq1G1flI3hkXf6P-98bxX9zquvQYl9l1yVvirNK7SO9IARz9C1cgTuaozOE3ITULDlEyLbPAquuYSLfESRfVzyb0HFEhbkdMISJ5nmsUq2QiYFJRgGSRoU7UjHDLoo8646JuA_ZnO1550QeNYS8xuV9EoK4B4oFEgezMDX9rf6Or31D63HUbbL51dSeHY26E7TwHYN6SeodaZL7NeaUEJN-G93F7ktNq824Z5C11HTL2mkWUM6Aaz0nua4XKjGekRh9_QQpoOau3wMyp586RfBxn38C0agFPUi7WA_4FusMHRg-90n9XBuE3e_0KE46Uw; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjoiQUgiLCJyZXRhaW5lZG1lcmNoYW50aWQiOiJBSCJ9; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+30+2024+03%3A46%3A29+GMT-0400+(Eastern+Daylight+Time)&version=202409.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&genVendors=V62%3A0%2CV37%3A0%2CV67%3A0%2CV38%3A0%2CV64%3A0%2CV58%3A0%2CV25%3A0%2CV26%3A0%2CV42%3A0%2CV9%3A0%2CV8%3A0%2CV27%3A0%2CV51%3A0%2CV39%3A0%2CV23%3A0%2CV55%3A0%2CV5%3A0%2CV34%3A0%2CV10%3A0%2CV53%3A0%2CV59%3A0%2CV74%3A0%2CV36%3A0%2CV49%3A0%2CV65%3A0%2CV19%3A0%2CV33%3A0%2CV57%3A0%2CV52%3A0%2CV48%3A0%2CV29%3A0%2CV17%3A0%2CV11%3A0%2CV56%3A0%2CV12%3A0%2CV72%3A0%2CV13%3A0%2CV41%3A0%2CV40%3A0%2CV68%3A0%2CV60%3A0%2CV50%3A0%2CV15%3A0%2CV54%3A0%2CV28%3A0%2CV30%3A0%2CV46%3A0%2CV4%3A0%2CV14%3A0%2CV61%3A0%2CV7%3A0%2CV45%3A0%2CV16%3A0%2CV32%3A0%2CV21%3A0%2CV69%3A0%2CV63%3A0%2CV73%3A0%2CV6%3A0%2CV18%3A0%2CV31%3A0%2CV44%3A0%2CV71%3A0%2CV43%3A0%2CV35%3A0%2CV47%3A0%2C&consentId=9ab4f1d3-b3a4-433f-a62e-3731c85af8dc&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer.html&groups=C0001%3A1%2CC0003%3A0%2CC0002%3A0%2CC0007%3A0%2CC0004%3A0%2CC0005%3A0%2CC0008%3A1%2CC0009%3A0; rxVisitor=1730274389683JLIBD8T14271V8K1PF607REH7HAD6SU0; dtSa=-; rxvt=1730276189890\|1730274389685; dtPC=1$474389679_556h2vCNCMQNAQOSCAVCJKBVISVNPVVSHILTAR-0e0
Source: global traffic	HTTP traffic detected: GET /enroll-loyalty/assets/axios-CJFUd36b.js HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://all.accor.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=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
Source: global traffic	HTTP traffic detected: GET /enroll-loyalty/check-authent.html?appId=all.accor&error_description=Authentication+is+required.&state=943159bff3e28347a576b4&error=login_required HTTP/1.1Host: all.accor.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; incap_ses_1388_3039981=WwV9UFsZYQbcTBz5zCpDE0/kIWcAAAAAAlW7vDjSIvNuKK2ooaDNBg==; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; incap_ses_1237_3039981=RMkdawpcO0pafv9zF7UqEVDkIWcAAAAAOdDq+0nC/oeq6w4fyTL3Fg==; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjoiQUgiLCJyZXRhaW5lZG1lcmNoYW50aWQiOiJBSCJ9; incap_ses_965_3039981=q99Yd2XUwRILYtlqj15kDVLkIWcAAAAA3wW8EuVmSTOVbo8SRcNLVg==; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+30+2024+03%3A46%3A29+GMT-0400+(Eastern+Daylight+Time)&version=202409.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&genVendors=V62%3A0%2CV37%3A0%2CV67%3A0%2CV38%3A0%2CV64%3A0%2CV58%3A0%2CV25%3A0%2CV26%3A0%2CV42%3A0%2CV9%3A0%2CV8%3A0%2CV27%3A0%2CV51%3A0%2CV39%3A0%2CV23%3A0%2CV55%3A0%2CV5%3A0%2CV34%3A0%2CV10%3A0%2CV53%3A0%2CV59%3A0%2CV74%3A0%2CV36%3A0%2CV49%3A0%2CV65%3A0%2CV19%3A0%2CV33%3A0%2CV57%3A0%2CV52%3A0%2CV48%3A0%2CV29%3A0%2CV17%3A0%2CV11%3A0%2CV56%3A0%2CV12%3A0%2CV72%3A0%2CV13%3A0%2CV41%3A0%2CV40%3A0%2CV68%3A0%2CV60%3A0%2CV50%3A0%2CV15%3A0%2CV54%3A0%2CV28%3A0%2CV30%3A0%2CV46%3A0%2CV4%3A0%2CV14%3A0%2CV61%3A0%2CV7%3A0%2CV45%3A0%2CV16%3A0%2CV32%3A0%2CV21%3A0%2CV69%3A0%2CV63%3A0%2CV73%3A0%2CV6%3A0%2CV18%3A0%2CV31%3A0%2CV44%3A0%2CV71%3A0%2CV43%3A0%2CV35%3A0%2CV47%3A0%2C&consentId=9ab4f1d3-b3a4-433f-a62e-3731c85af8dc&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer.html&groups=C0
Source: global traffic	HTTP traffic detected: GET /accorApi/header?brand=all&lang=en&pos=usa HTTP/1.1Host: aem-api.accor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: org=evy; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjoiQUgiLCJyZXRhaW5lZG1lcmNoYW50aWQiOiJBSCJ9; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+30+2024+03%3A46%3A29+GMT-0400+(Eastern+Daylight+Time)&version=202409.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&genVendors=V62%3A0%2CV37%3A0%2CV67%3A0%2CV38%3A0%2CV64%3A0%2CV58%3A0%2CV25%3A0%2CV26%3A0%2CV42%3A0%2CV9%3A0%2CV8%3A0%2CV27%3A0%2CV51%3A0%2CV39%3A0%2CV23%3A0%2CV55%3A0%2CV5%3A0%2CV34%3A0%2CV10%3A0%2CV53%3A0%2CV59%3A0%2CV74%3A0%2CV36%3A0%2CV49%3A0%2CV65%3A0%2CV19%3A0%2CV33%3A0%2CV57%3A0%2CV52%3A0%2CV48%3A0%2CV29%3A0%2CV17%3A0%2CV11%3A0%2CV56%3A0%2CV12%3A0%2CV72%3A0%2CV13%3A0%2CV41%3A0%2CV40%3A0%2CV68%3A0%2CV60%3A0%2CV50%3A0%2CV15%3A0%2CV54%3A0%2CV28%3A0%2CV30%3A0%2CV46%3A0%2CV4%3A0%2CV14%3A0%2CV61%3A0%2CV7%3A0%2CV45%3A0%2CV16%3A0%2CV32%3A0%2CV21%3A0%2CV69%3A0%2CV63%3A0%2CV73%3A0%2CV6%3A0%2CV18%3A0%2CV31%3A0%2CV44%3A0%2CV71%3A0%2CV43%3A0%2CV35%3A0%2CV47%3A0%2C&consentId=9ab4f1d3-b3a4-433f-a62e-3731c85af8dc&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer.html&groups=C0001%3A1%2CC0003%3A0%2CC0002%3A0%2CC0007%3A0%2CC0004%3A0%2CC0005%3A0%2CC0008%3A1%2CC0009%3A0; rxVisitor=1730274389683JLIBD8T14271V8K1PF607REH7HAD6SU0; dtSa=-; rxvt=1730276189890\|1730274389685; dtPC=1$474389679_556h1vCNCMQNAQOSCAVCJKBVISVNPVVSHILTAR-0e0; accorref=https://all.accor.com/
Source: global traffic	HTTP traffic detected: GET /services/business-referer/scripts-v2410/main.js HTTP/1.1Host: all.accor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=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
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://all.accor.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_Incapsula_Resource?SWKMTFSR=1&e=0.40031580321636673 HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://all.accor.com/a/en/new-app-offer/app-download.html?source_caller=bulk&af_qr=true&shortlink=5m1nc8of&c=20241013_ALL_AppBonusingMobileLp&af_ad=QR_code_20241013_ALL_AppBonusingMobileLp&pid=QR_code&deep_link_value=accor%3A%2F%2Fsearch%2Foffer%3Fpage_id%3Dddc8e830-2fc5-4492-ae7f-a63574b202f4&af_adset=ENAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; incap_ses_1388_3039981=WwV9UFsZYQbcTBz5zCpDE0/kIWcAAAAAAlW7vDjSIvNuKK2ooaDNBg==; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; incap_ses_1237_3039981=RMkdawpcO0pafv9zF7UqEVDkIWcAAAAAOdDq+0nC/oeq6w4fyTL3Fg==; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjoiQUgiLCJyZXRhaW5lZG1lcmNoYW50aWQiOiJBSCJ9; incap_ses_965_3039981=q99Yd2XUwRILYtlqj15kDVLkIWcAAAAA3wW8EuVmSTOVbo8SRcNLVg==; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+30+2024+03%3A46%3A29+GMT-0400+(Eastern+Daylight+Time)&version=202409.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&genVendors=V62%3A0%2CV37%3A0%2CV67%3A0%2CV38%3A0%2CV64%3A0%2CV58%3A0%2CV25%3A0%2CV26%3A0%2CV42%3A0%2CV9%3A0%2CV8%3A0%2CV27%3A0%2CV51%3A0%2CV39%3A0%2CV23%3A0%2CV55%3A0%2CV5%3A0%2CV34%3A0%2CV10%3A0%2CV53%3A0%2CV59%3A0%2CV74%3A0%2CV36%3A0%2CV49%3A0%2CV65%3A0%2CV19%3A0%2CV33%3A0%2CV57%3A0%2CV52%3A0%2CV48%3A0%2CV29%3A0%2CV17%3A0%2CV11%3A0%2CV56%3A0%2CV12%3A0%2CV72%3A0%2CV13%3A0%2CV41%3A0%2CV40%3A0%2CV68%3A0%2CV60%3A0%2CV50%3A0%2CV15%3A0%2CV54%3A0%2CV28%3A0%2CV30%3A0%2CV46%3A0%2CV4%3A0%2CV14%3A0%2CV61%3A0%2CV7%3A0%2CV45%3A0%2CV16%3A0%2CV32%3A0%2CV21%3A0%2CV69%3A0%2CV63%3A0%2CV73%3A0%2CV6%3A0%2CV18%3A0%2CV31%3A0%2CV44%3A0%2CV71%3A0%2CV43%3A0%2CV35%3A0%2CV47%3A0%2C&consentId=9ab4f1d3-b3a4-433f-a62e-3731c85af8dc&interactionCount=0&i
Source: global traffic	HTTP traffic detected: GET /assets/fonts/montserrat/bold/montserrat-bold.woff2 HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://all.accor.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=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
Source: global traffic	HTTP traffic detected: GET /referential/v1/pos//currencies?groupByContinent=true HTTP/1.1Host: api.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"content-type: application/jsonapikey: LJreOkXhuneMHZaeenwDZAl8DKlZGdDOsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://all.accor.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: org=evy; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjoiQUgiLCJyZXRhaW5lZG1lcmNoYW50aWQiOiJBSCJ9; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+30+2024+03%3A46%3A29+GMT-0400+(Eastern+Daylight+Time)&version=202409.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&genVendors=V62%3A0%2CV37%3A0%2CV67%3A0%2CV38%3A0%2CV64%3A0%2CV58%3A0%2CV25%3A0%2CV26%3A0%2CV42%3A0%2CV9%3A0%2CV8%3A0%2CV27%3A0%2CV51%3A0%2CV39%3A0%2CV23%3A0%2CV55%3A0%2CV5%3A0%2CV34%3A0%2CV10%3A0%2CV53%3A0%2CV59%3A0%2CV74%3A0%2CV36%3A0%2CV49%3A0%2CV65%3A0%2CV19%3A0%2CV33%3A0%2CV57%3A0%2CV52%3A0%2CV48%3A0%2CV29%3A0%2CV17%3A0%2CV11%3A0%2CV56%3A0%2CV12%3A0%2CV72%3A0%2CV13%3A0%2CV41%3A0%2CV40%3A0%2CV68%3A0%2CV60%3A0%2CV50%3A0%2CV15%3A0%2CV54%3A0%2CV28%3A0%2CV30%3A0%2CV46%3A0%2CV4%3A0%2CV14%3A0%2CV61%3A0%2CV7%3A0%2CV45%3A0%2CV16%3A0%2CV32%3A0%2CV21%3A0%2CV69%3A0%2CV63%3A0%2CV73%3A0%2CV6%3A0%2CV18%3A0%2CV31%3A0%2CV44%3A0%2CV71%3A0%2CV43%3A0%2CV35%3A0%2CV47%3A0%2C&consentId=9ab4f1d3-b3a4-433f-a62e-3731c85af8dc&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer.html&groups=C0001%3A1%2CC0003%3A0%2CC0002%3A0%2CC0007%3A0%2CC0004%3A0%2CC0005%3A0%2CC0008%3A1%2CC0009%3A0; rxVisitor=1730274389683JLIBD8T14271V8K1PF607REH7HAD6SU0; dtSa=-; rxvt=1730276189890\|1730274389685; OAU_all.accor=eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJhcHBfaWQiOiJhbGwuYWNjb3IiLCJzdGF0ZSI6Ijk0MzE1OWJmZjNlMjgzNDdhNTc2YjQiLCJub25jZSI6ImYyYjUzNGVlYmM2NTBiZmYyNzQyZjAiLCJyZWRpcmVjdF9zaXRlX3VyaSI6Imh0dHBzOi8vYWxsLmFjY29yLmNvbSIsInByb21wdCI6Im5vbmUiLCJleHAiOjE3MzAyNzYxOTIsImlhdCI6MTczMDI3NDM5Mn0.dDbp5yo22Nkc_T2_ilnkSeZsJlH33J88WQce53kGtp7b_xXc-2rGkQXx-VD15Zw61YvyBN-FbPdfODEVwEOjwA95X-YiFBZq0afvv1-bDUyUZJqQEKjb8T53boJ6aeFhRDRRGz1PvuQn8IcQst_mDKKJHNHrjHtDhzx4TbbmfnMeRAvGxsWZqRrNVJLsxtGTRVAbr-pcr79auRdsdiiVMHZngXHEFuB-K5MUmf_WsGQLV6Db-UHxgdfGu9vYR-01M6R64Ifelcqv0eSDL_lHRPZz9nu4GOjrAQuorhzEhAfIrwIDG9wAZTjcp-KUuCz3QBGKkHYwzrk0BLSoO-aUgA; dtPC=1$474389679_556h1vCNCMQNAQOSCAVCJKBVISVNPVVSHILTAR-0e0; accorref=https://all.accor.com/
Source: global traffic	HTTP traffic detected: GET /2a22008a1a0b.js?lv=1 HTTP/1.1Host: w.usabilla.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /kameleoon.js HTTP/1.1Host: qchmhd61sj.kameleoon.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"671f95a0-4ce4c"If-Modified-Since: Mon, 28 Oct 2024 13:46:08 GMT
Source: global traffic	HTTP traffic detected: GET /styles-v2410/styles-global.css HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; incap_ses_1388_3039981=WwV9UFsZYQbcTBz5zCpDE0/kIWcAAAAAAlW7vDjSIvNuKK2ooaDNBg==; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; incap_ses_1237_3039981=RMkdawpcO0pafv9zF7UqEVDkIWcAAAAAOdDq+0nC/oeq6w4fyTL3Fg==; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjoiQUgiLCJyZXRhaW5lZG1lcmNoYW50aWQiOiJBSCJ9; incap_ses_965_3039981=q99Yd2XUwRILYtlqj15kDVLkIWcAAAAA3wW8EuVmSTOVbo8SRcNLVg==; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+30+2024+03%3A46%3A29+GMT-0400+(Eastern+Daylight+Time)&version=202409.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&genVendors=V62%3A0%2CV37%3A0%2CV67%3A0%2CV38%3A0%2CV64%3A0%2CV58%3A0%2CV25%3A0%2CV26%3A0%2CV42%3A0%2CV9%3A0%2CV8%3A0%2CV27%3A0%2CV51%3A0%2CV39%3A0%2CV23%3A0%2CV55%3A0%2CV5%3A0%2CV34%3A0%2CV10%3A0%2CV53%3A0%2CV59%3A0%2CV74%3A0%2CV36%3A0%2CV49%3A0%2CV65%3A0%2CV19%3A0%2CV33%3A0%2CV57%3A0%2CV52%3A0%2CV48%3A0%2CV29%3A0%2CV17%3A0%2CV11%3A0%2CV56%3A0%2CV12%3A0%2CV72%3A0%2CV13%3A0%2CV41%3A0%2CV40%3A0%2CV68%3A0%2CV60%3A0%2CV50%3A0%2CV15%3A0%2CV54%3A0%2CV28%3A0%2CV30%3A0%2CV46%3A0%2CV4%3A0%2CV14%3A0%2CV61%3A0%2CV7%3A0%2CV45%3A0%2CV16%3A0%2CV32%3A0%2CV21%3A0%2CV69%3A0%2CV63%3A0%2CV73%3A0%2CV6%3A0%2CV18%3A0%2CV31%3A0%2CV44%3A0%2CV71%3A0%2CV43%3A0%2CV35%3A0%2CV47%3A0%2C&consentId=9ab4f1d3-b3a4-433f-a62e-3731c85af8dc&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer.html&groups=C0001%3A1%2CC0003%3A0%2CC0002%3A0%2CC0007%3A0%2CC0004%3A0%2CC0005%3A0%2CC0008%3A1%2CC0009%3A0; rxVisitor=1730274389683JLIBD8T14271V8K1PF607REH7HAD6SU0; dtSa=-; rxvt=1730276189890\|1730274389685; incap_ses_951_3039981=GL4CVhbxPgx+DtlaoqEyDVbkIWcAAAAA0uuNvYfu1J2VDDuc
Source: global traffic	HTTP traffic detected: GET /assets/fonts/montserrat/bold/montserrat-bold.woff2 HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://all.accor.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; incap_ses_1388_3039981=WwV9UFsZYQbcTBz5zCpDE0/kIWcAAAAAAlW7vDjSIvNuKK2ooaDNBg==; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; incap_ses_1237_3039981=RMkdawpcO0pafv9zF7UqEVDkIWcAAAAAOdDq+0nC/oeq6w4fyTL3Fg==; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjoiQUgiLCJyZXRhaW5lZG1lcmNoYW50aWQiOiJBSCJ9; incap_ses_965_3039981=q99Yd2XUwRILYtlqj15kDVLkIWcAAAAA3wW8EuVmSTOVbo8SRcNLVg==; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+30+2024+03%3A46%3A29+GMT-0400+(Eastern+Daylight+Time)&version=202409.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&genVendors=V62%3A0%2CV37%3A0%2CV67%3A0%2CV38%3A0%2CV64%3A0%2CV58%3A0%2CV25%3A0%2CV26%3A0%2CV42%3A0%2CV9%3A0%2CV8%3A0%2CV27%3A0%2CV51%3A0%2CV39%3A0%2CV23%3A0%2CV55%3A0%2CV5%3A0%2CV34%3A0%2CV10%3A0%2CV53%3A0%2CV59%3A0%2CV74%3A0%2CV36%3A0%2CV49%3A0%2CV65%3A0%2CV19%3A0%2CV33%3A0%2CV57%3A0%2CV52%3A0%2CV48%3A0%2CV29%3A0%2CV17%3A0%2CV11%3A0%2CV56%3A0%2CV12%3A0%2CV72%3A0%2CV13%3A0%2CV41%3A0%2CV40%3A0%2CV68%3A0%2CV60%3A0%2CV50%3A0%2CV15%3A0%2CV54%3A0%2CV28%3A0%2CV30%3A0%2CV46%3A0%2CV4%3A0%2CV14%3A0%2CV61%3A0%2CV7%3A0%2CV45%3A0%2CV16%3A0%2CV32%3A0%2CV21%3A0%2CV69%3A0%2CV63%3A0%2CV73%3A0%2CV6%3A0%2CV18%3A0%2CV31%3A0%2CV44%3A0%2CV71%3A0%2CV43%3A0%2CV35%3A0%2CV47%3A0%2C&consentId=9ab4f1d3-b3a4-433f-a62e-3731c85af8dc&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer.html&groups=C0001%3A1%2CC0003%3A0%2CC0002%3A0%2CC0007%3A0%2CC0004%3A0%2CC0005%3A0%2CC0008%3A1%2CC0009%3A0; rxVisitor=1730274389683JLIBD8T14271V8K1PF607REH7HAD6SU0; dtSa=-; rxvt=1730276189890\|1730274389685; incap_ses_951_3039981=GL4CVhbxPgx+Dtla
Source: global traffic	HTTP traffic detected: GET /assets/fonts/roboto/bold/roboto-bold.woff2 HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://all.accor.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://all.accor.com/a/en/new-app-offer/app-download.html?source_caller=bulk&af_qr=true&shortlink=5m1nc8of&c=20241013_ALL_AppBonusingMobileLp&af_ad=QR_code_20241013_ALL_AppBonusingMobileLp&pid=QR_code&deep_link_value=accor%3A%2F%2Fsearch%2Foffer%3Fpage_id%3Dddc8e830-2fc5-4492-ae7f-a63574b202f4&af_adset=ENAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; incap_ses_1388_3039981=WwV9UFsZYQbcTBz5zCpDE0/kIWcAAAAAAlW7vDjSIvNuKK2ooaDNBg==; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; incap_ses_1237_3039981=RMkdawpcO0pafv9zF7UqEVDkIWcAAAAAOdDq+0nC/oeq6w4fyTL3Fg==; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjoiQUgiLCJyZXRhaW5lZG1lcmNoYW50aWQiOiJBSCJ9; incap_ses_965_3039981=q99Yd2XUwRILYtlqj15kDVLkIWcAAAAA3wW8EuVmSTOVbo8SRcNLVg==; rxVisitor=1730274389683JLIBD8T14271V8K1PF607REH7HAD6SU0; dtSa=-; rxvt=1730276189890\|1730274389685; incap_ses_951_3039981=GL4CVhbxPgx+DtlaoqEyDVbkIWcAAAAA0uuNvYfu1J2VDDucdA8ZtQ==; dtPC=1$474389679_556h1vCNCMQNAQOSCAVCJKBVISVNPVVSHILTAR-0e0; accorref=https://all.accor.com/; ___utmvc=L7y5BPoz0NfSoYOC4znrV9KYjL6ttdnjA1kWC2pXRsmqDcgLMhysXtRuiKOEpa/hb/rz0tnwJ8HzbK8HT27prBpFoWwZsyMkJanyq8zq8XvC1gp+juTBE3eU1hZgsT1MTn32ReR32CKsMacH9OFVQhqUBo6BkXOoYVcHXV/Dv9u60tnW9XeFAONW57NRUz9ppLmrD8HoyuX/L6OdlRXomuwMwh4kQ/H6TNrT1GZzMWXa3xQ97KRvA6oZ9wUR76uYgKwRiFn1kXV7rn2Icpxw2qSA0hjx2YoSBB1d9g1cYb5QZJpYJyta7mWzMGdq667cGqnU15mwOAuzZHTpVpNsvib1Km5NX0b9PsSnLxPDAXqYcyCU3ijn7v8G1eV/fyAyvcd3n1cuu5Nj3Spn4v+QGFrZIhQzOOLiMXrkQCleryq0u7MHJEkJ5f6zrP32eZPK1yVEGBxpqiYQIz51cPWAAM3/GE+y3BpqfySie9PJszS8XZ/gTtUG8DzR6urCkpryTTu+8EO4CquOTTCMfP0H5pxTMBYdK6zK4/yhA6wyntYHOA+TxOQZ1yN0tqClkr2c0ASdOvwgTlbMwD74f/CNavAIR0wuJ2i+YWN2rhPRnbRKovAMeHFaksayfJct4xyXPalk3Y01GKUaOTMwJe
Source: global traffic	HTTP traffic detected: GET /enroll-loyalty/assets/index-Czu5RiSy.js HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://all.accor.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; incap_ses_1388_3039981=WwV9UFsZYQbcTBz5zCpDE0/kIWcAAAAAAlW7vDjSIvNuKK2ooaDNBg==; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; incap_ses_1237_3039981=RMkdawpcO0pafv9zF7UqEVDkIWcAAAAAOdDq+0nC/oeq6w4fyTL3Fg==; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjoiQUgiLCJyZXRhaW5lZG1lcmNoYW50aWQiOiJBSCJ9; incap_ses_965_3039981=q99Yd2XUwRILYtlqj15kDVLkIWcAAAAA3wW8EuVmSTOVbo8SRcNLVg==; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+30+2024+03%3A46%3A29+GMT-0400+(Eastern+Daylight+Time)&version=202409.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&genVendors=V62%3A0%2CV37%3A0%2CV67%3A0%2CV38%3A0%2CV64%3A0%2CV58%3A0%2CV25%3A0%2CV26%3A0%2CV42%3A0%2CV9%3A0%2CV8%3A0%2CV27%3A0%2CV51%3A0%2CV39%3A0%2CV23%3A0%2CV55%3A0%2CV5%3A0%2CV34%3A0%2CV10%3A0%2CV53%3A0%2CV59%3A0%2CV74%3A0%2CV36%3A0%2CV49%3A0%2CV65%3A0%2CV19%3A0%2CV33%3A0%2CV57%3A0%2CV52%3A0%2CV48%3A0%2CV29%3A0%2CV17%3A0%2CV11%3A0%2CV56%3A0%2CV12%3A0%2CV72%3A0%2CV13%3A0%2CV41%3A0%2CV40%3A0%2CV68%3A0%2CV60%3A0%2CV50%3A0%2CV15%3A0%2CV54%3A0%2CV28%3A0%2CV30%3A0%2CV46%3A0%2CV4%3A0%2CV14%3A0%2CV61%3A0%2CV7%3A0%2CV45%3A0%2CV16%3A0%2CV32%3A0%2CV21%3A0%2CV69%3A0%2CV63%3A0%2CV73%3A0%2CV6%3A0%2CV18%3A0%2CV31%3A0%2CV44%3A0%2CV71%3A0%2CV43%3A0%2CV35%3A0%2CV47%3A0%2C&consentId=9ab4f1d3-b3a4-433f-a62e-3731c85af8dc&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer.html&groups=C0001%3A1%2CC0003%3A0%2CC0002%3A0%2CC0007%3A0%2CC0004%3A0%2CC0005%3A0%2CC0008%3A1%2CC0009%3A0; rxVisitor=1730274389683JLIBD8T14271V8K1PF607REH7HAD6SU0; dtSa=-; rxvt=1730276189890\|1730274389685; incap_ses_951_3039981=GL4CVhbxPgx+DtlaoqEyDVbkI
Source: global traffic	HTTP traffic detected: GET /enroll-loyalty/assets/index-BJwiwBAj.js HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://all.accor.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; incap_ses_1388_3039981=WwV9UFsZYQbcTBz5zCpDE0/kIWcAAAAAAlW7vDjSIvNuKK2ooaDNBg==; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; incap_ses_1237_3039981=RMkdawpcO0pafv9zF7UqEVDkIWcAAAAAOdDq+0nC/oeq6w4fyTL3Fg==; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjoiQUgiLCJyZXRhaW5lZG1lcmNoYW50aWQiOiJBSCJ9; incap_ses_965_3039981=q99Yd2XUwRILYtlqj15kDVLkIWcAAAAA3wW8EuVmSTOVbo8SRcNLVg==; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+30+2024+03%3A46%3A29+GMT-0400+(Eastern+Daylight+Time)&version=202409.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&genVendors=V62%3A0%2CV37%3A0%2CV67%3A0%2CV38%3A0%2CV64%3A0%2CV58%3A0%2CV25%3A0%2CV26%3A0%2CV42%3A0%2CV9%3A0%2CV8%3A0%2CV27%3A0%2CV51%3A0%2CV39%3A0%2CV23%3A0%2CV55%3A0%2CV5%3A0%2CV34%3A0%2CV10%3A0%2CV53%3A0%2CV59%3A0%2CV74%3A0%2CV36%3A0%2CV49%3A0%2CV65%3A0%2CV19%3A0%2CV33%3A0%2CV57%3A0%2CV52%3A0%2CV48%3A0%2CV29%3A0%2CV17%3A0%2CV11%3A0%2CV56%3A0%2CV12%3A0%2CV72%3A0%2CV13%3A0%2CV41%3A0%2CV40%3A0%2CV68%3A0%2CV60%3A0%2CV50%3A0%2CV15%3A0%2CV54%3A0%2CV28%3A0%2CV30%3A0%2CV46%3A0%2CV4%3A0%2CV14%3A0%2CV61%3A0%2CV7%3A0%2CV45%3A0%2CV16%3A0%2CV32%3A0%2CV21%3A0%2CV69%3A0%2CV63%3A0%2CV73%3A0%2CV6%3A0%2CV18%3A0%2CV31%3A0%2CV44%3A0%2CV71%3A0%2CV43%3A0%2CV35%3A0%2CV47%3A0%2C&consentId=9ab4f1d3-b3a4-433f-a62e-3731c85af8dc&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer.html&groups=C0001%3A1%2CC0003%3A0%2CC0002%3A0%2CC0007%3A0%2CC0004%3A0%2CC0005%3A0%2CC0008%3A1%2CC0009%3A0; rxVisitor=1730274389683JLIBD8T14271V8K1PF607REH7HAD6SU0; dtSa=-; rxvt=1730276189890\|1730274389685; incap_ses_951_3039981=GL4CVhbxPgx+DtlaoqEyDVbkI
Source: global traffic	HTTP traffic detected: GET /enroll-loyalty/assets/index-CB71MQO2.js HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://all.accor.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; incap_ses_1388_3039981=WwV9UFsZYQbcTBz5zCpDE0/kIWcAAAAAAlW7vDjSIvNuKK2ooaDNBg==; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; incap_ses_1237_3039981=RMkdawpcO0pafv9zF7UqEVDkIWcAAAAAOdDq+0nC/oeq6w4fyTL3Fg==; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjoiQUgiLCJyZXRhaW5lZG1lcmNoYW50aWQiOiJBSCJ9; incap_ses_965_3039981=q99Yd2XUwRILYtlqj15kDVLkIWcAAAAA3wW8EuVmSTOVbo8SRcNLVg==; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+30+2024+03%3A46%3A29+GMT-0400+(Eastern+Daylight+Time)&version=202409.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&genVendors=V62%3A0%2CV37%3A0%2CV67%3A0%2CV38%3A0%2CV64%3A0%2CV58%3A0%2CV25%3A0%2CV26%3A0%2CV42%3A0%2CV9%3A0%2CV8%3A0%2CV27%3A0%2CV51%3A0%2CV39%3A0%2CV23%3A0%2CV55%3A0%2CV5%3A0%2CV34%3A0%2CV10%3A0%2CV53%3A0%2CV59%3A0%2CV74%3A0%2CV36%3A0%2CV49%3A0%2CV65%3A0%2CV19%3A0%2CV33%3A0%2CV57%3A0%2CV52%3A0%2CV48%3A0%2CV29%3A0%2CV17%3A0%2CV11%3A0%2CV56%3A0%2CV12%3A0%2CV72%3A0%2CV13%3A0%2CV41%3A0%2CV40%3A0%2CV68%3A0%2CV60%3A0%2CV50%3A0%2CV15%3A0%2CV54%3A0%2CV28%3A0%2CV30%3A0%2CV46%3A0%2CV4%3A0%2CV14%3A0%2CV61%3A0%2CV7%3A0%2CV45%3A0%2CV16%3A0%2CV32%3A0%2CV21%3A0%2CV69%3A0%2CV63%3A0%2CV73%3A0%2CV6%3A0%2CV18%3A0%2CV31%3A0%2CV44%3A0%2CV71%3A0%2CV43%3A0%2CV35%3A0%2CV47%3A0%2C&consentId=9ab4f1d3-b3a4-433f-a62e-3731c85af8dc&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer.html&groups=C0001%3A1%2CC0003%3A0%2CC0002%3A0%2CC0007%3A0%2CC0004%3A0%2CC0005%3A0%2CC0008%3A1%2CC0009%3A0; rxVisitor=1730274389683JLIBD8T14271V8K1PF607REH7HAD6SU0; dtSa=-; rxvt=1730276189890\|1730274389685; incap_ses_951_3039981=GL4CVhbxPgx+DtlaoqEyDVbkI
Source: global traffic	HTTP traffic detected: GET /ruxitagentjs_ICA7NVfhqrux_10285240307101407.js HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; incap_ses_1388_3039981=WwV9UFsZYQbcTBz5zCpDE0/kIWcAAAAAAlW7vDjSIvNuKK2ooaDNBg==; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; incap_ses_1237_3039981=RMkdawpcO0pafv9zF7UqEVDkIWcAAAAAOdDq+0nC/oeq6w4fyTL3Fg==; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjoiQUgiLCJyZXRhaW5lZG1lcmNoYW50aWQiOiJBSCJ9; incap_ses_965_3039981=q99Yd2XUwRILYtlqj15kDVLkIWcAAAAA3wW8EuVmSTOVbo8SRcNLVg==; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+30+2024+03%3A46%3A29+GMT-0400+(Eastern+Daylight+Time)&version=202409.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&genVendors=V62%3A0%2CV37%3A0%2CV67%3A0%2CV38%3A0%2CV64%3A0%2CV58%3A0%2CV25%3A0%2CV26%3A0%2CV42%3A0%2CV9%3A0%2CV8%3A0%2CV27%3A0%2CV51%3A0%2CV39%3A0%2CV23%3A0%2CV55%3A0%2CV5%3A0%2CV34%3A0%2CV10%3A0%2CV53%3A0%2CV59%3A0%2CV74%3A0%2CV36%3A0%2CV49%3A0%2CV65%3A0%2CV19%3A0%2CV33%3A0%2CV57%3A0%2CV52%3A0%2CV48%3A0%2CV29%3A0%2CV17%3A0%2CV11%3A0%2CV56%3A0%2CV12%3A0%2CV72%3A0%2CV13%3A0%2CV41%3A0%2CV40%3A0%2CV68%3A0%2CV60%3A0%2CV50%3A0%2CV15%3A0%2CV54%3A0%2CV28%3A0%2CV30%3A0%2CV46%3A0%2CV4%3A0%2CV14%3A0%2CV61%3A0%2CV7%3A0%2CV45%3A0%2CV16%3A0%2CV32%3A0%2CV21%3A0%2CV69%3A0%2CV63%3A0%2CV73%3A0%2CV6%3A0%2CV18%3A0%2CV31%3A0%2CV44%3A0%2CV71%3A0%2CV43%3A0%2CV35%3A0%2CV47%3A0%2C&consentId=9ab4f1d3-b3a4-433f-a62e-3731c85af8dc&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer.html&groups=C0001%3A1%2CC0003%3A0%2CC0002%3A0%2CC0007%3A0%2CC0004%3A0%2CC0005%3A0%2CC0008%3A1%2CC0009%3A0; rxVisitor=1730274389683JLIBD8T14271V8K1PF607REH7HAD6SU0; dtSa=-; rxvt=1730276189890\|1730274389685; incap_ses_951_3039981=GL4CVhbxPgx+DtlaoqEyDVbkIWcAAAAA0uuNvYfu1J2VDD
Source: global traffic	HTTP traffic detected: GET /kameleoon.js HTTP/1.1Host: qchmhd61sj.kameleoon.euConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /services/business-referer/scripts-v2410/main.js HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; incap_ses_1388_3039981=WwV9UFsZYQbcTBz5zCpDE0/kIWcAAAAAAlW7vDjSIvNuKK2ooaDNBg==; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; incap_ses_1237_3039981=RMkdawpcO0pafv9zF7UqEVDkIWcAAAAAOdDq+0nC/oeq6w4fyTL3Fg==; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjoiQUgiLCJyZXRhaW5lZG1lcmNoYW50aWQiOiJBSCJ9; incap_ses_965_3039981=q99Yd2XUwRILYtlqj15kDVLkIWcAAAAA3wW8EuVmSTOVbo8SRcNLVg==; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+30+2024+03%3A46%3A29+GMT-0400+(Eastern+Daylight+Time)&version=202409.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&genVendors=V62%3A0%2CV37%3A0%2CV67%3A0%2CV38%3A0%2CV64%3A0%2CV58%3A0%2CV25%3A0%2CV26%3A0%2CV42%3A0%2CV9%3A0%2CV8%3A0%2CV27%3A0%2CV51%3A0%2CV39%3A0%2CV23%3A0%2CV55%3A0%2CV5%3A0%2CV34%3A0%2CV10%3A0%2CV53%3A0%2CV59%3A0%2CV74%3A0%2CV36%3A0%2CV49%3A0%2CV65%3A0%2CV19%3A0%2CV33%3A0%2CV57%3A0%2CV52%3A0%2CV48%3A0%2CV29%3A0%2CV17%3A0%2CV11%3A0%2CV56%3A0%2CV12%3A0%2CV72%3A0%2CV13%3A0%2CV41%3A0%2CV40%3A0%2CV68%3A0%2CV60%3A0%2CV50%3A0%2CV15%3A0%2CV54%3A0%2CV28%3A0%2CV30%3A0%2CV46%3A0%2CV4%3A0%2CV14%3A0%2CV61%3A0%2CV7%3A0%2CV45%3A0%2CV16%3A0%2CV32%3A0%2CV21%3A0%2CV69%3A0%2CV63%3A0%2CV73%3A0%2CV6%3A0%2CV18%3A0%2CV31%3A0%2CV44%3A0%2CV71%3A0%2CV43%3A0%2CV35%3A0%2CV47%3A0%2C&consentId=9ab4f1d3-b3a4-433f-a62e-3731c85af8dc&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer.html&groups=C0001%3A1%2CC0003%3A0%2CC0002%3A0%2CC0007%3A0%2CC0004%3A0%2CC0005%3A0%2CC0008%3A1%2CC0009%3A0; rxVisitor=1730274389683JLIBD8T14271V8K1PF607REH7HAD6SU0; dtSa=-; rxvt=1730276189890\|1730274389685; incap_ses_951_3039981=GL4CVhbxPgx+DtlaoqEyDVbkIWcAAAAA0uuNvYfu1J2VD
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /enroll-loyalty/assets/verifyEnroll-D5kC1PyP.js HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://all.accor.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; incap_ses_1388_3039981=WwV9UFsZYQbcTBz5zCpDE0/kIWcAAAAAAlW7vDjSIvNuKK2ooaDNBg==; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; incap_ses_1237_3039981=RMkdawpcO0pafv9zF7UqEVDkIWcAAAAAOdDq+0nC/oeq6w4fyTL3Fg==; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjoiQUgiLCJyZXRhaW5lZG1lcmNoYW50aWQiOiJBSCJ9; incap_ses_965_3039981=q99Yd2XUwRILYtlqj15kDVLkIWcAAAAA3wW8EuVmSTOVbo8SRcNLVg==; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+30+2024+03%3A46%3A29+GMT-0400+(Eastern+Daylight+Time)&version=202409.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&genVendors=V62%3A0%2CV37%3A0%2CV67%3A0%2CV38%3A0%2CV64%3A0%2CV58%3A0%2CV25%3A0%2CV26%3A0%2CV42%3A0%2CV9%3A0%2CV8%3A0%2CV27%3A0%2CV51%3A0%2CV39%3A0%2CV23%3A0%2CV55%3A0%2CV5%3A0%2CV34%3A0%2CV10%3A0%2CV53%3A0%2CV59%3A0%2CV74%3A0%2CV36%3A0%2CV49%3A0%2CV65%3A0%2CV19%3A0%2CV33%3A0%2CV57%3A0%2CV52%3A0%2CV48%3A0%2CV29%3A0%2CV17%3A0%2CV11%3A0%2CV56%3A0%2CV12%3A0%2CV72%3A0%2CV13%3A0%2CV41%3A0%2CV40%3A0%2CV68%3A0%2CV60%3A0%2CV50%3A0%2CV15%3A0%2CV54%3A0%2CV28%3A0%2CV30%3A0%2CV46%3A0%2CV4%3A0%2CV14%3A0%2CV61%3A0%2CV7%3A0%2CV45%3A0%2CV16%3A0%2CV32%3A0%2CV21%3A0%2CV69%3A0%2CV63%3A0%2CV73%3A0%2CV6%3A0%2CV18%3A0%2CV31%3A0%2CV44%3A0%2CV71%3A0%2CV43%3A0%2CV35%3A0%2CV47%3A0%2C&consentId=9ab4f1d3-b3a4-433f-a62e-3731c85af8dc&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer.html&groups=C0001%3A1%2CC0003%3A0%2CC0002%3A0%2CC0007%3A0%2CC0004%3A0%2CC0005%3A0%2CC0008%3A1%2CC0009%3A0; rxVisitor=1730274389683JLIBD8T14271V8K1PF607REH7HAD6SU0; dtSa=-; rxvt=1730276189890\|1730274389685; incap_ses_951_3039981=GL4CVhbxPgx+Dtlaoq
Source: global traffic	HTTP traffic detected: GET /enroll-loyalty/assets/axios-CJFUd36b.js HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://all.accor.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; incap_ses_1388_3039981=WwV9UFsZYQbcTBz5zCpDE0/kIWcAAAAAAlW7vDjSIvNuKK2ooaDNBg==; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; incap_ses_1237_3039981=RMkdawpcO0pafv9zF7UqEVDkIWcAAAAAOdDq+0nC/oeq6w4fyTL3Fg==; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjoiQUgiLCJyZXRhaW5lZG1lcmNoYW50aWQiOiJBSCJ9; incap_ses_965_3039981=q99Yd2XUwRILYtlqj15kDVLkIWcAAAAA3wW8EuVmSTOVbo8SRcNLVg==; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+30+2024+03%3A46%3A29+GMT-0400+(Eastern+Daylight+Time)&version=202409.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&genVendors=V62%3A0%2CV37%3A0%2CV67%3A0%2CV38%3A0%2CV64%3A0%2CV58%3A0%2CV25%3A0%2CV26%3A0%2CV42%3A0%2CV9%3A0%2CV8%3A0%2CV27%3A0%2CV51%3A0%2CV39%3A0%2CV23%3A0%2CV55%3A0%2CV5%3A0%2CV34%3A0%2CV10%3A0%2CV53%3A0%2CV59%3A0%2CV74%3A0%2CV36%3A0%2CV49%3A0%2CV65%3A0%2CV19%3A0%2CV33%3A0%2CV57%3A0%2CV52%3A0%2CV48%3A0%2CV29%3A0%2CV17%3A0%2CV11%3A0%2CV56%3A0%2CV12%3A0%2CV72%3A0%2CV13%3A0%2CV41%3A0%2CV40%3A0%2CV68%3A0%2CV60%3A0%2CV50%3A0%2CV15%3A0%2CV54%3A0%2CV28%3A0%2CV30%3A0%2CV46%3A0%2CV4%3A0%2CV14%3A0%2CV61%3A0%2CV7%3A0%2CV45%3A0%2CV16%3A0%2CV32%3A0%2CV21%3A0%2CV69%3A0%2CV63%3A0%2CV73%3A0%2CV6%3A0%2CV18%3A0%2CV31%3A0%2CV44%3A0%2CV71%3A0%2CV43%3A0%2CV35%3A0%2CV47%3A0%2C&consentId=9ab4f1d3-b3a4-433f-a62e-3731c85af8dc&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer.html&groups=C0001%3A1%2CC0003%3A0%2CC0002%3A0%2CC0007%3A0%2CC0004%3A0%2CC0005%3A0%2CC0008%3A1%2CC0009%3A0; rxVisitor=1730274389683JLIBD8T14271V8K1PF607REH7HAD6SU0; dtSa=-; rxvt=1730276189890\|1730274389685; incap_ses_951_3039981=GL4CVhbxPgx+DtlaoqEyDVbkI
Source: global traffic	HTTP traffic detected: GET /enroll-loyalty/assets/index-Czu5RiSy.js HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://all.accor.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; incap_ses_1388_3039981=WwV9UFsZYQbcTBz5zCpDE0/kIWcAAAAAAlW7vDjSIvNuKK2ooaDNBg==; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; incap_ses_1237_3039981=RMkdawpcO0pafv9zF7UqEVDkIWcAAAAAOdDq+0nC/oeq6w4fyTL3Fg==; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjoiQUgiLCJyZXRhaW5lZG1lcmNoYW50aWQiOiJBSCJ9; incap_ses_965_3039981=q99Yd2XUwRILYtlqj15kDVLkIWcAAAAA3wW8EuVmSTOVbo8SRcNLVg==; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+30+2024+03%3A46%3A29+GMT-0400+(Eastern+Daylight+Time)&version=202409.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&genVendors=V62%3A0%2CV37%3A0%2CV67%3A0%2CV38%3A0%2CV64%3A0%2CV58%3A0%2CV25%3A0%2CV26%3A0%2CV42%3A0%2CV9%3A0%2CV8%3A0%2CV27%3A0%2CV51%3A0%2CV39%3A0%2CV23%3A0%2CV55%3A0%2CV5%3A0%2CV34%3A0%2CV10%3A0%2CV53%3A0%2CV59%3A0%2CV74%3A0%2CV36%3A0%2CV49%3A0%2CV65%3A0%2CV19%3A0%2CV33%3A0%2CV57%3A0%2CV52%3A0%2CV48%3A0%2CV29%3A0%2CV17%3A0%2CV11%3A0%2CV56%3A0%2CV12%3A0%2CV72%3A0%2CV13%3A0%2CV41%3A0%2CV40%3A0%2CV68%3A0%2CV60%3A0%2CV50%3A0%2CV15%3A0%2CV54%3A0%2CV28%3A0%2CV30%3A0%2CV46%3A0%2CV4%3A0%2CV14%3A0%2CV61%3A0%2CV7%3A0%2CV45%3A0%2CV16%3A0%2CV32%3A0%2CV21%3A0%2CV69%3A0%2CV63%3A0%2CV73%3A0%2CV6%3A0%2CV18%3A0%2CV31%3A0%2CV44%3A0%2CV71%3A0%2CV43%3A0%2CV35%3A0%2CV47%3A0%2C&consentId=9ab4f1d3-b3a4-433f-a62e-3731c85af8dc&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer.html&groups=C0001%3A1%2CC0003%3A0%2CC0002%3A0%2CC0007%3A0%2CC0004%3A0%2CC0005%3A0%2CC0008%3A1%2CC0009%3A0; rxVisitor=1730274389683JLIBD8T14271V8K1PF607REH7HAD6SU0; dtSa=-; rxvt=1730276189890\|1730274389685; incap_ses_951_3039981=GL4CVhbxPgx+DtlaoqEyDVbkI
Source: global traffic	HTTP traffic detected: GET /_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3&ns=1&cb=1220902006 HTTP/1.1Host: all.accor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; incap_ses_1388_3039981=WwV9UFsZYQbcTBz5zCpDE0/kIWcAAAAAAlW7vDjSIvNuKK2ooaDNBg==; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; incap_ses_1237_3039981=RMkdawpcO0pafv9zF7UqEVDkIWcAAAAAOdDq+0nC/oeq6w4fyTL3Fg==; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjoiQUgiLCJyZXRhaW5lZG1lcmNoYW50aWQiOiJBSCJ9; incap_ses_965_3039981=q99Yd2XUwRILYtlqj15kDVLkIWcAAAAA3wW8EuVmSTOVbo8SRcNLVg==; rxVisitor=1730274389683JLIBD8T14271V8K1PF607REH7HAD6SU0; dtSa=-; rxvt=1730276189890\|1730274389685; incap_ses_951_3039981=GL4CVhbxPgx+DtlaoqEyDVbkIWcAAAAA0uuNvYfu1J2VDDucdA8ZtQ==; dtPC=1$474389679_556h1vCNCMQNAQOSCAVCJKBVISVNPVVSHILTAR-0e0; accorref=https://all.accor.com/; ___utmvc=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
Source: global traffic	HTTP traffic detected: GET /scripts/main-footer-light.js HTTP/1.1Host: all.accor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; incap_ses_1388_3039981=WwV9UFsZYQbcTBz5zCpDE0/kIWcAAAAAAlW7vDjSIvNuKK2ooaDNBg==; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; incap_ses_1237_3039981=RMkdawpcO0pafv9zF7UqEVDkIWcAAAAAOdDq+0nC/oeq6w4fyTL3Fg==; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjoiQUgiLCJyZXRhaW5lZG1lcmNoYW50aWQiOiJBSCJ9; incap_ses_965_3039981=q99Yd2XUwRILYtlqj15kDVLkIWcAAAAA3wW8EuVmSTOVbo8SRcNLVg==; rxVisitor=1730274389683JLIBD8T14271V8K1PF607REH7HAD6SU0; dtSa=-; rxvt=1730276189890\|1730274389685; incap_ses_951_3039981=GL4CVhbxPgx+DtlaoqEyDVbkIWcAAAAA0uuNvYfu1J2VDDucdA8ZtQ==; dtPC=1$474389679_556h1vCNCMQNAQOSCAVCJKBVISVNPVVSHILTAR-0e0; accorref=https://all.accor.com/; ___utmvc=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
Source: global traffic	HTTP traffic detected: GET /components/footer/assets/images/logo-fevad.jpg HTTP/1.1Host: all.accor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; incap_ses_1388_3039981=WwV9UFsZYQbcTBz5zCpDE0/kIWcAAAAAAlW7vDjSIvNuKK2ooaDNBg==; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; incap_ses_1237_3039981=RMkdawpcO0pafv9zF7UqEVDkIWcAAAAAOdDq+0nC/oeq6w4fyTL3Fg==; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjoiQUgiLCJyZXRhaW5lZG1lcmNoYW50aWQiOiJBSCJ9; incap_ses_965_3039981=q99Yd2XUwRILYtlqj15kDVLkIWcAAAAA3wW8EuVmSTOVbo8SRcNLVg==; rxVisitor=1730274389683JLIBD8T14271V8K1PF607REH7HAD6SU0; dtSa=-; rxvt=1730276189890\|1730274389685; incap_ses_951_3039981=GL4CVhbxPgx+DtlaoqEyDVbkIWcAAAAA0uuNvYfu1J2VDDucdA8ZtQ==; dtPC=1$474389679_556h1vCNCMQNAQOSCAVCJKBVISVNPVVSHILTAR-0e0; accorref=https://all.accor.com/; ___utmvc=L7y5BPoz0NfSoYOC4znrV9KYjL6ttdnjA1kWC2pXRsmqDcgLMhysXtRuiKOEpa/hb/rz0tnwJ8HzbK8HT27prBpFoWwZsyMkJanyq8zq8XvC1gp+juTBE3eU1hZgsT1MTn32ReR32CKsMacH9OFVQhqUBo6BkXOoYVcHXV/Dv9u60tnW9XeFAONW57NRUz9ppLmrD8HoyuX/L6OdlRXomuwMwh4kQ/H6TNrT1GZzMWXa3xQ97KRvA6oZ9wUR76uYgKwRiFn1kXV7rn2Icpxw2qSA0hjx2YoSBB1d9g1cYb5QZJpYJyta7mWzMGdq667cGqnU15mwOAuzZHTpVpNsvib1Km5NX0b9PsSnLxPDAXqYcyCU3ijn7v8G1eV/fyAyvcd3n1cuu5Nj3Spn4v+QGFrZIhQzOOLiMXrkQCleryq0u7MHJEkJ5f6zrP32eZPK1yVEGBxpqiYQIz51cPWAAM3/GE+y3BpqfySie9PJszS8XZ/gTtUG8DzR6urCkpryTTu+8EO4CquOTTCMfP0H5pxTMBYdK6zK4/yhA6wyntYHOA+TxOQZ1yN0tqClkr2c0ASdOvwgTlbMwD74f/CNavAIR0wuJ2i+YWN2rhPRnbRKovAMeHFaksayfJct4xyXPalk3Y01GKUaOTMwJeTdQBoelREX4sWWQBhmq5R7hygkjDnceQqjsu6Mb2NmYXOGS2/MoV0FKy7C4BqJOIdLQqOmQFARMoWqajTD+pyvTShe/VGKIKxgvNBZE5Qz90CA90JCfixEldK8K+lWGer6LaAFtOo2Du1ITWdnCOpewRIK+Px5/AT7Yom1CCYE+b7bLaerrxhfsXNYv/PYSxFL0XCQCCS5aah/KJjhK46KIkcK8Md64fxufo7lgk5+uJ8bdsc/WP/t2brrYZGzCQMWPE5v+YAug0kf2B1kLV77/vmwAliKG2yho1hf21fKOoYlTY39Ziz1YeERQGnv8lk8/rbLHAA757Spvvw08LzC5wNMKA9j6/1mK2YwLkjraP1emUQVWUMsT8WzcLxBb++jhiUGIBwnc70+NrG85Er7kAS3f0qz/OARpCoxY+c4qLwUIC+F3F4STmoYfgTouhaSEBxAnK0eM+/jAX3++FmoSTLJLO/TXyt
Source: global traffic	HTTP traffic detected: GET /enroll-loyalty/assets/verifyEnroll-D5kC1PyP.js HTTP/1.1Host: all.accor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; incap_ses_1388_3039981=WwV9UFsZYQbcTBz5zCpDE0/kIWcAAAAAAlW7vDjSIvNuKK2ooaDNBg==; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; incap_ses_1237_3039981=RMkdawpcO0pafv9zF7UqEVDkIWcAAAAAOdDq+0nC/oeq6w4fyTL3Fg==; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjoiQUgiLCJyZXRhaW5lZG1lcmNoYW50aWQiOiJBSCJ9; incap_ses_965_3039981=q99Yd2XUwRILYtlqj15kDVLkIWcAAAAA3wW8EuVmSTOVbo8SRcNLVg==; rxVisitor=1730274389683JLIBD8T14271V8K1PF607REH7HAD6SU0; dtSa=-; rxvt=1730276189890\|1730274389685; incap_ses_951_3039981=GL4CVhbxPgx+DtlaoqEyDVbkIWcAAAAA0uuNvYfu1J2VDDucdA8ZtQ==; dtPC=1$474389679_556h1vCNCMQNAQOSCAVCJKBVISVNPVVSHILTAR-0e0; accorref=https://all.accor.com/; ___utmvc=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
Source: global traffic	HTTP traffic detected: GET /enroll-loyalty/assets/axios-CJFUd36b.js HTTP/1.1Host: all.accor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; incap_ses_1388_3039981=WwV9UFsZYQbcTBz5zCpDE0/kIWcAAAAAAlW7vDjSIvNuKK2ooaDNBg==; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; incap_ses_1237_3039981=RMkdawpcO0pafv9zF7UqEVDkIWcAAAAAOdDq+0nC/oeq6w4fyTL3Fg==; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjoiQUgiLCJyZXRhaW5lZG1lcmNoYW50aWQiOiJBSCJ9; incap_ses_965_3039981=q99Yd2XUwRILYtlqj15kDVLkIWcAAAAA3wW8EuVmSTOVbo8SRcNLVg==; rxVisitor=1730274389683JLIBD8T14271V8K1PF607REH7HAD6SU0; dtSa=-; rxvt=1730276189890\|1730274389685; incap_ses_951_3039981=GL4CVhbxPgx+DtlaoqEyDVbkIWcAAAAA0uuNvYfu1J2VDDucdA8ZtQ==; dtPC=1$474389679_556h1vCNCMQNAQOSCAVCJKBVISVNPVVSHILTAR-0e0; accorref=https://all.accor.com/; ___utmvc=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
Source: global traffic	HTTP traffic detected: GET /api2/event/accor?event=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%3D%3D HTTP/1.1Host: accorsa.germany-2.evergage.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, /; q=0.01sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://all.accor.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /referential/v1/pos/countries?siteCode=all HTTP/1.1Host: api.accor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: org=evy; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjoiQUgiLCJyZXRhaW5lZG1lcmNoYW50aWQiOiJBSCJ9; rxVisitor=1730274389683JLIBD8T14271V8K1PF607REH7HAD6SU0; dtSa=-; rxvt=1730276189890\|1730274389685; OAU_all.accor=eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJhcHBfaWQiOiJhbGwuYWNjb3IiLCJzdGF0ZSI6Ijk0MzE1OWJmZjNlMjgzNDdhNTc2YjQiLCJub25jZSI6ImYyYjUzNGVlYmM2NTBiZmYyNzQyZjAiLCJyZWRpcmVjdF9zaXRlX3VyaSI6Imh0dHBzOi8vYWxsLmFjY29yLmNvbSIsInByb21wdCI6Im5vbmUiLCJleHAiOjE3MzAyNzYxOTIsImlhdCI6MTczMDI3NDM5Mn0.dDbp5yo22Nkc_T2_ilnkSeZsJlH33J88WQce53kGtp7b_xXc-2rGkQXx-VD15Zw61YvyBN-FbPdfODEVwEOjwA95X-YiFBZq0afvv1-bDUyUZJqQEKjb8T53boJ6aeFhRDRRGz1PvuQn8IcQst_mDKKJHNHrjHtDhzx4TbbmfnMeRAvGxsWZqRrNVJLsxtGTRVAbr-pcr79auRdsdiiVMHZngXHEFuB-K5MUmf_WsGQLV6Db-UHxgdfGu9vYR-01M6R64Ifelcqv0eSDL_lHRPZz9nu4GOjrAQuorhzEhAfIrwIDG9wAZTjcp-KUuCz3QBGKkHYwzrk0BLSoO-aUgA; dtPC=1$474389679_556h1vCNCMQNAQOSCAVCJKBVISVNPVVSHILTAR-0e0; accorref=https://all.accor.com/; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+30+2024+03%3A46%3A35+GMT-0400+(Eastern+Daylight+Time)&version=202409.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&genVendors=V62%3A0%2CV37%3A0%2CV67%3A0%2CV38%3A0%2CV64%3A0%2CV58%3A0%2CV25%3A0%2CV26%3A0%2CV42%3A0%2CV9%3A0%2CV8%3A0%2CV27%3A0%2CV51%3A0%2CV39%3A0%2CV23%3A0%2CV55%3A0%2CV5%3A0%2CV34%3A0%2CV10%3A0%2CV53%3A0%2CV59%3A0%2CV74%3A0%2CV36%3A0%2CV49%3A0%2CV65%3A0%2CV19%3A0%2CV33%3A0%2CV57%3A0%2CV52%3A0%2CV48%3A0%2CV29%3A0%2CV17%3A0%2CV11%3A0%2CV56%3A0%2CV12%3A0%2CV72%3A0%2CV13%3A0%2CV41%3A0%2CV40%3A0%2CV68%3A0%2CV60%3A0%2CV50%3A0%2CV15%3A0%2CV54%3A0%2CV28%3A0%2CV30%3A0%2CV46%3A0%2CV4%3A0%2CV14%3A0%2CV61%3A0%2CV7%3A0%2CV45%3A0%2CV16%3A0%2CV32%3A0%2CV21%3A0%2CV69%3A0%2CV63%3A0%2CV73%3A0%2CV6%3A0%2CV18%3A0%2CV31%3A0%2CV44%3A0%2CV71%3A0%2CV43%3A0%2CV35%3A0%2CV47%3A0%2C&consentId=9ab4f1d3-b3a4-433f-a62e-3731c85af8dc&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0007%3A1%2CC0004%3A1%2CC0005%3A1%2CC0008%3A1%2CC0009%3A0&AwaitingReconsent=false; _evga_8b38={%22uuid%22:%22169349b27ef7e9cc%22}; _sfid_1a3a={%22anonymousId%22:%22169349b27ef7e9cc%22%2C%22consents%22:[]}
Source: global traffic	HTTP traffic detected: GET /_Incapsula_Resource?SWKMTFSR=1&e=0.40031580321636673 HTTP/1.1Host: all.accor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; incap_ses_1388_3039981=WwV9UFsZYQbcTBz5zCpDE0/kIWcAAAAAAlW7vDjSIvNuKK2ooaDNBg==; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; incap_ses_1237_3039981=RMkdawpcO0pafv9zF7UqEVDkIWcAAAAAOdDq+0nC/oeq6w4fyTL3Fg==; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjoiQUgiLCJyZXRhaW5lZG1lcmNoYW50aWQiOiJBSCJ9; incap_ses_965_3039981=q99Yd2XUwRILYtlqj15kDVLkIWcAAAAA3wW8EuVmSTOVbo8SRcNLVg==; rxVisitor=1730274389683JLIBD8T14271V8K1PF607REH7HAD6SU0; dtSa=-; rxvt=1730276189890\|1730274389685; incap_ses_951_3039981=GL4CVhbxPgx+DtlaoqEyDVbkIWcAAAAA0uuNvYfu1J2VDDucdA8ZtQ==; dtPC=1$474389679_556h1vCNCMQNAQOSCAVCJKBVISVNPVVSHILTAR-0e0; accorref=https://all.accor.com/; ___utmvc=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
Source: global traffic	HTTP traffic detected: GET /referential/v1/best-visit/cookie-attribution HTTP/1.1Host: api.accor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: org=evy; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjoiQUgiLCJyZXRhaW5lZG1lcmNoYW50aWQiOiJBSCJ9; rxVisitor=1730274389683JLIBD8T14271V8K1PF607REH7HAD6SU0; dtSa=-; rxvt=1730276189890\|1730274389685; OAU_all.accor=eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJhcHBfaWQiOiJhbGwuYWNjb3IiLCJzdGF0ZSI6Ijk0MzE1OWJmZjNlMjgzNDdhNTc2YjQiLCJub25jZSI6ImYyYjUzNGVlYmM2NTBiZmYyNzQyZjAiLCJyZWRpcmVjdF9zaXRlX3VyaSI6Imh0dHBzOi8vYWxsLmFjY29yLmNvbSIsInByb21wdCI6Im5vbmUiLCJleHAiOjE3MzAyNzYxOTIsImlhdCI6MTczMDI3NDM5Mn0.dDbp5yo22Nkc_T2_ilnkSeZsJlH33J88WQce53kGtp7b_xXc-2rGkQXx-VD15Zw61YvyBN-FbPdfODEVwEOjwA95X-YiFBZq0afvv1-bDUyUZJqQEKjb8T53boJ6aeFhRDRRGz1PvuQn8IcQst_mDKKJHNHrjHtDhzx4TbbmfnMeRAvGxsWZqRrNVJLsxtGTRVAbr-pcr79auRdsdiiVMHZngXHEFuB-K5MUmf_WsGQLV6Db-UHxgdfGu9vYR-01M6R64Ifelcqv0eSDL_lHRPZz9nu4GOjrAQuorhzEhAfIrwIDG9wAZTjcp-KUuCz3QBGKkHYwzrk0BLSoO-aUgA; dtPC=1$474389679_556h1vCNCMQNAQOSCAVCJKBVISVNPVVSHILTAR-0e0; accorref=https://all.accor.com/; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+30+2024+03%3A46%3A35+GMT-0400+(Eastern+Daylight+Time)&version=202409.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&genVendors=V62%3A0%2CV37%3A0%2CV67%3A0%2CV38%3A0%2CV64%3A0%2CV58%3A0%2CV25%3A0%2CV26%3A0%2CV42%3A0%2CV9%3A0%2CV8%3A0%2CV27%3A0%2CV51%3A0%2CV39%3A0%2CV23%3A0%2CV55%3A0%2CV5%3A0%2CV34%3A0%2CV10%3A0%2CV53%3A0%2CV59%3A0%2CV74%3A0%2CV36%3A0%2CV49%3A0%2CV65%3A0%2CV19%3A0%2CV33%3A0%2CV57%3A0%2CV52%3A0%2CV48%3A0%2CV29%3A0%2CV17%3A0%2CV11%3A0%2CV56%3A0%2CV12%3A0%2CV72%3A0%2CV13%3A0%2CV41%3A0%2CV40%3A0%2CV68%3A0%2CV60%3A0%2CV50%3A0%2CV15%3A0%2CV54%3A0%2CV28%3A0%2CV30%3A0%2CV46%3A0%2CV4%3A0%2CV14%3A0%2CV61%3A0%2CV7%3A0%2CV45%3A0%2CV16%3A0%2CV32%3A0%2CV21%3A0%2CV69%3A0%2CV63%3A0%2CV73%3A0%2CV6%3A0%2CV18%3A0%2CV31%3A0%2CV44%3A0%2CV71%3A0%2CV43%3A0%2CV35%3A0%2CV47%3A0%2C&consentId=9ab4f1d3-b3a4-433f-a62e-3731c85af8dc&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0007%3A1%2CC0004%3A1%2CC0005%3A1%2CC0008%3A1%2CC0009%3A0&AwaitingReconsent=false; _evga_8b38={%22uuid%22:%22169349b27ef7e9cc%22}; _sfid_1a3a={%22anonymousId%22:%22169349b27ef7e9cc%22%2C%22consents%22:[]}
Source: global traffic	HTTP traffic detected: GET /referential/v1/pos//currencies?groupByContinent=true HTTP/1.1Host: api.accor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: org=evy; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjoiQUgiLCJyZXRhaW5lZG1lcmNoYW50aWQiOiJBSCJ9; rxVisitor=1730274389683JLIBD8T14271V8K1PF607REH7HAD6SU0; dtSa=-; rxvt=1730276189890\|1730274389685; OAU_all.accor=eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJhcHBfaWQiOiJhbGwuYWNjb3IiLCJzdGF0ZSI6Ijk0MzE1OWJmZjNlMjgzNDdhNTc2YjQiLCJub25jZSI6ImYyYjUzNGVlYmM2NTBiZmYyNzQyZjAiLCJyZWRpcmVjdF9zaXRlX3VyaSI6Imh0dHBzOi8vYWxsLmFjY29yLmNvbSIsInByb21wdCI6Im5vbmUiLCJleHAiOjE3MzAyNzYxOTIsImlhdCI6MTczMDI3NDM5Mn0.dDbp5yo22Nkc_T2_ilnkSeZsJlH33J88WQce53kGtp7b_xXc-2rGkQXx-VD15Zw61YvyBN-FbPdfODEVwEOjwA95X-YiFBZq0afvv1-bDUyUZJqQEKjb8T53boJ6aeFhRDRRGz1PvuQn8IcQst_mDKKJHNHrjHtDhzx4TbbmfnMeRAvGxsWZqRrNVJLsxtGTRVAbr-pcr79auRdsdiiVMHZngXHEFuB-K5MUmf_WsGQLV6Db-UHxgdfGu9vYR-01M6R64Ifelcqv0eSDL_lHRPZz9nu4GOjrAQuorhzEhAfIrwIDG9wAZTjcp-KUuCz3QBGKkHYwzrk0BLSoO-aUgA; dtPC=1$474389679_556h1vCNCMQNAQOSCAVCJKBVISVNPVVSHILTAR-0e0; accorref=https://all.accor.com/; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+30+2024+03%3A46%3A35+GMT-0400+(Eastern+Daylight+Time)&version=202409.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&genVendors=V62%3A0%2CV37%3A0%2CV67%3A0%2CV38%3A0%2CV64%3A0%2CV58%3A0%2CV25%3A0%2CV26%3A0%2CV42%3A0%2CV9%3A0%2CV8%3A0%2CV27%3A0%2CV51%3A0%2CV39%3A0%2CV23%3A0%2CV55%3A0%2CV5%3A0%2CV34%3A0%2CV10%3A0%2CV53%3A0%2CV59%3A0%2CV74%3A0%2CV36%3A0%2CV49%3A0%2CV65%3A0%2CV19%3A0%2CV33%3A0%2CV57%3A0%2CV52%3A0%2CV48%3A0%2CV29%3A0%2CV17%3A0%2CV11%3A0%2CV56%3A0%2CV12%3A0%2CV72%3A0%2CV13%3A0%2CV41%3A0%2CV40%3A0%2CV68%3A0%2CV60%3A0%2CV50%3A0%2CV15%3A0%2CV54%3A0%2CV28%3A0%2CV30%3A0%2CV46%3A0%2CV4%3A0%2CV14%3A0%2CV61%3A0%2CV7%3A0%2CV45%3A0%2CV16%3A0%2CV32%3A0%2CV21%3A0%2CV69%3A0%2CV63%3A0%2CV73%3A0%2CV6%3A0%2CV18%3A0%2CV31%3A0%2CV44%3A0%2CV71%3A0%2CV43%3A0%2CV35%3A0%2CV47%3A0%2C&consentId=9ab4f1d3-b3a4-433f-a62e-3731c85af8dc&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0007%3A1%2CC0004%3A1%2CC0005%3A1%2CC0008%3A1%2CC0009%3A0&AwaitingReconsent=false; _evga_8b38={%22uuid%22:%22169349b27ef7e9cc%22}; _sfid_1a3a={%22anonymousId%22:%22169349b27ef7e9cc%22%2C%22consents%22:[]}
Source: global traffic	HTTP traffic detected: GET /2a22008a1a0b.js?lv=1 HTTP/1.1Host: w.usabilla.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /enroll-loyalty/assets/index-BJwiwBAj.js HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://all.accor.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; incap_ses_1388_3039981=WwV9UFsZYQbcTBz5zCpDE0/kIWcAAAAAAlW7vDjSIvNuKK2ooaDNBg==; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; incap_ses_1237_3039981=RMkdawpcO0pafv9zF7UqEVDkIWcAAAAAOdDq+0nC/oeq6w4fyTL3Fg==; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjoiQUgiLCJyZXRhaW5lZG1lcmNoYW50aWQiOiJBSCJ9; incap_ses_965_3039981=q99Yd2XUwRILYtlqj15kDVLkIWcAAAAA3wW8EuVmSTOVbo8SRcNLVg==; rxVisitor=1730274389683JLIBD8T14271V8K1PF607REH7HAD6SU0; dtSa=-; rxvt=1730276189890\|1730274389685; incap_ses_951_3039981=GL4CVhbxPgx+DtlaoqEyDVbkIWcAAAAA0uuNvYfu1J2VDDucdA8ZtQ==; dtPC=1$474389679_556h1vCNCMQNAQOSCAVCJKBVISVNPVVSHILTAR-0e0; accorref=https://all.accor.com/; ___utmvc=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
Source: global traffic	HTTP traffic detected: GET /enroll-loyalty/assets/index-CB71MQO2.js HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://all.accor.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; incap_ses_1388_3039981=WwV9UFsZYQbcTBz5zCpDE0/kIWcAAAAAAlW7vDjSIvNuKK2ooaDNBg==; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; incap_ses_1237_3039981=RMkdawpcO0pafv9zF7UqEVDkIWcAAAAAOdDq+0nC/oeq6w4fyTL3Fg==; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjoiQUgiLCJyZXRhaW5lZG1lcmNoYW50aWQiOiJBSCJ9; incap_ses_965_3039981=q99Yd2XUwRILYtlqj15kDVLkIWcAAAAA3wW8EuVmSTOVbo8SRcNLVg==; rxVisitor=1730274389683JLIBD8T14271V8K1PF607REH7HAD6SU0; dtSa=-; rxvt=1730276189890\|1730274389685; incap_ses_951_3039981=GL4CVhbxPgx+DtlaoqEyDVbkIWcAAAAA0uuNvYfu1J2VDDucdA8ZtQ==; dtPC=1$474389679_556h1vCNCMQNAQOSCAVCJKBVISVNPVVSHILTAR-0e0; accorref=https://all.accor.com/; ___utmvc=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
Source: global traffic	HTTP traffic detected: GET /content/sling/servlets/ace/customer?language=en&cookieDomain=all.accor.com HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://all.accor.com/a/en/new-app-offer/app-download.html?source_caller=bulk&af_qr=true&shortlink=5m1nc8of&c=20241013_ALL_AppBonusingMobileLp&af_ad=QR_code_20241013_ALL_AppBonusingMobileLp&pid=QR_code&deep_link_value=accor%3A%2F%2Fsearch%2Foffer%3Fpage_id%3Dddc8e830-2fc5-4492-ae7f-a63574b202f4&af_adset=ENAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; incap_ses_1388_3039981=WwV9UFsZYQbcTBz5zCpDE0/kIWcAAAAAAlW7vDjSIvNuKK2ooaDNBg==; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; incap_ses_1237_3039981=RMkdawpcO0pafv9zF7UqEVDkIWcAAAAAOdDq+0nC/oeq6w4fyTL3Fg==; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjoiQUgiLCJyZXRhaW5lZG1lcmNoYW50aWQiOiJBSCJ9; incap_ses_965_3039981=q99Yd2XUwRILYtlqj15kDVLkIWcAAAAA3wW8EuVmSTOVbo8SRcNLVg==; rxVisitor=1730274389683JLIBD8T14271V8K1PF607REH7HAD6SU0; incap_ses_951_3039981=GL4CVhbxPgx+DtlaoqEyDVbkIWcAAAAA0uuNvYfu1J2VDDucdA8ZtQ==; accorref=https://all.accor.com/; ___utmvc=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
Source: global traffic	HTTP traffic detected: GET /_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3&ns=3&cb=1583850265 HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; incap_ses_1388_3039981=WwV9UFsZYQbcTBz5zCpDE0/kIWcAAAAAAlW7vDjSIvNuKK2ooaDNBg==; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; incap_ses_1237_3039981=RMkdawpcO0pafv9zF7UqEVDkIWcAAAAAOdDq+0nC/oeq6w4fyTL3Fg==; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjoiQUgiLCJyZXRhaW5lZG1lcmNoYW50aWQiOiJBSCJ9; incap_ses_965_3039981=q99Yd2XUwRILYtlqj15kDVLkIWcAAAAA3wW8EuVmSTOVbo8SRcNLVg==; rxVisitor=1730274389683JLIBD8T14271V8K1PF607REH7HAD6SU0; dtSa=-; rxvt=1730276189890\|1730274389685; incap_ses_951_3039981=GL4CVhbxPgx+DtlaoqEyDVbkIWcAAAAA0uuNvYfu1J2VDDucdA8ZtQ==; dtPC=1$474389679_556h1vCNCMQNAQOSCAVCJKBVISVNPVVSHILTAR-0e0; accorref=https://all.accor.com/; ___utmvc=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
Source: global traffic	HTTP traffic detected: GET /api2/event/accor?event=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 HTTP/1.1Host: accorsa.germany-2.evergage.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, /; q=0.01sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://all.accor.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/fonts/roboto/regular/roboto-regular.woff2 HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://all.accor.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://all.accor.com/a/en/new-app-offer/app-download.html?source_caller=bulk&af_qr=true&shortlink=5m1nc8of&c=20241013_ALL_AppBonusingMobileLp&af_ad=QR_code_20241013_ALL_AppBonusingMobileLp&pid=QR_code&deep_link_value=accor%3A%2F%2Fsearch%2Foffer%3Fpage_id%3Dddc8e830-2fc5-4492-ae7f-a63574b202f4&af_adset=ENAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; incap_ses_1388_3039981=WwV9UFsZYQbcTBz5zCpDE0/kIWcAAAAAAlW7vDjSIvNuKK2ooaDNBg==; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; incap_ses_1237_3039981=RMkdawpcO0pafv9zF7UqEVDkIWcAAAAAOdDq+0nC/oeq6w4fyTL3Fg==; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjoiQUgiLCJyZXRhaW5lZG1lcmNoYW50aWQiOiJBSCJ9; incap_ses_965_3039981=q99Yd2XUwRILYtlqj15kDVLkIWcAAAAA3wW8EuVmSTOVbo8SRcNLVg==; rxVisitor=1730274389683JLIBD8T14271V8K1PF607REH7HAD6SU0; dtSa=-; rxvt=1730276189890\|1730274389685; incap_ses_951_3039981=GL4CVhbxPgx+DtlaoqEyDVbkIWcAAAAA0uuNvYfu1J2VDDucdA8ZtQ==; dtPC=1$474389679_556h1vCNCMQNAQOSCAVCJKBVISVNPVVSHILTAR-0e0; accorref=https://all.accor.com/; ___utmvc=L7y5BPoz0NfSoYOC4znrV9KYjL6ttdnjA1kWC2pXRsmqDcgLMhysXtRuiKOEpa/hb/rz0tnwJ8HzbK8HT27prBpFoWwZsyMkJanyq8zq8XvC1gp+juTBE3eU1hZgsT1MTn32ReR32CKsMacH9OFVQhqUBo6BkXOoYVcHXV/Dv9u60tnW9XeFAONW57NRUz9ppLmrD8HoyuX/L6OdlRXomuwMwh4kQ/H6TNrT1GZzMWXa3xQ97KRvA6oZ9wUR76uYgKwRiFn1kXV7rn2Icpxw2qSA0hjx2YoSBB1d9g1cYb5QZJpYJyta7mWzMGdq667cGqnU15mwOAuzZHTpVpNsvib1Km5NX0b9PsSnLxPDAXqYcyCU3ijn7v8G1eV/fyAyvcd3n1cuu5Nj3Spn4v+QGFrZIhQzOOLiMXrkQCleryq0u7MHJEkJ5f6zrP32eZPK1yVEGBxpqiYQIz51cPWAAM3/GE+y3BpqfySie9PJszS8XZ/gTtUG8DzR6urCkpryTTu+8EO4CquOTTCMfP0H5pxTMBYdK6zK4/yhA6wyntYHOA+TxOQZ1yN0tqClkr2c0ASdOvwgTlbMwD74f/CNavAIR0wuJ2i+YWN2rhPRnbRKovAMeHFaksayfJct4xyXPalk3Y01GKUa
Source: global traffic	HTTP traffic detected: GET /enroll-loyalty/assets/index-Czu5RiSy.js HTTP/1.1Host: all.accor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; incap_ses_1388_3039981=WwV9UFsZYQbcTBz5zCpDE0/kIWcAAAAAAlW7vDjSIvNuKK2ooaDNBg==; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; incap_ses_1237_3039981=RMkdawpcO0pafv9zF7UqEVDkIWcAAAAAOdDq+0nC/oeq6w4fyTL3Fg==; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjoiQUgiLCJyZXRhaW5lZG1lcmNoYW50aWQiOiJBSCJ9; incap_ses_965_3039981=q99Yd2XUwRILYtlqj15kDVLkIWcAAAAA3wW8EuVmSTOVbo8SRcNLVg==; rxVisitor=1730274389683JLIBD8T14271V8K1PF607REH7HAD6SU0; dtSa=-; rxvt=1730276189890\|1730274389685; incap_ses_951_3039981=GL4CVhbxPgx+DtlaoqEyDVbkIWcAAAAA0uuNvYfu1J2VDDucdA8ZtQ==; dtPC=1$474389679_556h1vCNCMQNAQOSCAVCJKBVISVNPVVSHILTAR-0e0; accorref=https://all.accor.com/; ___utmvc=L7y5BPoz0NfSoYOC4znrV9KYjL6ttdnjA1kWC2pXRsmqDcgLMhysXtRuiKOEpa/hb/rz0tnwJ8HzbK8HT27prBpFoWwZsyMkJanyq8zq8XvC1gp+juTBE3eU1hZgsT1MTn32ReR32CKsMacH9OFVQhqUBo6BkXOoYVcHXV/Dv9u60tnW9XeFAONW57NRUz9ppLmrD8HoyuX/L6OdlRXomuwMwh4kQ/H6TNrT1GZzMWXa3xQ97KRvA6oZ9wUR76uYgKwRiFn1kXV7rn2Icpxw2qSA0hjx2YoSBB1d9g1cYb5QZJpYJyta7mWzMGdq667cGqnU15mwOAuzZHTpVpNsvib1Km5NX0b9PsSnLxPDAXqYcyCU3ijn7v8G1eV/fyAyvcd3n1cuu5Nj3Spn4v+QGFrZIhQzOOLiMXrkQCleryq0u7MHJEkJ5f6zrP32eZPK1yVEGBxpqiYQIz51cPWAAM3/GE+y3BpqfySie9PJszS8XZ/gTtUG8DzR6urCkpryTTu+8EO4CquOTTCMfP0H5pxTMBYdK6zK4/yhA6wyntYHOA+TxOQZ1yN0tqClkr2c0ASdOvwgTlbMwD74f/CNavAIR0wuJ2i+YWN2rhPRnbRKovAMeHFaksayfJct4xyXPalk3Y01GKUaOTMwJeTdQBoelREX4sWWQBhmq5R7hygkjDnceQqjsu6Mb2NmYXOGS2/MoV0FKy7C4BqJOIdLQqOmQFARMoWqajTD+pyvTShe/VGKIKxgvNBZE5Qz90CA90JCfixEldK8K+lWGer6LaAFtOo2Du1ITWdnCOpewRIK+Px5/AT7Yom1CCYE+b7bLaerrxhfsXNYv/PYSxFL0XCQCCS5aah/KJjhK46KIkcK8Md64fxufo7lgk5+uJ8bdsc/WP/t2brrYZGzCQMWPE5v+YAug0kf2B1kLV77/vmwAliKG2yho1hf21fKOoYlTY39Ziz1YeERQGnv8lk8/rbLHAA757Spvvw08LzC5wNMKA9j6/1mK2YwLkjraP1emUQVWUMsT8WzcLxBb++jhiUGIBwnc70+NrG85Er7kAS3f0qz/OARpCoxY+c4qLwUIC+F3F4STmoYfgTouhaSEBxAnK0eM+/jAX3++FmoSTLJLO/TXyt5jN+USG
Source: global traffic	HTTP traffic detected: GET /b94aa70a4593f812b35d5a8922257b6f80ccf6aa708f58b8266f4ba917eb0e0e/resources/images/android-chrome-512x512.png HTTP/1.1Host: static-p46175-e229011.adobeaemcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cip/p/FuKF6OOS68yCy7qj.html?p=tracking&url=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&ccid=9ab4f1d3-b3a4-433f-a62e-3731c85af8dc&logged=&country=us&pagename=informationandservices%3A%3Aapp%20download&language=en HTTP/1.1Host: static.sojern.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /enroll-loyalty/assets/index-BJwiwBAj.js HTTP/1.1Host: all.accor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; incap_ses_1388_3039981=WwV9UFsZYQbcTBz5zCpDE0/kIWcAAAAAAlW7vDjSIvNuKK2ooaDNBg==; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; incap_ses_1237_3039981=RMkdawpcO0pafv9zF7UqEVDkIWcAAAAAOdDq+0nC/oeq6w4fyTL3Fg==; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjoiQUgiLCJyZXRhaW5lZG1lcmNoYW50aWQiOiJBSCJ9; incap_ses_965_3039981=q99Yd2XUwRILYtlqj15kDVLkIWcAAAAA3wW8EuVmSTOVbo8SRcNLVg==; rxVisitor=1730274389683JLIBD8T14271V8K1PF607REH7HAD6SU0; dtSa=-; rxvt=1730276189890\|1730274389685; incap_ses_951_3039981=GL4CVhbxPgx+DtlaoqEyDVbkIWcAAAAA0uuNvYfu1J2VDDucdA8ZtQ==; dtPC=1$474389679_556h1vCNCMQNAQOSCAVCJKBVISVNPVVSHILTAR-0e0; accorref=https://all.accor.com/; ___utmvc=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
Source: global traffic	HTTP traffic detected: GET /enroll-loyalty/assets/index-CB71MQO2.js HTTP/1.1Host: all.accor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; incap_ses_1388_3039981=WwV9UFsZYQbcTBz5zCpDE0/kIWcAAAAAAlW7vDjSIvNuKK2ooaDNBg==; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; incap_ses_1237_3039981=RMkdawpcO0pafv9zF7UqEVDkIWcAAAAAOdDq+0nC/oeq6w4fyTL3Fg==; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjoiQUgiLCJyZXRhaW5lZG1lcmNoYW50aWQiOiJBSCJ9; incap_ses_965_3039981=q99Yd2XUwRILYtlqj15kDVLkIWcAAAAA3wW8EuVmSTOVbo8SRcNLVg==; rxVisitor=1730274389683JLIBD8T14271V8K1PF607REH7HAD6SU0; dtSa=-; rxvt=1730276189890\|1730274389685; incap_ses_951_3039981=GL4CVhbxPgx+DtlaoqEyDVbkIWcAAAAA0uuNvYfu1J2VDDucdA8ZtQ==; dtPC=1$474389679_556h1vCNCMQNAQOSCAVCJKBVISVNPVVSHILTAR-0e0; accorref=https://all.accor.com/; ___utmvc=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
Source: global traffic	HTTP traffic detected: GET /services/business-referer/scripts-v2410/main.js HTTP/1.1Host: all.accor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; incap_ses_1388_3039981=WwV9UFsZYQbcTBz5zCpDE0/kIWcAAAAAAlW7vDjSIvNuKK2ooaDNBg==; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; incap_ses_1237_3039981=RMkdawpcO0pafv9zF7UqEVDkIWcAAAAAOdDq+0nC/oeq6w4fyTL3Fg==; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjoiQUgiLCJyZXRhaW5lZG1lcmNoYW50aWQiOiJBSCJ9; incap_ses_965_3039981=q99Yd2XUwRILYtlqj15kDVLkIWcAAAAA3wW8EuVmSTOVbo8SRcNLVg==; rxVisitor=1730274389683JLIBD8T14271V8K1PF607REH7HAD6SU0; dtSa=-; incap_ses_951_3039981=GL4CVhbxPgx+DtlaoqEyDVbkIWcAAAAA0uuNvYfu1J2VDDucdA8ZtQ==; accorref=https://all.accor.com/; ___utmvc=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
Source: global traffic	HTTP traffic detected: GET /ruxitagentjs_ICA7NVfhqrux_10285240307101407.js HTTP/1.1Host: all.accor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; incap_ses_1388_3039981=WwV9UFsZYQbcTBz5zCpDE0/kIWcAAAAAAlW7vDjSIvNuKK2ooaDNBg==; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; incap_ses_1237_3039981=RMkdawpcO0pafv9zF7UqEVDkIWcAAAAAOdDq+0nC/oeq6w4fyTL3Fg==; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjoiQUgiLCJyZXRhaW5lZG1lcmNoYW50aWQiOiJBSCJ9; incap_ses_965_3039981=q99Yd2XUwRILYtlqj15kDVLkIWcAAAAA3wW8EuVmSTOVbo8SRcNLVg==; rxVisitor=1730274389683JLIBD8T14271V8K1PF607REH7HAD6SU0; dtSa=-; incap_ses_951_3039981=GL4CVhbxPgx+DtlaoqEyDVbkIWcAAAAA0uuNvYfu1J2VDDucdA8ZtQ==; accorref=https://all.accor.com/; ___utmvc=L7y5BPoz0NfSoYOC4znrV9KYjL6ttdnjA1kWC2pXRsmqDcgLMhysXtRuiKOEpa/hb/rz0tnwJ8HzbK8HT27prBpFoWwZsyMkJanyq8zq8XvC1gp+juTBE3eU1hZgsT1MTn32ReR32CKsMacH9OFVQhqUBo6BkXOoYVcHXV/Dv9u60tnW9XeFAONW57NRUz9ppLmrD8HoyuX/L6OdlRXomuwMwh4kQ/H6TNrT1GZzMWXa3xQ97KRvA6oZ9wUR76uYgKwRiFn1kXV7rn2Icpxw2qSA0hjx2YoSBB1d9g1cYb5QZJpYJyta7mWzMGdq667cGqnU15mwOAuzZHTpVpNsvib1Km5NX0b9PsSnLxPDAXqYcyCU3ijn7v8G1eV/fyAyvcd3n1cuu5Nj3Spn4v+QGFrZIhQzOOLiMXrkQCleryq0u7MHJEkJ5f6zrP32eZPK1yVEGBxpqiYQIz51cPWAAM3/GE+y3BpqfySie9PJszS8XZ/gTtUG8DzR6urCkpryTTu+8EO4CquOTTCMfP0H5pxTMBYdK6zK4/yhA6wyntYHOA+TxOQZ1yN0tqClkr2c0ASdOvwgTlbMwD74f/CNavAIR0wuJ2i+YWN2rhPRnbRKovAMeHFaksayfJct4xyXPalk3Y01GKUaOTMwJeTdQBoelREX4sWWQBhmq5R7hygkjDnceQqjsu6Mb2NmYXOGS2/MoV0FKy7C4BqJOIdLQqOmQFARMoWqajTD+pyvTShe/VGKIKxgvNBZE5Qz90CA90JCfixEldK8K+lWGer6LaAFtOo2Du1ITWdnCOpewRIK+Px5/AT7Yom1CCYE+b7bLaerrxhfsXNYv/PYSxFL0XCQCCS5aah/KJjhK46KIkcK8Md64fxufo7lgk5+uJ8bdsc/WP/t2brrYZGzCQMWPE5v+YAug0kf2B1kLV77/vmwAliKG2yho1hf21fKOoYlTY39Ziz1YeERQGnv8lk8/rbLHAA757Spvvw08LzC5wNMKA9j6/1mK2YwLkjraP1emUQVWUMsT8WzcLxBb++jhiUGIBwnc70+NrG85Er7kAS3f0qz/OARpCoxY+c4qLwUIC+F3F4STmoYfgTouhaSEBxAnK0eM+/jAX3++FmoSTLJLO/TXyt5jN+USG7/30ygdZ61erZUZVvxupB81+hF7Gkc+vQZ83FUdiAgt15f4qFqjGFC1AK8ufxemYukGfiX+4TGgiQKsJKkQMUNJR
Source: global traffic	HTTP traffic detected: GET /bat.js HTTP/1.1Host: bat.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uxa/3ec15a83d6166.js HTTP/1.1Host: t.contentsquare.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /enroll-loyalty/assets/axios-CJFUd36b.js HTTP/1.1Host: all.accor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; incap_ses_1388_3039981=WwV9UFsZYQbcTBz5zCpDE0/kIWcAAAAAAlW7vDjSIvNuKK2ooaDNBg==; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; incap_ses_1237_3039981=RMkdawpcO0pafv9zF7UqEVDkIWcAAAAAOdDq+0nC/oeq6w4fyTL3Fg==; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjoiQUgiLCJyZXRhaW5lZG1lcmNoYW50aWQiOiJBSCJ9; incap_ses_965_3039981=q99Yd2XUwRILYtlqj15kDVLkIWcAAAAA3wW8EuVmSTOVbo8SRcNLVg==; rxVisitor=1730274389683JLIBD8T14271V8K1PF607REH7HAD6SU0; dtSa=-; incap_ses_951_3039981=GL4CVhbxPgx+DtlaoqEyDVbkIWcAAAAA0uuNvYfu1J2VDDucdA8ZtQ==; accorref=https://all.accor.com/; ___utmvc=L7y5BPoz0NfSoYOC4znrV9KYjL6ttdnjA1kWC2pXRsmqDcgLMhysXtRuiKOEpa/hb/rz0tnwJ8HzbK8HT27prBpFoWwZsyMkJanyq8zq8XvC1gp+juTBE3eU1hZgsT1MTn32ReR32CKsMacH9OFVQhqUBo6BkXOoYVcHXV/Dv9u60tnW9XeFAONW57NRUz9ppLmrD8HoyuX/L6OdlRXomuwMwh4kQ/H6TNrT1GZzMWXa3xQ97KRvA6oZ9wUR76uYgKwRiFn1kXV7rn2Icpxw2qSA0hjx2YoSBB1d9g1cYb5QZJpYJyta7mWzMGdq667cGqnU15mwOAuzZHTpVpNsvib1Km5NX0b9PsSnLxPDAXqYcyCU3ijn7v8G1eV/fyAyvcd3n1cuu5Nj3Spn4v+QGFrZIhQzOOLiMXrkQCleryq0u7MHJEkJ5f6zrP32eZPK1yVEGBxpqiYQIz51cPWAAM3/GE+y3BpqfySie9PJszS8XZ/gTtUG8DzR6urCkpryTTu+8EO4CquOTTCMfP0H5pxTMBYdK6zK4/yhA6wyntYHOA+TxOQZ1yN0tqClkr2c0ASdOvwgTlbMwD74f/CNavAIR0wuJ2i+YWN2rhPRnbRKovAMeHFaksayfJct4xyXPalk3Y01GKUaOTMwJeTdQBoelREX4sWWQBhmq5R7hygkjDnceQqjsu6Mb2NmYXOGS2/MoV0FKy7C4BqJOIdLQqOmQFARMoWqajTD+pyvTShe/VGKIKxgvNBZE5Qz90CA90JCfixEldK8K+lWGer6LaAFtOo2Du1ITWdnCOpewRIK+Px5/AT7Yom1CCYE+b7bLaerrxhfsXNYv/PYSxFL0XCQCCS5aah/KJjhK46KIkcK8Md64fxufo7lgk5+uJ8bdsc/WP/t2brrYZGzCQMWPE5v+YAug0kf2B1kLV77/vmwAliKG2yho1hf21fKOoYlTY39Ziz1YeERQGnv8lk8/rbLHAA757Spvvw08LzC5wNMKA9j6/1mK2YwLkjraP1emUQVWUMsT8WzcLxBb++jhiUGIBwnc70+NrG85Er7kAS3f0qz/OARpCoxY+c4qLwUIC+F3F4STmoYfgTouhaSEBxAnK0eM+/jAX3++FmoSTLJLO/TXyt5jN+USG7/30ygdZ61erZUZVvxupB81+hF7Gkc+vQZ83FUdiAgt15f4qFqjGFC1AK8ufxemYukGfiX+4TGgiQKsJKkQMUNJR155wd1v
Source: global traffic	HTTP traffic detected: GET /a/content/sling/servlets/ace/customer?language=en&cookieDomain=all.accor.com HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://all.accor.com/a/en/new-app-offer/app-download.html?source_caller=bulk&af_qr=true&shortlink=5m1nc8of&c=20241013_ALL_AppBonusingMobileLp&af_ad=QR_code_20241013_ALL_AppBonusingMobileLp&pid=QR_code&deep_link_value=accor%3A%2F%2Fsearch%2Foffer%3Fpage_id%3Dddc8e830-2fc5-4492-ae7f-a63574b202f4&af_adset=ENAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; incap_ses_1388_3039981=WwV9UFsZYQbcTBz5zCpDE0/kIWcAAAAAAlW7vDjSIvNuKK2ooaDNBg==; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; incap_ses_1237_3039981=RMkdawpcO0pafv9zF7UqEVDkIWcAAAAAOdDq+0nC/oeq6w4fyTL3Fg==; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjoiQUgiLCJyZXRhaW5lZG1lcmNoYW50aWQiOiJBSCJ9; incap_ses_965_3039981=q99Yd2XUwRILYtlqj15kDVLkIWcAAAAA3wW8EuVmSTOVbo8SRcNLVg==; rxVisitor=1730274389683JLIBD8T14271V8K1PF607REH7HAD6SU0; incap_ses_951_3039981=GL4CVhbxPgx+DtlaoqEyDVbkIWcAAAAA0uuNvYfu1J2VDDucdA8ZtQ==; accorref=https://all.accor.com/; ___utmvc=L7y5BPoz0NfSoYOC4znrV9KYjL6ttdnjA1kWC2pXRsmqDcgLMhysXtRuiKOEpa/hb/rz0tnwJ8HzbK8HT27prBpFoWwZsyMkJanyq8zq8XvC1gp+juTBE3eU1hZgsT1MTn32ReR32CKsMacH9OFVQhqUBo6BkXOoYVcHXV/Dv9u60tnW9XeFAONW57NRUz9ppLmrD8HoyuX/L6OdlRXomuwMwh4kQ/H6TNrT1GZzMWXa3xQ97KRvA6oZ9wUR76uYgKwRiFn1kXV7rn2Icpxw2qSA0hjx2YoSBB1d9g1cYb5QZJpYJyta7mWzMGdq667cGqnU15mwOAuzZHTpVpNsvib1Km5NX0b9PsSnLxPDAXqYcyCU3ijn7v8G1eV/fyAyvcd3n1cuu5Nj3Spn4v+QGFrZIhQzOOLiMXrkQCleryq0u7MHJEkJ5f6zrP32eZPK1yVEGBxpqiYQIz51cPWAAM3/GE+y3BpqfySie9PJszS8XZ/gTtUG8DzR6urCkpryTTu+8EO4CquOTTCMfP0H5pxTMBYdK6zK4/yhA6wyntYHOA+TxOQZ1yN0tqClkr2c0ASdOvwgTlbMwD74f/CNavAIR0wuJ2i+YWN2rhPRnbRKovAMeHFaksayfJct4xyXPalk3Y01GKUaOTMwJeTdQBoelREX4sWWQBhmq5R7hygkjDnceQqjsu6Mb2NmYXOGS2/MoV0FKy7C4BqJOIdLQqOmQFARMoWqajTD+pyvTShe/VGKIKxgv
Source: global traffic	HTTP traffic detected: GET /kameleoon.js HTTP/1.1Host: qchmhd61sj.kameleoon.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: W/"671f95a0-4ce4c"If-Modified-Since: Mon, 28 Oct 2024 13:46:08 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/v2/ktag.js?tid=KT-N2924-3EB HTTP/1.1Host: resources.xg4ken.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-SKWJ7883ZP&gtm=45je4as0v893732783z86262265za200zb6262265&_p=1730274382408&gcs=G100&gcd=13p3p3p3p7l1&npa=1&dma_cps=-&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&cid=252757357.1730274397&ecid=1403814047&ul=en-us&sr=1280x1024&_fplc=0&ur=US&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&frm=0&pscdl=denied&sst.rnd=325182944.1730274397&sst.ngs=1&sst.tft=1730274382408&sst.ude=0&ngs=1&_s=1&dl=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer.html&sid=1730274396&sct=1&seg=0&dt=20%25%20more%20Reward%20points%2C%20only%20on%20our%20app%E2%80%8B&tfd=22238&richsstsse HTTP/1.1Host: sgtm.accor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: org=evy; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjoiQUgiLCJyZXRhaW5lZG1lcmNoYW50aWQiOiJBSCJ9; rxVisitor=1730274389683JLIBD8T14271V8K1PF607REH7HAD6SU0; accorref=https://all.accor.com/; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+30+2024+03%3A46%3A35+GMT-0400+(Eastern+Daylight+Time)&version=202409.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&genVendors=V62%3A0%2CV37%3A0%2CV67%3A0%2CV38%3A0%2CV64%3A0%2CV58%3A0%2CV25%3A0%2CV26%3A0%2CV42%3A0%2CV9%3A0%2CV8%3A0%2CV27%3A0%2CV51%3A0%2CV39%3A0%2CV23%3A0%2CV55%3A0%2CV5%3A0%2CV34%3A0%2CV10%3A0%2CV53%3A0%2CV59%3A0%2CV74%3A0%2CV36%3A0%2CV49%3A0%2CV65%3A0%2CV19%3A0%2CV33%3A0%2CV57%3A0%2CV52%3A0%2CV48%3A0%2CV29%3A0%2CV17%3A0%2CV11%3A0%2CV56%3A0%2CV12%3A0%2CV72%3A0%2CV13%3A0%2CV41%3A0%2CV40%3A0%2CV68%3A0%2CV60%3A0%2CV50%3A0%2CV15%3A0%2CV54%3A0%2CV28%3A0%2CV30%3A0%2CV46%3A0%2CV4%3A0%2CV14%3A0%2CV61%3A0%2CV7%3A0%2CV45%3A0%2CV16%3A0%2CV32%3A0%2CV21%3A0%2CV69%3A0%2CV63%3A0%2CV73%3A0%2CV6%3A0%2CV18%3A0%2CV31%3A0%2CV44%3A0%2CV71%3A0%2CV43%3A0%2CV35%3A0%2CV47%3A0%2C&consentId=9ab4f1d3-b3a4-433f-a62e-3731c85af8dc&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0007%3A1%2CC0004%3A1%2CC0005%3A1%2CC0008%3A1%2CC0009%3A0&AwaitingReconsent=false; _evga_8b38={%22uuid%22:%22169349b27ef7e9cc%22}; _sfid_1a3a={%22anonymousId%22:%22169349b27ef7e9cc%22%2C%22consents%22:[]}; OCC_all.accor=fail; _gcl_au=1.1.461077611.1730274398; _ga_SKWJ7883ZP=GS1.1.1730274398.1.0.1730274398.0.0.648803893; _ga=GA1.1.895171141.1730274398; wzuid=b5a2466e192dc64131c; wzsid=6a735afb2d736721e45f; wzcnst=3%7C%7C1; wzcpq=%5B%7B%22u%22%3A
Source: global traffic	HTTP traffic detected: GET /b94aa70a4593f812b35d5a8922257b6f80ccf6aa708f58b8266f4ba917eb0e0e/resources/images/android-chrome-192x192.png HTTP/1.1Host: static-p46175-e229011.adobeaemcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/production/accorhotel-button-33db7e58f18a5aefd9fe80a87ec3b6ca.png HTTP/1.1Host: d6tizftlrpuof.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api2/event/accor?event=eyJpdGVtQWN0aW9uIjpudWxsLCJzb3VyY2UiOnsicGFnZVR5cGUiOiJkZWZhdWx0IiwibG9jYWxlIjoiZW5fVVMiLCJjb250ZW50Wm9uZXMiOltdLCJ1cmwiOiJodHRwczovL2FsbC5hY2Nvci5jb20vYS9lbi9uZXctYXBwLW9mZmVyLmh0bWwiLCJ1cmxSZWZlcnJlciI6IiIsImNoYW5uZWwiOiJXZWIiLCJiZWFjb25WZXJzaW9uIjoxNiwiY29uZmlnVmVyc2lvbiI6IjMzNiJ9LCJmbGFncyI6eyJwYWdlVmlldyI6dHJ1ZX0sInVzZXIiOnsiYXR0cmlidXRlcyI6eyJoYXNoZWRQbUlkIjpudWxsLCJwb2ludE9mU2FsZSI6InB1cyIsImlzQWxsTWVtYmVyIjpmYWxzZSwibG9nZ2VkSW4iOmZhbHNlLCJsYXN0UGFnZVZpc2l0ZWQiOiJodHRwczovL2FsbC5hY2Nvci5jb20vYS9lbi9uZXctYXBwLW9mZmVyLmh0bWwifSwiYW5vbklkIjoiMTY5MzQ5YjI3ZWY3ZTljYyJ9LCJwZXJmb3JtYW5jZSI6e30sImRlYnVnIjp7ImV4cGxhbmF0aW9ucyI6dHJ1ZX0sImNhdGFsb2ciOnt9LCJjb25zZW50cyI6W10sImFjY291bnQiOnt9LCJfdG9vbHNFdmVudExpbmtJZCI6IjcwNDEyMDAxMzIxMTg4ODYifQ%3D%3D HTTP/1.1Host: accorsa.germany-2.evergage.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBTGCORS=xkM9AUa/yjqhv+1PFMi8ttFeLBIzRRrqcUzGVgUfJfABeNRh72vI4L5P6LjXYLQZ40InjEeRMQMwi1dJ9KfqN2cHtY+uB45aVXisLxbQuzC0oKphUFjXomUYujd6aaa7n+thLoWD52vG0V2rj+Tkv+JNe5gcjFlQXcGMJzuhaVJxQ4ue7zI=
Source: global traffic	HTTP traffic detected: GET /assets/fonts/roboto/medium/roboto-medium.woff2 HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://all.accor.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://all.accor.com/a/en/new-app-offer/app-download.html?source_caller=bulk&af_qr=true&shortlink=5m1nc8of&c=20241013_ALL_AppBonusingMobileLp&af_ad=QR_code_20241013_ALL_AppBonusingMobileLp&pid=QR_code&deep_link_value=accor%3A%2F%2Fsearch%2Foffer%3Fpage_id%3Dddc8e830-2fc5-4492-ae7f-a63574b202f4&af_adset=ENAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; incap_ses_1388_3039981=WwV9UFsZYQbcTBz5zCpDE0/kIWcAAAAAAlW7vDjSIvNuKK2ooaDNBg==; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; incap_ses_1237_3039981=RMkdawpcO0pafv9zF7UqEVDkIWcAAAAAOdDq+0nC/oeq6w4fyTL3Fg==; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjoiQUgiLCJyZXRhaW5lZG1lcmNoYW50aWQiOiJBSCJ9; incap_ses_965_3039981=q99Yd2XUwRILYtlqj15kDVLkIWcAAAAA3wW8EuVmSTOVbo8SRcNLVg==; rxVisitor=1730274389683JLIBD8T14271V8K1PF607REH7HAD6SU0; dtSa=-; rxvt=1730276189890\|1730274389685; incap_ses_951_3039981=GL4CVhbxPgx+DtlaoqEyDVbkIWcAAAAA0uuNvYfu1J2VDDucdA8ZtQ==; dtPC=1$474389679_556h1vCNCMQNAQOSCAVCJKBVISVNPVVSHILTAR-0e0; accorref=https://all.accor.com/; ___utmvc=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
Source: global traffic	HTTP traffic detected: GET /api2/event/accor?event=eyJpdGVtQWN0aW9uIjpudWxsLCJzb3VyY2UiOnsicGFnZVR5cGUiOiJkZWZhdWx0IiwibG9jYWxlIjoiZW5fVVMiLCJjb250ZW50Wm9uZXMiOltdLCJ1cmwiOiJodHRwczovL2FsbC5hY2Nvci5jb20vYS9lbi9uZXctYXBwLW9mZmVyL2FwcC1kb3dubG9hZC5odG1sP3NvdXJjZV9jYWxsZXI9YnVsayZhZl9xcj10cnVlJnNob3J0bGluaz01bTFuYzhvZiZjPTIwMjQxMDEzX0FMTF9BcHBCb251c2luZ01vYmlsZUxwJmFmX2FkPVFSX2NvZGVfMjAyNDEwMTNfQUxMX0FwcEJvbnVzaW5nTW9iaWxlTHAmcGlkPVFSX2NvZGUmZGVlcF9saW5rX3ZhbHVlPWFjY29yJTNBJTJGJTJGc2VhcmNoJTJGb2ZmZXIlM0ZwYWdlX2lkJTNEZGRjOGU4MzAtMmZjNS00NDkyLWFlN2YtYTYzNTc0YjIwMmY0JmFmX2Fkc2V0PUVOIiwidXJsUmVmZXJyZXIiOiIiLCJjaGFubmVsIjoiV2ViIiwiYmVhY29uVmVyc2lvbiI6MTYsImNvbmZpZ1ZlcnNpb24iOiIzMzYifSwiZmxhZ3MiOnsicGFnZVZpZXciOnRydWV9LCJ1c2VyIjp7ImFub25JZCI6IjE2OTM0OWIyN2VmN2U5Y2MifSwicGVyZm9ybWFuY2UiOnt9LCJkZWJ1ZyI6eyJleHBsYW5hdGlvbnMiOnRydWV9LCJjYXRhbG9nIjp7fSwiY29uc2VudHMiOltdLCJhY2NvdW50Ijp7fSwiX3Rvb2xzRXZlbnRMaW5rSWQiOiIzNzU3NDUwNzE5MjEwMTUzNiJ9 HTTP/1.1Host: accorsa.germany-2.evergage.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBTGCORS=xkM9AUa/yjqhv+1PFMi8ttFeLBIzRRrqcUzGVgUfJfABeNRh72vI4L5P6LjXYLQZ40InjEeRMQMwi1dJ9KfqN2cHtY+uB45aVXisLxbQuzC0oKphUFjXomUYujd6aaa7n+thLoWD52vG0V2rj+Tkv+JNe5gcjFlQXcGMJzuhaVJxQ4ue7zI=
Source: global traffic	HTTP traffic detected: GET /assets/fonts/roboto/bold/roboto-bold.woff2 HTTP/1.1Host: all.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://all.accor.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://all.accor.com/a/en/new-app-offer/app-download.html?source_caller=bulk&af_qr=true&shortlink=5m1nc8of&c=20241013_ALL_AppBonusingMobileLp&af_ad=QR_code_20241013_ALL_AppBonusingMobileLp&pid=QR_code&deep_link_value=accor%3A%2F%2Fsearch%2Foffer%3Fpage_id%3Dddc8e830-2fc5-4492-ae7f-a63574b202f4&af_adset=ENAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; incap_ses_1388_3039981=WwV9UFsZYQbcTBz5zCpDE0/kIWcAAAAAAlW7vDjSIvNuKK2ooaDNBg==; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; incap_ses_1237_3039981=RMkdawpcO0pafv9zF7UqEVDkIWcAAAAAOdDq+0nC/oeq6w4fyTL3Fg==; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjoiQUgiLCJyZXRhaW5lZG1lcmNoYW50aWQiOiJBSCJ9; incap_ses_965_3039981=q99Yd2XUwRILYtlqj15kDVLkIWcAAAAA3wW8EuVmSTOVbo8SRcNLVg==; rxVisitor=1730274389683JLIBD8T14271V8K1PF607REH7HAD6SU0; dtSa=-; rxvt=1730276189890\|1730274389685; incap_ses_951_3039981=GL4CVhbxPgx+DtlaoqEyDVbkIWcAAAAA0uuNvYfu1J2VDDucdA8ZtQ==; dtPC=1$474389679_556h1vCNCMQNAQOSCAVCJKBVISVNPVVSHILTAR-0e0; accorref=https://all.accor.com/; ___utmvc=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
Source: global traffic	HTTP traffic detected: GET /b94aa70a4593f812b35d5a8922257b6f80ccf6aa708f58b8266f4ba917eb0e0e/resources/images/android-chrome-512x512.png HTTP/1.1Host: static-p46175-e229011.adobeaemcloud.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uwt.js HTTP/1.1Host: static.ads-twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /enroll-loyalty/assets/verifyEnroll-D5kC1PyP.js HTTP/1.1Host: all.accor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; incap_ses_1388_3039981=WwV9UFsZYQbcTBz5zCpDE0/kIWcAAAAAAlW7vDjSIvNuKK2ooaDNBg==; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; incap_ses_1237_3039981=RMkdawpcO0pafv9zF7UqEVDkIWcAAAAAOdDq+0nC/oeq6w4fyTL3Fg==; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjoiQUgiLCJyZXRhaW5lZG1lcmNoYW50aWQiOiJBSCJ9; incap_ses_965_3039981=q99Yd2XUwRILYtlqj15kDVLkIWcAAAAA3wW8EuVmSTOVbo8SRcNLVg==; rxVisitor=1730274389683JLIBD8T14271V8K1PF607REH7HAD6SU0; dtSa=-; incap_ses_951_3039981=GL4CVhbxPgx+DtlaoqEyDVbkIWcAAAAA0uuNvYfu1J2VDDucdA8ZtQ==; accorref=https://all.accor.com/; ___utmvc=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
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-SKWJ7883ZP&gtm=45je4as0v893732783z86262265za200zb6262265&_p=1730274389842&gcs=G111&gcd=13r3r3r3r7l1&npa=1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&cid=895171141.1730274398&ecid=648803893&ul=en-us&sr=1280x1024&_fplc=0&ur=US&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&frm=0&pscdl=noapi&sst.rnd=1204522180.1730274398&sst.ngs=1&sst.tft=1730274389842&sst.ude=0&ngs=1&_s=1&dl=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&sid=1730274398&sct=1&seg=0&dt=App%20Download&tfd=13600&richsstsse HTTP/1.1Host: sgtm.accor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: org=evy; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjoiQUgiLCJyZXRhaW5lZG1lcmNoYW50aWQiOiJBSCJ9; rxVisitor=1730274389683JLIBD8T14271V8K1PF607REH7HAD6SU0; accorref=https://all.accor.com/; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+30+2024+03%3A46%3A35+GMT-0400+(Eastern+Daylight+Time)&version=202409.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&genVendors=V62%3A0%2CV37%3A0%2CV67%3A0%2CV38%3A0%2CV64%3A0%2CV58%3A0%2CV25%3A0%2CV26%3A0%2CV42%3A0%2CV9%3A0%2CV8%3A0%2CV27%3A0%2CV51%3A0%2CV39%3A0%2CV23%3A0%2CV55%3A0%2CV5%3A0%2CV34%3A0%2CV10%3A0%2CV53%3A0%2CV59%3A0%2CV74%3A0%2CV36%3A0%2CV49%3A0%2CV65%3A0%2CV19%3A0%2CV33%3A0%2CV57%3A0%2CV52%3A0%2CV48%3A0%2CV29%3A0%2CV17%3A0%2CV11%3A0%2CV56%3A0%2CV12%3A0%2CV72%3A0%2CV13%3A0%2CV41%3A0%2CV40%3A0%2CV68%3A0%2CV60%3A0%2CV50%3A0%2CV15%3A0%2CV54%3A0%2CV28%3A0%2CV30%3A0%2CV46%3A0%2CV4%3A0%2CV14%3A0%2CV61%3A0%2CV7%3A0%2CV45%3A0%2CV16%3A0%2CV32%3A0%2CV21%3A0%2CV69%3A0%2CV63%3A0%2CV73%3A0%2CV6%3A0%2CV18%3A0%2CV31%3A0%2CV44%3A0%2CV71%3A0%2CV43%3A0%2CV35%3A0%2CV47%3A0%2C&consentId=9ab4f1d3-b3a4-433f-a62e-3731c85af8dc&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0007%3A1%2CC0004%3A1%2CC0005%3A1%2CC0008%3A1%2CC0009%3A0&AwaitingReconsent=false; _evga_8b38={%22uuid%22:%22169349b27ef7e9cc%22}; _sfid_1a3a={%22anonymousId%22:%22169349b27ef7e9cc%22%2C%22consents%22:[]
Source: global traffic	HTTP traffic detected: GET /rb_80be963f-a859-4808-9b2a-ceb8d44df738?type=js3&sn=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1&svrid=1&flavor=post&vi=CNCMQNAQOSCAVCJKBVISVNPVVSHILTAR-0&modifiedSince=1729814722355&rf=https%3A%2F%2Fall.accor.com%2Fenroll-loyalty%2Fcheck-authent.html%3FappId%3Dall.accor%26error_description%3DAuthentication%2Bis%2Brequired.%26state%3Df3560ed2a8c46af4199ef8%26error%3Dlogin_required%23.&bp=3&app=0dae2710ec98cad4&crc=1199059436&en=85aac0bj&end=1 HTTP/1.1Host: all.accor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; incap_ses_1388_3039981=WwV9UFsZYQbcTBz5zCpDE0/kIWcAAAAAAlW7vDjSIvNuKK2ooaDNBg==; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; incap_ses_1237_3039981=RMkdawpcO0pafv9zF7UqEVDkIWcAAAAAOdDq+0nC/oeq6w4fyTL3Fg==; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjoiQUgiLCJyZXRhaW5lZG1lcmNoYW50aWQiOiJBSCJ9; incap_ses_965_3039981=q99Yd2XUwRILYtlqj15kDVLkIWcAAAAA3wW8EuVmSTOVbo8SRcNLVg==; rxVisitor=1730274389683JLIBD8T14271V8K1PF607REH7HAD6SU0; incap_ses_951_3039981=GL4CVhbxPgx+DtlaoqEyDVbkIWcAAAAA0uuNvYfu1J2VDDucdA8ZtQ==; accorref=https://all.accor.com/; ___utmvc=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
Source: global traffic	HTTP traffic detected: GET /enroll-loyalty/assets/index-Czu5RiSy.js HTTP/1.1Host: all.accor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; incap_ses_1388_3039981=WwV9UFsZYQbcTBz5zCpDE0/kIWcAAAAAAlW7vDjSIvNuKK2ooaDNBg==; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; incap_ses_1237_3039981=RMkdawpcO0pafv9zF7UqEVDkIWcAAAAAOdDq+0nC/oeq6w4fyTL3Fg==; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjoiQUgiLCJyZXRhaW5lZG1lcmNoYW50aWQiOiJBSCJ9; incap_ses_965_3039981=q99Yd2XUwRILYtlqj15kDVLkIWcAAAAA3wW8EuVmSTOVbo8SRcNLVg==; rxVisitor=1730274389683JLIBD8T14271V8K1PF607REH7HAD6SU0; incap_ses_951_3039981=GL4CVhbxPgx+DtlaoqEyDVbkIWcAAAAA0uuNvYfu1J2VDDucdA8ZtQ==; accorref=https://all.accor.com/; ___utmvc=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
Source: global traffic	HTTP traffic detected: GET /enroll-loyalty/assets/index-BJwiwBAj.js HTTP/1.1Host: all.accor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; incap_ses_1388_3039981=WwV9UFsZYQbcTBz5zCpDE0/kIWcAAAAAAlW7vDjSIvNuKK2ooaDNBg==; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; incap_ses_1237_3039981=RMkdawpcO0pafv9zF7UqEVDkIWcAAAAAOdDq+0nC/oeq6w4fyTL3Fg==; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjoiQUgiLCJyZXRhaW5lZG1lcmNoYW50aWQiOiJBSCJ9; incap_ses_965_3039981=q99Yd2XUwRILYtlqj15kDVLkIWcAAAAA3wW8EuVmSTOVbo8SRcNLVg==; rxVisitor=1730274389683JLIBD8T14271V8K1PF607REH7HAD6SU0; incap_ses_951_3039981=GL4CVhbxPgx+DtlaoqEyDVbkIWcAAAAA0uuNvYfu1J2VDDucdA8ZtQ==; accorref=https://all.accor.com/; ___utmvc=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
Source: global traffic	HTTP traffic detected: GET /enroll-loyalty/assets/index-CB71MQO2.js HTTP/1.1Host: all.accor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; incap_ses_1388_3039981=WwV9UFsZYQbcTBz5zCpDE0/kIWcAAAAAAlW7vDjSIvNuKK2ooaDNBg==; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; incap_ses_1237_3039981=RMkdawpcO0pafv9zF7UqEVDkIWcAAAAAOdDq+0nC/oeq6w4fyTL3Fg==; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjoiQUgiLCJyZXRhaW5lZG1lcmNoYW50aWQiOiJBSCJ9; incap_ses_965_3039981=q99Yd2XUwRILYtlqj15kDVLkIWcAAAAA3wW8EuVmSTOVbo8SRcNLVg==; rxVisitor=1730274389683JLIBD8T14271V8K1PF607REH7HAD6SU0; incap_ses_951_3039981=GL4CVhbxPgx+DtlaoqEyDVbkIWcAAAAA0uuNvYfu1J2VDDucdA8ZtQ==; accorref=https://all.accor.com/; ___utmvc=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
Source: global traffic	HTTP traffic detected: GET /b94aa70a4593f812b35d5a8922257b6f80ccf6aa708f58b8266f4ba917eb0e0e/resources/images/favicon-32x32.png HTTP/1.1Host: static-p46175-e229011.adobeaemcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js3/taevents-c.js HTTP/1.1Host: static.tacdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scevent.min.js HTTP/1.1Host: sc-static.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/tkrc.js HTTP/1.1Host: cdn.tkrconnector.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/bootstrap.min.js HTTP/1.1Host: via.batch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /NCyIsbQv2bl35xALaGlJ.js HTTP/1.1Host: tags.creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/801297014?random=1730274399996&cv=11&fst=1730274399996&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4as0v9104227775z8812226527za200zb812226527&gcd=13r3r3r3r5l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&hn=www.googleadservices.com&frm=0&tiba=App%20Download&npa=0&pscdl=noapi&auid=461077611.1730274398&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/11264248697?random=1730274400030&cv=11&fst=1730274400030&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4as0v9104227775z8812226527za200zb812226527&gcd=13r3r3r3r5l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&hn=www.googleadservices.com&frm=0&tiba=App%20Download&npa=0&pscdl=noapi&auid=461077611.1730274398&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/11264017752?random=1730274400095&cv=11&fst=1730274400095&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4as0v9104227775z8812226527za200zb812226527&gcd=13r3r3r3r5l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&hn=www.googleadservices.com&frm=0&tiba=App%20Download&npa=0&pscdl=noapi&auid=461077611.1730274398&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/11263996687?random=1730274400168&cv=11&fst=1730274400168&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4as0v9104227775z8812226527za200zb812226527&gcd=13r3r3r3r5l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&hn=www.googleadservices.com&frm=0&tiba=App%20Download&npa=0&pscdl=noapi&auid=461077611.1730274398&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/11264012497?random=1730274400127&cv=11&fst=1730274400127&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4as0v9104227775z8812226527za200zb812226527&gcd=13r3r3r3r5l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&hn=www.googleadservices.com&frm=0&tiba=App%20Download&npa=0&pscdl=noapi&auid=461077611.1730274398&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/11264275592?random=1730274400316&cv=11&fst=1730274400316&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4as0v9104227775z8812226527za200zb812226527&gcd=13r3r3r3r5l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&hn=www.googleadservices.com&frm=0&tiba=App%20Download&npa=0&pscdl=noapi&auid=461077611.1730274398&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /up_loader.1.1.0.js HTTP/1.1Host: js.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /quant.js HTTP/1.1Host: secure.quantserve.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /kameleoon.js HTTP/1.1Host: qchmhd61sj.kameleoon.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: W/"671f95a0-4ce4c"If-Modified-Since: Mon, 28 Oct 2024 13:46:08 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2a22008a1a0b.js?lv=1 HTTP/1.1Host: w.usabilla.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "1b9aec27b0e95c222a3fd2afd80670e4"
Source: global traffic	HTTP traffic detected: GET /geolocation HTTP/1.1Host: data.kameleoon.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://all.accor.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b94aa70a4593f812b35d5a8922257b6f80ccf6aa708f58b8266f4ba917eb0e0e/resources/images/favicon-16x16.png HTTP/1.1Host: static-p46175-e229011.adobeaemcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p/action/148023208.js HTTP/1.1Host: bat.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /config/com/5b7854ae-f9c6-433a-ba0a-2ec9f24a5aa4.json?v=3.33.0-2409301510 HTTP/1.1Host: tr.snapchat.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://all.accor.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cm/i?pid=5b7854ae-f9c6-433a-ba0a-2ec9f24a5aa4&u_scsid=04b1e948-de78-4ce3-93d8-b14769db3d22&u_sclid=2a38f09e-0999-4df0-acd1-1287a34e1c62 HTTP/1.1Host: tr.snapchat.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /audiences/segments.js HTTP/1.1Host: qchmhd61sj.kameleoon.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://all.accor.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p/action/343097615.js HTTP/1.1Host: bat.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/11264201385?random=1730274400383&cv=11&fst=1730274400383&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4as0v9104227775z8812226527za200zb812226527&gcd=13r3r3r3r5l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&hn=www.googleadservices.com&frm=0&tiba=App%20Download&npa=0&pscdl=noapi&auid=461077611.1730274398&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/11264198074?random=1730274400575&cv=11&fst=1730274400575&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4as0v9104227775z8812226527za200zb812226527&gcd=13r3r3r3r5l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&hn=www.googleadservices.com&frm=0&tiba=App%20Download&npa=0&pscdl=noapi&auid=461077611.1730274398&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /visit/visitor?siteCode=qchmhd61sj&currentVisit=true&format=ENGINE&maxNumberPreviousVisits=25&version=2&visitorCode=52gbpzbkoweec5rn HTTP/1.1Host: data.kameleoon.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://all.accor.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /geolocation HTTP/1.1Host: data.kameleoon.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://all.accor.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b94aa70a4593f812b35d5a8922257b6f80ccf6aa708f58b8266f4ba917eb0e0e/resources/images/android-chrome-192x192.png HTTP/1.1Host: static-p46175-e229011.adobeaemcloud.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="13be1eaa0f62d551"
Source: global traffic	HTTP traffic detected: GET /bat.js HTTP/1.1Host: bat.bing.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /signals/config/649915528506999?v=2.9.174&r=stable&domain=all.accor.com&hme=ead923021ccd3483ef3b9b04703d0a78b943fbdc01e8d7cec21c5059f1f4a5e9&ex_m=70%2C121%2C107%2C111%2C61%2C4%2C100%2C69%2C16%2C97%2C89%2C51%2C54%2C172%2C175%2C187%2C183%2C184%2C186%2C29%2C101%2C53%2C77%2C185%2C167%2C170%2C180%2C181%2C188%2C131%2C41%2C189%2C190%2C34%2C143%2C15%2C50%2C194%2C193%2C133%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C93%2C17%2C14%2C96%2C92%2C91%2C108%2C52%2C110%2C39%2C109%2C30%2C94%2C26%2C168%2C171%2C140%2C86%2C56%2C84%2C33%2C73%2C0%2C95%2C32%2C28%2C82%2C83%2C88%2C47%2C46%2C87%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C102%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C104%2C103%2C105%2C98%2C10%2C20%2C3%2C38%2C74%2C19%2C5%2C90%2C81%2C44%2C35%2C85%2C2%2C36%2C63%2C42%2C106%2C45%2C79%2C68%2C112%2C60%2C59%2C31%2C99%2C58%2C55%2C49%2C78%2C72%2C24%2C113 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/v2/ktag.js?tid=KT-N2924-3EB HTTP/1.1Host: resources.xg4ken.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/801297014/?random=1730274399996&cv=11&fst=1730274399996&bg=ffffff&guid=ON&async=1&gtm=45be4as0v9104227775z8812226527za200zb812226527&gcd=13r3r3r3r5l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&hn=www.googleadservices.com&frm=0&tiba=App%20Download&npa=0&pscdl=noapi&auid=461077611.1730274398&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/11264248697/?random=1730274400030&cv=11&fst=1730274400030&bg=ffffff&guid=ON&async=1&gtm=45be4as0v9104227775z8812226527za200zb812226527&gcd=13r3r3r3r5l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&hn=www.googleadservices.com&frm=0&tiba=App%20Download&npa=0&pscdl=noapi&auid=461077611.1730274398&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/11264017752/?random=1730274400095&cv=11&fst=1730274400095&bg=ffffff&guid=ON&async=1&gtm=45be4as0v9104227775z8812226527za200zb812226527&gcd=13r3r3r3r5l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&hn=www.googleadservices.com&frm=0&tiba=App%20Download&npa=0&pscdl=noapi&auid=461077611.1730274398&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/11264012497/?random=1730274400127&cv=11&fst=1730274400127&bg=ffffff&guid=ON&async=1&gtm=45be4as0v9104227775z8812226527za200zb812226527&gcd=13r3r3r3r5l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&hn=www.googleadservices.com&frm=0&tiba=App%20Download&npa=0&pscdl=noapi&auid=461077611.1730274398&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/11263996687/?random=1730274400168&cv=11&fst=1730274400168&bg=ffffff&guid=ON&async=1&gtm=45be4as0v9104227775z8812226527za200zb812226527&gcd=13r3r3r3r5l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&hn=www.googleadservices.com&frm=0&tiba=App%20Download&npa=0&pscdl=noapi&auid=461077611.1730274398&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/11264275592/?random=1730274400316&cv=11&fst=1730274400316&bg=ffffff&guid=ON&async=1&gtm=45be4as0v9104227775z8812226527za200zb812226527&gcd=13r3r3r3r5l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&hn=www.googleadservices.com&frm=0&tiba=App%20Download&npa=0&pscdl=noapi&auid=461077611.1730274398&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /uxa/3ec15a83d6166.js HTTP/1.1Host: t.contentsquare.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/production/accorhotel-button-33db7e58f18a5aefd9fe80a87ec3b6ca.png HTTP/1.1Host: d6tizftlrpuof.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /visit/visitor?siteCode=qchmhd61sj&currentVisit=true&format=ENGINE&maxNumberPreviousVisits=25&version=2&visitorCode=6xp0ecmbb6q2q5jb HTTP/1.1Host: data.kameleoon.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://all.accor.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /manifest.json HTTP/1.1Host: via.batch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://all.accor.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/up?adv=pio09oh&ref=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&upid=ug5iyox&upv=1.1.0&v=undefined&vf=EUR&orderid=undefined&td1=undefined&td2=undefined&paapi=1 HTTP/1.1Host: insight.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js3/taevents-c.js HTTP/1.1Host: static.tacdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b94aa70a4593f812b35d5a8922257b6f80ccf6aa708f58b8266f4ba917eb0e0e/resources/images/favicon-32x32.png HTTP/1.1Host: static-p46175-e229011.adobeaemcloud.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="13be1eaa0f62d551"
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-GV11FT46S8&gtm=45je4as0v886152357z86262265za200zb6262265&_p=1730274389842&gcs=G111&gcd=13r3r3r3r7l1&npa=1&dma=0&tag_exp=101533421~101823848~101878899~101878944~101925629&cid=895171141.1730274398&ecid=2049517647&ul=en-us&sr=1280x1024&ur=US&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&frm=0&pscdl=noapi&sst.rnd=1204522180.1730274398&sst.ngs=1&sst.tft=1730274389842&sst.ude=0&ngs=1&_s=1&dl=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&sid=1730274400&sct=1&seg=0&dt=App%20Download&tfd=16415&richsstsse HTTP/1.1Host: sgtm.accor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: org=evy; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjoiQUgiLCJyZXRhaW5lZG1lcmNoYW50aWQiOiJBSCJ9; rxVisitor=1730274389683JLIBD8T14271V8K1PF607REH7HAD6SU0; accorref=https://all.accor.com/; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+30+2024+03%3A46%3A35+GMT-0400+(Eastern+Daylight+Time)&version=202409.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&genVendors=V62%3A0%2CV37%3A0%2CV67%3A0%2CV38%3A0%2CV64%3A0%2CV58%3A0%2CV25%3A0%2CV26%3A0%2CV42%3A0%2CV9%3A0%2CV8%3A0%2CV27%3A0%2CV51%3A0%2CV39%3A0%2CV23%3A0%2CV55%3A0%2CV5%3A0%2CV34%3A0%2CV10%3A0%2CV53%3A0%2CV59%3A0%2CV74%3A0%2CV36%3A0%2CV49%3A0%2CV65%3A0%2CV19%3A0%2CV33%3A0%2CV57%3A0%2CV52%3A0%2CV48%3A0%2CV29%3A0%2CV17%3A0%2CV11%3A0%2CV56%3A0%2CV12%3A0%2CV72%3A0%2CV13%3A0%2CV41%3A0%2CV40%3A0%2CV68%3A0%2CV60%3A0%2CV50%3A0%2CV15%3A0%2CV54%3A0%2CV28%3A0%2CV30%3A0%2CV46%3A0%2CV4%3A0%2CV14%3A0%2CV61%3A0%2CV7%3A0%2CV45%3A0%2CV16%3A0%2CV32%3A0%2CV21%3A0%2CV69%3A0%2CV63%3A0%2CV73%3A0%2CV6%3A0%2CV18%3A0%2CV31%3A0%2CV44%3A0%2CV71%3A0%2CV43%3A0%2CV35%3A0%2CV47%3A0%2C&consentId=9ab4f1d3-b3a4-433f-a62e-3731c85af8dc&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0007%3A1%2CC0004%3A1%2CC0005%3A1%2CC0008%3A1%2CC0009%3A0&AwaitingReconsent=false; _evga_8b38={%22uuid%22:%22169349b27ef7e9cc%22}; _sfid_1a3a={%22anonymousId%22:%22169349b27ef7e9cc%22%2C%22consents%22:[]}; OCC_
Source: global traffic	HTTP traffic detected: GET /b94aa70a4593f812b35d5a8922257b6f80ccf6aa708f58b8266f4ba917eb0e0e/resources/images/favicon-16x16.png HTTP/1.1Host: static-p46175-e229011.adobeaemcloud.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="13be1eaa0f62d551"
Source: global traffic	HTTP traffic detected: GET /config/com/5b7854ae-f9c6-433a-ba0a-2ec9f24a5aa4.json?v=3.33.0-2409301510 HTTP/1.1Host: tr.snapchat.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sc_at=v2\|H4sIAAAAAAAAAAXBgRUAIAQFwIm8R6mvcUSmMHx3ietzxaEKN9KUTf5ukJhCRmShrFsweUCVV/MHum7CyDIAAAA=
Source: global traffic	HTTP traffic detected: GET /audiences/segments.js HTTP/1.1Host: qchmhd61sj.kameleoon.euConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scevent.min.js HTTP/1.1Host: sc-static.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tr.snapchat.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-AB=cc8f398e6c2d4b84b15908c5e6ccf9a3
Source: global traffic	HTTP traffic detected: GET /uwt.js HTTP/1.1Host: static.ads-twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scevent.min.js HTTP/1.1Host: sc-static.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-AB=cc8f398e6c2d4b84b15908c5e6ccf9a3
Source: global traffic	HTTP traffic detected: GET /p/action/148023208.js HTTP/1.1Host: bat.bing.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p/action/343097615.js HTTP/1.1Host: bat.bing.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/upb/?adv=pio09oh&ref=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&upid=ug5iyox&upv=1.1.0&v=undefined&vf=EUR&orderid=undefined&td1=undefined&td2=undefined&paapi=1 HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=6ea0385f-adb9-4a46-83a3-698c78b0a161
Source: global traffic	HTTP traffic detected: GET /2a22008a1a0b.js?lv=1 HTTP/1.1Host: w.usabilla.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "1b9aec27b0e95c222a3fd2afd80670e4"
Source: global traffic	HTTP traffic detected: GET /quant.js HTTP/1.1Host: secure.quantserve.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/bootstrap.min.js HTTP/1.1Host: via.batch.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /NCyIsbQv2bl35xALaGlJ.js HTTP/1.1Host: tags.creativecdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: g=HSB0C00acqFu6m0pKmIe_1730274406977
Source: global traffic	HTTP traffic detected: GET /up_loader.1.1.0.js HTTP/1.1Host: js.adsrvr.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /manifest.json HTTP/1.1Host: via.batch.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /visit/visitor?siteCode=qchmhd61sj&currentVisit=true&format=ENGINE&maxNumberPreviousVisits=25&version=2&visitorCode=6xp0ecmbb6q2q5jb HTTP/1.1Host: data.kameleoon.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /quota?ct=0 HTTP/1.1Host: q-aeu1.contentsquare.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /visit/visitor?siteCode=qchmhd61sj&currentVisit=true&format=ENGINE&maxNumberPreviousVisits=25&version=2&visitorCode=52gbpzbkoweec5rn HTTP/1.1Host: data.kameleoon.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/11264012497/?random=1730274400127&cv=11&fst=1730274400127&bg=ffffff&guid=ON&async=1&gtm=45be4as0v9104227775z8812226527za200zb812226527&gcd=13r3r3r3r5l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&hn=www.googleadservices.com&frm=0&tiba=App%20Download&npa=0&pscdl=noapi&auid=461077611.1730274398&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUk-GthnzPvb098UXYhPYDVCOk7cNdBR-Rm4NMJ6gbi_my8vJirra2IwQCQL
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/11264275592/?random=1730274400316&cv=11&fst=1730274400316&bg=ffffff&guid=ON&async=1&gtm=45be4as0v9104227775z8812226527za200zb812226527&gcd=13r3r3r3r5l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&hn=www.googleadservices.com&frm=0&tiba=App%20Download&npa=0&pscdl=noapi&auid=461077611.1730274398&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUk-GthnzPvb098UXYhPYDVCOk7cNdBR-Rm4NMJ6gbi_my8vJirra2IwQCQL
Source: global traffic	HTTP traffic detected: GET /js/tkrc.js HTTP/1.1Host: cdn.tkrconnector.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/11263996687/?random=1730274400168&cv=11&fst=1730274400168&bg=ffffff&guid=ON&async=1&gtm=45be4as0v9104227775z8812226527za200zb812226527&gcd=13r3r3r3r5l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&hn=www.googleadservices.com&frm=0&tiba=App%20Download&npa=0&pscdl=noapi&auid=461077611.1730274398&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUk-GthnzPvb098UXYhPYDVCOk7cNdBR-Rm4NMJ6gbi_my8vJirra2IwQCQL
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/11264248697/?random=1730274400030&cv=11&fst=1730274400030&bg=ffffff&guid=ON&async=1&gtm=45be4as0v9104227775z8812226527za200zb812226527&gcd=13r3r3r3r5l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&hn=www.googleadservices.com&frm=0&tiba=App%20Download&npa=0&pscdl=noapi&auid=461077611.1730274398&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUk-GthnzPvb098UXYhPYDVCOk7cNdBR-Rm4NMJ6gbi_my8vJirra2IwQCQL
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/11264017752/?random=1730274400095&cv=11&fst=1730274400095&bg=ffffff&guid=ON&async=1&gtm=45be4as0v9104227775z8812226527za200zb812226527&gcd=13r3r3r3r5l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&hn=www.googleadservices.com&frm=0&tiba=App%20Download&npa=0&pscdl=noapi&auid=461077611.1730274398&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUk-GthnzPvb098UXYhPYDVCOk7cNdBR-Rm4NMJ6gbi_my8vJirra2IwQCQL
Source: global traffic	HTTP traffic detected: GET /exist?v=15.26.2&pid=153&pn=1&sn=1&uu=dbd80ae3-fdc5-a6bd-b3db-8d57cd4aa2a9 HTTP/1.1Host: srm.ba.contentsquare.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/801297014/?random=1730274399996&cv=11&fst=1730274399996&bg=ffffff&guid=ON&async=1&gtm=45be4as0v9104227775z8812226527za200zb812226527&gcd=13r3r3r3r5l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&hn=www.googleadservices.com&frm=0&tiba=App%20Download&npa=0&pscdl=noapi&auid=461077611.1730274398&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUk-GthnzPvb098UXYhPYDVCOk7cNdBR-Rm4NMJ6gbi_my8vJirra2IwQCQL
Source: global traffic	HTTP traffic detected: GET /v2/recording?rt=5%2C7&rst=1730274401359&let=1730274403188&v=15.26.2&pid=153&pn=1&sn=1&uu=dbd80ae3-fdc5-a6bd-b3db-8d57cd4aa2a9&ri=1&ct=2 HTTP/1.1Host: k-aeu1.contentsquare.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/11264201385/?random=1730274400383&cv=11&fst=1730274400383&bg=ffffff&guid=ON&async=1&gtm=45be4as0v9104227775z8812226527za200zb812226527&gcd=13r3r3r3r5l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&hn=www.googleadservices.com&frm=0&tiba=App%20Download&npa=0&pscdl=noapi&auid=461077611.1730274398&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUk-GthnzPvb098UXYhPYDVCOk7cNdBR-Rm4NMJ6gbi_my8vJirra2IwQCQL
Source: global traffic	HTTP traffic detected: GET /signals/config/649915528506999?v=2.9.174&r=stable&domain=all.accor.com&hme=ead923021ccd3483ef3b9b04703d0a78b943fbdc01e8d7cec21c5059f1f4a5e9&ex_m=70%2C121%2C107%2C111%2C61%2C4%2C100%2C69%2C16%2C97%2C89%2C51%2C54%2C172%2C175%2C187%2C183%2C184%2C186%2C29%2C101%2C53%2C77%2C185%2C167%2C170%2C180%2C181%2C188%2C131%2C41%2C189%2C190%2C34%2C143%2C15%2C50%2C194%2C193%2C133%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C93%2C17%2C14%2C96%2C92%2C91%2C108%2C52%2C110%2C39%2C109%2C30%2C94%2C26%2C168%2C171%2C140%2C86%2C56%2C84%2C33%2C73%2C0%2C95%2C32%2C28%2C82%2C83%2C88%2C47%2C46%2C87%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C102%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C104%2C103%2C105%2C98%2C10%2C20%2C3%2C38%2C74%2C19%2C5%2C90%2C81%2C44%2C35%2C85%2C2%2C36%2C63%2C42%2C106%2C45%2C79%2C68%2C112%2C60%2C59%2C31%2C99%2C58%2C55%2C49%2C78%2C72%2C24%2C113 HTTP/1.1Host: connect.facebook.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/11264198074/?random=1730274400575&cv=11&fst=1730274400575&bg=ffffff&guid=ON&async=1&gtm=45be4as0v9104227775z8812226527za200zb812226527&gcd=13r3r3r3r5l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&hn=www.googleadservices.com&frm=0&tiba=App%20Download&npa=0&pscdl=noapi&auid=461077611.1730274398&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUk-GthnzPvb098UXYhPYDVCOk7cNdBR-Rm4NMJ6gbi_my8vJirra2IwQCQL
Source: global traffic	HTTP traffic detected: GET /pageview?ex=&dt=2236&pvt=n&cvars=%7B%221%22%3A%5B%22pagename%22%2C%22informationandservices%3A%3Aapp%20download%22%5D%2C%222%22%3A%5B%22countrymarket%22%2C%22us%22%5D%2C%223%22%3A%5B%22uilogged%22%2C%22false%22%5D%2C%224%22%3A%5B%22uiallmember%22%2C%22not%20logged%22%5D%2C%226%22%3A%5B%22brandcontext%22%2C%22all%22%5D%2C%2210%22%3A%5B%22offer_type%22%2C%22public%20offer%22%5D%2C%2211%22%3A%5B%22ui_snu%22%2C%22not%20connected%22%5D%7D&cvarp=%7B%221%22%3A%5B%22pagename%22%2C%22informationandservices%3A%3Aapp%20download%22%5D%2C%222%22%3A%5B%22countrymarket%22%2C%22us%22%5D%2C%223%22%3A%5B%22uilogged%22%2C%22false%22%5D%2C%224%22%3A%5B%22uiallmember%22%2C%22not%20logged%22%5D%2C%226%22%3A%5B%22brandcontext%22%2C%22all%22%5D%2C%2210%22%3A%5B%22offer_type%22%2C%22public%20offer%22%5D%2C%2211%22%3A%5B%22ui_snu%22%2C%22not%20connected%22%5D%7D&la=en-US&uc=0&url=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&dr=&dw=1263&dh=1523&ww=1280&wh=907&sw=1280&sh=1024&uu=dbd80ae3-fdc5-a6bd-b3db-8d57cd4aa2a9&sn=1&hd=1730274401&v=15.26.2&pid=153&pn=1&r=358821 HTTP/1.1Host: c.contentsquare.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ig-membership?ntk=I9mH4X1oc6DXXP-HaQaInunoENLIoElwtga-xHkC6ZTjVUQW2zxqyVoQ2EJTyplYxRT91UyeruEHcte41X6CLUPToWSOxNmuyD3c-r-Tpw8 HTTP/1.1Host: us.creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: g=HSB0C00acqFu6m0pKmIe_1730274406977; c=HSB0C00acqFu6m0pKmIe_NCyIsbQv2bl35xALaGlJ_1730274406977; ts=1730274406; ar_debug=1; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /topics-membership?ntk=9NhZ2LKob5OXU6iT_L-wvVJFGz5pXoxEeXqmRrY6C1Dnl-xLE09kOULJ6TQj6r084kmd_JiBn6_gcPWGb3MJsuvVSVefGSmHpEYo3puJMvk HTTP/1.1Host: us.creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: g=HSB0C00acqFu6m0pKmIe_1730274406977; c=HSB0C00acqFu6m0pKmIe_NCyIsbQv2bl35xALaGlJ_1730274406977; ts=1730274406; ar_debug=1; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /td/ga/rul?tid=G-66B47X8JYS&gacid=895171141.1730274398&gtm=45je4as0v881965008z86262265za200zb886152357&dma=0&gcs=G111&gcd=13r3r3r3r5l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101533421~101823848~101878899~101878944~101925629&z=1281358543 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUk-GthnzPvb098UXYhPYDVCOk7cNdBR-Rm4NMJ6gbi_my8vJirra2IwQCQL
Source: global traffic	HTTP traffic detected: GET /action/0?ti=148023208&tm=gtm002&Ver=2&mid=19c33fec-df02-4462-94be-36160d9d79b2&bo=1&sid=1a1f3280969311efb7e7df46f0c4979e&vid=1a1f4f50969311ef9d07ad339c90e1d5&vids=1&msclkid=N&uach=pv%3D10.0.0&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=App%20Download&p=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&r=&lt=12899&evt=pageLoad&sv=1&cdb=AQED&rn=644363 HTTP/1.1Host: bat.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /action/0?ti=148023208&tm=gtm002&Ver=2&mid=c97661b9-03e1-4d35-b5d4-c2217cc59d6d&bo=1&sid=1a1f3280969311efb7e7df46f0c4979e&vid=1a1f4f50969311ef9d07ad339c90e1d5&vids=0&msclkid=N&page_path=%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html&spa=Y&p=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html&uach=pv%3D10.0.0&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=App%20Download&r=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&evt=pageLoad&sv=1&cdb=AQED&rn=481594 HTTP/1.1Host: bat.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /action/0?ti=343097615&tm=gtm002&Ver=2&mid=08c511a4-05c3-4136-a3e8-a3ee2410808a&bo=1&sid=1a1f3280969311efb7e7df46f0c4979e&vid=1a1f4f50969311ef9d07ad339c90e1d5&vids=0&msclkid=N&uach=pv%3D10.0.0&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=App%20Download&p=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&r=&lt=12899&evt=pageLoad&sv=1&cdb=AQED&rn=772031 HTTP/1.1Host: bat.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dvar?v=15.26.2&pid=153&pn=1&sn=1&uu=dbd80ae3-fdc5-a6bd-b3db-8d57cd4aa2a9&dv=H4sIAAAAAAAAA6tWcgzwjXcJiQ9OLS7OzM%2FzdFGyUkpJSrEwSEw11k1LSTbVTTRLStFNMk5J0rVIMTVPTjFJTDRKtNQzVKoFADXoqJk9AAAA&ct=2&r=023601 HTTP/1.1Host: c.contentsquare.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tags/v2?type=json&tc=1 HTTP/1.1Host: us.creativecdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: g=HSB0C00acqFu6m0pKmIe_1730274406977; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /universal_pixel.1.1.0.js HTTP/1.1Host: js.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://match.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=6ea0385f-adb9-4a46-83a3-698c78b0a161; TDCPM=CAESFgoHcnViaWNvbhILCOiH1qihsLw9EAUSFQoGZ29vZ2xlEgsIgqrWqKGwvD0QBRIXCghhcHBuZXh1cxILCKjI1qihsLw9EAUYBSgDMgsI1OXY1bewvD0QBUIPIg0IARIJCgV0aWVyMRABWgdwaW8wOW9oYAE.
Source: global traffic	HTTP traffic detected: GET /scevent.min.js HTTP/1.1Host: sc-static.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-AB=cc8f398e6c2d4b84b15908c5e6ccf9a3If-None-Match: cc8f398e6c2d4b84b15908c5e6ccf9a3
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/11264201385/?random=1730274400383&cv=11&fst=1730274400383&bg=ffffff&guid=ON&async=1&gtm=45be4as0v9104227775z8812226527za200zb812226527&gcd=13r3r3r3r5l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&hn=www.googleadservices.com&frm=0&tiba=App%20Download&npa=0&pscdl=noapi&auid=461077611.1730274398&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUk-GthnzPvb098UXYhPYDVCOk7cNdBR-Rm4NMJ6gbi_my8vJirra2IwQCQL
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/11264198074/?random=1730274400575&cv=11&fst=1730274400575&bg=ffffff&guid=ON&async=1&gtm=45be4as0v9104227775z8812226527za200zb812226527&gcd=13r3r3r3r5l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&hn=www.googleadservices.com&frm=0&tiba=App%20Download&npa=0&pscdl=noapi&auid=461077611.1730274398&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUk-GthnzPvb098UXYhPYDVCOk7cNdBR-Rm4NMJ6gbi_my8vJirra2IwQCQL
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&dv=America%2FNew_York%26en-US%2Cen%26Google%20Inc.%26Win32%26255%261280%261024%264%2624%261280%26984%260%26na&eci=3&event=%7B%7D&event_id=fa616b0a-d9d4-44a3-8521-15e945c1e8ef&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=307a305b-3841-46a3-8884-5c2108fc63a8&tw_document_href=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&tw_iframe_status=0&txn_id=o2bzr&type=javascript&version=2.3.31 HTTP/1.1Host: t.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&dv=America%2FNew_York%26en-US%2Cen%26Google%20Inc.%26Win32%26255%261280%261024%264%2624%261280%26984%260%26na&eci=4&event=%7B%22contents%22%3A%5B%7B%22content_type%22%3A%22hotel%22%2C%22content_id%22%3A%22%22%2C%22content_name%22%3A%22%22%2C%22content_group_id%22%3A%22%22%7D%5D%7D&event_id=c7e451d7-fd16-4ae6-a5b6-8436de81ba3b&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=307a305b-3841-46a3-8884-5c2108fc63a8&tw_document_href=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&tw_iframe_status=0&txn_id=tw-o2bzr-obs3v&type=javascript&version=2.3.31 HTTP/1.1Host: t.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&dv=America%2FNew_York%26en-US%2Cen%26Google%20Inc.%26Win32%26255%261280%261024%264%2624%261280%26984%260%26na&eci=3&event=%7B%7D&event_id=fa616b0a-d9d4-44a3-8521-15e945c1e8ef&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=307a305b-3841-46a3-8884-5c2108fc63a8&tw_document_href=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&tw_iframe_status=0&txn_id=o2bzr&type=javascript&version=2.3.31 HTTP/1.1Host: analytics.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p?pid=5b7854ae-f9c6-433a-ba0a-2ec9f24a5aa4&ev=PAGE_VIEW&intg=gtm&e_iids=%5B%5D&e_desc=ALL&pids=5b7854ae-f9c6-433a-ba0a-2ec9f24a5aa4&e_ic=hotel%2C&cdid=1730274776895_173027499767785&u_c1=76290f8f-0587-43be-ba14-d33ea66fdf97&u_sclid=2a38f09e-0999-4df0-acd1-1287a34e1c62&u_scsid=04b1e948-de78-4ce3-93d8-b14769db3d22&bg=false&bt=1d53c387&d_a=x86&d_bvs=%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D&d_os=10.0.0&d_ot=Windows&df=true&huah=true&m_dcl=8637&m_fcps=5353&m_pi=8064&m_pl=12899&m_pv=2&m_rd=17859&m_sh=1024&m_sl=17311&m_sw=1280&pl=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&trackId=6aea9678-9029-423f-9b06-6ae69852a808&ts=1730274402536&v=3.33.0-2409301510 HTTP/1.1Host: tr.snapchat.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sc_at=v2\|H4sIAAAAAAAAAAXBgRUAIAQFwIm8R6mvcUSmMHx3ietzxaEKN9KUTf5ukJhCRmShrFsweUCVV/MHum7CyDIAAAA=
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&dv=America%2FNew_York%26en-US%2Cen%26Google%20Inc.%26Win32%26255%261280%261024%264%2624%261280%26984%260%26na&eci=4&event=%7B%22contents%22%3A%5B%7B%22content_type%22%3A%22hotel%22%2C%22content_id%22%3A%22%22%2C%22content_name%22%3A%22%22%2C%22content_group_id%22%3A%22%22%7D%5D%7D&event_id=c7e451d7-fd16-4ae6-a5b6-8436de81ba3b&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=307a305b-3841-46a3-8884-5c2108fc63a8&tw_document_href=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&tw_iframe_status=0&txn_id=tw-o2bzr-obs3v&type=javascript&version=2.3.31 HTTP/1.1Host: analytics.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=6773840;type=ah_count;cat=visits;gtm=45j91e4as1v886152357z86262265z9891108097za200zb6262265;dc_pre=1;u1=AccorHotels;u3=USD;u4=us;u5=EUR;u8=page_view;u10=%22%22;u19=en-us;u22=informationandservices%3A%3Aapp%20download;u41=895171141.1730274398;u45=not%20logged;dma=0;npa=1;gcs=G111;gcd=13r3r3r3r7l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=461077611.1730274398;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=90773391;s3p=1;~oref=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger, not-navigation-sourceReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUk-GthnzPvb098UXYhPYDVCOk7cNdBR-Rm4NMJ6gbi_my8vJirra2IwQCQL
Source: global traffic	HTTP traffic detected: GET /_set_cookie?val=465dQ1oUQbWYInSTp0OUjAoBGvVM7N4ndsP%2BXrUlTGeEo7iYhUii%2BfyWd24s790KSYg25GcCkjy4XLYWoyVz%2BDMNDrx8gjHaeGOz%2FsFwaHw%2BT%2BQnhGQ3reXTwmH4B6GLb0hE%2F2ttqPqbPqpelrzNhntTPXrnLp3LzZ2Dke56nHnHu8iZZzGtoOv%2BSICbQunp5zN6FzaO HTTP/1.1Host: sgtm.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: org=evy; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjoiQUgiLCJyZXRhaW5lZG1lcmNoYW50aWQiOiJBSCJ9; rxVisitor=1730274389683JLIBD8T14271V8K1PF607REH7HAD6SU0; accorref=https://all.accor.com/; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+30+2024+03%3A46%3A35+GMT-0400+(Eastern+Daylight+Time)&version=202409.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&genVendors=V62%3A0%2CV37%3A0%2CV67%3A0%2CV38%3A0%2CV64%3A0%2CV58%3A0%2CV25%3A0%2CV26%3A0%2CV42%3A0%2CV9%3A0%2CV8%3A0%2CV27%3A0%2CV51%3A0%2CV39%3A0%2CV23%3A0%2CV55%3A0%2CV5%3A0%2CV34%3A0%2CV10%3A0%2CV53%3A0%2CV59%3A0%2CV74%3A0%2CV36%3A0%2CV49%3A0%2CV65%3A0%2CV19%3A0%2CV33%3A0%2CV57%3A0%2CV52%3A0%2CV48%3A0%2CV29%3A0%2CV17%3A0%2CV11%3A0%2CV56%3A0%2CV12%3A0%2CV72%3A0%2CV13%3A0%2CV41%3A0%2CV40%3A0%2CV68%3A0%2CV60%3A0%2CV50%3A0%2CV15%3A0%2CV54%3A0%2CV28%3A0%2CV30%3A0%2CV46%3A0%2CV4%3A0%2CV14%3A0%2CV61%3A0%2CV7%3A0%2CV45%3A0%2CV16%3A0%2CV32%3A0%2CV21%3A0%2CV69%3A0%2CV63%3A0%2CV73%3A0%2CV6%3A0%2CV18%3A0%2CV31%3A0%2CV44%3A0%2CV71%3A0%2CV43%3A0%2CV35%3A0%2CV47%3A0%2C&consentId=9ab4f1d3-b3a4-433f-a62e-3731c85af8dc&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0007%3A1%2CC0004%3A1%2CC0005%3A1%2CC0008%3A1%2CC0009%3A0&AwaitingReconsent=false; _evga_8b38={%22uuid%22:%22169349b27ef7e9cc%22}; _sfid_1a3a={%22anonymousId%22:%22169349b27ef7e9cc%22%2C%22consents%22:[]}; OCC_all.accor=fail; _gcl_au=1.1.461077611.1730274398; _ga_SKWJ7883ZP=GS1.1.1730274398.1.0.1730274398.0.0.648803893; _ga=GA1.1.895171141.1730274398; rxvt=1730276198650\|1730274389685; dtSa=false%7C_load_%7C3%7C_onload_%7C-%7C1730274398649%7C474389679_556%7Chttps%3A%2F%2Fall.accor.com%2Fenroll-loyalty%2Fcheck-authent.html%3FappId%3Dall.accor%26error_5Fdescription%3DAuthentication%2Bis%2Brequired.%26state%3Df3560ed2a8c46af4199ef8%26error%3Dlogin_5Frequired%7C%7C%7C.%7C; dtPC=1$474389679_556h-vCNCM
Source: global traffic	HTTP traffic detected: GET /_set_cookie?val=ov8Vt8y5kwvZRZp2wN%2B%2BHLvOL4YGPBxseNs2s7cPFUlbIElJ6ni4OEyPSZ1td%2BXUhr9T1K6HqdntfhQ84d97CCorDsbtZU2yH0K5RCCJ6ll4I%2FLXBK1CQfvAMwE3HdZZwopzOoIfKnA9AQWui9DCW1Ez%2BPd%2FpXw%3D HTTP/1.1Host: sgtm.accor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: org=evy; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjoiQUgiLCJyZXRhaW5lZG1lcmNoYW50aWQiOiJBSCJ9; rxVisitor=1730274389683JLIBD8T14271V8K1PF607REH7HAD6SU0; accorref=https://all.accor.com/; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+30+2024+03%3A46%3A35+GMT-0400+(Eastern+Daylight+Time)&version=202409.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&genVendors=V62%3A0%2CV37%3A0%2CV67%3A0%2CV38%3A0%2CV64%3A0%2CV58%3A0%2CV25%3A0%2CV26%3A0%2CV42%3A0%2CV9%3A0%2CV8%3A0%2CV27%3A0%2CV51%3A0%2CV39%3A0%2CV23%3A0%2CV55%3A0%2CV5%3A0%2CV34%3A0%2CV10%3A0%2CV53%3A0%2CV59%3A0%2CV74%3A0%2CV36%3A0%2CV49%3A0%2CV65%3A0%2CV19%3A0%2CV33%3A0%2CV57%3A0%2CV52%3A0%2CV48%3A0%2CV29%3A0%2CV17%3A0%2CV11%3A0%2CV56%3A0%2CV12%3A0%2CV72%3A0%2CV13%3A0%2CV41%3A0%2CV40%3A0%2CV68%3A0%2CV60%3A0%2CV50%3A0%2CV15%3A0%2CV54%3A0%2CV28%3A0%2CV30%3A0%2CV46%3A0%2CV4%3A0%2CV14%3A0%2CV61%3A0%2CV7%3A0%2CV45%3A0%2CV16%3A0%2CV32%3A0%2CV21%3A0%2CV69%3A0%2CV63%3A0%2CV73%3A0%2CV6%3A0%2CV18%3A0%2CV31%3A0%2CV44%3A0%2CV71%3A0%2CV43%3A0%2CV35%3A0%2CV47%3A0%2C&consentId=9ab4f1d3-b3a4-433f-a62e-3731c85af8dc&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0007%3A1%2CC0004%3A1%2CC0005%3A1%2CC0008%3A1%2CC0009%3A0&AwaitingReconsent=false; _evga_8b38={%22uuid%22:%22169349b27ef7e9cc%22}; _sfid_1a3a={%22anonymousId%22:%22169349b27ef7e9cc%22%2C%22consents%22:[]}; OCC_all.accor=fail; _gcl_au=1.1.461077611.1730274398; _ga_SKWJ7883ZP=GS1.1.1730274398.1.0.1730274398.0.0.648803893; _ga=GA1.1.895171141.1730274398; rxvt=1730276198650\|1730274389685; dtSa=false%7C_load_%7C3%7C_onload_%7C-%7C1730274398649%7C474389679_556%7Chttps%3A%2F%2Fall.accor.com%2Fenroll-loyalty%2Fcheck-authent.html%3FappId%3Dall.accor%26error_5Fdescription%3DAuthentication%2Bis%2Brequired.%26state%3Df3560ed2a8c46af4199ef8%26error%3Dlogin_5Frequired%7C%7C%7C.%7C; dtPC=1$474389679_556h-vCNCMQNAQOSCAVCJKBVISVNPVVSHILTAR-0e0; FPID=FPI
Source: global traffic	HTTP traffic detected: GET /activity;src=6773840;type=ah_count;cat=visits;gtm=45j91e4as1v886152357z86262265z9891108097za200zb6262265;dc_pre=1;u1=AccorHotels;u3=USD;u4=us;u5=EUR;u8=page_view;u10=%22%22;u19=en-us;u22=informationandservices%3A%3Aapp%20download;u41=895171141.1730274398;u45=not%20logged;dma=0;npa=1;gcs=G111;gcd=13r3r3r3r7l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=461077611.1730274398;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=90773391;s3p=1;~oref=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUk-GthnzPvb098UXYhPYDVCOk7cNdBR-Rm4NMJ6gbi_my8vJirra2IwQCQL
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=6773840;type=ah_count;cat=viewpage;ord=1231646715;gtm=45j91e4as1v886152357z86262265z9891108097za200zb6262265;dc_pre=1;u1=AccorHotels;u3=USD;u4=us;u5=EUR;u8=page_view;u19=en-us;u22=informationandservices%3A%3Aapp%20download;u41=895171141.1730274398;dma=0;npa=1;gcs=G111;gcd=13r3r3r3r7l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=461077611.1730274398;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=730383567;s3p=1;~oref=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, triggerReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUk-GthnzPvb098UXYhPYDVCOk7cNdBR-Rm4NMJ6gbi_my8vJirra2IwQCQL
Source: global traffic	HTTP traffic detected: GET /activity;src=6773840;type=ah_count;cat=viewpage;ord=1231646715;gtm=45j91e4as1v886152357z86262265z9891108097za200zb6262265;dc_pre=1;u1=AccorHotels;u3=USD;u4=us;u5=EUR;u8=page_view;u19=en-us;u22=informationandservices%3A%3Aapp%20download;u41=895171141.1730274398;dma=0;npa=1;gcs=G111;gcd=13r3r3r3r7l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=461077611.1730274398;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=730383567;s3p=1;~oref=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUk-GthnzPvb098UXYhPYDVCOk7cNdBR-Rm4NMJ6gbi_my8vJirra2IwQCQL
Source: global traffic	HTTP traffic detected: GET /dvar?v=15.26.2&pid=153&pn=1&sn=1&uu=dbd80ae3-fdc5-a6bd-b3db-8d57cd4aa2a9&dv=H4sIAAAAAAAAA6tWcnSK907MTc1Jzc%2FPizcyMbMwMVGyUrI0szA1MFGqBQD%2FpRqgIAAAAA%3D%3D&ct=2&r=187052 HTTP/1.1Host: c.contentsquare.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules-p-Nfk-wbeA5EZDg.js HTTP/1.1Host: rules.quantcount.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cm/s?bt=1d53c387&pnid=140&cb=1730274410630&u_scsid=76c50673-bd64-404f-8f6b-d7940a9aab84&u_sclid=a4933775-725b-456e-99ee-7ad10c46425c HTTP/1.1Host: tr.snapchat.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://tr.snapchat.com/cm/i?pid=5b7854ae-f9c6-433a-ba0a-2ec9f24a5aa4&u_scsid=04b1e948-de78-4ce3-93d8-b14769db3d22&u_sclid=2a38f09e-0999-4df0-acd1-1287a34e1c62Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sc_at=v2\|H4sIAAAAAAAAAAXBgRUAIAQFwIm8R6mvcUSmMHx3ietzxaEKN9KUTf5ukJhCRmShrFsweUCVV/MHum7CyDIAAAA=
Source: global traffic	HTTP traffic detected: GET /ig-membership?ntk=I9mH4X1oc6DXXP-HaQaInunoENLIoElwtga-xHkC6ZTjVUQW2zxqyVoQ2EJTyplYxRT91UyeruEHcte41X6CLUPToWSOxNmuyD3c-r-Tpw8&lbl=null&ff=true&checked=true&bas=false&ra=true HTTP/1.1Host: us.creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://us.creativecdn.com/ig-membership?ntk=I9mH4X1oc6DXXP-HaQaInunoENLIoElwtga-xHkC6ZTjVUQW2zxqyVoQ2EJTyplYxRT91UyeruEHcte41X6CLUPToWSOxNmuyD3c-r-Tpw8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: g=HSB0C00acqFu6m0pKmIe_1730274406977; c=HSB0C00acqFu6m0pKmIe_NCyIsbQv2bl35xALaGlJ_1730274406977; ts=1730274406; ar_debug=1; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /p/insights/t/343097615 HTTP/1.1Host: bat.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MR=0; MUID=24E3AD9B86A3613C0BF8B8B387C86035
Source: global traffic	HTTP traffic detected: GET /3.5.0/sdk.min.js HTTP/1.1Host: via.batch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=NmVhMDM4NWYtYWRiOS00YTQ2LTgzYTMtNjk4Yzc4YjBhMTYx&gdpr=0&gdpr_consent=&ttd_tdid=6ea0385f-adb9-4a46-83a3-698c78b0a161 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://match.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUk-GthnzPvb098UXYhPYDVCOk7cNdBR-Rm4NMJ6gbi_my8vJirra2IwQCQL; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/11264012497/?random=1730274400127&cv=11&fst=1730271600000&bg=ffffff&guid=ON&async=1&gtm=45be4as0v9104227775z8812226527za200zb812226527&gcd=13r3r3r3r5l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&hn=www.googleadservices.com&frm=0&tiba=App%20Download&npa=0&pscdl=noapi&auid=461077611.1730274398&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQCa7L7d2kidIlm8-ywQZFfq4M7xK233ZN0frJ5hx4v9Q9pVv1AY1zp-&random=2573513479&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&dv=America%2FNew_York%26en-US%2Cen%26Google%20Inc.%26Win32%26255%261280%261024%264%2624%261280%26984%260%26na&eci=3&event=%7B%7D&event_id=fa616b0a-d9d4-44a3-8521-15e945c1e8ef&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=307a305b-3841-46a3-8884-5c2108fc63a8&tw_document_href=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&tw_iframe_status=0&txn_id=o2bzr&type=javascript&version=2.3.31 HTTP/1.1Host: t.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: muc_ads=950c90f3-876f-4eef-b5d8-088d730de441; __cf_bm=VdIt1DqgDsbsmVRfsFQKzLv4BMltEgPCS2tSCOWEHTI-1730274410-1.0.1.1-aOtJ175SbqOydElrDsGRjkPSjCRZpyXSkGbkXipiZjYy4Ilgi.i1s3PsZXcjaYi_teilnQyhNdN608f_PjUyXQ
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&dv=America%2FNew_York%26en-US%2Cen%26Google%20Inc.%26Win32%26255%261280%261024%264%2624%261280%26984%260%26na&eci=4&event=%7B%22contents%22%3A%5B%7B%22content_type%22%3A%22hotel%22%2C%22content_id%22%3A%22%22%2C%22content_name%22%3A%22%22%2C%22content_group_id%22%3A%22%22%7D%5D%7D&event_id=c7e451d7-fd16-4ae6-a5b6-8436de81ba3b&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=307a305b-3841-46a3-8884-5c2108fc63a8&tw_document_href=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&tw_iframe_status=0&txn_id=tw-o2bzr-obs3v&type=javascript&version=2.3.31 HTTP/1.1Host: t.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: muc_ads=950c90f3-876f-4eef-b5d8-088d730de441; __cf_bm=VdIt1DqgDsbsmVRfsFQKzLv4BMltEgPCS2tSCOWEHTI-1730274410-1.0.1.1-aOtJ175SbqOydElrDsGRjkPSjCRZpyXSkGbkXipiZjYy4Ilgi.i1s3PsZXcjaYi_teilnQyhNdN608f_PjUyXQ
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&dv=America%2FNew_York%26en-US%2Cen%26Google%20Inc.%26Win32%26255%261280%261024%264%2624%261280%26984%260%26na&eci=3&event=%7B%7D&event_id=fa616b0a-d9d4-44a3-8521-15e945c1e8ef&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=307a305b-3841-46a3-8884-5c2108fc63a8&tw_document_href=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&tw_iframe_status=0&txn_id=o2bzr&type=javascript&version=2.3.31 HTTP/1.1Host: analytics.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id_marketing=v1%3A173027441066560792; guest_id_ads=v1%3A173027441066560792; personalization_id="v1_D1JtOOuJRuF/OxqOCNMcvw=="; guest_id=v1%3A173027441066560792
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&dv=America%2FNew_York%26en-US%2Cen%26Google%20Inc.%26Win32%26255%261280%261024%264%2624%261280%26984%260%26na&eci=4&event=%7B%22contents%22%3A%5B%7B%22content_type%22%3A%22hotel%22%2C%22content_id%22%3A%22%22%2C%22content_name%22%3A%22%22%2C%22content_group_id%22%3A%22%22%7D%5D%7D&event_id=c7e451d7-fd16-4ae6-a5b6-8436de81ba3b&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=307a305b-3841-46a3-8884-5c2108fc63a8&tw_document_href=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&tw_iframe_status=0&txn_id=tw-o2bzr-obs3v&type=javascript&version=2.3.31 HTTP/1.1Host: analytics.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id_marketing=v1%3A173027441066560792; guest_id_ads=v1%3A173027441066560792; personalization_id="v1_D1JtOOuJRuF/OxqOCNMcvw=="; guest_id=v1%3A173027441066560792
Source: global traffic	HTTP traffic detected: GET /tag.gif?b_id=dfdd7f56-da87-4a8c-acdf-2b1df0d66f17&b_u=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&b_d=all.accor.com&b_p=%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html&b_q=%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&b_t=App%20Download&c_t=lap&t_id=824cc999-cfab-4121-a94d-dfb516eb384f&s_id=2d0d6fee-e64f8066&x4=100&e=pv&v=3.4.1&_t=1730274404413 HTTP/1.1Host: tr.line.meConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal_pixel.1.1.0.js HTTP/1.1Host: js.adsrvr.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=6ea0385f-adb9-4a46-83a3-698c78b0a161; TDCPM=CAESFgoHcnViaWNvbhILCOiH1qihsLw9EAUSFQoGZ29vZ2xlEgsIgqrWqKGwvD0QBRIXCghhcHBuZXh1cxILCKjI1qihsLw9EAUYBSgDMgsI1OXY1bewvD0QBUIPIg0IARIJCgV0aWVyMRABWgdwaW8wOW9oYAE.
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/src=6773840;type=ah_count;cat=visits;gtm=45j91e4as1v886152357z86262265z9891108097za200zb6262265;dc_pre=1;u1=AccorHotels;u3=USD;u4=us;u5=EUR;u8=page_view;u10=%22%22;u19=en-us;u22=informationandservices%3A%3Aapp%20download;u41=895171141.1730274398;u45=not%20logged;dma=0;npa=1;gcs=G111;gcd=13r3r3r3r7l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=90773391;s3p=1;~oref=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/src=6773840;type=ah_count;cat=viewpage;ord=1231646715;gtm=45j91e4as1v886152357z86262265z9891108097za200zb6262265;dc_pre=1;u1=AccorHotels;u3=USD;u4=us;u5=EUR;u8=page_view;u19=en-us;u22=informationandservices%3A%3Aapp%20download;u41=895171141.1730274398;dma=0;npa=1;gcs=G111;gcd=13r3r3r3r7l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=730383567;s3p=1;~oref=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid%3d%24UID&ttd_tdid=6ea0385f-adb9-4a46-83a3-698c78b0a161 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://match.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /idsync/ex/push?partner_id=2884&partner_url=https%3A%2F%2Ftr.snapchat.com%2Fcm%2Fp%3Frand%3D1729735501010%26pnid%3D140%26pcid%3D%24%7BTA_DEVICE_ID%7D HTTP/1.1Host: pixel.tapad.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://tr.snapchat.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/11264275592/?random=1730274400316&cv=11&fst=1730271600000&bg=ffffff&guid=ON&async=1&gtm=45be4as0v9104227775z8812226527za200zb812226527&gcd=13r3r3r3r5l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&hn=www.googleadservices.com&frm=0&tiba=App%20Download&npa=0&pscdl=noapi&auid=461077611.1730274398&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQCa7L7dxdJaAIVg_kNfOYeyN7mRmaU6q6rJuItAB4crNN3zO7BawczH&random=781143050&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/11263996687/?random=1730274400168&cv=11&fst=1730271600000&bg=ffffff&guid=ON&async=1&gtm=45be4as0v9104227775z8812226527za200zb812226527&gcd=13r3r3r3r5l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&hn=www.googleadservices.com&frm=0&tiba=App%20Download&npa=0&pscdl=noapi&auid=461077611.1730274398&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQCa7L7dbwDdNlct2NP-cJ8vAxs4cneB6_rlH04rE9aZ-Z9ap5ze3hB_&random=795113720&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p?pid=5b7854ae-f9c6-433a-ba0a-2ec9f24a5aa4&ev=PAGE_VIEW&intg=gtm&e_iids=%5B%5D&e_desc=ALL&pids=5b7854ae-f9c6-433a-ba0a-2ec9f24a5aa4&e_ic=hotel%2C&cdid=1730274776895_173027499767785&u_c1=76290f8f-0587-43be-ba14-d33ea66fdf97&u_sclid=2a38f09e-0999-4df0-acd1-1287a34e1c62&u_scsid=04b1e948-de78-4ce3-93d8-b14769db3d22&bg=false&bt=1d53c387&d_a=x86&d_bvs=%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D&d_os=10.0.0&d_ot=Windows&df=true&huah=true&m_dcl=8637&m_fcps=5353&m_pi=8064&m_pl=12899&m_pv=2&m_rd=17859&m_sh=1024&m_sl=17311&m_sw=1280&pl=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&trackId=6aea9678-9029-423f-9b06-6ae69852a808&ts=1730274402536&v=3.33.0-2409301510 HTTP/1.1Host: tr.snapchat.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sc_at=v2\|H4sIAAAAAAAAAE3GwRHAIAgEwIqY4ZAETDcIUoXF5+u+tmzFeHJSZzhp4aXYKwmuBslqaz9Q/mCDxVQh5yr/FONrNkAAAAA=
Source: global traffic	HTTP traffic detected: GET /track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=6ea0385f-adb9-4a46-83a3-698c78b0a161&google_gid=CAESEJsLVTPJNTSCvE8qm5gGp_0&google_cver=1 HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://match.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=6ea0385f-adb9-4a46-83a3-698c78b0a161; TDCPM=CAESFgoHcnViaWNvbhILCOiH1qihsLw9EAUSFQoGZ29vZ2xlEgsIgqrWqKGwvD0QBRIXCghhcHBuZXh1cxILCKjI1qihsLw9EAUYBSgDMgsI1OXY1bewvD0QBUIPIg0IARIJCgV0aWVyMRABWgdwaW8wOW9oYAE.
Source: global traffic	HTTP traffic detected: GET /_set_cookie?val=465dQ1oUQbWYInSTp0OUjAoBGvVM7N4ndsP%2BXrUlTGeEo7iYhUii%2BfyWd24s790KSYg25GcCkjy4XLYWoyVz%2BDMNDrx8gjHaeGOz%2FsFwaHw%2BT%2BQnhGQ3reXTwmH4B6GLb0hE%2F2ttqPqbPqpelrzNhntTPXrnLp3LzZ2Dke56nHnHu8iZZzGtoOv%2BSICbQunp5zN6FzaO HTTP/1.1Host: sgtm.accor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: org=evy; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjoiQUgiLCJyZXRhaW5lZG1lcmNoYW50aWQiOiJBSCJ9; rxVisitor=1730274389683JLIBD8T14271V8K1PF607REH7HAD6SU0; accorref=https://all.accor.com/; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+30+2024+03%3A46%3A35+GMT-0400+(Eastern+Daylight+Time)&version=202409.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&genVendors=V62%3A0%2CV37%3A0%2CV67%3A0%2CV38%3A0%2CV64%3A0%2CV58%3A0%2CV25%3A0%2CV26%3A0%2CV42%3A0%2CV9%3A0%2CV8%3A0%2CV27%3A0%2CV51%3A0%2CV39%3A0%2CV23%3A0%2CV55%3A0%2CV5%3A0%2CV34%3A0%2CV10%3A0%2CV53%3A0%2CV59%3A0%2CV74%3A0%2CV36%3A0%2CV49%3A0%2CV65%3A0%2CV19%3A0%2CV33%3A0%2CV57%3A0%2CV52%3A0%2CV48%3A0%2CV29%3A0%2CV17%3A0%2CV11%3A0%2CV56%3A0%2CV12%3A0%2CV72%3A0%2CV13%3A0%2CV41%3A0%2CV40%3A0%2CV68%3A0%2CV60%3A0%2CV50%3A0%2CV15%3A0%2CV54%3A0%2CV28%3A0%2CV30%3A0%2CV46%3A0%2CV4%3A0%2CV14%3A0%2CV61%3A0%2CV7%3A0%2CV45%3A0%2CV16%3A0%2CV32%3A0%2CV21%3A0%2CV69%3A0%2CV63%3A0%2CV73%3A0%2CV6%3A0%2CV18%3A0%2CV31%3A0%2CV44%3A0%2CV71%3A0%2CV43%3A0%2CV35%3A0%2CV47%3A0%2C&consentId=9ab4f1d3-b3a4-433f-a62e-3731c85af8dc&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0007%3A1%2CC0004%3A1%2CC0005%3A1%2CC0008%3A1%2CC0009%3A0&AwaitingReconsent=false; _evga_8b38={%22uuid%22:%22169349b27ef7e9cc%22}; _sfid_1a3a={%22anonymousId%22:%22169349b27ef7e9cc%22%2C%22consents%22:[]}; OCC_all.accor=fail; _gcl_au=1.1.461077611.1730274398; _ga_SKWJ7883ZP=GS1.1.1730274398.1.0.1730274398.0.0.648803893; _ga=GA1.1.895171141.1730274398; rxvt=1730276198650\|1730274389685; dtSa=false%7C_load_%7C3%7C_onload_%7C-%7C1730274398649%7C474389679_556%7Chttps%3A%2F%2Fall.accor.com%2Fenroll-loyalty%2Fcheck-authent.html%3FappId%3Dall.accor%26error_5Fdescription%3DAuthentication%2Bis%2Brequired.%26state%3Df3560ed2a8c46af4199ef8%26error%3Dlogin_5Frequired%7C%7C%7C.%7C; dtPC=1$474389679_556h-vCNCMQNAQOSCAVCJKBVISVNPVVSHILTAR-0e0; FPID=FPID2.2.%2BARv0vR3aab0oP7893f18RUvnXW%2FfVfL0SMkRJ4m18I%3D.1730274398; FPLC=9Ex%2B3P1o%2BykB8MYRIfGHK73t9szuTYTeNo5MFWy2VRDYFDGgWoj8mUpTMLlAQkOQ5FUlJmyB%2F4EPbLxsPm26F91P16e2sqdZfTDOGv5hJ0DaLRz
Source: global traffic	HTTP traffic detected: GET /_set_cookie?val=ov8Vt8y5kwvZRZp2wN%2B%2BHLvOL4YGPBxseNs2s7cPFUlbIElJ6ni4OEyPSZ1td%2BXUhr9T1K6HqdntfhQ84d97CCorDsbtZU2yH0K5RCCJ6ll4I%2FLXBK1CQfvAMwE3HdZZwopzOoIfKnA9AQWui9DCW1Ez%2BPd%2FpXw%3D HTTP/1.1Host: sgtm.accor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: org=evy; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjoiQUgiLCJyZXRhaW5lZG1lcmNoYW50aWQiOiJBSCJ9; rxVisitor=1730274389683JLIBD8T14271V8K1PF607REH7HAD6SU0; accorref=https://all.accor.com/; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+30+2024+03%3A46%3A35+GMT-0400+(Eastern+Daylight+Time)&version=202409.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&genVendors=V62%3A0%2CV37%3A0%2CV67%3A0%2CV38%3A0%2CV64%3A0%2CV58%3A0%2CV25%3A0%2CV26%3A0%2CV42%3A0%2CV9%3A0%2CV8%3A0%2CV27%3A0%2CV51%3A0%2CV39%3A0%2CV23%3A0%2CV55%3A0%2CV5%3A0%2CV34%3A0%2CV10%3A0%2CV53%3A0%2CV59%3A0%2CV74%3A0%2CV36%3A0%2CV49%3A0%2CV65%3A0%2CV19%3A0%2CV33%3A0%2CV57%3A0%2CV52%3A0%2CV48%3A0%2CV29%3A0%2CV17%3A0%2CV11%3A0%2CV56%3A0%2CV12%3A0%2CV72%3A0%2CV13%3A0%2CV41%3A0%2CV40%3A0%2CV68%3A0%2CV60%3A0%2CV50%3A0%2CV15%3A0%2CV54%3A0%2CV28%3A0%2CV30%3A0%2CV46%3A0%2CV4%3A0%2CV14%3A0%2CV61%3A0%2CV7%3A0%2CV45%3A0%2CV16%3A0%2CV32%3A0%2CV21%3A0%2CV69%3A0%2CV63%3A0%2CV73%3A0%2CV6%3A0%2CV18%3A0%2CV31%3A0%2CV44%3A0%2CV71%3A0%2CV43%3A0%2CV35%3A0%2CV47%3A0%2C&consentId=9ab4f1d3-b3a4-433f-a62e-3731c85af8dc&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0007%3A1%2CC0004%3A1%2CC0005%3A1%2CC0008%3A1%2CC0009%3A0&AwaitingReconsent=false; _evga_8b38={%22uuid%22:%22169349b27ef7e9cc%22}; _sfid_1a3a={%22anonymousId%22:%22169349b27ef7e9cc%22%2C%22consents%22:[]}; OCC_all.accor=fail; _gcl_au=1.1.461077611.1730274398; _ga_SKWJ7883ZP=GS1.1.1730274398.1.0.1730274398.0.0.648803893; _ga=GA1.1.895171141.1730274398; rxvt=1730276198650\|1730274389685; dtSa=false%7C_load_%7C3%7C_onload_%7C-%7C1730274398649%7C474389679_556%7Chttps%3A%2F%2Fall.accor.com%2Fenroll-loyalty%2Fcheck-authent.html%3FappId%3Dall.accor%26error_5Fdescription%3DAuthentication%2Bis%2Brequired.%26state%3Df3560ed2a8c46af4199ef8%26error%3Dlogin_5Frequired%7C%7C%7C.%7C; dtPC=1$474389679_556h-vCNCMQNAQOSCAVCJKBVISVNPVVSHILTAR-0e0; FPID=FPID2.2.%2BARv0vR3aab0oP7893f18RUvnXW%2FfVfL0SMkRJ4m18I%3D.1730274398; FPLC=9Ex%2B3P1o%2BykB8MYRIfGHK73t9szuTYTeNo5MFWy2VRDYFDGgWoj8mUpTMLlAQkOQ5FUlJmyB%2F4EPbLxsPm26F91P16e2sqdZfTDOGv5hJ0DaLRzDgLH7CEh3%2FA134A%3D%3D; wzuid=2e8add2e192
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=6773840;type=ah_count;cat=visits;gtm=45j91e4as1v886152357z86262265z9891108097za200zb6262265;dc_pre=1;u1=AccorHotels;u3=USD;u4=us;u5=EUR;u8=page_view;u10=%22%22;u19=en-us;u22=informationandservices%3A%3Aapp%20download;u41=895171141.1730274398;u45=not%20logged;dma=0;npa=1;gcs=G111;gcd=13r3r3r3r7l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=461077611.1730274398;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=90773391;s3p=1;~oref=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUk-GthnzPvb098UXYhPYDVCOk7cNdBR-Rm4NMJ6gbi_my8vJirra2IwQCQL; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=6773840;type=ah_count;cat=viewpage;ord=1231646715;gtm=45j91e4as1v886152357z86262265z9891108097za200zb6262265;dc_pre=1;u1=AccorHotels;u3=USD;u4=us;u5=EUR;u8=page_view;u19=en-us;u22=informationandservices%3A%3Aapp%20download;u41=895171141.1730274398;dma=0;npa=1;gcs=G111;gcd=13r3r3r3r7l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=461077611.1730274398;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=730383567;s3p=1;~oref=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUk-GthnzPvb098UXYhPYDVCOk7cNdBR-Rm4NMJ6gbi_my8vJirra2IwQCQL; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /.well-known/interest-group/permissions/?origin=https%3A%2F%2Fus.creativecdn.com HTTP/1.1Host: f.creativecdn.comConnection: keep-aliveAccept: application/jsonOrigin: https://us.creativecdn.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ig-membership?ntk=I9mH4X1oc6DXXP-HaQaInunoENLIoElwtga-xHkC6ZTjVUQW2zxqyVoQ2EJTyplYxRT91UyeruEHcte41X6CLUPToWSOxNmuyD3c-r-Tpw8&lbl=null&ff=true&checked=true&bas=false&ra=true HTTP/1.1Host: us.creativecdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: g=HSB0C00acqFu6m0pKmIe_1730274406977; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/11264248697/?random=1730274400030&cv=11&fst=1730271600000&bg=ffffff&guid=ON&async=1&gtm=45be4as0v9104227775z8812226527za200zb812226527&gcd=13r3r3r3r5l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&hn=www.googleadservices.com&frm=0&tiba=App%20Download&npa=0&pscdl=noapi&auid=461077611.1730274398&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQCa7L7dGRRUYZle-sl6rmJv67QnRwZNHmo44xF2UyHL2qckahJEaJM5&random=2761257506&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /idsync/ex/push/check?partner_id=2884&partner_url=https%3A%2F%2Ftr.snapchat.com%2Fcm%2Fp%3Frand%3D1729735501010%26pnid%3D140%26pcid%3D%24%7BTA_DEVICE_ID%7D HTTP/1.1Host: pixel.tapad.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://tr.snapchat.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1730274413638; TapAd_DID=c2ad76f0-4766-4f5f-b529-c5e6206e42ac
Source: global traffic	HTTP traffic detected: GET /p/insights/t/343097615 HTTP/1.1Host: bat.bing.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MR=0; MUID=24E3AD9B86A3613C0BF8B8B387C86035
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fgetuid%3Fhttps%253a%252f%252fmatch.adsrvr.org%252ftrack%252fcmf%252fappnexus%253fttd%253d1%2526anid%253d%2524UID%26ttd_tdid%3D6ea0385f-adb9-4a46-83a3-698c78b0a161 HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://match.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=hPPg_pRq85SV8Gz0PODxMG0GxVj7S95CsBWlvsp8MYpi8AmTA8j9qvlm4kEK8SnUQhkD3klQhEQ7vC0EJZSSNlHXVw8iC3prsStMgJbZ7bA.; receive-cookie-deprecation=1; uuid2=3142362625563049716
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/11264017752/?random=1730274400095&cv=11&fst=1730271600000&bg=ffffff&guid=ON&async=1&gtm=45be4as0v9104227775z8812226527za200zb812226527&gcd=13r3r3r3r5l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&hn=www.googleadservices.com&frm=0&tiba=App%20Download&npa=0&pscdl=noapi&auid=461077611.1730274398&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQCa7L7dEFuX0yqGdy_cttZ7YjoK3F6Ge6Nnl6NKoiBM1h68b243FNJv&random=4128220389&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/rubicon?gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://match.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=6ea0385f-adb9-4a46-83a3-698c78b0a161; TDCPM=CAESFgoHcnViaWNvbhILCOiH1qihsLw9EAUSFQoGZ29vZ2xlEgsIgqrWqKGwvD0QBRIXCghhcHBuZXh1cxILCKjI1qihsLw9EAUYBSgDMgsI1OXY1bewvD0QBUIPIg0IARIJCgV0aWVyMRABWgdwaW8wOW9oYAE.
Source: global traffic	HTTP traffic detected: GET /rules-p-Nfk-wbeA5EZDg.js HTTP/1.1Host: rules.quantcount.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/11264012497/?random=1730274400127&cv=11&fst=1730271600000&bg=ffffff&guid=ON&async=1&gtm=45be4as0v9104227775z8812226527za200zb812226527&gcd=13r3r3r3r5l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&hn=www.googleadservices.com&frm=0&tiba=App%20Download&npa=0&pscdl=noapi&auid=461077611.1730274398&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQCa7L7d2kidIlm8-ywQZFfq4M7xK233ZN0frJ5hx4v9Q9pVv1AY1zp-&random=2573513479&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/801297014/?random=1730274399996&cv=11&fst=1730271600000&bg=ffffff&guid=ON&async=1&gtm=45be4as0v9104227775z8812226527za200zb812226527&gcd=13r3r3r3r5l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&hn=www.googleadservices.com&frm=0&tiba=App%20Download&npa=0&pscdl=noapi&auid=461077611.1730274398&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQCa7L7dYLBfemHM_VkbYKqQDfeoBMfiVu4V6XVkZjoJzt6twjCEoug-&random=2293469602&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=649915528506999&ev=PageView&dl=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&rl=&if=false&ts=1730274406265&cd[content_category]=hotel&cd[external_id]=9ab4f1d3-b3a4-433f-a62e-3731c85af8dc&sw=1280&sh=1024&v=2.9.174&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1730274402904.1446008529&hmd=182c26f42e03f0ac6a9c110a&pl=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html&ler=empty&cdl=API_unavailable&it=1730274399964&coo=false&eid=1730274776895_173027499767785&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=649915528506999&ev=PageView&dl=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&rl=&if=false&ts=1730274406265&cd[content_category]=hotel&cd[external_id]=9ab4f1d3-b3a4-433f-a62e-3731c85af8dc&sw=1280&sh=1024&v=2.9.174&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1730274402904.1446008529&hmd=182c26f42e03f0ac6a9c110a&pl=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html&ler=empty&cdl=API_unavailable&it=1730274399964&coo=false&eid=1730274776895_173027499767785&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: not-navigation-source, trigger, event-sourceReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/src=6773840;type=ah_count;cat=viewpage;ord=1231646715;gtm=45j91e4as1v886152357z86262265z9891108097za200zb6262265;dc_pre=1;u1=AccorHotels;u3=USD;u4=us;u5=EUR;u8=page_view;u19=en-us;u22=informationandservices%3A%3Aapp%20download;u41=895171141.1730274398;dma=0;npa=1;gcs=G111;gcd=13r3r3r3r7l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=730383567;s3p=1;~oref=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/src=6773840;type=ah_count;cat=visits;gtm=45j91e4as1v886152357z86262265z9891108097za200zb6262265;dc_pre=1;u1=AccorHotels;u3=USD;u4=us;u5=EUR;u8=page_view;u10=%22%22;u19=en-us;u22=informationandservices%3A%3Aapp%20download;u41=895171141.1730274398;u45=not%20logged;dma=0;npa=1;gcs=G111;gcd=13r3r3r3r7l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=90773391;s3p=1;~oref=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag.gif?b_id=dfdd7f56-da87-4a8c-acdf-2b1df0d66f17&b_u=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&b_d=all.accor.com&b_p=%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html&b_q=%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&b_t=App%20Download&c_t=lap&t_id=824cc999-cfab-4121-a94d-dfb516eb384f&s_id=2d0d6fee-e64f8066&x4=100&e=pv&v=3.4.1&_t=1730274404413 HTTP/1.1Host: tr.line.meConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ldbrbid=tr__k1y/XGch5G1sfwtd6UAfAg==
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/11264201385/?random=1730274400383&cv=11&fst=1730271600000&bg=ffffff&guid=ON&async=1&gtm=45be4as0v9104227775z8812226527za200zb812226527&gcd=13r3r3r3r5l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&hn=www.googleadservices.com&frm=0&tiba=App%20Download&npa=0&pscdl=noapi&auid=461077611.1730274398&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQCa7L7d2tisx5bJ4f62konyquD5GNAbH2CTUPxCGx4aiAitv1LxYOn2&random=2929589143&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/11264275592/?random=1730274400316&cv=11&fst=1730271600000&bg=ffffff&guid=ON&async=1&gtm=45be4as0v9104227775z8812226527za200zb812226527&gcd=13r3r3r3r5l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&hn=www.googleadservices.com&frm=0&tiba=App%20Download&npa=0&pscdl=noapi&auid=461077611.1730274398&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQCa7L7dxdJaAIVg_kNfOYeyN7mRmaU6q6rJuItAB4crNN3zO7BawczH&random=781143050&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/11263996687/?random=1730274400168&cv=11&fst=1730271600000&bg=ffffff&guid=ON&async=1&gtm=45be4as0v9104227775z8812226527za200zb812226527&gcd=13r3r3r3r5l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&hn=www.googleadservices.com&frm=0&tiba=App%20Download&npa=0&pscdl=noapi&auid=461077611.1730274398&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQCa7L7dbwDdNlct2NP-cJ8vAxs4cneB6_rlH04rE9aZ-Z9ap5ze3hB_&random=795113720&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /3.5.0/sdk.min.js HTTP/1.1Host: via.batch.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cm/p?rand=1729735501010&pnid=140&pcid=c2ad76f0-4766-4f5f-b529-c5e6206e42ac HTTP/1.1Host: tr.snapchat.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://tr.snapchat.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sc_at=v2\|H4sIAAAAAAAAAE3GwRHAIAgEwIqY4ZAETDcIUoXF5+u+tmzFeHJSZzhp4aXYKwmuBslqaz9Q/mCDxVQh5yr/FONrNkAAAAA=
Source: global traffic	HTTP traffic detected: GET /batchsdk-worker-loader.js HTTP/1.1Host: all.accor.comConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://all.accor.com/a/en/new-app-offer/app-download.html?source_caller=bulk&af_qr=true&shortlink=5m1nc8of&c=20241013_ALL_AppBonusingMobileLp&af_ad=QR_code_20241013_ALL_AppBonusingMobileLp&pid=QR_code&deep_link_value=accor%3A%2F%2Fsearch%2Foffer%3Fpage_id%3Dddc8e830-2fc5-4492-ae7f-a63574b202f4&af_adset=ENUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; incap_ses_1388_3039981=WwV9UFsZYQbcTBz5zCpDE0/kIWcAAAAAAlW7vDjSIvNuKK2ooaDNBg==; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; incap_ses_1237_3039981=RMkdawpcO0pafv9zF7UqEVDkIWcAAAAAOdDq+0nC/oeq6w4fyTL3Fg==; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjoiQUgiLCJyZXRhaW5lZG1lcmNoYW50aWQiOiJBSCJ9; incap_ses_965_3039981=q99Yd2XUwRILYtlqj15kDVLkIWcAAAAA3wW8EuVmSTOVbo8SRcNLVg==; rxVisitor=1730274389683JLIBD8T14271V8K1PF607REH7HAD6SU0; incap_ses_951_3039981=GL4CVhbxPgx+DtlaoqEyDVbkIWcAAAAA0uuNvYfu1J2VDDucdA8ZtQ==; accorref=https://all.accor.com/; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+30+2024+03%3A46%3A35+GMT-0400+(Eastern+Daylight+Time)&version=202409.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&genVendors=V62%3A0%2CV37%3A0%2CV67%3A0%2CV38%3A0%2CV64%3A0%2CV58%3A0%2CV25%3A0%2CV26%3A0%2CV42%3A0%2CV9%3A0%2CV8%3A0%2CV27%3A0%2CV51%3A0%2CV39%3A0%2CV23%3A0%2CV55%3A0%2CV5%3A0%2CV34%3A0%2CV10%3A0%2CV53%3A0%2CV59%3A0%2CV74%3A0%2CV36%3A0%2CV49%3A0%2CV65%3A0%2CV19%3A0%2CV33%3A0%2CV57%3A0%2CV52%3A0%2CV48%3A0%2CV29%3A0%2CV17%3A0%2CV11%3A0%2CV56%3A0%2CV12%3A0%2CV72%3A0%2CV13%3A0%2CV41%3A0%2CV40%3A0%2CV68%3A0%2CV60%3A0%2CV50%3A0%2CV15%3A0%2CV54%3A0%2CV28%3A0%2CV30%3A0%2CV46%3A0%2CV4%3A0%2CV14%3A0%2CV61%3A0%2CV7%3A0%2CV45%3A0%2CV16%3A0%2CV32%3A0%2CV21%3A0%2CV69%3A0%2CV63%3A0%2CV73%3A0%2CV6%3A0%2CV18%3A0%2CV31%3A0%2CV44%3A0%2CV71%3A0%2CV43%3A0%2CV35%3A0%2CV47%3A0%2C&consentId=9ab4f1d3-b3a4-433f-a62e-3731c85af8dc&intera
Source: global traffic	HTTP traffic detected: GET /p/insights/s/0.7.49 HTTP/1.1Host: bat.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MR=0; MUID=24E3AD9B86A3613C0BF8B8B387C86035; MSPTC=oxHT_kvxzXdzuS0Mc54xWi7yRQ6b3nMcb6MhlFMchsM
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/11264198074/?random=1730274400575&cv=11&fst=1730271600000&bg=ffffff&guid=ON&async=1&gtm=45be4as0v9104227775z8812226527za200zb812226527&gcd=13r3r3r3r5l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&hn=www.googleadservices.com&frm=0&tiba=App%20Download&npa=0&pscdl=noapi&auid=461077611.1730274398&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQCa7L7dyOngjUrAdehglZNcGRJf85WVu4k42ng5iNdijd2ES6bOSdbR&random=1767678942&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /setuid?entity=315&code=FeS4XmfEwPi5ly0Z3OB1jxTVIEgXviKQSLjGDl18Wg4&consent=1 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=hPPg_pRq85SV8Gz0PODxMG0GxVj7S95CsBWlvsp8MYpi8AmTA8j9qvlm4kEK8SnUQhkD3klQhEQ7vC0EJZSSNlHXVw8iC3prsStMgJbZ7bA.; receive-cookie-deprecation=1; uuid2=3142362625563049716
Source: global traffic	HTTP traffic detected: GET /track/cmf/appnexus?ttd=1&anid=3142362625563049716&ttd_tdid=6ea0385f-adb9-4a46-83a3-698c78b0a161 HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://match.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=6ea0385f-adb9-4a46-83a3-698c78b0a161; TDCPM=CAESFgoHcnViaWNvbhILCOiH1qihsLw9EAUSFQoGZ29vZ2xlEgsIgqrWqKGwvD0QBRIXCghhcHBuZXh1cxILCKjI1qihsLw9EAUYBSABKAMyCwjU5djVt7C8PRAFQg8iDQgBEgkKBXRpZXIxEAFaB3BpbzA5b2hgAQ..
Source: global traffic	HTTP traffic detected: GET /pixel;r=156458351;labels=_fp.event.PageView;source=gtm;event=refresh;rf=0;a=p-Nfk-wbeA5EZDg;url=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN;ns=0;ce=1;qjs=1;qv=fd657345-20240925114642;ref=;d=accor.com;dst=1;et=1730274412543;tzo=240;ogl=site_name.all%252Eaccor%252Ecom%2Ctype.website%2Ctitle.App%20Download%2Curl.https%3A%2F%2Fall%252Eaccor%252Ecom%2Fa%2Fen%2Fnew-app-offer%2Fapp-download%252Ehtml%2Cimage.%2Cimage.https%3A%2F%2Faem-all%252Eaccor%252Ecom%2Fcontent%2Fdam%2Fall%2Fglobal-marketing%2Fcampaigns%2Fcentral-tea;ses=6fd7eb9a-252f-49e7-8987-b545bbd4a229;uht=2;fpan=1;fpa=P0-707071200-1730274404307;pbc=;cm=undefined;gdpr=0;mdl= HTTP/1.1Host: pixel.quantserve.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/worker.min.js HTTP/1.1Host: via.batch.comConnection: keep-aliveCache-Control: max-age=0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=649915528506999&ev=PageView&dl=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&rl=&if=false&ts=1730274406265&cd[content_category]=hotel&cd[external_id]=9ab4f1d3-b3a4-433f-a62e-3731c85af8dc&sw=1280&sh=1024&v=2.9.174&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1730274402904.1446008529&hmd=182c26f42e03f0ac6a9c110a&pl=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html&ler=empty&cdl=API_unavailable&it=1730274399964&coo=false&eid=1730274776895_173027499767785&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/11264248697/?random=1730274400030&cv=11&fst=1730271600000&bg=ffffff&guid=ON&async=1&gtm=45be4as0v9104227775z8812226527za200zb812226527&gcd=13r3r3r3r5l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&hn=www.googleadservices.com&frm=0&tiba=App%20Download&npa=0&pscdl=noapi&auid=461077611.1730274398&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQCa7L7dGRRUYZle-sl6rmJv67QnRwZNHmo44xF2UyHL2qckahJEaJM5&random=2761257506&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=649915528506999&ev=PageView&dl=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&rl=&if=false&ts=1730274406265&cd[content_category]=hotel&cd[external_id]=9ab4f1d3-b3a4-433f-a62e-3731c85af8dc&sw=1280&sh=1024&v=2.9.174&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1730274402904.1446008529&hmd=182c26f42e03f0ac6a9c110a&pl=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html&ler=empty&cdl=API_unavailable&it=1730274399964&coo=false&eid=1730274776895_173027499767785&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/11264017752/?random=1730274400095&cv=11&fst=1730271600000&bg=ffffff&guid=ON&async=1&gtm=45be4as0v9104227775z8812226527za200zb812226527&gcd=13r3r3r3r5l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&hn=www.googleadservices.com&frm=0&tiba=App%20Download&npa=0&pscdl=noapi&auid=461077611.1730274398&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQCa7L7dEFuX0yqGdy_cttZ7YjoK3F6Ge6Nnl6NKoiBM1h68b243FNJv&random=4128220389&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/801297014/?random=1730274399996&cv=11&fst=1730271600000&bg=ffffff&guid=ON&async=1&gtm=45be4as0v9104227775z8812226527za200zb812226527&gcd=13r3r3r3r5l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&hn=www.googleadservices.com&frm=0&tiba=App%20Download&npa=0&pscdl=noapi&auid=461077611.1730274398&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQCa7L7dYLBfemHM_VkbYKqQDfeoBMfiVu4V6XVkZjoJzt6twjCEoug-&random=2293469602&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/11264201385/?random=1730274400383&cv=11&fst=1730271600000&bg=ffffff&guid=ON&async=1&gtm=45be4as0v9104227775z8812226527za200zb812226527&gcd=13r3r3r3r5l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&hn=www.googleadservices.com&frm=0&tiba=App%20Download&npa=0&pscdl=noapi&auid=461077611.1730274398&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQCa7L7d2tisx5bJ4f62konyquD5GNAbH2CTUPxCGx4aiAitv1LxYOn2&random=2929589143&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p/insights/s/0.7.49 HTTP/1.1Host: bat.bing.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MR=0; MUID=24E3AD9B86A3613C0BF8B8B387C86035; MSPTC=JHhfnrFr2S8KqUEXJ_Yovhs_rXa_KvUQKvFj3SyA_EU
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/11264198074/?random=1730274400575&cv=11&fst=1730271600000&bg=ffffff&guid=ON&async=1&gtm=45be4as0v9104227775z8812226527za200zb812226527&gcd=13r3r3r3r5l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&hn=www.googleadservices.com&frm=0&tiba=App%20Download&npa=0&pscdl=noapi&auid=461077611.1730274398&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQCa7L7dyOngjUrAdehglZNcGRJf85WVu4k42ng5iNdijd2ES6bOSdbR&random=1767678942&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /setuid?entity=315&code=FeS4XmfEwPi5ly0Z3OB1jxTVIEgXviKQSLjGDl18Wg4&consent=1 HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=3142362625563049716; anj=dTM7k!M4/rD>6NRF']wIg2Il]DkMjx!@wnfH1YbZRGH!W=E?%YkLd^#h-b^ZiprzR.RnCtf^=gB/lAcu7jfPZ7$$?:gQANghqyY1:/^yBu:9#7%nugO%v4VB%nlOO-%TDd
Source: global traffic	HTTP traffic detected: GET /pixel;r=156458351;labels=_fp.event.PageView;source=gtm;event=refresh;rf=0;a=p-Nfk-wbeA5EZDg;url=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN;ns=0;ce=1;qjs=1;qv=fd657345-20240925114642;ref=;d=accor.com;dst=1;et=1730274412543;tzo=240;ogl=site_name.all%252Eaccor%252Ecom%2Ctype.website%2Ctitle.App%20Download%2Curl.https%3A%2F%2Fall%252Eaccor%252Ecom%2Fa%2Fen%2Fnew-app-offer%2Fapp-download%252Ehtml%2Cimage.%2Cimage.https%3A%2F%2Faem-all%252Eaccor%252Ecom%2Fcontent%2Fdam%2Fall%2Fglobal-marketing%2Fcampaigns%2Fcentral-tea;ses=6fd7eb9a-252f-49e7-8987-b545bbd4a229;uht=2;fpan=1;fpa=P0-707071200-1730274404307;pbc=;cm=undefined;gdpr=0;mdl= HTTP/1.1Host: pixel.quantserve.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=6721e470-35e34-2756d-e7ca7
Source: global traffic	HTTP traffic detected: GET /3.5.0/alert.min.js HTTP/1.1Host: via.batch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /3.5.0/alert.min.js HTTP/1.1Host: via.batch.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /D5F02C3DD591499BA7CE3D42772E1066/default-icon.png HTTP/1.1Host: icons.batch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/3.5.0/ev/D5F02C3DD591499BA7CE3D42772E1066 HTTP/1.1Host: ws.batch.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /D5F02C3DD591499BA7CE3D42772E1066/default-icon.png HTTP/1.1Host: icons.batch.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202409.2.0/assets/v2/otPcCenter.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://all.accor.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /tr/?id=649915528506999&ev=SubscribedButtonClick&dl=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&rl=&if=false&ts=1730274442441&cd[buttonFeatures]=%7B%22classList%22%3A%22cookie-setting-link%22%2C%22destination%22%3A%22%22%2C%22id%22%3A%22onetrust-pc-btn-handler%22%2C%22imageUrl%22%3A%22%22%2C%22innerText%22%3A%22Customize%22%2C%22numChildButtons%22%3A0%2C%22tag%22%3A%22button%22%2C%22type%22%3Anull%2C%22name%22%3A%22%22%2C%22value%22%3A%22%22%7D&cd[buttonText]=Customize&cd[formFeatures]=%5B%5D&cd[pageFeatures]=%7B%22title%22%3A%22App%20Download%22%7D&sw=1280&sh=1024&v=2.9.174&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1730274402904.1446008529&ler=empty&cdl=API_unavailable&it=1730274399964&coo=false&es=automatic&tm=3&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=649915528506999&ev=SubscribedButtonClick&dl=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&rl=&if=false&ts=1730274442441&cd[buttonFeatures]=%7B%22classList%22%3A%22cookie-setting-link%22%2C%22destination%22%3A%22%22%2C%22id%22%3A%22onetrust-pc-btn-handler%22%2C%22imageUrl%22%3A%22%22%2C%22innerText%22%3A%22Customize%22%2C%22numChildButtons%22%3A0%2C%22tag%22%3A%22button%22%2C%22type%22%3Anull%2C%22name%22%3A%22%22%2C%22value%22%3A%22%22%7D&cd[buttonText]=Customize&cd[formFeatures]=%5B%5D&cd[pageFeatures]=%7B%22title%22%3A%22App%20Download%22%7D&sw=1280&sh=1024&v=2.9.174&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1730274402904.1446008529&ler=empty&cdl=API_unavailable&it=1730274399964&coo=false&es=automatic&tm=3&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, triggerReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /logos/static/ot_guard_logo.svg HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://all.accor.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202409.2.0/assets/v2/otPcCenter.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /logos/a9a7c29d-9ac6-471d-9d50-9e5237da1bab/38cbaaa3-452b-476f-9f4e-893ea1700166/6605e452-c3c7-4fac-8823-33591a8d74b8/19J3103E_ALLaccorLogoWEBetMOBILEtb_RGB.png HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/static/powered_by_logo.svg HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /tr/?id=649915528506999&ev=SubscribedButtonClick&dl=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&rl=&if=false&ts=1730274442441&cd[buttonFeatures]=%7B%22classList%22%3A%22cookie-setting-link%22%2C%22destination%22%3A%22%22%2C%22id%22%3A%22onetrust-pc-btn-handler%22%2C%22imageUrl%22%3A%22%22%2C%22innerText%22%3A%22Customize%22%2C%22numChildButtons%22%3A0%2C%22tag%22%3A%22button%22%2C%22type%22%3Anull%2C%22name%22%3A%22%22%2C%22value%22%3A%22%22%7D&cd[buttonText]=Customize&cd[formFeatures]=%5B%5D&cd[pageFeatures]=%7B%22title%22%3A%22App%20Download%22%7D&sw=1280&sh=1024&v=2.9.174&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1730274402904.1446008529&ler=empty&cdl=API_unavailable&it=1730274399964&coo=false&es=automatic&tm=3&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/static/ot_guard_logo.svg HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-SKWJ7883ZP&gtm=45je4as0v893732783z86262265za200zb6262265&_p=1730274389842&gcs=G111&gcd=13r3r3r3r7l1&npa=1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&cid=895171141.1730274398&ecid=648803893&ul=en-us&sr=1280x1024&ur=US&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&frm=0&pscdl=noapi&sst.rnd=1204522180.1730274398&sst.ngs=1&sst.tft=1730274389842&sst.ude=0&ngs=1&_s=2&dl=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&sid=1730274398&sct=1&seg=1&dt=App%20Download&tfd=58802&richsstsse HTTP/1.1Host: sgtm.accor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: org=evy; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjoiQUgiLCJyZXRhaW5lZG1lcmNoYW50aWQiOiJBSCJ9; rxVisitor=1730274389683JLIBD8T14271V8K1PF607REH7HAD6SU0; accorref=https://all.accor.com/; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+30+2024+03%3A46%3A35+GMT-0400+(Eastern+Daylight+Time)&version=202409.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&genVendors=V62%3A0%2CV37%3A0%2CV67%3A0%2CV38%3A0%2CV64%3A0%2CV58%3A0%2CV25%3A0%2CV26%3A0%2CV42%3A0%2CV9%3A0%2CV8%3A0%2CV27%3A0%2CV51%3A0%2CV39%3A0%2CV23%3A0%2CV55%3A0%2CV5%3A0%2CV34%3A0%2CV10%3A0%2CV53%3A0%2CV59%3A0%2CV74%3A0%2CV36%3A0%2CV49%3A0%2CV65%3A0%2CV19%3A0%2CV33%3A0%2CV57%3A0%2CV52%3A0%2CV48%3A0%2CV29%3A0%2CV17%3A0%2CV11%3A0%2CV56%3A0%2CV12%3A0%2CV72%3A0%2CV13%3A0%2CV41%3A0%2CV40%3A0%2CV68%3A0%2CV60%3A0%2CV50%3A0%2CV15%3A0%2CV54%3A0%2CV28%3A0%2CV30%3A0%2CV46%3A0%2CV4%3A0%2CV14%3A0%2CV61%3A0%2CV7%3A0%2CV45%3A0%2CV16%3A0%2CV32%3A0%2CV21%3A0%2CV69%3A0%2CV63%3A0%2CV73%3A0%2CV6%3A0%2CV18%3A0%2CV31%3A0%2CV44%3A0%2CV71%3A0%2CV43%3A0%2CV35%3A0%2CV47%3A0%2C&consentId=9ab4f1d3-b3a4-433f-a62e-3731c85af8dc&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0007%3A1%2CC0004%3A1%2CC0005%3A1%2CC0008%3A1%2CC0009%3A0&AwaitingReconsent=false; _evga_8b38={%22uuid%22:%22169349b27ef7e9cc%22}; _sfid_1a3a={%22anonymousId%22:%22169349b27ef7e9cc%22%2C%22consents%22:[]}; OCC_a
Source: global traffic	HTTP traffic detected: GET /logos/static/powered_by_logo.svg HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /logos/a9a7c29d-9ac6-471d-9d50-9e5237da1bab/38cbaaa3-452b-476f-9f4e-893ea1700166/6605e452-c3c7-4fac-8823-33591a8d74b8/19J3103E_ALLaccorLogoWEBetMOBILEtb_RGB.png HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=649915528506999&ev=SubscribedButtonClick&dl=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&rl=&if=false&ts=1730274442441&cd[buttonFeatures]=%7B%22classList%22%3A%22cookie-setting-link%22%2C%22destination%22%3A%22%22%2C%22id%22%3A%22onetrust-pc-btn-handler%22%2C%22imageUrl%22%3A%22%22%2C%22innerText%22%3A%22Customize%22%2C%22numChildButtons%22%3A0%2C%22tag%22%3A%22button%22%2C%22type%22%3Anull%2C%22name%22%3A%22%22%2C%22value%22%3A%22%22%7D&cd[buttonText]=Customize&cd[formFeatures]=%5B%5D&cd[pageFeatures]=%7B%22title%22%3A%22App%20Download%22%7D&sw=1280&sh=1024&v=2.9.174&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1730274402904.1446008529&ler=empty&cdl=API_unavailable&it=1730274399964&coo=false&es=automatic&tm=3&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: chromecache_223.2.dr, chromecache_401.2.dr, chromecache_349.2.dr, chromecache_414.2.dr	String found in binary or memory: Math.round(q);t["gtm.videoElapsedTime"]=Math.round(f);t["gtm.videoPercent"]=r;t["gtm.videoVisible"]=u;return t},rk:function(){e=pb()},zd:function(){d()}}};var Yb=ka(["data-gtm-yt-inspected-"]),nD=["www.youtube.com","www.youtube-nocookie.com"],oD,pD=!1; equals www.youtube.com (Youtube)
Source: chromecache_223.2.dr, chromecache_401.2.dr, chromecache_349.2.dr, chromecache_414.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={Ah:e,yh:f,zh:g,ii:k,ji:m,Qe:n,Ib:b},q=C.YT;if(q)return q.ready&&q.ready(d),b;var r=C.onYouTubeIframeAPIReady;C.onYouTubeIframeAPIReady=function(){r&&r();d()};G(function(){for(var u=E.getElementsByTagName("script"),v=u.length,t=0;t<v;t++){var w=u[t].getAttribute("src");if(yD(w,"iframe_api")\|\|yD(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!pD&&wD(x[A],p.Qe))return oc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_257.2.dr, chromecache_251.2.dr, chromecache_382.2.dr, chromecache_278.2.dr, chromecache_452.2.dr, chromecache_276.2.dr, chromecache_394.2.dr, chromecache_404.2.dr	String found in binary or memory: return b}lD.F="internal.enableAutoEventOnTimer";var Yb=ka(["data-gtm-yt-inspected-"]),nD=["www.youtube.com","www.youtube-nocookie.com"],oD,pD=!1; equals www.youtube.com (Youtube)
Source: chromecache_405.2.dr	String found in binary or memory: return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_405.2.dr	String found in binary or memory: return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_405.2.dr	String found in binary or memory: return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";var a={ENDPOINT:"https://www.facebook.com/tr/",INSTAGRAM_TRIGGER_ATTRIBUTION:"https://www.instagram.com/tr/",AEM_ENDPOINT:"https://www.facebook.com/.well-known/aggregated-event-measurement/",GPS_ENDPOINT:"https://www.facebook.com/privacy_sandbox/pixel/register/trigger/",TOPICS_API_ENDPOINT:"https://www.facebook.com/privacy_sandbox/topics/registration/"};j.exports=a})();return j.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: all.accor.com
Source: global traffic	DNS traffic detected: DNS query: cdn.cookielaw.org
Source: global traffic	DNS traffic detected: DNS query: m.ahstatic.com
Source: global traffic	DNS traffic detected: DNS query: cdn.evgnet.com
Source: global traffic	DNS traffic detected: DNS query: static-p46175-e229011.adobeaemcloud.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: api.accor.com
Source: global traffic	DNS traffic detected: DNS query: geolocation.onetrust.com
Source: global traffic	DNS traffic detected: DNS query: login.accor.com
Source: global traffic	DNS traffic detected: DNS query: accor.onelink.me
Source: global traffic	DNS traffic detected: DNS query: qchmhd61sj.kameleoon.eu
Source: global traffic	DNS traffic detected: DNS query: data.kameleoon.io
Source: global traffic	DNS traffic detected: DNS query: aem-api.accor.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: w.usabilla.com
Source: global traffic	DNS traffic detected: DNS query: accorsa.germany-2.evergage.com
Source: global traffic	DNS traffic detected: DNS query: sgtm.accor.com
Source: global traffic	DNS traffic detected: DNS query: t.contentsquare.net
Source: global traffic	DNS traffic detected: DNS query: resources.xg4ken.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: static.sojern.com
Source: global traffic	DNS traffic detected: DNS query: d6tizftlrpuof.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: snap.licdn.com
Source: global traffic	DNS traffic detected: DNS query: static.ads-twitter.com
Source: global traffic	DNS traffic detected: DNS query: sc-static.net
Source: global traffic	DNS traffic detected: DNS query: p.teads.tv
Source: global traffic	DNS traffic detected: DNS query: secure.quantserve.com
Source: global traffic	DNS traffic detected: DNS query: static.tacdn.com
Source: global traffic	DNS traffic detected: DNS query: analytics.tiktok.com
Source: global traffic	DNS traffic detected: DNS query: cdn.tkrconnector.com
Source: global traffic	DNS traffic detected: DNS query: via.batch.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: tags.creativecdn.com
Source: global traffic	DNS traffic detected: DNS query: js.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: d.line-scdn.net
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: srm.ba.contentsquare.net
Source: global traffic	DNS traffic detected: DNS query: q-aeu1.contentsquare.net
Source: global traffic	DNS traffic detected: DNS query: www.tamgrt.com
Source: global traffic	DNS traffic detected: DNS query: tr.snapchat.com
Source: global traffic	DNS traffic detected: DNS query: k-aeu1.contentsquare.net
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: us.creativecdn.com
Source: global traffic	DNS traffic detected: DNS query: cm.teads.tv
Source: global traffic	DNS traffic detected: DNS query: insight.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: match.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: c.contentsquare.net
Source: global traffic	DNS traffic detected: DNS query: fledge.teads.tv
Source: global traffic	DNS traffic detected: DNS query: t.teads.tv
Source: global traffic	DNS traffic detected: DNS query: www.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: t.co
Source: global traffic	DNS traffic detected: DNS query: analytics.twitter.com
Source: global traffic	DNS traffic detected: DNS query: ad.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: rules.quantcount.com
Source: global traffic	DNS traffic detected: DNS query: tr.line.me
Source: global traffic	DNS traffic detected: DNS query: pixel.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: adservice.google.com
Source: global traffic	DNS traffic detected: DNS query: pixel.tapad.com
Source: global traffic	DNS traffic detected: DNS query: f.creativecdn.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: pixel.quantserve.com
Source: global traffic	DNS traffic detected: DNS query: tr6.snapchat.com
Source: global traffic	DNS traffic detected: DNS query: ws.batch.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: analytics.pangle-ads.com
Source: global traffic	DNS traffic detected: DNS query: analytics-ipv6.tiktokw.us
Source: global traffic	DNS traffic detected: DNS query: icons.batch.com

Source: unknown

HTTP traffic detected: POST /referential/v1/best-visit/cookie-attribution HTTP/1.1Host: api.accor.comConnection: keep-aliveContent-Length: 2sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Content-Type: text/plain;charset=UTF-8apikey: asHOCgjzKWHp8O7qXPKOfBTZ4k9Sq6IAsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://all.accor.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://all.accor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: org=evy; x-aem-variant=undefined; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccept-Ranges: bytesCache-control: private, max-age=3600, stale-while-revalidate=21600Content-Type: text/html; charset=utf-8Date: Wed, 30 Oct 2024 07:46:17 GMTP3P: CP="NO P3P POLICY"Referrer-Policy: originserver: MF 8700 S - Dyna-VT - Stage V All-in-OneSet-Cookie: org=evy; path=/; Max-Age=900; domain=.accor.com; SameSite=none; SecureSet-Cookie: nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; HttpOnly; path=/Set-Cookie: incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; path=/Strict-Transport-Security: max-age=15552000Vary: Origin, Accept-EncodingX-Accor-asset: wiseX-CDN: ImpervaX-CDN-Forward: EdgeCastX-Clacks-Overhead: GNU Terry PratchettX-Iinfo: 17-211792524-211792525 NNNY CT(12 21 0) RT(1730274377140 4) q(0 0 0 1) r(0 0) U24X-XSS-Protection: 1; mode=blockTransfer-Encoding: chunkedConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccept-Ranges: bytesCache-control: private, max-age=3600, stale-while-revalidate=21600Content-Type: text/html; charset=utf-8Date: Wed, 30 Oct 2024 07:46:32 GMTP3P: CP="NO P3P POLICY"Referrer-Policy: originserver: MF 8700 S - Dyna-VT - Stage V All-in-OneServer-Timing: dtSInfo;desc="0", dtRpid;desc="-177340047"Set-Cookie: org=evy; path=/; Max-Age=900; domain=.accor.com; SameSite=none; SecureStrict-Transport-Security: max-age=15552000traceresponse: 00-a35d0c63c10f3ee5084e4a3345242f70-a380cc8560f16313-01Vary: Origin, Accept-EncodingX-Accor-asset: wiseX-CDN: ImpervaX-CDN-Forward: EdgeCastX-Clacks-Overhead: GNU Terry Pratchettx-dt-tracestate: b7404764-46223171@dtX-Iinfo: 14-96811778-96811779 NNNY CT(13 16 0) RT(1730274391978 3) q(0 0 0 -1) r(1 1) U24X-OneAgent-JS-Injection: trueX-ruxit-JS-Agent: trueX-XSS-Protection: 1; mode=blockContent-Length: 11427Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 30 Oct 2024 07:46:48 GMTContent-Type: text/plain; charset=UTF-8Content-Length: 42Connection: close

Source: chromecache_332.2.dr, chromecache_457.2.dr	String found in binary or memory: http://jquery.com/
Source: chromecache_332.2.dr, chromecache_457.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_332.2.dr, chromecache_457.2.dr	String found in binary or memory: http://sizzlejs.com/
Source: chromecache_280.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: chromecache_365.2.dr	String found in binary or memory: https://accor.onelink.me/5GRx/5m1nc8of
Source: chromecache_404.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_288.2.dr	String found in binary or memory: https://aem-all.accor.com/content/dam/all/global-marketing/campaigns/central-team/app-offer-bonusing
Source: chromecache_288.2.dr, chromecache_365.2.dr	String found in binary or memory: https://all-activitiesandevents.accor.com/en-gb
Source: chromecache_288.2.dr, chromecache_350.2.dr, chromecache_277.2.dr, chromecache_400.2.dr	String found in binary or memory: https://all.accor.com
Source: chromecache_365.2.dr	String found in binary or memory: https://all.accor.com/a/ar/new-app-offer.html
Source: chromecache_288.2.dr	String found in binary or memory: https://all.accor.com/a/ar/new-app-offer/app-download.html
Source: chromecache_365.2.dr	String found in binary or memory: https://all.accor.com/a/de/new-app-offer.html
Source: chromecache_288.2.dr	String found in binary or memory: https://all.accor.com/a/de/new-app-offer/app-download.html
Source: chromecache_365.2.dr	String found in binary or memory: https://all.accor.com/a/en.html
Source: chromecache_365.2.dr	String found in binary or memory: https://all.accor.com/a/en/brands.html
Source: chromecache_288.2.dr, chromecache_365.2.dr	String found in binary or memory: https://all.accor.com/a/en/deals-corner.html
Source: chromecache_365.2.dr	String found in binary or memory: https://all.accor.com/a/en/experiences/ena-all-for-family.html
Source: chromecache_365.2.dr	String found in binary or memory: https://all.accor.com/a/en/experiences/ena-destinations-of-the-month.html
Source: chromecache_365.2.dr	String found in binary or memory: https://all.accor.com/a/en/experiences/ena-new-openings.html
Source: chromecache_290.2.dr, chromecache_417.2.dr, chromecache_365.2.dr	String found in binary or memory: https://all.accor.com/a/en/limitless.html
Source: chromecache_365.2.dr	String found in binary or memory: https://all.accor.com/a/en/limitless/thematics.html
Source: chromecache_288.2.dr, chromecache_365.2.dr	String found in binary or memory: https://all.accor.com/a/en/loyalty-program/activities-and-events.html
Source: chromecache_343.2.dr	String found in binary or memory: https://all.accor.com/a/en/new-app-offer.html
Source: chromecache_288.2.dr	String found in binary or memory: https://all.accor.com/a/en/new-app-offer/app-download.html
Source: chromecache_343.2.dr	String found in binary or memory: https://all.accor.com/a/en/new-app-offer/app-download.html?source_caller=bulk&af_qr=true&shortlink=5
Source: chromecache_365.2.dr	String found in binary or memory: https://all.accor.com/a/en/offers/room-for-a-day.html
Source: chromecache_365.2.dr	String found in binary or memory: https://all.accor.com/a/es/new-app-offer.html
Source: chromecache_288.2.dr	String found in binary or memory: https://all.accor.com/a/es/new-app-offer/app-download.html
Source: chromecache_365.2.dr	String found in binary or memory: https://all.accor.com/a/fr/new-app-offer.html
Source: chromecache_288.2.dr	String found in binary or memory: https://all.accor.com/a/fr/new-app-offer/app-download.html
Source: chromecache_365.2.dr	String found in binary or memory: https://all.accor.com/a/id/new-app-offer.html
Source: chromecache_288.2.dr	String found in binary or memory: https://all.accor.com/a/id/new-app-offer/app-download.html
Source: chromecache_365.2.dr	String found in binary or memory: https://all.accor.com/a/it/new-app-offer.html
Source: chromecache_288.2.dr	String found in binary or memory: https://all.accor.com/a/it/new-app-offer/app-download.html
Source: chromecache_365.2.dr	String found in binary or memory: https://all.accor.com/a/ja/new-app-offer.html
Source: chromecache_288.2.dr	String found in binary or memory: https://all.accor.com/a/ja/new-app-offer/app-download.html
Source: chromecache_365.2.dr	String found in binary or memory: https://all.accor.com/a/ko/new-app-offer.html
Source: chromecache_288.2.dr	String found in binary or memory: https://all.accor.com/a/ko/new-app-offer/app-download.html
Source: chromecache_365.2.dr	String found in binary or memory: https://all.accor.com/a/nl/new-app-offer.html
Source: chromecache_288.2.dr	String found in binary or memory: https://all.accor.com/a/nl/new-app-offer/app-download.html
Source: chromecache_365.2.dr	String found in binary or memory: https://all.accor.com/a/pl/new-app-offer.html
Source: chromecache_288.2.dr	String found in binary or memory: https://all.accor.com/a/pl/new-app-offer/app-download.html
Source: chromecache_365.2.dr	String found in binary or memory: https://all.accor.com/a/pt-br/new-app-offer.html
Source: chromecache_288.2.dr	String found in binary or memory: https://all.accor.com/a/pt-br/new-app-offer/app-download.html
Source: chromecache_288.2.dr, chromecache_367.2.dr, chromecache_280.2.dr, chromecache_365.2.dr	String found in binary or memory: https://all.accor.com/a/pt-br/subscription-program/all-signature.html
Source: chromecache_365.2.dr	String found in binary or memory: https://all.accor.com/a/pt/new-app-offer.html
Source: chromecache_288.2.dr	String found in binary or memory: https://all.accor.com/a/pt/new-app-offer/app-download.html
Source: chromecache_365.2.dr	String found in binary or memory: https://all.accor.com/a/ru/new-app-offer.html
Source: chromecache_288.2.dr	String found in binary or memory: https://all.accor.com/a/ru/new-app-offer/app-download.html
Source: chromecache_365.2.dr	String found in binary or memory: https://all.accor.com/a/th/new-app-offer.html
Source: chromecache_288.2.dr	String found in binary or memory: https://all.accor.com/a/th/new-app-offer/app-download.html
Source: chromecache_365.2.dr	String found in binary or memory: https://all.accor.com/a/tr/new-app-offer.html
Source: chromecache_288.2.dr	String found in binary or memory: https://all.accor.com/a/tr/new-app-offer/app-download.html
Source: chromecache_365.2.dr	String found in binary or memory: https://all.accor.com/a/zh/new-app-offer.html
Source: chromecache_288.2.dr	String found in binary or memory: https://all.accor.com/a/zh/new-app-offer/app-download.html
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.ar.shtml#/dashboard
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.ar.shtml#/global-transaction-history
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.ar.shtml#/information/personal
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.ar.shtml#/my-bookings
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.ar.shtml#/my-loyalty-program
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.de.shtml#/dashboard
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.de.shtml#/global-transaction-history
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.de.shtml#/information/personal
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.de.shtml#/my-bookings
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.de.shtml#/my-loyalty-program
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.es.shtml#/dashboard
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.es.shtml#/global-transaction-history
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.es.shtml#/information/personal
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.es.shtml#/my-bookings
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.es.shtml#/my-loyalty-program
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.fr.shtml#/dashboard
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.fr.shtml#/global-transaction-history
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.fr.shtml#/information/personal
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.fr.shtml#/my-bookings
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.fr.shtml#/my-loyalty-program
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.id.shtml#/dashboard
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.id.shtml#/global-transaction-history
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.id.shtml#/information/personal
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.id.shtml#/my-bookings
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.id.shtml#/my-loyalty-program
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.it.shtml#/dashboard
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.it.shtml#/global-transaction-history
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.it.shtml#/information/personal
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.it.shtml#/my-bookings
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.it.shtml#/my-loyalty-program
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.ja.shtml#/dashboard
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.ja.shtml#/global-transaction-history
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.ja.shtml#/information/personal
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.ja.shtml#/my-bookings
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.ja.shtml#/my-loyalty-program
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.ko.shtml#/dashboard
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.ko.shtml#/global-transaction-history
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.ko.shtml#/information/personal
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.ko.shtml#/my-bookings
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.ko.shtml#/my-loyalty-program
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.nl.shtml#/dashboard
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.nl.shtml#/global-transaction-history
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.nl.shtml#/information/personal
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.nl.shtml#/my-bookings
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.nl.shtml#/my-loyalty-program
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.pl.shtml#/dashboard
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.pl.shtml#/global-transaction-history
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.pl.shtml#/information/personal
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.pl.shtml#/my-bookings
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.pl.shtml#/my-loyalty-program
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.pt-br.shtml#/dashboard
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.pt-br.shtml#/global-transaction-history
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.pt-br.shtml#/information/personal
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.pt-br.shtml#/my-bookings
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.pt-br.shtml#/my-loyalty-program
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.pt.shtml#/dashboard
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.pt.shtml#/global-transaction-history
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.pt.shtml#/information/personal
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.pt.shtml#/my-bookings
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.pt.shtml#/my-loyalty-program
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.ru.shtml#/dashboard
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.ru.shtml#/global-transaction-history
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.ru.shtml#/information/personal
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.ru.shtml#/my-bookings
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.ru.shtml#/my-loyalty-program
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.th.shtml#/dashboard
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.th.shtml#/global-transaction-history
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.th.shtml#/information/personal
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.th.shtml#/my-bookings
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.th.shtml#/my-loyalty-program
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.tr.shtml#/dashboard
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.tr.shtml#/global-transaction-history
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.tr.shtml#/information/personal
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.tr.shtml#/my-bookings
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.tr.shtml#/my-loyalty-program
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.zh.shtml#/dashboard
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.zh.shtml#/global-transaction-history
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.zh.shtml#/information/personal
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.zh.shtml#/my-bookings
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/account/index.zh.shtml#/my-loyalty-program
Source: chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/assets/fonts/roboto/bold/roboto-bold.woff
Source: chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/assets/fonts/roboto/bold/roboto-bold.woff2
Source: chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/assets/fonts/roboto/medium/roboto-medium.woff
Source: chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/assets/fonts/roboto/medium/roboto-medium.woff2
Source: chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/assets/fonts/roboto/regular/roboto-regular.woff
Source: chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/assets/fonts/roboto/regular/roboto-regular.woff2
Source: chromecache_288.2.dr	String found in binary or memory: https://all.accor.com/components/header-aem/scripts/main.js
Source: chromecache_288.2.dr	String found in binary or memory: https://all.accor.com/components/header/assets/icons/brands/all.svg
Source: chromecache_365.2.dr	String found in binary or memory: https://all.accor.com/gb/booking/advanced-search.shtml
Source: chromecache_290.2.dr, chromecache_417.2.dr	String found in binary or memory: https://all.accor.com/gb/city/hotels-amsterdam-v0102.shtml
Source: chromecache_365.2.dr	String found in binary or memory: https://all.accor.com/gb/city/hotels-edinburgh-v1175.shtml
Source: chromecache_365.2.dr	String found in binary or memory: https://all.accor.com/gb/city/hotels-liverpool-v2327.shtml
Source: chromecache_290.2.dr, chromecache_417.2.dr, chromecache_365.2.dr	String found in binary or memory: https://all.accor.com/gb/city/hotels-london-v2352.shtml
Source: chromecache_365.2.dr	String found in binary or memory: https://all.accor.com/gb/city/hotels-manchester-v2446.shtml
Source: chromecache_290.2.dr, chromecache_417.2.dr	String found in binary or memory: https://all.accor.com/gb/city/hotels-new-york-city-v193198.shtml
Source: chromecache_290.2.dr, chromecache_417.2.dr	String found in binary or memory: https://all.accor.com/gb/city/hotels-paris-v2996.shtml
Source: chromecache_290.2.dr, chromecache_417.2.dr	String found in binary or memory: https://all.accor.com/gb/offers-travel-ideas/index.shtml
Source: chromecache_290.2.dr, chromecache_417.2.dr, chromecache_365.2.dr	String found in binary or memory: https://all.accor.com/gb/world/hotels-accor-monde.shtml
Source: chromecache_365.2.dr	String found in binary or memory: https://all.accor.com/loyalty-program/all-plus/index.en.shtml
Source: chromecache_288.2.dr, chromecache_290.2.dr, chromecache_417.2.dr, chromecache_365.2.dr	String found in binary or memory: https://all.accor.com/loyalty-program/cards-status-benefits-details/index.en.shtml
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/loyalty-program/cards-status-benefits-details/index.pt-br.shtml
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/loyalty-program/cards-status-benefits/index.ar.shtml
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/loyalty-program/cards-status-benefits/index.de.shtml
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/loyalty-program/cards-status-benefits/index.es.shtml
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/loyalty-program/cards-status-benefits/index.fr.shtml
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/loyalty-program/cards-status-benefits/index.id.shtml
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/loyalty-program/cards-status-benefits/index.it.shtml
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/loyalty-program/cards-status-benefits/index.ja.shtml
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/loyalty-program/cards-status-benefits/index.ko.shtml
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/loyalty-program/cards-status-benefits/index.nl.shtml
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/loyalty-program/cards-status-benefits/index.pl.shtml
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/loyalty-program/cards-status-benefits/index.pt.shtml
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/loyalty-program/cards-status-benefits/index.ru.shtml
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/loyalty-program/cards-status-benefits/index.th.shtml
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/loyalty-program/cards-status-benefits/index.tr.shtml
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/loyalty-program/cards-status-benefits/index.zh.shtml
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/loyalty-program/earn-and-use/index.ar.shtml
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/loyalty-program/earn-and-use/index.de.shtml
Source: chromecache_288.2.dr, chromecache_290.2.dr, chromecache_417.2.dr, chromecache_365.2.dr	String found in binary or memory: https://all.accor.com/loyalty-program/earn-and-use/index.en.shtml
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/loyalty-program/earn-and-use/index.es.shtml
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/loyalty-program/earn-and-use/index.fr.shtml
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/loyalty-program/earn-and-use/index.id.shtml
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/loyalty-program/earn-and-use/index.it.shtml
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/loyalty-program/earn-and-use/index.ja.shtml
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/loyalty-program/earn-and-use/index.ko.shtml
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/loyalty-program/earn-and-use/index.nl.shtml
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/loyalty-program/earn-and-use/index.pl.shtml
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/loyalty-program/earn-and-use/index.pt-br.shtml
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/loyalty-program/earn-and-use/index.pt.shtml
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/loyalty-program/earn-and-use/index.ru.shtml
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/loyalty-program/earn-and-use/index.th.shtml
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/loyalty-program/earn-and-use/index.tr.shtml
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://all.accor.com/loyalty-program/earn-and-use/index.zh.shtml
Source: chromecache_365.2.dr	String found in binary or memory: https://all.accor.com/loyalty-program/earn/meetingplanner/index.en.shtml
Source: chromecache_288.2.dr, chromecache_365.2.dr	String found in binary or memory: https://all.accor.com/loyalty-program/partners/index.en.shtml
Source: chromecache_288.2.dr, chromecache_290.2.dr, chromecache_417.2.dr, chromecache_365.2.dr	String found in binary or memory: https://all.accor.com/loyalty-program/reasonstojoin/index.en.shtml
Source: chromecache_365.2.dr	String found in binary or memory: https://all.accor.com/promotions-offers/product-services/owm012344-001-hotel-office.en.shtml
Source: chromecache_288.2.dr, chromecache_365.2.dr	String found in binary or memory: https://all.accor.com/scripts/main-footer-light.js
Source: chromecache_288.2.dr	String found in binary or memory: https://all.accor.com/styles/styles-aem-header.css
Source: chromecache_288.2.dr, chromecache_365.2.dr	String found in binary or memory: https://all.accor.com/styles/styles-footer-light.css
Source: chromecache_290.2.dr, chromecache_417.2.dr	String found in binary or memory: https://all.accor.com/usa/index.en.shtml
Source: chromecache_277.2.dr, chromecache_400.2.dr	String found in binary or memory: https://all.accor.su
Source: chromecache_290.2.dr, chromecache_417.2.dr	String found in binary or memory: https://apartmentsandvillas.accor.com/am/en/apartments-all
Source: chromecache_290.2.dr, chromecache_417.2.dr	String found in binary or memory: https://apartmentsandvillas.accor.com/am/en/homes-ALL
Source: chromecache_290.2.dr, chromecache_417.2.dr	String found in binary or memory: https://apartmentsandvillas.accor.com/am/en/villas-all
Source: chromecache_365.2.dr	String found in binary or memory: https://apartmentsandvillas.accor.com/eu/gb/apartments-all
Source: chromecache_365.2.dr	String found in binary or memory: https://apartmentsandvillas.accor.com/eu/gb/homes-ALL
Source: chromecache_365.2.dr	String found in binary or memory: https://apartmentsandvillas.accor.com/eu/gb/villas-all
Source: chromecache_277.2.dr, chromecache_400.2.dr	String found in binary or memory: https://api.accor.com
Source: chromecache_288.2.dr, chromecache_365.2.dr	String found in binary or memory: https://api.accor.com/referential/v1/best-visit/cookie-attribution
Source: chromecache_288.2.dr, chromecache_365.2.dr	String found in binary or memory: https://api.accor.com/referential/v1/pos/countries"
Source: chromecache_288.2.dr, chromecache_365.2.dr	String found in binary or memory: https://api.accor.com/referential/v1/pos/countryLanguageAuto"
Source: chromecache_288.2.dr, chromecache_365.2.dr	String found in binary or memory: https://api.accor.com/referential/v1/pos/countryLanguageManual"
Source: chromecache_288.2.dr, chromecache_365.2.dr	String found in binary or memory: https://api.accor.com/referential/v1/pos/currencies"
Source: chromecache_288.2.dr, chromecache_365.2.dr	String found in binary or memory: https://api.accor.com/referential/v1/pos/currencyManual"
Source: chromecache_212.2.dr, chromecache_316.2.dr	String found in binary or memory: https://api.tintup.com/v2/tints/$
Source: chromecache_260.2.dr, chromecache_451.2.dr	String found in binary or memory: https://api.usabilla.com/v2/f/
Source: chromecache_390.2.dr	String found in binary or memory: https://beacon.sojern.com/pixel/cp/18?f_v=cp_v3_js&p_v=7&
Source: chromecache_390.2.dr	String found in binary or memory: https://beacon.sojern.com/pixel/cp/96?f_v=cp_v3_js&p_v=7&
Source: chromecache_390.2.dr	String found in binary or memory: https://beacon.sojern.com/pixel/p/
Source: chromecache_288.2.dr, chromecache_365.2.dr	String found in binary or memory: https://beian.miit.gov.cn/
Source: chromecache_280.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1620505
Source: chromecache_365.2.dr	String found in binary or memory: https://businesstravel.accor.com/gb/united-kingdom/index.shtml
Source: chromecache_365.2.dr	String found in binary or memory: https://businesstravel.accor.com/promotions-offers/all-plus-ibis.en.shtml
Source: chromecache_365.2.dr	String found in binary or memory: https://businesstravel.accor.com/promotions-offers/all-plus-voyageur.en.shtml
Source: chromecache_223.2.dr, chromecache_257.2.dr, chromecache_401.2.dr, chromecache_349.2.dr, chromecache_251.2.dr, chromecache_382.2.dr, chromecache_278.2.dr, chromecache_414.2.dr, chromecache_452.2.dr, chromecache_276.2.dr, chromecache_394.2.dr, chromecache_404.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_288.2.dr, chromecache_357.2.dr, chromecache_368.2.dr, chromecache_365.2.dr	String found in binary or memory: https://cdn.cookielaw.org
Source: chromecache_288.2.dr, chromecache_365.2.dr	String found in binary or memory: https://cdn.cookielaw.org/scripttemplates/otSDKStub.js
Source: chromecache_357.2.dr, chromecache_368.2.dr	String found in binary or memory: https://cdn.cookielaw.org/vendorlist/googleData.json
Source: chromecache_357.2.dr, chromecache_368.2.dr	String found in binary or memory: https://cdn.cookielaw.org/vendorlist/iab2Data.json
Source: chromecache_357.2.dr, chromecache_368.2.dr	String found in binary or memory: https://cdn.cookielaw.org/vendorlist/iab2V2Data.json
Source: chromecache_357.2.dr, chromecache_368.2.dr	String found in binary or memory: https://cdn.cookielaw.org/vendorlist/iabData.json
Source: chromecache_263.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=NmVhMDM4NWY
Source: chromecache_426.2.dr, chromecache_405.2.dr	String found in binary or memory: https://connect.facebook.net/
Source: chromecache_251.2.dr, chromecache_394.2.dr	String found in binary or memory: https://connect.facebook.net/en_US/fbevents.js
Source: chromecache_426.2.dr, chromecache_405.2.dr	String found in binary or memory: https://connect.facebook.net/log/fbevents_telemetry/
Source: chromecache_357.2.dr, chromecache_368.2.dr	String found in binary or memory: https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck
Source: chromecache_260.2.dr, chromecache_451.2.dr	String found in binary or memory: https://d6tizftlrpuof.cloudfront.net/live/resources/throbber.gif)
Source: chromecache_260.2.dr, chromecache_451.2.dr	String found in binary or memory: https://d6tizftlrpuof.cloudfront.net/live/scripts/campaign-include/a5f669c28be1979ab5e2785121a6e10b/
Source: chromecache_260.2.dr, chromecache_451.2.dr	String found in binary or memory: https://d6tizftlrpuof.cloudfront.net/themes/production/accorhotel-button-33db7e58f18a5aefd9fe80a87ec
Source: chromecache_444.2.dr, chromecache_321.2.dr	String found in binary or memory: https://drive.google.com/file/u/0/d/1gFOpvGeFEv_swcPxtNBdzyZpTyF4rM69/view?pli=1
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://feross.org
Source: chromecache_357.2.dr, chromecache_368.2.dr	String found in binary or memory: https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location
Source: chromecache_280.2.dr	String found in binary or memory: https://github.com/amiller-gh/currentScript-polyfill
Source: chromecache_335.2.dr, chromecache_275.2.dr	String found in binary or memory: https://github.com/emn178/js-sha256
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://github.com/es-shims/es5-shim/issues/150
Source: chromecache_332.2.dr, chromecache_457.2.dr	String found in binary or memory: https://github.com/gnarf37/jquery-requestAnimationFrame
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://github.com/js-cookie/js-cookie
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://github.com/kitcambridge/es5-shim/commit/4f738ac066346
Source: chromecache_251.2.dr, chromecache_278.2.dr, chromecache_452.2.dr, chromecache_394.2.dr	String found in binary or memory: https://github.com/krux/postscribe/blob/master/LICENSE.
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://github.com/mathiasbynens/String.prototype.at
Source: chromecache_280.2.dr	String found in binary or memory: https://github.com/mozilla/rhino/issues/346
Source: chromecache_280.2.dr	String found in binary or memory: https://github.com/tc39/proposal-array-filtering
Source: chromecache_367.2.dr, chromecache_212.2.dr, chromecache_280.2.dr, chromecache_316.2.dr, chromecache_277.2.dr, chromecache_400.2.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_367.2.dr, chromecache_212.2.dr, chromecache_280.2.dr, chromecache_316.2.dr, chromecache_277.2.dr, chromecache_400.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.20.3/LICENSE
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/475
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/677
Source: chromecache_280.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/86#issuecomment-115759028
Source: chromecache_394.2.dr	String found in binary or memory: https://google.com
Source: chromecache_394.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_280.2.dr	String found in binary or memory: https://help.accor.com/s/?language=ar
Source: chromecache_280.2.dr	String found in binary or memory: https://help.accor.com/s/?language=de
Source: chromecache_280.2.dr	String found in binary or memory: https://help.accor.com/s/?language=es
Source: chromecache_280.2.dr	String found in binary or memory: https://help.accor.com/s/?language=fr
Source: chromecache_280.2.dr	String found in binary or memory: https://help.accor.com/s/?language=in
Source: chromecache_280.2.dr	String found in binary or memory: https://help.accor.com/s/?language=it
Source: chromecache_280.2.dr	String found in binary or memory: https://help.accor.com/s/?language=ja
Source: chromecache_280.2.dr	String found in binary or memory: https://help.accor.com/s/?language=ko
Source: chromecache_280.2.dr	String found in binary or memory: https://help.accor.com/s/?language=nl_NL
Source: chromecache_280.2.dr	String found in binary or memory: https://help.accor.com/s/?language=pl
Source: chromecache_280.2.dr	String found in binary or memory: https://help.accor.com/s/?language=pt_BR
Source: chromecache_280.2.dr	String found in binary or memory: https://help.accor.com/s/?language=pt_PT
Source: chromecache_280.2.dr	String found in binary or memory: https://help.accor.com/s/?language=ru
Source: chromecache_280.2.dr	String found in binary or memory: https://help.accor.com/s/?language=th
Source: chromecache_280.2.dr	String found in binary or memory: https://help.accor.com/s/?language=tr
Source: chromecache_280.2.dr	String found in binary or memory: https://help.accor.com/s/?language=zh_CN
Source: chromecache_263.2.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid
Source: chromecache_332.2.dr, chromecache_457.2.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_332.2.dr, chromecache_457.2.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_288.2.dr, chromecache_365.2.dr	String found in binary or memory: https://js-cdn.dynatrace.com/jstag/1658b155923/bf27383cxk/55885c11159b74ce_complete.js
Source: chromecache_288.2.dr, chromecache_365.2.dr	String found in binary or memory: https://js-cdn.dynatrace.com/jstag/1658b155923/bf27383cxk/6ca29d8c2f4cd833_complete.js
Source: chromecache_288.2.dr, chromecache_365.2.dr	String found in binary or memory: https://js-cdn.dynatrace.com/jstag/1658b155923/bf27383cxk/f09ab896c6d34110_complete.js
Source: chromecache_263.2.dr	String found in binary or memory: https://js.adsrvr.org/universal_pixel.1.1.0.js
Source: chromecache_332.2.dr, chromecache_457.2.dr	String found in binary or memory: https://js.foundation/
Source: chromecache_288.2.dr, chromecache_365.2.dr	String found in binary or memory: https://limitlessexperiences.accor.com/all-experiences-hub/?sts=YWNjb3JfZW5fZ2ImR0I%3D
Source: chromecache_288.2.dr, chromecache_365.2.dr	String found in binary or memory: https://m.ahstatic.com
Source: chromecache_365.2.dr	String found in binary or memory: https://m.ahstatic.com/is/image/accorhotels/KV%202_6000x4000
Source: chromecache_288.2.dr	String found in binary or memory: https://m.ahstatic.com/is/image/accorhotels/aja_p_5736-021
Source: chromecache_365.2.dr	String found in binary or memory: https://m.ahstatic.com/is/image/accorhotels/aja_p_5736-021:16by9?fmt=jpg&op_usm=1.75
Source: chromecache_365.2.dr	String found in binary or memory: https://m.ahstatic.com/is/image/accorhotels/aja_p_5736-021:16by9?fmt=webp&op_usm=1.75
Source: chromecache_365.2.dr	String found in binary or memory: https://m.ahstatic.com/is/image/accorhotels/aja_p_5736-021:3by2?fmt=webp&op_usm=1.75
Source: chromecache_288.2.dr	String found in binary or memory: https://m.ahstatic.com/is/image/accorhotels/aja_p_5795-43
Source: chromecache_365.2.dr	String found in binary or memory: https://m.ahstatic.com/is/image/accorhotels/aja_p_5795-43:16by9?fmt=jpg&op_usm=1.75
Source: chromecache_365.2.dr	String found in binary or memory: https://m.ahstatic.com/is/image/accorhotels/aja_p_5795-43:16by9?fmt=webp&op_usm=1.75
Source: chromecache_365.2.dr	String found in binary or memory: https://m.ahstatic.com/is/image/accorhotels/aja_p_5795-43:8by10?fmt=webp&op_usm=1.75
Source: chromecache_288.2.dr	String found in binary or memory: https://m.ahstatic.com/is/image/accorhotels/msa_p_0000106
Source: chromecache_365.2.dr	String found in binary or memory: https://m.ahstatic.com/is/image/accorhotels/msa_p_0000106:16by9?fmt=jpg&op_usm=1.75
Source: chromecache_365.2.dr	String found in binary or memory: https://m.ahstatic.com/is/image/accorhotels/msa_p_0000106:16by9?fmt=webp&op_usm=1.75
Source: chromecache_365.2.dr	String found in binary or memory: https://m.ahstatic.com/is/image/accorhotels/msa_p_0000106:8by10?fmt=webp&op_usm=1.75
Source: chromecache_288.2.dr, chromecache_290.2.dr, chromecache_417.2.dr	String found in binary or memory: https://m.ahstatic.com/is/image/accorhotels/msa_p_0000108
Source: chromecache_365.2.dr	String found in binary or memory: https://m.ahstatic.com/is/image/accorhotels/msa_p_0000108:16by9?fmt=jpg&op_usm=1.75
Source: chromecache_365.2.dr	String found in binary or memory: https://m.ahstatic.com/is/image/accorhotels/msa_p_0000108:16by9?fmt=webp&op_usm=1.75
Source: chromecache_365.2.dr	String found in binary or memory: https://m.ahstatic.com/is/image/accorhotels/msa_p_0000108:8by10?fmt=webp&op_usm=1.75
Source: chromecache_288.2.dr	String found in binary or memory: https://m.ahstatic.com/is/image/accorhotels/msa_p_0000113
Source: chromecache_365.2.dr	String found in binary or memory: https://m.ahstatic.com/is/image/accorhotels/msa_p_0000113:16by9?fmt=jpg&op_usm=1.75
Source: chromecache_365.2.dr	String found in binary or memory: https://m.ahstatic.com/is/image/accorhotels/msa_p_0000113:16by9?fmt=webp&op_usm=1.75
Source: chromecache_365.2.dr	String found in binary or memory: https://m.ahstatic.com/is/image/accorhotels/msa_p_0000113:3by2?fmt=webp&op_usm=1.75
Source: chromecache_288.2.dr	String found in binary or memory: https://m.ahstatic.com/is/image/accorhotels/msa_p_0000116
Source: chromecache_365.2.dr	String found in binary or memory: https://m.ahstatic.com/is/image/accorhotels/msa_p_0000116:16by9?fmt=jpg&op_usm=1.75
Source: chromecache_365.2.dr	String found in binary or memory: https://m.ahstatic.com/is/image/accorhotels/msa_p_0000116:16by9?fmt=webp&op_usm=1.75
Source: chromecache_365.2.dr	String found in binary or memory: https://m.ahstatic.com/is/image/accorhotels/msa_p_0000116:3by2?fmt=webp&op_usm=1.75
Source: chromecache_365.2.dr	String found in binary or memory: https://m.ahstatic.com/is/image/accorhotels/msa_p_0000463:16by9?fmt=jpg&op_usm=1.75
Source: chromecache_365.2.dr	String found in binary or memory: https://m.ahstatic.com/is/image/accorhotels/msa_p_0000463:16by9?fmt=webp&op_usm=1.75
Source: chromecache_365.2.dr	String found in binary or memory: https://m.ahstatic.com/is/image/accorhotels/msa_p_0000463:8by10?fmt=webp&op_usm=1.75
Source: chromecache_365.2.dr	String found in binary or memory: https://m.ahstatic.com/is/image/accorhotels/qr-code-app-bonussing-offer-en:13by5?fmt=webp&op_usm
Source: chromecache_365.2.dr	String found in binary or memory: https://m.ahstatic.com/is/image/accorhotels/qr-code-app-bonussing-offer-en:3by2?fmt=jpg&op_usm=1.75
Source: chromecache_365.2.dr	String found in binary or memory: https://m.ahstatic.com/is/image/accorhotels/qr-code-app-bonussing-offer-en:3by2?fmt=webp&op_usm=
Source: chromecache_365.2.dr	String found in binary or memory: https://m.ahstatic.com/is/image/accorhotels/qr-code-app-bonussing-offer-en:6by5?fmt=webp&op_usm=
Source: chromecache_288.2.dr	String found in binary or memory: https://m.ahstatic.com/is/image/accorhotels/qr-code-app-download-en:13by5?fmt=webp&op_usm=1.75
Source: chromecache_288.2.dr	String found in binary or memory: https://m.ahstatic.com/is/image/accorhotels/qr-code-app-download-en:6by5?fmt=jpg&op_usm=1.75
Source: chromecache_288.2.dr	String found in binary or memory: https://m.ahstatic.com/is/image/accorhotels/qr-code-app-download-en:6by5?fmt=webp&op_usm=1.75
Source: chromecache_365.2.dr	String found in binary or memory: https://meetings.accor.com/our-event-types/convention/index.en.shtml
Source: chromecache_365.2.dr	String found in binary or memory: https://meetings.accor.com/our-event-types/private_events/index.en.shtml
Source: chromecache_365.2.dr	String found in binary or memory: https://meetings.accor.com/our-event-types/seminar/index.en.shtml
Source: chromecache_365.2.dr	String found in binary or memory: https://meetings.accor.com/our-event-types/training_session/index.en.shtml
Source: chromecache_365.2.dr	String found in binary or memory: https://meetings.accor.com/promotions-offers/hybrid-meetings.en.shtml
Source: chromecache_365.2.dr	String found in binary or memory: https://meetings.accor.com/united-kingdom/index.en.shtml
Source: chromecache_251.2.dr, chromecache_394.2.dr	String found in binary or memory: https://p.teads.tv/teads-fellow.js
Source: chromecache_404.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_223.2.dr, chromecache_257.2.dr, chromecache_401.2.dr, chromecache_349.2.dr, chromecache_251.2.dr, chromecache_382.2.dr, chromecache_278.2.dr, chromecache_414.2.dr, chromecache_452.2.dr, chromecache_276.2.dr, chromecache_394.2.dr, chromecache_404.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_263.2.dr	String found in binary or memory: https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=6ea0385f-adb9-4a46-83a3-698c78b0a161&gd
Source: chromecache_390.2.dr	String found in binary or memory: https://pixel.sojern.com/partner/FuKF6OOS68yCy7qj/
Source: chromecache_290.2.dr, chromecache_417.2.dr, chromecache_365.2.dr	String found in binary or memory: https://resorts.accor.com/
Source: chromecache_288.2.dr, chromecache_365.2.dr	String found in binary or memory: https://resorts.accor.com/en/northern-europe/home.html
Source: chromecache_251.2.dr, chromecache_394.2.dr, chromecache_308.2.dr	String found in binary or memory: https://sc-static.net/scevent.min.js
Source: chromecache_277.2.dr, chromecache_400.2.dr	String found in binary or memory: https://secure.accor.com
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://secure.accor.com/managebookings/index.ar.shtml#/bookings/home?origin=$
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://secure.accor.com/managebookings/index.de.shtml#/bookings/home?origin=$
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://secure.accor.com/managebookings/index.es.shtml#/bookings/home?origin=$
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://secure.accor.com/managebookings/index.fr.shtml#/bookings/home?origin=$
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://secure.accor.com/managebookings/index.id.shtml#/bookings/home?origin=$
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://secure.accor.com/managebookings/index.it.shtml#/bookings/home?origin=$
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://secure.accor.com/managebookings/index.ja.shtml#/bookings/home?origin=$
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://secure.accor.com/managebookings/index.ko.shtml#/bookings/home?origin=$
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://secure.accor.com/managebookings/index.nl.shtml#/bookings/home?origin=$
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://secure.accor.com/managebookings/index.pl.shtml#/bookings/home?origin=$
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://secure.accor.com/managebookings/index.pt-br.shtml#/bookings/home?origin=$
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://secure.accor.com/managebookings/index.pt.shtml#/bookings/home?origin=$
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://secure.accor.com/managebookings/index.ru.shtml#/bookings/home?origin=$
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://secure.accor.com/managebookings/index.th.shtml#/bookings/home?origin=$
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://secure.accor.com/managebookings/index.tr.shtml#/bookings/home?origin=$
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://secure.accor.com/managebookings/index.zh.shtml#/bookings/home?origin=$
Source: chromecache_251.2.dr, chromecache_394.2.dr	String found in binary or memory: https://secure.quantserve.com/quant.js
Source: chromecache_332.2.dr, chromecache_457.2.dr	String found in binary or memory: https://sizzlejs.com/
Source: chromecache_251.2.dr, chromecache_394.2.dr	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.min.js
Source: chromecache_365.2.dr	String found in binary or memory: https://static-p46175-e229011.adobeaemcloud.com/b94aa70a4593f812b35d5a8922257b6f80ccf6aa708f58b8266f
Source: chromecache_394.2.dr	String found in binary or memory: https://static.ads-twitter.com/uwt.js
Source: chromecache_223.2.dr, chromecache_401.2.dr, chromecache_349.2.dr, chromecache_414.2.dr, chromecache_276.2.dr, chromecache_404.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_278.2.dr, chromecache_452.2.dr	String found in binary or memory: https://t.contentsquare.net/uxa/
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-%arrayiteratorprototype%.next
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-%iteratorprototype%-
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-%iteratorprototype%-object
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-%stringiteratorprototype%.next
Source: chromecache_280.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.from
Source: chromecache_280.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.isarray
Source: chromecache_280.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype-
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.entries
Source: chromecache_280.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.every
Source: chromecache_280.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.filter
Source: chromecache_280.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.find
Source: chromecache_280.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.findIndex
Source: chromecache_280.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.foreach
Source: chromecache_280.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.includes
Source: chromecache_280.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.indexof
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.keys
Source: chromecache_280.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.map
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.slice
Source: chromecache_280.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.some
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.values
Source: chromecache_280.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-arrayspeciescreate
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-createarrayiterator
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-createhtml
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-createmappedargumentsobject
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-createunmappedargumentsobject
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-function-instances-name
Source: chromecache_280.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-isarray
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-isregexp
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-number-constructor
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.create
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.defineproperties
Source: chromecache_280.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.defineproperty
Source: chromecache_280.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.getownpropertydescriptor
Source: chromecache_280.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.getownpropertynames
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.getprototypeof
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.keys
Source: chromecache_280.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.prototype.propertyisenumerable
Source: chromecache_280.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.prototype.tostring
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.setprototypeof
Source: chromecache_280.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-requireobjectcoercible
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-string.prototype-
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-string.prototype.anchor
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-string.prototype.codepointat
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-string.prototype.includes
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-string.prototype.trim
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-string.prototype.trimend
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-string.prototype.trimstart
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-symbol.iterator
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-symbol.prototype.description
Source: chromecache_280.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-tointeger
Source: chromecache_280.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-tolength
Source: chromecache_367.2.dr, chromecache_280.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-tonumber
Source: chromecache_280.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-toobject
Source: chromecache_280.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-toprimitive
Source: chromecache_223.2.dr, chromecache_257.2.dr, chromecache_401.2.dr, chromecache_349.2.dr, chromecache_251.2.dr, chromecache_382.2.dr, chromecache_278.2.dr, chromecache_414.2.dr, chromecache_452.2.dr, chromecache_276.2.dr, chromecache_394.2.dr, chromecache_404.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_365.2.dr	String found in binary or memory: https://travelpros.accor.com/gb/united-kingdom/index.shtml
Source: chromecache_301.2.dr	String found in binary or memory: https://us.creativecdn.com/ig-membership
Source: chromecache_386.2.dr	String found in binary or memory: https://us.creativecdn.com/topics-membership?ntk=9NhZ2LKob5OXU6iT_L-wvVJFGz5pXoxEeXqmRrY6C1Dnl-xLE09
Source: chromecache_441.2.dr	String found in binary or memory: https://via.batch.com/v3/worker.min.js
Source: chromecache_260.2.dr, chromecache_451.2.dr	String found in binary or memory: https://w.usabilla.com/a/t?m=b&b=
Source: chromecache_365.2.dr	String found in binary or memory: https://www.accor-giftcards.com/shop/country/GBR
Source: chromecache_365.2.dr	String found in binary or memory: https://www.allholidays.uk
Source: chromecache_288.2.dr, chromecache_365.2.dr	String found in binary or memory: https://www.allholidays.uk/
Source: chromecache_254.2.dr, chromecache_320.2.dr	String found in binary or memory: https://www.dynatrace.com/company/trust-center/customers/reports/
Source: chromecache_390.2.dr	String found in binary or memory: https://www.fairmont.com/abu-dhabi/
Source: chromecache_404.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_394.2.dr, chromecache_404.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_404.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_257.2.dr, chromecache_251.2.dr, chromecache_382.2.dr, chromecache_394.2.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_257.2.dr, chromecache_251.2.dr, chromecache_382.2.dr, chromecache_394.2.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_223.2.dr, chromecache_401.2.dr, chromecache_349.2.dr, chromecache_414.2.dr, chromecache_276.2.dr, chromecache_404.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_413.2.dr, chromecache_317.2.dr	String found in binary or memory: https://www.quantcast.com/legal/license
Source: chromecache_390.2.dr	String found in binary or memory: https://www.raffles.com/boston/
Source: chromecache_390.2.dr	String found in binary or memory: https://www.rixos.com/en/hotel-resort/rixos-gulf-hotel-doha
Source: chromecache_444.2.dr, chromecache_321.2.dr	String found in binary or memory: https://www.sncf-connect.com/home?wiz_medium=part&wiz_source=accor&wiz_campaign=fr_conv_accor_conten
Source: chromecache_223.2.dr, chromecache_401.2.dr, chromecache_349.2.dr, chromecache_414.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50360 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50325 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50292 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 50359 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50303 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50269 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50337 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50270 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 50347 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 50335 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 50282 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50370 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 50313 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 50369 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50277 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50337
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50336
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50339
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50338
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50331
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50330
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50333
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50332
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50335
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50334
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50305 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50348
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50347
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50349
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50340
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50342
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50341
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 50339 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50344
Source: unknown	Network traffic detected: HTTP traffic on port 50352 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50343
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50346
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50345
Source: unknown	Network traffic detected: HTTP traffic on port 50289 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50359
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50358
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50351
Source: unknown	Network traffic detected: HTTP traffic on port 50317 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50350
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50353
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50352
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50355
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50354
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50357
Source: unknown	Network traffic detected: HTTP traffic on port 50374 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50356
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50360
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50369
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50362
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50361
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50364
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50363
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50366
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50365
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50368
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50367
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50371
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50370
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50340 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50315 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50350 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50362 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50304
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50303
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50306
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50305
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50308
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50307
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50309
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50300
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50302
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50301
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50315
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50314
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50317
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50316
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50319
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50318
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50311
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50310
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50313
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50312
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50349 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50326
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50325
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50328
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50327
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50329
Source: unknown	Network traffic detected: HTTP traffic on port 50245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50320
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50322
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50321
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50324
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50323
Source: unknown	Network traffic detected: HTTP traffic on port 50372 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50290 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50327 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50296
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50295
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50298
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50299
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 50286 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50343 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50377 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50331 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50308 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50365 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50259
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50252
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50251
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50254
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50253
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50256
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50255
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50258
Source: unknown	Network traffic detected: HTTP traffic on port 50353 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50257
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50261
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50260
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50263
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50262
Source: unknown	Network traffic detected: HTTP traffic on port 50318 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50265
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50264
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50267
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50266
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50269
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50268
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50270
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50272
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50271
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50298 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50274
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50273
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50276
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50275
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50278
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50277
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50279
Source: unknown	Network traffic detected: HTTP traffic on port 50242 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:50209 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:50288 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:50371 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@34/390@258/80

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=2000,i,4908088389632724178,9141779666674835467,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://all.accor.com/a/en/new-app-offer.html"
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://accor.onelink.me/5GRx/5m1nc8of?af_qr=true
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1716 --field-trial-handle=2024,i,10245821585614290726,11001642237239521171,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=2000,i,4908088389632724178,9141779666674835467,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://accor.onelink.me/5GRx/5m1nc8of?af_qr=true	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1716 --field-trial-handle=2024,i,10245821585614290726,11001642237239521171,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
http://www.opensource.org/licenses/mit-license.php	0%	URL Reputation	safe
https://js.adsrvr.org/up_loader.1.1.0.js	0%	URL Reputation	safe
https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid	0%	URL Reputation	safe
https://sizzlejs.com/	0%	URL Reputation	safe
https://cdn.cookielaw.org/scripttemplates/otSDKStub.js	0%	URL Reputation	safe
https://sc-static.net/scevent.min.js	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
alb-ireland-ext-ingress-group-474278744.eu-west-1.elb.amazonaws.com	34.252.33.46	true	false	unknown
d2fashanjl7d9f.cloudfront.net	18.66.102.15	true	false	unknown
global.px.quantserve.com	91.228.74.200	true	false	unknown
w.usabilla.com	52.215.19.194	true	false	unknown
platform.twitter.map.fastly.net	199.232.188.157	true	false	unknown
stats.g.doubleclick.net	66.102.1.156	true	false	unknown
c.ba.contentsquare.net	54.247.108.216	true	false	unknown
t.co	162.159.140.229	true	false	unknown
cm.g.doubleclick.net	142.250.186.66	true	false	unknown
accorsa.germany-2.evergage.com	3.68.177.71	true	false	unknown
cdn.tkrconnector.com	13.32.121.110	true	false	unknown
www.google.com	142.250.186.132	true	false	unknown
match.adsrvr.org	52.223.40.198	true	false	unknown
star-mini.c10r.facebook.com	157.240.0.35	true	false	unknown
tr.line.me	147.92.191.92	true	false	unknown
s.twitter.com	104.244.42.3	true	false	unknown
us.creativecdn.com	185.184.10.30	true	false	unknown
qchmhd61sj.kameleoon.eu	172.67.72.50	true	false	unknown
sc-static.net	3.163.248.4	true	false	unknown
naouzqe.impervadns.net	45.60.155.180	true	false	unknown
1589314308.rsc.cdn77.org	37.19.194.80	true	false	unknown
eu-log-parser-loadbalanced.kameleoon.io	65.109.119.234	true	false	unknown
googleads.g.doubleclick.net	142.250.185.66	true	false	unknown
td.doubleclick.net	142.250.186.162	true	false	unknown
k.ba.contentsquare.net	99.81.115.192	true	false	unknown
cdn.cookielaw.org	104.18.86.42	true	false	unknown
static-tacdn.tripadvisor.map.fastly.net	151.101.2.83	true	false	unknown
srm.ba.contentsquare.net	52.214.133.219	true	false	unknown
cdn.evgnet.com	151.101.192.114	true	false	unknown
icons.batch.com.sds.haproxyedge.net	104.152.118.107	true	false	unknown
dg2iu7dxxehbo.cloudfront.net	18.172.103.101	true	false	unknown
adservice.google.com	172.217.16.194	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
ams.creativecdn.com	185.184.8.90	true	false	unknown
insight.adsrvr.org	52.223.40.198	true	false	unknown
scontent.xx.fbcdn.net	157.240.0.6	true	false	unknown
gcp.api.sc-gw.com	35.190.43.134	true	false	unknown
t.contentsquare.net	18.244.18.112	true	false	unknown
via.batch.com.sds.haproxyedge.net	104.152.118.106	true	false	unknown
static.sojern.com	35.244.188.9	true	false	unknown
pixel.tapad.com	34.111.113.62	true	false	unknown
cs1345.wpc.edgecastcdn.net	152.199.22.100	true	false	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	unknown
ax-0001.ax-dc-msedge.net	150.171.29.10	true	false	unknown
ad.doubleclick.net	216.58.206.38	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
sgtm.accor.com	35.190.123.13	true	false	unknown
kube-prod-04-elb.batch.com	54.36.246.133	true	false	unknown
ax-0001.ax-msedge.net	150.171.27.10	true	false	unknown
q-aeu1.contentsquare.net	34.250.128.153	true	false	unknown
adobe-aem.map.fastly.net	151.101.3.10	true	false	unknown
ageu1rt001-1-routers.dn.apigee.net	35.240.103.94	true	false	unknown
d6tizftlrpuof.cloudfront.net	52.222.206.22	true	false	unknown
analytics.google.com	142.250.186.46	true	false	unknown
accor.onelink.me	18.66.102.63	true	false	unknown
ib.anycast.adnxs.com	185.89.210.90	true	false	unknown
usc1-gcp-v61.api.sc-gw.com	35.190.43.134	true	false	unknown
geolocation.onetrust.com	104.18.32.137	true	false	unknown
www.tamgrt.map.fastly.net	151.101.2.81	true	false	unknown
static.ads-twitter.com	unknown	unknown	false	unknown
tr.snapchat.com	unknown	unknown	false	unknown
rules.quantcount.com	unknown	unknown	false	unknown
icons.batch.com	unknown	unknown	false	unknown
js.adsrvr.org	unknown	unknown	false	unknown
ws.batch.com	unknown	unknown	false	unknown
static-p46175-e229011.adobeaemcloud.com	unknown	unknown	false	unknown
pixel.rubiconproject.com	unknown	unknown	false	unknown
cm.teads.tv	unknown	unknown	false	unknown
resources.xg4ken.com	unknown	unknown	false	unknown
k-aeu1.contentsquare.net	unknown	unknown	false	unknown
data.kameleoon.io	unknown	unknown	false	unknown
connect.facebook.net	unknown	unknown	false	unknown
px.ads.linkedin.com	unknown	unknown	false	unknown
static.tacdn.com	unknown	unknown	false	unknown
c.contentsquare.net	unknown	unknown	false	unknown
all.accor.com	unknown	unknown	false	unknown
m.ahstatic.com	unknown	unknown	false	unknown
t.teads.tv	unknown	unknown	false	unknown
d.line-scdn.net	unknown	unknown	false	unknown
fledge.teads.tv	unknown	unknown	false	unknown
api.accor.com	unknown	unknown	false	unknown
analytics-ipv6.tiktokw.us	unknown	unknown	false	unknown
aem-api.accor.com	unknown	unknown	false	unknown
f.creativecdn.com	unknown	unknown	false	unknown
via.batch.com	unknown	unknown	false	unknown
www.facebook.com	unknown	unknown	false	unknown
www.linkedin.com	unknown	unknown	false	unknown
p.teads.tv	unknown	unknown	false	unknown
secure.quantserve.com	unknown	unknown	false	unknown
login.accor.com	unknown	unknown	false	unknown
pixel.quantserve.com	unknown	unknown	false	unknown
analytics.pangle-ads.com	unknown	unknown	false	unknown
analytics.twitter.com	unknown	unknown	false	unknown
tags.creativecdn.com	unknown	unknown	false	unknown
snap.licdn.com	unknown	unknown	false	unknown
www.tamgrt.com	unknown	unknown	false	unknown
tr6.snapchat.com	unknown	unknown	false	unknown
analytics.tiktok.com	unknown	unknown	false	unknown
ib.adnxs.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://all.accor.com/assets/fonts/roboto/bold/roboto-bold.woff2	false		unknown
https://cdn.cookielaw.org/scripttemplates/202409.2.0/assets/otCommonStyles.css	false		unknown
https://static-p46175-e229011.adobeaemcloud.com/b94aa70a4593f812b35d5a8922257b6f80ccf6aa708f58b8266f4ba917eb0e0e/resources/fonts/unna-italic.woff2	false		unknown
https://all.accor.com/a/content/dam/all/global-marketing/brand-identity/logos/all-paris-2024/msa_l_0000184.svg	false		unknown
https://data.kameleoon.io/visit/events?siteCode=qchmhd61sj&visitorCode=52gbpzbkoweec5rn&itp=false	false		unknown
https://d6tizftlrpuof.cloudfront.net/themes/production/accorhotel-button-33db7e58f18a5aefd9fe80a87ec3b6ca.png	false		unknown
https://data.kameleoon.io/visit/visitor?siteCode=qchmhd61sj&currentVisit=true&format=ENGINE&maxNumberPreviousVisits=25&version=2&visitorCode=52gbpzbkoweec5rn	false		unknown
https://js.adsrvr.org/up_loader.1.1.0.js	false	URL Reputation: safe	unknown
https://all.accor.com/conf/all/settings/wcm/segments.seg.js	false		unknown
https://api.accor.com/referential/v1/pos/currencies?groupByContinent=true	false		unknown
https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid%3d%24UID&ttd_tdid=6ea0385f-adb9-4a46-83a3-698c78b0a161	false		unknown
https://match.adsrvr.org/track/upb/?adv=pio09oh&ref=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&upid=ug5iyox&upv=1.1.0&v=undefined&vf=EUR&orderid=undefined&td1=undefined&td2=undefined&paapi=1	false		unknown
https://tr6.snapchat.com/p	false		unknown
https://sgtm.accor.com/_set_cookie?val=ov8Vt8y5kwvZRZp2wN%2B%2BHLvOL4YGPBxseNs2s7cPFUlbIElJ6ni4OEyPSZ1td%2BXUhr9T1K6HqdntfhQ84d97CCorDsbtZU2yH0K5RCCJ6ll4I%2FLXBK1CQfvAMwE3HdZZwopzOoIfKnA9AQWui9DCW1Ez%2BPd%2FpXw%3D	false		unknown
https://all.accor.com/enroll-loyalty/assets/index-BJwiwBAj.js	false		unknown
https://all.accor.com/rb_80be963f-a859-4808-9b2a-ceb8d44df738?type=js3&sn=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1&svrid=1&flavor=post&vi=CNCMQNAQOSCAVCJKBVISVNPVVSHILTAR-0&modifiedSince=1729814722355&rf=https%3A%2F%2Fall.accor.com%2Fenroll-loyalty%2Fcheck-authent.html%3FappId%3Dall.accor%26error_description%3DAuthentication%2Bis%2Brequired.%26state%3D943159bff3e28347a576b4%26error%3Dlogin_required%23.&bp=3&app=0dae2710ec98cad4&crc=3719572701&en=85aac0bj&end=1	false		unknown
https://api.accor.com/referential/v1/pos/countries?siteCode=all	false		unknown
https://sgtm.accor.com/_set_cookie?val=465dQ1oUQbWYInSTp0OUjAoBGvVM7N4ndsP%2BXrUlTGeEo7iYhUii%2BfyWd24s790KSYg25GcCkjy4XLYWoyVz%2BDMNDrx8gjHaeGOz%2FsFwaHw%2BT%2BQnhGQ3reXTwmH4B6GLb0hE%2F2ttqPqbPqpelrzNhntTPXrnLp3LzZ2Dke56nHnHu8iZZzGtoOv%2BSICbQunp5zN6FzaO	false		unknown
https://pixel.tapad.com/idsync/ex/push?partner_id=2884&partner_url=https%3A%2F%2Ftr.snapchat.com%2Fcm%2Fp%3Frand%3D1729735501010%26pnid%3D140%26pcid%3D%24%7BTA_DEVICE_ID%7D	false		unknown
https://api.accor.com/authentication/v2.0/authorization?appId=all.accor&prompt=none&redirect_uri=https%3A%2F%2Fall.accor.com%2Fenroll-loyalty%2Fcheck-authent.html	false		unknown
https://q-aeu1.contentsquare.net/quota?ct=0	false		unknown
https://cdn.cookielaw.org/scripttemplates/otSDKStub.js	false	URL Reputation: safe	unknown
https://cdn.tkrconnector.com/js/tkrc.js	false		unknown
https://sc-static.net/scevent.min.js	false	URL Reputation: safe	unknown
https://all.accor.com/a/etc.clientlibs/core/wcm/components/commons/datalayer/acdl/core.wcm.components.commons.datalayer.acdl.lc-bf921af342fd2c40139671dbf0920a1f-lc.min.js	false		unknown
https://accorsa.germany-2.evergage.com/pr?.top=1443&.tt=1419&.dt=8638&.lt=12899&.bv=16&_ak=accorsa&_ds=accor&.scv=336&channel=Web&_r=949511&.anonId=169349b27ef7e9cc&_anon=true	false		unknown
https://static-p46175-e229011.adobeaemcloud.com/b94aa70a4593f812b35d5a8922257b6f80ccf6aa708f58b8266f4ba917eb0e0e/resources/images/favicon-32x32.png	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://github.com/mozilla/rhino/issues/346	chromecache_280.2.dr	false		unknown
https://tc39.es/ecma262/#sec-object.prototype.tostring	chromecache_280.2.dr	false		unknown
https://all.accor.com/a/pt/new-app-offer.html	chromecache_365.2.dr	false		unknown
https://all.accor.com/account/index.th.shtml#/my-loyalty-program	chromecache_367.2.dr, chromecache_280.2.dr	false		unknown
https://all.accor.com/account/index.nl.shtml#/dashboard	chromecache_367.2.dr, chromecache_280.2.dr	false		unknown
https://help.accor.com/s/?language=ru	chromecache_280.2.dr	false		unknown
https://tc39.es/ecma262/#sec-arrayspeciescreate	chromecache_280.2.dr	false		unknown
https://all.accor.com/a/pl/new-app-offer/app-download.html	chromecache_288.2.dr	false		unknown
https://all.accor.com/loyalty-program/cards-status-benefits/index.it.shtml	chromecache_367.2.dr, chromecache_280.2.dr	false		unknown
https://tc39.es/ecma262/#sec-tointeger	chromecache_280.2.dr	false		unknown
https://tc39.es/ecma262/#sec-number-constructor	chromecache_367.2.dr, chromecache_280.2.dr	false		unknown
https://m.ahstatic.com/is/image/accorhotels/KV%202_6000x4000	chromecache_365.2.dr	false		unknown
https://all.accor.com/loyalty-program/earn-and-use/index.th.shtml	chromecache_367.2.dr, chromecache_280.2.dr	false		unknown
http://www.opensource.org/licenses/mit-license.php	chromecache_280.2.dr	false	URL Reputation: safe	unknown
https://all.accor.com/account/index.it.shtml#/global-transaction-history	chromecache_367.2.dr, chromecache_280.2.dr	false		unknown
https://all.accor.com/account/index.pl.shtml#/dashboard	chromecache_367.2.dr, chromecache_280.2.dr	false		unknown
https://all.accor.com/account/index.ja.shtml#/information/personal	chromecache_367.2.dr, chromecache_280.2.dr	false		unknown
https://all.accor.com/loyalty-program/reasonstojoin/index.en.shtml	chromecache_288.2.dr, chromecache_290.2.dr, chromecache_417.2.dr, chromecache_365.2.dr	false		unknown
https://all.accor.com/a/zh/new-app-offer.html	chromecache_365.2.dr	false		unknown
https://meetings.accor.com/promotions-offers/hybrid-meetings.en.shtml	chromecache_365.2.dr	false		unknown
https://github.com/es-shims/es5-shim/issues/150	chromecache_367.2.dr, chromecache_280.2.dr	false		unknown
https://all.accor.com/account/index.it.shtml#/dashboard	chromecache_367.2.dr, chromecache_280.2.dr	false		unknown
https://tc39.es/ecma262/#sec-array.prototype.values	chromecache_367.2.dr, chromecache_280.2.dr	false		unknown
https://all.accor.com/loyalty-program/cards-status-benefits/index.pl.shtml	chromecache_367.2.dr, chromecache_280.2.dr	false		unknown
https://all.accor.com/loyalty-program/cards-status-benefits/index.de.shtml	chromecache_367.2.dr, chromecache_280.2.dr	false		unknown
https://all.accor.com/account/index.de.shtml#/dashboard	chromecache_367.2.dr, chromecache_280.2.dr	false		unknown
https://meetings.accor.com/our-event-types/convention/index.en.shtml	chromecache_365.2.dr	false		unknown
https://all.accor.com/loyalty-program/cards-status-benefits/index.ja.shtml	chromecache_367.2.dr, chromecache_280.2.dr	false		unknown
https://all.accor.com/account/index.it.shtml#/my-bookings	chromecache_367.2.dr, chromecache_280.2.dr	false		unknown
https://m.ahstatic.com/is/image/accorhotels/aja_p_5736-021:16by9?fmt=webp&op_usm=1.75	chromecache_365.2.dr	false		unknown
https://help.accor.com/s/?language=pl	chromecache_280.2.dr	false		unknown
https://tc39.es/ecma262/#sec-symbol.iterator	chromecache_367.2.dr, chromecache_280.2.dr	false		unknown
https://tc39.es/ecma262/#sec-%iteratorprototype%-	chromecache_367.2.dr, chromecache_280.2.dr	false		unknown
https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid	chromecache_263.2.dr	false	URL Reputation: safe	unknown
https://all.accor.com/gb/city/hotels-amsterdam-v0102.shtml	chromecache_290.2.dr, chromecache_417.2.dr	false		unknown
https://secure.accor.com/managebookings/index.pt.shtml#/bookings/home?origin=$	chromecache_367.2.dr, chromecache_280.2.dr	false		unknown
https://github.com/gnarf37/jquery-requestAnimationFrame	chromecache_332.2.dr, chromecache_457.2.dr	false		unknown
https://m.ahstatic.com/is/image/accorhotels/aja_p_5736-021	chromecache_288.2.dr	false		unknown
https://tc39.es/ecma262/#sec-string.prototype.includes	chromecache_367.2.dr, chromecache_280.2.dr	false		unknown
https://all.accor.com/a/en/limitless/thematics.html	chromecache_365.2.dr	false		unknown
https://all.accor.com/components/header/assets/icons/brands/all.svg	chromecache_288.2.dr	false		unknown
https://all.accor.com/loyalty-program/earn-and-use/index.id.shtml	chromecache_367.2.dr, chromecache_280.2.dr	false		unknown
https://drive.google.com/file/u/0/d/1gFOpvGeFEv_swcPxtNBdzyZpTyF4rM69/view?pli=1	chromecache_444.2.dr, chromecache_321.2.dr	false		unknown
https://tc39.es/ecma262/#sec-array.prototype.map	chromecache_280.2.dr	false		unknown
https://m.ahstatic.com/is/image/accorhotels/qr-code-app-download-en:6by5?fmt=jpg&op_usm=1.75	chromecache_288.2.dr	false		unknown
https://tc39.es/ecma262/#sec-array.prototype-	chromecache_280.2.dr	false		unknown
https://us.creativecdn.com/ig-membership	chromecache_301.2.dr	false		unknown
https://all.accor.com/a/de/new-app-offer.html	chromecache_365.2.dr	false		unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=1620505	chromecache_280.2.dr	false		unknown
https://all.accor.com/account/index.ru.shtml#/my-loyalty-program	chromecache_367.2.dr, chromecache_280.2.dr	false		unknown
https://tc39.es/ecma262/#sec-array.prototype.foreach	chromecache_280.2.dr	false		unknown
https://tc39.es/ecma262/#sec-string.prototype.trimstart	chromecache_367.2.dr, chromecache_280.2.dr	false		unknown
https://www.rixos.com/en/hotel-resort/rixos-gulf-hotel-doha	chromecache_390.2.dr	false		unknown
https://all.accor.com/account/index.ar.shtml#/information/personal	chromecache_367.2.dr, chromecache_280.2.dr	false		unknown
https://all.accor.com/account/index.ko.shtml#/global-transaction-history	chromecache_367.2.dr, chromecache_280.2.dr	false		unknown
https://all.accor.su	chromecache_277.2.dr, chromecache_400.2.dr	false		unknown
https://all.accor.com/a/nl/new-app-offer.html	chromecache_365.2.dr	false		unknown
https://all.accor.com/account/index.pl.shtml#/my-loyalty-program	chromecache_367.2.dr, chromecache_280.2.dr	false		unknown
https://sizzlejs.com/	chromecache_332.2.dr, chromecache_457.2.dr	false	URL Reputation: safe	unknown
https://secure.accor.com/managebookings/index.es.shtml#/bookings/home?origin=$	chromecache_367.2.dr, chromecache_280.2.dr	false		unknown
https://all.accor.com/a/ar/new-app-offer/app-download.html	chromecache_288.2.dr	false		unknown
https://all.accor.com/account/index.ko.shtml#/my-bookings	chromecache_367.2.dr, chromecache_280.2.dr	false		unknown
https://api.accor.com/referential/v1/pos/countryLanguageAuto"	chromecache_288.2.dr, chromecache_365.2.dr	false		unknown
https://tc39.es/ecma262/#sec-createunmappedargumentsobject	chromecache_367.2.dr, chromecache_280.2.dr	false		unknown
https://all.accor.com/loyalty-program/earn-and-use/index.ko.shtml	chromecache_367.2.dr, chromecache_280.2.dr	false		unknown
https://p.teads.tv/teads-fellow.js	chromecache_251.2.dr, chromecache_394.2.dr	false		unknown
https://all.accor.com/a/ko/new-app-offer/app-download.html	chromecache_288.2.dr	false		unknown
https://all.accor.com/loyalty-program/cards-status-benefits-details/index.en.shtml	chromecache_288.2.dr, chromecache_290.2.dr, chromecache_417.2.dr, chromecache_365.2.dr	false		unknown
https://www.dynatrace.com/company/trust-center/customers/reports/	chromecache_254.2.dr, chromecache_320.2.dr	false		unknown
https://all.accor.com/account/index.fr.shtml#/dashboard	chromecache_367.2.dr, chromecache_280.2.dr	false		unknown
https://all.accor.com/loyalty-program/earn-and-use/index.ru.shtml	chromecache_367.2.dr, chromecache_280.2.dr	false		unknown
https://m.ahstatic.com/is/image/accorhotels/msa_p_0000116:16by9?fmt=webp&op_usm=1.75	chromecache_365.2.dr	false		unknown
https://all.accor.com/promotions-offers/product-services/owm012344-001-hotel-office.en.shtml	chromecache_365.2.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.185.228	unknown	United States	15169	GOOGLEUS	false
151.101.66.83	unknown	United States	54113	FASTLYUS	false
18.244.18.112	t.contentsquare.net	United States	16509	AMAZON-02US	false
91.228.74.200	global.px.quantserve.com	United Kingdom	27281	QUANTCASTUS	false
18.66.102.15	d2fashanjl7d9f.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
35.240.103.94	ageu1rt001-1-routers.dn.apigee.net	United States	15169	GOOGLEUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
18.244.18.115	unknown	United States	16509	AMAZON-02US	false
37.252.171.52	unknown	European Union	29990	ASN-APPNEXUS	false
157.240.0.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
172.217.18.6	unknown	United States	15169	GOOGLEUS	false
54.36.246.133	kube-prod-04-elb.batch.com	France	16276	OVHFR	false
35.244.188.9	static.sojern.com	United States	15169	GOOGLEUS	false
13.32.121.84	unknown	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
91.228.74.159	unknown	United Kingdom	27281	QUANTCASTUS	false
169.150.255.183	unknown	United States	2711	SPIRITTEL-ASUS	false
13.32.121.110	cdn.tkrconnector.com	United States	16509	AMAZON-02US	false
142.250.186.46	analytics.google.com	United States	15169	GOOGLEUS	false
151.101.3.10	adobe-aem.map.fastly.net	United States	54113	FASTLYUS	false
35.190.123.13	sgtm.accor.com	United States	15169	GOOGLEUS	false
34.252.33.46	alb-ireland-ext-ingress-group-474278744.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
151.101.0.114	unknown	United States	54113	FASTLYUS	false
52.49.246.129	unknown	United States	16509	AMAZON-02US	false
216.58.206.38	ad.doubleclick.net	United States	15169	GOOGLEUS	false
157.240.0.6	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
52.214.133.219	srm.ba.contentsquare.net	United States	16509	AMAZON-02US	false
3.68.177.71	accorsa.germany-2.evergage.com	United States	16509	AMAZON-02US	false
142.250.186.132	www.google.com	United States	15169	GOOGLEUS	false
172.67.72.50	qchmhd61sj.kameleoon.eu	United States	13335	CLOUDFLARENETUS	false
52.215.19.194	w.usabilla.com	United States	16509	AMAZON-02US	false
151.101.192.114	cdn.evgnet.com	United States	54113	FASTLYUS	false
35.190.43.134	gcp.api.sc-gw.com	United States	15169	GOOGLEUS	false
99.81.115.192	k.ba.contentsquare.net	United States	16509	AMAZON-02US	false
104.244.42.195	unknown	United States	13414	TWITTERUS	false
150.171.27.10	ax-0001.ax-msedge.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.181.226	unknown	United States	15169	GOOGLEUS	false
152.199.22.100	cs1345.wpc.edgecastcdn.net	United States	15133	EDGECASTUS	false
147.92.191.92	tr.line.me	Japan	38631	LINELINECorporationJP	false
157.240.253.1	unknown	United States	32934	FACEBOOKUS	false
142.250.186.66	cm.g.doubleclick.net	United States	15169	GOOGLEUS	false
193.70.103.218	unknown	France	16276	OVHFR	false
54.247.108.216	c.ba.contentsquare.net	United States	16509	AMAZON-02US	false
91.228.74.244	unknown	United Kingdom	27281	QUANTCASTUS	false
95.217.77.219	unknown	Germany	24940	HETZNER-ASDE	false
104.152.118.106	via.batch.com.sds.haproxyedge.net	United States	11019	HAPROXY-TECHNOLOGIESUS	false
104.152.118.107	icons.batch.com.sds.haproxyedge.net	United States	11019	HAPROXY-TECHNOLOGIESUS	false
18.66.102.121	unknown	United States	3	MIT-GATEWAYSUS	false
104.18.32.137	geolocation.onetrust.com	United States	13335	CLOUDFLARENETUS	false
66.102.1.156	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
18.66.102.63	accor.onelink.me	United States	3	MIT-GATEWAYSUS	false
142.250.185.66	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
162.159.140.229	t.co	United States	13335	CLOUDFLARENETUS	false
142.250.186.36	unknown	United States	15169	GOOGLEUS	false
104.152.118.110	unknown	United States	11019	HAPROXY-TECHNOLOGIESUS	false
185.184.10.30	us.creativecdn.com	Poland	203690	RTB-HOUSE-ASHUS	false
52.222.206.22	d6tizftlrpuof.cloudfront.net	United States	16509	AMAZON-02US	false
54.229.94.44	unknown	United States	16509	AMAZON-02US	false
45.60.155.180	naouzqe.impervadns.net	United States	19551	INCAPSULAUS	false
172.64.155.119	unknown	United States	13335	CLOUDFLARENETUS	false
185.184.8.90	ams.creativecdn.com	Poland	204995	RTB-HOUSE-AMSNL	false
150.171.29.10	ax-0001.ax-dc-msedge.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
199.232.188.157	platform.twitter.map.fastly.net	United States	54113	FASTLYUS	false
37.19.194.80	1589314308.rsc.cdn77.org	Ukraine	31343	INTERTELECOMUA	false
172.217.16.194	adservice.google.com	United States	15169	GOOGLEUS	false
157.240.253.35	unknown	United States	32934	FACEBOOKUS	false
52.223.40.198	match.adsrvr.org	United States	8987	AMAZONEXPANSIONGB	false
151.101.2.83	static-tacdn.tripadvisor.map.fastly.net	United States	54113	FASTLYUS	false
151.101.2.81	www.tamgrt.map.fastly.net	United States	54113	FASTLYUS	false
18.172.103.101	dg2iu7dxxehbo.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
37.252.173.215	unknown	European Union	29990	ASN-APPNEXUS	false
3.163.248.4	sc-static.net	United States	16509	AMAZON-02US	false
34.250.128.153	q-aeu1.contentsquare.net	United States	16509	AMAZON-02US	false
65.109.119.234	eu-log-parser-loadbalanced.kameleoon.io	United States	11022	ALABANZA-BALTUS	false
142.250.186.162	td.doubleclick.net	United States	15169	GOOGLEUS	false
104.244.42.3	s.twitter.com	United States	13414	TWITTERUS	false
34.111.113.62	pixel.tapad.com	United States	15169	GOOGLEUS	false
185.89.210.90	ib.anycast.adnxs.com	Germany	29990	ASN-APPNEXUS	false
104.18.86.42	cdn.cookielaw.org	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1545205
Start date and time:	2024-10-30 08:45:16 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 1s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://all.accor.com/a/en/new-app-offer.html
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	11
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@34/390@258/80
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.131, 172.217.16.206, 64.233.167.84, 34.104.35.123, 172.217.18.104, 2.18.64.24, 2.18.64.13, 172.202.163.200, 142.250.186.40, 88.221.110.91, 2.16.100.168, 192.229.221.95, 52.165.164.15, 142.250.185.162, 142.250.185.104, 20.242.39.171, 88.221.110.145, 88.221.110.136, 23.32.185.35, 2.18.64.26, 2.18.64.15, 2.20.65.72, 13.107.42.14, 23.212.89.35, 104.18.41.41, 172.64.146.215, 69.173.144.165, 69.173.144.138, 69.173.144.139, 23.210.92.107, 23.210.92.101, 23.210.92.108, 23.210.92.104, 23.210.92.100, 23.210.92.105, 23.210.92.106, 23.210.92.103, 23.210.92.102, 2.16.238.20, 2.16.238.25, 142.250.185.227, 142.250.185.74, 142.250.184.234, 142.250.185.234, 142.250.185.106, 142.250.184.202, 142.250.186.138, 172.217.16.202, 216.58.206.42, 142.250.185.202, 216.58.206.74, 172.217.18.10, 142.250.186.170, 142.250.185.170, 142.250.185.138, 216.58.212.138, 142.250.186.106
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, 2-01-2770-003b.cdx.cedexis.net, a767.dspw65.akamai.net, t.teads.tv.edgekey.net, e117630.dsca.akamaiedge.net, l-0005.l-msedge.net, clients2.google.com, ocsp.digicert.com, fledge.teads.tv.edgekey.net, a2047.w185.akamai.net, analytics-ipv6.tiktokw.us.edgesuite.net, update.googleapis.com, wu-b-net.trafficmanager.net, e9957.e4.akamaiedge.net, fs.microsoft.com, content-autofill.googleapis.com, pagead2.googlesyndication.com, od.linkedin.edgesuite.net, a1013.dsct.akamai.net, www.linkedin.com.cdn.cloudflare.net, edgedl.me.gvt1.com, clients.l.google.com, a1916.dscg2.akamai.net, pixel.rubiconproject.net.akadns.net, san6-ion.scene7.com.edgekey.net, otelrules.afd.azureedge.net, cm.teads.tv.edgekey.net, www.googletagmanager.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, bat.bing.com, e11275.v.akamaiedge.net, analytics.tiktok.com.edgekey.net, cac-d.line-scdn.net.line-zero
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://all.accor.com/a/en/new-app-offer.html

Source	URL
Screenshot	https://accor.onelink.me/5GRx/5m1nc8of?af_qr=true
Screenshot	https://accor.onelink.me/5GRx/5m1nc8of?af_qr=true
Screenshot	https://accor.onelink.me/5GRx/5m1nc8of?af_qr=true
Screenshot	https://accor.onelink.me/5GRx/5m1nc8of?af_qr=true
Screenshot	https://accor.onelink.me/5GRx/5m1nc8of?af_qr=true
Screenshot	https://accor.onelink.me/5GRx/5m1nc8of?af_qr=true
Screenshot	https://accor.onelink.me/5GRx/5m1nc8of?af_qr=true
Screenshot	https://accor.onelink.me/5GRx/5m1nc8of?af_qr=true
Screenshot	https://accor.onelink.me/5GRx/5m1nc8of?af_qr=true
Screenshot	https://accor.onelink.me/5GRx/5m1nc8of?af_qr=true
Screenshot	https://accor.onelink.me/5GRx/5m1nc8of?af_qr=true

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (8739)
Category:	dropped
Size (bytes):	8742
Entropy (8bit):	5.340194220200733
Encrypted:	false
SSDEEP:	192:uG+t49PvZ1Tv+6sxlWcIl1kNxQgx/eL0omrFdUMrkpYS3dKFgFKtVi3bCTHb062W:u9t4pjv+6sxlWcY16xQgx/eL0omrFyM5
MD5:	0C129CBCE388228D5F188953B347C1BB
SHA1:	65DB8A998928AD5D1AC8082AB2F8E1744B3889BF
SHA-256:	7A8826EABD5795BAEDBE464D8A94BF3701F8AD8442AF4E463D63C754002EE6C6
SHA-512:	B36AE2957726030CC9C0805319C7E18C2B916CA73F7F56AB3F838289D37A2BBF152B2718F43DDC10EB28D2A05B5BFDFE28485DF88E6653E129F4A88E57321D9E
Malicious:	false
Reputation:	low
Preview:	import{a as c,b as j}from"./axios-CJFUd36b.js";const me=e=>Object.keys(e\|\|{}).length===0,l=(e=window)=>{const t=n=>n==="gb"?"en":n,r=e.document.documentElement.lang;return t(r)\|\|"en"},w=(e,t,r=ye)=>e+(me(t)?"":"?"+r(t)),E=(e,t)=>w(e,k(t)),he=e=>t=>Object.entries(t).reduce((r,[n,o])=>(r.append(n,o),r),new e),ye=he(URLSearchParams),h=(...e)=>e.reduce((t,r)=>(t[r]=r,t),{}),V=(...e)=>e.reduce((t,r)=>({...t,...r})),Q=(e,t,r=window)=>(...n)=>r[t]\|\|(r[t]=e(...n).finally(()=>r[t]=null)),ge=()=>"##-#-#-#-###".replace(/#/g,we),we=()=>Math.floor(Math.random()*65536).toString(16).padStart(4,"0"),Ee=e=>(t,...r)=>e(new URL(t),...r),ot=Ee(e=>e.searchParams),Ae=(e,t=()=>!0)=>r=>Object.entries(r).reduce((n,[o,a])=>(e(a)&&t(o)&&(n[o]=a),n),{}),k=Ae(e=>e!=null);h("Production","Staging");const U=c.get("customer-env"),B=["int1","int2","int3","int4","rec1","rec2","rec3","rec4"],m=(e=!1)=>B.includes(U)?e&&U\|\|"rec":U==="pre"?"pre":"";if(m()){var D=document.createElement("span");D.style.cssText+="color:red;pos

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 3625 x 1286, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	35063
Entropy (8bit):	7.651085359656189
Encrypted:	false
SSDEEP:	768:OK/FxH2AdMjDxJO+dGm1PPeB7u131l5F+tv+Zmw/NAlY9iUAcwB:OcCAoO+dGoXeB7ufFYvZwUYXAcO
MD5:	50CF96398E32CFF3A29338BA88159261
SHA1:	D3F204B8090FD23E3E34D1E9A6445DC7A10E4B9D
SHA-256:	B7485683765BED45DE00E90143880667EEA8F06E1B262B22AC0AF6733B3E7DDB
SHA-512:	3A61573C1CEFFBCE4A804C835FD885595F71BF6C363E3B0D676292024260A9C58F1D4858B89AC47A42CDB6C47A84463EAE98428A888358C9C7A7D66D17B65F2C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...).........i.C....3PLTELiq..3..3..3..3..3..3..3..3..3..3..3..3..3..3..3..3.Q......tRNS.. ...`.@..0P..p.......pHYs...#...#.x.?v.. .IDATx....v.F.Qa$.N.....N.rd.@.&...Y.."H...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................8...{.+.S.............p.8x.x.W..T..W..}o...w~...>JQ)E..>....Q.JQ)....U.+.Q.JQ)....4Z.....R...g.C..Q.JQ).....e.JQ)E..~v9......"....V.6..RT......y.v.~....R..h........R..h]?~\......RT....;..r3TD)E...`u.n..RT.J....]..t3TD)E....i.d.f..RT.J...a.gk........".@.......;.RT.J...Q.> .P.....".@..Y......R....7TD)E.

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (32505)
Category:	dropped
Size (bytes):	814813
Entropy (8bit):	5.468920361318578
Encrypted:	false
SSDEEP:	12288:rol1J7270Jsgo/1OlHcgzb8G5IgIFwF20:rol1J7270JBgwuG5IgIFwFF
MD5:	3AC58AEA1C8214237BD0036879740A20
SHA1:	DDA6C649F230963AD0C69FE8280601F58541D6DF
SHA-256:	DF04BF701D0DC5660FBA6FA76024EF6DAE1101312219B0A91E75BCD734DA4275
SHA-512:	D52B5F61B5AB86DAD9EE516786D189E1FB05BFEF150CDAA64287E8826F9664EF4C4D0D76F390A2AE1579A9B115FAE174C3FB5A01B3398DD3D0D8CE96E9E11BE2
Malicious:	false
Reputation:	low
Preview:	!function(){let e;function t(e,t,n,o){Object.defineProperty(e,t,{get:n,set:o,enumerable:!0,configurable:!0})}function n(e){return e&&e.__esModule?e.default:e}var o,r,i="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:"undefined"!=typeof window?window:"undefined"!=typeof global?global:{},a={},s={},c=i.parcelRequire832b;null==c&&((c=function(e){if(e in a)return a[e].exports;if(e in s){var t=s[e];delete s[e];var n={id:e,exports:{}};return a[e]=n,t.call(n.exports,n,n.exports),n.exports}var o=Error("Cannot find module '"+e+"'");throw o.code="MODULE_NOT_FOUND",o}).register=function(e,t){s[e]=t},i.parcelRequire832b=c);var l=c.register;l("4Qi3J",function(e,n){t(e.exports,"register",function(){return o},function(e){return o=e});var o,r=new Map;o=function(e,t){for(var n=0;n<t.length-1;n+=2)r.set(t[n],{baseUrl:e,path:t[n+1]})}}),l("eFDST",function(e,n){t(e.exports,"getBundleURL",function(){return o},function(e){return o=e});var o,r={};o=function(e){var t=r[e];return t\|\|(t=f

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (487)
Category:	dropped
Size (bytes):	488
Entropy (8bit):	4.841686487844174
Encrypted:	false
SSDEEP:	12:ZorFgHDWrwAfu1eEkLsFtdJdG8nGELUD4LxZr8a65wARn:pDWJfurG8Goa4UR
MD5:	2775054C068B37509E0798448F7FD32C
SHA1:	8CCB907373C30EB3B98D5A24EC92141A938F09F5
SHA-256:	484EF4268F1D679C1AE88C06FC2388D39AFC441465732617E5E2CDC2E3D418E2
SHA-512:	5423F06453EA452614E21391C098D252DDB65ABC958C02664D9B6F1BD3BAD858B396B053C57AA714391C8953F849FAC3B6ECB9AA0C4F74F4FB81C1242B485EB4
Malicious:	false
Reputation:	low
Preview:	var TTDCM = function () { function n(t) { var e = "iframe_" + this.mapIndex++, i = document.createElement("iframe"); i.setAttribute("id", e), i.setAttribute("allowTransparency", !0), i.setAttribute("height", 0), i.setAttribute("width", 0), i.setAttribute("src", t), document.body.appendChild(i) } this.init = function (t) { if (this.sslOnly = "https:" == location.protocol, void 0 !== t && null != t && 0 != t.length) for (var e = t.length, i = this.mapIndex = 0; i < e; i++)n(t[i]) } };.

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (538)
Category:	dropped
Size (bytes):	3135
Entropy (8bit):	5.418930318527181
Encrypted:	false
SSDEEP:	48:YkmwB18erftL1yDx6KL1VM8VpVeFVNOSasuv47pGWkTM0XtUSst50mW0u4JIV:l5j80ftL1yDkKLDM8V/ezNha+v0
MD5:	B2E62B1EACB81AD16AA052EAB846EB1A
SHA1:	63C2E3843F94967EF3EF90A7D894E271B5F3F569
SHA-256:	05BD637836E681B6BB09BF91B476E53720DC2235745184EC6A257E43EACE0DE4
SHA-512:	F3441B5AA2043E75D8C2DEC90A3073A621527606EFFA53AA2111812872F5A520C32A3F9DE4D8143B814BB7390D915326E1441C1AD1869EA552171E1256E83720
Malicious:	false
Reputation:	low
Preview:	/. Quantcast measurement tag. Copyright (c) 2008-2024, Quantcast Corp../.'use strict';(function(b,l,k){var m=function(a){var d=k.createElement("a");d.href=a;return d},n=[/^http[s]?:\/\/((adservice.google.)\|([^\/]fls\.doubleclick\.net))\/.~oref=(?<url>[^;\n])/,/^http[s]?:\/\/[^\/]tealium.\/.page_url=(?<url>[^&])/],p=function(){if(l.top!==l.self){try{for(var a=0;a<n.length;a++){var d=k.location.href.match(n[a]);if(d&&d.groups.url){var e=decodeURIComponent(d.groups.url);break}}}catch(h){}return e?m(e):m(k.referrer)}return k.location},q=function(a,d,e){return a?"nc"===.a?!d\|\|!e\|\|0>d.indexOf(e):"eq"===a?d===e:"sw"===a?0===d.indexOf(e):"ew"===a?(a=d.length-e.length,d=d.lastIndexOf(e,a),-1!==d&&d===a):"c"===a?0<=d.indexOf(e):!1:!1},f=function(a,d,e){var h=p().href;q(d,h,e)?a(h):a(!1)},g=function(a,d,e){var h=p().pathname;q(d,h,e)?a(h):a(!1)},c=function(a){return"array"==={}.toString.call(a).match(/\s([a-zA-Z]+)/)[1].toLowerCase()?{labels:a.join(",")}:{labels:""+a}};try{__qc("default

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text, with very long lines (372)
Category:	downloaded
Size (bytes):	373
Entropy (8bit):	4.999760977567056
Encrypted:	false
SSDEEP:	6:0XF13rdPuSC/1nekbHDyw0xBPaiAe1a2+y4MHxOKDMnekbkTqibCEcNOxXowspUG:01132/B1H5ayXe17+xuOuS1kTvGcTlVE
MD5:	6EF308CA6EEFCD5CBF9B27F6A704B87E
SHA1:	D74376D31A7F792D51CDF0CC79F3B34848EEAFDF
SHA-256:	1FE735FB5B257D0BF5124499E58A57EA838F1FA15C03FF7DBE458961E55207AB
SHA-512:	4A079EAD284C00117E296F6B93D7785F29B418BA9C2BD90032E9D36192564385CF04626D0392EF48125E0AE1D2CCDF7184F331829AF912A47616BC071EE36EC1
Malicious:	false
Reputation:	low
URL:	https://all.accor.com/enroll-loyalty/assets/index-CB71MQO2.js
Preview:	import{k as n,m as o,n as i}from"./index-Czu5RiSy.js";const u=(r={})=>async(t={})=>n.get(o,{...r,...t}).then(({data:e})=>(e.fields=t.fields,e.filter=t.filter,e)).catch(()=>{throw i.GetUserFailed}),p="profile",A=(r={})=>async(t={})=>{const{service:e=p,payload:s,...c}=t,a=o+"/"+e;return n.put(a,s,{...c,...r}).then(({data:l})=>({success:!0,data:l}))};export{u as g,A as p};.

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	65
Entropy (8bit):	4.314128390879881
Encrypted:	false
SSDEEP:	3:2erWeKBRk35KLWAzRERxzfXHqq/H4Y3:29M3tRdfaqN
MD5:	2DEA9F0F7E122E81EE9A3752902BDF19
SHA1:	8747D6D270E001CEEA1174FF1D365D9CDEA52DCD
SHA-256:	3D49CCE674B56473177888E83BA3303C68B74AF8F0032A94F4814F73F59132B9
SHA-512:	723AC6A0C7A4139882197D5E4B59A48DB20A83C63E498C8C5FA1E057DBA75F33A1F927CC286D006BF107A04211998873FCC82656B719C40D49F633C466F0CD8F
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"response":{"status_code":400,"body":""}}..

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=6ea0385f-adb9-4a46-83a3-698c78b0a161&google_gid=CAESEJsLVTPJNTSCvE8qm5gGp_0&google_cver=1
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	914
Entropy (8bit):	5.027308163162442
Encrypted:	false
SSDEEP:	24:LsrZyHT420+9EQY7Wbvz/OiQWbP7RWS8PxiNyUnMWbzma:LsrZg0+9I78zWsb7wSqxXUMva
MD5:	44CB9CE2E83BA56026A41FCE0A867816
SHA1:	BF4987D99B62B8EF3E460F8AF6FEE9EFF86DFFAC
SHA-256:	16B413B0A867991CDD10ABEE42AF3E2937E0D94D3B5C6B71F8169213CE5C699A
SHA-512:	F1DC0B135C05742F6DD86C087E23B1CD1D780526E6E6F6769C544DF501E1A8D30146FEE5D36D10929F8BBCDB1E3565F88FEA0AF37F4CDA3DA4E33D56A8E38CCA
Malicious:	false
Reputation:	low
URL:	https://all.accor.com/a/etc.clientlibs/ace/clientlibs/uc-webview.lc-44cb9ce2e83ba56026a41fce0a867816-lc.min.js
Preview:	./Function to decode the cookie /.function getCookie(appcname) {. let matches = document.cookie.match(new RegExp(. "(?:^\|; )" + appcname.replace(/([\.$?\|{}\[\]\\\/\+^])/g, '\\$1') + "=([^;])". ));. return matches ? decodeURIComponent(matches[1]) : undefined;.}../Function to disable the components with the "data-hide-mobile" class/.function disableComponentsInApp() {. const platformCookie = getCookie("platform");. const appClassName = "data-hide-mobile";. if(platformCookie && (platformCookie == "APP-ANDROID" \|\| platformCookie == "APP-IPHONE")){. let hideMobleComponentsClass = document.getElementsByClassName(appClassName);. for(let element of hideMobleComponentsClass){. element.style = 'display:none';. }. }.}..function onDocumentReady() {. disableComponentsInApp();.}.document.addEventListener("DOMContentLoaded", onDocumentReady);..

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7874), with no line terminators
Category:	dropped
Size (bytes):	7874
Entropy (8bit):	5.507445907572536
Encrypted:	false
SSDEEP:	192:QHTvUiGnEvIhAYVOonj583iXoV7B4/nw/K1yA:QHTvUiGnEAhAYVOonj583zV7B4/w/8
MD5:	860BCA0E4EB5D4748D23C8FF5D47FDF2
SHA1:	36592D037EF823003129BE74FCAB9C9FA8BBA334
SHA-256:	05298FD7595394DC234DD79EF8236632829782E797E30CE8F5A88AA6D4F6A185
SHA-512:	10F7505EC60571B1B924551B7C7496F36A2ABA84B809A490D22F02311260D23373EC61607F8D6B294598D790D6C1F2F08084E99EF428C422CBB9E5832ADA84D2
Malicious:	false
Reputation:	low
Preview:	(()=>{"use strict";var __webpack_modules__=[,(__unused_webpack_module,__webpack_exports__,__webpack_require__)=>{let Browser,Platform;__webpack_require__.r(__webpack_exports__),__webpack_require__.d(__webpack_exports__,{Browser:()=>Browser,Platform:()=>Platform,UserAgent:()=>UserAgent,default:()=>__WEBPACK_DEFAULT_EXPORT__}),function(Browser){Browser[Browser.Unknown=0]="Unknown",Browser[Browser.Generic=1]="Generic",Browser[Browser.Chrome=2]="Chrome",Browser[Browser.Firefox=3]="Firefox",Browser[Browser.Safari=4]="Safari"}(Browser\|\|(Browser={})),function(Platform){Platform[Platform.Unknown=0]="Unknown",Platform[Platform.GenericDesktop=1]="GenericDesktop",Platform[Platform.GenericMobile=2]="GenericMobile",Platform[Platform.IOS=3]="IOS",Platform[Platform.Android=4]="Android",Platform[Platform.MacOS=5]="MacOS",Platform[Platform.Windows=6]="Windows",Platform[Platform.Linux=7]="Linux"}(Platform\|\|(Platform={}));class UserAgent{constructor(userAgentString){let platform=arguments.length>1&&void

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (55878)
Category:	downloaded
Size (bytes):	55905
Entropy (8bit):	5.5030810564571775
Encrypted:	false
SSDEEP:	1536:lfX+ppXnzc4szV3KbCNzfiWKPxd46Ck9kcH/Y:1XgCVHeJHw
MD5:	F1503A82895D5C490235A5DFF0C93DAD
SHA1:	7CE96C3E6A222431031B49B35E2E292EF6D0E62D
SHA-256:	FFAF3B7F34955E1C40B72CAB3F9C84A08869774C525B76CBCA16DC4B08593B08
SHA-512:	50A3F8780429E3AABBE88E67FEA0DEB8D0C431014389C2C9911E2A7C2D58F554BF622D636256D910F003EFB5C681EC3B5B6D7E4555E1E0379E0E1545203776F5
Malicious:	false
Reputation:	low
URL:	https://sc-static.net/scevent.min.js
Preview:	/** Snapchat Pixel SDK */.!function(){"use strict";var t=function(){return t=Object.assign\|\|function(t){for(var n,r=1,e=arguments.length;r<e;r++)for(var i in n=arguments[r])Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i]);return t},t.apply(this,arguments)};function n(t,n,r,e){return new(r\|\|(r=Promise))((function(i,o){function a(t){try{u(e.next(t))}catch(t){o(t)}}function c(t){try{u(e.throw(t))}catch(t){o(t)}}function u(t){var n;t.done?i(t.value):(n=t.value,n instanceof r?n:new r((function(t){t(n)}))).then(a,c)}u((e=e.apply(t,n\|\|[])).next())}))}function r(t,n){var r,e,i,o,a={label:0,sent:function(){if(1&i[0])throw i[1];return i[1]},trys:[],ops:[]};return o={next:c(0),throw:c(1),return:c(2)},"function"==typeof Symbol&&(o[Symbol.iterator]=function(){return this}),o;function c(c){return function(u){return function(c){if(r)throw new TypeError("Generator is already executing.");for(;o&&(o=0,c[0]&&(a=0)),a;)try{if(r=1,e&&(i=2&c[0]?e.return:c[0]?e.throw\|\|((i=e.return)&&i.call(e),0):e.nex

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65459)
Category:	downloaded
Size (bytes):	1117836
Entropy (8bit):	5.033431200570654
Encrypted:	false
SSDEEP:	3072:2HmeHmpmyHF/Z6pa3c2lz+ESZUmFT5h61y7lhdOhbWhROU0QxaxrX03UahPMQ5L+:xmyHF/Z6pa3ciz+ESZUmFT5hJhRORQc
MD5:	4D57235AB7931A0FB3BD440F39120F46
SHA1:	A9269FA596C03CB3FE4339B3E04A48B0EF310031
SHA-256:	43044B60EE225F1D4004DF37BA6CED0D7379619D75502127BE061E3C5B73DAF6
SHA-512:	BB2DAC3C1A3A05FF238F73A664B2044B4F91B565486543A9982E0B38A8B00147DF8449E3022D13192C98F1B0621C43720206ADE8DEC2B3E01ED4DE9956AFC25A
Malicious:	false
Reputation:	low
URL:	https://static-p46175-e229011.adobeaemcloud.com/b94aa70a4593f812b35d5a8922257b6f80ccf6aa708f58b8266f4ba917eb0e0e/theme.css
Preview:	/! normalize.css v8.0.1 \| MIT License \| github.com/necolas/normalize.css /.html{-webkit-text-size-adjust:100%;line-height:1.15}body{margin:0}main{display:block}h1{margin:.67em 0;font-size:2em}hr{box-sizing:content-box;height:0;overflow:visible}pre{font-family:monospace;font-size:1em}a{background-color:#0000}abbr[title]{border-bottom:none;-webkit-text-decoration:underline dotted;text-decoration:underline dotted}b,strong{font-weight:bolder}code,kbd,samp{font-family:monospace;font-size:1em}small{font-size:80%}sub,sup{vertical-align:baseline;font-size:75%;line-height:0;position:relative}sub{bottom:-.25em}sup{top:-.5em}img{border-style:none}button,input,optgroup,select,textarea{margin:0;font-family:inherit;font-size:100%;line-height:1.15}button,input{overflow:visible}button,select{text-transform:none}button,[type=button],[type=reset],[type=submit]{-webkit-appearance:button}button::-moz-focus-inner{border-style:none;padding:0}[type=button]::-moz-focus-inner{border-style:none;padding:0}[typ

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7726)
Category:	downloaded
Size (bytes):	334782
Entropy (8bit):	5.616649328871946
Encrypted:	false
SSDEEP:	6144:l4qOGbgBucoQk2639cM8Gp/E2Jptu9BW24nOH:+qXcucoQ8pAEE
MD5:	2F0E1F488F9776EB91AC77F725D18EE4
SHA1:	4C8F700FD6DE534FA731CDBA71F21B125D1CE86D
SHA-256:	B7A4D894D2FABA39B93DF86B86609318565BEBB41DF49413256C91786720F41A
SHA-512:	2A59D3207DB962A3C6BFEAC71E21F516F4FC7F259A2561E76836DB62C3415A1D2672382352BCA12AB8EADFDF814080FF5D38F7FB29DC1B154CEC3D08B4E0F2F8
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-GV11FT46S8&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"12",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_referral_exclusion","priority":13,"vtp_includeConditions":["list","accorhotels\\.com\|accor\\.com\|secure\\.ogone\\.com\|accor\\.webgeoservices\\.com\|paydollar\\.com\|(clk\|clk(uk\|de\|fr)\|pdt)\\.tradedoubler\\.com\|tpc\\.googlesyndication\\.com\|532\\.xg4ken\\.com\|googleads\\.g\\.doubleclick\\.net\|secure\\.przelewy24\\.pl\|sofort\\.com\|betalen\\.rabobank\\.nl\|bankieren\\.ideal\\.ing\\.nl\|abnamro\\.nl\|ideal\\.snsbank\\.nl\|sas\\.sermepa\\.es\|vcas1\\.visa\\.com\|aacs\\.amexsafekey\\.com\|epayment\\.postfinance\\.ch\|acs\\.cafis\\-paynet\\.jp\|acs\\.swisscard\\.ch\|(bred\|sg)\\.wlp\\-acs\\.com\|cap\\.attempts\\.securecode\\.com\|flyertea\\.com\|sas\\.redsys\\.es\|secure(5\|7)\\.arcot\\.com\|vbv\\.shinhancard\\.com\|yabs\\.yandex\\.ru\|vcas2\\.visa\\.com\|acs\\-safekey\\.am

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://all.accor.com/a/libs/granite/csrf/token.json
Preview:	{}

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (28692), with no line terminators
Category:	dropped
Size (bytes):	28693
Entropy (8bit):	5.335031419810599
Encrypted:	false
SSDEEP:	384:0uxq2YFxJfaNHJqhTGTLdER4NyS/TlGhuLr//EOjSP6uomXjE6JCPc3kCLtA6X9Y:plqhT3NC/T9ZCZXq
MD5:	292E42D46354A1EA10DC14ACE24CD5DE
SHA1:	77AC0A87A750156F72268A79E9853D9855A3B3C9
SHA-256:	156C7172E1616F9C7CE727EBB11C24F173D5180CF0CC476D4BD26722701C2776
SHA-512:	84ECCA93454617002E00496F1B94849848D73D0BA8EA3B659168E793F85D920FD28AC0869A2341AD465A59DF0458C3CB9F018477FE6CEAE92F3B62068A08420A
Malicious:	false
Reputation:	low
Preview:	!function(){var t={3099:function(t){t.exports=function(t){if("function"!=typeof t)throw TypeError(String(t)+" is not a function");return t}},6077:function(t,n,r){var e=r(111);t.exports=function(t){if(!e(t)&&null!==t)throw TypeError("Can't set "+String(t)+" as a prototype");return t}},1223:function(t,n,r){var e=r(5112),o=r(30),i=r(3070),c=e("unscopables"),u=Array.prototype;null==u[c]&&i.f(u,c,{configurable:!0,value:o(null)}),t.exports=function(t){u[c][t]=!0}},9670:function(t,n,r){var e=r(111);t.exports=function(t){if(!e(t))throw TypeError(String(t)+" is not an object");return t}},8533:function(t,n,r){"use strict";var e=r(2092).forEach,o=r(9341)("forEach");t.exports=o?[].forEach:function(t){return e(this,t,arguments.length>1?arguments[1]:void 0)}},8457:function(t,n,r){"use strict";var e=r(9974),o=r(7908),i=r(3411),c=r(7659),u=r(7466),a=r(6135),f=r(1246);t.exports=function(t){var n,r,s,l,p,v,y=o(t),h="function"==typeof this?this:Array,d=arguments.length,g=d>1?arguments[1]:void 0,x=void 0!

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	165741
Entropy (8bit):	5.3767398244895945
Encrypted:	false
SSDEEP:	3072:QcnZMgUoWAv91HVo7eXOKRhDYdw3caozUx6Ai6:ZnOgUBO7o7aOKRIarD
MD5:	58C179E779A50DA09E2A055B2298080D
SHA1:	2E52BC10CAA48B235AAB679BC77B30BEBC3759B4
SHA-256:	5F5CB4EE3D7F552C735007B4A667FF107E2EB7E4EFBDA791502FA40CDE3E3AC1
SHA-512:	BF00330F908E0B1FF19373AF9425893BA7FAE6082F185280721029BCD3EEF79066B8C9FE414B9D6327973382D75DC02EF5668379792D8DB6C7A78C82C972A751
Malicious:	false
Reputation:	low
URL:	https://via.batch.com/3.5.0/sdk.min.js
Preview:	(()=>{"use strict";var __webpack_modules__=[,(__unused_webpack_module,__webpack_exports__,__webpack_require__)=>{let Browser,Platform;__webpack_require__.r(__webpack_exports__),__webpack_require__.d(__webpack_exports__,{Browser:()=>Browser,Platform:()=>Platform,UserAgent:()=>UserAgent,default:()=>__WEBPACK_DEFAULT_EXPORT__}),function(Browser){Browser[Browser.Unknown=0]="Unknown",Browser[Browser.Generic=1]="Generic",Browser[Browser.Chrome=2]="Chrome",Browser[Browser.Firefox=3]="Firefox",Browser[Browser.Safari=4]="Safari"}(Browser\|\|(Browser={})),function(Platform){Platform[Platform.Unknown=0]="Unknown",Platform[Platform.GenericDesktop=1]="GenericDesktop",Platform[Platform.GenericMobile=2]="GenericMobile",Platform[Platform.IOS=3]="IOS",Platform[Platform.Android=4]="Android",Platform[Platform.MacOS=5]="MacOS",Platform[Platform.Windows=6]="Windows",Platform[Platform.Linux=7]="Linux"}(Platform\|\|(Platform={}));class UserAgent{constructor(userAgentString){let platform=arguments.length>1&&void

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	370
Entropy (8bit):	4.5969897580127865
Encrypted:	false
SSDEEP:	6:2LGaUImyCp0GlYM1wBJPyQK5DrIt6xfeGYqX3ofWLGJw47Jsr4z+LAltEJJsVsVo:2ffmyCkMwykgIaoO4nsrqHdyyv
MD5:	9C2160161305054AF467EA797A7C408F
SHA1:	8B427BC141874CC164E2BE3DB02079FCC99AF9ED
SHA-256:	7F47F02C93D5DE5DE03DB0EBFFA39FE1060767437B086996E295C9818A05B2F2
SHA-512:	FCCC6474CC18139B34DC40F6009C358753658E34CC2DF5B7D2C4E253BFE9647957A2FD23F30C86EC2087C2B250BCB0C570BB9EEF54B10DF6C4A3A6659F56F228
Malicious:	false
Reputation:	low
Preview:	(function(w,d,c,k,a,b,t,e) {.. var cs = d.currentScript;.. if (cs) {.. var uo = cs.getAttribute('data-ueto');.. if (uo && w[uo] && typeof w[uo].setUserSignals === 'function') {.. w[uo].setUserSignals({'co': c, 'kc': k, 'at': a, 'bi': b, 'dt': t, 'ec': e});.. }.. }..})(window, document, 'us', true, false, false, false, false);..

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	5194
Entropy (8bit):	3.976628767895142
Encrypted:	false
SSDEEP:	96:mD6VAMcWnVRSNUrN3Sky4gNeLSYiJ7iFsAkl2+heNm7iprXbep5DkoG23b+WYYY:p9bSNURZyNNnRJqsAehheImprmDkozYV
MD5:	63E737D3544164D2B7F4FBCA416AC807
SHA1:	030370AA38715E4C41589633F69D0BFE8255D46C
SHA-256:	5FA00D047ACD959697B9D7772C31DCD37BEC33C70C6FBF80AB8316205D1D286D
SHA-512:	31EE1BB536C0E50F5568A415EA3308367BFCFD11D2A6F7DFF1C8E3A982F7BE790C240A603CD4C6E187672824B8E5D07646049A28C6A88A7B001EB9A0142F312B
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/logos/static/powered_by_logo.svg
Preview:	<svg height="16" width="136" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 136 14.6"><defs><clipPath id="a"><path fill="none" d="M53.76 0H136v14.6H53.76z"/></clipPath></defs><path d="M0 12.3V5.59h2.27a2.62 2.62 0 011.29.28 1.83 1.83 0 01.74.77 2.25 2.25 0 01.25 1.07 2.26 2.26 0 01-.25 1.08 1.77 1.77 0 01-.74.77 2.55 2.55 0 01-1.28.29H.66v-.72h1.59a1.81 1.81 0 00.87-.19 1.1 1.1 0 00.48-.5 1.73 1.73 0 00.15-.73A1.66 1.66 0 003.6 7a1.1 1.1 0 00-.48-.5 1.86 1.86 0 00-.88-.18H.81v6zm7.74.1a2.29 2.29 0 01-1.2-.32 2.29 2.29 0 01-.8-.91 3.06 3.06 0 01-.28-1.36 3.07 3.07 0 01.28-1.37 2.14 2.14 0 012-1.24 2.14 2.14 0 012 1.24A3.07 3.07 0 0110 9.81a3.06 3.06 0 01-.29 1.36 2.11 2.11 0 01-2 1.23zm0-.69a1.31 1.31 0 00.85-.27 1.6 1.6 0 00.5-.69 2.9 2.9 0 00.16-.94 2.85 2.85 0 00-.16-.94 1.67 1.67 0 00-.5-.71 1.37 1.37 0 00-.85-.26 1.35 1.35 0 00-.85.26 1.67 1.67 0 00-.5.71 2.85 2.85 0 00-.16.94 2.9 2.9 0 00.16.94 1.6 1.6 0 00.5.69 1.29 1.29 0 00.85.27zm4.43.59l-1.54-5h.82l1.08 3

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	63353
Entropy (8bit):	5.403508247250149
Encrypted:	false
SSDEEP:	768:Ese3JXhZSMYifvupKW+ej38n6XrHoQ0hF:EJBgF+ej38nMr0F
MD5:	94EEB64455AC2FEC2DAAC48A5F80F468
SHA1:	AB53107FCBDC73536E396D50463706A1FD0F1885
SHA-256:	B299BEB73A789A8D7B52742818AA6CA138181937696F93189BD6051CC6DB65F2
SHA-512:	59F60BD03C0169645AA87686FF66F57657708E2B9C4B13E8A46F617C3BFBDED00F86664469A92FF2B11B66CFBCD298AF9595743CA032885DBE964627D7EF9FC2
Malicious:	false
Reputation:	low
Preview:	. {. "name": "otPcCenter",. "html": "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

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1687
Entropy (8bit):	3.7322594802445694
Encrypted:	false
SSDEEP:	24:DzMziDooiUH2wQMyiKQKgO4Qt+QcvVGzW/JiSv4b1eAXkCtah//mWjM:c2JOUjSch//7M
MD5:	A8289FA34A25CAECFDEF61A628E3B6E2
SHA1:	6934445A50AB628AF1F5EFA15172702AD15FFC69
SHA-256:	9F7AD2299D6AA37E1B679F1B5D4693FC1E3C94D5F7ECAF5101E049AA59153C95
SHA-512:	3B9F85AE60124B8EFBFD7660B9DC8ECA85546D6ADD097D736971500E8E343F5E1702E7BB4D6405150B426886511E68926FD78FD9B62BEE5415D2A7D9EF0E6C8D
Malicious:	false
Reputation:	low
Preview:	{. "format": 2,. "versions": [. {. "ver": "1.0.0-rc6". },. {. "ver": "1.0.0-rc8". },. {. "ver": "1.0.1". },. {. "ver": "1.0.3". },. {. "ver": "1.0.4". },. {. "ver": "1.1.0". },. {. "ver": "1.1.3". },. {. "ver": "1.1.4". },. {. "ver": "1.1.5". },. {. "ver": "2.0.0". },. {. "ver": "2.0.1". },. {. "ver": "2.0.2". },. {. "ver": "2.0.3". },. {. "ver": "2.0.4". },. {. "ver": "2.0.5". },. {. "ver": "2.0.6". },. {. "ver": "2.0.8". },. {. "ver": "2.0.9". },. {. "ver": "2.1.0". },. {. "ver": "2.2.0-rc1". },. {. "ver": "2.2.0". },. {. "ver": "2.2.1". },. {. "ver": "2.2.2-rc.1". },. {. "ver": "2.2.2". },. {. "ver": "2.3.0". },. {. "ver": "3.0.1". },. {. "ver": "3.0.2". },. {. "ver": "3.0.3". }

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22445)
Category:	dropped
Size (bytes):	22446
Entropy (8bit):	5.308431285952441
Encrypted:	false
SSDEEP:	384:V82ipcutdutMABwXCQ+Ur+heTJ8eMAB6LxbnmcN2Jo4pc:VSpcdCABwXG1heTJHexzoc
MD5:	ECCC5D2CDD3EB68851E379F6375456A5
SHA1:	5DD0EA3388B103A873280C0C9EFABC917F320D9A
SHA-256:	7358C5616F671017F307D161644D253F0F81083B0BE68F3A3FEFEFA33B59DE5D
SHA-512:	47B471DA0BAB81A7A1CB304A35635EA5E3329A418BC562E88B66F7E57991A2E889091C7B40503CEBACC40FEAE0CE0C4F797DFDA7EA612C178F48B0FA44523BC5
Malicious:	false
Reputation:	low
Preview:	var OneTrustStub=(t=>{var a,o,r,e,l=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIABCookieName="eupubconsent",this.oneTrustIsIABCrossConsentEnableParam="isIABGlobal",this.isStubReady=!0,this.geolocationCookiesParam="geolocation",this.EUCOUNTRIES=["BE","BG","CZ","DK","DE","EE","IE","GR","ES","FR","IT","CY","LV","LT","LU","HU","MT","NL","AT","PL","PT","RO","SI","SK","FI","SE","GB","HR","LI","NO","IS"],this.stubFileName="otSDKStub",this.DATAFILEATTRIBUTE="data-domain-script",this.bannerScriptName="otBannerSdk.js",this.domPurifyScriptName="otDomPurify.js",this.mobileOnlineURL=[],this.isMigratedURL=!1,this.migratedCCTID="[[OldCCTID]]",this.migratedDomainId="[[NewDomainId]]",this.userLocation={country:"",state:"",stateName:""}},s=((g=y=y\|\|{})[g.Days=1]="Days",g[g.Weeks=7]="Weeks",g[g.Months=30]="Months",g[g.Years=365]="Years",(g=e=e\|\|{}).Name="O

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5094), with no line terminators
Category:	dropped
Size (bytes):	5094
Entropy (8bit):	5.853170510975682
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUPTom/HmOfy:1DY0hf1bT47OIqWb1iTomvm7
MD5:	6B3DD4A0DF5D3A68D4C874617F24A8F2
SHA1:	471C45479A78FA4E64920AF4BA4475BB0084E5FD
SHA-256:	3B1704D1F199A072BA185C54652C0B739851C53206984BF2C5F0BC63AE5E8D65
SHA-512:	FE3D42579C21456B6DBD90FDF9A252D97ED9664F161B9186ED3D0CAD583F5F2A44B511D4EB92395AAF9AA5B8D53A00CFF8E1C1C1566A45E5DD57ABE7BC9E00E5
Malicious:	false
Reputation:	low
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	115798
Entropy (8bit):	4.71053958744241
Encrypted:	false
SSDEEP:	768:FWopU6n3OFFtpRtp81XystFcia4QuBbGgKltiuWhRssUj+OF20eDMuNjTfMYk/5n:FweCInD+ITaYoGqmQYW4k
MD5:	E93A8ECE5D9DD9DD1CFEB81A4DF63022
SHA1:	074586CB5B464A79563F71FDC786136F752204F7
SHA-256:	B93FEA0A86A7DE8F9F4C9B9C6FED6BA8E24C533CC6F53F0A9F9D0DE6FA6B0DF7
SHA-512:	6B7E4AFF30061EFFE506E86BED0C206B4FCAD743626AA9B4131FA767B7D15C5C35A6E7DF35EDF12424DED7C1B94A40F7DC387AF193A64BBF20B9A9F90A463759
Malicious:	false
Reputation:	low
URL:	https://all.accor.com/styles/styles-aem-header.css
Preview:	@keyframes loadingSpinner{to{transform:rotate(360deg)}}@keyframes loading-rotate-keyframe{0%{transform:rotateZ(0deg)}to{transform:rotateZ(360deg)}}@keyframes loading-circle-keyframe{0%,25%{stroke-dashoffset:178;transform:rotate(0)}50%,75%{stroke-dashoffset:30;transform:rotate(45deg)}to{stroke-dashoffset:178;transform:rotate(360deg)}}.icon-sprites-header{background-color:transparent;background-image:url(/components/header/assets/icons/icon-sprites-header.png);background-repeat:no-repeat;display:inline-block;line-height:1;vertical-align:middle}.icon-sprites-header-ach-picto{background-position:0 -114px;height:16px;width:31px}.icon-sprites-header-arrow-down-blue{background-position:-59px -114px;height:7px;width:12px}.icon-sprites-header-arrow-down-select{background-position:-84px -38px;height:41px;width:32px}.icon-sprites-header-arrows-n2{background-position:-76px -46px;height:24px;width:7px}.icon-sprites-header-card-picto{background-position:-122px 0;height:24px;width:30px}.icon-sprites-

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1229)
Category:	dropped
Size (bytes):	1262
Entropy (8bit):	5.070195599105882
Encrypted:	false
SSDEEP:	24:Vs/ybihdYZiNBmGamliRIBNfzEwMYwBc0SKCzfI5ktPFiyFsP16XqwMzV+E:LBiTuYB5A5ZS1okvfsPWqwMzwE
MD5:	787B7059950E572C3C29A3C0ADBA14D9
SHA1:	0B4F7FFF7A1AB346BF53ABF4813CAA89FED36691
SHA-256:	4339D918537029B882D41BD63673C028A5376094D64A76BBE548E378BEF65E4B
SHA-512:	726596849F7932C3A08E0E142CAEC9D45FF82648F5A9F33D712F85C9205618FCC7C08F9D651AE4816B2FFAFA8D6E692FFB5C8B0A390960B27931FD59D469E9F6
Malicious:	false
Reputation:	low
Preview:	!function(e){var t={};function r(n){if(t[n])return t[n].exports;var o=t[n]={i:n,l:!1,exports:{}};return e[n].call(o.exports,o,o.exports,r),o.l=!0,o.exports}r.m=e,r.c=t,r.d=function(e,t,n){r.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},r.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},r.t=function(e,t){if(1&t&&(e=r(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(r.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)r.d(n,o,function(t){return e[t]}.bind(null,o));return n},r.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return r.d(t,"a",t),t},r.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},r.p="",r(r.s=408)}({408:function(e,t,r){"use strict";r.r(t);const n="accorref";(()=>{var e,t,r;!function(e

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5094), with no line terminators
Category:	downloaded
Size (bytes):	5094
Entropy (8bit):	5.851423773723554
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRU01U1fm/HmOrHh:1DY0hf1bT47OIqWb1h6dmvmeB
MD5:	61CF914BB3DE5F6AB8808BBF326CC9CD
SHA1:	8196376DB95F471155F66CB5491212831D5A198F
SHA-256:	D4B559EA14862F2DDABB2148162ED33EDFF2EE58E7F4695A64E529A41D355003
SHA-512:	0C07D9118EF42804FA42C167D4F9E825729B02531814D59CDAAC79929712FAFA1FD3B2F8D7C15B14BFD6DAC71D64D429E6ADCEB802E4DB5A45273C932169DD2C
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/11264248697/?random=1730274400030&cv=11&fst=1730274400030&bg=ffffff&guid=ON&async=1&gtm=45be4as0v9104227775z8812226527za200zb812226527&gcd=13r3r3r3r5l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&hn=www.googleadservices.com&frm=0&tiba=App%20Download&npa=0&pscdl=noapi&auid=461077611.1730274398&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5094), with no line terminators
Category:	dropped
Size (bytes):	5094
Entropy (8bit):	5.852035405655982
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUxA6m/HmOQ:1DY0hf1bT47OIqWb1sA6mvmt
MD5:	F4CC3DF6C3467CFE17840D4EE427EB1F
SHA1:	385D070F20B028A5F8472C7D6AAF5E14D4CE4F34
SHA-256:	941680468DD970588ED95BEF759117AAD06B2ED11F3C8AF121A76DCFCE932A8D
SHA-512:	04DF7A56D852BB6A77930A3F73CF85C9C2FECACC511DBA365A689CCCA685F9099EE790C82277BCFCB2C3DC05A2AE96CDE7E9C27488A71B14691CD4F61ACF29FB
Malicious:	false
Reputation:	low
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	370
Entropy (8bit):	4.5969897580127865
Encrypted:	false
SSDEEP:	6:2LGaUImyCp0GlYM1wBJPyQK5DrIt6xfeGYqX3ofWLGJw47Jsr4z+LAltEJJsVsVo:2ffmyCkMwykgIaoO4nsrqHdyyv
MD5:	9C2160161305054AF467EA797A7C408F
SHA1:	8B427BC141874CC164E2BE3DB02079FCC99AF9ED
SHA-256:	7F47F02C93D5DE5DE03DB0EBFFA39FE1060767437B086996E295C9818A05B2F2
SHA-512:	FCCC6474CC18139B34DC40F6009C358753658E34CC2DF5B7D2C4E253BFE9647957A2FD23F30C86EC2087C2B250BCB0C570BB9EEF54B10DF6C4A3A6659F56F228
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/p/action/148023208.js
Preview:	(function(w,d,c,k,a,b,t,e) {.. var cs = d.currentScript;.. if (cs) {.. var uo = cs.getAttribute('data-ueto');.. if (uo && w[uo] && typeof w[uo].setUserSignals === 'function') {.. w[uo].setUserSignals({'co': c, 'kc': k, 'at': a, 'bi': b, 'dt': t, 'ec': e});.. }.. }..})(window, document, 'us', true, false, false, false, false);..

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	214093
Entropy (8bit):	5.236623260899122
Encrypted:	false
SSDEEP:	1536:OJGiCXG8Pc3206ExS2WYxaug7Jeugunu8uQuduAuFknkRknkfknkt1aogBdNjx+2:EGiCUI/knkRknkfknkjiwYJsk7B
MD5:	35D04454E2D4DA93A19A56451554E562
SHA1:	8B76A9085285D53FD9137CED5BB7E4CE9392B13D
SHA-256:	93EB3BCC986DF6EDE39DB602697489351AB1C750763CDD06AECCE82834AB0AD0
SHA-512:	2B4A32B66C876A4033851F00A7BBE3E6E470FD27832891C0D2A5E1B35DD0C82E86F4B5798A588EC83DF5A72CED28B864A632D31E4748A51071B07470DED9D0E0
Malicious:	false
Reputation:	low
Preview:	{"DomainData":{"pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccloseButtonType":"Icon","pccontinueWithoutAcceptText":"Continue without Accepting","MainText":"Cookies","MainInfoText":"When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. This information might be about you, your preferences or your device and is mostly used to make the site work as you expect it to. The information does not usually directly identify you, but it can give you a more personalized web experience. Because we respect your right to privacy, you can choose not to allow some types of cookies. Click on the different category headings to find out more and change our default settings. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer.","AboutText":"More information","AboutCookiesText":"Your Privacy","ConfirmText"

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (28692), with no line terminators
Category:	downloaded
Size (bytes):	28693
Entropy (8bit):	5.335031419810599
Encrypted:	false
SSDEEP:	384:0uxq2YFxJfaNHJqhTGTLdER4NyS/TlGhuLr//EOjSP6uomXjE6JCPc3kCLtA6X9Y:plqhT3NC/T9ZCZXq
MD5:	292E42D46354A1EA10DC14ACE24CD5DE
SHA1:	77AC0A87A750156F72268A79E9853D9855A3B3C9
SHA-256:	156C7172E1616F9C7CE727EBB11C24F173D5180CF0CC476D4BD26722701C2776
SHA-512:	84ECCA93454617002E00496F1B94849848D73D0BA8EA3B659168E793F85D920FD28AC0869A2341AD465A59DF0458C3CB9F018477FE6CEAE92F3B62068A08420A
Malicious:	false
Reputation:	low
URL:	https://cdn.tkrconnector.com/js/tkrc.js
Preview:	!function(){var t={3099:function(t){t.exports=function(t){if("function"!=typeof t)throw TypeError(String(t)+" is not a function");return t}},6077:function(t,n,r){var e=r(111);t.exports=function(t){if(!e(t)&&null!==t)throw TypeError("Can't set "+String(t)+" as a prototype");return t}},1223:function(t,n,r){var e=r(5112),o=r(30),i=r(3070),c=e("unscopables"),u=Array.prototype;null==u[c]&&i.f(u,c,{configurable:!0,value:o(null)}),t.exports=function(t){u[c][t]=!0}},9670:function(t,n,r){var e=r(111);t.exports=function(t){if(!e(t))throw TypeError(String(t)+" is not an object");return t}},8533:function(t,n,r){"use strict";var e=r(2092).forEach,o=r(9341)("forEach");t.exports=o?[].forEach:function(t){return e(this,t,arguments.length>1?arguments[1]:void 0)}},8457:function(t,n,r){"use strict";var e=r(9974),o=r(7908),i=r(3411),c=r(7659),u=r(7466),a=r(6135),f=r(1246);t.exports=function(t){var n,r,s,l,p,v,y=o(t),h="function"==typeof this?this:Array,d=arguments.length,g=d>1?arguments[1]:void 0,x=void 0!

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2889
Entropy (8bit):	4.934563770733932
Encrypted:	false
SSDEEP:	12:izXvG5Zys1rJg7ZXBrZCGgjGqBr7YXwcG1ndJgnlZXnnrZn0GgnZGqnrr7YntwiH:iDe3Hv1B3v9InvB8uVvUAPvfmK
MD5:	A10B68A2427438CC306EA4813A9677B5
SHA1:	4EF1B72EE652355A0D0CFD49F2BF143C090A4D89
SHA-256:	1033B253A89697E77E306322B560D03C2D3417AE3A3D20DB1D3550F94218995F
SHA-512:	746CF867B42349CBB14073FC085B1DA1D7D5B9C735838FA4D3D88A439C0FFACEBCC38CFF0177888BE6FEF6DF526B0A96F06FFC5660459790F729D098A11FB0B2
Malicious:	false
Reputation:	low
URL:	https://all.accor.com/a/etc.clientlibs/ace/clientlibs-modules/components/clientlib-image/v2/clientlib-image.lc-a10b68a2427438cc306ea4813a9677b5-lc.min.css
Preview:	.ace-image-v2.ace-image{display:flex;width:100%;aspect-ratio:auto !important}..ace-image-v2 picture{flex-grow:1;width:100%;height:100%}.@media(min-width:320px){.ace-image-v2.s_ratio_1by1{aspect-ratio:1 !important}..ace-image-v2.s_ratio_3by2{aspect-ratio:1.5 !important}..ace-image-v2.s_ratio_4by3{aspect-ratio:1.3333333333 !important}..ace-image-v2.s_ratio_6by5{aspect-ratio:1.2 !important}..ace-image-v2.s_ratio_8by10{aspect-ratio:.8 !important}..ace-image-v2.s_ratio_16by9{aspect-ratio:1.7777777778 !important}..ace-image-v2.s_ratio_13by5{aspect-ratio:2.6 !important}..ace-image-v2.s_ratio_11by5{aspect-ratio:2.2 !important}.}.@media(min-width:768px){.ace-image-v2.m_ratio_1by1{aspect-ratio:1 !important}..ace-image-v2.m_ratio_3by2{aspect-ratio:1.5 !important}..ace-image-v2.m_ratio_4by3{aspect-ratio:1.3333333333 !important}..ace-image-v2.m_ratio_6by5{aspect-ratio:1.2 !important}..ace-image-v2.m_ratio_8by10{aspect-ratio:.8 !important}..ace-image-v2.m_ratio_16by9{aspect-ratio:1.7777777778 !impor

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (14703)
Category:	downloaded
Size (bytes):	14774
Entropy (8bit):	5.520070155706052
Encrypted:	false
SSDEEP:	384:V74Yz9KDfufsOy40cpJZV8hmbdCA3iKdqR7Az3:V/JtEOy49pJZV8hmbdVi9R7Az3
MD5:	63E399C5722B54DF72093811820263E0
SHA1:	554377AC945C24B018B1B339A1D2D0C678303345
SHA-256:	3B5923A81FEE2D3EEF672952A7E1356F1D5561A350485164B2FDFEBFF7955614
SHA-512:	65EDD89910B44A88B7E9385C73D66BCF00D14D0C2291C395ABA453D803E60417E5A7F23900F7F5F593B6B30F6EC93F8CF8A47DAC3B7376110AF763BEEA90D2B8
Malicious:	false
Reputation:	low
URL:	https://all.accor.com/a/etc.clientlibs/ace/clientlibs-modules/clientlib-core.lc-63e399c5722b54df72093811820263e0-lc.min.js
Preview:	!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports):"function"==typeof define&&define.amd?define(["exports"],t):t((e="undefined"!=typeof globalThis?globalThis:e\|\|self).CoreJS={})}(this,(function(e){"use strict";const t="register-component",o="register-component-override",s="theme-loaded",n="extra-dom-loaded";var a=Object.freeze({__proto__:null,EXTRA_DOM_LOADED_EVENT:n,REGISTER_COMPONENT:t,REGISTER_COMPONENT_OVERRIDE:o,RESIZE_EVENT_WRAPPER:"custom-resize-event",THEME_LOADED_EVENT:s,VIDEO_COMPONENT_LOADED:"video-component-loaded"});class i{componentHost;componentName;constructor(e,t=""){if(this.constructor===i)throw new Error("\n Base class can't be instantiated directly,\n it should be inherited by other subclasses.");if(!e)throw new Error("Base need an HTML element to be instantiated");this.componentHost=e,this.componentName=t,this.initialize()}initialize(){this.componentVersion=this.componentHost.dataset.version}static registerComponent

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (544)
Category:	downloaded
Size (bytes):	2769
Entropy (8bit):	4.9661962702513796
Encrypted:	false
SSDEEP:	48:trXpRJ2u/pIBtAqLsPXui2POWUTteJ8SJ5ffixr3JC987AbF:R9aAqLzhlQr3E9uAB
MD5:	1E0136BAD0ACFB78BE509234578E44F9
SHA1:	C93ECEF079D9A3D453D5D62ADCC0D8CFA96615B9
SHA-256:	E30FCE7F3A4FD232ADCD6FBA94949E18BD188AE9750C0A1BD5F53B6D5C496848
SHA-512:	32AAFE0DCBE41C88699970AA8858FF788E7FF28AC0B76018C03B95C867ABF6CA1957F3157747B86843CFB8B19678DFC0DB241E3BE6CD7740B22990D8559101A4
Malicious:	false
Reputation:	low
URL:	https://all.accor.com/a/etc.clientlibs/core/wcm/components/commons/datalayer/v2/clientlibs/core.wcm.components.commons.datalayer.v2.lc-1e0136bad0acfb78be509234578e44f9-lc.min.js
Preview:	if(!Element.prototype.matches)Element.prototype.matches=Element.prototype.msMatchesSelector\|\|Element.prototype.webkitMatchesSelector;if(!Element.prototype.closest)Element.prototype.closest=function(s){var el=this;if(!document.documentElement.contains(el))return null;do{if(el.matches(s))return el;el=el.parentElement\|\|el.parentNode}while(el!==null&&el.nodeType===1);return null};.if(!Array.prototype.find)Object.defineProperty(Array.prototype,"find",{value:function(predicate){if(this==null)throw TypeError('"this" is null or not defined');var o=Object(this);var len=o.length>>>0;if(typeof predicate!=="function")throw TypeError("predicate must be a function");var thisArg=arguments[1];var k=0;while(k<len){var kValue=o[k];if(predicate.call(thisArg,kValue,k,o))return kValue;k++}return undefined},configurable:true,writable:true});.(function(){var dataLayerEnabled;var dataLayerName;var dataLayer;function addComponentToDataLayer(component){dataLayer.push({component:getComponentObject(component)})}f

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/11264275592?random=1730274400316&cv=11&fst=1730274400316&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4as0v9104227775z8812226527za200zb812226527&gcd=13r3r3r3r5l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&hn=www.googleadservices.com&frm=0&tiba=App%20Download&npa=0&pscdl=noapi&auid=461077611.1730274398&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26792)
Category:	downloaded
Size (bytes):	26845
Entropy (8bit):	5.065577902476607
Encrypted:	false
SSDEEP:	384:263NIwGd+NCYYqYFpYMTd1R4evsfjcyyJUQqZrmWLBDAwYjH9SrEy2nGAWhsLWHw:TwqWBx1WKOIdL
MD5:	F7362ECEFC7207E4067E7036F701167D
SHA1:	0A8326522D1D7A28EA3711001567CCD464F480AC
SHA-256:	0993B473A1DE273F7FD8EA890B2C5A3E525E647258BE0586D5BC0BE80583DC91
SHA-512:	B0F5A40CBB42804B3EE911B783D371F37ABE751558539B2299D9671C3ED4586FBCF64E7639186BCCA1E7AB41E5533CEEDE65524EE53CA44690136995E01425EC
Malicious:	false
Reputation:	low
URL:	https://all.accor.com/styles/styles-footer-light.css
Preview:	.color-text-heading,.color-text-title{color:#252339}.color-text-body{color:#3e3d48}.color-text-muted{color:#6f6e77}.color-text-accent{color:#068484}.color-text-inverse{color:#fff}.color-background{background-color:#f4f4f5}.color-background-light{background-color:#fff}.color-background-dark{background-color:#050033}.color-background-accent{background-color:#eef7f7}.color-background-badge{background-color:#252339}.color-background-badge-light{background-color:#544e85}.color-background-modal{background-color:rgba(0,0,0,.7)}@font-face{font-display:auto;font-family:"Unna";font-style:italic;font-weight:400;src:url(/assets/fonts/unna/italic/unna-italic.woff2) format("woff2"),url(/assets/fonts/unna/italic/unna-italic.woff) format("woff")}@font-face{font-display:auto;font-family:"Montserrat";font-style:normal;font-weight:700;src:url(/assets/fonts/montserrat/bold/montserrat-bold.woff2) format("woff2"),url(/assets/fonts/montserrat/bold/montserrat-bold.woff) format("woff")}@font-face{font-display:

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	531
Entropy (8bit):	5.001947266402909
Encrypted:	false
SSDEEP:	6:V3IL55sr498N81vuODNCJT0KaMdshWgsyeu8MxL0TqI1MgO8DuI8W8Yo8eDFon:V3U8N81XRbKacUZIGISI8W8Yo8Tn
MD5:	696CE9A06FAA733B225FFB8C05F16DB9
SHA1:	91AB9CAF6EC40B452D473B67F696170FAC773451
SHA-256:	46BABCBA89584CECE3A42B64D66CC508CF185ACB4C319B388D10C728ACEAE898
SHA-512:	9B89233F7568112A785DF4CBC563F640DC548B272BB056A217AD6998D00D369C194315CFBFA326F77307F37324728AC1093AAB3768F89DC505715B21AEBAC83F
Malicious:	false
Reputation:	low
URL:	https://all.accor.com/a/etc.clientlibs/core/wcm/components/page/v2/page/clientlibs/site/skiptomaincontent.lc-696ce9a06faa733b225ffb8c05f16db9-lc.min.css
Preview:	.cmp-page__skiptomaincontent-link{position:absolute;left:-999px;top:0;width:1px;height:1px;overflow:hidden;z-index:-999}..cmp-page__skiptomaincontent-link:focus,.cmp-page__skiptomaincontent-link:active{left:20px;top:20px;width:auto;height:auto;color:blue;background:white;border:1px solid blue;overflow:auto;padding:10px;margin:5px;z-index:999}.[dir="RTL"] .cmp-page__skiptomaincontent-link{right:-999px;left:auto}.[dir="RTL"] .cmp-page__skiptomaincontent-link:focus,[dir="RTL"] .cmp-page__skiptomaincontent-link:active{right:20px}

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	91
Entropy (8bit):	4.150183722821492
Encrypted:	false
SSDEEP:	3:YEBjX22HWnJzWLKjUSHJvjHQn:YElyULA1Hdjwn
MD5:	C92FC925695AE7223A4386A5BA02C2C1
SHA1:	229B2D3C0AF5AE082DBA0F41BBC249386D55B1EA
SHA-256:	52EFEC17A3DF8AAEEC9711B8B6821FF3185B90CDC87507BEAE7CCE8F309234E8
SHA-512:	9925314BEEC2AF2134817A1644667C54C54A5BC57068AD5E8841C4525112AEAE1695BC0E330976FECC648773DA41B45B06EED5FF85F63E20AB4B8C590DC71A98
Malicious:	false
Reputation:	low
URL:	https://tr.snapchat.com/config/com/5b7854ae-f9c6-433a-ba0a-2ec9f24a5aa4.json?v=3.33.0-2409301510
Preview:	{"asc":[],"gw":null,"a":[],"ipg":"1","b":[],"t":"","v":"3.7.5-2401032347","tpd":[],"ec":[]}

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 88708, version 1.0
Category:	downloaded
Size (bytes):	88708
Entropy (8bit):	7.996607204145272
Encrypted:	true
SSDEEP:	1536:nT1R386wpS1lpy8Ay5OgExD4QEZgaUJaQWS95z9YGqMcAMTXx39gKHiAMd05U5OV:hRsTonyhyggECQCUw1CnqM61NgCLE55U
MD5:	1EAF59537A9C317ACAA4B2C144CD89D6
SHA1:	C974C955950D5522A66ABD7D2E388E03C177DD85
SHA-256:	5E2AC34E292B6F15C645DC4E756F01A452CF63DC0817301AD34B1C9BC6A0AFA3
SHA-512:	D9ED187F4241526784411B9D0F609557ECCF4B0E3FFD959F33F3314C588A23E3F8C2C6F65BF6939C11F794901734DAE3A2EC05B8046CDE2E050BC0638A8C5EE8
Malicious:	false
Reputation:	low
URL:	https://all.accor.com/assets/fonts/montserrat/bold/montserrat-bold.woff2
Preview:	wOF2......Z........\|..Z.........................?FFTM...z...^...F.`.....d..m.....@.....d..6.$..D. ..`......U[4\..>...G.....DE.7@,g-K..g.P.....u.M....J..............m.[f................................+....m.{.s.9w.{..}o.7.yo.{3..>..A.~.&.F....A(M..05..K.J+..@?KK+.".}..e:D...Z.F...W.F..I5Yd.A.2..d..qr...3.^.vn.233S....$$]=4..o.].........EQ......x/>.b.h........=......?.(.[V...'.?....HB..I..e^/..`U.B#.tx.1.hD._{\|bbbEb.1.IU...$$..^[\\\Tfff..QHB.......8..'........>....L...H.......3.jH.1..uYB....U...v.eff.:.mHB....3p...t::..,.<u.Y.............y.u.;.3.Ex..a...!.N.)}D...Q.....cr.rA....H.=M/.u14&.q.b.2u!igeee......}4\|....23..( ...?.!$..W~t....c..tYB...^}.]...5eff.....t..OP.7;..233.y.IH&~.......v[b.1..........s..meff.c.IH:.../@...(....233.1..../.Q...23.y.g........_.E.D..v.....<-...;.]...<..i.K.(D..{/.lq......o.5...6.M...wIWWWW[-...uTUUUU....~..`0..@t...!.I].._.Jb.1....Ig..#$..M...9eff.b....7 .Z....233.1@..?A.T..PU......3:.{.....PU..........

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	651
Entropy (8bit):	4.3413895961447135
Encrypted:	false
SSDEEP:	12:t4HnOWLHGfCd/QYlZpUai7FSr6cPJUpA3ie0zQcozjS50J0JZRjTToEksiU4pyCp:t4HOsGqdQYlHU46mqpOumzjCvTozsiUW
MD5:	A5C5D6146A6E55E4A0FE3567602B1E46
SHA1:	C75FF1B713378AEC779FB248E22DAA513ACA725B
SHA-256:	901BB0E03B8C3C0A1CF4C487A177417328BB7D8C94106ECEFCEEDD7D7F6C4DDC
SHA-512:	D21D979974542243A4D70036F87BFC0549B6793B809ED09044946BE2A25C47811A99E20FDB1F3044082A5509664101D4BCA241A1CA7B09FE80084CEAFA092368
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="348.333" height="348.333" viewBox="0 0 348.333 348.334"><path fill="#565656" d="M336.559 68.611L231.016 174.165l105.543 105.549c15.699 15.705 15.699 41.145 0 56.85-7.844 7.844-18.128 11.769-28.407 11.769-10.296 0-20.581-3.919-28.419-11.769L174.167 231.003 68.609 336.563c-7.843 7.844-18.128 11.769-28.416 11.769-10.285 0-20.563-3.919-28.413-11.769-15.699-15.698-15.699-41.139 0-56.85l105.54-105.549L11.774 68.611c-15.699-15.699-15.699-41.145 0-56.844 15.696-15.687 41.127-15.687 56.829 0l105.563 105.554L279.721 11.767c15.705-15.687 41.139-15.687 56.832 0 15.705 15.699 15.705 41.145.006 56.844z"/></svg>

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	77
Entropy (8bit):	4.261301029168016
Encrypted:	false
SSDEEP:	3:LUfQ2pHWiR8HVjROE9HSxmQqyRHfHyI:x2pHDKcElSDPyI
MD5:	806699ED4BB65178112F5BAD2242C52D
SHA1:	F44771599DB97A9EA255845DC886AE69EC293024
SHA-256:	6595E4AA67EA4D50268F53193CBE84B2201B3130DC15F690165007BDB829E068
SHA-512:	01FD5927CB4F6A6C1EA7B91F9ADD3F39AB3CC936FC06D806BF0A7A656E008F4281A96B7F8A850D8D470E8DF832B95A539836D734DC19D33B9946C31C948839FA
Malicious:	false
Reputation:	low
Preview:	jsonFeed({"country":"US","state":"TX","stateName":"Texas","continent":"NA"});

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (34675)
Category:	dropped
Size (bytes):	456025
Entropy (8bit):	5.581832999323731
Encrypted:	false
SSDEEP:	6144:YQIGjrTm98G4jWsT/IjR12w2+GxgCto4MYGUTx0C8Gp/kbS:Q9pyu2wWNto4vH
MD5:	A8778C2D505483AA6E5C6006DC42A84A
SHA1:	FB98BEB293DEAEAB037E658BA171DBDAEDCC0691
SHA-256:	B668937F2BA67BC0CCADC90EEB91F9E2DBAF9008EBA5F6E1B7858394E328EDB1
SHA-512:	FE5784826EC6975118E35889E84CDADEDC1C048D2C978DE5D9F95B951B2C191EA09688768320AC3DDC3BCACB2C15AC88D07A91C493E463DBC2F90E1DC4F39259
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"879",. . "macros":[{"function":"__v","convert_case_to":1,"vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"dynamic_datas_ready"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"OnetrustActiveGroups"},{"function":"__jsm","vtp_javascript":["template","(function(){var a=\"\";1==",["escape",["macro",0],8,16],"\u0026\u0026",["escape",["macro",1],8,16],".match(\/C0004\/)\u0026\u0026(a=\"true\");return a})();"]},{"function":"__e"},{"function":"__c","vtp_value":"649915528506999"},{"function":"__cvt_12226527_2433"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"page_data.hotelcode"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"page_data.hotelcityname"},{"function"

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	21
Entropy (8bit):	3.8442328987631913
Encrypted:	false
SSDEEP:	3:YVXATML1WTYn:Y9AAZRn
MD5:	40A89EFAFFF3B82741AFCF386B4BE360
SHA1:	78B265BB58B03F4BF3BC8AFE56D2FADA8B5BB8BB
SHA-256:	E1AFF7D0B82AFC3DA592B1C024B9066E8FD2D8871EE9723BEEEB9B54DDF194DC
SHA-512:	5A15B0EF785634478A570C9EFF1D234CAD9CAEAF9AEBAF222789A1D7CF94E0DA19708734CF0527803E14F96AAC340EEA5826051857843291C2BB883F7ABD3771
Malicious:	false
Reputation:	low
Preview:	{"previousVisits":[]}

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	149805
Entropy (8bit):	5.6004134683803555
Encrypted:	false
SSDEEP:	1536:Cnxj4bndhXdOU0tNo455wjdrm/bK+OTRMWMrvBDJTcitj+wf2EAeiPWMWNZVgdyo:Cnxj479OU03o4PwjhIBVT39ROyuvb
MD5:	5693E74A87CDFE0DD8CF9E97ABC2EC67
SHA1:	0912A92CEBFC4248B4D561F57B32D18135F9AD59
SHA-256:	79951B5BD4D729A2B2F4D380819F2C14BBCF26F21DB56A520189633467766CF4
SHA-512:	B0954FF6229C037AAEC67F6CC91889D3AD1C0D38AC3E53E61F3A98D49379FA43C1FF709C7017459B9BD416BCEB2236D90B24C17E072882C122360069DCD9E0E0
Malicious:	false
Reputation:	low
URL:	https://analytics.tiktok.com/i18n/pixel/static/identify_7bf75739.js
Preview:	!function(){"use strict";function t(){t=function(){return e};var e={},d=Object.prototype,n=d.hasOwnProperty,r="function"==typeof Symbol?Symbol:{},o=r.iterator\|\|"@@iterator",i=r.asyncIterator\|\|"@@asyncIterator",a=r.toStringTag\|\|"@@toStringTag";function $(t,e,d){return Object.defineProperty(t,e,{value:d,enumerable:!0,configurable:!0,writable:!0}),t[e]}try{$({},"")}catch(t){$=function(t,e,d){return t[e]=d}}function u(t,e,d,n){var r=e&&e.prototype instanceof s?e:s,o=Object.create(r.prototype),i=new w(n\|\|[]);return o._invoke=function(t,e,d){var n="suspendedStart";return function(r,o){if("executing"===n)throw new Error("Generator is already running");if("completed"===n){if("throw"===r)throw o;return E()}for(d.method=r,d.arg=o;;){var i=d.delegate;if(i){var a=_(i,d);if(a){if(a===c)continue;return a}}if("next"===d.method)d.sent=d._sent=d.arg;else if("throw"===d.method){if("suspendedStart"===n)throw n="completed",d.arg;d.dispatchException(d.arg)}else"return"===d.method&&d.abrupt("return",d.arg);

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2058)
Category:	dropped
Size (bytes):	225705
Entropy (8bit):	5.6363141826611765
Encrypted:	false
SSDEEP:	3072:jdNx2eOjfkoeM/oM7i9kRG5jbB9ytSmkG/Q94+a05iv05SXXg+TZ:JOjfvJRMvB9ytSmfKCMi8mQ4Z
MD5:	B99622A5351114A08A4541FEDF9CF998
SHA1:	A7E06CBBB01B894F4471AFAC6F5FDF0BAB950EC2
SHA-256:	2096D52BD5E451A48A4B35B1C2D84AEB5456391513BF40621140BA126EE5B311
SHA-512:	3D93B7F71A8BC31F25A740855B0A06C3E0595D26721EF047D93BD2A713774F867D79F685BE3CE7A5342D9E45A4B66A13F40D85F55D9DF1FBE3CA98B6DA190A65
Malicious:	false
Reputation:	low
Preview:	/. Copyright and licenses see https://www.dynatrace.com/company/trust-center/customers/reports/ /.(function(){function Ka(){document.cookie="".concat("__dTCookie","=").concat("1",";SameSite=Lax");var Ba=-1!==document.cookie.indexOf("__dTCookie");document.cookie="".concat("__dTCookie","=").concat("1","; expires=Thu, 01-Jan-1970 00:00:01 GMT");return Ba}function gb(){return void 0===hb.dialogArguments?navigator.cookieEnabled\|\|Ka():Ka()}function ib(){var Ba;if(gb()){var Ia=hb.dT_,Va=null===Ia\|\|void 0===Ia?void 0:Ia.platformPrefix;if(!Ia\|\|Va){var La=null===Ia\|\|void 0===Ia?void 0:Ia.minAgentVersion;.La&&"10285240307101407"<La+""?window.console.log("[CookiePrefix/initConfig] Min agent version detected, and javascript agent is older - the javascript agent will not be initialized!"):(La=(Ba={},Ba.cfg="#CONFIGSTRING#\|auto=#AUTO#\|domain=#DOMAIN#\|rid=RID_#REQUEST_ID#\|rpid=#RESPONSE_ID#\|app=#APP#",Ba.iCE=gb,Ba.platformCookieOffset=null===Ia\|\|void 0===Ia?void 0:Ia.platformCookieOffset,Ba),Va&&(La

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	497
Entropy (8bit):	4.684891921463926
Encrypted:	false
SSDEEP:	12:t4O6aVCd3luZsgbfFTLE+C1ydL0ZQ9jXcaggOCedJI5iNtcME:t4O6aUdVmLCwdL0u/OTJAOtcME
MD5:	B57C99C9D1E3C50B2114C6DB053D7FF0
SHA1:	ADA8ABFED92BA8A545BBD9D299D74D5972CC4AE8
SHA-256:	691DCDB24853A0F5CE4E6597E5713DEA66799B57FFE2C2A10F28F98E0B569B19
SHA-512:	0DAB6D06F386D922FB28F70F2590D4F9C361E7F4E5D5E581B98E59AAC12B266CBA596FFCCD87203B4330673EE4EC1D459A1ABDFC4B066D243A43B2BF7909F0EE
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/logos/static/ot_guard_logo.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg"><path class="ot-floating-button__svg-fill" d="M14.588 0l.445.328c1.807 1.303 3.961 2.533 6.461 3.688 2.015.93 4.576 1.746 7.682 2.446 0 14.178-4.73 24.133-14.19 29.864l-.398.236C4.863 30.87 0 20.837 0 6.462c3.107-.7 5.668-1.516 7.682-2.446 2.709-1.251 5.01-2.59 6.906-4.016zm5.87 13.88a.75.75 0 00-.974.159l-5.475 6.625-3.005-2.997-.077-.067a.75.75 0 00-.983 1.13l4.172 4.16 6.525-7.895.06-.083a.75.75 0 00-.16-.973z" fill="#FFF" fill-rule="evenodd"/></svg>

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/rubicon?gdpr=0
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3966)
Category:	dropped
Size (bytes):	265140
Entropy (8bit):	5.565820812019563
Encrypted:	false
SSDEEP:	3072:BW3wiztGbETravo9y0J5CptDY8/I8+yr/OUYhcDmKD0C8Gp/Ghl:6Gbg+vo3M/GUTx0C8Gp/Gn
MD5:	017F3B989935B566E48A1C3CE4F1093D
SHA1:	1A1C12E0B67A8C2A2E52967A09BE1D47F3EA1EAA
SHA-256:	1686CD6011E75EBF949DFB28DC14E184BCE294A199F36CD31C15FD94631EF941
SHA-512:	1D31F26B2CB5E2846B18B04FA6DA64B83AB2B6FADBF062728B52294537AB0A0A16A918370C56A3D6F6E9249C6B2958446D008089BB679A7285D1F9BFA9EF82D8
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_dma","priority":3,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":29},{"function":"__ogt_1p_data_v2","priority":3,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regi

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (35788), with CRLF line terminators
Category:	dropped
Size (bytes):	35806
Entropy (8bit):	5.354321297607842
Encrypted:	false
SSDEEP:	768:eruQgm8+OGIdHR3rUKOevLVgaJICkv8wxpKhm:que8F5ZR3oexxm
MD5:	033CB53DBA312C88798BBA579FC68B40
SHA1:	E6A645D3E0680302789C87BABFDDF1A742C7D64A
SHA-256:	A1F8F7541A2982D7DF75F73D0234A3F2AFDC8302F361078F883D25A3A574BAE4
SHA-512:	3CB56D5756C519F72AA24FDF1AC03298CD8010FB6A429A7439A8C19BF75C9C813EB8F224C2A31ECECA53C1EF0101FD74705ADAB86E464E616A0316F5C04DB8FA
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";var t=Object.freeze({__proto__:null,get queue(){return qe},get start(){return Ae},get stop(){return We},get track(){return Se}}),e=Object.freeze({__proto__:null,get clone(){return rn},get compute(){return an},get data(){return Ge},get keys(){return Ze},get reset(){return on},get start(){return en},get stop(){return cn},get trigger(){return nn},get update(){return un}}),n=Object.freeze({__proto__:null,get check(){return pn},get compute(){return vn},get data(){return Be},get start(){return fn},get stop(){return mn},get trigger(){return gn}}),r=Object.freeze({__proto__:null,get compute(){return On},get data(){return wn},get log(){return _n},get reset(){return xn},get start(){return bn},get stop(){return kn},get updates(){return yn}}),a=Object.freeze({__proto__:null,get callbacks(){return Tn},get clear(){return Cn},get consent(){return jn},get data(){return En},get id(){return In},get metadata(){return Sn},get save(){return Hn},get start(){return Nn},get stop(){ret

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (58876), with no line terminators
Category:	dropped
Size (bytes):	58876
Entropy (8bit):	5.405683338218142
Encrypted:	false
SSDEEP:	1536:buY9NdAkLYPFvFkxF94zPnSJpSFDKNo5/H:buQdApFoF94zPnSJpSFDP5/H
MD5:	4328E910DE583AD53B3A7A76455AF005
SHA1:	E040010E5EF4121A3A163AACDC664D6AA4AFEC74
SHA-256:	D4963B8AFEBFA0063B5D17B4C80F49BCE702A37EA5C9B91BB3C996BB9DEA4B60
SHA-512:	F807BA8B0AE2D5387E93E292918EEB4D7D1AC7635566A38EE2E101FBE8A7C6C23E704770EFCB1401EB5D1385605CBFB15F0A840AC150770049D2A4D6CA9A0DFA
Malicious:	false
Reputation:	low
Preview:	!function(){var t={6173:function(t,e,n){var r;t.exports=(r=r\|\|function(t,e){var r;if("undefined"!=typeof window&&window.crypto&&(r=window.crypto),"undefined"!=typeof self&&self.crypto&&(r=self.crypto),"undefined"!=typeof globalThis&&globalThis.crypto&&(r=globalThis.crypto),!r&&"undefined"!=typeof window&&window.msCrypto&&(r=window.msCrypto),!r&&void 0!==n.g&&n.g.crypto&&(r=n.g.crypto),!r)try{r=n(2480)}catch(t){}var i=function(){if(r){if("function"==typeof r.getRandomValues)try{return r.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof r.randomBytes)try{return r.randomBytes(4).readInt32LE()}catch(t){}}throw new Error("Native crypto module could not be used to get secure random number.")},o=Object.create\|\|function(){function t(){}return function(e){var n;return t.prototype=e,n=new t,t.prototype=null,n}}(),a={},c=a.lib={},u=c.Base={extend:function(t){var e=o(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (40095)
Category:	downloaded
Size (bytes):	75590
Entropy (8bit):	5.300163254788885
Encrypted:	false
SSDEEP:	768:BmDgg7rVYGSnjXrw9AAgNgl7L/QApN2Yr2r3d0nWYi5XPxXL6OZ:Dlng9rUA/Od4WYi5XZXL6OZ
MD5:	85396E39CF0BF25835FF5DB9134EE464
SHA1:	97629ED65B4B03A073FA52EB96513468A70E699D
SHA-256:	0A6CE532B492305DB659CDA9E37B372DB894F421E2963093AC14DB75FFE97C54
SHA-512:	3089B198A9FC47ED3D1B6643EC2406EF846547573E63B9AAE2B45816A9140AEC5177ADB5FEF73B9A7D12D8EF7C51003F107B4C974717AC39B85945A0454F4F0C
Malicious:	false
Reputation:	low
URL:	https://w.usabilla.com/2a22008a1a0b.js?lv=1
Preview:	(function(){window.parent!=window&&(window.lightningjs\|\|function(d,f){var e=d.lightningjs={modules:f.modules},r=f.modules;e.expensive=function(b){b._waitforload=!0;return b};void 0;e.require=f.require;e.provide=function(b,l){function m(){var a=d.console;if(a&&a.error)try{a.error.apply(a,arguments)}catch(c){}else if(d.opera)try{d.opera.postError.apply(d.opera,arguments)}catch(c){}}function f(a){var c=a[0],k=a[1],b=0<k?p[k]:l,f=Array.prototype.slice.call(a[2]),h=f.shift();a=g._.fh[c]=g._.fh[c]\|\|[];.k=g._.eh[c]=g._.eh[c]\|\|[];g._.ph[c]=g._.ph[c]\|\|[];if(b){if(b=b[h])try{var d=b.apply(b,f)}catch(n){var e=n}else e=Error("unknown deferred method '"+h+"'"),m(e.toString());d&&(p[c]=d);if(e){for(;k.length;){c=k.shift();try{c(e)}catch(n){m(n)}}k.push=function(a){a(e)}}else{for(;a.length;){c=a.shift();try{c(d)}catch(n){m(n)}}a.push=function(a){a(d)}}}else m("cannot call deferred method '"+h+"' on 'undefined'")}function t(){for(var a=h.shift();a;){if(u)var c=!1;else{var b=a[1];c=0<b?p[b]:l;var e=Arr

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (712)
Category:	dropped
Size (bytes):	713
Entropy (8bit):	5.267941860597536
Encrypted:	false
SSDEEP:	12:IJdS2Aevsfgsp+zwoHgvkeks9sFd9zHWVflfkELagQLAJM4c/kj+w8:6s+8Q7ZTWsELaVUJM4Am+w8
MD5:	D8722C09216BEA9CF6B7AFE7E617279D
SHA1:	495D158E5CC5EDD44B97F66999CC2BE2820202D9
SHA-256:	535B8358453DD242DC45F1C627CBD3C5D71932958E650995110271AB9F6A9725
SHA-512:	D8ED598C37C5F337BAC05E8B79A42BCCA60F1A1F98A1BC565F86F4A5AC143B71A01D6689508CCE5A83C7838D69305CECA0783D2E895C02CABC45056A23BB7F73
Malicious:	false
Reputation:	low
Preview:	const E="ENROLL-LOYALTY",_="l7xx8785261b2a33457db88959a8679a1307",O={INVALID_PROMOCODE:"INVALID_PROMOCODE",PROMOTION_CODE_EXPIRED:"PROMOTION_CODE_EXPIRED",INVALID_PROMOTION_CODE:"INVALID_PROMOTION_CODE",PROMOTION_CODE_ALREADY_USED:"PROMOTION_CODE_ALREADY_USED",NOT_FOUND_PROMOTION_CODE:"NOT_FOUND_PROMOTION_CODE"},R={[O.INVALID_PROMOCODE]:"allplus.recap.subscription.error.discount",[O.PROMOTION_CODE_EXPIRED]:"error.codeExpired.desc",[O.INVALID_PROMOTION_CODE]:"error.codeNotValid.desc",[O.NOT_FOUND_PROMOTION_CODE]:"error.codeNotValid.desc",[O.PROMOTION_CODE_ALREADY_USED]:"error.codeAlreadyUsed.desc"},D="error",r="success",I="impervaError",s="x-accor-security";export{E,s as H,I,_ as P,r as S,D as a,R as e};.

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/11264248697?random=1730274400030&cv=11&fst=1730274400030&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4as0v9104227775z8812226527za200zb812226527&gcd=13r3r3r3r5l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&hn=www.googleadservices.com&frm=0&tiba=App%20Download&npa=0&pscdl=noapi&auid=461077611.1730274398&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (589)
Category:	downloaded
Size (bytes):	947
Entropy (8bit):	5.47646448878614
Encrypted:	false
SSDEEP:	12:XqJmW/m26qvfNV4NbxTHQuqJmrtr1WILZYcVJyNxL8BMUNbpbzbg2fE9zZcfMpNs:si2N1V4NxwZG1jVywBfeSGVdD/ho
MD5:	027391DADB89ED7C8F518C65A544A46C
SHA1:	5024117B7FCD7EBF87B5189180426E2B24944EBE
SHA-256:	54EFE9E397926682685A725FE24122895DB3F68AD0ABA4D1A5C137506AD4B009
SHA-512:	0F46EA372BF5286F10E39B76FAC813CA5A5C9A5ECB01C80D0D7843AF95933C9F9D0111E460B7305AA27DDFF9F076B2A96B24FECB05671CFD761323B4D6AD0DF6
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/upb/?adv=pio09oh&ref=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&upid=ug5iyox&upv=1.1.0&v=undefined&vf=EUR&orderid=undefined&td1=undefined&td2=undefined&paapi=1
Preview:	.<html>.<head>. <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script>.</head>.<body>. <div id="universalPixelContainer">. <script type="text/javascript">. (function(global) { . var ttdcm = new TTDCM(); . ttdcm.init( ["https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=6ea0385f-adb9-4a46-83a3-698c78b0a161&gdpr=0&gdpr_consent=&expires=30&next=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Frubicon","https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=NmVhMDM4NWYtYWRiOS00YTQ2LTgzYTMtNjk4Yzc4YjBhMTYx&gdpr=0&gdpr_consent=&ttd_tdid=6ea0385f-adb9-4a46-83a3-698c78b0a161","https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid%3d%24UID&ttd_tdid=6ea0385f-adb9-4a46-83a3-698c78b0a161"] );. })(this);. </script>. . </div>.</body>.</html>

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (14703)
Category:	dropped
Size (bytes):	14774
Entropy (8bit):	5.520070155706052
Encrypted:	false
SSDEEP:	384:V74Yz9KDfufsOy40cpJZV8hmbdCA3iKdqR7Az3:V/JtEOy49pJZV8hmbdVi9R7Az3
MD5:	63E399C5722B54DF72093811820263E0
SHA1:	554377AC945C24B018B1B339A1D2D0C678303345
SHA-256:	3B5923A81FEE2D3EEF672952A7E1356F1D5561A350485164B2FDFEBFF7955614
SHA-512:	65EDD89910B44A88B7E9385C73D66BCF00D14D0C2291C395ABA453D803E60417E5A7F23900F7F5F593B6B30F6EC93F8CF8A47DAC3B7376110AF763BEEA90D2B8
Malicious:	false
Reputation:	low
Preview:	!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports):"function"==typeof define&&define.amd?define(["exports"],t):t((e="undefined"!=typeof globalThis?globalThis:e\|\|self).CoreJS={})}(this,(function(e){"use strict";const t="register-component",o="register-component-override",s="theme-loaded",n="extra-dom-loaded";var a=Object.freeze({__proto__:null,EXTRA_DOM_LOADED_EVENT:n,REGISTER_COMPONENT:t,REGISTER_COMPONENT_OVERRIDE:o,RESIZE_EVENT_WRAPPER:"custom-resize-event",THEME_LOADED_EVENT:s,VIDEO_COMPONENT_LOADED:"video-component-loaded"});class i{componentHost;componentName;constructor(e,t=""){if(this.constructor===i)throw new Error("\n Base class can't be instantiated directly,\n it should be inherited by other subclasses.");if(!e)throw new Error("Base need an HTML element to be instantiated");this.componentHost=e,this.componentName=t,this.initialize()}initialize(){this.componentVersion=this.componentHost.dataset.version}static registerComponent

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 63748, version 1.0
Category:	downloaded
Size (bytes):	63748
Entropy (8bit):	7.996818176788358
Encrypted:	true
SSDEEP:	1536:KtdCG+Dz6RxAx457zL0ASEn091Y0H1mTOzI/OzMFOoTX4u:MMG+yRpzN091Y0VtI/pOoTt
MD5:	6887B6F24414DBC612DBF42CCDC76B70
SHA1:	8068D3ABFBC6CBF35B55919DA45B1F4D2D136238
SHA-256:	FC5C015FC32518F1ED810FA84CA28941EB9D5A3C81ACC8DF69A4DBBEEDEF7B0C
SHA-512:	00F08F9DD648972C9571547E06172D5505DD13F577FE2E65A497D3856172807AC11C996984E4138D2EB2AC784257FE61864AEE15752FE9E9E76F98DB931E0C2A
Malicious:	false
Reputation:	low
URL:	https://static-p46175-e229011.adobeaemcloud.com/b94aa70a4593f812b35d5a8922257b6f80ccf6aa708f58b8266f4ba917eb0e0e/resources/fonts/roboto-regular.woff2
Preview:	wOF2..............................................b...L....`....T..<.....$..s........6.$..8. .... ..I[sZ....._.L].E.....].S!..M.V.v......ZF..\|....x\|......._.Ld..i.$...)...ms.:..Q..0....l`h;.W.=Q04c`]...l.].L...1.4...7b.i.r....+aZ..Og..=u;i.q....P&D.s..S.]..?.].U.O..o....1K..=.Q...^..x.o.?.r..0.m..08......X.J........iC).HX9.....j.j....)G..K.]U~.L.~..&...W.p.Z......!):x......p21R[.@JD1...4...]4.. ^M.O3D.._.....v...%_..^..M>n&S....4s...[p#J..z.....Z1.......V..'{..$)&:. L.Kg.J.,..~Q...w.,.! ..\Xb.G..O.....i...d....Z...K.....%x.b...W..b..C\|z]..I.Z..(_q.3i'3..t+..R.....v...yd6a!{&m.oE..:.....t.S......1D0~d aQ#r.Q...+`,.m..c..I..(.,tX`^^..x..F.......H......V.$DT"J:O....N..w.RZ..1.2r...@<..Gw.X%).&i........0..... +...0.#.kxD..1h3.N.d.u......W.k........{y._X..uT..Nt..I..[uBV.....`.x....@.$..C..`...u...F....!.f.F.PQ...s....8%....;se$....N.O..J.J...E!..%.......!Qx.4..........#.4..<..}.*../r..?..(.....j"..@..":QdC.....M<r.k.[i...Ye..7....Z.$N'..w}...,..r.\.>.

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 31760, version 1.0
Category:	downloaded
Size (bytes):	31760
Entropy (8bit):	7.993283485118227
Encrypted:	true
SSDEEP:	768:ihthRsmZ5TRuX2qBqZgJCbter2gp2i5JwOdpjxuQU:yG85TQmCqZDbter2Ed5JwOdpkQU
MD5:	B5239CD2AD5919E61DFEFA67BBDD739A
SHA1:	EB5B0614DCB446820D238D89BBF1CEB479A9EF6C
SHA-256:	8FE7D360B25F1B98291E77D39B4BB3CB260311FEE4F7A771CF707F79078BF838
SHA-512:	ADD80DF82BB5F2309F9703CAE4D6C41F74159155BC792E4E1CA8AECDDCD2B9A73F83A764E69F6D13BA318AAA4E8EAA19D051A319DCCF0A4719AF821AB8EC3E70
Malicious:	false
Reputation:	low
URL:	https://static-p46175-e229011.adobeaemcloud.com/b94aa70a4593f812b35d5a8922257b6f80ccf6aa708f58b8266f4ba917eb0e0e/resources/fonts/unna-italic.woff2
Preview:	wOF2......\|.......1...{..........................j..~..4.`..l.j........p..4.....6.$.... .....\|...[K.Q.i....G.O..c........L.1..8..g_`....t..@..e..~.....-..".QU...H....R.o.).,.7...k.y.f..f3O,...ZYZ........\2....ex....L...e.......I7....#pM.8H+...P~..a....].Qc......j.....o9.1.u4...'3.....4...n.,.1F...F..1.1.aD.d..v..,...G...u.a.a....4..^D.I..TriD.&M.I.T..[.6(:....3.......&.....w...>...#..#.l.}.2U.._..m..M..f%....WtgT..y8.{..1..Y..f. .h..G.....{.;...(.HrRh...3.k[.6S.o..0e.=.....R>.n..{......@........V.\.)....g.S..B.IE....l. @......A...Q...U......P...~...:....^.e..6.0..J.8^3$.Z.....}>.t0.&}..l..7.....Vo..7vp...l..@......W.(_.d.3.8."..,5..!d.`.?.4.#.GT..).x......x..J...[A.5..<.3..2.... ..^.7...V..W5......f..U..K.K...m.F_.6ah..O.~./U...7..r .1.....W...O.2..ot..h.n.......L.....4.4.F.. ...Dk.<Q.&...J3.).%q.]..).,M....4{....v...n.....w5.oe....8..'Xk.....I........J.eJ;.z;Q...u.3?mCQ.(.&..n..^.Bh..............SZ(......:P.toR..R$.'Qfr....E....X.

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (726)
Category:	downloaded
Size (bytes):	65457
Entropy (8bit):	4.952926474695551
Encrypted:	false
SSDEEP:	384:nEI/dt0cwLEsMwiR64tyGlR1jnvBY8bZh1nRWTsTeTueSZu2iZTHNNBQCFTlTcsa:oYqTuth
MD5:	F0455BAEFFAC322F3007B17532591060
SHA1:	F555DF4E7827553751C8012EEACD75FAECB9C3A4
SHA-256:	F9A9FF9F1AC84ED151C02EC06CE527A5C1B503E429B2239934853376E3DF489F
SHA-512:	39D4BE53DD0FA7A162516047E8F65184602B68374E896305FB8B1C681BC82457C95C88494D6EA57719CB1FE1E9F8978FE16A311E020018E2BBB8E0080DAC0753
Malicious:	false
Reputation:	low
URL:	https://all.accor.com/a/conf/all/settings/wcm/segments.seg.js
Preview:	if (window.ContextHub && ContextHub.SegmentEngine) {.var S = ContextHub.SegmentEngine.Segment;.var SR = ContextHub.SegmentEngine.SegmentReference;.var P = ContextHub.SegmentEngine.Property;.var O = ContextHub.SegmentEngine.Operator;.var FR = ContextHub.SegmentEngine.ScriptReference;.var D = '/conf/all/settings/wcm/segments/';..new S(["all_classic_en_africa",D+"all_classic_en_africa",0],new O('and',new O('equal.string',new P("customer\/Connected"),"true"),new O('or',new O('equal.string',new P("customer\/loyaltyStatus"),"Classic")),new O('equal.string',new P("pos\/country"),"africa"),new O('equal.string',new P("pos\/language"),"en")));..new S(["all_elite_en_africa",D+"all_elite_en_africa",0],new O('and',new O('equal.string',new P("customer\/Connected"),"true"),new O('or',new O('equal.string',new P("customer\/loyaltyStatus"),"Silver"),new O('equal.string',new P("customer\/loyaltyStatus"),"Gold"),new O('equal.string',new P("customer\/loyaltyStatus"),"Platinum"),new O('equal.string',new P("

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	5194
Entropy (8bit):	3.976628767895142
Encrypted:	false
SSDEEP:	96:mD6VAMcWnVRSNUrN3Sky4gNeLSYiJ7iFsAkl2+heNm7iprXbep5DkoG23b+WYYY:p9bSNURZyNNnRJqsAehheImprmDkozYV
MD5:	63E737D3544164D2B7F4FBCA416AC807
SHA1:	030370AA38715E4C41589633F69D0BFE8255D46C
SHA-256:	5FA00D047ACD959697B9D7772C31DCD37BEC33C70C6FBF80AB8316205D1D286D
SHA-512:	31EE1BB536C0E50F5568A415EA3308367BFCFD11D2A6F7DFF1C8E3A982F7BE790C240A603CD4C6E187672824B8E5D07646049A28C6A88A7B001EB9A0142F312B
Malicious:	false
Reputation:	low
Preview:	<svg height="16" width="136" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 136 14.6"><defs><clipPath id="a"><path fill="none" d="M53.76 0H136v14.6H53.76z"/></clipPath></defs><path d="M0 12.3V5.59h2.27a2.62 2.62 0 011.29.28 1.83 1.83 0 01.74.77 2.25 2.25 0 01.25 1.07 2.26 2.26 0 01-.25 1.08 1.77 1.77 0 01-.74.77 2.55 2.55 0 01-1.28.29H.66v-.72h1.59a1.81 1.81 0 00.87-.19 1.1 1.1 0 00.48-.5 1.73 1.73 0 00.15-.73A1.66 1.66 0 003.6 7a1.1 1.1 0 00-.48-.5 1.86 1.86 0 00-.88-.18H.81v6zm7.74.1a2.29 2.29 0 01-1.2-.32 2.29 2.29 0 01-.8-.91 3.06 3.06 0 01-.28-1.36 3.07 3.07 0 01.28-1.37 2.14 2.14 0 012-1.24 2.14 2.14 0 012 1.24A3.07 3.07 0 0110 9.81a3.06 3.06 0 01-.29 1.36 2.11 2.11 0 01-2 1.23zm0-.69a1.31 1.31 0 00.85-.27 1.6 1.6 0 00.5-.69 2.9 2.9 0 00.16-.94 2.85 2.85 0 00-.16-.94 1.67 1.67 0 00-.5-.71 1.37 1.37 0 00-.85-.26 1.35 1.35 0 00-.85.26 1.67 1.67 0 00-.5.71 2.85 2.85 0 00-.16.94 2.9 2.9 0 00.16.94 1.6 1.6 0 00.5.69 1.29 1.29 0 00.85.27zm4.43.59l-1.54-5h.82l1.08 3

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.270340411085111
Encrypted:	false
SSDEEP:	3:YPk7waifM8OETAk5waifMN:YYwpM8O6B5wpMN
MD5:	6A59206692CE3585653B3232CAC4A50C
SHA1:	DFF30E7CC4801BAFA10BC1D777E2CFA20C3C79F6
SHA-256:	AA68B21018C7D67F9370ECB380065765E1CE2292EA14C46FD3CDA4E551F80835
SHA-512:	D25452939C06D26A29FE39E4BF8ACAECB8684D88D8F5C740C7F222C921F36BCF3EBF0895565E9EC23BA19930A6171412006B555324F5581806E65775EA08C51C
Malicious:	false
Reputation:	low
URL:	https://f.creativecdn.com/.well-known/interest-group/permissions/?origin=https%3A%2F%2Fus.creativecdn.com
Preview:	{"joinAdInterestGroup": true,. "leaveAdInterestGroup": true}.

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	6462
Entropy (8bit):	3.9238060166958464
Encrypted:	false
SSDEEP:	96:CWyRrqr1Nop+P48bW+8sFLxyE5fud5QRK9LnAN6j9ric1r:CWyp81XMEFlQQnY
MD5:	EA209341357EBADBCED78D352160784B
SHA1:	1FA453AB4D0590E50143D2FECB0C62D410F21955
SHA-256:	D709E3BB403D618CC38DBFDE48788244F04FB499D9639D9743D82027FD46CA7C
SHA-512:	1070650BDBB178D6900BF5AFA32CF576DB8FB4B3C814FC8B85BE7409287E314C6C960978B57BD60A55A59483F40633189BE97ECA30DF5BA871B4382D39DCEC9C
Malicious:	false
Reputation:	low
URL:	https://all.accor.com/a/content/dam/all/global-marketing/brand-identity/logos/all-paris-2024/msa_l_0000184.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 124 78">. <metadata><?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.4d2f597, 2021/09/01-20:51:22 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/". xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#". xmlns:xmp="http://ns.adobe.com/xap/1.0/">. <xmpMM:PreservedFileName>specific-logo-all.com.svg</xmpMM:PreservedFileName>. <xmpMM:InstanceID>xmp.iid:c9ad86cf-8469-904a-ba53-22d1f24cd7f6</xmpMM:InstanceID>. <xmpMM:DocumentID>xmp.did:c9ad86cf-8469-904a-ba53-22d1f24cd7f6</xmpMM:DocumentID>. <xmpMM:OriginalDocumentID>xmp.did:c9ad86cf-8469-904a-ba53-22d1f24cd7f6</xmpMM:OriginalDocumentID>. <xmpMM:History>. <rdf:Seq>. <rdf:li>. <rdf:

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (815)
Category:	downloaded
Size (bytes):	3501
Entropy (8bit):	5.383873370647921
Encrypted:	false
SSDEEP:	96:EI5cZUiKliCJ86U+QTEVWfeLwTauSEegdkZ5edOIC:EI5hiWNJ8kQTEVWfeUauRfdkZ5edO1
MD5:	147FD3B00C22BA9C939712E9213C24CA
SHA1:	3B48369B86FA0574F35379AACD1F42CC9C98A52B
SHA-256:	70F5B11C1870CF90201A6D5F770CA318A3FA5827C74A8765EDE22B487F7D4532
SHA-512:	E8419A71232EDAC8FD131446777F7D034B3171EFE07B3267479B439E4982650DB65A0D1DDC9F516315D5ED1B01ECFD2F7EB55D75D44AA51EE0AD494D441586D2
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/static/service_worker/4al0/sw_iframe.html?origin=https%3A%2F%2Fall.accor.com
Preview:	<!DOCTYPE html>.<html>.<head>. <link rel="shortcut icon" href="data:image/x-icon;," type="image/x-icon">.</head>.<body>. <script>.'use strict';class m{constructor(a){this.j=a;this.g={};this.h={};this.i=0;this.id=String(Math.floor(Number.MAX_SAFE_INTEGERMath.random()))}}function n(a){return a.performance&&a.performance.now()\|\|Date.now()}.var p=function(a,b){class d{constructor(c,g,f){this.failureType=c;this.data=g;this.g=f;this.h=new m(n(f))}s(c,g){const f=c.clientId;if(c.type===0){c.isDead=!0;var e=this.h,h=n(this.g);e.g[f]==null&&(e.g[f]=0,e.h[f]=h,e.i++);e.g[f]++;c.stats={targetId:e.id,clientCount:e.i,totalLifeMs:Math.round(h-e.j),heartbeatCount:e.g[f],clientLifeMs:Math.round(h-e.h[f])}}c.failure={failureType:this.failureType,data:this.data};g(c)}}return new d(5,a,b)};/.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0.*/.let q=globalThis.trustedTypes,r;function t(){let a=null;if(!q)return a;try{const b=d=>d;a=q.createPolicy("goog#html",{createHTML:b,createScript:b,crea

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (8739)
Category:	downloaded
Size (bytes):	8742
Entropy (8bit):	5.340194220200733
Encrypted:	false
SSDEEP:	192:uG+t49PvZ1Tv+6sxlWcIl1kNxQgx/eL0omrFdUMrkpYS3dKFgFKtVi3bCTHb062W:u9t4pjv+6sxlWcY16xQgx/eL0omrFyM5
MD5:	0C129CBCE388228D5F188953B347C1BB
SHA1:	65DB8A998928AD5D1AC8082AB2F8E1744B3889BF
SHA-256:	7A8826EABD5795BAEDBE464D8A94BF3701F8AD8442AF4E463D63C754002EE6C6
SHA-512:	B36AE2957726030CC9C0805319C7E18C2B916CA73F7F56AB3F838289D37A2BBF152B2718F43DDC10EB28D2A05B5BFDFE28485DF88E6653E129F4A88E57321D9E
Malicious:	false
Reputation:	low
URL:	https://all.accor.com/enroll-loyalty/assets/index-Czu5RiSy.js
Preview:	import{a as c,b as j}from"./axios-CJFUd36b.js";const me=e=>Object.keys(e\|\|{}).length===0,l=(e=window)=>{const t=n=>n==="gb"?"en":n,r=e.document.documentElement.lang;return t(r)\|\|"en"},w=(e,t,r=ye)=>e+(me(t)?"":"?"+r(t)),E=(e,t)=>w(e,k(t)),he=e=>t=>Object.entries(t).reduce((r,[n,o])=>(r.append(n,o),r),new e),ye=he(URLSearchParams),h=(...e)=>e.reduce((t,r)=>(t[r]=r,t),{}),V=(...e)=>e.reduce((t,r)=>({...t,...r})),Q=(e,t,r=window)=>(...n)=>r[t]\|\|(r[t]=e(...n).finally(()=>r[t]=null)),ge=()=>"##-#-#-#-###".replace(/#/g,we),we=()=>Math.floor(Math.random()*65536).toString(16).padStart(4,"0"),Ee=e=>(t,...r)=>e(new URL(t),...r),ot=Ee(e=>e.searchParams),Ae=(e,t=()=>!0)=>r=>Object.entries(r).reduce((n,[o,a])=>(e(a)&&t(o)&&(n[o]=a),n),{}),k=Ae(e=>e!=null);h("Production","Staging");const U=c.get("customer-env"),B=["int1","int2","int3","int4","rec1","rec2","rec3","rec4"],m=(e=!1)=>B.includes(U)?e&&U\|\|"rec":U==="pre"?"pre":"";if(m()){var D=document.createElement("span");D.style.cssText+="color:red;pos

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (504)
Category:	dropped
Size (bytes):	906
Entropy (8bit):	5.464993612040931
Encrypted:	false
SSDEEP:	24:/D7d/2A6qggoEiSgP1Y4vv98KuoCG2m1YN73Ze:3dmqDoEiSgP1Zv98KuoCGZW3g
MD5:	91ACFE7CA172AF47F628E88402176079
SHA1:	19DB4773295D601F314B8F5C7F7CAE023A68C536
SHA-256:	1D5E2A340D630718CD8679CDA8DC6E390672E519AFB965694AB365D52ED4AD2A
SHA-512:	7D01FBB30DBC348144AE55373E102C6868468F9DDB24BB8513B8715ACE0DB36FEA8E0CD589E800DA92199169F653AD0986028C98C46301D19A140AE1688841B8
Malicious:	false
Reputation:	low
Preview:	function checkPlatform(){function c(){var a=window.location.search;return-1<a.indexOf("platform\x3dAPP-IPHONE")\|\|-1<a.indexOf("platform\x3dAPP-ANDROID")?!0:!1}if(/APP-(IPHONE\|ANDROID)/.test(function(a){a=("; "+document.cookie).split("; "+a+"\x3d");if(2===a.length)return a.pop().split(";").shift()}("platform"))\|\|c()){document.cookie="OptanonAlertBoxClosed\x3d"+(new Date).toISOString()+"; path\x3d/";var b=new Date;b.setYear(b.getFullYear()+1);b=b.toISOString();var d=(new Date).toString().replace(/ /g,."+").replace(/:/g,"%3A"),e=(new URLSearchParams(window.location.search)).get("otConsentString");document.cookie="OptanonConsent\x3ddatestamp\x3d"+d+"\x26version\x3d6.14.0\x26interactionCount\x3d0\x26isIABGlobal\x3dfalse\x26landingPath\x3dNotLandingPage\x26groups\x3d"+encodeURIComponent(e\|\|"C0001:1,C0002:0,C0003:0,C0004:0")+"\x26hosts\x3d\x26legInt\x3d; expires\x3d"+b+"; path\x3d/"}}checkPlatform();

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/src=6773840;type=ah_count;cat=visits;gtm=45j91e4as1v886152357z86262265z9891108097za200zb6262265;dc_pre=1;u1=AccorHotels;u3=USD;u4=us;u5=EUR;u8=page_view;u10=%22%22;u19=en-us;u22=informationandservices%3A%3Aapp%20download;u41=895171141.1730274398;u45=not%20logged;dma=0;npa=1;gcs=G111;gcd=13r3r3r3r7l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=90773391;s3p=1;~oref=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17002)
Category:	dropped
Size (bytes):	32494
Entropy (8bit):	5.599959968235641
Encrypted:	false
SSDEEP:	384:xLUoOIQ4FiWsjdcrUZGykZTMtKGQJYRp6bBARrjAOsRfls4Fa2CbhfJA:xLPOIQzu/ZTM7mbBARrjAKHO
MD5:	02E4691C0DCC2F7ECEF2712FB0F24921
SHA1:	C43D36B258AFE50CD563F93BFDC5094A5AF5FF96
SHA-256:	D504F72375BCFB65FBF8DBF79AD313AA21DF0953BB1EFEF82695708BA70922B1
SHA-512:	BE27C47C3389D164BB056592BCFD40A8754BC9D2F8874BBDC9589E52B401D85D89A1ABE3B6BBA4B44BA1A6E3F2BE25DED1E208C068825DBDD36F3F001DCE8C8B
Malicious:	false
Reputation:	low
Preview:	!function(t){function e(i){if(n[i])return n[i].exports;var r=n[i]={i:i,l:!1,exports:{}};return t[i].call(r.exports,r,r.exports,e),r.l=!0,r.exports}var n={};e.m=t,e.c=n,e.d=function(t,n,i){e.o(t,n)\|\|Object.defineProperty(t,n,{configurable:!1,enumerable:!0,get:i})},e.n=function(t){var n=t&&t.__esModule?function(){return t.default}:function(){return t};return e.d(n,"a",n),n},e.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},e.p="",e(e.s=5)}([function(t,e,n){"use strict";function i(t){for(var e=!(arguments.length>1&&void 0!==arguments[1])\|\|arguments[1],n=2166136261,i=t+"",r=0;r<i.length;++r)n^=i.charCodeAt(r),n+=(n<<1)+(n<<4)+(n<<7)+(n<<8)+(n<<24);var o=(n>>>0).toString(16);return e&&(o=("00000000"+o).slice(-8)),o}Object.defineProperty(e,"__esModule",{value:!0}),e.default=i},function(t,e,n){"use strict";function i(t,e){if(!(t instanceof e))throw new TypeError("Cannot call a class as a function")}Object.defineProperty(e,"__esModule",{value:!0});var r=function(){function t(

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	283649
Entropy (8bit):	5.581422404588499
Encrypted:	false
SSDEEP:	6144:Oo/GbgBu2oXkx639cM8Gp/U2gtu9BW24n1U:hQcu2oX0AEG
MD5:	2B26ED952C642D9093CEB5D2BE650C72
SHA1:	E29BFBC2787451BF4CAB15E69E3EB4A29D329EDC
SHA-256:	B6A10AD92766B8F32FAC9573BC98FB87E072FE9F73353C1F8A0EB872DDA4BB52
SHA-512:	1ED3CD42CDC9193E9D425BE1810644E302DF0169D0224580C825E569C24AF754A2B6981183B158E41EF58C3824B2BBF57D2756FBF219BB22489B03373F71D41B
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-SKWJ7883ZP&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cookie_settings","priority":8,"vtp_gaCookieExpiration":34164000,"vtp_gaCookieUpdate":false,"vtp_isEnabled":true,"tag_id":9},{"function":"__ogt_dma","priority":8,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":11},{"function":"__ogt_1p_data_v2","priority":8,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELE

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1046)
Category:	downloaded
Size (bytes):	235682
Entropy (8bit):	5.542224409491431
Encrypted:	false
SSDEEP:	3072:WkVf6E9VSDrz9Kg5VPjLdrjB83cG9I7u+X9RrStw6WQ:zURLn0h9qRXqtyQ
MD5:	CDA7E9186C25DE421F8B91A0DAF62395
SHA1:	B98CA78C444046D17EFD9116BC79340E2850BFD4
SHA-256:	25F1D4B2A2E838B112C9F2B029FF796DD7B919AC35ADAD8247543D4D6B8B86D0
SHA-512:	51877AD6225FF8B32BFDDE6ED37D1A42A7FA3F577F9B1FC6C15153606137009B5C3353D64DE720EB61B7446FDBCE3465F4413023740AB940E47908649E54B358
Malicious:	false
Reputation:	low
URL:	https://all.accor.com/a/etc.clientlibs/ace/clientlibs-modules/components/clientlib-customer-api.lc-cda7e9186c25de421f8b91a0daf62395-lc.min.js
Preview:	/. js-cookie v3.0.5 \| MIT /.var $jscomp=$jscomp\|\|{};$jscomp.scope={};$jscomp.arrayIteratorImpl=function(C){var U=0;return function(){return U<C.length?{done:!1,value:C[U++]}:{done:!0}}};$jscomp.arrayIterator=function(C){return{next:$jscomp.arrayIteratorImpl(C)}};$jscomp.ASSUME_ES5=!1;$jscomp.ASSUME_NO_NATIVE_MAP=!1;$jscomp.ASSUME_NO_NATIVE_SET=!1;$jscomp.SIMPLE_FROUND_POLYFILL=!1;.$jscomp.defineProperty=$jscomp.ASSUME_ES5\|\|"function"==typeof Object.defineProperties?Object.defineProperty:function(C,U,xa){C!=Array.prototype&&C!=Object.prototype&&(C[U]=xa.value)};$jscomp.getGlobal=function(C){return"undefined"!=typeof window&&window===C?C:"undefined"!=typeof global&&null!=global?global:C};$jscomp.global=$jscomp.getGlobal(this);$jscomp.SYMBOL_PREFIX="jscomp_symbol_";$jscomp.initSymbol=function(){$jscomp.initSymbol=function(){};$jscomp.global.Symbol\|\|($jscomp.global.Symbol=$jscomp.Symbol)};.$jscomp.Symbol=function(){var C=0;return function(U){return $jscomp.SYMBOL_PREFIX+(U\|\|"")+C++}}();$

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (54951)
Category:	dropped
Size (bytes):	413965
Entropy (8bit):	5.4975475697474945
Encrypted:	false
SSDEEP:	3072:ml42XUBXzXm3X2awiztGWETvaNeA0g5CptDY8/I8+40OrDmKD0C8Gp/q0f9PHS:mldUJbmH2+GWgCNfMhT/x0C8Gp/XVPy
MD5:	09A587B6736D42DF4A140E7E54D76DAD
SHA1:	3A1D6D6A9C673730E147B1481210540A4AA4BF94
SHA-256:	FFAD7432E685CCB3D6AD876B756C0A0511EED5D5EA169765BA9AC9EEE868DD0A
SHA-512:	821FEB7362E4CFE4A7F8B1C4F179ECD68C8801693A17D4312F7187FB9E649A20DCEAA8551F6AA91D286768812937AA70323CE5BA0D49F31FD6676DC599794089
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"1487",. . "macros":[{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"partner_id"},{"function":"__v","convert_case_to":1,"vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"dynamic_datas_ready"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"OnetrustActiveGroups"},{"function":"__jsm","vtp_javascript":["template","(function(){var a=\"\";1==",["escape",["macro",1],8,16],"\u0026\u0026",["escape",["macro",2],8,16],".match(\/C0002\|C0007\/)\u0026\u0026(a=\"true\");return a})();"]},{"function":"__e"},{"function":"__v","convert_case_to":1,"vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"user_data.uicity"},{"function":"__v","convert_case_to":2,"vtp_dataLayerVersion":2,"vtp_setDefaultValue"

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5093), with no line terminators
Category:	dropped
Size (bytes):	5093
Entropy (8bit):	5.851305067938453
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRU01U1fm/HmOt4:1DY0hf1bT47OIqWb1h6dmvm44
MD5:	DFC5F37CFAEAFA04E6B56464EA476798
SHA1:	6052763506FD22D79F2B1E840F35257A6924C665
SHA-256:	70D64ED67C486220EFCAE6689DB86FA60D8A04AFDE928974B567F7685FCEF595
SHA-512:	7183B0291AE58CEA7BAC651048E227BF165F70B7B0FEFA448421BC0880D65771C535AB329B09A3A3BFEF4A80C65F52B563D3F6AD6E57CF2C6A512B68081DFC78
Malicious:	false
Reputation:	low
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (55203), with LF, NEL line terminators
Category:	downloaded
Size (bytes):	1869630
Entropy (8bit):	5.551491651269418
Encrypted:	false
SSDEEP:	24576:Xthu1thuCkk8NeZKedlTi9Y1Vh+Dkp9FN+EY:Xt6t7kk8NeZKedlTi9Y1Vh+Dkp9FNtY
MD5:	9F859DEE35CBC68E50126DA427041AEA
SHA1:	3CB309C3ABCD54574E602C14899D6E4494D1B0F7
SHA-256:	B867BEA8957E78F1CB97BBA378187B00ED924B8441AF43C6821B59C4D1AC23EA
SHA-512:	0DE64A478B4DBBBA0E3EB4ADCAD51AAE02F80FE4C263BD3AB237E264376E6D2390ABF0D8A204BDC7CF680A43EABDA477A6DDECBF7E013D972089610378104958
Malicious:	false
Reputation:	low
URL:	https://all.accor.com/components/header-aem/scripts/main.js
Preview:	!function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)n.d(r,o,function(t){return e[t]}.bind(null,o));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s=368)}([function(e,t,n){"use strict";function r(e,t,n,r,o,i,a,s){var c,u="function"==typeof e?

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5092), with no line terminators
Category:	downloaded
Size (bytes):	5092
Entropy (8bit):	5.854196566934517
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRU8X83m/HmO5:1DY0hf1bT47OIqWb11X83mvmQ
MD5:	CE58A3B5F529FA5AAE841A5827617404
SHA1:	E48495093B14F8D094D2B886D0D2FA1B0948ACBC
SHA-256:	4BD60ECA783B66C347779789177476DFA7538F5E4FCB17915CB64CA4270D4667
SHA-512:	DD8A2EF3416487ECDE749ABE0C65E29D29B9FC3F6EB1A672B518A8E59C0D6680A714FF2D05A75D54BE3E430D3837214B9AECE1FE3851219D5DD2F74F99056132
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/801297014/?random=1730274399996&cv=11&fst=1730274399996&bg=ffffff&guid=ON&async=1&gtm=45be4as0v9104227775z8812226527za200zb812226527&gcd=13r3r3r3r5l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&hn=www.googleadservices.com&frm=0&tiba=App%20Download&npa=0&pscdl=noapi&auid=461077611.1730274398&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	dropped
Size (bytes):	472065
Entropy (8bit):	5.3590018710276155
Encrypted:	false
SSDEEP:	6144:x/f8L8x/UeE7qms0jvzW2A1aSdf9uQRxbPqq1ZxZrxdjBF:xA8x/UeE7qmObRx/xZ15
MD5:	9D2FBADDC646B7E750EFAC8D9CC3A728
SHA1:	296E41898784DC1DC922F01A19248C5B24A2DA91
SHA-256:	7D9C9AD349C47E81A545FF3E3BDB0A8DF5EBE959DA9B52CADD9440D92F7EF359
SHA-512:	9770B31B9EB31FB41E61145D0A2831D386C5EB8B23EB998563506C3A1ECE413262FE27588D07E2452E44D74493A84B2C02F1D883A14C8C3104AA821B67E63A48
Malicious:	false
Reputation:	low
Preview:	/** . * onetrust-banner-sdk. * v202409.2.0. * by OneTrust LLC. * Copyright 2024 . */.!function(){"use strict";var D=function(e,t){return(D=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var o in t)Object.prototype.hasOwnProperty.call(t,o)&&(e[o]=t[o])}))(e,t)};function x(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Class extends value "+String(t)+" is not a constructor or null");function o(){this.constructor=e}D(e,t),e.prototype=null===t?Object.create(t):(o.prototype=t.prototype,new o)}var H,R=function(){return(R=Object.assign\|\|function(e){for(var t,o=1,n=arguments.length;o<n;o++)for(var r in t=arguments[o])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};function F(e,s,a,l){return new(a=a\|\|Promise)(function(o,t){function n(e){try{i(l.next(e))}catch(e){t(e)}}function r(e){try{i(l.throw(e))}catch(e){t(e)}}function i(e){var t;e.done?o(e.value):((t=e.value)instanceof a?t:new a(fun

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (544)
Category:	dropped
Size (bytes):	2769
Entropy (8bit):	4.9661962702513796
Encrypted:	false
SSDEEP:	48:trXpRJ2u/pIBtAqLsPXui2POWUTteJ8SJ5ffixr3JC987AbF:R9aAqLzhlQr3E9uAB
MD5:	1E0136BAD0ACFB78BE509234578E44F9
SHA1:	C93ECEF079D9A3D453D5D62ADCC0D8CFA96615B9
SHA-256:	E30FCE7F3A4FD232ADCD6FBA94949E18BD188AE9750C0A1BD5F53B6D5C496848
SHA-512:	32AAFE0DCBE41C88699970AA8858FF788E7FF28AC0B76018C03B95C867ABF6CA1957F3157747B86843CFB8B19678DFC0DB241E3BE6CD7740B22990D8559101A4
Malicious:	false
Reputation:	low
Preview:	if(!Element.prototype.matches)Element.prototype.matches=Element.prototype.msMatchesSelector\|\|Element.prototype.webkitMatchesSelector;if(!Element.prototype.closest)Element.prototype.closest=function(s){var el=this;if(!document.documentElement.contains(el))return null;do{if(el.matches(s))return el;el=el.parentElement\|\|el.parentNode}while(el!==null&&el.nodeType===1);return null};.if(!Array.prototype.find)Object.defineProperty(Array.prototype,"find",{value:function(predicate){if(this==null)throw TypeError('"this" is null or not defined');var o=Object(this);var len=o.length>>>0;if(typeof predicate!=="function")throw TypeError("predicate must be a function");var thisArg=arguments[1];var k=0;while(k<len){var kValue=o[k];if(predicate.call(thisArg,kValue,k,o))return kValue;k++}return undefined},configurable:true,writable:true});.(function(){var dataLayerEnabled;var dataLayerName;var dataLayer;function addComponentToDataLayer(component){dataLayer.push({component:getComponentObject(component)})}f

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text, with very long lines (372)
Category:	dropped
Size (bytes):	373
Entropy (8bit):	4.999760977567056
Encrypted:	false
SSDEEP:	6:0XF13rdPuSC/1nekbHDyw0xBPaiAe1a2+y4MHxOKDMnekbkTqibCEcNOxXowspUG:01132/B1H5ayXe17+xuOuS1kTvGcTlVE
MD5:	6EF308CA6EEFCD5CBF9B27F6A704B87E
SHA1:	D74376D31A7F792D51CDF0CC79F3B34848EEAFDF
SHA-256:	1FE735FB5B257D0BF5124499E58A57EA838F1FA15C03FF7DBE458961E55207AB
SHA-512:	4A079EAD284C00117E296F6B93D7785F29B418BA9C2BD90032E9D36192564385CF04626D0392EF48125E0AE1D2CCDF7184F331829AF912A47616BC071EE36EC1
Malicious:	false
Reputation:	low
Preview:	import{k as n,m as o,n as i}from"./index-Czu5RiSy.js";const u=(r={})=>async(t={})=>n.get(o,{...r,...t}).then(({data:e})=>(e.fields=t.fields,e.filter=t.filter,e)).catch(()=>{throw i.GetUserFailed}),p="profile",A=(r={})=>async(t={})=>{const{service:e=p,payload:s,...c}=t,a=o+"/"+e;return n.put(a,s,{...c,...r}).then(({data:l})=>({success:!0,data:l}))};export{u as g,A as p};.

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (37246)
Category:	dropped
Size (bytes):	122456
Entropy (8bit):	5.263726349944436
Encrypted:	false
SSDEEP:	1536:X8eyiM+060jUsY7qfIDMIL2u0lgK44R82g9p5q2lMVkxPDs4g28:MeyiMFZYegDM62uqiq2wkxL+28
MD5:	F35B543FBF132AB69F5C12EEBF271456
SHA1:	6A4327094A2E8B46B7AF8E8BCE23B0FA94FFC144
SHA-256:	B35C92F05201779D19AAF2A4521CBB0E6E52B0BAEB3CB67D57B29ADD1295E078
SHA-512:	76AF1E9D9436558824813148769720C35231ACA3966B90845C5288C977878502D973FEA0FD602A25DDB242CEBEF46C8C4C70F0F101EE37D653F528CF7B4B9DBA
Malicious:	false
Reputation:	low
Preview:	/!. vue-i18n v8.28.2 . * (c) 2022 kazuya kawaguchi. * Released under the MIT License.. */.var t,e;t=this,e=function(){"use strict";var t=["compactDisplay","currency","currencyDisplay","currencySign","localeMatcher","notation","numberingSystem","signDisplay","style","unit","unitDisplay","useGrouping","minimumIntegerDigits","minimumFractionDigits","maximumFractionDigits","minimumSignificantDigits","maximumSignificantDigits"],e=["dateStyle","timeStyle","calendar","localeMatcher","hour12","hourCycle","timeZone","formatMatcher","weekday","era","year","month","day","hour","minute","second","timeZoneName"];function n(t,e){"undefined"!=typeof console&&(console.warn("[vue-i18n] "+t),e&&console.warn(e.stack))}var r=Array.isArray;function a(t){return null!==t&&"object"==typeof t}function i(t){return"string"==typeof t}var o=Object.prototype.toString,s="[object Object]";function l(t){return o.call(t)===s}function c(t){return null==t}function u(t){return"function"==typeof t}function h(){for(var t

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5094), with no line terminators
Category:	dropped
Size (bytes):	5094
Entropy (8bit):	5.849792223580758
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUwc/m/HmOhR:1DY0hf1bT47OIqWb1dc/mvmYR
MD5:	35347487412672AAD6D817DE830C36AD
SHA1:	281639489E69A2D6CBB89E0F33375BB4CEF9094C
SHA-256:	8AE7CAAE41119543935E2B7608951A933C5D16E36F677F0B60E8E781716722CD
SHA-512:	6AAD8334276EBD084867B6D4CDC5CC989E0723F1440D6FB8958789665F7EDC182A9BB7D9C6B84AC528E866E285145743FDD31B4D1731AD71921CBFC6CDF16FE3
Malicious:	false
Reputation:	low
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (34339)
Category:	dropped
Size (bytes):	278520
Entropy (8bit):	5.632263789992613
Encrypted:	false
SSDEEP:	3072:vGA9z4LVJWEnADFXe4i9lUwzhLgxWHx6QyTJ5:V45ADFX3i9lnFB/y15
MD5:	D1E722552291096036E05381FBFCA488
SHA1:	CB6EB98F4363AF0D960A5FC87F42855C34C0CED3
SHA-256:	47AECDCE3CAA976277044092706EEF16D498158246BC5C70876A1110F89DD37E
SHA-512:	B0607228DBA614F358248B0C6D89118B447B52F3FC1505668DA9883EDE1389F71AA0E2112011F10556D3843081CBD5E0AA8D6B03ECCA6FC34AC16C8F6367AAB8
Malicious:	false
Reputation:	low
Preview:	/*. Creates cookie for login component in AEM and. * loading before customer api to be able to connect with test envs. /.function createCustomerEnvCookie() {. const AemDomainsList = /^(?:build\|buildqa\|run\|runqa\|uat)(?:-(.))(?:.accor)\.(?:com)$/gm;. const AemDomainExec = AemDomainsList.exec(window.location.host) \|\| null;. const valueset = document.querySelector('[data-customer-env]')?.getAttribute('data-customer-env');. if (valueset && AemDomainExec) {. const name = 'customer-env';. const value = valueset;. document.cookie = name + "=" + value + "" + "; domain=" + window.location.host + "; path=/";. }.}..createCustomerEnvCookie();..var fe=typeof globalThis<"u"?globalThis:typeof window<"u"?window:typeof global<"u"?global:typeof self<"u"?self:{};function Ke(ot){return ot&&ot.__esModule&&Object.prototype.hasOwnProperty.call(ot,"default")?ot.default:ot}var de={exports:{}};(function(ot,gt){(function(E,I){ot.exports=I()})(typeof self<"u"?self:fe,funct

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (22990)
Category:	downloaded
Size (bytes):	87736
Entropy (8bit):	5.33403332492647
Encrypted:	false
SSDEEP:	1536:psJM+ORxrG5po2ShXe+lea7rKTYvegZatn2Z4Is6R:FhfVvemR
MD5:	1008AB99A16102F940A169E24A7E9674
SHA1:	F1E04048020FD03E9D4B7A6C267E45188208D4B9
SHA-256:	25DB770C3C54FB8D72559D334E0776661C12301B14823D5219264BBACB9C0190
SHA-512:	F4632ECF7C2B0C933E1EE970B2FC6A958E99F16268939D0B056426C9AE296E4ED11AB543DC903AA3416E0CF3751372CE25644248CFFC9B1609A431C86593FCAE
Malicious:	false
Reputation:	low
URL:	https://all.accor.com/a/en/new-app-offer/app-download.html?source_caller=bulk&af_qr=true&shortlink=5m1nc8of&c=20241013_ALL_AppBonusingMobileLp&af_ad=QR_code_20241013_ALL_AppBonusingMobileLp&pid=QR_code&deep_link_value=accor%3A%2F%2Fsearch%2Foffer%3Fpage_id%3Dddc8e830-2fc5-4492-ae7f-a63574b202f4&af_adset=EN
Preview:	<!DOCTYPE HTML>.<html lang="en">.. <head>.. <meta charset="UTF-8"/>. <title>App Download</title>.. . . <meta name="template" content="info-service-template"/>. <meta name="viewport" content="width=device-width, initial-scale=1"/>. .. .. . . <meta property="og:site_name" content="all.accor.com"/>. <meta property="og:type" content="website"/>. <meta property="og:title" content="App Download"/>. . <meta property="og:url" content="https://all.accor.com/a/en/new-app-offer/app-download.html"/>. . <meta property="og:image"/>. .. <meta property="og:image" content="https://aem-all.accor.com/content/dam/all/global-marketing/campaigns/central-team/app-offer-bonusing/qr-code-app-download/qr-code-app-download-en.jpg"/>.. <meta name="twitter:card" content="summary_large_image"/>. <meta name="twitter:site" content="@all"/>. . . .... . <script defer="defer" type="text/javascript" src="/.rum/@adobe/helix-rum-js@%5E

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	68
Entropy (8bit):	4.200601260429725
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM09/Woz59tVp:6v/lhPfZM09tzjTp
MD5:	C4A2B870062C2BB98C500BC1526C0498
SHA1:	528666CCDB12997358077BC8FCDBFB6B825C7788
SHA-256:	2AA4FA20701CDD6D8D56046069001186B5267E3EE7D0EF618AD2F4A683723E11
SHA-512:	2F1A3ABCD12125F7EF18D61A960901C0FD6F82DD02EA2B8041859E6D5F0A7F08DB17CC110DC6D8A3F7D0D1BA790C4BCCA2506D3C60EDFEB5CB29433E9F4F762E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................IDATx.c`...............IEND.B`.

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	9475
Entropy (8bit):	5.046908984384332
Encrypted:	false
SSDEEP:	192:Y4PZ3puZk22EPiBVD7m7p1HtksD1bdEbIp:Y4/u22zPiBVD7m7pFtfh+Mp
MD5:	D0A624DA5B2465B9BA7325AF0D14D358
SHA1:	268BE1AEC6F5110D85707EE08F1D0E1311522C2A
SHA-256:	063AF3EC15C4294DD72A425FA94FCCCF39127CD938F463E0EDE5CE258D220887
SHA-512:	5560BD710C772563012E50247538DD9D8E142FCC7B4B46EFD647E2CDC3DDBBE9FAD947FD9C72C9677C51A8AF33437D255BA25D73396B579A2B373634B7A8D9FF
Malicious:	false
Reputation:	low
URL:	https://aem-api.accor.com/accorApi/header?brand=all&lang=en&pos=usa
Preview:	[{"id":"item0","text":"Stay","tracking":"stay","target":"_self","panels":[[{"id":"item0-panel-5d9eb6e1-40a","text":"Find a hotel","tracking":"find_a_hotel","url":"https://all.accor.com/usa/index.en.shtml","highlight":false},{"id":"item1-panel-08a5bd7c-870","text":"Resorts","tracking":"resorts","url":"https://resorts.accor.com/","highlight":false},{"id":"item2-panel-5b91317e-7b3","text":"Apartments and villas","tracking":"aparthotel","url":"https://apartmentsandvillas.accor.com/am/en/apartments-all","highlight":false},{"id":"item3-panel-d8d368e1-8a3","text":"Homes","tracking":"homes","url":"https://apartmentsandvillas.accor.com/am/en/homes-ALL","highlight":false},{"id":"item4-panel-135638da-04a","text":"Villas","tracking":"villas","url":"https://apartmentsandvillas.accor.com/am/en/villas-all","highlight":false},{"id":"item5-panel-0dd95c94-663","text":"Our brands","tracking":"our_brands","url":"/content/all/en/brands","highlight":false},{"id":"item6-panel-cd5d05b2-811","text":"Day Use","

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	149805
Entropy (8bit):	5.6004134683803555
Encrypted:	false
SSDEEP:	1536:Cnxj4bndhXdOU0tNo455wjdrm/bK+OTRMWMrvBDJTcitj+wf2EAeiPWMWNZVgdyo:Cnxj479OU03o4PwjhIBVT39ROyuvb
MD5:	5693E74A87CDFE0DD8CF9E97ABC2EC67
SHA1:	0912A92CEBFC4248B4D561F57B32D18135F9AD59
SHA-256:	79951B5BD4D729A2B2F4D380819F2C14BBCF26F21DB56A520189633467766CF4
SHA-512:	B0954FF6229C037AAEC67F6CC91889D3AD1C0D38AC3E53E61F3A98D49379FA43C1FF709C7017459B9BD416BCEB2236D90B24C17E072882C122360069DCD9E0E0
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";function t(){t=function(){return e};var e={},d=Object.prototype,n=d.hasOwnProperty,r="function"==typeof Symbol?Symbol:{},o=r.iterator\|\|"@@iterator",i=r.asyncIterator\|\|"@@asyncIterator",a=r.toStringTag\|\|"@@toStringTag";function $(t,e,d){return Object.defineProperty(t,e,{value:d,enumerable:!0,configurable:!0,writable:!0}),t[e]}try{$({},"")}catch(t){$=function(t,e,d){return t[e]=d}}function u(t,e,d,n){var r=e&&e.prototype instanceof s?e:s,o=Object.create(r.prototype),i=new w(n\|\|[]);return o._invoke=function(t,e,d){var n="suspendedStart";return function(r,o){if("executing"===n)throw new Error("Generator is already running");if("completed"===n){if("throw"===r)throw o;return E()}for(d.method=r,d.arg=o;;){var i=d.delegate;if(i){var a=_(i,d);if(a){if(a===c)continue;return a}}if("next"===d.method)d.sent=d._sent=d.arg;else if("throw"===d.method){if("suspendedStart"===n)throw n="completed",d.arg;d.dispatchException(d.arg)}else"return"===d.method&&d.abrupt("return",d.arg);

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (538)
Category:	downloaded
Size (bytes):	3135
Entropy (8bit):	5.418930318527181
Encrypted:	false
SSDEEP:	48:YkmwB18erftL1yDx6KL1VM8VpVeFVNOSasuv47pGWkTM0XtUSst50mW0u4JIV:l5j80ftL1yDkKLDM8V/ezNha+v0
MD5:	B2E62B1EACB81AD16AA052EAB846EB1A
SHA1:	63C2E3843F94967EF3EF90A7D894E271B5F3F569
SHA-256:	05BD637836E681B6BB09BF91B476E53720DC2235745184EC6A257E43EACE0DE4
SHA-512:	F3441B5AA2043E75D8C2DEC90A3073A621527606EFFA53AA2111812872F5A520C32A3F9DE4D8143B814BB7390D915326E1441C1AD1869EA552171E1256E83720
Malicious:	false
Reputation:	low
URL:	https://rules.quantcount.com/rules-p-Nfk-wbeA5EZDg.js
Preview:	/. Quantcast measurement tag. Copyright (c) 2008-2024, Quantcast Corp../.'use strict';(function(b,l,k){var m=function(a){var d=k.createElement("a");d.href=a;return d},n=[/^http[s]?:\/\/((adservice.google.)\|([^\/]fls\.doubleclick\.net))\/.~oref=(?<url>[^;\n])/,/^http[s]?:\/\/[^\/]tealium.\/.page_url=(?<url>[^&])/],p=function(){if(l.top!==l.self){try{for(var a=0;a<n.length;a++){var d=k.location.href.match(n[a]);if(d&&d.groups.url){var e=decodeURIComponent(d.groups.url);break}}}catch(h){}return e?m(e):m(k.referrer)}return k.location},q=function(a,d,e){return a?"nc"===.a?!d\|\|!e\|\|0>d.indexOf(e):"eq"===a?d===e:"sw"===a?0===d.indexOf(e):"ew"===a?(a=d.length-e.length,d=d.lastIndexOf(e,a),-1!==d&&d===a):"c"===a?0<=d.indexOf(e):!1:!1},f=function(a,d,e){var h=p().href;q(d,h,e)?a(h):a(!1)},g=function(a,d,e){var h=p().pathname;q(d,h,e)?a(h):a(!1)},c=function(a){return"array"==={}.toString.call(a).match(/\s([a-zA-Z]+)/)[1].toLowerCase()?{labels:a.join(",")}:{labels:""+a}};try{__qc("default

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 65972, version 1.0
Category:	downloaded
Size (bytes):	65972
Entropy (8bit):	7.996443744599385
Encrypted:	true
SSDEEP:	768:f1Xyo8kWfMqTSmVGijfjPcFWsyLe2HZaGTPhl7MDjFvtdEaCYK6lzdwUBgLXx0XT:flnzzYGij70jmaGdl7A51lsCaLXx0XYw
MD5:	F3A02E2578BEE50E620E515912278BC9
SHA1:	168E9A9E4690EC3437A6A3087DD2F76FADC47888
SHA-256:	4D7DD6E02D849E181E51DB84D9D230D369B8CE7412DBCEE9D7D1D19AD8A16741
SHA-512:	005BAFA483125A3EF78548818143102FF56D0BE9E17BD9A386FEC7FF3D6719F3B3EA6E2ED058616A7973E0D7B82B7B993112C4757E9870208151CBE2C429E038
Malicious:	false
Reputation:	low
URL:	https://all.accor.com/assets/fonts/roboto/bold/roboto-bold.woff2
Preview:	wOF2...............\...K........................?FFTM..~...$..L.`....H..<........E.....6.$..8. ..}..f..)[.....h..6.....nC..U73...n.1...[..z..h[...W.~...C}.........._.L...v.M?ZJ..S.E.9\|..#(..d.H..Ne^..e.z..E[hN.u...{J..@)..Q7....."..}.eM.r............3.R.&....7..\|.9.V....3f....3.J..YK.]..[o.g.QK.#?U....RC..>..SRA.:AIUPz.-..O.AK...H.B...R.tN......l..&=Bl...\^D.+8b...D....u.w..&4.:.M.n..jK.76.#......s..++..G.z#H5..x....41nb....\(..p8..p]........T.6.{\|._..zF%.....G.}..\X.F.....K..l.O..&.q..`s.B....J...T..JO.......R..}....o...wW./h...$3\..\|.+P.=.O.]..#.J...o..d...P.p....H. ....oC]..A..u.XC_... ...I.F.7?M..S..I....w."d..~............p.+=._....._..g.t..O8...$d.).......~.o..c.I..C..0...F.}.1=.P......#j.S.BE............\|... .1.5.B..`'!.5IxAB.K.O.]...../.IQ.......E...N(p..%....Je.6..8......`........'.Y%D...,s.WR'7B....s..H)...F......,2X...=....)...<....T.W....(.5....J...n.....;..f6?w....#.....\|U.)..8.....M.1'.].c[.....}...X..D%..#...LN.(.ly[..1..5.8

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17698), with no line terminators
Category:	downloaded
Size (bytes):	17698
Entropy (8bit):	5.330321951477942
Encrypted:	false
SSDEEP:	384:I/Q66A4xo1rjYKha4BMoxojIjZRDv021Kudq89UfnlYwNjtBkb4hVc:I/oA4xMYKha4BCItRD821KOz9SHNjtBk
MD5:	B16C2631B3B4D5AFBFE9589A84DA4916
SHA1:	DE919F2B0D93A7B2DEA7D6FC6A52BB95AD16A617
SHA-256:	487B5C89F3869C78CC95737CA7F38873FDD764730ECD0C8CB67D925037188480
SHA-512:	00140ADD52DCE55669B2C780B962EAF472BAB1E2F54877681AE0F1507520143BE9AB8A06693B0622413F677312D736227F1EB9431AC0D8225F6AEC4448AEC4BF
Malicious:	false
Reputation:	low
URL:	https://p.teads.tv/teads-fellow.js
Preview:	(()=>{"use strict";const n="6.21.0_ad40570",t="https://t.teads.tv/track",e="https://cm.teads.tv/v2/advertiser",o="https://cm.teads.tv/v3/conversion",i="tag",a="js-web",c="js-gtm";let r=!1;const d=Date.now();function s(){return window.advertiser_domain}function l(){return window.teads_buyer_pixel_id}function u(){return!0===window.teads_post_message_event_to_opener}function p(){return!0===window.teads_post_message_event_to_window}function w(n){window.teads_iab_consent_data=n}function _(){return window.teads_iab_consent_data}function v(n){window.teads_usp_consent_data=n}function f(){return window.teads_usp_consent_data}function g(){return window.teads_gdpr_advertiser}function m(){return window.teads_ccpa_advertiser}function y(){return!0===window.teads_tracking_allowed}function I(n){window.teads_auction_id=n}function h(){return window.teads_auction_id}function E(n){const t=window.teads_auction_id_forwarded_by\|\|{};t[n]=!0,window.teads_auction_id_forwarded_by=t}function k(n){window.teads_ses

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	2203
Entropy (8bit):	5.071734863127232
Encrypted:	false
SSDEEP:	48:BFIsrZg/fjQAwM5do7VN2c36+9Ig60A5KmTU+LL4B3PyliybsLUD6Gw:BF+/Ea5472alp1/rLmM
MD5:	7CBB91B972378AB814DFAF40D82939A8
SHA1:	16A01931DFB9025A33A1B4EA3F8791603662DE37
SHA-256:	A777F731E58D7A9D4CE44F17E788928A27F16781DAF2F8710A865630322D0C35
SHA-512:	5DD0C0A961C5EEB4B5DD569BE03654FEB7520B7C2B4504DA147854B7504D617440346B1D4EFBAB66E72DEBCFEECB6B5C3C125FE038280E8FB295EC7AE3FC0C2F
Malicious:	false
Reputation:	low
Preview:	.const NON_POS_WEBSITE = ['mantra'];.const url = '/content/sling/servlets/ace/getposcookies';../Function to decode the cookie /.function getCookie(appcname) {. let matches = document.cookie.match(new RegExp(. "(?:^\|; )" + appcname.replace(/([\.$?\|{}\[\]\\\/\+^])/g, '\\$1') + "=([^;])". ));. return matches ? decodeURIComponent(matches[1]) : undefined;.}..async function callApi(posHandler) {.. const siteCode = JSON.parse(posHandler)?.siteCode;. const languageCodeFromPage = JSON.parse(posHandler)?.languageCodeFromPage;. const pointOfSaleCodeFromPage = JSON.parse(posHandler)?.pointOfSaleCodeFromPage;.. let params = new URLSearchParams();. params.set("siteCode", siteCode);. params.set("languageCodeFromPage", languageCodeFromPage);. params.set("pointOfSaleCodeFromPage", pointOfSaleCodeFromPage);. const updatedUrl = `${url}?${params.toString()}`;.. try {. const response = await fetch(updatedUrl, {. method: 'GET',.

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1463), with no line terminators
Category:	downloaded
Size (bytes):	1463
Entropy (8bit):	5.228596387181185
Encrypted:	false
SSDEEP:	24:ebHuaze3AenYyKAeCv4sXV0XV0MqfJC9bqf7zR+ZqXzSLV0XV0MqfJSqf7zFaYpo:NaCpFLF0F0MqBaqf7l+ZqXOh0F0MqBS7
MD5:	C27C1772BEAC44F533D39A7C6D6C6E7E
SHA1:	CB3B8422C49013D9F6B53C3F957E52136932E5D1
SHA-256:	D4FEFC57404DA3E7E722CBD14586CF61FFE694F5CF9E5768231DCAE5D9A865E6
SHA-512:	B283EDEE26C037A747A589FF5A1346A2C6FA3D9CFF1EB30EBCA034FDECBE232BDCF724A5041415611D59454314DD24B763A9D8D2F3EAFB2B550208D2A20A2011
Malicious:	false
Reputation:	low
URL:	https://qchmhd61sj.kameleoon.eu/audiences/segments.js
Preview:	Kameleoon.Targeting.evaluate_LANDING_PAGE=function(e){if(Kameleoon.Internals.runtime.gathererRun){let n=Kameleoon.Internals.runtime.Visitor.currentVisit.landingPageURL;return{targeting:null!=n&&new RegExp(e.value).test(n),rescheduleTargeting:!1}}return null};Kameleoon.Internals.runtime.audienceSegments = [{"id":283129,"name":"App Offer V2 Banner Promo Desktop","tree":{"orOperator":true,"orGuiLevel":0,"leftChild":{"orOperator":false,"orGuiLevel":1,"leftChild":{"orOperator":false,"orGuiLevel":1,"leftChild":{"targetingCondition":{"type":"SEGMENT","disabled":false,"weight":1,"include":true,"linkedSegmentId":227010}},"rightChild":{"targetingCondition":{"type":"LANDING_PAGE","disabled":false,"weight":1,"value":"(.)https\\://all\\.accor\\.com/hotel/(.)","include":true}}},"rightChild":{"targetingCondition":{"type":"DEVICE_TYPE","disabled":false,"weight":1,"value":"DESKTOP","include":true}}},"rightChild":{"orOperator":false,"orGuiLevel":1,"leftChild":{"orOperator":false,"orGuiLevel":1,"leftCh

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 256774
Category:	dropped
Size (bytes):	58673
Entropy (8bit):	7.994977978733345
Encrypted:	true
SSDEEP:	1536:GU1wlZ5Su8dmY/T85czulBG6YdX/nGb/Sf7m:nGB6xzuvG6YJ/nGgy
MD5:	38DAF974DAA3B4E6CF4E589C16F799F4
SHA1:	77BA1EA3A0E546C53EF553F7E7226427BB75414B
SHA-256:	3C3CF97226EB836835F41BC8AF2288E5128CDBA39E888DA45B5519F7D29040A5
SHA-512:	BFC5589D1BED1F37CE61754D633FF3A5AF909507AFAF2547F6B7E6FDCE8F9AC9BA8CB2475E89AF08515E4496BC66D9A1381BA618EB79DEDDAB5D3978DC2A3444
Malicious:	false
Reputation:	low
Preview:	...........i{.F.0.........DQ..d..<.,.J...82'O.h..@.&H-.y~...^.X...d.{.;.."..^.....k.%m.b4.....9....77..<O.Y.&s>c.\|.M.[+t..(w..6.o>.....7..f....Mlk?.f..d.>~.c;.X..G....C.^3.y..6Kg..W.$[L.v6.oFy{.3.X.O#Y.#6..6.A.Z.6Os.......O9...[6...h..l6o.m{./....Ng....v...,..\|>.E....l.V.....hO.k..=....k..7..<.w..UnG.?JlY.=.....eS>._._..,..WapS.l&... .$...e.q0.z......3.G..t..`.....b.p.S.....t..;l:M.l..J..V...kX".....~......d...'.......'.4..t...3......^.@&...p7.N.z8d..zb.s......4.;+.e~yOV.y2.pYa..z.m.. ..e..y@M=\. o.>..&.....]D.`...X..b...j...mnF..q...l.....x4...>b.y6... .......4.1Y....E..Z..-;!l..6...Yv..p...g3.....m.../.y[aF{...Y......c...".h.4Zc...+.......Y..!O.py{.->.\|..~`./...<67k]I@.....{z.#.Y.V^..-..........".. ....wg:...~.S..t..~..C&......G.2...Uc.i\..6.d.6.3,G...(%...C....K.0..>{............. ....\n..[.z2.,....o..X.I;D......../..!.H.IN1......5P;.w.G...D!._..?..k5.ocw......%..`D.C...D].z.^.l=..p.6....\|.z......a..../.mC...APS...p......t.......Gp..z.6~..

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.577819531114783
Encrypted:	false
SSDEEP:	3:HAOfaY:gOfaY
MD5:	4C8A26E14EDABDD7D6BFBF1472AFC853
SHA1:	F268C3DB54608F753ED9320CB2411B00A40C8D65
SHA-256:	B9224CA870B658AB694ECED1FBB07A971FCE7D0C990E50046929E9968BAF435C
SHA-512:	820B85A739953E8A71E89FEB45BBFB01E2D2F8977D30B0AB11BED28A7CA2B0365595AA7074A3A9780C8DE95E0C8DE839B5C390519F5238E8435F44736CDD497F
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAngSqTUyDX5aRIFDaWTNiQ=?alt=proto
Preview:	CgkKBw2lkzYkGgA=

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4724), with no line terminators
Category:	downloaded
Size (bytes):	4724
Entropy (8bit):	5.328172600275533
Encrypted:	false
SSDEEP:	96:ymki6KoVDicZwrdAmw2Iw2KCpPOzOcKQa+sC:4Wr6mw2Iw2KsPOqdDC
MD5:	4CCF43771E48481ABCD9B2BCBDBD27ED
SHA1:	94E18935A8B2E9BD8208B9C4C16751B49908DAEF
SHA-256:	3CA9E609EF3F582AEC6955E30DE3EA1A0A33186BF6B10105D9E8391C4BA8AD21
SHA-512:	2247C0CD89A6110AAED3086C3F5C277D8B1984337DF18B39AB09DA2CAE994DD4CCCBD44063EC7FA4FBFE7855A646403AB880670D1DA88FF8389E32717D1E460B
Malicious:	false
Reputation:	low
URL:	https://tags.creativecdn.com/NCyIsbQv2bl35xALaGlJ.js
Preview:	(async function(){const a="rtbhEvents",b="__rtbh.",c=["uid","sid","aid","eid"],d=[...c,"lid"],e=31536000000,f=[];if(Array.isArray(window.rtbhEvents)\|\|(window.rtbhEvents=[]),window.rtbhEvents.length&&!window.rtbhEvents.push.prototype)try{function g(a){return!!a&&new Date(a)<new Date}function h(){return new Date(new Date().getTime()+e).toISOString()}function i(a,b="ams"){return null===a?void 0:function(c,e,f=null){try{const g=e.filter(a=>!d.includes(a.eventType)&&"init"!==a.eventType);return k(`https://${b}.creativecdn.com/tags/v2?type=json`,{method:"POST",mode:"cors",credentials:"include",referrerPolicy:"no-referrer-when-downgrade",headers:{"Content-Type":"application/json"},redirect:"follow",body:JSON.stringify({...j(a,f),tags:[...g,...z]})},c)}catch(a){}}}function j(a,b=null){const c=document.referrer?document.referrer:"";return{v:"v0.1.9",sr:c,su:location.href,th:b?b:a}}async function k(a,b,c,d){try{const e="function"==typeof c?c:()=>{},f=await fetch(a,b),g=f.status;if(200<=g&&300>g)

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1057
Entropy (8bit):	5.121490927666121
Encrypted:	false
SSDEEP:	24:kUMMYuS+G/0TYdLxyBuRjTVYctngYe4HJKbTLgiEchAOoG4z:/lmzrtne4HJLiEmQz
MD5:	4ED730FD7492D1FDB8BD9A3B00E65D3B
SHA1:	DE5AF62C51999DBA029B8A7BB1365C05A9577778
SHA-256:	377A8784C2135DF484531B32689D71385CD8EC7AC6AE88CDE52C38FF77195199
SHA-512:	8C9F26FDE71AB9D286C0A11E0E4EBF46F9A18DCDB7AEE049DB3EC71FA5DBD079136E2E010E04CC06E9DA93A1885AD99CE4120324405AB22D2C3909FB539AF181
Malicious:	false
Reputation:	low
URL:	https://us.creativecdn.com/ig-membership?ntk=I9mH4X1oc6DXXP-HaQaInunoENLIoElwtga-xHkC6ZTjVUQW2zxqyVoQ2EJTyplYxRT91UyeruEHcte41X6CLUPToWSOxNmuyD3c-r-Tpw8
Preview:	<html><body>.<script type="module">. if (navigator.joinAdInterestGroup) {. const addIgScript = document.createElement('script');. let basePath = 'https://us.creativecdn.com/ig-membership';. let fencedFramesEnabled = window.FencedFrameConfig !== undefined \|\| 'src' in document.createElement('fencedframe');. let runAdAuctionEnabled = navigator.runAdAuction !== undefined. let label = null;. if ('cookieDeprecationLabel' in navigator) {. label = await navigator.cookieDeprecationLabel.getValue();. }. let basEnabled = navigator.getInterestGroupAdAuctionData !== undefined;. let params = new URLSearchParams({ntk : 'I9mH4X1oc6DXXP-HaQaInunoENLIoElwtga-xHkC6ZTjVUQW2zxqyVoQ2EJTyplYxRT91UyeruEHcte41X6CLUPToWSOxNmuyD3c-r-Tpw8',lbl: label, ff: fencedFramesEnabled,checked: true,bas: basEnabled,ra : runAdAuctionEnabled });. addIgScript.setAttribute('src', basePath + '?' + params.toString());. document.body.

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=81684&time=1730274401239&url=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN
Preview:	{}

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5091), with no line terminators
Category:	dropped
Size (bytes):	5091
Entropy (8bit):	5.851228277775036
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRU8X83m/HmOwl:1DY0hf1bT47OIqWb11X83mvmTl
MD5:	D48AFF01680C65A1C2B5391908FA7B50
SHA1:	0A243F3712950238C9D0AA00421CE41D05DDCE1E
SHA-256:	084E795C066E07D1A17727DAA2B1F510488B66DD0D7D1CB1D9CB0DA428A65916
SHA-512:	E3BD2A10757A31B955B5F3EC50F053E0FFB359EBADC7DEFC1BA959FC979E443AE39CFF8D64C1E1FFC5899CCD0DD5E7D8E048E2358E6DBEECF2BDA77ADCCE20ED
Malicious:	false
Reputation:	low
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 64732, version 1.0
Category:	downloaded
Size (bytes):	64732
Entropy (8bit):	7.996214242361173
Encrypted:	true
SSDEEP:	1536:t7eoqfowscKVZqwK4JoJpH5pssLbLDFABykg2WgAoQl8KK:NGVkK4WpHMOhAgN9oQTK
MD5:	3AC5D40D1B3966FC5EB09ECCA74D9CBF
SHA1:	A69F32357765DD321519889AEACBA5E9CA893BB0
SHA-256:	3310766B8F58538D07ABDED74A2BABE1ACBE1A3EE820D5B8C8265DA666F4FB0C
SHA-512:	A88B87D2B8E141236118243F66DAFAC6C9C06FA7858E56FE36B59C7079E8C5969AD46AA7A0EAA81EE79276404FC835F7107765618179D6036D38A263390F02AA
Malicious:	false
Reputation:	low
URL:	https://static-p46175-e229011.adobeaemcloud.com/b94aa70a4593f812b35d5a8922257b6f80ccf6aa708f58b8266f4ba917eb0e0e/resources/fonts/roboto-medium.woff2
Preview:	wOF2...................t..........................b........`....\..<.....p..@........6.$..8. ..N. ..S[p[.......0..f....^...T....vDv...T...]1.9..A..P........2...Nr8Iv.!.0v...]...y .v\..,.u..A...>.Y."c.(ri.0.. .&..:6..;.U.m...e..}>....g8.b..N}..^..'...E...l..L0<Tm.7T.F..\...z.D..Z...w.0<..gC).>D.V+.pt/...3.s.U.........H<.m.et.U~\Q.G;z.ZX..::"v..\..V....8....{....7.y0...'9.?.k.....5..L%...(b]`Xv..Jj3.F...W..n...\T.......Vz.`.K2.B..{.../..dica.3...T.h...........^&yfx..wI..)F:...$..aK....=.i>...(.._q._0...(.....(.......-..z.....>.......(.E.k..._....^,...w..IlbS...rB.aLq_.ODA$.zU.).....K..'....lI_R..:%...-.ccd.#V...\|U...%.J.~@>fv....."(....Os....v...2....YZGb.....,.."L..}S?.H.6.dy.....MZE.%..`>...9.y....Cpy?..j.U.BX..Pk+.x....NS...9%"rnp........+.......!.ef...mW....h~m#...g...`MW7:..,A.A@.$.DDta....Y.\.N.............8..'Z.D....P...(.T..........?}~...d.H.......l.:Q....gf.&.2..*...:h......x....8w8.....Z.L%c'vf2.%BK..Rhh=+~.:...GDf....

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/ga/rul?tid=G-66B47X8JYS&gacid=895171141.1730274398&gtm=45je4as0v881965008z86262265za200zb886152357&dma=0&gcs=G111&gcd=13r3r3r3r5l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101533421~101823848~101878899~101878944~101925629&z=1281358543
Preview:	<html></html>

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 745x620, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	27396
Entropy (8bit):	7.990588185461219
Encrypted:	true
SSDEEP:	768:DYORtUEhFYhtKN7K5K/am0pRS6PtOIH/vW0/oXn:DYDEIKGlmIRSHJ0QXn
MD5:	03CA5D90EA8639340EB19BF7DF47F2F7
SHA1:	4FBD1900DB6408BD3ADAFB9F4CB0DF7266FC0B50
SHA-256:	60476A264646F88FC652E1AE7A24280F985F42C45A1A7B27ED0C73975F069791
SHA-512:	6E8262F8C654338D26B8E6D1677842141553553A66CEF39307E7782F6BFC33E63ABE48F31E70A0557FBC6D381D3DCE49A21BFA3F0D71425B581039C10E58FEE8
Malicious:	false
Reputation:	low
URL:	"https://m.ahstatic.com/is/image/accorhotels/qr-code-app-bonussing-offer-en:6by5?fmt=webp&op_usm=1.75,0.3,2,0&resMode=sharp2&iccEmbed=true&icc=sRGB&dpr=on,1&wid=745&hei=620&qlt=80"
Preview:	RIFF.j..WEBPVP8 .j.........l.>m6.H.#).#..I@..en...C).'..{...x...w.....n:.B78.....W:.._......f.;.g./...\..=D._.v~.z......e.....K...?.....?..].......+.}............'..`....}/..=.....{......O2}..G..?................^....g.....W.w......_.}.=..../.....>..'.w.?..g..{..<............]......_..........v...?._....?.....#.......?z.....:......./.?.......c.....[........@...E.....j..L[`B..../..?.z..... ...<..2..y.2.ka.j....VTv.H..i.n.sw.=.@XG.p.~.0j.H..f...rjH..2..,r".3X.Fjy...-....).b..T.E.'....{ C..6R.$.... ..>.+$...LTWc.i...E^..u4...,....\...[.P./:D.i.t...G..r.~_pE..w..R.x.....?.i....Ll^T...NG.9........t/...`......j...<...%.Y"R.E.s/0p..H......#.4....us..Q%....W:ko. l..f.:\f.......v.t.).....C.@C.1T.J.*.w.2.$R.h....pj..W....)\|.V...+.g]...>Bu....?.l:..._...7nX..W.0..%.sa..:7=......M.o.....I.6M.....;............[..S)..............:.L..."..o......\....z...6...=XE..R..fUd..<...{+........^..%m[........t.`..{_....$..MR..zQ+...M..{._5...0j...g.7~.k:.i....

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	392
Entropy (8bit):	7.048549571255434
Encrypted:	false
SSDEEP:	12:6v/7saoRYcmfWVwADtG1jaQE9KX3v/37/kiw0n1:hI5WIafy3v/37Miwu1
MD5:	171246CCFAE5788B44C50D1DBC4DF8AF
SHA1:	A5823117A0A687FBC8A6E3CAA98DBB59C08E7EC2
SHA-256:	6EF425E72CAFDD91B93242F5919319275A158D4AE099736FB0CF1CFA4087AD28
SHA-512:	11ED0A830F422C1890C2793880E1EB940B38464DE71EA22060220FF700101DD0CD95E3E54196FA21C200A1AA41FFB436408520EA2379631FDDCE257D748EA978
Malicious:	false
Reputation:	low
URL:	https://static-p46175-e229011.adobeaemcloud.com/b94aa70a4593f812b35d5a8922257b6f80ccf6aa708f58b8266f4ba917eb0e0e/resources/images/favicon-16x16.png
Preview:	.PNG........IHDR... ... .....D.......sRGB.........pHYs...%...%.IR$....lPLTE.....................................................}..\|.ro.rn.rn.d`.VR}VQ}HCsHCr:5h:5g:4h:4g,&],&\..R...1....IDATx..... ..U...L.J.......a.....f....%Y_.B.oF+..P.......[.h...`....2G.EPh.../.....S-(.D...^.=.....Z.Q.]....gna...4c..f........(...%......1..>F....l....pd..kaU.Xq.u....XK....\|.......IEND.B`.

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	672
Entropy (8bit):	4.88738061447812
Encrypted:	false
SSDEEP:	12:hYYLVKwFHCIaI1ByLc2VfTgDAM7QBDM75DM7hkgaPAxRW09eXM7yarBBxNtsbRz+:hYeU4iIaI1UDrCQB050AARW09dDrBnzj
MD5:	67B95267FEC9BF5EE45786BEF9D2B01A
SHA1:	346659BA1E68F661B9A0D897D15B9B38A3C1331D
SHA-256:	6501140033C3BB20DA4B5AC73C90F687BA8A2053C4BA37C4B6F5275166DB7FA6
SHA-512:	F5BECF4F2345D6E382665F700AFB5558AAA3CFD6B7A1336FA0592C303607AAD95FD724E8A3C5D52BB5FD37A8CB60AF31D20582C7B3FC5FEBC8BF9BB0F93A9C3E
Malicious:	false
Reputation:	low
URL:	https://tr.snapchat.com/cm/i?pid=5b7854ae-f9c6-433a-ba0a-2ec9f24a5aa4&u_scsid=04b1e948-de78-4ce3-93d8-b14769db3d22&u_sclid=2a38f09e-0999-4df0-acd1-1287a34e1c62
Preview:	<!DOCTYPE html>.<html>.<head>. <script>. (function(win, doc, sdk_url){. if(win.snaptr) return;. var tr=win.snaptr=function(){. tr.handleRequest? tr.handleRequest.apply(tr, arguments):tr.queue.push(arguments);. };. tr.queue = [];. var s='script';. var new_script_section=doc.createElement(s);. new_script_section.async=!0;. new_script_section.src=sdk_url;. var insert_pos=doc.getElementsByTagName(s)[0];. insert_pos.parentNode.insertBefore(new_script_section, insert_pos);. })(window, document, 'https://sc-static.net/scevent.min.js');. snaptr('cm', { 'sync_modes': [140] });. </script>.</head>.</html>.

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	472065
Entropy (8bit):	5.3590018710276155
Encrypted:	false
SSDEEP:	6144:x/f8L8x/UeE7qms0jvzW2A1aSdf9uQRxbPqq1ZxZrxdjBF:xA8x/UeE7qmObRx/xZ15
MD5:	9D2FBADDC646B7E750EFAC8D9CC3A728
SHA1:	296E41898784DC1DC922F01A19248C5B24A2DA91
SHA-256:	7D9C9AD349C47E81A545FF3E3BDB0A8DF5EBE959DA9B52CADD9440D92F7EF359
SHA-512:	9770B31B9EB31FB41E61145D0A2831D386C5EB8B23EB998563506C3A1ECE413262FE27588D07E2452E44D74493A84B2C02F1D883A14C8C3104AA821B67E63A48
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202409.2.0/otBannerSdk.js
Preview:	/** . * onetrust-banner-sdk. * v202409.2.0. * by OneTrust LLC. * Copyright 2024 . */.!function(){"use strict";var D=function(e,t){return(D=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var o in t)Object.prototype.hasOwnProperty.call(t,o)&&(e[o]=t[o])}))(e,t)};function x(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Class extends value "+String(t)+" is not a constructor or null");function o(){this.constructor=e}D(e,t),e.prototype=null===t?Object.create(t):(o.prototype=t.prototype,new o)}var H,R=function(){return(R=Object.assign\|\|function(e){for(var t,o=1,n=arguments.length;o<n;o++)for(var r in t=arguments[o])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};function F(e,s,a,l){return new(a=a\|\|Promise)(function(o,t){function n(e){try{i(l.next(e))}catch(e){t(e)}}function r(e){try{i(l.throw(e))}catch(e){t(e)}}function i(e){var t;e.done?o(e.value):((t=e.value)instanceof a?t:new a(fun

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	392
Entropy (8bit):	7.048549571255434
Encrypted:	false
SSDEEP:	12:6v/7saoRYcmfWVwADtG1jaQE9KX3v/37/kiw0n1:hI5WIafy3v/37Miwu1
MD5:	171246CCFAE5788B44C50D1DBC4DF8AF
SHA1:	A5823117A0A687FBC8A6E3CAA98DBB59C08E7EC2
SHA-256:	6EF425E72CAFDD91B93242F5919319275A158D4AE099736FB0CF1CFA4087AD28
SHA-512:	11ED0A830F422C1890C2793880E1EB940B38464DE71EA22060220FF700101DD0CD95E3E54196FA21C200A1AA41FFB436408520EA2379631FDDCE257D748EA978
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....D.......sRGB.........pHYs...%...%.IR$....lPLTE.....................................................}..\|.ro.rn.rn.d`.VR}VQ}HCsHCr:5h:5g:4h:4g,&],&\..R...1....IDATx..... ..U...L.J.......a.....f....%Y_.B.oF+..P.......[.h...`....2G.EPh.../.....S-(.D...^.=.....Z.Q.]....gna...4c..f........(...%......1..>F....l....pd..kaU.Xq.u....XK....\|.......IEND.B`.

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	13238
Entropy (8bit):	4.684864213083641
Encrypted:	false
SSDEEP:	384:hT3W1m4SOaikGrpMlohyBYMcwBR8P3BSPhEXXZoadzzXcV8AC9q5pNjn9cMBV6+L:h0kfA7y
MD5:	789B496559EF5E724DA60CEB44066B82
SHA1:	69A6C66CB81B19BB93474CBB4F9DB3206D3AB13F
SHA-256:	1C54D2EC9B996E9B55BDE8FDEA70A26D68BF38A6E79989795BD981D2BA8A41F8
SHA-512:	50F5174567DFB17831F1FD95A080C5D39FFB6170CC0C42465DFD71A2A13B2C15200FDB5F124C5F5AB1702189709B79C89C327753209F2D3DB50029DE792C59EF
Malicious:	false
Reputation:	low
URL:	https://api.accor.com/referential/v1/pos/currencies?groupByContinent=true
Preview:	[{"continentCode":"africa","continentLabel":"Africa - Middle East","currencyList":[{"currencyCode":"DZD","currencyLabel":"Algerian Dinar","currencySymbol":"...","accorCountryCode":["algeria"],"isoCountryCode":["dz"]},{"currencyCode":"AOA","currencyLabel":"Angolan Kwanza","currencySymbol":"Kz","accorCountryCode":["angola"],"isoCountryCode":["ao"]},{"currencyCode":"BHD","currencyLabel":"Bahraini Dinar","currencySymbol":"BD","accorCountryCode":["bahrain"],"isoCountryCode":["bh"]},{"currencyCode":"XAF","currencyLabel":"Central African Cfa Franc Beac","currencySymbol":null,"accorCountryCode":["cameroon","chad","democratic-republic-of-congo","equatorial-guinea"],"isoCountryCode":["cm","td","cd","gq"]},{"currencyCode":"XOF","currencyLabel":"Cfa Franc","currencySymbol":"CFA","accorCountryCode":["benin","ivory-coast","senegal","togo"],"isoCountryCode":["bj","ci","sn","tg"]},{"currencyCode":"EGP","currencyLabel":"Egyptian Pound","currencySymbol":".","accorCountryCode":["egypt"],"isoCountryCod

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	580
Entropy (8bit):	7.405074130079615
Encrypted:	false
SSDEEP:	12:6v/7sA0nRjjcMuWPvoAD+m7xy1tN9dsLOe+mTviplKajbUCsVAZlg7z:qmBDvoDmtgN//e+mTqiajbU1mZlg/
MD5:	7A636A8149F7B68CB2CF2A27DC08BF3C
SHA1:	6B6A943A161337F108E280B5EB0A22D068C1150B
SHA-256:	3E394F75A58174F3F9C11677A0885A12292A0B0512477736C7A114F58A9AFCA8
SHA-512:	5DF1974A8574809FBB1B1D250CF71132D6EC6F5DAA5E6767DAA40502D1EBBE1411B4786F745846CBE7258FE7FD21FD98585DFF2652896EDE3AA4CF250465473D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...@.............sRGB.........pHYs...%...%.IR$....{PLTE......................................................}..}..\|..\|.ro.rn.rn.d`.d_.d_.VR}VQ}HDsHCsHCr:5h:5g:4h:4g,&],&\..R.S....bIDATx...r.@.Dg..5.fr..7Q......r!...<...Tq.wh.../..Td.!.k@....(d..<.`..V4..GRE.G^h %N.L....("P)TP.(..J..Z..U.6.H..k....h..D..0.V0Q.P.....&.F..x.............(.Z.]2Qf.......e...L..3N8.\......]..1.........c\.8..a.pa..DN..0.X\`...R..;..b..Y.-.......n..dwN}..`.$.,..K.M.B..w%...=KS.$.{..n!=KkB.~.3.....1.7...3....W...k.....Yj.a..)......t....,`o..$!....IEND.B`.

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 745x620, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	27396
Entropy (8bit):	7.990588185461219
Encrypted:	true
SSDEEP:	768:DYORtUEhFYhtKN7K5K/am0pRS6PtOIH/vW0/oXn:DYDEIKGlmIRSHJ0QXn
MD5:	03CA5D90EA8639340EB19BF7DF47F2F7
SHA1:	4FBD1900DB6408BD3ADAFB9F4CB0DF7266FC0B50
SHA-256:	60476A264646F88FC652E1AE7A24280F985F42C45A1A7B27ED0C73975F069791
SHA-512:	6E8262F8C654338D26B8E6D1677842141553553A66CEF39307E7782F6BFC33E63ABE48F31E70A0557FBC6D381D3DCE49A21BFA3F0D71425B581039C10E58FEE8
Malicious:	false
Reputation:	low
Preview:	RIFF.j..WEBPVP8 .j.........l.>m6.H.#).#..I@..en...C).'..{...x...w.....n:.B78.....W:.._......f.;.g./...\..=D._.v~.z......e.....K...?.....?..].......+.}............'..`....}/..=.....{......O2}..G..?................^....g.....W.w......_.}.=..../.....>..'.w.?..g..{..<............]......_..........v...?._....?.....#.......?z.....:......./.?.......c.....[........@...E.....j..L[`B..../..?.z..... ...<..2..y.2.ka.j....VTv.H..i.n.sw.=.@XG.p.~.0j.H..f...rjH..2..,r".3X.Fjy...-....).b..T.E.'....{ C..6R.$.... ..>.+$...LTWc.i...E^..u4...,....\...[.P./:D.i.t...G..r.~_pE..w..R.x.....?.i....Ll^T...NG.9........t/...`......j...<...%.Y"R.E.s/0p..H......#.4....us..Q%....W:ko. l..f.:\f.......v.t.).....C.@C.1T.J.*.w.2.$R.h....pj..W....)\|.V...+.g]...>Bu....?.l:..._...7nX..W.0..%.sa..:7=......M.o.....I.6M.....;............[..S)..............:.L..."..o......\....z...6...=XE..R..fUd..<...{+........^..%m[........t.`..{_....$..MR..zQ+...M..{._5...0j...g.7~.k:.i....

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	580
Entropy (8bit):	7.405074130079615
Encrypted:	false
SSDEEP:	12:6v/7sA0nRjjcMuWPvoAD+m7xy1tN9dsLOe+mTviplKajbUCsVAZlg7z:qmBDvoDmtgN//e+mTqiajbU1mZlg/
MD5:	7A636A8149F7B68CB2CF2A27DC08BF3C
SHA1:	6B6A943A161337F108E280B5EB0A22D068C1150B
SHA-256:	3E394F75A58174F3F9C11677A0885A12292A0B0512477736C7A114F58A9AFCA8
SHA-512:	5DF1974A8574809FBB1B1D250CF71132D6EC6F5DAA5E6767DAA40502D1EBBE1411B4786F745846CBE7258FE7FD21FD98585DFF2652896EDE3AA4CF250465473D
Malicious:	false
Reputation:	low
URL:	https://static-p46175-e229011.adobeaemcloud.com/b94aa70a4593f812b35d5a8922257b6f80ccf6aa708f58b8266f4ba917eb0e0e/resources/images/favicon-32x32.png
Preview:	.PNG........IHDR...@...@.............sRGB.........pHYs...%...%.IR$....{PLTE......................................................}..}..\|..\|.ro.rn.rn.d`.d_.d_.VR}VQ}HDsHCsHCr:5h:5g:4h:4g,&],&\..R.S....bIDATx...r.@.Dg..5.fr..7Q......r!...<...Tq.wh.../..Td.!.k@....(d..<.`..V4..GRE.G^h %N.L....("P)TP.(..J..Z..U.6.H..k....h..D..0.V0Q.P.....&.F..x.............(.Z.]2Qf.......e...L..3N8.\......]..1.........c\.8..a.pa..DN..0.X\`...R..;..b..Y.-.......n..dwN}..`.$.,..K.M.B..w%...=KS.$.{..n!=KkB.~.3.....1.7...3....W...k.....Yj.a..)......t....,`o..$!....IEND.B`.

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5917)
Category:	dropped
Size (bytes):	78294
Entropy (8bit):	5.328960781274239
Encrypted:	false
SSDEEP:	1536:RJeUwTz7hpwPC0NHM9ZVK01QYTZ02LKVsdmpyKcicxE:RITz7V0Ns9ZVKBYj8wKcHxE
MD5:	7F89FC3864DA761C2070C965A60C813F
SHA1:	C210F178BF95473FBC2560C492E224C96107D663
SHA-256:	0BAF2FEBFFF6A9344E907C0454F870A32487F90078BD8F411EA929EC6E431C4C
SHA-512:	495411BFB6B1F89FCCFC8EE80265849B818A847B9388F9691C9B18EA38D12AC253FD53E5FD0B1629E40AB08BF3CE8039F9C4FAD919C85D38604DCDB9B0190521
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (32505)
Category:	downloaded
Size (bytes):	814813
Entropy (8bit):	5.468920361318578
Encrypted:	false
SSDEEP:	12288:rol1J7270Jsgo/1OlHcgzb8G5IgIFwF20:rol1J7270JBgwuG5IgIFwFF
MD5:	3AC58AEA1C8214237BD0036879740A20
SHA1:	DDA6C649F230963AD0C69FE8280601F58541D6DF
SHA-256:	DF04BF701D0DC5660FBA6FA76024EF6DAE1101312219B0A91E75BCD734DA4275
SHA-512:	D52B5F61B5AB86DAD9EE516786D189E1FB05BFEF150CDAA64287E8826F9664EF4C4D0D76F390A2AE1579A9B115FAE174C3FB5A01B3398DD3D0D8CE96E9E11BE2
Malicious:	false
Reputation:	low
URL:	https://static-p46175-e229011.adobeaemcloud.com/b94aa70a4593f812b35d5a8922257b6f80ccf6aa708f58b8266f4ba917eb0e0e/theme.js
Preview:	!function(){let e;function t(e,t,n,o){Object.defineProperty(e,t,{get:n,set:o,enumerable:!0,configurable:!0})}function n(e){return e&&e.__esModule?e.default:e}var o,r,i="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:"undefined"!=typeof window?window:"undefined"!=typeof global?global:{},a={},s={},c=i.parcelRequire832b;null==c&&((c=function(e){if(e in a)return a[e].exports;if(e in s){var t=s[e];delete s[e];var n={id:e,exports:{}};return a[e]=n,t.call(n.exports,n,n.exports),n.exports}var o=Error("Cannot find module '"+e+"'");throw o.code="MODULE_NOT_FOUND",o}).register=function(e,t){s[e]=t},i.parcelRequire832b=c);var l=c.register;l("4Qi3J",function(e,n){t(e.exports,"register",function(){return o},function(e){return o=e});var o,r=new Map;o=function(e,t){for(var n=0;n<t.length-1;n+=2)r.set(t[n],{baseUrl:e,path:t[n+1]})}}),l("eFDST",function(e,n){t(e.exports,"getBundleURL",function(){return o},function(e){return o=e});var o,r={};o=function(e){var t=r[e];return t\|\|(t=f

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23843), with escape sequences
Category:	dropped
Size (bytes):	23930
Entropy (8bit):	5.42714919475621
Encrypted:	false
SSDEEP:	384:EqR7eZk8qlPRy4+TWLc2dImKhHQRv9t6A2s7/vINwMViTnGTBKKsomM8LKrY:ENZkblPMud716VKwwIiOKDkDY
MD5:	1CFFDD5C82CD0AFF2F453D352EA5903A
SHA1:	1BA286119EEEC53D6C99E2ED640D75EBD467B244
SHA-256:	20133CC700841EC85F087FF9834A922B482B9135E98574A9AFEBADE4C754558C
SHA-512:	7A625952E55D00A0A8D6B8E075375D27A6AD81A01A615FE430C08FFC56CF62E2745EF09E102EAED4DB35C4A5EDFB439DB64986A11234C3DE70FA7C459214F599
Malicious:	false
Reputation:	low
Preview:	/* Copyright (c) 2008-2023, Quantcast Corp. https://www.quantcast.com/legal/license /.!function(){"use strict";var e="qcSes";function t(){var e=r();return"xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx".replace(/[xy]/g,(function(t){var n=(e+16Math.random())%16\|0;return e=Math.floor(e/16),("x"===t?n:3&n\|8).toString(16)}))}var n=function(){try{if(!window.sessionStorage)return t()}catch(e){return t()}var n;try{if(n=window.sessionStorage.getItem(e))return n}catch(e){return t()}n=t();try{window.sessionStorage.setItem(e,n)}catch(e){}return n}();function r(){return(new Date).getTime()}function o(){return new Date}function a(e){var t=new Date(2e3,e,1,0,0,0,0),n=t.toUTCString(),r=new Date(n.substring(0,n.lastIndexOf(" ")-1));return t.getTime()-r.getTime()}function i(){return Math.round(2147483647*Math.random())}var c=/qcdbgc=1$/.test(window.location.toString());function u(e,t){if("undefined"!=typeof console){var n="ERROR"===e?".[41m QuantJS .[0m":".[44m QuantJS .[0m";console.log.apply(console,[n].conca

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22445)
Category:	downloaded
Size (bytes):	22446
Entropy (8bit):	5.308431285952441
Encrypted:	false
SSDEEP:	384:V82ipcutdutMABwXCQ+Ur+heTJ8eMAB6LxbnmcN2Jo4pc:VSpcdCABwXG1heTJHexzoc
MD5:	ECCC5D2CDD3EB68851E379F6375456A5
SHA1:	5DD0EA3388B103A873280C0C9EFABC917F320D9A
SHA-256:	7358C5616F671017F307D161644D253F0F81083B0BE68F3A3FEFEFA33B59DE5D
SHA-512:	47B471DA0BAB81A7A1CB304A35635EA5E3329A418BC562E88B66F7E57991A2E889091C7B40503CEBACC40FEAE0CE0C4F797DFDA7EA612C178F48B0FA44523BC5
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/otSDKStub.js
Preview:	var OneTrustStub=(t=>{var a,o,r,e,l=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIABCookieName="eupubconsent",this.oneTrustIsIABCrossConsentEnableParam="isIABGlobal",this.isStubReady=!0,this.geolocationCookiesParam="geolocation",this.EUCOUNTRIES=["BE","BG","CZ","DK","DE","EE","IE","GR","ES","FR","IT","CY","LV","LT","LU","HU","MT","NL","AT","PL","PT","RO","SI","SK","FI","SE","GB","HR","LI","NO","IS"],this.stubFileName="otSDKStub",this.DATAFILEATTRIBUTE="data-domain-script",this.bannerScriptName="otBannerSdk.js",this.domPurifyScriptName="otDomPurify.js",this.mobileOnlineURL=[],this.isMigratedURL=!1,this.migratedCCTID="[[OldCCTID]]",this.migratedDomainId="[[NewDomainId]]",this.userLocation={country:"",state:"",stateName:""}},s=((g=y=y\|\|{})[g.Days=1]="Days",g[g.Weeks=7]="Weeks",g[g.Months=30]="Months",g[g.Years=365]="Years",(g=e=e\|\|{}).Name="O

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 66792, version 1.0
Category:	downloaded
Size (bytes):	66792
Entropy (8bit):	7.996081577800569
Encrypted:	true
SSDEEP:	1536:Gx386A9UYEHdhGr1WuXc/ce3NV5rFE/2xEpmpFq8NVjd0yiPFsiQCqCaYl2G:GZ86qg4N947E2xIGZVpTEsOq/oz
MD5:	50D01D3E6C994995BCAF829E63D53D1A
SHA1:	C78884CB32E7B020971FFAE746FE21D90502BCAE
SHA-256:	998B049E731114E2FA35D65F23FC6E6E153249A4EF328912E3C7C49546E2D207
SHA-512:	9B8B97F7778E8A740DE8BE26D889FA93BF5984DC1E1DBC61BBE699F143186807DA985E76F5352B9B13CD92B5C88AEEB344078E13F9E4B811ECC12F6AD5665C6F
Malicious:	false
Reputation:	low
URL:	https://all.accor.com/assets/fonts/roboto/medium/roboto-medium.woff2
Preview:	wOF2...................}........................?FFTM..~...$..L.`....\..<.....p..@.....6.$..8. .....f..S[m.......8&X...t...4..~.vBt..\.......9..q.....Y..6..........d!Skv...........r.\......#.4.m..!#.Y....0N....]E..-.......;.. ..{.:..u....u?V..N.).....Y.N..y...3.C\Rx.I0.......s.h...W/Z&s.J.8tWM...n.n#...,'...#.b......E{m....{1P..h...;z......../#..%{1.....R[....?../.."9]P.[.........ZvH....X...6.U.6t6jf0......F..E'f.].VU.j....O.A.E.;..6;...A..M.S.S. Y...=,.........l0.....c...Po......:..w...}v?M..v.~.v..._.KG.....C.m...m..1.s~.W..G......y6.........>.~5...daB'..+-........^.]....LPP.$....Q.....Q\|...W,>.d..r@..^[!(..JW.\|.x.....\|..U.B.K..:........b..."feF.q..2.nwV}.^..q9.....,.RL....}...?3-...U].]..t.......k@...q.<9w..K=N.....g#9.\......K85.....$N.@)....k.0b........:@v......VHe...".df...of..;.R..?D...W%.J....k....#...X.<u..yR.r.'..........G.M..M.."Y5..f.2...T......9.7.....AP.Z.@B......*.9cu..`.p...)k.~..j........h.!.....A`V.H.,p...(.Z^....m.....

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2058)
Category:	downloaded
Size (bytes):	225705
Entropy (8bit):	5.6363141826611765
Encrypted:	false
SSDEEP:	3072:jdNx2eOjfkoeM/oM7i9kRG5jbB9ytSmkG/Q94+a05iv05SXXg+TZ:JOjfvJRMvB9ytSmfKCMi8mQ4Z
MD5:	B99622A5351114A08A4541FEDF9CF998
SHA1:	A7E06CBBB01B894F4471AFAC6F5FDF0BAB950EC2
SHA-256:	2096D52BD5E451A48A4B35B1C2D84AEB5456391513BF40621140BA126EE5B311
SHA-512:	3D93B7F71A8BC31F25A740855B0A06C3E0595D26721EF047D93BD2A713774F867D79F685BE3CE7A5342D9E45A4B66A13F40D85F55D9DF1FBE3CA98B6DA190A65
Malicious:	false
Reputation:	low
URL:	https://all.accor.com/ruxitagentjs_ICA7NVfhqrux_10285240307101407.js
Preview:	/. Copyright and licenses see https://www.dynatrace.com/company/trust-center/customers/reports/ /.(function(){function Ka(){document.cookie="".concat("__dTCookie","=").concat("1",";SameSite=Lax");var Ba=-1!==document.cookie.indexOf("__dTCookie");document.cookie="".concat("__dTCookie","=").concat("1","; expires=Thu, 01-Jan-1970 00:00:01 GMT");return Ba}function gb(){return void 0===hb.dialogArguments?navigator.cookieEnabled\|\|Ka():Ka()}function ib(){var Ba;if(gb()){var Ia=hb.dT_,Va=null===Ia\|\|void 0===Ia?void 0:Ia.platformPrefix;if(!Ia\|\|Va){var La=null===Ia\|\|void 0===Ia?void 0:Ia.minAgentVersion;.La&&"10285240307101407"<La+""?window.console.log("[CookiePrefix/initConfig] Min agent version detected, and javascript agent is older - the javascript agent will not be initialized!"):(La=(Ba={},Ba.cfg="#CONFIGSTRING#\|auto=#AUTO#\|domain=#DOMAIN#\|rid=RID_#REQUEST_ID#\|rpid=#RESPONSE_ID#\|app=#APP#",Ba.iCE=gb,Ba.platformCookieOffset=null===Ia\|\|void 0===Ia?void 0:Ia.platformCookieOffset,Ba),Va&&(La

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	314956
Entropy (8bit):	5.527277768676676
Encrypted:	false
SSDEEP:	3072:RpnfrTOALEKdx7chIcFdyLn4y3VGb5cVYx0:RNrVLEERcFdyL4KVE/0
MD5:	786D6B01DBFDE26C432550AF16C0973E
SHA1:	A64641550A1CE91ABD75EB7298E6237F825AF6B1
SHA-256:	1166A1DE85598EAC35989895EB5B312E1BB80CD21DDAD3661091B0D93C6FA1BE
SHA-512:	AD1983F7DB68792D9EE79219EE11A7AEEBAA79BDCBF3DE3283DC5B0B4C9DEADB4A3D19480D7E89074A7578A5545D0A800E376BA70748D749B618C8DF90185B71
Malicious:	false
Reputation:	low
URL:	https://qchmhd61sj.kameleoon.eu/kameleoon.js
Preview:	if (undefined === window.Kameleoon){(function(){!function(e,t){e.kbowser=t()}(this,(function(){return function(e){var t={};function r(i){if(t[i])return t[i].exports;var n=t[i]={i:i,l:!1,exports:{}};return e[i].call(n.exports,n,n.exports,r),n.l=!0,n.exports}return r.m=e,r.c=t,r.d=function(e,t,i){r.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:i})},r.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},r.t=function(e,t){if(1&t&&(e=r(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var i=Object.create(null);if(r.r(i),Object.defineProperty(i,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var n in e)r.d(i,n,function(t){return e[t]}.bind(null,n));return i},r.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return r.d(t,"a",t),t},r.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1743)
Category:	downloaded
Size (bytes):	2649
Entropy (8bit):	5.401214985582964
Encrypted:	false
SSDEEP:	48:0Bc4z0N2U9mcm1gwUn45b6dtOA1dGHp9+NR7Rc3:u8N2U9Au+uHOtmtRc3
MD5:	556AB58C54488FB4B03AC122A8921DEF
SHA1:	327AA7CFE5F81DC255E9EE52FE5EF98B09A5F452
SHA-256:	303211888BA4E378B2F350A6540CBDA5FA3B02E8D0424CEA91483E64B711117F
SHA-512:	0013B347AE4D54C0B6AC03215E107C59AFF550910FC8435CFB8D798847F7F263D5218B5F6E4F3686995F64090E528201914B7E06EA7471F088BF13991DE736A9
Malicious:	false
Reputation:	low
URL:	https://all.accor.com/enroll-loyalty/check-authent.html?appId=all.accor&error_description=Authentication+is+required.&state=f3560ed2a8c46af4199ef8&error=login_required
Preview:	<!doctype html>.<html lang="en">. <head><script type="text/javascript" src="/ruxitagentjs_ICA7NVfhqrux_10285240307101407.js" data-dtconfig="rid=RID_-1869407295\|rpid=-896767583\|domain=accor.com\|reportUrl=/rb_80be963f-a859-4808-9b2a-ceb8d44df738\|app=0dae2710ec98cad4\|cuc=85aac0bj\|mel=100000\|expw=1\|featureHash=ICA7NVfhqrux\|dpvc=1\|md=mdcc1=fx-cdn-forward\|lastModification=1729814722355\|srsr=50000\|tp=500,50,0\|rdnt=1\|uxrgce=1\|agentUri=/ruxitagentjs_ICA7NVfhqrux_10285240307101407.js"></script><script type="text/javascript">var kameleoonLoadingTimeout = 1000;window.kameleoonQueue = window.kameleoonQueue \|\| [];window.kameleoonStartLoadTime = new Date().getTime();if (!document.getElementById('kameleoonLoadingStyleSheet')){ if (!window.kameleoonDisplayPageTimeOut) { var kameleoonS = document.getElementsByTagName('script')[0];var kameleoonCc = '*{ visibility: hidden !important; background-image: none !important; }';var kameleoonStn = document.createElement('style');kameleoonStn.type = 'text/css';ka

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	13554
Entropy (8bit):	5.202959828582905
Encrypted:	false
SSDEEP:	384:KIy0clDjbn42OXOw85csXf1NFyNg/OoH6iAHyPtJJAR:KIy5F/i
MD5:	23E8424AA65B5CC6F0693EC20C2CEAE0
SHA1:	0F4F59077D295D0799B9B02C0DA2076F7DD73960
SHA-256:	D890ABF66010907C7A0A61236D25C3C98BCB7EDEC34B13DC887F5BE122BFEF7E
SHA-512:	9D649426DB646BCE98E4A3AAB625CB1DE12F2AFAE943ADC7DD9C5B54740A7E14E20B826E6FA7812CA7ADD18E5A12B4FECA99FF864C8BF29349E200B7A8641B48
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202409.2.0/assets/otFlat.json
Preview:	. {. "name": "otFlat",. "html": "PGRpdiBpZD0ib25ldHJ1c3QtYmFubmVyLXNkayIgY2xhc3M9Im90RmxhdCI+PGRpdiByb2xlPSJkaWFsb2ciPjxkaXYgY2xhc3M9Im90LXNkay1jb250YWluZXIiPjxkaXYgY2xhc3M9Im90LXNkay1yb3ciPjxkaXYgaWQ9Im9uZXRydXN0LWdyb3VwLWNvbnRhaW5lciIgY2xhc3M9Im90LXNkay1laWdodCBvdC1zZGstY29sdW1ucyI+PGRpdiBjbGFzcz0iYmFubmVyX2xvZ28iPjwvZGl2PjxkaXYgaWQ9Im9uZXRydXN0LXBvbGljeSI+PGgyIGlkPSJvbmV0cnVzdC1wb2xpY3ktdGl0bGUiPlRpdGxlPC9oMj48ZGl2IGlkPSJvbmV0cnVzdC1wb2xpY3ktdGV4dCI+dGl0bGU8YSBocmVmPSIjIj5wb2xpY3k8L2E+PC9kaXY+PGRpdiBjbGFzcz0ib3QtZHBkLWNvbnRhaW5lciI+PGgzIGNsYXNzPSJvdC1kcGQtdGl0bGUiPldlIGNvbGxlY3QgZGF0YSBpbiBvcmRlciB0byBwcm92aWRlOjwvaDM+PGRpdiBjbGFzcz0ib3QtZHBkLWNvbnRlbnQiPjxwIGNsYXNzPSJvdC1kcGQtZGVzYyI+ZGVzY3JpcHRpb248L3A+PC9kaXY+PC9kaXY+PC9kaXY+PC9kaXY+PGRpdiBpZD0ib25ldHJ1c3QtYnV0dG9uLWdyb3VwLXBhcmVudCIgY2xhc3M9Im90LXNkay10aHJlZSBvdC1zZGstY29sdW1ucyI+PGRpdiBpZD0ib25ldHJ1c3QtYnV0dG9uLWdyb3VwIj48YnV0dG9uIGlkPSJvbmV0cnVzdC1wYy1idG4taGFuZGxlciI+Y2hvaWNlPC9idXR0b2

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	1756
Entropy (8bit):	4.657586014000422
Encrypted:	false
SSDEEP:	24:2ffmyCLwyk3q4nsrqH2B6PykiiNRWZ32IGMSGbbZcmsFrEP2Pr9Tf0W2dTZ+NEHj:wD3qAs+rbwMlGbFWLT9f0W2dZNwe
MD5:	E0FE09A2867628D5FA188F491C14F785
SHA1:	E2BBB21561D4D7E886A5B0F1A3AE7630D7FFAF6B
SHA-256:	5B47D71235C26FA6B895A3DA8B6B14031204020DA998328CC9AE4000A0EA3890
SHA-512:	1A3C9248CFAFB299B39F289E2C37124B443FCFB0DE9E43E40B442CD8CC785C92679C956B3D9E1C6A62C7DF95717ACC0936194886607A55AB9235AA2C230E1DCA
Malicious:	false
Reputation:	low
Preview:	(function(w,d,c,k,a,b,t,e) {.. var cs = d.currentScript;.. if (cs) {.. var uo = cs.getAttribute('data-ueto');.. if (uo && w[uo] && typeof w[uo].setUserSignals === 'function') {.. w[uo].setUserSignals({'co': c, 'kc': k, 'at': a, 'bi': b, 'dt': t, 'ec': e});.. }.. }..})(window, document, 'us', true, false, false, false, false);..(function(w,d,s,i) {.. var c=d.currentScript;.. if (c) {.. var uo = c.getAttribute('data-ueto');.. if (uo && w[uo] && w[uo].uetConfig && w[uo].uetConfig.deBlock === true).. return;.. }.. var f,j; f=d.getElementsByTagName(s)[0]; j=d.createElement(s); j.async=true;.. j.src='https://bat.bing.com/p/insights/t/'+i;.. j.onload = function () {.. if (!c) return;.. var co = function(u) { return u && typeof u === 'object' && !(u instanceof Array) && u.beaconParams && u.beaconParams.mid && w.webinsights; };.. var r = 40;.. var cl = function() {.. if (r-

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (63937), with no line terminators
Category:	dropped
Size (bytes):	63937
Entropy (8bit):	5.62926828914818
Encrypted:	false
SSDEEP:	1536:En1JGCsVOEsoXIf0RkhWlmAiWWN+7p/ZTQxxieV4+ArCKxZsQYizxzwmv8K/MsIP:En1qSWg/sQN
MD5:	7CC3BFC36BF4910C04E6C13A0A914508
SHA1:	F93CA2B21C67D5CB11B7FDDF942F2F2BB62EB751
SHA-256:	31E75F6A089FBF26AA59E89D56420A32B96B6950CBAE8269F47EE40D41F71AEC
SHA-512:	F1CC2C78C59F126BB17AD02FC0A7C98912B184482EB8D88C8694967AC1C1FC2F1482956901DC6B38019CC580892B903EF0F89D52A9F84EA2641AD8349268DFB9
Malicious:	false
Reputation:	low
Preview:	(()=>{var __webpack_modules__={2:(__unused_webpack_module,__webpack_exports__,__webpack_require__)=>{"use strict";__webpack_require__.r(__webpack_exports__),__webpack_require__.d(__webpack_exports__,{SDK_API_LVL:()=>SDK_API_LVL,SDK_VERSION:()=>SDK_VERSION,SDK_MAJOR_VERSION:()=>SDK_MAJOR_VERSION,SDK_DISMISS_NOTIF_AFTER:()=>SDK_DISMISS_NOTIF_AFTER,RETRY_MAX_ATTEMPTS:()=>RETRY_MAX_ATTEMPTS,RETRY_MIN_INTERVAL_MS:()=>RETRY_MIN_INTERVAL_MS,SSL_SCRIPT_URL:()=>SSL_SCRIPT_URL,WS_URL:()=>WS_URL,SAFARI_WS_URL:()=>SAFARI_WS_URL,ICONS_URL:()=>ICONS_URL,IS_DEV:()=>IS_DEV,IS_TEST:()=>IS_TEST,IS_WEBPACK_DEV_SERVER:()=>IS_WEBPACK_DEV_SERVER});const SDK_API_LVL="1",SDK_VERSION="3.5.0",SDK_MAJOR_VERSION="3",SDK_DISMISS_NOTIF_AFTER=30,RETRY_MAX_ATTEMPTS=3,RETRY_MIN_INTERVAL_MS=1e3,SSL_SCRIPT_URL="via.batch.com",WS_URL="https://ws.batch.com/web",SAFARI_WS_URL="https://safari-ws.batch.com",ICONS_URL="https://icons.batch.com",IS_DEV=!1,IS_TEST=!1,IS_WEBPACK_DEV_SERVER=!1},74:(__unused_webpack_module,__webpac

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5093), with no line terminators
Category:	downloaded
Size (bytes):	5093
Entropy (8bit):	5.846075264635278
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUwc/m/HmO+qoN:1DY0hf1bT47OIqWb1dc/mvmTf
MD5:	8E92BC8F8F81DA52AEC0A59DAB57F1F7
SHA1:	BFCC7819DC5116A2863A3FD9491DD659A0600753
SHA-256:	D509E7B5DCC6D67385A807F57BCEEDDA72D598CF0652637A7973DE49B38B3B53
SHA-512:	1796AFF9BC65D356DFB3B5E7B82D88BCFB6F24E4EEAD51C1E76835EEEB6494FB55E2AC2C3E49B34C72C52E59921A1B79B64B3CBD23F3487C6E345AEB3D2B8F36
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/11263996687/?random=1730274400168&cv=11&fst=1730274400168&bg=ffffff&guid=ON&async=1&gtm=45be4as0v9104227775z8812226527za200zb812226527&gcd=13r3r3r3r5l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&hn=www.googleadservices.com&frm=0&tiba=App%20Download&npa=0&pscdl=noapi&auid=461077611.1730274398&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1756
Entropy (8bit):	4.657586014000422
Encrypted:	false
SSDEEP:	24:2ffmyCLwyk3q4nsrqH2B6PykiiNRWZ32IGMSGbbZcmsFrEP2Pr9Tf0W2dTZ+NEHj:wD3qAs+rbwMlGbFWLT9f0W2dZNwe
MD5:	E0FE09A2867628D5FA188F491C14F785
SHA1:	E2BBB21561D4D7E886A5B0F1A3AE7630D7FFAF6B
SHA-256:	5B47D71235C26FA6B895A3DA8B6B14031204020DA998328CC9AE4000A0EA3890
SHA-512:	1A3C9248CFAFB299B39F289E2C37124B443FCFB0DE9E43E40B442CD8CC785C92679C956B3D9E1C6A62C7DF95717ACC0936194886607A55AB9235AA2C230E1DCA
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/p/action/343097615.js
Preview:	(function(w,d,c,k,a,b,t,e) {.. var cs = d.currentScript;.. if (cs) {.. var uo = cs.getAttribute('data-ueto');.. if (uo && w[uo] && typeof w[uo].setUserSignals === 'function') {.. w[uo].setUserSignals({'co': c, 'kc': k, 'at': a, 'bi': b, 'dt': t, 'ec': e});.. }.. }..})(window, document, 'us', true, false, false, false, false);..(function(w,d,s,i) {.. var c=d.currentScript;.. if (c) {.. var uo = c.getAttribute('data-ueto');.. if (uo && w[uo] && w[uo].uetConfig && w[uo].uetConfig.deBlock === true).. return;.. }.. var f,j; f=d.getElementsByTagName(s)[0]; j=d.createElement(s); j.async=true;.. j.src='https://bat.bing.com/p/insights/t/'+i;.. j.onload = function () {.. if (!c) return;.. var co = function(u) { return u && typeof u === 'object' && !(u instanceof Array) && u.beaconParams && u.beaconParams.mid && w.webinsights; };.. var r = 40;.. var cl = function() {.. if (r-

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 63920, version 1.0
Category:	downloaded
Size (bytes):	63920
Entropy (8bit):	7.996713921159844
Encrypted:	true
SSDEEP:	1536:UIG3hJMkJeK8ic5iZGnJ4URj9vqXOQ6UqYdbuA5RVK1:UL31hcLlRjDQ6Uq4W1
MD5:	A65527FCB58F66A7CFBC0E6B160538B4
SHA1:	45D260E7FA343401B5BB0DF982A014F53E2D253B
SHA-256:	FB13C3A1CBAC60649B76F7D7F85C1645D35AC69B85CE5F4EB0692505ECC2CD45
SHA-512:	8448E96ABE326F43285B2D8B0D75BEAF0E9C9E051E8754841D907B30EB303AE24C447011306DA6A1703B9192D02AEFF76A4517BDF94EC6E7DC360CE3538802AF
Malicious:	false
Reputation:	low
URL:	https://static-p46175-e229011.adobeaemcloud.com/b94aa70a4593f812b35d5a8922257b6f80ccf6aa708f58b8266f4ba917eb0e0e/resources/fonts/roboto-bold.woff2
Preview:	wOF2...................H..........................b........`....H..<........E........6.$..8. .... ..)[.T...d.....Z...U.....:u..O.:....cx.<.z.....n..".~..........&.X..=.....!..A..&i.~.b4.@.....jC.X..K..lj......}H.5M.ccx9.T...T......D-'..7P.L).L..).2..Yzq..I.....X.U\..Mz..x..{xQ...].`J..}\...@.{..{.p?..^.D....M......[....L]..nT.M3...S+Ee...yP...y(.......'..^36.R...S1..`m.....AW..[.f...4b.5"k.u.......(>..j..{.\...$j.c.Ck"..F..jd..U....".l....]..w..\|...w.^.$....._.E..~.Yk.G'><..4..\}F.'z.+o.U....g...;.Jg....N.\|..i.."!..r...x..v...8>qv.zr7..g..8...Ke.....Y&s.r.V....&.0..;....N.i&...X..}.....Haf.$...h.=O..OS{<..v..b...$....?..E.Q3..#.I.(..(.U.{n.c.s...v.K....x.EZCsz.....F...x..}.k.Y.}g.....p...b.$........s.{..Q.$Ca...'..&LE.k...X...M..V.1`..m....QV.B..H.+].I.E...L).=#.....c..h...c6./...3.cb....T..W."..0..6..6@sk#.J...) .H...E..X......FQ...&*..].c..f.y....M....'.Y.Z..xJ..r.....U .Q...p..+.n9L.O..J~.7......{/@.T,#LS..D;JM...A.e......................

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	65
Entropy (8bit):	4.314128390879881
Encrypted:	false
SSDEEP:	3:2erWeKBRk35KLWAzRERxzfXHqq/H4Y3:29M3tRdfaqN
MD5:	2DEA9F0F7E122E81EE9A3752902BDF19
SHA1:	8747D6D270E001CEEA1174FF1D365D9CDEA52DCD
SHA-256:	3D49CCE674B56473177888E83BA3303C68B74AF8F0032A94F4814F73F59132B9
SHA-512:	723AC6A0C7A4139882197D5E4B59A48DB20A83C63E498C8C5FA1E057DBA75F33A1F927CC286D006BF107A04211998873FCC82656B719C40D49F633C466F0CD8F
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"response":{"status_code":400,"body":""}}..

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4724), with no line terminators
Category:	dropped
Size (bytes):	4724
Entropy (8bit):	5.328172600275533
Encrypted:	false
SSDEEP:	96:ymki6KoVDicZwrdAmw2Iw2KCpPOzOcKQa+sC:4Wr6mw2Iw2KsPOqdDC
MD5:	4CCF43771E48481ABCD9B2BCBDBD27ED
SHA1:	94E18935A8B2E9BD8208B9C4C16751B49908DAEF
SHA-256:	3CA9E609EF3F582AEC6955E30DE3EA1A0A33186BF6B10105D9E8391C4BA8AD21
SHA-512:	2247C0CD89A6110AAED3086C3F5C277D8B1984337DF18B39AB09DA2CAE994DD4CCCBD44063EC7FA4FBFE7855A646403AB880670D1DA88FF8389E32717D1E460B
Malicious:	false
Reputation:	low
Preview:	(async function(){const a="rtbhEvents",b="__rtbh.",c=["uid","sid","aid","eid"],d=[...c,"lid"],e=31536000000,f=[];if(Array.isArray(window.rtbhEvents)\|\|(window.rtbhEvents=[]),window.rtbhEvents.length&&!window.rtbhEvents.push.prototype)try{function g(a){return!!a&&new Date(a)<new Date}function h(){return new Date(new Date().getTime()+e).toISOString()}function i(a,b="ams"){return null===a?void 0:function(c,e,f=null){try{const g=e.filter(a=>!d.includes(a.eventType)&&"init"!==a.eventType);return k(`https://${b}.creativecdn.com/tags/v2?type=json`,{method:"POST",mode:"cors",credentials:"include",referrerPolicy:"no-referrer-when-downgrade",headers:{"Content-Type":"application/json"},redirect:"follow",body:JSON.stringify({...j(a,f),tags:[...g,...z]})},c)}catch(a){}}}function j(a,b=null){const c=document.referrer?document.referrer:"";return{v:"v0.1.9",sr:c,su:location.href,th:b?b:a}}async function k(a,b,c,d){try{const e="function"==typeof c?c:()=>{},f=await fetch(a,b),g=f.status;if(200<=g&&300>g)

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24745), with no line terminators
Category:	downloaded
Size (bytes):	24745
Entropy (8bit):	4.791301497913928
Encrypted:	false
SSDEEP:	384:WZ8ChhGoFpHDouLlCS7FGAVsq1nwGfg4xqsQMPNE:OlpuJ
MD5:	03D8DE91DE54A0EF12CB327A2E24ADBA
SHA1:	5D758DCC4AFEAF7989E499E5842E2BA355C8C535
SHA-256:	E2AFA04C9A3E080712C94D68B9C1D33587FDDCBAEABA9DFCAF1D53D19F6A280A
SHA-512:	75AECACA92892F75129BC02D50293B1F144FA8A914305DDCC5F135C1FFCDA0EC35C6EE6CCE036081D91E865A49FEDEBD09AD8903BFD6BB4D8A741E5360C38F31
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202409.2.0/assets/otCommonStyles.css
Preview:	#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .onetrust-vendors-list-handler:hover{color:#1f96db}#onetrust-banner-sdk:focus{outline:2px solid #000;outline-offset:-2px}#onetrust-banner-sdk a:focus{outline:2px solid #000}#onetrust-banner-sdk #onetrust-accept-btn-handler,#onetrust-banner-sdk #onetrust-reject-all-handler,#onetrust-banner-sdk #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-tcf2-vendor-count.ot-text-bold{font-weight:bold}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-icon,#ot-sync-ntfy .ot-close-icon{background-size:contain;background-repeat:no-repeat;background-position:center;height:12px;width:12px}#onetrust-banner-sdk .powered-by-logo,#onetrust-banner-sdk .ot-pc-footer-logo a,#onetrust-pc-sdk .powered-by-logo,#onetrust-pc-sdk .ot-pc-footer-

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (940)
Category:	dropped
Size (bytes):	311283
Entropy (8bit):	5.536291176094502
Encrypted:	false
SSDEEP:	3072:g3ABWXIiGWFLPv4fl5p5lyxAAgMh+x4H63crQ9dnht24CmeVKUq2bbJVWRseaG5E:gbn49hl4gv063oQvp0b/WRseaG5RF626
MD5:	39CCBE41199D32A19A9133659F714C70
SHA1:	3B9096151B1996B302B0F624001CE4012F6CF25E
SHA-256:	0897DE37940F6ACC5D84D14917E70084CCB0A36EC099E206536882DA280D8835
SHA-512:	E8CCCD548B3C0514A98F344A5544E422D593B32365FCAE4FD7F1F3B7DBE973DCF1435F9E963FB994E0B1EAB03EC5D7FBABBB99592402C39CDEE51FBAC2F65581
Malicious:	false
Reputation:	low
Preview:	/*. jQuery JavaScript Library v3.5.1. https://jquery.com/.. Includes Sizzle.js. https://sizzlejs.com/.. Copyright JS Foundation and other contributors. Released under the MIT license. https://jquery.org/license.. Date: 2020-05-04T22:49Z. Sizzle CSS Selector Engine v2.3.5. https://sizzlejs.com/.. Copyright JS Foundation and other contributors. Released under the MIT license. https://js.foundation/.. Date: 2020-03-14. jQuery JavaScript Library v1.12.4-aem. http://jquery.com/.. Includes Sizzle.js. http://sizzlejs.com/.. Copyright jQuery Foundation and other contributors. Released under the MIT license. http://jquery.org/license.. Date: 2016-05-20T17:17Z. Sizzle CSS Selector Engine v2.2.1. http://sizzlejs.com/.. Copyright jQuery Foundation and other contributors. Released under the MIT license. http://jquery.org/license.. Date: 2015-10-17. jQuery requestAnimationFrame - 0.2.2 - 2016-10-26. https://github.com/gnarf37/jquery-requestAnimationFrame. Copyright (c) 2016 Corey Frang; Licensed MIT

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 3625 x 1286, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	35063
Entropy (8bit):	7.651085359656189
Encrypted:	false
SSDEEP:	768:OK/FxH2AdMjDxJO+dGm1PPeB7u131l5F+tv+Zmw/NAlY9iUAcwB:OcCAoO+dGoXeB7ufFYvZwUYXAcO
MD5:	50CF96398E32CFF3A29338BA88159261
SHA1:	D3F204B8090FD23E3E34D1E9A6445DC7A10E4B9D
SHA-256:	B7485683765BED45DE00E90143880667EEA8F06E1B262B22AC0AF6733B3E7DDB
SHA-512:	3A61573C1CEFFBCE4A804C835FD885595F71BF6C363E3B0D676292024260A9C58F1D4858B89AC47A42CDB6C47A84463EAE98428A888358C9C7A7D66D17B65F2C
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/logos/a9a7c29d-9ac6-471d-9d50-9e5237da1bab/38cbaaa3-452b-476f-9f4e-893ea1700166/6605e452-c3c7-4fac-8823-33591a8d74b8/19J3103E_ALLaccorLogoWEBetMOBILEtb_RGB.png
Preview:	.PNG........IHDR...).........i.C....3PLTELiq..3..3..3..3..3..3..3..3..3..3..3..3..3..3..3..3.Q......tRNS.. ...`.@..0P..p.......pHYs...#...#.x.?v.. .IDATx....v.F.Qa$.N.....N.rd.@.&...Y.."H...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................8...{.+.S.............p.8x.x.W..T..W..}o...w~...>JQ)E..>....Q.JQ)....U.+.Q.JQ)....4Z.....R...g.C..Q.JQ).....e.JQ)E..~v9......"....V.6..RT......y.v.~....R..h........R..h]?~\......RT....;..r3TD)E...`u.n..RT.J....]..t3TD)E....i.d.f..RT.J...a.gk........".@.......;.RT.J...Q.> .P.....".@..Y......R....7TD)E.

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.200601260429725
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM09/Woz59tVp:6v/lhPfZM09tzjTp
MD5:	C4A2B870062C2BB98C500BC1526C0498
SHA1:	528666CCDB12997358077BC8FCDBFB6B825C7788
SHA-256:	2AA4FA20701CDD6D8D56046069001186B5267E3EE7D0EF618AD2F4A683723E11
SHA-512:	2F1A3ABCD12125F7EF18D61A960901C0FD6F82DD02EA2B8041859E6D5F0A7F08DB17CC110DC6D8A3F7D0D1BA790C4BCCA2506D3C60EDFEB5CB29433E9F4F762E
Malicious:	false
Reputation:	low
URL:	https://tr.snapchat.com/p?pid=5b7854ae-f9c6-433a-ba0a-2ec9f24a5aa4&ev=PAGE_VIEW&intg=gtm&e_iids=%5B%5D&e_desc=ALL&pids=5b7854ae-f9c6-433a-ba0a-2ec9f24a5aa4&e_ic=hotel%2C&cdid=1730274776895_173027499767785&u_c1=76290f8f-0587-43be-ba14-d33ea66fdf97&u_sclid=2a38f09e-0999-4df0-acd1-1287a34e1c62&u_scsid=04b1e948-de78-4ce3-93d8-b14769db3d22&bg=false&bt=1d53c387&d_a=x86&d_bvs=%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D&d_os=10.0.0&d_ot=Windows&df=true&huah=true&m_dcl=8637&m_fcps=5353&m_pi=8064&m_pl=12899&m_pv=2&m_rd=17859&m_sh=1024&m_sl=17311&m_sw=1280&pl=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&trackId=6aea9678-9029-423f-9b06-6ae69852a808&ts=1730274402536&v=3.33.0-2409301510
Preview:	.PNG........IHDR....................IDATx.c`...............IEND.B`.

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17002)
Category:	downloaded
Size (bytes):	32494
Entropy (8bit):	5.599959968235641
Encrypted:	false
SSDEEP:	384:xLUoOIQ4FiWsjdcrUZGykZTMtKGQJYRp6bBARrjAOsRfls4Fa2CbhfJA:xLPOIQzu/ZTM7mbBARrjAKHO
MD5:	02E4691C0DCC2F7ECEF2712FB0F24921
SHA1:	C43D36B258AFE50CD563F93BFDC5094A5AF5FF96
SHA-256:	D504F72375BCFB65FBF8DBF79AD313AA21DF0953BB1EFEF82695708BA70922B1
SHA-512:	BE27C47C3389D164BB056592BCFD40A8754BC9D2F8874BBDC9589E52B401D85D89A1ABE3B6BBA4B44BA1A6E3F2BE25DED1E208C068825DBDD36F3F001DCE8C8B
Malicious:	false
Reputation:	low
URL:	https://d.line-scdn.net/n/line_tag/public/release/v1/lt.js
Preview:	!function(t){function e(i){if(n[i])return n[i].exports;var r=n[i]={i:i,l:!1,exports:{}};return t[i].call(r.exports,r,r.exports,e),r.l=!0,r.exports}var n={};e.m=t,e.c=n,e.d=function(t,n,i){e.o(t,n)\|\|Object.defineProperty(t,n,{configurable:!1,enumerable:!0,get:i})},e.n=function(t){var n=t&&t.__esModule?function(){return t.default}:function(){return t};return e.d(n,"a",n),n},e.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},e.p="",e(e.s=5)}([function(t,e,n){"use strict";function i(t){for(var e=!(arguments.length>1&&void 0!==arguments[1])\|\|arguments[1],n=2166136261,i=t+"",r=0;r<i.length;++r)n^=i.charCodeAt(r),n+=(n<<1)+(n<<4)+(n<<7)+(n<<8)+(n<<24);var o=(n>>>0).toString(16);return e&&(o=("00000000"+o).slice(-8)),o}Object.defineProperty(e,"__esModule",{value:!0}),e.default=i},function(t,e,n){"use strict";function i(t,e){if(!(t instanceof e))throw new TypeError("Cannot call a class as a function")}Object.defineProperty(e,"__esModule",{value:!0});var r=function(){function t(

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (37246)
Category:	downloaded
Size (bytes):	122456
Entropy (8bit):	5.263726349944436
Encrypted:	false
SSDEEP:	1536:X8eyiM+060jUsY7qfIDMIL2u0lgK44R82g9p5q2lMVkxPDs4g28:MeyiMFZYegDM62uqiq2wkxL+28
MD5:	F35B543FBF132AB69F5C12EEBF271456
SHA1:	6A4327094A2E8B46B7AF8E8BCE23B0FA94FFC144
SHA-256:	B35C92F05201779D19AAF2A4521CBB0E6E52B0BAEB3CB67D57B29ADD1295E078
SHA-512:	76AF1E9D9436558824813148769720C35231ACA3966B90845C5288C977878502D973FEA0FD602A25DDB242CEBEF46C8C4C70F0F101EE37D653F528CF7B4B9DBA
Malicious:	false
Reputation:	low
URL:	https://all.accor.com/a/etc.clientlibs/ace/clientlibs/clienlibs-3rd-parties/clientlib-vue.lc-f35b543fbf132ab69f5c12eebf271456-lc.min.js
Preview:	/!. vue-i18n v8.28.2 . * (c) 2022 kazuya kawaguchi. * Released under the MIT License.. */.var t,e;t=this,e=function(){"use strict";var t=["compactDisplay","currency","currencyDisplay","currencySign","localeMatcher","notation","numberingSystem","signDisplay","style","unit","unitDisplay","useGrouping","minimumIntegerDigits","minimumFractionDigits","maximumFractionDigits","minimumSignificantDigits","maximumSignificantDigits"],e=["dateStyle","timeStyle","calendar","localeMatcher","hour12","hourCycle","timeZone","formatMatcher","weekday","era","year","month","day","hour","minute","second","timeZoneName"];function n(t,e){"undefined"!=typeof console&&(console.warn("[vue-i18n] "+t),e&&console.warn(e.stack))}var r=Array.isArray;function a(t){return null!==t&&"object"==typeof t}function i(t){return"string"==typeof t}var o=Object.prototype.toString,s="[object Object]";function l(t){return o.call(t)===s}function c(t){return null==t}function u(t){return"function"==typeof t}function h(){for(var t

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (41169)
Category:	downloaded
Size (bytes):	41172
Entropy (8bit):	5.505998162296305
Encrypted:	false
SSDEEP:	768:j21xCdwV69Odf9dk1fV8iWUwcb9x8cvgBhpU9yC8IEVDlbth3Ia8DdEN:iP3kr8V8vShi98Iiph3IbC
MD5:	0AA5002702487976D570A640C408EBA5
SHA1:	48930F22A2396DF313CCDFCB91CAC20E38F2B06B
SHA-256:	4E8276AEA0A3C7FE3600E6718C7F484D49C347C8D5763D89BE95900D526A14DA
SHA-512:	37A9D609DB21EE1E696CB437C02F0F6410925EB10B6353C0CDF95DB265E342F0BC3D2AE1851D209E4517D978B7CCBE8AD56F98247FA865AE405FAFD4D2E62CDA
Malicious:	false
Reputation:	low
URL:	https://snap.licdn.com/li.lms-analytics/insight.min.js
Preview:	!function(){"use strict";function n(n,t,e){return t in n?Object.defineProperty(n,t,{value:e,enumerable:!0,configurable:!0,writable:!0}):n[t]=e,n}var t,e,r,i,o={ADVERTISING:"ADVERTISING",ANALYTICS_AND_RESEARCH:"ANALYTICS_AND_RESEARCH",FUNCTIONAL:"FUNCTIONAL"},a="GUEST",u="MEMBER",c=0,l=1,d=2,s=(n(t={},a,"li_gc"),n(t,u,"li_mc"),t),f=function vr(){var n=arguments.length>0&&arguments[0]!==undefined?arguments[0]:null,t=arguments.length>1&&arguments[1]!==undefined?arguments[1]:null,e=arguments.length>2&&arguments[2]!==undefined?arguments[2]:null,r=arguments.length>3&&arguments[3]!==undefined?arguments[3]:null;for(var i in function(n,t){if(!(n instanceof t))throw new TypeError("Cannot call a class as a function")}(this,vr),n=n\|\|{},this.consentAvailable=!1,this.issuedAt=t,this.userMode=e,this.optedInConsentMap={},o)n[i]=n[i]\|\|c,n[i]!==c&&(this.consentAvailable=!0),this.optedInConsentMap[i]=n[i]===l\|\|n[i]===c&&r===l},v=(e=[o.ADVERTISING,o.ANALYTICS_AND_RESEARCH,o.FUNCTIONAL],r=[c,l,d,c],i=new R

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1852
Entropy (8bit):	5.342267059237861
Encrypted:	false
SSDEEP:	48:YFUD21VK1Tdle6uRIr0Va+7JKTPFThSxkltlAUjS/oMT:Af5Gr0R7Jg6ilbAw8
MD5:	E942B3FF79D41208887180CA9132D9D6
SHA1:	1F057CACEA4C6FF91446013AAD5B6918B39EC360
SHA-256:	BB11FFD7A2A3DFD68C86C7F38218811F89BA47B02F6947ACBD5EA0ACAFF9BE08
SHA-512:	AFCB807EDCF549DFCF262DFFDE289A7388506F0CB4D80545E6254A1D409C1C2A4A15EB7ED2B2F84959140A0C1F4087E95695CE5FAEE883460B6C83F93ACC5084
Malicious:	false
Reputation:	low
URL:	https://data.kameleoon.io/visit/visitor?siteCode=qchmhd61sj&currentVisit=true&format=ENGINE&maxNumberPreviousVisits=25&version=2&visitorCode=52gbpzbkoweec5rn
Preview:	{"currentVisit":{"conversions":{},"Geolocation":{"country":null,"city":null,"latitude":null,"region":null,"longitude":null},"visitNumber":0,"firstReferrersIndices":[null],"pageTitleByHref":{"https://all.accor.com/a/en/new-app-offer/app-download.html?source_caller=bulk&af_qr=true&shortlink=5m1nc8of&c=20241013_ALL_AppBonusingMobileLp&af_ad=QR_code_20241013_ALL_AppBonusingMobileLp&pid=QR_cod":"App Download"},"customData":{"1":{"not logged":1},"4":{"":1},"9":{"false":1},"10":{"us":1}},"timeLastEvent":1730274404916,"productEansAllButLastPages":{},"firstReferrerHref":"","pages":[{"keyPagesMatched":[null],"referrersMatched":[],"timestamp":1730274404916}],"localeLanguageTag":"en-US","lastActivityDate":1730274404916,"productEansLastPage":{},"timeSincePreviousVisit":0,"pageURLsVisited":{"https://all.accor.com/a/en/new-app-offer/app-download.html?source_caller=bulk&af_qr=true&shortlink=5m1nc8of&c=20241013_ALL_AppBonusingMobileLp&af_ad=QR_code_20241013_ALL_AppBonusingMobileLp&pid=QR_cod":[17302744

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5094), with no line terminators
Category:	dropped
Size (bytes):	5094
Entropy (8bit):	5.848733374118729
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUjf4m/HmONhH:1DY0hf1bT47OIqWb1Of4mvm0H
MD5:	77242677ECA667A4D25D51ED50704EAD
SHA1:	75B0F5A454FE9B30B3E403E4A1BE08080B598681
SHA-256:	D4B5F4F0645CE25A8EDF22B94CE56A70F516575549C084144EB5777AAEBA7F53
SHA-512:	3121F9C3D1F90C57F51FC443602180238D6F863D75565837139BFB2D52A451F572BBCCBB0BBDD6186AC141BF8C97E0B4A4453BB0009DABA5661BC3F8F2769D5C
Malicious:	false
Reputation:	low
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (723)
Category:	downloaded
Size (bytes):	7076
Entropy (8bit):	5.52488676121649
Encrypted:	false
SSDEEP:	192:bttd4a6O1T6ahNU3dJ+SrM0hjUYIW2WX8ISlY:bBJ1T9UNJ+SrM0lXV2WXXSlY
MD5:	88A2E0A522036C0B87E03552E56629AA
SHA1:	EC9D1157518E753A84DBDE1333A29B34CF776D63
SHA-256:	788AFB96F2DA68E8729EC35F3D5E381FAD3482D37C54C2195C7311440EE4C27E
SHA-512:	44B953878BD650FE2BCC8B6904620955C3E396B7DC8F41F85D021A8E0404DA41DB15C5499A03F7D4FE9129BB340AA3F6782942CF5327502FD4569BEBBB17073F
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/static/service_worker/4al0/sw.js?origin=https%3A%2F%2Fall.accor.com
Preview:	'use strict';var k=function(a){function b(c){return a.next(c)}function e(c){return a.throw(c)}return new Promise(function(c,d){function f(h){h.done?c(h.value):Promise.resolve(h.value).then(b,e).then(f,d)}f(a.next())})};/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var m=this\|\|self;var u,v;a:{for(var x=["CLOSURE_FLAGS"],B=m,C=0;C<x.length;C++)if(B=B[x[C]],B==null){v=null;break a}v=B}var G=v&&v[610401301];u=G!=null?G:!1;var H;const I=m.navigator;H=I?I.userAgentData\|\|null:null;function J(a){return u?H?H.brands.some(({brand:b})=>b&&b.indexOf(a)!=-1):!1:!1}function K(a){var b;a:{const e=m.navigator;if(e){const c=e.userAgent;if(c){b=c;break a}}b=""}return b.indexOf(a)!=-1};function L(){return u?!!H&&H.brands.length>0:!1}function O(){return L()?J("Chromium"):(K("Chrome")\|\|K("CriOS"))&&!(L()?0:K("Edge"))\|\|K("Silk")};!K("Android")\|\|O();O();!K("Safari")\|\|O()\|\|(L()?0:K("Coast"))\|\|(L()?0:K("Opera"))\|\|(L()?0:K("Edge"))\|\|(L()?J("Microsoft Edge"):K("Edg/"))\|\|L()&

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (35788), with CRLF line terminators
Category:	downloaded
Size (bytes):	35806
Entropy (8bit):	5.354321297607842
Encrypted:	false
SSDEEP:	768:eruQgm8+OGIdHR3rUKOevLVgaJICkv8wxpKhm:que8F5ZR3oexxm
MD5:	033CB53DBA312C88798BBA579FC68B40
SHA1:	E6A645D3E0680302789C87BABFDDF1A742C7D64A
SHA-256:	A1F8F7541A2982D7DF75F73D0234A3F2AFDC8302F361078F883D25A3A574BAE4
SHA-512:	3CB56D5756C519F72AA24FDF1AC03298CD8010FB6A429A7439A8C19BF75C9C813EB8F224C2A31ECECA53C1EF0101FD74705ADAB86E464E616A0316F5C04DB8FA
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/p/insights/s/0.7.49
Preview:	!function(){"use strict";var t=Object.freeze({__proto__:null,get queue(){return qe},get start(){return Ae},get stop(){return We},get track(){return Se}}),e=Object.freeze({__proto__:null,get clone(){return rn},get compute(){return an},get data(){return Ge},get keys(){return Ze},get reset(){return on},get start(){return en},get stop(){return cn},get trigger(){return nn},get update(){return un}}),n=Object.freeze({__proto__:null,get check(){return pn},get compute(){return vn},get data(){return Be},get start(){return fn},get stop(){return mn},get trigger(){return gn}}),r=Object.freeze({__proto__:null,get compute(){return On},get data(){return wn},get log(){return _n},get reset(){return xn},get start(){return bn},get stop(){return kn},get updates(){return yn}}),a=Object.freeze({__proto__:null,get callbacks(){return Tn},get clear(){return Cn},get consent(){return jn},get data(){return En},get id(){return In},get metadata(){return Sn},get save(){return Hn},get start(){return Nn},get stop(){ret

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/11264201385?random=1730274400383&cv=11&fst=1730274400383&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4as0v9104227775z8812226527za200zb812226527&gcd=13r3r3r3r5l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&hn=www.googleadservices.com&frm=0&tiba=App%20Download&npa=0&pscdl=noapi&auid=461077611.1730274398&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2256
Entropy (8bit):	5.4104627498225915
Encrypted:	false
SSDEEP:	48:YFise2DK2rTdle05/OIW0Vx+7JVTPFThSxkltKAUjx//oMT:AT9BW067JJ6iloAJ8
MD5:	9B3223BC7F0A61BE57BBF3E91574F184
SHA1:	1C5A8ECF6A8B72BC14E5E87FF89BE33CD0129CB3
SHA-256:	F54AC7C20CF05A0F956D1CAA843683024785202F88B1E129067855FF16D8E8E4
SHA-512:	AC4E6E2D8D84008521D0BA0B85E2D749048109D8C3CDAE09BDF99BE38B847A62C3266107FEC7B2A5D93BF88199A4CDFBBC25084B5D0B739C517177B83491A8FA
Malicious:	false
Reputation:	low
Preview:	{"currentVisit":{"conversions":{},"Geolocation":{"country":"United States","city":"Dallas","latitude":32.8167,"region":"Texas","longitude":-96.8834},"visitNumber":0,"firstReferrersIndices":[null],"pageTitleByHref":{"https://all.accor.com/a/en/new-app-offer.html":"20% more Reward points, only on our app.","https://all.accor.com/a/en/new-app-offer/app-download.html?source_caller=bulk&af_qr=true&shortlink=5m1nc8of&c=20241013_ALL_AppBonusingMobileLp&af_ad=QR_code_20241013_ALL_AppBonusingMobileLp&pid=QR_cod":"App Download"},"customData":{"1":{"not logged":1},"4":{"":2},"6":{"true":1},"7":{"true":2},"9":{"false":2},"10":{"us":2}},"timeLastEvent":1730274407901,"productEansAllButLastPages":{},"firstReferrerHref":"","pages":[{"keyPagesMatched":[null],"referrersMatched":[],"timestamp":1730274404916},{"keyPagesMatched":[null],"referrersMatched":[],"timestamp":1730274406168}],"localeLanguageTag":"en-US","lastActivityDate":1730274406168,"productEansLastPage":{},"timeSincePreviousVisit":0,"pageURL

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 512, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2057
Entropy (8bit):	7.519964311505027
Encrypted:	false
SSDEEP:	48:7/6iAiDRw3zY2zc+FgcwsHhqiGieaHwTcKaHJgPDKSkV:7Sii3yQR5QTcKCpSkV
MD5:	053C3F3706C7FBCC388A0DCD7C1E63CB
SHA1:	9B7489E68A761851E227026360CDBF727B24F86D
SHA-256:	B8F4C8FECAE36712EF07DEB5C6AA70A1D415A692BC8EEB2B0DE838C896BD5986
SHA-512:	0430278A5D7135F0EB89F5559F1869A8C6720EA49E05AD440428A9DF40244E9E046148024875AFA712325560717883AEF6790451344BB129B96FE66AD0E7960D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............$.....sRGB.........pHYs.................PLTE....................................................................}..}..\|..\|.rn.rn.d`.d`.d_.d_.VR}VQ}HDsHCsHCr:5h:5g:4h:4g,&],&\..R...4....IDATx...1JCQ.D.'~Dm,R......G../.Vc".s.q....................................................................................i..A.e~..m....c..A..H@..H@.5...Z.H@..H@.5..bK..(6..(...A.%?m.[.\...rl...9v.."k"...H@.-..bK..(.%.PlI$..H@..s....yN"..s....._...n.1.3....K$..H@.}$.Z".....h............DZ.s..H....6..O..5.mX...l...H@.}$..K$..s$....P.:....{.N...............4^.......5..!k5.=.o....:#8..13..H...p$bM....r<a1..J.....`[...-a....0n..0.`............>.O8..j.......#.......n.i......90.l.2.lc.X.3...L.J.....U#`,.....".#.ku..+ .H.Zy...5.#.z.U.<.1.....#..!v.=i..p.&.g.I..#..ex.s$b..{.#.sb.....5w(........G.8.1f.c?8.1.f7#.../-#6......6..)p..`..*,#F....'.P.XL..y....Z.H.{R...#@......f.......5n..!.X^pSF..C...ayON.6..%.v.......R......8.Q....\|.....~mQ...

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/appnexus?ttd=1&anid=3142362625563049716&ttd_tdid=6ea0385f-adb9-4a46-83a3-698c78b0a161
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	63353
Entropy (8bit):	5.403508247250149
Encrypted:	false
SSDEEP:	768:Ese3JXhZSMYifvupKW+ej38n6XrHoQ0hF:EJBgF+ej38nMr0F
MD5:	94EEB64455AC2FEC2DAAC48A5F80F468
SHA1:	AB53107FCBDC73536E396D50463706A1FD0F1885
SHA-256:	B299BEB73A789A8D7B52742818AA6CA138181937696F93189BD6051CC6DB65F2
SHA-512:	59F60BD03C0169645AA87686FF66F57657708E2B9C4B13E8A46F617C3BFBDED00F86664469A92FF2B11B66CFBCD298AF9595743CA032885DBE964627D7EF9FC2
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202409.2.0/assets/v2/otPcCenter.json
Preview:	. {. "name": "otPcCenter",. "html": "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

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (712)
Category:	downloaded
Size (bytes):	713
Entropy (8bit):	5.267941860597536
Encrypted:	false
SSDEEP:	12:IJdS2Aevsfgsp+zwoHgvkeks9sFd9zHWVflfkELagQLAJM4c/kj+w8:6s+8Q7ZTWsELaVUJM4Am+w8
MD5:	D8722C09216BEA9CF6B7AFE7E617279D
SHA1:	495D158E5CC5EDD44B97F66999CC2BE2820202D9
SHA-256:	535B8358453DD242DC45F1C627CBD3C5D71932958E650995110271AB9F6A9725
SHA-512:	D8ED598C37C5F337BAC05E8B79A42BCCA60F1A1F98A1BC565F86F4A5AC143B71A01D6689508CCE5A83C7838D69305CECA0783D2E895C02CABC45056A23BB7F73
Malicious:	false
Reputation:	low
URL:	https://all.accor.com/enroll-loyalty/assets/index-BJwiwBAj.js
Preview:	const E="ENROLL-LOYALTY",_="l7xx8785261b2a33457db88959a8679a1307",O={INVALID_PROMOCODE:"INVALID_PROMOCODE",PROMOTION_CODE_EXPIRED:"PROMOTION_CODE_EXPIRED",INVALID_PROMOTION_CODE:"INVALID_PROMOTION_CODE",PROMOTION_CODE_ALREADY_USED:"PROMOTION_CODE_ALREADY_USED",NOT_FOUND_PROMOTION_CODE:"NOT_FOUND_PROMOTION_CODE"},R={[O.INVALID_PROMOCODE]:"allplus.recap.subscription.error.discount",[O.PROMOTION_CODE_EXPIRED]:"error.codeExpired.desc",[O.INVALID_PROMOTION_CODE]:"error.codeNotValid.desc",[O.NOT_FOUND_PROMOTION_CODE]:"error.codeNotValid.desc",[O.PROMOTION_CODE_ALREADY_USED]:"error.codeAlreadyUsed.desc"},D="error",r="success",I="impervaError",s="x-accor-security";export{E,s as H,I,_ as P,r as S,D as a,R as e};.

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 260, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2821
Entropy (8bit):	7.774035735489539
Encrypted:	false
SSDEEP:	48:xi6BpRzA1WrPDJ4L4WnoOecAP3cVxb+KiUJw0:E8MYd40/Onm4Fb+0
MD5:	33DB7E58F18A5AEFD9FE80A87EC3B6CA
SHA1:	DBB65D390411C88DE5EC0A1A051FF70CA33F9E2C
SHA-256:	2D66E75FF961935E0415F5C6A2742C4E375870F2EAF0B01447A5E3364CEB9A82
SHA-512:	3B8949C2ED322314EF1A6453B58A255EA2137C40B76C96A8AE07F3A3ABEB7BDC0FFCC3381165629CF3C2EA583670531F5FD8675E9427BAC9BAE63B62C8350EF0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...P..........y......pHYs...%...%.IR$.....sRGB.........gAMA......a.....IDATx..OlTE..g..........51v..x...=...D.H...DoB... Q.'{.npP.$......S9QNbb.......}.l....^.._..'i\..>.y...Wytv..D?.7........[...X./.... r..~.BT....._..a.[.7....}............\|w~S....C..P..@..$.@..$.@..$.@..$.@..$.@..$.@..$.@..$.@..$.@..$.@..$.@..$.@..$.@..$.@..$.@..$.@..$.@..$.@..$.@..$.@..$.@..$.@..$.@..$.@..$.@..$.@.-!......&..?p.m...;..Iw..A..!g.wGG]....n..\......vW..%f.....45...~..^;r.%oye... .....t.V.....^.e.,/......&.N.?.....>C.Zb....ver......'.....gsw.A`B......7of.n......-.......5....n\|<.T...j&+nu..;......c0..z9....Z\..e-......'?.......3(.<....8.,.....j......w....Di]...F..3..c..f....`PIAi......A.4.......o.V.4.).D]..@..S/....@.p.O.R.X.S.1.]:z..OL.c/....x.17.u'^y...T.2.&....C.RRa..N.. .C.i..>0....#~...%......!}.<.(f...f>....37nd...).rr......1.....\..}..S.*.....@.T.rqi..y..K..Q.h..j TM..]1....q.M....<...w.L.j...b.Ac........,...0zc.I..E%..W.{.5..U

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7726)
Category:	dropped
Size (bytes):	334789
Entropy (8bit):	5.616727681319292
Encrypted:	false
SSDEEP:	6144:l4qOGbgBu2o6k2639cM8Gp/E2Jptu9BW24nOk:+qXcu2o68pAEn
MD5:	72A74D05CFB29B9736ACE7F64ECB867B
SHA1:	662BAD8EF8E9A916875F34C39AB073D83A1435BE
SHA-256:	E0F4E544779C04F3708F1851BAF96B12DC33AB77E2B00CBB2C6252ABAB572057
SHA-512:	AB26D9B509CC4EE43537688B0C029997D9ECB32E2356F8F228868A49D63CEAC2117E598E39A046C33AF8A22F7E8F3A165C2A9B0C69F917969E92B0062E989154
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"12",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_referral_exclusion","priority":13,"vtp_includeConditions":["list","accorhotels\\.com\|accor\\.com\|secure\\.ogone\\.com\|accor\\.webgeoservices\\.com\|paydollar\\.com\|(clk\|clk(uk\|de\|fr)\|pdt)\\.tradedoubler\\.com\|tpc\\.googlesyndication\\.com\|532\\.xg4ken\\.com\|googleads\\.g\\.doubleclick\\.net\|secure\\.przelewy24\\.pl\|sofort\\.com\|betalen\\.rabobank\\.nl\|bankieren\\.ideal\\.ing\\.nl\|abnamro\\.nl\|ideal\\.snsbank\\.nl\|sas\\.sermepa\\.es\|vcas1\\.visa\\.com\|aacs\\.amexsafekey\\.com\|epayment\\.postfinance\\.ch\|acs\\.cafis\\-paynet\\.jp\|acs\\.swisscard\\.ch\|(bred\|sg)\\.wlp\\-acs\\.com\|cap\\.attempts\\.securecode\\.com\|flyertea\\.com\|sas\\.redsys\\.es\|secure(5\|7)\\.arcot\\.com\|vbv\\.shinhancard\\.com\|yabs\\.yandex\\.ru\|vcas2\\.visa\\.com\|acs\\-safekey\\.am

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text, with very long lines (3339)
Category:	dropped
Size (bytes):	3340
Entropy (8bit):	5.218277681084811
Encrypted:	false
SSDEEP:	48:bcoE8m8AvyPq8HE8fDSp8zw2KAhsNszSf5D9S0CSJAAKtPmLgUwfokp34ePC3qsR:TE8m8kyPq8HjRsNsOsUFam0Uw1jPGYZ+
MD5:	AAF879F7DA679B4F3AF76F37973E0F73
SHA1:	E6CDC6590D06296BB4D431944A81B09933547052
SHA-256:	F3CE194984272E6C2579FDE22813C7A8FCF1CCD93A9AEC52933F24042C435777
SHA-512:	7ABA4E5253C36B9DD0A99FF3BA3EACFA1B86CA8286E03C9D8DE316AFEA373BABE0ABE994720B8702118B3D01FEADC8F9F4D546B6F5631A85C2CDB4A0CA8F3562
Malicious:	false
Reputation:	low
Preview:	import{a}from"./axios-CJFUd36b.js";import{g as E,s as R}from"./index-Czu5RiSy.js";import{E as m}from"./index-BJwiwBAj.js";import{g as y}from"./index-CB71MQO2.js";const d={name:"status",state:{icon:"error",bigHeading:"error.generic.title",paragraph:"error.generic.description",buttonText:"common.continueWithoutLogin"}},L={name:"status",state:{icon:"padlock2",bigHeading:"error.accessDenied.title",paragraph:"error.accessDenied.description",buttonText:"common.resetPassword",buttonClickHandler:"go-forgotten-password"}},U=["invalid request","unauthorized_client","access_denied","unsupported_response_typ","invalid_scope","server_error","temporarily_unavailable"],u="https://all.accor.com",k=()=>u+(f?"/enroll-loyalty/check-authent.html":"/check-authent"),A="enroll-member",h=window.self!==window.top,I=(o=window)=>{const e=["all.accor.com","secure.accor.com","ibis.accor.com","hotelf1.accor.com","mercure.accor.com","sofitel.accor.com","pullman.accor.com","novotel.accor.com","meetings.accor.com","mg

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5094), with no line terminators
Category:	downloaded
Size (bytes):	5094
Entropy (8bit):	5.846651311229747
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUPTom/HmOW:1DY0hf1bT47OIqWb1iTomvmP
MD5:	730FD6EBA84852B32760D742F5080407
SHA1:	8C272124D629A800D2557D33466ACBBC49EA4986
SHA-256:	F9AD5AE8BB3D0946F4713657C643DC4B407FAE8CE225A9ED6C77BA43E21983FA
SHA-512:	7DC4FE8F02294988F424A6845A1379010C9B638FC55B308E25D88F1AEDC518348EA76694E2C93FF5376EF4448321DFA3D6373887D158F73971C47EE86755A72B
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/11264201385/?random=1730274400383&cv=11&fst=1730274400383&bg=ffffff&guid=ON&async=1&gtm=45be4as0v9104227775z8812226527za200zb812226527&gcd=13r3r3r3r5l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&hn=www.googleadservices.com&frm=0&tiba=App%20Download&npa=0&pscdl=noapi&auid=461077611.1730274398&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 42x42, components 3
Category:	dropped
Size (bytes):	947
Entropy (8bit):	6.9347183867424205
Encrypted:	false
SSDEEP:	24:wA7Q7iw6619LlUaXrdxz3/9z9u11j2bXYNneQ:/8m6/LaaXrLzV41x8IwQ
MD5:	B029E959E3D47E8233A5341D02B03631
SHA1:	13E515AA7E362189478B23BB71189B88CF6C44BC
SHA-256:	0ED34AB4EB39E64564F455E440D75884520B9162AAC367FB60FB38A6B39E09C5
SHA-512:	2FEFB9AF706C108FFCC8589F9853320A82D4AFF6BDBAA59CEFF9EEC0555D54E166480A973F4FDA6A80AFA5960E35B70F4113520A49E9CC7C2595C90535D84C97
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................."......".$...$.6&&6>424>LDDL_Z_\|\|.............................."......".$...$.6&&6>424>LDDL_Z_\|\|.........."................................................$X...JX.U........_%.....I.........................................r..9........................................4T...../...........................2QR!1aq."..$3Ar...........?.fnM.....\.....M.?......M.?.F~+.?!..o..0!8"'....3...o...z.X..P.....rxE...s........].g.1..+4.>.9..=+.f:.........Y..r.am$..2G.U...}....H.9.c.9W..4....XR.........o1O.\......~.....J.../.x.G...e..I.].X......+..+l...R... ./M....F-....#Z\.......<w..o.........I..TL.>......x.A.P...w.LUc.~;.V.Wj.C,.TVP...KV.Xk.r...........(..R.=..d.x...{..*.o...U...W{..@..H>.....s.....@$.N....&......................1....!2AQR............?..<.l...`.Q.=Z.C....K.6.....l...T.l..k..............................!Ar..........?...cM.d}..T.?c.h....M.......$....

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 192, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1380
Entropy (8bit):	7.7493849000378745
Encrypted:	false
SSDEEP:	24:rm/6CA3gFtqohiMILjUjFRGSMHXpbb6S4sr/S1c4PP729:S/6CAgEKnAX9V4i/SXP729
MD5:	920F27DAF343C8D5A36F804A0DFA4675
SHA1:	1B7E6507373BF46051C77FD5D6BAE103CDF96BA7
SHA-256:	787F0FFADB64E978F2B99AFDD9A6F7CD5BC42B67B10A3EBF59AC07D08B673A0B
SHA-512:	33B70102376677BD27E5708989EBA30404E924BF23B9FF902350F36EDBFB9800C6FB07C80E473B6E30893690BD37FD6976AF2C67743C9F93718FED26173FF2FD
Malicious:	false
Reputation:	low
URL:	https://static-p46175-e229011.adobeaemcloud.com/b94aa70a4593f812b35d5a8922257b6f80ccf6aa708f58b8266f4ba917eb0e0e/resources/images/android-chrome-192x192.png
Preview:	.PNG........IHDR.............e..5....sRGB.........pHYs.................PLTE..................................................................}..}..\|..\|.rn.rn.d`.d_.d_.VR}VQ}HCsHCr:5h:5g:4h:4g,&],&\..R.......yIDATx...r.H......,.{+......Q........LD...MW...&~KBw.B..y..y..y..y.7..7.-:....D'..$'.../.J.8JI.5...L3\|X.H...."....I...... :A..N..@t...N.....)..$I.K...qiG......HpA.`.....2.d'H...6...Bv.. ;.O@v...6$@..6,9..Yr.#`.....&..y.e...... ....HO`.'0..,.`A...+.........h..q.,...6........'. =A&=.D\|.#=A.."...'..a.q$y.u5..kD1$.6..u...z.d'.`.D'..g..l...m....i.....$..{...j..........#.X\|.+....S.5..b..YH.l..&.7,.p.J\.'..%...\|.iK....\O([..2z.....?Az.........9Adq.W.`...+.{.(A..n.\}....Eo...........V;....olK..h.`?..(...!".l....m.U..!.-...K.Mt.3.$...xEG..lYt.3\|...l.tx1.....U.....0..^.?...%*.\.........Y..?A.Z.4.....v.y.r.0oX"..S..;.%W.z...d#.F.......G3.hB'S........N.K...cH....$.\|...PDhFD4.q......h4;;>.!}....4...O.=..nwy~....;........;.s1x...h.;...kDOhE.9X..-......

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/11264012497?random=1730274400127&cv=11&fst=1730274400127&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4as0v9104227775z8812226527za200zb812226527&gcd=13r3r3r3r5l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&hn=www.googleadservices.com&frm=0&tiba=App%20Download&npa=0&pscdl=noapi&auid=461077611.1730274398&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (55878)
Category:	dropped
Size (bytes):	55905
Entropy (8bit):	5.5030810564571775
Encrypted:	false
SSDEEP:	1536:lfX+ppXnzc4szV3KbCNzfiWKPxd46Ck9kcH/Y:1XgCVHeJHw
MD5:	F1503A82895D5C490235A5DFF0C93DAD
SHA1:	7CE96C3E6A222431031B49B35E2E292EF6D0E62D
SHA-256:	FFAF3B7F34955E1C40B72CAB3F9C84A08869774C525B76CBCA16DC4B08593B08
SHA-512:	50A3F8780429E3AABBE88E67FEA0DEB8D0C431014389C2C9911E2A7C2D58F554BF622D636256D910F003EFB5C681EC3B5B6D7E4555E1E0379E0E1545203776F5
Malicious:	false
Reputation:	low
Preview:	/** Snapchat Pixel SDK */.!function(){"use strict";var t=function(){return t=Object.assign\|\|function(t){for(var n,r=1,e=arguments.length;r<e;r++)for(var i in n=arguments[r])Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i]);return t},t.apply(this,arguments)};function n(t,n,r,e){return new(r\|\|(r=Promise))((function(i,o){function a(t){try{u(e.next(t))}catch(t){o(t)}}function c(t){try{u(e.throw(t))}catch(t){o(t)}}function u(t){var n;t.done?i(t.value):(n=t.value,n instanceof r?n:new r((function(t){t(n)}))).then(a,c)}u((e=e.apply(t,n\|\|[])).next())}))}function r(t,n){var r,e,i,o,a={label:0,sent:function(){if(1&i[0])throw i[1];return i[1]},trys:[],ops:[]};return o={next:c(0),throw:c(1),return:c(2)},"function"==typeof Symbol&&(o[Symbol.iterator]=function(){return this}),o;function c(c){return function(u){return function(c){if(r)throw new TypeError("Generator is already executing.");for(;o&&(o=0,c[0]&&(a=0)),a;)try{if(r=1,e&&(i=2&c[0]?e.return:c[0]?e.throw\|\|((i=e.return)&&i.call(e),0):e.nex

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17698), with no line terminators
Category:	dropped
Size (bytes):	17698
Entropy (8bit):	5.330321951477942
Encrypted:	false
SSDEEP:	384:I/Q66A4xo1rjYKha4BMoxojIjZRDv021Kudq89UfnlYwNjtBkb4hVc:I/oA4xMYKha4BCItRD821KOz9SHNjtBk
MD5:	B16C2631B3B4D5AFBFE9589A84DA4916
SHA1:	DE919F2B0D93A7B2DEA7D6FC6A52BB95AD16A617
SHA-256:	487B5C89F3869C78CC95737CA7F38873FDD764730ECD0C8CB67D925037188480
SHA-512:	00140ADD52DCE55669B2C780B962EAF472BAB1E2F54877681AE0F1507520143BE9AB8A06693B0622413F677312D736227F1EB9431AC0D8225F6AEC4448AEC4BF
Malicious:	false
Reputation:	low
Preview:	(()=>{"use strict";const n="6.21.0_ad40570",t="https://t.teads.tv/track",e="https://cm.teads.tv/v2/advertiser",o="https://cm.teads.tv/v3/conversion",i="tag",a="js-web",c="js-gtm";let r=!1;const d=Date.now();function s(){return window.advertiser_domain}function l(){return window.teads_buyer_pixel_id}function u(){return!0===window.teads_post_message_event_to_opener}function p(){return!0===window.teads_post_message_event_to_window}function w(n){window.teads_iab_consent_data=n}function _(){return window.teads_iab_consent_data}function v(n){window.teads_usp_consent_data=n}function f(){return window.teads_usp_consent_data}function g(){return window.teads_gdpr_advertiser}function m(){return window.teads_ccpa_advertiser}function y(){return!0===window.teads_tracking_allowed}function I(n){window.teads_auction_id=n}function h(){return window.teads_auction_id}function E(n){const t=window.teads_auction_id_forwarded_by\|\|{};t[n]=!0,window.teads_auction_id_forwarded_by=t}function k(n){window.teads_ses

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4630
Entropy (8bit):	4.98086705609424
Encrypted:	false
SSDEEP:	96:opyIx40wROuqppuVKG96AyzVM35ZjDvj2jJjFZZ2Pmw8A:+4QJppq6vK355DLCJpQmhA
MD5:	0C5DB3925D605F5530D84E6006FE1AD8
SHA1:	E0369BBDF4678FF57735B9433B9B6C9CAC047FAC
SHA-256:	055CC2D1310E267F3BDDBC2B3255396F6172F7021CB77E9C5DD5B327FC7E3067
SHA-512:	0ED9491FF5F1FC05B56859009F13515F87B89FEE98463E174A70B70098EC9885DAE68AE1FB89E087588420AC22CC8C5001D2FF4A2EE20F06FF791676721B759E
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/consent/87c4fef0-8732-44e4-bee3-f4faa4ce5a9d/87c4fef0-8732-44e4-bee3-f4faa4ce5a9d.json
Preview:	{"CookieSPAEnabled":true,"CookieSameSiteNoneEnabled":false,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202409.2.0","OptanonDataJSON":"87c4fef0-8732-44e4-bee3-f4faa4ce5a9d","GeolocationUrl":"https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location","BulkDomainCheckUrl":"https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck","RuleSet":[{"Id":"0191bc5d-3041-7ee1-aa71-d0571a78bb77","Name":"GDPR Template - ALL+Brands+B2B+Restos+AptVillas","Countries":["pr","ps","pw","py","qa","ad","af","ag","ai","al","am","ao","aq","ar","as","aw","az","ba","bb","rs","bd","ru","bf","rw","bh","bi","bj","bl","bm","bn","bo","sa","bq","sb","sc","br","sd","bs","bt","sg","bv","sh","bw","sj","by","bz","sl","sn","so","sr","ss","cc","st","cd","cf","sv","cg","sx","ch","ci","sy","sz","ck","cl","cm","cn","co","cr","tc","td","cu","tf","cv","tg","th","cw","cx","tj","tk","tl","tm","tn","to","tr","

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5093), with no line terminators
Category:	downloaded
Size (bytes):	5093
Entropy (8bit):	5.850450548297649
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUxA6m/HmODH:1DY0hf1bT47OIqWb1sA6mvm4
MD5:	B7D0AE037EEE3191B56A8929E198438E
SHA1:	19591109B8403312BC5A7B6960A2531429969731
SHA-256:	9E714EF05A749ECA2B3A94D218E005332931C2136EF49708E2239D3F0858B30F
SHA-512:	CC4D87F3E3F70372A603493C62C3DD6C872EE2642134E5A42911BC41417F4756E33C7C840DF6323C9629B8594A64D68F7C43C5925C082DF23146D451E083FAFC
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/11264275592/?random=1730274400316&cv=11&fst=1730274400316&bg=ffffff&guid=ON&async=1&gtm=45be4as0v9104227775z8812226527za200zb812226527&gcd=13r3r3r3r5l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&hn=www.googleadservices.com&frm=0&tiba=App%20Download&npa=0&pscdl=noapi&auid=461077611.1730274398&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (565)
Category:	dropped
Size (bytes):	32707
Entropy (8bit):	5.285111549518646
Encrypted:	false
SSDEEP:	768:81CFCetAUWHSfPAV2wC4LESx+VK6Iku3ifyA/gqoyEVlR:xLfPPwC4LEScIj3ifyQgqoBVlR
MD5:	BF921AF342FD2C40139671DBF0920A1F
SHA1:	C3CA18AD7AEC35192414A342CF2F88A61FD9EBF5
SHA-256:	B4FD432B0CD46263E46623622211CD79368F7E267AFD963D78F2216480D8E568
SHA-512:	AECD1CD2369B3A9C3129D75D073F65FFBA552A4696FAA38C717570298A70F2A7A0CB10EF94E7213E0628C76D6F2A7A3A7A789656A34F13B906375372F2F9F1C0
Malicious:	false
Reputation:	low
Preview:	function _slicedToArray(t,e){return _arrayWithHoles(t)\|\|_iterableToArrayLimit(t,e)\|\|_unsupportedIterableToArray(t,e)\|\|_nonIterableRest()}function _nonIterableRest(){throw new TypeError("Invalid attempt to destructure non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.");}.function _iterableToArrayLimit(t,e){if("undefined"!=typeof Symbol&&Symbol.iterator in Object(t)){var n=[],r=!0,o=!1,a=void 0;try{for(var i,u=t[Symbol.iterator]();!(r=(i=u.next()).done)&&(n.push(i.value),!e\|\|n.length!==e);r=!0);}catch(t){o=!0,a=t}finally{try{r\|\|null==u.return\|\|u.return()}finally{if(o)throw a;}}return n}}function _arrayWithHoles(t){if(Array.isArray(t))return t}.function _createForOfIteratorHelper(t){if("undefined"==typeof Symbol\|\|null==t[Symbol.iterator]){if(Array.isArray(t)\|\|(t=_unsupportedIterableToArray(t))){var e=0,n=function(){};return{s:n,n:function(){return e>=t.length?{done:!0}:{done:!1,value:t[e++]}},e:function(t){throw t;},f:n}}throw new T

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	91
Entropy (8bit):	4.150183722821492
Encrypted:	false
SSDEEP:	3:YEBjX22HWnJzWLKjUSHJvjHQn:YElyULA1Hdjwn
MD5:	C92FC925695AE7223A4386A5BA02C2C1
SHA1:	229B2D3C0AF5AE082DBA0F41BBC249386D55B1EA
SHA-256:	52EFEC17A3DF8AAEEC9711B8B6821FF3185B90CDC87507BEAE7CCE8F309234E8
SHA-512:	9925314BEEC2AF2134817A1644667C54C54A5BC57068AD5E8841C4525112AEAE1695BC0E330976FECC648773DA41B45B06EED5FF85F63E20AB4B8C590DC71A98
Malicious:	false
Reputation:	low
Preview:	{"asc":[],"gw":null,"a":[],"ipg":"1","b":[],"t":"","v":"3.7.5-2401032347","tpd":[],"ec":[]}

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 63052, version 1.0
Category:	downloaded
Size (bytes):	63052
Entropy (8bit):	6.1255024636853275
Encrypted:	false
SSDEEP:	1536:rQ8wDmcG//tZeOsErtejSLgoFhniit8z4ydHkJ:rfcGXeOsErteGLvFhnbizfk
MD5:	6139E274EDDE27C66D311E692F2D1350
SHA1:	27DE1D3A30970A0EF9C0D991B41F49190FCDA20B
SHA-256:	706D500978DA7B6EAB0889E216A7E9EA1812CF450DD110542B0565814BB01BC7
SHA-512:	6BE7BBAF5FDEE17682B0074D603BB2185699C37C6D1DB080B4F358A39E182C936E8A4BE6F37D8A7046EB2C5BB687E263BCA99E518904FAC968587AFBA4EBA8EA
Malicious:	false
Reputation:	low
URL:	https://static-p46175-e229011.adobeaemcloud.com/b94aa70a4593f812b35d5a8922257b6f80ccf6aa708f58b8266f4ba917eb0e0e/resources/fonts/icomoon.woff
Preview:	wOFF.......L................................OS/2.......`...`....cmap...h...T...T.V.Xgasp................glyf.......\...\...head... ...6...6._R.hhea...X...$...$....hmtx...\|...X...XL..Iloca................maxp...... ... ....name.............J..post...,... ... ...............................3...................................@.........@...@............... .................................8............. ........... ................................................79..................79..................79.........@...@...=.Z..."............327>.7654'..'&.532654&+.".....;.2654&+.532654&+........#"'..'&547>.7632........PFEi....iFFOPFEi....hFF.................k....k....]?>GG?>]....]?>GG?>]...@..iFFOPFEi....iFEPPEFi.........................G>?]....]?>GG?>]....]>?G...+.......+.6...>.'..+.'..#&...#"............326?...27>./.7.3..'.7'37........../.....+.......x+.........ww......+t.TB.C@.@S.....................Y........VV......].5K/.L0JG.....A...@.).....+.'..#1"...#"...........2?...27>.5'7>.5....

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/11264198074?random=1730274400575&cv=11&fst=1730274400575&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4as0v9104227775z8812226527za200zb812226527&gcd=13r3r3r3r5l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&hn=www.googleadservices.com&frm=0&tiba=App%20Download&npa=0&pscdl=noapi&auid=461077611.1730274398&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (63937), with no line terminators
Category:	downloaded
Size (bytes):	63937
Entropy (8bit):	5.62926828914818
Encrypted:	false
SSDEEP:	1536:En1JGCsVOEsoXIf0RkhWlmAiWWN+7p/ZTQxxieV4+ArCKxZsQYizxzwmv8K/MsIP:En1qSWg/sQN
MD5:	7CC3BFC36BF4910C04E6C13A0A914508
SHA1:	F93CA2B21C67D5CB11B7FDDF942F2F2BB62EB751
SHA-256:	31E75F6A089FBF26AA59E89D56420A32B96B6950CBAE8269F47EE40D41F71AEC
SHA-512:	F1CC2C78C59F126BB17AD02FC0A7C98912B184482EB8D88C8694967AC1C1FC2F1482956901DC6B38019CC580892B903EF0F89D52A9F84EA2641AD8349268DFB9
Malicious:	false
Reputation:	low
URL:	https://via.batch.com/3.5.0/alert.min.js
Preview:	(()=>{var __webpack_modules__={2:(__unused_webpack_module,__webpack_exports__,__webpack_require__)=>{"use strict";__webpack_require__.r(__webpack_exports__),__webpack_require__.d(__webpack_exports__,{SDK_API_LVL:()=>SDK_API_LVL,SDK_VERSION:()=>SDK_VERSION,SDK_MAJOR_VERSION:()=>SDK_MAJOR_VERSION,SDK_DISMISS_NOTIF_AFTER:()=>SDK_DISMISS_NOTIF_AFTER,RETRY_MAX_ATTEMPTS:()=>RETRY_MAX_ATTEMPTS,RETRY_MIN_INTERVAL_MS:()=>RETRY_MIN_INTERVAL_MS,SSL_SCRIPT_URL:()=>SSL_SCRIPT_URL,WS_URL:()=>WS_URL,SAFARI_WS_URL:()=>SAFARI_WS_URL,ICONS_URL:()=>ICONS_URL,IS_DEV:()=>IS_DEV,IS_TEST:()=>IS_TEST,IS_WEBPACK_DEV_SERVER:()=>IS_WEBPACK_DEV_SERVER});const SDK_API_LVL="1",SDK_VERSION="3.5.0",SDK_MAJOR_VERSION="3",SDK_DISMISS_NOTIF_AFTER=30,RETRY_MAX_ATTEMPTS=3,RETRY_MIN_INTERVAL_MS=1e3,SSL_SCRIPT_URL="via.batch.com",WS_URL="https://ws.batch.com/web",SAFARI_WS_URL="https://safari-ws.batch.com",ICONS_URL="https://icons.batch.com",IS_DEV=!1,IS_TEST=!1,IS_WEBPACK_DEV_SERVER=!1},74:(__unused_webpack_module,__webpac

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 512, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2057
Entropy (8bit):	7.519964311505027
Encrypted:	false
SSDEEP:	48:7/6iAiDRw3zY2zc+FgcwsHhqiGieaHwTcKaHJgPDKSkV:7Sii3yQR5QTcKCpSkV
MD5:	053C3F3706C7FBCC388A0DCD7C1E63CB
SHA1:	9B7489E68A761851E227026360CDBF727B24F86D
SHA-256:	B8F4C8FECAE36712EF07DEB5C6AA70A1D415A692BC8EEB2B0DE838C896BD5986
SHA-512:	0430278A5D7135F0EB89F5559F1869A8C6720EA49E05AD440428A9DF40244E9E046148024875AFA712325560717883AEF6790451344BB129B96FE66AD0E7960D
Malicious:	false
Reputation:	low
URL:	https://static-p46175-e229011.adobeaemcloud.com/b94aa70a4593f812b35d5a8922257b6f80ccf6aa708f58b8266f4ba917eb0e0e/resources/images/android-chrome-512x512.png
Preview:	.PNG........IHDR..............$.....sRGB.........pHYs.................PLTE....................................................................}..}..\|..\|.rn.rn.d`.d`.d_.d_.VR}VQ}HDsHCsHCr:5h:5g:4h:4g,&],&\..R...4....IDATx...1JCQ.D.'~Dm,R......G../.Vc".s.q....................................................................................i..A.e~..m....c..A..H@..H@.5...Z.H@..H@.5..bK..(6..(...A.%?m.[.\...rl...9v.."k"...H@.-..bK..(.%.PlI$..H@..s....yN"..s....._...n.1.3....K$..H@.}$.Z".....h............DZ.s..H....6..O..5.mX...l...H@.}$..K$..s$....P.:....{.N...............4^.......5..!k5.=.o....:#8..13..H...p$bM....r<a1..J.....`[...-a....0n..0.`............>.O8..j.......#.......n.i......90.l.2.lc.X.3...L.J.....U#`,.....".#.ku..+ .H.Zy...5.#.z.U.<.1.....#..!v.=i..p.&.g.I..#..ex.s$b..{.#.sb.....5w(........G.8.1f.c?8.1.f7#.../-#6......6..)p..`..*,#F....'.P.XL..y....Z.H.{R...#@......f.......5n..!.X^pSF..C...ayON.6..%.v.......R......8.Q....\|.....~mQ...

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (568), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	130484
Entropy (8bit):	5.146377855970609
Encrypted:	false
SSDEEP:	1536:bpJM+ORxrG5po2vl/UNo4gmaK1HqnlsXM+lqXxze2Vg2dHY78nHupf/e+lea7rK8:Zl/UNonmjVveQ9
MD5:	DC53BA70AF3F84B4508BFEDF8F828D16
SHA1:	599E1FB91C892BCB5A3F955B495D5B2B21CB70C9
SHA-256:	0C19C558ADE5A8C516F87AC45A949FA85E9B8ADA4FFE2970B9CFD22F3E450DC1
SHA-512:	4CFD1AA9D127E12D04C32BE9A6991DDB9891D24C29F8C072D49D9A7D0A30CFB3A6E672F600FBECAF7B38B28B066246DE269458A5DC545E66A51501EBD60A478F
Malicious:	false
Reputation:	low
URL:	https://all.accor.com/a/en/new-app-offer.html
Preview:	<!DOCTYPE HTML>.<html lang="en">.. <head>.. <meta charset="UTF-8"/>. <title>20% more Reward points, only on our app.</title>.. <meta name="keywords" content="Member"/>. <meta name="description" content="Book and stay by June 30, 2025!"/>. <meta name="template" content="app-offer-v2"/>. <meta name="viewport" content="width=device-width, initial-scale=1"/>. .. .. . . <meta property="og:site_name" content="all.accor.com"/>. <meta property="og:type" content="website"/>. <meta property="og:title" content="20% more Reward points, only on our app."/>. <meta property="og:description" content="Book and stay by June 30, 2025!"/>. <meta property="og:url" content="https://all.accor.com/a/en/new-app-offer.html"/>. . <meta property="og:image" content="https://m.ahstatic.com/is/image/accorhotels/KV%202_6000x4000"/>. .. .. <meta name="twitter:card" content="summary_large_image"/>. <meta name="twitter:site" content="@all"/>.

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2342)
Category:	dropped
Size (bytes):	2388
Entropy (8bit):	5.1107664096025704
Encrypted:	false
SSDEEP:	48:/CpDuMY6wRQAQl07kJaQLJwSjwS5C2KiSKSy54yLdkoaQkNfb8:/snIQwSkSw2KiSKSyVZkHb8
MD5:	2FD3C957537A54477EB62A2747DCAECC
SHA1:	DC263B0C24F43AF9E13D1118E98230C40976B704
SHA-256:	BAAC356600689BF9EBF33BA38E4AFA9C59252B9DA911EE5C72D3CF5D0AB055A4
SHA-512:	B106FD9BBCBE21099A4B035E1378044BA30081FA18D20D295BE6B9C866B727D0C845BE235C8F402B8B55A6D2BED8CF688AE2D8B2A796953F9862719F4D7B0812
Malicious:	false
Reputation:	low
Preview:	!function(e){var t={};function n(o){if(t[o])return t[o].exports;var r=t[o]={i:o,l:!1,exports:{}};return e[o].call(r.exports,r,r.exports,n),r.l=!0,r.exports}n.m=e,n.c=t,n.d=function(e,t,o){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:o})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var o=Object.create(null);if(n.r(o),Object.defineProperty(o,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)n.d(o,r,function(t){return e[t]}.bind(null,r));return o},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s=391)}({319:function(e,t){document.addEventListener("DOMContentLoaded",function(){let e=docume

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (55203), with LF, NEL line terminators
Category:	dropped
Size (bytes):	1869630
Entropy (8bit):	5.551491651269418
Encrypted:	false
SSDEEP:	24576:Xthu1thuCkk8NeZKedlTi9Y1Vh+Dkp9FN+EY:Xt6t7kk8NeZKedlTi9Y1Vh+Dkp9FNtY
MD5:	9F859DEE35CBC68E50126DA427041AEA
SHA1:	3CB309C3ABCD54574E602C14899D6E4494D1B0F7
SHA-256:	B867BEA8957E78F1CB97BBA378187B00ED924B8441AF43C6821B59C4D1AC23EA
SHA-512:	0DE64A478B4DBBBA0E3EB4ADCAD51AAE02F80FE4C263BD3AB237E264376E6D2390ABF0D8A204BDC7CF680A43EABDA477A6DDECBF7E013D972089610378104958
Malicious:	false
Reputation:	low
Preview:	!function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)n.d(r,o,function(t){return e[t]}.bind(null,o));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s=368)}([function(e,t,n){"use strict";function r(e,t,n,r,o,i,a,s){var c,u="function"==typeof e?

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4630
Entropy (8bit):	4.98086705609424
Encrypted:	false
SSDEEP:	96:opyIx40wROuqppuVKG96AyzVM35ZjDvj2jJjFZZ2Pmw8A:+4QJppq6vK355DLCJpQmhA
MD5:	0C5DB3925D605F5530D84E6006FE1AD8
SHA1:	E0369BBDF4678FF57735B9433B9B6C9CAC047FAC
SHA-256:	055CC2D1310E267F3BDDBC2B3255396F6172F7021CB77E9C5DD5B327FC7E3067
SHA-512:	0ED9491FF5F1FC05B56859009F13515F87B89FEE98463E174A70B70098EC9885DAE68AE1FB89E087588420AC22CC8C5001D2FF4A2EE20F06FF791676721B759E
Malicious:	false
Reputation:	low
Preview:	{"CookieSPAEnabled":true,"CookieSameSiteNoneEnabled":false,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202409.2.0","OptanonDataJSON":"87c4fef0-8732-44e4-bee3-f4faa4ce5a9d","GeolocationUrl":"https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location","BulkDomainCheckUrl":"https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck","RuleSet":[{"Id":"0191bc5d-3041-7ee1-aa71-d0571a78bb77","Name":"GDPR Template - ALL+Brands+B2B+Restos+AptVillas","Countries":["pr","ps","pw","py","qa","ad","af","ag","ai","al","am","ao","aq","ar","as","aw","az","ba","bb","rs","bd","ru","bf","rw","bh","bi","bj","bl","bm","bn","bo","sa","bq","sb","sc","br","sd","bs","bt","sg","bv","sh","bw","sj","by","bz","sl","sn","so","sr","ss","cc","st","cd","cf","sv","cg","sx","ch","ci","sy","sz","ck","cl","cm","cn","co","cr","tc","td","cu","tf","cv","tg","th","cw","cx","tj","tk","tl","tm","tn","to","tr","

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (55878)
Category:	downloaded
Size (bytes):	55905
Entropy (8bit):	5.5030810564571775
Encrypted:	false
SSDEEP:	1536:lfX+ppXnzc4szV3KbCNzfiWKPxd46Ck9kcH/Y:1XgCVHeJHw
MD5:	F1503A82895D5C490235A5DFF0C93DAD
SHA1:	7CE96C3E6A222431031B49B35E2E292EF6D0E62D
SHA-256:	FFAF3B7F34955E1C40B72CAB3F9C84A08869774C525B76CBCA16DC4B08593B08
SHA-512:	50A3F8780429E3AABBE88E67FEA0DEB8D0C431014389C2C9911E2A7C2D58F554BF622D636256D910F003EFB5C681EC3B5B6D7E4555E1E0379E0E1545203776F5
Malicious:	false
Reputation:	low
URL:	https://sc-static.net/scevent.min.js
Preview:	/** Snapchat Pixel SDK */.!function(){"use strict";var t=function(){return t=Object.assign\|\|function(t){for(var n,r=1,e=arguments.length;r<e;r++)for(var i in n=arguments[r])Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i]);return t},t.apply(this,arguments)};function n(t,n,r,e){return new(r\|\|(r=Promise))((function(i,o){function a(t){try{u(e.next(t))}catch(t){o(t)}}function c(t){try{u(e.throw(t))}catch(t){o(t)}}function u(t){var n;t.done?i(t.value):(n=t.value,n instanceof r?n:new r((function(t){t(n)}))).then(a,c)}u((e=e.apply(t,n\|\|[])).next())}))}function r(t,n){var r,e,i,o,a={label:0,sent:function(){if(1&i[0])throw i[1];return i[1]},trys:[],ops:[]};return o={next:c(0),throw:c(1),return:c(2)},"function"==typeof Symbol&&(o[Symbol.iterator]=function(){return this}),o;function c(c){return function(u){return function(c){if(r)throw new TypeError("Generator is already executing.");for(;o&&(o=0,c[0]&&(a=0)),a;)try{if(r=1,e&&(i=2&c[0]?e.return:c[0]?e.throw\|\|((i=e.return)&&i.call(e),0):e.nex

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1363x524, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	14294
Entropy (8bit):	7.9637733493343665
Encrypted:	false
SSDEEP:	192:PbaARgB4VEiIr34GfHU3/9B9swBDcH1O4ktL6Vm77KpstwcKsrtrm01kBB:zabie4UHUlXBwH1fmGSKpsdqTT
MD5:	7D04CB13C70DF009892DC03B01E9885F
SHA1:	8DCFCC113B2A9681AEFB8F880AB1B31FE2B22915
SHA-256:	20FA487F25AE7597B7E07B682F3580E0AD766AC5B93F2731ECDE504CD0DA6078
SHA-512:	C915C3832F490EE3FD6C2F88F44C56293631EFA0EA7832073297CC159EA0FDCE2A087EB9955E2FB6A7177FB33FA2B8DEFED56988D1572FAB21DEA915348F83D6
Malicious:	false
Reputation:	low
URL:	"https://m.ahstatic.com/is/image/accorhotels/qr-code-app-download-en:13by5?fmt=webp&op_usm=1.75,0.3,2,0&resMode=sharp2&iccEmbed=true&icc=sRGB&dpr=on,1&wid=1363&hei=524&qlt=80"
Preview:	RIFF.7..WEBPVP8 .7.......S...>m6.I.".. .)8...in......oi.L...Q..z...z..6.Q....._._.?............p.u.g...~M~.......@.....u...I.].........Y.........G._....i.....q.C....../...t...V}_./._.>.}........o...o.?....O.......%~....g.......'..........'.W.......\|..-...#...O._.....v....~.....iiwCL.iiwCL.i8#LJ.Z].....z....k..<4..@.....-.......@.'..)...S....GRuwCL.iiwCL.iiwCL.iiwCL.iiwB...".P.Y."y.}.<.B..6..s..Hb..3.\.\|...(T.]..P.~o.7.......k,....B....fPe..f........"......l.$_vI.(.V.......H%.../...>.^o......1............q....X...4u'Wt4...t4...t4...t4...t)u....`r..;.r....G.X.P.tv....E......0..3.B.e......NsB...-O`xw.y2.=......wa.\|4....\|4....\|4....\|4....q..=V.J..\a....P".s..&L..?.=oE..._dt.%%..(.....Tt...J......;C+C...?......x1..S......;.~3.itQ~..\|....Pjy....T...WV.:....g.KK..g.KK..g.KK.T.]Q$`).=4+.d.n....q8...'<+F6y.#...H6..QC.......\|..1FS7..q..../.1Kpl.....J.S}..=+.D.#....Q$..=.[E.....bR..i{...X.......E..vO5$.k...1..(.m.^y...?.w.Zb..`/...P......t9G.k.Y$).

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5094), with no line terminators
Category:	dropped
Size (bytes):	5094
Entropy (8bit):	5.847413342410262
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUQIl8m/HmOIJ:1DY0hf1bT47OIqWb1JIl8mvmf
MD5:	6F17701EE91922B741CA5B6B59717574
SHA1:	AE8162BD118F82EB0172D83C8567F078C02A3CF4
SHA-256:	D0B8281DF95497A3513D46120D11C2960FDF5A6A056898406FFBB72C04F0CD37
SHA-512:	62997DABE45C4E13C94BEF2DCE6B97FE1019919D147A8481917C43D0ECC25DBDE99281D297D465B8BFA32A7AAC5C334F51BD98CE462E71E2C7921D45B81F6205
Malicious:	false
Reputation:	low
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	165741
Entropy (8bit):	5.3767398244895945
Encrypted:	false
SSDEEP:	3072:QcnZMgUoWAv91HVo7eXOKRhDYdw3caozUx6Ai6:ZnOgUBO7o7aOKRIarD
MD5:	58C179E779A50DA09E2A055B2298080D
SHA1:	2E52BC10CAA48B235AAB679BC77B30BEBC3759B4
SHA-256:	5F5CB4EE3D7F552C735007B4A667FF107E2EB7E4EFBDA791502FA40CDE3E3AC1
SHA-512:	BF00330F908E0B1FF19373AF9425893BA7FAE6082F185280721029BCD3EEF79066B8C9FE414B9D6327973382D75DC02EF5668379792D8DB6C7A78C82C972A751
Malicious:	false
Reputation:	low
Preview:	(()=>{"use strict";var __webpack_modules__=[,(__unused_webpack_module,__webpack_exports__,__webpack_require__)=>{let Browser,Platform;__webpack_require__.r(__webpack_exports__),__webpack_require__.d(__webpack_exports__,{Browser:()=>Browser,Platform:()=>Platform,UserAgent:()=>UserAgent,default:()=>__WEBPACK_DEFAULT_EXPORT__}),function(Browser){Browser[Browser.Unknown=0]="Unknown",Browser[Browser.Generic=1]="Generic",Browser[Browser.Chrome=2]="Chrome",Browser[Browser.Firefox=3]="Firefox",Browser[Browser.Safari=4]="Safari"}(Browser\|\|(Browser={})),function(Platform){Platform[Platform.Unknown=0]="Unknown",Platform[Platform.GenericDesktop=1]="GenericDesktop",Platform[Platform.GenericMobile=2]="GenericMobile",Platform[Platform.IOS=3]="IOS",Platform[Platform.Android=4]="Android",Platform[Platform.MacOS=5]="MacOS",Platform[Platform.Windows=6]="Windows",Platform[Platform.Linux=7]="Linux"}(Platform\|\|(Platform={}));class UserAgent{constructor(userAgentString){let platform=arguments.length>1&&void

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (51384), with no line terminators
Category:	dropped
Size (bytes):	51385
Entropy (8bit):	5.293328685395304
Encrypted:	false
SSDEEP:	768:IaOFhhRC5JFhLjfRysgLzQynDw5YyDMFW8KQ:IaOFnR2DRszQKaoWtQ
MD5:	6626C1362840EBFC8F48294E8F023E18
SHA1:	4EC0DFB37C3E536C1B5EC04B68C9846FDBAF9EEF
SHA-256:	AABC88A6DB8B22022F96CA88E4F0A7BE426ABEF2B35169A71515A2D55246402A
SHA-512:	B037A19B52C1047198EC7F19E99066054E454964380E2354239834260D11248E617D6759B944DDF39A25B883C8F430603D8E13097396E2DEDA9BB6905C1CD42A
Malicious:	false
Reputation:	low
Preview:	function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0,enforced:!1};this.uetConfig.tcf={enabled:!1,vendorId:1126,hasLoaded:!1,timeoutId:null,gdprApplies:undefined,adStorageAllowed:undefined,measurementAllowed:undefined,personalizationAllowed:undefined};this.uetConfig.cusig={hasLoaded:!1,timeoutId:null,blob:{}};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",digits:0,max:999999999999},hct_los:{type:"num",digits:0,max:30},date:{type:"regex",

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2342)
Category:	downloaded
Size (bytes):	2388
Entropy (8bit):	5.1107664096025704
Encrypted:	false
SSDEEP:	48:/CpDuMY6wRQAQl07kJaQLJwSjwS5C2KiSKSy54yLdkoaQkNfb8:/snIQwSkSw2KiSKSyVZkHb8
MD5:	2FD3C957537A54477EB62A2747DCAECC
SHA1:	DC263B0C24F43AF9E13D1118E98230C40976B704
SHA-256:	BAAC356600689BF9EBF33BA38E4AFA9C59252B9DA911EE5C72D3CF5D0AB055A4
SHA-512:	B106FD9BBCBE21099A4B035E1378044BA30081FA18D20D295BE6B9C866B727D0C845BE235C8F402B8B55A6D2BED8CF688AE2D8B2A796953F9862719F4D7B0812
Malicious:	false
Reputation:	low
URL:	https://all.accor.com/scripts/main-footer-light.js
Preview:	!function(e){var t={};function n(o){if(t[o])return t[o].exports;var r=t[o]={i:o,l:!1,exports:{}};return e[o].call(r.exports,r,r.exports,n),r.l=!0,r.exports}n.m=e,n.c=t,n.d=function(e,t,o){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:o})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var o=Object.create(null);if(n.r(o),Object.defineProperty(o,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)n.d(o,r,function(t){return e[t]}.bind(null,r));return o},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s=391)}({319:function(e,t){document.addEventListener("DOMContentLoaded",function(){let e=docume

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	362
Entropy (8bit):	4.415194148204812
Encrypted:	false
SSDEEP:	6:tI9mc4sl3eRI02GBXLqPpVVb/+drSfV+jVIRuRIY5KKtKoBdCL6CUu6xFmd9+i:t41eq0l1LqPHMQf8+uqsXB+6XuUmd93
MD5:	076C1AE62C0E5366C2E1DF428E334699
SHA1:	FCF9DDD8C136BC16B62363B4B4AB24F38ABD7234
SHA-256:	D52BF614639F4228C27AA14518D1FF5AD189B61CC7D2301A5FD3F7B56F7B5BE6
SHA-512:	D82074C0D27665AEF94CA6525614B9F7A64F2123F467F0F628D1C801B8C759DEC32918EFB42D10F6038EA0A730C0714305781D32E80133612D966F924BFBEB44
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24">. <path d="m15.87 8.56-5.51 5.51-2.29-2.28a.74.74 0 0 0-1.06 0 .75.75 0 0 0 0 1.06l2.82 2.81a.75.75 0 0 0 1.06 0l6-6a.77.77 0 0 0 0-1.07.75.75 0 0 0-1.02-.03Z"/>. <path d="M12 3.08A8.92 8.92 0 1 0 20.92 12 8.93 8.93 0 0 0 12 3.08Zm0 16.34A7.42 7.42 0 1 1 19.42 12 7.43 7.43 0 0 1 12 19.42Z"/>.</svg>.

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6575
Entropy (8bit):	7.868780505476325
Encrypted:	false
SSDEEP:	192:bLP0HRfcFnhUs0K5w43th5TBYKnyT/uauf0E:n8Hts0aLf5tYKnyT/2f0E
MD5:	2A44346B1C8EBD9F77E80243EAC1F4CA
SHA1:	5BBE6D806AF2E0AE9E61BA0CF92281B0D7FBDB91
SHA-256:	CE44CF17714A78EA7580562CA8CFF4D76AB5A0A8966C34395F2D0C516D3DD4E2
SHA-512:	03B69A4C5F17262E9DAB6F17AEB3051AAF31B6AFDD712F54390E619666BCF657EB3FF3C801A686F4AB27B1916064E1ADE1FC6D9E78610A5183BB418F3DFEC451
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............\r.f...vIDATx....xM..>.7..<........uKiP.Pj..:i.5].N.~.n....T.-B.)1D.,....B."E.."......8I.I.^g...=.G.s.Z"..k.bYYY "=.;..D.<..".1..4V.......@3....&"..:.}......M.\7........._..O./d.....:.YD.J'...\|....G.i..)..8...H.P.)M""U.....I.... "=.......4.. ....Hc..".1..4.. ....Hc..".1..4.. ....Hc..".1..4.. ....Hc..".1..4.. ....Hc..".1..4.. ....Hc..".1..4.. ....Hc..".1..4.. ....Hc..".1..4.. ....Hc..".1..4.. ....Hc..".1..4.. ....Hc..".1..4.. ....Hc..".1..4.. ....Hc..".1..4.. ....Hc...Ws..uL.....tAM..n..n;..G.AZZ.<<<............#P.bYi.f..I8.?...r....t..gw...Vj.20..4..u.O.'.1.l..O..3.....iJ.S..p..ES...kJ.E.K.......?-../....4g7.rJ.)...=M).....y.U+.V..s."...n.L..\|<Ut..;C.`.pg7.r23.;Cgdd"++....bf....`..F.!.Dd.....R...H....B.......z...#.)m"...P.+.....O.w.m.0~..6....(...+p...<....p..uTi..da.......2}U..IKK... em".....Q_..u[C... r5..<.g....;.....`.:..D$.....1q.<i.C...}+...7.MDf`..0...q...ii.6...Y.. ....cy..B.w.....-.MDfa..2./...7..S0.O..0..1..../R....K....

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52583), with no line terminators
Category:	downloaded
Size (bytes):	52583
Entropy (8bit):	5.416392516893472
Encrypted:	false
SSDEEP:	768:ynE0K4lFKpwKuSLhOlWY2YdAyQxJ2H/t3RoSaqw5sdWMvDRf9g2r5dx5XezZjS30:ynZw+IhY2YdQf7q1LThdfcUps
MD5:	A5A82723E52300722ACDAEE5B34BAFF8
SHA1:	44E45BCA33010C2E64C833D4BD7AAB453921D2A1
SHA-256:	AF41907B0A4801812279D4718EB36FD8F8F97162EAC668E90168BCA1C5C33B40
SHA-512:	B9BE791E859C23A5F04AA2E77DF20E2833C1BDD1CBCAFC8E855C581C26226D088FED97D80837C8EBDF281D182C96A0CC28EFF9FF9F0A429968BDEE3C0AD10F6C
Malicious:	false
Reputation:	low
URL:	https://via.batch.com/v3/worker.min.js
Preview:	(()=>{"use strict";var __webpack_modules__=[,,(__unused_webpack_module,__webpack_exports__,__webpack_require__)=>{__webpack_require__.r(__webpack_exports__),__webpack_require__.d(__webpack_exports__,{SDK_API_LVL:()=>SDK_API_LVL,SDK_VERSION:()=>SDK_VERSION,SDK_MAJOR_VERSION:()=>SDK_MAJOR_VERSION,SDK_DISMISS_NOTIF_AFTER:()=>SDK_DISMISS_NOTIF_AFTER,RETRY_MAX_ATTEMPTS:()=>RETRY_MAX_ATTEMPTS,RETRY_MIN_INTERVAL_MS:()=>RETRY_MIN_INTERVAL_MS,SSL_SCRIPT_URL:()=>SSL_SCRIPT_URL,WS_URL:()=>WS_URL,SAFARI_WS_URL:()=>SAFARI_WS_URL,ICONS_URL:()=>ICONS_URL,IS_DEV:()=>IS_DEV,IS_TEST:()=>IS_TEST,IS_WEBPACK_DEV_SERVER:()=>IS_WEBPACK_DEV_SERVER});const SDK_API_LVL="1",SDK_VERSION="3.5.0",SDK_MAJOR_VERSION="3",SDK_DISMISS_NOTIF_AFTER=30,RETRY_MAX_ATTEMPTS=3,RETRY_MIN_INTERVAL_MS=1e3,SSL_SCRIPT_URL="via.batch.com",WS_URL="https://ws.batch.com/web",SAFARI_WS_URL="https://safari-ws.batch.com",ICONS_URL="https://icons.batch.com",IS_DEV=!1,IS_TEST=!1,IS_WEBPACK_DEV_SERVER=!1},,(__unused_webpack_module,__webpack_

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 192, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1380
Entropy (8bit):	7.7493849000378745
Encrypted:	false
SSDEEP:	24:rm/6CA3gFtqohiMILjUjFRGSMHXpbb6S4sr/S1c4PP729:S/6CAgEKnAX9V4i/SXP729
MD5:	920F27DAF343C8D5A36F804A0DFA4675
SHA1:	1B7E6507373BF46051C77FD5D6BAE103CDF96BA7
SHA-256:	787F0FFADB64E978F2B99AFDD9A6F7CD5BC42B67B10A3EBF59AC07D08B673A0B
SHA-512:	33B70102376677BD27E5708989EBA30404E924BF23B9FF902350F36EDBFB9800C6FB07C80E473B6E30893690BD37FD6976AF2C67743C9F93718FED26173FF2FD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............e..5....sRGB.........pHYs.................PLTE..................................................................}..}..\|..\|.rn.rn.d`.d_.d_.VR}VQ}HCsHCr:5h:5g:4h:4g,&],&\..R.......yIDATx...r.H......,.{+......Q........LD...MW...&~KBw.B..y..y..y..y.7..7.-:....D'..$'.../.J.8JI.5...L3\|X.H...."....I...... :A..N..@t...N.....)..$I.K...qiG......HpA.`.....2.d'H...6...Bv.. ;.O@v...6$@..6,9..Yr.#`.....&..y.e...... ....HO`.'0..,.`A...+.........h..q.,...6........'. =A&=.D\|.#=A.."...'..a.q$y.u5..kD1$.6..u...z.d'.`.D'..g..l...m....i.....$..{...j..........#.X\|.+....S.5..b..YH.l..&.7,.p.J\.'..%...\|.iK....\O([..2z.....?Az.........9Adq.W.`...+.{.(A..n.\}....Eo...........V;....olK..h.`?..(...!".l....m.U..!.-...K.Mt.3.$...xEG..lYt.3\|...l.tx1.....U.....0..^.?...%*.\.........Y..?A.Z.4.....v.y.r.0oX"..S..;.%W.z...d#.F.......G3.hB'S........N.K...cH....$.\|...PDhFD4.q......h4;;>.!}....4...O.=..nwy~....;........;.s1x...h.;...kDOhE.9X..-......

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2486)
Category:	dropped
Size (bytes):	2487
Entropy (8bit):	5.198994586042421
Encrypted:	false
SSDEEP:	48:Ka9y2QgyQoow12dAQBnLAQwzAmpQyyg1+Dd2gNdQ:LQgy9uAQZm+ylYd2gg
MD5:	B9E495783CFE9A32D0C928FB053A8E9B
SHA1:	6455D187DD028B7D45679EA7151149D3B029D337
SHA-256:	13C02C2CC512BDE38C2801CB35899632D368EDCF627E6E8C4B5F638BC49F5008
SHA-512:	384DA580D8A15920502CB3D172C8410D4E50E9628EC2620511103D6A1C83C7B43164D536ECFAE06296A2BB6B99872D998A492439011462732584AA9029F4E44F
Malicious:	false
Reputation:	low
Preview:	!function(e,t,n){"use strict";function o(e){console.error(e.message,e.stack)}function r(t,n){e.postMessage&&e.postMessage({type:g,params:t,msg:n},"*")}function a(e,t,n){function o(){e[a](t,o),n()}var r=w?"attachEvent":"addEventListener",a=w?"detachEvent":"removeEventListener";t=w?"on"+t:t,e[r](t,o)}function i(e){var n=t.createElement("div");return n.innerHTML='<iframe name="'+e+'" id="'+e+'" src="javascript:false"></iframe>',n.firstChild}function c(e){var o,c,s=t.createElement("form"),d="ta"+Math.random().toString().replace(".",""),u=i(d);e.pixel_version=m,s.method="post",s.style.display="none",s.action=q\|\|h,s.target=d,s.appendChild(u),a(u,"load",function(){var i=0;for(o in e)if(e.hasOwnProperty(o)&&e[o]!==n){if(i+=o.length+String(e[o]).length,i>y)return r(e,"POST data too large"),void t.body.removeChild(s);c=t.createElement("input"),c.name=o,c.type="hidden",c.value=e[o],s.appendChild(c)}a(u,"load",function(){t.body.removeChild(s)}),s.submit()}),t.body.appendChild(s)}function s(e){C=e}

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (487)
Category:	downloaded
Size (bytes):	488
Entropy (8bit):	4.841686487844174
Encrypted:	false
SSDEEP:	12:ZorFgHDWrwAfu1eEkLsFtdJdG8nGELUD4LxZr8a65wARn:pDWJfurG8Goa4UR
MD5:	2775054C068B37509E0798448F7FD32C
SHA1:	8CCB907373C30EB3B98D5A24EC92141A938F09F5
SHA-256:	484EF4268F1D679C1AE88C06FC2388D39AFC441465732617E5E2CDC2E3D418E2
SHA-512:	5423F06453EA452614E21391C098D252DDB65ABC958C02664D9B6F1BD3BAD858B396B053C57AA714391C8953F849FAC3B6ECB9AA0C4F74F4FB81C1242B485EB4
Malicious:	false
Reputation:	low
URL:	https://js.adsrvr.org/universal_pixel.1.1.0.js
Preview:	var TTDCM = function () { function n(t) { var e = "iframe_" + this.mapIndex++, i = document.createElement("iframe"); i.setAttribute("id", e), i.setAttribute("allowTransparency", !0), i.setAttribute("height", 0), i.setAttribute("width", 0), i.setAttribute("src", t), document.body.appendChild(i) } this.init = function (t) { if (this.sslOnly = "https:" == location.protocol, void 0 !== t && null != t && 0 != t.length) for (var e = t.length, i = this.mapIndex = 0; i < e; i++)n(t[i]) } };.

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3966)
Category:	downloaded
Size (bytes):	265140
Entropy (8bit):	5.565925189692703
Encrypted:	false
SSDEEP:	3072:BW3wiztGbETravo6y0J5CptDY8/I8+yr/OUYhcDmKD0C8Gp/Ghl:6Gbg+voWM/GUTx0C8Gp/Gn
MD5:	A33984B246B99C560DE7391A6FEC5CD5
SHA1:	E5BA7A5824BF468176474F0143FF6E9F6CCD39A3
SHA-256:	FEBD872AE06F2233A30FDBBBD939BBF95715F17F0B7B694EB236ADE77A313AC6
SHA-512:	A4F388B24CC94EACD35556D4E9ACE4E1E17A1C9CCCFBFDD6D678A53DB784C29E509B4759605697017351486BD12CC6040116054386D22222B12716523F7BCD7B
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=AW-801297014&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_dma","priority":3,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":29},{"function":"__ogt_1p_data_v2","priority":3,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regi

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 480688
Category:	downloaded
Size (bytes):	124766
Entropy (8bit):	7.99735983513274
Encrypted:	true
SSDEEP:	3072:Ua/pVYH5mJVfR8Ff8oD4jB5ozB/RfZSlK5zWtlMz1lQ0oCo4+5ER:U+nJVpOf8T5cRfsliWnMz13pT1R
MD5:	7C145024894066A56638506A0F3977E0
SHA1:	B5F11830110276964C69F9711B2605571120553A
SHA-256:	B6660294872C34C5ECF353C2F39A20A608302C4B4FF80DEFBE1E98895BEF02A4
SHA-512:	DCC348F36065B65BBC53B361084513D31B4E42773989BB5B04B675B8C849418549E7FBEDCE3A08930F0C1832099F4328E8294BC595146916428F003BCBD4E36F
Malicious:	false
Reputation:	low
URL:	https://t.contentsquare.net/uxa/3ec15a83d6166.js
Preview:	............V..0..?..."R.m...;2.C.&....8m....P.H.I.&..8.r..<..y....d...wVF.i....fU.UWq>..;...}..zI..y...Q.Bo.g..A.5..+O..^Q.....2./.\|..x0..d..5....KN..E."!gPy..ii%.N.$eEQ....YYiv.-Zi.,.Lrf....xT.Xi.8..K..E.....(.GSdgI.mV&.].&u.b.<.G#..=.'..e.:'7.M...aup..q^[.,/.4..R<(...L..bW8_....D...$K..![:.^.....r....X1.E...U....<NrV.v.a.. .\....F. .....VGp.......]q.[....p....'...fA..T...l..w...v..].Iz.............%........?&.XCJ.yf...r.J....,.....e..k?~....2..../.#v...j`B......:.B.<.1d\.d....4,G\.r`.y\|.........Wi...X....L=-.....K)+..DO.\.,7).N<...'c6.8....Q..#.G...!n.`....."=...H..e.m.8.aqy..U.4.O.l+-..0..^t.<....`R..e=..b..{5N..y...[C3]-P7..7c...-G...t.......=.]f.7.1.C.5.2O..Y....'./..........d.5..^...C......pz7.s..%<...m..HY..d....8..tH.. .(...Olx..d....&...v....4N...2).KvXy......&4...q....~=8,..............,O.@<......B..}...8.&....`.....*X....#..u..le......xRrt.kp.+0J.T.z..]..3I.?&..K<u.(..SX..&..`.@O.dv.,..J.t.h.S"V@@....\|.......A.T...U..+.

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	6462
Entropy (8bit):	3.9238060166958464
Encrypted:	false
SSDEEP:	96:CWyRrqr1Nop+P48bW+8sFLxyE5fud5QRK9LnAN6j9ric1r:CWyp81XMEFlQQnY
MD5:	EA209341357EBADBCED78D352160784B
SHA1:	1FA453AB4D0590E50143D2FECB0C62D410F21955
SHA-256:	D709E3BB403D618CC38DBFDE48788244F04FB499D9639D9743D82027FD46CA7C
SHA-512:	1070650BDBB178D6900BF5AFA32CF576DB8FB4B3C814FC8B85BE7409287E314C6C960978B57BD60A55A59483F40633189BE97ECA30DF5BA871B4382D39DCEC9C
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 124 78">. <metadata><?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.4d2f597, 2021/09/01-20:51:22 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/". xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#". xmlns:xmp="http://ns.adobe.com/xap/1.0/">. <xmpMM:PreservedFileName>specific-logo-all.com.svg</xmpMM:PreservedFileName>. <xmpMM:InstanceID>xmp.iid:c9ad86cf-8469-904a-ba53-22d1f24cd7f6</xmpMM:InstanceID>. <xmpMM:DocumentID>xmp.did:c9ad86cf-8469-904a-ba53-22d1f24cd7f6</xmpMM:DocumentID>. <xmpMM:OriginalDocumentID>xmp.did:c9ad86cf-8469-904a-ba53-22d1f24cd7f6</xmpMM:OriginalDocumentID>. <xmpMM:History>. <rdf:Seq>. <rdf:li>. <rdf:

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	48
Entropy (8bit):	3.1994764927035653
Encrypted:	false
SSDEEP:	3:M+xRKSWljGkhbAYn:Xst9
MD5:	52CAA374F9D8E80A43D843453A09451E
SHA1:	F20B4B2FC00180AD9895BED85B931F038BDCDF18
SHA-256:	4F8F48B18463DD38185B16DEEE997ADF27F88ED4036BEA70AFA90A9CE8DAD648
SHA-512:	FCBFDDCB33739EAF3E2E95086599D04E4FE7B07A3905E3710BD303C005EE2DEF632F2F59817895ABA8C0A1B14C77941FFCFE232E74E8401CB873AC3663E71E08
Malicious:	false
Reputation:	low
Preview:	R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	964
Entropy (8bit):	4.933020103925466
Encrypted:	false
SSDEEP:	24:kJGrO0Pu/dI8d06YaKY4tWe/6n5i+Mi1sy32iCiSoICr4z:sGbPgPdQJr765i+Mimy32OEz
MD5:	B64D93C824E7119A472105C539002F32
SHA1:	94FEB73929CD82F0EC26018979622ED913575349
SHA-256:	20DE2AEB91234D2D2C66D0DD01DA5A1C9A686BA27C7E634E4D253EF5B040DFD9
SHA-512:	827017A6788974CFAF0F45828BFB03730657AAF5012E2CF3E24D2E34A02C9579ADCCE3FD9B7C5737E0B73039513FD6D5C64A1B572F0689AAE5B2CB97C85127ED
Malicious:	false
Reputation:	low
URL:	https://us.creativecdn.com/topics-membership?ntk=9NhZ2LKob5OXU6iT_L-wvVJFGz5pXoxEeXqmRrY6C1Dnl-xLE09kOULJ6TQj6r084kmd_JiBn6_gcPWGb3MJsuvVSVefGSmHpEYo3puJMvk
Preview:	<html><head></head><body>.<script>.function ignoreAsyncResult(x) { }..function readResponse(r) {. try {. if (r.ok) {. r.blob().then(ignoreAsyncResult, ignoreAsyncResult);. }. } catch (e) { }.}..function handleTopics(result) {. try {. if (Array.isArray(result)) {. var topicIds = result.map(function (topic) {. return topic.topic;. });. if (topicIds.length > 0 \|\| Math.random() < 0.001) {. fetch('https://us.creativecdn.com/topics-membership?ntk=9NhZ2LKob5OXU6iT_L-wvVJFGz5pXoxEeXqmRrY6C1Dnl-xLE09kOULJ6TQj6r084kmd_JiBn6_gcPWGb3MJsuvVSVefGSmHpEYo3puJMvk&t=' + topicIds.join(',')). .then(readResponse, ignoreAsyncResult);. }. }. } catch (e) { }.}..try {. if (document.browsingTopics) {. document.browsingTopics(). .then(handleTopics, ignoreAsyncResult);. }.} catch (e) { }.</script>.</body></html>.

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	48
Entropy (8bit):	4.170914521951841
Encrypted:	false
SSDEEP:	3:S0KBRqSABJTiAUYFgW:S0H/TifW
MD5:	9F23F2E42529DC6328DDB0515A9528B6
SHA1:	9F99006DBD946A1331D006C036EC15C8F107C767
SHA-256:	215DD330DBAC4B685D846B2851CA780649411B1883CAB7740A89750C7E072E64
SHA-512:	66DA9CAACBFD30C7E22B74855A58C15F00A72B96F2C2B358E3D71F8AB45682BC588BEED70C5DF3BD3C8E6DD3D2E6EE03320EA9BC2FD5DC09AAD75D38B0776EAA
Malicious:	false
Reputation:	low
Preview:	HTTP method not allowed, supported methods: POST

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (51384), with no line terminators
Category:	downloaded
Size (bytes):	51385
Entropy (8bit):	5.293328685395304
Encrypted:	false
SSDEEP:	768:IaOFhhRC5JFhLjfRysgLzQynDw5YyDMFW8KQ:IaOFnR2DRszQKaoWtQ
MD5:	6626C1362840EBFC8F48294E8F023E18
SHA1:	4EC0DFB37C3E536C1B5EC04B68C9846FDBAF9EEF
SHA-256:	AABC88A6DB8B22022F96CA88E4F0A7BE426ABEF2B35169A71515A2D55246402A
SHA-512:	B037A19B52C1047198EC7F19E99066054E454964380E2354239834260D11248E617D6759B944DDF39A25B883C8F430603D8E13097396E2DEDA9BB6905C1CD42A
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/bat.js
Preview:	function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0,enforced:!1};this.uetConfig.tcf={enabled:!1,vendorId:1126,hasLoaded:!1,timeoutId:null,gdprApplies:undefined,adStorageAllowed:undefined,measurementAllowed:undefined,personalizationAllowed:undefined};this.uetConfig.cusig={hasLoaded:!1,timeoutId:null,blob:{}};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",digits:0,max:999999999999},hct_los:{type:"num",digits:0,max:30},date:{type:"regex",

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (41169)
Category:	dropped
Size (bytes):	41172
Entropy (8bit):	5.505998162296305
Encrypted:	false
SSDEEP:	768:j21xCdwV69Odf9dk1fV8iWUwcb9x8cvgBhpU9yC8IEVDlbth3Ia8DdEN:iP3kr8V8vShi98Iiph3IbC
MD5:	0AA5002702487976D570A640C408EBA5
SHA1:	48930F22A2396DF313CCDFCB91CAC20E38F2B06B
SHA-256:	4E8276AEA0A3C7FE3600E6718C7F484D49C347C8D5763D89BE95900D526A14DA
SHA-512:	37A9D609DB21EE1E696CB437C02F0F6410925EB10B6353C0CDF95DB265E342F0BC3D2AE1851D209E4517D978B7CCBE8AD56F98247FA865AE405FAFD4D2E62CDA
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";function n(n,t,e){return t in n?Object.defineProperty(n,t,{value:e,enumerable:!0,configurable:!0,writable:!0}):n[t]=e,n}var t,e,r,i,o={ADVERTISING:"ADVERTISING",ANALYTICS_AND_RESEARCH:"ANALYTICS_AND_RESEARCH",FUNCTIONAL:"FUNCTIONAL"},a="GUEST",u="MEMBER",c=0,l=1,d=2,s=(n(t={},a,"li_gc"),n(t,u,"li_mc"),t),f=function vr(){var n=arguments.length>0&&arguments[0]!==undefined?arguments[0]:null,t=arguments.length>1&&arguments[1]!==undefined?arguments[1]:null,e=arguments.length>2&&arguments[2]!==undefined?arguments[2]:null,r=arguments.length>3&&arguments[3]!==undefined?arguments[3]:null;for(var i in function(n,t){if(!(n instanceof t))throw new TypeError("Cannot call a class as a function")}(this,vr),n=n\|\|{},this.consentAvailable=!1,this.issuedAt=t,this.userMode=e,this.optedInConsentMap={},o)n[i]=n[i]\|\|c,n[i]!==c&&(this.consentAvailable=!0),this.optedInConsentMap[i]=n[i]===l\|\|n[i]===c&&r===l},v=(e=[o.ADVERTISING,o.ANALYTICS_AND_RESEARCH,o.FUNCTIONAL],r=[c,l,d,c],i=new R

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	23587
Entropy (8bit):	4.6488843799106645
Encrypted:	false
SSDEEP:	192:uk4+tcezH/nWCTJSCyeHZX/bH+D+syo+6KbsDjmdvyhOjlREOiY5g5OE03OfyBXP:B4hu/nkSC4j/EI7KS84u2dsZjj2W4D
MD5:	2FB09800ACD5EF1900378DC77F760202
SHA1:	CBD4BFFA2FBCD7839067CAC93854F1EC58D246F6
SHA-256:	52A91A21C194C2F4E36E98440C37E83B1B7DC38883D8D083375345CC201A26CD
SHA-512:	8B47CFE7ACCDC12C19E9BD116A7B5FCFB6150795194061775CE69C62A4A76757164AAC5C3D01148AE69ADB26BD9305AAF131759D517C60845AB44C455E511661
Malicious:	false
Reputation:	low
URL:	https://static.sojern.com/cip/p/FuKF6OOS68yCy7qj.html?p=tracking&url=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&ccid=9ab4f1d3-b3a4-433f-a62e-3731c85af8dc&logged=&country=us&pagename=informationandservices%3A%3Aapp%20download&language=en
Preview:	<!DOCTYPE html>.<html>. <head>. <meta http-equiv="Content-Type" content="text/html; charset=windows-1252">. <title>AccorHotels - Combined</title>. </head>. <body> . <script>. function fireSojernPixel(pixel_id, these_params) {. (function() {. var params = these_params;. . /* Please do not modify the below code. */. var cid = [];. var paramsArr = [];. var cidParams = [];. var pl = document.createElement('script');. var defaultParams = {. "vid": "hot". };. for (key in defaultParams) {. params[key] = defaultParams[key];. };. for (key in cidParams) {. cid.push(params[cidParams[key]]);. };. params.cid = cid.join('\|');. for (key in params) {. paramsArr.push(key + '=' + encodeURIComponent(params[key])). };. pl.type = 'text/javascrip

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	65
Entropy (8bit):	4.314128390879881
Encrypted:	false
SSDEEP:	3:2erWeKBRk35KLWAzRERxzfXHqq/H4Y3:29M3tRdfaqN
MD5:	2DEA9F0F7E122E81EE9A3752902BDF19
SHA1:	8747D6D270E001CEEA1174FF1D365D9CDEA52DCD
SHA-256:	3D49CCE674B56473177888E83BA3303C68B74AF8F0032A94F4814F73F59132B9
SHA-512:	723AC6A0C7A4139882197D5E4B59A48DB20A83C63E498C8C5FA1E057DBA75F33A1F927CC286D006BF107A04211998873FCC82656B719C40D49F633C466F0CD8F
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"response":{"status_code":400,"body":""}}..

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	3.1994764927035653
Encrypted:	false
SSDEEP:	3:M+xRKSWljGkhbAYn:Xst9
MD5:	52CAA374F9D8E80A43D843453A09451E
SHA1:	F20B4B2FC00180AD9895BED85B931F038BDCDF18
SHA-256:	4F8F48B18463DD38185B16DEEE997ADF27F88ED4036BEA70AFA90A9CE8DAD648
SHA-512:	FCBFDDCB33739EAF3E2E95086599D04E4FE7B07A3905E3710BD303C005EE2DEF632F2F59817895ABA8C0A1B14C77941FFCFE232E74E8401CB873AC3663E71E08
Malicious:	false
Reputation:	low
URL:	https://sgtm.accor.com/_set_cookie?val=465dQ1oUQbWYInSTp0OUjAoBGvVM7N4ndsP%2BXrUlTGeEo7iYhUii%2BfyWd24s790KSYg25GcCkjy4XLYWoyVz%2BDMNDrx8gjHaeGOz%2FsFwaHw%2BT%2BQnhGQ3reXTwmH4B6GLb0hE%2F2ttqPqbPqpelrzNhntTPXrnLp3LzZ2Dke56nHnHu8iZZzGtoOv%2BSICbQunp5zN6FzaO
Preview:	R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	13554
Entropy (8bit):	5.202959828582905
Encrypted:	false
SSDEEP:	384:KIy0clDjbn42OXOw85csXf1NFyNg/OoH6iAHyPtJJAR:KIy5F/i
MD5:	23E8424AA65B5CC6F0693EC20C2CEAE0
SHA1:	0F4F59077D295D0799B9B02C0DA2076F7DD73960
SHA-256:	D890ABF66010907C7A0A61236D25C3C98BCB7EDEC34B13DC887F5BE122BFEF7E
SHA-512:	9D649426DB646BCE98E4A3AAB625CB1DE12F2AFAE943ADC7DD9C5B54740A7E14E20B826E6FA7812CA7ADD18E5A12B4FECA99FF864C8BF29349E200B7A8641B48
Malicious:	false
Reputation:	low
Preview:	. {. "name": "otFlat",. "html": "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

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (34675)
Category:	downloaded
Size (bytes):	456032
Entropy (8bit):	5.581858219931569
Encrypted:	false
SSDEEP:	6144:YQIGjrTm98G4jWsT/IjR12w2+GxgCvoUMYGUTx0C8Gp/kbH:Q9pyu2wWNvoUvS
MD5:	2FCA3811B084C184CA0C3F32C008FC4B
SHA1:	80C5BA1B24A355036F7CE477049DE31985B23570
SHA-256:	0A49C56EC04BFF973963ED60939998464ACABEE98441FF4CF05713FECAB56C5D
SHA-512:	A7679A9B19074F1F067ACFB7FB1273CD709C39BB828BE397010EF9EBFAC6343A352056A42BAF8F0FDF92BF5628569B35B738F95C7487747E2BEF46ADC5E8E8AA
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-PKFTZMK&l=dataLayer
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"879",. . "macros":[{"function":"__v","convert_case_to":1,"vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"dynamic_datas_ready"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"OnetrustActiveGroups"},{"function":"__jsm","vtp_javascript":["template","(function(){var a=\"\";1==",["escape",["macro",0],8,16],"\u0026\u0026",["escape",["macro",1],8,16],".match(\/C0004\/)\u0026\u0026(a=\"true\");return a})();"]},{"function":"__e"},{"function":"__c","vtp_value":"649915528506999"},{"function":"__cvt_12226527_2433"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"page_data.hotelcode"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"page_data.hotelcityname"},{"function"

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 62088, version 1.0
Category:	downloaded
Size (bytes):	62088
Entropy (8bit):	7.9962169887326295
Encrypted:	true
SSDEEP:	1536:u0Iy0FvY+CO22MvjW8m2WfCM9vL9rQ54ThkTEH5uyOG5:uty0FoO2BLW8UqMpy52hgEWG5
MD5:	2EB6D82A8C0309D5608C1D7BB23AE519
SHA1:	B5CDBEEC84423FF0B2D9C2C40D52AFE0079E5F84
SHA-256:	52AE145CBF743BF2ADF8886D48413F35FFF6C2A149C57920DC6A7D079956D79A
SHA-512:	B235C14993BAD4BCE55AEF8658059D90042A400BD42C8BA4A1970C8BC0D0EA9CBDE626090BC9E4C6C32CC29034C4E86D9B27342304256233A599FC9589395250
Malicious:	false
Reputation:	low
URL:	https://static-p46175-e229011.adobeaemcloud.com/b94aa70a4593f812b35d5a8922257b6f80ccf6aa708f58b8266f4ba917eb0e0e/resources/fonts/montserrat-bold.woff2
Preview:	wOF2..................#..........................6...N....`?STATD..j.....H..,..l..6.$..T. ........[`...rI>.v..~s.:.&r..r..L.cx_.A.9....zKN....>..z.J.............a..9..`...X...F..b.?....l@&..3.IV<.z..B.M..E.j....)......6....B6B.>Hh.....N.1..9.tL.f.c\..BqE..;}..{.M..a....T]..&d6L~....AT.:z..p.G..u..a....$<!.hU......!..s..4"....w9w....._[.[ .8F........^U.....S..5L..n.&.Qv6:.h=^.;U.p..F.........LH.}....{l.i....X.N%U........l\|yA...1ALP.3....-r.....m..\|..i.E[L.......P=.,..6;I...g..R4.7v......3....K.....fS.5\......S.b...................?.......uxM#FHFb...d%3...........m.m^...O.....?....]0.;Q5.`d?..'<...B_.....bL0........l.9zy$..<..G.{._...V..?a...jU.d..T........;3g.9w......e...Q.a....l!Q...J(.DE.Dek.....cv.zN..X.@..d.....S.P....U.q...3.y...W.R\i.x....d.\Ta.D...F..........fY....+VX.0..Y...qX...8l,V...h.,..0..'].4.2wX...m......E...B $"$.1,C.N.:......c...Q.M......J.2.c...T....i>.\|...X:i..I.....E.%CMI....Z..ClC...03.j..N...}N.Y.....]W.l.

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	651
Entropy (8bit):	4.3413895961447135
Encrypted:	false
SSDEEP:	12:t4HnOWLHGfCd/QYlZpUai7FSr6cPJUpA3ie0zQcozjS50J0JZRjTToEksiU4pyCp:t4HOsGqdQYlHU46mqpOumzjCvTozsiUW
MD5:	A5C5D6146A6E55E4A0FE3567602B1E46
SHA1:	C75FF1B713378AEC779FB248E22DAA513ACA725B
SHA-256:	901BB0E03B8C3C0A1CF4C487A177417328BB7D8C94106ECEFCEEDD7D7F6C4DDC
SHA-512:	D21D979974542243A4D70036F87BFC0549B6793B809ED09044946BE2A25C47811A99E20FDB1F3044082A5509664101D4BCA241A1CA7B09FE80084CEAFA092368
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/logos/static/ot_close.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="348.333" height="348.333" viewBox="0 0 348.333 348.334"><path fill="#565656" d="M336.559 68.611L231.016 174.165l105.543 105.549c15.699 15.705 15.699 41.145 0 56.85-7.844 7.844-18.128 11.769-28.407 11.769-10.296 0-20.581-3.919-28.419-11.769L174.167 231.003 68.609 336.563c-7.843 7.844-18.128 11.769-28.416 11.769-10.285 0-20.563-3.919-28.413-11.769-15.699-15.698-15.699-41.139 0-56.85l105.54-105.549L11.774 68.611c-15.699-15.699-15.699-41.145 0-56.844 15.696-15.687 41.127-15.687 56.829 0l105.563 105.554L279.721 11.767c15.705-15.687 41.139-15.687 56.832 0 15.705 15.699 15.705 41.145.006 56.844z"/></svg>

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15267)
Category:	dropped
Size (bytes):	36174
Entropy (8bit):	5.373674116824092
Encrypted:	false
SSDEEP:	768:M9krLHJ7UrVpXH/m/cf/nOf1gzKa1HK0I9zZQJDcy/YY/T6ZVMBGX9fZ8GLza92I:JrTcO/Mjid9a/Cr4N
MD5:	DFF3E13E1A598005C3CDC619FC769E83
SHA1:	E8CE76B0710EFCDFEED444F055CFC888DE86783B
SHA-256:	FA63DC5DD80B9AA518D1A3D3B644595CF28C1639EE9C29FFAF180B3C52C8BFD7
SHA-512:	A70F727B59101A86EC94658FEC02E1378B88D6BC316E8D8A308A52B0DE43901EF84DDA2E0AB8E37ED61A5F7355CAF10E368B42FF525CF4A76AF1EC2E4F0196BE
Malicious:	false
Reputation:	low
Preview:	(function(){const t=document.createElement("link").relList;if(t&&t.supports&&t.supports("modulepreload"))return;for(const s of document.querySelectorAll('link[rel="modulepreload"]'))r(s);new MutationObserver(s=>{for(const i of s)if(i.type==="childList")for(const o of i.addedNodes)o.tagName==="LINK"&&o.rel==="modulepreload"&&r(o)}).observe(document,{childList:!0,subtree:!0});function n(s){const i={};return s.integrity&&(i.integrity=s.integrity),s.referrerPolicy&&(i.referrerPolicy=s.referrerPolicy),s.crossOrigin==="use-credentials"?i.credentials="include":s.crossOrigin==="anonymous"?i.credentials="omit":i.credentials="same-origin",i}function r(s){if(s.ep)return;s.ep=!0;const i=n(s);fetch(s.href,i)}})();/! js-cookie v3.0.5 \| MIT /function I(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)e[r]=n[r]}return e}var Xe={read:function(e){return e[0]==='"'&&(e=e.slice(1,-1)),e.replace(/(%[\dA-F]{2})+/gi,decodeURIComponent)},write:function(e){return encodeURIComponent(e)

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7874), with no line terminators
Category:	downloaded
Size (bytes):	7874
Entropy (8bit):	5.507445907572536
Encrypted:	false
SSDEEP:	192:QHTvUiGnEvIhAYVOonj583iXoV7B4/nw/K1yA:QHTvUiGnEAhAYVOonj583zV7B4/w/8
MD5:	860BCA0E4EB5D4748D23C8FF5D47FDF2
SHA1:	36592D037EF823003129BE74FCAB9C9FA8BBA334
SHA-256:	05298FD7595394DC234DD79EF8236632829782E797E30CE8F5A88AA6D4F6A185
SHA-512:	10F7505EC60571B1B924551B7C7496F36A2ABA84B809A490D22F02311260D23373EC61607F8D6B294598D790D6C1F2F08084E99EF428C422CBB9E5832ADA84D2
Malicious:	false
Reputation:	low
URL:	https://via.batch.com/v3/bootstrap.min.js
Preview:	(()=>{"use strict";var __webpack_modules__=[,(__unused_webpack_module,__webpack_exports__,__webpack_require__)=>{let Browser,Platform;__webpack_require__.r(__webpack_exports__),__webpack_require__.d(__webpack_exports__,{Browser:()=>Browser,Platform:()=>Platform,UserAgent:()=>UserAgent,default:()=>__WEBPACK_DEFAULT_EXPORT__}),function(Browser){Browser[Browser.Unknown=0]="Unknown",Browser[Browser.Generic=1]="Generic",Browser[Browser.Chrome=2]="Chrome",Browser[Browser.Firefox=3]="Firefox",Browser[Browser.Safari=4]="Safari"}(Browser\|\|(Browser={})),function(Platform){Platform[Platform.Unknown=0]="Unknown",Platform[Platform.GenericDesktop=1]="GenericDesktop",Platform[Platform.GenericMobile=2]="GenericMobile",Platform[Platform.IOS=3]="IOS",Platform[Platform.Android=4]="Android",Platform[Platform.MacOS=5]="MacOS",Platform[Platform.Windows=6]="Windows",Platform[Platform.Linux=7]="Linux"}(Platform\|\|(Platform={}));class UserAgent{constructor(userAgentString){let platform=arguments.length>1&&void

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 480688
Category:	dropped
Size (bytes):	124766
Entropy (8bit):	7.99735983513274
Encrypted:	true
SSDEEP:	3072:Ua/pVYH5mJVfR8Ff8oD4jB5ozB/RfZSlK5zWtlMz1lQ0oCo4+5ER:U+nJVpOf8T5cRfsliWnMz13pT1R
MD5:	7C145024894066A56638506A0F3977E0
SHA1:	B5F11830110276964C69F9711B2605571120553A
SHA-256:	B6660294872C34C5ECF353C2F39A20A608302C4B4FF80DEFBE1E98895BEF02A4
SHA-512:	DCC348F36065B65BBC53B361084513D31B4E42773989BB5B04B675B8C849418549E7FBEDCE3A08930F0C1832099F4328E8294BC595146916428F003BCBD4E36F
Malicious:	false
Reputation:	low
Preview:	............V..0..?..."R.m...;2.C.&....8m....P.H.I.&..8.r..<..y....d...wVF.i....fU.UWq>..;...}..zI..y...Q.Bo.g..A.5..+O..^Q.....2./.\|..x0..d..5....KN..E."!gPy..ii%.N.$eEQ....YYiv.-Zi.,.Lrf....xT.Xi.8..K..E.....(.GSdgI.mV&.].&u.b.<.G#..=.'..e.:'7.M...aup..q^[.,/.4..R<(...L..bW8_....D...$K..![:.^.....r....X1.E...U....<NrV.v.a.. .\....F. .....VGp.......]q.[....p....'...fA..T...l..w...v..].Iz.............%........?&.XCJ.yf...r.J....,.....e..k?~....2..../.#v...j`B......:.B.<.1d\.d....4,G\.r`.y\|.........Wi...X....L=-.....K)+..DO.\.,7).N<...'c6.8....Q..#.G...!n.`....."=...H..e.m.8.aqy..U.4.O.l+-..0..^t.<....`R..e=..b..{5N..y...[C3]-P7..7c...-G...t.......=.]f.7.1.C.5.2O..Y....'./..........d.5..^...C......pz7.s..%<...m..HY..d....8..tH.. .(...Olx..d....&...v....4N...2).KvXy......&4...q....~=8,..............,O.@<......B..}...8.&....`.....*X....#..u..le......xRrt.kp.+0J.T.z..]..3I.?&..K<u.(..SX..&..`.@O.dv.,..J.t.h.S"V@@....\|.......A.T...U..+.

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1046)
Category:	dropped
Size (bytes):	235682
Entropy (8bit):	5.542224409491431
Encrypted:	false
SSDEEP:	3072:WkVf6E9VSDrz9Kg5VPjLdrjB83cG9I7u+X9RrStw6WQ:zURLn0h9qRXqtyQ
MD5:	CDA7E9186C25DE421F8B91A0DAF62395
SHA1:	B98CA78C444046D17EFD9116BC79340E2850BFD4
SHA-256:	25F1D4B2A2E838B112C9F2B029FF796DD7B919AC35ADAD8247543D4D6B8B86D0
SHA-512:	51877AD6225FF8B32BFDDE6ED37D1A42A7FA3F577F9B1FC6C15153606137009B5C3353D64DE720EB61B7446FDBCE3465F4413023740AB940E47908649E54B358
Malicious:	false
Reputation:	low
Preview:	/. js-cookie v3.0.5 \| MIT /.var $jscomp=$jscomp\|\|{};$jscomp.scope={};$jscomp.arrayIteratorImpl=function(C){var U=0;return function(){return U<C.length?{done:!1,value:C[U++]}:{done:!0}}};$jscomp.arrayIterator=function(C){return{next:$jscomp.arrayIteratorImpl(C)}};$jscomp.ASSUME_ES5=!1;$jscomp.ASSUME_NO_NATIVE_MAP=!1;$jscomp.ASSUME_NO_NATIVE_SET=!1;$jscomp.SIMPLE_FROUND_POLYFILL=!1;.$jscomp.defineProperty=$jscomp.ASSUME_ES5\|\|"function"==typeof Object.defineProperties?Object.defineProperty:function(C,U,xa){C!=Array.prototype&&C!=Object.prototype&&(C[U]=xa.value)};$jscomp.getGlobal=function(C){return"undefined"!=typeof window&&window===C?C:"undefined"!=typeof global&&null!=global?global:C};$jscomp.global=$jscomp.getGlobal(this);$jscomp.SYMBOL_PREFIX="jscomp_symbol_";$jscomp.initSymbol=function(){$jscomp.initSymbol=function(){};$jscomp.global.Symbol\|\|($jscomp.global.Symbol=$jscomp.Symbol)};.$jscomp.Symbol=function(){var C=0;return function(U){return $jscomp.SYMBOL_PREFIX+(U\|\|"")+C++}}();$

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	dropped
Size (bytes):	307494
Entropy (8bit):	5.585358068946206
Encrypted:	false
SSDEEP:	6144:Z4qhGbgBu2o4k2639cM8Gp/12gtu9BW24n1d:Sqecu2o4wAEn
MD5:	433CD54E209F973004B4C5BECD9C1830
SHA1:	030BC67C411182D73AF0F899AEDF96B5C4C0968D
SHA-256:	FA7B0C6DC91A3721EED82047907347DB8B36992807A768D222A7DDC40B684A51
SHA-512:	ABD35C317E3CDC46C9F48F34FA20A51D87CECF4BB9527925640CB9FE349F2511A739601BB4E292C395396E5169451DDD56F031B506711ACEDF8B9089950011B4
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"5",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":20,"vtp_rules":["list","accor\\.com","movenpick\\.com"],"tag_id":105},{"function":"__ogt_ga_send","priority":10,"vtp_value":true,"tag_id":107},{"function":"__ogt_dma","priority":10,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":108},{"function":"__ogt_1p_data_v2","priority":10,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR"

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	66
Entropy (8bit):	3.9721077567347134
Encrypted:	false
SSDEEP:	3:YGKeMfQ2pHWiR8HVjROE9HSxmQqyRHfHyY:YGKed2pHDKcElSDPyY
MD5:	A20F61BBF661147FA65EC1ABF4093AED
SHA1:	C7306A9A3F8224E2E564FD170242E4B26BBA7047
SHA-256:	EFA3DA3BC784514C792213E4B3C842CF4DA752C0EC3EF14F4592A6A849DBEFCA
SHA-512:	1BD4A45DC90A18265C78720955D80FCAC6A3656C23BBC0C480078D9407ACF205399FBDD22942242642D20EC73759DF5613620BFC27084C71AF448CC2F36D55F6
Malicious:	false
Reputation:	low
URL:	https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location
Preview:	{"country":"US","state":"TX","stateName":"Texas","continent":"NA"}

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	dropped
Size (bytes):	283642
Entropy (8bit):	5.581431007172156
Encrypted:	false
SSDEEP:	6144:Oo/GbgBucolkx639cM8Gp/U2gtu9BW24n13:hQcucol0AEl
MD5:	91B59D154C32CD2B11B23A9A1DD710F6
SHA1:	741892DB496A14080C51149FD3568B9B6DA7FB48
SHA-256:	F640948C312BC25A9639D4976EADB22777014E54BB262EF5811925D243D71DB1
SHA-512:	B7DC2EC4165F9CDB52B93EE6F2F93BAC05FB12987B136E811FB8775C638BA3CE622554C557D6F07CE81BD62E0550AE294D6FA049E8492D4F9603848720FEFDC0
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cookie_settings","priority":8,"vtp_gaCookieExpiration":34164000,"vtp_gaCookieUpdate":false,"vtp_isEnabled":true,"tag_id":9},{"function":"__ogt_dma","priority":8,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":11},{"function":"__ogt_1p_data_v2","priority":8,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELE

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9217)
Category:	downloaded
Size (bytes):	234260
Entropy (8bit):	5.456621895233652
Encrypted:	false
SSDEEP:	3072:zfLeYH8AtPJ137OeR8NteGvQ+AMPpgArl0xYu58K713FN:zfLeYc+PJxH8N7QQGArHu58K713z
MD5:	C04BB3EDB0F1A33B985B3285055FE1FA
SHA1:	0AE234EBC67E016B8A3B5603885A67160493227C
SHA-256:	668C6828672FA8600B7A0632CB328EE63A31361BE6734987B04985FCD9D08D4F
SHA-512:	8E154181A67EF7706AB11421D2A91270F9620895CA54EDA89E73E60533FB2F72CF7E3323F4F56EB08C177F69E4CFC36117E011B3DD2479B07267C7E1F74C8B5D
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/fbevents.js
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2203
Entropy (8bit):	5.071734863127232
Encrypted:	false
SSDEEP:	48:BFIsrZg/fjQAwM5do7VN2c36+9Ig60A5KmTU+LL4B3PyliybsLUD6Gw:BF+/Ea5472alp1/rLmM
MD5:	7CBB91B972378AB814DFAF40D82939A8
SHA1:	16A01931DFB9025A33A1B4EA3F8791603662DE37
SHA-256:	A777F731E58D7A9D4CE44F17E788928A27F16781DAF2F8710A865630322D0C35
SHA-512:	5DD0C0A961C5EEB4B5DD569BE03654FEB7520B7C2B4504DA147854B7504D617440346B1D4EFBAB66E72DEBCFEECB6B5C3C125FE038280E8FB295EC7AE3FC0C2F
Malicious:	false
Reputation:	low
URL:	https://all.accor.com/a/etc.clientlibs/ace/clientlibs/clientlib-pos.lc-7cbb91b972378ab814dfaf40d82939a8-lc.min.js
Preview:	.const NON_POS_WEBSITE = ['mantra'];.const url = '/content/sling/servlets/ace/getposcookies';../Function to decode the cookie /.function getCookie(appcname) {. let matches = document.cookie.match(new RegExp(. "(?:^\|; )" + appcname.replace(/([\.$?\|{}\[\]\\\/\+^])/g, '\\$1') + "=([^;])". ));. return matches ? decodeURIComponent(matches[1]) : undefined;.}..async function callApi(posHandler) {.. const siteCode = JSON.parse(posHandler)?.siteCode;. const languageCodeFromPage = JSON.parse(posHandler)?.languageCodeFromPage;. const pointOfSaleCodeFromPage = JSON.parse(posHandler)?.pointOfSaleCodeFromPage;.. let params = new URLSearchParams();. params.set("siteCode", siteCode);. params.set("languageCodeFromPage", languageCodeFromPage);. params.set("pointOfSaleCodeFromPage", pointOfSaleCodeFromPage);. const updatedUrl = `${url}?${params.toString()}`;.. try {. const response = await fetch(updatedUrl, {. method: 'GET',.

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24745), with no line terminators
Category:	dropped
Size (bytes):	24745
Entropy (8bit):	4.791301497913928
Encrypted:	false
SSDEEP:	384:WZ8ChhGoFpHDouLlCS7FGAVsq1nwGfg4xqsQMPNE:OlpuJ
MD5:	03D8DE91DE54A0EF12CB327A2E24ADBA
SHA1:	5D758DCC4AFEAF7989E499E5842E2BA355C8C535
SHA-256:	E2AFA04C9A3E080712C94D68B9C1D33587FDDCBAEABA9DFCAF1D53D19F6A280A
SHA-512:	75AECACA92892F75129BC02D50293B1F144FA8A914305DDCC5F135C1FFCDA0EC35C6EE6CCE036081D91E865A49FEDEBD09AD8903BFD6BB4D8A741E5360C38F31
Malicious:	false
Reputation:	low
Preview:	#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .onetrust-vendors-list-handler:hover{color:#1f96db}#onetrust-banner-sdk:focus{outline:2px solid #000;outline-offset:-2px}#onetrust-banner-sdk a:focus{outline:2px solid #000}#onetrust-banner-sdk #onetrust-accept-btn-handler,#onetrust-banner-sdk #onetrust-reject-all-handler,#onetrust-banner-sdk #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-tcf2-vendor-count.ot-text-bold{font-weight:bold}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-icon,#ot-sync-ntfy .ot-close-icon{background-size:contain;background-repeat:no-repeat;background-position:center;height:12px;width:12px}#onetrust-banner-sdk .powered-by-logo,#onetrust-banner-sdk .ot-pc-footer-logo a,#onetrust-pc-sdk .powered-by-logo,#onetrust-pc-sdk .ot-pc-footer-

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15336)
Category:	dropped
Size (bytes):	15381
Entropy (8bit):	5.289819906943568
Encrypted:	false
SSDEEP:	384:LBBhCROUD9GrEnRQ/NkzifBetbyVRlavHaeaBx6cXWhUQ4FHTVA99:L8pZRnRJiotbyxavHaeaBYcXfQ4FHTc
MD5:	22EE89684ECCFA7A3BFF28D78C22FF4B
SHA1:	932D69D0CA8A6238007C3C23E96B052683F82FD0
SHA-256:	9418FABFB9E44D2E317C49C500D1F19C42CE6C8CF5B48197F78DA3FA6015077B
SHA-512:	3818E7B8E86E757192302BB5AF183CA961D19363BDB0342D9A80CFB8169C8070CC8B3501BDAD93094DDE945B61615E390E1F425D0B75CE095ABA44BE2EBDD1E9
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";let c=null;const s=["debug","info","warn","error"];let l=s.reduce((e,a,d)=>(e[a]=function(){var e="debug"===a?"log":a;if(c&&console&&"function"==typeof console[e]){var t=s.indexOf(c.toString().toLocaleLowerCase());if(!0===c\|\|-1<t&&t<=d){for(var n=arguments.length,i=new Array(n),o=0;o<n;o++)i[o]=arguments[o];const[d,...r]=[...i];console[e](a.toUpperCase()+" - (TTD) "+d,...r)}}},e),{});function e(e){c=e}let u=null,o={},p={},f={},v={};function t(e){var t=e[0],e=e[1];if("setIdentifier"!==t)throw"method not implemented";i(e)}function r(e,t){n(t),function t(e,i){let o=w(e,i,u.triggerElements);let n=w(e,i,u.cssSelectors);p[i]=p[i]\|\|[];f[i]=f[i]\|\|[];v[i]=v[i]\|\|[];for(var r of n)r&&r.tagName&&"INPUT"===r.tagName&&f[i].push(r);l.debug(`triggers ["${i}"] `,o);l.debug(`validInputs ["${i}"] `,n);o.forEach(e=>{p[i].push(e)});for(let n=0;n<o.length;n++){var a=function(){try{l.debug("Detect event: ",u.detectionEventType,"on element, ",o[n]);let e=Object.entries(f).map(e=>e[1])

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 65916, version 1.0
Category:	downloaded
Size (bytes):	65916
Entropy (8bit):	7.996241088127611
Encrypted:	true
SSDEEP:	1536:nAwBjS40rROWAAffkRf+aFDExB8+m+bHvYc3uezUAAxmn:AQh0ymaFDypmcHvhumUAA0n
MD5:	9FEB0110B6DFF9EE2B9EBD17F7A1AEE6
SHA1:	90BBE308A02D7CDA492E3BEB1A6091809B8F35C8
SHA-256:	8CEF08634DC57D6519717C5A99A9E502BDC96586FE64770520A4820B0B089920
SHA-512:	E5B4C7643A1E2F3C134D2A0A4E08922D01EEDB5CF7F463E885D58167F438CB1745D16ACA2E455733F59AC5B63D85D4A34EFB37D86281FB51273569A3E35D7085
Malicious:	false
Reputation:	low
URL:	https://all.accor.com/assets/fonts/roboto/regular/roboto-regular.woff2
Preview:	wOF2.......\|...................................?FFTM..~...L..L.`....T..<.....$..s.....6.$..8. ..q..f..I[ .....v..Y<uEO%.G.... .=.......T;G.....>...M....f.8M9d.........m.B.lv...!<......{...j..pG.Aj.......(.....p..I".4..otK..`rF..h9......U./.i..}.%...9M....$...&...a&F...0...KkX.v.G..T..UM.X.!t0.....(..,s.p.t..uG......w.jIPV.$..A.B..Z..........",q.!...T.FR.rOH.....".9_.+.=yl.1=.#.._.m.S....l..v.x%~.5M.......>..A.(g........r.......M.iV2.l_.I2...;.......T._....s...x/v=....:r..p.....PUr...J..."..F?>..<.\|r9d...*#......]...oD..&f"...x.....+.e...'..?y...&...Y.iu...vt.."......U...c\.3...:,.$...Hc.....oj.[.....x......./0}!Z..?..5...iI....i..0$..B......Q.A,.".:lN....._9..z....T...b...Y.U2(.j.t..t8.'...N.`...}..}.....&..H_...@.;.G....P..S.L...y....r.t...... ../.........`l.f.5[.b..cD....:,0_..?.....K...pn.O..........(J..T.9.$..'..;..).b.E......M.,J.........t......<Wp.......~".....S..I........}.^4.AP...r....D .w..,.~M...5.&....x.h.iW.5[I

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (10929)
Category:	dropped
Size (bytes):	10989
Entropy (8bit):	5.559075484568474
Encrypted:	false
SSDEEP:	192:pKTbR3F15jSr6AkNWESbToc3fqFhHr51PDMC7PVXnvQub1WfK:43rASWvTZ3qFPHfPb1WfK
MD5:	D67EFF6F3E47FC2AB88094F79EEDD741
SHA1:	7217356BF2E5E93013AC6902CB138FA3702C07C8
SHA-256:	CC801CE0C56B23A865F8DB45353F3D6B22B4A29C3728CF05D4634E181CBED937
SHA-512:	DF92FDB1C615F8E12CF7E32B2EF36E3DCD04C20CA438C3E1B3DC0446A3CD4DF8EFAE313EF650847B0CB511361CFCD09718E3FD8BA6C18B36BB380EE0DEF96FE2
Malicious:	false
Reputation:	low
Preview:	/* ktag.js - 2024-09-23 */.var Ktag_Constants=function(){return{KENSHOO_GCLID_NAME:"ken_gclid",GOOGLE_ADS_CLICK_PARAM_NAME:"_gac",GOOGLE_CLICK_ID_PARAM_NAME:"gclid",BING_CLICK_ID_PARAM_NAME:"msclkid",NO_PUBLISHER_CLICK_ID_PARAM_NAME:"npclid",AMP_CHANNEL_CLICK_ID_COOKIE_NAME:"ken_amp_gclid",AMP_LINKER_PARAM_NAME:"linker",UNIVERSAL_CHANNEL_PARAM_NAME:"kclid",UNIVERSAL_CHANNEL_COOKIE_NAME:"ken_uc",KPID_NAME:"kenpid",GBRAID_NAME:"gbraid",WBRAID_NAME:"wbraid",KENSHOO_GBRAID_NAME:"ken_gbraid",KENSHOO_WBRAID_NAME:"ken_wbraid",KENSHOO_PID_NAME:"ken_pid",KENSHOO_UUID_NAME:"ken_uuid"}}(),Ktag_Toggles=function(){return{isParseAmpLinkerParameters:function(){return!1},isUseNpclid:function(){return!0},isSupportFloodlightTag:function(){return!1},getFixelId:function(){return""},isDummyEnabled:function(){return!0},isDummyDisabled:function(){return!1},isDummyEnabledForDummyTids:function(){return!1},isDummyDisabledForDummyTids:function(){return!0},getDummyString:function(){return"Hello"},getDummyNumber:f

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5094), with no line terminators
Category:	dropped
Size (bytes):	5094
Entropy (8bit):	5.852415485952547
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRURDxm/HmOCJ:1DY0hf1bT47OIqWb1wDxmvmJ
MD5:	76A13CBDD295026CAB1B9C0D39C94AC2
SHA1:	2F230897E027E6696D8CF2E98A7A3393918DF511
SHA-256:	541D3F5CC4224F8A288457F4DD8BF66269A885DC3907D0C0C3900FA191009544
SHA-512:	D11389512D22001F195416A72E34696AC0B06A4BEE850FB56B43123BF1773E457363BABF38098E2CB109BBC11B699E50B11694ED07E3F5DE35BC56FEFBF5BE23
Malicious:	false
Reputation:	low
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23843), with escape sequences
Category:	downloaded
Size (bytes):	23930
Entropy (8bit):	5.42714919475621
Encrypted:	false
SSDEEP:	384:EqR7eZk8qlPRy4+TWLc2dImKhHQRv9t6A2s7/vINwMViTnGTBKKsomM8LKrY:ENZkblPMud716VKwwIiOKDkDY
MD5:	1CFFDD5C82CD0AFF2F453D352EA5903A
SHA1:	1BA286119EEEC53D6C99E2ED640D75EBD467B244
SHA-256:	20133CC700841EC85F087FF9834A922B482B9135E98574A9AFEBADE4C754558C
SHA-512:	7A625952E55D00A0A8D6B8E075375D27A6AD81A01A615FE430C08FFC56CF62E2745EF09E102EAED4DB35C4A5EDFB439DB64986A11234C3DE70FA7C459214F599
Malicious:	false
Reputation:	low
URL:	https://secure.quantserve.com/quant.js
Preview:	/* Copyright (c) 2008-2023, Quantcast Corp. https://www.quantcast.com/legal/license /.!function(){"use strict";var e="qcSes";function t(){var e=r();return"xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx".replace(/[xy]/g,(function(t){var n=(e+16Math.random())%16\|0;return e=Math.floor(e/16),("x"===t?n:3&n\|8).toString(16)}))}var n=function(){try{if(!window.sessionStorage)return t()}catch(e){return t()}var n;try{if(n=window.sessionStorage.getItem(e))return n}catch(e){return t()}n=t();try{window.sessionStorage.setItem(e,n)}catch(e){}return n}();function r(){return(new Date).getTime()}function o(){return new Date}function a(e){var t=new Date(2e3,e,1,0,0,0,0),n=t.toUTCString(),r=new Date(n.substring(0,n.lastIndexOf(" ")-1));return t.getTime()-r.getTime()}function i(){return Math.round(2147483647*Math.random())}var c=/qcdbgc=1$/.test(window.location.toString());function u(e,t){if("undefined"!=typeof console){var n="ERROR"===e?".[41m QuantJS .[0m":".[44m QuantJS .[0m";console.log.apply(console,[n].conca

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	307487
Entropy (8bit):	5.585380949589633
Encrypted:	false
SSDEEP:	6144:Z4qhGbgBuco9k2639cM8Gp/12gtu9BW24n1e:Sqecuco9wAEE
MD5:	E57ECC2F9FFBA537D242E1E9C3981EDA
SHA1:	6700FAA26F9A9A09C270AC7A8BE67F35BFB005CE
SHA-256:	B8242833288F6CBEE55C3156F2457EED5C07FF235EDB28D0818474043D159E03
SHA-512:	F2FCB9F6DDE9A70EC71CA2E18F8A4B23F286E1C30B78C629FF1B425F309940EA7CF402C285919B3CC78D3A420049EAA9CC704389C1B2FBB1E8556BD2A7F1544E
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/destination?id=G-66B47X8JYS&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"5",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":20,"vtp_rules":["list","accor\\.com","movenpick\\.com"],"tag_id":105},{"function":"__ogt_ga_send","priority":10,"vtp_value":true,"tag_id":107},{"function":"__ogt_dma","priority":10,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":108},{"function":"__ogt_1p_data_v2","priority":10,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR"

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (58876), with no line terminators
Category:	downloaded
Size (bytes):	58876
Entropy (8bit):	5.405683338218142
Encrypted:	false
SSDEEP:	1536:buY9NdAkLYPFvFkxF94zPnSJpSFDKNo5/H:buQdApFoF94zPnSJpSFDP5/H
MD5:	4328E910DE583AD53B3A7A76455AF005
SHA1:	E040010E5EF4121A3A163AACDC664D6AA4AFEC74
SHA-256:	D4963B8AFEBFA0063B5D17B4C80F49BCE702A37EA5C9B91BB3C996BB9DEA4B60
SHA-512:	F807BA8B0AE2D5387E93E292918EEB4D7D1AC7635566A38EE2E101FBE8A7C6C23E704770EFCB1401EB5D1385605CBFB15F0A840AC150770049D2A4D6CA9A0DFA
Malicious:	false
Reputation:	low
URL:	https://static.ads-twitter.com/uwt.js
Preview:	!function(){var t={6173:function(t,e,n){var r;t.exports=(r=r\|\|function(t,e){var r;if("undefined"!=typeof window&&window.crypto&&(r=window.crypto),"undefined"!=typeof self&&self.crypto&&(r=self.crypto),"undefined"!=typeof globalThis&&globalThis.crypto&&(r=globalThis.crypto),!r&&"undefined"!=typeof window&&window.msCrypto&&(r=window.msCrypto),!r&&void 0!==n.g&&n.g.crypto&&(r=n.g.crypto),!r)try{r=n(2480)}catch(t){}var i=function(){if(r){if("function"==typeof r.getRandomValues)try{return r.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof r.randomBytes)try{return r.randomBytes(4).readInt32LE()}catch(t){}}throw new Error("Native crypto module could not be used to get secure random number.")},o=Object.create\|\|function(){function t(){}return function(e){var n;return t.prototype=e,n=new t,t.prototype=null,n}}(),a={},c=a.lib={},u=c.Base={extend:function(t){var e=o(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (10378), with no line terminators
Category:	downloaded
Size (bytes):	11427
Entropy (8bit):	5.769094629504433
Encrypted:	false
SSDEEP:	192:y/uruSxl0b4y9GAoJIWkWF9ESxcggTL6I8:y/uruSxcsRSSfa78
MD5:	618F4DE00168C1340C90A5B1401572AC
SHA1:	5BA3EC7D497E16BB1B29535D0D1BA7F80F9E5504
SHA-256:	6E078B8F78D20BB53B2CE9BE8200D9BA915B379DE9DA406D593E9AD225B45885
SHA-512:	887E50C206532770A7EF37D01304DB6883C2EAAF91D0850505ACBDA23B758E8C17D9C898604CC739271BB9A3AEA3E59BFC13E6290ED4464B5C0429DFFB92BA79
Malicious:	false
Reputation:	low
URL:	https://all.accor.com/.rum/@adobe/helix-rum-js@%5E2/dist/rum-standalone.js
Preview:	<!DOCTYPE html><html lang="en"><head><script type="text/javascript" src="/ruxitagentjs_ICA7NVfhqrux_10285240307101407.js" data-dtconfig="rid=RID_572422066\|rpid=-177340047\|domain=accor.com\|reportUrl=/rb_80be963f-a859-4808-9b2a-ceb8d44df738\|app=0dae2710ec98cad4\|cuc=85aac0bj\|mel=100000\|expw=1\|featureHash=ICA7NVfhqrux\|dpvc=1\|md=mdcc1=fx-cdn-forward\|lastModification=1729814722355\|srsr=50000\|tp=500,50,0\|rdnt=1\|uxrgce=1\|agentUri=/ruxitagentjs_ICA7NVfhqrux_10285240307101407.js"></script><script type="text/javascript">var kameleoonLoadingTimeout = 1000;window.kameleoonQueue = window.kameleoonQueue \|\| [];window.kameleoonStartLoadTime = new Date().getTime();if (!document.getElementById('kameleoonLoadingStyleSheet')){ if (!window.kameleoonDisplayPageTimeOut) { var kameleoonS = document.getElementsByTagName('script')[0];var kameleoonCc = '*{ visibility: hidden !important; background-image: none !important; }';var kameleoonStn = document.createElement('style');kameleoonStn.type = 'text/css';kameleoo

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	9475
Entropy (8bit):	5.052197443430508
Encrypted:	false
SSDEEP:	192:YI9JZk2tNiBoXiBVH7Y7T1HtJpZ1bz3wIp:YmJ22t7XiBVH7Y7TFt1hrhp
MD5:	212E1D83C8F2FA2E650521C770D5A035
SHA1:	2835A3E2784DA83CAD0A71D4791B5372CCA2E1C6
SHA-256:	A43D25A65C83DD32C926A281BF5ADC2A4026544E7AE61CF7857E0689FA0B88D6
SHA-512:	7FB914149F2EC4518DD46CA0710E3CAD76A95F2F3C5771492170E57389E8CE0A33E189CEE76EC4F5F847767CE05DA1EBC6BB4E2B4A5B0D2B770D925DBC602CAC
Malicious:	false
Reputation:	low
Preview:	[{"id":"item0","text":"Stay","tracking":"stay","target":"_self","panels":[[{"id":"item0-panel-620f65ef-43f","text":"Find a hotel","tracking":"find_a_hotel","url":"https://all.accor.com/usa/index.en.shtml","highlight":false},{"id":"item1-panel-ea10afd5-8f9","text":"Resorts","tracking":"resorts","url":"https://resorts.accor.com/","highlight":false},{"id":"item2-panel-15263526-187","text":"Apartments and villas","tracking":"aparthotel","url":"https://apartmentsandvillas.accor.com/am/en/apartments-all","highlight":false},{"id":"item3-panel-357d059a-038","text":"Homes","tracking":"homes","url":"https://apartmentsandvillas.accor.com/am/en/homes-ALL","highlight":false},{"id":"item4-panel-5956b94d-b88","text":"Villas","tracking":"villas","url":"https://apartmentsandvillas.accor.com/am/en/villas-all","highlight":false},{"id":"item5-panel-627a845c-882","text":"Our brands","tracking":"our_brands","url":"/content/all/en/brands","highlight":false},{"id":"item6-panel-48a68feb-080","text":"Day Use","

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	65
Entropy (8bit):	4.314128390879881
Encrypted:	false
SSDEEP:	3:2erWeKBRk35KLWAzRERxzfXHqq/H4Y3:29M3tRdfaqN
MD5:	2DEA9F0F7E122E81EE9A3752902BDF19
SHA1:	8747D6D270E001CEEA1174FF1D365D9CDEA52DCD
SHA-256:	3D49CCE674B56473177888E83BA3303C68B74AF8F0032A94F4814F73F59132B9
SHA-512:	723AC6A0C7A4139882197D5E4B59A48DB20A83C63E498C8C5FA1E057DBA75F33A1F927CC286D006BF107A04211998873FCC82656B719C40D49F633C466F0CD8F
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"response":{"status_code":400,"body":""}}..

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 256774
Category:	downloaded
Size (bytes):	58673
Entropy (8bit):	7.994977978733345
Encrypted:	true
SSDEEP:	1536:GU1wlZ5Su8dmY/T85czulBG6YdX/nGb/Sf7m:nGB6xzuvG6YJ/nGgy
MD5:	38DAF974DAA3B4E6CF4E589C16F799F4
SHA1:	77BA1EA3A0E546C53EF553F7E7226427BB75414B
SHA-256:	3C3CF97226EB836835F41BC8AF2288E5128CDBA39E888DA45B5519F7D29040A5
SHA-512:	BFC5589D1BED1F37CE61754D633FF3A5AF909507AFAF2547F6B7E6FDCE8F9AC9BA8CB2475E89AF08515E4496BC66D9A1381BA618EB79DEDDAB5D3978DC2A3444
Malicious:	false
Reputation:	low
URL:	https://cdn.evgnet.com/beacon/accorsa/accor/scripts/evergage.min.js
Preview:	...........i{.F.0.........DQ..d..<.,.J...82'O.h..@.&H-.y~...^.X...d.{.;.."..^.....k.%m.b4.....9....77..<O.Y.&s>c.\|.M.[+t..(w..6.o>.....7..f....Mlk?.f..d.>~.c;.X..G....C.^3.y..6Kg..W.$[L.v6.oFy{.3.X.O#Y.#6..6.A.Z.6Os.......O9...[6...h..l6o.m{./....Ng....v...,..\|>.E....l.V.....hO.k..=....k..7..<.w..UnG.?JlY.=.....eS>._._..,..WapS.l&... .$...e.q0.z......3.G..t..`.....b.p.S.....t..;l:M.l..J..V...kX".....~......d...'.......'.4..t...3......^.@&...p7.N.z8d..zb.s......4.;+.e~yOV.y2.pYa..z.m.. ..e..y@M=\. o.>..&.....]D.`...X..b...j...mnF..q...l.....x4...>b.y6... .......4.1Y....E..Z..-;!l..6...Yv..p...g3.....m.../.y[aF{...Y......c...".h.4Zc...+.......Y..!O.py{.->.\|..~`./...<67k]I@.....{z.#.Y.V^..-..........".. ....wg:...~.S..t..~..C&......G.2...Uc.i\..6.d.6.3,G...(%...C....K.0..>{............. ....\n..[.z2.,....o..X.I;D......../..!.H.IN1......5P;.w.G...D!._..?..k5.ocw......%..`D.C...D].z.^.l=..p.6....\|.z......a..../.mC...APS...p......t.......Gp..z.6~..

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	497
Entropy (8bit):	4.684891921463926
Encrypted:	false
SSDEEP:	12:t4O6aVCd3luZsgbfFTLE+C1ydL0ZQ9jXcaggOCedJI5iNtcME:t4O6aUdVmLCwdL0u/OTJAOtcME
MD5:	B57C99C9D1E3C50B2114C6DB053D7FF0
SHA1:	ADA8ABFED92BA8A545BBD9D299D74D5972CC4AE8
SHA-256:	691DCDB24853A0F5CE4E6597E5713DEA66799B57FFE2C2A10F28F98E0B569B19
SHA-512:	0DAB6D06F386D922FB28F70F2590D4F9C361E7F4E5D5E581B98E59AAC12B266CBA596FFCCD87203B4330673EE4EC1D459A1ABDFC4B066D243A43B2BF7909F0EE
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg"><path class="ot-floating-button__svg-fill" d="M14.588 0l.445.328c1.807 1.303 3.961 2.533 6.461 3.688 2.015.93 4.576 1.746 7.682 2.446 0 14.178-4.73 24.133-14.19 29.864l-.398.236C4.863 30.87 0 20.837 0 6.462c3.107-.7 5.668-1.516 7.682-2.446 2.709-1.251 5.01-2.59 6.906-4.016zm5.87 13.88a.75.75 0 00-.974.159l-5.475 6.625-3.005-2.997-.077-.067a.75.75 0 00-.983 1.13l4.172 4.16 6.525-7.895.06-.083a.75.75 0 00-.16-.973z" fill="#FFF" fill-rule="evenodd"/></svg>

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/src=6773840;type=ah_count;cat=viewpage;ord=1231646715;gtm=45j91e4as1v886152357z86262265z9891108097za200zb6262265;dc_pre=1;u1=AccorHotels;u3=USD;u4=us;u5=EUR;u8=page_view;u19=en-us;u22=informationandservices%3A%3Aapp%20download;u41=895171141.1730274398;dma=0;npa=1;gcs=G111;gcd=13r3r3r3r7l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=730383567;s3p=1;~oref=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (34339)
Category:	downloaded
Size (bytes):	336386
Entropy (8bit):	5.6210856022924585
Encrypted:	false
SSDEEP:	3072:vGA9z4LVJWEnADFXe4i9lUwzhLgxWHx6QyTJjCHWm5tWmw:V45ADFX3i9lnFB/y18q
MD5:	1F5662CE4B387990F20CF119603729FB
SHA1:	96D316D57E12FE2B4F27FC4522F115E3640DF368
SHA-256:	2B071D613E4643E0A374DDFD321E50908CBCFC613089BC26054CC9C138729D21
SHA-512:	7ACE760413F855C3D19D024C1870C558C7F285935CD6B90C04CD5F9E761989FDA22492C8123DB0D2165FD9E1535B982E98E36824706327E6BA0F8EBF8F5C7605
Malicious:	false
Reputation:	low
URL:	https://all.accor.com/a/etc.clientlibs/ace/clientlibs-modules/components/clientlib-login-connect.lc-1f5662ce4b387990f20cf119603729fb-lc.min.js
Preview:	/*. Creates cookie for login component in AEM and. * loading before customer api to be able to connect with test envs. /.function createCustomerEnvCookie() {. const AemDomainsList = /^(?:build\|buildqa\|run\|runqa\|uat)(?:-(.))(?:.accor)\.(?:com)$/gm;. const AemDomainExec = AemDomainsList.exec(window.location.host) \|\| null;. const valueset = document.querySelector('[data-customer-env]')?.getAttribute('data-customer-env');. if (valueset && AemDomainExec) {. const name = 'customer-env';. const value = valueset;. document.cookie = name + "=" + value + "" + "; domain=" + window.location.host + "; path=/";. }.}..createCustomerEnvCookie();..var fe=typeof globalThis<"u"?globalThis:typeof window<"u"?window:typeof global<"u"?global:typeof self<"u"?self:{};function Ke(ot){return ot&&ot.__esModule&&Object.prototype.hasOwnProperty.call(ot,"default")?ot.default:ot}var de={exports:{}};(function(ot,gt){(function(E,I){ot.exports=I()})(typeof self<"u"?self:fe,funct

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52360)
Category:	dropped
Size (bytes):	349823
Entropy (8bit):	5.4181183321056725
Encrypted:	false
SSDEEP:	3072:8JV0gSqdzJ3IZoOkn+gs29IlIoL+kyqAfN+Th3dFTUOQeyePEMuDZjUX1YkE/L4F:8JV06+gs29UIoL+kFAfg9dFTU9ecu/
MD5:	67F88B2D9812BB2687A28FF0FAD579D6
SHA1:	EE940479B2456259831C880B80406E5099D8C434
SHA-256:	15BB0889AD69CBC01DCE2D9A2DF36BE01B6AE97E0E57510DCA89A56D095BF0D5
SHA-512:	403D726407F12132003D6AF1743A5B5CC682D520F6D637DF4EFC8708BDAB5B7B153444D06175E33A540152101DC957CECE23C909E7EB89E1DDB973DAB3A21F75
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";function t(){t=function(){return e};var e={},r=Object.prototype,n=r.hasOwnProperty,o="function"==typeof Symbol?Symbol:{},i=o.iterator\|\|"@@iterator",a=o.asyncIterator\|\|"@@asyncIterator",c=o.toStringTag\|\|"@@toStringTag";function u(t,e,r){return Object.defineProperty(t,e,{value:r,enumerable:!0,configurable:!0,writable:!0}),t[e]}try{u({},"")}catch(t){u=function(t,e,r){return t[e]=r}}function l(t,e,r,n){var o=e&&e.prototype instanceof p?e:p,i=Object.create(o.prototype),a=new I(n\|\|[]);return i._invoke=function(t,e,r){var n="suspendedStart";return function(o,i){if("executing"===n)throw new Error("Generator is already running");if("completed"===n){if("throw"===o)throw i;return T()}for(r.method=o,r.arg=i;;){var a=r.delegate;if(a){var c=g(a,r);if(c){if(c===s)continue;return c}}if("next"===r.method)r.sent=r._sent=r.arg;else if("throw"===r.method){if("suspendedStart"===n)throw n="completed",r.arg;r.dispatchException(r.arg)}else"return"===r.method&&r.abrupt("return",r.arg);

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (504)
Category:	downloaded
Size (bytes):	906
Entropy (8bit):	5.464993612040931
Encrypted:	false
SSDEEP:	24:/D7d/2A6qggoEiSgP1Y4vv98KuoCG2m1YN73Ze:3dmqDoEiSgP1Zv98KuoCGZW3g
MD5:	91ACFE7CA172AF47F628E88402176079
SHA1:	19DB4773295D601F314B8F5C7F7CAE023A68C536
SHA-256:	1D5E2A340D630718CD8679CDA8DC6E390672E519AFB965694AB365D52ED4AD2A
SHA-512:	7D01FBB30DBC348144AE55373E102C6868468F9DDB24BB8513B8715ACE0DB36FEA8E0CD589E800DA92199169F653AD0986028C98C46301D19A140AE1688841B8
Malicious:	false
Reputation:	low
URL:	https://all.accor.com/a/etc.clientlibs/ace/components/structure/base-page/clientlib-one-trust/one-trust.lc-91acfe7ca172af47f628e88402176079-lc.min.js
Preview:	function checkPlatform(){function c(){var a=window.location.search;return-1<a.indexOf("platform\x3dAPP-IPHONE")\|\|-1<a.indexOf("platform\x3dAPP-ANDROID")?!0:!1}if(/APP-(IPHONE\|ANDROID)/.test(function(a){a=("; "+document.cookie).split("; "+a+"\x3d");if(2===a.length)return a.pop().split(";").shift()}("platform"))\|\|c()){document.cookie="OptanonAlertBoxClosed\x3d"+(new Date).toISOString()+"; path\x3d/";var b=new Date;b.setYear(b.getFullYear()+1);b=b.toISOString();var d=(new Date).toString().replace(/ /g,."+").replace(/:/g,"%3A"),e=(new URLSearchParams(window.location.search)).get("otConsentString");document.cookie="OptanonConsent\x3ddatestamp\x3d"+d+"\x26version\x3d6.14.0\x26interactionCount\x3d0\x26isIABGlobal\x3dfalse\x26landingPath\x3dNotLandingPage\x26groups\x3d"+encodeURIComponent(e\|\|"C0001:1,C0002:0,C0003:0,C0004:0")+"\x26hosts\x3d\x26legInt\x3d; expires\x3d"+b+"; path\x3d/"}}checkPlatform();

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15336)
Category:	downloaded
Size (bytes):	15381
Entropy (8bit):	5.289819906943568
Encrypted:	false
SSDEEP:	384:LBBhCROUD9GrEnRQ/NkzifBetbyVRlavHaeaBx6cXWhUQ4FHTVA99:L8pZRnRJiotbyxavHaeaBYcXfQ4FHTc
MD5:	22EE89684ECCFA7A3BFF28D78C22FF4B
SHA1:	932D69D0CA8A6238007C3C23E96B052683F82FD0
SHA-256:	9418FABFB9E44D2E317C49C500D1F19C42CE6C8CF5B48197F78DA3FA6015077B
SHA-512:	3818E7B8E86E757192302BB5AF183CA961D19363BDB0342D9A80CFB8169C8070CC8B3501BDAD93094DDE945B61615E390E1F425D0B75CE095ABA44BE2EBDD1E9
Malicious:	false
Reputation:	low
URL:	https://js.adsrvr.org/up_loader.1.1.0.js
Preview:	!function(){"use strict";let c=null;const s=["debug","info","warn","error"];let l=s.reduce((e,a,d)=>(e[a]=function(){var e="debug"===a?"log":a;if(c&&console&&"function"==typeof console[e]){var t=s.indexOf(c.toString().toLocaleLowerCase());if(!0===c\|\|-1<t&&t<=d){for(var n=arguments.length,i=new Array(n),o=0;o<n;o++)i[o]=arguments[o];const[d,...r]=[...i];console[e](a.toUpperCase()+" - (TTD) "+d,...r)}}},e),{});function e(e){c=e}let u=null,o={},p={},f={},v={};function t(e){var t=e[0],e=e[1];if("setIdentifier"!==t)throw"method not implemented";i(e)}function r(e,t){n(t),function t(e,i){let o=w(e,i,u.triggerElements);let n=w(e,i,u.cssSelectors);p[i]=p[i]\|\|[];f[i]=f[i]\|\|[];v[i]=v[i]\|\|[];for(var r of n)r&&r.tagName&&"INPUT"===r.tagName&&f[i].push(r);l.debug(`triggers ["${i}"] `,o);l.debug(`validInputs ["${i}"] `,n);o.forEach(e=>{p[i].push(e)});for(let n=0;n<o.length;n++){var a=function(){try{l.debug("Detect event: ",u.detectionEventType,"on element, ",o[n]);let e=Object.entries(f).map(e=>e[1])

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9217)
Category:	dropped
Size (bytes):	234260
Entropy (8bit):	5.456621895233652
Encrypted:	false
SSDEEP:	3072:zfLeYH8AtPJ137OeR8NteGvQ+AMPpgArl0xYu58K713FN:zfLeYc+PJxH8N7QQGArHu58K713z
MD5:	C04BB3EDB0F1A33B985B3285055FE1FA
SHA1:	0AE234EBC67E016B8A3B5603885A67160493227C
SHA-256:	668C6828672FA8600B7A0632CB328EE63A31361BE6734987B04985FCD9D08D4F
SHA-512:	8E154181A67EF7706AB11421D2A91270F9620895CA54EDA89E73E60533FB2F72CF7E3323F4F56EB08C177F69E4CFC36117E011B3DD2479B07267C7E1F74C8B5D
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1687
Entropy (8bit):	3.7322594802445694
Encrypted:	false
SSDEEP:	24:DzMziDooiUH2wQMyiKQKgO4Qt+QcvVGzW/JiSv4b1eAXkCtah//mWjM:c2JOUjSch//7M
MD5:	A8289FA34A25CAECFDEF61A628E3B6E2
SHA1:	6934445A50AB628AF1F5EFA15172702AD15FFC69
SHA-256:	9F7AD2299D6AA37E1B679F1B5D4693FC1E3C94D5F7ECAF5101E049AA59153C95
SHA-512:	3B9F85AE60124B8EFBFD7660B9DC8ECA85546D6ADD097D736971500E8E343F5E1702E7BB4D6405150B426886511E68926FD78FD9B62BEE5415D2A7D9EF0E6C8D
Malicious:	false
Reputation:	low
URL:	https://via.batch.com/manifest.json
Preview:	{. "format": 2,. "versions": [. {. "ver": "1.0.0-rc6". },. {. "ver": "1.0.0-rc8". },. {. "ver": "1.0.1". },. {. "ver": "1.0.3". },. {. "ver": "1.0.4". },. {. "ver": "1.1.0". },. {. "ver": "1.1.3". },. {. "ver": "1.1.4". },. {. "ver": "1.1.5". },. {. "ver": "2.0.0". },. {. "ver": "2.0.1". },. {. "ver": "2.0.2". },. {. "ver": "2.0.3". },. {. "ver": "2.0.4". },. {. "ver": "2.0.5". },. {. "ver": "2.0.6". },. {. "ver": "2.0.8". },. {. "ver": "2.0.9". },. {. "ver": "2.1.0". },. {. "ver": "2.2.0-rc1". },. {. "ver": "2.2.0". },. {. "ver": "2.2.1". },. {. "ver": "2.2.2-rc.1". },. {. "ver": "2.2.2". },. {. "ver": "2.3.0". },. {. "ver": "3.0.1". },. {. "ver": "3.0.2". },. {. "ver": "3.0.3". }

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1463), with no line terminators
Category:	dropped
Size (bytes):	1463
Entropy (8bit):	5.228596387181185
Encrypted:	false
SSDEEP:	24:ebHuaze3AenYyKAeCv4sXV0XV0MqfJC9bqf7zR+ZqXzSLV0XV0MqfJSqf7zFaYpo:NaCpFLF0F0MqBaqf7l+ZqXOh0F0MqBS7
MD5:	C27C1772BEAC44F533D39A7C6D6C6E7E
SHA1:	CB3B8422C49013D9F6B53C3F957E52136932E5D1
SHA-256:	D4FEFC57404DA3E7E722CBD14586CF61FFE694F5CF9E5768231DCAE5D9A865E6
SHA-512:	B283EDEE26C037A747A589FF5A1346A2C6FA3D9CFF1EB30EBCA034FDECBE232BDCF724A5041415611D59454314DD24B763A9D8D2F3EAFB2B550208D2A20A2011
Malicious:	false
Reputation:	low
Preview:	Kameleoon.Targeting.evaluate_LANDING_PAGE=function(e){if(Kameleoon.Internals.runtime.gathererRun){let n=Kameleoon.Internals.runtime.Visitor.currentVisit.landingPageURL;return{targeting:null!=n&&new RegExp(e.value).test(n),rescheduleTargeting:!1}}return null};Kameleoon.Internals.runtime.audienceSegments = [{"id":283129,"name":"App Offer V2 Banner Promo Desktop","tree":{"orOperator":true,"orGuiLevel":0,"leftChild":{"orOperator":false,"orGuiLevel":1,"leftChild":{"orOperator":false,"orGuiLevel":1,"leftChild":{"targetingCondition":{"type":"SEGMENT","disabled":false,"weight":1,"include":true,"linkedSegmentId":227010}},"rightChild":{"targetingCondition":{"type":"LANDING_PAGE","disabled":false,"weight":1,"value":"(.)https\\://all\\.accor\\.com/hotel/(.)","include":true}}},"rightChild":{"targetingCondition":{"type":"DEVICE_TYPE","disabled":false,"weight":1,"value":"DESKTOP","include":true}}},"rightChild":{"orOperator":false,"orGuiLevel":1,"leftChild":{"orOperator":false,"orGuiLevel":1,"leftCh

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	914
Entropy (8bit):	5.027308163162442
Encrypted:	false
SSDEEP:	24:LsrZyHT420+9EQY7Wbvz/OiQWbP7RWS8PxiNyUnMWbzma:LsrZg0+9I78zWsb7wSqxXUMva
MD5:	44CB9CE2E83BA56026A41FCE0A867816
SHA1:	BF4987D99B62B8EF3E460F8AF6FEE9EFF86DFFAC
SHA-256:	16B413B0A867991CDD10ABEE42AF3E2937E0D94D3B5C6B71F8169213CE5C699A
SHA-512:	F1DC0B135C05742F6DD86C087E23B1CD1D780526E6E6F6769C544DF501E1A8D30146FEE5D36D10929F8BBCDB1E3565F88FEA0AF37F4CDA3DA4E33D56A8E38CCA
Malicious:	false
Reputation:	low
Preview:	./Function to decode the cookie /.function getCookie(appcname) {. let matches = document.cookie.match(new RegExp(. "(?:^\|; )" + appcname.replace(/([\.$?\|{}\[\]\\\/\+^])/g, '\\$1') + "=([^;])". ));. return matches ? decodeURIComponent(matches[1]) : undefined;.}../Function to disable the components with the "data-hide-mobile" class/.function disableComponentsInApp() {. const platformCookie = getCookie("platform");. const appClassName = "data-hide-mobile";. if(platformCookie && (platformCookie == "APP-ANDROID" \|\| platformCookie == "APP-IPHONE")){. let hideMobleComponentsClass = document.getElementsByClassName(appClassName);. for(let element of hideMobleComponentsClass){. element.style = 'display:none';. }. }.}..function onDocumentReady() {. disableComponentsInApp();.}.document.addEventListener("DOMContentLoaded", onDocumentReady);..

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (565)
Category:	downloaded
Size (bytes):	32707
Entropy (8bit):	5.285111549518646
Encrypted:	false
SSDEEP:	768:81CFCetAUWHSfPAV2wC4LESx+VK6Iku3ifyA/gqoyEVlR:xLfPPwC4LEScIj3ifyQgqoBVlR
MD5:	BF921AF342FD2C40139671DBF0920A1F
SHA1:	C3CA18AD7AEC35192414A342CF2F88A61FD9EBF5
SHA-256:	B4FD432B0CD46263E46623622211CD79368F7E267AFD963D78F2216480D8E568
SHA-512:	AECD1CD2369B3A9C3129D75D073F65FFBA552A4696FAA38C717570298A70F2A7A0CB10EF94E7213E0628C76D6F2A7A3A7A789656A34F13B906375372F2F9F1C0
Malicious:	false
Reputation:	low
URL:	https://all.accor.com/a/etc.clientlibs/core/wcm/components/commons/datalayer/acdl/core.wcm.components.commons.datalayer.acdl.lc-bf921af342fd2c40139671dbf0920a1f-lc.min.js
Preview:	function _slicedToArray(t,e){return _arrayWithHoles(t)\|\|_iterableToArrayLimit(t,e)\|\|_unsupportedIterableToArray(t,e)\|\|_nonIterableRest()}function _nonIterableRest(){throw new TypeError("Invalid attempt to destructure non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.");}.function _iterableToArrayLimit(t,e){if("undefined"!=typeof Symbol&&Symbol.iterator in Object(t)){var n=[],r=!0,o=!1,a=void 0;try{for(var i,u=t[Symbol.iterator]();!(r=(i=u.next()).done)&&(n.push(i.value),!e\|\|n.length!==e);r=!0);}catch(t){o=!0,a=t}finally{try{r\|\|null==u.return\|\|u.return()}finally{if(o)throw a;}}return n}}function _arrayWithHoles(t){if(Array.isArray(t))return t}.function _createForOfIteratorHelper(t){if("undefined"==typeof Symbol\|\|null==t[Symbol.iterator]){if(Array.isArray(t)\|\|(t=_unsupportedIterableToArray(t))){var e=0,n=function(){};return{s:n,n:function(){return e>=t.length?{done:!0}:{done:!1,value:t[e++]}},e:function(t){throw t;},f:n}}throw new T

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/11264017752?random=1730274400095&cv=11&fst=1730274400095&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4as0v9104227775z8812226527za200zb812226527&gcd=13r3r3r3r5l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&hn=www.googleadservices.com&frm=0&tiba=App%20Download&npa=0&pscdl=noapi&auid=461077611.1730274398&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	48
Entropy (8bit):	3.1994764927035653
Encrypted:	false
SSDEEP:	3:M+xRKSWljGkhbAYn:Xst9
MD5:	52CAA374F9D8E80A43D843453A09451E
SHA1:	F20B4B2FC00180AD9895BED85B931F038BDCDF18
SHA-256:	4F8F48B18463DD38185B16DEEE997ADF27F88ED4036BEA70AFA90A9CE8DAD648
SHA-512:	FCBFDDCB33739EAF3E2E95086599D04E4FE7B07A3905E3710BD303C005EE2DEF632F2F59817895ABA8C0A1B14C77941FFCFE232E74E8401CB873AC3663E71E08
Malicious:	false
Reputation:	low
Preview:	R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52360)
Category:	downloaded
Size (bytes):	349823
Entropy (8bit):	5.4181183321056725
Encrypted:	false
SSDEEP:	3072:8JV0gSqdzJ3IZoOkn+gs29IlIoL+kyqAfN+Th3dFTUOQeyePEMuDZjUX1YkE/L4F:8JV06+gs29UIoL+kFAfg9dFTU9ecu/
MD5:	67F88B2D9812BB2687A28FF0FAD579D6
SHA1:	EE940479B2456259831C880B80406E5099D8C434
SHA-256:	15BB0889AD69CBC01DCE2D9A2DF36BE01B6AE97E0E57510DCA89A56D095BF0D5
SHA-512:	403D726407F12132003D6AF1743A5B5CC682D520F6D637DF4EFC8708BDAB5B7B153444D06175E33A540152101DC957CECE23C909E7EB89E1DDB973DAB3A21F75
Malicious:	false
Reputation:	low
URL:	https://analytics.tiktok.com/i18n/pixel/static/main.MTJhNGMzN2YwMQ.js
Preview:	!function(){"use strict";function t(){t=function(){return e};var e={},r=Object.prototype,n=r.hasOwnProperty,o="function"==typeof Symbol?Symbol:{},i=o.iterator\|\|"@@iterator",a=o.asyncIterator\|\|"@@asyncIterator",c=o.toStringTag\|\|"@@toStringTag";function u(t,e,r){return Object.defineProperty(t,e,{value:r,enumerable:!0,configurable:!0,writable:!0}),t[e]}try{u({},"")}catch(t){u=function(t,e,r){return t[e]=r}}function l(t,e,r,n){var o=e&&e.prototype instanceof p?e:p,i=Object.create(o.prototype),a=new I(n\|\|[]);return i._invoke=function(t,e,r){var n="suspendedStart";return function(o,i){if("executing"===n)throw new Error("Generator is already running");if("completed"===n){if("throw"===o)throw i;return T()}for(r.method=o,r.arg=i;;){var a=r.delegate;if(a){var c=g(a,r);if(c){if(c===s)continue;return c}}if("next"===r.method)r.sent=r._sent=r.arg;else if("throw"===r.method){if("suspendedStart"===n)throw n="completed",r.arg;r.dispatchException(r.arg)}else"return"===r.method&&r.abrupt("return",r.arg);

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5094), with no line terminators
Category:	downloaded
Size (bytes):	5094
Entropy (8bit):	5.850507319051981
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUjf4m/HmOR:1DY0hf1bT47OIqWb1Of4mvmI
MD5:	9FA6663784B5F01B8BA5FEBF764ABFDB
SHA1:	6AC2118357D3F929922E29C106F59685CAF946A1
SHA-256:	130E3AF8427591935293353D2BCAF966B017966E724BF75F1522B81384E6AA53
SHA-512:	80AAA419888CB37E0688701845AD0D67F135E4AD16D9B3BF5E9B6AAB810B652B40CB9810CD5B8AFD1F6F60C339E0BFE23BFD8895CD92B9D55E82422088EDE2DA
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/11264012497/?random=1730274400127&cv=11&fst=1730274400127&bg=ffffff&guid=ON&async=1&gtm=45be4as0v9104227775z8812226527za200zb812226527&gcd=13r3r3r3r5l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&hn=www.googleadservices.com&frm=0&tiba=App%20Download&npa=0&pscdl=noapi&auid=461077611.1730274398&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1363x524, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	14294
Entropy (8bit):	7.9637733493343665
Encrypted:	false
SSDEEP:	192:PbaARgB4VEiIr34GfHU3/9B9swBDcH1O4ktL6Vm77KpstwcKsrtrm01kBB:zabie4UHUlXBwH1fmGSKpsdqTT
MD5:	7D04CB13C70DF009892DC03B01E9885F
SHA1:	8DCFCC113B2A9681AEFB8F880AB1B31FE2B22915
SHA-256:	20FA487F25AE7597B7E07B682F3580E0AD766AC5B93F2731ECDE504CD0DA6078
SHA-512:	C915C3832F490EE3FD6C2F88F44C56293631EFA0EA7832073297CC159EA0FDCE2A087EB9955E2FB6A7177FB33FA2B8DEFED56988D1572FAB21DEA915348F83D6
Malicious:	false
Reputation:	low
Preview:	RIFF.7..WEBPVP8 .7.......S...>m6.I.".. .)8...in......oi.L...Q..z...z..6.Q....._._.?............p.u.g...~M~.......@.....u...I.].........Y.........G._....i.....q.C....../...t...V}_./._.>.}........o...o.?....O.......%~....g.......'..........'.W.......\|..-...#...O._.....v....~.....iiwCL.iiwCL.i8#LJ.Z].....z....k..<4..@.....-.......@.'..)...S....GRuwCL.iiwCL.iiwCL.iiwCL.iiwB...".P.Y."y.}.<.B..6..s..Hb..3.\.\|...(T.]..P.~o.7.......k,....B....fPe..f........"......l.$_vI.(.V.......H%.../...>.^o......1............q....X...4u'Wt4...t4...t4...t4...t)u....`r..;.r....G.X.P.tv....E......0..3.B.e......NsB...-O`xw.y2.=......wa.\|4....\|4....\|4....\|4....q..=V.J..\a....P".s..&L..?.=oE..._dt.%%..(.....Tt...J......;C+C...?......x1..S......;.~3.itQ~..\|....Pjy....T...WV.:....g.KK..g.KK..g.KK.T.]Q$`).=4+.d.n....q8...'<+F6y.#...H6..QC.......\|..1FS7..q..../.1Kpl.....J.S}..=+.D.#....Q$..=.[E.....bR..i{...X.......E..vO5$.k...1..(.m.^y...?.w.Zb..`/...P......t9G.k.Y$).

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1743)
Category:	downloaded
Size (bytes):	2649
Entropy (8bit):	5.401214985582964
Encrypted:	false
SSDEEP:	48:0Bc4z0N2U9mcm1gwUn45b6dtOA1dGHp9+NR7Rc3:u8N2U9Au+uHOtmtRc3
MD5:	556AB58C54488FB4B03AC122A8921DEF
SHA1:	327AA7CFE5F81DC255E9EE52FE5EF98B09A5F452
SHA-256:	303211888BA4E378B2F350A6540CBDA5FA3B02E8D0424CEA91483E64B711117F
SHA-512:	0013B347AE4D54C0B6AC03215E107C59AFF550910FC8435CFB8D798847F7F263D5218B5F6E4F3686995F64090E528201914B7E06EA7471F088BF13991DE736A9
Malicious:	false
Reputation:	low
URL:	https://all.accor.com/enroll-loyalty/check-authent.html?appId=all.accor&error_description=Authentication+is+required.&state=943159bff3e28347a576b4&error=login_required
Preview:	<!doctype html>.<html lang="en">. <head><script type="text/javascript" src="/ruxitagentjs_ICA7NVfhqrux_10285240307101407.js" data-dtconfig="rid=RID_-1869407295\|rpid=-896767583\|domain=accor.com\|reportUrl=/rb_80be963f-a859-4808-9b2a-ceb8d44df738\|app=0dae2710ec98cad4\|cuc=85aac0bj\|mel=100000\|expw=1\|featureHash=ICA7NVfhqrux\|dpvc=1\|md=mdcc1=fx-cdn-forward\|lastModification=1729814722355\|srsr=50000\|tp=500,50,0\|rdnt=1\|uxrgce=1\|agentUri=/ruxitagentjs_ICA7NVfhqrux_10285240307101407.js"></script><script type="text/javascript">var kameleoonLoadingTimeout = 1000;window.kameleoonQueue = window.kameleoonQueue \|\| [];window.kameleoonStartLoadTime = new Date().getTime();if (!document.getElementById('kameleoonLoadingStyleSheet')){ if (!window.kameleoonDisplayPageTimeOut) { var kameleoonS = document.getElementsByTagName('script')[0];var kameleoonCc = '*{ visibility: hidden !important; background-image: none !important; }';var kameleoonStn = document.createElement('style');kameleoonStn.type = 'text/css';ka

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	3.1994764927035653
Encrypted:	false
SSDEEP:	3:M+xRKSWljGkhbAYn:Xst9
MD5:	52CAA374F9D8E80A43D843453A09451E
SHA1:	F20B4B2FC00180AD9895BED85B931F038BDCDF18
SHA-256:	4F8F48B18463DD38185B16DEEE997ADF27F88ED4036BEA70AFA90A9CE8DAD648
SHA-512:	FCBFDDCB33739EAF3E2E95086599D04E4FE7B07A3905E3710BD303C005EE2DEF632F2F59817895ABA8C0A1B14C77941FFCFE232E74E8401CB873AC3663E71E08
Malicious:	false
Reputation:	low
URL:	https://sgtm.accor.com/_set_cookie?val=ov8Vt8y5kwvZRZp2wN%2B%2BHLvOL4YGPBxseNs2s7cPFUlbIElJ6ni4OEyPSZ1td%2BXUhr9T1K6HqdntfhQ84d97CCorDsbtZU2yH0K5RCCJ6ll4I%2FLXBK1CQfvAMwE3HdZZwopzOoIfKnA9AQWui9DCW1Ez%2BPd%2FpXw%3D
Preview:	R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/801297014?random=1730274399996&cv=11&fst=1730274399996&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4as0v9104227775z8812226527za200zb812226527&gcd=13r3r3r3r5l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&hn=www.googleadservices.com&frm=0&tiba=App%20Download&npa=0&pscdl=noapi&auid=461077611.1730274398&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5917)
Category:	downloaded
Size (bytes):	78294
Entropy (8bit):	5.328960781274239
Encrypted:	false
SSDEEP:	1536:RJeUwTz7hpwPC0NHM9ZVK01QYTZ02LKVsdmpyKcicxE:RITz7V0Ns9ZVKBYj8wKcHxE
MD5:	7F89FC3864DA761C2070C965A60C813F
SHA1:	C210F178BF95473FBC2560C492E224C96107D663
SHA-256:	0BAF2FEBFFF6A9344E907C0454F870A32487F90078BD8F411EA929EC6E431C4C
SHA-512:	495411BFB6B1F89FCCFC8EE80265849B818A847B9388F9691C9B18EA38D12AC253FD53E5FD0B1629E40AB08BF3CE8039F9C4FAD919C85D38604DCDB9B0190521
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/649915528506999?v=2.9.174&r=stable&domain=all.accor.com&hme=ead923021ccd3483ef3b9b04703d0a78b943fbdc01e8d7cec21c5059f1f4a5e9&ex_m=70%2C121%2C107%2C111%2C61%2C4%2C100%2C69%2C16%2C97%2C89%2C51%2C54%2C172%2C175%2C187%2C183%2C184%2C186%2C29%2C101%2C53%2C77%2C185%2C167%2C170%2C180%2C181%2C188%2C131%2C41%2C189%2C190%2C34%2C143%2C15%2C50%2C194%2C193%2C133%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C93%2C17%2C14%2C96%2C92%2C91%2C108%2C52%2C110%2C39%2C109%2C30%2C94%2C26%2C168%2C171%2C140%2C86%2C56%2C84%2C33%2C73%2C0%2C95%2C32%2C28%2C82%2C83%2C88%2C47%2C46%2C87%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C102%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C104%2C103%2C105%2C98%2C10%2C20%2C3%2C38%2C74%2C19%2C5%2C90%2C81%2C44%2C35%2C85%2C2%2C36%2C63%2C42%2C106%2C45%2C79%2C68%2C112%2C60%2C59%2C31%2C99%2C58%2C55%2C49%2C78%2C72%2C24%2C113
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	214093
Entropy (8bit):	5.236623260899122
Encrypted:	false
SSDEEP:	1536:OJGiCXG8Pc3206ExS2WYxaug7Jeugunu8uQuduAuFknkRknkfknkt1aogBdNjx+2:EGiCUI/knkRknkfknkjiwYJsk7B
MD5:	35D04454E2D4DA93A19A56451554E562
SHA1:	8B76A9085285D53FD9137CED5BB7E4CE9392B13D
SHA-256:	93EB3BCC986DF6EDE39DB602697489351AB1C750763CDD06AECCE82834AB0AD0
SHA-512:	2B4A32B66C876A4033851F00A7BBE3E6E470FD27832891C0D2A5E1B35DD0C82E86F4B5798A588EC83DF5A72CED28B864A632D31E4748A51071B07470DED9D0E0
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/consent/87c4fef0-8732-44e4-bee3-f4faa4ce5a9d/0191bc5d-2eb7-7479-9d95-740d90885831/en.json
Preview:	{"DomainData":{"pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccloseButtonType":"Icon","pccontinueWithoutAcceptText":"Continue without Accepting","MainText":"Cookies","MainInfoText":"When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. This information might be about you, your preferences or your device and is mostly used to make the site work as you expect it to. The information does not usually directly identify you, but it can give you a more personalized web experience. Because we respect your right to privacy, you can choose not to allow some types of cookies. Click on the different category headings to find out more and change our default settings. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer.","AboutText":"More information","AboutCookiesText":"Your Privacy","ConfirmText"

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text
Category:	downloaded
Size (bytes):	311
Entropy (8bit):	4.917805834821067
Encrypted:	false
SSDEEP:	6:qgqwxmXmGyKTFG7XxtAxiwFfX4RqxRAW2E3MDtLhEI243CRA1pv:qg5xmhyKTs7XAbFEG2fj/xv
MD5:	D36EFCA633906C89E0D17F267BACE8D4
SHA1:	01B981257E2447D6AC657288CC278392C73FA6AA
SHA-256:	66EC95E81C0C3F2B08C71BC3ED24E6368532C9920BC5B27C482599EE7F91449D
SHA-512:	C06D5164B2949FA5E79CED34FC5DAA8BA0EB065767F93258309B5BD4D9A2D0882F01066473EB86E2E2B8E0AB756354951439CA733B474D11B92DFCC07250211F
Malicious:	false
Reputation:	low
URL:	https://all.accor.com/batchsdk-worker-loader.js
Preview:	importScripts("https://via.batch.com/v3/worker.min.js");..const eventsList = ["pushsubscriptionchange", "install", "push", "notificationclick", "message"];.eventsList.forEach(eventName => {. self.addEventListener(eventName, event => {. event.waitUntil(self.handleBatchSDKEvent(eventName, event));. });.});.

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	362
Entropy (8bit):	4.415194148204812
Encrypted:	false
SSDEEP:	6:tI9mc4sl3eRI02GBXLqPpVVb/+drSfV+jVIRuRIY5KKtKoBdCL6CUu6xFmd9+i:t41eq0l1LqPHMQf8+uqsXB+6XuUmd93
MD5:	076C1AE62C0E5366C2E1DF428E334699
SHA1:	FCF9DDD8C136BC16B62363B4B4AB24F38ABD7234
SHA-256:	D52BF614639F4228C27AA14518D1FF5AD189B61CC7D2301A5FD3F7B56F7B5BE6
SHA-512:	D82074C0D27665AEF94CA6525614B9F7A64F2123F467F0F628D1C801B8C759DEC32918EFB42D10F6038EA0A730C0714305781D32E80133612D966F924BFBEB44
Malicious:	false
Reputation:	low
URL:	https://all.accor.com/a/content/dam/generic/icons/amenities/default.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24">. <path d="m15.87 8.56-5.51 5.51-2.29-2.28a.74.74 0 0 0-1.06 0 .75.75 0 0 0 0 1.06l2.82 2.81a.75.75 0 0 0 1.06 0l6-6a.77.77 0 0 0 0-1.07.75.75 0 0 0-1.02-.03Z"/>. <path d="M12 3.08A8.92 8.92 0 1 0 20.92 12 8.93 8.93 0 0 0 12 3.08Zm0 16.34A7.42 7.42 0 1 1 19.42 12 7.43 7.43 0 0 1 12 19.42Z"/>.</svg>.

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	21
Entropy (8bit):	3.8442328987631913
Encrypted:	false
SSDEEP:	3:YVXATML1WTYn:Y9AAZRn
MD5:	40A89EFAFFF3B82741AFCF386B4BE360
SHA1:	78B265BB58B03F4BF3BC8AFE56D2FADA8B5BB8BB
SHA-256:	E1AFF7D0B82AFC3DA592B1C024B9066E8FD2D8871EE9723BEEEB9B54DDF194DC
SHA-512:	5A15B0EF785634478A570C9EFF1D234CAD9CAEAF9AEBAF222789A1D7CF94E0DA19708734CF0527803E14F96AAC340EEA5826051857843291C2BB883F7ABD3771
Malicious:	false
Reputation:	low
URL:	https://data.kameleoon.io/visit/visitor?siteCode=qchmhd61sj&currentVisit=true&format=ENGINE&maxNumberPreviousVisits=25&version=2&visitorCode=6xp0ecmbb6q2q5jb
Preview:	{"previousVisits":[]}

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	dropped
Size (bytes):	314956
Entropy (8bit):	5.527277768676676
Encrypted:	false
SSDEEP:	3072:RpnfrTOALEKdx7chIcFdyLn4y3VGb5cVYx0:RNrVLEERcFdyL4KVE/0
MD5:	786D6B01DBFDE26C432550AF16C0973E
SHA1:	A64641550A1CE91ABD75EB7298E6237F825AF6B1
SHA-256:	1166A1DE85598EAC35989895EB5B312E1BB80CD21DDAD3661091B0D93C6FA1BE
SHA-512:	AD1983F7DB68792D9EE79219EE11A7AEEBAA79BDCBF3DE3283DC5B0B4C9DEADB4A3D19480D7E89074A7578A5545D0A800E376BA70748D749B618C8DF90185B71
Malicious:	false
Reputation:	low
Preview:	if (undefined === window.Kameleoon){(function(){!function(e,t){e.kbowser=t()}(this,(function(){return function(e){var t={};function r(i){if(t[i])return t[i].exports;var n=t[i]={i:i,l:!1,exports:{}};return e[i].call(n.exports,n,n.exports,r),n.l=!0,n.exports}return r.m=e,r.c=t,r.d=function(e,t,i){r.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:i})},r.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},r.t=function(e,t){if(1&t&&(e=r(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var i=Object.create(null);if(r.r(i),Object.defineProperty(i,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var n in e)r.d(i,n,function(t){return e[t]}.bind(null,n));return i},r.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return r.d(t,"a",t),t},r.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5094), with no line terminators
Category:	downloaded
Size (bytes):	5094
Entropy (8bit):	5.849141192276642
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRURDxm/HmOW:1DY0hf1bT47OIqWb1wDxmvmn
MD5:	4C84AA2EACEB8BEBDBDC1563077F7697
SHA1:	8D561D0864D03293B5AEE8171AD3457ED461D235
SHA-256:	A434C00A9296914DCCA23E15F692B2A259E704CE087D00CBE460C34427647583
SHA-512:	3FA773F3DC29A3AED6BB8019E5FE20CD0075918C11514F490697F2ABBD6C38EC902423334B9B231ED9AA88AFD67CF17CF2FDA2A30E707AA617E353D974017200
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/11264198074/?random=1730274400575&cv=11&fst=1730274400575&bg=ffffff&guid=ON&async=1&gtm=45be4as0v9104227775z8812226527za200zb812226527&gcd=13r3r3r3r5l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&hn=www.googleadservices.com&frm=0&tiba=App%20Download&npa=0&pscdl=noapi&auid=461077611.1730274398&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	33138
Entropy (8bit):	4.8955633925729085
Encrypted:	false
SSDEEP:	384:hGpWMpLK2XbEvgcRyc/VX7ioZvNK1N3HB6XHLPM9LM9pwDtqm4q9WhaRhaepyfqI:hsv/6FofLJaFt
MD5:	FF8AA230B53799AB7AE44C4B09AB591F
SHA1:	FBB6E834DE09FD98C252F1D8CE18AD4BFF8ABC8C
SHA-256:	577961C2D0A903BCE5C2591B72A2DCAC1C503D43D0024AAEEDC3F5A74BBAABD4
SHA-512:	5D32D0A653110C45687C34F1DF8963724E5054123BA1991E7FF3D4C23823CC2528BB2DA9A590527CE7FF91470443BD33AD4E54364A95360CDD757FFC66C8DB78
Malicious:	false
Reputation:	low
URL:	https://api.accor.com/referential/v1/pos/countries?siteCode=all
Preview:	[{"continentCode":"africa","continentLabel":"Africa - Middle East","countryList":[{"accorCountryCode":"algeria","accorCountryLabel":"Algeria","accorCountryLanguageLabel":"Algeria - English","homepageUrl":"/a/en.html","isoCountryCode":["dz"],"languageCode":"en","languageLabel":"English","pointOfSale":"africa","orderId":0},{"accorCountryCode":"algeria","accorCountryLabel":"Alg.rie","accorCountryLanguageLabel":"Alg.rie - Fran.ais","homepageUrl":"/a/fr.html","isoCountryCode":["dz"],"languageCode":"fr","languageLabel":"Fran.ais","pointOfSale":"africa","orderId":1},{"accorCountryCode":"angola","accorCountryLabel":"Angola","accorCountryLanguageLabel":"Angola","homepageUrl":"/a/en.html","isoCountryCode":["ao"],"languageCode":"en","languageLabel":"English","pointOfSale":"africa","orderId":3},{"accorCountryCode":"benin","accorCountryLabel":"Benin","accorCountryLanguageLabel":"Benin","homepageUrl":"/a/fr.html","isoCountryCode":["bj"],"languageCode":"fr","languageLabel":"Fran.ais","pointOfSal

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	13238
Entropy (8bit):	4.684864213083641
Encrypted:	false
SSDEEP:	384:hT3W1m4SOaikGrpMlohyBYMcwBR8P3BSPhEXXZoadzzXcV8AC9q5pNjn9cMBV6+L:h0kfA7y
MD5:	789B496559EF5E724DA60CEB44066B82
SHA1:	69A6C66CB81B19BB93474CBB4F9DB3206D3AB13F
SHA-256:	1C54D2EC9B996E9B55BDE8FDEA70A26D68BF38A6E79989795BD981D2BA8A41F8
SHA-512:	50F5174567DFB17831F1FD95A080C5D39FFB6170CC0C42465DFD71A2A13B2C15200FDB5F124C5F5AB1702189709B79C89C327753209F2D3DB50029DE792C59EF
Malicious:	false
Reputation:	low
URL:	https://api.accor.com/referential/v1/pos//currencies?groupByContinent=true
Preview:	[{"continentCode":"africa","continentLabel":"Africa - Middle East","currencyList":[{"currencyCode":"DZD","currencyLabel":"Algerian Dinar","currencySymbol":"...","accorCountryCode":["algeria"],"isoCountryCode":["dz"]},{"currencyCode":"AOA","currencyLabel":"Angolan Kwanza","currencySymbol":"Kz","accorCountryCode":["angola"],"isoCountryCode":["ao"]},{"currencyCode":"BHD","currencyLabel":"Bahraini Dinar","currencySymbol":"BD","accorCountryCode":["bahrain"],"isoCountryCode":["bh"]},{"currencyCode":"XAF","currencyLabel":"Central African Cfa Franc Beac","currencySymbol":null,"accorCountryCode":["cameroon","chad","democratic-republic-of-congo","equatorial-guinea"],"isoCountryCode":["cm","td","cd","gq"]},{"currencyCode":"XOF","currencyLabel":"Cfa Franc","currencySymbol":"CFA","accorCountryCode":["benin","ivory-coast","senegal","togo"],"isoCountryCode":["bj","ci","sn","tg"]},{"currencyCode":"EGP","currencyLabel":"Egyptian Pound","currencySymbol":".","accorCountryCode":["egypt"],"isoCountryCod

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5094), with no line terminators
Category:	downloaded
Size (bytes):	5094
Entropy (8bit):	5.849018669216857
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUQIl8m/HmO6t:1DY0hf1bT47OIqWb1JIl8mvmz
MD5:	409E82222A0220F4370B41137CEDA281
SHA1:	966379C3A65F851F3C96883437C84DDB426B6D40
SHA-256:	CDFB297E09BA6F9427A823890D3AC8D68CEB92D3D51A18D33847518325CB2C75
SHA-512:	9B9D303BB03F5FA53C96060A869450CF3644521D97C0C8A385466FF6210B8B2D0182451534CDF0FACC15DD3B88217EA3B29A6C1EC23A6089E7E7E3165C8789BF
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/11264017752/?random=1730274400095&cv=11&fst=1730274400095&bg=ffffff&guid=ON&async=1&gtm=45be4as0v9104227775z8812226527za200zb812226527&gcd=13r3r3r3r5l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&hn=www.googleadservices.com&frm=0&tiba=App%20Download&npa=0&pscdl=noapi&auid=461077611.1730274398&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	42
Entropy (8bit):	3.7572927927059716
Encrypted:	false
SSDEEP:	3:GAJzRWWXPxYAFDJLn:5zR/XPxYA7Ln
MD5:	3BA83E5651FA69097B1F5BDDD9CF4334
SHA1:	0B7E734F76965C5533022971179EF8B072A1715B
SHA-256:	4A1643EF46E69EE61A1507BFD8356E6EF13BD3FDC1DE88B4176B7F8368213361
SHA-512:	1EA803CF1418C2726724A04007350958086962CA949DE42497DC351081128483FAA83547B7CC685F06C660B6446D3A6D44F1D0D4216A2636A5ECB73B6534D3E6
Malicious:	false
Reputation:	low
Preview:	The requested resource could not be found.

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6575
Entropy (8bit):	7.868780505476325
Encrypted:	false
SSDEEP:	192:bLP0HRfcFnhUs0K5w43th5TBYKnyT/uauf0E:n8Hts0aLf5tYKnyT/2f0E
MD5:	2A44346B1C8EBD9F77E80243EAC1F4CA
SHA1:	5BBE6D806AF2E0AE9E61BA0CF92281B0D7FBDB91
SHA-256:	CE44CF17714A78EA7580562CA8CFF4D76AB5A0A8966C34395F2D0C516D3DD4E2
SHA-512:	03B69A4C5F17262E9DAB6F17AEB3051AAF31B6AFDD712F54390E619666BCF657EB3FF3C801A686F4AB27B1916064E1ADE1FC6D9E78610A5183BB418F3DFEC451
Malicious:	false
Reputation:	low
URL:	https://icons.batch.com/D5F02C3DD591499BA7CE3D42772E1066/default-icon.png
Preview:	.PNG........IHDR.............\r.f...vIDATx....xM..>.7..<........uKiP.Pj..:i.5].N.~.n....T.-B.)1D.,....B."E.."......8I.I.^g...=.G.s.Z"..k.bYYY "=.;..D.<..".1..4V.......@3....&"..:.}......M.\7........._..O./d.....:.YD.J'...\|....G.i..)..8...H.P.)M""U.....I.... "=.......4.. ....Hc..".1..4.. ....Hc..".1..4.. ....Hc..".1..4.. ....Hc..".1..4.. ....Hc..".1..4.. ....Hc..".1..4.. ....Hc..".1..4.. ....Hc..".1..4.. ....Hc..".1..4.. ....Hc..".1..4.. ....Hc..".1..4.. ....Hc..".1..4.. ....Hc..".1..4.. ....Hc...Ws..uL.....tAM..n..n;..G.AZZ.<<<............#P.bYi.f..I8.?...r....t..gw...Vj.20..4..u.O.'.1.l..O..3.....iJ.S..p..ES...kJ.E.K.......?-../....4g7.rJ.)...=M).....y.U+.V..s."...n.L..\|<Ut..;C.`.pg7.r23.;Cgdd"++....bf....`..F.!.Dd.....R...H....B.......z...#.)m"...P.+.....O.w.m.0~..6....(...+p...<....p..uTi..da.......2}U..IKK... em".....Q_..u[C... r5..<.g....;.....`.:..D$.....1q.<i.C...}+...7.MDf`..0...q...ii.6...Y.. ....cy..B.w.....-.MDfa..2./...7..S0.O..0..1..../R....K....

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (40095)
Category:	dropped
Size (bytes):	75590
Entropy (8bit):	5.300163254788885
Encrypted:	false
SSDEEP:	768:BmDgg7rVYGSnjXrw9AAgNgl7L/QApN2Yr2r3d0nWYixXPxXL6OZ:Dlng9rUA/Od4WYixXZXL6OZ
MD5:	48C9ECA98F6581E5A972894FA39C516B
SHA1:	27E09F82A6C25DDFEA2A75E2D6B1BC083A10BA7F
SHA-256:	349B2FAAACF1B0FA3E227A88E599093F76B76D62F696F5E4CFA79A2D48AADAD8
SHA-512:	DB07A1A996FD9E0C9B0B2CCB83E2FEA54A6FE3004CB869998280EE5F7393DBB7C35BD6CACE9D34655591B73E4063FA84FEAA4415D948D55782F8E6A5FD211286
Malicious:	false
Reputation:	low
Preview:	(function(){window.parent!=window&&(window.lightningjs\|\|function(d,f){var e=d.lightningjs={modules:f.modules},r=f.modules;e.expensive=function(b){b._waitforload=!0;return b};void 0;e.require=f.require;e.provide=function(b,l){function m(){var a=d.console;if(a&&a.error)try{a.error.apply(a,arguments)}catch(c){}else if(d.opera)try{d.opera.postError.apply(d.opera,arguments)}catch(c){}}function f(a){var c=a[0],k=a[1],b=0<k?p[k]:l,f=Array.prototype.slice.call(a[2]),h=f.shift();a=g._.fh[c]=g._.fh[c]\|\|[];.k=g._.eh[c]=g._.eh[c]\|\|[];g._.ph[c]=g._.ph[c]\|\|[];if(b){if(b=b[h])try{var d=b.apply(b,f)}catch(n){var e=n}else e=Error("unknown deferred method '"+h+"'"),m(e.toString());d&&(p[c]=d);if(e){for(;k.length;){c=k.shift();try{c(e)}catch(n){m(n)}}k.push=function(a){a(e)}}else{for(;a.length;){c=a.shift();try{c(d)}catch(n){m(n)}}a.push=function(a){a(d)}}}else m("cannot call deferred method '"+h+"' on 'undefined'")}function t(){for(var a=h.shift();a;){if(u)var c=!1;else{var b=a[1];c=0<b?p[b]:l;var e=Arr

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (54951)
Category:	downloaded
Size (bytes):	413965
Entropy (8bit):	5.497530568441849
Encrypted:	false
SSDEEP:	3072:ml42XUBXzXm3X2awiztGWETvaNwA0g5CptDY8/I8+40OrDmKD0C8Gp/q0f9PHS:mldUJbmH2+GWgCNZMhT/x0C8Gp/XVPy
MD5:	8FA97AA0305687D11C59BF3DC8DAA9FB
SHA1:	72C80D80447536FD5A2F7ECFF5FA5A14C6CCFEF0
SHA-256:	DE75BF867C591DC7382556A30C0CB8A7BE2B1AB73F49AEE1D21F9943F160358D
SHA-512:	C53EE44FE7D559ADAAD983B59885426E02CD2F2F59AB88C76534247D34E862CE0F0A57472CD8B2432694C24D5135D18B7B1500EB0B79AC038005E9700CC606A1
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-TKQN7D
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"1487",. . "macros":[{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"partner_id"},{"function":"__v","convert_case_to":1,"vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"dynamic_datas_ready"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"OnetrustActiveGroups"},{"function":"__jsm","vtp_javascript":["template","(function(){var a=\"\";1==",["escape",["macro",1],8,16],"\u0026\u0026",["escape",["macro",2],8,16],".match(\/C0002\|C0007\/)\u0026\u0026(a=\"true\");return a})();"]},{"function":"__e"},{"function":"__v","convert_case_to":1,"vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"user_data.uicity"},{"function":"__v","convert_case_to":2,"vtp_dataLayerVersion":2,"vtp_setDefaultValue"

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2486)
Category:	downloaded
Size (bytes):	2487
Entropy (8bit):	5.198994586042421
Encrypted:	false
SSDEEP:	48:Ka9y2QgyQoow12dAQBnLAQwzAmpQyyg1+Dd2gNdQ:LQgy9uAQZm+ylYd2gg
MD5:	B9E495783CFE9A32D0C928FB053A8E9B
SHA1:	6455D187DD028B7D45679EA7151149D3B029D337
SHA-256:	13C02C2CC512BDE38C2801CB35899632D368EDCF627E6E8C4B5F638BC49F5008
SHA-512:	384DA580D8A15920502CB3D172C8410D4E50E9628EC2620511103D6A1C83C7B43164D536ECFAE06296A2BB6B99872D998A492439011462732584AA9029F4E44F
Malicious:	false
Reputation:	low
URL:	https://static.tacdn.com/js3/taevents-c.js
Preview:	!function(e,t,n){"use strict";function o(e){console.error(e.message,e.stack)}function r(t,n){e.postMessage&&e.postMessage({type:g,params:t,msg:n},"*")}function a(e,t,n){function o(){e[a](t,o),n()}var r=w?"attachEvent":"addEventListener",a=w?"detachEvent":"removeEventListener";t=w?"on"+t:t,e[r](t,o)}function i(e){var n=t.createElement("div");return n.innerHTML='<iframe name="'+e+'" id="'+e+'" src="javascript:false"></iframe>',n.firstChild}function c(e){var o,c,s=t.createElement("form"),d="ta"+Math.random().toString().replace(".",""),u=i(d);e.pixel_version=m,s.method="post",s.style.display="none",s.action=q\|\|h,s.target=d,s.appendChild(u),a(u,"load",function(){var i=0;for(o in e)if(e.hasOwnProperty(o)&&e[o]!==n){if(i+=o.length+String(e[o]).length,i>y)return r(e,"POST data too large"),void t.body.removeChild(s);c=t.createElement("input"),c.name=o,c.type="hidden",c.value=e[o],s.appendChild(c)}a(u,"load",function(){t.body.removeChild(s)}),s.submit()}),t.body.appendChild(s)}function s(e){C=e}

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 42x42, components 3
Category:	downloaded
Size (bytes):	947
Entropy (8bit):	6.9347183867424205
Encrypted:	false
SSDEEP:	24:wA7Q7iw6619LlUaXrdxz3/9z9u11j2bXYNneQ:/8m6/LaaXrLzV41x8IwQ
MD5:	B029E959E3D47E8233A5341D02B03631
SHA1:	13E515AA7E362189478B23BB71189B88CF6C44BC
SHA-256:	0ED34AB4EB39E64564F455E440D75884520B9162AAC367FB60FB38A6B39E09C5
SHA-512:	2FEFB9AF706C108FFCC8589F9853320A82D4AFF6BDBAA59CEFF9EEC0555D54E166480A973F4FDA6A80AFA5960E35B70F4113520A49E9CC7C2595C90535D84C97
Malicious:	false
Reputation:	low
URL:	https://all.accor.com/components/footer/assets/images/logo-fevad.jpg
Preview:	......JFIF..........................................."......".$...$.6&&6>424>LDDL_Z_\|\|.............................."......".$...$.6&&6>424>LDDL_Z_\|\|.........."................................................$X...JX.U........_%.....I.........................................r..9........................................4T...../...........................2QR!1aq."..$3Ar...........?.fnM.....\.....M.?......M.?.F~+.?!..o..0!8"'....3...o...z.X..P.....rxE...s........].g.1..+4.>.9..=+.f:.........Y..r.am$..2G.U...}....H.9.c.9W..4....XR.........o1O.\......~.....J.../.x.G...e..I.].X......+..+l...R... ./M....F-....#Z\.......<w..o.........I..TL.>......x.A.P...w.LUc.~;.V.Wj.C,.TVP...KV.Xk.r...........(..R.=..d.x...{..*.o...U...W{..@..H>.....s.....@$.N....&......................1....!2AQR............?..<.l...`.Q.=Z.C....K.6.....l...T.l..k..............................!Ar..........?...cM.d}..T.?c.h....M.......$....

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/11263996687?random=1730274400168&cv=11&fst=1730274400168&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4as0v9104227775z8812226527za200zb812226527&gcd=13r3r3r3r5l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fall.accor.com%2Fa%2Fen%2Fnew-app-offer%2Fapp-download.html%3Fsource_caller%3Dbulk%26af_qr%3Dtrue%26shortlink%3D5m1nc8of%26c%3D20241013_ALL_AppBonusingMobileLp%26af_ad%3DQR_code_20241013_ALL_AppBonusingMobileLp%26pid%3DQR_code%26deep_link_value%3Daccor%253A%252F%252Fsearch%252Foffer%253Fpage_id%253Dddc8e830-2fc5-4492-ae7f-a63574b202f4%26af_adset%3DEN&hn=www.googleadservices.com&frm=0&tiba=App%20Download&npa=0&pscdl=noapi&auid=461077611.1730274398&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (10929)
Category:	downloaded
Size (bytes):	10989
Entropy (8bit):	5.559075484568474
Encrypted:	false
SSDEEP:	192:pKTbR3F15jSr6AkNWESbToc3fqFhHr51PDMC7PVXnvQub1WfK:43rASWvTZ3qFPHfPb1WfK
MD5:	D67EFF6F3E47FC2AB88094F79EEDD741
SHA1:	7217356BF2E5E93013AC6902CB138FA3702C07C8
SHA-256:	CC801CE0C56B23A865F8DB45353F3D6B22B4A29C3728CF05D4634E181CBED937
SHA-512:	DF92FDB1C615F8E12CF7E32B2EF36E3DCD04C20CA438C3E1B3DC0446A3CD4DF8EFAE313EF650847B0CB511361CFCD09718E3FD8BA6C18B36BB380EE0DEF96FE2
Malicious:	false
Reputation:	low
URL:	https://resources.xg4ken.com/js/v2/ktag.js?tid=KT-N2924-3EB
Preview:	/* ktag.js - 2024-09-23 */.var Ktag_Constants=function(){return{KENSHOO_GCLID_NAME:"ken_gclid",GOOGLE_ADS_CLICK_PARAM_NAME:"_gac",GOOGLE_CLICK_ID_PARAM_NAME:"gclid",BING_CLICK_ID_PARAM_NAME:"msclkid",NO_PUBLISHER_CLICK_ID_PARAM_NAME:"npclid",AMP_CHANNEL_CLICK_ID_COOKIE_NAME:"ken_amp_gclid",AMP_LINKER_PARAM_NAME:"linker",UNIVERSAL_CHANNEL_PARAM_NAME:"kclid",UNIVERSAL_CHANNEL_COOKIE_NAME:"ken_uc",KPID_NAME:"kenpid",GBRAID_NAME:"gbraid",WBRAID_NAME:"wbraid",KENSHOO_GBRAID_NAME:"ken_gbraid",KENSHOO_WBRAID_NAME:"ken_wbraid",KENSHOO_PID_NAME:"ken_pid",KENSHOO_UUID_NAME:"ken_uuid"}}(),Ktag_Toggles=function(){return{isParseAmpLinkerParameters:function(){return!1},isUseNpclid:function(){return!0},isSupportFloodlightTag:function(){return!1},getFixelId:function(){return""},isDummyEnabled:function(){return!0},isDummyDisabled:function(){return!1},isDummyEnabledForDummyTids:function(){return!1},isDummyDisabledForDummyTids:function(){return!0},getDummyString:function(){return"Hello"},getDummyNumber:f

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (940)
Category:	downloaded
Size (bytes):	329309
Entropy (8bit):	5.530150832009694
Encrypted:	false
SSDEEP:	6144:gbn49hl4gv063oQvp0b/WRseaG5RF62hjH:gihl4g9vGTKFFhjH
MD5:	4FF7EAA7E9F44ED852BBF4EB30151BDF
SHA1:	4D08787D08EB9B08406EAC27B21C3A8A67CC3305
SHA-256:	7C9608D570D3AC2EBAF5B8A8A359D4979D0BF9A8DE657EC0C22EA1D629C3EC09
SHA-512:	EF9BB2A09644FC8F9B93ACBAEE64E449127854BDF9551AA96F74CC94E7E52298DEC85B403981329FDC63EE65CFB2546C9EF9AD27F0F3F0D291E7EA6EC2EE21A2
Malicious:	false
Reputation:	low
URL:	https://all.accor.com/a/etc/cloudsettings.kernel.js/conf/all/settings/cloudsettings/default/contexthub
Preview:	/*. jQuery JavaScript Library v3.5.1. https://jquery.com/.. Includes Sizzle.js. https://sizzlejs.com/.. Copyright JS Foundation and other contributors. Released under the MIT license. https://jquery.org/license.. Date: 2020-05-04T22:49Z. Sizzle CSS Selector Engine v2.3.5. https://sizzlejs.com/.. Copyright JS Foundation and other contributors. Released under the MIT license. https://js.foundation/.. Date: 2020-03-14. jQuery JavaScript Library v1.12.4-aem. http://jquery.com/.. Includes Sizzle.js. http://sizzlejs.com/.. Copyright jQuery Foundation and other contributors. Released under the MIT license. http://jquery.org/license.. Date: 2016-05-20T17:17Z. Sizzle CSS Selector Engine v2.2.1. http://sizzlejs.com/.. Copyright jQuery Foundation and other contributors. Released under the MIT license. http://jquery.org/license.. Date: 2015-10-17. jQuery requestAnimationFrame - 0.2.2 - 2016-10-26. https://github.com/gnarf37/jquery-requestAnimationFrame. Copyright (c) 2016 Corey Frang; Licensed MIT

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 30, 2024 08:46:03.763454914 CET	49675	443	192.168.2.4	173.222.162.32
Oct 30, 2024 08:46:13.372670889 CET	49675	443	192.168.2.4	173.222.162.32
Oct 30, 2024 08:46:16.006253004 CET	49735	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:16.006304026 CET	443	49735	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:16.006383896 CET	49735	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:16.006645918 CET	49736	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:16.006697893 CET	443	49736	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:16.006766081 CET	49736	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:16.007085085 CET	49735	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:16.007112026 CET	443	49735	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:16.007742882 CET	49736	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:16.007766008 CET	443	49736	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.048271894 CET	443	49736	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.048305035 CET	443	49735	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.048830032 CET	49736	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.048860073 CET	443	49736	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.049359083 CET	49735	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.049392939 CET	443	49735	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.049827099 CET	443	49736	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.049890041 CET	49736	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.050386906 CET	443	49735	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.050443888 CET	49735	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.053766012 CET	49736	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.053833008 CET	443	49736	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.054722071 CET	49735	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.054833889 CET	443	49735	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.055174112 CET	49736	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.055185080 CET	443	49736	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.105581999 CET	49735	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.105581999 CET	49736	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.105613947 CET	443	49735	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.153939009 CET	49735	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.314198017 CET	443	49736	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.314254999 CET	443	49736	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.314310074 CET	49736	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.314369917 CET	443	49736	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.318406105 CET	443	49736	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.318447113 CET	443	49736	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.318466902 CET	49736	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.318514109 CET	443	49736	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.318572998 CET	49736	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.318619967 CET	443	49736	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.372744083 CET	49736	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.372823954 CET	443	49736	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.424731016 CET	49736	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.428399086 CET	443	49736	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.428478003 CET	443	49736	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.428549051 CET	49736	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.428575993 CET	443	49736	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.430975914 CET	443	49736	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.431025982 CET	49736	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.431032896 CET	443	49736	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.431238890 CET	443	49736	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.431308985 CET	49736	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.431349993 CET	443	49736	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.432518959 CET	443	49736	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.432573080 CET	49736	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.432581902 CET	443	49736	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.435591936 CET	443	49736	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.435600042 CET	443	49736	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.435640097 CET	443	49736	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.435657978 CET	49736	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.435667992 CET	443	49736	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.435700893 CET	49736	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.435894012 CET	443	49736	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.435944080 CET	49736	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.435950041 CET	443	49736	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.480598927 CET	443	49736	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.480660915 CET	49736	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.480670929 CET	443	49736	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.529257059 CET	49736	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.545897007 CET	443	49736	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.545908928 CET	443	49736	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.545939922 CET	443	49736	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.545973063 CET	49736	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.548271894 CET	443	49736	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.548327923 CET	49736	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.548337936 CET	443	49736	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.548372030 CET	443	49736	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.548381090 CET	49736	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.548386097 CET	443	49736	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.548414946 CET	49736	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.548526049 CET	443	49736	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.548564911 CET	49736	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.548571110 CET	443	49736	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.550209045 CET	443	49736	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.550216913 CET	443	49736	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.550240993 CET	443	49736	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.550275087 CET	49736	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.550286055 CET	443	49736	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.550317049 CET	49736	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.550338030 CET	49736	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.552757025 CET	443	49736	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.552812099 CET	49736	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.552818060 CET	443	49736	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.552861929 CET	49736	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.553353071 CET	443	49736	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.553423882 CET	49736	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.553431988 CET	443	49736	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.554002047 CET	443	49736	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.554063082 CET	49736	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.554069996 CET	443	49736	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.598815918 CET	49736	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.626075983 CET	49736	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.628529072 CET	49740	443	192.168.2.4	104.18.86.42
Oct 30, 2024 08:46:17.628573895 CET	443	49740	104.18.86.42	192.168.2.4
Oct 30, 2024 08:46:17.628631115 CET	49740	443	192.168.2.4	104.18.86.42
Oct 30, 2024 08:46:17.630992889 CET	49741	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.631033897 CET	443	49741	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.631092072 CET	49741	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.632112980 CET	49742	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.632181883 CET	443	49742	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.632252932 CET	49742	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.634649038 CET	49743	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.634664059 CET	443	49743	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.634716034 CET	49743	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.663093090 CET	443	49736	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.663109064 CET	443	49736	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.663161993 CET	443	49736	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.663177967 CET	49736	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.663192034 CET	443	49736	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.663201094 CET	443	49736	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.663245916 CET	49736	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.663254976 CET	443	49736	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.663258076 CET	49736	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.663266897 CET	443	49736	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.663301945 CET	49736	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.665791035 CET	443	49736	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.665818930 CET	443	49736	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.665863991 CET	49736	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.665880919 CET	443	49736	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.665895939 CET	49736	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.665920019 CET	49736	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.666785002 CET	443	49736	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.666815042 CET	443	49736	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.666856050 CET	49736	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.666862011 CET	443	49736	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.666901112 CET	49736	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.666918039 CET	443	49736	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.666980028 CET	49736	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.668843031 CET	49735	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.715341091 CET	443	49735	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.725883961 CET	49745	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.725922108 CET	443	49745	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.725986004 CET	49745	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.735944986 CET	49736	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.735958099 CET	443	49736	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.744895935 CET	49746	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.745001078 CET	443	49746	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.745079994 CET	49746	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.762656927 CET	49746	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.762680054 CET	443	49746	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.765940905 CET	49747	443	192.168.2.4	151.101.3.10
Oct 30, 2024 08:46:17.766038895 CET	443	49747	151.101.3.10	192.168.2.4
Oct 30, 2024 08:46:17.766107082 CET	49747	443	192.168.2.4	151.101.3.10
Oct 30, 2024 08:46:17.766263962 CET	49748	443	192.168.2.4	151.101.3.10
Oct 30, 2024 08:46:17.766278028 CET	443	49748	151.101.3.10	192.168.2.4
Oct 30, 2024 08:46:17.766320944 CET	49748	443	192.168.2.4	151.101.3.10
Oct 30, 2024 08:46:17.766664028 CET	49749	443	192.168.2.4	151.101.3.10
Oct 30, 2024 08:46:17.766690969 CET	443	49749	151.101.3.10	192.168.2.4
Oct 30, 2024 08:46:17.766740084 CET	49749	443	192.168.2.4	151.101.3.10
Oct 30, 2024 08:46:17.767229080 CET	49750	443	192.168.2.4	151.101.3.10
Oct 30, 2024 08:46:17.767235994 CET	443	49750	151.101.3.10	192.168.2.4
Oct 30, 2024 08:46:17.767282963 CET	49750	443	192.168.2.4	151.101.3.10
Oct 30, 2024 08:46:17.767710924 CET	49751	443	192.168.2.4	151.101.3.10
Oct 30, 2024 08:46:17.767720938 CET	443	49751	151.101.3.10	192.168.2.4
Oct 30, 2024 08:46:17.767767906 CET	49751	443	192.168.2.4	151.101.3.10
Oct 30, 2024 08:46:17.768198013 CET	49752	443	192.168.2.4	151.101.3.10
Oct 30, 2024 08:46:17.768234968 CET	443	49752	151.101.3.10	192.168.2.4
Oct 30, 2024 08:46:17.768287897 CET	49752	443	192.168.2.4	151.101.3.10
Oct 30, 2024 08:46:17.768744946 CET	49753	443	192.168.2.4	151.101.3.10
Oct 30, 2024 08:46:17.768771887 CET	443	49753	151.101.3.10	192.168.2.4
Oct 30, 2024 08:46:17.768821955 CET	49753	443	192.168.2.4	151.101.3.10
Oct 30, 2024 08:46:17.769417048 CET	49745	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.769438028 CET	443	49745	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.770983934 CET	49754	443	192.168.2.4	151.101.192.114
Oct 30, 2024 08:46:17.771013021 CET	443	49754	151.101.192.114	192.168.2.4
Oct 30, 2024 08:46:17.771064997 CET	49754	443	192.168.2.4	151.101.192.114
Oct 30, 2024 08:46:17.771682024 CET	49743	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.771702051 CET	443	49743	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.772161961 CET	49742	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.772186995 CET	443	49742	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.772716045 CET	49741	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.772728920 CET	443	49741	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.773185015 CET	49740	443	192.168.2.4	104.18.86.42
Oct 30, 2024 08:46:17.773201942 CET	443	49740	104.18.86.42	192.168.2.4
Oct 30, 2024 08:46:17.773427010 CET	49754	443	192.168.2.4	151.101.192.114
Oct 30, 2024 08:46:17.773438931 CET	443	49754	151.101.192.114	192.168.2.4
Oct 30, 2024 08:46:17.773818970 CET	49753	443	192.168.2.4	151.101.3.10
Oct 30, 2024 08:46:17.773828983 CET	443	49753	151.101.3.10	192.168.2.4
Oct 30, 2024 08:46:17.774100065 CET	49752	443	192.168.2.4	151.101.3.10
Oct 30, 2024 08:46:17.774117947 CET	443	49752	151.101.3.10	192.168.2.4
Oct 30, 2024 08:46:17.774564028 CET	49751	443	192.168.2.4	151.101.3.10
Oct 30, 2024 08:46:17.774576902 CET	443	49751	151.101.3.10	192.168.2.4
Oct 30, 2024 08:46:17.775079966 CET	49750	443	192.168.2.4	151.101.3.10
Oct 30, 2024 08:46:17.775089025 CET	443	49750	151.101.3.10	192.168.2.4
Oct 30, 2024 08:46:17.775335073 CET	49749	443	192.168.2.4	151.101.3.10
Oct 30, 2024 08:46:17.775346041 CET	443	49749	151.101.3.10	192.168.2.4
Oct 30, 2024 08:46:17.775733948 CET	49748	443	192.168.2.4	151.101.3.10
Oct 30, 2024 08:46:17.775746107 CET	443	49748	151.101.3.10	192.168.2.4
Oct 30, 2024 08:46:17.776041985 CET	49747	443	192.168.2.4	151.101.3.10
Oct 30, 2024 08:46:17.776051044 CET	443	49747	151.101.3.10	192.168.2.4
Oct 30, 2024 08:46:17.838902950 CET	49755	443	192.168.2.4	142.250.186.132
Oct 30, 2024 08:46:17.838918924 CET	443	49755	142.250.186.132	192.168.2.4
Oct 30, 2024 08:46:17.838993073 CET	49755	443	192.168.2.4	142.250.186.132
Oct 30, 2024 08:46:17.840102911 CET	49755	443	192.168.2.4	142.250.186.132
Oct 30, 2024 08:46:17.840114117 CET	443	49755	142.250.186.132	192.168.2.4
Oct 30, 2024 08:46:17.925993919 CET	443	49735	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.926357031 CET	443	49735	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.926364899 CET	443	49735	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.926425934 CET	49735	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.926454067 CET	443	49735	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.926697016 CET	49735	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.993119001 CET	49735	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.993242979 CET	443	49735	152.199.22.100	192.168.2.4
Oct 30, 2024 08:46:17.993362904 CET	49735	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.994755983 CET	49756	443	192.168.2.4	152.199.22.100
Oct 30, 2024 08:46:17.994795084 CET	443	49756	152.199.22.100	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 30, 2024 08:46:15.994277954 CET	192.168.2.4	1.1.1.1	0x68e3	Standard query (0)	all.accor.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:15.994581938 CET	192.168.2.4	1.1.1.1	0x602	Standard query (0)	all.accor.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:17.561753035 CET	192.168.2.4	1.1.1.1	0xd264	Standard query (0)	cdn.cookielaw.org	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:17.561894894 CET	192.168.2.4	1.1.1.1	0x6d34	Standard query (0)	cdn.cookielaw.org	65	IN (0x0001)	false
Oct 30, 2024 08:46:17.563419104 CET	192.168.2.4	1.1.1.1	0xe022	Standard query (0)	m.ahstatic.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:17.564312935 CET	192.168.2.4	1.1.1.1	0x9c0f	Standard query (0)	m.ahstatic.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:17.633018970 CET	192.168.2.4	1.1.1.1	0x6a5	Standard query (0)	cdn.evgnet.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:17.633657932 CET	192.168.2.4	1.1.1.1	0x73c0	Standard query (0)	cdn.evgnet.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:17.727263927 CET	192.168.2.4	1.1.1.1	0x60dd	Standard query (0)	static-p46175-e229011.adobeaemcloud.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:17.727926016 CET	192.168.2.4	1.1.1.1	0xb18d	Standard query (0)	static-p46175-e229011.adobeaemcloud.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:17.829606056 CET	192.168.2.4	1.1.1.1	0xcd56	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:17.830038071 CET	192.168.2.4	1.1.1.1	0x7d0e	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:20.880428076 CET	192.168.2.4	1.1.1.1	0xa0ce	Standard query (0)	cdn.evgnet.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:20.880650043 CET	192.168.2.4	1.1.1.1	0xd8ee	Standard query (0)	cdn.evgnet.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:20.887181997 CET	192.168.2.4	1.1.1.1	0x6b08	Standard query (0)	all.accor.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:20.888081074 CET	192.168.2.4	1.1.1.1	0x77c3	Standard query (0)	all.accor.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:22.816879034 CET	192.168.2.4	1.1.1.1	0xcf82	Standard query (0)	cdn.cookielaw.org	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:22.817398071 CET	192.168.2.4	1.1.1.1	0xbd53	Standard query (0)	cdn.cookielaw.org	65	IN (0x0001)	false
Oct 30, 2024 08:46:22.884439945 CET	192.168.2.4	1.1.1.1	0xd7d5	Standard query (0)	m.ahstatic.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:22.884660959 CET	192.168.2.4	1.1.1.1	0x2b0f	Standard query (0)	m.ahstatic.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:22.896179914 CET	192.168.2.4	1.1.1.1	0x8186	Standard query (0)	static-p46175-e229011.adobeaemcloud.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:22.896336079 CET	192.168.2.4	1.1.1.1	0x2423	Standard query (0)	static-p46175-e229011.adobeaemcloud.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:23.097826004 CET	192.168.2.4	1.1.1.1	0x607	Standard query (0)	api.accor.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:23.098027945 CET	192.168.2.4	1.1.1.1	0xb712	Standard query (0)	api.accor.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:23.901211977 CET	192.168.2.4	1.1.1.1	0x4cef	Standard query (0)	geolocation.onetrust.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:23.901593924 CET	192.168.2.4	1.1.1.1	0xc4af	Standard query (0)	geolocation.onetrust.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:24.985635042 CET	192.168.2.4	1.1.1.1	0x28ca	Standard query (0)	login.accor.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:24.986113071 CET	192.168.2.4	1.1.1.1	0x9633	Standard query (0)	login.accor.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:25.496702909 CET	192.168.2.4	1.1.1.1	0x3e7b	Standard query (0)	accor.onelink.me	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:25.497059107 CET	192.168.2.4	1.1.1.1	0x6e0d	Standard query (0)	accor.onelink.me	65	IN (0x0001)	false
Oct 30, 2024 08:46:25.773855925 CET	192.168.2.4	1.1.1.1	0xd0a2	Standard query (0)	geolocation.onetrust.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:25.774194002 CET	192.168.2.4	1.1.1.1	0xed62	Standard query (0)	geolocation.onetrust.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:26.429208994 CET	192.168.2.4	1.1.1.1	0x766d	Standard query (0)	api.accor.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:26.429826975 CET	192.168.2.4	1.1.1.1	0xb691	Standard query (0)	api.accor.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:27.906296015 CET	192.168.2.4	1.1.1.1	0xec73	Standard query (0)	qchmhd61sj.kameleoon.eu	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:27.906436920 CET	192.168.2.4	1.1.1.1	0xebaf	Standard query (0)	qchmhd61sj.kameleoon.eu	65	IN (0x0001)	false
Oct 30, 2024 08:46:29.314315081 CET	192.168.2.4	1.1.1.1	0x42b6	Standard query (0)	qchmhd61sj.kameleoon.eu	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:29.314522982 CET	192.168.2.4	1.1.1.1	0x26df	Standard query (0)	qchmhd61sj.kameleoon.eu	65	IN (0x0001)	false
Oct 30, 2024 08:46:30.667073011 CET	192.168.2.4	1.1.1.1	0xb566	Standard query (0)	data.kameleoon.io	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:30.667205095 CET	192.168.2.4	1.1.1.1	0xce4c	Standard query (0)	data.kameleoon.io	65	IN (0x0001)	false
Oct 30, 2024 08:46:30.742499113 CET	192.168.2.4	1.1.1.1	0x7165	Standard query (0)	aem-api.accor.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:30.743225098 CET	192.168.2.4	1.1.1.1	0x9a98	Standard query (0)	aem-api.accor.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:30.770309925 CET	192.168.2.4	1.1.1.1	0x5130	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:30.770577908 CET	192.168.2.4	1.1.1.1	0xf8e9	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:33.379091024 CET	192.168.2.4	1.1.1.1	0xe563	Standard query (0)	aem-api.accor.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:33.379530907 CET	192.168.2.4	1.1.1.1	0xd961	Standard query (0)	aem-api.accor.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:33.438591003 CET	192.168.2.4	1.1.1.1	0xb373	Standard query (0)	w.usabilla.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:33.438952923 CET	192.168.2.4	1.1.1.1	0xb89c	Standard query (0)	w.usabilla.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:37.059020042 CET	192.168.2.4	1.1.1.1	0x89ed	Standard query (0)	accorsa.germany-2.evergage.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:37.059851885 CET	192.168.2.4	1.1.1.1	0x8b9b	Standard query (0)	accorsa.germany-2.evergage.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:37.235291004 CET	192.168.2.4	1.1.1.1	0xfb0f	Standard query (0)	w.usabilla.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:37.235589027 CET	192.168.2.4	1.1.1.1	0xe5d3	Standard query (0)	w.usabilla.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:38.210201979 CET	192.168.2.4	1.1.1.1	0xc8d1	Standard query (0)	sgtm.accor.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:38.210391998 CET	192.168.2.4	1.1.1.1	0xdeda	Standard query (0)	sgtm.accor.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:38.956357002 CET	192.168.2.4	1.1.1.1	0xe72b	Standard query (0)	t.contentsquare.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:38.956486940 CET	192.168.2.4	1.1.1.1	0xa960	Standard query (0)	t.contentsquare.net	65	IN (0x0001)	false
Oct 30, 2024 08:46:38.959285021 CET	192.168.2.4	1.1.1.1	0xc72	Standard query (0)	resources.xg4ken.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:38.959491968 CET	192.168.2.4	1.1.1.1	0xcbe2	Standard query (0)	resources.xg4ken.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:38.959870100 CET	192.168.2.4	1.1.1.1	0xf14d	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:38.959980011 CET	192.168.2.4	1.1.1.1	0x3ac	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Oct 30, 2024 08:46:38.963766098 CET	192.168.2.4	1.1.1.1	0x5af	Standard query (0)	static.sojern.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:38.963891029 CET	192.168.2.4	1.1.1.1	0x291f	Standard query (0)	static.sojern.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:39.509177923 CET	192.168.2.4	1.1.1.1	0x9f6e	Standard query (0)	d6tizftlrpuof.cloudfront.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:39.509437084 CET	192.168.2.4	1.1.1.1	0x8226	Standard query (0)	d6tizftlrpuof.cloudfront.net	65	IN (0x0001)	false
Oct 30, 2024 08:46:39.586901903 CET	192.168.2.4	1.1.1.1	0x2974	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:39.587095022 CET	192.168.2.4	1.1.1.1	0x99d3	Standard query (0)	snap.licdn.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:39.589457989 CET	192.168.2.4	1.1.1.1	0x829	Standard query (0)	accorsa.germany-2.evergage.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:39.589628935 CET	192.168.2.4	1.1.1.1	0xc9a2	Standard query (0)	accorsa.germany-2.evergage.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:39.594995022 CET	192.168.2.4	1.1.1.1	0x93e5	Standard query (0)	sgtm.accor.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:39.595158100 CET	192.168.2.4	1.1.1.1	0x3fa6	Standard query (0)	sgtm.accor.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:39.799278975 CET	192.168.2.4	1.1.1.1	0xe6f2	Standard query (0)	static.ads-twitter.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:39.799648046 CET	192.168.2.4	1.1.1.1	0xb969	Standard query (0)	static.ads-twitter.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:40.690342903 CET	192.168.2.4	1.1.1.1	0xda2e	Standard query (0)	sc-static.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:40.690473080 CET	192.168.2.4	1.1.1.1	0x4ee3	Standard query (0)	sc-static.net	65	IN (0x0001)	false
Oct 30, 2024 08:46:40.736334085 CET	192.168.2.4	1.1.1.1	0x16bc	Standard query (0)	p.teads.tv	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:40.736468077 CET	192.168.2.4	1.1.1.1	0x37fd	Standard query (0)	p.teads.tv	65	IN (0x0001)	false
Oct 30, 2024 08:46:40.738754034 CET	192.168.2.4	1.1.1.1	0x5249	Standard query (0)	secure.quantserve.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:40.738920927 CET	192.168.2.4	1.1.1.1	0x3812	Standard query (0)	secure.quantserve.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:40.740673065 CET	192.168.2.4	1.1.1.1	0xe1fe	Standard query (0)	static.tacdn.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:40.740803957 CET	192.168.2.4	1.1.1.1	0x7f5f	Standard query (0)	static.tacdn.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:40.743078947 CET	192.168.2.4	1.1.1.1	0xbed7	Standard query (0)	analytics.tiktok.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:40.743244886 CET	192.168.2.4	1.1.1.1	0xd99a	Standard query (0)	analytics.tiktok.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:40.758546114 CET	192.168.2.4	1.1.1.1	0x74ba	Standard query (0)	cdn.tkrconnector.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:40.758677959 CET	192.168.2.4	1.1.1.1	0x218a	Standard query (0)	cdn.tkrconnector.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:40.793292046 CET	192.168.2.4	1.1.1.1	0x9e41	Standard query (0)	via.batch.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:40.793628931 CET	192.168.2.4	1.1.1.1	0x22cd	Standard query (0)	via.batch.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:40.842828035 CET	192.168.2.4	1.1.1.1	0x394d	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:40.843297958 CET	192.168.2.4	1.1.1.1	0x8ea	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Oct 30, 2024 08:46:40.869919062 CET	192.168.2.4	1.1.1.1	0xb1a0	Standard query (0)	tags.creativecdn.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:40.870157957 CET	192.168.2.4	1.1.1.1	0xd23b	Standard query (0)	tags.creativecdn.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:40.986614943 CET	192.168.2.4	1.1.1.1	0x1a01	Standard query (0)	js.adsrvr.org	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:40.987247944 CET	192.168.2.4	1.1.1.1	0x7837	Standard query (0)	js.adsrvr.org	65	IN (0x0001)	false
Oct 30, 2024 08:46:41.921885967 CET	192.168.2.4	1.1.1.1	0xd2b9	Standard query (0)	d.line-scdn.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:41.921885967 CET	192.168.2.4	1.1.1.1	0xcfec	Standard query (0)	d.line-scdn.net	65	IN (0x0001)	false
Oct 30, 2024 08:46:42.105607986 CET	192.168.2.4	1.1.1.1	0x3ad5	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:42.105607986 CET	192.168.2.4	1.1.1.1	0x39e5	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:42.666281939 CET	192.168.2.4	1.1.1.1	0xd226	Standard query (0)	srm.ba.contentsquare.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:42.666683912 CET	192.168.2.4	1.1.1.1	0x188b	Standard query (0)	srm.ba.contentsquare.net	65	IN (0x0001)	false
Oct 30, 2024 08:46:42.668623924 CET	192.168.2.4	1.1.1.1	0x3e	Standard query (0)	q-aeu1.contentsquare.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:42.669507027 CET	192.168.2.4	1.1.1.1	0x6a3c	Standard query (0)	q-aeu1.contentsquare.net	65	IN (0x0001)	false
Oct 30, 2024 08:46:43.642010927 CET	192.168.2.4	1.1.1.1	0x6523	Standard query (0)	www.tamgrt.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:43.651421070 CET	192.168.2.4	1.1.1.1	0xa654	Standard query (0)	www.tamgrt.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:43.656799078 CET	192.168.2.4	1.1.1.1	0xa528	Standard query (0)	tr.snapchat.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:43.688694954 CET	192.168.2.4	1.1.1.1	0x4bd6	Standard query (0)	tr.snapchat.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:43.689949036 CET	192.168.2.4	1.1.1.1	0x3e84	Standard query (0)	tr.snapchat.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:43.690601110 CET	192.168.2.4	1.1.1.1	0xc670	Standard query (0)	tr.snapchat.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:44.316029072 CET	192.168.2.4	1.1.1.1	0xbf7f	Standard query (0)	k-aeu1.contentsquare.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:44.316663027 CET	192.168.2.4	1.1.1.1	0xd65d	Standard query (0)	k-aeu1.contentsquare.net	65	IN (0x0001)	false
Oct 30, 2024 08:46:44.466801882 CET	192.168.2.4	1.1.1.1	0xb2b5	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:44.467349052 CET	192.168.2.4	1.1.1.1	0x693d	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 30, 2024 08:46:45.051626921 CET	192.168.2.4	1.1.1.1	0x7a53	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:45.052059889 CET	192.168.2.4	1.1.1.1	0x102b	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Oct 30, 2024 08:46:45.054478884 CET	192.168.2.4	1.1.1.1	0x9fa9	Standard query (0)	resources.xg4ken.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:45.054784060 CET	192.168.2.4	1.1.1.1	0x4a34	Standard query (0)	resources.xg4ken.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:45.059427023 CET	192.168.2.4	1.1.1.1	0xb73f	Standard query (0)	t.contentsquare.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:45.059890985 CET	192.168.2.4	1.1.1.1	0x9bc8	Standard query (0)	t.contentsquare.net	65	IN (0x0001)	false
Oct 30, 2024 08:46:45.060669899 CET	192.168.2.4	1.1.1.1	0x3d5d	Standard query (0)	d6tizftlrpuof.cloudfront.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:45.061141968 CET	192.168.2.4	1.1.1.1	0xb280	Standard query (0)	d6tizftlrpuof.cloudfront.net	65	IN (0x0001)	false
Oct 30, 2024 08:46:45.063432932 CET	192.168.2.4	1.1.1.1	0x4de0	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:45.064040899 CET	192.168.2.4	1.1.1.1	0x5395	Standard query (0)	snap.licdn.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:45.129312038 CET	192.168.2.4	1.1.1.1	0xf0f9	Standard query (0)	us.creativecdn.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:45.129667044 CET	192.168.2.4	1.1.1.1	0x304e	Standard query (0)	us.creativecdn.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:46.062077045 CET	192.168.2.4	1.1.1.1	0xa92f	Standard query (0)	cm.teads.tv	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:46.062535048 CET	192.168.2.4	1.1.1.1	0x7f72	Standard query (0)	cm.teads.tv	65	IN (0x0001)	false
Oct 30, 2024 08:46:46.063533068 CET	192.168.2.4	1.1.1.1	0x730f	Standard query (0)	insight.adsrvr.org	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:46.064114094 CET	192.168.2.4	1.1.1.1	0x1e2e	Standard query (0)	insight.adsrvr.org	65	IN (0x0001)	false
Oct 30, 2024 08:46:46.915826082 CET	192.168.2.4	1.1.1.1	0xb00b	Standard query (0)	static.ads-twitter.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:46.916243076 CET	192.168.2.4	1.1.1.1	0x602	Standard query (0)	static.ads-twitter.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:46.917210102 CET	192.168.2.4	1.1.1.1	0x98e2	Standard query (0)	sc-static.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:46.917815924 CET	192.168.2.4	1.1.1.1	0x82e0	Standard query (0)	sc-static.net	65	IN (0x0001)	false
Oct 30, 2024 08:46:46.983449936 CET	192.168.2.4	1.1.1.1	0x15af	Standard query (0)	static.tacdn.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:46.984193087 CET	192.168.2.4	1.1.1.1	0x12dd	Standard query (0)	static.tacdn.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:46.986759901 CET	192.168.2.4	1.1.1.1	0x51ec	Standard query (0)	sc-static.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:46.987271070 CET	192.168.2.4	1.1.1.1	0xd480	Standard query (0)	sc-static.net	65	IN (0x0001)	false
Oct 30, 2024 08:46:46.987735033 CET	192.168.2.4	1.1.1.1	0xd75f	Standard query (0)	analytics.tiktok.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:46.988001108 CET	192.168.2.4	1.1.1.1	0x2f39	Standard query (0)	analytics.tiktok.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:46.989911079 CET	192.168.2.4	1.1.1.1	0xcfc7	Standard query (0)	q-aeu1.contentsquare.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:46.990689993 CET	192.168.2.4	1.1.1.1	0x3cc1	Standard query (0)	q-aeu1.contentsquare.net	65	IN (0x0001)	false
Oct 30, 2024 08:46:47.057986975 CET	192.168.2.4	1.1.1.1	0xf769	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.058137894 CET	192.168.2.4	1.1.1.1	0x3296	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:47.104739904 CET	192.168.2.4	1.1.1.1	0xd195	Standard query (0)	js.adsrvr.org	65	IN (0x0001)	false
Oct 30, 2024 08:46:47.104739904 CET	192.168.2.4	1.1.1.1	0x67da	Standard query (0)	js.adsrvr.org	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.105993032 CET	192.168.2.4	1.1.1.1	0xbbe1	Standard query (0)	secure.quantserve.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.109303951 CET	192.168.2.4	1.1.1.1	0xe2a6	Standard query (0)	secure.quantserve.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:47.114315987 CET	192.168.2.4	1.1.1.1	0x1514	Standard query (0)	tags.creativecdn.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.114315987 CET	192.168.2.4	1.1.1.1	0x9355	Standard query (0)	tags.creativecdn.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:47.117264032 CET	192.168.2.4	1.1.1.1	0xdac0	Standard query (0)	cdn.tkrconnector.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.117448092 CET	192.168.2.4	1.1.1.1	0x64db	Standard query (0)	cdn.tkrconnector.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:47.120014906 CET	192.168.2.4	1.1.1.1	0xe34b	Standard query (0)	via.batch.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.120193005 CET	192.168.2.4	1.1.1.1	0xf99c	Standard query (0)	via.batch.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:47.122486115 CET	192.168.2.4	1.1.1.1	0x92a7	Standard query (0)	p.teads.tv	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.122663021 CET	192.168.2.4	1.1.1.1	0x24dd	Standard query (0)	p.teads.tv	65	IN (0x0001)	false
Oct 30, 2024 08:46:47.129580021 CET	192.168.2.4	1.1.1.1	0x733a	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.129580021 CET	192.168.2.4	1.1.1.1	0xac50	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Oct 30, 2024 08:46:47.131330013 CET	192.168.2.4	1.1.1.1	0xfcc7	Standard query (0)	d.line-scdn.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.131330013 CET	192.168.2.4	1.1.1.1	0x1bb6	Standard query (0)	d.line-scdn.net	65	IN (0x0001)	false
Oct 30, 2024 08:46:47.131886005 CET	192.168.2.4	1.1.1.1	0x8f99	Standard query (0)	srm.ba.contentsquare.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.132025003 CET	192.168.2.4	1.1.1.1	0x17da	Standard query (0)	srm.ba.contentsquare.net	65	IN (0x0001)	false
Oct 30, 2024 08:46:47.139766932 CET	192.168.2.4	1.1.1.1	0x38b8	Standard query (0)	tr.snapchat.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.139766932 CET	192.168.2.4	1.1.1.1	0xcf37	Standard query (0)	tr.snapchat.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:47.145438910 CET	192.168.2.4	1.1.1.1	0xdfe3	Standard query (0)	data.kameleoon.io	65	IN (0x0001)	false
Oct 30, 2024 08:46:47.145438910 CET	192.168.2.4	1.1.1.1	0x3485	Standard query (0)	data.kameleoon.io	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.302915096 CET	192.168.2.4	1.1.1.1	0x6ef8	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.305366993 CET	192.168.2.4	1.1.1.1	0xa571	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 30, 2024 08:46:47.423459053 CET	192.168.2.4	1.1.1.1	0xff3d	Standard query (0)	k-aeu1.contentsquare.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.423790932 CET	192.168.2.4	1.1.1.1	0xb1bd	Standard query (0)	k-aeu1.contentsquare.net	65	IN (0x0001)	false
Oct 30, 2024 08:46:47.643157005 CET	192.168.2.4	1.1.1.1	0xc9fa	Standard query (0)	c.contentsquare.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.643347025 CET	192.168.2.4	1.1.1.1	0x1261	Standard query (0)	c.contentsquare.net	65	IN (0x0001)	false
Oct 30, 2024 08:46:47.643940926 CET	192.168.2.4	1.1.1.1	0x57d2	Standard query (0)	fledge.teads.tv	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.644422054 CET	192.168.2.4	1.1.1.1	0x30d8	Standard query (0)	fledge.teads.tv	65	IN (0x0001)	false
Oct 30, 2024 08:46:47.645406961 CET	192.168.2.4	1.1.1.1	0x91c2	Standard query (0)	t.teads.tv	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.645678043 CET	192.168.2.4	1.1.1.1	0xe601	Standard query (0)	t.teads.tv	65	IN (0x0001)	false
Oct 30, 2024 08:46:47.738214970 CET	192.168.2.4	1.1.1.1	0x7f8f	Standard query (0)	cm.teads.tv	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.738408089 CET	192.168.2.4	1.1.1.1	0xfbc6	Standard query (0)	cm.teads.tv	65	IN (0x0001)	false
Oct 30, 2024 08:46:47.991027117 CET	192.168.2.4	1.1.1.1	0x3092	Standard query (0)	www.linkedin.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.991491079 CET	192.168.2.4	1.1.1.1	0xa918	Standard query (0)	www.linkedin.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:48.690814018 CET	192.168.2.4	1.1.1.1	0x5048	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:48.691358089 CET	192.168.2.4	1.1.1.1	0xe2c7	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:48.868802071 CET	192.168.2.4	1.1.1.1	0xb0a0	Standard query (0)	us.creativecdn.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:48.869266987 CET	192.168.2.4	1.1.1.1	0xeed	Standard query (0)	us.creativecdn.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:48.935239077 CET	192.168.2.4	1.1.1.1	0xa742	Standard query (0)	js.adsrvr.org	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:48.935445070 CET	192.168.2.4	1.1.1.1	0xe205	Standard query (0)	js.adsrvr.org	65	IN (0x0001)	false
Oct 30, 2024 08:46:49.079392910 CET	192.168.2.4	1.1.1.1	0x35d8	Standard query (0)	us.creativecdn.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:49.079668045 CET	192.168.2.4	1.1.1.1	0x3d90	Standard query (0)	us.creativecdn.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:49.084176064 CET	192.168.2.4	1.1.1.1	0x8d02	Standard query (0)	t.teads.tv	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:49.084316969 CET	192.168.2.4	1.1.1.1	0x9c57	Standard query (0)	t.teads.tv	65	IN (0x0001)	false
Oct 30, 2024 08:46:49.835091114 CET	192.168.2.4	1.1.1.1	0x72d1	Standard query (0)	t.co	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:49.835704088 CET	192.168.2.4	1.1.1.1	0x7745	Standard query (0)	t.co	65	IN (0x0001)	false
Oct 30, 2024 08:46:49.896008015 CET	192.168.2.4	1.1.1.1	0x3e29	Standard query (0)	analytics.twitter.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:49.896471024 CET	192.168.2.4	1.1.1.1	0xadf4	Standard query (0)	analytics.twitter.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:49.976759911 CET	192.168.2.4	1.1.1.1	0x3967	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:49.977015018 CET	192.168.2.4	1.1.1.1	0x3605	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Oct 30, 2024 08:46:51.184742928 CET	192.168.2.4	1.1.1.1	0xcbc9	Standard query (0)	rules.quantcount.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:51.184935093 CET	192.168.2.4	1.1.1.1	0xbc08	Standard query (0)	rules.quantcount.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:51.711520910 CET	192.168.2.4	1.1.1.1	0xaba7	Standard query (0)	tr.line.me	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:51.711689949 CET	192.168.2.4	1.1.1.1	0x626f	Standard query (0)	tr.line.me	65	IN (0x0001)	false
Oct 30, 2024 08:46:51.965137959 CET	192.168.2.4	1.1.1.1	0xe34a	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:51.965630054 CET	192.168.2.4	1.1.1.1	0x446d	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:51.967694998 CET	192.168.2.4	1.1.1.1	0xcf69	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:51.968077898 CET	192.168.2.4	1.1.1.1	0xd7d6	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Oct 30, 2024 08:46:51.969204903 CET	192.168.2.4	1.1.1.1	0xf7bb	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:51.969599962 CET	192.168.2.4	1.1.1.1	0x3a26	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:52.045613050 CET	192.168.2.4	1.1.1.1	0x9ca3	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:52.045888901 CET	192.168.2.4	1.1.1.1	0xcccb	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:52.194617033 CET	192.168.2.4	1.1.1.1	0x93b4	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:52.195251942 CET	192.168.2.4	1.1.1.1	0xed1a	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:52.478462934 CET	192.168.2.4	1.1.1.1	0xf60c	Standard query (0)	t.co	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:52.478804111 CET	192.168.2.4	1.1.1.1	0x5693	Standard query (0)	t.co	65	IN (0x0001)	false
Oct 30, 2024 08:46:52.480981112 CET	192.168.2.4	1.1.1.1	0x367d	Standard query (0)	analytics.twitter.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:52.481373072 CET	192.168.2.4	1.1.1.1	0xab64	Standard query (0)	analytics.twitter.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:52.917377949 CET	192.168.2.4	1.1.1.1	0x7443	Standard query (0)	pixel.tapad.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:52.917613983 CET	192.168.2.4	1.1.1.1	0x709c	Standard query (0)	pixel.tapad.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:53.339374065 CET	192.168.2.4	1.1.1.1	0x5ce2	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:53.339647055 CET	192.168.2.4	1.1.1.1	0xca31	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Oct 30, 2024 08:46:53.357142925 CET	192.168.2.4	1.1.1.1	0x2e18	Standard query (0)	f.creativecdn.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:53.357472897 CET	192.168.2.4	1.1.1.1	0x9230	Standard query (0)	f.creativecdn.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:53.717267990 CET	192.168.2.4	1.1.1.1	0x9f34	Standard query (0)	rules.quantcount.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:53.717433929 CET	192.168.2.4	1.1.1.1	0xc386	Standard query (0)	rules.quantcount.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:53.733386993 CET	192.168.2.4	1.1.1.1	0x3234	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:53.733623981 CET	192.168.2.4	1.1.1.1	0xe3c2	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:53.742016077 CET	192.168.2.4	1.1.1.1	0x308e	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:53.742285967 CET	192.168.2.4	1.1.1.1	0x2b0a	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:53.755465984 CET	192.168.2.4	1.1.1.1	0x2fed	Standard query (0)	tr.line.me	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:53.755717039 CET	192.168.2.4	1.1.1.1	0xa59a	Standard query (0)	tr.line.me	65	IN (0x0001)	false
Oct 30, 2024 08:46:53.961389065 CET	192.168.2.4	1.1.1.1	0x5fc9	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:53.961832047 CET	192.168.2.4	1.1.1.1	0xc4cd	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:54.723381996 CET	192.168.2.4	1.1.1.1	0x4d56	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:54.723531961 CET	192.168.2.4	1.1.1.1	0x9eb9	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:54.975682020 CET	192.168.2.4	1.1.1.1	0x1f7c	Standard query (0)	pixel.quantserve.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:54.975940943 CET	192.168.2.4	1.1.1.1	0x611	Standard query (0)	pixel.quantserve.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:55.675889969 CET	192.168.2.4	1.1.1.1	0x3bb2	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:55.676275969 CET	192.168.2.4	1.1.1.1	0xfeb5	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:55.748590946 CET	192.168.2.4	1.1.1.1	0xc86d	Standard query (0)	cm.teads.tv	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:55.748927116 CET	192.168.2.4	1.1.1.1	0x7391	Standard query (0)	cm.teads.tv	65	IN (0x0001)	false
Oct 30, 2024 08:46:56.121625900 CET	192.168.2.4	1.1.1.1	0x5e30	Standard query (0)	tr6.snapchat.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:56.122749090 CET	192.168.2.4	1.1.1.1	0x3083	Standard query (0)	tr6.snapchat.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:56.173456907 CET	192.168.2.4	1.1.1.1	0xf5c	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:56.174082994 CET	192.168.2.4	1.1.1.1	0xe3c0	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:56.353874922 CET	192.168.2.4	1.1.1.1	0x2f0	Standard query (0)	pixel.quantserve.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:56.354469061 CET	192.168.2.4	1.1.1.1	0xefce	Standard query (0)	pixel.quantserve.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:56.966717005 CET	192.168.2.4	1.1.1.1	0xd3e7	Standard query (0)	cm.teads.tv	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:56.967029095 CET	192.168.2.4	1.1.1.1	0x48d	Standard query (0)	cm.teads.tv	65	IN (0x0001)	false
Oct 30, 2024 08:46:57.307887077 CET	192.168.2.4	1.1.1.1	0x2965	Standard query (0)	ws.batch.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:57.308065891 CET	192.168.2.4	1.1.1.1	0x1392	Standard query (0)	ws.batch.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:58.063318968 CET	192.168.2.4	1.1.1.1	0x93b1	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:58.063477993 CET	192.168.2.4	1.1.1.1	0x3f9c	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Oct 30, 2024 08:46:58.131458044 CET	192.168.2.4	1.1.1.1	0x57c	Standard query (0)	analytics.pangle-ads.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:58.131624937 CET	192.168.2.4	1.1.1.1	0x163	Standard query (0)	analytics.pangle-ads.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:58.166878939 CET	192.168.2.4	1.1.1.1	0x8c6	Standard query (0)	analytics-ipv6.tiktokw.us	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:58.167054892 CET	192.168.2.4	1.1.1.1	0xc8c6	Standard query (0)	analytics-ipv6.tiktokw.us	65	IN (0x0001)	false
Oct 30, 2024 08:46:58.793051004 CET	192.168.2.4	1.1.1.1	0x764b	Standard query (0)	icons.batch.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:58.793051004 CET	192.168.2.4	1.1.1.1	0x273b	Standard query (0)	icons.batch.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:59.562589884 CET	192.168.2.4	1.1.1.1	0x3391	Standard query (0)	ws.batch.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:59.562769890 CET	192.168.2.4	1.1.1.1	0xcb25	Standard query (0)	ws.batch.com	65	IN (0x0001)	false
Oct 30, 2024 08:46:59.902848959 CET	192.168.2.4	1.1.1.1	0x225d	Standard query (0)	icons.batch.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:59.902981997 CET	192.168.2.4	1.1.1.1	0xfd57	Standard query (0)	icons.batch.com	65	IN (0x0001)	false
Oct 30, 2024 08:47:23.218229055 CET	192.168.2.4	1.1.1.1	0xd712	Standard query (0)	cdn.cookielaw.org	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:47:23.218373060 CET	192.168.2.4	1.1.1.1	0x989	Standard query (0)	cdn.cookielaw.org	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 30, 2024 08:46:16.004244089 CET	1.1.1.1	192.168.2.4	0x602	No error (0)	all.accor.com	2-01-2770-003b.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:16.004575014 CET	1.1.1.1	192.168.2.4	0x68e3	No error (0)	all.accor.com	2-01-2770-003b.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:16.004575014 CET	1.1.1.1	192.168.2.4	0x68e3	No error (0)	cs1345.wpc.edgecastcdn.net		152.199.22.100	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:17.568950891 CET	1.1.1.1	192.168.2.4	0xd264	No error (0)	cdn.cookielaw.org		104.18.86.42	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:17.568950891 CET	1.1.1.1	192.168.2.4	0xd264	No error (0)	cdn.cookielaw.org		104.18.87.42	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:17.568965912 CET	1.1.1.1	192.168.2.4	0x6d34	No error (0)	cdn.cookielaw.org			65	IN (0x0001)	false
Oct 30, 2024 08:46:17.572516918 CET	1.1.1.1	192.168.2.4	0xe022	No error (0)	m.ahstatic.com	san6-ion.scene7.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:17.573069096 CET	1.1.1.1	192.168.2.4	0x9c0f	No error (0)	m.ahstatic.com	san6-ion.scene7.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:17.641136885 CET	1.1.1.1	192.168.2.4	0x6a5	No error (0)	cdn.evgnet.com		151.101.192.114	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:17.641136885 CET	1.1.1.1	192.168.2.4	0x6a5	No error (0)	cdn.evgnet.com		151.101.64.114	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:17.641136885 CET	1.1.1.1	192.168.2.4	0x6a5	No error (0)	cdn.evgnet.com		151.101.128.114	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:17.641136885 CET	1.1.1.1	192.168.2.4	0x6a5	No error (0)	cdn.evgnet.com		151.101.0.114	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:17.736289978 CET	1.1.1.1	192.168.2.4	0x60dd	No error (0)	static-p46175-e229011.adobeaemcloud.com	adobe-aem.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:17.736289978 CET	1.1.1.1	192.168.2.4	0x60dd	No error (0)	adobe-aem.map.fastly.net		151.101.3.10	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:17.736289978 CET	1.1.1.1	192.168.2.4	0x60dd	No error (0)	adobe-aem.map.fastly.net		151.101.67.10	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:17.736289978 CET	1.1.1.1	192.168.2.4	0x60dd	No error (0)	adobe-aem.map.fastly.net		151.101.131.10	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:17.736289978 CET	1.1.1.1	192.168.2.4	0x60dd	No error (0)	adobe-aem.map.fastly.net		151.101.195.10	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:17.736525059 CET	1.1.1.1	192.168.2.4	0xb18d	No error (0)	static-p46175-e229011.adobeaemcloud.com	adobe-aem.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:17.837045908 CET	1.1.1.1	192.168.2.4	0xcd56	No error (0)	www.google.com		142.250.186.132	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:17.837074041 CET	1.1.1.1	192.168.2.4	0x7d0e	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 30, 2024 08:46:20.889472961 CET	1.1.1.1	192.168.2.4	0xa0ce	No error (0)	cdn.evgnet.com		151.101.0.114	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:20.889472961 CET	1.1.1.1	192.168.2.4	0xa0ce	No error (0)	cdn.evgnet.com		151.101.64.114	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:20.889472961 CET	1.1.1.1	192.168.2.4	0xa0ce	No error (0)	cdn.evgnet.com		151.101.128.114	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:20.889472961 CET	1.1.1.1	192.168.2.4	0xa0ce	No error (0)	cdn.evgnet.com		151.101.192.114	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:20.901442051 CET	1.1.1.1	192.168.2.4	0x6b08	No error (0)	all.accor.com	2-01-2770-003b.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:20.901442051 CET	1.1.1.1	192.168.2.4	0x6b08	No error (0)	cs1345.wpc.edgecastcdn.net		152.199.22.100	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:20.901602983 CET	1.1.1.1	192.168.2.4	0x77c3	No error (0)	all.accor.com	2-01-2770-003b.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:22.824050903 CET	1.1.1.1	192.168.2.4	0xcf82	No error (0)	cdn.cookielaw.org		104.18.86.42	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:22.824050903 CET	1.1.1.1	192.168.2.4	0xcf82	No error (0)	cdn.cookielaw.org		104.18.87.42	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:22.825633049 CET	1.1.1.1	192.168.2.4	0xbd53	No error (0)	cdn.cookielaw.org			65	IN (0x0001)	false
Oct 30, 2024 08:46:22.892828941 CET	1.1.1.1	192.168.2.4	0x2b0f	No error (0)	m.ahstatic.com	san6-ion.scene7.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:22.893024921 CET	1.1.1.1	192.168.2.4	0xd7d5	No error (0)	m.ahstatic.com	san6-ion.scene7.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:22.903492928 CET	1.1.1.1	192.168.2.4	0x8186	No error (0)	static-p46175-e229011.adobeaemcloud.com	adobe-aem.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:22.903492928 CET	1.1.1.1	192.168.2.4	0x8186	No error (0)	adobe-aem.map.fastly.net		151.101.3.10	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:22.903492928 CET	1.1.1.1	192.168.2.4	0x8186	No error (0)	adobe-aem.map.fastly.net		151.101.131.10	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:22.903492928 CET	1.1.1.1	192.168.2.4	0x8186	No error (0)	adobe-aem.map.fastly.net		151.101.67.10	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:22.903492928 CET	1.1.1.1	192.168.2.4	0x8186	No error (0)	adobe-aem.map.fastly.net		151.101.195.10	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:22.904854059 CET	1.1.1.1	192.168.2.4	0x2423	No error (0)	static-p46175-e229011.adobeaemcloud.com	adobe-aem.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:23.108683109 CET	1.1.1.1	192.168.2.4	0x607	No error (0)	api.accor.com	accor-group-prod-prod.apigee.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:23.108683109 CET	1.1.1.1	192.168.2.4	0x607	No error (0)	accor-group-prod-prod.apigee.net	accor-group-prod-portal.dn.apigee.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:23.108683109 CET	1.1.1.1	192.168.2.4	0x607	No error (0)	accor-group-prod-portal.dn.apigee.net	ageu1rt001-1-routers.dn.apigee.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:23.108683109 CET	1.1.1.1	192.168.2.4	0x607	No error (0)	ageu1rt001-1-routers.dn.apigee.net		35.240.103.94	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:23.120081902 CET	1.1.1.1	192.168.2.4	0xb712	No error (0)	api.accor.com	accor-group-prod-prod.apigee.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:23.120081902 CET	1.1.1.1	192.168.2.4	0xb712	No error (0)	accor-group-prod-prod.apigee.net	accor-group-prod-portal.dn.apigee.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:23.120081902 CET	1.1.1.1	192.168.2.4	0xb712	No error (0)	accor-group-prod-portal.dn.apigee.net	ageu1rt001-1-routers.dn.apigee.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:23.908571005 CET	1.1.1.1	192.168.2.4	0x4cef	No error (0)	geolocation.onetrust.com		104.18.32.137	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:23.908571005 CET	1.1.1.1	192.168.2.4	0x4cef	No error (0)	geolocation.onetrust.com		172.64.155.119	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:23.908886909 CET	1.1.1.1	192.168.2.4	0xc4af	No error (0)	geolocation.onetrust.com			65	IN (0x0001)	false
Oct 30, 2024 08:46:24.995920897 CET	1.1.1.1	192.168.2.4	0x28ca	No error (0)	login.accor.com	naouzqe.impervadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:24.995920897 CET	1.1.1.1	192.168.2.4	0x28ca	No error (0)	naouzqe.impervadns.net		45.60.155.180	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:24.996015072 CET	1.1.1.1	192.168.2.4	0x9633	No error (0)	login.accor.com	naouzqe.impervadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:25.508675098 CET	1.1.1.1	192.168.2.4	0x3e7b	No error (0)	accor.onelink.me		18.66.102.63	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:25.508675098 CET	1.1.1.1	192.168.2.4	0x3e7b	No error (0)	accor.onelink.me		18.66.102.109	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:25.508675098 CET	1.1.1.1	192.168.2.4	0x3e7b	No error (0)	accor.onelink.me		18.66.102.73	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:25.508675098 CET	1.1.1.1	192.168.2.4	0x3e7b	No error (0)	accor.onelink.me		18.66.102.7	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:25.781277895 CET	1.1.1.1	192.168.2.4	0xd0a2	No error (0)	geolocation.onetrust.com		172.64.155.119	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:25.781277895 CET	1.1.1.1	192.168.2.4	0xd0a2	No error (0)	geolocation.onetrust.com		104.18.32.137	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:25.781429052 CET	1.1.1.1	192.168.2.4	0xed62	No error (0)	geolocation.onetrust.com			65	IN (0x0001)	false
Oct 30, 2024 08:46:26.438837051 CET	1.1.1.1	192.168.2.4	0x766d	No error (0)	api.accor.com	accor-group-prod-prod.apigee.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:26.438837051 CET	1.1.1.1	192.168.2.4	0x766d	No error (0)	accor-group-prod-prod.apigee.net	accor-group-prod-portal.dn.apigee.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:26.438837051 CET	1.1.1.1	192.168.2.4	0x766d	No error (0)	accor-group-prod-portal.dn.apigee.net	ageu1rt001-1-routers.dn.apigee.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:26.438837051 CET	1.1.1.1	192.168.2.4	0x766d	No error (0)	ageu1rt001-1-routers.dn.apigee.net		35.240.103.94	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:26.460320950 CET	1.1.1.1	192.168.2.4	0xb691	No error (0)	api.accor.com	accor-group-prod-prod.apigee.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:26.460320950 CET	1.1.1.1	192.168.2.4	0xb691	No error (0)	accor-group-prod-prod.apigee.net	accor-group-prod-portal.dn.apigee.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:26.460320950 CET	1.1.1.1	192.168.2.4	0xb691	No error (0)	accor-group-prod-portal.dn.apigee.net	ageu1rt001-1-routers.dn.apigee.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:27.917248964 CET	1.1.1.1	192.168.2.4	0xebaf	No error (0)	qchmhd61sj.kameleoon.eu			65	IN (0x0001)	false
Oct 30, 2024 08:46:27.919445992 CET	1.1.1.1	192.168.2.4	0xec73	No error (0)	qchmhd61sj.kameleoon.eu		172.67.72.50	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:27.919445992 CET	1.1.1.1	192.168.2.4	0xec73	No error (0)	qchmhd61sj.kameleoon.eu		104.26.10.30	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:27.919445992 CET	1.1.1.1	192.168.2.4	0xec73	No error (0)	qchmhd61sj.kameleoon.eu		104.26.11.30	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:29.323286057 CET	1.1.1.1	192.168.2.4	0x42b6	No error (0)	qchmhd61sj.kameleoon.eu		172.67.72.50	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:29.323286057 CET	1.1.1.1	192.168.2.4	0x42b6	No error (0)	qchmhd61sj.kameleoon.eu		104.26.10.30	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:29.323286057 CET	1.1.1.1	192.168.2.4	0x42b6	No error (0)	qchmhd61sj.kameleoon.eu		104.26.11.30	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:29.323854923 CET	1.1.1.1	192.168.2.4	0x26df	No error (0)	qchmhd61sj.kameleoon.eu			65	IN (0x0001)	false
Oct 30, 2024 08:46:30.273752928 CET	1.1.1.1	192.168.2.4	0x4d33	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:30.273752928 CET	1.1.1.1	192.168.2.4	0x4d33	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:30.674510956 CET	1.1.1.1	192.168.2.4	0xb566	No error (0)	data.kameleoon.io	eu-log-parser-loadbalanced.kameleoon.io		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:30.674510956 CET	1.1.1.1	192.168.2.4	0xb566	No error (0)	eu-log-parser-loadbalanced.kameleoon.io		65.109.119.234	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:30.674510956 CET	1.1.1.1	192.168.2.4	0xb566	No error (0)	eu-log-parser-loadbalanced.kameleoon.io		95.217.77.219	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:30.674510956 CET	1.1.1.1	192.168.2.4	0xb566	No error (0)	eu-log-parser-loadbalanced.kameleoon.io		95.217.77.225	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:30.674510956 CET	1.1.1.1	192.168.2.4	0xb566	No error (0)	eu-log-parser-loadbalanced.kameleoon.io		95.217.77.232	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:30.674510956 CET	1.1.1.1	192.168.2.4	0xb566	No error (0)	eu-log-parser-loadbalanced.kameleoon.io		37.27.64.98	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:30.674510956 CET	1.1.1.1	192.168.2.4	0xb566	No error (0)	eu-log-parser-loadbalanced.kameleoon.io		95.217.77.226	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:30.674510956 CET	1.1.1.1	192.168.2.4	0xb566	No error (0)	eu-log-parser-loadbalanced.kameleoon.io		65.109.119.141	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:30.674510956 CET	1.1.1.1	192.168.2.4	0xb566	No error (0)	eu-log-parser-loadbalanced.kameleoon.io		95.217.77.229	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:30.674510956 CET	1.1.1.1	192.168.2.4	0xb566	No error (0)	eu-log-parser-loadbalanced.kameleoon.io		65.109.36.162	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:30.674510956 CET	1.1.1.1	192.168.2.4	0xb566	No error (0)	eu-log-parser-loadbalanced.kameleoon.io		37.27.70.199	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:30.674510956 CET	1.1.1.1	192.168.2.4	0xb566	No error (0)	eu-log-parser-loadbalanced.kameleoon.io		95.217.77.235	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:30.674510956 CET	1.1.1.1	192.168.2.4	0xb566	No error (0)	eu-log-parser-loadbalanced.kameleoon.io		65.109.119.232	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:30.674510956 CET	1.1.1.1	192.168.2.4	0xb566	No error (0)	eu-log-parser-loadbalanced.kameleoon.io		37.27.97.225	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:30.674510956 CET	1.1.1.1	192.168.2.4	0xb566	No error (0)	eu-log-parser-loadbalanced.kameleoon.io		37.27.70.198	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:30.674510956 CET	1.1.1.1	192.168.2.4	0xb566	No error (0)	eu-log-parser-loadbalanced.kameleoon.io		37.27.71.11	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:30.751703978 CET	1.1.1.1	192.168.2.4	0x7165	No error (0)	aem-api.accor.com	cdn.adobeaemcloud.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:30.751703978 CET	1.1.1.1	192.168.2.4	0x7165	No error (0)	cdn.adobeaemcloud.com	adobe-aem.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:30.751703978 CET	1.1.1.1	192.168.2.4	0x7165	No error (0)	adobe-aem.map.fastly.net		151.101.3.10	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:30.751703978 CET	1.1.1.1	192.168.2.4	0x7165	No error (0)	adobe-aem.map.fastly.net		151.101.67.10	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:30.751703978 CET	1.1.1.1	192.168.2.4	0x7165	No error (0)	adobe-aem.map.fastly.net		151.101.131.10	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:30.751703978 CET	1.1.1.1	192.168.2.4	0x7165	No error (0)	adobe-aem.map.fastly.net		151.101.195.10	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:30.751815081 CET	1.1.1.1	192.168.2.4	0x9a98	No error (0)	aem-api.accor.com	cdn.adobeaemcloud.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:30.751815081 CET	1.1.1.1	192.168.2.4	0x9a98	No error (0)	cdn.adobeaemcloud.com	adobe-aem.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:30.781105042 CET	1.1.1.1	192.168.2.4	0x5130	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:33.387204885 CET	1.1.1.1	192.168.2.4	0xd961	No error (0)	aem-api.accor.com	cdn.adobeaemcloud.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:33.387204885 CET	1.1.1.1	192.168.2.4	0xd961	No error (0)	cdn.adobeaemcloud.com	adobe-aem.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:33.387787104 CET	1.1.1.1	192.168.2.4	0xe563	No error (0)	aem-api.accor.com	cdn.adobeaemcloud.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:33.387787104 CET	1.1.1.1	192.168.2.4	0xe563	No error (0)	cdn.adobeaemcloud.com	adobe-aem.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:33.387787104 CET	1.1.1.1	192.168.2.4	0xe563	No error (0)	adobe-aem.map.fastly.net		151.101.3.10	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:33.387787104 CET	1.1.1.1	192.168.2.4	0xe563	No error (0)	adobe-aem.map.fastly.net		151.101.67.10	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:33.387787104 CET	1.1.1.1	192.168.2.4	0xe563	No error (0)	adobe-aem.map.fastly.net		151.101.131.10	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:33.387787104 CET	1.1.1.1	192.168.2.4	0xe563	No error (0)	adobe-aem.map.fastly.net		151.101.195.10	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:33.445946932 CET	1.1.1.1	192.168.2.4	0xb373	No error (0)	w.usabilla.com		52.215.19.194	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:33.445946932 CET	1.1.1.1	192.168.2.4	0xb373	No error (0)	w.usabilla.com		34.250.67.62	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:33.445946932 CET	1.1.1.1	192.168.2.4	0xb373	No error (0)	w.usabilla.com		54.229.94.44	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:37.069329977 CET	1.1.1.1	192.168.2.4	0x89ed	No error (0)	accorsa.germany-2.evergage.com		3.68.177.71	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:37.069329977 CET	1.1.1.1	192.168.2.4	0x89ed	No error (0)	accorsa.germany-2.evergage.com		3.121.243.160	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:37.069329977 CET	1.1.1.1	192.168.2.4	0x89ed	No error (0)	accorsa.germany-2.evergage.com		3.67.223.136	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:37.243983984 CET	1.1.1.1	192.168.2.4	0xfb0f	No error (0)	w.usabilla.com		54.229.94.44	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:37.243983984 CET	1.1.1.1	192.168.2.4	0xfb0f	No error (0)	w.usabilla.com		34.250.67.62	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:37.243983984 CET	1.1.1.1	192.168.2.4	0xfb0f	No error (0)	w.usabilla.com		52.215.19.194	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:38.218000889 CET	1.1.1.1	192.168.2.4	0xc8d1	No error (0)	sgtm.accor.com		35.190.123.13	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:38.963936090 CET	1.1.1.1	192.168.2.4	0xe72b	No error (0)	t.contentsquare.net		18.244.18.112	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:38.963936090 CET	1.1.1.1	192.168.2.4	0xe72b	No error (0)	t.contentsquare.net		18.244.18.115	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:38.963936090 CET	1.1.1.1	192.168.2.4	0xe72b	No error (0)	t.contentsquare.net		18.244.18.60	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:38.963936090 CET	1.1.1.1	192.168.2.4	0xe72b	No error (0)	t.contentsquare.net		18.244.18.53	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:38.967161894 CET	1.1.1.1	192.168.2.4	0x3ac	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:38.967161894 CET	1.1.1.1	192.168.2.4	0x3ac	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 30, 2024 08:46:38.967161894 CET	1.1.1.1	192.168.2.4	0x3ac	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 30, 2024 08:46:38.967241049 CET	1.1.1.1	192.168.2.4	0xf14d	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:38.967241049 CET	1.1.1.1	192.168.2.4	0xf14d	No error (0)	scontent.xx.fbcdn.net		157.240.0.6	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:38.967732906 CET	1.1.1.1	192.168.2.4	0xcbe2	No error (0)	resources.xg4ken.com	ktag.tfken.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:38.967732906 CET	1.1.1.1	192.168.2.4	0xcbe2	No error (0)	ktag.tfken.com	alb-ireland-ext-ingress-group-474278744.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:38.968036890 CET	1.1.1.1	192.168.2.4	0xc72	No error (0)	resources.xg4ken.com	ktag.tfken.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:38.968036890 CET	1.1.1.1	192.168.2.4	0xc72	No error (0)	ktag.tfken.com	alb-ireland-ext-ingress-group-474278744.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:38.968036890 CET	1.1.1.1	192.168.2.4	0xc72	No error (0)	alb-ireland-ext-ingress-group-474278744.eu-west-1.elb.amazonaws.com		34.252.33.46	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:38.968036890 CET	1.1.1.1	192.168.2.4	0xc72	No error (0)	alb-ireland-ext-ingress-group-474278744.eu-west-1.elb.amazonaws.com		54.228.148.251	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:38.968036890 CET	1.1.1.1	192.168.2.4	0xc72	No error (0)	alb-ireland-ext-ingress-group-474278744.eu-west-1.elb.amazonaws.com		54.73.203.83	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:38.973315001 CET	1.1.1.1	192.168.2.4	0x5af	No error (0)	static.sojern.com		35.244.188.9	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:38.987535000 CET	1.1.1.1	192.168.2.4	0x1d73	No error (0)	bat-bing-com.ax-0001.ax-msedge.net	ax-0001.ax-dc-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:38.987535000 CET	1.1.1.1	192.168.2.4	0x1d73	No error (0)	ax-0001.ax-dc-msedge.net		150.171.29.10	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:38.987535000 CET	1.1.1.1	192.168.2.4	0x1d73	No error (0)	ax-0001.ax-dc-msedge.net		150.171.30.10	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:39.517225981 CET	1.1.1.1	192.168.2.4	0x9f6e	No error (0)	d6tizftlrpuof.cloudfront.net		52.222.206.22	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:39.517225981 CET	1.1.1.1	192.168.2.4	0x9f6e	No error (0)	d6tizftlrpuof.cloudfront.net		52.222.206.40	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:39.517225981 CET	1.1.1.1	192.168.2.4	0x9f6e	No error (0)	d6tizftlrpuof.cloudfront.net		52.222.206.19	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:39.517225981 CET	1.1.1.1	192.168.2.4	0x9f6e	No error (0)	d6tizftlrpuof.cloudfront.net		52.222.206.77	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:39.594516993 CET	1.1.1.1	192.168.2.4	0x2974	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:39.594605923 CET	1.1.1.1	192.168.2.4	0x99d3	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:39.598795891 CET	1.1.1.1	192.168.2.4	0x829	No error (0)	accorsa.germany-2.evergage.com		3.68.177.71	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:39.598795891 CET	1.1.1.1	192.168.2.4	0x829	No error (0)	accorsa.germany-2.evergage.com		3.67.223.136	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:39.598795891 CET	1.1.1.1	192.168.2.4	0x829	No error (0)	accorsa.germany-2.evergage.com		3.121.243.160	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:39.603080988 CET	1.1.1.1	192.168.2.4	0x93e5	No error (0)	sgtm.accor.com		35.190.123.13	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:39.810852051 CET	1.1.1.1	192.168.2.4	0xe6f2	No error (0)	static.ads-twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:39.810852051 CET	1.1.1.1	192.168.2.4	0xe6f2	No error (0)	platform.twitter.map.fastly.net		199.232.188.157	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:39.813287020 CET	1.1.1.1	192.168.2.4	0xb969	No error (0)	static.ads-twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:40.697818041 CET	1.1.1.1	192.168.2.4	0xda2e	No error (0)	sc-static.net		3.163.248.4	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:40.744343996 CET	1.1.1.1	192.168.2.4	0x16bc	No error (0)	p.teads.tv	perf.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:40.744522095 CET	1.1.1.1	192.168.2.4	0x37fd	No error (0)	p.teads.tv	perf.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:40.745948076 CET	1.1.1.1	192.168.2.4	0x5249	No error (0)	secure.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:40.745948076 CET	1.1.1.1	192.168.2.4	0x5249	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:40.745948076 CET	1.1.1.1	192.168.2.4	0x5249	No error (0)	global.px.quantserve.com		91.228.74.200	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:40.745948076 CET	1.1.1.1	192.168.2.4	0x5249	No error (0)	global.px.quantserve.com		91.228.74.244	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:40.745948076 CET	1.1.1.1	192.168.2.4	0x5249	No error (0)	global.px.quantserve.com		91.228.74.166	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:40.745948076 CET	1.1.1.1	192.168.2.4	0x5249	No error (0)	global.px.quantserve.com		91.228.74.159	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:40.746530056 CET	1.1.1.1	192.168.2.4	0x3812	No error (0)	secure.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:40.746530056 CET	1.1.1.1	192.168.2.4	0x3812	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:40.750684023 CET	1.1.1.1	192.168.2.4	0xd99a	No error (0)	analytics.tiktok.com	analytics.tiktok.com.ttdns2.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:40.750684023 CET	1.1.1.1	192.168.2.4	0xd99a	No error (0)	analytics.tiktok.com.ttdns2.com	analytics.tiktok.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:40.750695944 CET	1.1.1.1	192.168.2.4	0xbed7	No error (0)	analytics.tiktok.com	analytics.tiktok.com.ttdns2.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:40.750695944 CET	1.1.1.1	192.168.2.4	0xbed7	No error (0)	analytics.tiktok.com.ttdns2.com	analytics.tiktok.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:40.760582924 CET	1.1.1.1	192.168.2.4	0xe1fe	No error (0)	static.tacdn.com	static.tacdn.com.edge.tacdn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:40.760582924 CET	1.1.1.1	192.168.2.4	0xe1fe	No error (0)	static.tacdn.com.edge.tacdn.com	static-tacdn.tripadvisor.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:40.760582924 CET	1.1.1.1	192.168.2.4	0xe1fe	No error (0)	static-tacdn.tripadvisor.map.fastly.net		151.101.2.83	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:40.760582924 CET	1.1.1.1	192.168.2.4	0xe1fe	No error (0)	static-tacdn.tripadvisor.map.fastly.net		151.101.66.83	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:40.760582924 CET	1.1.1.1	192.168.2.4	0xe1fe	No error (0)	static-tacdn.tripadvisor.map.fastly.net		151.101.130.83	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:40.760582924 CET	1.1.1.1	192.168.2.4	0xe1fe	No error (0)	static-tacdn.tripadvisor.map.fastly.net		151.101.194.83	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:40.762720108 CET	1.1.1.1	192.168.2.4	0x7f5f	No error (0)	static.tacdn.com	static.tacdn.com.edge.tacdn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:40.762720108 CET	1.1.1.1	192.168.2.4	0x7f5f	No error (0)	static.tacdn.com.edge.tacdn.com	static-tacdn.tripadvisor.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:40.765945911 CET	1.1.1.1	192.168.2.4	0x74ba	No error (0)	cdn.tkrconnector.com		13.32.121.110	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:40.765945911 CET	1.1.1.1	192.168.2.4	0x74ba	No error (0)	cdn.tkrconnector.com		13.32.121.84	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:40.765945911 CET	1.1.1.1	192.168.2.4	0x74ba	No error (0)	cdn.tkrconnector.com		13.32.121.59	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:40.765945911 CET	1.1.1.1	192.168.2.4	0x74ba	No error (0)	cdn.tkrconnector.com		13.32.121.117	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:40.801346064 CET	1.1.1.1	192.168.2.4	0x22cd	No error (0)	via.batch.com	via.batch.com.sds.haproxyedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:40.801367044 CET	1.1.1.1	192.168.2.4	0x9e41	No error (0)	via.batch.com	via.batch.com.sds.haproxyedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:40.801367044 CET	1.1.1.1	192.168.2.4	0x9e41	No error (0)	via.batch.com.sds.haproxyedge.net		104.152.118.106	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:40.801367044 CET	1.1.1.1	192.168.2.4	0x9e41	No error (0)	via.batch.com.sds.haproxyedge.net		104.152.118.105	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:40.801367044 CET	1.1.1.1	192.168.2.4	0x9e41	No error (0)	via.batch.com.sds.haproxyedge.net		104.152.118.108	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:40.801367044 CET	1.1.1.1	192.168.2.4	0x9e41	No error (0)	via.batch.com.sds.haproxyedge.net		104.152.118.104	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:40.801367044 CET	1.1.1.1	192.168.2.4	0x9e41	No error (0)	via.batch.com.sds.haproxyedge.net		104.152.118.110	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:40.801367044 CET	1.1.1.1	192.168.2.4	0x9e41	No error (0)	via.batch.com.sds.haproxyedge.net		104.152.118.111	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:40.801367044 CET	1.1.1.1	192.168.2.4	0x9e41	No error (0)	via.batch.com.sds.haproxyedge.net		104.152.118.109	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:40.801367044 CET	1.1.1.1	192.168.2.4	0x9e41	No error (0)	via.batch.com.sds.haproxyedge.net		104.152.118.107	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:40.850543022 CET	1.1.1.1	192.168.2.4	0x394d	No error (0)	td.doubleclick.net		142.250.186.162	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:40.877372980 CET	1.1.1.1	192.168.2.4	0xd23b	No error (0)	tags.creativecdn.com	1589314308.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:40.877978086 CET	1.1.1.1	192.168.2.4	0xb1a0	No error (0)	tags.creativecdn.com	1589314308.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:40.877978086 CET	1.1.1.1	192.168.2.4	0xb1a0	No error (0)	1589314308.rsc.cdn77.org		37.19.194.80	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:40.877978086 CET	1.1.1.1	192.168.2.4	0xb1a0	No error (0)	1589314308.rsc.cdn77.org		212.102.56.179	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:40.877978086 CET	1.1.1.1	192.168.2.4	0xb1a0	No error (0)	1589314308.rsc.cdn77.org		169.150.255.180	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:40.877978086 CET	1.1.1.1	192.168.2.4	0xb1a0	No error (0)	1589314308.rsc.cdn77.org		169.150.255.184	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:40.877978086 CET	1.1.1.1	192.168.2.4	0xb1a0	No error (0)	1589314308.rsc.cdn77.org		195.181.175.41	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:40.877978086 CET	1.1.1.1	192.168.2.4	0xb1a0	No error (0)	1589314308.rsc.cdn77.org		195.181.170.19	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:40.877978086 CET	1.1.1.1	192.168.2.4	0xb1a0	No error (0)	1589314308.rsc.cdn77.org		207.211.211.26	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:40.994139910 CET	1.1.1.1	192.168.2.4	0x1a01	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:40.994139910 CET	1.1.1.1	192.168.2.4	0x1a01	No error (0)	dg2iu7dxxehbo.cloudfront.net		18.172.103.101	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:40.994335890 CET	1.1.1.1	192.168.2.4	0x7837	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:41.931360006 CET	1.1.1.1	192.168.2.4	0xd2b9	No error (0)	d.line-scdn.net	cac-d.line-scdn.net.line-zero.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:41.932545900 CET	1.1.1.1	192.168.2.4	0xcfec	No error (0)	d.line-scdn.net	cac-d.line-scdn.net.line-zero.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:42.113682985 CET	1.1.1.1	192.168.2.4	0x39e5	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:42.113682985 CET	1.1.1.1	192.168.2.4	0x39e5	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:42.113713026 CET	1.1.1.1	192.168.2.4	0x3ad5	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:42.113713026 CET	1.1.1.1	192.168.2.4	0x3ad5	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:42.674057961 CET	1.1.1.1	192.168.2.4	0xd226	No error (0)	srm.ba.contentsquare.net		52.214.133.219	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:42.674057961 CET	1.1.1.1	192.168.2.4	0xd226	No error (0)	srm.ba.contentsquare.net		52.214.139.230	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:42.674057961 CET	1.1.1.1	192.168.2.4	0xd226	No error (0)	srm.ba.contentsquare.net		34.255.142.157	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:42.676728010 CET	1.1.1.1	192.168.2.4	0x3e	No error (0)	q-aeu1.contentsquare.net		34.250.128.153	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:42.676728010 CET	1.1.1.1	192.168.2.4	0x3e	No error (0)	q-aeu1.contentsquare.net		108.128.41.231	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:42.676728010 CET	1.1.1.1	192.168.2.4	0x3e	No error (0)	q-aeu1.contentsquare.net		54.72.157.73	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:43.344327927 CET	1.1.1.1	192.168.2.4	0xb463	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:43.344327927 CET	1.1.1.1	192.168.2.4	0xb463	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:43.650888920 CET	1.1.1.1	192.168.2.4	0x6523	No error (0)	www.tamgrt.com	www.tamgrt.com.edge.tacdn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:43.650888920 CET	1.1.1.1	192.168.2.4	0x6523	No error (0)	www.tamgrt.com.edge.tacdn.com	www.tamgrt.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:43.650888920 CET	1.1.1.1	192.168.2.4	0x6523	No error (0)	www.tamgrt.map.fastly.net		151.101.2.81	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:43.650888920 CET	1.1.1.1	192.168.2.4	0x6523	No error (0)	www.tamgrt.map.fastly.net		151.101.194.81	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:43.650888920 CET	1.1.1.1	192.168.2.4	0x6523	No error (0)	www.tamgrt.map.fastly.net		151.101.66.81	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:43.650888920 CET	1.1.1.1	192.168.2.4	0x6523	No error (0)	www.tamgrt.map.fastly.net		151.101.130.81	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:43.662276983 CET	1.1.1.1	192.168.2.4	0xa654	No error (0)	www.tamgrt.com	www.tamgrt.com.edge.tacdn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:43.662276983 CET	1.1.1.1	192.168.2.4	0xa654	No error (0)	www.tamgrt.com.edge.tacdn.com	www.tamgrt.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:43.666846037 CET	1.1.1.1	192.168.2.4	0xa528	No error (0)	tr.snapchat.com	gcp.api.snapchat.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:43.666846037 CET	1.1.1.1	192.168.2.4	0xa528	No error (0)	gcp.api.snapchat.com	gcp.api.sc-gw.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:43.666846037 CET	1.1.1.1	192.168.2.4	0xa528	No error (0)	gcp.api.sc-gw.com		35.190.43.134	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:43.697896957 CET	1.1.1.1	192.168.2.4	0x4bd6	No error (0)	tr.snapchat.com	gcp.api.snapchat.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:43.697896957 CET	1.1.1.1	192.168.2.4	0x4bd6	No error (0)	gcp.api.snapchat.com	gcp.api.sc-gw.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:43.698837996 CET	1.1.1.1	192.168.2.4	0x3e84	No error (0)	tr.snapchat.com	gcp.api.snapchat.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:43.698837996 CET	1.1.1.1	192.168.2.4	0x3e84	No error (0)	gcp.api.snapchat.com	gcp.api.sc-gw.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:43.698837996 CET	1.1.1.1	192.168.2.4	0x3e84	No error (0)	gcp.api.sc-gw.com		35.190.43.134	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:43.699906111 CET	1.1.1.1	192.168.2.4	0xc670	No error (0)	tr.snapchat.com	gcp.api.snapchat.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:43.699906111 CET	1.1.1.1	192.168.2.4	0xc670	No error (0)	gcp.api.snapchat.com	gcp.api.sc-gw.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:44.523125887 CET	1.1.1.1	192.168.2.4	0xb2b5	No error (0)	googleads.g.doubleclick.net		142.250.185.66	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:44.523710966 CET	1.1.1.1	192.168.2.4	0xd65d	No error (0)	k-aeu1.contentsquare.net	k.ba.contentsquare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:44.523722887 CET	1.1.1.1	192.168.2.4	0x693d	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Oct 30, 2024 08:46:44.523936033 CET	1.1.1.1	192.168.2.4	0xbf7f	No error (0)	k-aeu1.contentsquare.net	k.ba.contentsquare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:44.523936033 CET	1.1.1.1	192.168.2.4	0xbf7f	No error (0)	k.ba.contentsquare.net		99.81.115.192	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:44.523936033 CET	1.1.1.1	192.168.2.4	0xbf7f	No error (0)	k.ba.contentsquare.net		52.30.190.76	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:44.523936033 CET	1.1.1.1	192.168.2.4	0xbf7f	No error (0)	k.ba.contentsquare.net		52.49.246.129	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:44.919914007 CET	1.1.1.1	192.168.2.4	0x51d1	No error (0)	bat-bing-com.ax-0001.ax-msedge.net	ax-0001.ax-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:44.919914007 CET	1.1.1.1	192.168.2.4	0x51d1	No error (0)	ax-0001.ax-msedge.net		150.171.27.10	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:44.919914007 CET	1.1.1.1	192.168.2.4	0x51d1	No error (0)	ax-0001.ax-msedge.net		150.171.28.10	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:45.059283972 CET	1.1.1.1	192.168.2.4	0x102b	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:45.059283972 CET	1.1.1.1	192.168.2.4	0x102b	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 30, 2024 08:46:45.059283972 CET	1.1.1.1	192.168.2.4	0x102b	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 30, 2024 08:46:45.059420109 CET	1.1.1.1	192.168.2.4	0x7a53	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:45.059420109 CET	1.1.1.1	192.168.2.4	0x7a53	No error (0)	scontent.xx.fbcdn.net		157.240.253.1	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:45.062294006 CET	1.1.1.1	192.168.2.4	0x9fa9	No error (0)	resources.xg4ken.com	ktag.tfken.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:45.062294006 CET	1.1.1.1	192.168.2.4	0x9fa9	No error (0)	ktag.tfken.com	alb-ireland-ext-ingress-group-474278744.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:45.062294006 CET	1.1.1.1	192.168.2.4	0x9fa9	No error (0)	alb-ireland-ext-ingress-group-474278744.eu-west-1.elb.amazonaws.com		34.252.33.46	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:45.062294006 CET	1.1.1.1	192.168.2.4	0x9fa9	No error (0)	alb-ireland-ext-ingress-group-474278744.eu-west-1.elb.amazonaws.com		54.228.148.251	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:45.062294006 CET	1.1.1.1	192.168.2.4	0x9fa9	No error (0)	alb-ireland-ext-ingress-group-474278744.eu-west-1.elb.amazonaws.com		54.73.203.83	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:45.063436031 CET	1.1.1.1	192.168.2.4	0x4a34	No error (0)	resources.xg4ken.com	ktag.tfken.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:45.063436031 CET	1.1.1.1	192.168.2.4	0x4a34	No error (0)	ktag.tfken.com	alb-ireland-ext-ingress-group-474278744.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:45.066742897 CET	1.1.1.1	192.168.2.4	0xb73f	No error (0)	t.contentsquare.net		18.244.18.115	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:45.066742897 CET	1.1.1.1	192.168.2.4	0xb73f	No error (0)	t.contentsquare.net		18.244.18.53	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:45.066742897 CET	1.1.1.1	192.168.2.4	0xb73f	No error (0)	t.contentsquare.net		18.244.18.60	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:45.066742897 CET	1.1.1.1	192.168.2.4	0xb73f	No error (0)	t.contentsquare.net		18.244.18.112	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:45.068120003 CET	1.1.1.1	192.168.2.4	0x3d5d	No error (0)	d6tizftlrpuof.cloudfront.net		52.222.206.22	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:45.068120003 CET	1.1.1.1	192.168.2.4	0x3d5d	No error (0)	d6tizftlrpuof.cloudfront.net		52.222.206.40	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:45.068120003 CET	1.1.1.1	192.168.2.4	0x3d5d	No error (0)	d6tizftlrpuof.cloudfront.net		52.222.206.19	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:45.068120003 CET	1.1.1.1	192.168.2.4	0x3d5d	No error (0)	d6tizftlrpuof.cloudfront.net		52.222.206.77	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:45.070492029 CET	1.1.1.1	192.168.2.4	0x4de0	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:45.071275949 CET	1.1.1.1	192.168.2.4	0x5395	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:45.137535095 CET	1.1.1.1	192.168.2.4	0xf0f9	No error (0)	us.creativecdn.com		185.184.10.30	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:46.069880009 CET	1.1.1.1	192.168.2.4	0x7f72	No error (0)	cm.teads.tv	cm.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:46.071089029 CET	1.1.1.1	192.168.2.4	0x730f	No error (0)	insight.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:46.071089029 CET	1.1.1.1	192.168.2.4	0x730f	No error (0)	insight.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:46.071089029 CET	1.1.1.1	192.168.2.4	0x730f	No error (0)	insight.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:46.071089029 CET	1.1.1.1	192.168.2.4	0x730f	No error (0)	insight.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:46.071732044 CET	1.1.1.1	192.168.2.4	0xa92f	No error (0)	cm.teads.tv	cm.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:46.923330069 CET	1.1.1.1	192.168.2.4	0x602	No error (0)	static.ads-twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:46.923405886 CET	1.1.1.1	192.168.2.4	0xb00b	No error (0)	static.ads-twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:46.923405886 CET	1.1.1.1	192.168.2.4	0xb00b	No error (0)	platform.twitter.map.fastly.net		199.232.188.157	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:46.924519062 CET	1.1.1.1	192.168.2.4	0x98e2	No error (0)	sc-static.net		3.163.248.4	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:46.991015911 CET	1.1.1.1	192.168.2.4	0x15af	No error (0)	static.tacdn.com	static.tacdn.com.edge.tacdn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:46.991015911 CET	1.1.1.1	192.168.2.4	0x15af	No error (0)	static.tacdn.com.edge.tacdn.com	static-tacdn.tripadvisor.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:46.991015911 CET	1.1.1.1	192.168.2.4	0x15af	No error (0)	static-tacdn.tripadvisor.map.fastly.net		151.101.66.83	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:46.991015911 CET	1.1.1.1	192.168.2.4	0x15af	No error (0)	static-tacdn.tripadvisor.map.fastly.net		151.101.194.83	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:46.991015911 CET	1.1.1.1	192.168.2.4	0x15af	No error (0)	static-tacdn.tripadvisor.map.fastly.net		151.101.2.83	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:46.991015911 CET	1.1.1.1	192.168.2.4	0x15af	No error (0)	static-tacdn.tripadvisor.map.fastly.net		151.101.130.83	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:46.991967916 CET	1.1.1.1	192.168.2.4	0x12dd	No error (0)	static.tacdn.com	static.tacdn.com.edge.tacdn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:46.991967916 CET	1.1.1.1	192.168.2.4	0x12dd	No error (0)	static.tacdn.com.edge.tacdn.com	static-tacdn.tripadvisor.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:46.993805885 CET	1.1.1.1	192.168.2.4	0x51ec	No error (0)	sc-static.net		3.163.248.4	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:46.995304108 CET	1.1.1.1	192.168.2.4	0xd75f	No error (0)	analytics.tiktok.com	analytics.tiktok.com.ttdns2.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:46.995304108 CET	1.1.1.1	192.168.2.4	0xd75f	No error (0)	analytics.tiktok.com.ttdns2.com	analytics.tiktok.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:46.995877028 CET	1.1.1.1	192.168.2.4	0x2f39	No error (0)	analytics.tiktok.com	analytics.tiktok.com.ttdns2.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:46.995877028 CET	1.1.1.1	192.168.2.4	0x2f39	No error (0)	analytics.tiktok.com.ttdns2.com	analytics.tiktok.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:46.998591900 CET	1.1.1.1	192.168.2.4	0xcfc7	No error (0)	q-aeu1.contentsquare.net		34.250.128.153	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:46.998591900 CET	1.1.1.1	192.168.2.4	0xcfc7	No error (0)	q-aeu1.contentsquare.net		108.128.41.231	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:46.998591900 CET	1.1.1.1	192.168.2.4	0xcfc7	No error (0)	q-aeu1.contentsquare.net		54.72.157.73	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.065907955 CET	1.1.1.1	192.168.2.4	0xf769	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:47.065907955 CET	1.1.1.1	192.168.2.4	0xf769	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:47.066071987 CET	1.1.1.1	192.168.2.4	0x3296	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:47.066071987 CET	1.1.1.1	192.168.2.4	0x3296	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:47.111912966 CET	1.1.1.1	192.168.2.4	0x67da	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:47.111912966 CET	1.1.1.1	192.168.2.4	0x67da	No error (0)	dg2iu7dxxehbo.cloudfront.net		18.172.103.101	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.112262964 CET	1.1.1.1	192.168.2.4	0xd195	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:47.113289118 CET	1.1.1.1	192.168.2.4	0xbbe1	No error (0)	secure.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:47.113289118 CET	1.1.1.1	192.168.2.4	0xbbe1	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:47.113289118 CET	1.1.1.1	192.168.2.4	0xbbe1	No error (0)	global.px.quantserve.com		91.228.74.200	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.113289118 CET	1.1.1.1	192.168.2.4	0xbbe1	No error (0)	global.px.quantserve.com		91.228.74.244	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.113289118 CET	1.1.1.1	192.168.2.4	0xbbe1	No error (0)	global.px.quantserve.com		91.228.74.159	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.113289118 CET	1.1.1.1	192.168.2.4	0xbbe1	No error (0)	global.px.quantserve.com		91.228.74.166	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.116794109 CET	1.1.1.1	192.168.2.4	0xe2a6	No error (0)	secure.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:47.116794109 CET	1.1.1.1	192.168.2.4	0xe2a6	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:47.121515989 CET	1.1.1.1	192.168.2.4	0x9355	No error (0)	tags.creativecdn.com	1589314308.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:47.122124910 CET	1.1.1.1	192.168.2.4	0x1514	No error (0)	tags.creativecdn.com	1589314308.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:47.122124910 CET	1.1.1.1	192.168.2.4	0x1514	No error (0)	1589314308.rsc.cdn77.org		169.150.255.183	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.122124910 CET	1.1.1.1	192.168.2.4	0x1514	No error (0)	1589314308.rsc.cdn77.org		212.102.56.178	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.122124910 CET	1.1.1.1	192.168.2.4	0x1514	No error (0)	1589314308.rsc.cdn77.org		207.211.211.26	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.122124910 CET	1.1.1.1	192.168.2.4	0x1514	No error (0)	1589314308.rsc.cdn77.org		169.150.255.181	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.122124910 CET	1.1.1.1	192.168.2.4	0x1514	No error (0)	1589314308.rsc.cdn77.org		195.181.170.19	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.122124910 CET	1.1.1.1	192.168.2.4	0x1514	No error (0)	1589314308.rsc.cdn77.org		37.19.194.81	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.122124910 CET	1.1.1.1	192.168.2.4	0x1514	No error (0)	1589314308.rsc.cdn77.org		195.181.175.41	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.127667904 CET	1.1.1.1	192.168.2.4	0xf99c	No error (0)	via.batch.com	via.batch.com.sds.haproxyedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:47.131325960 CET	1.1.1.1	192.168.2.4	0x24dd	No error (0)	p.teads.tv	perf.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:47.131660938 CET	1.1.1.1	192.168.2.4	0x92a7	No error (0)	p.teads.tv	perf.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:47.137054920 CET	1.1.1.1	192.168.2.4	0x733a	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.137054920 CET	1.1.1.1	192.168.2.4	0x733a	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.137054920 CET	1.1.1.1	192.168.2.4	0x733a	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.137054920 CET	1.1.1.1	192.168.2.4	0x733a	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.139348984 CET	1.1.1.1	192.168.2.4	0x1bb6	No error (0)	d.line-scdn.net	cac-d.line-scdn.net.line-zero.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:47.140089035 CET	1.1.1.1	192.168.2.4	0x8f99	No error (0)	srm.ba.contentsquare.net		52.214.133.219	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.140089035 CET	1.1.1.1	192.168.2.4	0x8f99	No error (0)	srm.ba.contentsquare.net		52.214.139.230	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.140089035 CET	1.1.1.1	192.168.2.4	0x8f99	No error (0)	srm.ba.contentsquare.net		34.255.142.157	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.147160053 CET	1.1.1.1	192.168.2.4	0x38b8	No error (0)	tr.snapchat.com	gcp.api.snapchat.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:47.147160053 CET	1.1.1.1	192.168.2.4	0x38b8	No error (0)	gcp.api.snapchat.com	gcp.api.sc-gw.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:47.147160053 CET	1.1.1.1	192.168.2.4	0x38b8	No error (0)	gcp.api.sc-gw.com		35.190.43.134	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.147351027 CET	1.1.1.1	192.168.2.4	0xcf37	No error (0)	tr.snapchat.com	gcp.api.snapchat.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:47.147351027 CET	1.1.1.1	192.168.2.4	0xcf37	No error (0)	gcp.api.snapchat.com	gcp.api.sc-gw.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:47.148581982 CET	1.1.1.1	192.168.2.4	0xe34b	No error (0)	via.batch.com	via.batch.com.sds.haproxyedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:47.148581982 CET	1.1.1.1	192.168.2.4	0xe34b	No error (0)	via.batch.com.sds.haproxyedge.net		104.152.118.110	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.148581982 CET	1.1.1.1	192.168.2.4	0xe34b	No error (0)	via.batch.com.sds.haproxyedge.net		104.152.118.111	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.148581982 CET	1.1.1.1	192.168.2.4	0xe34b	No error (0)	via.batch.com.sds.haproxyedge.net		104.152.118.104	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.148581982 CET	1.1.1.1	192.168.2.4	0xe34b	No error (0)	via.batch.com.sds.haproxyedge.net		104.152.118.105	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.148581982 CET	1.1.1.1	192.168.2.4	0xe34b	No error (0)	via.batch.com.sds.haproxyedge.net		104.152.118.106	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.148581982 CET	1.1.1.1	192.168.2.4	0xe34b	No error (0)	via.batch.com.sds.haproxyedge.net		104.152.118.107	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.148581982 CET	1.1.1.1	192.168.2.4	0xe34b	No error (0)	via.batch.com.sds.haproxyedge.net		104.152.118.108	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.148581982 CET	1.1.1.1	192.168.2.4	0xe34b	No error (0)	via.batch.com.sds.haproxyedge.net		104.152.118.109	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.153403044 CET	1.1.1.1	192.168.2.4	0x3485	No error (0)	data.kameleoon.io	eu-log-parser-loadbalanced.kameleoon.io		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:47.153403044 CET	1.1.1.1	192.168.2.4	0x3485	No error (0)	eu-log-parser-loadbalanced.kameleoon.io		95.217.77.219	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.153403044 CET	1.1.1.1	192.168.2.4	0x3485	No error (0)	eu-log-parser-loadbalanced.kameleoon.io		37.27.71.11	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.153403044 CET	1.1.1.1	192.168.2.4	0x3485	No error (0)	eu-log-parser-loadbalanced.kameleoon.io		95.217.77.235	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.153403044 CET	1.1.1.1	192.168.2.4	0x3485	No error (0)	eu-log-parser-loadbalanced.kameleoon.io		37.27.97.225	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.153403044 CET	1.1.1.1	192.168.2.4	0x3485	No error (0)	eu-log-parser-loadbalanced.kameleoon.io		65.109.119.234	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.153403044 CET	1.1.1.1	192.168.2.4	0x3485	No error (0)	eu-log-parser-loadbalanced.kameleoon.io		37.27.64.98	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.153403044 CET	1.1.1.1	192.168.2.4	0x3485	No error (0)	eu-log-parser-loadbalanced.kameleoon.io		95.217.77.229	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.153403044 CET	1.1.1.1	192.168.2.4	0x3485	No error (0)	eu-log-parser-loadbalanced.kameleoon.io		37.27.70.198	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.153403044 CET	1.1.1.1	192.168.2.4	0x3485	No error (0)	eu-log-parser-loadbalanced.kameleoon.io		95.217.77.226	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.153403044 CET	1.1.1.1	192.168.2.4	0x3485	No error (0)	eu-log-parser-loadbalanced.kameleoon.io		95.217.77.225	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.153403044 CET	1.1.1.1	192.168.2.4	0x3485	No error (0)	eu-log-parser-loadbalanced.kameleoon.io		65.109.36.162	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.153403044 CET	1.1.1.1	192.168.2.4	0x3485	No error (0)	eu-log-parser-loadbalanced.kameleoon.io		95.217.77.232	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.153403044 CET	1.1.1.1	192.168.2.4	0x3485	No error (0)	eu-log-parser-loadbalanced.kameleoon.io		65.109.119.141	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.153403044 CET	1.1.1.1	192.168.2.4	0x3485	No error (0)	eu-log-parser-loadbalanced.kameleoon.io		65.109.119.232	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.153403044 CET	1.1.1.1	192.168.2.4	0x3485	No error (0)	eu-log-parser-loadbalanced.kameleoon.io		37.27.70.199	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.156630039 CET	1.1.1.1	192.168.2.4	0xfcc7	No error (0)	d.line-scdn.net	cac-d.line-scdn.net.line-zero.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:47.310666084 CET	1.1.1.1	192.168.2.4	0x6ef8	No error (0)	googleads.g.doubleclick.net		142.250.185.66	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.312649965 CET	1.1.1.1	192.168.2.4	0xa571	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Oct 30, 2024 08:46:47.329895020 CET	1.1.1.1	192.168.2.4	0xdac0	No error (0)	cdn.tkrconnector.com		13.32.121.84	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.329895020 CET	1.1.1.1	192.168.2.4	0xdac0	No error (0)	cdn.tkrconnector.com		13.32.121.110	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.329895020 CET	1.1.1.1	192.168.2.4	0xdac0	No error (0)	cdn.tkrconnector.com		13.32.121.117	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.329895020 CET	1.1.1.1	192.168.2.4	0xdac0	No error (0)	cdn.tkrconnector.com		13.32.121.59	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.432508945 CET	1.1.1.1	192.168.2.4	0xff3d	No error (0)	k-aeu1.contentsquare.net	k.ba.contentsquare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:47.432508945 CET	1.1.1.1	192.168.2.4	0xff3d	No error (0)	k.ba.contentsquare.net		52.49.246.129	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.432508945 CET	1.1.1.1	192.168.2.4	0xff3d	No error (0)	k.ba.contentsquare.net		99.81.115.192	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.432508945 CET	1.1.1.1	192.168.2.4	0xff3d	No error (0)	k.ba.contentsquare.net		52.30.190.76	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.432519913 CET	1.1.1.1	192.168.2.4	0xb1bd	No error (0)	k-aeu1.contentsquare.net	k.ba.contentsquare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:47.650552034 CET	1.1.1.1	192.168.2.4	0xc9fa	No error (0)	c.contentsquare.net	c.ba.contentsquare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:47.650552034 CET	1.1.1.1	192.168.2.4	0xc9fa	No error (0)	c.ba.contentsquare.net		54.247.108.216	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.650552034 CET	1.1.1.1	192.168.2.4	0xc9fa	No error (0)	c.ba.contentsquare.net		46.137.111.148	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.650552034 CET	1.1.1.1	192.168.2.4	0xc9fa	No error (0)	c.ba.contentsquare.net		34.249.87.52	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:47.650711060 CET	1.1.1.1	192.168.2.4	0x1261	No error (0)	c.contentsquare.net	c.ba.contentsquare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:47.651395082 CET	1.1.1.1	192.168.2.4	0x57d2	No error (0)	fledge.teads.tv	fledge.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:47.652188063 CET	1.1.1.1	192.168.2.4	0x30d8	No error (0)	fledge.teads.tv	fledge.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:47.652741909 CET	1.1.1.1	192.168.2.4	0xe601	No error (0)	t.teads.tv	t.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:47.652944088 CET	1.1.1.1	192.168.2.4	0x91c2	No error (0)	t.teads.tv	t.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:47.745714903 CET	1.1.1.1	192.168.2.4	0xfbc6	No error (0)	cm.teads.tv	cm.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:47.745929956 CET	1.1.1.1	192.168.2.4	0x7f8f	No error (0)	cm.teads.tv	cm.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:47.998763084 CET	1.1.1.1	192.168.2.4	0xa918	No error (0)	www.linkedin.com	cf-afd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:47.998763084 CET	1.1.1.1	192.168.2.4	0xa918	No error (0)	cf-afd.www.linkedin.com	www.linkedin.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:47.998781919 CET	1.1.1.1	192.168.2.4	0x3092	No error (0)	www.linkedin.com	cf-afd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:47.998781919 CET	1.1.1.1	192.168.2.4	0x3092	No error (0)	cf-afd.www.linkedin.com	www.linkedin.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:48.698143005 CET	1.1.1.1	192.168.2.4	0x5048	No error (0)	analytics.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:48.699649096 CET	1.1.1.1	192.168.2.4	0xe2c7	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:48.876475096 CET	1.1.1.1	192.168.2.4	0xb0a0	No error (0)	us.creativecdn.com		185.184.10.30	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:48.942770004 CET	1.1.1.1	192.168.2.4	0xe205	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:48.942908049 CET	1.1.1.1	192.168.2.4	0xa742	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:48.942908049 CET	1.1.1.1	192.168.2.4	0xa742	No error (0)	dg2iu7dxxehbo.cloudfront.net		18.172.103.101	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:49.088433981 CET	1.1.1.1	192.168.2.4	0x35d8	No error (0)	us.creativecdn.com		185.184.10.30	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:49.091594934 CET	1.1.1.1	192.168.2.4	0x8d02	No error (0)	t.teads.tv	t.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:49.092279911 CET	1.1.1.1	192.168.2.4	0x9c57	No error (0)	t.teads.tv	t.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:49.843101978 CET	1.1.1.1	192.168.2.4	0x72d1	No error (0)	t.co		162.159.140.229	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:49.903213024 CET	1.1.1.1	192.168.2.4	0x3e29	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:49.903213024 CET	1.1.1.1	192.168.2.4	0x3e29	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:49.903213024 CET	1.1.1.1	192.168.2.4	0x3e29	No error (0)	s.twitter.com		104.244.42.3	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:49.904114962 CET	1.1.1.1	192.168.2.4	0xadf4	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:49.904114962 CET	1.1.1.1	192.168.2.4	0xadf4	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:49.984147072 CET	1.1.1.1	192.168.2.4	0x3967	No error (0)	ad.doubleclick.net		216.58.206.38	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:49.984198093 CET	1.1.1.1	192.168.2.4	0x3605	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Oct 30, 2024 08:46:51.197702885 CET	1.1.1.1	192.168.2.4	0xcbc9	No error (0)	rules.quantcount.com	d2fashanjl7d9f.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:51.197702885 CET	1.1.1.1	192.168.2.4	0xcbc9	No error (0)	d2fashanjl7d9f.cloudfront.net		18.66.102.15	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:51.197702885 CET	1.1.1.1	192.168.2.4	0xcbc9	No error (0)	d2fashanjl7d9f.cloudfront.net		18.66.102.57	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:51.197702885 CET	1.1.1.1	192.168.2.4	0xcbc9	No error (0)	d2fashanjl7d9f.cloudfront.net		18.66.102.66	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:51.197702885 CET	1.1.1.1	192.168.2.4	0xcbc9	No error (0)	d2fashanjl7d9f.cloudfront.net		18.66.102.121	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:51.198232889 CET	1.1.1.1	192.168.2.4	0xbc08	No error (0)	rules.quantcount.com	d2fashanjl7d9f.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:51.720052958 CET	1.1.1.1	192.168.2.4	0xaba7	No error (0)	tr.line.me		147.92.191.92	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:51.972573042 CET	1.1.1.1	192.168.2.4	0xe34a	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:51.973372936 CET	1.1.1.1	192.168.2.4	0x446d	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:51.974890947 CET	1.1.1.1	192.168.2.4	0xcf69	No error (0)	cm.g.doubleclick.net		142.250.186.66	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:51.976296902 CET	1.1.1.1	192.168.2.4	0xf7bb	No error (0)	ib.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:51.976296902 CET	1.1.1.1	192.168.2.4	0xf7bb	No error (0)	ib.anycast.adnxs.com		185.89.210.90	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:51.976296902 CET	1.1.1.1	192.168.2.4	0xf7bb	No error (0)	ib.anycast.adnxs.com		185.89.210.122	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:51.976296902 CET	1.1.1.1	192.168.2.4	0xf7bb	No error (0)	ib.anycast.adnxs.com		185.89.211.116	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:51.976296902 CET	1.1.1.1	192.168.2.4	0xf7bb	No error (0)	ib.anycast.adnxs.com		185.89.210.82	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:51.976296902 CET	1.1.1.1	192.168.2.4	0xf7bb	No error (0)	ib.anycast.adnxs.com		185.89.210.20	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:51.976296902 CET	1.1.1.1	192.168.2.4	0xf7bb	No error (0)	ib.anycast.adnxs.com		185.89.210.153	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:51.976296902 CET	1.1.1.1	192.168.2.4	0xf7bb	No error (0)	ib.anycast.adnxs.com		185.89.210.180	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:51.976296902 CET	1.1.1.1	192.168.2.4	0xf7bb	No error (0)	ib.anycast.adnxs.com		185.89.211.84	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:51.976296902 CET	1.1.1.1	192.168.2.4	0xf7bb	No error (0)	ib.anycast.adnxs.com		185.89.210.212	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:51.976296902 CET	1.1.1.1	192.168.2.4	0xf7bb	No error (0)	ib.anycast.adnxs.com		185.89.210.46	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:51.976296902 CET	1.1.1.1	192.168.2.4	0xf7bb	No error (0)	ib.anycast.adnxs.com		185.89.210.244	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:51.976296902 CET	1.1.1.1	192.168.2.4	0xf7bb	No error (0)	ib.anycast.adnxs.com		185.89.210.141	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:52.053636074 CET	1.1.1.1	192.168.2.4	0xcccb	No error (0)	adservice.google.com			65	IN (0x0001)	false
Oct 30, 2024 08:46:52.053880930 CET	1.1.1.1	192.168.2.4	0x9ca3	No error (0)	adservice.google.com		172.217.16.194	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:52.202147961 CET	1.1.1.1	192.168.2.4	0x93b4	No error (0)	www.google.com		142.250.186.36	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:52.203063011 CET	1.1.1.1	192.168.2.4	0xed1a	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 30, 2024 08:46:52.486051083 CET	1.1.1.1	192.168.2.4	0xf60c	No error (0)	t.co		162.159.140.229	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:52.488877058 CET	1.1.1.1	192.168.2.4	0x367d	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:52.488877058 CET	1.1.1.1	192.168.2.4	0x367d	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:52.488877058 CET	1.1.1.1	192.168.2.4	0x367d	No error (0)	s.twitter.com		104.244.42.195	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:52.488955021 CET	1.1.1.1	192.168.2.4	0xab64	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:52.488955021 CET	1.1.1.1	192.168.2.4	0xab64	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:52.924730062 CET	1.1.1.1	192.168.2.4	0x7443	No error (0)	pixel.tapad.com		34.111.113.62	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:53.346497059 CET	1.1.1.1	192.168.2.4	0x5ce2	No error (0)	ad.doubleclick.net		172.217.18.6	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:53.347327948 CET	1.1.1.1	192.168.2.4	0xca31	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Oct 30, 2024 08:46:53.365631104 CET	1.1.1.1	192.168.2.4	0x9230	No error (0)	f.creativecdn.com	cm.rdr.creativecdn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:53.365631104 CET	1.1.1.1	192.168.2.4	0x9230	No error (0)	cm.rdr.creativecdn.com	ams.creativecdn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:53.366205931 CET	1.1.1.1	192.168.2.4	0x2e18	No error (0)	f.creativecdn.com	cm.rdr.creativecdn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:53.366205931 CET	1.1.1.1	192.168.2.4	0x2e18	No error (0)	cm.rdr.creativecdn.com	ams.creativecdn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:53.366205931 CET	1.1.1.1	192.168.2.4	0x2e18	No error (0)	ams.creativecdn.com		185.184.8.90	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:53.727839947 CET	1.1.1.1	192.168.2.4	0x9f34	No error (0)	rules.quantcount.com	d2fashanjl7d9f.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:53.727839947 CET	1.1.1.1	192.168.2.4	0x9f34	No error (0)	d2fashanjl7d9f.cloudfront.net		18.66.102.121	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:53.727839947 CET	1.1.1.1	192.168.2.4	0x9f34	No error (0)	d2fashanjl7d9f.cloudfront.net		18.66.102.66	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:53.727839947 CET	1.1.1.1	192.168.2.4	0x9f34	No error (0)	d2fashanjl7d9f.cloudfront.net		18.66.102.15	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:53.727839947 CET	1.1.1.1	192.168.2.4	0x9f34	No error (0)	d2fashanjl7d9f.cloudfront.net		18.66.102.57	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:53.728323936 CET	1.1.1.1	192.168.2.4	0xc386	No error (0)	rules.quantcount.com	d2fashanjl7d9f.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:53.742367983 CET	1.1.1.1	192.168.2.4	0x3234	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:53.742367983 CET	1.1.1.1	192.168.2.4	0x3234	No error (0)	star-mini.c10r.facebook.com		157.240.0.35	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:53.742383003 CET	1.1.1.1	192.168.2.4	0xe3c2	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:53.749754906 CET	1.1.1.1	192.168.2.4	0x308e	No error (0)	www.google.com		142.250.185.228	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:53.749830961 CET	1.1.1.1	192.168.2.4	0x2b0a	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 30, 2024 08:46:53.763570070 CET	1.1.1.1	192.168.2.4	0x2fed	No error (0)	tr.line.me		147.92.191.92	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:53.968713045 CET	1.1.1.1	192.168.2.4	0x5fc9	No error (0)	adservice.google.com		142.250.181.226	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:53.969024897 CET	1.1.1.1	192.168.2.4	0xc4cd	No error (0)	adservice.google.com			65	IN (0x0001)	false
Oct 30, 2024 08:46:54.730849981 CET	1.1.1.1	192.168.2.4	0x4d56	No error (0)	ib.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:54.730849981 CET	1.1.1.1	192.168.2.4	0x4d56	No error (0)	ib.anycast.adnxs.com		37.252.173.215	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:54.730849981 CET	1.1.1.1	192.168.2.4	0x4d56	No error (0)	ib.anycast.adnxs.com		37.252.171.149	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:54.730849981 CET	1.1.1.1	192.168.2.4	0x4d56	No error (0)	ib.anycast.adnxs.com		37.252.171.53	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:54.730849981 CET	1.1.1.1	192.168.2.4	0x4d56	No error (0)	ib.anycast.adnxs.com		37.252.172.123	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:54.730849981 CET	1.1.1.1	192.168.2.4	0x4d56	No error (0)	ib.anycast.adnxs.com		37.252.171.85	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:54.730849981 CET	1.1.1.1	192.168.2.4	0x4d56	No error (0)	ib.anycast.adnxs.com		37.252.171.52	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:54.730849981 CET	1.1.1.1	192.168.2.4	0x4d56	No error (0)	ib.anycast.adnxs.com		37.252.171.21	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:54.983573914 CET	1.1.1.1	192.168.2.4	0x1f7c	No error (0)	pixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:54.983573914 CET	1.1.1.1	192.168.2.4	0x1f7c	No error (0)	global.px.quantserve.com		91.228.74.159	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:54.983573914 CET	1.1.1.1	192.168.2.4	0x1f7c	No error (0)	global.px.quantserve.com		91.228.74.244	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:54.983573914 CET	1.1.1.1	192.168.2.4	0x1f7c	No error (0)	global.px.quantserve.com		91.228.74.166	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:54.983573914 CET	1.1.1.1	192.168.2.4	0x1f7c	No error (0)	global.px.quantserve.com		91.228.74.200	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:54.983896017 CET	1.1.1.1	192.168.2.4	0x611	No error (0)	pixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:55.683248997 CET	1.1.1.1	192.168.2.4	0x3bb2	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:55.683248997 CET	1.1.1.1	192.168.2.4	0x3bb2	No error (0)	star-mini.c10r.facebook.com		157.240.253.35	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:55.683700085 CET	1.1.1.1	192.168.2.4	0xfeb5	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:55.756570101 CET	1.1.1.1	192.168.2.4	0x7391	No error (0)	cm.teads.tv	cm.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:55.756644011 CET	1.1.1.1	192.168.2.4	0xc86d	No error (0)	cm.teads.tv	cm.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:56.129800081 CET	1.1.1.1	192.168.2.4	0x5e30	No error (0)	tr6.snapchat.com	usc1-gcp-v61.api.sc-gw.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:56.129800081 CET	1.1.1.1	192.168.2.4	0x5e30	No error (0)	usc1-gcp-v61.api.sc-gw.com		35.190.43.134	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:56.130614996 CET	1.1.1.1	192.168.2.4	0x3083	No error (0)	tr6.snapchat.com	usc1-gcp-v61.api.sc-gw.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:56.181670904 CET	1.1.1.1	192.168.2.4	0xf5c	No error (0)	ib.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:56.181670904 CET	1.1.1.1	192.168.2.4	0xf5c	No error (0)	ib.anycast.adnxs.com		37.252.171.52	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:56.181670904 CET	1.1.1.1	192.168.2.4	0xf5c	No error (0)	ib.anycast.adnxs.com		37.252.171.53	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:56.181670904 CET	1.1.1.1	192.168.2.4	0xf5c	No error (0)	ib.anycast.adnxs.com		37.252.171.85	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:56.181670904 CET	1.1.1.1	192.168.2.4	0xf5c	No error (0)	ib.anycast.adnxs.com		37.252.173.215	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:56.181670904 CET	1.1.1.1	192.168.2.4	0xf5c	No error (0)	ib.anycast.adnxs.com		37.252.172.123	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:56.181670904 CET	1.1.1.1	192.168.2.4	0xf5c	No error (0)	ib.anycast.adnxs.com		37.252.171.149	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:56.181670904 CET	1.1.1.1	192.168.2.4	0xf5c	No error (0)	ib.anycast.adnxs.com		37.252.171.21	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:56.365151882 CET	1.1.1.1	192.168.2.4	0x2f0	No error (0)	pixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:56.365151882 CET	1.1.1.1	192.168.2.4	0x2f0	No error (0)	global.px.quantserve.com		91.228.74.244	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:56.365151882 CET	1.1.1.1	192.168.2.4	0x2f0	No error (0)	global.px.quantserve.com		91.228.74.159	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:56.365151882 CET	1.1.1.1	192.168.2.4	0x2f0	No error (0)	global.px.quantserve.com		91.228.74.200	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:56.365151882 CET	1.1.1.1	192.168.2.4	0x2f0	No error (0)	global.px.quantserve.com		91.228.74.166	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:56.366235018 CET	1.1.1.1	192.168.2.4	0xefce	No error (0)	pixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:56.976229906 CET	1.1.1.1	192.168.2.4	0x48d	No error (0)	cm.teads.tv	cm.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:56.977838993 CET	1.1.1.1	192.168.2.4	0xd3e7	No error (0)	cm.teads.tv	cm.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:57.315602064 CET	1.1.1.1	192.168.2.4	0x2965	No error (0)	ws.batch.com	kube-prod-04-elb.batch.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:57.315602064 CET	1.1.1.1	192.168.2.4	0x2965	No error (0)	kube-prod-04-elb.batch.com		54.36.246.133	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:57.316397905 CET	1.1.1.1	192.168.2.4	0x1392	No error (0)	ws.batch.com	kube-prod-04-elb.batch.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:58.071068048 CET	1.1.1.1	192.168.2.4	0x93b1	No error (0)	stats.g.doubleclick.net		66.102.1.156	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:58.071068048 CET	1.1.1.1	192.168.2.4	0x93b1	No error (0)	stats.g.doubleclick.net		66.102.1.154	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:58.071068048 CET	1.1.1.1	192.168.2.4	0x93b1	No error (0)	stats.g.doubleclick.net		66.102.1.157	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:58.071068048 CET	1.1.1.1	192.168.2.4	0x93b1	No error (0)	stats.g.doubleclick.net		66.102.1.155	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:58.139791965 CET	1.1.1.1	192.168.2.4	0x57c	No error (0)	analytics.pangle-ads.com	analytics.pangle-ads.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:58.140377998 CET	1.1.1.1	192.168.2.4	0x163	No error (0)	analytics.pangle-ads.com	analytics.pangle-ads.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:58.175054073 CET	1.1.1.1	192.168.2.4	0xc8c6	No error (0)	analytics-ipv6.tiktokw.us	analytics-ipv6.tiktokw.us.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:58.177326918 CET	1.1.1.1	192.168.2.4	0x8c6	No error (0)	analytics-ipv6.tiktokw.us	analytics-ipv6.tiktokw.us.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:58.801143885 CET	1.1.1.1	192.168.2.4	0x273b	No error (0)	icons.batch.com	icons.batch.com.sds.haproxyedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:58.801845074 CET	1.1.1.1	192.168.2.4	0x764b	No error (0)	icons.batch.com	icons.batch.com.sds.haproxyedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:58.801845074 CET	1.1.1.1	192.168.2.4	0x764b	No error (0)	icons.batch.com.sds.haproxyedge.net		104.152.118.107	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:58.801845074 CET	1.1.1.1	192.168.2.4	0x764b	No error (0)	icons.batch.com.sds.haproxyedge.net		104.152.118.108	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:58.801845074 CET	1.1.1.1	192.168.2.4	0x764b	No error (0)	icons.batch.com.sds.haproxyedge.net		104.152.118.109	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:58.801845074 CET	1.1.1.1	192.168.2.4	0x764b	No error (0)	icons.batch.com.sds.haproxyedge.net		104.152.118.110	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:58.801845074 CET	1.1.1.1	192.168.2.4	0x764b	No error (0)	icons.batch.com.sds.haproxyedge.net		104.152.118.111	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:58.801845074 CET	1.1.1.1	192.168.2.4	0x764b	No error (0)	icons.batch.com.sds.haproxyedge.net		104.152.118.104	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:58.801845074 CET	1.1.1.1	192.168.2.4	0x764b	No error (0)	icons.batch.com.sds.haproxyedge.net		104.152.118.105	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:58.801845074 CET	1.1.1.1	192.168.2.4	0x764b	No error (0)	icons.batch.com.sds.haproxyedge.net		104.152.118.106	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:59.571203947 CET	1.1.1.1	192.168.2.4	0x3391	No error (0)	ws.batch.com	kube-prod-04-elb.batch.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:59.571203947 CET	1.1.1.1	192.168.2.4	0x3391	No error (0)	kube-prod-04-elb.batch.com		193.70.103.218	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:59.571218014 CET	1.1.1.1	192.168.2.4	0xcb25	No error (0)	ws.batch.com	kube-prod-04-elb.batch.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:59.911140919 CET	1.1.1.1	192.168.2.4	0xfd57	No error (0)	icons.batch.com	icons.batch.com.sds.haproxyedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:59.931734085 CET	1.1.1.1	192.168.2.4	0x225d	No error (0)	icons.batch.com	icons.batch.com.sds.haproxyedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:46:59.931734085 CET	1.1.1.1	192.168.2.4	0x225d	No error (0)	icons.batch.com.sds.haproxyedge.net		104.152.118.106	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:59.931734085 CET	1.1.1.1	192.168.2.4	0x225d	No error (0)	icons.batch.com.sds.haproxyedge.net		104.152.118.107	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:59.931734085 CET	1.1.1.1	192.168.2.4	0x225d	No error (0)	icons.batch.com.sds.haproxyedge.net		104.152.118.108	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:59.931734085 CET	1.1.1.1	192.168.2.4	0x225d	No error (0)	icons.batch.com.sds.haproxyedge.net		104.152.118.109	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:59.931734085 CET	1.1.1.1	192.168.2.4	0x225d	No error (0)	icons.batch.com.sds.haproxyedge.net		104.152.118.110	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:59.931734085 CET	1.1.1.1	192.168.2.4	0x225d	No error (0)	icons.batch.com.sds.haproxyedge.net		104.152.118.111	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:59.931734085 CET	1.1.1.1	192.168.2.4	0x225d	No error (0)	icons.batch.com.sds.haproxyedge.net		104.152.118.104	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:46:59.931734085 CET	1.1.1.1	192.168.2.4	0x225d	No error (0)	icons.batch.com.sds.haproxyedge.net		104.152.118.105	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:47:05.805855036 CET	1.1.1.1	192.168.2.4	0xffa7	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:47:05.805855036 CET	1.1.1.1	192.168.2.4	0xffa7	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:47:09.191169024 CET	1.1.1.1	192.168.2.4	0xbbf1	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:47:09.191169024 CET	1.1.1.1	192.168.2.4	0xbbf1	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:47:23.225975990 CET	1.1.1.1	192.168.2.4	0xd712	No error (0)	cdn.cookielaw.org		104.18.86.42	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:47:23.225975990 CET	1.1.1.1	192.168.2.4	0xd712	No error (0)	cdn.cookielaw.org		104.18.87.42	A (IP address)	IN (0x0001)	false
Oct 30, 2024 08:47:23.226005077 CET	1.1.1.1	192.168.2.4	0x989	No error (0)	cdn.cookielaw.org			65	IN (0x0001)	false
Oct 30, 2024 08:47:26.569041967 CET	1.1.1.1	192.168.2.4	0x17d3	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 08:47:26.569041967 CET	1.1.1.1	192.168.2.4	0x17d3	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:17 UTC	679	OUT	GET /a/en/new-app-offer.html HTTP/1.1 Host: all.accor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 07:46:17 UTC	1153	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 7653 cache-control: public, max-age=14400, stale-if-error=3600, stale-while-revalidate=600 Content-Type: text/html;charset=utf-8 Date: Wed, 30 Oct 2024 07:46:17 GMT expires: Wed, 30 Oct 2024 05:43:44 GMT server: MF 8700 S - Dyna-VT - Stage V All-in-One Set-Cookie: affinity="2ebdfa5ef5c60257"; Path=/; HttpOnly; secure Set-Cookie: visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; expires=Wed, 29 Oct 2025 22:21:24 GMT; HttpOnly; path=/ Set-Cookie: nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; HttpOnly; path=/ Set-Cookie: incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; path=/ Strict-Transport-Security: max-age=31557600 Vary: Accept-Encoding X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Content-Type-Options: nosniff x-frame-options: SAMEORIGIN X-Iinfo: 17-17020496-17020497 NNNY CT(6 8 0) RT(1730274376964 4) q(0 0 0 0) r(0 0) U24 X-Served-By: cache-ams21073-AMS X-Timer: S1730274377.183353,VS0,VS0,VE2 x-vhost: prod-allcom-publish Transfer-Encoding: chunked Connection: close
2024-10-30 07:46:17 UTC	5	IN	Data Raw: 35 36 32 0d 0a Data Ascii: 562
2024-10-30 07:46:17 UTC	1378	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 20 20 20 20 3c 68 65 61 64 3e 0a 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 32 30 25 20 6d 6f 72 65 20 52 65 77 61 72 64 20 70 6f 69 6e 74 73 2c 20 6f 6e 6c 79 20 6f 6e 20 6f 75 72 20 61 70 70 e2 80 8b 3c 2f 74 69 74 6c 65 3e 0a 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6b 65 79 77 6f 72 64 73 22 20 63 6f 6e 74 65 6e 74 3d 22 4d 65 6d 62 65 72 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 42 6f 6f 6b 20 61 6e 64 20 73 74 61 79 20 62 79 20 4a 75 6e 65 20 33 30 2c 20 32 30 32 35 21 22 2f 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en"> <head> <meta charset="UTF-8"/> <title>20% more Reward points, only on our app</title> <meta name="keywords" content="Member"/> <meta name="description" content="Book and stay by June 30, 2025!"/>
2024-10-30 07:46:17 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-30 07:46:17 UTC	5	IN	Data Raw: 35 36 32 0d 0a Data Ascii: 562
2024-10-30 07:46:17 UTC	1378	IN	Data Raw: 62 73 2f 61 63 65 2f 63 6c 69 65 6e 74 6c 69 62 73 2f 63 6c 69 65 6e 74 6c 69 62 2d 70 6f 73 2e 6c 63 2d 37 63 62 62 39 31 62 39 37 32 33 37 38 61 62 38 31 34 64 66 61 66 34 30 64 38 32 39 33 39 61 38 2d 6c 63 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 0a 0a 0a 0a 0a 0a 20 20 20 20 3c 21 2d 2d 20 43 61 6c 6c 69 6e 67 20 43 6f 72 65 4a 53 20 4c 69 62 72 61 69 72 69 65 73 20 61 6e 64 20 4d 6f 64 75 6c 61 72 69 7a 65 64 20 73 63 72 69 70 74 73 2d 2d 3e 0a 20 20 20 20 0a 20 20 20 20 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 61 2f 65 74 63 2e 63 6c 69 65 6e 74 6c 69 62 73 2f 61 63 65 2f 63 6c 69 65 6e 74 6c 69 62 73 2d 6d 6f 64 75 6c 65 73 2f 63 6c 69 65 6e 74 6c 69 62 2d 63 6f 72 65 2e 6c 63 2d 36 33 65 33 39 39 63 35 37 32 32 62 35 34 64 Data Ascii: bs/ace/clientlibs/clientlib-pos.lc-7cbb91b972378ab814dfaf40d82939a8-lc.min.js"></script> ... Calling CoreJS Librairies and Modularized scripts--> <script src="/a/etc.clientlibs/ace/clientlibs-modules/clientlib-core.lc-63e399c5722b54d
2024-10-30 07:46:17 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-30 07:46:17 UTC	5	IN	Data Raw: 35 36 32 0d 0a Data Ascii: 562
2024-10-30 07:46:17 UTC	1378	IN	Data Raw: 6c 6c 2e 61 63 63 6f 72 2e 63 6f 6d 2f 61 2f 72 75 2f 6e 65 77 2d 61 70 70 2d 6f 66 66 65 72 2e 68 74 6d 6c 22 2f 3e 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 6c 61 6e 67 3d 22 6b 6f 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 6c 6c 2e 61 63 63 6f 72 2e 63 6f 6d 2f 61 2f 6b 6f 2f 6e 65 77 2d 61 70 70 2d 6f 66 66 65 72 2e 68 74 6d 6c 22 2f 3e 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 6c 61 6e 67 3d 22 70 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 6c 6c 2e 61 63 63 6f 72 2e 63 6f 6d 2f 61 2f 70 74 2f 6e 65 77 2d 61 70 70 2d 6f 66 66 65 72 Data Ascii: ll.accor.com/a/ru/new-app-offer.html"/> <link rel="alternate" hreflang="ko" href="https://all.accor.com/a/ko/new-app-offer.html"/> <link rel="alternate" hreflang="pt" href="https://all.accor.com/a/pt/new-app-offer
2024-10-30 07:46:17 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-30 07:46:17 UTC	5	IN	Data Raw: 35 36 32 0d 0a Data Ascii: 562

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49735	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:17 UTC	861	OUT	GET /.rum/@adobe/helix-rum-js@%5E2/dist/rum-standalone.js HTTP/1.1 Host: all.accor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://all.accor.com/a/en/new-app-offer.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==
2024-10-30 07:46:17 UTC	921	IN	HTTP/1.1 404 Not Found Accept-Ranges: bytes Cache-control: private, max-age=3600, stale-while-revalidate=21600 Content-Type: text/html; charset=utf-8 Date: Wed, 30 Oct 2024 07:46:17 GMT P3P: CP="NO P3P POLICY" Referrer-Policy: origin server: MF 8700 S - Dyna-VT - Stage V All-in-One Set-Cookie: org=evy; path=/; Max-Age=900; domain=.accor.com; SameSite=none; Secure Set-Cookie: nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; HttpOnly; path=/ Set-Cookie: incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; path=/ Strict-Transport-Security: max-age=15552000 Vary: Origin, Accept-Encoding X-Accor-asset: wise X-CDN: Imperva X-CDN-Forward: EdgeCast X-Clacks-Overhead: GNU Terry Pratchett X-Iinfo: 17-211792524-211792525 NNNY CT(12 21 0) RT(1730274377140 4) q(0 0 0 1) r(0 0) U24 X-XSS-Protection: 1; mode=block Transfer-Encoding: chunked Connection: close
2024-10-30 07:46:17 UTC	5	IN	Data Raw: 33 63 65 0d 0a Data Ascii: 3ce
2024-10-30 07:46:17 UTC	974	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 76 61 72 20 6b 61 6d 65 6c 65 6f 6f 6e 4c 6f 61 64 69 6e 67 54 69 6d 65 6f 75 74 20 3d 20 31 30 30 30 3b 77 69 6e 64 6f 77 2e 6b 61 6d 65 6c 65 6f 6f 6e 51 75 65 75 65 20 3d 20 77 69 6e 64 6f 77 2e 6b 61 6d 65 6c 65 6f 6f 6e 51 75 65 75 65 20 7c 7c 20 5b 5d 3b 77 69 6e 64 6f 77 2e 6b 61 6d 65 6c 65 6f 6f 6e 53 74 61 72 74 4c 6f 61 64 54 69 6d 65 20 3d 20 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 3b 69 66 20 28 21 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 6b 61 6d 65 6c 65 6f 6f 6e 4c 6f 61 64 69 6e 67 53 Data Ascii: <!DOCTYPE html><html lang="en"><head><script type="text/javascript">var kameleoonLoadingTimeout = 1000;window.kameleoonQueue = window.kameleoonQueue \|\| [];window.kameleoonStartLoadTime = new Date().getTime();if (!document.getElementById('kameleoonLoadingS
2024-10-30 07:46:17 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-30 07:46:17 UTC	6	IN	Data Raw: 32 37 39 62 0d 0a Data Ascii: 279b
2024-10-30 07:46:17 UTC	5802	IN	Data Raw: 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 6b 61 6d 65 6c 65 6f 6f 6e 53 74 6e 29 3b 20 20 20 7d 7d 3b 77 69 6e 64 6f 77 2e 6b 61 6d 65 6c 65 6f 6f 6e 44 69 73 70 6c 61 79 50 61 67 65 54 69 6d 65 4f 75 74 20 3d 20 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 77 69 6e 64 6f 77 2e 6b 61 6d 65 6c 65 6f 6f 6e 44 69 73 70 6c 61 79 50 61 67 65 2c 20 6b 61 6d 65 6c 65 6f 6f 6e 4c 6f 61 64 69 6e 67 54 69 6d 65 6f 75 74 29 3b 7d 7d 3c 2f 73 63 72 69 70 74 3e 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 2f 2f 71 63 68 6d 68 64 36 31 73 6a 2e 6b 61 6d 65 6c 65 6f 6f 6e 2e 65 75 2f 6b 61 6d 65 6c 65 6f 6f 6e 2e 6a 73 22 20 61 73 79 6e 63 3d 22 74 72 75 65 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 Data Ascii: e.removeChild(kameleoonStn); }};window.kameleoonDisplayPageTimeOut = window.setTimeout(window.kameleoonDisplayPage, kameleoonLoadingTimeout);}}</script> <script type="text/javascript" src="//qchmhd61sj.kameleoon.eu/kameleoon.js" async="true"></script><s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49750	151.101.3.10	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:18 UTC	655	OUT	GET /b94aa70a4593f812b35d5a8922257b6f80ccf6aa708f58b8266f4ba917eb0e0e/resources/fonts/icomoon.woff HTTP/1.1 Host: static-p46175-e229011.adobeaemcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://all.accor.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://all.accor.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 07:46:18 UTC	768	IN	HTTP/1.1 200 OK Connection: close Content-Length: 63052 x-frame-options: SAMEORIGIN cache-control: public,max-age=31536000,immutable content-type: font/woff content-md5: YTnidO3eJ8ZtMR5pLy0TUA== last-modified: Mon, 28 Oct 2024 09:01:46 GMT etag: "0x8DCF72F26F8F978" x-ms-version-id: 2024-10-28T09:01:46.9142392Z x-ms-is-current-version: true content-disposition: inline access-control-allow-origin: * x-vhost: publish X-Content-Type-Options: nosniff Accept-Ranges: bytes Age: 90677 Date: Wed, 30 Oct 2024 07:46:18 GMT Strict-Transport-Security: max-age=31557600 set-cookie: affinity="ba12e4c388b49344"; Path=/; HttpOnly; secure X-Served-By: cache-dfw-kdfw8210055-DFW X-Cache: HIT X-Timer: S1730274379.776800,VS0,VS0,VE2 Vary: Accept-Encoding
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 f6 4c 00 0b 00 00 00 00 f6 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4f 53 2f 32 00 00 01 08 00 00 00 60 00 00 00 60 0f 12 06 f7 63 6d 61 70 00 00 01 68 00 00 00 54 00 00 00 54 17 56 d3 58 67 61 73 70 00 00 01 bc 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 01 c4 00 00 ed 5c 00 00 ed 5c ca a6 e8 e7 68 65 61 64 00 00 ef 20 00 00 00 36 00 00 00 36 1e 5f 52 9d 68 68 65 61 00 00 ef 58 00 00 00 24 00 00 00 24 07 c2 04 97 68 6d 74 78 00 00 ef 7c 00 00 03 58 00 00 03 58 4c 80 9c 49 6c 6f 63 61 00 00 f2 d4 00 00 01 ae 00 00 01 ae 19 00 da e0 6d 61 78 70 00 00 f4 84 00 00 00 20 00 00 00 20 00 e8 02 85 6e 61 6d 65 00 00 f4 a4 00 00 01 86 00 00 01 86 99 4a 09 fb 70 6f 73 74 00 00 f6 2c 00 00 00 Data Ascii: wOFFLOS/2``cmaphTTVXgaspglyf\\head 66_RhheaX$$hmtx\|XXLIlocamaxp nameJpost,
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: 31 32 16 15 17 05 16 06 0f 01 17 16 06 07 06 22 2f 01 07 06 22 27 2e 01 35 37 27 2e 01 35 3e 01 3b 01 37 3e 01 33 31 32 16 15 17 33 32 16 15 27 06 22 2f 01 07 22 06 23 22 26 23 2e 01 3f 01 27 2e 01 35 3e 01 3b 01 37 3e 01 33 32 16 15 17 33 32 16 17 1c 01 0f 01 17 14 06 07 01 9c 55 02 03 01 01 02 43 19 01 02 01 01 04 01 46 45 02 01 01 01 01 01 01 19 46 01 01 01 03 01 58 19 01 02 02 02 03 1c 01 75 01 01 02 43 19 01 02 01 01 04 01 46 45 01 04 01 01 01 19 46 01 01 01 03 01 58 19 01 02 02 02 03 1c 55 02 03 bf 02 03 01 46 45 01 01 01 01 01 01 02 01 01 19 46 01 01 01 02 02 58 19 01 02 02 02 03 1c 55 02 02 01 02 43 19 01 01 01 72 01 02 02 02 03 01 36 51 02 03 01 01 01 31 31 01 01 01 03 02 51 34 01 03 02 02 02 50 01 02 02 01 4e 04 02 03 01 36 51 02 03 01 01 01 31 Data Ascii: 12"/"'.57'.5>;7>31232'"/"#"&#.?'.5>;7>3232UCFEFXuCFEFXUFEFXUCr6Q11Q4PN6Q1
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: 03 01 37 51 02 03 01 01 01 32 32 01 01 01 03 02 52 34 01 03 02 01 02 50 02 02 02 02 4e 02 01 00 00 03 01 00 00 15 03 15 03 6a 00 1b 00 28 00 5d 00 00 01 1e 01 15 11 14 06 23 22 26 35 11 23 22 26 27 26 37 3e 01 37 36 37 3e 01 17 1e 01 03 33 11 0e 01 07 06 07 0e 01 07 06 17 03 2e 01 07 0e 01 17 1e 01 15 14 06 07 11 34 26 23 22 06 15 11 2e 01 35 34 36 37 36 26 27 26 06 07 0e 01 15 14 16 17 11 14 16 33 32 36 35 11 3e 01 35 2e 01 27 03 04 07 0a 0c 09 0a 0c 7c 08 0d 01 07 01 01 14 12 12 1a 12 2f 19 01 03 81 68 0c 15 08 0c 0e 0e 15 05 04 07 7d 02 0f 09 09 0a 02 04 04 30 15 0d 09 09 0d 16 2f 04 03 02 0a 09 09 0f 02 04 04 4c 25 0d 09 09 0d 25 4c 01 04 04 03 68 02 0c 07 fc db 09 0d 0d 09 01 5a 0c 08 54 45 45 6c 27 27 18 11 10 03 01 01 fe 4c 01 8a 01 0b 08 0b 18 18 Data Ascii: 7Q22R4PNj(]#"&5#"&'&7>767>3.4&#".54676&'&3265>5.'\|/h}0/L%%LhZTEEl''L
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: 01 01 01 01 02 02 02 01 03 01 01 01 01 01 02 01 01 01 01 01 02 01 01 01 01 03 01 01 01 01 02 01 0b 14 08 01 01 02 01 11 14 02 02 59 01 01 01 01 01 01 10 1c 0d 01 01 01 01 01 04 08 04 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 06 04 b1 06 07 07 06 b1 04 06 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 04 08 04 01 01 01 01 01 0d 1e 11 01 01 01 fe dd 18 2a 11 01 01 01 01 01 01 0c 0f 01 01 01 01 0f 0c 01 01 01 01 01 01 11 2a 18 01 23 fe 9e 01 01 01 01 01 01 03 05 02 07 09 02 02 08 08 02 05 03 01 01 01 01 01 01 0e 23 15 f0 0b 13 08 01 01 01 01 0f 11 11 0f 01 01 01 01 08 13 0b f0 15 23 0e 01 62 01 01 02 01 0a 15 09 01 01 01 04 09 03 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 a0 02 06 04 01 01 01 01 01 0b 1c 0f 01 01 01 01 01 01 Data Ascii: Y**###b
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: 33 3a 01 33 32 36 3f 01 30 26 31 37 15 30 22 31 07 0e 01 07 06 16 17 1e 01 17 32 36 3f 01 15 14 16 33 32 36 3d 01 17 1e 01 33 3e 01 37 3e 01 35 2e 01 2f 01 30 22 31 35 17 30 14 31 17 1e 01 33 3a 01 31 3e 01 2f 01 17 1e 01 33 32 36 37 36 26 27 03 5e 76 69 08 06 03 04 10 08 84 01 01 9b 9c 01 84 02 04 02 08 0b 02 01 06 07 69 76 08 04 04 05 11 07 77 0d 01 0b 09 04 08 03 04 04 10 9b 01 74 05 04 01 07 05 05 0b 05 5c 0d 09 08 0d 5c 07 12 05 05 02 07 75 01 9c 01 10 01 0e 09 08 0b 01 0c 76 05 0b 05 05 06 06 05 76 69 07 07 02 01 0c 07 03 04 02 84 01 9c 9c 01 84 08 11 03 04 07 08 69 76 07 05 02 02 0b 07 03 05 03 76 0c 01 02 03 03 07 04 01 01 01 08 0c 01 10 01 9c 01 74 04 04 01 01 02 03 02 08 04 04 08 04 5c 0d 08 09 0d 5c 03 09 04 04 07 03 02 02 01 04 04 74 01 9b 10 Data Ascii: 3:326?0&170"126?326=3>7>5./0"15013:1>/32676&'^viivwt\\uvviivvt\\t
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: 08 09 0d e5 0a 76 51 18 30 16 06 08 08 06 16 30 18 51 76 0a e5 01 f7 10 21 10 46 63 63 46 10 21 10 00 00 01 00 80 00 ab 03 80 02 d5 00 10 00 00 13 21 32 16 15 11 14 06 23 21 22 26 35 11 34 36 33 d5 02 56 23 32 32 23 fd aa 23 32 32 23 02 d5 32 23 fe 80 23 32 32 23 01 80 23 32 00 00 00 05 01 ab 00 eb 03 80 02 95 00 1c 00 2a 00 3e 00 41 00 4c 00 00 25 3e 01 3d 03 27 37 3d 02 34 26 27 23 07 27 23 15 27 23 07 33 15 33 37 17 33 37 15 07 17 15 23 27 07 23 35 33 17 37 33 25 27 23 07 23 37 33 17 35 33 17 37 33 15 07 35 07 23 27 15 27 33 27 1f 01 07 35 23 35 33 35 23 35 33 03 7d 02 01 2d 2d 02 01 56 14 14 74 21 5f 60 4e f2 27 26 45 03 4f 4f 3c 32 32 cd cf 31 31 3c fe f0 0f 4d 0f 34 4c 3d 4a 4a 25 26 47 2d 2b 2a 2b af 2d 16 6a 4f 4f 63 60 60 63 eb 05 09 05 06 02 25 Data Ascii: vQ00Qv!FccF!!2#!"&5463V#22##22#2##22##2>AL%>='7=4&'#'#'#33737#'#5373%'##7353735#''3'5#535#53}--Vt!_`N'&EOO<2211<M4L=JJ%&G-++-jOOc``c%
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: 09 0d 0d 09 08 0d 6e 0c 09 09 0c 0c 09 09 0c 00 00 05 00 57 00 71 03 a9 02 cb 00 0e 00 1d 00 2c 00 48 00 56 00 00 01 23 22 26 35 34 36 3b 01 32 16 15 14 06 23 35 23 22 26 35 34 36 3b 01 32 16 15 14 06 23 35 23 22 26 35 34 36 3b 01 32 16 15 14 06 23 01 32 16 15 14 06 23 21 22 26 35 34 36 3b 01 11 34 36 33 21 32 16 17 1e 01 15 11 33 01 11 33 35 34 36 33 32 16 1d 01 33 11 21 02 62 c4 09 0c 0c 09 c4 09 0c 0c 09 c4 09 0c 0c 09 c4 09 0c 0c 09 c4 09 0c 0c 09 c4 09 0c 0c 09 01 32 08 0d 0d 08 fc d9 09 0d 0d 08 cc 0d 09 01 62 04 08 03 03 03 cf fd cf 87 0c 09 09 0c 87 fe c8 01 57 0c 09 09 0c 0c 09 09 0c 6d 0d 09 08 0d 0d 08 09 0d 6e 0c 09 09 0c 0c 09 09 0c fe 69 0c 09 09 0c 0c 09 09 0c 02 1b 08 0d 03 03 03 08 04 fd e5 02 05 fd fb 5c 09 0d 0d 09 5c 02 05 00 00 01 00 Data Ascii: nWq,HV#"&546;2#5#"&546;2#5#"&546;2#2#!"&546;463!233546323!b2bWmni\\
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: 01 05 03 03 06 03 03 05 02 02 04 01 43 1f 43 23 22 43 1f 42 01 04 02 03 05 02 03 07 02 04 04 01 01 02 02 42 1d 2e 0f 10 0c 03 03 18 15 14 37 20 21 47 25 24 46 1f 1f 32 12 fe 81 1e 45 24 30 58 22 23 24 14 14 14 38 21 21 47 24 23 3f 1a 19 22 07 07 07 0e 0e 2d 1e 01 d6 78 03 07 04 05 07 03 02 02 01 01 01 01 01 01 02 02 76 01 04 02 01 05 02 02 04 02 02 03 02 02 04 02 03 03 1b 03 03 01 04 02 02 04 03 02 04 02 03 03 02 76 01 03 01 01 01 01 03 01 02 03 02 02 04 02 02 05 01 02 04 01 78 03 03 a5 9e 3e 02 07 05 04 08 03 02 04 01 01 01 02 02 43 03 01 04 02 02 05 02 a8 04 08 03 03 03 01 04 03 03 08 04 1c 1f 47 25 21 41 1e 1e 33 13 64 03 09 04 04 07 02 02 02 02 01 01 04 02 64 11 10 10 11 64 02 04 01 01 02 02 02 02 07 04 04 09 03 64 15 39 21 21 48 25 24 45 1e 1e 31 10 Data Ascii: CC#"CBB.7 !G%$F2E$0X"#$8!!G$#?"-xvvx>CG%!A3dddd9!!H%$E1
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: 35 34 26 23 22 06 15 25 23 2e 01 27 26 06 07 2e 01 3d 01 21 15 14 06 07 2e 01 07 0e 01 07 17 14 16 33 32 36 35 34 26 23 22 06 03 a5 0c 09 15 21 1f 1e 50 2a 93 09 0c fe d6 37 27 09 0d 0d 09 15 1e 01 32 2e 02 02 3a 2b 2a 42 05 ba 04 28 1f 1e 3d 15 15 09 0d 23 25 fe 80 7e 22 40 18 19 1a fe d5 f9 26 1b 1b 26 26 1b 1b 26 01 68 c0 09 2c 1e 1e 38 13 22 26 02 ab 1d 1b 14 36 1b 1b 27 08 26 26 1b 1b 26 26 1b 1b 26 01 9b 53 09 0d 5e 2a 4e 1d 1d 1d 03 0c 09 fe eb 8e 27 38 0d 09 09 0c 1e 16 9d 01 02 02 02 53 3a 68 24 06 0d 06 2b 3e 03 02 36 2a 1f 31 09 0a 12 18 17 3f 1d 24 5d 32 01 69 02 16 17 17 3e 22 5e 01 00 fd b8 1b 26 26 1b 1b 25 26 1a 1d 1d 29 06 06 16 18 1e 52 2e 3e 3e 28 4b 1d 13 0d 08 08 27 1b 1d 1b 26 26 1b 1b 25 26 00 00 00 00 07 00 a0 00 98 03 60 03 24 00 Data Ascii: 54&#"%#.'&.=!.32654&#"!P7'2.:+B(=#%~"@&&&&h,8"&6'&&&&&S^N'8S:h$+>61?$]2i>"^&&%&)R.>>(K'&&%&`$
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: 0d 0d 09 fe 2b 09 0c 0c 09 f7 f8 06 05 03 6c 02 05 03 b6 04 09 04 04 06 02 20 10 10 03 0e 0e 1d 06 0e 08 a7 c4 03 0a 06 09 10 06 f4 c2 89 5d 01 22 09 01 02 0a 0c 0c 12 9d 32 12 11 0c 0d 0d 0c 11 12 12 11 0c 0d 0d 0c 11 12 12 11 0c 0c 01 0c 09 09 0c 12 11 0c 0c 0c 0c 11 12 12 11 0c 0c 0c 0c 11 12 12 11 0c 0c 0c 0c 11 12 0c 09 09 0c 01 0c 0c 11 12 de 0d 08 09 0d 0d 09 08 0d a2 04 0f 07 01 14 03 06 02 64 02 01 01 01 05 04 3c 40 41 83 42 41 3d 0e 1c 0d 22 07 14 0c 15 2c 17 7f 01 97 ed 29 29 2a 52 28 28 26 57 00 07 00 6e 00 45 03 96 02 ec 00 2c 00 53 00 62 00 71 00 80 00 84 00 89 00 00 01 34 26 2b 01 35 23 35 33 32 36 35 34 26 2b 01 22 06 15 14 16 3b 01 15 23 15 23 22 06 15 11 14 16 17 1e 01 33 21 32 36 37 3e 01 35 11 05 1e 01 07 16 06 07 1e 01 07 14 06 23 21 Data Ascii: +l ]"2d<@ABA=",))*R((&WnE,Sbq4&+5#532654&+";##"3!267>5#!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49748	151.101.3.10	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:18 UTC	664	OUT	GET /b94aa70a4593f812b35d5a8922257b6f80ccf6aa708f58b8266f4ba917eb0e0e/resources/fonts/montserrat-bold.woff2 HTTP/1.1 Host: static-p46175-e229011.adobeaemcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://all.accor.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://all.accor.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 07:46:18 UTC	770	IN	HTTP/1.1 200 OK Connection: close Content-Length: 62088 x-frame-options: SAMEORIGIN cache-control: public,max-age=31536000,immutable content-type: font/woff2 content-md5: LrbYKowDCdVgjB17sjrlGQ== last-modified: Mon, 28 Oct 2024 09:01:46 GMT etag: "0x8DCF72F26FB430A" x-ms-version-id: 2024-10-28T09:01:46.9292298Z x-ms-is-current-version: true content-disposition: inline access-control-allow-origin: * x-vhost: publish X-Content-Type-Options: nosniff Accept-Ranges: bytes Age: 105519 Date: Wed, 30 Oct 2024 07:46:18 GMT Strict-Transport-Security: max-age=31557600 set-cookie: affinity="2f38804fedba84a7"; Path=/; HttpOnly; secure X-Served-By: cache-dfw-kdal2120070-DFW X-Cache: HIT X-Timer: S1730274379.777769,VS0,VS0,VE2 Vary: Accept-Encoding
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 f2 88 00 10 00 00 00 03 11 04 00 00 f2 23 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 87 36 1b 84 a7 4e 1c d2 02 06 60 3f 53 54 41 54 44 00 95 6a 11 08 0a 84 fa 48 84 8f 2c 0b 9d 6c 00 01 36 02 24 03 bb 54 04 20 05 88 1a 07 81 aa 2a 0c 07 5b 60 cb 92 ae 16 72 49 3e bf 76 b6 c2 7e 73 00 3a c7 b6 26 72 ef 81 cc 72 ad e7 4c a4 63 78 5f ac 41 90 39 bb 86 b3 fc 7a 4b 4e a4 b9 81 de 3e 92 0b 7a b3 4a 92 df d8 e7 dd b3 ff ff ff ff ff ff ff 7f 61 b2 88 39 9b 1d 60 f6 0a 9c 58 90 c4 02 46 93 98 62 fa 3f c4 dc 9d c9 84 98 6c 40 26 ad a3 33 c5 b8 49 56 3c 2e 7a b3 14 42 e9 4d 0f c1 45 f3 6a 8d b0 c9 09 29 85 84 8c 94 96 c3 36 f7 ed d8 2e 42 36 42 f0 3e 48 68 ef 98 df f1 fb 88 4e 88 31 ee f6 39 e3 80 74 4c Data Ascii: wOF2#6N`?STATDjH,l6$T *[`rI>v~s:&rrLcx_A9zKN>zJa9`XFb?l@&3IV<.zBMEj)6.B6B>HhN19tL
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: 17 a6 1c 1e 05 03 e7 64 5e 46 bc d2 f0 c8 07 11 27 6b 92 ee 73 60 2c c2 83 71 50 04 37 5a e8 e6 98 33 0a 03 4a 83 d0 de e0 fd f7 e7 cf a4 35 70 be 6d df c5 a0 d0 28 89 16 b3 62 5a 4c 2c c0 ff fb bb f3 b7 e7 be d4 ee af 41 6c 92 84 6a 13 54 5a 66 63 00 7d 60 f7 fd 9f ee 99 a9 da dd a7 2f 39 7c f3 85 0c 46 16 89 91 1d 83 a1 90 09 17 be 2f b5 b4 b9 d7 a8 59 fd da c1 e2 54 5f c4 10 5b 9a 3b 4f d0 9b 48 f2 19 53 39 1f 2b 52 14 29 c8 e2 07 3a dd b2 a0 10 e8 5b 0d 27 38 db 02 f8 a7 62 6d cb 0d 3c 1f 0c 16 7b d2 42 b6 f2 db 4e 93 25 59 60 80 20 67 88 57 5c 9b 61 a0 06 69 04 80 ca dc 2d 0a 74 4d 6c 03 01 02 80 19 00 20 50 04 05 49 50 70 30 d9 66 7d d2 d0 18 b5 3b 7f fc 77 08 16 f2 34 58 95 ef 0e 92 8a d1 a1 74 05 c1 39 ac 0b e5 4e 08 bd ff 33 d5 2a ad 42 a3 86 00 Data Ascii: d^F'ks`,qP7Z3J5pm(bZL,AljTZfc}`/9\|F/YT_[;OHS9+R):['8bm<{BN%Y` gW\ai-tMl PIPp0f};w4Xt9N3*B
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: 0a b2 48 95 41 56 ad 15 c8 d6 b5 06 db a6 ae 20 bb d7 1d 6c 8f 46 80 1c dd 34 90 33 da 09 72 77 ef 83 dc d3 7e 90 07 fb 15 e4 f5 ae 83 bd f1 10 00 62 76 28 24 3b 00 27 4a 20 48 30 42 88 44 20 45 2a 42 9a 4c 20 e7 54 f0 56 16 7c 54 85 00 9d e1 a6 be 10 21 32 44 8b 09 71 e2 42 82 c4 90 2c 23 e4 ca 0d f9 f2 43 a1 c2 50 ac 34 94 a9 08 95 2a 13 55 aa 42 b5 8e d0 ad 3b dc 37 18 86 4d 84 29 53 61 c6 4c 98 33 17 16 2d 85 8f be 84 75 df c2 0f 3f 07 3b 2c 04 00 82 44 a1 00 04 83 62 06 10 16 94 60 40 85 0e 44 e1 02 09 84 40 0a 39 90 c5 0a 34 14 04 47 09 02 6d a2 80 4e 12 e8 51 04 86 94 19 23 aa c0 84 21 b0 60 09 6c 38 03 47 45 81 33 4f e0 aa 34 f0 d6 10 5c d1 16 84 ea 0c 6e e9 09 c2 45 05 31 92 82 74 99 41 b6 aa a0 46 4d d0 a0 3b 60 e8 0b 93 1c b1 cc 64 46 29 b3 b0 Data Ascii: HAV lF43rw~bv($;'J H0BD EBL TV\|T!2DqB,#CP4UB;7M)SaL3-u?;,Db`@D@94GmNQ#!`l8GE3O4\nE1tAFM;`dF)
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: c2 a7 48 1f 8d 0c 4e e3 91 65 01 6b a9 86 83 6c 34 ac b3 24 7c 55 d9 06 19 e2 9b 43 3e b6 ba e6 f3 df 1d f8 ed 17 81 e5 90 92 f0 ff 0f 81 78 e2 a1 f7 4d a1 3d 0b 0f 40 e8 11 95 0e 52 de 7c bb 06 e4 31 d9 e3 d1 7b bf fc 98 79 42 c9 8c 64 51 0b 5c 9f a8 2b 86 7f d9 a1 0c a7 cd d6 6c e2 59 3e db d4 44 b9 3d bc 9d 56 54 e4 2c 2a 38 54 75 bc 8e b1 b3 7c 96 ba c3 8c 06 9f 92 ae 2d 73 54 51 5f d1 c8 01 a4 a5 50 a1 86 28 31 df 00 1c c3 04 4b f4 a2 c7 fc 22 e5 6e c9 2f d4 35 0d 31 1a 52 f7 37 ad 63 ed bd ff af 63 e1 6b 09 65 1f 94 f9 99 e5 8a 08 78 76 14 75 64 9d 50 a5 fe 9e ea e9 78 7e 91 fb f4 05 9d 3c 8c cd ec 06 a8 9a a6 14 11 dc 2b 4c d0 6e b2 6d 77 8d 75 a0 0c 7e 02 fd e7 a0 c6 a4 f2 6b 06 1d 79 0c 42 c7 d8 80 ad b8 ec 8c d4 ee 25 43 74 d4 e7 5b c0 ec 9e 86 Data Ascii: HNekl4$\|UC>xM=@R\|1{yBdQ\+lY>D=VT,*8Tu\|-sTQ_P(1K"n/51R7cckexvudPx~<+Lnmwu~kyB%Ct[
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: c3 f7 46 e2 62 2c e8 b8 c5 f7 a0 ab 94 87 1f 98 a6 96 0b 7a dc 45 38 70 78 43 99 c8 68 53 3a 4b 62 8d 50 06 15 89 3d aa f5 6e 9d 6c 70 4e a2 4e ff 14 1c d9 5a 26 9a cb c8 53 61 4c 90 10 e2 d7 22 56 5d 42 70 3c ac c8 4b 39 ca e2 5c 52 4d 71 eb 8f 11 b3 f8 78 56 31 eb 0f ef 06 b2 e3 9e 84 fe f2 5e 2f bb 5c fb f8 f9 8f 93 b6 9d 3e 28 2c b8 4e 84 f1 cd 0f 47 f8 e3 75 18 97 b0 d0 a0 70 13 34 fe 6c 6a 42 84 a2 96 42 a4 0b 1b dc 15 31 32 43 2d 01 3f 8c fe 5d 64 1f 0f f0 76 e3 88 45 e6 67 e8 79 c1 7f fc 41 f5 c0 6a bb a1 6e e2 8e 07 f7 e5 97 da b2 73 f9 53 c9 c0 bb cb 56 15 28 bb 57 77 de 58 9c 0d a3 fd 0d 08 42 08 9e 88 17 38 85 90 57 c9 9e 87 89 0d 86 cf 01 72 58 19 57 c0 b7 93 96 4e bb 3b 29 3c b2 52 13 27 74 2a 00 f0 49 73 9b 0b 10 a3 d0 5b 27 5a aa e4 d3 a1 Data Ascii: Fb,zE8pxChS:KbP=nlpNNZ&SaL"V]Bp<K9\RMqxV1^/\>(,NGup4ljBB12C-?]dvEgyAjnsSV(WwXB8WrXWN;)<R't*Is['Z
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: 91 12 08 1a 39 3c 2c 5c af 26 f7 75 56 ad 69 b4 2a 20 3d ed 97 49 0d f2 9d 1a da 00 ba 84 82 a4 82 0b eb 8f 14 34 8c 75 a3 a9 fd 37 f4 91 8f 10 53 71 10 b6 a9 ac 00 2c 9c 49 6c 65 fa a2 64 6f b4 35 98 d7 12 18 9b a4 4f a8 52 69 86 fa 5c cd ce 2f 4d 51 d2 1e 47 9d f8 d8 ba 83 60 8e 6f f5 6e 31 21 ff 85 a9 2d ec 66 e4 f9 31 52 ff f0 3b bb 1d 24 2f fc cf 94 2e fa f6 94 cb 96 45 37 91 b9 cf 1c ad 19 12 7c 06 41 85 ce 96 59 04 7d f1 9f cb 5b 85 cf 98 24 0e cd e3 64 74 dc da 59 62 6e 77 92 50 5f 4a 4c 1b 8f 57 a9 a1 e1 b6 33 89 17 26 16 b9 20 d6 4f 03 f9 d2 8d 1d a8 99 9c cc 08 dc af e7 39 7b d7 ac 8f 28 95 16 e1 db ef fe 59 9b a7 55 53 11 7c 4d b6 f7 9f e8 52 65 3a 5b 10 db fb 64 c6 66 aa a7 e7 98 cc bf ea 96 92 d3 4d 50 48 81 ad a9 b2 16 8c 6d f7 2e c3 a1 0f Data Ascii: 9<,\&uVi* =I4u7Sq,Iledo5ORi\/MQG`on1!-f1R;$/.E7\|AY}[$dtYbnwP_JLW3& O9{(YUS\|MRe:[dfMPHm.
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: 00 c4 51 c8 cb 80 7f de f6 da 4a a2 c5 e7 a9 e0 0c ab 32 dd be 1c cb 9f 65 36 43 ec 39 bb 5e d1 46 b9 01 7d 4a 8d 7d 75 5e 71 ed c5 f7 82 ad 84 7e b6 4e d5 8f fb 0c 39 e5 1d 30 07 b4 6f ab 5f d1 78 08 c2 02 48 51 77 d8 66 7c a5 f4 7a 6a ea 9e dd 76 3f 27 02 97 c0 ba 58 67 86 a0 9a 41 d4 60 aa 7d d9 8c b5 ce 6b 7e 25 ca 52 e4 f2 69 97 da 69 3c ea 54 9e 7d bf 52 4a 0d 65 e9 63 81 a9 4d 12 b7 96 19 14 a8 e2 34 41 91 83 5d 45 1f 22 77 0a 19 e8 8b 31 f0 f3 64 80 75 48 69 60 0f e0 0c e4 87 bb 1f f8 34 9b fc b7 05 af ee 36 65 0d 8f 06 75 68 a5 80 c0 3c 10 05 d1 40 b6 2b 5a a1 7c 57 f4 48 f2 9b 9c 40 0d 4b d0 df 77 40 76 78 32 92 66 2b a2 fe f2 ba 88 e0 71 e6 c7 4b 50 c6 9b 24 37 a7 9c 68 1a 74 91 16 8f 87 16 62 d8 9e 59 c1 71 4e fe 99 00 b9 0a 72 94 1d da a4 ea Data Ascii: QJ2e6C9^F}J}u^q~N90o_xHQwf\|zjv?'XgA`}k~%Rii<T}RJecM4A]E"w1duHi`46euh<@+Z\|WH@Kw@vx2f+qKP$7htbYqNr
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: 98 d3 f9 7c 05 76 4d c9 94 7c 29 69 48 9b d2 cf 32 a2 2f ad 94 af 84 d1 a7 3e ea 94 13 f6 2c 7b 28 97 02 75 43 34 b1 95 a5 fd 89 5c 07 1d 9c 2d ac 4c 41 c0 ac 23 cf db 2e 37 e8 6c 5f 2b 45 3b 6e ee 8c 8a 7e 63 0b ea 94 c1 a9 57 e9 0c 6c 01 e3 8b fb 7e 8f 9e 21 39 b4 1c f0 ae f9 20 e8 a8 f4 37 58 73 02 93 22 bc c3 a9 93 cf 9b 91 33 e0 4c 2d 40 6b ff b3 f8 4d a1 07 5d 0b 1e 89 93 79 54 7b 1c b2 f3 e2 39 ee 7d cb 8e 6f 0f 7a a2 57 84 68 06 14 c1 76 5c 51 02 3e a1 f5 94 56 31 89 d5 bc 75 7b 9a 85 46 53 01 dc a8 85 92 f3 6f 29 44 bf fa ac 14 f8 a8 0d f5 c3 1c db 90 9d 5b 49 9a dc af 44 21 a1 2d 60 64 bb c5 19 9e f7 04 e6 f8 dc 57 ae a7 b3 f7 8d 3c f8 90 9a 0e 64 85 0d 68 47 e2 f7 ea 28 bc ee 2a c7 26 c1 3a 5d e1 12 da e4 e8 06 66 b2 66 5b ac 32 5a ea 05 f4 87 Data Ascii: \|vM\|)iH2/>,{(uC4\-LA#.7l_+E;n~cWl~!9 7Xs"3L-@kM]yT{9}ozWhv\Q>V1u{FSo)D[ID!-`dW<dhG(*&:]ff[2Z
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: 9d 72 07 d7 aa c7 0e f4 e7 3e 1c 4d 1f fc 6d 10 84 01 c8 f8 ee 72 d4 2a 89 d3 9e e5 55 25 8f 46 ac 4b 6a 48 76 b2 33 ce de e2 d7 7d 7c 42 29 25 6c c6 d1 cd 92 6a b5 01 65 82 f7 ff e5 04 8d a2 81 18 00 ee a5 8d 81 8e 28 69 8d 4a 8c a2 18 93 8c 46 3f cf 32 95 c7 99 a9 46 26 7a b4 06 55 aa 51 3b ab d5 ee f6 b4 b1 8c 8e b5 ad d3 9d ef 60 17 ba d0 27 7d 3b 04 fb 74 08 8f b4 81 43 64 8c b5 71 7d ac 4f c3 f1 62 1a cf fd 29 35 ff 6f 10 b2 73 de 43 a0 98 90 cb 70 a8 73 ef 7b 41 26 58 98 52 ee 9c 43 5a 84 39 ed be 64 0c 2f 65 8f 6f 68 47 26 3a 82 17 26 35 b2 0b 93 1d cd c2 14 c7 72 79 2a e3 b8 36 b5 f1 c4 ac eb 34 14 ce 0d 74 b2 79 85 a1 b2 b9 29 48 c7 7c 2f d4 d0 ec 88 15 37 07 12 25 03 e8 57 2a 04 3a 4f 1e 24 ba d4 1d 28 74 85 0a 18 74 95 bb 98 d0 43 c6 60 d1 cf Data Ascii: r>MmrU%FKjHv3}\|B)%lje(iJF?2F&zUQ;`'};tCdq}Ob)5osCps{A&XRCZ9d/eohG&:&5ry64ty)H\|/7%W*:O$(ttC`
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: c9 55 6a 3e 25 cd 43 a0 3f 21 94 9c 22 dc 52 2a d2 5a 85 68 e2 af b6 8a 18 43 23 8d 9a 2a d5 8c ba da 62 d5 8e 52 87 e4 86 d6 ba e5 7a 15 f5 69 6d e8 6a 37 c3 e2 a2 64 29 2d 4c 48 92 ae b5 2d ea da aa 91 6d a1 2f 54 5c 56 39 f1 fd ae ea d6 fd 39 75 a9 8e cc 50 3a ae b9 52 2d 48 ee 29 bd a4 80 a1 a0 4f 57 97 f4 be ac bf 2b 1a 1f d2 c8 b0 da ae ab f9 86 2a 5e d6 d0 13 15 bf aa e0 6b da 36 aa ce d7 b5 e1 99 46 c7 d5 fe 96 5a 6e a9 e2 6d 25 5e a8 38 56 fc 9f ab 5d 97 2d 27 36 08 68 45 72 25 36 98 1a e4 a9 11 5c bd 10 5b fd 75 cd 53 c8 ac 96 0c 56 16 b8 49 0e 78 84 e4 48 4a d6 c8 c8 95 8f ba 51 15 42 93 13 43 4e 4c d5 60 9d eb b9 36 1e 39 b9 0e b9 96 90 2b 42 92 6a 23 bd 49 72 4a aa d8 d4 92 99 46 65 b4 f1 a6 a3 2b 3d 2a 61 10 92 31 34 13 d3 7a 9d 2c a5 ac 23 Data Ascii: Uj>%C?!"RZhC#bRzimj7d)-LH-m/T\V99uP:R-H)OW+^k6FZnm%^8V]-'6hEr%6\[uSVIxHJQBCNL`69+Bj#IrJFe+=a14z,#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49747	151.101.3.10	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:18 UTC	660	OUT	GET /b94aa70a4593f812b35d5a8922257b6f80ccf6aa708f58b8266f4ba917eb0e0e/resources/fonts/roboto-bold.woff2 HTTP/1.1 Host: static-p46175-e229011.adobeaemcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://all.accor.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://all.accor.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 07:46:18 UTC	770	IN	HTTP/1.1 200 OK Connection: close Content-Length: 63920 x-frame-options: SAMEORIGIN cache-control: public,max-age=31536000,immutable content-type: font/woff2 content-md5: plUn/LWPZqfPvA5rFgU4tA== last-modified: Mon, 28 Oct 2024 09:01:46 GMT etag: "0x8DCF72F26FB6A16" x-ms-version-id: 2024-10-28T09:01:46.9302294Z x-ms-is-current-version: true content-disposition: inline access-control-allow-origin: * x-vhost: publish X-Content-Type-Options: nosniff Accept-Ranges: bytes Age: 105517 Date: Wed, 30 Oct 2024 07:46:18 GMT Strict-Transport-Security: max-age=31557600 set-cookie: affinity="53be6374a7606384"; Path=/; HttpOnly; secure X-Served-By: cache-dfw-ktki8620041-DFW X-Cache: HIT X-Timer: S1730274379.779007,VS0,VS0,VE2 Vary: Accept-Encoding
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 f9 b0 00 12 00 00 00 02 91 b4 00 00 f9 48 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 84 62 1b 81 ca 2e 1c ab 10 06 60 00 8d 02 08 48 09 83 3c 11 0c 0a 87 c5 1c 86 e0 45 0b 94 1e 00 12 8a 18 01 36 02 24 03 a8 38 04 20 05 85 1c 07 20 0c 82 29 5b 05 54 92 0d e9 64 94 cb 2a b5 0e 98 5a 10 fc 07 55 0f 93 e4 06 eb 3a 75 fc 92 4f 88 3a d6 ed 88 01 d5 63 78 0c 3c f5 7a 85 94 8c 9d c6 6e 07 e8 22 ff 7e fb ec ff ff ff ff ff ff ff 17 26 8b 58 d3 d9 3d 9c bd 07 ee 00 21 8a a0 41 ad a5 26 69 93 7e a0 62 34 fa 40 0b 08 88 01 96 6a 43 dd 58 a6 ac 4b 1b 82 6c 6a 14 df 11 ad e8 fa 7d 48 88 35 4d 0e 63 63 78 39 c4 54 13 1d 86 54 19 a9 92 ee c7 9c 91 44 2d 27 8a 93 37 50 1e 4c 29 18 4c b4 14 29 9a 32 83 cb 59 7a Data Ascii: wOF2Hb.`H<E6$8 )[Td*ZU:uO:cx<zn"~&X=!A&i~b4@jCXKlj}H5Mccx9TTD-'7PL)L)2Yz
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: 36 18 06 eb fe ee 9b 5a 7d 77 29 74 50 ab dd 96 ca 25 59 72 d6 78 42 aa 0b 21 c1 e3 77 04 1f c1 7b 00 cd 00 b6 73 81 85 3f 03 d8 d6 e3 46 ec 43 a1 a7 15 0f 9a cf 69 47 0f 32 59 d6 54 44 06 c3 52 0e 5c 06 a2 97 97 61 fd 31 95 6f c8 4b 04 04 34 a6 9a fa 5b 1f 6f 99 ce aa e5 3a 84 43 52 35 84 d9 42 6f e1 d1 bb 47 4c 33 c4 a4 10 06 99 7e 9d ea 73 f7 d2 bd 31 1f ee 50 8c c9 aa 2d 2e c4 0f 39 2e 24 e9 63 7c d4 e3 4f 98 41 e0 87 73 5f 13 2a 60 3e 20 d8 55 8d 5d ac 50 cf 88 29 58 7f 5e 1c bc d9 02 f6 bd ce 6b f7 48 d0 1e 4b 82 f4 18 89 52 3f f9 56 dd 2c f1 df df ff 93 fd ee fe 0d e1 80 63 2c e0 41 4e 9d 85 96 6c 19 d7 c7 78 83 14 58 75 e5 4e e7 b5 00 85 62 cf 07 14 d0 06 9b 05 eb 2b df aa 5e a0 4c 48 63 16 28 6a aa d6 ab be 2a 36 61 46 4e 41 46 a9 28 80 05 01 53 Data Ascii: 6Z}w)tP%YrxB!w{s?FCiG2YTDR\a1oK4[o:CR5BoGL3~s1P-.9.$c\|OAs_`> U]P)X^kHKR?V,c,ANlxXuNb+^LHc(j6aFNAF(S
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: 56 c2 0b e2 02 f1 01 04 4b 7a e4 87 04 3a 84 37 58 e2 2a 33 bf cd 78 08 81 19 31 3b f0 87 04 f8 06 42 02 bf cf d1 ba 16 5a 5e 5a d8 ea f8 e0 c0 90 ad 21 6d 21 3d 21 43 6b 7b d6 1a ff fe ee 89 ae 3b 16 ae b6 de 39 f2 05 b1 3c 3a 36 e6 01 10 1b 9f d1 3a 12 e8 63 22 96 27 78 26 2e 2c bc fd 78 a9 87 7b 26 2f 49 b6 4d 21 03 2f 53 76 81 8e d4 b6 d4 dd f4 2e b0 43 a2 90 b5 a8 79 4c c7 64 87 c6 a3 6f 61 ac 30 dc d6 8c c0 24 bc 20 9d 36 e9 c0 c2 ec af e1 21 a5 16 10 1b 10 3d 0f a6 dc 31 69 3c 75 02 80 60 1e 30 fa cf 41 ce c3 a9 71 07 c9 6a c0 95 4c 25 b3 a3 6d 5c 2a d6 00 9b 84 fa 70 fc 3d c4 f7 d7 3a aa 36 08 b7 80 b3 e5 c4 65 fc 3d f8 07 84 83 33 c0 03 d4 ad 0c 16 e9 51 9d c0 cc 88 a9 01 c0 10 0d a1 45 03 5d 8d 58 5e 27 5a 08 ab f8 01 53 72 52 5b eb 2a 2f 20 20 Data Ascii: VKz:7X3x1;BZ^Z!m!=!Ck{;9<:6:c"'x&.,x{&/IM!/Sv.CyLdoa0$ 6!=1i<u`0AqjL%m\p=:6e=3QE]X^'ZSrR[*/
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: 90 c2 14 c5 2c e7 1b 55 ac e0 37 09 56 f3 4f a0 07 b4 06 22 5a ae 1d 90 d0 2a 1d 41 0b ad d6 5b 26 38 c2 84 b3 ce 08 85 59 5f 4b 1b 1b 5f 29 6c 31 09 5b 4d be 61 9b 48 51 6c 97 f9 60 a7 6c ec d2 e8 a1 ec f6 8d 62 f6 18 6e 04 fb 8d 32 86 83 ae db c1 11 37 ed e6 a8 db f6 92 e7 ae 83 1c f3 dc 31 4e 78 af 1c 4e 27 24 72 30 a5 23 bc e9 1e b1 09 7d aa d0 65 53 87 2b a7 5a ab bc d7 2f aa 2a 10 a4 af db 65 43 f7 ac 62 65 bd aa 5a 43 6f fa 5f 4f ef 1b 49 5f 98 e8 4b 33 7d c5 b9 f4 b5 25 af 6f ea 72 f6 35 2f 52 ae 9b f2 50 e5 e3 2a 50 a8 50 a5 22 8d fe 20 f4 a7 6e d6 1c 7b dd 6f dd c3 47 05 67 a8 e2 0a d5 68 88 63 f9 1f de fc af c8 1b ff 27 3a 4e ff 2f e1 71 60 ea f8 b8 83 50 b7 bc 2a 52 42 f1 f0 c6 ea 84 c7 37 45 b7 36 68 a6 9e 6d d5 1a bd da a9 f3 85 b4 6f 97 1a Data Ascii: ,U7VO"ZA[&8Y_K_)l1[MaHQl`lbn271NxN'$r0#}eS+Z/eCbeZCo_OI_K3}%or5/RPPP" n{oGghc':N/q`PRB7E6hmo
2024-10-30 07:46:18 UTC	1097	IN	Data Raw: bb 57 13 7d 61 88 06 da f4 3c 91 d5 24 5f dc 47 bb 1f 07 1d ca e1 83 dd 31 ec 6e b3 75 55 bd 36 5d a3 5b d7 a3 7f 19 ad b7 cf f4 86 8c 91 ad b1 0e 97 24 35 0f 22 92 3c c7 d7 c2 0f 31 e2 c2 a4 ca d2 3c 8f 20 03 85 63 97 f1 b2 92 9f 00 50 88 68 3b 34 0c 1c 80 45 97 6e 3d 7a f5 39 e6 84 79 a7 fd ea 8a 6b 6e f8 d7 e7 7c 6d e1 5a 6c 70 dc bc 37 79 df db 73 b4 02 1e 11 19 15 1d 13 1b 17 9f 90 98 d4 8e 1c 9e 50 38 2c f0 13 23 2e 4c aa 2c cd ef 1d 5c 8c a0 d4 ee d5 65 f0 b2 92 9f 00 50 88 68 3b 34 0c 1c 80 45 97 6e 3d 7a f5 39 e6 84 79 a7 fd ea 8a 6b 6e f8 d7 e7 7c 6d e1 5a 6c 70 dc bc 37 79 df db 73 b4 02 1e 11 19 15 1d 13 1b 17 9f 90 98 d4 8e 1c de ac c4 c0 e2 a4 e8 04 f0 42 a4 95 a8 e8 f9 d2 61 9c 15 81 b9 ac 0a 33 52 66 39 37 db 52 d7 6d 0d db 6c b7 83 81 b1 Data Ascii: W}a<$_G1nuU6][$5"<1< cPh;4En=z9ykn\|mZlp7ysP8,#.L,\ePh;4En=z9ykn\|mZlp7ysBa3Rf97Rml
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: 27 f1 e8 03 77 f7 fa de a0 a8 63 e2 9f 66 90 13 4e 5e cc 65 b5 5f bd 03 e1 a0 43 0e f7 13 81 b3 7e e7 99 ed 92 fe 4c bd 17 cf 5e f5 79 86 80 b1 b1 f1 88 d9 e6 98 db c5 44 52 79 50 f9 0a aa 34 ca b2 53 ca 51 91 4a 54 a9 56 93 66 b4 90 91 53 50 52 75 1d 1b 46 6f cd e1 da 68 b7 45 b9 7d e2 c9 f3 ef d5 fd 18 70 5f 4e 6c 99 f3 b8 d8 2f 05 bc e2 76 fa a2 f7 47 3a e0 c9 c4 9a 1f 0c 06 78 33 a1 75 87 39 7b 0e 5d 1f 08 98 c5 0c c4 0e dc 6f 9b 43 53 32 4f 99 54 a8 52 a3 4e c3 1d 46 cd bc 6a 41 69 02 e9 44 9f 2f c8 d7 dd 53 6e 5d ef 86 77 fb 8a f1 6f 10 bf 19 d5 ed d5 1f 47 e5 17 c8 7f 24 1c 15 89 ee 99 de fb 3c ca 00 33 af 3b 5a 57 da ed e2 10 99 28 22 cc 6b ad 43 63 8d 37 d1 e5 16 1d 9e d2 2e ad 50 57 34 1d 7d 41 d3 34 4d d3 34 4d 7f b6 26 3a 91 b9 4c 5b 2e ed 4c Data Ascii: 'wcfN^e_C~L^yDRyP4SQJTVfSPRuFohE}p_Nl/vG:x3u9{]oCS2OTRNFjAiD/Sn]woG$<3;ZW("kCc7.PW4}A4M4M&:L[.L
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: 22 63 ef 2b eb 1d 85 a2 7f 8d 92 57 08 0d d4 c3 31 de f3 56 21 fb e8 70 f4 0f cd bb 07 0e d8 c9 bb f2 95 11 2f d2 a0 39 39 91 c8 55 0b 69 17 c7 d1 79 3c d3 ae 63 63 24 15 40 f7 81 02 05 ae 41 60 62 3e 7a c4 51 93 f4 88 f3 34 f9 c3 f8 48 20 51 2d 72 e5 fb 66 86 d6 b3 02 a7 ab a9 6b 61 85 eb 4f 98 fd f2 ee e6 1e 7d 1e 8f 8a 8b 01 5c cb 87 e8 d1 91 f6 ae c7 20 33 50 6a 39 9f 56 d6 bb d7 a3 3d 04 ee 67 ff ad 43 86 f3 bc fb 17 03 52 60 51 82 15 a6 24 30 cb 4d 60 c6 93 2b 8c 86 d7 65 17 a9 8f c0 ba c8 2c 9c 3c 5a 8a b3 4a a5 56 f6 9f 5e 15 33 79 b4 e5 63 bc 7f 69 34 b4 c6 3b aa 52 c7 dc 16 d9 6a 9b ed 76 30 30 16 29 9f 2d d3 4b 3b f5 3c a0 c9 47 42 74 4c d9 9d cc bd 3b 5a 4b 59 03 da 76 4e 2e be 0c 56 81 50 88 24 ce f6 f3 98 92 13 e8 18 81 58 81 33 f9 b0 e2 2b Data Ascii: "c+W1V!p/99Uiy<cc$@A`b>zQ4H Q-rfkaO}\ 3Pj9V=gCR`Q$0M`+e,<ZJV^3yci4;Rjv00)-K;<GBtL;ZKYvN.VP$X3+
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: 09 b6 d0 70 26 36 6e f1 c9 6b 32 3a e8 b3 be 72 37 ef 3b 88 51 42 f7 55 7a 34 c5 fb 27 57 f7 de 7f 06 f7 30 a7 e4 53 3d 44 8d 91 aa fa ac b5 12 c6 bc a3 89 be 59 0d bd 36 45 bd 5e ea ca 1d 40 10 04 41 10 04 41 e7 08 bf 5a 51 2e e2 3f 43 be cf 62 06 16 9a 49 1f 15 38 2b 42 95 78 90 97 2f 17 9a 59 ac d4 b6 a9 8b 28 97 d0 2a 3c 79 50 74 d4 13 be d9 d7 7f 05 14 c8 d3 2c 92 e2 2d c7 03 4d 07 49 a1 2e ff c0 9d e4 cb 0b c1 45 80 67 9e 8d 5f 6d a5 5a 3e f7 8f 57 d3 82 61 18 86 61 18 6e 78 8c 03 b2 12 bc 04 07 40 28 86 2f a9 cf 97 39 ee b4 b4 43 2f bd 1c 71 c1 c5 f6 cf 4e c8 9e 8c be d4 3f 70 53 62 ca 8c c3 e1 e0 dd f8 5e ae 58 89 52 65 bd c6 97 9b b5 d3 2e bb 73 bc 4b 3f 06 0d 1b 35 6e d2 b4 59 f3 16 2d 5b b1 d6 7f 7d b9 2f ed db 5e b6 f4 5d aa d4 69 d0 2a 9e 97 Data Ascii: p&6nk2:r7;QBUz4'W0S=DY6E^@AAZQ.?CbI8+Bx/Y(<yPt,-MI.Eg_mZ>Waanx@(/9C/qN?pSb^XRe.sK?5nY-[}/^]i
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: ce e2 da 9d f2 04 a8 89 96 f7 6e 30 20 3a 2d 4c 04 86 59 62 24 55 f2 ae 71 46 68 da 12 39 16 b1 61 2b df 46 9b 1e 13 31 7f bf 39 19 cb 71 ea da b4 39 7b ec d3 a2 4d bb 0e bd fa 0c 18 34 62 d4 84 49 53 16 cf a5 3c af f6 ab 75 ea d5 a7 df 80 41 43 f2 9f 05 60 ae b7 a6 e9 a6 b3 2e eb d8 ae 61 38 30 c3 91 01 4e 00 67 44 28 48 b8 d1 c0 1d 19 2a c0 8b 31 7e b4 a1 21 e1 cf 9c 00 a6 04 d2 87 4e 93 20 7a 30 a8 30 8b 2a 91 df b4 7f fd 13 8d da 86 f0 a7 40 60 86 62 20 c3 64 b0 2d 12 39 42 58 1b 47 2c f5 8a 30 00 d9 63 9d 04 db 07 d9 0f ba 63 48 ac 14 37 1e 89 c4 c3 e9 dd c6 57 5c 7b 3a 23 3b 48 e4 95 60 be 96 56 c0 95 33 a0 ff 09 a8 10 20 e0 62 55 35 86 cd b5 e9 6c 61 7c d9 3c a3 b0 79 e4 c6 16 2d 92 2d 58 0c 9b b7 58 36 5f 71 91 01 9c 48 80 3c 28 3c a9 06 4a 40 84 Data Ascii: n0 :-LYb$UqFh9a+F19q9{M4bIS<uAC`.a80NgD(H1~!N z00@`b d-9BXG,0ccH7W\{:#;H`V3 bU5la\|<y--XX6_qH<(<J@
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: 69 a0 cf fb 04 d5 38 39 fa 16 03 20 66 30 b3 e2 22 ca 39 c9 30 04 74 d5 aa 79 b0 97 88 78 a0 5a 85 90 30 4f ba 98 87 05 8a 98 02 77 69 01 69 21 68 b9 9c 9e 55 39 4d d8 2e 0e 69 a5 d5 5d 62 b2 21 d8 29 70 ae b2 9f 6c 29 e1 e9 76 a4 a3 23 a5 54 53 52 71 ee 49 86 24 43 92 a1 05 97 43 be 3b da 43 0e bf ee be 5b 8c 21 d0 c2 47 36 d7 d1 b2 85 8f 49 22 72 5a fc d4 aa 80 dc 57 a6 55 e4 ef 24 ab 63 23 1f c9 4b 65 6c 13 1f c9 17 22 28 0d 24 28 8a df 8b 4f 20 ea e3 a8 67 3f 81 ce 85 4f 8b 42 0c 65 3d 9d ec 10 21 5b 61 44 c9 99 11 23 4f e6 31 f9 33 e2 14 cc 48 50 64 bc 24 c5 3f 53 71 b6 e9 c1 44 7c d0 06 63 79 14 56 4a 05 71 52 e5 2a 55 ad de 52 cd 46 9b 64 96 68 2b c5 d8 e1 80 75 b6 d8 61 09 c8 b0 fc 4a 80 e0 a3 03 ad 2c 48 3a 13 ec 31 74 44 20 f8 2b a9 92 98 62 b9 Data Ascii: i89 f0"90tyxZ0Owii!hU9M.i]b!)pl)v#TSRqI$CC;C[!G6I"rZWU$c#Kel"($(O g?OBe=![aD#O13HPd$?SqD\|cyVJqR*URFdh+uaJ,H:1tD +b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49753	151.101.3.10	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:18 UTC	624	OUT	GET /b94aa70a4593f812b35d5a8922257b6f80ccf6aa708f58b8266f4ba917eb0e0e/theme.css HTTP/1.1 Host: static-p46175-e229011.adobeaemcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://all.accor.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 07:46:18 UTC	784	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1117836 x-frame-options: SAMEORIGIN cache-control: public,max-age=31536000,immutable content-type: text/css; charset=utf-8 content-md5: TVcjWreTGg+zvUQPORIPRg== last-modified: Mon, 28 Oct 2024 09:01:47 GMT etag: "0x8DCF72F2708877B" x-ms-version-id: 2024-10-28T09:01:47.0161787Z x-ms-is-current-version: true content-disposition: inline access-control-allow-origin: * x-vhost: publish X-Content-Type-Options: nosniff Accept-Ranges: bytes Age: 90677 Date: Wed, 30 Oct 2024 07:46:18 GMT Strict-Transport-Security: max-age=31557600 set-cookie: affinity="c1d445a7e77155f4"; Path=/; HttpOnly; secure X-Served-By: cache-dfw-kdal2120075-DFW X-Cache: HIT X-Timer: S1730274379.779250,VS0,VS0,VE2 Vary: Accept-Encoding
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 38 2e 30 2e 31 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 6e 65 63 6f 6c 61 73 2f 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 2a 2f 0a 68 74 6d 6c 7b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 31 35 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 7d 6d 61 69 6e 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 68 31 7b 6d 61 72 67 69 6e 3a 2e 36 37 65 6d 20 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 7d 68 72 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 68 65 69 67 68 74 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 7d 70 72 65 7b 66 6f 6e 74 2d Data Ascii: /! normalize.css v8.0.1 \| MIT License \| github.com/necolas/normalize.css /html{-webkit-text-size-adjust:100%;line-height:1.15}body{margin:0}main{display:block}h1{margin:.67em 0;font-size:2em}hr{box-sizing:content-box;height:0;overflow:visible}pre{font-
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: 7d 6c 65 67 65 6e 64 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 72 6d 61 6c 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 30 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 7d 70 72 6f 67 72 65 73 73 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 7d 74 65 78 74 61 72 65 61 7b 6f 76 65 72 66 6c 6f 77 3a 61 75 74 6f 7d 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 2c 5b 74 79 70 65 3d 72 61 64 69 6f 5d 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 70 61 64 64 69 6e 67 3a 30 7d 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 3a 3a 2d 77 65 62 6b 69 74 2d 69 6e 6e 65 72 2d 73 70 69 6e 2d 62 75 Data Ascii: }legend{box-sizing:border-box;color:inherit;white-space:normal;max-width:100%;padding:0;display:table}progress{vertical-align:baseline}textarea{overflow:auto}[type=checkbox],[type=radio]{box-sizing:border-box;padding:0}[type=number]::-webkit-inner-spin-bu
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 32 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 64 65 66 61 75 6c 74 2d 2d 32 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 63 6c 65 61 72 3a 6e 6f 6e 65 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 32 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6f 66 66 73 65 74 2d 2d 64 65 66 61 75 6c 74 2d 2d 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 25 7d 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 32 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6f 66 66 73 65 74 2d 2d 64 65 66 61 75 6c 74 Data Ascii: .aem-Grid.aem-Grid--2>.aem-GridColumn.aem-GridColumn--default--2{float:left;clear:none;width:100%}.aem-Grid.aem-Grid--2>.aem-GridColumn.aem-GridColumn--offset--default--0{margin-left:0%}.aem-Grid.aem-Grid--2>.aem-GridColumn.aem-GridColumn--offset--default
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6f 66 66 73 65 74 2d 2d 64 65 66 61 75 6c 74 2d 2d 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 36 2e 36 36 36 37 25 7d 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 33 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6f 66 66 73 65 74 2d 2d 64 65 66 61 75 6c 74 2d 2d 33 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 30 25 7d 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 64 65 66 61 75 6c 74 2d 2d 33 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 64 65 66 61 75 6c 74 2d 2d 31 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 63 6c 65 61 72 3a 6e 6f Data Ascii: .aem-GridColumn.aem-GridColumn--offset--default--2{margin-left:66.6667%}.aem-Grid.aem-Grid--3>.aem-GridColumn.aem-GridColumn--offset--default--3{margin-left:100%}.aem-Grid.aem-Grid--default--3>.aem-GridColumn.aem-GridColumn--default--1{float:left;clear:no
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 34 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6f 66 66 73 65 74 2d 2d 64 65 66 61 75 6c 74 2d 2d 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 35 25 7d 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 34 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6f 66 66 73 65 74 2d 2d 64 65 66 61 75 6c 74 2d 2d 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 30 25 7d 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 34 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6f 66 66 73 65 74 2d 2d 64 65 66 61 75 6c 74 2d 2d 33 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a Data Ascii: d.aem-Grid--4>.aem-GridColumn.aem-GridColumn--offset--default--1{margin-left:25%}.aem-Grid.aem-Grid--4>.aem-GridColumn.aem-GridColumn--offset--default--2{margin-left:50%}.aem-Grid.aem-Grid--4>.aem-GridColumn.aem-GridColumn--offset--default--3{margin-left:
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: 64 2d 2d 35 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 64 65 66 61 75 6c 74 2d 2d 32 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 63 6c 65 61 72 3a 6e 6f 6e 65 3b 77 69 64 74 68 3a 34 30 25 7d 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 35 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 64 65 66 61 75 6c 74 2d 2d 33 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 63 6c 65 61 72 3a 6e 6f 6e 65 3b 77 69 64 74 68 3a 36 30 25 7d 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 35 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 64 65 66 61 75 6c 74 2d 2d 34 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 63 6c Data Ascii: d--5>.aem-GridColumn.aem-GridColumn--default--2{float:left;clear:none;width:40%}.aem-Grid.aem-Grid--5>.aem-GridColumn.aem-GridColumn--default--3{float:left;clear:none;width:60%}.aem-Grid.aem-Grid--5>.aem-GridColumn.aem-GridColumn--default--4{float:left;cl
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 64 65 66 61 75 6c 74 2d 2d 35 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 63 6c 65 61 72 3a 6e 6f 6e 65 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 64 65 66 61 75 6c 74 2d 2d 35 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6f 66 66 73 65 74 2d 2d 64 65 66 61 75 6c 74 2d 2d 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 25 7d 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 64 65 66 61 75 6c 74 2d 2d 35 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6f 66 66 73 65 74 2d 2d 64 65 66 61 75 6c 74 2d 2d 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 30 25 7d 2e Data Ascii: em-GridColumn--default--5{float:left;clear:none;width:100%}.aem-Grid.aem-Grid--default--5>.aem-GridColumn.aem-GridColumn--offset--default--0{margin-left:0%}.aem-Grid.aem-Grid--default--5>.aem-GridColumn.aem-GridColumn--offset--default--1{margin-left:20%}.
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6f 66 66 73 65 74 2d 2d 64 65 66 61 75 6c 74 2d 2d 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 36 2e 36 36 36 37 25 7d 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 36 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6f 66 66 73 65 74 2d 2d 64 65 66 61 75 6c 74 2d 2d 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 33 2e 33 33 33 33 25 7d 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 36 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6f 66 66 73 65 74 2d 2d 64 65 66 61 75 6c 74 2d 2d 33 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 30 25 7d 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 Data Ascii: m-GridColumn--offset--default--1{margin-left:16.6667%}.aem-Grid.aem-Grid--6>.aem-GridColumn.aem-GridColumn--offset--default--2{margin-left:33.3333%}.aem-Grid.aem-Grid--6>.aem-GridColumn.aem-GridColumn--offset--default--3{margin-left:50%}.aem-Grid.aem-Grid
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 64 65 66 61 75 6c 74 2d 2d 36 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6f 66 66 73 65 74 2d 2d 64 65 66 61 75 6c 74 2d 2d 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 33 2e 33 33 33 33 25 7d 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 64 65 66 61 75 6c 74 2d 2d 36 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6f 66 66 73 65 74 2d 2d 64 65 66 61 75 6c 74 2d 2d 33 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 30 25 7d 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 64 65 66 61 75 6c 74 2d 2d 36 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d Data Ascii: rid.aem-Grid--default--6>.aem-GridColumn.aem-GridColumn--offset--default--2{margin-left:33.3333%}.aem-Grid.aem-Grid--default--6>.aem-GridColumn.aem-GridColumn--offset--default--3{margin-left:50%}.aem-Grid.aem-Grid--default--6>.aem-GridColumn.aem-GridColum
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: 6c 65 66 74 3a 31 34 2e 32 38 35 37 25 7d 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 37 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6f 66 66 73 65 74 2d 2d 64 65 66 61 75 6c 74 2d 2d 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 38 2e 35 37 31 34 25 7d 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 37 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6f 66 66 73 65 74 2d 2d 64 65 66 61 75 6c 74 2d 2d 33 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 32 2e 38 35 37 31 25 7d 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 37 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d Data Ascii: left:14.2857%}.aem-Grid.aem-Grid--7>.aem-GridColumn.aem-GridColumn--offset--default--2{margin-left:28.5714%}.aem-Grid.aem-Grid--7>.aem-GridColumn.aem-GridColumn--offset--default--3{margin-left:42.8571%}.aem-Grid.aem-Grid--7>.aem-GridColumn.aem-GridColumn-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49751	151.101.3.10	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:18 UTC	662	OUT	GET /b94aa70a4593f812b35d5a8922257b6f80ccf6aa708f58b8266f4ba917eb0e0e/resources/fonts/roboto-medium.woff2 HTTP/1.1 Host: static-p46175-e229011.adobeaemcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://all.accor.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://all.accor.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 07:46:18 UTC	770	IN	HTTP/1.1 200 OK Connection: close Content-Length: 64732 x-frame-options: SAMEORIGIN cache-control: public,max-age=31536000,immutable content-type: font/woff2 content-md5: OsXUDRs5ZvxesJ7Mp02cvw== last-modified: Mon, 28 Oct 2024 09:01:46 GMT etag: "0x8DCF72F26FD659A" x-ms-version-id: 2024-10-28T09:01:46.9432218Z x-ms-is-current-version: true content-disposition: inline access-control-allow-origin: * x-vhost: publish X-Content-Type-Options: nosniff Accept-Ranges: bytes Age: 105519 Date: Wed, 30 Oct 2024 07:46:18 GMT Strict-Transport-Security: max-age=31557600 set-cookie: affinity="dc729b808d7cc703"; Path=/; HttpOnly; secure X-Served-By: cache-dfw-kdfw8210047-DFW X-Cache: HIT X-Timer: S1730274379.779902,VS0,VS0,VE2 Vary: Accept-Encoding
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 fc dc 00 12 00 00 00 02 96 f8 00 00 fc 74 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 84 62 1b 81 ca 2e 1c ab 10 06 60 00 8d 02 08 5c 09 83 3c 11 0c 0a 87 ce 70 86 ee 40 0b 94 1e 00 12 8a 18 01 36 02 24 03 a8 38 04 20 05 85 4e 07 20 0c 82 53 5b 70 5b 92 0b e5 c6 fe f6 c4 30 a5 82 66 94 d9 19 db b6 5e f4 07 f2 54 b9 94 88 c7 76 44 76 0d af 1e 54 d8 da 08 5d 31 8e 39 85 c7 41 c0 d2 a7 50 f6 ff ff ff ff ff ff bf 32 99 88 ce 4e 72 38 49 76 88 21 8c 30 76 9f d2 fd 5d fc 83 9a 79 20 97 76 5c 0a ba 2c 02 75 12 1a 41 8d 98 8a 3e e7 59 2e 22 63 be 28 72 69 c3 30 ac c4 20 0c 26 fb c0 3a 36 b1 cd 3b 96 55 8b 6d 88 d8 8e c7 65 8a 8c 7d 3e e4 0c e6 9a 89 2e 67 38 82 62 e8 d5 a3 4e 7d c2 c6 8b 5e c5 14 27 9c Data Ascii: wOF2tb.`\<p@6$8 N S[p[0f^TvDvT]19AP2Nr8Iv!0v]y v\,uA>Y."c(ri0 &:6;Ume}>.g8bN}^'
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: c6 9f 9f 3d f9 ae a5 3c 85 01 43 c7 3f c5 c5 fe dc 9e 70 98 78 2e 41 50 c0 99 27 49 1c d1 3e 28 d7 c0 8c d6 11 a6 72 c5 31 11 51 85 e7 61 47 b8 1e d9 45 75 cd 64 3d bb d9 bd 1c 0a 2c 2c 0e 72 3f 4f c8 a2 47 74 50 04 37 06 09 04 9f 76 0f e5 ec 0c 3f e0 00 63 a1 a2 9d 95 cd a5 99 b7 e0 c7 f3 d5 c6 3e ef 76 01 94 d1 d3 b1 35 4b 33 d4 6a 0c 36 ef cb 69 7d b5 c8 56 55 b7 da 1a 7f 02 78 77 42 81 6d 65 e2 a0 ed d8 c3 c9 8e 25 d5 45 4a 6e 56 72 fc 48 57 84 db 22 09 16 f8 bb 21 d3 71 b5 7a 80 a0 c0 2e 82 6c 2c 0c f1 43 c8 14 80 40 03 8b 3f c0 87 bb e1 8b d3 5e 59 72 b6 d7 8d b9 3e 2a cb 01 76 00 3d 02 1c 8c da 8d 49 c1 b0 45 13 de ac 11 af 0d c4 8f 69 43 0a 62 2f e8 2b 81 81 20 48 59 58 18 f8 da 16 7f 7b 0b 8a 82 c6 72 c5 f2 e1 87 16 77 1e 83 3e 9f a9 56 69 15 80 Data Ascii: =<C?px.AP'I>(r1QaGEud=,,r?OGtP7v?c>v5K3j6i}VUxwBme%EJnVrHW"!qz.l,C@?^Yr>*v=IEiCb/+ HYX{rw>Vi
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: f9 be 29 77 35 bf 8d 7b cd 7a 50 e3 db eb 2d f9 7d af d5 04 fe 70 03 7f 1c db 69 93 27 d8 9f 5f 86 dc ad 21 be 64 77 dd 53 35 9d 4a 7e d9 48 cd 73 13 b6 b9 91 2c 62 39 30 3c 0b c1 17 25 41 cd cf 3d d1 ce 04 0b 02 2d 3d 85 24 15 a3 6d 3a ca 23 d4 bb e0 76 27 c3 59 d9 c2 ce 81 48 56 44 f6 d5 bb 60 96 ef a6 f1 d1 32 ca e6 83 fb ae 36 ef 27 0b f9 6c 8d 14 14 10 61 5b 85 3a 7e 22 cf d4 2a 1c 2b f1 05 9b 7a 6a f2 59 7d 0b d2 67 79 28 ed ae 9a fd 33 6e 7d 57 91 e4 40 3d df b1 9c 40 db 23 51 f3 63 24 b4 33 48 db b1 72 2c 35 53 e4 06 f2 b0 a1 fd 49 27 22 69 13 4f 77 cb f8 54 b5 c5 64 e9 be ab 6c 3d 71 c9 66 92 68 52 00 1b d9 67 df 77 7a a4 80 db 45 69 40 27 a6 f8 4c 7e c7 e7 c7 4c de bf 5f 48 57 20 84 cc 50 1e 14 01 f8 b2 13 d8 7d 4c f9 43 3a f0 05 0b b2 47 bc e6 Data Ascii: )w5{zP-}pi'_!dwS5J~Hs,b90<%A=-=$m:#v'YHVD`26'la[:~"*+zjY}gy(3n}W@=@#Qc$3Hr,5SI'"iOwTdl=qfhRgwzEi@'L~L_HW P}LC:G
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: dd d8 ed 2f 60 5c d1 49 f2 65 2d d0 a8 68 a9 4e d4 b5 7a 8e ef d0 77 51 8c b3 54 63 f0 89 03 b5 d4 b2 3a 2d bb bb 8b 42 e9 47 95 d1 54 74 0c 34 41 36 d8 c5 f0 bb 62 9f de f1 f9 7f f8 05 25 6b b2 18 06 f0 77 fc 80 7f 22 e1 df 84 f0 5f b2 1f f0 7f f2 ee a3 ad fd 97 e9 40 6d 8e 6e 50 a8 93 de 83 41 a9 21 b7 15 1a 1d 71 2e c6 47 9d bb f9 49 e7 21 b3 8a f9 7a a4 9a 05 c8 2e 69 f2 5e 2a 77 e7 6d ae 60 b7 6c ad 64 6a b6 55 b6 db b6 47 9d 3a b9 cb 34 2e a7 f5 fb d6 dd f1 49 9d d3 ef 72 ac bd df b5 d2 fb b4 95 0a fb bc db d5 f6 75 ab b2 6f 7b f0 6f bc f7 5d 8f 12 f7 7d df a7 ef e7 7e 0e ed cf 7e cf de 5f fd db ea 7c 5a 6b 7b be 7d 6a 04 89 3f 12 50 29 2e 6e 93 f2 71 59 8e 09 2f 3c e7 a4 17 91 7f 06 33 64 14 6a 63 99 54 bc f1 1c e2 ec 4c fe 69 76 b6 b0 74 bb 5c 54 Data Ascii: /`\Ie-hNzwQTc:-BGTt4A6b%kw"_@mnPA!q.GI!z.i^*wm`ldjUG:4.Iruo{o]}~~_\|Zk{}j?P).nqY/<3djcTLivt\T
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: 5d 84 bb 9c 3d 5c 3d aa 1f ac ff 64 9e 10 6e 48 37 b4 5b 82 5b a2 fb 1a e8 80 93 32 55 d0 b7 da a6 7d 3a ac 23 9f bf 3e 7f 7f 2e 28 62 c2 46 35 51 0b b5 70 8b b4 46 6b 72 3a 45 70 97 38 15 ee 26 17 ef 88 2e d3 d5 3b 56 82 be cf f3 78 11 2f e1 a5 bc 8c 97 f3 fa 3e 40 8c c5 44 cc c4 5c 6e ca 43 79 24 8f e5 89 a4 4b 95 d4 48 9d 34 48 8f f4 49 bf 0c ca a6 6c 09 47 d5 f4 ae 66 69 b5 d6 e9 92 ae 1a c1 f8 4c c0 ce d8 59 3b 6f 17 cc da 6c cd de 1c cd d9 2e da 25 73 b7 57 56 e1 74 3b 62 97 30 15 ec 26 16 cf 88 2c 93 d5 b3 96 bf b1 12 ee 0e ae c7 4d f9 f7 dc 82 ef e6 7b 78 20 ff 17 d0 20 04 c2 20 1c d8 70 05 ae c2 35 b8 0e 37 e0 29 3c 07 3e 08 61 1c 64 30 05 33 b0 06 1b b0 85 0e 78 1e 6f e3 33 e4 e3 22 7e 25 03 82 d3 2e 8a a0 28 3a 40 31 14 4b f1 94 48 c9 94 4a e9 Data Ascii: ]=\=dnH7[[2U}:#>.(bF5QpFkr:Ep8&.;Vx/>@D\nCy$KH4HIlGfiLY;ol.%sWVt;b0&,M{x p57)<>ad03xo3"~%.(:@1KHJ
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: 90 be 97 e1 b2 d4 6a e2 99 dc b5 28 38 cd fb b1 34 6b b6 86 8a 76 58 58 19 dc 83 1f 09 04 09 0e 04 02 81 40 20 10 08 04 0f 06 e4 39 0b 21 ae 39 5d 92 64 53 18 bc c3 e9 4b 23 34 29 26 14 2e c3 b1 64 3d d9 ca 32 e1 14 46 8d 2c f3 22 2c 94 95 3b ab 74 b4 70 31 c0 2a 56 aa 9c 88 64 6e 50 8f 67 e6 72 0c ae 9f e4 7d 3c ca d5 f9 5e d8 a6 1f a7 42 d2 f9 18 99 67 aa 32 bc 99 bc 58 1d 8f 71 cd 51 7c dc cd d2 fa 85 6b 65 6d ab a6 0f c2 cc d4 c3 41 11 68 b9 65 32 e7 47 c6 47 91 88 3a 0a 46 eb a1 94 c2 23 0c cb 48 ce c9 e5 72 45 e5 c1 15 f9 3b a5 6c 35 72 d5 ca 19 67 cb b9 13 09 70 e8 84 5e 17 2b 83 00 f9 41 42 35 29 90 bd 73 93 03 4d 6d 65 c0 d5 30 6d d5 b8 bb 74 47 30 09 8b 06 f1 47 c8 f3 22 fb 4b b9 79 15 de 76 85 fa 2c cc 4d 2e 64 c5 93 a6 a0 ef f2 17 ca b0 b0 75 Data Ascii: j(84kvXX@ 9!9]dSK#4)&.d=2F,",;tp1*VdnPgr}<^Bg2XqQ\|kemAhe2GG:F#HrE;l5rgp^+AB5)sMme0mtG0G"Kyv,M.du
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: ae d7 21 3c 64 70 15 fe bd 3e 09 2d 85 02 27 40 0b 5b 67 d8 86 83 01 bb 82 03 bb 32 83 72 8b 9f bd 36 55 a8 de 32 d6 12 16 d6 5a b4 44 64 8f a2 17 53 9f a7 97 12 23 db d0 18 ef 29 c8 66 ad f1 cc e1 ce 2a e5 9d 94 53 aa 54 3b ad 46 6d e7 40 af 3b d3 4b 79 fc 10 46 db 80 14 76 a5 2e 97 12 b7 36 c4 3f 4d bd 2b c2 74 cf 04 84 e4 99 1f 29 a2 82 26 6b cc 6f 24 b0 50 00 b1 c6 11 d6 24 98 b6 36 ac e3 18 8b af 43 10 22 12 4b d6 6c d9 73 e4 cc 95 fb c4 6a c0 47 94 a9 68 6d db b2 92 31 f6 70 56 78 84 45 7c 84 02 77 0c 82 e7 75 6f 13 f0 b2 fc ee 80 3e 65 90 6d 4b 06 4d 89 06 fa 27 6d 6b 64 26 1b d9 a6 06 39 b4 ec a1 50 e1 d1 5a a8 f9 1c d5 f2 38 15 d9 12 f3 ea 35 98 6a 71 c6 d9 72 6e e6 71 1c 18 04 b8 69 90 17 54 88 63 48 a8 c3 d5 74 d2 0e 6d 6a f2 fe 12 33 af e4 ed Data Ascii: !<dp>-'@[g2r6U2ZDdS#)f*ST;Fm@;KyFv.6?M+t)&ko$P$6C"KlsjGhm1pVxE\|wuo>emKM'mkd&9PZ85jqrnqiTcHtmj3
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: 8a e8 a9 cd cb e5 22 e5 0b 62 fa f6 22 93 47 dd c2 89 6d e5 bb c0 4d 67 7f fb bb 4b f1 74 2b 52 8b 12 94 5a 84 2f 0d de 1c e0 97 3c fd 0c da 7e 9d d4 43 3d 4f f2 22 10 08 04 02 81 40 28 c2 18 6b 72 ea 67 35 33 e6 2c ba 8d 11 46 e4 7d 07 8f 70 d9 0e ad b6 7a 44 ab b6 f2 6f 11 74 25 ac 11 f9 87 68 41 b2 64 2b 5c 17 78 e4 1d b6 fa b5 b8 af d5 83 da 61 c4 9b 74 c2 94 e9 5c ac c2 83 80 88 44 bf 41 52 23 c6 4c 98 34 6d b6 ae 1b f1 3e 94 8f 2b 63 0b 3e 32 1b 38 d8 64 4b 3f 68 f5 b4 d6 19 27 cb 5d 5f 6e 64 a4 64 64 e5 e7 28 c9 b2 0b b8 5f 48 d0 e9 86 e0 88 dd 0a 24 bf 78 81 cc 87 9f 00 81 a8 68 35 d2 88 c5 23 22 a3 28 52 1c c6 2a 69 60 24 93 94 65 1a 95 66 65 4c e9 e0 b2 cf 3d 82 dc 1d 5e d3 a2 66 d0 fe 11 a4 76 59 1b 1e f2 80 e2 3d b4 16 13 35 cc 91 7e 4a 34 55 Data Ascii: "b"GmMgKt+RZ/<~C=O"@(krg53,F}pzDot%hAd+\xat\DAR#L4m>+c>28dK?h']_nddd(_H$xh5#"(R*i`$efeL=^fvY=5~J4U
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: d5 9a 75 1b 57 9b f1 6e 88 95 d5 a6 6c d9 8a 46 d1 2d 47 10 4e 1e e7 25 83 f3 43 2e 88 a6 5d 3c b4 8f 97 0e 09 d2 39 a4 4b 02 54 c6 a6 2a 1e aa 93 4f 8f e4 d2 33 e9 f4 8a 8f de 49 a3 4f 0c 7d 63 d1 ef 71 d6 5f fd 93 01 5c c7 d4 c5 50 8a 61 44 32 3c 16 23 93 c9 d8 b8 19 1f 87 09 71 33 31 a9 ec 8a c5 b1 90 5b 52 cc ad 11 dc 16 72 fb 13 c1 12 1b 37 c5 ea 10 3f 24 9d d6 8f 65 7c a6 84 f8 a2 43 4a 0e 87 35 0a 6f 91 42 92 6d b8 42 a1 c2 c7 1f 44 05 72 66 c8 1f 0e ee 39 c2 9a 13 8a e7 8c 9c b9 21 7d ee 70 e6 f1 8c 97 4f 66 ef da 3b ea a0 d2 17 7c e3 70 c8 c8 2b d6 41 18 2b bd ca d0 e8 1c 22 65 8f 3d 94 a2 cb 1a 5a cf f9 61 76 0c 33 17 cd 25 83 bf b6 47 a5 ad b5 b1 e0 d5 96 32 e5 0b ff 16 4d a6 14 ce 11 14 f0 4b 91 81 38 6c 36 af ad c4 b1 69 8b f5 99 87 a1 ef ca Data Ascii: uWnlF-GN%C.]<9KT*O3IO}cq_\PaD2<#q31[Rr7?$e\|CJ5oBmBDrf9!}pOf;\|p+A+"e=Zav3%G2MK8l6i
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: c8 15 c1 d5 65 34 56 c5 80 70 5e 39 d7 1c 7d af 55 33 f7 86 40 e3 3c d7 c9 96 12 5e 57 eb e3 f1 4d 29 ad 7f 3d 3d 27 31 6f de fc df 3f e3 f9 1a 65 ed 82 5f d3 5e 33 3f 46 30 fd ad 73 66 d1 60 fa 67 16 ce e7 92 99 5f 98 32 8d 66 bf 5b 53 68 af b9 7c 1f f7 29 df f8 7c 52 3e e5 37 6d 1e 7d 7e 08 78 1c f6 47 e7 8b 19 fd 59 c7 eb b8 cf a9 af 0b be 38 7f 5a 8c eb bf b8 a4 43 97 a9 57 7a cc 4e 9f 85 19 70 7b 86 2c cb 05 c5 e7 97 ac fb 52 c0 7f d3 08 1e 30 da 0c 04 15 5c 28 f1 4d 48 a2 c3 49 52 52 93 9b ad 29 8b 24 f5 51 a6 25 9d d1 e4 7c ae e7 6e 06 32 9e 6e 20 5e b6 e1 d2 4f f6 09 e5 c5 cf 0f 1d ce 9f 5e 1a 7a 69 28 b7 f0 e6 33 06 87 f2 9c b7 2e 1d 79 ed 6e ef 3d ac d9 39 1f 0c 1d f4 85 18 d9 fb 66 05 3c 6a 04 bb 2e bc 6d eb f9 70 7f 14 5c d9 ae 97 bc 63 1d 99 Data Ascii: e4Vp^9}U3@<^WM)=='1o?e_^3?F0sf`g_2f[Sh\|)\|R>7m}~xGY8ZCWzNp{,R0\(MHIRR)$Q%\|n2n ^O^zi(3.yn=9f<j.mp\c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49749	151.101.3.10	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:18 UTC	663	OUT	GET /b94aa70a4593f812b35d5a8922257b6f80ccf6aa708f58b8266f4ba917eb0e0e/resources/fonts/roboto-regular.woff2 HTTP/1.1 Host: static-p46175-e229011.adobeaemcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://all.accor.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://all.accor.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 07:46:18 UTC	770	IN	HTTP/1.1 200 OK Connection: close Content-Length: 63748 x-frame-options: SAMEORIGIN cache-control: public,max-age=31536000,immutable content-type: font/woff2 content-md5: aIe28kQU28YS2/QszcdrcA== last-modified: Mon, 28 Oct 2024 09:01:46 GMT etag: "0x8DCF72F27007265" x-ms-version-id: 2024-10-28T09:01:46.9632101Z x-ms-is-current-version: true content-disposition: inline access-control-allow-origin: * x-vhost: publish X-Content-Type-Options: nosniff Accept-Ranges: bytes Age: 105519 Date: Wed, 30 Oct 2024 07:46:18 GMT Strict-Transport-Security: max-age=31557600 set-cookie: affinity="5b46b8c25a32a2e1"; Path=/; HttpOnly; secure X-Served-By: cache-dfw-kdal2120086-DFW X-Cache: HIT X-Timer: S1730274379.783530,VS0,VS0,VE2 Vary: Accept-Encoding
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 f9 04 00 12 00 00 00 02 95 fc 00 00 f8 9e 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 84 62 1b 81 bb 4c 1c ab 10 06 60 00 8d 02 08 54 09 83 3c 11 0c 0a 87 dc 24 86 fb 73 0b 94 1e 00 12 8a 18 01 36 02 24 03 a8 38 04 20 05 85 12 07 20 0c 82 49 5b 73 5a 92 05 e5 c6 ee 5f 87 4c 5d 81 45 a9 1b 03 2a fb f7 5d bb 53 21 f5 d5 b0 4d c1 56 fe 76 8e e6 00 a3 be be 5a 46 09 f3 7c d7 00 ce 83 e3 78 7c aa cf b2 ff ff ff ff ff 5f 95 4c 64 cc 2e 69 b9 24 05 10 90 29 2a aa aa ba 6d 73 ff 3a cd 1c 51 bc 2e 30 0b d4 08 b8 6c 60 68 3b c5 57 14 3d 51 30 34 63 60 5d a6 8f a1 6c dc b6 5d ca 4c b9 a3 0c 31 99 34 83 d3 15 37 62 ef 69 96 72 d0 0c 0b 8f 2b 61 5a 11 d4 4f 67 95 d4 3d 75 3b 69 f6 71 b9 80 c2 b0 eb 50 26 44 Data Ascii: wOF2bL`T<$s6$8 I[sZ_L]E]S!MVvZF\|x\|_Ld.i$)ms:Q.0l`h;W=Q04c`]l]L147bir+aZOg=u;iqP&D
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: f7 32 c9 19 8b da 48 a4 99 c4 f5 8c 96 c0 7d af ae aa 56 b2 5d a5 b6 d0 70 31 86 0e c6 66 30 c1 09 6b 58 de 0c 2c 96 54 17 2c b8 68 c3 e7 c5 f4 1f 72 92 ac 09 bb f9 fd 9f ff 9f a9 7e a5 55 00 21 82 32 47 a2 be e3 cc ac 1b 6b 82 90 d4 ff eb 5d 94 55 df aa ea 87 ae ea 06 9a dd 0d 52 68 90 12 05 90 fe 3b 82 fc 8e 1a 83 6e 00 5f 00 48 c9 8f b3 d1 5a 17 ca ad 31 36 5b 1f ed 06 d1 a4 13 ae 8b 82 0d b2 09 c2 0d f3 4d b2 0d e2 60 ff de 74 55 fa 9f cc 6e 37 48 5b 34 9c 81 39 ab da 1a a7 39 03 13 44 6b a2 33 c6 24 e1 ef af 6e d4 4f 2d 0d 6a 09 e6 90 84 f6 34 62 0c 0d 6b 10 1a 07 ac 13 1a 07 ac f3 46 d2 58 69 2c c3 3a 27 58 e7 d9 73 ce 87 e7 2b 37 2e bb 34 59 ef d3 0b 82 e4 92 f0 c2 0b 92 bb ff 54 ad ae 55 1f 92 db 12 c5 91 00 4f 3e 6d 8c 87 db 07 a9 8e da 94 4e 47 Data Ascii: 2H}V]p1f0kX,T,hr~U!2Gk]URh;n_HZ16[M`tUn7H[499Dk3$nO-j4bkFXi,:'Xs+7.4YTUO>mNG
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: 74 87 ef 1e 29 27 c8 04 4c 4d e6 3b 99 84 eb 58 2b 70 f5 55 e1 4f bc 01 da b8 64 e2 71 a2 48 0d 05 24 86 ba f0 5c 24 ba 74 42 57 3a 0d b1 25 a2 21 c9 b2 13 62 7d d2 f9 91 b0 28 05 0f 31 8a e2 ba ce 38 f2 4a 23 37 28 29 c1 d0 c9 3d 61 de 1b 91 70 f7 13 f1 2a 82 90 18 f2 83 2c 80 5e 71 02 b3 4b 29 6e ae 05 4f 18 90 3c f0 e6 9d 82 e9 17 b9 0c 08 84 d5 37 20 01 ca 76 2f 21 14 11 ba 22 72 a5 0b 72 45 ad ce c7 43 40 4c 5d e9 00 01 54 45 cc d5 91 20 8c b2 64 89 58 99 57 33 43 24 12 77 1c d9 f1 9e db d3 c5 3a 35 4d a0 ef df c0 04 b6 13 a0 c0 e9 57 bf ca be 65 af 3d 1e a7 86 b7 d0 06 9c 3e 90 4e eb 19 60 30 57 2c b2 df cf c0 35 86 95 67 39 33 c9 dc 50 f6 43 f3 78 d6 c3 9b f1 48 20 a4 f5 9d 4b f3 f6 ea 46 ec 32 71 ea bd e7 7b 97 2f b1 34 79 e4 8f 40 a6 9d cd ee d3 Data Ascii: t)'LM;X+pUOdqH$\$tBW:%!b}(18J#7()=ap*,^qK)nO<7 v/!"rrEC@L]TE dXW3C$w:5MWe=>N`0W,5g93PCxH KF2q{/4y@
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: a3 fa 1e 18 f5 9e 69 77 f4 7a a1 03 bb a0 57 4d ef b2 5e b7 b0 2b 7a eb 9b 77 4d ef 62 d7 f5 fe 8f ed fa 7e 65 6f 37 f4 07 c1 6e e9 4f a2 dd d5 df b4 77 77 9f f4 6b da f7 69 53 d2 a1 ff 37 50 74 40 21 a8 cf d6 0b 2b 0d 98 e7 3c 53 35 af f9 a5 7a db 87 8b 7d fa 23 e4 f0 ee ae 20 b3 b3 99 20 8b f3 5d 59 ce 2c 78 e5 59 ee c5 d5 e4 e2 21 f4 1f e5 72 af 2f 2e 83 bd b5 84 0c f7 ce 92 32 d2 b7 2b cc 68 3f 8f 98 a9 7e 1d 39 d3 8d ac 24 33 4d ac 32 b3 4d 5f 75 16 9a b9 fa 2c 16 1a 2d cb cd 5b 53 56 5a 30 7a 56 5b b1 ae bc 2a bc de ec 14 2b 35 50 a6 cc cc 72 e5 67 55 ae 3c 27 21 61 38 31 71 6e fd fa f3 32 32 46 f6 3e 6b 74 c8 f7 fd f2 f9 b8 93 1f d1 5f 00 3d 11 f3 bf d8 16 a6 80 f6 e0 10 90 25 6d 77 a5 24 ff 94 07 a9 50 d4 48 5a f7 e7 1f f5 0d fb e8 05 46 be e0 84 Data Ascii: iwzWM^+zwMb~eo7nOwwkiS7Pt@!+<S5z}# ]Y,xY!r/.2+h?~9$3M2M_u,-[SVZ0zV[*+5PrgU<'!a81qn22F>kt_=%mw$PHZF
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: 41 ed 92 52 0a d6 c2 be cf ec 47 6c 17 24 7d cf 8a 7c fc 37 19 ac 4d f1 ba 58 76 a9 1d dd d5 73 f4 d5 29 7e 77 dd 73 df 03 69 d2 89 7d a8 4f ed b1 3c 26 36 6a be 16 db d9 b2 87 82 b6 dd 4e bb ed b5 df 41 87 39 15 fb ce 60 c9 30 02 79 18 2f e2 6e 3a 3d fa 64 60 ea 57 f8 ae 8e 6b 9a ae 2b e6 fb dc ae cf 41 e1 56 9f d4 33 97 05 12 88 84 38 0f 73 45 20 b1 ed ed 71 b6 04 53 0a 91 a6 cb 7e 72 23 4f 53 d8 ef 17 95 94 d4 95 75 6d 90 26 69 a5 8e ae 5e fa 64 e0 8c 64 b3 76 5a 06 03 0a f6 5a c5 b9 b9 66 96 94 6c 6b 50 ca 9e 3b 47 71 d2 e9 b8 c0 9b 2f 7f 21 c2 13 41 31 da 57 84 ab 18 4f c9 54 c0 ff 84 10 4b 74 65 ca 55 a8 ec 55 c4 55 ab 51 db eb 54 27 ea f5 f8 49 48 c9 29 a9 a8 69 b4 68 d3 a1 53 b7 de 3e e9 ed b4 59 73 7d 41 74 4b b5 72 a4 09 a1 19 0b 56 6c d8 dd 38 Data Ascii: ARGl$}\|7MXvs)~wsi}O<&6jNA9`0y/n:=d`Wk+AV38sE qS~r#OSum&i^ddvZZflkP;Gq/!A1WOTKteUUUQT'IH)ihS>Ys}AtKrVl8
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: 0c f7 33 de 41 69 07 1b 6b c1 ea ad cf 73 23 f8 8c a1 33 81 29 33 e6 ab 85 25 5d ab de 2c 89 35 49 24 d9 52 a4 8e 2b 84 bb 36 bb 89 95 b7 44 94 de 47 d2 0f 99 fa c9 37 51 44 29 bf cd 7e f4 56 71 4c 02 6f 26 4c 0d 9b ef ad c9 e2 49 ad 8b 57 b3 ec ee cb 9e 1d 66 0b 7b 07 f0 35 91 39 80 f7 32 c9 5f 1d ef 13 e5 d1 83 83 ab 1e 02 72 75 b0 5c 33 91 1e 6a da 0c 40 57 53 ed 8c 99 32 97 28 59 6a bf 62 d5 49 22 67 51 72 ab e7 d1 43 54 d3 69 c6 68 3d 5c 28 e6 0e ab 54 99 fe ce f5 17 43 2d f5 fe db 79 95 2c e8 39 ae ef 1e 0d 03 85 55 0a 57 b9 02 86 3b 23 cf 0c fd 16 9a c8 ed 88 86 8b ed f7 99 2a 1f 9b fe e0 20 7a 88 80 0c aa 06 8d 1c b9 23 0f 7b 05 0c 11 f7 49 a7 55 a6 09 57 f4 f5 e3 4f 26 73 9d d1 88 7b f4 a0 81 79 18 71 cf 44 cc a6 16 8c 4b a0 5f 92 94 71 05 ba 6b Data Ascii: 3Aiks#3)3%],5I$R+6DG7QD)~VqLo&LIWf{592_ru\3j@WS2(YjbI"gQrCTih=\(TC-y,9UW;#* z#{IUWO&s{yqDK_qk
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: d3 70 89 52 54 65 3f 6e f0 f1 a4 3f 94 f6 fd 80 a2 33 dd d0 8b 99 7e 18 34 6c d4 b8 49 d3 66 cc 59 b0 f4 43 43 8e ff 33 bd 22 b4 67 17 e7 18 fd ff 37 e2 81 d9 50 46 f0 a8 5f f4 81 1c dc b8 67 ac 3b 55 f0 12 a7 67 84 f3 f4 28 3f b3 f5 77 55 18 61 98 08 fb 55 8b bd a3 2b 1a 95 02 69 32 e4 9c cd 79 77 d1 65 57 c9 53 58 6f 54 14 1a 1a 1a 1a 1a 1a da 6f 43 1b b8 a0 a1 3d 4b fb 65 5a af 69 2d a8 30 34 8b 68 bf 1f 5a bf 69 0f 6f 0c 17 a5 1d 81 97 1a 7e 25 88 01 b2 9b 0a bc c7 c3 af f1 d0 ae 28 3a 3e 98 10 71 01 c8 5d 3f 73 21 5d 08 3d 19 98 98 4d 9a 13 90 95 db e7 52 69 f7 20 9e a6 3f 7e 73 e8 f7 a0 01 5e 7b b0 ed f5 f8 50 06 96 9a 4b c4 23 ef 78 5a d3 98 26 5c 44 18 08 73 ae 84 c3 57 b4 7d 5c 57 8c a7 44 3d 09 29 39 25 15 35 8d 16 6d 3a 74 ea ae de f6 0a 29 34 Data Ascii: pRTe?n?3~4lIfYCC3"g7PF_g;Ug(?wUaU+i2yweWSXoToC=KeZi-04hZio~%(:>q]?s!]=MRi ?~s^{PK#xZ&\DsW}\WD=)9%5m:t)4
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: d9 53 f6 9d e4 b2 60 c9 25 97 5d f9 fb ea ad ac 15 d7 ce 73 f9 d8 75 2b 3e f1 a9 cf 50 6d d5 03 0f 3d f2 f8 fd 49 6e 55 97 e0 69 6e c3 b3 dc 8e e7 b9 03 2f 72 27 5e e6 2e 24 8e 57 67 be ea f5 67 94 37 e7 bc 4e be 9e 24 2f 01 2e 40 dc ad c7 45 c0 69 32 64 c9 d5 99 0d e6 dc 09 2f d7 eb e8 5d d8 89 67 bb 9c e1 2c 67 3b c7 05 2e ab cb 77 4a 6a 9f ea e2 d3 52 5b 0a 4a 25 86 0c bf 1f 98 7d bd ce c1 39 4e 66 a4 43 e6 1d 75 5c 8b 36 ed 3a 74 eb c1 c0 34 60 d0 88 51 63 66 ce b3 45 ab 76 27 da fa 06 24 32 85 ea c5 ef 4b 58 fa d4 a6 30 61 7c 3a 2f df 16 4c 82 48 89 3c 32 20 19 49 d9 98 65 67 91 43 a8 dc 48 1e c1 0a b0 2b c8 ac 90 28 85 45 28 c2 ad 28 ab 62 5c ca 52 ca d1 94 17 a2 e2 6b aa fd 9b f8 6b 11 6a 03 57 87 a6 9e 20 8d e8 9a f0 6a 4a d7 8c d3 24 9a 79 c8 4e Data Ascii: S`%]su+>Pm=InUin/r'^.$Wgg7N$/.@Ei2d/]g,g;.wJjR[J%}9NfCu\6:t4`QcfEv'$2KX0a\|:/LH<2 IegCH+(E((b\RkkjW jJ$yN
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: fb d1 52 97 fe b0 1b a6 e3 84 e4 b0 dd c7 32 56 7d bc a7 45 34 ad 5c 33 a7 80 33 35 17 45 dd 4a c2 7b 90 f2 9d fd 54 c0 64 d3 c2 55 40 6e 83 6b ea 82 b4 9a 9d 38 a3 67 18 2f ca 34 18 8a 83 7b 2d 2f 25 c0 59 c2 25 3b d7 08 db 92 b3 e6 5f 2a bd 00 02 2f 4b 66 2a 13 2a 90 49 ba e8 a7 4b c5 cf 4d 8e 30 5e 35 f1 bd 01 88 1a 4c bf 30 8b 94 4e 65 78 18 c4 13 56 fa 30 da cb 2c 4e 30 d6 ca 10 bd 60 98 27 31 8c 0a 2a ca 11 dc 7b 57 20 55 04 55 97 35 53 e5 47 11 ac 2a 87 b8 12 bc 4b 5a cf 86 80 79 90 2f dd 05 26 b8 10 2a 12 8f be e3 5e da 57 7c 5e 7c 5e 7c fe e7 7f 4d e8 87 87 62 21 48 fe f0 cc bc 88 00 6d be 34 3d 89 dc db 7c 65 71 1e 7d d0 ee 1b 81 10 f2 fe a5 19 40 db 65 31 74 05 fa a5 85 a5 c5 de b4 2f 2d 86 e6 50 36 14 31 1e e9 b3 56 14 d1 be 2a 22 f6 d7 c4 bd Data Ascii: R2V}E4\335EJ{TdU@nk8g/4{-/%Y%;_/KfIKM0^5L0NexV0,N0`'1{W UU5SGKZy/&^W\|^\|^\|Mb!Hm4=\|eq}@e1t/-P61V*"
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: 63 1d b1 6c c7 f5 fc 20 8c e2 24 cd f2 a2 ac ea a6 ed fa 61 9c e6 65 3b ae c7 eb 63 bb cb f5 76 7f f4 c3 73 9c e6 a2 a8 da 9e 14 6e 0f 56 af 39 31 48 48 55 37 6d d7 17 15 2a 8d ce 60 32 5b ec 1c 1c 5d b9 f1 3f 3c be 40 24 96 48 65 72 85 52 a5 f6 53 54 4d a7 37 18 4d 66 8b d5 66 77 38 dd 5e 3f 4f 6f 47 4f da 1f 23 61 12 76 e1 9d 75 75 6b 58 f2 83 4d 9a 41 48 55 84 54 43 e8 9e 41 a8 97 67 c3 55 ff 2a ee 60 72 6d b0 05 e8 a3 09 27 11 45 7b af 6e d5 92 95 ce a7 ee e1 a9 67 9c 7b c1 78 b5 f5 77 74 3f b1 fb 6d 8a f2 c6 32 6e e2 e3 d3 f2 01 58 dd f5 43 1a a5 4d 81 0d 6b cc a8 33 1f bc 39 0a 6b 26 de 42 45 14 87 b5 4c 49 64 2b 95 56 76 b9 15 d3 da d9 93 56 5d 43 2d ad a9 1d 75 00 d1 41 b5 35 a9 19 78 27 00 f2 fb 7b 56 f1 b4 2e 28 b9 e5 ad 6d 53 3b da 83 75 4f e9 Data Ascii: cl $ae;cvsnV91HHU7m`2[]?<@$HerRSTM7Mffw8^?OoGO#avuukXMAHUTCAgU`rm'E{ng{xwt?m2nXCMk39k&BELId+VvV]C-uA5x'{V.(mS;uO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49752	151.101.3.10	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:18 UTC	660	OUT	GET /b94aa70a4593f812b35d5a8922257b6f80ccf6aa708f58b8266f4ba917eb0e0e/resources/fonts/unna-italic.woff2 HTTP/1.1 Host: static-p46175-e229011.adobeaemcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://all.accor.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://all.accor.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 07:46:18 UTC	769	IN	HTTP/1.1 200 OK Connection: close Content-Length: 31760 x-frame-options: SAMEORIGIN cache-control: public,max-age=31536000,immutable content-type: font/woff2 content-md5: tSOc0q1ZGeYd/vpnu91zmg== last-modified: Mon, 28 Oct 2024 09:01:46 GMT etag: "0x8DCF72F27004B58" x-ms-version-id: 2024-10-28T09:01:46.9622104Z x-ms-is-current-version: true content-disposition: inline access-control-allow-origin: * x-vhost: publish X-Content-Type-Options: nosniff Accept-Ranges: bytes Age: 90677 Date: Wed, 30 Oct 2024 07:46:18 GMT Strict-Transport-Security: max-age=31557600 set-cookie: affinity="76fa4ed965fe70de"; Path=/; HttpOnly; secure X-Served-By: cache-dfw-kdfw8210135-DFW X-Cache: HIT X-Timer: S1730274379.782660,VS0,VS0,VE2 Vary: Accept-Encoding
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 7c 10 00 11 00 00 00 01 31 b4 00 00 7b ad 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 6a 1b a4 7e 1c 8e 34 06 60 00 88 6c 08 6a 09 9a 16 11 08 0a 83 dc 70 83 a8 34 0b 86 04 00 01 36 02 24 03 8c 02 04 20 05 87 18 07 8f 7c 0c 81 18 5b 4b 13 51 c3 b6 69 cd bc db 01 a1 47 dc 95 4f 14 8c 63 93 b8 1d b9 06 b9 f1 db 4c c6 31 0b d8 38 00 9c 67 5f 60 f6 ff 9f 93 74 8c e1 40 bf 01 65 be ac 7e d0 93 84 a0 c9 ca 2d 8b dc ab 22 89 51 55 07 b6 c9 48 ca f0 d8 92 a3 52 81 6f d2 29 9d 2c e7 a4 37 e9 07 bd 6b a9 79 d2 66 98 9b 66 33 4f 2c 84 15 08 5a 59 5a fa 0b 01 e1 f4 de 16 b5 5c 32 8f fd d9 f2 aa 65 78 d5 fd ef 0f 4c ef af 89 d7 2e 65 fb db e9 15 bd 9b cd 49 37 fb ef 07 87 23 70 4d 9b 38 48 2b 0c 84 ad 50 7e Data Ascii: wOF2\|1{j~4`ljp46$ \|[KQiGOcL18g_`t@e~-"QUHRo),7kyff3O,ZYZ\2exL.eI7#pM8H+P~
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: a1 65 30 7a 2f 30 c0 76 9a e4 6e 05 bb 39 09 1a d1 30 45 a3 c1 62 61 a7 31 87 a9 8b be 09 34 4b b6 aa 09 68 4a 21 c1 20 da 0c 09 0c 8e 4f 7f 0f db 0a 43 85 1f 08 df b5 17 13 b6 29 10 60 d7 6d 5b 02 0e 19 58 c0 53 66 dd 7a 1b 4b df 09 4e 4b 50 5d 7a c0 f1 0c 3e e4 39 86 d6 2a 4c d0 de ad 6f 57 a5 ee 3f 42 e9 18 70 f3 ee 34 e5 8d 68 4d 20 b0 78 11 e1 be d4 bb e8 73 11 6f 22 31 f1 fc c7 9d f3 5f 1d 4f 58 aa 44 88 3e db 23 69 a7 6f eb ff 17 cc df fe 4a dc f7 60 2a 56 a2 bd 3b 56 c6 cc d4 0a d7 d9 ca b2 a0 95 6d d1 0f 25 c7 2a ab 71 f5 d9 89 6f b7 7d 54 2e b9 41 e3 9e 87 6c 3c f1 82 3d 8c 99 68 71 24 32 15 31 51 a2 84 d0 2e 92 64 95 e0 a4 fc 76 96 6a 35 48 06 92 24 6b a5 5d aa 4d 07 4a 41 5a 2a 29 b2 84 9a 18 fd db 51 ed c2 ca 24 fb 1d 26 70 64 65 a9 4b ae 43 Data Ascii: e0z/0vn90Eba14KhJ! OC)`m[XSfzKNKP]z>9LoW?Bp4hM xso"1_OXD>#ioJ`V;Vm%qo}T.Al<=hq$21Q.dvj5H$k]MJAZ)Q$&pdeKC
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: 15 c0 e0 b1 10 0b a0 8b d2 42 59 66 83 de 79 ba e8 ff dc 16 af 4a 5b e7 ac 41 be d7 93 87 a9 a1 e4 ee 20 c3 d5 3a fd ee 38 ef c4 fb 83 22 8c d0 17 0b ef f0 17 e3 82 b9 75 f7 69 e9 3b 02 0d 9b 09 29 15 73 d6 ec e9 79 f0 8d a4 41 f2 21 89 75 51 c2 a9 e2 a8 58 f8 84 94 34 ac d8 71 e6 ce e7 22 0a ee cc 06 43 c1 c4 a3 60 c6 92 2d 27 6e bc 11 20 36 1f 42 c6 c0 25 a7 56 74 5f 47 ae bc c0 61 7d 7e b7 e2 90 31 a5 65 c3 81 0b 4f 7e 2f e3 29 39 e8 ca 04 7d c3 95 66 84 be 29 ff d7 aa 66 84 ce a6 ed a5 ad f1 d1 e8 fd c1 ee 98 14 74 4a 1c 13 07 c4 6e b1 2d 5d 9b 5e d1 17 9b 86 d6 84 dd f9 99 a1 65 a9 f6 3b 39 a3 fa 64 f5 a8 2a 59 17 54 92 9c 2b ca 4b 29 37 23 1b f5 d0 e6 ca 20 d0 84 cf e3 72 e8 14 9c c0 48 3d b8 30 59 df ba 55 08 4c 34 60 06 65 d8 15 07 2f b7 93 db d6 Data Ascii: BYfyJ[A :8"ui;)syA!uQX4q"C`-'n 6B%Vt_Ga}~1eO~/)9}f)ftJn-]^e;9d*YT+K)7# rH=0YUL4`e/
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: 24 27 4a ac b9 a6 da eb a9 bb de 3a c5 b9 2e c6 15 46 d7 a4 b8 9b 79 9a 6c b3 4b 57 64 b5 e1 d0 e8 72 f3 2c 34 47 76 4f da 13 df 48 5d 77 c2 97 b0 db f5 83 85 1b 56 76 91 0b fc bb 2f 08 2b e2 3c 06 ad a4 f8 05 3a 7e 46 13 10 5f 87 91 01 db ff 90 7b d9 a6 f6 fa 29 70 7d e4 f0 2d 5e 22 7f 1d 28 34 fd 37 5c cf 95 33 9d 3a 11 e2 7b e2 41 87 3d e8 18 7d 43 82 9d ec b2 a1 00 e6 e0 4f 26 65 fc d4 0f bd c5 d1 6c 44 2d 05 a1 a2 76 f4 39 88 8a cb df 81 9f 1d fc 24 12 73 b7 b0 1f dc bf 19 0a b3 37 cd 39 a4 ec f9 33 61 c1 16 2c f4 d3 30 5c 22 7f 48 7f c8 d2 e2 c6 3a 61 66 7d 09 5b b4 8d 46 fb 66 1c 69 bf 09 25 76 f5 62 cc d9 50 01 46 a0 d4 34 f7 8c ca 83 f0 ca 04 4f ed 75 92 4e c4 c8 ac a1 84 8a 0a e6 45 2d 3c 82 20 36 e4 8a c3 94 a0 c8 78 d6 bd 54 6e 72 71 eb 89 dc Data Ascii: $'J:.FylKWdr,4GvOH]wVv/+<:~F_{)p}-^"(47\3:{A=}CO&elD-v9$s793a,0\"H:af}[Ffi%vbPF4OuNE-< 6xTnrq
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: f1 47 06 fa 4a a0 9f c4 e5 42 ff d1 ee b8 49 60 23 55 d5 de 5c de 30 7e 4e d1 3e 72 e8 31 38 ab 06 e4 95 8d 96 53 a0 b9 77 7d 1b b6 01 e8 31 60 e7 86 05 37 5c b3 e0 d0 15 60 f7 0d e0 15 97 3e 3d 31 73 d6 26 6d d8 10 0e 55 69 c0 54 17 08 34 eb 86 64 45 ed bb 03 c5 e9 40 c9 98 b2 e0 56 90 1a dc 5b 0d c2 69 dd e9 d2 59 07 cb f2 41 3d 09 c1 40 94 02 26 c2 9b 64 6d ac ea 21 ac 52 12 55 15 24 75 82 e8 de c4 4f 9c cc 66 c2 16 c6 a8 a0 10 90 63 42 c3 53 14 8e 02 75 13 0d c8 5c b4 21 63 4a 6c 29 e1 13 ba 12 4e 24 9c 39 af 25 0e 97 4e 6e 6e 5c 4f 1d af 25 a1 68 34 8c dd 2b de 42 52 42 09 92 8b 6b 45 53 be 55 29 7f e2 9a ad 49 4b b3 a5 cc b4 47 37 a3 3b 7c c8 c9 4c ff 92 cf f9 e5 e5 83 36 bb a9 8c 5b ab 56 7f d8 cb 39 a1 69 ae 57 f5 65 67 55 f1 96 99 bb 69 4a 3a 37 Data Ascii: GJBI`#U\0~N>r18Sw}1`7\`>=1s&mUiT4dE@V[iYA=@&dm!RU$uOfcBSu\!cJl)N$9%Nnn\O%h4+BRBkESU)IKG7;\|L6[V9iWegUiJ:7
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: 7d e5 eb 0b 1c f7 31 67 36 e0 88 9d d0 58 43 15 8d 9a 45 3b 34 a8 05 8d 74 6f 00 b6 e6 c9 b5 8a 0a 3d 75 a5 61 da e7 43 54 bf ac 2e 21 3c e8 2a 01 fb f7 7d ca 93 46 d4 76 fe bf 0b 82 a9 37 da 54 0c 7c cf a9 7e ac 0b 63 15 8b 56 0c 78 f4 e9 2d 75 0d eb e9 6d 34 92 0d a6 a9 1f fb 6e a8 1e ef cc 45 93 44 7f 51 83 4a 99 30 67 d8 74 0d bc 67 74 25 21 75 25 e9 39 8c af 20 82 c9 c9 11 32 10 47 fd 6e cf 3e ee 0c 2f bf 30 1b 45 18 72 bb 40 4f 9a 19 58 d9 03 c4 03 20 3f b4 11 cf 70 b3 40 10 e8 31 cc 1a 5c 57 60 24 e1 35 cf 53 2d c6 9a 26 32 2d 72 4d 13 07 d5 8a 40 b7 2f c4 62 c2 b5 a3 da 0e f0 65 f9 b3 7c 9e 69 bc ee f8 3e 3a b5 67 30 ec 9f d7 9c 59 56 12 41 55 c0 1c b5 6f f8 74 c5 41 ed f4 72 58 4a ab c6 5f ab c9 96 49 02 b3 10 85 4f 48 87 4e 2c 52 cc 02 5a 71 d5 Data Ascii: }1g6XCE;4to=uaCT.!<*}Fv7T\|~cVx-um4nEDQJ0gtgt%!u%9 2Gn>/0Er@OX ?p@1\W`$5S-&2-rM@/be\|i>:g0YVAUotArXJ_IOHN,RZq
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: f4 97 c7 a8 ed ee 25 8f 80 9e 6c 3e 5e 45 ca ef de e6 f9 ea 4b 0e a8 12 c7 eb 46 97 81 71 75 a0 f8 b0 8e b5 fd b5 f7 17 a8 d1 73 91 79 e3 39 d6 86 b7 8f 50 18 32 e4 44 8b 1c e7 23 24 00 81 4d a9 a3 71 c0 13 46 05 10 28 41 42 df 87 9d 52 c2 3f 89 71 35 8d 56 6c 21 77 36 95 ca 4a b1 2d 6a d3 0a 90 84 c5 15 13 0f 23 48 f4 b3 10 8b ed b0 45 52 73 26 2c 46 93 3d 6d a6 5e 1e 2b d0 24 d5 4f dc 5f 0f 5c 11 bf cf 52 eb 8b 38 8e f0 92 05 02 68 0b 09 56 01 1a f5 fb 36 37 4e 6a 72 26 e6 f1 52 a3 77 f3 6a 35 ce c9 01 dd 7d 3e a4 2b d1 80 9e b9 33 ce ad 8b 4a 68 cf 10 3e 00 97 25 69 8b 9c ce e0 47 ed 51 31 64 ff 08 a4 c2 50 d8 17 88 ba ef b7 ef d0 4a 9d d3 06 3f 77 80 ab 16 d6 b6 9e fd 01 8d 5a 06 b4 71 2c 41 02 18 40 c3 43 07 37 85 4e 31 0f 8d c6 ad 3b fd 6c 8b 1f 4a Data Ascii: %l>^EKFqusy9P2D#$MqF(ABR?q5Vl!w6J-j#HERs&,F=m^+$O_\R8hV67Njr&Rwj5}>+3Jh>%iGQ1dPJ?wZq,A@C7N1;lJ
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: 04 59 d1 8c d9 94 98 8f 81 29 6a 2a 82 ac c1 1b d4 67 80 3f 09 3c 3a 02 b8 1c c6 00 6a 79 77 00 bc dc 3e eb de e0 b3 cf 24 8f e6 f1 d5 8b b4 10 48 fd 46 21 28 76 c6 8a ee e5 da 82 43 d3 2c 8c 97 bb db a8 81 8f bf 05 f9 52 36 70 d1 52 13 24 b9 dd ad ca 57 76 a0 fb a2 16 59 35 bd cb cc e9 9c 89 9b 80 e2 cd 38 25 d2 02 16 37 85 5a 16 92 d2 c0 ac 55 a2 6b b3 bb cc ec 8e e9 98 c1 fe eb 48 98 45 eb 10 d1 b2 11 d1 44 e7 47 4b 94 e2 ff 30 3b ff a6 fc 9c 4f 9d 7b f0 3f a1 08 44 8d 0b dc 09 fb d3 02 20 38 cf 27 ae d5 b8 46 42 ae f1 50 08 65 50 38 9f 04 e5 27 d7 96 51 29 92 a9 6e aa 68 d7 b7 39 09 b6 36 a6 88 db 74 ce d7 16 0a b4 ca 30 c4 43 d1 3a f2 ab 55 7c 35 cd 7b d2 b6 7f e5 f3 d5 c3 e6 d5 ce 7c a5 98 45 8d 6c 64 8f 69 84 0c 53 a9 f3 fd df 1c c3 56 24 2e bf 79 Data Ascii: Y)j*g?<:jyw>$HF!(vC,R6pR$WvY58%7ZUkHEDGK0;O{?D 8'FBPeP8'Q)nh96t0C:U\|5{\|EldiSV$.y
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: e7 4f 34 fa 2a 83 86 ef 03 e6 e3 32 be fc c2 8e 70 a9 dd 91 ab 2b ab d0 c1 0d dc ab d6 ea fd 6f 00 72 a8 a7 18 fe ce c7 4e 1e 48 91 a0 82 c2 25 c2 42 b5 ae 32 c3 8a 3b 13 72 3f a3 de 5f 19 b5 ba ca bb 3b ab eb a0 1e 80 70 df c5 c3 58 32 53 8a 4b 42 b8 52 ec fc f7 24 7e b5 a1 4a eb 21 c7 d9 ad 2e 55 a6 ba d8 a5 2e d0 91 d8 6a bd ad 2e 87 37 ec 6c 25 35 58 53 25 f5 3f 95 93 ce f2 5a b8 0c 76 38 02 d1 f3 b2 0c 9b 81 c6 a7 5d 81 b0 f3 fb c0 bf 69 fc 8f e5 04 06 98 4a b5 38 cd f1 0c c1 9f 78 c1 1f 25 9c 3f 82 a8 21 b4 10 be f5 8a 8e 12 3d 2b d3 c3 21 97 e9 82 2e 52 df dd 06 57 6f 4a 7c 88 26 5e 49 3e 18 17 93 53 38 7c d0 e4 b4 9b 4c ae 4c ac 2c e9 e9 25 38 cb 9d 69 cc 09 d7 a6 1b e5 9c f9 0c 0c ee 6a 71 f2 45 94 c7 c0 4e 66 a7 9c da cc 5f 4a 16 a4 a5 be 44 57 Data Ascii: O4*2p+orNH%B2;r?_;pX2SKBR$~J!.U.j.7l%5XS%?Zv8]iJ8x%?!=+!.RWoJ\|&^I>S8\|LL,%8ijqENf_JDW
2024-10-30 07:46:18 UTC	1378	IN	Data Raw: ee 22 d2 80 f3 61 3a 96 0d 41 b3 63 d0 bf 6b 0a 03 87 d9 20 0e 0b 08 8d a2 df a4 a5 4d 43 d6 d4 df 14 34 ac f5 0e 83 e4 87 c0 31 0c d1 ec f9 7c ce 7c 32 93 c3 a6 ee 22 33 60 56 52 f3 3c 1a c9 48 27 62 82 1c 4c 01 b6 54 8a 57 61 c1 de c2 27 7a e8 05 0e 7c 8f 54 97 02 95 ab d9 44 82 f9 b8 f7 04 0b a8 01 83 d5 5a 04 ba 67 ba d7 88 49 0b d1 d8 c8 21 36 04 42 d2 b6 f6 7d a2 b8 a9 2c 4c e0 1a a2 93 9f f0 59 31 57 4e e2 8d 17 ec 71 95 a0 89 30 b3 68 76 7e 40 40 e1 d8 7f 51 ba a1 69 94 0d d8 1a 2a 9f 87 22 17 6d 25 47 de 00 dd 0b c9 fb 20 f7 c3 69 54 fa e4 50 d6 ae 2b b0 4b 42 91 e2 b4 db 0f c9 db 7c a9 d3 f7 85 76 fe 10 11 3c 8b f6 56 8e ac 03 bb aa 65 e7 67 11 40 1c 84 f5 e0 8a a9 13 a2 bf 69 d8 2e 2c b2 71 f7 f1 fb 56 09 83 e4 a6 b3 05 d7 b1 e5 c2 ef 0c 7a ca Data Ascii: "a:Ack MC41\|\|2"3`VR<H'bLTWa'z\|TDZgI!6B},LY1WNq0hv~@@Qi*"m%G iTP+KB\|v<Veg@i.,qVz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49754	151.101.192.114	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:18 UTC	555	OUT	GET /beacon/accorsa/accor/scripts/evergage.min.js HTTP/1.1 Host: cdn.evgnet.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://all.accor.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 07:46:18 UTC	920	IN	HTTP/1.1 200 OK Connection: close Content-Length: 58673 x-amz-id-2: NrhlKsrBKym6kL923zm2qin1cClegqG3dXdB6gM/Hiy9a/8gBrwtBx0j5cEDSUf8qMs7Rh8Uw58= x-amz-request-id: 7S4XKJFATZHCTGC7 x-amz-replication-status: COMPLETED Last-Modified: Tue, 29 Oct 2024 14:01:23 GMT ETag: "38daf974daa3b4e6cf4e589c16f799f4" x-amz-server-side-encryption: AES256 Cache-Control: max-age=120 Content-Encoding: gzip x-amz-meta-evergage-beacon-ver: 16 x-amz-meta-evergage-sum: 4aafb7597c8837f7207e748d2595b9c1a7c55542 x-amz-version-id: IJWYdv7IFh7EgzBr39npG0t9hcYa0hWt Content-Type: application/javascript; charset=utf-8 Server: AmazonS3 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 42 Date: Wed, 30 Oct 2024 07:46:18 GMT X-Served-By: cache-iad-kjyo7100045-IAD, cache-dfw-kdal2120141-DFW X-Cache: HIT, MISS X-Cache-Hits: 29, 0 X-Timer: S1730274379.783042,VS0,VE36 Vary: Accept-Encoding Timing-Allow-Origin: *
2024-10-30 07:46:18 UTC	1379	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 ff ec bd 69 7b db 46 b2 30 fa 9d bf 82 c2 cd d1 00 11 44 51 b2 9d 64 00 c3 3c b2 2c c7 4a bc c5 92 93 38 32 27 4f 03 68 90 8c 40 82 26 48 2d 16 79 7e fb ad aa 5e d0 58 a8 c5 c9 64 ce 7b df 3b 93 c7 22 1a 8d 5e aa ab ab ab aa 6b 19 25 6d fb 62 34 89 b3 8b ce e1 39 9f 0d d8 80 b7 37 37 db b2 e8 98 a5 3c 4f b2 59 c4 8f 26 73 3e 63 d1 7c 94 4d f2 5b 2b 74 c6 d1 28 77 da d7 ad 36 fc 6f 3e bb 92 bf f0 7f 37 7f 97 66 83 ce 05 9b 4d 6c 6b 3f cc 66 f3 d1 64 d0 3e 7e f6 63 3b cd 58 dc ce 47 93 88 b7 e7 43 de 5e 33 2a ac 79 c1 f2 36 4b 67 9c c5 57 ed 24 5b 4c e2 76 36 81 6f 46 79 7b 0a 33 eb 58 8e 4f 23 59 b5 23 36 8f 86 36 87 41 ae 5a ab 36 4f 73 0e 83 94 83 e3 12 10 4f 39 8b b2 c9 5b 36 cb f9 c9 68 cc 8f e7 6c 36 6f 07 6d 7b c2 2f da cf Data Ascii: i{F0DQd<,J82'Oh@&H-y~^Xd{;"^k%mb4977<OY&s>c\|M[+t(w6o>7fMlk?fd>~c;XGC^3*y6KgW$[Lv6oFy{3XO#Y#66AZ6OsO9[6hl6om{/
2024-10-30 07:46:18 UTC	1379	IN	Data Raw: db 28 2a 50 0f 1b 6c b9 2c 98 12 85 7f cc 3c 77 8d 62 c2 06 cd e7 b0 66 6a f8 8c cf 80 29 89 db c6 58 f3 f6 98 5d 81 dc 90 5e 29 f6 45 74 89 44 b1 d8 53 c0 f0 eb e6 71 2f e0 8c 8b 1e 60 b2 7c c6 e1 44 96 dd 90 08 32 64 f9 e4 1f 73 a0 b1 1c 4e ad 09 70 43 2c 1d e5 d0 f7 76 3b 47 9a 6c 3b a5 1a b8 50 d4 0f a3 c6 0b 26 bb 58 a2 3f 18 2c c2 1f 2c 30 b6 fa 46 75 ab 6f 6e 2a c0 03 8e f5 8c df 75 da 27 4e 51 5a 43 c2 ff 30 88 fc 8d 1a 56 c1 18 0d 54 15 f8 14 c2 de 23 51 e3 1d 60 a2 2b cf 9f d0 f1 69 d5 42 b9 15 d7 c9 2b 06 c3 8b ed b8 21 8d 94 fe 15 ad 3f 78 52 95 1d 80 2b 64 8e 17 0a 72 a2 49 e1 1f 6b 50 a7 00 d8 15 33 65 ae fd d9 8c 5d 75 46 39 fd 05 24 86 56 c5 7a 0a 5c 73 98 27 11 5a 92 8f 1e fe f5 5a 25 68 57 b9 bc d3 0a 1b d9 5f 2e a3 53 e0 8c d5 b3 d5 57 Data Ascii: (Pl,<wbfj)X]^)EtDSq/`\|D2dsNpC,v;Gl;P&X?,,0Fuonu'NQZC0VT#Q`+iB+!?xR+drIkP3e]uF9$Vz\s'ZZ%hW_.SW
2024-10-30 07:46:18 UTC	1379	IN	Data Raw: 38 f4 b0 5c 6e 5c a2 ce b0 d7 8a bd d2 94 a7 97 96 41 4d 9e ca ee 23 c0 a6 98 cd 01 70 73 58 7f 24 a6 ea e9 33 6e af be a9 6b f9 e1 f8 cd eb 0e e1 01 12 26 c1 aa 03 62 36 10 f2 83 d2 e4 04 2a 59 21 f1 64 c5 90 7a d6 4b 9e cc 2d cf 3a c9 a6 96 6b fd 32 8a e7 43 00 fb 96 a8 3d 65 71 8c 34 b4 b9 fa 4d d5 de 8d 06 43 ac f7 34 9b cf b3 71 51 b5 de 7f a5 66 31 86 62 26 cf 4a 33 d9 00 be 65 e3 42 ee 68 13 0d f4 54 bb c0 d5 28 8d 09 2b 9d b5 9f b9 d8 c9 6e e8 02 65 e2 9d c1 62 14 07 e2 cf 72 39 a5 bf 5b 5b be 50 fe a0 66 f0 f7 88 ab bf cb e5 f5 ca 4f 50 5b 9b d0 22 9d f6 e9 49 90 a6 53 6a b1 8f 0a 54 80 c5 e1 39 a0 c6 cb 51 3e e7 13 24 bb 6e 8b 1b 43 b8 a4 23 04 97 5c e2 73 c1 d7 9e 46 b0 8f dc 82 5b e9 e4 d9 6c 6e 3b 06 c2 be 63 e6 f8 d7 8f 93 d4 34 38 3c 38 be Data Ascii: 8\n\AM#psX$3nk&b6*Y!dzK-:k2C=eq4MC4qQf1b&J3eBhT(+nebr9[[PfOP["ISjT9Q>$nC#\sF[ln;c48<8
2024-10-30 07:46:18 UTC	1379	IN	Data Raw: bb 7b 0f ff b9 75 1a 6e 1e 2e ff 27 dc 3c 83 59 c0 1c f7 be 7d b4 fb f0 e1 96 1d fe eb f0 5f 67 8e fb dd 77 7b 0f 1f fd 13 fe 83 12 a8 07 d5 96 87 9b 50 3e 84 26 1e 3c fa e6 9f 0f 1f 7c f7 cf fe 69 ba b5 b5 f3 08 07 be 65 db c3 80 9d 76 fb 30 e2 47 cb e1 13 28 fb 16 2a bb e1 e3 c7 0f ba cb 10 9f dd 43 f7 ac ef 5c 0f 03 18 df f6 83 fe bf f0 cf 77 e2 cf ee 43 f9 f7 9b be df 02 8c 43 ad 3a 79 0d c1 cf bd be b4 ae 62 a7 0f fa 2b 9c 71 1a 3c f2 01 64 c9 29 00 b2 bf 05 e5 a9 28 1f 06 96 e5 3f 44 50 38 c3 ad c0 4e 10 a4 0f fa 4f 9e 3c fc da fe 76 1b 46 ea 6c ee 3e 72 f4 b1 60 03 00 15 26 0f 0d 53 cf c8 56 2a 5a e5 0c 36 61 e7 a3 01 6e ae ce 22 e7 b3 fd 01 50 74 d4 73 3b 5b f5 0a d3 94 cd 61 28 63 f9 5e 79 47 69 e7 a8 2d ba 9a 12 47 da 28 b9 b2 81 73 de 7a c5 e6 Data Ascii: {un.'<Y}_gw{P>&<\|iev0G(C\wCC:yb+q<d)(?DP8NO<vFl>r`&SVZ6an"Pts;[a(c^yGi-G(sz
2024-10-30 07:46:18 UTC	1379	IN	Data Raw: db 8b e4 11 df f0 ce 8b 8b ef 54 3b b6 51 5f 9e e1 fe cf 80 1d 78 8b c5 67 28 3d 21 63 8e 98 12 23 a8 ae dc 9f 60 41 94 12 6b 88 b7 79 b1 73 75 3a ec 03 16 d8 a5 4f a0 2c c0 17 8d 8a 45 3a 81 e1 58 34 b1 36 d4 fc 50 9d 94 08 42 dc 46 92 3d 43 cd b9 8b 64 ac 60 84 2e d1 52 51 d4 79 0a 55 9e eb bb 38 83 98 be be 43 fb 44 e7 a9 fd e7 eb da 7f 8e 55 1a 3b c0 21 51 fb 8a 7e d9 75 02 86 ca ce ea 89 0c ec 51 b7 a0 e8 c0 2b 6d bf c0 73 f1 6e 04 7a fe 1e 84 e0 a3 09 ae dc 39 2f d3 51 1f e8 72 ec df 91 2e df d4 ce 0b 18 76 61 b7 79 89 86 ae 95 0f 10 0e ad c2 d0 0c 01 a1 fb 65 92 de b7 67 92 89 a0 9b 8f 2f 80 d3 9f e3 5c 34 80 ef 06 59 35 ea 77 7a d0 95 43 0a 80 1b 6d 8b 73 84 5d da 2f 50 8d 7d b7 33 f0 b6 96 1d f7 45 10 55 50 af fe 4d 09 f3 de 84 ca 64 ae 41 3f df Data Ascii: T;Q_xg(=!c#`Akysu:O,E:X46PBF=Cd`.RQyU8CDU;!Q~uQ+msnz9/Qr.vayeg/\4Y5wzCms]/P}3EUPMdA?
2024-10-30 07:46:18 UTC	1379	IN	Data Raw: 6d 08 08 59 6f c5 17 57 bc 7b 4f e2 5e d7 db d5 46 1b 1a 41 91 13 30 39 4e 27 3a e5 fd 12 0f 8a d1 79 34 9e 21 c0 ea 93 50 cb 21 df d9 63 02 9b 70 f5 82 11 4f 95 6f 73 f0 29 84 87 51 fe 0b d1 e4 60 26 9e 94 68 1a 9c 31 7a 16 6c 50 f0 3d 3d bc 46 4e 7e 14 05 97 11 3d 12 44 82 9f 42 18 c7 b4 bc 1a 65 ab 1f c3 5f a8 bd 57 b7 d7 a2 1d d8 05 36 47 fe 80 15 f2 1a 56 91 91 03 1b 79 38 ae 9c b2 28 12 d1 2e a6 41 d8 ca db db 40 87 15 42 aa 74 8c 16 60 d2 66 7a 51 cf 44 5f c7 13 83 79 12 f5 a2 2d 83 6c 78 80 3d 08 f6 4f cd 9b 8a 6a a2 43 52 24 b6 0b f9 bb 04 75 93 15 31 bd 4f 76 97 6a a5 ec c6 4a 78 8b 40 6d e1 19 55 ea 57 e0 2a b9 68 17 6e 52 ca 39 ac bc b1 cd 1b 2c e9 7a 80 b6 12 4c 6c 6c 6c 68 01 9b f4 e3 31 b0 39 d0 d7 90 e5 14 4c a0 61 96 e4 b6 7e d1 d8 47 6c Data Ascii: mYoW{O^FA09N':y4!P!cpOos)Q`&h1zlP==FN~=DBe_W6GVy8(.A@Bt`fzQD_y-lx=OjCR$u1OvjJx@mUW*hnR9,zLlllh19La~Gl
2024-10-30 07:46:18 UTC	1379	IN	Data Raw: db 64 b6 5c 03 86 df 00 8c a4 00 46 22 80 81 7f 92 2a 30 06 02 18 43 01 0c 5e 63 a6 09 a6 45 b8 02 ae 82 6e 44 74 05 9f 03 df c5 97 cb 67 91 3d 74 8d 12 23 b2 8a a3 a2 a4 70 a9 ed 53 33 4d 83 08 36 fc 0c e8 ab bf f1 29 b4 53 74 b6 a1 a6 51 02 51 31 84 fc 34 48 8d 58 0c 04 30 15 e2 64 95 04 a9 1f c9 0d 89 0e 82 e2 e7 e6 e6 5a 97 d2 08 af db 27 f3 13 ea d5 22 7f d5 92 17 6e 0b 8a 1b 1c 3a 12 24 a5 a9 72 64 48 80 9d 13 f1 81 1c 3f dc dc 04 44 e1 18 ca 02 16 ea 05 60 da 06 92 f3 94 ec 10 80 17 46 d3 b5 67 42 6b 6d 3b 18 57 66 9e 4d 71 40 6c c0 44 17 40 a5 61 0a a4 0a 61 e6 1f 23 16 ce 67 ae 3b 10 22 48 1d c9 78 6d d3 99 94 43 e3 9e 16 44 58 7c 55 3a 07 2c b4 32 c3 83 06 1d d2 c5 7b 34 ef e5 bd c8 9e 3a de 71 dd 48 cf 7a f6 e6 95 8c 24 f2 12 3e e5 b1 65 3a 6c Data Ascii: d\F"*0C^cEnDtg=t#pS3M6)StQQ14HX0dZ'"n:$rdH?D`FgBkm;WfMq@lD@aa#g;"HxmCDX\|U:,2{4:qHz$>e:l
2024-10-30 07:46:18 UTC	1379	IN	Data Raw: d7 58 29 2c dd 88 96 c0 aa c3 56 d3 86 c8 6f bb eb bd b8 ef 4d 2f 36 3b 29 33 0a 06 f7 58 3e 1c ac 7a c4 45 8b b2 50 c8 43 01 5f 57 11 cf 9c 0b 85 19 d0 97 71 93 6c 1e b4 6e 99 8e 09 82 a6 d9 6c c4 2a a4 0c 85 3f 14 5b b7 72 fa ae 3b ea ac 82 89 b5 8a 39 10 63 de 00 e5 a8 27 51 53 29 f6 29 cc 25 dd d8 22 0f 53 b0 39 05 f3 e2 57 e2 6a d3 21 24 18 f9 9c e7 f3 86 4e cc e9 4a d3 ac 8a fe 3c 36 6e 9b 75 9f fa 22 a7 40 61 d9 07 a1 70 01 94 fc ce 50 91 ab 6c e1 62 69 d8 a0 36 e5 4e 78 82 15 47 d9 22 5f 8b 2b 2d d1 d8 4d c8 82 ef 0b 64 c9 45 13 f9 17 71 30 44 36 1b 16 08 51 90 36 b6 1c 15 82 f6 24 84 73 9c bc d8 e1 e8 c6 f4 ac f0 07 fd 09 e1 4f cc c3 05 4c c2 22 8b 7c ab ef ce c8 90 da 6e b6 d1 53 4b da bd 9b 89 5e d7 34 d1 03 24 43 03 cc 2f 35 ef eb fa 4f 0b f3 Data Ascii: X),VoM/6;)3X>zEPC_Wqlnl*?[r;9c'QS))%"S9Wj!$NJ<6nu"@apPlbi6NxG"_+-MdEq0D6Q6$sOL"\|nSK^4$C/5O
2024-10-30 07:46:18 UTC	1379	IN	Data Raw: 3c 3a 11 13 ca 53 24 6c 5f 84 67 24 f2 d3 2e af 52 3b 5c cc 89 8a 81 5c 08 a7 25 6c 00 24 61 46 c0 de 95 cb 4b c7 64 02 50 ef c1 b8 69 65 f0 1c ed 18 f3 75 3f 30 fb 3d 7a 6b 93 8c 68 5b e2 46 be ad 6b b4 47 82 db 40 97 f5 28 9b c5 6d 8c 22 2a 29 ab e1 ab 5d 31 96 7c 8f a6 c0 9e 0d 6d 63 d0 3a a3 f9 03 ba 54 8f c9 db 68 6d 1f 9d b6 b9 20 45 27 d8 aa 62 7e df af dc 24 6e b8 69 50 73 d4 d9 eb 30 e3 57 91 de 20 f8 81 f2 1b 74 1f 97 93 65 28 5d c5 ca fd 6d 9d eb 9a 73 5d 95 4d 75 38 9e e0 b4 5f 92 2e b3 46 61 42 a8 3f 48 3a f0 ed 4a 03 e5 47 cc 4e e4 88 cc 44 51 53 34 6a 66 7c 69 fc be 21 45 07 db 08 e8 b2 4b 4b 3d 42 c3 bf 6e 90 34 c6 8a 15 48 a9 ff c5 04 05 20 d4 34 0a b7 d5 22 ad 5c cd d7 48 c6 1f c6 70 c9 c2 95 36 24 1f da 18 73 70 17 c2 7f d2 c7 dc 4b 32 Data Ascii: <:S$l_g$.R;\\%l$aFKdPieu?0=zkh[FkG@(m"*)]1\|mc:Thm E'b~$niPs0W te(]ms]Mu8_.FaB?H:JGNDQS4jf\|i!EKK=Bn4H 4"\Hp6$spK2
2024-10-30 07:46:18 UTC	1379	IN	Data Raw: 34 38 ae 36 28 42 6e 16 54 ff 07 f2 65 d1 03 96 29 c5 ce 51 95 8a bf c5 e9 e3 08 d1 74 a3 2b 6c e7 2f ed 4a 2e 0c 39 45 b7 4d d6 e4 40 d1 d9 5c 95 a1 6a 85 b5 45 35 99 1d 89 4d 62 12 84 92 11 4f 63 78 0b 14 47 aa 5e d6 eb 43 c8 7c c0 3a 66 29 cf 61 fe b0 15 a5 8a da 42 77 05 91 1d 2b 74 28 38 cd 59 4c 81 6a 04 57 1d 6a e8 8b 89 f8 2d 8a 19 53 2e c4 00 96 b9 c4 bf e2 9d 82 02 be 55 bf 1d fd 3a 88 dd 90 22 35 88 5d 82 c7 71 60 a4 04 98 67 47 c7 6f 54 88 34 cc 84 07 98 50 c1 6c b1 3f 0a 18 37 56 80 6d b2 b9 39 41 5f 39 61 23 0e bb 4f 0e c0 8b dd 72 f7 de ba ee 01 b7 85 2a 04 04 01 46 e1 58 4b b3 bf b1 df 18 d3 86 94 91 ff 1e 9a bb d2 65 58 11 c4 7d 46 cf f1 81 9a 08 c5 92 77 87 65 5e 49 e8 51 d6 82 b4 79 1b 9c 21 a4 68 59 8e d1 84 17 17 05 ef 38 e4 5e 68 9d Data Ascii: 486(BnTe)Qt+l/J.9EM@\jE5MbOcxG^C\|:f)aBw+t(8YLjWj-S.U:"5]q`gGoT4Pl?7Vm9A_9a#Or*FXKeX}Fwe^IQy!hY8^h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49745	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:19 UTC	900	OUT	GET /a/etc.clientlibs/ace/clientlibs/clientlib-pos.lc-7cbb91b972378ab814dfaf40d82939a8-lc.min.js HTTP/1.1 Host: all.accor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://all.accor.com/a/en/new-app-offer.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==
2024-10-30 07:46:19 UTC	701	IN	HTTP/1.1 200 OK Age: 528544 cache-control: max-age=2592000, public, immutable Content-Type: application/javascript;charset=utf-8 Date: Wed, 30 Oct 2024 07:46:19 GMT Etag: W/"89b-2386f26fb1bdc0-gzip" Last-Modified: Thu, 24 Oct 2024 04:57:15 GMT Server: ECAcc (lhd/370E) Strict-Transport-Security: max-age=31557600 Vary: Accept-Encoding X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Content-Type-Options: nosniff x-frame-options: SAMEORIGIN X-Iinfo: 2-189763-189764 NNNY CT(16 15 0) RT(1730113278173 5) q(0 0 0 1) r(0 1) U24 X-Served-By: cache-fra-etou8220072-FRA X-Timer: S1730113278.406153,VS0,VS0,VE3 x-vhost: prod-allcom-publish Content-Length: 2203 Connection: close
2024-10-30 07:46:19 UTC	2203	IN	Data Raw: 0a 63 6f 6e 73 74 20 4e 4f 4e 5f 50 4f 53 5f 57 45 42 53 49 54 45 20 3d 20 5b 27 6d 61 6e 74 72 61 27 5d 3b 0a 63 6f 6e 73 74 20 75 72 6c 20 3d 20 27 2f 63 6f 6e 74 65 6e 74 2f 73 6c 69 6e 67 2f 73 65 72 76 6c 65 74 73 2f 61 63 65 2f 67 65 74 70 6f 73 63 6f 6f 6b 69 65 73 27 3b 0a 0a 2f 2a 46 75 6e 63 74 69 6f 6e 20 74 6f 20 64 65 63 6f 64 65 20 74 68 65 20 63 6f 6f 6b 69 65 20 2a 2f 0a 66 75 6e 63 74 69 6f 6e 20 67 65 74 43 6f 6f 6b 69 65 28 61 70 70 63 6e 61 6d 65 29 20 7b 0a 20 20 20 20 6c 65 74 20 6d 61 74 63 68 65 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 6d 61 74 63 68 28 6e 65 77 20 52 65 67 45 78 70 28 0a 20 20 20 20 20 20 20 20 22 28 3f 3a 5e 7c 3b 20 29 22 20 2b 20 61 70 70 63 6e 61 6d 65 2e 72 65 70 6c 61 63 65 28 2f 28 5b 5c Data Ascii: const NON_POS_WEBSITE = ['mantra'];const url = '/content/sling/servlets/ace/getposcookies';/Function to decode the cookie /function getCookie(appcname) { let matches = document.cookie.match(new RegExp( "(?:^\|; )" + appcname.replace(/([\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49743	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:19 UTC	909	OUT	GET /a/etc.clientlibs/ace/clientlibs-modules/clientlib-core.lc-63e399c5722b54df72093811820263e0-lc.min.js HTTP/1.1 Host: all.accor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://all.accor.com/a/en/new-app-offer.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==
2024-10-30 07:46:19 UTC	697	IN	HTTP/1.1 200 OK Age: 505794 cache-control: max-age=2592000, public, immutable Content-Type: application/javascript;charset=utf-8 Date: Wed, 30 Oct 2024 07:46:19 GMT Etag: W/"39b6-2386f26fb1bdc0-gzip" Last-Modified: Thu, 24 Oct 2024 11:16:25 GMT Server: ECAcc (lhd/35E3) Strict-Transport-Security: max-age=31557600 Vary: Accept-Encoding X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Content-Type-Options: nosniff x-frame-options: SAMEORIGIN X-Iinfo: 5-26900837-26900838 SNNN RT(1730113252242 698) q(0 0 0 0) r(0 0) U24 X-Served-By: cache-fra-etou8220118-FRA X-Timer: S1730113253.248964,VS0,VS0,VE1 x-vhost: prod-allcom-publish Content-Length: 14774 Connection: close
2024-10-30 07:46:19 UTC	14774	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 74 28 65 78 70 6f 72 74 73 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 5d 2c 74 29 3a 74 28 28 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 65 7c 7c 73 65 6c 66 29 2e 43 6f 72 65 4a 53 3d 7b 7d 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 74 3d 22 72 65 67 69 73 74 65 72 Data Ascii: !function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports):"function"==typeof define&&define.amd?define(["exports"],t):t((e="undefined"!=typeof globalThis?globalThis:e\|\|self).CoreJS={})}(this,(function(e){"use strict";const t="register

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49741	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:19 UTC	964	OUT	GET /a/etc.clientlibs/ace/components/structure/base-page/clientlib-one-trust/one-trust.lc-91acfe7ca172af47f628e88402176079-lc.min.js HTTP/1.1 Host: all.accor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://all.accor.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://all.accor.com/a/en/new-app-offer.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==
2024-10-30 07:46:19 UTC	703	IN	HTTP/1.1 200 OK Age: 505817 cache-control: max-age=2592000, public, immutable Content-Type: application/javascript;charset=utf-8 Date: Wed, 30 Oct 2024 07:46:19 GMT Etag: W/"38a-2386f26fb1bdc0-gzip" Last-Modified: Thu, 24 Oct 2024 11:16:02 GMT Server: ECAcc (lhd/35FA) Strict-Transport-Security: max-age=31557600 Vary: Accept-Encoding X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Content-Type-Options: nosniff x-frame-options: SAMEORIGIN X-Iinfo: 14-7991698-7991700 NNNY CT(14 17 0) RT(1730113278186 7) q(0 1 1 0) r(1 1) U24 X-Served-By: cache-fra-etou8220054-FRA X-Timer: S1730113278.406982,VS0,VS0,VE2 x-vhost: prod-allcom-publish Content-Length: 906 Connection: close
2024-10-30 07:46:19 UTC	906	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 63 68 65 63 6b 50 6c 61 74 66 6f 72 6d 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 61 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 3b 72 65 74 75 72 6e 2d 31 3c 61 2e 69 6e 64 65 78 4f 66 28 22 70 6c 61 74 66 6f 72 6d 5c 78 33 64 41 50 50 2d 49 50 48 4f 4e 45 22 29 7c 7c 2d 31 3c 61 2e 69 6e 64 65 78 4f 66 28 22 70 6c 61 74 66 6f 72 6d 5c 78 33 64 41 50 50 2d 41 4e 44 52 4f 49 44 22 29 3f 21 30 3a 21 31 7d 69 66 28 2f 41 50 50 2d 28 49 50 48 4f 4e 45 7c 41 4e 44 52 4f 49 44 29 2f 2e 74 65 73 74 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 28 22 3b 20 22 2b 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 29 2e 73 70 6c 69 74 28 22 3b 20 22 2b 61 2b 22 5c 78 33 64 22 29 3b 69 66 28 32 3d 3d 3d Data Ascii: function checkPlatform(){function c(){var a=window.location.search;return-1<a.indexOf("platform\x3dAPP-IPHONE")\|\|-1<a.indexOf("platform\x3dAPP-ANDROID")?!0:!1}if(/APP-(IPHONE\|ANDROID)/.test(function(a){a=("; "+document.cookie).split("; "+a+"\x3d");if(2===

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49756	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:19 UTC	897	OUT	GET /a/etc.clientlibs/ace/clientlibs/uc-webview.lc-44cb9ce2e83ba56026a41fce0a867816-lc.min.js HTTP/1.1 Host: all.accor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://all.accor.com/a/en/new-app-offer.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==
2024-10-30 07:46:19 UTC	707	IN	HTTP/1.1 200 OK Age: 524967 cache-control: max-age=2592000, public, immutable Content-Type: application/javascript;charset=utf-8 Date: Wed, 30 Oct 2024 07:46:19 GMT Etag: W/"392-2386f26fb1bdc0-gzip" Last-Modified: Thu, 24 Oct 2024 05:56:52 GMT Server: ECAcc (lhd/35C7) Strict-Transport-Security: max-age=31557600 Vary: Accept-Encoding X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Content-Type-Options: nosniff x-frame-options: SAMEORIGIN X-Iinfo: 15-118690090-118690091 NNNN CT(14 19 0) RT(1730113277428 3) q(0 0 0 0) r(0 0) U24 X-Served-By: cache-fra-etou8220057-FRA X-Timer: S1730113278.440453,VS0,VS0,VE3 x-vhost: prod-allcom-publish Content-Length: 914 Connection: close
2024-10-30 07:46:19 UTC	914	IN	Data Raw: 0a 2f 2a 46 75 6e 63 74 69 6f 6e 20 74 6f 20 64 65 63 6f 64 65 20 74 68 65 20 63 6f 6f 6b 69 65 20 2a 2f 0a 66 75 6e 63 74 69 6f 6e 20 67 65 74 43 6f 6f 6b 69 65 28 61 70 70 63 6e 61 6d 65 29 20 7b 0a 20 20 20 20 6c 65 74 20 6d 61 74 63 68 65 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 6d 61 74 63 68 28 6e 65 77 20 52 65 67 45 78 70 28 0a 20 20 20 20 20 20 20 20 22 28 3f 3a 5e 7c 3b 20 29 22 20 2b 20 61 70 70 63 6e 61 6d 65 2e 72 65 70 6c 61 63 65 28 2f 28 5b 5c 2e 24 3f 2a 7c 7b 7d 5c 28 5c 29 5c 5b 5c 5d 5c 5c 5c 2f 5c 2b 5e 5d 29 2f 67 2c 20 27 5c 5c 24 31 27 29 20 2b 20 22 3d 28 5b 5e 3b 5d 2a 29 22 0a 20 20 20 20 29 29 3b 0a 20 20 20 20 72 65 74 75 72 6e 20 6d 61 74 63 68 65 73 20 3f 20 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 Data Ascii: /Function to decode the cookie /function getCookie(appcname) { let matches = document.cookie.match(new RegExp( "(?:^\|; )" + appcname.replace(/([\.$?\|{}\[\]\\\/\+^])/g, '\\$1') + "=([^;])" )); return matches ? decodeURICompone

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49746	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:19 UTC	889	OUT	GET /a/etc/cloudsettings.kernel.js/conf/all/settings/cloudsettings/default/contexthub HTTP/1.1 Host: all.accor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://all.accor.com/a/en/new-app-offer.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==
2024-10-30 07:46:19 UTC	812	IN	HTTP/1.1 200 OK Age: 164181 cache-control: max-age=864000, stale-if-error=3600, stale-while-revalidate=3600 Content-Type: application/javascript; charset=utf-8 Date: Wed, 30 Oct 2024 07:46:19 GMT Etag: "4072373aaeec72ecb1cfd1006ed76265d6e36ca4-gzip+ident" Last-Modified: Mon, 28 Oct 2024 11:00:52 GMT Server: ECAcc (lhd/3729) Strict-Transport-Security: max-age=31557600 Vary: Accept-Encoding X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Content-Type-Options: nosniff x-frame-options: SAMEORIGIN x-frame-options: SAMEORIGIN X-Iinfo: 16-16239761-16239763 NNNY CT(15 16 0) RT(1730113252346 4) q(0 0 0 11) r(0 0) U24 X-Served-By: cache-fra-etou8220122-FRA x-sky-isauth: 0 X-Timer: S1730113253.576660,VS0,VS0,VE3 x-vhost: prod-allcom-publish Content-Length: 329309 Connection: close
2024-10-30 07:46:19 UTC	16383	IN	Data Raw: 2f 2a 0a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 33 2e 35 2e 31 0a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 0a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 68 74 74 70 73 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 0a 20 44 61 74 65 3a 20 32 30 32 30 2d 30 35 2d 30 34 54 32 32 3a 34 39 5a 0a 20 53 69 7a 7a 6c 65 20 43 53 53 20 53 65 6c 65 63 74 Data Ascii: /* jQuery JavaScript Library v3.5.1 https://jquery.com/ Includes Sizzle.js https://sizzlejs.com/ Copyright JS Foundation and other contributors Released under the MIT license https://jquery.org/license Date: 2020-05-04T22:49Z Sizzle CSS Select
2024-10-30 07:46:19 UTC	16383	IN	Data Raw: 72 20 47 3d 64 28 62 5b 76 5d 2c 76 2c 6e 29 3b 6e 75 6c 6c 21 3d 47 26 26 7a 2e 70 75 73 68 28 47 29 7d 65 6c 73 65 20 66 6f 72 28 76 20 69 6e 20 62 29 47 3d 64 28 62 5b 76 5d 2c 76 2c 6e 29 2c 6e 75 6c 6c 21 3d 47 26 26 7a 2e 70 75 73 68 28 47 29 3b 72 65 74 75 72 6e 20 69 64 28 7a 29 7d 2c 67 75 69 64 3a 31 2c 73 75 70 70 6f 72 74 3a 4b 61 7d 29 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 28 71 2e 66 6e 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 7a 62 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 29 3b 71 2e 65 61 63 68 28 22 42 6f 6f 6c 65 61 6e 20 4e 75 6d 62 65 72 20 53 74 72 69 6e 67 20 46 75 6e 63 74 69 6f 6e 20 41 72 72 61 79 20 44 61 74 65 20 52 65 67 45 78 70 20 4f 62 6a 65 63 74 20 45 Data Ascii: r G=d(b[v],v,n);null!=G&&z.push(G)}else for(v in b)G=d(b[v],v,n),null!=G&&z.push(G);return id(z)},guid:1,support:Ka});"function"===typeof Symbol&&(q.fn[Symbol.iterator]=zb[Symbol.iterator]);q.each("Boolean Number String Function Array Date RegExp Object E
2024-10-30 07:46:19 UTC	2	IN	Data Raw: 31 29 Data Ascii: 1)
2024-10-30 07:46:19 UTC	16383	IN	Data Raw: 3a 32 2a 28 22 65 76 65 6e 22 3d 3d 3d 42 5b 33 5d 7c 7c 22 6f 64 64 22 3d 3d 3d 42 5b 33 5d 29 29 2c 42 5b 35 5d 3d 2b 28 42 5b 37 5d 2b 42 5b 38 5d 7c 7c 22 6f 64 64 22 3d 3d 3d 42 5b 33 5d 29 29 3a 42 5b 33 5d 26 26 64 2e 65 72 72 6f 72 28 42 5b 30 5d 29 3b 72 65 74 75 72 6e 20 42 7d 2c 50 53 45 55 44 4f 3a 66 75 6e 63 74 69 6f 6e 28 42 29 7b 76 61 72 20 4c 2c 4a 3d 21 42 5b 36 5d 26 26 42 5b 32 5d 3b 69 66 28 48 63 2e 43 48 49 4c 44 2e 74 65 73 74 28 42 5b 30 5d 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 42 5b 33 5d 3f 42 5b 32 5d 3d 42 5b 34 5d 7c 7c 42 5b 35 5d 7c 7c 22 22 3a 4a 26 26 71 64 2e 74 65 73 74 28 4a 29 26 26 0a 28 4c 3d 47 63 28 4a 2c 21 30 29 29 26 26 28 4c 3d 4a 2e 69 6e 64 65 78 4f 66 28 22 29 22 2c 4a 2e 6c 65 6e 67 74 68 2d 4c 29 2d Data Ascii: :2*("even"===B[3]\|\|"odd"===B[3])),B[5]=+(B[7]+B[8]\|\|"odd"===B[3])):B[3]&&d.error(B[0]);return B},PSEUDO:function(B){var L,J=!B[6]&&B[2];if(Hc.CHILD.test(B[0]))return null;B[3]?B[2]=B[4]\|\|B[5]\|\|"":J&&qd.test(J)&&(L=Gc(J,!0))&&(L=J.indexOf(")",J.length-L)-
2024-10-30 07:46:19 UTC	16383	IN	Data Raw: 6f 6e 28 62 2c 64 29 7b 75 61 2e 72 65 6d 6f 76 65 28 62 2c 64 29 7d 7d 29 3b 71 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 64 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 64 29 7b 76 61 72 20 6e 2c 70 3d 74 68 69 73 5b 30 5d 2c 76 3d 70 26 26 70 2e 61 74 74 72 69 62 75 74 65 73 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 62 29 7b 69 66 28 74 68 69 73 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 7a 3d 68 62 2e 67 65 74 28 70 29 3b 69 66 28 31 3d 3d 3d 70 2e 6e 6f 64 65 54 79 70 65 26 26 0a 21 75 61 2e 67 65 74 28 70 2c 22 68 61 73 44 61 74 61 41 74 74 72 73 22 29 29 7b 66 6f 72 28 6e 3d 76 2e 6c 65 6e 67 74 68 3b 6e 2d 2d 3b 29 69 66 28 76 5b 6e 5d 29 7b 76 61 72 20 47 3d 76 5b 6e 5d 2e 6e 61 6d 65 3b 30 3d 3d 3d 47 2e 69 6e 64 65 78 4f 66 28 22 64 61 74 61 2d 22 29 26 26 Data Ascii: on(b,d){ua.remove(b,d)}});q.fn.extend({data:function(b,d){var n,p=this[0],v=p&&p.attributes;if(void 0===b){if(this.length){var z=hb.get(p);if(1===p.nodeType&&!ua.get(p,"hasDataAttrs")){for(n=v.length;n--;)if(v[n]){var G=v[n].name;0===G.indexOf("data-")&&
2024-10-30 07:46:19 UTC	16383	IN	Data Raw: 28 51 7c 7c 76 29 26 26 22 62 6f 72 64 65 72 2d 62 6f 78 22 3d 3d 3d 71 2e 63 73 73 28 6e 2c 22 62 6f 78 53 69 7a 69 6e 67 22 2c 21 31 2c 47 29 3b 76 3d 76 3f 72 62 28 6e 2c 64 2c 76 2c 4b 2c 47 29 3a 30 3b 4b 26 26 51 26 26 28 76 2d 3d 4d 61 74 68 2e 63 65 69 6c 28 6e 5b 22 6f 66 66 73 65 74 22 2b 64 5b 30 5d 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2b 0a 64 2e 73 6c 69 63 65 28 31 29 5d 2d 70 61 72 73 65 46 6c 6f 61 74 28 47 5b 64 5d 29 2d 72 62 28 6e 2c 64 2c 22 62 6f 72 64 65 72 22 2c 21 31 2c 47 29 2d 2e 35 29 29 3b 76 26 26 28 7a 3d 67 63 2e 65 78 65 63 28 70 29 29 26 26 22 70 78 22 21 3d 3d 28 7a 5b 33 5d 7c 7c 22 70 78 22 29 26 26 28 6e 2e 73 74 79 6c 65 5b 64 5d 3d 70 2c 70 3d 71 2e 63 73 73 28 6e 2c 64 29 29 3b 72 65 74 75 72 6e 20 55 61 28 6e Data Ascii: (Q\|\|v)&&"border-box"===q.css(n,"boxSizing",!1,G);v=v?rb(n,d,v,K,G):0;K&&Q&&(v-=Math.ceil(n["offset"+d[0].toUpperCase()+d.slice(1)]-parseFloat(G[d])-rb(n,d,"border",!1,G)-.5));v&&(z=gc.exec(p))&&"px"!==(z[3]\|\|"px")&&(n.style[d]=p,p=q.css(n,d));return Ua(n
2024-10-30 07:46:19 UTC	16383	IN	Data Raw: 74 69 6f 6e 20 6e 28 61 61 2c 74 61 2c 76 61 2c 72 61 29 7b 76 61 72 20 4d 61 2c 46 61 3d 74 61 3b 69 66 28 21 5a 29 7b 5a 3d 21 30 3b 47 26 26 6d 2e 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 47 29 3b 70 3d 76 6f 69 64 20 30 3b 76 3d 72 61 7c 7c 22 22 3b 4e 2e 72 65 61 64 79 53 74 61 74 65 3d 30 3c 61 61 3f 34 3a 30 3b 72 61 3d 32 30 30 3c 3d 61 61 26 26 33 30 30 3e 61 61 7c 7c 33 30 34 3d 3d 3d 61 61 3b 76 61 26 26 28 4d 61 3d 50 62 28 61 2c 4e 2c 76 61 29 29 3b 21 72 61 26 26 0a 2d 31 3c 71 2e 69 6e 41 72 72 61 79 28 22 73 63 72 69 70 74 22 2c 61 2e 64 61 74 61 54 79 70 65 73 29 26 26 28 61 2e 63 6f 6e 76 65 72 74 65 72 73 5b 22 74 65 78 74 20 73 63 72 69 70 74 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 3b 4d 61 3d 6d 64 28 61 2c 4d 61 2c 4e 2c 72 61 Data Ascii: tion n(aa,ta,va,ra){var Ma,Fa=ta;if(!Z){Z=!0;G&&m.clearTimeout(G);p=void 0;v=ra\|\|"";N.readyState=0<aa?4:0;ra=200<=aa&&300>aa\|\|304===aa;va&&(Ma=Pb(a,N,va));!ra&&-1<q.inArray("script",a.dataTypes)&&(a.converters["text script"]=function(){});Ma=md(a,Ma,N,ra
2024-10-30 07:46:20 UTC	16383	IN	Data Raw: 6f 72 65 73 2d 70 61 72 74 69 61 6c 6c 79 2d 72 65 61 64 79 22 2c 45 56 45 4e 54 5f 53 54 4f 52 45 5f 52 45 47 49 53 54 45 52 45 44 3a 22 73 74 6f 72 65 2d 72 65 67 69 73 74 65 72 65 64 22 2c 45 56 45 4e 54 5f 53 54 4f 52 45 5f 52 45 41 44 59 3a 22 73 74 6f 72 65 2d 72 65 61 64 79 22 2c 45 56 45 4e 54 5f 53 54 4f 52 45 5f 55 50 44 41 54 45 44 3a 22 73 74 6f 72 65 2d 75 70 64 61 74 65 64 22 2c 50 45 52 53 49 53 54 45 4e 43 45 5f 43 4f 4e 54 41 49 4e 45 52 5f 4e 41 4d 45 3a 22 43 6f 6e 74 65 78 74 48 75 62 50 65 72 73 69 73 74 65 6e 63 65 22 2c 53 45 52 56 49 43 45 5f 52 41 57 5f 52 45 53 50 4f 4e 53 45 5f 4b 45 59 3a 22 2f 5f 2f 72 61 77 2d 72 65 73 70 6f 6e 73 65 22 2c 53 45 52 56 49 43 45 5f 52 45 53 50 4f 4e 53 45 5f 54 49 4d 45 5f 4b 45 59 3a 22 2f 5f Data Ascii: ores-partially-ready",EVENT_STORE_REGISTERED:"store-registered",EVENT_STORE_READY:"store-ready",EVENT_STORE_UPDATED:"store-updated",PERSISTENCE_CONTAINER_NAME:"ContextHubPersistence",SERVICE_RAW_RESPONSE_KEY:"/_/raw-response",SERVICE_RESPONSE_TIME_KEY:"/_
2024-10-30 07:46:20 UTC	5	IN	Data Raw: 78 29 7b 76 61 Data Ascii: x){va
2024-10-30 07:46:20 UTC	16383	IN	Data Raw: 72 20 48 3d 78 2e 63 6f 6e 74 61 69 6e 65 72 2c 49 3d 78 2e 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 3b 72 65 74 75 72 6e 20 41 2e 63 61 6c 6c 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 4f 29 7b 4f 3d 43 6f 6e 74 65 78 74 48 75 62 2e 55 74 69 6c 73 2e 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 4f 29 3b 49 2e 73 65 74 49 74 65 6d 28 48 2c 4f 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 4f 3d 49 2e 67 65 74 49 74 65 6d 28 48 29 3b 4f 3d 43 6f 6e 74 65 78 74 48 75 62 2e 55 74 69 6c 73 2e 4a 53 4f 4e 2e 70 61 72 73 65 28 4f 29 3b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 3d 6d 2e 74 79 70 65 28 4f 29 3f 4f 3a 7b 7d 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 78 3d 22 63 6f 6e 74 65 78 74 68 75 62 2e 74 65 Data Ascii: r H=x.container,I=x.window.sessionStorage;return A.call(this,function(O){O=ContextHub.Utils.JSON.stringify(O);I.setItem(H,O)},function(){var O=I.getItem(H);O=ContextHub.Utils.JSON.parse(O);return"object"===m.type(O)?O:{}})},function(){var x="contexthub.te

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49742	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:19 UTC	957	OUT	GET /a/etc.clientlibs/ace/clientlibs-modules/components/clientlib-login-connect.lc-1f5662ce4b387990f20cf119603729fb-lc.min.js HTTP/1.1 Host: all.accor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://all.accor.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://all.accor.com/a/en/new-app-offer.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==
2024-10-30 07:46:19 UTC	707	IN	HTTP/1.1 200 OK Age: 167285 cache-control: max-age=2592000, public, immutable Content-Type: application/javascript;charset=utf-8 Date: Wed, 30 Oct 2024 07:46:19 GMT Etag: W/"52202-2386f26fb1bdc0-gzip" Last-Modified: Mon, 28 Oct 2024 09:18:14 GMT Server: ECAcc (lhd/35EA) Strict-Transport-Security: max-age=31557600 Vary: Accept-Encoding X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Content-Type-Options: nosniff x-frame-options: SAMEORIGIN X-Iinfo: 8-3990449-3990450 NNNY CT(15 16 0) RT(1730113252346 5) q(0 0 0 1) r(0 0) U24 X-Served-By: cache-fra-etou8220111-FRA X-Timer: S1730113253.571644,VS0,VS0,VE2 x-vhost: prod-allcom-publish Content-Length: 336386 Connection: close
2024-10-30 07:46:19 UTC	16383	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 43 72 65 61 74 65 73 20 63 6f 6f 6b 69 65 20 66 6f 72 20 6c 6f 67 69 6e 20 63 6f 6d 70 6f 6e 65 6e 74 20 69 6e 20 41 45 4d 20 61 6e 64 0a 20 2a 20 20 6c 6f 61 64 69 6e 67 20 62 65 66 6f 72 65 20 63 75 73 74 6f 6d 65 72 20 61 70 69 20 74 6f 20 62 65 20 61 62 6c 65 20 74 6f 20 63 6f 6e 6e 65 63 74 20 77 69 74 68 20 74 65 73 74 20 65 6e 76 73 0a 20 2a 2f 0a 66 75 6e 63 74 69 6f 6e 20 63 72 65 61 74 65 43 75 73 74 6f 6d 65 72 45 6e 76 43 6f 6f 6b 69 65 28 29 20 7b 0a 20 20 20 20 63 6f 6e 73 74 20 41 65 6d 44 6f 6d 61 69 6e 73 4c 69 73 74 20 3d 20 2f 5e 28 3f 3a 62 75 69 6c 64 7c 62 75 69 6c 64 71 61 7c 72 75 6e 7c 72 75 6e 71 61 7c 75 61 74 29 28 3f 3a 2d 28 2e 2a 29 29 28 3f 3a 2e 61 63 63 6f 72 29 5c 2e 28 3f 3a 63 6f 6d 29 24 2f 67 6d Data Ascii: /** * Creates cookie for login component in AEM and * loading before customer api to be able to connect with test envs /function createCustomerEnvCookie() { const AemDomainsList = /^(?:build\|buildqa\|run\|runqa\|uat)(?:-(.))(?:.accor)\.(?:com)$/gm
2024-10-30 07:46:19 UTC	16383	IN	Data Raw: 6f 72 3b 72 65 74 75 72 6e 20 72 3d 3d 3d 76 6f 69 64 20 30 7c 7c 28 6e 3d 6d 28 72 29 5b 6f 5d 29 3d 3d 6e 75 6c 6c 3f 74 3a 62 28 6e 29 7d 7d 2c 34 39 33 30 3a 66 75 6e 63 74 69 6f 6e 28 45 2c 49 2c 6c 29 7b 76 61 72 20 6d 3d 6c 28 22 32 64 30 30 22 29 2c 62 3d 6c 28 22 64 30 33 39 22 29 3b 45 2e 65 78 70 6f 72 74 73 3d 21 21 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 26 26 21 62 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 43 3d 53 79 6d 62 6f 6c 28 29 3b 72 65 74 75 72 6e 21 53 74 72 69 6e 67 28 43 29 7c 7c 21 28 4f 62 6a 65 63 74 28 43 29 69 6e 73 74 61 6e 63 65 6f 66 20 53 79 6d 62 6f 6c 29 7c 7c 21 53 79 6d 62 6f 6c 2e 73 68 61 6d 26 26 6d 26 26 6d 3c 34 31 7d 29 7d 2c 22 34 39 39 65 22 3a 66 75 6e 63 74 Data Ascii: or;return r===void 0\|\|(n=m(r)[o])==null?t:b(n)}},4930:function(E,I,l){var m=l("2d00"),b=l("d039");E.exports=!!Object.getOwnPropertySymbols&&!b(function(){var C=Symbol();return!String(C)\|\|!(Object(C)instanceof Symbol)\|\|!Symbol.sham&&m&&m<41})},"499e":funct
2024-10-30 07:46:19 UTC	2	IN	Data Raw: 28 22 Data Ascii: ("
2024-10-30 07:46:19 UTC	16383	IN	Data Raw: 61 36 34 30 22 29 2c 69 3d 5b 5d 2e 6a 6f 69 6e 2c 74 3d 62 21 3d 4f 62 6a 65 63 74 2c 6e 3d 6f 28 22 6a 6f 69 6e 22 2c 22 2c 22 29 3b 6d 28 7b 74 61 72 67 65 74 3a 22 41 72 72 61 79 22 2c 70 72 6f 74 6f 3a 21 30 2c 66 6f 72 63 65 64 3a 74 7c 7c 21 6e 7d 2c 7b 6a 6f 69 6e 3a 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 69 2e 63 61 6c 6c 28 43 28 74 68 69 73 29 2c 72 3d 3d 3d 76 6f 69 64 20 30 3f 22 2c 22 3a 72 29 7d 7d 29 7d 2c 61 34 64 33 3a 66 75 6e 63 74 69 6f 6e 28 45 2c 49 2c 6c 29 7b 76 61 72 20 6d 3d 6c 28 22 32 33 65 37 22 29 2c 62 3d 6c 28 22 64 61 38 34 22 29 2c 43 3d 6c 28 22 64 30 36 36 22 29 2c 6f 3d 6c 28 22 63 34 33 30 22 29 2c 69 3d 6c 28 22 38 33 61 62 22 29 2c 74 3d 6c 28 22 34 39 33 30 22 29 2c 6e 3d 6c 28 22 66 64 62 66 22 Data Ascii: a640"),i=[].join,t=b!=Object,n=o("join",",");m({target:"Array",proto:!0,forced:t\|\|!n},{join:function(r){return i.call(C(this),r===void 0?",":r)}})},a4d3:function(E,I,l){var m=l("23e7"),b=l("da84"),C=l("d066"),o=l("c430"),i=l("83ab"),t=l("4930"),n=l("fdbf"
2024-10-30 07:46:19 UTC	16383	IN	Data Raw: 22 32 33 65 37 22 29 2c 62 3d 6c 28 22 38 33 61 62 22 29 2c 43 3d 6c 28 22 35 36 65 66 22 29 2c 6f 3d 6c 28 22 66 63 36 61 22 29 2c 69 3d 6c 28 22 30 36 63 66 22 29 2c 74 3d 6c 28 22 38 34 31 38 22 29 3b 6d 28 7b 74 61 72 67 65 74 3a 22 4f 62 6a 65 63 74 22 2c 73 74 61 74 3a 21 30 2c 73 68 61 6d 3a 21 62 7d 2c 7b 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 6f 72 28 76 61 72 20 72 2c 65 2c 61 3d 6f 28 6e 29 2c 73 3d 69 2e 66 2c 75 3d 43 28 61 29 2c 63 3d 7b 7d 2c 66 3d 30 3b 75 2e 6c 65 6e 67 74 68 3e 66 3b 29 65 3d 73 28 61 2c 72 3d 75 5b 66 2b 2b 5d 29 2c 65 21 3d 3d 76 6f 69 64 20 30 26 26 74 28 63 2c 72 2c 65 29 3b 72 65 74 75 72 6e 20 63 7d 7d 29 7d 2c 64 66 37 35 3a 66 75 6e 63 Data Ascii: "23e7"),b=l("83ab"),C=l("56ef"),o=l("fc6a"),i=l("06cf"),t=l("8418");m({target:"Object",stat:!0,sham:!b},{getOwnPropertyDescriptors:function(n){for(var r,e,a=o(n),s=i.f,u=C(a),c={},f=0;u.length>f;)e=s(a,r=u[f++]),e!==void 0&&t(c,r,e);return c}})},df75:func
2024-10-30 07:46:19 UTC	16383	IN	Data Raw: 6f 3a 7b 74 79 70 65 3a 5b 4f 62 6a 65 63 74 2c 53 74 72 69 6e 67 5d 2c 72 65 71 75 69 72 65 64 3a 21 31 2c 64 65 66 61 75 6c 74 3a 6e 75 6c 6c 7d 7d 7d 2c 43 74 3d 62 74 2c 5f 74 3d 28 6c 28 22 34 61 63 38 22 29 2c 76 28 43 74 2c 54 2c 4d 2c 21 31 2c 6e 75 6c 6c 2c 22 33 35 64 66 39 31 39 33 22 2c 6e 75 6c 6c 29 29 2c 55 74 3d 5f 74 2e 65 78 70 6f 72 74 73 2c 71 74 3d 7b 6e 61 6d 65 3a 22 4d 65 6e 75 22 2c 63 6f 6d 70 6f 6e 65 6e 74 73 3a 7b 4c 6f 79 61 6c 74 79 43 61 72 64 3a 6a 2c 53 74 61 74 75 73 50 6f 69 6e 74 73 43 61 72 64 3a 55 74 7d 2c 64 61 74 61 28 29 7b 72 65 74 75 72 6e 7b 61 63 74 69 6f 6e 43 61 6c 6c 62 61 63 6b 73 4b 65 79 73 3a 7b 73 69 67 6e 69 6e 3a 22 63 6f 6e 6e 65 63 74 41 63 74 69 6f 6e 22 2c 6c 6f 67 6f 75 74 3a 22 64 69 73 63 6f Data Ascii: o:{type:[Object,String],required:!1,default:null}}},Ct=bt,_t=(l("4ac8"),v(Ct,T,M,!1,null,"35df9193",null)),Ut=_t.exports,qt={name:"Menu",components:{LoyaltyCard:j,StatusPointsCard:Ut},data(){return{actionCallbacksKeys:{signin:"connectAction",logout:"disco
2024-10-30 07:46:19 UTC	16383	IN	Data Raw: 69 6e 6b 22 3a 22 68 74 74 70 73 3a 2f 2f 61 6c 6c 2e 61 63 63 6f 72 2e 63 6f 6d 2f 61 63 63 6f 75 6e 74 2f 69 6e 64 65 78 2e 66 72 2e 73 68 74 6d 6c 23 2f 64 61 73 68 62 6f 61 72 64 22 2c 22 68 69 67 68 6c 69 67 68 74 22 3a 22 74 72 75 65 22 7d 2c 22 62 6f 6f 6b 69 6e 67 73 22 3a 7b 22 74 65 78 74 22 3a 22 56 6f 73 20 72 5c 78 45 39 73 65 72 76 61 74 69 6f 6e 73 22 2c 22 6c 69 6e 6b 22 3a 22 68 74 74 70 73 3a 2f 2f 61 6c 6c 2e 61 63 63 6f 72 2e 63 6f 6d 2f 61 63 63 6f 75 6e 74 2f 69 6e 64 65 78 2e 66 72 2e 73 68 74 6d 6c 23 2f 6d 79 2d 62 6f 6f 6b 69 6e 67 73 22 2c 22 68 69 67 68 6c 69 67 68 74 22 3a 22 74 72 75 65 22 7d 2c 22 66 69 64 65 6c 69 74 79 22 3a 7b 22 74 65 78 74 22 3a 22 56 6f 74 72 65 20 63 6f 6d 70 74 65 20 64 65 20 66 69 64 5c 78 45 39 6c Data Ascii: ink":"https://all.accor.com/account/index.fr.shtml#/dashboard","highlight":"true"},"bookings":{"text":"Vos r\xE9servations","link":"https://all.accor.com/account/index.fr.shtml#/my-bookings","highlight":"true"},"fidelity":{"text":"Votre compte de fid\xE9l
2024-10-30 07:46:20 UTC	16383	IN	Data Raw: 22 3a 22 53 6c 75 69 74 20 68 65 74 20 76 65 6e 73 74 65 72 20 6d 69 6a 6e 20 61 63 63 6f 75 6e 74 22 2c 22 6e 61 76 22 3a 7b 22 61 72 69 61 4c 61 62 65 6c 22 3a 22 6f 70 65 6e 20 68 65 74 20 6d 65 6e 75 20 4d 69 6a 6e 20 61 63 63 6f 75 6e 74 20 26 20 42 65 6c 6f 6e 69 6e 67 65 6e 22 2c 22 62 75 74 74 6f 6e 54 65 78 74 22 3a 22 41 61 6e 6d 65 6c 64 65 6e 20 2f 20 52 65 67 69 73 74 72 65 72 65 6e 22 7d 7d 7d 2c 22 70 6c 22 3a 7b 22 4b 65 79 22 3a 22 70 6c 22 2c 22 6c 61 6e 67 22 3a 22 70 6c 22 2c 22 6d 65 6e 75 22 3a 7b 22 64 69 73 63 6f 6e 6e 65 63 74 65 64 22 3a 7b 22 6c 6f 79 61 6c 74 79 43 61 72 64 22 3a 7b 22 74 69 74 6c 65 22 3a 22 50 72 6f 67 72 61 6d 20 6c 6f 6a 61 6c 6e 6f 5c 75 30 31 35 42 63 69 6f 77 79 22 2c 22 74 65 78 74 22 3a 22 4f 73 7a 63 Data Ascii: ":"Sluit het venster mijn account","nav":{"ariaLabel":"open het menu Mijn account & Beloningen","buttonText":"Aanmelden / Registreren"}}},"pl":{"Key":"pl","lang":"pl","menu":{"disconnected":{"loyaltyCard":{"title":"Program lojalno\u015Bciowy","text":"Oszc
2024-10-30 07:46:20 UTC	16383	IN	Data Raw: 22 68 69 67 68 6c 69 67 68 74 22 3a 22 74 72 75 65 22 7d 2c 22 69 6e 66 6f 72 6d 61 74 69 6f 6e 22 3a 7b 22 74 65 78 74 22 3a 22 5c 75 33 30 34 41 5c 75 35 42 41 32 5c 75 36 39 44 38 5c 75 33 30 36 45 5c 75 36 30 43 35 5c 75 35 38 33 31 22 2c 22 6c 69 6e 6b 22 3a 22 68 74 74 70 73 3a 2f 2f 61 6c 6c 2e 61 63 63 6f 72 2e 63 6f 6d 2f 61 63 63 6f 75 6e 74 2f 69 6e 64 65 78 2e 6a 61 2e 73 68 74 6d 6c 23 2f 69 6e 66 6f 72 6d 61 74 69 6f 6e 2f 70 65 72 73 6f 6e 61 6c 22 2c 22 68 69 67 68 6c 69 67 68 74 22 3a 22 74 72 75 65 22 7d 2c 22 68 65 6c 70 22 3a 7b 22 74 65 78 74 22 3a 22 5c 75 33 30 44 38 5c 75 33 30 45 42 5c 75 33 30 44 37 5c 75 33 30 36 38 5c 75 33 30 42 35 5c 75 33 30 44 44 5c 75 33 30 46 43 5c 75 33 30 43 38 22 2c 22 6c 69 6e 6b 22 3a 22 68 74 74 70 Data Ascii: "highlight":"true"},"information":{"text":"\u304A\u5BA2\u69D8\u306E\u60C5\u5831","link":"https://all.accor.com/account/index.ja.shtml#/information/personal","highlight":"true"},"help":{"text":"\u30D8\u30EB\u30D7\u3068\u30B5\u30DD\u30FC\u30C8","link":"http
2024-10-30 07:46:20 UTC	6	IN	Data Raw: 2c 22 68 65 61 64 Data Ascii: ,"head

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49757	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:20 UTC	1110	OUT	GET /a/content/dam/all/global-marketing/brand-identity/logos/all-paris-2024/msa_l_0000184.svg HTTP/1.1 Host: all.accor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://all.accor.com/a/en/new-app-offer.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==
2024-10-30 07:46:21 UTC	766	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Age: 184960 Cache-Control: max-age=43200,public content-disposition: attachment; filename="msa_l_0000184.svg" Content-Type: image/svg+xml Date: Wed, 30 Oct 2024 07:46:21 GMT Etag: "0x8DC337DE327C014+ident" Last-Modified: Thu, 22 Feb 2024 08:11:35 GMT Server: ECAcc (lhd/35E5) Strict-Transport-Security: max-age=31557600 Vary: Accept-Encoding X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast x-content-type-options: nosniff x-frame-options: SAMEORIGIN X-Iinfo: 18-254814115-254814119 NNYN CT(15 19 0) RT(1730113278085 10) q(0 1 1 -1) r(1 1) U24 X-Served-By: cache-fra-etou8220047-FRA X-Timer: S1730113278.450528,VS0,VS0,VE3 x-vhost: prod-allcom-publish Content-Length: 6462 Connection: close
2024-10-30 07:46:21 UTC	6462	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 34 20 37 38 22 3e 0a 20 20 3c 6d 65 74 61 64 61 74 61 3e 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 31 2d 63 30 30 30 20 37 39 2e 34 64 32 66 35 39 37 2c 20 32 30 32 31 2f 30 39 2f 30 31 2d 32 30 3a 35 31 3a 32 32 20 20 20 20 20 20 20 20 22 3e 0a 20 20 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 124 78"> <metadata><?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.4d2f597, 2021/09/01-20:51:22 "> <rdf:RDF xmln

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49758	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:20 UTC	1108	OUT	GET /a/etc.clientlibs/ace/clientlibs-modules/components/clientlib-image/v2/clientlib-image.lc-a10b68a2427438cc306ea4813a9677b5-lc.min.css HTTP/1.1 Host: all.accor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://all.accor.com/a/en/new-app-offer.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==
2024-10-30 07:46:21 UTC	682	IN	HTTP/1.1 200 OK Age: 524968 cache-control: max-age=2592000, public, immutable Content-Type: text/css;charset=utf-8 Date: Wed, 30 Oct 2024 07:46:21 GMT Etag: W/"b49-2386f26fb1bdc0-gzip" Last-Modified: Thu, 24 Oct 2024 05:56:53 GMT Server: ECAcc (lhd/35C2) Strict-Transport-Security: max-age=31557600 Vary: Accept-Encoding X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Content-Type-Options: nosniff x-frame-options: SAMEORIGIN X-Iinfo: 17-204077113-204073686 PNNy RT(1730113277431 3) q(0 0 0 0) r(0 0) U24 X-Served-By: cache-fra-etou8220079-FRA X-Timer: S1730113278.409227,VS0,VS0,VE3 x-vhost: prod-allcom-publish Content-Length: 2889 Connection: close
2024-10-30 07:46:21 UTC	2889	IN	Data Raw: 2e 61 63 65 2d 69 6d 61 67 65 2d 76 32 2e 61 63 65 2d 69 6d 61 67 65 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 61 73 70 65 63 74 2d 72 61 74 69 6f 3a 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 7d 0a 2e 61 63 65 2d 69 6d 61 67 65 2d 76 32 20 70 69 63 74 75 72 65 7b 66 6c 65 78 2d 67 72 6f 77 3a 31 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 7d 0a 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 33 32 30 70 78 29 7b 2e 61 63 65 2d 69 6d 61 67 65 2d 76 32 2e 73 5f 72 61 74 69 6f 5f 31 62 79 31 7b 61 73 70 65 63 74 2d 72 61 74 69 6f 3a 31 20 21 69 6d 70 6f 72 74 61 6e 74 7d 0a 2e 61 63 65 2d 69 6d 61 67 65 2d 76 32 2e 73 5f 72 61 74 69 6f 5f 33 62 79 32 7b 61 73 70 65 63 74 2d 72 61 74 69 6f 3a 31 Data Ascii: .ace-image-v2.ace-image{display:flex;width:100%;aspect-ratio:auto !important}.ace-image-v2 picture{flex-grow:1;width:100%;height:100%}@media(min-width:320px){.ace-image-v2.s_ratio_1by1{aspect-ratio:1 !important}.ace-image-v2.s_ratio_3by2{aspect-ratio:1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49740	104.18.86.42	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:21 UTC	542	OUT	GET /scripttemplates/otSDKStub.js HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://all.accor.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 07:46:21 UTC	858	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 07:46:21 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-MD5: qVqAwzZMp5y69q24H0KNhg== Last-Modified: Tue, 29 Oct 2024 16:01:42 GMT x-ms-request-id: ea261024-a01e-0045-1c1e-2a4e1b000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 2476 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8da9ca835ba93159-DFW
2024-10-30 07:46:21 UTC	511	IN	Data Raw: 35 37 61 65 0d 0a 76 61 72 20 4f 6e 65 54 72 75 73 74 53 74 75 62 3d 28 74 3d 3e 7b 76 61 72 20 61 2c 6f 2c 72 2c 65 2c 6c 3d 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 3d 22 4f 70 74 61 6e 6f 6e 43 6f 6e 73 65 6e 74 22 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 74 6d 6c 47 72 6f 75 70 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 6f 73 74 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 67 65 6e 56 65 6e 64 6f 72 73 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 76 65 6e 64 6f 72 73 53 65 72 76 69 63 65 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 49 41 42 43 6f 6f 6b 69 65 56 61 6c 75 65 3d 22 22 2c 74 68 69 73 2e 6f 6e 65 54 72 75 73 74 49 41 42 43 6f 6f 6b 69 65 4e 61 6d 65 3d 22 65 75 70 75 Data Ascii: 57aevar OneTrustStub=(t=>{var a,o,r,e,l=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIABCookieName="eupu
2024-10-30 07:46:21 UTC	1369	IN	Data Raw: 2c 22 53 49 22 2c 22 53 4b 22 2c 22 46 49 22 2c 22 53 45 22 2c 22 47 42 22 2c 22 48 52 22 2c 22 4c 49 22 2c 22 4e 4f 22 2c 22 49 53 22 5d 2c 74 68 69 73 2e 73 74 75 62 46 69 6c 65 4e 61 6d 65 3d 22 6f 74 53 44 4b 53 74 75 62 22 2c 74 68 69 73 2e 44 41 54 41 46 49 4c 45 41 54 54 52 49 42 55 54 45 3d 22 64 61 74 61 2d 64 6f 6d 61 69 6e 2d 73 63 72 69 70 74 22 2c 74 68 69 73 2e 62 61 6e 6e 65 72 53 63 72 69 70 74 4e 61 6d 65 3d 22 6f 74 42 61 6e 6e 65 72 53 64 6b 2e 6a 73 22 2c 74 68 69 73 2e 64 6f 6d 50 75 72 69 66 79 53 63 72 69 70 74 4e 61 6d 65 3d 22 6f 74 44 6f 6d 50 75 72 69 66 79 2e 6a 73 22 2c 74 68 69 73 2e 6d 6f 62 69 6c 65 4f 6e 6c 69 6e 65 55 52 4c 3d 5b 5d 2c 74 68 69 73 2e 69 73 4d 69 67 72 61 74 65 64 55 52 4c 3d 21 31 2c 74 68 69 73 2e 6d 69 Data Ascii: ,"SI","SK","FI","SE","GB","HR","LI","NO","IS"],this.stubFileName="otSDKStub",this.DATAFILEATTRIBUTE="data-domain-script",this.bannerScriptName="otBannerSdk.js",this.domPurifyScriptName="otDomPurify.js",this.mobileOnlineURL=[],this.isMigratedURL=!1,this.mi
2024-10-30 07:46:21 UTC	1369	IN	Data Raw: 29 69 66 28 2f 3a 2f 2e 74 65 73 74 28 69 5b 6e 5d 29 29 7b 69 66 28 21 28 61 3d 69 5b 6e 5d 2e 73 70 6c 69 74 28 2f 3a 28 2e 2b 29 2f 29 29 5b 31 5d 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 65 5b 74 68 69 73 2e 63 61 6d 65 6c 69 7a 65 28 61 5b 30 5d 29 5d 3d 61 5b 31 5d 2e 74 72 69 6d 28 29 7d 72 65 74 75 72 6e 20 65 7d 2c 69 29 3b 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 69 6d 70 6c 65 6d 65 6e 74 54 68 65 50 6f 6c 79 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 2c 6f 3d 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 3b 72 65 74 75 72 6e 20 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 3d 66 75 6e 63 Data Ascii: )if(/:/.test(i[n])){if(!(a=i[n].split(/:(.+)/))[1])return null;e[this.camelize(a[0])]=a[1].trim()}return e},i);function i(){var t=this;this.implementThePolyfill=function(){var a=t,o=Element.prototype.setAttribute;return Element.prototype.setAttribute=func
2024-10-30 07:46:21 UTC	1369	IN	Data Raw: 73 73 61 67 65 48 61 6e 64 6c 65 72 2c 21 31 29 2c 73 2e 61 64 64 46 72 61 6d 65 28 73 2e 4c 4f 43 41 54 4f 52 5f 4e 41 4d 45 29 29 7d 2c 74 68 69 73 2e 72 65 6d 6f 76 65 47 70 70 41 70 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 65 6c 65 74 65 20 73 2e 77 69 6e 2e 5f 5f 67 70 70 3b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 69 66 72 61 6d 65 5b 6e 61 6d 65 3d 22 2b 73 2e 4c 4f 43 41 54 4f 52 5f 4e 41 4d 45 2b 22 5d 22 29 5b 30 5d 3b 74 26 26 74 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 7d 2c 74 68 69 73 2e 65 78 65 63 75 74 65 47 70 70 41 70 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 65 3d 30 3b 65 3c 61 72 67 75 6d 65 6e Data Ascii: ssageHandler,!1),s.addFrame(s.LOCATOR_NAME))},this.removeGppApi=function(){delete s.win.__gpp;var t=document.querySelectorAll("iframe[name="+s.LOCATOR_NAME+"]")[0];t&&t.parentElement.removeChild(t)},this.executeGppApi=function(){for(var t=[],e=0;e<argumen
2024-10-30 07:46:21 UTC	1369	IN	Data Raw: 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 29 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 2c 65 2e 6e 61 6d 65 3d 74 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 69 74 6c 65 22 2c 22 47 50 50 20 4c 6f 63 61 74 6f 72 22 29 2c 69 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 29 3a 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 2e 61 64 64 46 72 61 6d 65 28 74 29 7d 2c 35 29 29 2c 21 6e 7d 2c 74 68 69 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 2c 6e 3d 73 2e 77 69 6e 2e 5f 5f 67 70 70 3b 72 65 74 75 72 6e 20 6e 2e 65 76 65 6e 74 73 3d 6e 2e 65 76 65 6e 74 73 7c 7c 5b 5d 2c 6e 75 6c Data Ascii: eateElement("iframe")).style.cssText="display:none",e.name=t,e.setAttribute("title","GPP Locator"),i.body.appendChild(e)):setTimeout(function(){s.addFrame(t)},5)),!n},this.addEventListener=function(t,e){var i,n=s.win.__gpp;return n.events=n.events\|\|[],nul
2024-10-30 07:46:21 UTC	1369	IN	Data Raw: 79 28 22 6f 74 2d 74 72 75 73 74 65 64 2d 74 79 70 65 2d 70 6f 6c 69 63 79 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 44 4f 4d 50 75 72 69 66 79 2e 73 61 6e 69 74 69 7a 65 28 74 29 7d 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 44 4f 4d 50 75 72 69 66 79 2e 73 61 6e 69 74 69 7a 65 28 74 29 7d 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 69 3d 5b 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2c 6e 2e 68 6f 73 74 6e 61 6d 65 5d 3b 74 72 79 7b 65 3d 6e 65 77 20 55 52 4c 28 74 2c 6c 6f 63 61 74 69 6f 6e 2e 6f 72 69 67 Data Ascii: y("ot-trusted-type-policy",{createHTML:function(t){return window.DOMPurify.sanitize(t)},createScript:function(t){return window.DOMPurify.sanitize(t)},createScriptURL:function(t){var e,i=[document.location.hostname,n.hostname];try{e=new URL(t,location.orig
2024-10-30 07:46:21 UTC	1369	IN	Data Raw: 6c 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 70 72 65 76 69 65 77 2d 6d 6f 64 65 22 29 2c 74 68 69 73 2e 6f 74 46 65 74 63 68 28 6c 2e 62 61 6e 6e 65 72 44 61 74 61 50 61 72 65 6e 74 55 52 4c 2c 74 68 69 73 2e 67 65 74 4c 6f 63 61 74 69 6f 6e 2e 62 69 6e 64 28 74 68 69 73 29 29 7d 2c 66 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 44 6f 6d 61 69 6e 49 66 42 75 6c 6b 44 6f 6d 61 69 6e 45 6e 61 62 6c 65 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 26 26 74 2e 54 65 6e 61 6e 74 46 65 61 74 75 72 65 73 2c 69 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2c 6e 3d 74 2e 44 6f 6d 61 69 6e 2c 61 3d 74 2e 42 75 6c 6b 44 6f 6d 61 69 6e 43 68 65 63 6b Data Ascii: l.stubScriptElement.getAttribute("data-preview-mode"),this.otFetch(l.bannerDataParentURL,this.getLocation.bind(this))},f.prototype.setDomainIfBulkDomainEnabled=function(t){var e=t&&t.TenantFeatures,i=window.location.hostname,n=t.Domain,a=t.BulkDomainCheck
2024-10-30 07:46:21 UTC	1369	IN	Data Raw: 74 28 22 3b 22 29 5b 30 5d 2c 69 3d 69 2e 73 70 6c 69 74 28 22 3b 22 29 5b 31 5d 2c 74 68 69 73 2e 73 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 28 65 2c 69 29 2c 74 68 69 73 2e 61 64 64 42 61 6e 6e 65 72 53 44 4b 53 63 72 69 70 74 28 74 29 29 3a 74 68 69 73 2e 67 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 28 74 29 7d 2c 66 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 6e 64 6c 65 42 75 6c 6b 44 6f 6d 61 69 6e 4d 67 6d 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 26 26 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 22 62 75 6c 6b 44 6f 6d 61 69 6e 4d 67 6d 74 45 6e 61 62 6c 65 64 22 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 74 2e 69 73 56 61 6c 69 64 29 29 Data Ascii: t(";")[0],i=i.split(";")[1],this.setGeoLocation(e,i),this.addBannerSDKScript(t)):this.getGeoLocation(t)},f.prototype.handleBulkDomainMgmt=function(t,e){window.sessionStorage&&window.sessionStorage.setItem("bulkDomainMgmtEnabled",JSON.stringify(t.isValid))
2024-10-30 07:46:21 UTC	1369	IN	Data Raw: 6f 3d 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 26 26 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 6f 74 50 72 65 76 69 65 77 44 61 74 61 22 29 3b 69 66 28 6e 65 77 20 52 65 67 45 78 70 28 22 5e 66 69 6c 65 3a 2f 2f 22 2c 22 69 22 29 2e 74 65 73 74 28 74 29 29 74 68 69 73 2e 6f 74 46 65 74 63 68 4f 66 66 6c 69 6e 65 46 69 6c 65 28 74 2c 69 29 3b 65 6c 73 65 20 69 66 28 30 3c 3d 74 2e 69 6e 64 65 78 4f 66 28 22 2f 63 6f 6e 73 65 6e 74 2f 22 29 26 26 74 68 69 73 2e 70 72 65 76 69 65 77 4d 6f 64 65 26 26 6f 29 7b 6f 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 6f 29 2e 64 6f 6d 61 69 6e 4a 73 6f 6e 3b 69 28 6f 29 7d 65 6c 73 65 7b 6c 2e 6d 6f 62 69 6c 65 4f 6e 6c 69 6e 65 55 52 4c 2e 70 75 73 68 28 Data Ascii: o=window.sessionStorage&&window.sessionStorage.getItem("otPreviewData");if(new RegExp("^file://","i").test(t))this.otFetchOfflineFile(t,i);else if(0<=t.indexOf("/consent/")&&this.previewMode&&o){o=JSON.parse(o).domainJson;i(o)}else{l.mobileOnlineURL.push(
2024-10-30 07:46:21 UTC	1369	IN	Data Raw: 76 61 72 20 73 3d 61 2e 73 74 61 74 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 72 3d 61 2e 63 6f 75 6e 74 72 79 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 75 3d 30 3b 75 3c 74 2e 52 75 6c 65 53 65 74 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 69 66 28 21 30 3d 3d 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 2e 47 6c 6f 62 61 6c 29 6e 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 3b 65 6c 73 65 7b 76 61 72 20 70 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 2e 53 74 61 74 65 73 3b 69 66 28 70 5b 72 5d 26 26 30 3c 3d 70 5b 72 5d 2e 69 6e 64 65 78 4f 66 28 73 29 29 7b 69 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 3b 62 72 65 61 6b 7d 30 3c 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 2e 43 6f 75 6e 74 72 69 65 73 2e 69 6e 64 65 78 4f 66 28 72 29 26 26 28 65 3d 74 2e 52 75 6c 65 53 65 74 Data Ascii: var s=a.state.toLowerCase(),r=a.country.toLowerCase(),u=0;u<t.RuleSet.length;u++)if(!0===t.RuleSet[u].Global)n=t.RuleSet[u];else{var p=t.RuleSet[u].States;if(p[r]&&0<=p[r].indexOf(s)){i=t.RuleSet[u];break}0<=t.RuleSet[u].Countries.indexOf(r)&&(e=t.RuleSet

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49760	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:21 UTC	1071	OUT	GET /a/content/dam/generic/icons/amenities/default.svg HTTP/1.1 Host: all.accor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://all.accor.com/a/en/new-app-offer.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==
2024-10-30 07:46:21 UTC	757	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Age: 159297 Cache-Control: max-age=43200,public content-disposition: attachment; filename="default.svg" Content-Type: image/svg+xml Date: Wed, 30 Oct 2024 07:46:21 GMT Etag: "0x8DBF00E1C0EB6EC+ident" Last-Modified: Tue, 28 Nov 2023 12:32:39 GMT Server: ECAcc (lhd/35C5) Strict-Transport-Security: max-age=31557600 Vary: Accept-Encoding X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast x-content-type-options: nosniff x-frame-options: SAMEORIGIN X-Iinfo: 17-198099298-198099300 NNYN CT(14 18 0) RT(1730115566090 3) q(0 1 1 0) r(1 1) U24 X-Served-By: cache-fra-etou8220133-FRA X-Timer: S1730115567.094613,VS0,VS0,VE1 x-vhost: prod-allcom-publish Content-Length: 362 Connection: close
2024-10-30 07:46:21 UTC	362	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 0a 20 20 3c 70 61 74 68 20 64 3d 22 6d 31 35 2e 38 37 20 38 2e 35 36 2d 35 2e 35 31 20 35 2e 35 31 2d 32 2e 32 39 2d 32 2e 32 38 61 2e 37 34 2e 37 34 20 30 20 30 20 30 2d 31 2e 30 36 20 30 20 2e 37 35 2e 37 35 20 30 20 30 20 30 20 30 20 31 2e 30 36 6c 32 2e 38 32 20 32 2e 38 31 61 2e 37 35 2e 37 35 20 30 20 30 20 30 20 31 2e 30 36 20 30 6c 36 2d 36 61 2e 37 37 2e 37 37 20 30 20 30 20 30 20 30 2d 31 2e 30 37 2e 37 35 2e 37 35 20 30 20 30 20 30 2d 31 2e 30 32 2d 2e 30 33 5a 22 2f 3e 0a 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 32 20 33 2e 30 38 41 38 2e 39 32 20 38 2e 39 32 20 30 20 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"> <path d="m15.87 8.56-5.51 5.51-2.29-2.28a.74.74 0 0 0-1.06 0 .75.75 0 0 0 0 1.06l2.82 2.81a.75.75 0 0 0 1.06 0l6-6a.77.77 0 0 0 0-1.07.75.75 0 0 0-1.02-.03Z"/> <path d="M12 3.08A8.92 8.92 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49761	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:21 UTC	1025	OUT	GET /styles/styles-footer-light.css HTTP/1.1 Host: all.accor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://all.accor.com/a/en/new-app-offer.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all
2024-10-30 07:46:21 UTC	666	IN	HTTP/1.1 200 OK Age: 161129 Cache-control: public, max-age=3600, stale-while-revalidate=21600 Content-Type: text/css Date: Wed, 30 Oct 2024 07:46:21 GMT Last-Modified: Mon, 28 Oct 2024 11:00:52 GMT P3P: CP="NO P3P POLICY" Referrer-Policy: origin Server: ECAcc (lhd/35A5) Strict-Transport-Security: max-age=15552000 Strict-Transport-Security: max-age=15552000 Vary: Accept-Encoding X-Accor-asset: ecom X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Clacks-Overhead: GNU Terry Pratchett X-Iinfo: 17-195174010-195174011 nNNY RT(1730113251991 3) q(0 1 1 0) r(1 1) U24 X-XSS-Protection: 1; mode=block Content-Length: 26845 Connection: close
2024-10-30 07:46:21 UTC	16383	IN	Data Raw: 2e 63 6f 6c 6f 72 2d 74 65 78 74 2d 68 65 61 64 69 6e 67 2c 2e 63 6f 6c 6f 72 2d 74 65 78 74 2d 74 69 74 6c 65 7b 63 6f 6c 6f 72 3a 23 32 35 32 33 33 39 7d 2e 63 6f 6c 6f 72 2d 74 65 78 74 2d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 33 65 33 64 34 38 7d 2e 63 6f 6c 6f 72 2d 74 65 78 74 2d 6d 75 74 65 64 7b 63 6f 6c 6f 72 3a 23 36 66 36 65 37 37 7d 2e 63 6f 6c 6f 72 2d 74 65 78 74 2d 61 63 63 65 6e 74 7b 63 6f 6c 6f 72 3a 23 30 36 38 34 38 34 7d 2e 63 6f 6c 6f 72 2d 74 65 78 74 2d 69 6e 76 65 72 73 65 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 63 6f 6c 6f 72 2d 62 61 63 6b 67 72 6f 75 6e 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 34 66 34 66 35 7d 2e 63 6f 6c 6f 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 6c 69 67 68 74 7b 62 61 63 6b 67 72 6f 75 6e Data Ascii: .color-text-heading,.color-text-title{color:#252339}.color-text-body{color:#3e3d48}.color-text-muted{color:#6f6e77}.color-text-accent{color:#068484}.color-text-inverse{color:#fff}.color-background{background-color:#f4f4f5}.color-background-light{backgroun
2024-10-30 07:46:21 UTC	10462	IN	Data Raw: 77 72 61 70 70 65 72 20 2e 66 6f 6f 74 65 72 53 68 61 72 69 6e 67 5f 5f 6c 69 2d 2d 77 65 69 62 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 7d 5b 64 69 72 3d 72 74 6c 5d 20 2e 66 6f 6f 74 65 72 43 6f 6d 70 6f 6e 65 6e 74 5f 5f 77 72 61 70 70 65 72 20 2e 63 61 6c 6c 43 65 6e 74 65 72 20 2e 64 69 61 6c 7b 6d 61 78 2d 77 69 64 74 68 3a 32 30 30 70 78 7d 2e 66 6f 6f 74 65 72 43 6f 6d 70 6f 6e 65 6e 74 5f 5f 77 72 61 70 70 65 72 20 2e 66 6f 6f 74 65 72 43 6f 70 79 72 69 67 68 74 7b 2d 6d 73 2d 66 6c 65 78 2d 70 72 65 66 65 72 72 65 64 2d 73 69 7a 65 3a 31 30 30 25 3b 66 6c 65 78 2d 62 61 73 69 73 3a 31 30 30 25 7d 2e 66 6f 6f 74 65 72 43 6f 6d 70 6f 6e 65 6e 74 5f 5f 77 72 61 70 70 65 72 20 2e 66 6f 6f 74 65 72 43 6f 70 79 72 69 67 68 Data Ascii: wrapper .footerSharing__li--weibo{display:inline-block}}[dir=rtl] .footerComponent__wrapper .callCenter .dial{max-width:200px}.footerComponent__wrapper .footerCopyright{-ms-flex-preferred-size:100%;flex-basis:100%}.footerComponent__wrapper .footerCopyrigh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49759	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:21 UTC	1009	OUT	GET /scripts/main-footer-light.js HTTP/1.1 Host: all.accor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://all.accor.com/a/en/new-app-offer.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all
2024-10-30 07:46:21 UTC	672	IN	HTTP/1.1 200 OK Age: 161129 Cache-control: public, max-age=3600, stale-while-revalidate=21600 Content-Type: text/javascript Date: Wed, 30 Oct 2024 07:46:21 GMT Last-Modified: Mon, 28 Oct 2024 11:00:52 GMT P3P: CP="NO P3P POLICY" Referrer-Policy: origin Server: ECAcc (lhd/35D0) Strict-Transport-Security: max-age=15552000 Strict-Transport-Security: max-age=15552000 Vary: Accept-Encoding X-Accor-asset: ecom X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Clacks-Overhead: GNU Terry Pratchett X-Iinfo: 17-174814289-174805022 pNNy RT(1730113251974 9) q(0 0 0 0) r(1 1) U24 X-XSS-Protection: 1; mode=block Content-Length: 2388 Connection: close
2024-10-30 07:46:21 UTC	2388	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 6f 29 7b 69 66 28 74 5b 6f 5d 29 72 65 74 75 72 6e 20 74 5b 6f 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6f 5d 3d 7b 69 3a 6f 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6f 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 65 2c 6e 2e 63 3d 74 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 6e 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 6f 7d 29 7d 2c 6e 2e 72 3d 66 75 6e Data Ascii: !function(e){var t={};function n(o){if(t[o])return t[o].exports;var r=t[o]={i:o,l:!1,exports:{}};return e[o].call(r.exports,r,r.exports,n),r.l=!0,r.exports}n.m=e,n.c=t,n.d=function(e,t,o){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:o})},n.r=fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49778	151.101.3.10	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:21 UTC	609	OUT	GET /b94aa70a4593f812b35d5a8922257b6f80ccf6aa708f58b8266f4ba917eb0e0e/theme.js HTTP/1.1 Host: static-p46175-e229011.adobeaemcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://all.accor.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 07:46:22 UTC	790	IN	HTTP/1.1 200 OK Connection: close Content-Length: 814813 x-frame-options: SAMEORIGIN cache-control: public,max-age=31536000,immutable content-type: text/javascript; charset=utf-8 content-md5: OsWK6hyCFCN70ANoeXQKIA== last-modified: Mon, 28 Oct 2024 09:01:47 GMT etag: "0x8DCF72F27094AAF" x-ms-version-id: 2024-10-28T09:01:47.0221750Z x-ms-is-current-version: true content-disposition: inline access-control-allow-origin: * x-vhost: publish X-Content-Type-Options: nosniff Accept-Ranges: bytes Age: 90678 Date: Wed, 30 Oct 2024 07:46:22 GMT Strict-Transport-Security: max-age=31557600 set-cookie: affinity="0330abc9c08bc9d2"; Path=/; HttpOnly; secure X-Served-By: cache-dfw-kdfw8210123-DFW X-Cache: HIT X-Timer: S1730274382.046495,VS0,VS0,VE2 Vary: Accept-Encoding
2024-10-30 07:46:22 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 65 74 20 65 3b 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 74 2c 6e 2c 6f 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 67 65 74 3a 6e 2c 73 65 74 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 65 2e 64 65 66 61 75 6c 74 3a 65 7d 76 61 72 20 6f 2c 72 2c 69 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 Data Ascii: !function(){let e;function t(e,t,n,o){Object.defineProperty(e,t,{get:n,set:o,enumerable:!0,configurable:!0})}function n(e){return e&&e.__esModule?e.default:e}var o,r,i="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:"undefined"!=ty
2024-10-30 07:46:22 UTC	1378	IN	Data Raw: 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 66 6f 72 28 76 61 72 20 6f 20 69 6e 20 6e 29 65 5b 6f 5d 3d 6e 5b 6f 5d 7d 72 65 74 75 72 6e 20 65 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 74 28 6e 2c 6f 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 74 2c 72 2c 69 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 29 7b 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 28 69 3d 65 28 7b 7d 2c 6f 2c 69 29 29 2e 65 78 70 69 72 65 73 26 26 28 69 2e 65 78 70 69 72 65 73 3d 6e 65 77 20 44 61 74 65 28 44 61 74 65 2e 6e 6f 77 28 29 2b 38 36 34 65 35 2a 69 2e 65 78 70 69 72 65 73 29 29 2c 69 2e 65 78 70 69 72 65 73 26 26 28 69 2e 65 78 70 69 72 65 73 3d 69 2e 65 78 70 69 72 65 73 2e 74 6f 55 54 43 53 74 72 69 6e 67 28 29 29 Data Ascii: arguments[t];for(var o in n)e[o]=n[o]}return e}return function t(n,o){function r(t,r,i){if("undefined"!=typeof document){"number"==typeof(i=e({},o,i)).expires&&(i.expires=new Date(Date.now()+864e5*i.expires)),i.expires&&(i.expires=i.expires.toUTCString())
2024-10-30 07:46:22 UTC	1378	IN	Data Raw: 33 38 22 29 7d 29 2c 6c 28 22 63 77 7a 33 38 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 63 28 22 36 57 47 66 68 22 29 2c 6f 3d 63 28 22 34 42 42 58 4c 22 29 2c 72 3d 63 28 22 39 4c 53 72 4e 22 29 2c 69 3d 63 28 22 32 59 4f 35 47 22 29 2c 61 3d 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 76 61 72 20 61 3d 6e 65 77 20 72 28 74 29 2c 73 3d 6f 28 72 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 71 75 65 73 74 2c 61 29 3b 72 65 74 75 72 6e 20 6e 2e 65 78 74 65 6e 64 28 73 2c 72 2e 70 72 6f 74 6f 74 79 70 65 2c 61 29 2c 6e 2e 65 78 74 65 6e 64 28 73 2c 61 29 2c 73 2e 63 72 65 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 65 28 69 28 74 2c 6e 29 29 7d 2c 73 7d 28 63 28 22 6a 66 31 79 4b 22 29 29 3b 61 2e 41 78 69 6f 73 3d 72 Data Ascii: 38")}),l("cwz38",function(e,t){var n=c("6WGfh"),o=c("4BBXL"),r=c("9LSrN"),i=c("2YO5G"),a=function e(t){var a=new r(t),s=o(r.prototype.request,a);return n.extend(s,r.prototype,a),n.extend(s,a),s.create=function(n){return e(i(t,n))},s}(c("jf1yK"));a.Axios=r
2024-10-30 07:46:22 UTC	1378	IN	Data Raw: 7d 2c 69 73 41 72 72 61 79 42 75 66 66 65 72 56 69 65 77 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 26 26 41 72 72 61 79 42 75 66 66 65 72 2e 69 73 56 69 65 77 3f 41 72 72 61 79 42 75 66 66 65 72 2e 69 73 56 69 65 77 28 65 29 3a 65 26 26 65 2e 62 75 66 66 65 72 26 26 65 2e 62 75 66 66 65 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 7d 2c 69 73 53 74 72 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 7d 2c 69 73 4e 75 6d 62 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 7d 2c 69 73 4f Data Ascii: },isArrayBufferView:function(e){return"undefined"!=typeof ArrayBuffer&&ArrayBuffer.isView?ArrayBuffer.isView(e):e&&e.buffer&&e.buffer instanceof ArrayBuffer},isString:function(e){return"string"==typeof e},isNumber:function(e){return"number"==typeof e},isO
2024-10-30 07:46:22 UTC	1378	IN	Data Raw: 3b 6f 3c 6e 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 6e 5b 6f 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 3b 72 65 74 75 72 6e 20 65 2e 61 70 70 6c 79 28 74 2c 6e 29 7d 7d 7d 29 2c 6c 28 22 39 4c 53 72 4e 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 63 28 22 36 57 47 66 68 22 29 2c 6f 3d 63 28 22 61 5a 75 6c 58 22 29 2c 72 3d 63 28 22 61 57 57 6e 61 22 29 2c 69 3d 63 28 22 6b 58 36 4c 6d 22 29 2c 61 3d 63 28 22 32 59 4f 35 47 22 29 2c 73 3d 63 28 22 37 33 65 43 71 22 29 2c 6c 3d 73 2e 76 61 6c 69 64 61 74 6f 72 73 3b 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 74 68 69 73 2e 64 65 66 61 75 6c 74 73 3d 65 2c 74 68 69 73 2e 69 6e 74 65 72 63 65 70 74 6f 72 73 3d 7b 72 65 71 75 65 73 74 3a 6e 65 77 20 72 2c 72 65 73 70 6f 6e 73 65 3a 6e 65 77 20 Data Ascii: ;o<n.length;o++)n[o]=arguments[o];return e.apply(t,n)}}}),l("9LSrN",function(e,t){var n=c("6WGfh"),o=c("aZulX"),r=c("aWWna"),i=c("kX6Lm"),a=c("2YO5G"),s=c("73eCq"),l=s.validators;function u(e){this.defaults=e,this.interceptors={request:new r,response:new
2024-10-30 07:46:22 UTC	1378	IN	Data Raw: 6c 61 63 65 28 2f 5e 5c 3f 2f 2c 22 22 29 7d 2c 6e 2e 66 6f 72 45 61 63 68 28 5b 22 64 65 6c 65 74 65 22 2c 22 67 65 74 22 2c 22 68 65 61 64 22 2c 22 6f 70 74 69 6f 6e 73 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 75 2e 70 72 6f 74 6f 74 79 70 65 5b 65 5d 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 72 65 71 75 65 73 74 28 61 28 6e 7c 7c 7b 7d 2c 7b 6d 65 74 68 6f 64 3a 65 2c 75 72 6c 3a 74 2c 64 61 74 61 3a 28 6e 7c 7c 7b 7d 29 2e 64 61 74 61 7d 29 29 7d 7d 29 2c 6e 2e 66 6f 72 45 61 63 68 28 5b 22 70 6f 73 74 22 2c 22 70 75 74 22 2c 22 70 61 74 63 68 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 75 2e 70 72 6f 74 6f 74 79 70 65 5b 65 5d 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 74 68 69 Data Ascii: lace(/^\?/,"")},n.forEach(["delete","get","head","options"],function(e){u.prototype[e]=function(t,n){return this.request(a(n\|\|{},{method:e,url:t,data:(n\|\|{}).data}))}}),n.forEach(["post","put","patch"],function(e){u.prototype[e]=function(t,n,o){return thi
2024-10-30 07:46:22 UTC	1378	IN	Data Raw: 68 22 29 2c 6f 3d 63 28 22 69 63 5a 6d 57 22 29 2c 72 3d 63 28 22 69 65 68 54 32 22 29 2c 69 3d 63 28 22 6a 66 31 79 4b 22 29 2c 61 3d 63 28 22 6b 6a 34 7a 47 22 29 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 69 66 28 65 2e 63 61 6e 63 65 6c 54 6f 6b 65 6e 26 26 65 2e 63 61 6e 63 65 6c 54 6f 6b 65 6e 2e 74 68 72 6f 77 49 66 52 65 71 75 65 73 74 65 64 28 29 2c 65 2e 73 69 67 6e 61 6c 26 26 65 2e 73 69 67 6e 61 6c 2e 61 62 6f 72 74 65 64 29 74 68 72 6f 77 20 6e 65 77 20 61 28 22 63 61 6e 63 65 6c 65 64 22 29 7d 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 28 65 29 2c 65 2e 68 65 61 64 65 72 73 3d 65 2e 68 65 61 64 65 72 73 7c 7c 7b 7d 2c 65 2e 64 61 74 61 3d 6f 2e 63 61 6c 6c 28 65 2c 65 2e 64 61 74 61 2c 65 2e Data Ascii: h"),o=c("icZmW"),r=c("iehT2"),i=c("jf1yK"),a=c("kj4zG");function s(e){if(e.cancelToken&&e.cancelToken.throwIfRequested(),e.signal&&e.signal.aborted)throw new a("canceled")}e.exports=function(e){return s(e),e.headers=e.headers\|\|{},e.data=o.call(e,e.data,e.
2024-10-30 07:46:22 UTC	1378	IN	Data Raw: 2c 69 28 74 2c 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 29 2c 72 2e 69 73 46 6f 72 6d 44 61 74 61 28 65 29 7c 7c 72 2e 69 73 41 72 72 61 79 42 75 66 66 65 72 28 65 29 7c 7c 72 2e 69 73 42 75 66 66 65 72 28 65 29 7c 7c 72 2e 69 73 53 74 72 65 61 6d 28 65 29 7c 7c 72 2e 69 73 46 69 6c 65 28 65 29 7c 7c 72 2e 69 73 42 6c 6f 62 28 65 29 29 3f 65 3a 72 2e 69 73 41 72 72 61 79 42 75 66 66 65 72 56 69 65 77 28 65 29 3f 65 2e 62 75 66 66 65 72 3a 72 2e 69 73 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 65 29 3f 28 6c 28 74 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 29 2c 65 2e 74 6f 53 74 72 69 6e 67 28 29 29 3a 72 2e 69 73 4f 62 6a 65 63 74 28 65 29 7c Data Ascii: ,i(t,"Content-Type"),r.isFormData(e)\|\|r.isArrayBuffer(e)\|\|r.isBuffer(e)\|\|r.isStream(e)\|\|r.isFile(e)\|\|r.isBlob(e))?e:r.isArrayBufferView(e)?e.buffer:r.isURLSearchParams(e)?(l(t,"application/x-www-form-urlencoded;charset=utf-8"),e.toString()):r.isObject(e)\|
2024-10-30 07:46:22 UTC	1378	IN	Data Raw: 61 7c 7c 21 6e 29 26 26 73 65 74 54 69 6d 65 6f 75 74 29 72 65 74 75 72 6e 20 6e 3d 73 65 74 54 69 6d 65 6f 75 74 2c 73 65 74 54 69 6d 65 6f 75 74 28 65 2c 30 29 3b 74 72 79 7b 72 65 74 75 72 6e 20 6e 28 65 2c 30 29 7d 63 61 74 63 68 28 74 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6e 2e 63 61 6c 6c 28 6e 75 6c 6c 2c 65 2c 30 29 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 6e 2e 63 61 6c 6c 28 74 68 69 73 2c 65 2c 30 29 7d 7d 7d 21 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 6e 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 65 74 54 69 6d 65 6f 75 74 3f 73 65 74 54 69 6d 65 6f 75 74 3a 61 7d 63 61 74 63 68 28 65 29 7b 6e 3d 61 7d 74 72 79 7b 6f 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 6c 65 61 72 54 69 6d 65 6f 75 Data Ascii: a\|\|!n)&&setTimeout)return n=setTimeout,setTimeout(e,0);try{return n(e,0)}catch(t){try{return n.call(null,e,0)}catch(t){return n.call(this,e,0)}}}!function(){try{n="function"==typeof setTimeout?setTimeout:a}catch(e){n=a}try{o="function"==typeof clearTimeou
2024-10-30 07:46:22 UTC	1378	IN	Data Raw: 69 72 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 22 29 7d 2c 69 2e 75 6d 61 73 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 30 7d 7d 29 2c 6c 28 22 37 48 4d 75 76 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 63 28 22 36 57 47 66 68 22 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 6e 2e 66 6f 72 45 61 63 68 28 65 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 6f 21 3d 3d 74 26 26 6f 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 3d 3d 3d 74 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 26 26 28 65 5b 74 5d 3d 6e 2c 64 65 6c 65 74 65 20 65 5b 6f 5d 29 7d 29 7d 7d 29 2c 6c 28 22 32 42 49 4d 58 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e Data Ascii: ir is not supported")},i.umask=function(){return 0}}),l("7HMuv",function(e,t){var n=c("6WGfh");e.exports=function(e,t){n.forEach(e,function(n,o){o!==t&&o.toUpperCase()===t.toUpperCase()&&(e[t]=n,delete e[o])})}}),l("2BIMX",function(e,t){e.exports=function

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49769	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:21 UTC	872	OUT	GET /a/etc.clientlibs/ace/clientlibs/uc-webview.lc-44cb9ce2e83ba56026a41fce0a867816-lc.min.js HTTP/1.1 Host: all.accor.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all
2024-10-30 07:46:22 UTC	707	IN	HTTP/1.1 200 OK Age: 524970 cache-control: max-age=2592000, public, immutable Content-Type: application/javascript;charset=utf-8 Date: Wed, 30 Oct 2024 07:46:22 GMT Etag: W/"392-2386f26fb1bdc0-gzip" Last-Modified: Thu, 24 Oct 2024 05:56:52 GMT Server: ECAcc (lhd/35C7) Strict-Transport-Security: max-age=31557600 Vary: Accept-Encoding X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Content-Type-Options: nosniff x-frame-options: SAMEORIGIN X-Iinfo: 15-118690090-118690091 NNNN CT(14 19 0) RT(1730113277428 3) q(0 0 0 0) r(0 0) U24 X-Served-By: cache-fra-etou8220057-FRA X-Timer: S1730113278.440453,VS0,VS0,VE3 x-vhost: prod-allcom-publish Content-Length: 914 Connection: close
2024-10-30 07:46:22 UTC	914	IN	Data Raw: 0a 2f 2a 46 75 6e 63 74 69 6f 6e 20 74 6f 20 64 65 63 6f 64 65 20 74 68 65 20 63 6f 6f 6b 69 65 20 2a 2f 0a 66 75 6e 63 74 69 6f 6e 20 67 65 74 43 6f 6f 6b 69 65 28 61 70 70 63 6e 61 6d 65 29 20 7b 0a 20 20 20 20 6c 65 74 20 6d 61 74 63 68 65 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 6d 61 74 63 68 28 6e 65 77 20 52 65 67 45 78 70 28 0a 20 20 20 20 20 20 20 20 22 28 3f 3a 5e 7c 3b 20 29 22 20 2b 20 61 70 70 63 6e 61 6d 65 2e 72 65 70 6c 61 63 65 28 2f 28 5b 5c 2e 24 3f 2a 7c 7b 7d 5c 28 5c 29 5c 5b 5c 5d 5c 5c 5c 2f 5c 2b 5e 5d 29 2f 67 2c 20 27 5c 5c 24 31 27 29 20 2b 20 22 3d 28 5b 5e 3b 5d 2a 29 22 0a 20 20 20 20 29 29 3b 0a 20 20 20 20 72 65 74 75 72 6e 20 6d 61 74 63 68 65 73 20 3f 20 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 Data Ascii: /Function to decode the cookie /function getCookie(appcname) { let matches = document.cookie.match(new RegExp( "(?:^\|; )" + appcname.replace(/([\.$?\|{}\[\]\\\/\+^])/g, '\\$1') + "=([^;])" )); return matches ? decodeURICompone

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49768	151.101.0.114	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:21 UTC	382	OUT	GET /beacon/accorsa/accor/scripts/evergage.min.js HTTP/1.1 Host: cdn.evgnet.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 07:46:22 UTC	918	IN	HTTP/1.1 200 OK Connection: close Content-Length: 58673 x-amz-id-2: NrhlKsrBKym6kL923zm2qin1cClegqG3dXdB6gM/Hiy9a/8gBrwtBx0j5cEDSUf8qMs7Rh8Uw58= x-amz-request-id: 7S4XKJFATZHCTGC7 x-amz-replication-status: COMPLETED Last-Modified: Tue, 29 Oct 2024 14:01:23 GMT ETag: "38daf974daa3b4e6cf4e589c16f799f4" x-amz-server-side-encryption: AES256 Cache-Control: max-age=120 Content-Encoding: gzip x-amz-meta-evergage-beacon-ver: 16 x-amz-meta-evergage-sum: 4aafb7597c8837f7207e748d2595b9c1a7c55542 x-amz-version-id: IJWYdv7IFh7EgzBr39npG0t9hcYa0hWt Content-Type: application/javascript; charset=utf-8 Server: AmazonS3 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Wed, 30 Oct 2024 07:46:22 GMT Age: 45 X-Served-By: cache-iad-kjyo7100045-IAD, cache-dfw-kdal2120129-DFW X-Cache: HIT, HIT X-Cache-Hits: 29, 1 X-Timer: S1730274382.045315,VS0,VE1 Vary: Accept-Encoding Timing-Allow-Origin: *
2024-10-30 07:46:22 UTC	1379	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 ff ec bd 69 7b db 46 b2 30 fa 9d bf 82 c2 cd d1 00 11 44 51 b2 9d 64 00 c3 3c b2 2c c7 4a bc c5 92 93 38 32 27 4f 03 68 90 8c 40 82 26 48 2d 16 79 7e fb ad aa 5e d0 58 a8 c5 c9 64 ce 7b df 3b 93 c7 22 1a 8d 5e aa ab ab ab aa 6b 19 25 6d fb 62 34 89 b3 8b ce e1 39 9f 0d d8 80 b7 37 37 db b2 e8 98 a5 3c 4f b2 59 c4 8f 26 73 3e 63 d1 7c 94 4d f2 5b 2b 74 c6 d1 28 77 da d7 ad 36 fc 6f 3e bb 92 bf f0 7f 37 7f 97 66 83 ce 05 9b 4d 6c 6b 3f cc 66 f3 d1 64 d0 3e 7e f6 63 3b cd 58 dc ce 47 93 88 b7 e7 43 de 5e 33 2a ac 79 c1 f2 36 4b 67 9c c5 57 ed 24 5b 4c e2 76 36 81 6f 46 79 7b 0a 33 eb 58 8e 4f 23 59 b5 23 36 8f 86 36 87 41 ae 5a ab 36 4f 73 0e 83 94 83 e3 12 10 4f 39 8b b2 c9 5b 36 cb f9 c9 68 cc 8f e7 6c 36 6f 07 6d 7b c2 2f da cf Data Ascii: i{F0DQd<,J82'Oh@&H-y~^Xd{;"^k%mb4977<OY&s>c\|M[+t(w6o>7fMlk?fd>~c;XGC^3*y6KgW$[Lv6oFy{3XO#Y#66AZ6OsO9[6hl6om{/
2024-10-30 07:46:22 UTC	1379	IN	Data Raw: db 28 2a 50 0f 1b 6c b9 2c 98 12 85 7f cc 3c 77 8d 62 c2 06 cd e7 b0 66 6a f8 8c cf 80 29 89 db c6 58 f3 f6 98 5d 81 dc 90 5e 29 f6 45 74 89 44 b1 d8 53 c0 f0 eb e6 71 2f e0 8c 8b 1e 60 b2 7c c6 e1 44 96 dd 90 08 32 64 f9 e4 1f 73 a0 b1 1c 4e ad 09 70 43 2c 1d e5 d0 f7 76 3b 47 9a 6c 3b a5 1a b8 50 d4 0f a3 c6 0b 26 bb 58 a2 3f 18 2c c2 1f 2c 30 b6 fa 46 75 ab 6f 6e 2a c0 03 8e f5 8c df 75 da 27 4e 51 5a 43 c2 ff 30 88 fc 8d 1a 56 c1 18 0d 54 15 f8 14 c2 de 23 51 e3 1d 60 a2 2b cf 9f d0 f1 69 d5 42 b9 15 d7 c9 2b 06 c3 8b ed b8 21 8d 94 fe 15 ad 3f 78 52 95 1d 80 2b 64 8e 17 0a 72 a2 49 e1 1f 6b 50 a7 00 d8 15 33 65 ae fd d9 8c 5d 75 46 39 fd 05 24 86 56 c5 7a 0a 5c 73 98 27 11 5a 92 8f 1e fe f5 5a 25 68 57 b9 bc d3 0a 1b d9 5f 2e a3 53 e0 8c d5 b3 d5 57 Data Ascii: (Pl,<wbfj)X]^)EtDSq/`\|D2dsNpC,v;Gl;P&X?,,0Fuonu'NQZC0VT#Q`+iB+!?xR+drIkP3e]uF9$Vz\s'ZZ%hW_.SW
2024-10-30 07:46:22 UTC	1379	IN	Data Raw: 38 f4 b0 5c 6e 5c a2 ce b0 d7 8a bd d2 94 a7 97 96 41 4d 9e ca ee 23 c0 a6 98 cd 01 70 73 58 7f 24 a6 ea e9 33 6e af be a9 6b f9 e1 f8 cd eb 0e e1 01 12 26 c1 aa 03 62 36 10 f2 83 d2 e4 04 2a 59 21 f1 64 c5 90 7a d6 4b 9e cc 2d cf 3a c9 a6 96 6b fd 32 8a e7 43 00 fb 96 a8 3d 65 71 8c 34 b4 b9 fa 4d d5 de 8d 06 43 ac f7 34 9b cf b3 71 51 b5 de 7f a5 66 31 86 62 26 cf 4a 33 d9 00 be 65 e3 42 ee 68 13 0d f4 54 bb c0 d5 28 8d 09 2b 9d b5 9f b9 d8 c9 6e e8 02 65 e2 9d c1 62 14 07 e2 cf 72 39 a5 bf 5b 5b be 50 fe a0 66 f0 f7 88 ab bf cb e5 f5 ca 4f 50 5b 9b d0 22 9d f6 e9 49 90 a6 53 6a b1 8f 0a 54 80 c5 e1 39 a0 c6 cb 51 3e e7 13 24 bb 6e 8b 1b 43 b8 a4 23 04 97 5c e2 73 c1 d7 9e 46 b0 8f dc 82 5b e9 e4 d9 6c 6e 3b 06 c2 be 63 e6 f8 d7 8f 93 d4 34 38 3c 38 be Data Ascii: 8\n\AM#psX$3nk&b6*Y!dzK-:k2C=eq4MC4qQf1b&J3eBhT(+nebr9[[PfOP["ISjT9Q>$nC#\sF[ln;c48<8
2024-10-30 07:46:22 UTC	1379	IN	Data Raw: bb 7b 0f ff b9 75 1a 6e 1e 2e ff 27 dc 3c 83 59 c0 1c f7 be 7d b4 fb f0 e1 96 1d fe eb f0 5f 67 8e fb dd 77 7b 0f 1f fd 13 fe 83 12 a8 07 d5 96 87 9b 50 3e 84 26 1e 3c fa e6 9f 0f 1f 7c f7 cf fe 69 ba b5 b5 f3 08 07 be 65 db c3 80 9d 76 fb 30 e2 47 cb e1 13 28 fb 16 2a bb e1 e3 c7 0f ba cb 10 9f dd 43 f7 ac ef 5c 0f 03 18 df f6 83 fe bf f0 cf 77 e2 cf ee 43 f9 f7 9b be df 02 8c 43 ad 3a 79 0d c1 cf bd be b4 ae 62 a7 0f fa 2b 9c 71 1a 3c f2 01 64 c9 29 00 b2 bf 05 e5 a9 28 1f 06 96 e5 3f 44 50 38 c3 ad c0 4e 10 a4 0f fa 4f 9e 3c fc da fe 76 1b 46 ea 6c ee 3e 72 f4 b1 60 03 00 15 26 0f 0d 53 cf c8 56 2a 5a e5 0c 36 61 e7 a3 01 6e ae ce 22 e7 b3 fd 01 50 74 d4 73 3b 5b f5 0a d3 94 cd 61 28 63 f9 5e 79 47 69 e7 a8 2d ba 9a 12 47 da 28 b9 b2 81 73 de 7a c5 e6 Data Ascii: {un.'<Y}_gw{P>&<\|iev0G(C\wCC:yb+q<d)(?DP8NO<vFl>r`&SVZ6an"Pts;[a(c^yGi-G(sz
2024-10-30 07:46:22 UTC	1379	IN	Data Raw: db 8b e4 11 df f0 ce 8b 8b ef 54 3b b6 51 5f 9e e1 fe cf 80 1d 78 8b c5 67 28 3d 21 63 8e 98 12 23 a8 ae dc 9f 60 41 94 12 6b 88 b7 79 b1 73 75 3a ec 03 16 d8 a5 4f a0 2c c0 17 8d 8a 45 3a 81 e1 58 34 b1 36 d4 fc 50 9d 94 08 42 dc 46 92 3d 43 cd b9 8b 64 ac 60 84 2e d1 52 51 d4 79 0a 55 9e eb bb 38 83 98 be be 43 fb 44 e7 a9 fd e7 eb da 7f 8e 55 1a 3b c0 21 51 fb 8a 7e d9 75 02 86 ca ce ea 89 0c ec 51 b7 a0 e8 c0 2b 6d bf c0 73 f1 6e 04 7a fe 1e 84 e0 a3 09 ae dc 39 2f d3 51 1f e8 72 ec df 91 2e df d4 ce 0b 18 76 61 b7 79 89 86 ae 95 0f 10 0e ad c2 d0 0c 01 a1 fb 65 92 de b7 67 92 89 a0 9b 8f 2f 80 d3 9f e3 5c 34 80 ef 06 59 35 ea 77 7a d0 95 43 0a 80 1b 6d 8b 73 84 5d da 2f 50 8d 7d b7 33 f0 b6 96 1d f7 45 10 55 50 af fe 4d 09 f3 de 84 ca 64 ae 41 3f df Data Ascii: T;Q_xg(=!c#`Akysu:O,E:X46PBF=Cd`.RQyU8CDU;!Q~uQ+msnz9/Qr.vayeg/\4Y5wzCms]/P}3EUPMdA?
2024-10-30 07:46:22 UTC	1379	IN	Data Raw: 6d 08 08 59 6f c5 17 57 bc 7b 4f e2 5e d7 db d5 46 1b 1a 41 91 13 30 39 4e 27 3a e5 fd 12 0f 8a d1 79 34 9e 21 c0 ea 93 50 cb 21 df d9 63 02 9b 70 f5 82 11 4f 95 6f 73 f0 29 84 87 51 fe 0b d1 e4 60 26 9e 94 68 1a 9c 31 7a 16 6c 50 f0 3d 3d bc 46 4e 7e 14 05 97 11 3d 12 44 82 9f 42 18 c7 b4 bc 1a 65 ab 1f c3 5f a8 bd 57 b7 d7 a2 1d d8 05 36 47 fe 80 15 f2 1a 56 91 91 03 1b 79 38 ae 9c b2 28 12 d1 2e a6 41 d8 ca db db 40 87 15 42 aa 74 8c 16 60 d2 66 7a 51 cf 44 5f c7 13 83 79 12 f5 a2 2d 83 6c 78 80 3d 08 f6 4f cd 9b 8a 6a a2 43 52 24 b6 0b f9 bb 04 75 93 15 31 bd 4f 76 97 6a a5 ec c6 4a 78 8b 40 6d e1 19 55 ea 57 e0 2a b9 68 17 6e 52 ca 39 ac bc b1 cd 1b 2c e9 7a 80 b6 12 4c 6c 6c 6c 68 01 9b f4 e3 31 b0 39 d0 d7 90 e5 14 4c a0 61 96 e4 b6 7e d1 d8 47 6c Data Ascii: mYoW{O^FA09N':y4!P!cpOos)Q`&h1zlP==FN~=DBe_W6GVy8(.A@Bt`fzQD_y-lx=OjCR$u1OvjJx@mUW*hnR9,zLlllh19La~Gl
2024-10-30 07:46:22 UTC	1379	IN	Data Raw: db 64 b6 5c 03 86 df 00 8c a4 00 46 22 80 81 7f 92 2a 30 06 02 18 43 01 0c 5e 63 a6 09 a6 45 b8 02 ae 82 6e 44 74 05 9f 03 df c5 97 cb 67 91 3d 74 8d 12 23 b2 8a a3 a2 a4 70 a9 ed 53 33 4d 83 08 36 fc 0c e8 ab bf f1 29 b4 53 74 b6 a1 a6 51 02 51 31 84 fc 34 48 8d 58 0c 04 30 15 e2 64 95 04 a9 1f c9 0d 89 0e 82 e2 e7 e6 e6 5a 97 d2 08 af db 27 f3 13 ea d5 22 7f d5 92 17 6e 0b 8a 1b 1c 3a 12 24 a5 a9 72 64 48 80 9d 13 f1 81 1c 3f dc dc 04 44 e1 18 ca 02 16 ea 05 60 da 06 92 f3 94 ec 10 80 17 46 d3 b5 67 42 6b 6d 3b 18 57 66 9e 4d 71 40 6c c0 44 17 40 a5 61 0a a4 0a 61 e6 1f 23 16 ce 67 ae 3b 10 22 48 1d c9 78 6d d3 99 94 43 e3 9e 16 44 58 7c 55 3a 07 2c b4 32 c3 83 06 1d d2 c5 7b 34 ef e5 bd c8 9e 3a de 71 dd 48 cf 7a f6 e6 95 8c 24 f2 12 3e e5 b1 65 3a 6c Data Ascii: d\F"*0C^cEnDtg=t#pS3M6)StQQ14HX0dZ'"n:$rdH?D`FgBkm;WfMq@lD@aa#g;"HxmCDX\|U:,2{4:qHz$>e:l
2024-10-30 07:46:22 UTC	1379	IN	Data Raw: d7 58 29 2c dd 88 96 c0 aa c3 56 d3 86 c8 6f bb eb bd b8 ef 4d 2f 36 3b 29 33 0a 06 f7 58 3e 1c ac 7a c4 45 8b b2 50 c8 43 01 5f 57 11 cf 9c 0b 85 19 d0 97 71 93 6c 1e b4 6e 99 8e 09 82 a6 d9 6c c4 2a a4 0c 85 3f 14 5b b7 72 fa ae 3b ea ac 82 89 b5 8a 39 10 63 de 00 e5 a8 27 51 53 29 f6 29 cc 25 dd d8 22 0f 53 b0 39 05 f3 e2 57 e2 6a d3 21 24 18 f9 9c e7 f3 86 4e cc e9 4a d3 ac 8a fe 3c 36 6e 9b 75 9f fa 22 a7 40 61 d9 07 a1 70 01 94 fc ce 50 91 ab 6c e1 62 69 d8 a0 36 e5 4e 78 82 15 47 d9 22 5f 8b 2b 2d d1 d8 4d c8 82 ef 0b 64 c9 45 13 f9 17 71 30 44 36 1b 16 08 51 90 36 b6 1c 15 82 f6 24 84 73 9c bc d8 e1 e8 c6 f4 ac f0 07 fd 09 e1 4f cc c3 05 4c c2 22 8b 7c ab ef ce c8 90 da 6e b6 d1 53 4b da bd 9b 89 5e d7 34 d1 03 24 43 03 cc 2f 35 ef eb fa 4f 0b f3 Data Ascii: X),VoM/6;)3X>zEPC_Wqlnl*?[r;9c'QS))%"S9Wj!$NJ<6nu"@apPlbi6NxG"_+-MdEq0D6Q6$sOL"\|nSK^4$C/5O
2024-10-30 07:46:22 UTC	1379	IN	Data Raw: 3c 3a 11 13 ca 53 24 6c 5f 84 67 24 f2 d3 2e af 52 3b 5c cc 89 8a 81 5c 08 a7 25 6c 00 24 61 46 c0 de 95 cb 4b c7 64 02 50 ef c1 b8 69 65 f0 1c ed 18 f3 75 3f 30 fb 3d 7a 6b 93 8c 68 5b e2 46 be ad 6b b4 47 82 db 40 97 f5 28 9b c5 6d 8c 22 2a 29 ab e1 ab 5d 31 96 7c 8f a6 c0 9e 0d 6d 63 d0 3a a3 f9 03 ba 54 8f c9 db 68 6d 1f 9d b6 b9 20 45 27 d8 aa 62 7e df af dc 24 6e b8 69 50 73 d4 d9 eb 30 e3 57 91 de 20 f8 81 f2 1b 74 1f 97 93 65 28 5d c5 ca fd 6d 9d eb 9a 73 5d 95 4d 75 38 9e e0 b4 5f 92 2e b3 46 61 42 a8 3f 48 3a f0 ed 4a 03 e5 47 cc 4e e4 88 cc 44 51 53 34 6a 66 7c 69 fc be 21 45 07 db 08 e8 b2 4b 4b 3d 42 c3 bf 6e 90 34 c6 8a 15 48 a9 ff c5 04 05 20 d4 34 0a b7 d5 22 ad 5c cd d7 48 c6 1f c6 70 c9 c2 95 36 24 1f da 18 73 70 17 c2 7f d2 c7 dc 4b 32 Data Ascii: <:S$l_g$.R;\\%l$aFKdPieu?0=zkh[FkG@(m"*)]1\|mc:Thm E'b~$niPs0W te(]ms]Mu8_.FaB?H:JGNDQS4jf\|i!EKK=Bn4H 4"\Hp6$spK2
2024-10-30 07:46:22 UTC	1379	IN	Data Raw: 34 38 ae 36 28 42 6e 16 54 ff 07 f2 65 d1 03 96 29 c5 ce 51 95 8a bf c5 e9 e3 08 d1 74 a3 2b 6c e7 2f ed 4a 2e 0c 39 45 b7 4d d6 e4 40 d1 d9 5c 95 a1 6a 85 b5 45 35 99 1d 89 4d 62 12 84 92 11 4f 63 78 0b 14 47 aa 5e d6 eb 43 c8 7c c0 3a 66 29 cf 61 fe b0 15 a5 8a da 42 77 05 91 1d 2b 74 28 38 cd 59 4c 81 6a 04 57 1d 6a e8 8b 89 f8 2d 8a 19 53 2e c4 00 96 b9 c4 bf e2 9d 82 02 be 55 bf 1d fd 3a 88 dd 90 22 35 88 5d 82 c7 71 60 a4 04 98 67 47 c7 6f 54 88 34 cc 84 07 98 50 c1 6c b1 3f 0a 18 37 56 80 6d b2 b9 39 41 5f 39 61 23 0e bb 4f 0e c0 8b dd 72 f7 de ba ee 01 b7 85 2a 04 04 01 46 e1 58 4b b3 bf b1 df 18 d3 86 94 91 ff 1e 9a bb d2 65 58 11 c4 7d 46 cf f1 81 9a 08 c5 92 77 87 65 5e 49 e8 51 d6 82 b4 79 1b 9c 21 a4 68 59 8e d1 84 17 17 05 ef 38 e4 5e 68 9d Data Ascii: 486(BnTe)Qt+l/J.9EM@\jE5MbOcxG^C\|:f)aBw+t(8YLjWj-S.U:"5]q`gGoT4Pl?7Vm9A_9a#Or*FXKeX}Fwe^IQy!hY8^h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49762	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:21 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-30 07:46:22 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=32377 Date: Wed, 30 Oct 2024 07:46:22 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49770	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:22 UTC	875	OUT	GET /a/etc.clientlibs/ace/clientlibs/clientlib-pos.lc-7cbb91b972378ab814dfaf40d82939a8-lc.min.js HTTP/1.1 Host: all.accor.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all
2024-10-30 07:46:22 UTC	701	IN	HTTP/1.1 200 OK Age: 528547 cache-control: max-age=2592000, public, immutable Content-Type: application/javascript;charset=utf-8 Date: Wed, 30 Oct 2024 07:46:22 GMT Etag: W/"89b-2386f26fb1bdc0-gzip" Last-Modified: Thu, 24 Oct 2024 04:57:15 GMT Server: ECAcc (lhd/370E) Strict-Transport-Security: max-age=31557600 Vary: Accept-Encoding X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Content-Type-Options: nosniff x-frame-options: SAMEORIGIN X-Iinfo: 2-189763-189764 NNNY CT(16 15 0) RT(1730113278173 5) q(0 0 0 1) r(0 1) U24 X-Served-By: cache-fra-etou8220072-FRA X-Timer: S1730113278.406153,VS0,VS0,VE3 x-vhost: prod-allcom-publish Content-Length: 2203 Connection: close
2024-10-30 07:46:22 UTC	2203	IN	Data Raw: 0a 63 6f 6e 73 74 20 4e 4f 4e 5f 50 4f 53 5f 57 45 42 53 49 54 45 20 3d 20 5b 27 6d 61 6e 74 72 61 27 5d 3b 0a 63 6f 6e 73 74 20 75 72 6c 20 3d 20 27 2f 63 6f 6e 74 65 6e 74 2f 73 6c 69 6e 67 2f 73 65 72 76 6c 65 74 73 2f 61 63 65 2f 67 65 74 70 6f 73 63 6f 6f 6b 69 65 73 27 3b 0a 0a 2f 2a 46 75 6e 63 74 69 6f 6e 20 74 6f 20 64 65 63 6f 64 65 20 74 68 65 20 63 6f 6f 6b 69 65 20 2a 2f 0a 66 75 6e 63 74 69 6f 6e 20 67 65 74 43 6f 6f 6b 69 65 28 61 70 70 63 6e 61 6d 65 29 20 7b 0a 20 20 20 20 6c 65 74 20 6d 61 74 63 68 65 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 6d 61 74 63 68 28 6e 65 77 20 52 65 67 45 78 70 28 0a 20 20 20 20 20 20 20 20 22 28 3f 3a 5e 7c 3b 20 29 22 20 2b 20 61 70 70 63 6e 61 6d 65 2e 72 65 70 6c 61 63 65 28 2f 28 5b 5c Data Ascii: const NON_POS_WEBSITE = ['mantra'];const url = '/content/sling/servlets/ace/getposcookies';/Function to decode the cookie /function getCookie(appcname) { let matches = document.cookie.match(new RegExp( "(?:^\|; )" + appcname.replace(/([\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49773	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:22 UTC	911	OUT	GET /a/etc.clientlibs/ace/components/structure/base-page/clientlib-one-trust/one-trust.lc-91acfe7ca172af47f628e88402176079-lc.min.js HTTP/1.1 Host: all.accor.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all
2024-10-30 07:46:22 UTC	703	IN	HTTP/1.1 200 OK Age: 505820 cache-control: max-age=2592000, public, immutable Content-Type: application/javascript;charset=utf-8 Date: Wed, 30 Oct 2024 07:46:22 GMT Etag: W/"38a-2386f26fb1bdc0-gzip" Last-Modified: Thu, 24 Oct 2024 11:16:02 GMT Server: ECAcc (lhd/35FA) Strict-Transport-Security: max-age=31557600 Vary: Accept-Encoding X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Content-Type-Options: nosniff x-frame-options: SAMEORIGIN X-Iinfo: 14-7991698-7991700 NNNY CT(14 17 0) RT(1730113278186 7) q(0 1 1 0) r(1 1) U24 X-Served-By: cache-fra-etou8220054-FRA X-Timer: S1730113278.406982,VS0,VS0,VE2 x-vhost: prod-allcom-publish Content-Length: 906 Connection: close
2024-10-30 07:46:22 UTC	906	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 63 68 65 63 6b 50 6c 61 74 66 6f 72 6d 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 61 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 3b 72 65 74 75 72 6e 2d 31 3c 61 2e 69 6e 64 65 78 4f 66 28 22 70 6c 61 74 66 6f 72 6d 5c 78 33 64 41 50 50 2d 49 50 48 4f 4e 45 22 29 7c 7c 2d 31 3c 61 2e 69 6e 64 65 78 4f 66 28 22 70 6c 61 74 66 6f 72 6d 5c 78 33 64 41 50 50 2d 41 4e 44 52 4f 49 44 22 29 3f 21 30 3a 21 31 7d 69 66 28 2f 41 50 50 2d 28 49 50 48 4f 4e 45 7c 41 4e 44 52 4f 49 44 29 2f 2e 74 65 73 74 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 28 22 3b 20 22 2b 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 29 2e 73 70 6c 69 74 28 22 3b 20 22 2b 61 2b 22 5c 78 33 64 22 29 3b 69 66 28 32 3d 3d 3d Data Ascii: function checkPlatform(){function c(){var a=window.location.search;return-1<a.indexOf("platform\x3dAPP-IPHONE")\|\|-1<a.indexOf("platform\x3dAPP-ANDROID")?!0:!1}if(/APP-(IPHONE\|ANDROID)/.test(function(a){a=("; "+document.cookie).split("; "+a+"\x3d");if(2===

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49771	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:22 UTC	884	OUT	GET /a/etc.clientlibs/ace/clientlibs-modules/clientlib-core.lc-63e399c5722b54df72093811820263e0-lc.min.js HTTP/1.1 Host: all.accor.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all
2024-10-30 07:46:22 UTC	697	IN	HTTP/1.1 200 OK Age: 505797 cache-control: max-age=2592000, public, immutable Content-Type: application/javascript;charset=utf-8 Date: Wed, 30 Oct 2024 07:46:22 GMT Etag: W/"39b6-2386f26fb1bdc0-gzip" Last-Modified: Thu, 24 Oct 2024 11:16:25 GMT Server: ECAcc (lhd/35E3) Strict-Transport-Security: max-age=31557600 Vary: Accept-Encoding X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Content-Type-Options: nosniff x-frame-options: SAMEORIGIN X-Iinfo: 5-26900837-26900838 SNNN RT(1730113252242 698) q(0 0 0 0) r(0 0) U24 X-Served-By: cache-fra-etou8220118-FRA X-Timer: S1730113253.248964,VS0,VS0,VE1 x-vhost: prod-allcom-publish Content-Length: 14774 Connection: close
2024-10-30 07:46:22 UTC	14774	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 74 28 65 78 70 6f 72 74 73 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 5d 2c 74 29 3a 74 28 28 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 65 7c 7c 73 65 6c 66 29 2e 43 6f 72 65 4a 53 3d 7b 7d 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 74 3d 22 72 65 67 69 73 74 65 72 Data Ascii: !function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports):"function"==typeof define&&define.amd?define(["exports"],t):t((e="undefined"!=typeof globalThis?globalThis:e\|\|self).CoreJS={})}(this,(function(e){"use strict";const t="register

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49772	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:22 UTC	904	OUT	GET /a/etc.clientlibs/ace/clientlibs-modules/components/clientlib-login-connect.lc-1f5662ce4b387990f20cf119603729fb-lc.min.js HTTP/1.1 Host: all.accor.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all
2024-10-30 07:46:22 UTC	707	IN	HTTP/1.1 200 OK Age: 167288 cache-control: max-age=2592000, public, immutable Content-Type: application/javascript;charset=utf-8 Date: Wed, 30 Oct 2024 07:46:22 GMT Etag: W/"52202-2386f26fb1bdc0-gzip" Last-Modified: Mon, 28 Oct 2024 09:18:14 GMT Server: ECAcc (lhd/35EA) Strict-Transport-Security: max-age=31557600 Vary: Accept-Encoding X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Content-Type-Options: nosniff x-frame-options: SAMEORIGIN X-Iinfo: 8-3990449-3990450 NNNY CT(15 16 0) RT(1730113252346 5) q(0 0 0 1) r(0 0) U24 X-Served-By: cache-fra-etou8220111-FRA X-Timer: S1730113253.571644,VS0,VS0,VE2 x-vhost: prod-allcom-publish Content-Length: 336386 Connection: close
2024-10-30 07:46:22 UTC	16383	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 43 72 65 61 74 65 73 20 63 6f 6f 6b 69 65 20 66 6f 72 20 6c 6f 67 69 6e 20 63 6f 6d 70 6f 6e 65 6e 74 20 69 6e 20 41 45 4d 20 61 6e 64 0a 20 2a 20 20 6c 6f 61 64 69 6e 67 20 62 65 66 6f 72 65 20 63 75 73 74 6f 6d 65 72 20 61 70 69 20 74 6f 20 62 65 20 61 62 6c 65 20 74 6f 20 63 6f 6e 6e 65 63 74 20 77 69 74 68 20 74 65 73 74 20 65 6e 76 73 0a 20 2a 2f 0a 66 75 6e 63 74 69 6f 6e 20 63 72 65 61 74 65 43 75 73 74 6f 6d 65 72 45 6e 76 43 6f 6f 6b 69 65 28 29 20 7b 0a 20 20 20 20 63 6f 6e 73 74 20 41 65 6d 44 6f 6d 61 69 6e 73 4c 69 73 74 20 3d 20 2f 5e 28 3f 3a 62 75 69 6c 64 7c 62 75 69 6c 64 71 61 7c 72 75 6e 7c 72 75 6e 71 61 7c 75 61 74 29 28 3f 3a 2d 28 2e 2a 29 29 28 3f 3a 2e 61 63 63 6f 72 29 5c 2e 28 3f 3a 63 6f 6d 29 24 2f 67 6d Data Ascii: /** * Creates cookie for login component in AEM and * loading before customer api to be able to connect with test envs /function createCustomerEnvCookie() { const AemDomainsList = /^(?:build\|buildqa\|run\|runqa\|uat)(?:-(.))(?:.accor)\.(?:com)$/gm
2024-10-30 07:46:22 UTC	16383	IN	Data Raw: 6f 72 3b 72 65 74 75 72 6e 20 72 3d 3d 3d 76 6f 69 64 20 30 7c 7c 28 6e 3d 6d 28 72 29 5b 6f 5d 29 3d 3d 6e 75 6c 6c 3f 74 3a 62 28 6e 29 7d 7d 2c 34 39 33 30 3a 66 75 6e 63 74 69 6f 6e 28 45 2c 49 2c 6c 29 7b 76 61 72 20 6d 3d 6c 28 22 32 64 30 30 22 29 2c 62 3d 6c 28 22 64 30 33 39 22 29 3b 45 2e 65 78 70 6f 72 74 73 3d 21 21 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 26 26 21 62 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 43 3d 53 79 6d 62 6f 6c 28 29 3b 72 65 74 75 72 6e 21 53 74 72 69 6e 67 28 43 29 7c 7c 21 28 4f 62 6a 65 63 74 28 43 29 69 6e 73 74 61 6e 63 65 6f 66 20 53 79 6d 62 6f 6c 29 7c 7c 21 53 79 6d 62 6f 6c 2e 73 68 61 6d 26 26 6d 26 26 6d 3c 34 31 7d 29 7d 2c 22 34 39 39 65 22 3a 66 75 6e 63 74 Data Ascii: or;return r===void 0\|\|(n=m(r)[o])==null?t:b(n)}},4930:function(E,I,l){var m=l("2d00"),b=l("d039");E.exports=!!Object.getOwnPropertySymbols&&!b(function(){var C=Symbol();return!String(C)\|\|!(Object(C)instanceof Symbol)\|\|!Symbol.sham&&m&&m<41})},"499e":funct
2024-10-30 07:46:22 UTC	16383	IN	Data Raw: 28 22 61 36 34 30 22 29 2c 69 3d 5b 5d 2e 6a 6f 69 6e 2c 74 3d 62 21 3d 4f 62 6a 65 63 74 2c 6e 3d 6f 28 22 6a 6f 69 6e 22 2c 22 2c 22 29 3b 6d 28 7b 74 61 72 67 65 74 3a 22 41 72 72 61 79 22 2c 70 72 6f 74 6f 3a 21 30 2c 66 6f 72 63 65 64 3a 74 7c 7c 21 6e 7d 2c 7b 6a 6f 69 6e 3a 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 69 2e 63 61 6c 6c 28 43 28 74 68 69 73 29 2c 72 3d 3d 3d 76 6f 69 64 20 30 3f 22 2c 22 3a 72 29 7d 7d 29 7d 2c 61 34 64 33 3a 66 75 6e 63 74 69 6f 6e 28 45 2c 49 2c 6c 29 7b 76 61 72 20 6d 3d 6c 28 22 32 33 65 37 22 29 2c 62 3d 6c 28 22 64 61 38 34 22 29 2c 43 3d 6c 28 22 64 30 36 36 22 29 2c 6f 3d 6c 28 22 63 34 33 30 22 29 2c 69 3d 6c 28 22 38 33 61 62 22 29 2c 74 3d 6c 28 22 34 39 33 30 22 29 2c 6e 3d 6c 28 22 66 64 62 Data Ascii: ("a640"),i=[].join,t=b!=Object,n=o("join",",");m({target:"Array",proto:!0,forced:t\|\|!n},{join:function(r){return i.call(C(this),r===void 0?",":r)}})},a4d3:function(E,I,l){var m=l("23e7"),b=l("da84"),C=l("d066"),o=l("c430"),i=l("83ab"),t=l("4930"),n=l("fdb
2024-10-30 07:46:22 UTC	3	IN	Data Raw: 6c 28 22 Data Ascii: l("
2024-10-30 07:46:22 UTC	16383	IN	Data Raw: 32 33 65 37 22 29 2c 62 3d 6c 28 22 38 33 61 62 22 29 2c 43 3d 6c 28 22 35 36 65 66 22 29 2c 6f 3d 6c 28 22 66 63 36 61 22 29 2c 69 3d 6c 28 22 30 36 63 66 22 29 2c 74 3d 6c 28 22 38 34 31 38 22 29 3b 6d 28 7b 74 61 72 67 65 74 3a 22 4f 62 6a 65 63 74 22 2c 73 74 61 74 3a 21 30 2c 73 68 61 6d 3a 21 62 7d 2c 7b 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 6f 72 28 76 61 72 20 72 2c 65 2c 61 3d 6f 28 6e 29 2c 73 3d 69 2e 66 2c 75 3d 43 28 61 29 2c 63 3d 7b 7d 2c 66 3d 30 3b 75 2e 6c 65 6e 67 74 68 3e 66 3b 29 65 3d 73 28 61 2c 72 3d 75 5b 66 2b 2b 5d 29 2c 65 21 3d 3d 76 6f 69 64 20 30 26 26 74 28 63 2c 72 2c 65 29 3b 72 65 74 75 72 6e 20 63 7d 7d 29 7d 2c 64 66 37 35 3a 66 75 6e 63 74 Data Ascii: 23e7"),b=l("83ab"),C=l("56ef"),o=l("fc6a"),i=l("06cf"),t=l("8418");m({target:"Object",stat:!0,sham:!b},{getOwnPropertyDescriptors:function(n){for(var r,e,a=o(n),s=i.f,u=C(a),c={},f=0;u.length>f;)e=s(a,r=u[f++]),e!==void 0&&t(c,r,e);return c}})},df75:funct
2024-10-30 07:46:22 UTC	16383	IN	Data Raw: 3a 7b 74 79 70 65 3a 5b 4f 62 6a 65 63 74 2c 53 74 72 69 6e 67 5d 2c 72 65 71 75 69 72 65 64 3a 21 31 2c 64 65 66 61 75 6c 74 3a 6e 75 6c 6c 7d 7d 7d 2c 43 74 3d 62 74 2c 5f 74 3d 28 6c 28 22 34 61 63 38 22 29 2c 76 28 43 74 2c 54 2c 4d 2c 21 31 2c 6e 75 6c 6c 2c 22 33 35 64 66 39 31 39 33 22 2c 6e 75 6c 6c 29 29 2c 55 74 3d 5f 74 2e 65 78 70 6f 72 74 73 2c 71 74 3d 7b 6e 61 6d 65 3a 22 4d 65 6e 75 22 2c 63 6f 6d 70 6f 6e 65 6e 74 73 3a 7b 4c 6f 79 61 6c 74 79 43 61 72 64 3a 6a 2c 53 74 61 74 75 73 50 6f 69 6e 74 73 43 61 72 64 3a 55 74 7d 2c 64 61 74 61 28 29 7b 72 65 74 75 72 6e 7b 61 63 74 69 6f 6e 43 61 6c 6c 62 61 63 6b 73 4b 65 79 73 3a 7b 73 69 67 6e 69 6e 3a 22 63 6f 6e 6e 65 63 74 41 63 74 69 6f 6e 22 2c 6c 6f 67 6f 75 74 3a 22 64 69 73 63 6f 6e Data Ascii: :{type:[Object,String],required:!1,default:null}}},Ct=bt,_t=(l("4ac8"),v(Ct,T,M,!1,null,"35df9193",null)),Ut=_t.exports,qt={name:"Menu",components:{LoyaltyCard:j,StatusPointsCard:Ut},data(){return{actionCallbacksKeys:{signin:"connectAction",logout:"discon
2024-10-30 07:46:22 UTC	16383	IN	Data Raw: 6e 6b 22 3a 22 68 74 74 70 73 3a 2f 2f 61 6c 6c 2e 61 63 63 6f 72 2e 63 6f 6d 2f 61 63 63 6f 75 6e 74 2f 69 6e 64 65 78 2e 66 72 2e 73 68 74 6d 6c 23 2f 64 61 73 68 62 6f 61 72 64 22 2c 22 68 69 67 68 6c 69 67 68 74 22 3a 22 74 72 75 65 22 7d 2c 22 62 6f 6f 6b 69 6e 67 73 22 3a 7b 22 74 65 78 74 22 3a 22 56 6f 73 20 72 5c 78 45 39 73 65 72 76 61 74 69 6f 6e 73 22 2c 22 6c 69 6e 6b 22 3a 22 68 74 74 70 73 3a 2f 2f 61 6c 6c 2e 61 63 63 6f 72 2e 63 6f 6d 2f 61 63 63 6f 75 6e 74 2f 69 6e 64 65 78 2e 66 72 2e 73 68 74 6d 6c 23 2f 6d 79 2d 62 6f 6f 6b 69 6e 67 73 22 2c 22 68 69 67 68 6c 69 67 68 74 22 3a 22 74 72 75 65 22 7d 2c 22 66 69 64 65 6c 69 74 79 22 3a 7b 22 74 65 78 74 22 3a 22 56 6f 74 72 65 20 63 6f 6d 70 74 65 20 64 65 20 66 69 64 5c 78 45 39 6c 69 Data Ascii: nk":"https://all.accor.com/account/index.fr.shtml#/dashboard","highlight":"true"},"bookings":{"text":"Vos r\xE9servations","link":"https://all.accor.com/account/index.fr.shtml#/my-bookings","highlight":"true"},"fidelity":{"text":"Votre compte de fid\xE9li
2024-10-30 07:46:22 UTC	16383	IN	Data Raw: 3a 22 53 6c 75 69 74 20 68 65 74 20 76 65 6e 73 74 65 72 20 6d 69 6a 6e 20 61 63 63 6f 75 6e 74 22 2c 22 6e 61 76 22 3a 7b 22 61 72 69 61 4c 61 62 65 6c 22 3a 22 6f 70 65 6e 20 68 65 74 20 6d 65 6e 75 20 4d 69 6a 6e 20 61 63 63 6f 75 6e 74 20 26 20 42 65 6c 6f 6e 69 6e 67 65 6e 22 2c 22 62 75 74 74 6f 6e 54 65 78 74 22 3a 22 41 61 6e 6d 65 6c 64 65 6e 20 2f 20 52 65 67 69 73 74 72 65 72 65 6e 22 7d 7d 7d 2c 22 70 6c 22 3a 7b 22 4b 65 79 22 3a 22 70 6c 22 2c 22 6c 61 6e 67 22 3a 22 70 6c 22 2c 22 6d 65 6e 75 22 3a 7b 22 64 69 73 63 6f 6e 6e 65 63 74 65 64 22 3a 7b 22 6c 6f 79 61 6c 74 79 43 61 72 64 22 3a 7b 22 74 69 74 6c 65 22 3a 22 50 72 6f 67 72 61 6d 20 6c 6f 6a 61 6c 6e 6f 5c 75 30 31 35 42 63 69 6f 77 79 22 2c 22 74 65 78 74 22 3a 22 4f 73 7a 63 7a Data Ascii: :"Sluit het venster mijn account","nav":{"ariaLabel":"open het menu Mijn account & Beloningen","buttonText":"Aanmelden / Registreren"}}},"pl":{"Key":"pl","lang":"pl","menu":{"disconnected":{"loyaltyCard":{"title":"Program lojalno\u015Bciowy","text":"Oszcz
2024-10-30 07:46:22 UTC	16383	IN	Data Raw: 68 69 67 68 6c 69 67 68 74 22 3a 22 74 72 75 65 22 7d 2c 22 69 6e 66 6f 72 6d 61 74 69 6f 6e 22 3a 7b 22 74 65 78 74 22 3a 22 5c 75 33 30 34 41 5c 75 35 42 41 32 5c 75 36 39 44 38 5c 75 33 30 36 45 5c 75 36 30 43 35 5c 75 35 38 33 31 22 2c 22 6c 69 6e 6b 22 3a 22 68 74 74 70 73 3a 2f 2f 61 6c 6c 2e 61 63 63 6f 72 2e 63 6f 6d 2f 61 63 63 6f 75 6e 74 2f 69 6e 64 65 78 2e 6a 61 2e 73 68 74 6d 6c 23 2f 69 6e 66 6f 72 6d 61 74 69 6f 6e 2f 70 65 72 73 6f 6e 61 6c 22 2c 22 68 69 67 68 6c 69 67 68 74 22 3a 22 74 72 75 65 22 7d 2c 22 68 65 6c 70 22 3a 7b 22 74 65 78 74 22 3a 22 5c 75 33 30 44 38 5c 75 33 30 45 42 5c 75 33 30 44 37 5c 75 33 30 36 38 5c 75 33 30 42 35 5c 75 33 30 44 44 5c 75 33 30 46 43 5c 75 33 30 43 38 22 2c 22 6c 69 6e 6b 22 3a 22 68 74 74 70 73 Data Ascii: highlight":"true"},"information":{"text":"\u304A\u5BA2\u69D8\u306E\u60C5\u5831","link":"https://all.accor.com/account/index.ja.shtml#/information/personal","highlight":"true"},"help":{"text":"\u30D8\u30EB\u30D7\u3068\u30B5\u30DD\u30FC\u30C8","link":"https
2024-10-30 07:46:22 UTC	16383	IN	Data Raw: 22 68 65 61 64 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 69 29 7b 43 2e 68 65 61 64 65 72 73 5b 69 5d 3d 7b 7d 7d 29 2c 6f 74 2e 66 6f 72 45 61 63 68 28 5b 22 70 6f 73 74 22 2c 22 70 75 74 22 2c 22 70 61 74 63 68 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 69 29 7b 43 2e 68 65 61 64 65 72 73 5b 69 5d 3d 6f 74 2e 6d 65 72 67 65 28 49 29 7d 29 2c 63 72 3d 43 2c 63 72 7d 76 61 72 20 6c 72 2c 4a 72 3b 66 75 6e 63 74 69 6f 6e 20 69 6f 28 29 7b 69 66 28 4a 72 29 72 65 74 75 72 6e 20 6c 72 3b 4a 72 3d 31 3b 76 61 72 20 6f 74 3d 62 6e 28 29 2c 67 74 3d 71 6e 28 29 3b 72 65 74 75 72 6e 20 6c 72 3d 66 75 6e 63 74 69 6f 6e 28 49 2c 6c 2c 6d 29 7b 76 61 72 20 62 3d 74 68 69 73 7c 7c 67 74 3b 72 65 74 75 72 6e 20 6f 74 2e 66 6f 72 45 61 63 68 28 6d 2c 66 75 6e 63 74 69 6f 6e 28 6f Data Ascii: "head"],function(i){C.headers[i]={}}),ot.forEach(["post","put","patch"],function(i){C.headers[i]=ot.merge(I)}),cr=C,cr}var lr,Jr;function io(){if(Jr)return lr;Jr=1;var ot=bn(),gt=qn();return lr=function(I,l,m){var b=this\|\|gt;return ot.forEach(m,function(o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49774	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:22 UTC	1094	OUT	GET /a/etc.clientlibs/ace/clientlibs/clienlibs-3rd-parties/clientlib-vue.lc-f35b543fbf132ab69f5c12eebf271456-lc.min.js HTTP/1.1 Host: all.accor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://all.accor.com/a/en/new-app-offer.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all
2024-10-30 07:46:22 UTC	710	IN	HTTP/1.1 200 OK Age: 505819 cache-control: max-age=2592000, public, immutable Content-Type: application/javascript;charset=utf-8 Date: Wed, 30 Oct 2024 07:46:22 GMT Etag: W/"1de58-2386f26fb1bdc0-gzip" Last-Modified: Thu, 24 Oct 2024 11:16:03 GMT Server: ECAcc (lhd/35B7) Strict-Transport-Security: max-age=31557600 Vary: Accept-Encoding X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Content-Type-Options: nosniff x-frame-options: SAMEORIGIN X-Iinfo: 17-23512569-23512571 NNNY CT(15 21 0) RT(1730113278085 3) q(0 0 0 0) r(0 1) U24 X-Served-By: cache-fra-etou8220137-FRA X-Timer: S1730113279.586835,VS0,VS0,VE2 x-vhost: prod-allcom-publish Content-Length: 122456 Connection: close
2024-10-30 07:46:22 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 76 75 65 2d 69 31 38 6e 20 76 38 2e 32 38 2e 32 20 0a 20 2a 20 28 63 29 20 32 30 32 32 20 6b 61 7a 75 79 61 20 6b 61 77 61 67 75 63 68 69 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 2e 0a 20 2a 2f 0a 76 61 72 20 74 2c 65 3b 74 3d 74 68 69 73 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 5b 22 63 6f 6d 70 61 63 74 44 69 73 70 6c 61 79 22 2c 22 63 75 72 72 65 6e 63 79 22 2c 22 63 75 72 72 65 6e 63 79 44 69 73 70 6c 61 79 22 2c 22 63 75 72 72 65 6e 63 79 53 69 67 6e 22 2c 22 6c 6f 63 61 6c 65 4d 61 74 63 68 65 72 22 2c 22 6e 6f 74 61 74 69 6f 6e 22 2c 22 6e 75 6d 62 65 72 69 6e 67 53 79 73 74 65 6d 22 2c 22 73 69 67 6e 44 69 73 Data Ascii: /! vue-i18n v8.28.2 * (c) 2022 kazuya kawaguchi * Released under the MIT License. */var t,e;t=this,e=function(){"use strict";var t=["compactDisplay","currency","currencyDisplay","currencySign","localeMatcher","notation","numberingSystem","signDis
2024-10-30 07:46:22 UTC	16383	IN	Data Raw: 68 61 69 6e 43 61 63 68 65 3d 7b 7d 2c 74 68 69 73 2e 5f 76 6d 2e 24 73 65 74 28 74 68 69 73 2e 5f 76 6d 2c 22 66 61 6c 6c 62 61 63 6b 4c 6f 63 61 6c 65 22 2c 74 29 7d 2c 72 74 2e 66 6f 72 6d 61 74 46 61 6c 6c 62 61 63 6b 4d 65 73 73 61 67 65 73 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 66 6f 72 6d 61 74 46 61 6c 6c 62 61 63 6b 4d 65 73 73 61 67 65 73 7d 2c 72 74 2e 66 6f 72 6d 61 74 46 61 6c 6c 62 61 63 6b 4d 65 73 73 61 67 65 73 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 5f 66 6f 72 6d 61 74 46 61 6c 6c 62 61 63 6b 4d 65 73 73 61 67 65 73 3d 74 7d 2c 72 74 2e 6d 69 73 73 69 6e 67 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 6d 69 73 73 69 6e 67 Data Ascii: hainCache={},this._vm.$set(this._vm,"fallbackLocale",t)},rt.formatFallbackMessages.get=function(){return this._formatFallbackMessages},rt.formatFallbackMessages.set=function(t){this._formatFallbackMessages=t},rt.missing.get=function(){return this._missing
2024-10-30 07:46:22 UTC	16383	IN	Data Raw: 73 2e 73 65 74 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 7d 72 65 74 75 72 6e 20 65 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 74 68 69 73 2e 73 65 74 5b 65 5d 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 73 65 74 5b 65 5d 3d 21 30 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 73 65 74 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 7d 2c 65 7d 28 29 3b 76 61 72 20 61 65 3d 53 2c 73 65 3d 30 2c 63 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 69 64 3d 73 65 2b 2b 2c 74 68 69 73 2e 73 75 62 73 3d 5b 5d 7d 3b 63 65 2e 70 72 6f 74 Data Ascii: s.set=Object.create(null)}return e.prototype.has=function(e){return!0===this.set[e]},e.prototype.add=function(e){this.set[e]=!0},e.prototype.clear=function(){this.set=Object.create(null)},e}();var ae=S,se=0,ce=function(){this.id=se++,this.subs=[]};ce.prot
2024-10-30 07:46:22 UTC	3	IN	Data Raw: 29 3a 74 Data Ascii: ):t
2024-10-30 07:46:22 UTC	16383	IN	Data Raw: 2e 24 64 65 73 74 72 6f 79 28 29 29 7d 7d 2c 49 74 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 4c 74 29 3b 66 75 6e 63 74 69 6f 6e 20 4d 74 28 69 2c 61 2c 73 2c 63 2c 6c 29 7b 69 66 28 21 74 28 69 29 29 7b 76 61 72 20 66 3d 73 2e 24 6f 70 74 69 6f 6e 73 2e 5f 62 61 73 65 3b 69 66 28 6f 28 69 29 26 26 28 69 3d 66 2e 65 78 74 65 6e 64 28 69 29 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 29 7b 76 61 72 20 70 3b 69 66 28 74 28 69 2e 63 69 64 29 26 26 76 6f 69 64 20 30 3d 3d 3d 28 69 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 69 29 7b 69 66 28 72 28 65 2e 65 72 72 6f 72 29 26 26 6e 28 65 2e 65 72 72 6f 72 43 6f 6d 70 29 29 72 65 74 75 72 6e 20 65 2e 65 72 72 6f 72 43 6f 6d 70 3b 69 66 28 6e 28 65 2e 72 65 73 6f 6c 76 65 64 29 29 72 65 74 75 72 6e 20 Data Ascii: .$destroy())}},It=Object.keys(Lt);function Mt(i,a,s,c,l){if(!t(i)){var f=s.$options._base;if(o(i)&&(i=f.extend(i)),"function"==typeof i){var p;if(t(i.cid)&&void 0===(i=function(e,i){if(r(e.error)&&n(e.errorComp))return e.errorComp;if(n(e.resolved))return
2024-10-30 07:46:22 UTC	16383	IN	Data Raw: 2e 5f 62 61 73 65 3d 65 2c 41 28 65 2e 6f 70 74 69 6f 6e 73 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2c 4e 6e 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 75 73 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 69 6e 73 74 61 6c 6c 65 64 50 6c 75 67 69 6e 73 7c 7c 28 74 68 69 73 2e 5f 69 6e 73 74 61 6c 6c 65 64 50 6c 75 67 69 6e 73 3d 5b 5d 29 3b 69 66 28 74 2e 69 6e 64 65 78 4f 66 28 65 29 3e 2d 31 29 72 65 74 75 72 6e 20 74 68 69 73 3b 76 61 72 20 6e 3d 6b 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 3b 72 65 74 75 72 6e 20 6e 2e 75 6e 73 68 69 66 74 28 74 68 69 73 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 2e 69 6e 73 74 61 6c 6c 3f 65 2e 69 6e 73 74 61 6c 6c 2e 61 70 70 6c 79 28 65 2c 6e 29 3a 22 66 75 6e 63 74 Data Ascii: ._base=e,A(e.options.components,Nn),function(e){e.use=function(e){var t=this._installedPlugins\|\|(this._installedPlugins=[]);if(t.indexOf(e)>-1)return this;var n=k(arguments,1);return n.unshift(this),"function"==typeof e.install?e.install.apply(e,n):"funct
2024-10-30 07:46:22 UTC	16383	IN	Data Raw: 7d 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 74 61 72 67 65 74 3d 3d 3d 65 26 26 2b 2b 63 3e 3d 61 26 26 75 28 29 7d 3b 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 3c 61 26 26 75 28 29 7d 2c 6f 2b 31 29 2c 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 73 2c 6c 29 7d 76 61 72 20 49 69 3d 2f 5c 62 28 74 72 61 6e 73 66 6f 72 6d 7c 61 6c 6c 29 28 2c 7c 24 29 2f 3b 66 75 6e 63 74 69 6f 6e 20 4d 69 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 77 69 6e 64 6f 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 29 2c 69 3d 28 72 5b 41 69 2b 22 44 65 6c 61 79 22 5d 7c 7c 22 22 29 2e 73 70 6c 69 74 28 22 2c 20 22 29 2c 6f 3d 28 72 5b 41 69 2b 22 44 75 72 61 74 69 6f 6e 22 5d 7c 7c 22 22 29 2e 73 70 6c 69 74 28 22 2c Data Ascii: },l=function(t){t.target===e&&++c>=a&&u()};setTimeout(function(){c<a&&u()},o+1),e.addEventListener(s,l)}var Ii=/\b(transform\|all)(,\|$)/;function Mi(e,t){var n,r=window.getComputedStyle(e),i=(r[Ai+"Delay"]\|\|"").split(", "),o=(r[Ai+"Duration"]\|\|"").split(",
2024-10-30 07:46:22 UTC	16383	IN	Data Raw: 65 2c 66 6f 6f 74 65 72 2c 66 6f 72 6d 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 2c 68 65 61 64 2c 68 65 61 64 65 72 2c 68 67 72 6f 75 70 2c 68 72 2c 68 74 6d 6c 2c 6c 65 67 65 6e 64 2c 6c 69 2c 6d 65 6e 75 69 74 65 6d 2c 6d 65 74 61 2c 6f 70 74 67 72 6f 75 70 2c 6f 70 74 69 6f 6e 2c 70 61 72 61 6d 2c 72 70 2c 72 74 2c 73 6f 75 72 63 65 2c 73 74 79 6c 65 2c 73 75 6d 6d 61 72 79 2c 74 62 6f 64 79 2c 74 64 2c 74 66 6f 6f 74 2c 74 68 2c 74 68 65 61 64 2c 74 69 74 6c 65 2c 74 72 2c 74 72 61 63 6b 22 29 2c 78 6f 3d 2f 5e 5c 73 2a 28 5b 5e 5c 73 22 27 3c 3e 5c 2f 3d 5d 2b 29 28 3f 3a 5c 73 2a 28 3d 29 5c 73 2a 28 3f 3a 22 28 5b 5e 22 5d 2a 29 22 2b 7c 27 28 5b 5e 27 5d 2a 29 27 2b 7c 28 5b 5e 5c 73 22 27 3d 3c 3e 60 5d 2b 29 29 29 3f 2f 2c 6b 6f 3d Data Ascii: e,footer,form,h1,h2,h3,h4,h5,h6,head,header,hgroup,hr,html,legend,li,menuitem,meta,optgroup,option,param,rp,rt,source,style,summary,tbody,td,tfoot,th,thead,title,tr,track"),xo=/^\s([^\s"'<>\/=]+)(?:\s(=)\s(?:"([^"])"+\|'([^']*)'+\|([^\s"'=<>`]+)))?/,ko=
2024-10-30 07:46:22 UTC	7772	IN	Data Raw: 65 72 46 6e 73 3a 6e 2e 73 74 61 74 69 63 52 65 6e 64 65 72 46 6e 73 7d 7d 66 75 6e 63 74 69 6f 6e 20 48 61 28 65 2c 74 29 7b 69 66 28 65 2e 70 61 72 65 6e 74 26 26 28 65 2e 70 72 65 3d 65 2e 70 72 65 7c 7c 65 2e 70 61 72 65 6e 74 2e 70 72 65 29 2c 65 2e 73 74 61 74 69 63 52 6f 6f 74 26 26 21 65 2e 73 74 61 74 69 63 50 72 6f 63 65 73 73 65 64 29 72 65 74 75 72 6e 20 42 61 28 65 2c 74 29 3b 69 66 28 65 2e 6f 6e 63 65 26 26 21 65 2e 6f 6e 63 65 50 72 6f 63 65 73 73 65 64 29 72 65 74 75 72 6e 20 55 61 28 65 2c 74 29 3b 69 66 28 65 2e 66 6f 72 26 26 21 65 2e 66 6f 72 50 72 6f 63 65 73 73 65 64 29 72 65 74 75 72 6e 20 7a 61 28 65 2c 74 29 3b 69 66 28 65 2e 69 66 26 26 21 65 2e 69 66 50 72 6f 63 65 73 73 65 64 29 72 65 74 75 72 6e 20 56 61 28 65 2c 74 29 3b 69 Data Ascii: erFns:n.staticRenderFns}}function Ha(e,t){if(e.parent&&(e.pre=e.pre\|\|e.parent.pre),e.staticRoot&&!e.staticProcessed)return Ba(e,t);if(e.once&&!e.onceProcessed)return Ua(e,t);if(e.for&&!e.forProcessed)return za(e,t);if(e.if&&!e.ifProcessed)return Va(e,t);i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49775	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:22 UTC	1100	OUT	GET /a/etc.clientlibs/ace/clientlibs-modules/components/clientlib-customer-api.lc-cda7e9186c25de421f8b91a0daf62395-lc.min.js HTTP/1.1 Host: all.accor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://all.accor.com/a/en/new-app-offer.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all
2024-10-30 07:46:22 UTC	712	IN	HTTP/1.1 200 OK Age: 167287 cache-control: max-age=2592000, public, immutable Content-Type: application/javascript;charset=utf-8 Date: Wed, 30 Oct 2024 07:46:22 GMT Etag: W/"398a2-2386f26fb1bdc0-gzip" Last-Modified: Mon, 28 Oct 2024 09:18:15 GMT Server: ECAcc (lhd/35A2) Strict-Transport-Security: max-age=31557600 Vary: Accept-Encoding X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Content-Type-Options: nosniff x-frame-options: SAMEORIGIN X-Iinfo: 18-236112945-236112946 NNNN CT(15 19 0) RT(1730113252469 3) q(0 0 1 0) r(1 1) U24 X-Served-By: cache-fra-etou8220080-FRA X-Timer: S1730113253.108609,VS0,VS0,VE1 x-vhost: prod-allcom-publish Content-Length: 235682 Connection: close
2024-10-30 07:46:22 UTC	16383	IN	Data Raw: 2f 2a 0a 20 6a 73 2d 63 6f 6f 6b 69 65 20 76 33 2e 30 2e 35 20 7c 20 4d 49 54 20 2a 2f 0a 76 61 72 20 24 6a 73 63 6f 6d 70 3d 24 6a 73 63 6f 6d 70 7c 7c 7b 7d 3b 24 6a 73 63 6f 6d 70 2e 73 63 6f 70 65 3d 7b 7d 3b 24 6a 73 63 6f 6d 70 2e 61 72 72 61 79 49 74 65 72 61 74 6f 72 49 6d 70 6c 3d 66 75 6e 63 74 69 6f 6e 28 43 29 7b 76 61 72 20 55 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 55 3c 43 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 43 5b 55 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 3b 24 6a 73 63 6f 6d 70 2e 61 72 72 61 79 49 74 65 72 61 74 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 43 29 7b 72 65 74 75 72 6e 7b 6e 65 78 74 3a 24 6a 73 63 6f 6d 70 2e 61 72 72 61 79 49 74 65 72 61 74 6f 72 Data Ascii: /* js-cookie v3.0.5 \| MIT */var $jscomp=$jscomp\|\|{};$jscomp.scope={};$jscomp.arrayIteratorImpl=function(C){var U=0;return function(){return U<C.length?{done:!1,value:C[U++]}:{done:!0}}};$jscomp.arrayIterator=function(C){return{next:$jscomp.arrayIterator
2024-10-30 07:46:22 UTC	16383	IN	Data Raw: 65 6e 74 45 6c 65 6d 65 6e 74 26 26 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 73 74 79 6c 65 26 26 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 73 74 79 6c 65 2e 57 65 62 6b 69 74 41 70 70 65 61 72 61 6e 63 65 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 26 26 28 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 2e 66 69 72 65 62 75 67 7c 7c 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 2e 65 78 63 65 70 74 69 6f 6e 26 26 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 2e 74 61 62 6c 65 29 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 6e 61 76 69 67 61 74 6f 72 26 26 6e 61 76 69 67 61 74 6f 72 2e 75 Data Ascii: entElement&&document.documentElement.style&&document.documentElement.style.WebkitAppearance\|\|"undefined"!==typeof window&&window.console&&(window.console.firebug\|\|window.console.exception&&window.console.table)\|\|"undefined"!==typeof navigator&&navigator.u
2024-10-30 07:46:22 UTC	2	IN	Data Raw: 2e 6d Data Ascii: .m
2024-10-30 07:46:22 UTC	16383	IN	Data Raw: 65 74 68 6f 64 26 26 21 31 21 3d 3d 67 2e 64 65 63 6f 6d 70 72 65 73 73 29 73 77 69 74 63 68 28 61 2e 68 65 61 64 65 72 73 5b 22 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 69 6e 67 22 5d 29 7b 63 61 73 65 20 22 67 7a 69 70 22 3a 63 61 73 65 20 22 63 6f 6d 70 72 65 73 73 22 3a 63 61 73 65 20 22 64 65 66 6c 61 74 65 22 3a 64 3d 64 2e 70 69 70 65 28 56 63 2e 63 72 65 61 74 65 55 6e 7a 69 70 28 29 29 2c 64 65 6c 65 74 65 20 61 2e 68 65 61 64 65 72 73 5b 22 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 69 6e 67 22 5d 7d 76 61 72 20 6c 3d 7b 73 74 61 74 75 73 3a 61 2e 73 74 61 74 75 73 43 6f 64 65 2c 73 74 61 74 75 73 54 65 78 74 3a 61 2e 73 74 61 74 75 73 4d 65 73 73 61 67 65 2c 68 65 61 64 65 72 73 3a 61 2e 68 65 61 64 65 72 73 2c 63 6f 6e 66 69 67 3a 67 2c 72 65 71 75 Data Ascii: ethod&&!1!==g.decompress)switch(a.headers["content-encoding"]){case "gzip":case "compress":case "deflate":d=d.pipe(Vc.createUnzip()),delete a.headers["content-encoding"]}var l={status:a.statusCode,statusText:a.statusMessage,headers:a.headers,config:g,requ
2024-10-30 07:46:22 UTC	16383	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 77 61 28 74 68 69 73 2c 61 2c 62 3c 3c 32 34 3e 3e 32 34 29 7d 7d 2c 7b 75 6e 73 61 66 65 3a 21 30 7d 29 7d 65 6c 73 65 20 47 3d 28 6c 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 6e 28 74 68 69 73 2c 47 29 3b 61 3d 7a 28 61 29 3b 4f 28 74 68 69 73 2c 7b 62 79 74 65 73 3a 56 28 4d 28 61 29 2c 0a 30 29 2c 62 79 74 65 4c 65 6e 67 74 68 3a 61 7d 29 3b 65 7c 7c 28 74 68 69 73 2e 62 79 74 65 4c 65 6e 67 74 68 3d 61 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 2c 48 3d 28 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 6e 28 74 68 69 73 2c 48 29 3b 6e 28 61 2c 47 29 3b 76 61 72 20 64 3d 70 28 61 29 2e 62 79 74 65 4c 65 6e 67 74 68 3b 62 3d 74 28 62 29 3b 69 66 28 30 3e 62 7c 7c 62 3e 64 29 74 68 72 6f 77 20 51 28 22 57 72 6f 6e Data Ascii: unction(a,b){wa(this,a,b<<24>>24)}},{unsafe:!0})}else G=(l=function(a){n(this,G);a=z(a);O(this,{bytes:V(M(a),0),byteLength:a});e\|\|(this.byteLength=a)}).prototype,H=(a=function(a,b,c){n(this,H);n(a,G);var d=p(a).byteLength;b=t(b);if(0>b\|\|b>d)throw Q("Wron
2024-10-30 07:46:22 UTC	16383	IN	Data Raw: 72 6f 72 3a 7b 73 3a 22 53 45 43 55 52 49 54 59 5f 45 52 52 22 2c 0a 63 3a 31 38 2c 6d 3a 31 7d 2c 4e 65 74 77 6f 72 6b 45 72 72 6f 72 3a 7b 73 3a 22 4e 45 54 57 4f 52 4b 5f 45 52 52 22 2c 63 3a 31 39 2c 6d 3a 31 7d 2c 41 62 6f 72 74 45 72 72 6f 72 3a 7b 73 3a 22 41 42 4f 52 54 5f 45 52 52 22 2c 63 3a 32 30 2c 6d 3a 31 7d 2c 55 52 4c 4d 69 73 6d 61 74 63 68 45 72 72 6f 72 3a 7b 73 3a 22 55 52 4c 5f 4d 49 53 4d 41 54 43 48 5f 45 52 52 22 2c 63 3a 32 31 2c 6d 3a 31 7d 2c 51 75 6f 74 61 45 78 63 65 65 64 65 64 45 72 72 6f 72 3a 7b 73 3a 22 51 55 4f 54 41 5f 45 58 43 45 45 44 45 44 5f 45 52 52 22 2c 63 3a 32 32 2c 6d 3a 31 7d 2c 54 69 6d 65 6f 75 74 45 72 72 6f 72 3a 7b 73 3a 22 54 49 4d 45 4f 55 54 5f 45 52 52 22 2c 63 3a 32 33 2c 6d 3a 31 7d 2c 49 6e 76 61 Data Ascii: ror:{s:"SECURITY_ERR",c:18,m:1},NetworkError:{s:"NETWORK_ERR",c:19,m:1},AbortError:{s:"ABORT_ERR",c:20,m:1},URLMismatchError:{s:"URL_MISMATCH_ERR",c:21,m:1},QuotaExceededError:{s:"QUOTA_EXCEEDED_ERR",c:22,m:1},TimeoutError:{s:"TIMEOUT_ERR",c:23,m:1},Inva
2024-10-30 07:46:22 UTC	16383	IN	Data Raw: 72 61 6d 73 28 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 22 61 5c 78 33 64 62 22 29 29 29 2e 67 65 74 28 22 61 22 29 7c 7c 22 78 6e 2d 2d 65 31 61 79 62 63 22 21 3d 3d 28 6e 65 77 20 55 52 4c 28 22 68 74 74 70 3a 2f 2f 5c 75 30 34 34 32 5c 75 30 34 33 35 5c 75 30 34 34 31 5c 75 30 34 34 32 22 29 29 2e 68 6f 73 74 7c 7c 22 23 25 44 30 25 42 31 22 21 3d 3d 28 6e 65 77 20 55 52 4c 28 22 68 74 74 70 3a 2f 2f 61 23 5c 75 30 34 33 31 22 29 29 2e 68 61 73 68 7c 7c 22 61 31 63 33 22 21 3d 3d 63 7c 7c 22 78 22 21 3d 3d 28 6e 65 77 20 55 52 4c 28 22 68 74 74 70 3a 2f 2f 78 22 2c 76 6f 69 64 20 30 29 29 2e 68 6f 73 74 7d 29 7d 2c 38 35 33 36 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 61 29 7b 76 61 72 20 64 3d 61 28 37 38 35 34 29 3b 63 3d 61 28 36 Data Ascii: rams(new URLSearchParams("a\x3db"))).get("a")\|\|"xn--e1aybc"!==(new URL("http://\u0442\u0435\u0441\u0442")).host\|\|"#%D0%B1"!==(new URL("http://a#\u0431")).hash\|\|"a1c3"!==c\|\|"x"!==(new URL("http://x",void 0)).host})},8536:function(b,c,a){var d=a(7854);c=a(6
2024-10-30 07:46:22 UTC	16383	IN	Data Raw: 3d 63 2e 52 61 6e 67 65 45 72 72 6f 72 3b 62 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 61 29 72 65 74 75 72 6e 20 30 3b 61 3d 64 28 61 29 3b 76 61 72 20 62 3d 65 28 61 29 3b 69 66 28 61 21 3d 3d 62 29 74 68 72 6f 77 20 67 28 22 57 72 6f 6e 67 20 6c 65 6e 67 74 68 20 6f 72 20 69 6e 64 65 78 22 29 3b 72 65 74 75 72 6e 20 62 7d 7d 2c 35 36 35 36 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 61 29 7b 76 61 72 20 64 3d 61 28 38 33 36 31 29 2c 65 3d 61 28 34 34 38 38 29 3b 62 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 64 28 65 28 61 29 29 7d 7d 2c 39 33 30 33 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 4d 61 74 68 2e 63 65 69 6c 2c 61 3d 4d 61 74 68 2e 66 Data Ascii: =c.RangeError;b.exports=function(a){if(void 0===a)return 0;a=d(a);var b=e(a);if(a!==b)throw g("Wrong length or index");return b}},5656:function(b,c,a){var d=a(8361),e=a(4488);b.exports=function(a){return d(e(a))}},9303:function(b){var c=Math.ceil,a=Math.f
2024-10-30 07:46:22 UTC	16383	IN	Data Raw: 22 4d 61 78 69 6d 75 6d 20 61 6c 6c 6f 77 65 64 20 6c 65 6e 67 74 68 20 65 78 63 65 65 64 65 64 22 29 3b 76 3d 66 28 75 2c 6d 29 3b 66 6f 72 28 72 3d 30 3b 72 3c 6d 3b 72 2b 2b 29 28 74 3d 7a 2b 72 29 69 6e 20 75 26 26 71 28 76 2c 72 2c 75 5b 74 5d 29 3b 69 66 28 76 2e 6c 65 6e 67 74 68 3d 6d 2c 63 3c 6d 29 7b 66 6f 72 28 72 3d 7a 3b 72 3c 70 2d 6d 3b 72 2b 2b 29 7b 76 61 72 20 53 3d 72 2b 63 3b 28 74 3d 72 2b 6d 29 69 6e 20 75 3f 75 5b 53 5d 3d 75 5b 74 5d 3a 64 65 6c 65 74 65 20 75 5b 53 5d 7d 66 6f 72 28 72 3d 70 3b 72 3e 70 2d 6d 2b 63 3b 72 2d 2d 29 64 65 6c 65 74 65 20 75 5b 72 2d 31 5d 7d 65 6c 73 65 20 69 66 28 63 3e 6d 29 66 6f 72 28 72 3d 70 2d 6d 3b 72 3e 7a 3b 72 2d 2d 29 53 3d 72 2b 63 2d 31 2c 28 74 3d 72 2b 6d 2d 31 29 69 6e 0a 75 3f 75 5b Data Ascii: "Maximum allowed length exceeded");v=f(u,m);for(r=0;r<m;r++)(t=z+r)in u&&q(v,r,u[t]);if(v.length=m,c<m){for(r=z;r<p-m;r++){var S=r+c;(t=r+m)in u?u[S]=u[t]:delete u[S]}for(r=p;r>p-m+c;r--)delete u[r-1]}else if(c>m)for(r=p-m;r>z;r--)S=r+c-1,(t=r+m-1)inu?u[
2024-10-30 07:46:22 UTC	16383	IN	Data Raw: 28 37 32 39 33 29 3b 76 61 72 20 67 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 3b 62 28 7b 74 61 72 67 65 74 3a 22 4f 62 6a 65 63 74 22 2c 73 74 61 74 3a 21 30 2c 66 6f 72 63 65 64 3a 61 28 66 75 6e 63 74 69 6f 6e 28 29 7b 67 28 31 29 7d 29 2c 73 68 61 6d 3a 21 63 7d 2c 7b 73 65 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 67 26 26 64 28 61 29 3f 67 28 65 28 61 29 29 3a 61 7d 7d 29 7d 2c 38 33 30 34 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 61 29 7b 61 28 32 31 30 39 29 28 7b 74 61 72 67 65 74 3a 22 4f 62 6a 65 63 74 22 2c 73 74 61 74 3a 21 30 7d 2c 7b 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3a 61 28 37 36 37 34 29 7d 29 7d 2c 31 35 33 39 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 61 29 7b 62 3d 61 28 31 36 39 34 29 3b 63 3d 61 28 31 33 32 Data Ascii: (7293);var g=Object.seal;b({target:"Object",stat:!0,forced:a(function(){g(1)}),sham:!c},{seal:function(a){return g&&d(a)?g(e(a)):a}})},8304:function(b,c,a){a(2109)({target:"Object",stat:!0},{setPrototypeOf:a(7674)})},1539:function(b,c,a){b=a(1694);c=a(132

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49776	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:22 UTC	872	OUT	GET /a/content/dam/all/global-marketing/brand-identity/logos/all-paris-2024/msa_l_0000184.svg HTTP/1.1 Host: all.accor.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all
2024-10-30 07:46:22 UTC	766	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Age: 184961 Cache-Control: max-age=43200,public content-disposition: attachment; filename="msa_l_0000184.svg" Content-Type: image/svg+xml Date: Wed, 30 Oct 2024 07:46:22 GMT Etag: "0x8DC337DE327C014+ident" Last-Modified: Thu, 22 Feb 2024 08:11:35 GMT Server: ECAcc (lhd/35E5) Strict-Transport-Security: max-age=31557600 Vary: Accept-Encoding X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast x-content-type-options: nosniff x-frame-options: SAMEORIGIN X-Iinfo: 18-254814115-254814119 NNYN CT(15 19 0) RT(1730113278085 10) q(0 1 1 -1) r(1 1) U24 X-Served-By: cache-fra-etou8220047-FRA X-Timer: S1730113278.450528,VS0,VS0,VE3 x-vhost: prod-allcom-publish Content-Length: 6462 Connection: close
2024-10-30 07:46:22 UTC	6462	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 34 20 37 38 22 3e 0a 20 20 3c 6d 65 74 61 64 61 74 61 3e 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 31 2d 63 30 30 30 20 37 39 2e 34 64 32 66 35 39 37 2c 20 32 30 32 31 2f 30 39 2f 30 31 2d 32 30 3a 35 31 3a 32 32 20 20 20 20 20 20 20 20 22 3e 0a 20 20 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 124 78"> <metadata><?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.4d2f597, 2021/09/01-20:51:22 "> <rdf:RDF xmln

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49777	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:22 UTC	1136	OUT	GET /a/etc.clientlibs/core/wcm/components/commons/datalayer/v2/clientlibs/core.wcm.components.commons.datalayer.v2.lc-1e0136bad0acfb78be509234578e44f9-lc.min.js HTTP/1.1 Host: all.accor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://all.accor.com/a/en/new-app-offer.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all
2024-10-30 07:46:22 UTC	709	IN	HTTP/1.1 200 OK Age: 596999 cache-control: max-age=2592000, public, immutable Content-Type: application/javascript;charset=utf-8 Date: Wed, 30 Oct 2024 07:46:22 GMT Etag: W/"ad1-2386f26fb1bdc0-gzip" Last-Modified: Wed, 23 Oct 2024 09:56:23 GMT Server: ECAcc (lhd/35F0) Strict-Transport-Security: max-age=31557600 Vary: Accept-Encoding X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Content-Type-Options: nosniff x-frame-options: SAMEORIGIN X-Iinfo: 17-219868777-219868778 NNNY CT(15 22 0) RT(1730113278492 2) q(0 1 1 -1) r(1 1) U24 X-Served-By: cache-fra-etou8220157-FRA X-Timer: S1730113279.589816,VS0,VS0,VE2 x-vhost: prod-allcom-publish Content-Length: 2769 Connection: close
2024-10-30 07:46:22 UTC	2769	IN	Data Raw: 69 66 28 21 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 61 74 63 68 65 73 29 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 61 74 63 68 65 73 3d 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 73 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 77 65 62 6b 69 74 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 3b 69 66 28 21 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 6f 73 65 73 74 29 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 6f 73 65 73 74 3d 66 75 6e 63 74 69 6f 6e 28 73 29 7b 76 61 72 20 65 6c 3d 74 68 69 73 3b 69 66 28 21 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6f 6e 74 61 69 6e 73 28 65 6c 29 29 Data Ascii: if(!Element.prototype.matches)Element.prototype.matches=Element.prototype.msMatchesSelector\|\|Element.prototype.webkitMatchesSelector;if(!Element.prototype.closest)Element.prototype.closest=function(s){var el=this;if(!document.documentElement.contains(el))

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49779	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:23 UTC	1129	OUT	GET /a/etc.clientlibs/core/wcm/components/commons/datalayer/acdl/core.wcm.components.commons.datalayer.acdl.lc-bf921af342fd2c40139671dbf0920a1f-lc.min.js HTTP/1.1 Host: all.accor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://all.accor.com/a/en/new-app-offer.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all
2024-10-30 07:46:23 UTC	699	IN	HTTP/1.1 200 OK Age: 505819 cache-control: max-age=2592000, public, immutable Content-Type: application/javascript;charset=utf-8 Date: Wed, 30 Oct 2024 07:46:23 GMT Etag: W/"7fc3-2386f26fb1bdc0-gzip" Last-Modified: Thu, 24 Oct 2024 11:16:03 GMT Server: ECAcc (lhd/35C2) Strict-Transport-Security: max-age=31557600 Vary: Accept-Encoding X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Content-Type-Options: nosniff x-frame-options: SAMEORIGIN X-Iinfo: 17-204073752-204073686 PNNy RT(1730113252096 2) q(0 1 1 -1) r(1 1) U24 X-Served-By: cache-fra-etou8220079-FRA X-Timer: S1730113253.076805,VS0,VS0,VE2 x-vhost: prod-allcom-publish Content-Length: 32707 Connection: close
2024-10-30 07:46:23 UTC	16383	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 5f 73 6c 69 63 65 64 54 6f 41 72 72 61 79 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 5f 61 72 72 61 79 57 69 74 68 48 6f 6c 65 73 28 74 29 7c 7c 5f 69 74 65 72 61 62 6c 65 54 6f 41 72 72 61 79 4c 69 6d 69 74 28 74 2c 65 29 7c 7c 5f 75 6e 73 75 70 70 6f 72 74 65 64 49 74 65 72 61 62 6c 65 54 6f 41 72 72 61 79 28 74 2c 65 29 7c 7c 5f 6e 6f 6e 49 74 65 72 61 62 6c 65 52 65 73 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 6e 6f 6e 49 74 65 72 61 62 6c 65 52 65 73 74 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 2e 5c 6e 49 6e 20 6f 72 64 65 72 20 74 6f 20 62 65 Data Ascii: function _slicedToArray(t,e){return _arrayWithHoles(t)\|\|_iterableToArrayLimit(t,e)\|\|_unsupportedIterableToArray(t,e)\|\|_nonIterableRest()}function _nonIterableRest(){throw new TypeError("Invalid attempt to destructure non-iterable instance.\nIn order to be
2024-10-30 07:46:23 UTC	16324	IN	Data Raw: 74 28 74 29 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 41 28 74 2c 65 29 7d 7d 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 44 74 28 29 7b 72 65 74 75 72 6e 5b 5d 7d 66 75 6e 63 74 69 6f 6e 20 46 74 28 29 7b 72 65 74 75 72 6e 21 31 7d 76 61 72 20 4d 74 2c 7a 74 3d 31 2f 30 2c 43 74 3d 4e 61 4e 2c 55 74 3d 2f 5c 2e 7c 5c 5b 28 3f 3a 5b 5e 5b 5c 5d 5d 2a 7c 28 5b 22 27 5d 29 28 3f 3a 28 3f 21 5c 31 29 5b 5e 5c 5c 5d 7c 5c 5c 2e 29 2a 3f 5c 31 29 5c 5d 2f 2c 50 74 3d 2f 5e 5c 77 2a 24 2f 2c 52 74 3d 2f 5b 5e 2e 5b 5c 5d 5d 2b 7c 5c 5b 28 3f 3a 28 2d 3f 5c 64 2b 28 3f 3a 5c 2e 5c 64 2b 29 3f 29 7c 28 5b 22 27 5d 29 28 28 3f 3a 28 3f 21 5c 32 29 5b 5e 5c 5c 5d 7c 5c 5c 2e 29 2a 3f 29 5c 32 Data Ascii: t(t)):function(e){return function(t){return A(t,e)}}(t)}function Dt(){return[]}function Ft(){return!1}var Mt,zt=1/0,Ct=NaN,Ut=/\.\|\[(?:[^[\]]\|(["'])(?:(?!\1)[^\\]\|\\.)?\1)\]/,Pt=/^\w$/,Rt=/[^.[\]]+\|\[(?:(-?\d+(?:\.\d+)?)\|(["'])((?:(?!\2)[^\\]\|\\.)?)\2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49780	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:23 UTC	1061	OUT	GET /_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3&ns=1&cb=1949606252 HTTP/1.1 Host: all.accor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://all.accor.com/a/en/new-app-offer.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all
2024-10-30 07:46:23 UTC	369	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Content-Type: application/javascript Date: Wed, 30 Oct 2024 07:46:23 GMT server: MF 8700 S - Dyna-VT - Stage V All-in-One Set-Cookie: incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; path=/ X-CDN-Forward: EdgeCast X-Robots-Tag: noindex Content-Length: 88935 Connection: close
2024-10-30 07:46:23 UTC	16383	IN	Data Raw: 76 61 72 20 5f 30 78 61 33 62 31 3d 5b 27 5c 78 34 61 5c 78 37 38 5c 78 35 36 5c 78 37 32 27 2c 27 5c 78 37 37 5c 78 33 35 5c 78 35 35 5c 78 35 30 5c 78 37 37 5c 78 37 30 5c 78 34 34 5c 78 34 33 5c 78 36 38 5c 78 35 37 5c 78 37 36 5c 78 34 34 5c 78 37 36 5c 78 35 32 5c 78 34 35 5c 78 35 38 27 2c 27 5c 78 35 31 5c 78 36 33 5c 78 34 62 5c 78 34 32 5c 78 34 33 5c 78 34 31 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 33 34 5c 78 34 34 5c 78 34 33 5c 78 36 39 5c 78 34 64 5c 78 34 66 5c 78 33 31 5c 78 37 37 5c 78 37 30 5c 78 36 65 5c 78 34 34 5c 78 36 65 5c 78 37 37 5c 78 37 30 5c 78 35 34 5c 78 34 66 5c 78 36 33 5c 78 34 66 5c 78 36 38 5c 78 37 37 5c 78 33 34 5c 78 35 39 5c 78 33 64 27 2c 27 5c 78 35 61 5c 78 36 33 5c 78 34 66 5c 78 34 38 5c 78 37 37 5c Data Ascii: var _0xa3b1=['\x4a\x78\x56\x72','\x77\x35\x55\x50\x77\x70\x44\x43\x68\x57\x76\x44\x76\x52\x45\x58','\x51\x63\x4b\x42\x43\x41\x3d\x3d','\x77\x34\x44\x43\x69\x4d\x4f\x31\x77\x70\x6e\x44\x6e\x77\x70\x54\x4f\x63\x4f\x68\x77\x34\x59\x3d','\x5a\x63\x4f\x48\x77\
2024-10-30 07:46:23 UTC	12089	IN	Data Raw: 34 66 5c 78 35 31 27 2c 27 5c 78 34 33 5c 78 33 31 5c 78 36 36 5c 78 34 34 5c 78 37 32 5c 78 36 33 5c 78 34 66 5c 78 36 62 5c 78 37 37 5c 78 37 31 5c 78 34 31 5c 78 36 66 5c 78 35 34 5c 78 35 37 5c 78 35 34 5c 78 34 33 5c 78 36 63 5c 78 36 33 5c 78 34 62 5c 78 37 35 5c 78 37 37 5c 78 33 34 5c 78 33 31 5c 78 37 39 5c 78 35 30 5c 78 34 31 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 37 30 5c 78 34 38 5c 78 34 33 5c 78 36 63 5c 78 35 36 5c 78 33 37 5c 78 34 33 5c 78 37 34 5c 78 36 33 5c 78 34 66 5c 78 36 34 27 2c 27 5c 78 34 31 5c 78 33 38 5c 78 34 66 5c 78 34 62 5c 78 37 37 5c 78 33 35 5c 78 35 61 5c 78 33 39 5c 78 37 37 5c 78 33 34 5c 78 36 63 5c 78 36 63 5c 78 34 37 5c 78 34 34 5c 78 33 35 5c 78 35 35 5c 78 34 32 5c 78 33 38 5c 78 34 62 5c 78 33 36 Data Ascii: 4f\x51','\x43\x31\x66\x44\x72\x63\x4f\x6b\x77\x71\x41\x6f\x54\x57\x54\x43\x6c\x63\x4b\x75\x77\x34\x31\x79\x50\x41\x3d\x3d','\x77\x70\x48\x43\x6c\x56\x37\x43\x74\x63\x4f\x64','\x41\x38\x4f\x4b\x77\x35\x5a\x39\x77\x34\x6c\x6c\x47\x44\x35\x55\x42\x38\x4b\x36
2024-10-30 07:46:23 UTC	8712	IN	Data Raw: 33 5c 78 34 66 5c 78 33 35 5c 78 37 37 5c 78 33 37 5c 78 35 34 5c 78 34 34 5c 78 37 34 5c 78 36 63 5c 78 34 61 5c 78 37 37 5c 78 37 37 5c 78 33 35 5c 78 35 34 5c 78 34 34 5c 78 36 38 5c 78 37 37 5c 78 35 38 5c 78 34 33 5c 78 37 36 5c 78 33 32 5c 78 34 34 5c 78 34 34 5c 78 37 35 5c 78 36 33 5c 78 34 62 5c 78 37 31 5c 78 37 37 5c 78 37 30 5c 78 36 33 5c 78 34 32 5c 78 36 34 5c 78 36 65 5c 78 34 34 5c 78 34 33 5c 78 37 34 5c 78 35 31 5c 78 36 32 5c 78 34 33 5c 78 36 37 5c 78 33 38 5c 78 34 66 5c 78 37 32 5c 78 37 37 5c 78 36 66 5c 78 37 36 5c 78 34 34 5c 78 37 35 5c 78 37 37 5c 78 37 32 5c 78 34 33 5c 78 36 64 5c 78 34 64 5c 78 34 66 5c 78 34 34 5c 78 37 37 5c 78 37 31 5c 78 34 34 5c 78 34 33 5c 78 37 30 5c 78 36 37 5c 78 36 66 5c 78 33 37 5c 78 37 37 5c 78 Data Ascii: 3\x4f\x35\x77\x37\x54\x44\x74\x6c\x4a\x77\x77\x35\x54\x44\x68\x77\x58\x43\x76\x32\x44\x44\x75\x63\x4b\x71\x77\x70\x63\x42\x64\x6e\x44\x43\x74\x51\x62\x43\x67\x38\x4f\x72\x77\x6f\x76\x44\x75\x77\x72\x43\x6d\x4d\x4f\x44\x77\x71\x44\x43\x70\x67\x6f\x37\x77\x
2024-10-30 07:46:23 UTC	1452	IN	Data Raw: 35 31 5c 78 34 64 5c 78 37 37 5c 78 37 32 5c 78 34 39 5c 78 32 62 5c 78 37 37 5c 78 33 36 5c 78 36 65 5c 78 34 33 5c 78 36 39 5c 78 36 33 5c 78 34 66 5c 78 36 32 5c 78 34 35 5c 78 37 33 5c 78 34 66 5c 78 34 35 5c 78 36 31 5c 78 37 33 5c 78 34 66 5c 78 37 30 5c 78 37 37 5c 78 33 34 5c 78 37 61 5c 78 34 33 5c 78 36 61 5c 78 36 61 5c 78 37 32 5c 78 34 33 5c 78 37 31 5c 78 37 37 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 33 37 5c 78 35 30 5c 78 34 33 5c 78 37 35 5c 78 34 34 5c 78 36 33 5c 78 33 64 27 2c 27 5c 78 34 64 5c 78 37 39 5c 78 35 38 5c 78 34 33 5c 78 36 61 5c 78 34 64 5c 78 34 62 5c 78 36 61 5c 78 35 31 5c 78 36 33 5c 78 34 66 5c 78 36 36 5c 78 37 37 5c 78 36 66 5c 78 37 32 5c 78 34 34 5c 78 37 34 5c 78 35 37 5c 78 37 33 5c 78 33 64 27 2c 27 Data Ascii: 51\x4d\x77\x72\x49\x2b\x77\x36\x6e\x43\x69\x63\x4f\x62\x45\x73\x4f\x45\x61\x73\x4f\x70\x77\x34\x7a\x43\x6a\x6a\x72\x43\x71\x77\x3d\x3d','\x77\x37\x50\x43\x75\x44\x63\x3d','\x4d\x79\x58\x43\x6a\x4d\x4b\x6a\x51\x63\x4f\x66\x77\x6f\x72\x44\x74\x57\x73\x3d','
2024-10-30 07:46:23 UTC	16383	IN	Data Raw: 78 33 64 27 2b 5f 30 78 33 31 65 33 36 30 3b 7d 7d 5f 30 78 32 61 37 35 35 36 5b 27 5c 78 36 33 5c 78 36 66 5c 78 36 66 5c 78 36 62 5c 78 36 39 5c 78 36 35 27 5d 3d 5f 30 78 35 65 30 34 33 63 3b 7d 2c 27 5c 78 37 32 5c 78 36 35 5c 78 36 64 5c 78 36 66 5c 78 37 36 5c 78 36 35 5c 78 34 33 5c 78 36 66 5c 78 36 66 5c 78 36 62 5c 78 36 39 5c 78 36 35 27 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 27 5c 78 36 34 5c 78 36 35 5c 78 37 36 27 3b 7d 2c 27 5c 78 36 37 5c 78 36 35 5c 78 37 34 5c 78 34 33 5c 78 36 66 5c 78 36 66 5c 78 36 62 5c 78 36 39 5c 78 36 35 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 31 61 38 64 39 62 2c 5f 30 78 33 64 66 31 36 38 29 7b 5f 30 78 31 61 38 64 39 62 3d 5f 30 78 31 61 38 64 39 62 7c 7c 66 75 6e 63 74 69 6f 6e 28 5f 30 78 31 Data Ascii: x3d'+_0x31e360;}}_0x2a7556['\x63\x6f\x6f\x6b\x69\x65']=_0x5e043c;},'\x72\x65\x6d\x6f\x76\x65\x43\x6f\x6f\x6b\x69\x65':function(){return'\x64\x65\x76';},'\x67\x65\x74\x43\x6f\x6f\x6b\x69\x65':function(_0x1a8d9b,_0x3df168){_0x1a8d9b=_0x1a8d9b\|\|function(_0x1
2024-10-30 07:46:23 UTC	16383	IN	Data Raw: 78 34 31 27 2c 20 27 5c 78 36 35 5c 78 34 62 5c 78 34 35 5c 78 34 65 27 29 5d 28 5f 30 78 33 64 61 36 37 35 5b 5f 30 78 34 66 61 66 65 66 5d 5b 5f 30 78 31 61 33 62 28 27 30 78 34 32 27 2c 20 27 5c 78 37 39 5c 78 36 65 5c 78 32 34 5c 78 35 35 27 29 5d 28 27 5c 78 33 64 27 29 2c 30 78 31 29 2c 5f 30 78 33 64 61 36 37 35 5b 5f 30 78 34 66 61 66 65 66 5d 5b 5f 30 78 31 61 33 62 28 27 30 78 34 33 27 2c 20 27 5c 78 36 33 5c 78 37 33 5c 78 36 62 5c 78 37 33 27 29 5d 29 3b 69 66 28 5f 30 78 35 64 66 64 37 33 5b 5f 30 78 31 61 33 62 28 27 30 78 34 34 27 2c 20 27 5c 78 35 31 5c 78 32 33 5c 78 34 61 5c 78 35 65 27 29 5d 28 5f 30 78 32 39 35 61 65 65 29 29 7b 5f 30 78 35 36 33 35 64 66 5b 5f 30 78 35 36 33 35 64 66 5b 5f 30 78 31 61 33 62 28 27 30 78 34 35 27 2c 20 Data Ascii: x41', '\x65\x4b\x45\x4e')](_0x3da675[_0x4fafef][_0x1a3b('0x42', '\x79\x6e\x24\x55')]('\x3d'),0x1),_0x3da675[_0x4fafef][_0x1a3b('0x43', '\x63\x73\x6b\x73')]);if(_0x5dfd73[_0x1a3b('0x44', '\x51\x23\x4a\x5e')](_0x295aee)){_0x5635df[_0x5635df[_0x1a3b('0x45',
2024-10-30 07:46:23 UTC	16383	IN	Data Raw: 36 5c 78 36 33 5c 78 33 32 27 29 5b 5f 30 78 31 61 33 62 28 27 30 78 64 64 27 2c 20 27 5c 78 32 61 5c 78 36 34 5c 78 35 30 5c 78 37 35 27 29 5d 28 27 5c 78 37 63 27 29 2c 5f 30 78 31 37 66 62 65 64 3d 30 78 30 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 73 77 69 74 63 68 28 5f 30 78 35 36 34 64 34 37 5b 5f 30 78 31 37 66 62 65 64 2b 2b 5d 29 7b 63 61 73 65 27 5c 78 33 30 27 3a 74 72 79 7b 5f 30 78 38 32 38 33 39 64 3d 5f 30 78 34 65 61 36 36 39 5b 5f 30 78 31 61 33 62 28 27 30 78 64 65 27 2c 20 27 5c 78 34 30 5c 78 32 35 5c 78 36 38 5c 78 36 32 27 29 5d 28 27 5c 78 36 39 27 29 3b 7d 63 61 74 63 68 28 5f 30 78 36 39 65 65 37 65 29 7b 5f 30 78 34 66 32 32 39 63 5b 5f 30 78 34 66 32 32 39 63 5b 5f 30 78 31 61 33 62 28 27 30 78 63 32 27 2c 20 27 5c 78 35 38 5c 78 Data Ascii: 6\x63\x32')[_0x1a3b('0xdd', '\x2a\x64\x50\x75')]('\x7c'),_0x17fbed=0x0;while(!![]){switch(_0x564d47[_0x17fbed++]){case'\x30':try{_0x82839d=_0x4ea669[_0x1a3b('0xde', '\x40\x25\x68\x62')]('\x69');}catch(_0x69ee7e){_0x4f229c[_0x4f229c[_0x1a3b('0xc2', '\x58\x
2024-10-30 07:46:23 UTC	1150	IN	Data Raw: 27 30 78 31 65 32 27 2c 20 27 5c 78 33 35 5c 78 35 39 5c 78 36 62 5c 78 36 38 27 29 5d 28 5f 30 78 33 61 30 36 37 62 2c 5f 30 78 31 62 31 61 61 61 29 29 3b 7d 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 5c 78 33 38 27 3a 5f 30 78 33 33 35 38 62 34 5b 5f 30 78 31 61 33 62 28 27 30 78 31 65 33 27 2c 20 27 5c 78 36 64 5c 78 37 39 5c 78 36 63 5c 78 33 38 27 29 5d 28 5f 30 78 33 32 30 35 65 35 2c 5f 30 78 33 33 35 38 62 34 5b 5f 30 78 31 61 33 62 28 27 30 78 31 65 34 27 2c 20 27 5c 78 32 36 5c 78 36 33 5c 78 37 36 5c 78 37 31 27 29 5d 28 5f 30 78 33 61 30 36 37 62 2c 5f 30 78 31 62 31 61 61 61 29 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 5c 78 33 39 27 3a 76 61 72 20 5f 30 78 32 38 35 33 66 39 3d 30 78 32 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 5c 78 Data Ascii: '0x1e2', '\x35\x59\x6b\x68')](_0x3a067b,_0x1b1aaa));}continue;case'\x38':_0x3358b4[_0x1a3b('0x1e3', '\x6d\x79\x6c\x38')](_0x3205e5,_0x3358b4[_0x1a3b('0x1e4', '\x26\x63\x76\x71')](_0x3a067b,_0x1b1aaa));continue;case'\x39':var _0x2853f9=0x2;continue;case'\x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49781	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:23 UTC	1105	OUT	GET /components/footer/assets/images/logo-fevad.jpg HTTP/1.1 Host: all.accor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://all.accor.com/a/en/new-app-offer.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D
2024-10-30 07:46:23 UTC	666	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 161091 Cache-control: public, max-age=3600, stale-while-revalidate=21600 Content-Type: image/jpeg Date: Wed, 30 Oct 2024 07:46:23 GMT Last-Modified: Wed, 16 Oct 2024 09:39:23 GMT P3P: CP="NO P3P POLICY" Referrer-Policy: origin Server: ECAcc (lhd/3585) Strict-Transport-Security: max-age=15552000 Strict-Transport-Security: max-age=15552000 Vary: Accept-Encoding X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Clacks-Overhead: GNU Terry Pratchett X-Iinfo: 18-26261679-26229307 pNNy RT(1730113291979 10) q(0 1 1 6) r(1 1) U24 X-XSS-Protection: 1; mode=block Content-Length: 947 Connection: close
2024-10-30 07:46:23 UTC	947	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 06 06 06 06 07 06 07 08 08 07 0a 0b 0a 0b 0a 0f 0e 0c 0c 0e 0f 16 10 11 10 11 10 16 22 15 19 15 15 19 15 22 1e 24 1e 1c 1e 24 1e 36 2a 26 26 2a 36 3e 34 32 34 3e 4c 44 44 4c 5f 5a 5f 7c 7c a7 01 06 06 06 06 07 06 07 08 08 07 0a 0b 0a 0b 0a 0f 0e 0c 0c 0e 0f 16 10 11 10 11 10 16 22 15 19 15 15 19 15 22 1e 24 1e 1c 1e 24 1e 36 2a 26 26 2a 36 3e 34 32 34 3e 4c 44 44 4c 5f 5a 5f 7c 7c a7 ff c2 00 11 08 00 2a 00 2a 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 04 00 01 05 06 07 03 02 ff da 00 08 01 01 00 00 00 00 cd d9 24 58 8d ef a7 be c0 4a 58 8c 55 a8 1d 7f 84 9d 8f 19 ac 5f 25 a6 cd cf e9 ee 49 e7 c6 ff 00 ff c4 00 18 01 01 01 00 03 00 Data Ascii: JFIF""$$6&&6>424>LDDL_Z_\|\|""$$6&&6>424>LDDL_Z_\|\|**"$XJXU_%I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49782	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:23 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-30 07:46:23 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=32386 Date: Wed, 30 Oct 2024 07:46:23 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-30 07:46:23 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49786	104.18.86.42	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:23 UTC	369	OUT	GET /scripttemplates/otSDKStub.js HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 07:46:23 UTC	858	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 07:46:23 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-MD5: qVqAwzZMp5y69q24H0KNhg== Last-Modified: Tue, 29 Oct 2024 16:01:42 GMT x-ms-request-id: ea261024-a01e-0045-1c1e-2a4e1b000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 2478 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8da9ca913f0f2cd4-DFW
2024-10-30 07:46:23 UTC	511	IN	Data Raw: 35 37 61 65 0d 0a 76 61 72 20 4f 6e 65 54 72 75 73 74 53 74 75 62 3d 28 74 3d 3e 7b 76 61 72 20 61 2c 6f 2c 72 2c 65 2c 6c 3d 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 3d 22 4f 70 74 61 6e 6f 6e 43 6f 6e 73 65 6e 74 22 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 74 6d 6c 47 72 6f 75 70 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 6f 73 74 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 67 65 6e 56 65 6e 64 6f 72 73 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 76 65 6e 64 6f 72 73 53 65 72 76 69 63 65 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 49 41 42 43 6f 6f 6b 69 65 56 61 6c 75 65 3d 22 22 2c 74 68 69 73 2e 6f 6e 65 54 72 75 73 74 49 41 42 43 6f 6f 6b 69 65 4e 61 6d 65 3d 22 65 75 70 75 Data Ascii: 57aevar OneTrustStub=(t=>{var a,o,r,e,l=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIABCookieName="eupu
2024-10-30 07:46:23 UTC	1369	IN	Data Raw: 2c 22 53 49 22 2c 22 53 4b 22 2c 22 46 49 22 2c 22 53 45 22 2c 22 47 42 22 2c 22 48 52 22 2c 22 4c 49 22 2c 22 4e 4f 22 2c 22 49 53 22 5d 2c 74 68 69 73 2e 73 74 75 62 46 69 6c 65 4e 61 6d 65 3d 22 6f 74 53 44 4b 53 74 75 62 22 2c 74 68 69 73 2e 44 41 54 41 46 49 4c 45 41 54 54 52 49 42 55 54 45 3d 22 64 61 74 61 2d 64 6f 6d 61 69 6e 2d 73 63 72 69 70 74 22 2c 74 68 69 73 2e 62 61 6e 6e 65 72 53 63 72 69 70 74 4e 61 6d 65 3d 22 6f 74 42 61 6e 6e 65 72 53 64 6b 2e 6a 73 22 2c 74 68 69 73 2e 64 6f 6d 50 75 72 69 66 79 53 63 72 69 70 74 4e 61 6d 65 3d 22 6f 74 44 6f 6d 50 75 72 69 66 79 2e 6a 73 22 2c 74 68 69 73 2e 6d 6f 62 69 6c 65 4f 6e 6c 69 6e 65 55 52 4c 3d 5b 5d 2c 74 68 69 73 2e 69 73 4d 69 67 72 61 74 65 64 55 52 4c 3d 21 31 2c 74 68 69 73 2e 6d 69 Data Ascii: ,"SI","SK","FI","SE","GB","HR","LI","NO","IS"],this.stubFileName="otSDKStub",this.DATAFILEATTRIBUTE="data-domain-script",this.bannerScriptName="otBannerSdk.js",this.domPurifyScriptName="otDomPurify.js",this.mobileOnlineURL=[],this.isMigratedURL=!1,this.mi
2024-10-30 07:46:23 UTC	1369	IN	Data Raw: 29 69 66 28 2f 3a 2f 2e 74 65 73 74 28 69 5b 6e 5d 29 29 7b 69 66 28 21 28 61 3d 69 5b 6e 5d 2e 73 70 6c 69 74 28 2f 3a 28 2e 2b 29 2f 29 29 5b 31 5d 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 65 5b 74 68 69 73 2e 63 61 6d 65 6c 69 7a 65 28 61 5b 30 5d 29 5d 3d 61 5b 31 5d 2e 74 72 69 6d 28 29 7d 72 65 74 75 72 6e 20 65 7d 2c 69 29 3b 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 69 6d 70 6c 65 6d 65 6e 74 54 68 65 50 6f 6c 79 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 2c 6f 3d 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 3b 72 65 74 75 72 6e 20 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 3d 66 75 6e 63 Data Ascii: )if(/:/.test(i[n])){if(!(a=i[n].split(/:(.+)/))[1])return null;e[this.camelize(a[0])]=a[1].trim()}return e},i);function i(){var t=this;this.implementThePolyfill=function(){var a=t,o=Element.prototype.setAttribute;return Element.prototype.setAttribute=func
2024-10-30 07:46:23 UTC	1369	IN	Data Raw: 73 73 61 67 65 48 61 6e 64 6c 65 72 2c 21 31 29 2c 73 2e 61 64 64 46 72 61 6d 65 28 73 2e 4c 4f 43 41 54 4f 52 5f 4e 41 4d 45 29 29 7d 2c 74 68 69 73 2e 72 65 6d 6f 76 65 47 70 70 41 70 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 65 6c 65 74 65 20 73 2e 77 69 6e 2e 5f 5f 67 70 70 3b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 69 66 72 61 6d 65 5b 6e 61 6d 65 3d 22 2b 73 2e 4c 4f 43 41 54 4f 52 5f 4e 41 4d 45 2b 22 5d 22 29 5b 30 5d 3b 74 26 26 74 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 7d 2c 74 68 69 73 2e 65 78 65 63 75 74 65 47 70 70 41 70 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 65 3d 30 3b 65 3c 61 72 67 75 6d 65 6e Data Ascii: ssageHandler,!1),s.addFrame(s.LOCATOR_NAME))},this.removeGppApi=function(){delete s.win.__gpp;var t=document.querySelectorAll("iframe[name="+s.LOCATOR_NAME+"]")[0];t&&t.parentElement.removeChild(t)},this.executeGppApi=function(){for(var t=[],e=0;e<argumen
2024-10-30 07:46:23 UTC	1369	IN	Data Raw: 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 29 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 2c 65 2e 6e 61 6d 65 3d 74 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 69 74 6c 65 22 2c 22 47 50 50 20 4c 6f 63 61 74 6f 72 22 29 2c 69 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 29 3a 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 2e 61 64 64 46 72 61 6d 65 28 74 29 7d 2c 35 29 29 2c 21 6e 7d 2c 74 68 69 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 2c 6e 3d 73 2e 77 69 6e 2e 5f 5f 67 70 70 3b 72 65 74 75 72 6e 20 6e 2e 65 76 65 6e 74 73 3d 6e 2e 65 76 65 6e 74 73 7c 7c 5b 5d 2c 6e 75 6c Data Ascii: eateElement("iframe")).style.cssText="display:none",e.name=t,e.setAttribute("title","GPP Locator"),i.body.appendChild(e)):setTimeout(function(){s.addFrame(t)},5)),!n},this.addEventListener=function(t,e){var i,n=s.win.__gpp;return n.events=n.events\|\|[],nul
2024-10-30 07:46:23 UTC	1369	IN	Data Raw: 79 28 22 6f 74 2d 74 72 75 73 74 65 64 2d 74 79 70 65 2d 70 6f 6c 69 63 79 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 44 4f 4d 50 75 72 69 66 79 2e 73 61 6e 69 74 69 7a 65 28 74 29 7d 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 44 4f 4d 50 75 72 69 66 79 2e 73 61 6e 69 74 69 7a 65 28 74 29 7d 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 69 3d 5b 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2c 6e 2e 68 6f 73 74 6e 61 6d 65 5d 3b 74 72 79 7b 65 3d 6e 65 77 20 55 52 4c 28 74 2c 6c 6f 63 61 74 69 6f 6e 2e 6f 72 69 67 Data Ascii: y("ot-trusted-type-policy",{createHTML:function(t){return window.DOMPurify.sanitize(t)},createScript:function(t){return window.DOMPurify.sanitize(t)},createScriptURL:function(t){var e,i=[document.location.hostname,n.hostname];try{e=new URL(t,location.orig
2024-10-30 07:46:23 UTC	1369	IN	Data Raw: 6c 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 70 72 65 76 69 65 77 2d 6d 6f 64 65 22 29 2c 74 68 69 73 2e 6f 74 46 65 74 63 68 28 6c 2e 62 61 6e 6e 65 72 44 61 74 61 50 61 72 65 6e 74 55 52 4c 2c 74 68 69 73 2e 67 65 74 4c 6f 63 61 74 69 6f 6e 2e 62 69 6e 64 28 74 68 69 73 29 29 7d 2c 66 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 44 6f 6d 61 69 6e 49 66 42 75 6c 6b 44 6f 6d 61 69 6e 45 6e 61 62 6c 65 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 26 26 74 2e 54 65 6e 61 6e 74 46 65 61 74 75 72 65 73 2c 69 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2c 6e 3d 74 2e 44 6f 6d 61 69 6e 2c 61 3d 74 2e 42 75 6c 6b 44 6f 6d 61 69 6e 43 68 65 63 6b Data Ascii: l.stubScriptElement.getAttribute("data-preview-mode"),this.otFetch(l.bannerDataParentURL,this.getLocation.bind(this))},f.prototype.setDomainIfBulkDomainEnabled=function(t){var e=t&&t.TenantFeatures,i=window.location.hostname,n=t.Domain,a=t.BulkDomainCheck
2024-10-30 07:46:23 UTC	1369	IN	Data Raw: 74 28 22 3b 22 29 5b 30 5d 2c 69 3d 69 2e 73 70 6c 69 74 28 22 3b 22 29 5b 31 5d 2c 74 68 69 73 2e 73 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 28 65 2c 69 29 2c 74 68 69 73 2e 61 64 64 42 61 6e 6e 65 72 53 44 4b 53 63 72 69 70 74 28 74 29 29 3a 74 68 69 73 2e 67 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 28 74 29 7d 2c 66 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 6e 64 6c 65 42 75 6c 6b 44 6f 6d 61 69 6e 4d 67 6d 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 26 26 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 22 62 75 6c 6b 44 6f 6d 61 69 6e 4d 67 6d 74 45 6e 61 62 6c 65 64 22 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 74 2e 69 73 56 61 6c 69 64 29 29 Data Ascii: t(";")[0],i=i.split(";")[1],this.setGeoLocation(e,i),this.addBannerSDKScript(t)):this.getGeoLocation(t)},f.prototype.handleBulkDomainMgmt=function(t,e){window.sessionStorage&&window.sessionStorage.setItem("bulkDomainMgmtEnabled",JSON.stringify(t.isValid))
2024-10-30 07:46:23 UTC	1369	IN	Data Raw: 6f 3d 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 26 26 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 6f 74 50 72 65 76 69 65 77 44 61 74 61 22 29 3b 69 66 28 6e 65 77 20 52 65 67 45 78 70 28 22 5e 66 69 6c 65 3a 2f 2f 22 2c 22 69 22 29 2e 74 65 73 74 28 74 29 29 74 68 69 73 2e 6f 74 46 65 74 63 68 4f 66 66 6c 69 6e 65 46 69 6c 65 28 74 2c 69 29 3b 65 6c 73 65 20 69 66 28 30 3c 3d 74 2e 69 6e 64 65 78 4f 66 28 22 2f 63 6f 6e 73 65 6e 74 2f 22 29 26 26 74 68 69 73 2e 70 72 65 76 69 65 77 4d 6f 64 65 26 26 6f 29 7b 6f 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 6f 29 2e 64 6f 6d 61 69 6e 4a 73 6f 6e 3b 69 28 6f 29 7d 65 6c 73 65 7b 6c 2e 6d 6f 62 69 6c 65 4f 6e 6c 69 6e 65 55 52 4c 2e 70 75 73 68 28 Data Ascii: o=window.sessionStorage&&window.sessionStorage.getItem("otPreviewData");if(new RegExp("^file://","i").test(t))this.otFetchOfflineFile(t,i);else if(0<=t.indexOf("/consent/")&&this.previewMode&&o){o=JSON.parse(o).domainJson;i(o)}else{l.mobileOnlineURL.push(
2024-10-30 07:46:23 UTC	1369	IN	Data Raw: 76 61 72 20 73 3d 61 2e 73 74 61 74 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 72 3d 61 2e 63 6f 75 6e 74 72 79 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 75 3d 30 3b 75 3c 74 2e 52 75 6c 65 53 65 74 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 69 66 28 21 30 3d 3d 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 2e 47 6c 6f 62 61 6c 29 6e 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 3b 65 6c 73 65 7b 76 61 72 20 70 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 2e 53 74 61 74 65 73 3b 69 66 28 70 5b 72 5d 26 26 30 3c 3d 70 5b 72 5d 2e 69 6e 64 65 78 4f 66 28 73 29 29 7b 69 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 3b 62 72 65 61 6b 7d 30 3c 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 2e 43 6f 75 6e 74 72 69 65 73 2e 69 6e 64 65 78 4f 66 28 72 29 26 26 28 65 3d 74 2e 52 75 6c 65 53 65 74 Data Ascii: var s=a.state.toLowerCase(),r=a.country.toLowerCase(),u=0;u<t.RuleSet.length;u++)if(!0===t.RuleSet[u].Global)n=t.RuleSet[u];else{var p=t.RuleSet[u].States;if(p[r]&&0<=p[r].indexOf(s)){i=t.RuleSet[u];break}0<=t.RuleSet[u].Countries.indexOf(r)&&(e=t.RuleSet

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49791	151.101.3.10	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:23 UTC	436	OUT	GET /b94aa70a4593f812b35d5a8922257b6f80ccf6aa708f58b8266f4ba917eb0e0e/theme.js HTTP/1.1 Host: static-p46175-e229011.adobeaemcloud.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 07:46:23 UTC	723	IN	HTTP/1.1 200 OK Connection: close Content-Length: 814813 x-frame-options: SAMEORIGIN cache-control: public,max-age=31536000,immutable content-type: text/javascript; charset=utf-8 content-md5: OsWK6hyCFCN70ANoeXQKIA== last-modified: Mon, 28 Oct 2024 09:01:47 GMT etag: "0x8DCF72F27094AAF" x-ms-version-id: 2024-10-28T09:01:47.0221750Z x-ms-is-current-version: true content-disposition: inline access-control-allow-origin: * x-vhost: publish X-Content-Type-Options: nosniff Accept-Ranges: bytes Date: Wed, 30 Oct 2024 07:46:23 GMT Age: 90679 Strict-Transport-Security: max-age=31557600 X-Served-By: cache-dfw-kdfw8210061-DFW X-Cache: HIT X-Timer: S1730274384.575154,VS0,VS0,VE3 Vary: Accept-Encoding
2024-10-30 07:46:23 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 65 74 20 65 3b 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 74 2c 6e 2c 6f 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 67 65 74 3a 6e 2c 73 65 74 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 65 2e 64 65 66 61 75 6c 74 3a 65 7d 76 61 72 20 6f 2c 72 2c 69 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 Data Ascii: !function(){let e;function t(e,t,n,o){Object.defineProperty(e,t,{get:n,set:o,enumerable:!0,configurable:!0})}function n(e){return e&&e.__esModule?e.default:e}var o,r,i="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:"undefined"!=ty
2024-10-30 07:46:23 UTC	16384	IN	Data Raw: 3f 6f 28 65 2c 74 29 3a 74 7d 7d 29 2c 6c 28 22 31 55 30 68 4e 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 2f 5e 28 5b 61 2d 7a 5d 5b 61 2d 7a 5c 64 5c 2b 5c 2d 5c 2e 5d 2a 3a 29 3f 5c 2f 5c 2f 2f 69 2e 74 65 73 74 28 65 29 7d 7d 29 2c 6c 28 22 61 48 6b 69 44 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3f 65 2e 72 65 70 6c 61 63 65 28 2f 5c 2f 2b 24 2f 2c 22 22 29 2b 22 2f 22 2b 74 2e 72 65 70 6c 61 63 65 28 2f 5e 5c 2f 2b 2f 2c 22 22 29 3a 65 7d 7d 29 2c 6c 28 22 6c 44 42 52 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 63 28 22 36 57 47 66 68 22 Data Ascii: ?o(e,t):t}}),l("1U0hN",function(e,t){e.exports=function(e){return/^([a-z][a-z\d\+\-\.]*:)?\/\//i.test(e)}}),l("aHkiD",function(e,t){e.exports=function(e,t){return t?e.replace(/\/+$/,"")+"/"+t.replace(/^\/+/,""):e}}),l("lDBRl",function(e,t){var n=c("6WGfh"
2024-10-30 07:46:23 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 24 7b 6e 28 6e 65 77 20 44 61 74 65 28 65 29 29 7d 20 24 7b 74 68 69 73 2e 6f 72 64 69 6e 61 6c 53 75 66 66 69 78 4f 66 28 6e 65 77 20 44 61 74 65 28 65 29 3f 2e 67 65 74 44 61 74 65 28 29 29 7d 0a 20 20 20 20 20 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 20 63 6c 61 73 73 3d 22 69 63 6f 6e 20 69 63 6f 6e 2d 61 72 72 6f 77 2d 72 69 67 68 74 2d 32 34 69 63 6f 6e 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 24 7b 6e 28 6e 65 77 20 44 61 74 65 28 74 29 29 7d 20 24 7b 74 68 69 73 2e 6f 72 64 69 6e 61 6c 53 75 66 66 69 78 4f 66 28 6e 65 77 20 44 61 74 65 28 74 29 3f 2e 67 65 74 44 61 Data Ascii: ${n(new Date(e))} ${this.ordinalSuffixOf(new Date(e)?.getDate())} </span> <span aria-hidden="true" class="icon icon-arrow-right-24icon"></span> <span> ${n(new Date(t))} ${this.ordinalSuffixOf(new Date(t)?.getDa
2024-10-30 07:46:23 UTC	16384	IN	Data Raw: 28 22 64 61 74 61 2d 63 6d 70 2d 64 61 74 61 6c 61 79 65 72 22 29 2c 6e 3d 65 3f 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 6c 61 79 65 72 2d 70 61 67 65 22 29 3b 69 66 28 74 29 7b 6c 65 74 20 65 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 74 29 2e 70 61 67 65 4e 61 6d 65 2e 73 70 6c 69 74 28 22 3a 3a 22 29 2c 6f 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 5b 64 61 74 61 2d 74 65 6d 70 6c 61 74 65 2d 6e 61 6d 65 3d 22 72 65 73 6f 72 74 2d 74 65 6d 70 6c 61 74 65 22 5d 27 29 3b 22 72 65 73 6f 72 74 73 22 3d 3d 3d 65 5b 30 5d 3f 6f 26 26 74 68 69 73 2e 63 6f 6d 70 6f 6e 65 6e 74 48 6f 73 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 43 6f 72 65 4a 53 2e 44 6f 6d 45 76 65 6e 74 43 6f 6e 73 74 61 6e 74 73 2e Data Ascii: ("data-cmp-datalayer"),n=e?.getAttribute("data-layer-page");if(t){let e=JSON.parse(t).pageName.split("::"),o=document.querySelector('[data-template-name="resort-template"]');"resorts"===e[0]?o&&this.componentHost.addEventListener(CoreJS.DomEventConstants.
2024-10-30 07:46:23 UTC	16384	IN	Data Raw: 75 74 28 28 29 3d 3e 7b 64 6f 63 75 6d 65 6e 74 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6e 65 77 20 45 76 65 6e 74 28 43 6f 72 65 4a 53 2e 43 75 73 74 6f 6d 44 6f 6d 45 76 65 6e 74 43 6f 6e 73 74 61 6e 74 73 2e 52 45 53 49 5a 45 5f 45 56 45 4e 54 5f 57 52 41 50 50 45 52 29 29 7d 2c 31 30 30 29 2c 74 68 69 73 2e 74 61 62 4e 61 76 69 67 61 74 69 6f 6e 42 75 74 74 6f 6e 2e 66 6f 72 45 61 63 68 28 74 3d 3e 7b 69 66 28 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 66 69 6c 74 65 72 2d 74 61 62 2d 69 64 22 29 3d 3d 3d 65 29 7b 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 63 75 72 72 65 6e 74 22 2c 21 30 29 3b 6c 65 74 20 65 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 76 69 73 69 74 65 64 22 29 3b 22 Data Ascii: ut(()=>{document.dispatchEvent(new Event(CoreJS.CustomDomEventConstants.RESIZE_EVENT_WRAPPER))},100),this.tabNavigationButton.forEach(t=>{if(t.getAttribute("data-filter-tab-id")===e){t.setAttribute("aria-current",!0);let e=t.getAttribute("data-visited");"
2024-10-30 07:46:23 UTC	16384	IN	Data Raw: 6e 74 48 6f 73 74 3f 2e 64 61 74 61 73 65 74 2e 6d 69 6e 52 6f 6f 6d 3f 70 61 72 73 65 49 6e 74 28 74 68 69 73 2e 63 6f 6d 70 6f 6e 65 6e 74 48 6f 73 74 3f 2e 64 61 74 61 73 65 74 2e 6d 69 6e 52 6f 6f 6d 29 3a 31 2c 74 3d 74 68 69 73 2e 63 6f 6d 70 6f 6e 65 6e 74 48 6f 73 74 3f 2e 64 61 74 61 73 65 74 2e 6d 69 6e 41 64 75 6c 74 3f 70 61 72 73 65 49 6e 74 28 74 68 69 73 2e 63 6f 6d 70 6f 6e 65 6e 74 48 6f 73 74 3f 2e 64 61 74 61 73 65 74 2e 6d 69 6e 41 64 75 6c 74 29 3a 31 2c 6e 3d 74 68 69 73 2e 63 6f 6d 70 6f 6e 65 6e 74 48 6f 73 74 3f 2e 64 61 74 61 73 65 74 2e 6d 69 6e 43 68 69 6c 64 3f 70 61 72 73 65 49 6e 74 28 74 68 69 73 2e 63 6f 6d 70 6f 6e 65 6e 74 48 6f 73 74 3f 2e 64 61 74 61 73 65 74 2e 6d 69 6e 43 68 69 6c 64 29 3a 30 2c 6f 3d 74 68 69 73 2e Data Ascii: ntHost?.dataset.minRoom?parseInt(this.componentHost?.dataset.minRoom):1,t=this.componentHost?.dataset.minAdult?parseInt(this.componentHost?.dataset.minAdult):1,n=this.componentHost?.dataset.minChild?parseInt(this.componentHost?.dataset.minChild):0,o=this.
2024-10-30 07:46:23 UTC	16384	IN	Data Raw: 43 2e 63 6f 75 6e 74 72 79 46 69 6c 74 65 72 26 26 21 74 29 7b 66 6f 72 28 6c 65 74 20 65 20 6f 66 28 6e 2e 68 6f 74 65 6c 73 2e 73 6f 72 74 28 28 65 2c 74 29 3d 3e 65 2e 63 6f 75 6e 74 72 79 3d 3d 3d 74 2e 63 6f 75 6e 74 72 79 3f 65 2e 63 69 74 79 2e 6c 6f 63 61 6c 65 43 6f 6d 70 61 72 65 28 74 2e 63 69 74 79 29 3a 65 2e 63 6f 75 6e 74 72 79 2e 6c 6f 63 61 6c 65 43 6f 6d 70 61 72 65 28 74 2e 63 6f 75 6e 74 72 79 29 29 2c 6e 2e 68 6f 74 65 6c 73 29 29 6f 2e 66 69 6e 64 28 74 3d 3e 74 2e 63 6f 75 6e 74 72 79 3d 3d 3d 65 2e 63 6f 75 6e 74 72 79 29 3f 72 2e 70 75 73 68 28 65 29 3a 6f 2e 70 75 73 68 28 65 29 3b 74 68 69 73 2e 64 69 73 70 6c 61 79 46 69 6c 74 65 72 3d 3d 3d 43 2e 63 69 74 79 46 69 6c 74 65 72 26 26 28 72 3d 72 2e 66 69 6c 74 65 72 28 28 65 2c Data Ascii: C.countryFilter&&!t){for(let e of(n.hotels.sort((e,t)=>e.country===t.country?e.city.localeCompare(t.city):e.country.localeCompare(t.country)),n.hotels))o.find(t=>t.country===e.country)?r.push(e):o.push(e);this.displayFilter===C.cityFilter&&(r=r.filter((e,
2024-10-30 07:46:23 UTC	16384	IN	Data Raw: 6b 69 6e 44 61 74 65 50 69 63 6b 65 72 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 76 61 6c 75 65 2d 77 72 6f 6e 67 22 2c 65 2e 74 61 72 67 65 74 2e 76 61 6c 75 65 29 2c 74 68 69 73 2e 69 6e 70 75 74 48 74 6d 6c 44 61 74 61 28 22 63 68 65 63 6b 49 6e 22 29 29 7d 29 2c 74 68 69 73 2e 63 6f 6d 70 6f 6e 65 6e 74 48 6f 73 74 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 61 63 65 2d 6c 6f 6e 67 2d 73 74 61 79 5f 5f 63 6f 6e 74 65 6e 74 22 29 7c 7c 74 68 69 73 2e 63 68 65 63 6b 6f 75 74 44 61 74 65 50 69 63 6b 65 72 3f 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 43 6f 72 65 4a 53 2e 44 6f 6d 45 76 65 6e 74 43 6f 6e 73 74 61 6e 74 73 2e 4b 45 59 5f 55 50 2c 65 3d 3e 7b 69 66 28 65 2e 6b 65 79 21 3d 3d 43 6f 72 65 4a 53 Data Ascii: kinDatePicker.setAttribute("data-value-wrong",e.target.value),this.inputHtmlData("checkIn"))}),this.componentHost.classList.contains("ace-long-stay__content")\|\|this.checkoutDatePicker?.addEventListener(CoreJS.DomEventConstants.KEY_UP,e=>{if(e.key!==CoreJS
2024-10-30 07:46:23 UTC	16384	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 61 29 7b 76 61 72 20 73 2c 63 3d 6f 28 74 29 2c 6c 3d 69 28 63 29 2c 75 3d 72 28 61 2c 6c 29 3b 69 66 28 65 26 26 6e 21 3d 6e 29 7b 66 6f 72 28 3b 6c 3e 75 3b 29 69 66 28 28 73 3d 63 5b 75 2b 2b 5d 29 21 3d 73 29 72 65 74 75 72 6e 21 30 7d 65 6c 73 65 20 66 6f 72 28 3b 6c 3e 75 3b 75 2b 2b 29 69 66 28 28 65 7c 7c 75 20 69 6e 20 63 29 26 26 63 5b 75 5d 3d 3d 3d 6e 29 72 65 74 75 72 6e 20 65 7c 7c 75 7c 7c 30 3b 72 65 74 75 72 6e 21 65 26 26 2d 31 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3d 7b 69 6e 63 6c 75 64 65 73 3a 61 28 21 30 29 2c 69 6e 64 65 78 4f 66 3a 61 28 21 31 29 7d 7d 2c 32 30 39 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 6f 3d 6e 28 39 39 37 34 29 2c 72 3d 6e 28 31 37 30 32 29 2c 69 3d Data Ascii: function(t,n,a){var s,c=o(t),l=i(c),u=r(a,l);if(e&&n!=n){for(;l>u;)if((s=c[u++])!=s)return!0}else for(;l>u;u++)if((e\|\|u in c)&&c[u]===n)return e\|\|u\|\|0;return!e&&-1}};e.exports={includes:a(!0),indexOf:a(!1)}},2092:function(e,t,n){var o=n(9974),r=n(1702),i=
2024-10-30 07:46:23 UTC	16384	IN	Data Raw: 63 69 65 73 22 29 2c 75 3d 52 65 67 45 78 70 2e 70 72 6f 74 6f 74 79 70 65 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 64 29 7b 76 61 72 20 68 3d 73 28 65 29 2c 70 3d 21 61 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 7b 7d 3b 72 65 74 75 72 6e 20 74 5b 68 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 37 7d 2c 37 21 3d 22 22 5b 65 5d 28 74 29 7d 29 2c 6d 3d 70 26 26 21 61 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 21 31 2c 6e 3d 2f 61 2f 3b 72 65 74 75 72 6e 22 73 70 6c 69 74 22 3d 3d 3d 65 26 26 28 28 6e 3d 7b 7d 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 7b 7d 2c 6e 2e 63 6f 6e 73 74 72 75 63 74 6f 72 5b 6c 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 7d 2c 6e 2e 66 6c Data Ascii: cies"),u=RegExp.prototype;e.exports=function(e,t,n,d){var h=s(e),p=!a(function(){var t={};return t[h]=function(){return 7},7!=""[e](t)}),m=p&&!a(function(){var t=!1,n=/a/;return"split"===e&&((n={}).constructor={},n.constructor[l]=function(){return n},n.fl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49783	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:23 UTC	1097	OUT	GET /content/sling/servlets/ace/getposcookies?siteCode=all&languageCodeFromPage=en&pointOfSaleCodeFromPage= HTTP/1.1 Host: all.accor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://all.accor.com/a/en/new-app-offer.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D
2024-10-30 07:46:23 UTC	843	IN	HTTP/1.1 301 Moved Permanently Content-Type: text/html; charset=iso-8859-1 Date: Wed, 30 Oct 2024 07:46:23 GMT Location: https://all.accor.com/a/content/sling/servlets/ace/getposcookies?siteCode=all&languageCodeFromPage=en&pointOfSaleCodeFromPage= server: MF 8700 S - Dyna-VT - Stage V All-in-One Server-Timing: dtSInfo;desc="0", dtRpid;desc="19595647" Set-Cookie: dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; Path=/; Domain=.accor.com Set-Cookie: incap_ses_1388_3039981=WwV9UFsZYQbcTBz5zCpDE0/kIWcAAAAAAlW7vDjSIvNuKK2ooaDNBg==; path=/ Strict-Transport-Security: max-age=15552000 Vary: Accept-Encoding X-CDN: Imperva X-CDN-Forward: EdgeCast X-Iinfo: 18-1120374-1120378 NNNY CT(13 19 0) RT(1730274383534 12) q(0 0 0 5) r(0 0) U24 Content-Length: 342 Connection: close
2024-10-30 07:46:23 UTC	342	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 6c 6c 2e 61 63 63 6f 72 2e 63 6f 6d 2f 61 2f 63 6f 6e 74 65 6e 74 2f 73 6c 69 6e 67 2f 73 65 72 76 6c 65 74 73 2f 61 63 65 2f 67 65 74 70 6f 73 63 6f 6f 6b 69 65 73 3f 73 69 74 65 43 6f 64 65 3d 61 6c 6c 26 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://all.accor.com/a/content/sling/servlets/ace/getposcookies?siteCode=all&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49794	104.18.86.42	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:23 UTC	627	OUT	GET /consent/87c4fef0-8732-44e4-bee3-f4faa4ce5a9d/87c4fef0-8732-44e4-bee3-f4faa4ce5a9d.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://all.accor.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://all.accor.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 07:46:23 UTC	981	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 07:46:23 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Ray: 8da9ca92a88da916-DFW CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 4287 Cache-Control: public, max-age=86400 Expires: Thu, 31 Oct 2024 07:46:23 GMT Last-Modified: Tue, 22 Oct 2024 08:34:09 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: bZU/jSh7PKJNnkZnSK1nnw== Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 9a887629-301e-00ea-644c-266c8b000000 x-ms-version: 2009-09-19 Cross-Origin-Resource-Policy: cross-origin Server: cloudflare
2024-10-30 07:46:23 UTC	388	IN	Data Raw: 31 32 31 36 0d 0a 7b 22 43 6f 6f 6b 69 65 53 50 41 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 53 61 6d 65 53 69 74 65 4e 6f 6e 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 56 32 43 53 50 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 4d 75 6c 74 69 56 61 72 69 61 6e 74 54 65 73 74 69 6e 67 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 55 73 65 56 32 22 3a 74 72 75 65 2c 22 4d 6f 62 69 6c 65 53 44 4b 22 3a 66 61 6c 73 65 2c 22 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 53 63 72 69 70 74 54 79 70 65 22 3a 22 50 52 4f 44 55 43 54 49 4f 4e 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 30 39 2e 32 2e 30 22 2c 22 4f 70 74 61 6e 6f 6e 44 61 74 61 4a 53 4f 4e 22 3a 22 38 37 63 34 66 Data Ascii: 1216{"CookieSPAEnabled":true,"CookieSameSiteNoneEnabled":false,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202409.2.0","OptanonDataJSON":"87c4f
2024-10-30 07:46:23 UTC	1369	IN	Data Raw: 6b 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6f 6b 69 65 73 2d 64 61 74 61 2e 6f 6e 65 74 72 75 73 74 2e 69 6f 2f 62 61 6e 6e 65 72 73 64 6b 2f 76 31 2f 64 6f 6d 61 69 6e 67 72 6f 75 70 63 68 65 63 6b 22 2c 22 52 75 6c 65 53 65 74 22 3a 5b 7b 22 49 64 22 3a 22 30 31 39 31 62 63 35 64 2d 33 30 34 31 2d 37 65 65 31 2d 61 61 37 31 2d 64 30 35 37 31 61 37 38 62 62 37 37 22 2c 22 4e 61 6d 65 22 3a 22 47 44 50 52 20 54 65 6d 70 6c 61 74 65 20 2d 20 41 4c 4c 2b 42 72 61 6e 64 73 2b 42 32 42 2b 52 65 73 74 6f 73 2b 41 70 74 56 69 6c 6c 61 73 22 2c 22 43 6f 75 6e 74 72 69 65 73 22 3a 5b 22 70 72 22 2c 22 70 73 22 2c 22 70 77 22 2c 22 70 79 22 2c 22 71 61 22 2c 22 61 64 22 2c 22 61 66 22 2c 22 61 67 22 2c 22 61 69 22 2c 22 61 6c 22 2c 22 61 6d 22 2c 22 61 6f Data Ascii: kUrl":"https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck","RuleSet":[{"Id":"0191bc5d-3041-7ee1-aa71-d0571a78bb77","Name":"GDPR Template - ALL+Brands+B2B+Restos+AptVillas","Countries":["pr","ps","pw","py","qa","ad","af","ag","ai","al","am","ao
2024-10-30 07:46:23 UTC	1369	IN	Data Raw: 72 22 2c 22 64 65 66 61 75 6c 74 22 3a 22 65 6e 22 2c 22 74 68 22 3a 22 74 68 22 2c 22 6a 61 22 3a 22 6a 61 22 2c 22 69 64 22 3a 22 69 64 22 2c 22 70 6c 22 3a 22 70 6c 22 2c 22 74 72 22 3a 22 74 72 22 2c 22 6e 6c 22 3a 22 6e 6c 22 7d 2c 22 42 61 6e 6e 65 72 50 75 73 68 65 73 44 6f 77 6e 22 3a 66 61 6c 73 65 2c 22 44 65 66 61 75 6c 74 22 3a 74 72 75 65 2c 22 47 6c 6f 62 61 6c 22 3a 74 72 75 65 2c 22 54 79 70 65 22 3a 22 47 44 50 52 22 2c 22 55 73 65 47 6f 6f 67 6c 65 56 65 6e 64 6f 72 73 22 3a 66 61 6c 73 65 2c 22 56 61 72 69 61 6e 74 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 54 65 73 74 45 6e 64 54 69 6d 65 22 3a 6e 75 6c 6c 2c 22 56 61 72 69 61 6e 74 73 22 3a 5b 5d 2c 22 54 65 6d 70 6c 61 74 65 4e 61 6d 65 22 3a 22 47 44 50 52 20 54 65 6d 70 6c 61 Data Ascii: r","default":"en","th":"th","ja":"ja","id":"id","pl":"pl","tr":"tr","nl":"nl"},"BannerPushesDown":false,"Default":true,"Global":true,"Type":"GDPR","UseGoogleVendors":false,"VariantEnabled":false,"TestEndTime":null,"Variants":[],"TemplateName":"GDPR Templa
2024-10-30 07:46:23 UTC	1369	IN	Data Raw: 65 6e 74 53 63 72 65 65 6e 22 3a 22 31 22 2c 22 63 6f 6e 73 65 6e 74 4c 61 6e 67 75 61 67 65 22 3a 6e 75 6c 6c 2c 22 76 65 6e 64 6f 72 4c 69 73 74 56 65 72 73 69 6f 6e 22 3a 30 2c 22 6d 61 78 56 65 6e 64 6f 72 49 64 22 3a 30 2c 22 65 6e 63 6f 64 69 6e 67 54 79 70 65 22 3a 22 30 22 2c 22 67 6c 6f 62 61 6c 56 65 6e 64 6f 72 4c 69 73 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6f 6b 69 65 6c 61 77 2e 6f 72 67 2f 76 65 6e 64 6f 72 6c 69 73 74 2f 69 61 62 32 44 61 74 61 2e 6a 73 6f 6e 22 7d 2c 22 49 61 62 32 56 32 44 61 74 61 22 3a 7b 22 63 6f 6f 6b 69 65 56 65 72 73 69 6f 6e 22 3a 22 31 22 2c 22 63 72 65 61 74 65 64 54 69 6d 65 22 3a 22 32 30 32 34 2d 31 30 2d 32 32 54 30 38 3a 33 34 3a 30 38 2e 39 33 31 35 35 39 37 35 37 22 2c 22 75 70 64 Data Ascii: entScreen":"1","consentLanguage":null,"vendorListVersion":0,"maxVendorId":0,"encodingType":"0","globalVendorListUrl":"https://cdn.cookielaw.org/vendorlist/iab2Data.json"},"Iab2V2Data":{"cookieVersion":"1","createdTime":"2024-10-22T08:34:08.931559757","upd
2024-10-30 07:46:23 UTC	143	IN	Data Raw: 6c 73 65 2c 22 57 65 62 46 6f 72 6d 53 72 63 55 72 6c 22 3a 22 22 2c 22 57 65 62 46 6f 72 6d 57 6f 72 6b 65 72 55 72 6c 22 3a 22 22 2c 22 47 70 70 44 61 74 61 22 3a 7b 22 63 6d 70 49 64 22 3a 22 32 38 22 7d 2c 22 41 75 74 68 65 6e 74 69 63 61 74 65 64 43 6f 6e 73 65 6e 74 22 3a 66 61 6c 73 65 2c 22 43 44 4e 4c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6f 6b 69 65 6c 61 77 2e 6f 72 67 22 7d 0d 0a Data Ascii: lse,"WebFormSrcUrl":"","WebFormWorkerUrl":"","GppData":{"cmpId":"28"},"AuthenticatedConsent":false,"CDNLocation":"https://cdn.cookielaw.org"}
2024-10-30 07:46:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49784	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:23 UTC	851	OUT	GET /a/content/dam/generic/icons/amenities/default.svg HTTP/1.1 Host: all.accor.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D
2024-10-30 07:46:24 UTC	757	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Age: 159299 Cache-Control: max-age=43200,public content-disposition: attachment; filename="default.svg" Content-Type: image/svg+xml Date: Wed, 30 Oct 2024 07:46:23 GMT Etag: "0x8DBF00E1C0EB6EC+ident" Last-Modified: Tue, 28 Nov 2023 12:32:39 GMT Server: ECAcc (lhd/35C5) Strict-Transport-Security: max-age=31557600 Vary: Accept-Encoding X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast x-content-type-options: nosniff x-frame-options: SAMEORIGIN X-Iinfo: 17-198099298-198099300 NNYN CT(14 18 0) RT(1730115566090 3) q(0 1 1 0) r(1 1) U24 X-Served-By: cache-fra-etou8220133-FRA X-Timer: S1730115567.094613,VS0,VS0,VE1 x-vhost: prod-allcom-publish Content-Length: 362 Connection: close
2024-10-30 07:46:24 UTC	362	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 0a 20 20 3c 70 61 74 68 20 64 3d 22 6d 31 35 2e 38 37 20 38 2e 35 36 2d 35 2e 35 31 20 35 2e 35 31 2d 32 2e 32 39 2d 32 2e 32 38 61 2e 37 34 2e 37 34 20 30 20 30 20 30 2d 31 2e 30 36 20 30 20 2e 37 35 2e 37 35 20 30 20 30 20 30 20 30 20 31 2e 30 36 6c 32 2e 38 32 20 32 2e 38 31 61 2e 37 35 2e 37 35 20 30 20 30 20 30 20 31 2e 30 36 20 30 6c 36 2d 36 61 2e 37 37 2e 37 37 20 30 20 30 20 30 20 30 2d 31 2e 30 37 2e 37 35 2e 37 35 20 30 20 30 20 30 2d 31 2e 30 32 2d 2e 30 33 5a 22 2f 3e 0a 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 32 20 33 2e 30 38 41 38 2e 39 32 20 38 2e 39 32 20 30 20 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"> <path d="m15.87 8.56-5.51 5.51-2.29-2.28a.74.74 0 0 0-1.06 0 .75.75 0 0 0 0 1.06l2.82 2.81a.75.75 0 0 0 1.06 0l6-6a.77.77 0 0 0 0-1.07.75.75 0 0 0-1.02-.03Z"/> <path d="M12 3.08A8.92 8.92 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49787	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:23 UTC	1093	OUT	GET /styles/styles-footer-light.css HTTP/1.1 Host: all.accor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://all.accor.com/a/en/new-app-offer.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D If-Modified-Since: Mon, 28 Oct 2024 11:00:52 GMT
2024-10-30 07:46:24 UTC	629	IN	HTTP/1.1 304 Not Modified Age: 161132 Cache-control: public, max-age=3600, stale-while-revalidate=21600 Date: Wed, 30 Oct 2024 07:46:24 GMT Last-Modified: Mon, 28 Oct 2024 11:00:52 GMT P3P: CP="NO P3P POLICY" Referrer-Policy: origin Server: ECAcc (lhd/35A5) Strict-Transport-Security: max-age=15552000 Strict-Transport-Security: max-age=15552000 Vary: Accept-Encoding X-Accor-asset: ecom X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Clacks-Overhead: GNU Terry Pratchett X-Iinfo: 17-195174010-195174011 nNNY RT(1730113251991 3) q(0 1 1 0) r(1 1) U24 X-XSS-Protection: 1; mode=block Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49785	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:23 UTC	830	OUT	GET /scripts/main-footer-light.js HTTP/1.1 Host: all.accor.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D
2024-10-30 07:46:24 UTC	672	IN	HTTP/1.1 200 OK Age: 161132 Cache-control: public, max-age=3600, stale-while-revalidate=21600 Content-Type: text/javascript Date: Wed, 30 Oct 2024 07:46:24 GMT Last-Modified: Mon, 28 Oct 2024 11:00:52 GMT P3P: CP="NO P3P POLICY" Referrer-Policy: origin Server: ECAcc (lhd/35D0) Strict-Transport-Security: max-age=15552000 Strict-Transport-Security: max-age=15552000 Vary: Accept-Encoding X-Accor-asset: ecom X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Clacks-Overhead: GNU Terry Pratchett X-Iinfo: 17-174814289-174805022 pNNy RT(1730113251974 9) q(0 0 0 0) r(1 1) U24 X-XSS-Protection: 1; mode=block Content-Length: 2388 Connection: close
2024-10-30 07:46:24 UTC	2388	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 6f 29 7b 69 66 28 74 5b 6f 5d 29 72 65 74 75 72 6e 20 74 5b 6f 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6f 5d 3d 7b 69 3a 6f 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6f 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 65 2c 6e 2e 63 3d 74 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 6e 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 6f 7d 29 7d 2c 6e 2e 72 3d 66 75 6e Data Ascii: !function(e){var t={};function n(o){if(t[o])return t[o].exports;var r=t[o]={i:o,l:!1,exports:{}};return e[o].call(r.exports,r,r.exports,n),r.l=!0,r.exports}n.m=e,n.c=t,n.d=function(e,t,o){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:o})},n.r=fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49789	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:23 UTC	957	OUT	GET /a/etc.clientlibs/core/wcm/components/commons/datalayer/v2/clientlibs/core.wcm.components.commons.datalayer.v2.lc-1e0136bad0acfb78be509234578e44f9-lc.min.js HTTP/1.1 Host: all.accor.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D
2024-10-30 07:46:24 UTC	709	IN	HTTP/1.1 200 OK Age: 597001 cache-control: max-age=2592000, public, immutable Content-Type: application/javascript;charset=utf-8 Date: Wed, 30 Oct 2024 07:46:24 GMT Etag: W/"ad1-2386f26fb1bdc0-gzip" Last-Modified: Wed, 23 Oct 2024 09:56:23 GMT Server: ECAcc (lhd/35F0) Strict-Transport-Security: max-age=31557600 Vary: Accept-Encoding X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Content-Type-Options: nosniff x-frame-options: SAMEORIGIN X-Iinfo: 17-219868777-219868778 NNNY CT(15 22 0) RT(1730113278492 2) q(0 1 1 -1) r(1 1) U24 X-Served-By: cache-fra-etou8220157-FRA X-Timer: S1730113279.589816,VS0,VS0,VE2 x-vhost: prod-allcom-publish Content-Length: 2769 Connection: close
2024-10-30 07:46:24 UTC	2769	IN	Data Raw: 69 66 28 21 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 61 74 63 68 65 73 29 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 61 74 63 68 65 73 3d 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 73 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 77 65 62 6b 69 74 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 3b 69 66 28 21 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 6f 73 65 73 74 29 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 6f 73 65 73 74 3d 66 75 6e 63 74 69 6f 6e 28 73 29 7b 76 61 72 20 65 6c 3d 74 68 69 73 3b 69 66 28 21 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6f 6e 74 61 69 6e 73 28 65 6c 29 29 Data Ascii: if(!Element.prototype.matches)Element.prototype.matches=Element.prototype.msMatchesSelector\|\|Element.prototype.webkitMatchesSelector;if(!Element.prototype.closest)Element.prototype.closest=function(s){var el=this;if(!document.documentElement.contains(el))

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49788	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:23 UTC	915	OUT	GET /a/etc.clientlibs/ace/clientlibs/clienlibs-3rd-parties/clientlib-vue.lc-f35b543fbf132ab69f5c12eebf271456-lc.min.js HTTP/1.1 Host: all.accor.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D
2024-10-30 07:46:24 UTC	710	IN	HTTP/1.1 200 OK Age: 505821 cache-control: max-age=2592000, public, immutable Content-Type: application/javascript;charset=utf-8 Date: Wed, 30 Oct 2024 07:46:24 GMT Etag: W/"1de58-2386f26fb1bdc0-gzip" Last-Modified: Thu, 24 Oct 2024 11:16:03 GMT Server: ECAcc (lhd/35B7) Strict-Transport-Security: max-age=31557600 Vary: Accept-Encoding X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Content-Type-Options: nosniff x-frame-options: SAMEORIGIN X-Iinfo: 17-23512569-23512571 NNNY CT(15 21 0) RT(1730113278085 3) q(0 0 0 0) r(0 1) U24 X-Served-By: cache-fra-etou8220137-FRA X-Timer: S1730113279.586835,VS0,VS0,VE2 x-vhost: prod-allcom-publish Content-Length: 122456 Connection: close
2024-10-30 07:46:24 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 76 75 65 2d 69 31 38 6e 20 76 38 2e 32 38 2e 32 20 0a 20 2a 20 28 63 29 20 32 30 32 32 20 6b 61 7a 75 79 61 20 6b 61 77 61 67 75 63 68 69 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 2e 0a 20 2a 2f 0a 76 61 72 20 74 2c 65 3b 74 3d 74 68 69 73 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 5b 22 63 6f 6d 70 61 63 74 44 69 73 70 6c 61 79 22 2c 22 63 75 72 72 65 6e 63 79 22 2c 22 63 75 72 72 65 6e 63 79 44 69 73 70 6c 61 79 22 2c 22 63 75 72 72 65 6e 63 79 53 69 67 6e 22 2c 22 6c 6f 63 61 6c 65 4d 61 74 63 68 65 72 22 2c 22 6e 6f 74 61 74 69 6f 6e 22 2c 22 6e 75 6d 62 65 72 69 6e 67 53 79 73 74 65 6d 22 2c 22 73 69 67 6e 44 69 73 Data Ascii: /! vue-i18n v8.28.2 * (c) 2022 kazuya kawaguchi * Released under the MIT License. */var t,e;t=this,e=function(){"use strict";var t=["compactDisplay","currency","currencyDisplay","currencySign","localeMatcher","notation","numberingSystem","signDis
2024-10-30 07:46:24 UTC	1	IN	Data Raw: 68 Data Ascii: h
2024-10-30 07:46:24 UTC	16383	IN	Data Raw: 61 69 6e 43 61 63 68 65 3d 7b 7d 2c 74 68 69 73 2e 5f 76 6d 2e 24 73 65 74 28 74 68 69 73 2e 5f 76 6d 2c 22 66 61 6c 6c 62 61 63 6b 4c 6f 63 61 6c 65 22 2c 74 29 7d 2c 72 74 2e 66 6f 72 6d 61 74 46 61 6c 6c 62 61 63 6b 4d 65 73 73 61 67 65 73 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 66 6f 72 6d 61 74 46 61 6c 6c 62 61 63 6b 4d 65 73 73 61 67 65 73 7d 2c 72 74 2e 66 6f 72 6d 61 74 46 61 6c 6c 62 61 63 6b 4d 65 73 73 61 67 65 73 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 5f 66 6f 72 6d 61 74 46 61 6c 6c 62 61 63 6b 4d 65 73 73 61 67 65 73 3d 74 7d 2c 72 74 2e 6d 69 73 73 69 6e 67 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 6d 69 73 73 69 6e 67 7d Data Ascii: ainCache={},this._vm.$set(this._vm,"fallbackLocale",t)},rt.formatFallbackMessages.get=function(){return this._formatFallbackMessages},rt.formatFallbackMessages.set=function(t){this._formatFallbackMessages=t},rt.missing.get=function(){return this._missing}
2024-10-30 07:46:24 UTC	16383	IN	Data Raw: 2e 73 65 74 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 7d 72 65 74 75 72 6e 20 65 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 74 68 69 73 2e 73 65 74 5b 65 5d 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 73 65 74 5b 65 5d 3d 21 30 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 73 65 74 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 7d 2c 65 7d 28 29 3b 76 61 72 20 61 65 3d 53 2c 73 65 3d 30 2c 63 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 69 64 3d 73 65 2b 2b 2c 74 68 69 73 2e 73 75 62 73 3d 5b 5d 7d 3b 63 65 2e 70 72 6f 74 6f Data Ascii: .set=Object.create(null)}return e.prototype.has=function(e){return!0===this.set[e]},e.prototype.add=function(e){this.set[e]=!0},e.prototype.clear=function(){this.set=Object.create(null)},e}();var ae=S,se=0,ce=function(){this.id=se++,this.subs=[]};ce.proto
2024-10-30 07:46:24 UTC	16383	IN	Data Raw: 3a 74 2e 24 64 65 73 74 72 6f 79 28 29 29 7d 7d 2c 49 74 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 4c 74 29 3b 66 75 6e 63 74 69 6f 6e 20 4d 74 28 69 2c 61 2c 73 2c 63 2c 6c 29 7b 69 66 28 21 74 28 69 29 29 7b 76 61 72 20 66 3d 73 2e 24 6f 70 74 69 6f 6e 73 2e 5f 62 61 73 65 3b 69 66 28 6f 28 69 29 26 26 28 69 3d 66 2e 65 78 74 65 6e 64 28 69 29 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 29 7b 76 61 72 20 70 3b 69 66 28 74 28 69 2e 63 69 64 29 26 26 76 6f 69 64 20 30 3d 3d 3d 28 69 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 69 29 7b 69 66 28 72 28 65 2e 65 72 72 6f 72 29 26 26 6e 28 65 2e 65 72 72 6f 72 43 6f 6d 70 29 29 72 65 74 75 72 6e 20 65 2e 65 72 72 6f 72 43 6f 6d 70 3b 69 66 28 6e 28 65 2e 72 65 73 6f 6c 76 65 64 29 29 72 65 74 75 72 Data Ascii: :t.$destroy())}},It=Object.keys(Lt);function Mt(i,a,s,c,l){if(!t(i)){var f=s.$options._base;if(o(i)&&(i=f.extend(i)),"function"==typeof i){var p;if(t(i.cid)&&void 0===(i=function(e,i){if(r(e.error)&&n(e.errorComp))return e.errorComp;if(n(e.resolved))retur
2024-10-30 07:46:24 UTC	16383	IN	Data Raw: 6e 73 2e 5f 62 61 73 65 3d 65 2c 41 28 65 2e 6f 70 74 69 6f 6e 73 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2c 4e 6e 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 75 73 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 69 6e 73 74 61 6c 6c 65 64 50 6c 75 67 69 6e 73 7c 7c 28 74 68 69 73 2e 5f 69 6e 73 74 61 6c 6c 65 64 50 6c 75 67 69 6e 73 3d 5b 5d 29 3b 69 66 28 74 2e 69 6e 64 65 78 4f 66 28 65 29 3e 2d 31 29 72 65 74 75 72 6e 20 74 68 69 73 3b 76 61 72 20 6e 3d 6b 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 3b 72 65 74 75 72 6e 20 6e 2e 75 6e 73 68 69 66 74 28 74 68 69 73 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 2e 69 6e 73 74 61 6c 6c 3f 65 2e 69 6e 73 74 61 6c 6c 2e 61 70 70 6c 79 28 65 2c 6e 29 3a 22 66 75 6e Data Ascii: ns._base=e,A(e.options.components,Nn),function(e){e.use=function(e){var t=this._installedPlugins\|\|(this._installedPlugins=[]);if(t.indexOf(e)>-1)return this;var n=k(arguments,1);return n.unshift(this),"function"==typeof e.install?e.install.apply(e,n):"fun
2024-10-30 07:46:24 UTC	4	IN	Data Raw: 28 29 7d 2c Data Ascii: ()},
2024-10-30 07:46:24 UTC	16383	IN	Data Raw: 6c 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 74 61 72 67 65 74 3d 3d 3d 65 26 26 2b 2b 63 3e 3d 61 26 26 75 28 29 7d 3b 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 3c 61 26 26 75 28 29 7d 2c 6f 2b 31 29 2c 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 73 2c 6c 29 7d 76 61 72 20 49 69 3d 2f 5c 62 28 74 72 61 6e 73 66 6f 72 6d 7c 61 6c 6c 29 28 2c 7c 24 29 2f 3b 66 75 6e 63 74 69 6f 6e 20 4d 69 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 77 69 6e 64 6f 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 29 2c 69 3d 28 72 5b 41 69 2b 22 44 65 6c 61 79 22 5d 7c 7c 22 22 29 2e 73 70 6c 69 74 28 22 2c 20 22 29 2c 6f 3d 28 72 5b 41 69 2b 22 44 75 72 61 74 69 6f 6e 22 5d 7c 7c 22 22 29 2e 73 70 6c 69 74 28 22 2c 20 22 Data Ascii: l=function(t){t.target===e&&++c>=a&&u()};setTimeout(function(){c<a&&u()},o+1),e.addEventListener(s,l)}var Ii=/\b(transform\|all)(,\|$)/;function Mi(e,t){var n,r=window.getComputedStyle(e),i=(r[Ai+"Delay"]\|\|"").split(", "),o=(r[Ai+"Duration"]\|\|"").split(", "
2024-10-30 07:46:24 UTC	16383	IN	Data Raw: 66 6f 6f 74 65 72 2c 66 6f 72 6d 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 2c 68 65 61 64 2c 68 65 61 64 65 72 2c 68 67 72 6f 75 70 2c 68 72 2c 68 74 6d 6c 2c 6c 65 67 65 6e 64 2c 6c 69 2c 6d 65 6e 75 69 74 65 6d 2c 6d 65 74 61 2c 6f 70 74 67 72 6f 75 70 2c 6f 70 74 69 6f 6e 2c 70 61 72 61 6d 2c 72 70 2c 72 74 2c 73 6f 75 72 63 65 2c 73 74 79 6c 65 2c 73 75 6d 6d 61 72 79 2c 74 62 6f 64 79 2c 74 64 2c 74 66 6f 6f 74 2c 74 68 2c 74 68 65 61 64 2c 74 69 74 6c 65 2c 74 72 2c 74 72 61 63 6b 22 29 2c 78 6f 3d 2f 5e 5c 73 2a 28 5b 5e 5c 73 22 27 3c 3e 5c 2f 3d 5d 2b 29 28 3f 3a 5c 73 2a 28 3d 29 5c 73 2a 28 3f 3a 22 28 5b 5e 22 5d 2a 29 22 2b 7c 27 28 5b 5e 27 5d 2a 29 27 2b 7c 28 5b 5e 5c 73 22 27 3d 3c 3e 60 5d 2b 29 29 29 3f 2f 2c 6b 6f 3d 2f 5e Data Ascii: footer,form,h1,h2,h3,h4,h5,h6,head,header,hgroup,hr,html,legend,li,menuitem,meta,optgroup,option,param,rp,rt,source,style,summary,tbody,td,tfoot,th,thead,title,tr,track"),xo=/^\s([^\s"'<>\/=]+)(?:\s(=)\s(?:"([^"])"+\|'([^']*)'+\|([^\s"'=<>`]+)))?/,ko=/^
2024-10-30 07:46:24 UTC	7770	IN	Data Raw: 46 6e 73 3a 6e 2e 73 74 61 74 69 63 52 65 6e 64 65 72 46 6e 73 7d 7d 66 75 6e 63 74 69 6f 6e 20 48 61 28 65 2c 74 29 7b 69 66 28 65 2e 70 61 72 65 6e 74 26 26 28 65 2e 70 72 65 3d 65 2e 70 72 65 7c 7c 65 2e 70 61 72 65 6e 74 2e 70 72 65 29 2c 65 2e 73 74 61 74 69 63 52 6f 6f 74 26 26 21 65 2e 73 74 61 74 69 63 50 72 6f 63 65 73 73 65 64 29 72 65 74 75 72 6e 20 42 61 28 65 2c 74 29 3b 69 66 28 65 2e 6f 6e 63 65 26 26 21 65 2e 6f 6e 63 65 50 72 6f 63 65 73 73 65 64 29 72 65 74 75 72 6e 20 55 61 28 65 2c 74 29 3b 69 66 28 65 2e 66 6f 72 26 26 21 65 2e 66 6f 72 50 72 6f 63 65 73 73 65 64 29 72 65 74 75 72 6e 20 7a 61 28 65 2c 74 29 3b 69 66 28 65 2e 69 66 26 26 21 65 2e 69 66 50 72 6f 63 65 73 73 65 64 29 72 65 74 75 72 6e 20 56 61 28 65 2c 74 29 3b 69 66 28 Data Ascii: Fns:n.staticRenderFns}}function Ha(e,t){if(e.parent&&(e.pre=e.pre\|\|e.parent.pre),e.staticRoot&&!e.staticProcessed)return Ba(e,t);if(e.once&&!e.onceProcessed)return Ua(e,t);if(e.for&&!e.forProcessed)return za(e,t);if(e.if&&!e.ifProcessed)return Va(e,t);if(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49792	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:23 UTC	1077	OUT	GET /scripts/main-footer-light.js HTTP/1.1 Host: all.accor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://all.accor.com/a/en/new-app-offer.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D If-Modified-Since: Mon, 28 Oct 2024 11:00:52 GMT
2024-10-30 07:46:24 UTC	629	IN	HTTP/1.1 304 Not Modified Age: 161132 Cache-control: public, max-age=3600, stale-while-revalidate=21600 Date: Wed, 30 Oct 2024 07:46:24 GMT Last-Modified: Mon, 28 Oct 2024 11:00:52 GMT P3P: CP="NO P3P POLICY" Referrer-Policy: origin Server: ECAcc (lhd/35D0) Strict-Transport-Security: max-age=15552000 Strict-Transport-Security: max-age=15552000 Vary: Accept-Encoding X-Accor-asset: ecom X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Clacks-Overhead: GNU Terry Pratchett X-Iinfo: 17-174814289-174805022 pNNy RT(1730113251974 9) q(0 0 0 0) r(1 1) U24 X-XSS-Protection: 1; mode=block Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49793	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:24 UTC	921	OUT	GET /a/etc.clientlibs/ace/clientlibs-modules/components/clientlib-customer-api.lc-cda7e9186c25de421f8b91a0daf62395-lc.min.js HTTP/1.1 Host: all.accor.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D
2024-10-30 07:46:24 UTC	712	IN	HTTP/1.1 200 OK Age: 167289 cache-control: max-age=2592000, public, immutable Content-Type: application/javascript;charset=utf-8 Date: Wed, 30 Oct 2024 07:46:24 GMT Etag: W/"398a2-2386f26fb1bdc0-gzip" Last-Modified: Mon, 28 Oct 2024 09:18:15 GMT Server: ECAcc (lhd/35A2) Strict-Transport-Security: max-age=31557600 Vary: Accept-Encoding X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Content-Type-Options: nosniff x-frame-options: SAMEORIGIN X-Iinfo: 18-236112945-236112946 NNNN CT(15 19 0) RT(1730113252469 3) q(0 0 1 0) r(1 1) U24 X-Served-By: cache-fra-etou8220080-FRA X-Timer: S1730113253.108609,VS0,VS0,VE1 x-vhost: prod-allcom-publish Content-Length: 235682 Connection: close
2024-10-30 07:46:24 UTC	16383	IN	Data Raw: 2f 2a 0a 20 6a 73 2d 63 6f 6f 6b 69 65 20 76 33 2e 30 2e 35 20 7c 20 4d 49 54 20 2a 2f 0a 76 61 72 20 24 6a 73 63 6f 6d 70 3d 24 6a 73 63 6f 6d 70 7c 7c 7b 7d 3b 24 6a 73 63 6f 6d 70 2e 73 63 6f 70 65 3d 7b 7d 3b 24 6a 73 63 6f 6d 70 2e 61 72 72 61 79 49 74 65 72 61 74 6f 72 49 6d 70 6c 3d 66 75 6e 63 74 69 6f 6e 28 43 29 7b 76 61 72 20 55 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 55 3c 43 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 43 5b 55 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 3b 24 6a 73 63 6f 6d 70 2e 61 72 72 61 79 49 74 65 72 61 74 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 43 29 7b 72 65 74 75 72 6e 7b 6e 65 78 74 3a 24 6a 73 63 6f 6d 70 2e 61 72 72 61 79 49 74 65 72 61 74 6f 72 Data Ascii: /* js-cookie v3.0.5 \| MIT */var $jscomp=$jscomp\|\|{};$jscomp.scope={};$jscomp.arrayIteratorImpl=function(C){var U=0;return function(){return U<C.length?{done:!1,value:C[U++]}:{done:!0}}};$jscomp.arrayIterator=function(C){return{next:$jscomp.arrayIterator
2024-10-30 07:46:24 UTC	1	IN	Data Raw: 65 Data Ascii: e
2024-10-30 07:46:24 UTC	16383	IN	Data Raw: 6e 74 45 6c 65 6d 65 6e 74 26 26 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 73 74 79 6c 65 26 26 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 73 74 79 6c 65 2e 57 65 62 6b 69 74 41 70 70 65 61 72 61 6e 63 65 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 26 26 28 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 2e 66 69 72 65 62 75 67 7c 7c 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 2e 65 78 63 65 70 74 69 6f 6e 26 26 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 2e 74 61 62 6c 65 29 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 6e 61 76 69 67 61 74 6f 72 26 26 6e 61 76 69 67 61 74 6f 72 2e 75 73 Data Ascii: ntElement&&document.documentElement.style&&document.documentElement.style.WebkitAppearance\|\|"undefined"!==typeof window&&window.console&&(window.console.firebug\|\|window.console.exception&&window.console.table)\|\|"undefined"!==typeof navigator&&navigator.us
2024-10-30 07:46:24 UTC	16383	IN	Data Raw: 6d 65 74 68 6f 64 26 26 21 31 21 3d 3d 67 2e 64 65 63 6f 6d 70 72 65 73 73 29 73 77 69 74 63 68 28 61 2e 68 65 61 64 65 72 73 5b 22 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 69 6e 67 22 5d 29 7b 63 61 73 65 20 22 67 7a 69 70 22 3a 63 61 73 65 20 22 63 6f 6d 70 72 65 73 73 22 3a 63 61 73 65 20 22 64 65 66 6c 61 74 65 22 3a 64 3d 64 2e 70 69 70 65 28 56 63 2e 63 72 65 61 74 65 55 6e 7a 69 70 28 29 29 2c 64 65 6c 65 74 65 20 61 2e 68 65 61 64 65 72 73 5b 22 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 69 6e 67 22 5d 7d 76 61 72 20 6c 3d 7b 73 74 61 74 75 73 3a 61 2e 73 74 61 74 75 73 43 6f 64 65 2c 73 74 61 74 75 73 54 65 78 74 3a 61 2e 73 74 61 74 75 73 4d 65 73 73 61 67 65 2c 68 65 61 64 65 72 73 3a 61 2e 68 65 61 64 65 72 73 2c 63 6f 6e 66 69 67 3a 67 2c 72 65 71 Data Ascii: method&&!1!==g.decompress)switch(a.headers["content-encoding"]){case "gzip":case "compress":case "deflate":d=d.pipe(Vc.createUnzip()),delete a.headers["content-encoding"]}var l={status:a.statusCode,statusText:a.statusMessage,headers:a.headers,config:g,req
2024-10-30 07:46:24 UTC	16383	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 77 61 28 74 68 69 73 2c 61 2c 62 3c 3c 32 34 3e 3e 32 34 29 7d 7d 2c 7b 75 6e 73 61 66 65 3a 21 30 7d 29 7d 65 6c 73 65 20 47 3d 28 6c 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 6e 28 74 68 69 73 2c 47 29 3b 61 3d 7a 28 61 29 3b 4f 28 74 68 69 73 2c 7b 62 79 74 65 73 3a 56 28 4d 28 61 29 2c 0a 30 29 2c 62 79 74 65 4c 65 6e 67 74 68 3a 61 7d 29 3b 65 7c 7c 28 74 68 69 73 2e 62 79 74 65 4c 65 6e 67 74 68 3d 61 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 2c 48 3d 28 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 6e 28 74 68 69 73 2c 48 29 3b 6e 28 61 2c 47 29 3b 76 61 72 20 64 3d 70 28 61 29 2e 62 79 74 65 4c 65 6e 67 74 68 3b 62 3d 74 28 62 29 3b 69 66 28 30 3e 62 7c 7c 62 3e 64 29 74 68 72 6f 77 20 51 28 22 57 72 6f Data Ascii: function(a,b){wa(this,a,b<<24>>24)}},{unsafe:!0})}else G=(l=function(a){n(this,G);a=z(a);O(this,{bytes:V(M(a),0),byteLength:a});e\|\|(this.byteLength=a)}).prototype,H=(a=function(a,b,c){n(this,H);n(a,G);var d=p(a).byteLength;b=t(b);if(0>b\|\|b>d)throw Q("Wro
2024-10-30 07:46:24 UTC	16383	IN	Data Raw: 72 72 6f 72 3a 7b 73 3a 22 53 45 43 55 52 49 54 59 5f 45 52 52 22 2c 0a 63 3a 31 38 2c 6d 3a 31 7d 2c 4e 65 74 77 6f 72 6b 45 72 72 6f 72 3a 7b 73 3a 22 4e 45 54 57 4f 52 4b 5f 45 52 52 22 2c 63 3a 31 39 2c 6d 3a 31 7d 2c 41 62 6f 72 74 45 72 72 6f 72 3a 7b 73 3a 22 41 42 4f 52 54 5f 45 52 52 22 2c 63 3a 32 30 2c 6d 3a 31 7d 2c 55 52 4c 4d 69 73 6d 61 74 63 68 45 72 72 6f 72 3a 7b 73 3a 22 55 52 4c 5f 4d 49 53 4d 41 54 43 48 5f 45 52 52 22 2c 63 3a 32 31 2c 6d 3a 31 7d 2c 51 75 6f 74 61 45 78 63 65 65 64 65 64 45 72 72 6f 72 3a 7b 73 3a 22 51 55 4f 54 41 5f 45 58 43 45 45 44 45 44 5f 45 52 52 22 2c 63 3a 32 32 2c 6d 3a 31 7d 2c 54 69 6d 65 6f 75 74 45 72 72 6f 72 3a 7b 73 3a 22 54 49 4d 45 4f 55 54 5f 45 52 52 22 2c 63 3a 32 33 2c 6d 3a 31 7d 2c 49 6e 76 Data Ascii: rror:{s:"SECURITY_ERR",c:18,m:1},NetworkError:{s:"NETWORK_ERR",c:19,m:1},AbortError:{s:"ABORT_ERR",c:20,m:1},URLMismatchError:{s:"URL_MISMATCH_ERR",c:21,m:1},QuotaExceededError:{s:"QUOTA_EXCEEDED_ERR",c:22,m:1},TimeoutError:{s:"TIMEOUT_ERR",c:23,m:1},Inv
2024-10-30 07:46:24 UTC	4	IN	Data Raw: 61 72 61 6d Data Ascii: aram
2024-10-30 07:46:24 UTC	16383	IN	Data Raw: 73 28 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 22 61 5c 78 33 64 62 22 29 29 29 2e 67 65 74 28 22 61 22 29 7c 7c 22 78 6e 2d 2d 65 31 61 79 62 63 22 21 3d 3d 28 6e 65 77 20 55 52 4c 28 22 68 74 74 70 3a 2f 2f 5c 75 30 34 34 32 5c 75 30 34 33 35 5c 75 30 34 34 31 5c 75 30 34 34 32 22 29 29 2e 68 6f 73 74 7c 7c 22 23 25 44 30 25 42 31 22 21 3d 3d 28 6e 65 77 20 55 52 4c 28 22 68 74 74 70 3a 2f 2f 61 23 5c 75 30 34 33 31 22 29 29 2e 68 61 73 68 7c 7c 22 61 31 63 33 22 21 3d 3d 63 7c 7c 22 78 22 21 3d 3d 28 6e 65 77 20 55 52 4c 28 22 68 74 74 70 3a 2f 2f 78 22 2c 76 6f 69 64 20 30 29 29 2e 68 6f 73 74 7d 29 7d 2c 38 35 33 36 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 61 29 7b 76 61 72 20 64 3d 61 28 37 38 35 34 29 3b 63 3d 61 28 36 31 34 29 Data Ascii: s(new URLSearchParams("a\x3db"))).get("a")\|\|"xn--e1aybc"!==(new URL("http://\u0442\u0435\u0441\u0442")).host\|\|"#%D0%B1"!==(new URL("http://a#\u0431")).hash\|\|"a1c3"!==c\|\|"x"!==(new URL("http://x",void 0)).host})},8536:function(b,c,a){var d=a(7854);c=a(614)
2024-10-30 07:46:24 UTC	16383	IN	Data Raw: 52 61 6e 67 65 45 72 72 6f 72 3b 62 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 61 29 72 65 74 75 72 6e 20 30 3b 61 3d 64 28 61 29 3b 76 61 72 20 62 3d 65 28 61 29 3b 69 66 28 61 21 3d 3d 62 29 74 68 72 6f 77 20 67 28 22 57 72 6f 6e 67 20 6c 65 6e 67 74 68 20 6f 72 20 69 6e 64 65 78 22 29 3b 72 65 74 75 72 6e 20 62 7d 7d 2c 35 36 35 36 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 61 29 7b 76 61 72 20 64 3d 61 28 38 33 36 31 29 2c 65 3d 61 28 34 34 38 38 29 3b 62 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 64 28 65 28 61 29 29 7d 7d 2c 39 33 30 33 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 4d 61 74 68 2e 63 65 69 6c 2c 61 3d 4d 61 74 68 2e 66 6c 6f 6f Data Ascii: RangeError;b.exports=function(a){if(void 0===a)return 0;a=d(a);var b=e(a);if(a!==b)throw g("Wrong length or index");return b}},5656:function(b,c,a){var d=a(8361),e=a(4488);b.exports=function(a){return d(e(a))}},9303:function(b){var c=Math.ceil,a=Math.floo
2024-10-30 07:46:24 UTC	16383	IN	Data Raw: 78 69 6d 75 6d 20 61 6c 6c 6f 77 65 64 20 6c 65 6e 67 74 68 20 65 78 63 65 65 64 65 64 22 29 3b 76 3d 66 28 75 2c 6d 29 3b 66 6f 72 28 72 3d 30 3b 72 3c 6d 3b 72 2b 2b 29 28 74 3d 7a 2b 72 29 69 6e 20 75 26 26 71 28 76 2c 72 2c 75 5b 74 5d 29 3b 69 66 28 76 2e 6c 65 6e 67 74 68 3d 6d 2c 63 3c 6d 29 7b 66 6f 72 28 72 3d 7a 3b 72 3c 70 2d 6d 3b 72 2b 2b 29 7b 76 61 72 20 53 3d 72 2b 63 3b 28 74 3d 72 2b 6d 29 69 6e 20 75 3f 75 5b 53 5d 3d 75 5b 74 5d 3a 64 65 6c 65 74 65 20 75 5b 53 5d 7d 66 6f 72 28 72 3d 70 3b 72 3e 70 2d 6d 2b 63 3b 72 2d 2d 29 64 65 6c 65 74 65 20 75 5b 72 2d 31 5d 7d 65 6c 73 65 20 69 66 28 63 3e 6d 29 66 6f 72 28 72 3d 70 2d 6d 3b 72 3e 7a 3b 72 2d 2d 29 53 3d 72 2b 63 2d 31 2c 28 74 3d 72 2b 6d 2d 31 29 69 6e 0a 75 3f 75 5b 53 5d 3d Data Ascii: ximum allowed length exceeded");v=f(u,m);for(r=0;r<m;r++)(t=z+r)in u&&q(v,r,u[t]);if(v.length=m,c<m){for(r=z;r<p-m;r++){var S=r+c;(t=r+m)in u?u[S]=u[t]:delete u[S]}for(r=p;r>p-m+c;r--)delete u[r-1]}else if(c>m)for(r=p-m;r>z;r--)S=r+c-1,(t=r+m-1)inu?u[S]=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49799	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:24 UTC	4364	OUT	GET /a/content/sling/servlets/ace/getposcookies?siteCode=all&languageCodeFromPage=en&pointOfSaleCodeFromPage= HTTP/1.1 Host: all.accor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://all.accor.com/a/en/new-app-offer.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; x-aem-variant=undefined; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=uXhrmD2Na/K1uglc4DSccWmUi3lwT6U0aN5NKqvcu8d5WGWybG4+Fjgl4ne6nVjifX1jzgyPIuRTBhS6nanmMOLamS/KiojPrxeLcFng8UzPO+81sa87bs4RFhGAg5SdnTRio+RJdn41ZezkVQzm+QQNKVTMJBE8fIzHUqlLtmYsp4GqzAo9Tqkn29+6s06cnyhW9Bg2AjaE3z+uY1Kha+K1N+xGE1wxY+ov1hMjJJFJQKo0Zzr8yVUmc0uGx6VyOI/GCYB98MMi2baM/noo1d0GCT/eTJnamWBVosFVl6rGjGRpxA8WWwcog7Ny/HlQVp6w8cTkKFTg/8KjIPnCBapACqcVA8DvW2Oym2gj1AtBv4YYfUMq3TEu4mXRkOJJVmAh7NCUHwLhEc4aXJBIqbW6JkrW0slp4+M4RmDR1e+A3GrFYXelb56QL3DRn [TRUNCATED]
2024-10-30 07:46:24 UTC	1499	IN	HTTP/1.1 200 OK Accept-Ranges: bytes cache-control: no-cache, no-store, private Date: Wed, 30 Oct 2024 07:46:24 GMT expires: Thu, 01 Jan 1970 00:00:00 GMT server: MF 8700 S - Dyna-VT - Stage V All-in-One Set-Cookie: displayZone=united-states-of-america; Path=/; Domain=.accor.com; Expires=Thu, 30-Oct-2025 07:46:24 GMT; Max-Age=31536000; Secure Set-Cookie: contribZone=usa; Path=/; Domain=.accor.com; Expires=Thu, 30-Oct-2025 07:46:24 GMT; Max-Age=31536000; Secure Set-Cookie: userLang=en; Path=/; Domain=.accor.com; Expires=Thu, 30-Oct-2025 07:46:24 GMT; Max-Age=31536000; Secure Set-Cookie: userCurrency=USD; Path=/; Domain=.accor.com; Expires=Thu, 30-Oct-2025 07:46:24 GMT; Max-Age=31536000; Secure Set-Cookie: userLocalization=us; Path=/; Domain=.accor.com; Expires=Thu, 30-Oct-2025 07:46:24 GMT; Max-Age=31536000; Secure Set-Cookie: x-aem-variant=usa; Path=/; Domain=.accor.com; Expires=Thu, 30-Oct-2025 07:46:24 GMT; Max-Age=31536000; Secure Set-Cookie: incap_ses_1237_3039981=RMkdawpcO0pafv9zF7UqEVDkIWcAAAAAOdDq+0nC/oeq6w4fyTL3Fg==; path=/ Strict-Transport-Security: max-age=31557600 X-Cache: MISS X-CDN: Imperva X-CDN-Forward: EdgeCast X-Content-Type-Options: nosniff x-frame-options: SAMEORIGIN x-frame-options: SAMEORIGIN X-Iinfo: 16-732447-732448 NNNY CT(6 7 0) RT(1730274383987 3) q(0 0 0 0) r(0 2) U24 X-Served-By: cache-ams21043-AMS x-sky-isauth: 0 X-Timer: S1730274385.742978,VS0,VS0,VE96 x-vhost: prod-allcom-publish Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49795	35.240.103.94	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:24 UTC	829	OUT	GET /authentication/v2.0/authorization?appId=all.accor&prompt=none&redirect_uri=https%3A%2F%2Fall.accor.com%2Fenroll-loyalty%2Fcheck-authent.html HTTP/1.1 Host: api.accor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://all.accor.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: org=evy
2024-10-30 07:46:24 UTC	1938	IN	HTTP/1.1 302 Found Date: Wed, 30 Oct 2024 07:46:24 GMT Content-Type: application/json Content-Length: 0 Connection: close x-amzn-RequestId: bb25759f-1b7a-4e92-a400-a8f999dbfe0f Set-Cookie: OAU_all.accor=eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJhcHBfaWQiOiJhbGwuYWNjb3IiLCJzdGF0ZSI6ImYzNTYwZWQyYThjNDZhZjQxOTllZjgiLCJub25jZSI6IjIxZDBhMGU1ZWQ4YzU2NTZkZjI4ZjYiLCJyZWRpcmVjdF9zaXRlX3VyaSI6Imh0dHBzOi8vYWxsLmFjY29yLmNvbSIsInByb21wdCI6Im5vbmUiLCJleHAiOjE3MzAyNzYxODQsImlhdCI6MTczMDI3NDM4NH0.T264QRl7YWH19MgynN8-Xaq1G1flI3hkXf6P-98bxX9zquvQYl9l1yVvirNK7SO9IARz9C1cgTuaozOE3ITULDlEyLbPAquuYSLfESRfVzyb0HFEhbkdMISJ5nmsUq2QiYFJRgGSRoU7UjHDLoo8646JuA_ZnO1550QeNYS8xuV9EoK4B4oFEgezMDX9rf6Or31D63HUbbL51dSeHY26E7TwHYN6SeodaZL7NeaUEJN-G93F7ktNq824Z5C11HTL2mkWUM6Aaz0nua4XKjGekRh9_QQpoOau3wMyp586RfBxn38C0agFPUi7WA_4FusMHRg-90n9XBuE3e_0KE46Uw; Secure; HttpOnly; Path=/; SameSite=None x-amz-apigw-id: AdCcrGH_DoEEP8w= Location: https://login.accor.com/as/authorization.oauth2?client_id=all.accor&response_type=code&accorregister=false&request=eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJjbGllbnRfaWQiOiJhbGwuYWNjb3IiLCJyZXNwb25zZV90eXBlIjoiY29kZSIsInJlZGlyZWN0X3VyaSI6Imh0dHBzOi8vYWxsLmFjY29yLmNvbS9lbnJvbGwtbG95YWx0eS9jaGVjay1hdXRoZW50Lmh0bWw_YXBwSWQ9YWxsLmFjY29yIiwic2NvcGUiOiJvcGVuaWQgQVBJV0VCLlVTRVIuQUxMIEFQU1IuQUxMIiwicHJvbXB0Ijoibm9uZSIsInN0YXRlIjoiZjM1NjBlZDJhOGM0NmFmNDE5OWVmOCIsIm5vbmNlIjoiMjFkMGEwZTVlZDhjNTY1NmRmMjhmNiIsImV4cCI6MTczMDI3NjE4NCwiaWF0IjoxNzMwMjc0Mzg0fQ.JqW-FJonJZaBZ70gGCenAbMXo9rjX6xBHmOikyeJWff9TYPsHiEm2nyGsFwTZGiPCVFqqqcO1M_Yvkt7VUyLecb-TvSbJELKeUvOU6uMhEh14T8jl7C58LPgZ2eSJpiAtTU4LENGWdfsuwwegu6ccUWllDNThuUWFc56LtkI_gOvNyoBdKCtyK7rWHw_gTmA-4nfTNNbGrpg7UNBJlU1yve8RsdoULVgkswCql1EolEC9rnT7Y8UEPzo6BiyHMv8YYTH0JW7BB6qzEdBZ93zpAkSPViX7UtSp0sEvmBBETlsoI_-Ba1f3R6UrMsVDMzrwmCh4oVFxqadPxxUlmUnuA&prompt=none X-Amzn-Trace-Id: Root=1-6721e450-58af450819be83196b3320ef;Parent=35572b625eaad0aa;Sampled=0;Lineage=1:5a15d23f:0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49797	35.240.103.94	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:24 UTC	537	OUT	OPTIONS /referential/v1/pos/currencies?groupByContinent=true HTTP/1.1 Host: api.accor.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: apikey Origin: https://all.accor.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://all.accor.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 07:46:24 UTC	946	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 07:46:24 GMT Content-Type: application/json Content-Length: 13238 Connection: close Server: CloudFront X-Cache: Hit from cloudfront Via: 1.1 0f8477062090de8d23b9985455734a32.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BRU50-P1 X-Amz-Cf-Id: bC_f3lMhT8qDSGklkWyHx5AsTxzzdz1HlsB4SX6x6c2vgrp3stQobw== Age: 3571 Access-Control-Allow-Origin: https://all.accor.com Access-Control-Allow-Headers: accept,apikey,clientid,origin,Content-Type,consumerType,hmac,applicationId,Target-Env,raw,apsmKey,apsrKey,x-version,Authorization,cache-control,jwtoken,appId,traceid,x-traceid,x-origin,uidTokenLight,x-xsrf-token,x-target-env,identification-token,lang,country,app-id,x-trace-id,caller,x-origin,x-caller,x-traceid,uuid,X-Authenticated-Client-ID,X-Authenticated-User-ID,partnercode Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, POST, PUT, DELETE Access-Control-Allow-Credentials: true
2024-10-30 07:46:24 UTC	13238	IN	Data Raw: 5b 7b 22 63 6f 6e 74 69 6e 65 6e 74 43 6f 64 65 22 3a 22 61 66 72 69 63 61 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 4c 61 62 65 6c 22 3a 22 41 66 72 69 63 61 20 2d 20 4d 69 64 64 6c 65 20 45 61 73 74 22 2c 22 63 75 72 72 65 6e 63 79 4c 69 73 74 22 3a 5b 7b 22 63 75 72 72 65 6e 63 79 43 6f 64 65 22 3a 22 44 5a 44 22 2c 22 63 75 72 72 65 6e 63 79 4c 61 62 65 6c 22 3a 22 41 6c 67 65 72 69 61 6e 20 44 69 6e 61 72 22 2c 22 63 75 72 72 65 6e 63 79 53 79 6d 62 6f 6c 22 3a 22 d8 af 2e d8 ac 22 2c 22 61 63 63 6f 72 43 6f 75 6e 74 72 79 43 6f 64 65 22 3a 5b 22 61 6c 67 65 72 69 61 22 5d 2c 22 69 73 6f 43 6f 75 6e 74 72 79 43 6f 64 65 22 3a 5b 22 64 7a 22 5d 7d 2c 7b 22 63 75 72 72 65 6e 63 79 43 6f 64 65 22 3a 22 41 4f 41 22 2c 22 63 75 72 72 65 6e 63 79 4c 61 62 65 6c Data Ascii: [{"continentCode":"africa","continentLabel":"Africa - Middle East","currencyList":[{"currencyCode":"DZD","currencyLabel":"Algerian Dinar","currencySymbol":".","accorCountryCode":["algeria"],"isoCountryCode":["dz"]},{"currencyCode":"AOA","currencyLabel

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49796	35.240.103.94	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:24 UTC	527	OUT	OPTIONS /referential/v1/pos/countries?siteCode=all HTTP/1.1 Host: api.accor.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: apikey Origin: https://all.accor.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://all.accor.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 07:46:24 UTC	946	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 07:46:24 GMT Content-Type: application/json Content-Length: 33138 Connection: close Server: CloudFront X-Cache: Hit from cloudfront Via: 1.1 2ae90e7f79d3d333546a65283ed748ca.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BRU50-P1 X-Amz-Cf-Id: o-W4tEftWOXmUa09KeBR1ajMfmfgVrGyUlr7b15K1rSxa6U9Vm2fgQ== Age: 2498 Access-Control-Allow-Origin: https://all.accor.com Access-Control-Allow-Headers: accept,apikey,clientid,origin,Content-Type,consumerType,hmac,applicationId,Target-Env,raw,apsmKey,apsrKey,x-version,Authorization,cache-control,jwtoken,appId,traceid,x-traceid,x-origin,uidTokenLight,x-xsrf-token,x-target-env,identification-token,lang,country,app-id,x-trace-id,caller,x-origin,x-caller,x-traceid,uuid,X-Authenticated-Client-ID,X-Authenticated-User-ID,partnercode Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, POST, PUT, DELETE Access-Control-Allow-Credentials: true
2024-10-30 07:46:24 UTC	15438	IN	Data Raw: 5b 7b 22 63 6f 6e 74 69 6e 65 6e 74 43 6f 64 65 22 3a 22 61 66 72 69 63 61 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 4c 61 62 65 6c 22 3a 22 41 66 72 69 63 61 20 2d 20 4d 69 64 64 6c 65 20 45 61 73 74 22 2c 22 63 6f 75 6e 74 72 79 4c 69 73 74 22 3a 5b 7b 22 61 63 63 6f 72 43 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 61 6c 67 65 72 69 61 22 2c 22 61 63 63 6f 72 43 6f 75 6e 74 72 79 4c 61 62 65 6c 22 3a 22 41 6c 67 65 72 69 61 22 2c 22 61 63 63 6f 72 43 6f 75 6e 74 72 79 4c 61 6e 67 75 61 67 65 4c 61 62 65 6c 22 3a 22 41 6c 67 65 72 69 61 20 2d 20 45 6e 67 6c 69 73 68 22 2c 22 68 6f 6d 65 70 61 67 65 55 72 6c 22 3a 22 2f 61 2f 65 6e 2e 68 74 6d 6c 22 2c 22 69 73 6f 43 6f 75 6e 74 72 79 43 6f 64 65 22 3a 5b 22 64 7a 22 5d 2c 22 6c 61 6e 67 75 61 67 65 43 6f 64 65 22 Data Ascii: [{"continentCode":"africa","continentLabel":"Africa - Middle East","countryList":[{"accorCountryCode":"algeria","accorCountryLabel":"Algeria","accorCountryLanguageLabel":"Algeria - English","homepageUrl":"/a/en.html","isoCountryCode":["dz"],"languageCode"
2024-10-30 07:46:24 UTC	16384	IN	Data Raw: 6c 61 6e 67 75 61 67 65 4c 61 62 65 6c 22 3a 22 45 73 70 61 c3 b1 6f 6c 22 2c 22 70 6f 69 6e 74 4f 66 53 61 6c 65 22 3a 22 73 75 64 61 6d 65 72 69 63 61 22 2c 22 6f 72 64 65 72 49 64 22 3a 31 35 38 7d 2c 7b 22 61 63 63 6f 72 43 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 70 65 72 75 22 2c 22 61 63 63 6f 72 43 6f 75 6e 74 72 79 4c 61 62 65 6c 22 3a 22 50 65 72 c3 ba 22 2c 22 61 63 63 6f 72 43 6f 75 6e 74 72 79 4c 61 6e 67 75 61 67 65 4c 61 62 65 6c 22 3a 22 50 65 72 c3 ba 22 2c 22 68 6f 6d 65 70 61 67 65 55 72 6c 22 3a 22 2f 61 2f 65 73 2e 68 74 6d 6c 22 2c 22 69 73 6f 43 6f 75 6e 74 72 79 43 6f 64 65 22 3a 5b 22 70 65 22 5d 2c 22 6c 61 6e 67 75 61 67 65 43 6f 64 65 22 3a 22 65 73 22 2c 22 6c 61 6e 67 75 61 67 65 4c 61 62 65 6c 22 3a 22 45 73 70 61 c3 b1 6f 6c Data Ascii: languageLabel":"Espaol","pointOfSale":"sudamerica","orderId":158},{"accorCountryCode":"peru","accorCountryLabel":"Per","accorCountryLanguageLabel":"Per","homepageUrl":"/a/es.html","isoCountryCode":["pe"],"languageCode":"es","languageLabel":"Espaol
2024-10-30 07:46:24 UTC	1316	IN	Data Raw: 72 6c 22 3a 22 2f 61 2f 74 72 2e 68 74 6d 6c 22 2c 22 69 73 6f 43 6f 75 6e 74 72 79 43 6f 64 65 22 3a 5b 22 74 72 22 5d 2c 22 6c 61 6e 67 75 61 67 65 43 6f 64 65 22 3a 22 74 72 22 2c 22 6c 61 6e 67 75 61 67 65 4c 61 62 65 6c 22 3a 22 54 c3 bc 72 6b 22 2c 22 70 6f 69 6e 74 4f 66 53 61 6c 65 22 3a 22 74 75 72 6b 65 79 22 2c 22 6f 72 64 65 72 49 64 22 3a 31 32 39 7d 2c 7b 22 61 63 63 6f 72 43 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 75 6e 69 74 65 64 2d 6b 69 6e 67 64 6f 6d 22 2c 22 61 63 63 6f 72 43 6f 75 6e 74 72 79 4c 61 62 65 6c 22 3a 22 55 6e 69 74 65 64 20 4b 69 6e 67 64 6f 6d 22 2c 22 61 63 63 6f 72 43 6f 75 6e 74 72 79 4c 61 6e 67 75 61 67 65 4c 61 62 65 6c 22 3a 22 55 6e 69 74 65 64 20 4b 69 6e 67 64 6f 6d 22 2c 22 68 6f 6d 65 70 61 67 65 55 72 6c 22 Data Ascii: rl":"/a/tr.html","isoCountryCode":["tr"],"languageCode":"tr","languageLabel":"Trk","pointOfSale":"turkey","orderId":129},{"accorCountryCode":"united-kingdom","accorCountryLabel":"United Kingdom","accorCountryLanguageLabel":"United Kingdom","homepageUrl"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49798	35.240.103.94	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:24 UTC	531	OUT	OPTIONS /referential/v1/best-visit/cookie-attribution HTTP/1.1 Host: api.accor.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: apikey Origin: https://all.accor.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://all.accor.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 07:46:24 UTC	1170	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 07:46:24 GMT Content-Length: 0 Connection: close Host: api.accor.com X-Forwarded-For: 173.254.250.78 X-Forwarded-Port: 443 X-Forwarded-Proto: https Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: apikey Origin: https://all.accor.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://all.accor.com/ Accept-Language: en-US,en;q=0.9 Access-Control-Allow-Origin: https://all.accor.com Access-Control-Allow-Headers: accept,apikey,clientid,origin,Content-Type,consumerType,hmac,applicationId,Target-Env,raw,apsmKey,apsrKey,x-version,Authorization,cache-control,jwtoken,appId,traceid,x-traceid,x-origin,uidTokenLight,x-xsrf-token,x-target-env,identification-token,lang,country,app-id,x-trace-id,caller,x-origin,x-caller,x-traceid,uuid,X-Authenticated-Client-ID,X-Authenticated-User-ID,partnercode Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, POST, PUT, DELETE Access-Control-Allow-Credentials: true

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49800	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:24 UTC	1055	OUT	GET /a/etc.clientlibs/core/wcm/components/commons/datalayer/acdl/core.wcm.components.commons.datalayer.acdl.lc-bf921af342fd2c40139671dbf0920a1f-lc.min.js HTTP/1.1 Host: all.accor.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; x-aem-variant=undefined; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==
2024-10-30 07:46:24 UTC	699	IN	HTTP/1.1 200 OK Age: 505820 cache-control: max-age=2592000, public, immutable Content-Type: application/javascript;charset=utf-8 Date: Wed, 30 Oct 2024 07:46:24 GMT Etag: W/"7fc3-2386f26fb1bdc0-gzip" Last-Modified: Thu, 24 Oct 2024 11:16:03 GMT Server: ECAcc (lhd/35C2) Strict-Transport-Security: max-age=31557600 Vary: Accept-Encoding X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Content-Type-Options: nosniff x-frame-options: SAMEORIGIN X-Iinfo: 17-204073752-204073686 PNNy RT(1730113252096 2) q(0 1 1 -1) r(1 1) U24 X-Served-By: cache-fra-etou8220079-FRA X-Timer: S1730113253.076805,VS0,VS0,VE2 x-vhost: prod-allcom-publish Content-Length: 32707 Connection: close
2024-10-30 07:46:24 UTC	16383	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 5f 73 6c 69 63 65 64 54 6f 41 72 72 61 79 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 5f 61 72 72 61 79 57 69 74 68 48 6f 6c 65 73 28 74 29 7c 7c 5f 69 74 65 72 61 62 6c 65 54 6f 41 72 72 61 79 4c 69 6d 69 74 28 74 2c 65 29 7c 7c 5f 75 6e 73 75 70 70 6f 72 74 65 64 49 74 65 72 61 62 6c 65 54 6f 41 72 72 61 79 28 74 2c 65 29 7c 7c 5f 6e 6f 6e 49 74 65 72 61 62 6c 65 52 65 73 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 6e 6f 6e 49 74 65 72 61 62 6c 65 52 65 73 74 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 2e 5c 6e 49 6e 20 6f 72 64 65 72 20 74 6f 20 62 65 Data Ascii: function _slicedToArray(t,e){return _arrayWithHoles(t)\|\|_iterableToArrayLimit(t,e)\|\|_unsupportedIterableToArray(t,e)\|\|_nonIterableRest()}function _nonIterableRest(){throw new TypeError("Invalid attempt to destructure non-iterable instance.\nIn order to be
2024-10-30 07:46:24 UTC	1	IN	Data Raw: 74 Data Ascii: t
2024-10-30 07:46:24 UTC	16323	IN	Data Raw: 28 74 29 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 41 28 74 2c 65 29 7d 7d 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 44 74 28 29 7b 72 65 74 75 72 6e 5b 5d 7d 66 75 6e 63 74 69 6f 6e 20 46 74 28 29 7b 72 65 74 75 72 6e 21 31 7d 76 61 72 20 4d 74 2c 7a 74 3d 31 2f 30 2c 43 74 3d 4e 61 4e 2c 55 74 3d 2f 5c 2e 7c 5c 5b 28 3f 3a 5b 5e 5b 5c 5d 5d 2a 7c 28 5b 22 27 5d 29 28 3f 3a 28 3f 21 5c 31 29 5b 5e 5c 5c 5d 7c 5c 5c 2e 29 2a 3f 5c 31 29 5c 5d 2f 2c 50 74 3d 2f 5e 5c 77 2a 24 2f 2c 52 74 3d 2f 5b 5e 2e 5b 5c 5d 5d 2b 7c 5c 5b 28 3f 3a 28 2d 3f 5c 64 2b 28 3f 3a 5c 2e 5c 64 2b 29 3f 29 7c 28 5b 22 27 5d 29 28 28 3f 3a 28 3f 21 5c 32 29 5b 5e 5c 5c 5d 7c 5c 5c 2e 29 2a 3f 29 5c 32 29 Data Ascii: (t)):function(e){return function(t){return A(t,e)}}(t)}function Dt(){return[]}function Ft(){return!1}var Mt,zt=1/0,Ct=NaN,Ut=/\.\|\[(?:[^[\]]\|(["'])(?:(?!\1)[^\\]\|\\.)?\1)\]/,Pt=/^\w$/,Rt=/[^.[\]]+\|\[(?:(-?\d+(?:\.\d+)?)\|(["'])((?:(?!\2)[^\\]\|\\.)?)\2)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49802	104.18.86.42	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:24 UTC	427	OUT	GET /consent/87c4fef0-8732-44e4-bee3-f4faa4ce5a9d/87c4fef0-8732-44e4-bee3-f4faa4ce5a9d.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 07:46:24 UTC	982	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 07:46:24 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Ray: 8da9ca986ec36b7c-DFW CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 70486 Cache-Control: public, max-age=86400 Expires: Thu, 31 Oct 2024 07:46:24 GMT Last-Modified: Tue, 22 Oct 2024 08:34:09 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: bZU/jSh7PKJNnkZnSK1nnw== Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: ffac2295-601e-00bd-184c-268506000000 x-ms-version: 2009-09-19 Cross-Origin-Resource-Policy: cross-origin Server: cloudflare
2024-10-30 07:46:24 UTC	387	IN	Data Raw: 31 32 31 36 0d 0a 7b 22 43 6f 6f 6b 69 65 53 50 41 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 53 61 6d 65 53 69 74 65 4e 6f 6e 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 56 32 43 53 50 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 4d 75 6c 74 69 56 61 72 69 61 6e 74 54 65 73 74 69 6e 67 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 55 73 65 56 32 22 3a 74 72 75 65 2c 22 4d 6f 62 69 6c 65 53 44 4b 22 3a 66 61 6c 73 65 2c 22 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 53 63 72 69 70 74 54 79 70 65 22 3a 22 50 52 4f 44 55 43 54 49 4f 4e 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 30 39 2e 32 2e 30 22 2c 22 4f 70 74 61 6e 6f 6e 44 61 74 61 4a 53 4f 4e 22 3a 22 38 37 63 34 66 Data Ascii: 1216{"CookieSPAEnabled":true,"CookieSameSiteNoneEnabled":false,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202409.2.0","OptanonDataJSON":"87c4f
2024-10-30 07:46:24 UTC	1369	IN	Data Raw: 63 6b 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6f 6b 69 65 73 2d 64 61 74 61 2e 6f 6e 65 74 72 75 73 74 2e 69 6f 2f 62 61 6e 6e 65 72 73 64 6b 2f 76 31 2f 64 6f 6d 61 69 6e 67 72 6f 75 70 63 68 65 63 6b 22 2c 22 52 75 6c 65 53 65 74 22 3a 5b 7b 22 49 64 22 3a 22 30 31 39 31 62 63 35 64 2d 33 30 34 31 2d 37 65 65 31 2d 61 61 37 31 2d 64 30 35 37 31 61 37 38 62 62 37 37 22 2c 22 4e 61 6d 65 22 3a 22 47 44 50 52 20 54 65 6d 70 6c 61 74 65 20 2d 20 41 4c 4c 2b 42 72 61 6e 64 73 2b 42 32 42 2b 52 65 73 74 6f 73 2b 41 70 74 56 69 6c 6c 61 73 22 2c 22 43 6f 75 6e 74 72 69 65 73 22 3a 5b 22 70 72 22 2c 22 70 73 22 2c 22 70 77 22 2c 22 70 79 22 2c 22 71 61 22 2c 22 61 64 22 2c 22 61 66 22 2c 22 61 67 22 2c 22 61 69 22 2c 22 61 6c 22 2c 22 61 6d 22 2c 22 61 Data Ascii: ckUrl":"https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck","RuleSet":[{"Id":"0191bc5d-3041-7ee1-aa71-d0571a78bb77","Name":"GDPR Template - ALL+Brands+B2B+Restos+AptVillas","Countries":["pr","ps","pw","py","qa","ad","af","ag","ai","al","am","a
2024-10-30 07:46:24 UTC	1369	IN	Data Raw: 61 72 22 2c 22 64 65 66 61 75 6c 74 22 3a 22 65 6e 22 2c 22 74 68 22 3a 22 74 68 22 2c 22 6a 61 22 3a 22 6a 61 22 2c 22 69 64 22 3a 22 69 64 22 2c 22 70 6c 22 3a 22 70 6c 22 2c 22 74 72 22 3a 22 74 72 22 2c 22 6e 6c 22 3a 22 6e 6c 22 7d 2c 22 42 61 6e 6e 65 72 50 75 73 68 65 73 44 6f 77 6e 22 3a 66 61 6c 73 65 2c 22 44 65 66 61 75 6c 74 22 3a 74 72 75 65 2c 22 47 6c 6f 62 61 6c 22 3a 74 72 75 65 2c 22 54 79 70 65 22 3a 22 47 44 50 52 22 2c 22 55 73 65 47 6f 6f 67 6c 65 56 65 6e 64 6f 72 73 22 3a 66 61 6c 73 65 2c 22 56 61 72 69 61 6e 74 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 54 65 73 74 45 6e 64 54 69 6d 65 22 3a 6e 75 6c 6c 2c 22 56 61 72 69 61 6e 74 73 22 3a 5b 5d 2c 22 54 65 6d 70 6c 61 74 65 4e 61 6d 65 22 3a 22 47 44 50 52 20 54 65 6d 70 6c Data Ascii: ar","default":"en","th":"th","ja":"ja","id":"id","pl":"pl","tr":"tr","nl":"nl"},"BannerPushesDown":false,"Default":true,"Global":true,"Type":"GDPR","UseGoogleVendors":false,"VariantEnabled":false,"TestEndTime":null,"Variants":[],"TemplateName":"GDPR Templ
2024-10-30 07:46:24 UTC	1369	IN	Data Raw: 73 65 6e 74 53 63 72 65 65 6e 22 3a 22 31 22 2c 22 63 6f 6e 73 65 6e 74 4c 61 6e 67 75 61 67 65 22 3a 6e 75 6c 6c 2c 22 76 65 6e 64 6f 72 4c 69 73 74 56 65 72 73 69 6f 6e 22 3a 30 2c 22 6d 61 78 56 65 6e 64 6f 72 49 64 22 3a 30 2c 22 65 6e 63 6f 64 69 6e 67 54 79 70 65 22 3a 22 30 22 2c 22 67 6c 6f 62 61 6c 56 65 6e 64 6f 72 4c 69 73 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6f 6b 69 65 6c 61 77 2e 6f 72 67 2f 76 65 6e 64 6f 72 6c 69 73 74 2f 69 61 62 32 44 61 74 61 2e 6a 73 6f 6e 22 7d 2c 22 49 61 62 32 56 32 44 61 74 61 22 3a 7b 22 63 6f 6f 6b 69 65 56 65 72 73 69 6f 6e 22 3a 22 31 22 2c 22 63 72 65 61 74 65 64 54 69 6d 65 22 3a 22 32 30 32 34 2d 31 30 2d 32 32 54 30 38 3a 33 34 3a 30 38 2e 39 33 31 35 35 39 37 35 37 22 2c 22 75 70 Data Ascii: sentScreen":"1","consentLanguage":null,"vendorListVersion":0,"maxVendorId":0,"encodingType":"0","globalVendorListUrl":"https://cdn.cookielaw.org/vendorlist/iab2Data.json"},"Iab2V2Data":{"cookieVersion":"1","createdTime":"2024-10-22T08:34:08.931559757","up
2024-10-30 07:46:24 UTC	144	IN	Data Raw: 61 6c 73 65 2c 22 57 65 62 46 6f 72 6d 53 72 63 55 72 6c 22 3a 22 22 2c 22 57 65 62 46 6f 72 6d 57 6f 72 6b 65 72 55 72 6c 22 3a 22 22 2c 22 47 70 70 44 61 74 61 22 3a 7b 22 63 6d 70 49 64 22 3a 22 32 38 22 7d 2c 22 41 75 74 68 65 6e 74 69 63 61 74 65 64 43 6f 6e 73 65 6e 74 22 3a 66 61 6c 73 65 2c 22 43 44 4e 4c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6f 6b 69 65 6c 61 77 2e 6f 72 67 22 7d 0d 0a Data Ascii: alse,"WebFormSrcUrl":"","WebFormWorkerUrl":"","GppData":{"cmpId":"28"},"AuthenticatedConsent":false,"CDNLocation":"https://cdn.cookielaw.org"}
2024-10-30 07:46:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49801	104.18.32.137	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:24 UTC	593	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://all.accor.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://all.accor.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 07:46:24 UTC	370	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 07:46:24 GMT Content-Type: application/json Content-Length: 66 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: GET, OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8da9ca986af7a927-DFW
2024-10-30 07:46:24 UTC	66	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 54 58 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 54 65 78 61 73 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d Data Ascii: {"country":"US","state":"TX","stateName":"Texas","continent":"NA"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49803	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:25 UTC	1050	OUT	GET /assets/fonts/roboto/regular/roboto-regular.woff2 HTTP/1.1 Host: all.accor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://all.accor.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://all.accor.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D
2024-10-30 07:46:25 UTC	838	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: authorization, content-type, x-requested-with Access-Control-Allow-Methods: PUT, GET, POST, DELETE, OPTIONS Access-Control-Allow-Origin: * Age: 161135 Cache-control: public, max-age=3600, stale-while-revalidate=21600 Content-Type: font/woff2 Date: Wed, 30 Oct 2024 07:46:25 GMT Last-Modified: Wed, 16 Oct 2024 09:00:04 GMT P3P: CP="NO P3P POLICY" Referrer-Policy: origin Server: ECAcc (lhd/35CC) Strict-Transport-Security: max-age=15552000 Timing-Allow-Origin: * X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Clacks-Overhead: GNU Terry Pratchett X-Iinfo: 17-193066133-192648724 pNNy RT(1730113249447 3) q(0 0 0 -1) r(0 0) U24 X-XSS-Protection: 1; mode=block Content-Length: 65916 Connection: close
2024-10-30 07:46:25 UTC	16383	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 01 7c 00 12 00 00 00 02 c2 ac 00 01 01 14 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 7e 1b 81 bc 4c 1c ac 4c 06 60 00 89 2e 08 54 09 83 3c 11 0c 0a 87 dc 24 86 fb 73 0b 94 1e 00 01 36 02 24 03 a8 38 04 20 05 88 71 07 e4 66 0c 82 49 5b 20 87 92 0e d5 c5 76 96 d7 59 3c 75 45 4f 25 9b 47 db 06 ba ae 20 f9 3d ff 09 99 ca 0a 9f f9 54 3b 47 1b ae 05 89 fa 3e fe 05 b6 4d e3 0f 18 e4 66 a5 38 4d 39 64 cf fe ff ff ff ff ff ff ff 6d c9 42 d6 6c 76 13 f6 09 21 3c 8a 15 c5 87 aa bd 13 7b ed b5 10 15 6a a6 f0 a4 70 47 82 41 6a 83 92 ec de a4 da eb e2 2a 28 ad a7 ae af e1 70 0c ee be 49 22 db 34 ee 04 6f 74 4b f6 8c 60 72 46 85 97 68 39 e0 80 e3 dc 93 d3 99 c9 55 ae 2f ed a1 69 90 aa 7d b5 Data Ascii: wOF2\|?FFTM~LL`.T<$s6$8 qfI[ vY<uEO%G =T;G>Mf8M9dmBlv!<{jpGAj*(pI"4otK`rFh9U/i}
2024-10-30 07:46:25 UTC	1	IN	Data Raw: dd Data Ascii:
2024-10-30 07:46:25 UTC	16383	IN	Data Raw: 70 14 0b 00 58 4d 38 61 71 0c 4b 1a 23 0b b0 f9 b9 86 90 08 56 98 e4 61 2e e9 59 0d a5 4e 5b bb 0a 3d bf b6 7f e4 8d 02 2c ec 9f 6d 88 02 ea de fe 98 47 64 20 7e c8 55 7f 37 ef b5 f2 a9 a0 28 69 c6 65 de 29 6d 27 d4 74 cb 43 f8 8b 9f 1d 89 7f b1 07 0e 8f e8 39 76 f8 23 7e 95 ab 0d 8b 68 aa 47 8a f2 24 2d c9 a4 e6 11 eb 7e c7 46 db 92 af 39 4a 5d 0a 59 12 f0 f2 55 92 84 f4 ee 72 31 9b 0b b3 0b 4c c1 cf a5 6d 7a 42 53 04 31 4e 0f d6 92 43 37 95 34 bd c8 51 8a 5a d9 a8 d3 d2 69 0c 39 a8 d0 ea 91 0f 96 e0 6d d6 e1 ab 0e 1a 2c 75 47 b7 63 ad 01 21 6f 33 50 00 01 10 a1 f9 72 22 6a bb 8d 87 f1 2f 92 35 74 f8 56 f5 ee 06 33 5c 6b 22 42 57 03 b5 ee ce 28 a7 3b fa db 95 26 c7 eb 56 d7 c2 b9 47 7e 19 a5 ba 50 c3 2c a0 95 ee 58 c0 71 36 bc 6a ab 1e 86 9a 62 cd 79 bc Data Ascii: pXM8aqK#Va.YN[=,mGd ~U7(ie)m'tC9v#~hG$-~F9J]YUr1LmzBS1NC74QZi9m,uGc!o3Pr"j/5tV3\k"BW(;&VG~P,Xq6jby
2024-10-30 07:46:25 UTC	16383	IN	Data Raw: be a1 3f 5f 3d 30 5b 6d 12 8f bf e9 b3 7b ad dd 67 cd 43 66 ad 49 86 51 27 cd 70 59 b0 17 4d 60 16 9a 71 98 61 56 16 12 1b 55 eb bb c1 22 5c 23 4c fd 8f d8 51 10 f5 e5 74 58 b7 a5 45 bf 56 50 ae 04 b4 66 41 84 08 1a b1 0e 6a a7 aa 4b 74 40 e4 71 b0 11 c2 a0 f4 d5 40 9c 28 ca 02 12 31 b0 de a6 99 d2 00 e1 2e 70 51 b0 4f c5 eb d3 ea cc 9c 8d 11 27 52 1b 23 4f b0 33 9f 96 3c 72 4b 92 84 93 3d 76 2b f7 51 47 99 3b a2 6b 4c a9 31 e9 94 3b 08 fa f5 41 dc a0 15 be 7c 1c 8b 76 ed c5 2b 7b ff 8e eb 93 16 ef c5 bd 71 3b 09 d0 5a 56 cc b5 1a bc 87 7d 5a 54 74 94 69 f7 a1 09 6d ea d9 39 95 52 81 8f 6a 86 8e ba 1b 57 0a f1 fc 0d 27 4d ab 1f ef 72 bd e6 77 01 22 de 44 00 f9 52 08 23 23 62 12 7e ad eb 84 55 f4 6a 61 a1 2b 6a 2f cc 01 99 41 dd 66 2b ad 37 94 39 d1 ff f5 Data Ascii: ?_=0[m{gCfIQ'pYM`qaVU"\#LQtXEVPfAjKt@q@(1.pQO'R#O3<rK=v+QG;kL1;A\|v+{q;ZV}ZTtim9RjW'Mrw"DR##b~Uja+j/Af+79
2024-10-30 07:46:25 UTC	16383	IN	Data Raw: e5 bb a2 17 0e e0 54 0c 6c 46 6c a2 92 01 2d 86 70 a7 9c 58 d3 61 17 09 e6 e6 fd 38 85 30 74 c3 3a ad e7 f7 0e ed b1 6d 36 f7 99 80 28 6a a1 51 5c 6e 24 79 13 c9 df 77 1f ce a4 70 a7 a5 81 01 a2 7d dc a1 be 80 a6 b1 c6 eb bc e0 d1 d9 be f1 08 89 ab e7 ee 8c 34 bf 81 b4 cb d6 c8 cd e8 80 df 4a 38 64 09 2d 2c a9 50 96 67 50 53 08 a8 2f bf 08 ff 89 c8 53 f9 ab 48 25 78 86 21 e5 42 44 82 30 c8 e1 30 fd cc 04 6a 60 72 79 c0 c7 a1 d7 73 3c bd 96 33 5e 55 71 f3 95 8a 16 2a c4 5f 92 c5 5c 08 5a d9 72 bb 30 ff e3 76 18 04 aa 93 ce 40 68 ea 84 7c e7 24 fd 6a d8 dd 0e 24 8a 68 88 6e 84 e6 46 71 ca 69 32 de a0 a0 d1 14 46 7f e4 09 47 21 a6 26 10 9e 42 e1 56 64 36 30 ba 5e 7d f1 37 87 57 36 67 14 c2 6e e9 9a 41 3c bd ac ce c9 61 d2 d5 92 4c b9 e4 3d 25 57 20 53 31 7f Data Ascii: TlFl-pXa80t:m6(jQ\n$ywp}4J8d-,PgPS/SH%x!BD00j`rys<3^Uq*_\Zr0v@h\|$j$hnFqi2FG!&BVd60^}7W6gnA<aL=%W S1
2024-10-30 07:46:25 UTC	383	IN	Data Raw: 2c 2f f5 fd 71 ba bc 9a e5 dc bf c0 64 7f 31 ff eb 47 9a 86 7e 9e be 09 20 2b de 33 88 33 45 bb b9 93 66 b8 6b 68 51 bb e2 b5 94 69 66 a9 b0 7c 1b 40 38 c3 67 09 9b ef be 8d a0 70 0f 33 f5 32 e2 61 c1 57 49 ae 8c 39 ba 27 1f 5e 12 ad 8f b0 fb de df 0f a8 ee b2 37 38 01 0c 0a 06 0e 01 e3 6f 0f 01 08 18 14 12 06 0e dc cd 02 60 83 00 da 28 7c f4 8a a0 e0 56 e8 5d aa ef f3 1b 79 89 c9 f8 ca ad ba 96 5d 7e c3 a6 ba 74 5b ac ab 2b 48 57 9d 52 d5 ed 62 f1 53 ae 0b d3 ab b4 23 c1 27 00 7b b9 79 b9 96 d4 5c 54 1d e9 03 ce 7f f9 54 b2 4d f3 f4 f2 36 e8 b8 13 5f d3 49 f7 06 12 fe a3 6f c3 2a 13 11 46 c1 79 51 0f d3 bd 6a 4a 0c bc 7c 72 3e 7e 76 a3 72 bc 15 10 e3 eb e6 23 13 01 b5 ba 79 3d 31 1d 24 37 2f 26 4d 8f 04 cc f7 ee 0b 39 21 e0 d9 4f dc 52 9d 0b 44 d4 03 bb Data Ascii: ,/qd1G~ +33EfkhQif\|@8gp32aWI9'^78o`(\|V]y]~t[+HWRbS#'{y\TTM6_Io*FyQjJ\|r>~vr#y=1$7/&M9!ORD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49808	45.60.155.180	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:25 UTC	1798	OUT	GET /as/authorization.oauth2?client_id=all.accor&response_type=code&accorregister=false&request=eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJjbGllbnRfaWQiOiJhbGwuYWNjb3IiLCJyZXNwb25zZV90eXBlIjoiY29kZSIsInJlZGlyZWN0X3VyaSI6Imh0dHBzOi8vYWxsLmFjY29yLmNvbS9lbnJvbGwtbG95YWx0eS9jaGVjay1hdXRoZW50Lmh0bWw_YXBwSWQ9YWxsLmFjY29yIiwic2NvcGUiOiJvcGVuaWQgQVBJV0VCLlVTRVIuQUxMIEFQU1IuQUxMIiwicHJvbXB0Ijoibm9uZSIsInN0YXRlIjoiZjM1NjBlZDJhOGM0NmFmNDE5OWVmOCIsIm5vbmNlIjoiMjFkMGEwZTVlZDhjNTY1NmRmMjhmNiIsImV4cCI6MTczMDI3NjE4NCwiaWF0IjoxNzMwMjc0Mzg0fQ.JqW-FJonJZaBZ70gGCenAbMXo9rjX6xBHmOikyeJWff9TYPsHiEm2nyGsFwTZGiPCVFqqqcO1M_Yvkt7VUyLecb-TvSbJELKeUvOU6uMhEh14T8jl7C58LPgZ2eSJpiAtTU4LENGWdfsuwwegu6ccUWllDNThuUWFc56LtkI_gOvNyoBdKCtyK7rWHw_gTmA-4nfTNNbGrpg7UNBJlU1yve8RsdoULVgkswCql1EolEC9rnT7Y8UEPzo6BiyHMv8YYTH0JW7BB6qzEdBZ93zpAkSPViX7UtSp0sEvmBBETlsoI_-Ba1f3R6UrMsVDMzrwmCh4oVFxqadPxxUlmUnuA&prompt=none HTTP/1.1 Host: login.accor.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://all.accor.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: org=evy; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa
2024-10-30 07:46:25 UTC	1383	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store Content-Type: text/html Connection: close Content-Length: 122 X-Iinfo: 62-25923370-0 0NNN RT(1730274385418 291) q(0 -1 -1 2) r(0 -1) B11(11,2383330,0) U5 Set-Cookie: visid_incap_2545443=x63MuavjQSixxrfQIYQ8PVHkIWcAAAAAQUIPAAAAAAD7hEgkFIFfLMg2zvFAlnfu; expires=Thu, 30 Oct 2025 07:33:14 GMT; HttpOnly; path=/ Set-Cookie: incap_ses_170_2545443=JXk2KzhmDUb9sg2vRfZbAlHkIWcAAAAAZwwpmYkZ8jK3gatMO3ubIQ==; path=/ Location: https://login.accor.com/as/authorization.oauth2?client_id=all.accor&response_type=code&accorregister=false&request=eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJjbGllbnRfaWQiOiJhbGwuYWNjb3IiLCJyZXNwb25zZV90eXBlIjoiY29kZSIsInJlZGlyZWN0X3VyaSI6Imh0dHBzOi8vYWxsLmFjY29yLmNvbS9lbnJvbGwtbG95YWx0eS9jaGVjay1hdXRoZW50Lmh0bWw_YXBwSWQ9YWxsLmFjY29yIiwic2NvcGUiOiJvcGVuaWQgQVBJV0VCLlVTRVIuQUxMIEFQU1IuQUxMIiwicHJvbXB0Ijoibm9uZSIsInN0YXRlIjoiZjM1NjBlZDJhOGM0NmFmNDE5OWVmOCIsIm5vbmNlIjoiMjFkMGEwZTVlZDhjNTY1NmRmMjhmNiIsImV4cCI6MTczMDI3NjE4NCwiaWF0IjoxNzMwMjc0Mzg0fQ.JqW-FJonJZaBZ70gGCenAbMXo9rjX6xBHmOikyeJWff9TYPsHiEm2nyGsFwTZGiPCVFqqqcO1M_Yvkt7VUyLecb-TvSbJELKeUvOU6uMhEh14T8jl7C58LPgZ2eSJpiAtTU4LENGWdfsuwwegu6ccUWllDNThuUWFc56LtkI_gOvNyoBdKCtyK7rWHw_gTmA-4nfTNNbGrpg7UNBJlU1yve8RsdoULVgkswCql1EolEC9rnT7Y8UEPzo6BiyHMv8YYTH0JW7BB6qzEdBZ93zpAkSPViX7UtSp0sEvmBBETlsoI_-Ba1f3R6UrMsVDMzrwmCh4oVFxqadPxxUlmUnuA&prompt=none
2024-10-30 07:46:25 UTC	69	IN	Data Raw: 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 4c 6f 61 64 69 6e 67 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 20 62 67 63 6f 6c 6f 72 3d 22 23 66 66 66 66 66 66 22 3e 3c 48 Data Ascii: <HTML><HEAD><TITLE>Loading</TITLE></HEAD><BODY bgcolor="#ffffff"><H
2024-10-30 07:46:25 UTC	53	IN	Data Raw: 33 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 22 3e 4c 6f 61 64 69 6e 67 3c 2f 48 33 3e 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: 3 style="color: #ffffff">Loading</H3></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49805	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:25 UTC	953	OUT	GET /components/footer/assets/images/logo-fevad.jpg HTTP/1.1 Host: all.accor.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; x-aem-variant=undefined; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==
2024-10-30 07:46:26 UTC	666	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 161094 Cache-control: public, max-age=3600, stale-while-revalidate=21600 Content-Type: image/jpeg Date: Wed, 30 Oct 2024 07:46:26 GMT Last-Modified: Wed, 16 Oct 2024 09:39:23 GMT P3P: CP="NO P3P POLICY" Referrer-Policy: origin Server: ECAcc (lhd/3585) Strict-Transport-Security: max-age=15552000 Strict-Transport-Security: max-age=15552000 Vary: Accept-Encoding X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Clacks-Overhead: GNU Terry Pratchett X-Iinfo: 18-26261679-26229307 pNNy RT(1730113291979 10) q(0 1 1 6) r(1 1) U24 X-XSS-Protection: 1; mode=block Content-Length: 947 Connection: close
2024-10-30 07:46:26 UTC	947	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 06 06 06 06 07 06 07 08 08 07 0a 0b 0a 0b 0a 0f 0e 0c 0c 0e 0f 16 10 11 10 11 10 16 22 15 19 15 15 19 15 22 1e 24 1e 1c 1e 24 1e 36 2a 26 26 2a 36 3e 34 32 34 3e 4c 44 44 4c 5f 5a 5f 7c 7c a7 01 06 06 06 06 07 06 07 08 08 07 0a 0b 0a 0b 0a 0f 0e 0c 0c 0e 0f 16 10 11 10 11 10 16 22 15 19 15 15 19 15 22 1e 24 1e 1c 1e 24 1e 36 2a 26 26 2a 36 3e 34 32 34 3e 4c 44 44 4c 5f 5a 5f 7c 7c a7 ff c2 00 11 08 00 2a 00 2a 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 04 00 01 05 06 07 03 02 ff da 00 08 01 01 00 00 00 00 cd d9 24 58 8d ef a7 be c0 4a 58 8c 55 a8 1d 7f 84 9d 8f 19 ac 5f 25 a6 cd cf e9 ee 49 e7 c6 ff 00 ff c4 00 18 01 01 01 00 03 00 Data Ascii: JFIF""$$6&&6>424>LDDL_Z_\|\|""$$6&&6>424>LDDL_Z_\|\|**"$XJXU_%I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49806	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:25 UTC	3962	OUT	GET /_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3&ns=1&cb=1949606252 HTTP/1.1 Host: all.accor.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; x-aem-variant=undefined; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=uXhrmD2Na/K1uglc4DSccWmUi3lwT6U0aN5NKqvcu8d5WGWybG4+Fjgl4ne6nVjifX1jzgyPIuRTBhS6nanmMOLamS/KiojPrxeLcFng8UzPO+81sa87bs4RFhGAg5SdnTRio+RJdn41ZezkVQzm+QQNKVTMJBE8fIzHUqlLtmYsp4GqzAo9Tqkn29+6s06cnyhW9Bg2AjaE3z+uY1Kha+K1N+xGE1wxY+ov1hMjJJFJQKo0Zzr8yVUmc0uGx6VyOI/GCYB98MMi2baM/noo1d0GCT/eTJnamWBVosFVl6rGjGRpxA8WWwcog7Ny/HlQVp6w8cTkKFTg/8KjIPnCBapACqcVA8DvW2Oym2gj1AtBv4YYfUMq3TEu4mXRkOJJVmAh7NCUHwLhEc4aXJBIqbW6JkrW0slp4+M4RmDR1e+A3GrFYXelb56QL3DRn [TRUNCATED]
2024-10-30 07:46:26 UTC	269	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Content-Type: application/javascript Date: Wed, 30 Oct 2024 07:46:26 GMT server: MF 8700 S - Dyna-VT - Stage V All-in-One X-CDN-Forward: EdgeCast X-Robots-Tag: noindex Content-Length: 85095 Connection: close
2024-10-30 07:46:26 UTC	7072	IN	Data Raw: 76 61 72 20 5f 30 78 31 30 33 32 3d 5b 27 5c 78 34 39 5c 78 36 61 5c 78 35 61 5c 78 37 32 27 2c 27 5c 78 34 63 5c 78 34 64 5c 78 34 62 5c 78 34 65 5c 78 35 30 5c 78 34 31 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 37 32 5c 78 35 30 5c 78 34 34 5c 78 36 62 5c 78 34 64 5c 78 34 62 5c 78 36 33 5c 78 37 37 5c 78 37 30 5c 78 34 39 5c 78 35 30 5c 78 37 37 5c 78 37 31 5c 78 36 37 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 33 36 5c 78 36 65 5c 78 34 34 5c 78 36 37 5c 78 36 38 5c 78 36 32 5c 78 34 34 5c 78 36 65 5c 78 33 30 5c 78 35 35 5c 78 37 39 27 2c 27 5c 78 35 30 5c 78 33 38 5c 78 34 62 5c 78 36 39 5c 78 34 31 5c 78 35 34 5c 78 36 36 5c 78 34 34 5c 78 36 37 5c 78 34 37 5c 78 33 31 5c 78 34 32 27 2c 27 5c 78 34 65 5c 78 36 33 5c 78 34 62 5c 78 36 66 5c 78 Data Ascii: var _0x1032=['\x49\x6a\x5a\x72','\x4c\x4d\x4b\x4e\x50\x41\x3d\x3d','\x77\x72\x50\x44\x6b\x4d\x4b\x63\x77\x70\x49\x50\x77\x71\x67\x3d','\x77\x36\x6e\x44\x67\x68\x62\x44\x6e\x30\x55\x79','\x50\x38\x4b\x69\x41\x54\x66\x44\x67\x47\x31\x42','\x4e\x63\x4b\x6f\x
2024-10-30 07:46:26 UTC	5808	IN	Data Raw: 5c 78 37 31 27 2c 27 5c 78 37 37 5c 78 37 31 5c 78 36 33 5c 78 35 31 5c 78 37 37 5c 78 37 32 5c 78 36 62 5c 78 37 32 5c 78 35 38 5c 78 35 32 5c 78 35 35 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 37 32 5c 78 37 36 5c 78 34 34 5c 78 36 39 5c 78 36 63 5c 78 34 64 5c 78 33 64 27 2c 27 5c 78 34 66 5c 78 37 38 5c 78 33 35 5c 78 36 66 27 2c 27 5c 78 34 65 5c 78 36 65 5c 78 33 33 5c 78 34 33 5c 78 36 62 5c 78 33 32 5c 78 35 36 5c 78 33 31 5c 78 37 37 5c 78 37 31 5c 78 33 35 5c 78 33 39 5c 78 37 37 5c 78 33 37 5c 78 35 35 5c 78 32 66 27 2c 27 5c 78 35 38 5c 78 35 38 5c 78 34 38 5c 78 34 33 5c 78 36 63 5c 78 36 64 5c 78 34 34 5c 78 34 34 5c 78 37 32 5c 78 37 33 5c 78 34 66 5c 78 36 36 27 2c 27 5c 78 37 37 5c 78 37 31 5c 78 36 66 5c 78 36 64 5c 78 37 37 5c 78 36 66 5c Data Ascii: \x71','\x77\x71\x63\x51\x77\x72\x6b\x72\x58\x52\x55\x3d','\x77\x72\x76\x44\x69\x6c\x4d\x3d','\x4f\x78\x35\x6f','\x4e\x6e\x33\x43\x6b\x32\x56\x31\x77\x71\x35\x39\x77\x37\x55\x2f','\x58\x58\x48\x43\x6c\x6d\x44\x44\x72\x73\x4f\x66','\x77\x71\x6f\x6d\x77\x6f\
2024-10-30 07:46:26 UTC	16383	IN	Data Raw: 37 37 5c 78 33 35 5c 78 37 36 5c 78 34 34 5c 78 36 61 5c 78 35 31 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 35 61 5c 78 37 39 5c 78 36 32 5c 78 34 34 5c 78 36 63 5c 78 36 39 5c 78 33 30 5c 78 37 35 5c 78 35 30 5c 78 36 37 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 34 35 5c 78 33 30 5c 78 35 36 5c 78 34 37 5c 78 37 37 5c 78 37 30 5c 78 34 64 5c 78 35 34 5c 78 34 62 5c 78 36 39 5c 78 35 30 5c 78 34 33 5c 78 37 31 5c 78 34 34 5c 78 36 66 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 33 34 5c 78 35 36 5c 78 36 36 5c 78 37 37 5c 78 33 36 5c 78 35 32 5c 78 34 65 5c 78 34 33 5c 78 37 39 5c 78 33 34 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 33 37 5c 78 37 38 5c 78 33 31 5c 78 37 37 5c 78 37 30 5c 78 34 39 5c 78 34 34 5c 78 35 36 5c 78 34 36 5c 78 37 37 5c 78 35 36 5c 78 36 34 5c Data Ascii: 77\x35\x76\x44\x6a\x51\x3d\x3d','\x5a\x79\x62\x44\x6c\x69\x30\x75\x50\x67\x3d\x3d','\x45\x30\x56\x47\x77\x70\x4d\x54\x4b\x69\x50\x43\x71\x44\x6f\x3d','\x77\x34\x56\x66\x77\x36\x52\x4e\x43\x79\x34\x3d','\x77\x37\x78\x31\x77\x70\x49\x44\x56\x46\x77\x56\x64\
2024-10-30 07:46:26 UTC	6849	IN	Data Raw: 78 35 38 5c 78 34 33 5c 78 37 36 5c 78 34 37 5c 78 36 66 5c 78 36 38 5c 78 35 61 5c 78 33 38 5c 78 34 66 5c 78 37 39 5c 78 37 37 5c 78 37 31 5c 78 36 36 5c 78 34 34 5c 78 36 62 5c 78 34 64 5c 78 34 62 5c 78 36 36 5c 78 37 37 5c 78 33 37 5c 78 37 36 5c 78 34 33 5c 78 37 35 5c 78 34 64 5c 78 34 62 5c 78 34 33 5c 78 35 38 5c 78 37 33 5c 78 34 66 5c 78 37 32 5c 78 37 37 5c 78 37 31 5c 78 36 65 5c 78 34 33 5c 78 36 62 5c 78 36 33 5c 78 34 62 5c 78 33 37 5c 78 34 34 5c 78 36 38 5c 78 36 38 5c 78 35 38 5c 78 36 35 5c 78 33 38 5c 78 34 66 5c 78 37 34 5c 78 34 61 5c 78 34 64 5c 78 34 66 5c 78 36 62 5c 78 37 37 5c 78 36 66 5c 78 36 62 5c 78 36 31 27 2c 27 5c 78 37 37 5c 78 33 34 5c 78 37 33 5c 78 36 36 5c 78 37 37 5c 78 36 66 5c 78 34 38 5c 78 34 34 5c 78 36 64 5c Data Ascii: x58\x43\x76\x47\x6f\x68\x5a\x38\x4f\x79\x77\x71\x66\x44\x6b\x4d\x4b\x66\x77\x37\x76\x43\x75\x4d\x4b\x43\x58\x73\x4f\x72\x77\x71\x6e\x43\x6b\x63\x4b\x37\x44\x68\x68\x58\x65\x38\x4f\x74\x4a\x4d\x4f\x6b\x77\x6f\x6b\x61','\x77\x34\x73\x66\x77\x6f\x48\x44\x6d\
2024-10-30 07:46:26 UTC	7260	IN	Data Raw: 5c 78 35 30 5c 78 37 37 5c 78 33 36 5c 78 36 37 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 33 34 5c 78 34 65 5c 78 35 30 5c 78 37 37 5c 78 33 36 5c 78 37 38 5c 78 34 64 5c 78 35 30 5c 78 36 39 5c 78 36 62 5c 78 33 64 27 2c 27 5c 78 34 38 5c 78 34 64 5c 78 34 66 5c 78 36 66 5c 78 37 37 5c 78 36 66 5c 78 37 37 5c 78 33 64 27 2c 27 5c 78 34 31 5c 78 37 61 5c 78 35 35 5c 78 37 61 27 2c 27 5c 78 34 66 5c 78 37 33 5c 78 34 66 5c 78 37 35 5c 78 37 37 5c 78 37 30 5c 78 36 36 5c 78 34 33 5c 78 37 31 5c 78 33 32 5c 78 37 30 5c 78 36 32 5c 78 37 37 5c 78 33 34 5c 78 33 33 5c 78 34 33 5c 78 36 39 5c 78 34 33 5c 78 36 32 5c 78 34 34 5c 78 37 33 5c 78 37 37 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 34 61 5c 78 36 39 5c 78 32 66 5c 78 34 33 5c 78 36 37 5c 78 34 33 5c 78 34 61 Data Ascii: \x50\x77\x36\x67\x3d','\x77\x34\x4e\x50\x77\x36\x78\x4d\x50\x69\x6b\x3d','\x48\x4d\x4f\x6f\x77\x6f\x77\x3d','\x41\x7a\x55\x7a','\x4f\x73\x4f\x75\x77\x70\x66\x43\x71\x32\x70\x62\x77\x34\x33\x43\x69\x43\x62\x44\x73\x77\x3d\x3d','\x4a\x69\x2f\x43\x67\x43\x4a
2024-10-30 07:46:26 UTC	16383	IN	Data Raw: 6e 28 29 7b 76 61 72 20 5f 30 78 35 33 31 34 37 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 5f 30 78 32 36 33 66 33 33 3d 21 21 5b 5d 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 37 30 66 31 33 2c 5f 30 78 33 62 34 38 37 66 29 7b 76 61 72 20 5f 30 78 33 36 31 64 33 32 3d 5f 30 78 32 36 33 66 33 33 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 5f 30 78 33 62 34 38 37 66 29 7b 76 61 72 20 5f 30 78 35 36 33 37 37 65 3d 5f 30 78 33 62 34 38 37 66 5b 27 5c 78 36 31 5c 78 37 30 5c 78 37 30 5c 78 36 63 5c 78 37 39 27 5d 28 5f 30 78 32 37 30 66 31 33 2c 61 72 67 75 6d 65 6e 74 73 29 3b 5f 30 78 33 62 34 38 37 66 3d 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 5f 30 78 35 36 33 37 37 65 3b 7d 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 5f 30 78 32 Data Ascii: n(){var _0x53147b=function(){var _0x263f33=!![];return function(_0x270f13,_0x3b487f){var _0x361d32=_0x263f33?function(){if(_0x3b487f){var _0x56377e=_0x3b487f['\x61\x70\x70\x6c\x79'](_0x270f13,arguments);_0x3b487f=null;return _0x56377e;}}:function(){};_0x2
2024-10-30 07:46:26 UTC	10039	IN	Data Raw: 38 29 29 3b 76 61 72 20 5f 30 78 33 34 37 65 66 64 3d 5f 30 78 31 61 30 63 37 34 5b 5f 30 78 32 31 30 33 28 27 30 78 37 35 27 2c 20 27 5c 78 36 64 5c 78 36 66 5c 78 32 34 5c 78 34 32 27 29 5d 28 5f 30 78 32 31 30 33 28 27 30 78 37 36 27 2c 20 27 5c 78 34 64 5c 78 36 66 5c 78 33 32 5c 78 32 31 27 29 2c 5f 30 78 32 36 34 32 31 33 5b 5f 30 78 32 31 30 33 28 27 30 78 37 37 27 2c 20 27 5c 78 34 34 5c 78 37 61 5c 78 36 64 5c 78 32 35 27 29 5d 28 29 29 3b 7d 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 5c 78 33 36 27 3a 66 6f 72 28 76 61 72 20 5f 30 78 64 35 62 39 33 34 3d 30 78 30 3b 5f 30 78 31 61 30 63 37 34 5b 5f 30 78 32 31 30 33 28 27 30 78 37 38 27 2c 20 27 5c 78 35 35 5c 78 34 65 5c 78 32 39 5c 78 34 35 27 29 5d 28 5f 30 78 64 35 62 39 33 34 2c 5f 30 78 34 Data Ascii: 8));var _0x347efd=_0x1a0c74[_0x2103('0x75', '\x6d\x6f\x24\x42')](_0x2103('0x76', '\x4d\x6f\x32\x21'),_0x264213[_0x2103('0x77', '\x44\x7a\x6d\x25')]());}continue;case'\x36':for(var _0xd5b934=0x0;_0x1a0c74[_0x2103('0x78', '\x55\x4e\x29\x45')](_0xd5b934,_0x4
2024-10-30 07:46:26 UTC	15301	IN	Data Raw: 29 29 29 7b 5f 30 78 32 33 61 33 33 32 5b 5f 30 78 32 33 61 33 33 32 5b 5f 30 78 32 31 30 33 28 27 30 78 61 63 27 2c 20 27 5c 78 37 37 5c 78 34 36 5c 78 34 33 5c 78 34 39 27 29 5d 5d 3d 5f 30 78 31 37 32 34 38 39 5b 5f 30 78 32 31 30 33 28 27 30 78 65 30 27 2c 20 27 5c 78 35 38 5c 78 33 39 5c 78 34 63 5c 78 34 64 27 29 5d 28 5f 30 78 34 64 64 65 38 64 2c 5f 30 78 32 31 30 33 28 27 30 78 65 31 27 2c 20 27 5c 78 35 62 5c 78 36 31 5c 78 36 61 5c 78 36 32 27 29 29 3b 62 72 65 61 6b 3b 7d 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 5c 78 33 32 27 3a 69 66 28 74 79 70 65 6f 66 20 5f 30 78 33 34 37 31 66 62 3d 3d 3d 5f 30 78 32 31 30 33 28 27 30 78 65 32 27 2c 20 27 5c 78 36 39 5c 78 36 38 5c 78 35 32 5c 78 35 64 27 29 29 7b 5f 30 78 33 66 34 39 63 63 3d 5f 30 78 Data Ascii: ))){_0x23a332[_0x23a332[_0x2103('0xac', '\x77\x46\x43\x49')]]=_0x172489[_0x2103('0xe0', '\x58\x39\x4c\x4d')](_0x4dde8d,_0x2103('0xe1', '\x5b\x61\x6a\x62'));break;}continue;case'\x32':if(typeof _0x3471fb===_0x2103('0xe2', '\x69\x68\x52\x5d')){_0x3f49cc=_0x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49804	35.240.103.94	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:25 UTC	828	OUT	POST /referential/v1/best-visit/cookie-attribution HTTP/1.1 Host: api.accor.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 apikey: asHOCgjzKWHp8O7qXPKOfBTZ4k9Sq6IA sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://all.accor.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://all.accor.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: org=evy; x-aem-variant=undefined; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1
2024-10-30 07:46:25 UTC	2	OUT	Data Raw: 7b 7d Data Ascii: {}
2024-10-30 07:46:26 UTC	790	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 07:46:26 GMT Content-Type: application/json Content-Length: 265 Connection: close Server: CloudFront Set-Cookie: affcookie=egF+r4RKyHhlSDGT0HNOSA==; Max-Age=2678400; Path=/; domain=.accor.com; SameSite=None; Secure Set-Cookie: trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjoiQUgiLCJyZXRhaW5lZG1lcmNoYW50aWQiOiJBSCJ9; Max-Age=2678400; Path=/; domain=.accor.com; SameSite=None; Secure X-Cache: Miss from cloudfront Via: 1.1 0be2654c763eb7c43127ed7a7700cebe.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BRU50-P1 X-Amz-Cf-Id: In4Ld8j79evLBq1IOq7QLHliOZUBgRUeeGzFCShecfVhidI_MvQtCQ== Access-Control-Allow-Credentials: true Vary: Origin Access-Control-Allow-Origin: https://all.accor.com
2024-10-30 07:46:26 UTC	265	IN	Data Raw: 7b 22 61 66 66 43 6f 6f 6b 69 65 22 3a 22 41 48 7c 41 48 7c 41 48 7c 41 48 22 2c 22 63 75 72 72 65 6e 74 56 69 73 69 74 22 3a 7b 22 73 6f 75 72 63 65 49 64 22 3a 22 41 48 22 2c 22 6d 65 72 63 68 61 6e 74 49 64 22 3a 22 41 48 22 2c 22 6c 65 76 65 72 4c 61 62 65 6c 22 3a 22 44 69 72 65 63 74 20 41 63 63 65 73 73 22 2c 22 6c 65 76 65 72 43 61 74 65 67 6f 72 79 22 3a 31 7d 2c 22 6f 75 74 70 75 74 42 65 73 74 56 69 73 69 74 22 3a 7b 22 73 6f 75 72 63 65 49 64 22 3a 22 41 48 22 2c 22 6d 65 72 63 68 61 6e 74 49 64 22 3a 22 41 48 22 2c 22 6c 65 76 65 72 4c 61 62 65 6c 22 3a 22 44 69 72 65 63 74 20 41 63 63 65 73 73 22 2c 22 6c 65 76 65 72 43 61 74 65 67 6f 72 79 22 3a 31 7d 2c 22 61 66 66 63 6f 6f 6b 69 65 22 3a 22 65 67 46 2b 72 34 52 4b 79 48 68 6c 53 44 47 54 Data Ascii: {"affCookie":"AH\|AH\|AH\|AH","currentVisit":{"sourceId":"AH","merchantId":"AH","leverLabel":"Direct Access","leverCategory":1},"outputBestVisit":{"sourceId":"AH","merchantId":"AH","leverLabel":"Direct Access","leverCategory":1},"affcookie":"egF+r4RKyHhlSDGT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49807	35.240.103.94	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:26 UTC	1515	OUT	GET /referential/v1/pos/currencies?groupByContinent=true HTTP/1.1 Host: api.accor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" apikey: asHOCgjzKWHp8O7qXPKOfBTZ4k9Sq6IA sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://all.accor.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://all.accor.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: org=evy; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; OAU_all.accor=eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJhcHBfaWQiOiJhbGwuYWNjb3IiLCJzdGF0ZSI6ImYzNTYwZWQyYThjNDZhZjQxOTllZjgiLCJub25jZSI6IjIxZDBhMGU1ZWQ4YzU2NTZkZjI4ZjYiLCJyZWRpcmVjdF9zaXRlX3VyaSI6Imh0dHBzOi8vYWxsLmFjY29yLmNvbSIsInByb21wdCI6Im5vbmUiLCJleHAiOjE3MzAyNzYxODQsImlhdCI6MTczMDI3NDM4NH0.T264QRl7YWH19MgynN8-Xaq1G1flI3hkXf6P-98bxX9zquvQYl9l1yVvirNK7SO9IARz9C1cgTuaozOE3ITULDlEyLbPAquuYSLfESRfVzyb0HFEhbkdMISJ5nmsUq2QiYFJRgGSRoU7UjHDLoo8646JuA_ZnO1550QeNYS8xuV9EoK4B4oFEgezMDX9rf6Or31D63HUbbL51dSeHY26E7TwHYN6SeodaZL7NeaUEJN-G93F7ktNq824Z5C11HTL2mkWUM6Aaz0nua4XKjGekRh9_QQpoOau3wMyp586RfBxn38C0agFPUi7WA_4FusMHRg-90n9XBuE3e_0KE46Uw
2024-10-30 07:46:26 UTC	453	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 07:46:26 GMT Content-Type: application/json Content-Length: 13238 Connection: close Server: CloudFront X-Cache: Miss from cloudfront Via: 1.1 7b3039c48360643d61f0384c64a0d9d8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BRU50-P1 X-Amz-Cf-Id: SVe9J5wFd4kIbuKY6yipsVw-cjS1kPgh26vzqhxZho5f19ePunPWbg== Access-Control-Allow-Credentials: true Vary: Origin Access-Control-Allow-Origin: https://all.accor.com
2024-10-30 07:46:26 UTC	13238	IN	Data Raw: 5b 7b 22 63 6f 6e 74 69 6e 65 6e 74 43 6f 64 65 22 3a 22 61 66 72 69 63 61 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 4c 61 62 65 6c 22 3a 22 41 66 72 69 63 61 20 2d 20 4d 69 64 64 6c 65 20 45 61 73 74 22 2c 22 63 75 72 72 65 6e 63 79 4c 69 73 74 22 3a 5b 7b 22 63 75 72 72 65 6e 63 79 43 6f 64 65 22 3a 22 44 5a 44 22 2c 22 63 75 72 72 65 6e 63 79 4c 61 62 65 6c 22 3a 22 41 6c 67 65 72 69 61 6e 20 44 69 6e 61 72 22 2c 22 63 75 72 72 65 6e 63 79 53 79 6d 62 6f 6c 22 3a 22 d8 af 2e d8 ac 22 2c 22 61 63 63 6f 72 43 6f 75 6e 74 72 79 43 6f 64 65 22 3a 5b 22 61 6c 67 65 72 69 61 22 5d 2c 22 69 73 6f 43 6f 75 6e 74 72 79 43 6f 64 65 22 3a 5b 22 64 7a 22 5d 7d 2c 7b 22 63 75 72 72 65 6e 63 79 43 6f 64 65 22 3a 22 41 4f 41 22 2c 22 63 75 72 72 65 6e 63 79 4c 61 62 65 6c Data Ascii: [{"continentCode":"africa","continentLabel":"Africa - Middle East","currencyList":[{"currencyCode":"DZD","currencyLabel":"Algerian Dinar","currencySymbol":".","accorCountryCode":["algeria"],"isoCountryCode":["dz"]},{"currencyCode":"AOA","currencyLabel

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49809	35.240.103.94	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:26 UTC	1505	OUT	GET /referential/v1/pos/countries?siteCode=all HTTP/1.1 Host: api.accor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" apikey: asHOCgjzKWHp8O7qXPKOfBTZ4k9Sq6IA sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://all.accor.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://all.accor.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: org=evy; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; OAU_all.accor=eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJhcHBfaWQiOiJhbGwuYWNjb3IiLCJzdGF0ZSI6ImYzNTYwZWQyYThjNDZhZjQxOTllZjgiLCJub25jZSI6IjIxZDBhMGU1ZWQ4YzU2NTZkZjI4ZjYiLCJyZWRpcmVjdF9zaXRlX3VyaSI6Imh0dHBzOi8vYWxsLmFjY29yLmNvbSIsInByb21wdCI6Im5vbmUiLCJleHAiOjE3MzAyNzYxODQsImlhdCI6MTczMDI3NDM4NH0.T264QRl7YWH19MgynN8-Xaq1G1flI3hkXf6P-98bxX9zquvQYl9l1yVvirNK7SO9IARz9C1cgTuaozOE3ITULDlEyLbPAquuYSLfESRfVzyb0HFEhbkdMISJ5nmsUq2QiYFJRgGSRoU7UjHDLoo8646JuA_ZnO1550QeNYS8xuV9EoK4B4oFEgezMDX9rf6Or31D63HUbbL51dSeHY26E7TwHYN6SeodaZL7NeaUEJN-G93F7ktNq824Z5C11HTL2mkWUM6Aaz0nua4XKjGekRh9_QQpoOau3wMyp586RfBxn38C0agFPUi7WA_4FusMHRg-90n9XBuE3e_0KE46Uw
2024-10-30 07:46:26 UTC	453	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 07:46:26 GMT Content-Type: application/json Content-Length: 33138 Connection: close Server: CloudFront X-Cache: Miss from cloudfront Via: 1.1 0f8477062090de8d23b9985455734a32.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BRU50-P1 X-Amz-Cf-Id: 9l5TFOaH_DH-hpQlMgRpVog_rxGgfkVFogcvilfr7kkq5p-wsF0LwA== Access-Control-Allow-Credentials: true Vary: Origin Access-Control-Allow-Origin: https://all.accor.com
2024-10-30 07:46:26 UTC	15931	IN	Data Raw: 5b 7b 22 63 6f 6e 74 69 6e 65 6e 74 43 6f 64 65 22 3a 22 61 66 72 69 63 61 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 4c 61 62 65 6c 22 3a 22 41 66 72 69 63 61 20 2d 20 4d 69 64 64 6c 65 20 45 61 73 74 22 2c 22 63 6f 75 6e 74 72 79 4c 69 73 74 22 3a 5b 7b 22 61 63 63 6f 72 43 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 61 6c 67 65 72 69 61 22 2c 22 61 63 63 6f 72 43 6f 75 6e 74 72 79 4c 61 62 65 6c 22 3a 22 41 6c 67 65 72 69 61 22 2c 22 61 63 63 6f 72 43 6f 75 6e 74 72 79 4c 61 6e 67 75 61 67 65 4c 61 62 65 6c 22 3a 22 41 6c 67 65 72 69 61 20 2d 20 45 6e 67 6c 69 73 68 22 2c 22 68 6f 6d 65 70 61 67 65 55 72 6c 22 3a 22 2f 61 2f 65 6e 2e 68 74 6d 6c 22 2c 22 69 73 6f 43 6f 75 6e 74 72 79 43 6f 64 65 22 3a 5b 22 64 7a 22 5d 2c 22 6c 61 6e 67 75 61 67 65 43 6f 64 65 22 Data Ascii: [{"continentCode":"africa","continentLabel":"Africa - Middle East","countryList":[{"accorCountryCode":"algeria","accorCountryLabel":"Algeria","accorCountryLanguageLabel":"Algeria - English","homepageUrl":"/a/en.html","isoCountryCode":["dz"],"languageCode"
2024-10-30 07:46:26 UTC	16384	IN	Data Raw: 65 22 3a 22 65 6e 22 2c 22 6c 61 6e 67 75 61 67 65 4c 61 62 65 6c 22 3a 22 45 6e 67 6c 69 73 68 22 2c 22 70 6f 69 6e 74 4f 66 53 61 6c 65 22 3a 22 75 73 61 22 2c 22 6f 72 64 65 72 49 64 22 3a 31 36 32 7d 2c 7b 22 61 63 63 6f 72 43 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 75 6e 69 74 65 64 2d 73 74 61 74 65 73 2d 6f 66 2d 61 6d 65 72 69 63 61 22 2c 22 61 63 63 6f 72 43 6f 75 6e 74 72 79 4c 61 62 65 6c 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 20 6f 66 20 41 6d 65 72 69 63 61 22 2c 22 61 63 63 6f 72 43 6f 75 6e 74 72 79 4c 61 6e 67 75 61 67 65 4c 61 62 65 6c 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 20 6f 66 20 41 6d 65 72 69 63 61 20 2d 20 45 6e 67 6c 69 73 68 22 2c 22 68 6f 6d 65 70 61 67 65 55 72 6c 22 3a 22 2f 61 2f 65 6e 2e 68 74 6d 6c 22 2c Data Ascii: e":"en","languageLabel":"English","pointOfSale":"usa","orderId":162},{"accorCountryCode":"united-states-of-america","accorCountryLabel":"United States of America","accorCountryLanguageLabel":"United States of America - English","homepageUrl":"/a/en.html",
2024-10-30 07:46:26 UTC	823	IN	Data Raw: 67 65 4c 61 62 65 6c 22 3a 22 d0 a0 d0 be d1 81 d1 81 d0 b8 d1 8f 22 2c 22 68 6f 6d 65 70 61 67 65 55 72 6c 22 3a 22 2f 61 2f 72 75 2e 68 74 6d 6c 22 2c 22 69 73 6f 43 6f 75 6e 74 72 79 43 6f 64 65 22 3a 5b 22 72 75 22 2c 22 61 6d 22 2c 22 61 7a 22 2c 22 62 79 22 2c 22 6b 67 22 2c 22 74 6a 22 2c 22 74 6d 22 2c 22 75 7a 22 5d 2c 22 6c 61 6e 67 75 61 67 65 43 6f 64 65 22 3a 22 72 75 22 2c 22 6c 61 6e 67 75 61 67 65 4c 61 62 65 6c 22 3a 22 d0 a0 d1 83 d1 81 d1 81 d0 ba d0 b8 d0 b9 22 2c 22 70 6f 69 6e 74 4f 66 53 61 6c 65 22 3a 22 72 75 73 73 69 61 22 2c 22 6f 72 64 65 72 49 64 22 3a 31 33 33 7d 2c 7b 22 61 63 63 6f 72 43 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 75 6b 72 61 69 6e 65 22 2c 22 61 63 63 6f 72 43 6f 75 6e 74 72 79 4c 61 62 65 6c 22 3a 22 55 6b 72 Data Ascii: geLabel":"","homepageUrl":"/a/ru.html","isoCountryCode":["ru","am","az","by","kg","tj","tm","uz"],"languageCode":"ru","languageLabel":"","pointOfSale":"russia","orderId":133},{"accorCountryCode":"ukraine","accorCountryLabel":"Ukr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49810	18.66.102.63	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:26 UTC	683	OUT	GET /5GRx/5m1nc8of?af_qr=true HTTP/1.1 Host: accor.onelink.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 07:46:26 UTC	849	IN	HTTP/1.1 301 Moved Permanently Content-Type: application/octet-stream Content-Length: 0 Connection: close Date: Wed, 30 Oct 2024 07:46:26 GMT Cache-Control: no-cache, no-store Location: https://all.accor.com/a/en/new-app-offer/app-download.html?source_caller=bulk&af_qr=true&shortlink=5m1nc8of&c=20241013_ALL_AppBonusingMobileLp&af_ad=QR_code_20241013_ALL_AppBonusingMobileLp&pid=QR_code&deep_link_value=accor%3A%2F%2Fsearch%2Foffer%3Fpage_id%3Dddc8e830-2fc5-4492-ae7f-a63574b202f4&af_adset=EN Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ch: Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List X-Cache: Miss from cloudfront Via: 1.1 e44e0b24e706487eaec6b9e01f2166dc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P2 X-Amz-Cf-Id: tRev_O1FEhVdBK-xe768EMV1OmoSOobDNW4rGxY-ViKGVgG6_1fpug==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49814	172.64.155.119	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:26 UTC	380	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 07:46:26 UTC	249	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 07:46:26 GMT Content-Type: text/javascript Content-Length: 77 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8da9caa37b434798-DFW
2024-10-30 07:46:26 UTC	77	IN	Data Raw: 6a 73 6f 6e 46 65 65 64 28 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 54 58 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 54 65 78 61 73 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d 29 3b Data Ascii: jsonFeed({"country":"US","state":"TX","stateName":"Texas","continent":"NA"});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49815	45.60.155.180	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:26 UTC	1964	OUT	GET /as/authorization.oauth2?client_id=all.accor&response_type=code&accorregister=false&request=eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJjbGllbnRfaWQiOiJhbGwuYWNjb3IiLCJyZXNwb25zZV90eXBlIjoiY29kZSIsInJlZGlyZWN0X3VyaSI6Imh0dHBzOi8vYWxsLmFjY29yLmNvbS9lbnJvbGwtbG95YWx0eS9jaGVjay1hdXRoZW50Lmh0bWw_YXBwSWQ9YWxsLmFjY29yIiwic2NvcGUiOiJvcGVuaWQgQVBJV0VCLlVTRVIuQUxMIEFQU1IuQUxMIiwicHJvbXB0Ijoibm9uZSIsInN0YXRlIjoiZjM1NjBlZDJhOGM0NmFmNDE5OWVmOCIsIm5vbmNlIjoiMjFkMGEwZTVlZDhjNTY1NmRmMjhmNiIsImV4cCI6MTczMDI3NjE4NCwiaWF0IjoxNzMwMjc0Mzg0fQ.JqW-FJonJZaBZ70gGCenAbMXo9rjX6xBHmOikyeJWff9TYPsHiEm2nyGsFwTZGiPCVFqqqcO1M_Yvkt7VUyLecb-TvSbJELKeUvOU6uMhEh14T8jl7C58LPgZ2eSJpiAtTU4LENGWdfsuwwegu6ccUWllDNThuUWFc56LtkI_gOvNyoBdKCtyK7rWHw_gTmA-4nfTNNbGrpg7UNBJlU1yve8RsdoULVgkswCql1EolEC9rnT7Y8UEPzo6BiyHMv8YYTH0JW7BB6qzEdBZ93zpAkSPViX7UtSp0sEvmBBETlsoI_-Ba1f3R6UrMsVDMzrwmCh4oVFxqadPxxUlmUnuA&prompt=none HTTP/1.1 Host: login.accor.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://all.accor.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: org=evy; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; visid_incap_2545443=x63MuavjQSixxrfQIYQ8PVHkIWcAAAAAQUIPAAAAAAD7hEgkFIFfLMg2zvFAlnfu; incap_ses_170_2545443=JXk2KzhmDUb9sg2vRfZbAlHkIWcAAAAAZwwpmYkZ8jK3gatMO3ubIQ==
2024-10-30 07:46:27 UTC	933	IN	HTTP/1.1 302 Found Date: Wed, 30 Oct 2024 07:46:27 GMT Content-Type: text/html;charset=utf-8 Content-Length: 0 Connection: close X-Frame-Options: SAMEORIGIN Referrer-Policy: origin Cache-Control: no-cache, no-store Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Set-Cookie: PF=rzKdP15zeTktpJEnKeJiir; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: pfidpaid=; Path=/; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; HttpOnly; SameSite=None Location: https://all.accor.com/enroll-loyalty/check-authent.html?appId=all.accor&error_description=Authentication+is+required.&state=f3560ed2a8c46af4199ef8&error=login_required#. Strict-Transport-Security: max-age=31536000; includeSubDomains Set-Cookie: nlbi_2545443_2409386=KQ4PXT8ThySMkp7Cfgr57wAAAAC8n1r1/3YJSkZts8tTePag; HttpOnly; path=/ X-CDN: Imperva X-Iinfo: 58-22787547-22787631 NNNN CT(153 160 0) RT(1730274386277 370) q(0 0 3 -1) r(5 5) U5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49813	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:26 UTC	4327	OUT	GET /scripts/main-footer-light.js HTTP/1.1 Host: all.accor.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=uXhrmD2Na/K1uglc4DSccWmUi3lwT6U0aN5NKqvcu8d5WGWybG4+Fjgl4ne6nVjifX1jzgyPIuRTBhS6nanmMOLamS/KiojPrxeLcFng8UzPO+81sa87bs4RFhGAg5SdnTRio+RJdn41ZezkVQzm+QQNKVTMJBE8fIzHUqlLtmYsp4GqzAo9Tqkn29+6s06cnyhW9Bg2AjaE3z+uY1Kha+K1N+xGE1wxY+ov1hMjJJFJQKo0Zzr8yVUmc0uGx6VyOI/GCYB98MMi2baM/noo1d0GCT/eTJnamWBVosFVl6rGjGRpxA8WWwcog7Ny/HlQVp6w8cTkKFTg/8KjIPnCBapACqcVA8DvW2Oym2gj1AtBv4YYfUMq3TEu4mXRkOJJVmAh7NCUHwLhEc4aXJBIqbW6JkrW0slp4+M4RmDR1e+A3GrFYXelb56QL3DRn/v55w+TZWXTMoZhYCD+Z9T66/ [TRUNCATED] If-Modified-Since: Mon, 28 Oct 2024 11:00:52 GMT
2024-10-30 07:46:27 UTC	629	IN	HTTP/1.1 304 Not Modified Age: 161134 Cache-control: public, max-age=3600, stale-while-revalidate=21600 Date: Wed, 30 Oct 2024 07:46:26 GMT Last-Modified: Mon, 28 Oct 2024 11:00:52 GMT P3P: CP="NO P3P POLICY" Referrer-Policy: origin Server: ECAcc (lhd/35D0) Strict-Transport-Security: max-age=15552000 Strict-Transport-Security: max-age=15552000 Vary: Accept-Encoding X-Accor-asset: ecom X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Clacks-Overhead: GNU Terry Pratchett X-Iinfo: 17-174814289-174805022 pNNy RT(1730113251974 9) q(0 0 0 0) r(1 1) U24 X-XSS-Protection: 1; mode=block Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49812	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:26 UTC	4353	OUT	GET /a/content/sling/servlets/ace/getposcookies?siteCode=all&languageCodeFromPage=en&pointOfSaleCodeFromPage= HTTP/1.1 Host: all.accor.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=uXhrmD2Na/K1uglc4DSccWmUi3lwT6U0aN5NKqvcu8d5WGWybG4+Fjgl4ne6nVjifX1jzgyPIuRTBhS6nanmMOLamS/KiojPrxeLcFng8UzPO+81sa87bs4RFhGAg5SdnTRio+RJdn41ZezkVQzm+QQNKVTMJBE8fIzHUqlLtmYsp4GqzAo9Tqkn29+6s06cnyhW9Bg2AjaE3z+uY1Kha+K1N+xGE1wxY+ov1hMjJJFJQKo0Zzr8yVUmc0uGx6VyOI/GCYB98MMi2baM/noo1d0GCT/eTJnamWBVosFVl6rGjGRpxA8WWwcog7Ny/HlQVp6w8cTkKFTg/8KjIPnCBapACqcVA8DvW2Oym2gj1AtBv4YYfUMq3TEu4mXRkOJJVmAh7NCUHwLhEc4aXJBIqbW6JkrW0slp4+M4RmDR1e+A3GrFYXelb56QL3DRn/v55w+TZWXTMoZhYCD+Z9T66/ [TRUNCATED]
2024-10-30 07:46:27 UTC	602	IN	HTTP/1.1 200 OK Accept-Ranges: bytes cache-control: no-cache, no-store, private Date: Wed, 30 Oct 2024 07:46:26 GMT server: MF 8700 S - Dyna-VT - Stage V All-in-One Strict-Transport-Security: max-age=31557600 X-Cache: MISS X-CDN: Imperva X-CDN-Forward: EdgeCast X-Content-Type-Options: nosniff x-frame-options: SAMEORIGIN x-frame-options: SAMEORIGIN X-Iinfo: 16-732447-732448 SNNy RT(1730274383987 2213) q(0 0 0 -1) r(0 0) U24 X-Served-By: cache-ams21043-AMS x-sky-isauth: 0 X-Timer: S1730274387.949664,VS0,VS0,VE15 x-vhost: prod-allcom-publish Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49817	104.18.86.42	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:27 UTC	555	OUT	GET /scripttemplates/202409.2.0/otBannerSdk.js HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://all.accor.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 07:46:27 UTC	859	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 07:46:27 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-MD5: uGd5VTJp/PFmoOURmUW/IQ== Last-Modified: Mon, 28 Oct 2024 06:29:30 GMT x-ms-request-id: ec98eb99-d01e-00e0-4b63-297502000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 82043 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8da9caa7491ae993-DFW
2024-10-30 07:46:27 UTC	510	IN	Data Raw: 37 63 34 35 0d 0a 2f 2a 2a 20 0a 20 2a 20 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 0a 20 2a 20 76 32 30 32 34 30 39 2e 32 2e 30 0a 20 2a 20 62 79 20 4f 6e 65 54 72 75 73 74 20 4c 4c 43 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 44 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 28 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6f 20 69 6e Data Ascii: 7c45/** * onetrust-banner-sdk * v202409.2.0 * by OneTrust LLC * Copyright 2024 */!function(){"use strict";var D=function(e,t){return(D=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var o in
2024-10-30 07:46:27 UTC	1369	IN	Data Raw: 75 6c 6c 3d 3d 3d 74 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 29 3a 28 6f 2e 70 72 6f 74 6f 74 79 70 65 3d 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 65 77 20 6f 29 7d 76 61 72 20 48 2c 52 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 52 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 3c 6e 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 72 29 26 26 28 65 5b 72 5d 3d 74 5b 72 5d 29 3b 72 65 74 75 72 6e 20 65 7d 29 2e 61 70 70 6c 79 28 74 68 Data Ascii: ull===t?Object.create(t):(o.prototype=t.prototype,new o)}var H,R=function(){return(R=Object.assign\|\|function(e){for(var t,o=1,n=arguments.length;o<n;o++)for(var r in t=arguments[o])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(th
2024-10-30 07:46:27 UTC	1369	IN	Data Raw: 26 6c 2e 6c 61 62 65 6c 3c 61 5b 31 5d 29 6c 2e 6c 61 62 65 6c 3d 61 5b 31 5d 2c 61 3d 74 3b 65 6c 73 65 7b 69 66 28 21 28 61 26 26 6c 2e 6c 61 62 65 6c 3c 61 5b 32 5d 29 29 7b 61 5b 32 5d 26 26 6c 2e 6f 70 73 2e 70 6f 70 28 29 2c 6c 2e 74 72 79 73 2e 70 6f 70 28 29 3b 63 6f 6e 74 69 6e 75 65 7d 6c 2e 6c 61 62 65 6c 3d 61 5b 32 5d 2c 6c 2e 6f 70 73 2e 70 75 73 68 28 74 29 7d 7d 74 3d 72 2e 63 61 6c 6c 28 6e 2c 6c 29 7d 63 61 74 63 68 28 65 29 7b 74 3d 5b 36 2c 65 5d 2c 73 3d 30 7d 66 69 6e 61 6c 6c 79 7b 69 3d 61 3d 30 7d 69 66 28 35 26 74 5b 30 5d 29 74 68 72 6f 77 20 74 5b 31 5d 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 74 5b 30 5d 3f 74 5b 31 5d 3a 76 6f 69 64 20 30 2c 64 6f 6e 65 3a 21 30 7d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 71 28 29 7b 66 6f 72 28 Data Ascii: &l.label<a[1])l.label=a[1],a=t;else{if(!(a&&l.label<a[2])){a[2]&&l.ops.pop(),l.trys.pop();continue}l.label=a[2],l.ops.push(t)}}t=r.call(n,l)}catch(e){t=[6,e],s=0}finally{i=a=0}if(5&t[0])throw t[1];return{value:t[0]?t[1]:void 0,done:!0}}}}function q(){for(
2024-10-30 07:46:27 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 29 29 7b 76 61 72 20 6f 3d 65 2e 74 68 65 6e 3b 69 66 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 4b 29 72 65 74 75 72 6e 20 74 2e 5f 73 74 61 74 65 3d 33 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 76 6f 69 64 20 58 28 74 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6f 29 72 65 74 75 72 6e 20 76 6f 69 64 20 5a 28 28 6e 3d 6f 2c 72 3d 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 61 70 70 6c 79 28 72 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 74 29 7d 74 2e 5f 73 74 61 74 65 3d 31 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 58 28 74 29 7d 63 61 74 63 68 28 65 29 7b 4a 28 74 2c 65 29 7d 76 61 72 20 6e 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 4a 28 65 2c 74 29 7b 65 2e 5f 73 74 61 74 65 3d 32 2c 65 2e 5f Data Ascii: nction"==typeof e)){var o=e.then;if(e instanceof K)return t._state=3,t._value=e,void X(t);if("function"==typeof o)return void Z((n=o,r=e,function(){n.apply(r,arguments)}),t)}t._state=1,t._value=e,X(t)}catch(e){J(t,e)}var n,r}function J(e,t){e._state=2,e._
2024-10-30 07:46:27 UTC	1369	IN	Data Raw: 66 20 65 29 29 7b 76 61 72 20 6e 3d 65 2e 74 68 65 6e 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 76 6f 69 64 20 6e 2e 63 61 6c 6c 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 28 6f 2c 65 29 7d 2c 69 29 7d 73 5b 6f 5d 3d 65 2c 30 3d 3d 2d 2d 61 26 26 72 28 73 29 7d 63 61 74 63 68 28 65 29 7b 69 28 65 29 7d 7d 28 65 2c 73 5b 65 5d 29 7d 29 7d 2c 4b 2e 72 65 73 6f 6c 76 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 4b 3f 74 3a 6e 65 77 20 4b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 74 29 7d 29 7d 2c 4b 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 Data Ascii: f e)){var n=e.then;if("function"==typeof n)return void n.call(e,function(e){t(o,e)},i)}s[o]=e,0==--a&&r(s)}catch(e){i(e)}}(e,s[e])})},K.resolve=function(t){return t&&"object"==typeof t&&t.constructor===K?t:new K(function(e){e(t)})},K.reject=function(o){re
2024-10-30 07:46:27 UTC	1369	IN	Data Raw: 7c 7c 65 21 3d 65 26 26 73 21 3d 73 29 72 65 74 75 72 6e 21 30 3b 69 2b 2b 7d 7d 72 65 74 75 72 6e 21 31 7d 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 7d 2c 24 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 45 6e 64 73 57 69 74 68 50 6f 6c 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 64 73 57 69 74 68 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2c 22 65 6e 64 73 57 69 74 68 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 74 3e 74 68 69 73 2e 6c 65 6e 67 74 68 29 26 26 28 74 3d 74 68 69 73 2e 6c 65 6e 67 74 68 Data Ascii: \|\|e!=e&&s!=s)return!0;i++}}return!1},writable:!0,configurable:!0})},$.prototype.initEndsWithPoly=function(){String.prototype.endsWith\|\|Object.defineProperty(String.prototype,"endsWith",{value:function(e,t){return(void 0===t\|\|t>this.length)&&(t=this.length
2024-10-30 07:46:27 UTC	1369	IN	Data Raw: 7d 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 7d 2c 24 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 41 72 72 61 79 46 69 6c 6c 50 6f 6c 79 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2c 22 66 69 6c 6c 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 74 68 69 73 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 74 68 69 73 20 69 73 20 6e 75 6c 6c 20 6f 72 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 3b 66 6f 72 28 76 61 72 20 74 3d 4f 62 6a 65 63 74 28 74 68 69 73 29 2c 6f 3d 74 Data Ascii: },writable:!0,configurable:!0})},$.prototype.initArrayFillPolyfill=function(){Array.prototype.fill\|\|Object.defineProperty(Array.prototype,"fill",{value:function(e){if(null==this)throw new TypeError("this is null or not defined");for(var t=Object(this),o=t
2024-10-30 07:46:27 UTC	1369	IN	Data Raw: 65 5b 65 2e 42 61 6e 6e 65 72 53 61 76 65 53 65 74 74 69 6e 67 73 3d 35 5d 3d 22 42 61 6e 6e 65 72 53 61 76 65 53 65 74 74 69 6e 67 73 22 2c 65 5b 65 2e 43 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 69 6e 67 42 75 74 74 6f 6e 3d 36 5d 3d 22 43 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 69 6e 67 42 75 74 74 6f 6e 22 2c 28 65 3d 74 65 3d 74 65 7c 7c 7b 7d 29 5b 65 2e 42 61 6e 6e 65 72 3d 31 5d 3d 22 42 61 6e 6e 65 72 22 2c 65 5b 65 2e 50 43 3d 32 5d 3d 22 50 43 22 2c 65 5b 65 2e 41 50 49 3d 33 5d 3d 22 41 50 49 22 2c 28 65 3d 6f 65 3d 6f 65 7c 7c 7b 7d 29 2e 41 63 63 65 70 74 41 6c 6c 3d 22 41 63 63 65 70 74 41 6c 6c 22 2c 65 2e 52 65 6a 65 63 74 41 6c 6c 3d 22 52 65 6a 65 63 74 41 6c 6c 22 2c 65 2e 55 70 64 61 74 65 43 6f Data Ascii: e[e.BannerSaveSettings=5]="BannerSaveSettings",e[e.ContinueWithoutAcceptingButton=6]="ContinueWithoutAcceptingButton",(e=te=te\|\|{})[e.Banner=1]="Banner",e[e.PC=2]="PC",e[e.API=3]="API",(e=oe=oe\|\|{}).AcceptAll="AcceptAll",e.RejectAll="RejectAll",e.UpdateCo
2024-10-30 07:46:27 UTC	1369	IN	Data Raw: 5b 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 41 6c 6c 6f 77 20 41 6c 6c 22 5d 3d 34 5d 3d 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 41 6c 6c 6f 77 20 41 6c 6c 22 2c 65 5b 65 5b 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 52 65 6a 65 63 74 20 41 6c 6c 22 5d 3d 35 5d 3d 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 52 65 6a 65 63 74 20 41 6c 6c 22 2c 65 5b 65 5b 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 43 6f 6e 66 69 72 6d 22 5d 3d 36 5d 3d 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 43 6f 6e 66 69 72 6d 22 2c 65 5b 65 5b 22 47 50 43 20 76 61 6c 75 65 20 63 68 61 6e 67 65 64 22 5d 3d 37 5d 3d 22 47 50 43 20 76 61 6c 75 65 20 63 68 61 6e 67 Data Ascii: ["Preference Center - Allow All"]=4]="Preference Center - Allow All",e[e["Preference Center - Reject All"]=5]="Preference Center - Reject All",e[e["Preference Center - Confirm"]=6]="Preference Center - Confirm",e[e["GPC value changed"]=7]="GPC value chang
2024-10-30 07:46:27 UTC	1369	IN	Data Raw: 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 3d 22 61 64 5f 70 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 2c 65 2e 72 65 67 69 6f 6e 3d 22 72 65 67 69 6f 6e 22 2c 65 2e 77 61 69 74 5f 66 6f 72 5f 75 70 64 61 74 65 3d 22 77 61 69 74 5f 66 6f 72 5f 75 70 64 61 74 65 22 2c 28 65 3d 49 65 3d 49 65 7c 7c 7b 7d 29 2e 67 72 61 6e 74 65 64 3d 22 67 72 61 6e 74 65 64 22 2c 65 2e 64 65 6e 69 65 64 3d 22 64 65 6e 69 65 64 22 2c 30 2c 28 65 3d 4c 65 3d 4c 65 7c 7c 7b 7d 29 2e 4f 42 4a 45 43 54 5f 54 4f 5f 4c 49 3d 22 4f 62 6a 65 63 74 54 6f 4c 49 22 2c 65 2e 4c 49 5f 41 43 54 49 56 45 5f 49 46 5f 4c 45 47 41 4c 5f 42 41 53 49 53 3d 22 4c 49 41 63 74 69 76 65 49 66 4c 65 67 61 6c 42 61 73 69 73 22 2c 28 65 3d 5f 65 3d 5f 65 7c 7c 7b 7d 29 2e 63 6f 6f 6b 69 65 73 3d 22 63 Data Ascii: rsonalization="ad_personalization",e.region="region",e.wait_for_update="wait_for_update",(e=Ie=Ie\|\|{}).granted="granted",e.denied="denied",0,(e=Le=Le\|\|{}).OBJECT_TO_LI="ObjectToLI",e.LI_ACTIVE_IF_LEGAL_BASIS="LIActiveIfLegalBasis",(e=_e=_e\|\|{}).cookies="c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49816	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:27 UTC	5034	OUT	GET /a/en/new-app-offer/app-download.html?source_caller=bulk&af_qr=true&shortlink=5m1nc8of&c=20241013_ALL_AppBonusingMobileLp&af_ad=QR_code_20241013_ALL_AppBonusingMobileLp&pid=QR_code&deep_link_value=accor%3A%2F%2Fsearch%2Foffer%3Fpage_id%3Dddc8e830-2fc5-4492-ae7f-a63574b202f4&af_adset=EN HTTP/1.1 Host: all.accor.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=uXhrmD2Na/K1uglc4DSccWmUi3lwT6U0aN5NKqvcu8d5WGWybG4+Fjgl4ne6nVjifX1jzgyPIuRTBhS6nanmMOLamS/KiojPrxeLcFng8UzPO+81sa87bs4RFhGAg5SdnTRio+RJdn41ZezkVQzm+QQNKVTMJBE8fIzHUqlLtmYsp4GqzAo9Tqkn29+6s06cnyhW9Bg2AjaE3z+uY1Kha+K1N+xGE1wxY+ov1hMjJJFJQKo0Zzr8yVUmc0uGx6VyOI/GCYB98MMi2baM/noo1d0GCT/eTJnamWBVosFVl6rGjGRpxA8WWwcog7Ny/HlQVp6w8cTkKFTg/8KjIPnCBapACqcVA8DvW2Oym2gj1AtBv4YYfUMq3TEu4mXRkOJJVmAh7NCUHwLhEc4aXJBIqbW6JkrW0slp4+M4RmDR1e+A3GrFYXelb56QL3DRn/v55w+TZWXTMoZhYCD+Z9T66/ [TRUNCATED]
2024-10-30 07:46:27 UTC	831	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 cache-control: public, max-age=14400, stale-if-error=3600, stale-while-revalidate=600 Content-Type: text/html;charset=utf-8 Date: Wed, 30 Oct 2024 07:46:27 GMT expires: Wed, 30 Oct 2024 07:51:27 GMT server: MF 8700 S - Dyna-VT - Stage V All-in-One Set-Cookie: incap_ses_965_3039981=q99Yd2XUwRILYtlqj15kDVLkIWcAAAAA3wW8EuVmSTOVbo8SRcNLVg==; path=/ Strict-Transport-Security: max-age=31557600 Vary: Accept-Encoding X-Cache: MISS X-CDN: Imperva X-CDN-Forward: EdgeCast X-Content-Type-Options: nosniff x-frame-options: SAMEORIGIN X-Iinfo: 11-36112333-36112334 NNNN CT(6 6 0) RT(1730274386485 3) q(0 0 1 0) r(3 3) U24 X-Served-By: cache-ams2100128-AMS X-Timer: S1730274387.470581,VS0,VS0,VE244 x-vhost: prod-allcom-publish Transfer-Encoding: chunked Connection: close
2024-10-30 07:46:27 UTC	6	IN	Data Raw: 34 30 30 30 0d 0a Data Ascii: 4000
2024-10-30 07:46:27 UTC	15565	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 20 20 20 20 3c 68 65 61 64 3e 0a 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 41 70 70 20 44 6f 77 6e 6c 6f 61 64 3c 2f 74 69 74 6c 65 3e 0a 0a 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 65 6d 70 6c 61 74 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 66 6f 2d 73 65 72 76 69 63 65 2d 74 65 6d 70 6c 61 74 65 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 0a 20 20 20 20 Data Ascii: <!DOCTYPE HTML><html lang="en"> <head> <meta charset="UTF-8"/> <title>App Download</title> <meta name="template" content="info-service-template"/> <meta name="viewport" content="width=device-width, initial-scale=1"/>
2024-10-30 07:46:27 UTC	819	IN	Data Raw: 72 67 65 72 2d 6d 65 6e 75 20 61 68 2d 68 65 61 64 65 72 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 62 75 72 67 65 72 6d 65 6e 75 22 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 20 33 72 65 6d 3b 20 68 65 69 67 68 74 3a 20 32 2e 36 72 65 6d 3b 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 61 68 2d 62 75 72 67 65 72 2d 6d 65 6e 75 5f 5f 69 63 6f 6e 20 61 68 2d 62 75 72 67 65 72 2d 6d 65 6e 75 5f 5f 69 63 6f 6e 2d 2d 6f 70 65 6e 22 3e 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 61 68 2d 62 75 72 67 65 72 2d 6d 65 6e 75 5f 5f 6c 65 74 74 65 72 73 22 3e 4d 65 6e 75 3c 2f 73 70 61 6e 3e 3c 2f 62 75 74 74 6f 6e 3e 3c 64 69 76 20 69 64 3d 22 61 68 2d 6d 65 6e 75 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 73 65 6c 65 63 74 69 6f 6e 22 20 63 6c 61 73 73 3d 22 61 Data Ascii: rger-menu ah-header-navigation__burgermenu" style="width: 3rem; height: 2.6rem;"><span class="ah-burger-menu__icon ah-burger-menu__icon--open"></span><span class="ah-burger-menu__letters">Menu</span></button><div id="ah-menu-navigation-selection" class="a
2024-10-30 07:46:27 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-30 07:46:27 UTC	6	IN	Data Raw: 34 30 30 30 0d 0a Data Ascii: 4000
2024-10-30 07:46:27 UTC	16377	IN	Data Raw: 3d 22 62 75 74 74 6f 6e 22 20 64 61 74 61 2d 74 72 61 63 6b 69 6e 67 3d 22 22 20 63 6c 61 73 73 3d 22 61 68 2d 6c 69 6e 6b 2d 62 75 74 74 6f 6e 20 61 68 2d 62 61 72 5f 5f 62 75 74 74 6f 6e 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 22 3e 20 42 61 63 6b 20 3c 2f 73 70 61 6e 3e 3c 2f 62 75 74 74 6f 6e 3e 3c 21 2d 2d 2d 2d 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 61 68 2d 6d 65 67 61 2d 6d 65 6e 75 5f 5f 63 6f 6e 74 65 6e 74 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 61 68 2d 6d 65 67 61 2d 6d 65 6e 75 5f 5f 6d 65 6e 75 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 61 68 2d 6d 65 67 61 2d 6d 65 6e 75 5f 5f 63 6f 6c 75 6d 6e 20 61 68 2d 6d 65 67 61 2d 6d 65 6e 75 5f 5f 63 6f 6c 75 6d 6e 2d 2d 6c 61 72 67 65 22 3e 3c 21 2d 2d 2d 2d 3e 3c 75 6c 20 Data Ascii: ="button" data-tracking="" class="ah-link-button ah-bar__button"><span class=""> Back </span></button>...--></div><div class="ah-mega-menu__content"><div class="ah-mega-menu__menu"><div class="ah-mega-menu__column ah-mega-menu__column--large">...--><ul
2024-10-30 07:46:27 UTC	7	IN	Data Raw: 5f 5f 69 74 65 6d 22 Data Ascii: __item"
2024-10-30 07:46:27 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-30 07:46:27 UTC	6	IN	Data Raw: 34 30 30 30 0d 0a Data Ascii: 4000
2024-10-30 07:46:27 UTC	1446	IN	Data Raw: 3e 3c 61 20 69 64 3d 22 69 74 65 6d 32 2d 70 61 6e 65 6c 2d 34 65 30 32 30 63 64 36 2d 38 39 34 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 65 65 74 69 6e 67 73 2e 61 63 63 6f 72 2e 63 6f 6d 2f 6f 75 72 2d 65 76 65 6e 74 2d 74 79 70 65 73 2f 73 65 6d 69 6e 61 72 2f 69 6e 64 65 78 2e 65 6e 2e 73 68 74 6d 6c 22 20 64 61 74 61 2d 74 72 61 63 6b 69 6e 67 3d 22 22 20 63 6c 61 73 73 3d 22 61 68 2d 6c 69 6e 6b 2d 62 75 74 74 6f 6e 20 61 68 2d 6c 69 6e 6b 2d 62 75 74 74 6f 6e 20 61 68 2d 6c 69 6e 6b 2d 62 75 74 74 6f 6e 2d 2d 6d 65 64 69 75 6d 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 61 68 2d 6d 65 6e 75 2d 69 74 65 6d 5f 5f 6c 61 62 65 6c 22 3e 53 65 6d 69 6e 61 72 73 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 20 63 6c 61 73 73 3d 22 61 Data Ascii: ><a id="item2-panel-4e020cd6-894" href="https://meetings.accor.com/our-event-types/seminar/index.en.shtml" data-tracking="" class="ah-link-button ah-link-button ah-link-button--medium"><span class="ah-menu-item__label">Seminars</span></a></li><li class="a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49819	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:27 UTC	4910	OUT	GET /enroll-loyalty/check-authent.html?appId=all.accor&error_description=Authentication+is+required.&state=f3560ed2a8c46af4199ef8&error=login_required HTTP/1.1 Host: all.accor.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://all.accor.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=uXhrmD2Na/K1uglc4DSccWmUi3lwT6U0aN5NKqvcu8d5WGWybG4+Fjgl4ne6nVjifX1jzgyPIuRTBhS6nanmMOLamS/KiojPrxeLcFng8UzPO+81sa87bs4RFhGAg5SdnTRio+RJdn41ZezkVQzm+QQNKVTMJBE8fIzHUqlLtmYsp4GqzAo9Tqkn29+6s06cnyhW9Bg2AjaE3z+uY1Kha+K1N+xGE1wxY+ov1hMjJJFJQKo0Zzr8yVUmc0uGx6VyOI/GCYB98MMi2baM/noo1d0GCT/eTJnamWBVosFVl6rGjGRpxA8WWwcog7Ny/HlQVp6w8cTkKFTg/8KjIPnCBapACqcVA8DvW2Oym2gj1AtBv4YYfUMq3TEu4mXRkOJJVmAh7NCUHwLhEc4aXJBIqbW6JkrW0slp4+M4RmDR1e+A3GrFYXelb56QL3DRn/v55w+TZWXTMoZhYCD+Z9T66/ [TRUNCATED]
2024-10-30 07:46:27 UTC	798	IN	HTTP/1.1 200 OK Age: 161136 Cache-control: private, max-age=3600, stale-while-revalidate=21600 Content-Security-Policy: frame-ancestors https://*.accor.com Content-Type: text/html; charset=utf-8 Date: Wed, 30 Oct 2024 07:46:27 GMT Last-Modified: Mon, 28 Oct 2024 11:00:51 GMT P3P: CP="NO P3P POLICY" Referrer-Policy: origin Server: ECAcc (lhd/35DA) Strict-Transport-Security: max-age=15552000 Strict-Transport-Security: max-age=15552000 Vary: Accept-Encoding X-Accor-asset: ecom X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Clacks-Overhead: GNU Terry Pratchett X-Iinfo: 14-82680703-82658554 pNNN RT(1730113251484 3) q(0 0 0 -1) r(1 1) U24 X-OneAgent-JS-Injection: true X-ruxit-JS-Agent: true X-XSS-Protection: 1; mode=block Content-Length: 2649 Connection: close
2024-10-30 07:46:27 UTC	2649	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 2f 72 75 78 69 74 61 67 65 6e 74 6a 73 5f 49 43 41 37 4e 56 66 68 71 72 75 78 5f 31 30 32 38 35 32 34 30 33 30 37 31 30 31 34 30 37 2e 6a 73 22 20 64 61 74 61 2d 64 74 63 6f 6e 66 69 67 3d 22 72 69 64 3d 52 49 44 5f 2d 31 38 36 39 34 30 37 32 39 35 7c 72 70 69 64 3d 2d 38 39 36 37 36 37 35 38 33 7c 64 6f 6d 61 69 6e 3d 61 63 63 6f 72 2e 63 6f 6d 7c 72 65 70 6f 72 74 55 72 6c 3d 2f 72 62 5f 38 30 62 65 39 36 33 66 2d 61 38 35 39 2d 34 38 30 38 2d 39 62 32 61 2d 63 65 62 38 64 34 34 64 66 37 33 38 7c 61 70 70 3d 30 64 61 65 32 37 Data Ascii: <!doctype html><html lang="en"> <head><script type="text/javascript" src="/ruxitagentjs_ICA7NVfhqrux_10285240307101407.js" data-dtconfig="rid=RID_-1869407295\|rpid=-896767583\|domain=accor.com\|reportUrl=/rb_80be963f-a859-4808-9b2a-ceb8d44df738\|app=0dae27

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49818	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:27 UTC	4738	OUT	GET /_Incapsula_Resource?SWKMTFSR=1&e=0.7699246514200098 HTTP/1.1 Host: all.accor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://all.accor.com/a/en/new-app-offer.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=uXhrmD2Na/K1uglc4DSccWmUi3lwT6U0aN5NKqvcu8d5WGWybG4+Fjgl4ne6nVjifX1jzgyPIuRTBhS6nanmMOLamS/KiojPrxeLcFng8UzPO+81sa87bs4RFhGAg5SdnTRio+RJdn41ZezkVQzm+QQNKVTMJBE8fIzHUqlLtmYsp4GqzAo9Tqkn29+6s06cnyhW9Bg2AjaE3z+uY1Kha+K1N+xGE1wxY+ov1hMjJJFJQKo0Zzr8yVUmc0uGx6VyOI/GCYB98MMi2baM/noo1d0GCT/eTJnamWBVosFVl6rGjGRpxA8WWwcog7Ny/HlQVp6w8cTkKFTg/8KjIPnCBapACqcVA8DvW2Oym2gj1AtBv4YYfUMq3TEu4mXRkOJJVmAh7NCUHwLhEc4aXJBIqbW6JkrW0slp4+M4RmDR1e+A3GrFYXelb56QL3DRn/v55w+TZWXTMoZhYCD+Z9T66/ [TRUNCATED]
2024-10-30 07:46:27 UTC	253	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Content-Type: text/plain Date: Wed, 30 Oct 2024 07:46:27 GMT server: MF 8700 S - Dyna-VT - Stage V All-in-One X-CDN-Forward: EdgeCast X-Robots-Tag: noindex Content-Length: 1 Connection: close
2024-10-30 07:46:27 UTC	1	IN	Data Raw: 31 Data Ascii: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49821	35.240.103.94	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:27 UTC	1448	OUT	GET /referential/v1/best-visit/cookie-attribution HTTP/1.1 Host: api.accor.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: org=evy; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; OAU_all.accor=eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJhcHBfaWQiOiJhbGwuYWNjb3IiLCJzdGF0ZSI6ImYzNTYwZWQyYThjNDZhZjQxOTllZjgiLCJub25jZSI6IjIxZDBhMGU1ZWQ4YzU2NTZkZjI4ZjYiLCJyZWRpcmVjdF9zaXRlX3VyaSI6Imh0dHBzOi8vYWxsLmFjY29yLmNvbSIsInByb21wdCI6Im5vbmUiLCJleHAiOjE3MzAyNzYxODQsImlhdCI6MTczMDI3NDM4NH0.T264QRl7YWH19MgynN8-Xaq1G1flI3hkXf6P-98bxX9zquvQYl9l1yVvirNK7SO9IARz9C1cgTuaozOE3ITULDlEyLbPAquuYSLfESRfVzyb0HFEhbkdMISJ5nmsUq2QiYFJRgGSRoU7UjHDLoo8646JuA_ZnO1550QeNYS8xuV9EoK4B4oFEgezMDX9rf6Or31D63HUbbL51dSeHY26E7TwHYN6SeodaZL7NeaUEJN-G93F7ktNq824Z5C11HTL2mkWUM6Aaz0nua4XKjGekRh9_QQpoOau3wMyp586RfBxn38C0agFPUi7WA_4FusMHRg-90n9XBuE3e_0KE46Uw; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjo [TRUNCATED]
2024-10-30 07:46:27 UTC	181	IN	HTTP/1.1 401 Full authentication is required to access this resource Date: Wed, 30 Oct 2024 07:46:27 GMT Content-Type: application/json Content-Length: 119 Connection: close
2024-10-30 07:46:27 UTC	119	IN	Data Raw: 0a 7b 22 74 69 74 6c 65 22 3a 22 55 6e 61 75 74 68 6f 72 69 7a 65 64 22 2c 22 73 74 61 74 75 73 22 3a 34 30 31 2c 22 64 65 74 61 69 6c 22 3a 22 46 75 6c 6c 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 69 73 20 72 65 71 75 69 72 65 64 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 22 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: {"title":"Unauthorized","status":401,"detail":"Full authentication is required to access this resource."}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49822	35.240.103.94	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:27 UTC	1455	OUT	GET /referential/v1/pos/currencies?groupByContinent=true HTTP/1.1 Host: api.accor.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: org=evy; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; OAU_all.accor=eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJhcHBfaWQiOiJhbGwuYWNjb3IiLCJzdGF0ZSI6ImYzNTYwZWQyYThjNDZhZjQxOTllZjgiLCJub25jZSI6IjIxZDBhMGU1ZWQ4YzU2NTZkZjI4ZjYiLCJyZWRpcmVjdF9zaXRlX3VyaSI6Imh0dHBzOi8vYWxsLmFjY29yLmNvbSIsInByb21wdCI6Im5vbmUiLCJleHAiOjE3MzAyNzYxODQsImlhdCI6MTczMDI3NDM4NH0.T264QRl7YWH19MgynN8-Xaq1G1flI3hkXf6P-98bxX9zquvQYl9l1yVvirNK7SO9IARz9C1cgTuaozOE3ITULDlEyLbPAquuYSLfESRfVzyb0HFEhbkdMISJ5nmsUq2QiYFJRgGSRoU7UjHDLoo8646JuA_ZnO1550QeNYS8xuV9EoK4B4oFEgezMDX9rf6Or31D63HUbbL51dSeHY26E7TwHYN6SeodaZL7NeaUEJN-G93F7ktNq824Z5C11HTL2mkWUM6Aaz0nua4XKjGekRh9_QQpoOau3wMyp586RfBxn38C0agFPUi7WA_4FusMHRg-90n9XBuE3e_0KE46Uw; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjo [TRUNCATED]
2024-10-30 07:46:27 UTC	181	IN	HTTP/1.1 401 Full authentication is required to access this resource Date: Wed, 30 Oct 2024 07:46:27 GMT Content-Type: application/json Content-Length: 119 Connection: close
2024-10-30 07:46:27 UTC	119	IN	Data Raw: 0a 7b 22 74 69 74 6c 65 22 3a 22 55 6e 61 75 74 68 6f 72 69 7a 65 64 22 2c 22 73 74 61 74 75 73 22 3a 34 30 31 2c 22 64 65 74 61 69 6c 22 3a 22 46 75 6c 6c 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 69 73 20 72 65 71 75 69 72 65 64 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 22 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: {"title":"Unauthorized","status":401,"detail":"Full authentication is required to access this resource."}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49823	35.240.103.94	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:27 UTC	1445	OUT	GET /referential/v1/pos/countries?siteCode=all HTTP/1.1 Host: api.accor.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: org=evy; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; OAU_all.accor=eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJhcHBfaWQiOiJhbGwuYWNjb3IiLCJzdGF0ZSI6ImYzNTYwZWQyYThjNDZhZjQxOTllZjgiLCJub25jZSI6IjIxZDBhMGU1ZWQ4YzU2NTZkZjI4ZjYiLCJyZWRpcmVjdF9zaXRlX3VyaSI6Imh0dHBzOi8vYWxsLmFjY29yLmNvbSIsInByb21wdCI6Im5vbmUiLCJleHAiOjE3MzAyNzYxODQsImlhdCI6MTczMDI3NDM4NH0.T264QRl7YWH19MgynN8-Xaq1G1flI3hkXf6P-98bxX9zquvQYl9l1yVvirNK7SO9IARz9C1cgTuaozOE3ITULDlEyLbPAquuYSLfESRfVzyb0HFEhbkdMISJ5nmsUq2QiYFJRgGSRoU7UjHDLoo8646JuA_ZnO1550QeNYS8xuV9EoK4B4oFEgezMDX9rf6Or31D63HUbbL51dSeHY26E7TwHYN6SeodaZL7NeaUEJN-G93F7ktNq824Z5C11HTL2mkWUM6Aaz0nua4XKjGekRh9_QQpoOau3wMyp586RfBxn38C0agFPUi7WA_4FusMHRg-90n9XBuE3e_0KE46Uw; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjo [TRUNCATED]
2024-10-30 07:46:27 UTC	181	IN	HTTP/1.1 401 Full authentication is required to access this resource Date: Wed, 30 Oct 2024 07:46:27 GMT Content-Type: application/json Content-Length: 119 Connection: close
2024-10-30 07:46:27 UTC	119	IN	Data Raw: 0a 7b 22 74 69 74 6c 65 22 3a 22 55 6e 61 75 74 68 6f 72 69 7a 65 64 22 2c 22 73 74 61 74 75 73 22 3a 34 30 31 2c 22 64 65 74 61 69 6c 22 3a 22 46 75 6c 6c 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 69 73 20 72 65 71 75 69 72 65 64 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 22 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: {"title":"Unauthorized","status":401,"detail":"Full authentication is required to access this resource."}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49824	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:27 UTC	4676	OUT	GET /assets/fonts/roboto/medium/roboto-medium.woff2 HTTP/1.1 Host: all.accor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://all.accor.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://all.accor.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=uXhrmD2Na/K1uglc4DSccWmUi3lwT6U0aN5NKqvcu8d5WGWybG4+Fjgl4ne6nVjifX1jzgyPIuRTBhS6nanmMOLamS/KiojPrxeLcFng8UzPO+81sa87bs4RFhGAg5SdnTRio+RJdn41ZezkVQzm+QQNKVTMJBE8fIzHUqlLtmYsp4GqzAo9Tqkn29+6s06cnyhW9Bg2AjaE3z+uY1Kha+K1N+xGE1wxY+ov1hMjJJFJQKo0Zzr8yVUmc0uGx6VyOI/GCYB98MMi2baM/noo1d0GCT/eTJnamWBVosFVl6rGjGRpxA8WWwcog7Ny/HlQVp6w8cTkKFTg/8KjIPnCBapACqcVA8DvW2Oym2gj1AtBv4YYfUMq3TEu4mXRkOJJVmAh7NCUHwLhEc4aXJBIqbW6JkrW0slp4+M4RmDR1e+A3GrFYXelb56QL3DRn/v55w+TZWXTMoZhYCD+Z9T66/ [TRUNCATED]
2024-10-30 07:46:28 UTC	835	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: authorization, content-type, x-requested-with Access-Control-Allow-Methods: PUT, GET, POST, DELETE, OPTIONS Access-Control-Allow-Origin: * Age: 161137 Cache-control: public, max-age=3600, stale-while-revalidate=21600 Content-Type: font/woff2 Date: Wed, 30 Oct 2024 07:46:27 GMT Last-Modified: Wed, 16 Oct 2024 09:00:04 GMT P3P: CP="NO P3P POLICY" Referrer-Policy: origin Server: ECAcc (lhd/35CC) Strict-Transport-Security: max-age=15552000 Timing-Allow-Origin: * X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Clacks-Overhead: GNU Terry Pratchett X-Iinfo: 14-68638889-68634949 pNNy RT(1730113249173 3) q(0 0 0 0) r(1 1) U24 X-XSS-Protection: 1; mode=block Content-Length: 66792 Connection: close
2024-10-30 07:46:28 UTC	16383	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 04 e8 00 12 00 00 00 02 c3 f4 00 01 04 7d 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 7e 1b 81 cb 24 1c ac 4c 06 60 00 89 2e 08 5c 09 83 3c 11 0c 0a 87 ce 70 86 ee 40 0b 94 1e 00 01 36 02 24 03 a8 38 04 20 05 8a 07 07 e4 66 0c 82 53 5b 6d 88 92 0f e5 c6 fe 86 38 26 58 cb 92 8a 8a 74 1b 02 af 34 db cc ac 7e ce 76 42 74 b2 b4 5c f9 a6 df 16 0c ef ff 39 f2 05 71 f7 9d 8a dc ad 0a 59 a8 bc 36 d9 ff ff ff ff ff ff ff ff d6 64 21 53 6b 76 05 b3 92 10 08 0b b0 1d 17 dc e2 72 c9 95 5c f9 94 07 15 f3 c1 23 06 34 a9 6d da d0 21 23 c6 be 59 94 06 0d c2 30 4e 11 11 cb dc a0 5d 45 8c 1e 2d da f5 d3 b4 91 01 ed 16 3b 19 d5 20 da a0 0c 7b ab 3a b8 e7 75 b3 9e 0f 88 75 3f 56 cb ea 4e ea 9a 29 Data Ascii: wOF2}?FFTM~$L`.\<p@6$8 fS[m8&Xt4~vBt\9qY6d!Skvr\#4m!#Y0N]E-; {:uu?VN)
2024-10-30 07:46:28 UTC	16383	IN	Data Raw: c5 cb 60 31 14 5e c0 3b 40 c2 9b c6 71 86 5e 5f 6a 01 70 56 85 0e 66 36 6c 2e 35 52 a5 d9 69 0e 86 02 e2 0f 61 02 86 b7 79 d3 6b c7 a9 80 40 41 df 41 16 7b 7f 3b 3d 81 0c cc f2 66 52 bf c1 1a 7d 1e 5b c0 d1 a0 95 f3 c0 42 b3 ec 23 0e ba 30 f7 20 c2 c4 d4 c6 b7 b7 24 ba ec ac d3 30 aa 9e 8c 82 f3 a9 bc a3 9f fc 0f d7 41 92 42 c5 d1 b4 f8 da e7 01 bb f9 bf 1e af 34 af 81 f7 41 22 d7 e6 63 ab 58 4b 87 6a c1 a8 ce 4a 07 dc 25 90 6d b2 09 db a8 31 60 12 7f 3c b0 a0 61 b0 9a 9b 62 2e db b9 4a cc 87 58 56 b3 73 d8 9b 45 da 63 77 76 27 84 4f d1 a6 a8 44 1d 5e e2 f8 c7 00 31 70 8c ab 70 d2 10 e9 48 31 29 db 39 8c 13 b0 2b 31 d4 76 04 64 08 8d 04 d6 2f 4a e7 8e 87 90 86 bc b4 51 03 ff 6c a2 a5 a3 03 71 c9 71 a9 c6 0e da 0e 58 48 4f 88 03 38 58 83 c5 af d3 79 96 66 Data Ascii: `1^;@q^_jpVf6l.5Riayk@AA{;=fR}[B#0 $0AB4A"cXKjJ%m1`<ab.JXVsEcwv'OD^1ppH1)9+1vd/JQlqqXHO8Xyf
2024-10-30 07:46:28 UTC	2	IN	Data Raw: 2e 24 Data Ascii: .$
2024-10-30 07:46:28 UTC	16383	IN	Data Raw: aa 15 53 f8 fe e6 83 cc db de e6 52 46 57 61 bd e6 84 04 64 98 bd a7 de 52 fc 50 47 a9 49 83 9d 52 6b a9 59 d9 00 84 e9 0c 8c 98 c9 a8 16 8b a8 99 48 08 4c f8 a6 62 f3 20 6a 93 6e be 36 d6 eb 0f e8 e9 d7 13 15 28 58 7e 76 49 dd 09 58 25 ac 5b e6 fe 25 bd 65 f8 65 88 25 a4 32 e8 eb f3 f0 84 91 d1 c1 3e cb b8 0a 95 2d b9 a5 83 5b 15 58 0f 7d 03 c1 22 5e 05 9b cb 80 f6 2b 3e 9c 21 da 07 cb 86 b5 bd 18 3b a4 d4 8a 99 80 fa 43 72 9d df 7c f2 0f 9c fb d4 07 74 5a 92 8e a0 15 e8 38 4e 56 29 30 b0 05 56 b1 75 b5 63 26 f7 ff f8 32 2a b1 1b 36 3c 80 3f 7c 9f 19 21 27 ed 26 b0 ae 56 1c 77 a0 1b dd 0d 22 c1 3e 74 1f b8 08 d1 d6 16 22 0a 80 e6 15 d0 64 58 e3 8b 99 03 5a c3 c8 0b 10 93 9d bf 13 07 a9 ad c9 c3 fd a6 29 ea 29 f2 72 a9 21 f5 0f 9b 72 18 a8 0a 1a 7e 46 bf Data Ascii: SRFWadRPGIRkYHLb jn6(X~vIX%[%ee%2>-[X}"^+>!;Cr\|tZ8NV)0Vuc&2*6<?\|!'&Vw">t"dXZ))r!r~F
2024-10-30 07:46:28 UTC	16383	IN	Data Raw: 18 f2 a3 aa 8d 0e af c7 d3 f7 87 1b be 3b f0 e2 33 6f 1f c8 2e a9 1f 20 c3 1a 36 bc 03 5c 52 1d b4 e8 b6 45 ba 09 ce b6 f8 a5 86 8d e2 6c d8 17 18 30 0f 38 0c d8 e3 79 a2 f3 f0 c4 16 f0 37 3e 01 8f c1 85 25 30 51 1b 65 36 12 cc 19 f9 76 4d c5 0d 18 ae cb a5 e9 ba 5c 5a c8 d4 a5 1e 61 eb e4 3a 27 c1 81 e0 f2 74 fa 94 06 2c c6 5c a8 33 3e 36 49 18 24 13 a7 b5 c6 b5 aa ea 7d 9f aa c0 4a cf 47 79 6d 34 7e e8 6a 75 60 7f a8 2d 76 31 4d 09 b7 fb e4 b6 70 38 69 10 49 83 28 d0 cf d8 c9 c3 39 f5 2f 8f 3e 8b 40 f1 27 86 c7 ec 94 26 e1 f8 1b ca fc b3 bb 31 5b c6 92 b9 e7 12 8c a0 48 cb da ee 5b a3 b4 b1 d7 0d 4f 04 57 45 4a 09 98 ed 52 5e 52 2b 05 92 6a 06 f5 1c 40 7d 70 9d 83 31 e9 cc 0b 82 56 0d a0 ff cb 9a f7 ec 9f e3 a6 ef 3d e9 b7 3c 6c 8c d8 0e 28 94 36 6c 67 Data Ascii: ;3o. 6\REl08y7>%0Qe6vM\Za:'t,\3>6I$}JGym4~ju`-v1Mp8iI(9/>@'&1[H[OWEJR^R+j@}p1V=<l(6lg
2024-10-30 07:46:28 UTC	1258	IN	Data Raw: 21 0e 90 61 8a 09 c6 18 61 88 14 03 ec 63 0f bb d8 41 82 6d f4 e1 36 19 22 da 39 fb 57 ac 36 6e 37 29 aa bc ec b2 d5 3a ea e7 12 3e 98 7a 3f ce 07 70 8f 25 7c 7b ff 40 c2 c1 39 d1 7a 17 c3 a8 2d bf b0 c3 b0 ea 3d d4 fe c9 88 b3 79 15 f2 cd f4 2f ae 22 10 24 0a ad 9b 20 42 60 70 04 4a 3b 21 86 c1 11 48 14 1a 83 83 ab 9b 24 c1 50 3a 49 81 46 d2 00 82 20 50 3a dd a9 b2 b9 00 87 e8 24 52 1d c6 98 0f c7 27 ad 10 0e 36 5a 04 8e 48 9e dd 0c 76 57 b6 ef 81 cf f6 47 00 d8 45 a9 c9 77 5b b0 f9 ce ac ed e1 d4 67 07 8f d6 bf a7 60 26 f0 e9 db 34 96 7b 08 7b 60 cf c2 20 48 1f 3d b1 53 77 fc 74 67 9f 3c 73 f6 03 9f 52 60 82 25 d0 85 c0 8d df e1 0b 6f 3a 13 bb 4a ab ac ca ab 42 c9 e4 39 ac 36 3f a8 39 51 32 4c 3e b2 00 56 20 58 5f 80 cf 00 00 80 9a 1c c0 e6 00 c0 00 4c Data Ascii: !aacAm6"9W6n7):>z?p%\|{@9z-=y/"$ B`pJ;!H$P:IF P:$R'6ZHvWGEw[g`&4{{` H=Swtg<sR`%o:JB96?9Q2L>V X_L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49826	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:28 UTC	5113	OUT	GET /a/etc.clientlibs/core/wcm/components/page/v2/page/clientlibs/site/skiptomaincontent.lc-696ce9a06faa733b225ffb8c05f16db9-lc.min.css HTTP/1.1 Host: all.accor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://all.accor.com/a/en/new-app-offer/app-download.html?source_caller=bulk&af_qr=true&shortlink=5m1nc8of&c=20241013_ALL_AppBonusingMobileLp&af_ad=QR_code_20241013_ALL_AppBonusingMobileLp&pid=QR_code&deep_link_value=accor%3A%2F%2Fsearch%2Foffer%3Fpage_id%3Dddc8e830-2fc5-4492-ae7f-a63574b202f4&af_adset=EN Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=uXhrmD2Na/K1uglc4DSccWmUi3lwT6U0aN5NKqvcu8d5WGWybG4+Fjgl4ne6nVjifX1jzgyPIuRTBhS6nanmMOLamS/KiojPrxeLcFng8UzPO+81sa87bs4RFhGAg5SdnTRio+RJdn41ZezkVQzm+QQNKVTMJBE8fIzHUqlLtmYsp4GqzAo9Tqkn29+6s06cnyhW9Bg2AjaE3z+uY1Kha+K1N+xGE1wxY+ov1hMjJJFJQKo0Zzr8yVUmc0uGx6VyOI/GCYB98MMi2baM/noo1d0GCT/eTJnamWBVosFVl6rGjGRpxA8WWwcog7Ny/HlQVp6w8cTkKFTg/8KjIPnCBapACqcVA8DvW2Oym2gj1AtBv4YYfUMq3TEu4mXRkOJJVmAh7NCUHwLhEc4aXJBIqbW6JkrW0slp4+M4RmDR1e+A3GrFYXelb56QL3DRn/v55w+TZWXTMoZhYCD+Z9T66/ [TRUNCATED]
2024-10-30 07:46:28 UTC	681	IN	HTTP/1.1 200 OK Age: 505826 cache-control: max-age=2592000, public, immutable Content-Type: text/css;charset=utf-8 Date: Wed, 30 Oct 2024 07:46:28 GMT Etag: W/"213-2386f26fb1bdc0-gzip" Last-Modified: Thu, 24 Oct 2024 11:16:02 GMT Server: ECAcc (lhd/35FC) Strict-Transport-Security: max-age=31557600 Vary: Accept-Encoding X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Content-Type-Options: nosniff x-frame-options: SAMEORIGIN X-Iinfo: 18-230663857-230659783 PNNN RT(1730113290817 3) q(0 0 0 0) r(0 0) U24 X-Served-By: cache-fra-etou8220069-FRA X-Timer: S1730113291.477955,VS0,VS0,VE4 x-vhost: prod-allcom-publish Content-Length: 531 Connection: close
2024-10-30 07:46:28 UTC	531	IN	Data Raw: 2e 63 6d 70 2d 70 61 67 65 5f 5f 73 6b 69 70 74 6f 6d 61 69 6e 63 6f 6e 74 65 6e 74 2d 6c 69 6e 6b 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 2d 39 39 39 70 78 3b 74 6f 70 3a 30 3b 77 69 64 74 68 3a 31 70 78 3b 68 65 69 67 68 74 3a 31 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7a 2d 69 6e 64 65 78 3a 2d 39 39 39 7d 0a 2e 63 6d 70 2d 70 61 67 65 5f 5f 73 6b 69 70 74 6f 6d 61 69 6e 63 6f 6e 74 65 6e 74 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 63 6d 70 2d 70 61 67 65 5f 5f 73 6b 69 70 74 6f 6d 61 69 6e 63 6f 6e 74 65 6e 74 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 7b 6c 65 66 74 3a 32 30 70 78 3b 74 6f 70 3a 32 30 70 78 3b 77 69 64 74 68 3a 61 75 74 6f 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 63 6f 6c 6f 72 3a 62 6c 75 65 3b Data Ascii: .cmp-page__skiptomaincontent-link{position:absolute;left:-999px;top:0;width:1px;height:1px;overflow:hidden;z-index:-999}.cmp-page__skiptomaincontent-link:focus,.cmp-page__skiptomaincontent-link:active{left:20px;top:20px;width:auto;height:auto;color:blue;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49828	104.18.86.42	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:28 UTC	382	OUT	GET /scripttemplates/202409.2.0/otBannerSdk.js HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 07:46:28 UTC	859	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 07:46:28 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-MD5: uGd5VTJp/PFmoOURmUW/IQ== Last-Modified: Mon, 28 Oct 2024 06:29:30 GMT x-ms-request-id: ec98eb99-d01e-00e0-4b63-297502000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 82044 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8da9caafcbbda91e-DFW
2024-10-30 07:46:28 UTC	510	IN	Data Raw: 37 63 34 35 0d 0a 2f 2a 2a 20 0a 20 2a 20 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 0a 20 2a 20 76 32 30 32 34 30 39 2e 32 2e 30 0a 20 2a 20 62 79 20 4f 6e 65 54 72 75 73 74 20 4c 4c 43 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 44 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 28 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6f 20 69 6e Data Ascii: 7c45/** * onetrust-banner-sdk * v202409.2.0 * by OneTrust LLC * Copyright 2024 */!function(){"use strict";var D=function(e,t){return(D=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var o in
2024-10-30 07:46:28 UTC	1369	IN	Data Raw: 75 6c 6c 3d 3d 3d 74 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 29 3a 28 6f 2e 70 72 6f 74 6f 74 79 70 65 3d 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 65 77 20 6f 29 7d 76 61 72 20 48 2c 52 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 52 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 3c 6e 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 72 29 26 26 28 65 5b 72 5d 3d 74 5b 72 5d 29 3b 72 65 74 75 72 6e 20 65 7d 29 2e 61 70 70 6c 79 28 74 68 Data Ascii: ull===t?Object.create(t):(o.prototype=t.prototype,new o)}var H,R=function(){return(R=Object.assign\|\|function(e){for(var t,o=1,n=arguments.length;o<n;o++)for(var r in t=arguments[o])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(th
2024-10-30 07:46:28 UTC	1369	IN	Data Raw: 26 6c 2e 6c 61 62 65 6c 3c 61 5b 31 5d 29 6c 2e 6c 61 62 65 6c 3d 61 5b 31 5d 2c 61 3d 74 3b 65 6c 73 65 7b 69 66 28 21 28 61 26 26 6c 2e 6c 61 62 65 6c 3c 61 5b 32 5d 29 29 7b 61 5b 32 5d 26 26 6c 2e 6f 70 73 2e 70 6f 70 28 29 2c 6c 2e 74 72 79 73 2e 70 6f 70 28 29 3b 63 6f 6e 74 69 6e 75 65 7d 6c 2e 6c 61 62 65 6c 3d 61 5b 32 5d 2c 6c 2e 6f 70 73 2e 70 75 73 68 28 74 29 7d 7d 74 3d 72 2e 63 61 6c 6c 28 6e 2c 6c 29 7d 63 61 74 63 68 28 65 29 7b 74 3d 5b 36 2c 65 5d 2c 73 3d 30 7d 66 69 6e 61 6c 6c 79 7b 69 3d 61 3d 30 7d 69 66 28 35 26 74 5b 30 5d 29 74 68 72 6f 77 20 74 5b 31 5d 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 74 5b 30 5d 3f 74 5b 31 5d 3a 76 6f 69 64 20 30 2c 64 6f 6e 65 3a 21 30 7d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 71 28 29 7b 66 6f 72 28 Data Ascii: &l.label<a[1])l.label=a[1],a=t;else{if(!(a&&l.label<a[2])){a[2]&&l.ops.pop(),l.trys.pop();continue}l.label=a[2],l.ops.push(t)}}t=r.call(n,l)}catch(e){t=[6,e],s=0}finally{i=a=0}if(5&t[0])throw t[1];return{value:t[0]?t[1]:void 0,done:!0}}}}function q(){for(
2024-10-30 07:46:28 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 29 29 7b 76 61 72 20 6f 3d 65 2e 74 68 65 6e 3b 69 66 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 4b 29 72 65 74 75 72 6e 20 74 2e 5f 73 74 61 74 65 3d 33 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 76 6f 69 64 20 58 28 74 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6f 29 72 65 74 75 72 6e 20 76 6f 69 64 20 5a 28 28 6e 3d 6f 2c 72 3d 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 61 70 70 6c 79 28 72 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 74 29 7d 74 2e 5f 73 74 61 74 65 3d 31 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 58 28 74 29 7d 63 61 74 63 68 28 65 29 7b 4a 28 74 2c 65 29 7d 76 61 72 20 6e 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 4a 28 65 2c 74 29 7b 65 2e 5f 73 74 61 74 65 3d 32 2c 65 2e 5f Data Ascii: nction"==typeof e)){var o=e.then;if(e instanceof K)return t._state=3,t._value=e,void X(t);if("function"==typeof o)return void Z((n=o,r=e,function(){n.apply(r,arguments)}),t)}t._state=1,t._value=e,X(t)}catch(e){J(t,e)}var n,r}function J(e,t){e._state=2,e._
2024-10-30 07:46:28 UTC	1369	IN	Data Raw: 66 20 65 29 29 7b 76 61 72 20 6e 3d 65 2e 74 68 65 6e 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 76 6f 69 64 20 6e 2e 63 61 6c 6c 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 28 6f 2c 65 29 7d 2c 69 29 7d 73 5b 6f 5d 3d 65 2c 30 3d 3d 2d 2d 61 26 26 72 28 73 29 7d 63 61 74 63 68 28 65 29 7b 69 28 65 29 7d 7d 28 65 2c 73 5b 65 5d 29 7d 29 7d 2c 4b 2e 72 65 73 6f 6c 76 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 4b 3f 74 3a 6e 65 77 20 4b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 74 29 7d 29 7d 2c 4b 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 Data Ascii: f e)){var n=e.then;if("function"==typeof n)return void n.call(e,function(e){t(o,e)},i)}s[o]=e,0==--a&&r(s)}catch(e){i(e)}}(e,s[e])})},K.resolve=function(t){return t&&"object"==typeof t&&t.constructor===K?t:new K(function(e){e(t)})},K.reject=function(o){re
2024-10-30 07:46:28 UTC	1369	IN	Data Raw: 7c 7c 65 21 3d 65 26 26 73 21 3d 73 29 72 65 74 75 72 6e 21 30 3b 69 2b 2b 7d 7d 72 65 74 75 72 6e 21 31 7d 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 7d 2c 24 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 45 6e 64 73 57 69 74 68 50 6f 6c 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 64 73 57 69 74 68 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2c 22 65 6e 64 73 57 69 74 68 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 74 3e 74 68 69 73 2e 6c 65 6e 67 74 68 29 26 26 28 74 3d 74 68 69 73 2e 6c 65 6e 67 74 68 Data Ascii: \|\|e!=e&&s!=s)return!0;i++}}return!1},writable:!0,configurable:!0})},$.prototype.initEndsWithPoly=function(){String.prototype.endsWith\|\|Object.defineProperty(String.prototype,"endsWith",{value:function(e,t){return(void 0===t\|\|t>this.length)&&(t=this.length
2024-10-30 07:46:28 UTC	1369	IN	Data Raw: 7d 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 7d 2c 24 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 41 72 72 61 79 46 69 6c 6c 50 6f 6c 79 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2c 22 66 69 6c 6c 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 74 68 69 73 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 74 68 69 73 20 69 73 20 6e 75 6c 6c 20 6f 72 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 3b 66 6f 72 28 76 61 72 20 74 3d 4f 62 6a 65 63 74 28 74 68 69 73 29 2c 6f 3d 74 Data Ascii: },writable:!0,configurable:!0})},$.prototype.initArrayFillPolyfill=function(){Array.prototype.fill\|\|Object.defineProperty(Array.prototype,"fill",{value:function(e){if(null==this)throw new TypeError("this is null or not defined");for(var t=Object(this),o=t
2024-10-30 07:46:28 UTC	1369	IN	Data Raw: 65 5b 65 2e 42 61 6e 6e 65 72 53 61 76 65 53 65 74 74 69 6e 67 73 3d 35 5d 3d 22 42 61 6e 6e 65 72 53 61 76 65 53 65 74 74 69 6e 67 73 22 2c 65 5b 65 2e 43 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 69 6e 67 42 75 74 74 6f 6e 3d 36 5d 3d 22 43 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 69 6e 67 42 75 74 74 6f 6e 22 2c 28 65 3d 74 65 3d 74 65 7c 7c 7b 7d 29 5b 65 2e 42 61 6e 6e 65 72 3d 31 5d 3d 22 42 61 6e 6e 65 72 22 2c 65 5b 65 2e 50 43 3d 32 5d 3d 22 50 43 22 2c 65 5b 65 2e 41 50 49 3d 33 5d 3d 22 41 50 49 22 2c 28 65 3d 6f 65 3d 6f 65 7c 7c 7b 7d 29 2e 41 63 63 65 70 74 41 6c 6c 3d 22 41 63 63 65 70 74 41 6c 6c 22 2c 65 2e 52 65 6a 65 63 74 41 6c 6c 3d 22 52 65 6a 65 63 74 41 6c 6c 22 2c 65 2e 55 70 64 61 74 65 43 6f Data Ascii: e[e.BannerSaveSettings=5]="BannerSaveSettings",e[e.ContinueWithoutAcceptingButton=6]="ContinueWithoutAcceptingButton",(e=te=te\|\|{})[e.Banner=1]="Banner",e[e.PC=2]="PC",e[e.API=3]="API",(e=oe=oe\|\|{}).AcceptAll="AcceptAll",e.RejectAll="RejectAll",e.UpdateCo
2024-10-30 07:46:28 UTC	1369	IN	Data Raw: 5b 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 41 6c 6c 6f 77 20 41 6c 6c 22 5d 3d 34 5d 3d 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 41 6c 6c 6f 77 20 41 6c 6c 22 2c 65 5b 65 5b 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 52 65 6a 65 63 74 20 41 6c 6c 22 5d 3d 35 5d 3d 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 52 65 6a 65 63 74 20 41 6c 6c 22 2c 65 5b 65 5b 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 43 6f 6e 66 69 72 6d 22 5d 3d 36 5d 3d 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 43 6f 6e 66 69 72 6d 22 2c 65 5b 65 5b 22 47 50 43 20 76 61 6c 75 65 20 63 68 61 6e 67 65 64 22 5d 3d 37 5d 3d 22 47 50 43 20 76 61 6c 75 65 20 63 68 61 6e 67 Data Ascii: ["Preference Center - Allow All"]=4]="Preference Center - Allow All",e[e["Preference Center - Reject All"]=5]="Preference Center - Reject All",e[e["Preference Center - Confirm"]=6]="Preference Center - Confirm",e[e["GPC value changed"]=7]="GPC value chang
2024-10-30 07:46:28 UTC	1369	IN	Data Raw: 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 3d 22 61 64 5f 70 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 2c 65 2e 72 65 67 69 6f 6e 3d 22 72 65 67 69 6f 6e 22 2c 65 2e 77 61 69 74 5f 66 6f 72 5f 75 70 64 61 74 65 3d 22 77 61 69 74 5f 66 6f 72 5f 75 70 64 61 74 65 22 2c 28 65 3d 49 65 3d 49 65 7c 7c 7b 7d 29 2e 67 72 61 6e 74 65 64 3d 22 67 72 61 6e 74 65 64 22 2c 65 2e 64 65 6e 69 65 64 3d 22 64 65 6e 69 65 64 22 2c 30 2c 28 65 3d 4c 65 3d 4c 65 7c 7c 7b 7d 29 2e 4f 42 4a 45 43 54 5f 54 4f 5f 4c 49 3d 22 4f 62 6a 65 63 74 54 6f 4c 49 22 2c 65 2e 4c 49 5f 41 43 54 49 56 45 5f 49 46 5f 4c 45 47 41 4c 5f 42 41 53 49 53 3d 22 4c 49 41 63 74 69 76 65 49 66 4c 65 67 61 6c 42 61 73 69 73 22 2c 28 65 3d 5f 65 3d 5f 65 7c 7c 7b 7d 29 2e 63 6f 6f 6b 69 65 73 3d 22 63 Data Ascii: rsonalization="ad_personalization",e.region="region",e.wait_for_update="wait_for_update",(e=Ie=Ie\|\|{}).granted="granted",e.denied="denied",0,(e=Le=Le\|\|{}).OBJECT_TO_LI="ObjectToLI",e.LI_ACTIVE_IF_LEGAL_BASIS="LIActiveIfLegalBasis",(e=_e=_e\|\|{}).cookies="c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49829	104.18.86.42	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:28 UTC	630	OUT	GET /consent/87c4fef0-8732-44e4-bee3-f4faa4ce5a9d/0191bc5d-2eb7-7479-9d95-740d90885831/en.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://all.accor.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://all.accor.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 07:46:28 UTC	982	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 07:46:28 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Ray: 8da9caafddf9e9b5-DFW CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 43373 Cache-Control: public, max-age=86400 Expires: Thu, 31 Oct 2024 07:46:28 GMT Last-Modified: Tue, 22 Oct 2024 08:34:16 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: Hfgwmkj0MF14cMMocp2ECw== Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 6f8579d8-301e-000f-284c-267e7c000000 x-ms-version: 2009-09-19 Cross-Origin-Resource-Policy: cross-origin Server: cloudflare
2024-10-30 07:46:28 UTC	387	IN	Data Raw: 32 30 63 32 0d 0a 7b 22 44 6f 6d 61 69 6e 44 61 74 61 22 3a 7b 22 70 63 6c 69 66 65 53 70 61 6e 59 72 22 3a 22 59 65 61 72 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 59 72 73 22 3a 22 59 65 61 72 73 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 53 65 63 73 22 3a 22 41 20 66 65 77 20 73 65 63 6f 6e 64 73 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 57 6b 22 3a 22 57 65 65 6b 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 57 6b 73 22 3a 22 57 65 65 6b 73 22 2c 22 70 63 63 6c 6f 73 65 42 75 74 74 6f 6e 54 79 70 65 22 3a 22 49 63 6f 6e 22 2c 22 70 63 63 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 54 65 78 74 22 3a 22 43 6f 6e 74 69 6e 75 65 20 77 69 74 68 6f 75 74 20 41 63 63 65 70 74 69 6e 67 22 2c 22 4d 61 69 6e 54 65 78 74 22 3a 22 43 6f 6f 6b 69 65 73 22 2c 22 4d Data Ascii: 20c2{"DomainData":{"pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccloseButtonType":"Icon","pccontinueWithoutAcceptText":"Continue without Accepting","MainText":"Cookies","M
2024-10-30 07:46:28 UTC	1369	IN	Data Raw: 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6d 69 67 68 74 20 62 65 20 61 62 6f 75 74 20 79 6f 75 2c 20 79 6f 75 72 20 70 72 65 66 65 72 65 6e 63 65 73 20 6f 72 20 79 6f 75 72 20 64 65 76 69 63 65 20 61 6e 64 20 69 73 20 6d 6f 73 74 6c 79 20 75 73 65 64 20 74 6f 20 6d 61 6b 65 20 74 68 65 20 73 69 74 65 20 77 6f 72 6b 20 61 73 20 79 6f 75 20 65 78 70 65 63 74 20 69 74 20 74 6f 2e 20 54 68 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 64 6f 65 73 20 6e 6f 74 20 75 73 75 61 6c 6c 79 20 64 69 72 65 63 74 6c 79 20 69 64 65 6e 74 69 66 79 20 79 6f 75 2c 20 62 75 74 20 69 74 20 63 61 6e 20 67 69 76 65 20 79 6f 75 20 61 20 6d 6f 72 65 20 70 65 72 73 6f 6e 61 6c 69 7a 65 64 20 77 65 62 20 65 78 70 65 72 69 65 6e 63 65 2e 20 42 65 63 61 75 73 65 20 77 65 20 72 65 73 70 65 63 Data Ascii: information might be about you, your preferences or your device and is mostly used to make the site work as you expect it to. The information does not usually directly identify you, but it can give you a more personalized web experience. Because we respec
2024-10-30 07:46:28 UTC	1369	IN	Data Raw: 69 6c 65 20 79 6f 75 72 20 69 6e 74 65 72 65 73 74 73 20 74 6f 20 70 72 6f 76 69 64 65 20 79 6f 75 20 77 69 74 68 20 72 65 6c 65 76 61 6e 74 20 61 64 76 65 72 74 69 73 69 6e 67 20 61 6e 64 20 61 6c 6c 6f 77 20 79 6f 75 20 74 6f 20 69 6e 74 65 72 61 63 74 20 77 69 74 68 20 73 6f 63 69 61 6c 20 6e 65 74 77 6f 72 6b 73 2e 20 3c 62 72 3e 5c 6e 42 79 20 63 6f 6e 74 69 6e 75 69 6e 67 20 79 6f 75 72 20 62 72 6f 77 73 69 6e 67 2c 20 79 6f 75 20 61 72 65 20 61 67 72 65 65 69 6e 67 20 74 6f 20 74 68 65 20 75 73 65 20 6f 66 20 63 6f 6f 6b 69 65 73 2e 20 59 6f 75 20 77 69 6c 6c 20 62 65 20 61 62 6c 65 20 74 6f 20 6d 6f 64 69 66 79 20 79 6f 75 72 20 63 68 6f 69 63 65 73 20 61 74 20 61 6e 79 20 74 69 6d 65 20 62 79 20 63 6c 69 63 6b 69 6e 67 20 6f 6e 20 74 68 65 20 5c Data Ascii: ile your interests to provide you with relevant advertising and allow you to interact with social networks. <br>\nBy continuing your browsing, you are agreeing to the use of cookies. You will be able to modify your choices at any time by clicking on the \
2024-10-30 07:46:28 UTC	1369	IN	Data Raw: 31 22 2c 22 50 61 72 65 6e 74 22 3a 22 22 2c 22 53 68 6f 77 53 75 62 67 72 6f 75 70 22 3a 74 72 75 65 2c 22 53 68 6f 77 53 75 62 47 72 6f 75 70 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 74 72 75 65 2c 22 53 68 6f 77 53 75 62 67 72 6f 75 70 54 6f 67 67 6c 65 22 3a 66 61 6c 73 65 2c 22 41 6c 77 61 79 73 53 68 6f 77 43 61 74 65 67 6f 72 79 22 3a 66 61 6c 73 65 2c 22 47 72 6f 75 70 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 65 73 65 20 63 6f 6f 6b 69 65 73 20 61 72 65 20 6e 65 63 65 73 73 61 72 79 20 66 6f 72 20 74 68 65 20 77 65 62 73 69 74 65 20 74 6f 20 66 75 6e 63 74 69 6f 6e 20 61 6e 64 20 63 61 6e 6e 6f 74 20 62 65 20 73 77 69 74 63 68 65 64 20 6f 66 66 20 69 6e 20 6f 75 72 20 73 79 73 74 65 6d 73 2e 20 54 68 65 79 20 61 72 65 20 75 73 75 61 6c 6c 79 Data Ascii: 1","Parent":"","ShowSubgroup":true,"ShowSubGroupDescription":true,"ShowSubgroupToggle":false,"AlwaysShowCategory":false,"GroupDescription":"These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually
2024-10-30 07:46:28 UTC	1369	IN	Data Raw: 22 75 73 65 72 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 22 2c 22 48 6f 73 74 22 3a 22 61 63 63 6f 72 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 74 72 75 65 2c 22 4c 65 6e 67 74 68 22 3a 22 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 75 73 65 72 22 2c 22 74 68 69 72 64 50 61 72 74 79 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 75 73 65 72 22 2c 22 70 61 74 74 65 72 6e 4b 65 79 22 3a 22 75 73 65 72 22 2c 22 74 68 69 72 64 50 61 72 74 79 4b 65 79 22 3a 22 50 61 74 74 65 72 6e 7c 75 73 65 72 22 2c 22 66 69 72 73 74 50 61 72 74 79 4b 65 79 22 3a 22 50 61 74 74 65 72 6e 7c 75 73 65 72 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a Data Ascii: "userXXXXXXXXXXXXXXXXX","Host":"accor.com","IsSession":true,"Length":"0","description":"user","thirdPartyDescription":"user","patternKey":"user","thirdPartyKey":"Pattern\|user","firstPartyKey":"Pattern\|user","DurationType":1,"category":null,"isThirdParty":
2024-10-30 07:46:28 UTC	1369	IN	Data Raw: 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 31 38 65 64 37 36 32 2d 32 38 64 65 2d 37 36 35 62 2d 62 35 66 65 2d 36 31 65 65 65 31 65 33 34 34 62 33 22 2c 22 4e 61 6d 65 22 3a 22 76 69 73 69 64 5f 69 6e 63 61 70 5f 58 58 58 58 58 58 22 2c 22 48 6f 73 74 22 3a 22 6e 6f 76 6f 74 65 6c 2e 61 63 63 6f 72 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 68 22 3a 22 33 36 34 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 49 6e 63 61 70 73 75 6c 61 20 44 44 6f 53 20 50 72 6f 74 65 63 74 69 6f 6e 61 20 61 6e 64 20 57 65 62 20 41 70 70 6c 69 63 61 74 69 6f 6e 20 46 69 72 65 77 61 6c 6c 3a 5c Data Ascii: tionType":1,"category":null,"isThirdParty":false},{"id":"018ed762-28de-765b-b5fe-61eee1e344b3","Name":"visid_incap_XXXXXX","Host":"novotel.accor.com","IsSession":false,"Length":"364","description":"Incapsula DDoS Protectiona and Web Application Firewall:\
2024-10-30 07:46:28 UTC	1162	IN	Data Raw: 6f 6e 22 3a 74 72 75 65 2c 22 4c 65 6e 67 74 68 22 3a 22 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 74 68 69 72 64 50 61 72 74 79 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 70 61 74 74 65 72 6e 4b 65 79 22 3a 6e 75 6c 6c 2c 22 74 68 69 72 64 50 61 72 74 79 4b 65 79 22 3a 6e 75 6c 6c 2c 22 66 69 72 73 74 50 61 72 74 79 4b 65 79 22 3a 6e 75 6c 6c 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 31 38 65 65 39 38 35 2d 64 31 37 37 2d 37 30 37 65 2d 62 35 66 38 2d 62 66 31 35 33 33 65 35 34 61 37 61 22 2c 22 4e 61 6d 65 22 3a 22 6e 6c 62 69 5f 58 58 58 58 58 58 58 22 2c 22 48 6f 73 74 22 3a Data Ascii: on":true,"Length":"0","description":"","thirdPartyDescription":"","patternKey":null,"thirdPartyKey":null,"firstPartyKey":null,"DurationType":1,"category":null,"isThirdParty":false},{"id":"018ee985-d177-707e-b5f8-bf1533e54a7a","Name":"nlbi_XXXXXXX","Host":
2024-10-30 07:46:28 UTC	1369	IN	Data Raw: 37 66 66 39 0d 0a 6e 65 72 73 20 74 6f 20 70 72 65 76 65 6e 74 20 63 6f 6f 6b 69 65 73 20 69 6e 20 65 61 63 68 20 63 61 74 65 67 6f 72 79 20 66 72 6f 6d 20 62 65 69 6e 67 20 73 65 74 20 69 6e 20 74 68 65 20 75 73 65 72 73 20 62 72 6f 77 73 65 72 2c 20 77 68 65 6e 20 63 6f 6e 73 65 6e 74 20 69 73 20 6e 6f 74 20 67 69 76 65 6e 2e 20 54 68 65 20 63 6f 6f 6b 69 65 20 68 61 73 20 61 20 6e 6f 72 6d 61 6c 20 6c 69 66 65 73 70 61 6e 20 6f 66 20 6f 6e 65 20 79 65 61 72 2c 20 73 6f 20 74 68 61 74 20 72 65 74 75 72 6e 69 6e 67 20 76 69 73 69 74 6f 72 73 20 74 6f 20 74 68 65 20 73 69 74 65 20 77 69 6c 6c 20 68 61 76 65 20 74 68 65 69 72 20 70 72 65 66 65 72 65 6e 63 65 73 20 72 65 6d 65 6d 62 65 72 65 64 2e 20 49 74 20 63 6f 6e 74 61 69 6e 73 20 6e 6f 20 69 6e 66 6f Data Ascii: 7ff9ners to prevent cookies in each category from being set in the users browser, when consent is not given. The cookie has a normal lifespan of one year, so that returning visitors to the site will have their preferences remembered. It contains no info
2024-10-30 07:46:28 UTC	1369	IN	Data Raw: 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 70 61 74 74 65 72 6e 4b 65 79 22 3a 6e 75 6c 6c 2c 22 74 68 69 72 64 50 61 72 74 79 4b 65 79 22 3a 22 22 2c 22 66 69 72 73 74 50 61 72 74 79 4b 65 79 22 3a 22 43 6f 6f 6b 69 65 4f 70 74 61 6e 6f 6e 41 6c 65 72 74 42 6f 78 43 6c 6f 73 65 64 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 37 30 37 38 65 30 64 63 2d 32 38 34 31 2d 34 32 34 38 2d 61 38 65 39 2d 37 37 66 37 37 35 34 64 61 33 31 38 22 2c 22 4e 61 6d 65 22 3a 22 41 53 50 2e 4e 45 54 5f 53 65 73 73 69 6f 6e 49 64 22 2c 22 48 6f 73 74 22 3a 22 67 72 6f 75 70 2e 61 63 63 6f 72 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f Data Ascii: tion":null,"patternKey":null,"thirdPartyKey":"","firstPartyKey":"CookieOptanonAlertBoxClosed","DurationType":1,"category":null,"isThirdParty":false},{"id":"7078e0dc-2841-4248-a8e9-77f7754da318","Name":"ASP.NET_SessionId","Host":"group.accor.com","IsSessio
2024-10-30 07:46:28 UTC	1369	IN	Data Raw: 74 69 6f 6e 61 20 61 6e 64 20 57 65 62 20 41 70 70 6c 69 63 61 74 69 6f 6e 20 46 69 72 65 77 61 6c 6c 3a 5c 6e 63 6f 6f 6b 69 65 20 66 6f 72 20 6c 69 6e 6b 69 6e 67 20 48 54 54 50 20 72 65 71 75 65 73 74 73 20 74 6f 20 61 20 63 65 72 74 61 69 6e 20 73 65 73 73 69 6f 6e 20 28 41 4b 41 20 76 69 73 69 74 29 2e 5c 6e 52 65 2d 6f 70 65 6e 69 6e 67 20 74 68 65 20 62 72 6f 77 73 65 72 20 61 6e 64 20 61 63 63 65 73 73 69 6e 67 20 73 61 6d 65 20 73 69 74 65 20 61 72 65 20 72 65 67 69 73 74 65 72 65 64 20 61 73 20 64 69 66 66 65 72 65 6e 74 20 76 69 73 69 74 73 2e 5c 6e 49 6e 20 6f 72 64 65 72 20 74 6f 20 6d 61 69 6e 74 61 69 6e 20 65 78 69 73 74 69 6e 67 20 73 65 73 73 69 6f 6e 73 20 28 69 65 2c 20 73 65 73 73 69 6f 6e 20 63 6f 6f 6b 69 65 29 22 2c 22 74 68 69 72 Data Ascii: tiona and Web Application Firewall:\ncookie for linking HTTP requests to a certain session (AKA visit).\nRe-opening the browser and accessing same site are registered as different visits.\nIn order to maintain existing sessions (ie, session cookie)","thir

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49833	172.67.72.50	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:28 UTC	532	OUT	GET /kameleoon.js HTTP/1.1 Host: qchmhd61sj.kameleoon.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://all.accor.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 07:46:28 UTC	949	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 07:46:28 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close last-modified: Mon, 28 Oct 2024 13:46:08 GMT vary: Accept-Encoding etag: W/"671f95a0-4ce4c" expires: Wed, 30 Oct 2024 07:46:43 GMT Cache-Control: max-age=3600, s-maxage=5400 cdn-cache-control: max-age=5400; public; stale-if-error=604800; stale-while-revalidate=604800 strict-transport-security: max-age=31536000; includeSubDomains; preload CF-Cache-Status: HIT Age: 5301 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IYdmWhx%2Bd3SdIXIwZJmnGlDUBt73VlVBSgyjtMwvDrn7EbJTaZZV1r8m4uBZ6X0KtbrcEdxkpB44UJA0eEdWGe4apjrNZcTVENl%2Fp0pbot26ts%2FaKZ%2FTBgdRNBXS1paukm6LSvqw06ty"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da9cab0c8bb2c99-DFW alt-svc: h3=":443"; ma=86400
2024-10-30 07:46:28 UTC	420	IN	Data Raw: 37 62 66 66 0d 0a 69 66 20 28 75 6e 64 65 66 69 6e 65 64 20 3d 3d 3d 20 77 69 6e 64 6f 77 2e 4b 61 6d 65 6c 65 6f 6f 6e 29 7b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 6b 62 6f 77 73 65 72 3d 74 28 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 69 29 7b 69 66 28 74 5b 69 5d 29 72 65 74 75 72 6e 20 74 5b 69 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6e 3d 74 5b 69 5d 3d 7b 69 3a 69 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 69 5d 2e 63 61 6c 6c 28 6e 2e 65 78 70 6f 72 74 73 2c 6e 2c 6e 2e 65 78 70 6f 72 74 73 2c 72 29 2c 6e 2e 6c 3d 21 30 2c 6e 2e Data Ascii: 7bffif (undefined === window.Kameleoon){(function(){!function(e,t){e.kbowser=t()}(this,(function(){return function(e){var t={};function r(i){if(t[i])return t[i].exports;var n=t[i]={i:i,l:!1,exports:{}};return e[i].call(n.exports,n,n.exports,r),n.l=!0,n.
2024-10-30 07:46:28 UTC	1369	IN	Data Raw: 67 54 61 67 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 53 79 6d 62 6f 6c 2e 74 6f 53 74 72 69 6e 67 54 61 67 2c 7b 76 61 6c 75 65 3a 22 4d 6f 64 75 6c 65 22 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 7d 2c 72 2e 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 31 26 74 26 26 28 65 3d 72 28 65 29 29 2c 38 26 74 29 72 65 74 75 72 6e 20 65 3b 69 66 28 34 26 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 69 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 3b 69 66 28 72 2e 72 28 69 29 2c 4f Data Ascii: gTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},r.t=function(e,t){if(1&t&&(e=r(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var i=Object.create(null);if(r.r(i),O
2024-10-30 07:46:28 UTC	1369	IN	Data Raw: 3d 73 5b 74 5d 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 6e 75 6c 6c 21 3d 3d 65 26 26 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 5b 74 5d 3d 65 5b 74 5d 7d 29 29 7d 3b 66 6f 72 28 74 3d 30 2c 72 3d 73 2e 6c 65 6e 67 74 68 3b 74 3c 72 3b 74 2b 3d 31 29 6f 28 29 3b 72 65 74 75 72 6e 20 65 7d 2c 65 7d 28 29 3b 74 2e 64 65 66 61 75 6c 74 3d 6e 2c 65 2e 65 78 70 6f 72 74 73 3d 74 2e 64 65 66 61 75 6c 74 7d 2c 31 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3d 21 30 2c 74 2e 4f 53 5f 4d 41 50 3d 74 2e 50 4c 41 54 46 4f 52 4d 53 5f 4d 41 50 3d 76 6f 69 64 20 30 3b 74 2e 50 4c 41 54 46 4f 52 Data Ascii: =s[t];"object"==typeof e&&null!==e&&Object.keys(e).forEach((function(t){i[t]=e[t]}))};for(t=0,r=s.length;t<r;t+=1)o();return e},e}();t.default=n,e.exports=t.default},18:function(e,t,r){"use strict";t.__esModule=!0,t.OS_MAP=t.PLATFORMS_MAP=void 0;t.PLATFOR
2024-10-30 07:46:28 UTC	1369	IN	Data Raw: 70 61 72 73 65 64 52 65 73 75 6c 74 2e 62 72 6f 77 73 65 72 3d 7b 7d 3b 76 61 72 20 74 3d 61 2e 64 65 66 61 75 6c 74 2e 66 69 6e 64 28 69 2e 64 65 66 61 75 6c 74 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 2e 74 65 73 74 29 72 65 74 75 72 6e 20 74 2e 74 65 73 74 28 65 29 3b 69 66 28 74 2e 74 65 73 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 72 65 74 75 72 6e 20 74 2e 74 65 73 74 2e 73 6f 6d 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 74 65 73 74 28 74 29 7d 29 29 3b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 42 72 6f 77 73 65 72 27 73 20 74 65 73 74 20 66 75 6e 63 74 69 6f 6e 20 69 73 20 6e 6f 74 20 76 61 6c 69 64 22 29 7d 29 29 3b 72 65 74 Data Ascii: parsedResult.browser={};var t=a.default.find(i.default,(function(t){if("function"==typeof t.test)return t.test(e);if(t.test instanceof Array)return t.test.some((function(t){return e.test(t)}));throw new Error("Browser's test function is not valid")}));ret
2024-10-30 07:46:28 UTC	1369	IN	Data Raw: 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 74 65 73 74 28 74 29 7d 29 29 3b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 42 72 6f 77 73 65 72 27 73 20 74 65 73 74 20 66 75 6e 63 74 69 6f 6e 20 69 73 20 6e 6f 74 20 76 61 6c 69 64 22 29 7d 29 29 3b 72 65 74 75 72 6e 20 74 26 26 28 74 68 69 73 2e 70 61 72 73 65 64 52 65 73 75 6c 74 2e 70 6c 61 74 66 6f 72 6d 3d 74 2e 64 65 73 63 72 69 62 65 28 74 68 69 73 2e 67 65 74 55 41 28 29 29 29 2c 74 68 69 73 2e 70 61 72 73 65 64 52 65 73 75 6c 74 2e 70 6c 61 74 66 6f 72 6d 7d 2c 74 2e 70 61 72 73 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 61 72 73 65 42 72 6f 77 73 65 72 28 29 2c 74 68 69 73 2e 70 61 72 73 65 4f 53 28 29 2c 74 68 69 73 2e 70 61 72 73 65 50 6c 61 74 66 6f 72 6d 28 Data Ascii: (t){return e.test(t)}));throw new Error("Browser's test function is not valid")}));return t&&(this.parsedResult.platform=t.describe(this.getUA())),this.parsedResult.platform},t.parse=function(){return this.parseBrowser(),this.parseOS(),this.parsePlatform(
2024-10-30 07:46:28 UTC	1369	IN	Data Raw: 46 69 72 73 74 4d 61 74 63 68 28 73 2c 65 29 7c 7c 6e 2e 64 65 66 61 75 6c 74 2e 67 65 74 46 69 72 73 74 4d 61 74 63 68 28 2f 28 3f 3a 77 68 61 6c 65 29 5b 5c 73 2f 5d 28 5c 64 2b 28 3f 3a 5c 2e 5c 64 2b 29 2b 29 2f 69 2c 65 29 3b 72 65 74 75 72 6e 20 72 26 26 28 74 2e 76 65 72 73 69 6f 6e 3d 72 29 2c 74 7d 7d 2c 7b 74 65 73 74 3a 5b 2f 4d 5a 42 72 6f 77 73 65 72 2f 69 5d 2c 64 65 73 63 72 69 62 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 6e 61 6d 65 3a 22 4d 5a 20 42 72 6f 77 73 65 72 22 7d 2c 72 3d 6e 2e 64 65 66 61 75 6c 74 2e 67 65 74 46 69 72 73 74 4d 61 74 63 68 28 2f 28 3f 3a 4d 5a 42 72 6f 77 73 65 72 29 5b 5c 73 2f 5d 28 5c 64 2b 28 3f 3a 5c 2e 5c 64 2b 29 2b 29 2f 69 2c 65 29 7c 7c 6e 2e 64 65 66 61 75 6c 74 2e 67 65 74 46 69 Data Ascii: FirstMatch(s,e)\|\|n.default.getFirstMatch(/(?:whale)[\s/](\d+(?:\.\d+)+)/i,e);return r&&(t.version=r),t}},{test:[/MZBrowser/i],describe:function(e){var t={name:"MZ Browser"},r=n.default.getFirstMatch(/(?:MZBrowser)[\s/](\d+(?:\.\d+)+)/i,e)\|\|n.default.getFi
2024-10-30 07:46:28 UTC	1369	IN	Data Raw: 78 69 6f 73 29 5b 5c 73 2f 5d 28 5c 64 2b 28 5c 2e 3f 5f 3f 5c 64 2b 29 2b 29 2f 69 2c 65 29 3b 72 65 74 75 72 6e 20 72 26 26 28 74 2e 76 65 72 73 69 6f 6e 3d 72 29 2c 74 7d 7d 2c 7b 74 65 73 74 3a 5b 2f 65 70 69 70 68 61 6e 79 2f 69 5d 2c 64 65 73 63 72 69 62 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 6e 61 6d 65 3a 22 45 70 69 70 68 61 6e 79 22 7d 2c 72 3d 6e 2e 64 65 66 61 75 6c 74 2e 67 65 74 46 69 72 73 74 4d 61 74 63 68 28 73 2c 65 29 7c 7c 6e 2e 64 65 66 61 75 6c 74 2e 67 65 74 46 69 72 73 74 4d 61 74 63 68 28 2f 28 3f 3a 65 70 69 70 68 61 6e 79 29 5b 5c 73 2f 5d 28 5c 64 2b 28 5c 2e 3f 5f 3f 5c 64 2b 29 2b 29 2f 69 2c 65 29 3b 72 65 74 75 72 6e 20 72 26 26 28 74 2e 76 65 72 73 69 6f 6e 3d 72 29 2c 74 7d 7d 2c 7b 74 65 73 74 3a Data Ascii: xios)[\s/](\d+(\.?_?\d+)+)/i,e);return r&&(t.version=r),t}},{test:[/epiphany/i],describe:function(e){var t={name:"Epiphany"},r=n.default.getFirstMatch(s,e)\|\|n.default.getFirstMatch(/(?:epiphany)[\s/](\d+(\.?_?\d+)+)/i,e);return r&&(t.version=r),t}},{test:
2024-10-30 07:46:28 UTC	1369	IN	Data Raw: 20 7c 72 76 3a 29 28 5c 64 2b 28 5c 2e 3f 5f 3f 5c 64 2b 29 2b 29 2f 69 2c 65 29 3b 72 65 74 75 72 6e 20 72 26 26 28 74 2e 76 65 72 73 69 6f 6e 3d 72 29 2c 74 7d 7d 2c 7b 74 65 73 74 3a 5b 2f 5c 73 65 64 67 5c 2f 2f 69 5d 2c 64 65 73 63 72 69 62 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 6e 61 6d 65 3a 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 7d 2c 72 3d 6e 2e 64 65 66 61 75 6c 74 2e 67 65 74 46 69 72 73 74 4d 61 74 63 68 28 2f 5c 73 65 64 67 5c 2f 28 5c 64 2b 28 5c 2e 3f 5f 3f 5c 64 2b 29 2b 29 2f 69 2c 65 29 3b 72 65 74 75 72 6e 20 72 26 26 28 74 2e 76 65 72 73 69 6f 6e 3d 72 29 2c 74 7d 7d 2c 7b 74 65 73 74 3a 5b 2f 65 64 67 28 5b 65 61 5d 7c 69 6f 73 29 2f 69 5d 2c 64 65 73 63 72 69 62 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 Data Ascii: \|rv:)(\d+(\.?_?\d+)+)/i,e);return r&&(t.version=r),t}},{test:[/\sedg\//i],describe:function(e){var t={name:"Microsoft Edge"},r=n.default.getFirstMatch(/\sedg\/(\d+(\.?_?\d+)+)/i,e);return r&&(t.version=r),t}},{test:[/edg([ea]\|ios)/i],describe:function(e)
2024-10-30 07:46:28 UTC	1369	IN	Data Raw: 6d 65 3a 22 42 6c 61 63 6b 42 65 72 72 79 22 7d 2c 72 3d 6e 2e 64 65 66 61 75 6c 74 2e 67 65 74 46 69 72 73 74 4d 61 74 63 68 28 73 2c 65 29 7c 7c 6e 2e 64 65 66 61 75 6c 74 2e 67 65 74 46 69 72 73 74 4d 61 74 63 68 28 2f 62 6c 61 63 6b 62 65 72 72 79 5b 5c 64 5d 2b 5c 2f 28 5c 64 2b 28 5c 2e 3f 5f 3f 5c 64 2b 29 2b 29 2f 69 2c 65 29 3b 72 65 74 75 72 6e 20 72 26 26 28 74 2e 76 65 72 73 69 6f 6e 3d 72 29 2c 74 7d 7d 2c 7b 74 65 73 74 3a 5b 2f 28 77 65 62 7c 68 70 77 29 5b 6f 30 5d 73 2f 69 5d 2c 64 65 73 63 72 69 62 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 6e 61 6d 65 3a 22 57 65 62 4f 53 20 42 72 6f 77 73 65 72 22 7d 2c 72 3d 6e 2e 64 65 66 61 75 6c 74 2e 67 65 74 46 69 72 73 74 4d 61 74 63 68 28 73 2c 65 29 7c 7c 6e 2e 64 65 66 61 Data Ascii: me:"BlackBerry"},r=n.default.getFirstMatch(s,e)\|\|n.default.getFirstMatch(/blackberry[\d]+\/(\d+(\.?_?\d+)+)/i,e);return r&&(t.version=r),t}},{test:[/(web\|hpw)[o0]s/i],describe:function(e){var t={name:"WebOS Browser"},r=n.default.getFirstMatch(s,e)\|\|n.defa
2024-10-30 07:46:28 UTC	1369	IN	Data Raw: 3b 72 65 74 75 72 6e 20 72 26 26 28 74 2e 76 65 72 73 69 6f 6e 3d 72 29 2c 74 7d 7d 2c 7b 74 65 73 74 3a 5b 2f 63 68 72 6f 6d 65 7c 63 72 69 6f 73 7c 63 72 6d 6f 2f 69 5d 2c 64 65 73 63 72 69 62 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 6e 61 6d 65 3a 22 43 68 72 6f 6d 65 22 7d 2c 72 3d 6e 2e 64 65 66 61 75 6c 74 2e 67 65 74 46 69 72 73 74 4d 61 74 63 68 28 2f 28 3f 3a 63 68 72 6f 6d 65 7c 63 72 69 6f 73 7c 63 72 6d 6f 29 5c 2f 28 5c 64 2b 28 5c 2e 3f 5f 3f 5c 64 2b 29 2b 29 2f 69 2c 65 29 3b 72 65 74 75 72 6e 20 72 26 26 28 74 2e 76 65 72 73 69 6f 6e 3d 72 29 2c 74 7d 7d 2c 7b 74 65 73 74 3a 5b 2f 47 53 41 2f 69 5d 2c 64 65 73 63 72 69 62 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 6e 61 6d 65 3a 22 47 6f 6f 67 6c Data Ascii: ;return r&&(t.version=r),t}},{test:[/chrome\|crios\|crmo/i],describe:function(e){var t={name:"Chrome"},r=n.default.getFirstMatch(/(?:chrome\|crios\|crmo)\/(\d+(\.?_?\d+)+)/i,e);return r&&(t.version=r),t}},{test:[/GSA/i],describe:function(e){var t={name:"Googl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49832	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:29 UTC	4561	OUT	GET /_Incapsula_Resource?SWKMTFSR=1&e=0.7699246514200098 HTTP/1.1 Host: all.accor.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=uXhrmD2Na/K1uglc4DSccWmUi3lwT6U0aN5NKqvcu8d5WGWybG4+Fjgl4ne6nVjifX1jzgyPIuRTBhS6nanmMOLamS/KiojPrxeLcFng8UzPO+81sa87bs4RFhGAg5SdnTRio+RJdn41ZezkVQzm+QQNKVTMJBE8fIzHUqlLtmYsp4GqzAo9Tqkn29+6s06cnyhW9Bg2AjaE3z+uY1Kha+K1N+xGE1wxY+ov1hMjJJFJQKo0Zzr8yVUmc0uGx6VyOI/GCYB98MMi2baM/noo1d0GCT/eTJnamWBVosFVl6rGjGRpxA8WWwcog7Ny/HlQVp6w8cTkKFTg/8KjIPnCBapACqcVA8DvW2Oym2gj1AtBv4YYfUMq3TEu4mXRkOJJVmAh7NCUHwLhEc4aXJBIqbW6JkrW0slp4+M4RmDR1e+A3GrFYXelb56QL3DRn/v55w+TZWXTMoZhYCD+Z9T66/ [TRUNCATED]
2024-10-30 07:46:29 UTC	253	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Content-Type: text/plain Date: Wed, 30 Oct 2024 07:46:29 GMT server: MF 8700 S - Dyna-VT - Stage V All-in-One X-CDN-Forward: EdgeCast X-Robots-Tag: noindex Content-Length: 1 Connection: close
2024-10-30 07:46:29 UTC	1	IN	Data Raw: 31 Data Ascii: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49830	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:29 UTC	5011	OUT	GET /styles/styles-aem-header.css HTTP/1.1 Host: all.accor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://all.accor.com/a/en/new-app-offer/app-download.html?source_caller=bulk&af_qr=true&shortlink=5m1nc8of&c=20241013_ALL_AppBonusingMobileLp&af_ad=QR_code_20241013_ALL_AppBonusingMobileLp&pid=QR_code&deep_link_value=accor%3A%2F%2Fsearch%2Foffer%3Fpage_id%3Dddc8e830-2fc5-4492-ae7f-a63574b202f4&af_adset=EN Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=uXhrmD2Na/K1uglc4DSccWmUi3lwT6U0aN5NKqvcu8d5WGWybG4+Fjgl4ne6nVjifX1jzgyPIuRTBhS6nanmMOLamS/KiojPrxeLcFng8UzPO+81sa87bs4RFhGAg5SdnTRio+RJdn41ZezkVQzm+QQNKVTMJBE8fIzHUqlLtmYsp4GqzAo9Tqkn29+6s06cnyhW9Bg2AjaE3z+uY1Kha+K1N+xGE1wxY+ov1hMjJJFJQKo0Zzr8yVUmc0uGx6VyOI/GCYB98MMi2baM/noo1d0GCT/eTJnamWBVosFVl6rGjGRpxA8WWwcog7Ny/HlQVp6w8cTkKFTg/8KjIPnCBapACqcVA8DvW2Oym2gj1AtBv4YYfUMq3TEu4mXRkOJJVmAh7NCUHwLhEc4aXJBIqbW6JkrW0slp4+M4RmDR1e+A3GrFYXelb56QL3DRn/v55w+TZWXTMoZhYCD+Z9T66/ [TRUNCATED]
2024-10-30 07:46:29 UTC	606	IN	HTTP/1.1 200 OK Age: 161062 Cache-control: public, max-age=3600, stale-while-revalidate=21600 Content-Type: text/css Date: Wed, 30 Oct 2024 07:46:29 GMT Last-Modified: Mon, 28 Oct 2024 11:02:07 GMT P3P: CP="NO P3P POLICY" Referrer-Policy: origin Server: ECAcc (lhd/35BE) Strict-Transport-Security: max-age=15552000 Vary: Accept-Encoding X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Clacks-Overhead: GNU Terry Pratchett X-Iinfo: 5-362296-362297 NNNN CT(14 19 0) RT(1730113327347 3) q(0 0 0 0) r(1 1) U24 X-XSS-Protection: 1; mode=block Content-Length: 115798 Connection: close
2024-10-30 07:46:29 UTC	16383	IN	Data Raw: 40 6b 65 79 66 72 61 6d 65 73 20 6c 6f 61 64 69 6e 67 53 70 69 6e 6e 65 72 7b 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 6c 6f 61 64 69 6e 67 2d 72 6f 74 61 74 65 2d 6b 65 79 66 72 61 6d 65 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 5a 28 30 64 65 67 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 5a 28 33 36 30 64 65 67 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 6c 6f 61 64 69 6e 67 2d 63 69 72 63 6c 65 2d 6b 65 79 66 72 61 6d 65 7b 30 25 2c 32 35 25 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 37 38 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 29 7d 35 30 25 2c 37 35 25 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 Data Ascii: @keyframes loadingSpinner{to{transform:rotate(360deg)}}@keyframes loading-rotate-keyframe{0%{transform:rotateZ(0deg)}to{transform:rotateZ(360deg)}}@keyframes loading-circle-keyframe{0%,25%{stroke-dashoffset:178;transform:rotate(0)}50%,75%{stroke-dashoffse
2024-10-30 07:46:29 UTC	1	IN	Data Raw: 6f Data Ascii: o
2024-10-30 07:46:29 UTC	16383	IN	Data Raw: 67 6f 20 2e 6d 61 69 6e 4c 6f 67 6f 5f 5f 61 6c 6c 3e 73 76 67 7b 68 65 69 67 68 74 3a 33 30 70 78 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 33 73 3b 77 69 64 74 68 3a 31 30 30 70 78 7d 23 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 20 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 70 72 69 6d 61 72 79 48 65 61 64 65 72 5f 5f 77 72 61 70 70 65 72 48 65 61 64 20 2e 6d 61 69 6e 4c 6f 67 6f 20 2e 6d 61 69 6e 4c 6f 67 6f 5f 5f 61 6c 6c 3e 73 76 67 20 70 61 74 68 7b 66 69 6c 6c 3a 23 31 65 31 38 35 32 7d 23 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5b 64 61 74 61 2d 63 6f 6e 74 72 69 62 7a 6f 6e 65 3d 75 6e 69 74 65 64 2d 6b 69 6e 67 64 6f 6d 5d Data Ascii: go .mainLogo__all>svg{height:30px;transition:all .3s;width:100px}#link-navigation.link-navigation .link-navigation__primaryHeader__wrapperHead .mainLogo .mainLogo__all>svg path{fill:#1e1852}#link-navigation.link-navigation[data-contribzone=united-kingdom]
2024-10-30 07:46:29 UTC	16383	IN	Data Raw: 6e 5f 5f 70 65 72 6d 61 6e 65 6e 74 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 70 6c 61 6e 67 75 65 73 20 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 6d 65 6e 75 5f 5f 6c 69 6e 6b 20 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 66 6c 61 67 2c 23 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 20 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 6e 61 76 5f 5f 6d 65 6e 75 20 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 6d 65 6e 75 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 70 72 6f 2d 73 6f 6c 75 74 69 6f 6e 73 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 70 6c 61 6e 67 75 65 73 20 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 6d 65 6e 75 5f Data Ascii: n__permanent.link-navigation__plangues .link-navigation__menu__link .link-navigation__flag,#link-navigation.link-navigation .link-navigation__nav__menu .link-navigation__menu.link-navigation__pro-solutions.link-navigation__plangues .link-navigation__menu_
2024-10-30 07:46:29 UTC	16383	IN	Data Raw: 67 61 74 69 6f 6e 5f 5f 63 6f 6c 20 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 61 63 63 6f 72 64 69 6f 6e 3e 64 69 76 3a 61 66 74 65 72 7b 63 6f 6c 6f 72 3a 23 32 35 32 33 33 39 3b 63 6f 6e 74 65 6e 74 3a 22 2b 22 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 31 38 70 78 3b 74 6f 70 3a 31 38 70 78 7d 23 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 20 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 70 61 6e 65 6c 5f 5f 63 6f 6c 75 6d 6e 20 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 63 6f 6e 74 65 6e 74 20 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 63 6f 6c 20 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 61 63 63 6f 72 64 69 6f 6e 3e Data Ascii: gation__col .link-navigation__accordion>div:after{color:#252339;content:"+";position:absolute;right:18px;top:18px}#link-navigation.link-navigation .link-navigation__panel__column .link-navigation__content .link-navigation__col .link-navigation__accordion>
2024-10-30 07:46:29 UTC	3	IN	Data Raw: 67 61 74 Data Ascii: gat
2024-10-30 07:46:29 UTC	16383	IN	Data Raw: 69 6f 6e 20 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 70 72 69 6d 61 72 79 48 65 61 64 65 72 5f 5f 77 72 61 70 70 65 72 48 65 61 64 20 2e 62 75 72 67 65 72 4d 65 6e 75 5f 5f 69 63 6f 6e 3a 61 66 74 65 72 2c 23 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 20 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 70 72 69 6d 61 72 79 48 65 61 64 65 72 5f 5f 77 72 61 70 70 65 72 48 65 61 64 20 2e 62 75 72 67 65 72 4d 65 6e 75 5f 5f 69 63 6f 6e 3a 62 65 66 6f 72 65 7b 68 65 69 67 68 74 3a 32 70 78 3b 77 69 64 74 68 3a 32 2e 32 65 6d 7d 23 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 20 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 70 72 69 6d 61 Data Ascii: ion .link-navigation__primaryHeader__wrapperHead .burgerMenu__icon:after,#link-navigation.link-navigation .link-navigation__primaryHeader__wrapperHead .burgerMenu__icon:before{height:2px;width:2.2em}#link-navigation.link-navigation .link-navigation__prima
2024-10-30 07:46:29 UTC	16383	IN	Data Raw: 61 76 69 67 61 74 69 6f 6e 2e 68 65 61 64 65 72 2d 69 6e 6c 69 6e 65 20 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 70 72 69 6d 61 72 79 48 65 61 64 65 72 2e 67 65 6f 6c 6f 63 2d 73 65 6c 65 63 74 6f 72 2d 64 69 73 61 62 6c 65 64 2e 63 75 72 72 65 6e 63 79 2d 73 65 6c 65 63 74 6f 72 2d 64 69 73 61 62 6c 65 64 20 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 6e 61 76 5f 5f 75 73 65 72 70 72 65 66 73 2c 23 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2e 68 65 61 64 65 72 2d 69 6e 6c 69 6e 65 20 2e 6d 61 69 6e 4c 6f 67 6f 2d 2d 6d 6f 62 69 6c 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 23 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2e 68 65 61 Data Ascii: avigation.header-inline .link-navigation__primaryHeader.geoloc-selector-disabled.currency-selector-disabled .link-navigation__nav__userprefs,#link-navigation.link-navigation.header-inline .mainLogo--mobile{display:none}#link-navigation.link-navigation.hea
2024-10-30 07:46:29 UTC	16383	IN	Data Raw: 76 69 67 61 74 69 6f 6e 5f 5f 70 61 6e 65 6c 5f 5f 73 63 72 6f 6c 6c 20 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 70 61 6e 65 6c 5f 5f 74 6f 70 20 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 70 61 6e 65 6c 5f 5f 63 6f 6c 75 6d 6e 20 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 63 6f 6e 74 65 6e 74 20 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 63 6f 6c 7b 6d 61 78 2d 77 69 64 74 68 3a 33 36 35 70 78 3b 2d 6d 73 2d 66 6c 65 78 3a 31 20 31 20 30 70 78 3b 66 6c 65 78 3a 31 20 31 20 30 70 78 3b 77 69 64 74 68 3a 31 30 30 25 7d 23 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2e 68 65 61 64 65 72 2d 69 6e 6c 69 6e 65 20 2e 6a 73 2d 6d 6f 72 65 2d 69 74 65 6d 20 2e 6c 69 6e Data Ascii: vigation__panel__scroll .link-navigation__panel__top .link-navigation__panel__column .link-navigation__content .link-navigation__col{max-width:365px;-ms-flex:1 1 0px;flex:1 1 0px;width:100%}#link-navigation.link-navigation.header-inline .js-more-item .lin
2024-10-30 07:46:29 UTC	1113	IN	Data Raw: 6f 76 20 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 77 72 61 70 70 65 72 7b 74 6f 70 3a 35 2e 36 72 65 6d 7d 7d 23 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2e 68 65 61 64 65 72 2d 69 6e 6c 69 6e 65 20 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 70 72 69 6d 61 72 79 48 65 61 64 65 72 2d 2d 6e 6f 76 20 2e 64 65 70 65 6e 64 65 6e 74 64 72 6f 70 64 6f 77 6e 5f 5f 62 74 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 65 32 32 61 61 21 69 6d 70 6f 72 74 61 6e 74 7d 23 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2e 68 65 61 64 65 72 2d 69 6e 6c 69 6e 65 20 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 70 72 69 6d 61 72 Data Ascii: ov .link-navigation__wrapper{top:5.6rem}}#link-navigation.link-navigation.header-inline .link-navigation__primaryHeader--nov .dependentdropdown__btn{background-color:#1e22aa!important}#link-navigation.link-navigation.header-inline .link-navigation__primar

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49836	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:29 UTC	4730	OUT	GET /ruxitagentjs_ICA7NVfhqrux_10285240307101407.js HTTP/1.1 Host: all.accor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://all.accor.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=uXhrmD2Na/K1uglc4DSccWmUi3lwT6U0aN5NKqvcu8d5WGWybG4+Fjgl4ne6nVjifX1jzgyPIuRTBhS6nanmMOLamS/KiojPrxeLcFng8UzPO+81sa87bs4RFhGAg5SdnTRio+RJdn41ZezkVQzm+QQNKVTMJBE8fIzHUqlLtmYsp4GqzAo9Tqkn29+6s06cnyhW9Bg2AjaE3z+uY1Kha+K1N+xGE1wxY+ov1hMjJJFJQKo0Zzr8yVUmc0uGx6VyOI/GCYB98MMi2baM/noo1d0GCT/eTJnamWBVosFVl6rGjGRpxA8WWwcog7Ny/HlQVp6w8cTkKFTg/8KjIPnCBapACqcVA8DvW2Oym2gj1AtBv4YYfUMq3TEu4mXRkOJJVmAh7NCUHwLhEc4aXJBIqbW6JkrW0slp4+M4RmDR1e+A3GrFYXelb56QL3DRn/v55w+TZWXTMoZhYCD+Z9T66/ [TRUNCATED]
2024-10-30 07:46:29 UTC	663	IN	HTTP/1.1 200 OK Age: 161140 Cache-Control: public, max-age=3600, stale-while-revalidate=21600 Content-Type: text/javascript; charset=utf-8 Date: Wed, 30 Oct 2024 07:46:29 GMT Expires: Thu, 30 Oct 2025 07:46:29 GMT Last-Modified: Mon, 28 Oct 2024 11:00:49 GMT P3P: CP="NO P3P POLICY" Referrer-Policy: origin Server: ECAcc (lhd/35C9) Strict-Transport-Security: max-age=15552000 Vary: Accept-Encoding X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Clacks-Overhead: GNU Terry Pratchett X-Iinfo: 16-157356282-157353079 pNNy RT(1730113249534 2) q(0 0 0 0) r(1 1) U24 X-XSS-Protection: 1; mode=block Content-Length: 225705 Connection: close
2024-10-30 07:46:29 UTC	16383	IN	Data Raw: 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 61 6e 64 20 6c 69 63 65 6e 73 65 73 20 73 65 65 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 79 6e 61 74 72 61 63 65 2e 63 6f 6d 2f 63 6f 6d 70 61 6e 79 2f 74 72 75 73 74 2d 63 65 6e 74 65 72 2f 63 75 73 74 6f 6d 65 72 73 2f 72 65 70 6f 72 74 73 2f 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 4b 61 28 29 7b 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 22 22 2e 63 6f 6e 63 61 74 28 22 5f 5f 64 54 43 6f 6f 6b 69 65 22 2c 22 3d 22 29 2e 63 6f 6e 63 61 74 28 22 31 22 2c 22 3b 53 61 6d 65 53 69 74 65 3d 4c 61 78 22 29 3b 76 61 72 20 42 61 3d 2d 31 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 69 6e 64 65 78 4f 66 28 22 5f 5f 64 54 43 6f 6f 6b 69 65 22 29 3b 64 6f 63 75 6d 65 6e Data Ascii: /* Copyright and licenses see https://www.dynatrace.com/company/trust-center/customers/reports/ */(function(){function Ka(){document.cookie="".concat("__dTCookie","=").concat("1",";SameSite=Lax");var Ba=-1!==document.cookie.indexOf("__dTCookie");documen
2024-10-30 07:46:29 UTC	16383	IN	Data Raw: 3d 71 2e 64 54 5f 3b 69 66 28 78 26 26 22 65 61 22 69 6e 20 78 26 26 22 31 30 32 38 35 32 34 30 33 30 37 31 30 31 34 30 37 22 3d 3d 3d 78 2e 76 65 72 73 69 6f 6e 29 72 65 74 75 72 6e 20 78 2e 74 64 74 6f 28 29 3b 71 3d 71 21 3d 3d 71 2e 70 61 72 65 6e 74 3f 71 2e 70 61 72 65 6e 74 3a 76 6f 69 64 20 30 7d 7d 63 61 74 63 68 28 57 29 7b 7d 72 65 74 75 72 6e 20 67 7d 66 75 6e 63 74 69 6f 6e 20 4d 63 28 67 2c 71 2c 78 29 7b 76 61 72 20 57 3d 6b 61 28 22 70 63 6c 22 29 3b 57 3d 67 2e 6c 65 6e 67 74 68 2d 57 3b 30 3c 57 26 26 67 2e 73 70 6c 69 63 65 28 30 2c 57 29 3b 57 3d 46 28 51 61 28 68 64 28 29 2c 78 29 29 3b 66 6f 72 28 76 61 72 20 49 3d 5b 5d 2c 78 61 3d 57 3f 22 22 2e 63 6f 6e 63 61 74 28 57 2c 22 24 22 29 3a 22 22 2c 48 62 3d 30 3b 48 62 3c 67 2e 6c 65 Data Ascii: =q.dT_;if(x&&"ea"in x&&"10285240307101407"===x.version)return x.tdto();q=q!==q.parent?q.parent:void 0}}catch(W){}return g}function Mc(g,q,x){var W=ka("pcl");W=g.length-W;0<W&&g.splice(0,W);W=F(Qa(hd(),x));for(var I=[],xa=W?"".concat(W,"$"):"",Hb=0;Hb<g.le
2024-10-30 07:46:29 UTC	16383	IN	Data Raw: 20 71 68 3d 50 65 5b 51 65 5d 3b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 71 68 26 26 28 54 62 5b 51 65 5d 3d 71 68 29 7d 72 61 28 54 62 29 7d 76 61 72 20 52 65 3d 6e 75 6c 6c 3d 3d 3d 28 64 65 3d 28 41 64 3d 50 28 29 29 2e 67 43 50 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 64 65 3f 76 6f 69 64 20 30 3a 64 65 2e 63 61 6c 6c 28 41 64 29 2c 72 68 3d 4f 28 22 63 75 63 22 29 3b 69 66 28 52 65 26 26 52 65 21 3d 3d 72 68 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 70 6c 61 74 66 6f 72 6d 50 72 65 66 69 78 20 61 6e 64 20 63 75 63 20 64 6f 20 6e 6f 74 20 6d 61 74 63 68 21 22 29 3b 48 65 3d 21 30 7d 69 66 28 21 48 65 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 45 72 72 6f 72 20 64 75 72 69 6e 67 20 63 6f 6e 66 69 67 20 69 6e 69 74 69 61 6c 69 7a 61 74 Data Ascii: qh=Pe[Qe];"undefined"!==typeof qh&&(Tb[Qe]=qh)}ra(Tb)}var Re=null===(de=(Ad=P()).gCP)\|\|void 0===de?void 0:de.call(Ad),rh=O("cuc");if(Re&&Re!==rh)throw Error("platformPrefix and cuc do not match!");He=!0}if(!He)throw Error("Error during config initializat
2024-10-30 07:46:29 UTC	16383	IN	Data Raw: 55 54 54 4f 4e 22 21 3d 3d 6b 26 26 22 53 55 42 4d 49 54 22 21 3d 3d 6b 26 26 22 52 45 53 45 54 22 21 3d 3d 6b 26 26 22 49 4d 41 47 45 22 21 3d 3d 6b 3f 6e 75 6c 6c 3a 62 2e 76 61 6c 75 65 2c 61 3d 50 61 28 62 2e 69 64 29 2c 66 3d 0a 21 6b 7c 7c 22 42 55 54 54 4f 4e 22 21 3d 3d 6b 26 26 22 53 55 42 4d 49 54 22 21 3d 3d 6b 26 26 22 52 45 53 45 54 22 21 3d 3d 6b 3f 65 62 28 61 2c 66 29 3a 65 62 28 66 2c 61 29 29 2c 66 7c 7c 28 66 3d 65 62 28 4c 62 28 62 29 29 29 2c 6e 3d 66 29 3a 6e 3d 22 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 66 3d 22 22 3b 69 66 28 44 62 28 62 29 26 26 22 48 49 44 44 45 4e 22 21 3d 3d 6b 7c 7c 62 26 26 22 42 55 54 54 4f 4e 22 3d 3d 3d 62 2e 6e 6f 64 65 4e 61 6d 65 29 6b 3d 22 49 4d 41 47 45 22 3d 3d 3d 6b 3f 62 2e 67 65 74 41 74 74 Data Ascii: UTTON"!==k&&"SUBMIT"!==k&&"RESET"!==k&&"IMAGE"!==k?null:b.value,a=Pa(b.id),f=!k\|\|"BUTTON"!==k&&"SUBMIT"!==k&&"RESET"!==k?eb(a,f):eb(f,a)),f\|\|(f=eb(Lb(b))),n=f):n="";break;case 1:f="";if(Db(b)&&"HIDDEN"!==k\|\|b&&"BUTTON"===b.nodeName)k="IMAGE"===k?b.getAtt
2024-10-30 07:46:29 UTC	16383	IN	Data Raw: 6e 29 7b 54 62 28 62 2c 66 2c 6e 2c 6b 29 3b 72 65 74 75 72 6e 20 6b 7d 2c 7b 71 62 3a 6e 75 6c 6c 2c 61 64 3a 4e 75 6d 62 65 72 2e 4d 41 58 5f 56 41 4c 55 45 7d 29 2e 71 62 7d 0a 66 75 6e 63 74 69 6f 6e 20 74 65 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 47 61 28 61 2c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 66 2e 69 6e 69 74 69 61 74 6f 72 54 79 70 65 3d 3d 3d 62 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 51 63 28 61 29 7b 72 65 74 75 72 6e 20 53 69 26 26 72 61 28 61 2c 31 33 29 26 26 22 6e 61 76 69 67 61 74 69 6f 6e 22 21 3d 3d 61 2e 65 6e 74 72 79 54 79 70 65 7c 7c 72 61 28 61 2c 5b 22 5f 64 74 43 6c 22 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 43 65 28 61 29 7b 72 65 74 75 72 6e 20 41 6d 26 26 72 61 28 61 2c 31 34 29 7c 7c 72 61 28 61 2c 5b 22 65 6e Data Ascii: n){Tb(b,f,n,k);return k},{qb:null,ad:Number.MAX_VALUE}).qb}function te(a,b){return Ga(a,function(f){return f.initiatorType===b})}function Qc(a){return Si&&ra(a,13)&&"navigation"!==a.entryType\|\|ra(a,["_dtCl"])}function Ce(a){return Am&&ra(a,14)\|\|ra(a,["en
2024-10-30 07:46:29 UTC	16383	IN	Data Raw: 28 21 62 29 7b 62 3d 55 63 3b 66 3d 62 2e 74 69 6d 65 73 74 61 6d 70 3b 76 61 72 20 6e 3d 62 2e 67 72 6f 75 70 2c 42 3d 62 2e 74 72 69 67 67 65 72 3b 0a 61 2e 61 76 28 6b 2c 22 74 76 6e 22 2c 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 47 28 62 2e 6e 61 6d 65 29 29 29 3b 61 2e 61 76 28 6b 2c 22 74 76 74 22 2c 66 2b 22 22 29 3b 61 2e 61 76 28 6b 2c 22 74 76 6d 22 2c 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 6e 62 28 62 29 29 29 3b 61 2e 61 76 28 6b 2c 22 74 76 74 72 67 22 2c 42 2b 22 22 29 3b 6e 26 26 61 2e 61 76 28 6b 2c 22 74 76 67 22 2c 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 47 28 6e 29 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 24 67 28 29 7b 48 6a 7c 7c 28 48 6a 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 Data Ascii: (!b){b=Uc;f=b.timestamp;var n=b.group,B=b.trigger;a.av(k,"tvn",encodeURIComponent(G(b.name)));a.av(k,"tvt",f+"");a.av(k,"tvm",encodeURIComponent(nb(b)));a.av(k,"tvtrg",B+"");n&&a.av(k,"tvg",encodeURIComponent(G(n)))}}function $g(){Hj\|\|(Hj=document.create
2024-10-30 07:46:29 UTC	16383	IN	Data Raw: 68 28 61 5b 66 5d 29 3b 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 6e 6a 28 29 7b 65 69 3d 76 6c 2e 63 6f 6e 6e 65 63 74 69 6f 6e 3b 7a 62 28 22 65 6e 69 22 29 26 26 65 69 26 26 75 66 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 66 2c 6b 29 7b 21 62 26 26 45 66 26 26 65 69 26 26 28 62 3d 22 22 2e 63 6f 6e 63 61 74 28 65 69 2e 65 66 66 65 63 74 69 76 65 54 79 70 65 7c 7c 0a 22 2d 22 2c 22 7c 22 29 2e 63 6f 6e 63 61 74 28 65 69 2e 64 6f 77 6e 6c 69 6e 6b 7c 7c 2d 31 29 2c 65 69 2e 74 79 70 65 26 26 28 62 3d 22 22 2e 63 6f 6e 63 61 74 28 62 2c 22 7c 22 29 2e 63 6f 6e 63 61 74 28 65 69 2e 74 79 70 65 29 29 2c 61 2e 61 76 28 6b 2c 22 6e 69 22 2c 62 2c 21 31 29 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 57 6c 28 61 29 7b 72 65 74 75 72 6e 22 6c 6f 6e 67 74 Data Ascii: h(a[f]);return b}function nj(){ei=vl.connection;zb("eni")&&ei&&uf(function(a,b,f,k){!b&&Ef&&ei&&(b="".concat(ei.effectiveType\|\|"-","\|").concat(ei.downlink\|\|-1),ei.type&&(b="".concat(b,"\|").concat(ei.type)),a.av(k,"ni",b,!1))})}function Wl(a){return"longt
2024-10-30 07:46:29 UTC	7	IN	Data Raw: 5f 3d 0a 28 54 61 3d Data Ascii: _=(Ta=
2024-10-30 07:46:29 UTC	16383	IN	Data Raw: 7b 7d 2c 54 61 2e 62 6c 6f 63 6b 65 64 55 52 4c 3d 52 61 2c 54 61 2e 64 6f 63 75 6d 65 6e 74 55 52 4c 3d 52 61 2c 54 61 2e 72 65 66 65 72 72 65 72 3d 52 61 2c 54 61 2e 73 6f 75 72 63 65 46 69 6c 65 3d 52 61 2c 54 61 29 2c 69 61 2e 5f 63 75 73 74 6f 6d 65 72 72 6f 72 5f 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 22 6e 61 6d 65 22 3d 3d 3d 61 3f 53 61 28 61 2c 62 2c 21 30 2c 31 45 33 29 3a 53 61 28 61 2c 62 2c 21 30 2c 51 62 28 22 6d 63 65 70 73 6c 22 29 29 7d 2c 69 61 2e 5f 76 63 5f 3d 28 58 61 3d 7b 7d 2c 58 61 2e 56 45 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 62 7d 2c 58 61 29 2c 69 61 2e 5f 64 6a 5f 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 62 7d 2c 69 61 2e 5f 77 76 5f 3d 28 45 62 3d Data Ascii: {},Ta.blockedURL=Ra,Ta.documentURL=Ra,Ta.referrer=Ra,Ta.sourceFile=Ra,Ta),ia._customerror_=function(a,b){return"name"===a?Sa(a,b,!0,1E3):Sa(a,b,!0,Qb("mcepsl"))},ia._vc_=(Xa={},Xa.VE=function(a,b){return b},Xa),ia._dj_=function(a,b){return b},ia._wv_=(Eb=
2024-10-30 07:46:29 UTC	16383	IN	Data Raw: 29 3b 74 68 69 73 2e 70 61 72 65 6e 74 26 26 28 66 26 26 28 74 68 69 73 2e 50 63 28 29 7c 7c 62 2b 2b 2c 74 68 69 73 2e 70 61 72 65 6e 74 2e 5a 62 2b 2b 29 2c 74 68 69 73 2e 70 61 72 65 6e 74 2e 73 65 28 62 29 29 7d 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 50 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 2d 31 21 3d 3d 64 6d 2e 69 6e 64 65 78 4f 66 28 74 68 69 73 2e 74 79 70 65 29 7d 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 64 68 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 66 6f 72 28 76 61 72 20 66 3d 74 68 69 73 2e 73 75 62 41 63 74 69 6f 6e 73 2c 6b 3d 66 2e 6c 65 6e 67 74 68 2d 31 3b 30 3c 3d 6b 3b 6b 2d 2d 29 69 66 28 66 5b 6b 5d 3d 3d 3d 62 29 7b 5a 61 28 66 2c 6b 29 3b 62 2e 70 61 72 65 6e 74 3d 76 6f 69 64 20 30 3b 62 72 65 61 6b 7d 7d 3b 72 65 Data Ascii: );this.parent&&(f&&(this.Pc()\|\|b++,this.parent.Zb++),this.parent.se(b))};a.prototype.Pc=function(){return-1!==dm.indexOf(this.type)};a.prototype.dh=function(b){for(var f=this.subActions,k=f.length-1;0<=k;k--)if(f[k]===b){Za(f,k);b.parent=void 0;break}};re

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49838	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:29 UTC	5142	OUT	GET /a/etc/cloudsettings.kernel.js/conf/all/settings/cloudsettings/default/contexthub HTTP/1.1 Host: all.accor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://all.accor.com/a/en/new-app-offer/app-download.html?source_caller=bulk&af_qr=true&shortlink=5m1nc8of&c=20241013_ALL_AppBonusingMobileLp&af_ad=QR_code_20241013_ALL_AppBonusingMobileLp&pid=QR_code&deep_link_value=accor%3A%2F%2Fsearch%2Foffer%3Fpage_id%3Dddc8e830-2fc5-4492-ae7f-a63574b202f4&af_adset=EN Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=uXhrmD2Na/K1uglc4DSccWmUi3lwT6U0aN5NKqvcu8d5WGWybG4+Fjgl4ne6nVjifX1jzgyPIuRTBhS6nanmMOLamS/KiojPrxeLcFng8UzPO+81sa87bs4RFhGAg5SdnTRio+RJdn41ZezkVQzm+QQNKVTMJBE8fIzHUqlLtmYsp4GqzAo9Tqkn29+6s06cnyhW9Bg2AjaE3z+uY1Kha+K1N+xGE1wxY+ov1hMjJJFJQKo0Zzr8yVUmc0uGx6VyOI/GCYB98MMi2baM/noo1d0GCT/eTJnamWBVosFVl6rGjGRpxA8WWwcog7Ny/HlQVp6w8cTkKFTg/8KjIPnCBapACqcVA8DvW2Oym2gj1AtBv4YYfUMq3TEu4mXRkOJJVmAh7NCUHwLhEc4aXJBIqbW6JkrW0slp4+M4RmDR1e+A3GrFYXelb56QL3DRn/v55w+TZWXTMoZhYCD+Z9T66/ [TRUNCATED] Range: bytes=278518-278518 If-Range: "4072373aaeec72ecb1cfd1006ed76265d6e36ca4-gzip+ident"
2024-10-30 07:46:29 UTC	812	IN	HTTP/1.1 200 OK Age: 164191 cache-control: max-age=864000, stale-if-error=3600, stale-while-revalidate=3600 Content-Type: application/javascript; charset=utf-8 Date: Wed, 30 Oct 2024 07:46:29 GMT Etag: "4072373aaeec72ecb1cfd1006ed76265d6e36ca4-gzip+ident" Last-Modified: Mon, 28 Oct 2024 11:00:52 GMT Server: ECAcc (lhd/3729) Strict-Transport-Security: max-age=31557600 Vary: Accept-Encoding X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Content-Type-Options: nosniff x-frame-options: SAMEORIGIN x-frame-options: SAMEORIGIN X-Iinfo: 16-16239761-16239763 NNNY CT(15 16 0) RT(1730113252346 4) q(0 0 0 11) r(0 0) U24 X-Served-By: cache-fra-etou8220122-FRA x-sky-isauth: 0 X-Timer: S1730113253.576660,VS0,VS0,VE3 x-vhost: prod-allcom-publish Content-Length: 329309 Connection: close
2024-10-30 07:46:29 UTC	16383	IN	Data Raw: 2f 2a 0a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 33 2e 35 2e 31 0a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 0a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 68 74 74 70 73 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 0a 20 44 61 74 65 3a 20 32 30 32 30 2d 30 35 2d 30 34 54 32 32 3a 34 39 5a 0a 20 53 69 7a 7a 6c 65 20 43 53 53 20 53 65 6c 65 63 74 Data Ascii: /* jQuery JavaScript Library v3.5.1 https://jquery.com/ Includes Sizzle.js https://sizzlejs.com/ Copyright JS Foundation and other contributors Released under the MIT license https://jquery.org/license Date: 2020-05-04T22:49Z Sizzle CSS Select
2024-10-30 07:46:29 UTC	16383	IN	Data Raw: 72 20 47 3d 64 28 62 5b 76 5d 2c 76 2c 6e 29 3b 6e 75 6c 6c 21 3d 47 26 26 7a 2e 70 75 73 68 28 47 29 7d 65 6c 73 65 20 66 6f 72 28 76 20 69 6e 20 62 29 47 3d 64 28 62 5b 76 5d 2c 76 2c 6e 29 2c 6e 75 6c 6c 21 3d 47 26 26 7a 2e 70 75 73 68 28 47 29 3b 72 65 74 75 72 6e 20 69 64 28 7a 29 7d 2c 67 75 69 64 3a 31 2c 73 75 70 70 6f 72 74 3a 4b 61 7d 29 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 28 71 2e 66 6e 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 7a 62 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 29 3b 71 2e 65 61 63 68 28 22 42 6f 6f 6c 65 61 6e 20 4e 75 6d 62 65 72 20 53 74 72 69 6e 67 20 46 75 6e 63 74 69 6f 6e 20 41 72 72 61 79 20 44 61 74 65 20 52 65 67 45 78 70 20 4f 62 6a 65 63 74 20 45 Data Ascii: r G=d(b[v],v,n);null!=G&&z.push(G)}else for(v in b)G=d(b[v],v,n),null!=G&&z.push(G);return id(z)},guid:1,support:Ka});"function"===typeof Symbol&&(q.fn[Symbol.iterator]=zb[Symbol.iterator]);q.each("Boolean Number String Function Array Date RegExp Object E
2024-10-30 07:46:29 UTC	2	IN	Data Raw: 31 29 Data Ascii: 1)
2024-10-30 07:46:29 UTC	16383	IN	Data Raw: 3a 32 2a 28 22 65 76 65 6e 22 3d 3d 3d 42 5b 33 5d 7c 7c 22 6f 64 64 22 3d 3d 3d 42 5b 33 5d 29 29 2c 42 5b 35 5d 3d 2b 28 42 5b 37 5d 2b 42 5b 38 5d 7c 7c 22 6f 64 64 22 3d 3d 3d 42 5b 33 5d 29 29 3a 42 5b 33 5d 26 26 64 2e 65 72 72 6f 72 28 42 5b 30 5d 29 3b 72 65 74 75 72 6e 20 42 7d 2c 50 53 45 55 44 4f 3a 66 75 6e 63 74 69 6f 6e 28 42 29 7b 76 61 72 20 4c 2c 4a 3d 21 42 5b 36 5d 26 26 42 5b 32 5d 3b 69 66 28 48 63 2e 43 48 49 4c 44 2e 74 65 73 74 28 42 5b 30 5d 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 42 5b 33 5d 3f 42 5b 32 5d 3d 42 5b 34 5d 7c 7c 42 5b 35 5d 7c 7c 22 22 3a 4a 26 26 71 64 2e 74 65 73 74 28 4a 29 26 26 0a 28 4c 3d 47 63 28 4a 2c 21 30 29 29 26 26 28 4c 3d 4a 2e 69 6e 64 65 78 4f 66 28 22 29 22 2c 4a 2e 6c 65 6e 67 74 68 2d 4c 29 2d Data Ascii: :2*("even"===B[3]\|\|"odd"===B[3])),B[5]=+(B[7]+B[8]\|\|"odd"===B[3])):B[3]&&d.error(B[0]);return B},PSEUDO:function(B){var L,J=!B[6]&&B[2];if(Hc.CHILD.test(B[0]))return null;B[3]?B[2]=B[4]\|\|B[5]\|\|"":J&&qd.test(J)&&(L=Gc(J,!0))&&(L=J.indexOf(")",J.length-L)-
2024-10-30 07:46:29 UTC	16383	IN	Data Raw: 6f 6e 28 62 2c 64 29 7b 75 61 2e 72 65 6d 6f 76 65 28 62 2c 64 29 7d 7d 29 3b 71 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 64 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 64 29 7b 76 61 72 20 6e 2c 70 3d 74 68 69 73 5b 30 5d 2c 76 3d 70 26 26 70 2e 61 74 74 72 69 62 75 74 65 73 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 62 29 7b 69 66 28 74 68 69 73 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 7a 3d 68 62 2e 67 65 74 28 70 29 3b 69 66 28 31 3d 3d 3d 70 2e 6e 6f 64 65 54 79 70 65 26 26 0a 21 75 61 2e 67 65 74 28 70 2c 22 68 61 73 44 61 74 61 41 74 74 72 73 22 29 29 7b 66 6f 72 28 6e 3d 76 2e 6c 65 6e 67 74 68 3b 6e 2d 2d 3b 29 69 66 28 76 5b 6e 5d 29 7b 76 61 72 20 47 3d 76 5b 6e 5d 2e 6e 61 6d 65 3b 30 3d 3d 3d 47 2e 69 6e 64 65 78 4f 66 28 22 64 61 74 61 2d 22 29 26 26 Data Ascii: on(b,d){ua.remove(b,d)}});q.fn.extend({data:function(b,d){var n,p=this[0],v=p&&p.attributes;if(void 0===b){if(this.length){var z=hb.get(p);if(1===p.nodeType&&!ua.get(p,"hasDataAttrs")){for(n=v.length;n--;)if(v[n]){var G=v[n].name;0===G.indexOf("data-")&&
2024-10-30 07:46:29 UTC	16383	IN	Data Raw: 28 51 7c 7c 76 29 26 26 22 62 6f 72 64 65 72 2d 62 6f 78 22 3d 3d 3d 71 2e 63 73 73 28 6e 2c 22 62 6f 78 53 69 7a 69 6e 67 22 2c 21 31 2c 47 29 3b 76 3d 76 3f 72 62 28 6e 2c 64 2c 76 2c 4b 2c 47 29 3a 30 3b 4b 26 26 51 26 26 28 76 2d 3d 4d 61 74 68 2e 63 65 69 6c 28 6e 5b 22 6f 66 66 73 65 74 22 2b 64 5b 30 5d 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2b 0a 64 2e 73 6c 69 63 65 28 31 29 5d 2d 70 61 72 73 65 46 6c 6f 61 74 28 47 5b 64 5d 29 2d 72 62 28 6e 2c 64 2c 22 62 6f 72 64 65 72 22 2c 21 31 2c 47 29 2d 2e 35 29 29 3b 76 26 26 28 7a 3d 67 63 2e 65 78 65 63 28 70 29 29 26 26 22 70 78 22 21 3d 3d 28 7a 5b 33 5d 7c 7c 22 70 78 22 29 26 26 28 6e 2e 73 74 79 6c 65 5b 64 5d 3d 70 2c 70 3d 71 2e 63 73 73 28 6e 2c 64 29 29 3b 72 65 74 75 72 6e 20 55 61 28 6e Data Ascii: (Q\|\|v)&&"border-box"===q.css(n,"boxSizing",!1,G);v=v?rb(n,d,v,K,G):0;K&&Q&&(v-=Math.ceil(n["offset"+d[0].toUpperCase()+d.slice(1)]-parseFloat(G[d])-rb(n,d,"border",!1,G)-.5));v&&(z=gc.exec(p))&&"px"!==(z[3]\|\|"px")&&(n.style[d]=p,p=q.css(n,d));return Ua(n
2024-10-30 07:46:29 UTC	16383	IN	Data Raw: 74 69 6f 6e 20 6e 28 61 61 2c 74 61 2c 76 61 2c 72 61 29 7b 76 61 72 20 4d 61 2c 46 61 3d 74 61 3b 69 66 28 21 5a 29 7b 5a 3d 21 30 3b 47 26 26 6d 2e 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 47 29 3b 70 3d 76 6f 69 64 20 30 3b 76 3d 72 61 7c 7c 22 22 3b 4e 2e 72 65 61 64 79 53 74 61 74 65 3d 30 3c 61 61 3f 34 3a 30 3b 72 61 3d 32 30 30 3c 3d 61 61 26 26 33 30 30 3e 61 61 7c 7c 33 30 34 3d 3d 3d 61 61 3b 76 61 26 26 28 4d 61 3d 50 62 28 61 2c 4e 2c 76 61 29 29 3b 21 72 61 26 26 0a 2d 31 3c 71 2e 69 6e 41 72 72 61 79 28 22 73 63 72 69 70 74 22 2c 61 2e 64 61 74 61 54 79 70 65 73 29 26 26 28 61 2e 63 6f 6e 76 65 72 74 65 72 73 5b 22 74 65 78 74 20 73 63 72 69 70 74 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 3b 4d 61 3d 6d 64 28 61 2c 4d 61 2c 4e 2c 72 61 Data Ascii: tion n(aa,ta,va,ra){var Ma,Fa=ta;if(!Z){Z=!0;G&&m.clearTimeout(G);p=void 0;v=ra\|\|"";N.readyState=0<aa?4:0;ra=200<=aa&&300>aa\|\|304===aa;va&&(Ma=Pb(a,N,va));!ra&&-1<q.inArray("script",a.dataTypes)&&(a.converters["text script"]=function(){});Ma=md(a,Ma,N,ra
2024-10-30 07:46:29 UTC	16383	IN	Data Raw: 6f 72 65 73 2d 70 61 72 74 69 61 6c 6c 79 2d 72 65 61 64 79 22 2c 45 56 45 4e 54 5f 53 54 4f 52 45 5f 52 45 47 49 53 54 45 52 45 44 3a 22 73 74 6f 72 65 2d 72 65 67 69 73 74 65 72 65 64 22 2c 45 56 45 4e 54 5f 53 54 4f 52 45 5f 52 45 41 44 59 3a 22 73 74 6f 72 65 2d 72 65 61 64 79 22 2c 45 56 45 4e 54 5f 53 54 4f 52 45 5f 55 50 44 41 54 45 44 3a 22 73 74 6f 72 65 2d 75 70 64 61 74 65 64 22 2c 50 45 52 53 49 53 54 45 4e 43 45 5f 43 4f 4e 54 41 49 4e 45 52 5f 4e 41 4d 45 3a 22 43 6f 6e 74 65 78 74 48 75 62 50 65 72 73 69 73 74 65 6e 63 65 22 2c 53 45 52 56 49 43 45 5f 52 41 57 5f 52 45 53 50 4f 4e 53 45 5f 4b 45 59 3a 22 2f 5f 2f 72 61 77 2d 72 65 73 70 6f 6e 73 65 22 2c 53 45 52 56 49 43 45 5f 52 45 53 50 4f 4e 53 45 5f 54 49 4d 45 5f 4b 45 59 3a 22 2f 5f Data Ascii: ores-partially-ready",EVENT_STORE_REGISTERED:"store-registered",EVENT_STORE_READY:"store-ready",EVENT_STORE_UPDATED:"store-updated",PERSISTENCE_CONTAINER_NAME:"ContextHubPersistence",SERVICE_RAW_RESPONSE_KEY:"/_/raw-response",SERVICE_RESPONSE_TIME_KEY:"/_
2024-10-30 07:46:29 UTC	5	IN	Data Raw: 78 29 7b 76 61 Data Ascii: x){va
2024-10-30 07:46:29 UTC	16383	IN	Data Raw: 72 20 48 3d 78 2e 63 6f 6e 74 61 69 6e 65 72 2c 49 3d 78 2e 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 3b 72 65 74 75 72 6e 20 41 2e 63 61 6c 6c 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 4f 29 7b 4f 3d 43 6f 6e 74 65 78 74 48 75 62 2e 55 74 69 6c 73 2e 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 4f 29 3b 49 2e 73 65 74 49 74 65 6d 28 48 2c 4f 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 4f 3d 49 2e 67 65 74 49 74 65 6d 28 48 29 3b 4f 3d 43 6f 6e 74 65 78 74 48 75 62 2e 55 74 69 6c 73 2e 4a 53 4f 4e 2e 70 61 72 73 65 28 4f 29 3b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 3d 6d 2e 74 79 70 65 28 4f 29 3f 4f 3a 7b 7d 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 78 3d 22 63 6f 6e 74 65 78 74 68 75 62 2e 74 65 Data Ascii: r H=x.container,I=x.window.sessionStorage;return A.call(this,function(O){O=ContextHub.Utils.JSON.stringify(O);I.setItem(H,O)},function(){var O=I.getItem(H);O=ContextHub.Utils.JSON.parse(O);return"object"===m.type(O)?O:{}})},function(){var x="contexthub.te

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49837	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:29 UTC	5006	OUT	GET /components/header-aem/scripts/main.js HTTP/1.1 Host: all.accor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://all.accor.com/a/en/new-app-offer/app-download.html?source_caller=bulk&af_qr=true&shortlink=5m1nc8of&c=20241013_ALL_AppBonusingMobileLp&af_ad=QR_code_20241013_ALL_AppBonusingMobileLp&pid=QR_code&deep_link_value=accor%3A%2F%2Fsearch%2Foffer%3Fpage_id%3Dddc8e830-2fc5-4492-ae7f-a63574b202f4&af_adset=EN Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=uXhrmD2Na/K1uglc4DSccWmUi3lwT6U0aN5NKqvcu8d5WGWybG4+Fjgl4ne6nVjifX1jzgyPIuRTBhS6nanmMOLamS/KiojPrxeLcFng8UzPO+81sa87bs4RFhGAg5SdnTRio+RJdn41ZezkVQzm+QQNKVTMJBE8fIzHUqlLtmYsp4GqzAo9Tqkn29+6s06cnyhW9Bg2AjaE3z+uY1Kha+K1N+xGE1wxY+ov1hMjJJFJQKo0Zzr8yVUmc0uGx6VyOI/GCYB98MMi2baM/noo1d0GCT/eTJnamWBVosFVl6rGjGRpxA8WWwcog7Ny/HlQVp6w8cTkKFTg/8KjIPnCBapACqcVA8DvW2Oym2gj1AtBv4YYfUMq3TEu4mXRkOJJVmAh7NCUHwLhEc4aXJBIqbW6JkrW0slp4+M4RmDR1e+A3GrFYXelb56QL3DRn/v55w+TZWXTMoZhYCD+Z9T66/ [TRUNCATED]
2024-10-30 07:46:29 UTC	640	IN	HTTP/1.1 200 OK Age: 161062 Cache-control: public, max-age=3600, stale-while-revalidate=21600 Content-Type: text/javascript Date: Wed, 30 Oct 2024 07:46:29 GMT Last-Modified: Mon, 28 Oct 2024 11:02:07 GMT P3P: CP="NO P3P POLICY" Referrer-Policy: origin Server: ECAcc (lhd/35C5) Strict-Transport-Security: max-age=15552000 Vary: Accept-Encoding X-Accor-asset: ecom X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Clacks-Overhead: GNU Terry Pratchett X-Iinfo: 12-42075469-42075470 NNNY CT(16 18 0) RT(1730113326535 4) q(0 0 0 0) r(1 1) U24 X-XSS-Protection: 1; mode=block Content-Length: 1869630 Connection: close
2024-10-30 07:46:29 UTC	16383	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 74 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 65 2c 6e 2e 63 3d 74 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 6e 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 72 7d 29 7d 2c 6e 2e 72 3d 66 75 6e Data Ascii: !function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=fun
2024-10-30 07:46:29 UTC	16383	IN	Data Raw: 26 26 28 73 3d 63 28 73 2c 69 28 61 72 67 75 6d 65 6e 74 73 5b 31 5d 29 29 29 2c 73 3c 30 26 26 28 73 3d 6e 2b 73 29 3b 73 3e 3d 30 3b 73 2d 2d 29 69 66 28 73 20 69 6e 20 74 26 26 74 5b 73 5d 3d 3d 3d 65 29 72 65 74 75 72 6e 20 73 7c 7c 30 3b 72 65 74 75 72 6e 2d 31 7d 3a 75 7d 2c 31 31 39 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 37 32 39 33 29 2c 6f 3d 6e 28 35 31 31 32 29 2c 69 3d 6e 28 37 33 39 32 29 2c 61 3d 6f 28 22 73 70 65 63 69 65 73 22 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 69 3e 3d 35 31 7c 7c 21 72 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 5b 5d 3b 72 65 74 75 72 6e 28 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 7b 7d 29 5b 61 5d 3d 66 75 6e Data Ascii: &&(s=c(s,i(arguments[1]))),s<0&&(s=n+s);s>=0;s--)if(s in t&&t[s]===e)return s\|\|0;return-1}:u},1194:function(e,t,n){var r=n(7293),o=n(5112),i=n(7392),a=o("species");e.exports=function(e){return i>=51\|\|!r((function(){var t=[];return(t.constructor={})[a]=fun
2024-10-30 07:46:29 UTC	16383	IN	Data Raw: 68 7d 3b 65 2e 65 78 70 6f 72 74 73 3d 63 7d 2c 36 36 37 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 37 32 39 33 29 3b 65 2e 65 78 70 6f 72 74 73 3d 21 72 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 4f 62 6a 65 63 74 2e 70 72 65 76 65 6e 74 45 78 74 65 6e 73 69 6f 6e 73 28 7b 7d 29 29 7d 29 29 7d 2c 32 31 30 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 34 33 37 34 29 2c 6f 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2c 69 3d 6f 2e 61 70 70 6c 79 2c 61 3d 6f 2e 63 61 6c 6c 3b 65 2e 65 78 70 6f 72 74 73 3d 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 26 26 52 65 66 6c 65 63 74 Data Ascii: h};e.exports=c},6677:function(e,t,n){var r=n(7293);e.exports=!r((function(){return Object.isExtensible(Object.preventExtensions({}))}))},2104:function(e,t,n){var r=n(4374),o=Function.prototype,i=o.apply,a=o.call;e.exports="object"==typeof Reflect&&Reflect
2024-10-30 07:46:29 UTC	3	IN	Data Raw: 77 22 3d Data Ascii: w"=
2024-10-30 07:46:29 UTC	16383	IN	Data Raw: 3d 72 28 65 29 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 69 28 65 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 61 28 73 29 7d 7d 28 65 29 3a 69 28 6f 28 65 29 29 7d 7d 2c 38 30 30 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 36 33 32 34 29 2c 6f 3d 6e 28 37 34 38 29 2e 63 6f 6e 63 61 74 28 22 6c 65 6e 67 74 68 22 2c 22 70 72 6f 74 6f 74 79 70 65 22 29 3b 74 2e 66 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 72 28 65 2c 6f 29 7d 7d 2c 35 31 38 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 2e 66 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 7d Data Ascii: =r(e)?function(e){try{return i(e)}catch(e){return a(s)}}(e):i(o(e))}},8006:function(e,t,n){var r=n(6324),o=n(748).concat("length","prototype");t.f=Object.getOwnPropertyNames\|\|function(e){return r(e,o)}},5181:function(e,t){t.f=Object.getOwnPropertySymbols}
2024-10-30 07:46:29 UTC	16383	IN	Data Raw: 67 2c 56 2c 61 29 2c 41 28 63 29 7d 29 3a 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 7d 2c 33 38 33 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 37 38 35 34 29 2c 6f 3d 6e 28 37 32 39 33 29 2c 69 3d 6e 28 37 30 37 32 29 2c 61 3d 6e 28 32 36 30 29 2e 4e 41 54 49 56 45 5f 41 52 52 41 59 5f 42 55 46 46 45 52 5f 56 49 45 57 53 2c 73 3d 72 2e 41 72 72 61 79 42 75 66 66 65 72 2c 63 3d 72 2e 49 6e 74 38 41 72 72 61 79 3b 65 2e 65 78 70 6f 72 74 73 3d 21 61 7c 7c 21 6f 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 28 31 29 7d 29 29 7c 7c 21 6f 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 65 77 20 63 28 2d 31 29 7d 29 29 7c 7c 21 69 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 65 77 20 63 2c 6e 65 77 20 63 28 6e 75 Data Ascii: g,V,a),A(c)}):e.exports=function(){}},3832:function(e,t,n){var r=n(7854),o=n(7293),i=n(7072),a=n(260).NATIVE_ARRAY_BUFFER_VIEWS,s=r.ArrayBuffer,c=r.Int8Array;e.exports=!a\|\|!o((function(){c(1)}))\|\|!o((function(){new c(-1)}))\|\|!i((function(e){new c,new c(nu
2024-10-30 07:46:29 UTC	16383	IN	Data Raw: 2f 5d 2a 29 2f 2c 6c 3d 69 28 75 2e 65 78 65 63 29 3b 72 26 26 21 6f 26 26 61 28 73 2c 22 6e 61 6d 65 22 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6c 28 75 2c 63 28 74 68 69 73 29 29 5b 31 5d 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 22 22 7d 7d 7d 29 7d 2c 35 38 33 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 28 32 31 30 39 29 28 7b 67 6c 6f 62 61 6c 3a 21 30 7d 2c 7b 67 6c 6f 62 61 6c 54 68 69 73 3a 6e 28 37 38 35 34 29 7d 29 7d 2c 38 38 36 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 32 31 30 39 29 2c 6f 3d 6e 28 37 38 35 34 29 2c 69 3d 6e 28 35 30 30 35 29 2c 61 3d 6e 28 32 31 30 34 29 2c 73 3d 6e 28 31 37 30 32 Data Ascii: /]*)/,l=i(u.exec);r&&!o&&a(s,"name",{configurable:!0,get:function(){try{return l(u,c(this))[1]}catch(e){return""}}})},5837:function(e,t,n){n(2109)({global:!0},{globalThis:n(7854)})},8862:function(e,t,n){var r=n(2109),o=n(7854),i=n(5005),a=n(2104),s=n(1702
2024-10-30 07:46:29 UTC	16383	IN	Data Raw: 74 2c 6e 3d 65 2e 66 61 63 61 64 65 2c 72 3d 65 2e 76 61 6c 75 65 3b 69 66 28 75 65 28 65 29 26 26 28 74 3d 4c 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 4e 3f 56 2e 65 6d 69 74 28 22 75 6e 68 61 6e 64 6c 65 64 52 65 6a 65 63 74 69 6f 6e 22 2c 72 2c 6e 29 3a 73 65 28 65 65 2c 6e 2c 72 29 7d 29 29 2c 65 2e 72 65 6a 65 63 74 69 6f 6e 3d 4e 7c 7c 75 65 28 65 29 3f 32 3a 31 2c 74 2e 65 72 72 6f 72 29 29 74 68 72 6f 77 20 74 2e 76 61 6c 75 65 7d 29 29 7d 2c 75 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 31 21 3d 3d 65 2e 72 65 6a 65 63 74 69 6f 6e 26 26 21 65 2e 70 61 72 65 6e 74 7d 2c 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 28 45 2c 75 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 65 2e 66 61 63 61 64 65 3b 4e 3f 56 2e 65 6d Data Ascii: t,n=e.facade,r=e.value;if(ue(e)&&(t=L((function(){N?V.emit("unhandledRejection",r,n):se(ee,n,r)})),e.rejection=N\|\|ue(e)?2:1,t.error))throw t.value}))},ue=function(e){return 1!==e.rejection&&!e.parent},le=function(e){d(E,u,(function(){var t=e.facade;N?V.em
2024-10-30 07:46:29 UTC	16383	IN	Data Raw: 78 28 61 2c 50 2c 54 29 2b 53 2c 50 3d 54 2b 4f 2c 54 3d 6b 28 61 2c 66 2c 54 2b 45 29 3b 72 65 74 75 72 6e 20 50 3c 61 2e 6c 65 6e 67 74 68 26 26 28 4c 2b 3d 78 28 61 2c 50 29 29 2c 4c 7d 7d 29 7d 2c 35 33 30 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 32 31 30 34 29 2c 6f 3d 6e 28 36 39 31 36 29 2c 69 3d 6e 28 31 37 30 32 29 2c 61 3d 6e 28 37 30 30 37 29 2c 73 3d 6e 28 37 32 39 33 29 2c 63 3d 6e 28 39 36 37 30 29 2c 75 3d 6e 28 36 31 34 29 2c 6c 3d 6e 28 39 33 30 33 29 2c 64 3d 6e 28 37 34 36 36 29 2c 66 3d 6e 28 31 33 34 30 29 2c 5f 3d 6e 28 34 34 38 38 29 2c 70 3d 6e 28 31 35 33 30 29 2c 68 3d 6e 28 38 31 37 33 29 2c 6d 3d 6e 28 36 34 37 29 2c 76 3d 6e 28 37 36 35 31 29 2c 67 3d Data Ascii: x(a,P,T)+S,P=T+O,T=k(a,f,T+E);return P<a.length&&(L+=x(a,P)),L}})},5306:function(e,t,n){"use strict";var r=n(2104),o=n(6916),i=n(1702),a=n(7007),s=n(7293),c=n(9670),u=n(614),l=n(9303),d=n(7466),f=n(1340),_=n(4488),p=n(1530),h=n(8173),m=n(647),v=n(7651),g=
2024-10-30 07:46:29 UTC	16383	IN	Data Raw: 2c 6f 3d 6e 28 31 37 30 32 29 2c 69 3d 6e 28 37 32 39 33 29 2c 61 3d 6e 28 39 36 36 32 29 2c 73 3d 6e 28 34 33 36 32 29 2c 63 3d 6e 28 32 36 30 29 2c 75 3d 6e 28 38 38 38 36 29 2c 6c 3d 6e 28 32 35 36 29 2c 64 3d 6e 28 37 33 39 32 29 2c 66 3d 6e 28 38 30 30 38 29 2c 5f 3d 72 2e 41 72 72 61 79 2c 70 3d 63 2e 61 54 79 70 65 64 41 72 72 61 79 2c 68 3d 63 2e 65 78 70 6f 72 74 54 79 70 65 64 41 72 72 61 79 4d 65 74 68 6f 64 2c 6d 3d 72 2e 55 69 6e 74 31 36 41 72 72 61 79 2c 76 3d 6d 26 26 6f 28 6d 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6f 72 74 29 2c 67 3d 21 28 21 76 7c 7c 69 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 28 6e 65 77 20 6d 28 32 29 2c 6e 75 6c 6c 29 7d 29 29 26 26 69 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 28 6e 65 77 20 6d 28 32 29 2c 7b 7d 29 7d Data Ascii: ,o=n(1702),i=n(7293),a=n(9662),s=n(4362),c=n(260),u=n(8886),l=n(256),d=n(7392),f=n(8008),_=r.Array,p=c.aTypedArray,h=c.exportTypedArrayMethod,m=r.Uint16Array,v=m&&o(m.prototype.sort),g=!(!v\|\|i((function(){v(new m(2),null)}))&&i((function(){v(new m(2),{})}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49839	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:29 UTC	5707	OUT	GET /styles-v2410/styles-global.css HTTP/1.1 Host: all.accor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://all.accor.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=uXhrmD2Na/K1uglc4DSccWmUi3lwT6U0aN5NKqvcu8d5WGWybG4+Fjgl4ne6nVjifX1jzgyPIuRTBhS6nanmMOLamS/KiojPrxeLcFng8UzPO+81sa87bs4RFhGAg5SdnTRio+RJdn41ZezkVQzm+QQNKVTMJBE8fIzHUqlLtmYsp4GqzAo9Tqkn29+6s06cnyhW9Bg2AjaE3z+uY1Kha+K1N+xGE1wxY+ov1hMjJJFJQKo0Zzr8yVUmc0uGx6VyOI/GCYB98MMi2baM/noo1d0GCT/eTJnamWBVosFVl6rGjGRpxA8WWwcog7Ny/HlQVp6w8cTkKFTg/8KjIPnCBapACqcVA8DvW2Oym2gj1AtBv4YYfUMq3TEu4mXRkOJJVmAh7NCUHwLhEc4aXJBIqbW6JkrW0slp4+M4RmDR1e+A3GrFYXelb56QL3DRn/v55w+TZWXTMoZhYCD+Z9T66/ [TRUNCATED]
2024-10-30 07:46:29 UTC	620	IN	HTTP/1.1 200 OK Age: 161140 Cache-control: public, max-age=3600, stale-while-revalidate=21600 Content-Type: text/css Date: Wed, 30 Oct 2024 07:46:29 GMT Last-Modified: Mon, 28 Oct 2024 11:00:49 GMT P3P: CP="NO P3P POLICY" Referrer-Policy: origin Server: ECAcc (lhd/35A6) Strict-Transport-Security: max-age=15552000 Vary: Accept-Encoding X-Accor-asset: ecom X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Clacks-Overhead: GNU Terry Pratchett X-Iinfo: 17-20417518-20412504 pNNN RT(1730113249492 3) q(0 0 0 0) r(1 1) U24 X-XSS-Protection: 1; mode=block Content-Length: 115990 Connection: close
2024-10-30 07:46:29 UTC	16383	IN	Data Raw: 40 6b 65 79 66 72 61 6d 65 73 20 6c 6f 61 64 69 6e 67 53 70 69 6e 6e 65 72 7b 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 6c 6f 61 64 69 6e 67 2d 72 6f 74 61 74 65 2d 6b 65 79 66 72 61 6d 65 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 5a 28 30 64 65 67 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 5a 28 33 36 30 64 65 67 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 6c 6f 61 64 69 6e 67 2d 63 69 72 63 6c 65 2d 6b 65 79 66 72 61 6d 65 7b 30 25 2c 32 35 25 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 37 38 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 29 7d 35 30 25 2c 37 35 25 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 Data Ascii: @keyframes loadingSpinner{to{transform:rotate(360deg)}}@keyframes loading-rotate-keyframe{0%{transform:rotateZ(0deg)}to{transform:rotateZ(360deg)}}@keyframes loading-circle-keyframe{0%,25%{stroke-dashoffset:178;transform:rotate(0)}50%,75%{stroke-dashoffse
2024-10-30 07:46:29 UTC	1	IN	Data Raw: 6f Data Ascii: o
2024-10-30 07:46:29 UTC	16383	IN	Data Raw: 67 6f 20 2e 6d 61 69 6e 4c 6f 67 6f 5f 5f 61 6c 6c 3e 73 76 67 7b 68 65 69 67 68 74 3a 33 30 70 78 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 33 73 3b 77 69 64 74 68 3a 31 30 30 70 78 7d 23 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 20 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 70 72 69 6d 61 72 79 48 65 61 64 65 72 5f 5f 77 72 61 70 70 65 72 48 65 61 64 20 2e 6d 61 69 6e 4c 6f 67 6f 20 2e 6d 61 69 6e 4c 6f 67 6f 5f 5f 61 6c 6c 3e 73 76 67 20 70 61 74 68 7b 66 69 6c 6c 3a 23 31 65 31 38 35 32 7d 23 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5b 64 61 74 61 2d 63 6f 6e 74 72 69 62 7a 6f 6e 65 3d 75 6e 69 74 65 64 2d 6b 69 6e 67 64 6f 6d 5d Data Ascii: go .mainLogo__all>svg{height:30px;transition:all .3s;width:100px}#link-navigation.link-navigation .link-navigation__primaryHeader__wrapperHead .mainLogo .mainLogo__all>svg path{fill:#1e1852}#link-navigation.link-navigation[data-contribzone=united-kingdom]
2024-10-30 07:46:29 UTC	16383	IN	Data Raw: 6e 5f 5f 70 65 72 6d 61 6e 65 6e 74 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 70 6c 61 6e 67 75 65 73 20 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 6d 65 6e 75 5f 5f 6c 69 6e 6b 20 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 66 6c 61 67 2c 23 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 20 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 6e 61 76 5f 5f 6d 65 6e 75 20 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 6d 65 6e 75 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 70 72 6f 2d 73 6f 6c 75 74 69 6f 6e 73 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 70 6c 61 6e 67 75 65 73 20 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 6d 65 6e 75 5f Data Ascii: n__permanent.link-navigation__plangues .link-navigation__menu__link .link-navigation__flag,#link-navigation.link-navigation .link-navigation__nav__menu .link-navigation__menu.link-navigation__pro-solutions.link-navigation__plangues .link-navigation__menu_
2024-10-30 07:46:29 UTC	16383	IN	Data Raw: 67 61 74 69 6f 6e 5f 5f 63 6f 6c 20 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 61 63 63 6f 72 64 69 6f 6e 3e 64 69 76 3a 61 66 74 65 72 7b 63 6f 6c 6f 72 3a 23 32 35 32 33 33 39 3b 63 6f 6e 74 65 6e 74 3a 22 2b 22 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 31 38 70 78 3b 74 6f 70 3a 31 38 70 78 7d 23 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 20 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 70 61 6e 65 6c 5f 5f 63 6f 6c 75 6d 6e 20 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 63 6f 6e 74 65 6e 74 20 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 63 6f 6c 20 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 61 63 63 6f 72 64 69 6f 6e 3e Data Ascii: gation__col .link-navigation__accordion>div:after{color:#252339;content:"+";position:absolute;right:18px;top:18px}#link-navigation.link-navigation .link-navigation__panel__column .link-navigation__content .link-navigation__col .link-navigation__accordion>
2024-10-30 07:46:29 UTC	16383	IN	Data Raw: 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 70 72 69 6d 61 72 79 48 65 61 64 65 72 5f 5f 77 72 61 70 70 65 72 48 65 61 64 20 2e 62 75 72 67 65 72 4d 65 6e 75 5f 5f 69 63 6f 6e 3a 61 66 74 65 72 2c 23 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 20 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 70 72 69 6d 61 72 79 48 65 61 64 65 72 5f 5f 77 72 61 70 70 65 72 48 65 61 64 20 2e 62 75 72 67 65 72 4d 65 6e 75 5f 5f 69 63 6f 6e 3a 62 65 66 6f 72 65 7b 68 65 69 67 68 74 3a 32 70 78 3b 77 69 64 74 68 3a 32 2e 32 65 6d 7d 23 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 20 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 70 72 69 6d 61 72 79 48 65 61 64 65 Data Ascii: nk-navigation__primaryHeader__wrapperHead .burgerMenu__icon:after,#link-navigation.link-navigation .link-navigation__primaryHeader__wrapperHead .burgerMenu__icon:before{height:2px;width:2.2em}#link-navigation.link-navigation .link-navigation__primaryHeade
2024-10-30 07:46:29 UTC	16383	IN	Data Raw: 6f 6e 2e 68 65 61 64 65 72 2d 69 6e 6c 69 6e 65 20 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 70 72 69 6d 61 72 79 48 65 61 64 65 72 2e 67 65 6f 6c 6f 63 2d 73 65 6c 65 63 74 6f 72 2d 64 69 73 61 62 6c 65 64 2e 63 75 72 72 65 6e 63 79 2d 73 65 6c 65 63 74 6f 72 2d 64 69 73 61 62 6c 65 64 20 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 6e 61 76 5f 5f 75 73 65 72 70 72 65 66 73 2c 23 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2e 68 65 61 64 65 72 2d 69 6e 6c 69 6e 65 20 2e 6d 61 69 6e 4c 6f 67 6f 2d 2d 6d 6f 62 69 6c 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 23 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2e 68 65 61 64 65 72 2d 69 6e 6c Data Ascii: on.header-inline .link-navigation__primaryHeader.geoloc-selector-disabled.currency-selector-disabled .link-navigation__nav__userprefs,#link-navigation.link-navigation.header-inline .mainLogo--mobile{display:none}#link-navigation.link-navigation.header-inl
2024-10-30 07:46:29 UTC	16383	IN	Data Raw: 6e 5f 5f 70 61 6e 65 6c 5f 5f 73 63 72 6f 6c 6c 20 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 70 61 6e 65 6c 5f 5f 74 6f 70 20 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 70 61 6e 65 6c 5f 5f 63 6f 6c 75 6d 6e 20 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 63 6f 6e 74 65 6e 74 20 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 63 6f 6c 7b 6d 61 78 2d 77 69 64 74 68 3a 33 36 35 70 78 3b 2d 6d 73 2d 66 6c 65 78 3a 31 20 31 20 30 70 78 3b 66 6c 65 78 3a 31 20 31 20 30 70 78 3b 77 69 64 74 68 3a 31 30 30 25 7d 23 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2e 68 65 61 64 65 72 2d 69 6e 6c 69 6e 65 20 2e 6a 73 2d 6d 6f 72 65 2d 69 74 65 6d 20 2e 6c 69 6e 6b 2d 6e 61 76 69 67 Data Ascii: n__panel__scroll .link-navigation__panel__top .link-navigation__panel__column .link-navigation__content .link-navigation__col{max-width:365px;-ms-flex:1 1 0px;flex:1 1 0px;width:100%}#link-navigation.link-navigation.header-inline .js-more-item .link-navig
2024-10-30 07:46:29 UTC	1308	IN	Data Raw: 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 77 72 61 70 70 65 72 7b 74 6f 70 3a 35 2e 36 72 65 6d 7d 7d 23 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2e 68 65 61 64 65 72 2d 69 6e 6c 69 6e 65 20 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 70 72 69 6d 61 72 79 48 65 61 64 65 72 2d 2d 6e 6f 76 20 2e 64 65 70 65 6e 64 65 6e 74 64 72 6f 70 64 6f 77 6e 5f 5f 62 74 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 65 32 32 61 61 21 69 6d 70 6f 72 74 61 6e 74 7d 23 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2e 68 65 61 64 65 72 2d 69 6e 6c 69 6e 65 20 2e 6c 69 6e 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 70 72 69 6d 61 72 79 48 65 61 64 65 72 Data Ascii: k-navigation__wrapper{top:5.6rem}}#link-navigation.link-navigation.header-inline .link-navigation__primaryHeader--nov .dependentdropdown__btn{background-color:#1e22aa!important}#link-navigation.link-navigation.header-inline .link-navigation__primaryHeader

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49841	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:29 UTC	5063	OUT	GET /styles/styles-footer-light.css HTTP/1.1 Host: all.accor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://all.accor.com/a/en/new-app-offer/app-download.html?source_caller=bulk&af_qr=true&shortlink=5m1nc8of&c=20241013_ALL_AppBonusingMobileLp&af_ad=QR_code_20241013_ALL_AppBonusingMobileLp&pid=QR_code&deep_link_value=accor%3A%2F%2Fsearch%2Foffer%3Fpage_id%3Dddc8e830-2fc5-4492-ae7f-a63574b202f4&af_adset=EN Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=uXhrmD2Na/K1uglc4DSccWmUi3lwT6U0aN5NKqvcu8d5WGWybG4+Fjgl4ne6nVjifX1jzgyPIuRTBhS6nanmMOLamS/KiojPrxeLcFng8UzPO+81sa87bs4RFhGAg5SdnTRio+RJdn41ZezkVQzm+QQNKVTMJBE8fIzHUqlLtmYsp4GqzAo9Tqkn29+6s06cnyhW9Bg2AjaE3z+uY1Kha+K1N+xGE1wxY+ov1hMjJJFJQKo0Zzr8yVUmc0uGx6VyOI/GCYB98MMi2baM/noo1d0GCT/eTJnamWBVosFVl6rGjGRpxA8WWwcog7Ny/HlQVp6w8cTkKFTg/8KjIPnCBapACqcVA8DvW2Oym2gj1AtBv4YYfUMq3TEu4mXRkOJJVmAh7NCUHwLhEc4aXJBIqbW6JkrW0slp4+M4RmDR1e+A3GrFYXelb56QL3DRn/v55w+TZWXTMoZhYCD+Z9T66/ [TRUNCATED] If-Modified-Since: Mon, 28 Oct 2024 11:00:52 GMT
2024-10-30 07:46:29 UTC	629	IN	HTTP/1.1 304 Not Modified Age: 161137 Cache-control: public, max-age=3600, stale-while-revalidate=21600 Date: Wed, 30 Oct 2024 07:46:29 GMT Last-Modified: Mon, 28 Oct 2024 11:00:52 GMT P3P: CP="NO P3P POLICY" Referrer-Policy: origin Server: ECAcc (lhd/35A5) Strict-Transport-Security: max-age=15552000 Strict-Transport-Security: max-age=15552000 Vary: Accept-Encoding X-Accor-asset: ecom X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Clacks-Overhead: GNU Terry Pratchett X-Iinfo: 17-195174010-195174011 nNNY RT(1730113251991 3) q(0 1 1 0) r(1 1) U24 X-XSS-Protection: 1; mode=block Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49843	104.18.86.42	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:29 UTC	586	OUT	GET /scripttemplates/202409.2.0/assets/otFlat.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://all.accor.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://all.accor.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 07:46:29 UTC	853	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 07:46:29 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Content-MD5: CDHNBOyaHPNE3EDr/Gzy5w== Last-Modified: Mon, 28 Oct 2024 06:29:24 GMT x-ms-request-id: 4363999d-701e-00e6-723c-29827a000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 81497 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8da9cab8cc0c2c94-DFW
2024-10-30 07:46:29 UTC	516	IN	Data Raw: 33 34 66 32 0d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 6f 74 46 6c 61 74 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 68 74 6d 6c 22 3a 20 22 50 47 52 70 64 69 42 70 5a 44 30 69 62 32 35 6c 64 48 4a 31 63 33 51 74 59 6d 46 75 62 6d 56 79 4c 58 4e 6b 61 79 49 67 59 32 78 68 63 33 4d 39 49 6d 39 30 52 6d 78 68 64 43 49 2b 50 47 52 70 64 69 42 79 62 32 78 6c 50 53 4a 6b 61 57 46 73 62 32 63 69 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 4e 6b 61 79 31 6a 62 32 35 30 59 57 6c 75 5a 58 49 69 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 4e 6b 61 79 31 79 62 33 63 69 50 6a 78 6b 61 58 59 67 61 57 51 39 49 6d 39 75 5a 58 52 Data Ascii: 34f2 { "name": "otFlat", "html": "PGRpdiBpZD0ib25ldHJ1c3QtYmFubmVyLXNkayIgY2xhc3M9Im90RmxhdCI+PGRpdiByb2xlPSJkaWFsb2ciPjxkaXYgY2xhc3M9Im90LXNkay1jb250YWluZXIiPjxkaXYgY2xhc3M9Im90LXNkay1yb3ciPjxkaXYgaWQ9Im9uZXR
2024-10-30 07:46:29 UTC	1369	IN	Data Raw: 63 6d 56 6d 50 53 49 6a 49 6a 35 77 62 32 78 70 59 33 6b 38 4c 32 45 2b 50 43 39 6b 61 58 59 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 5a 48 42 6b 4c 57 4e 76 62 6e 52 68 61 57 35 6c 63 69 49 2b 50 47 67 7a 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 6b 63 47 51 74 64 47 6c 30 62 47 55 69 50 6c 64 6c 49 47 4e 76 62 47 78 6c 59 33 51 67 5a 47 46 30 59 53 42 70 62 69 42 76 63 6d 52 6c 63 69 42 30 62 79 42 77 63 6d 39 32 61 57 52 6c 4f 6a 77 76 61 44 4d 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 5a 48 42 6b 4c 57 4e 76 62 6e 52 6c 62 6e 51 69 50 6a 78 77 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 6b 63 47 51 74 5a 47 56 7a 59 79 49 2b 5a 47 56 7a 59 33 4a 70 63 48 52 70 62 32 34 38 4c 33 41 2b 50 43 39 6b 61 58 59 Data Ascii: cmVmPSIjIj5wb2xpY3k8L2E+PC9kaXY+PGRpdiBjbGFzcz0ib3QtZHBkLWNvbnRhaW5lciI+PGgzIGNsYXNzPSJvdC1kcGQtdGl0bGUiPldlIGNvbGxlY3QgZGF0YSBpbiBvcmRlciB0byBwcm92aWRlOjwvaDM+PGRpdiBjbGFzcz0ib3QtZHBkLWNvbnRlbnQiPjxwIGNsYXNzPSJvdC1kcGQtZGVzYyI+ZGVzY3JpcHRpb248L3A+PC9kaXY
2024-10-30 07:46:29 UTC	1369	IN	Data Raw: 6a 34 38 4c 32 52 70 64 6a 34 38 49 53 30 74 49 45 4e 73 62 33 4e 6c 49 45 4a 31 64 48 52 76 62 69 42 46 54 6b 51 74 4c 54 34 38 4c 32 52 70 64 6a 34 38 4c 32 52 70 64 6a 34 3d 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 63 73 73 22 3a 20 22 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 31 38 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 46 6c 61 74 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 7a 2d 69 6e 64 65 78 3a 32 31 34 37 34 38 33 36 34 35 3b 62 6f 74 74 6f 6d 3a 30 3b 72 69 67 68 74 3a 30 3b 6c 65 66 74 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 6d 61 78 2d 68 Data Ascii: j48L2Rpdj48IS0tIENsb3NlIEJ1dHRvbiBFTkQtLT48L2Rpdj48L2Rpdj4=", "css": "#onetrust-banner-sdk{box-shadow:0 0 18px rgba(0,0,0,.2)}#onetrust-banner-sdk.otFlat{position:fixed;z-index:2147483645;bottom:0;right:0;left:0;background-color:#fff;max-h
2024-10-30 07:46:29 UTC	1369	IN	Data Raw: 63 79 2d 74 69 74 6c 65 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 65 78 74 7b 63 6f 6c 6f 72 3a 64 69 6d 67 72 61 79 3b 66 6c 6f 61 74 3a 6c 65 66 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 2d 70 61 72 65 6e 74 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 Data Ascii: cy-title,#onetrust-banner-sdk #onetrust-policy-text{color:dimgray;float:left}#onetrust-banner-sdk #onetrust-button-group-parent{min-height:1px;text-align:center}#onetrust-banner-sdk #onetrust-button-group{display:inline-block}#onetrust-banner-sdk #onetrus
2024-10-30 07:46:29 UTC	1369	IN	Data Raw: 74 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 77 69 64 74 68 3a 61 75 74 6f 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 33 70 78 3b 6d 61 72 67 69 6e 3a 30 20 30 20 31 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 32 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 69 6e 70 75 74 20 2a 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e Data Ascii: t{cursor:pointer;width:auto;height:auto;border:none;padding:0;padding-right:3px;margin:0 0 10px;font-size:.82em;line-height:1.4}#onetrust-banner-sdk .banner-option-input *{pointer-events:none;font-size:inherit;line-height:inherit}#onetrust-banner-sdk .ban
2024-10-30 07:46:29 UTC	1369	IN	Data Raw: 74 61 69 6e 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 64 65 74 61 69 6c 73 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 3b 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 64 70 64 2d 63 6f 6e 74 61 69 6e 65 72 7b 66 6c 6f 61 74 3a 6c 65 66 74 7d 23 6f 6e 65 74 72 75 73 74 2d Data Ascii: tainer,#onetrust-banner-sdk .banner-option-details{transition:all 300ms ease-in 0s;-webkit-transition:all 300ms ease-in 0s;-moz-transition:all 300ms ease-in 0s;-o-transition:all 300ms ease-in 0s}#onetrust-banner-sdk .ot-dpd-container{float:left}#onetrust-
2024-10-30 07:46:29 UTC	1369	IN	Data Raw: 73 63 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 64 70 64 2d 64 65 73 63 3e 2e 6f 74 2d 62 2d 61 64 64 6c 2d 64 65 73 63 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 34 32 35 70 78 29 7b 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 63 6c 6f 73 65 2d 62 74 6e 2d 63 6f 6e 74 61 69 6e 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 36 70 78 3b 72 69 67 68 74 3a 32 70 78 7d 23 6f 6e 65 74 Data Ascii: sc{margin-bottom:10px}#onetrust-banner-sdk .ot-dpd-desc>.ot-b-addl-desc{margin-top:10px;margin-bottom:10px;font-size:1em}@media only screen and (max-width: 425px){#onetrust-banner-sdk #onetrust-close-btn-container{position:absolute;top:6px;right:2px}#onet
2024-10-30 07:46:29 UTC	1369	IN	Data Raw: 74 74 6f 6e 2d 67 72 6f 75 70 20 62 75 74 74 6f 6e 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 68 61 73 2d 72 65 6a 65 63 74 2d 61 6c 6c 2d 62 75 74 74 6f 6e 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 7b 66 6c 6f 61 74 3a 6c 65 66 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 68 61 73 2d 72 65 6a 65 63 74 2d 61 6c 6c 2d 62 75 74 74 6f 6e 20 23 6f 6e 65 74 72 75 73 74 2d 72 65 6a 65 63 Data Ascii: tton-group button{display:inline-block}#onetrust-banner-sdk #onetrust-button-group{margin-right:0;text-align:center}#onetrust-banner-sdk .has-reject-all-button #onetrust-pc-btn-handler{float:left}#onetrust-banner-sdk .has-reject-all-button #onetrust-rejec
2024-10-30 07:46:29 UTC	1369	IN	Data Raw: 68 61 6e 64 6c 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 7b 77 69 64 74 68 3a 31 30 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 20 23 6f 6e 65 74 72 75 73 74 2d 61 63 63 65 70 74 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 20 23 6f 6e 65 74 72 75 73 74 2d 72 65 6a 65 63 74 2d 61 6c 6c 2d 68 61 Data Ascii: handler,#onetrust-banner-sdk.ot-iab-2 #onetrust-button-group #onetrust-pc-btn-handler{width:100%}#onetrust-banner-sdk.ot-iab-2 #onetrust-button-group #onetrust-accept-btn-handler,#onetrust-banner-sdk.ot-iab-2 #onetrust-button-group #onetrust-reject-all-ha
2024-10-30 07:46:30 UTC	1369	IN	Data Raw: 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 7b 77 69 64 74 68 3a 35 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 69 74 6c 65 7b 77 69 64 74 68 3a 35 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 65 78 74 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 3a 6e 6f 74 28 2e 6f 74 2d 64 70 64 2d 64 65 73 63 29 3e 2e 6f 74 2d 62 2d 61 64 64 6c 2d 64 65 73 63 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 65 6d 3b 77 69 64 74 68 3a 35 30 Data Ascii: #onetrust-banner-sdk .ot-optout-signal{width:50%}#onetrust-banner-sdk.ot-iab-2 #onetrust-policy-title{width:50%}#onetrust-banner-sdk.ot-iab-2 #onetrust-policy-text,#onetrust-banner-sdk.ot-iab-2 :not(.ot-dpd-desc)>.ot-b-addl-desc{margin-bottom:1em;width:50

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49845	104.18.86.42	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:29 UTC	430	OUT	GET /consent/87c4fef0-8732-44e4-bee3-f4faa4ce5a9d/0191bc5d-2eb7-7479-9d95-740d90885831/en.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 07:46:29 UTC	981	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 07:46:29 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Ray: 8da9cab8ce83e5bd-DFW CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 8174 Cache-Control: public, max-age=86400 Expires: Thu, 31 Oct 2024 07:46:29 GMT Last-Modified: Tue, 22 Oct 2024 08:34:16 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: Hfgwmkj0MF14cMMocp2ECw== Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 89244dfa-b01e-0051-184c-268d7f000000 x-ms-version: 2009-09-19 Cross-Origin-Resource-Policy: cross-origin Server: cloudflare
2024-10-30 07:46:29 UTC	388	IN	Data Raw: 37 62 63 62 0d 0a 7b 22 44 6f 6d 61 69 6e 44 61 74 61 22 3a 7b 22 70 63 6c 69 66 65 53 70 61 6e 59 72 22 3a 22 59 65 61 72 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 59 72 73 22 3a 22 59 65 61 72 73 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 53 65 63 73 22 3a 22 41 20 66 65 77 20 73 65 63 6f 6e 64 73 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 57 6b 22 3a 22 57 65 65 6b 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 57 6b 73 22 3a 22 57 65 65 6b 73 22 2c 22 70 63 63 6c 6f 73 65 42 75 74 74 6f 6e 54 79 70 65 22 3a 22 49 63 6f 6e 22 2c 22 70 63 63 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 54 65 78 74 22 3a 22 43 6f 6e 74 69 6e 75 65 20 77 69 74 68 6f 75 74 20 41 63 63 65 70 74 69 6e 67 22 2c 22 4d 61 69 6e 54 65 78 74 22 3a 22 43 6f 6f 6b 69 65 73 22 2c 22 4d Data Ascii: 7bcb{"DomainData":{"pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccloseButtonType":"Icon","pccontinueWithoutAcceptText":"Continue without Accepting","MainText":"Cookies","M
2024-10-30 07:46:29 UTC	1369	IN	Data Raw: 6e 66 6f 72 6d 61 74 69 6f 6e 20 6d 69 67 68 74 20 62 65 20 61 62 6f 75 74 20 79 6f 75 2c 20 79 6f 75 72 20 70 72 65 66 65 72 65 6e 63 65 73 20 6f 72 20 79 6f 75 72 20 64 65 76 69 63 65 20 61 6e 64 20 69 73 20 6d 6f 73 74 6c 79 20 75 73 65 64 20 74 6f 20 6d 61 6b 65 20 74 68 65 20 73 69 74 65 20 77 6f 72 6b 20 61 73 20 79 6f 75 20 65 78 70 65 63 74 20 69 74 20 74 6f 2e 20 54 68 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 64 6f 65 73 20 6e 6f 74 20 75 73 75 61 6c 6c 79 20 64 69 72 65 63 74 6c 79 20 69 64 65 6e 74 69 66 79 20 79 6f 75 2c 20 62 75 74 20 69 74 20 63 61 6e 20 67 69 76 65 20 79 6f 75 20 61 20 6d 6f 72 65 20 70 65 72 73 6f 6e 61 6c 69 7a 65 64 20 77 65 62 20 65 78 70 65 72 69 65 6e 63 65 2e 20 42 65 63 61 75 73 65 20 77 65 20 72 65 73 70 65 63 74 Data Ascii: nformation might be about you, your preferences or your device and is mostly used to make the site work as you expect it to. The information does not usually directly identify you, but it can give you a more personalized web experience. Because we respect
2024-10-30 07:46:29 UTC	1369	IN	Data Raw: 6c 65 20 79 6f 75 72 20 69 6e 74 65 72 65 73 74 73 20 74 6f 20 70 72 6f 76 69 64 65 20 79 6f 75 20 77 69 74 68 20 72 65 6c 65 76 61 6e 74 20 61 64 76 65 72 74 69 73 69 6e 67 20 61 6e 64 20 61 6c 6c 6f 77 20 79 6f 75 20 74 6f 20 69 6e 74 65 72 61 63 74 20 77 69 74 68 20 73 6f 63 69 61 6c 20 6e 65 74 77 6f 72 6b 73 2e 20 3c 62 72 3e 5c 6e 42 79 20 63 6f 6e 74 69 6e 75 69 6e 67 20 79 6f 75 72 20 62 72 6f 77 73 69 6e 67 2c 20 79 6f 75 20 61 72 65 20 61 67 72 65 65 69 6e 67 20 74 6f 20 74 68 65 20 75 73 65 20 6f 66 20 63 6f 6f 6b 69 65 73 2e 20 59 6f 75 20 77 69 6c 6c 20 62 65 20 61 62 6c 65 20 74 6f 20 6d 6f 64 69 66 79 20 79 6f 75 72 20 63 68 6f 69 63 65 73 20 61 74 20 61 6e 79 20 74 69 6d 65 20 62 79 20 63 6c 69 63 6b 69 6e 67 20 6f 6e 20 74 68 65 20 5c 22 Data Ascii: le your interests to provide you with relevant advertising and allow you to interact with social networks. <br>\nBy continuing your browsing, you are agreeing to the use of cookies. You will be able to modify your choices at any time by clicking on the \"
2024-10-30 07:46:29 UTC	1369	IN	Data Raw: 22 2c 22 50 61 72 65 6e 74 22 3a 22 22 2c 22 53 68 6f 77 53 75 62 67 72 6f 75 70 22 3a 74 72 75 65 2c 22 53 68 6f 77 53 75 62 47 72 6f 75 70 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 74 72 75 65 2c 22 53 68 6f 77 53 75 62 67 72 6f 75 70 54 6f 67 67 6c 65 22 3a 66 61 6c 73 65 2c 22 41 6c 77 61 79 73 53 68 6f 77 43 61 74 65 67 6f 72 79 22 3a 66 61 6c 73 65 2c 22 47 72 6f 75 70 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 65 73 65 20 63 6f 6f 6b 69 65 73 20 61 72 65 20 6e 65 63 65 73 73 61 72 79 20 66 6f 72 20 74 68 65 20 77 65 62 73 69 74 65 20 74 6f 20 66 75 6e 63 74 69 6f 6e 20 61 6e 64 20 63 61 6e 6e 6f 74 20 62 65 20 73 77 69 74 63 68 65 64 20 6f 66 66 20 69 6e 20 6f 75 72 20 73 79 73 74 65 6d 73 2e 20 54 68 65 79 20 61 72 65 20 75 73 75 61 6c 6c 79 20 Data Ascii: ","Parent":"","ShowSubgroup":true,"ShowSubGroupDescription":true,"ShowSubgroupToggle":false,"AlwaysShowCategory":false,"GroupDescription":"These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually
2024-10-30 07:46:29 UTC	1369	IN	Data Raw: 75 73 65 72 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 22 2c 22 48 6f 73 74 22 3a 22 61 63 63 6f 72 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 74 72 75 65 2c 22 4c 65 6e 67 74 68 22 3a 22 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 75 73 65 72 22 2c 22 74 68 69 72 64 50 61 72 74 79 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 75 73 65 72 22 2c 22 70 61 74 74 65 72 6e 4b 65 79 22 3a 22 75 73 65 72 22 2c 22 74 68 69 72 64 50 61 72 74 79 4b 65 79 22 3a 22 50 61 74 74 65 72 6e 7c 75 73 65 72 22 2c 22 66 69 72 73 74 50 61 72 74 79 4b 65 79 22 3a 22 50 61 74 74 65 72 6e 7c 75 73 65 72 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 Data Ascii: userXXXXXXXXXXXXXXXXX","Host":"accor.com","IsSession":true,"Length":"0","description":"user","thirdPartyDescription":"user","patternKey":"user","thirdPartyKey":"Pattern\|user","firstPartyKey":"Pattern\|user","DurationType":1,"category":null,"isThirdParty":f
2024-10-30 07:46:29 UTC	1369	IN	Data Raw: 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 31 38 65 64 37 36 32 2d 32 38 64 65 2d 37 36 35 62 2d 62 35 66 65 2d 36 31 65 65 65 31 65 33 34 34 62 33 22 2c 22 4e 61 6d 65 22 3a 22 76 69 73 69 64 5f 69 6e 63 61 70 5f 58 58 58 58 58 58 22 2c 22 48 6f 73 74 22 3a 22 6e 6f 76 6f 74 65 6c 2e 61 63 63 6f 72 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 68 22 3a 22 33 36 34 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 49 6e 63 61 70 73 75 6c 61 20 44 44 6f 53 20 50 72 6f 74 65 63 74 69 6f 6e 61 20 61 6e 64 20 57 65 62 20 41 70 70 6c 69 63 61 74 69 6f 6e 20 46 69 72 65 77 61 6c 6c 3a 5c 6e Data Ascii: ionType":1,"category":null,"isThirdParty":false},{"id":"018ed762-28de-765b-b5fe-61eee1e344b3","Name":"visid_incap_XXXXXX","Host":"novotel.accor.com","IsSession":false,"Length":"364","description":"Incapsula DDoS Protectiona and Web Application Firewall:\n
2024-10-30 07:46:29 UTC	1369	IN	Data Raw: 6e 22 3a 74 72 75 65 2c 22 4c 65 6e 67 74 68 22 3a 22 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 74 68 69 72 64 50 61 72 74 79 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 70 61 74 74 65 72 6e 4b 65 79 22 3a 6e 75 6c 6c 2c 22 74 68 69 72 64 50 61 72 74 79 4b 65 79 22 3a 6e 75 6c 6c 2c 22 66 69 72 73 74 50 61 72 74 79 4b 65 79 22 3a 6e 75 6c 6c 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 31 38 65 65 39 38 35 2d 64 31 37 37 2d 37 30 37 65 2d 62 35 66 38 2d 62 66 31 35 33 33 65 35 34 61 37 61 22 2c 22 4e 61 6d 65 22 3a 22 6e 6c 62 69 5f 58 58 58 58 58 58 58 22 2c 22 48 6f 73 74 22 3a 22 Data Ascii: n":true,"Length":"0","description":"","thirdPartyDescription":"","patternKey":null,"thirdPartyKey":null,"firstPartyKey":null,"DurationType":1,"category":null,"isThirdParty":false},{"id":"018ee985-d177-707e-b5f8-bf1533e54a7a","Name":"nlbi_XXXXXXX","Host":"
2024-10-30 07:46:29 UTC	1369	IN	Data Raw: 65 72 65 6e 63 65 73 20 72 65 6d 65 6d 62 65 72 65 64 2e 20 49 74 20 63 6f 6e 74 61 69 6e 73 20 6e 6f 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 68 61 74 20 63 61 6e 20 69 64 65 6e 74 69 66 79 20 74 68 65 20 73 69 74 65 20 76 69 73 69 74 6f 72 2e 22 2c 22 74 68 69 72 64 50 61 72 74 79 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 70 61 74 74 65 72 6e 4b 65 79 22 3a 6e 75 6c 6c 2c 22 74 68 69 72 64 50 61 72 74 79 4b 65 79 22 3a 22 22 2c 22 66 69 72 73 74 50 61 72 74 79 4b 65 79 22 3a 22 43 6f 6f 6b 69 65 4f 70 74 61 6e 6f 6e 43 6f 6e 73 65 6e 74 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 36 63 31 31 Data Ascii: erences remembered. It contains no information that can identify the site visitor.","thirdPartyDescription":null,"patternKey":null,"thirdPartyKey":"","firstPartyKey":"CookieOptanonConsent","DurationType":1,"category":null,"isThirdParty":false},{"id":"6c11
2024-10-30 07:46:29 UTC	1369	IN	Data Raw: 6e 49 64 22 2c 22 48 6f 73 74 22 3a 22 67 72 6f 75 70 2e 61 63 63 6f 72 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 74 72 75 65 2c 22 4c 65 6e 67 74 68 22 3a 22 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 47 65 6e 65 72 61 6c 20 70 75 72 70 6f 73 65 20 70 6c 61 74 66 6f 72 6d 20 73 65 73 73 69 6f 6e 20 63 6f 6f 6b 69 65 2c 20 75 73 65 64 20 62 79 20 73 69 74 65 73 20 77 72 69 74 74 65 6e 20 77 69 74 68 20 4d 69 73 63 72 6f 73 6f 66 74 20 2e 4e 45 54 20 62 61 73 65 64 20 74 65 63 68 6e 6f 6c 6f 67 69 65 73 2e 20 55 73 75 61 6c 6c 79 20 75 73 65 64 20 74 6f 20 6d 61 69 6e 74 61 69 6e 20 61 6e 20 61 6e 6f 6e 79 6d 69 73 65 64 20 75 73 65 72 20 73 65 73 73 69 6f 6e 20 62 79 20 74 68 65 20 73 65 72 76 65 72 2e 22 2c 22 74 68 69 72 64 50 61 Data Ascii: nId","Host":"group.accor.com","IsSession":true,"Length":"0","description":"General purpose platform session cookie, used by sites written with Miscrosoft .NET based technologies. Usually used to maintain an anonymised user session by the server.","thirdPa
2024-10-30 07:46:29 UTC	1369	IN	Data Raw: 6e 67 20 73 65 73 73 69 6f 6e 73 20 28 69 65 2c 20 73 65 73 73 69 6f 6e 20 63 6f 6f 6b 69 65 29 22 2c 22 74 68 69 72 64 50 61 72 74 79 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 49 6e 63 61 70 73 75 6c 61 20 44 44 6f 53 20 50 72 6f 74 65 63 74 69 6f 6e 61 20 61 6e 64 20 57 65 62 20 41 70 70 6c 69 63 61 74 69 6f 6e 20 46 69 72 65 77 61 6c 6c 3a 5c 6e 63 6f 6f 6b 69 65 20 66 6f 72 20 6c 69 6e 6b 69 6e 67 20 48 54 54 50 20 72 65 71 75 65 73 74 73 20 74 6f 20 61 20 63 65 72 74 61 69 6e 20 73 65 73 73 69 6f 6e 20 28 41 4b 41 20 76 69 73 69 74 29 2e 5c 6e 52 65 2d 6f 70 65 6e 69 6e 67 20 74 68 65 20 62 72 6f 77 73 65 72 20 61 6e 64 20 61 63 63 65 73 73 69 6e 67 20 73 61 6d 65 20 73 69 74 65 20 61 72 65 20 72 65 67 69 73 74 65 72 65 64 20 61 73 20 64 69 66 66 65 Data Ascii: ng sessions (ie, session cookie)","thirdPartyDescription":"Incapsula DDoS Protectiona and Web Application Firewall:\ncookie for linking HTTP requests to a certain session (AKA visit).\nRe-opening the browser and accessing same site are registered as diffe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49844	104.18.86.42	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:29 UTC	593	OUT	GET /scripttemplates/202409.2.0/assets/otCommonStyles.css HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://all.accor.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://all.accor.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 07:46:29 UTC	869	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 07:46:29 GMT Content-Type: text/css Content-Length: 24745 Connection: close Content-MD5: A9jekd5UoO8SyzJ6LiStug== Last-Modified: Mon, 28 Oct 2024 06:29:35 GMT ETag: 0x8DCF719E44FC05C x-ms-request-id: b63d852b-c01e-00f4-5589-29b666000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 6560 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8da9cab8caef68ff-DFW
2024-10-30 07:46:29 UTC	500	IN	Data Raw: 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 6e 65 74 72 75 73 74 2d 76 65 6e 64 6f 72 73 2d 6c 69 73 74 2d 68 61 6e 64 6c 65 72 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 63 6f 6c 6f 72 3a 23 31 66 39 36 64 62 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 6e 65 74 72 75 73 74 2d 76 65 6e 64 6f 72 73 2d 6c 69 73 74 2d 68 61 6e 64 6c 65 72 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 31 66 39 36 64 62 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 3a 66 6f 63 75 73 7b 6f 75 74 Data Ascii: #onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .onetrust-vendors-list-handler:hover{color:#1f96db}#onetrust-banner-sdk:focus{out
2024-10-30 07:46:29 UTC	1369	IN	Data Raw: 2d 6f 66 66 73 65 74 3a 31 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 62 6e 72 2d 77 2d 6c 6f 67 6f 20 2e 6f 74 2d 62 6e 72 2d 6c 6f 67 6f 7b 68 65 69 67 68 74 3a 36 34 70 78 3b 77 69 64 74 68 3a 36 34 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 74 63 66 32 2d 76 65 6e 64 6f 72 2d 63 6f 75 6e 74 2e 6f 74 2d 74 65 78 74 2d 62 6f 6c 64 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 63 6c 6f 73 65 2d 69 63 6f 6e 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 63 6c 6f 73 65 2d 69 63 6f 6e 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 2e 6f 74 2d 63 6c 6f 73 65 2d 69 63 6f 6e 7b 62 61 Data Ascii: -offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-tcf2-vendor-count.ot-text-bold{font-weight:bold}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-icon,#ot-sync-ntfy .ot-close-icon{ba
2024-10-30 07:46:29 UTC	1369	IN	Data Raw: 64 61 74 61 2d 70 61 72 65 6e 74 2d 69 64 5d 20 2a 7b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 68 69 64 65 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 68 69 64 65 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 2e 6f 74 2d 68 69 64 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 62 75 74 74 6f 6e 2e 6f 74 2d 6c 69 6e 6b 2d 62 74 6e 3a 68 6f 76 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 62 75 74 74 6f 6e 2e 6f 74 2d 6c 69 6e 6b 2d 62 74 6e 3a Data Ascii: data-parent-id] *{font-size:inherit;font-weight:inherit;color:inherit}#onetrust-banner-sdk .ot-hide,#onetrust-pc-sdk .ot-hide,#ot-sync-ntfy .ot-hide{display:none !important}#onetrust-banner-sdk button.ot-link-btn:hover,#onetrust-pc-sdk button.ot-link-btn:
2024-10-30 07:46:29 UTC	1369	IN	Data Raw: 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 70 63 2d 6c 6f 67 6f 20 69 6d 67 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 70 63 2d 6c 6f 67 6f 20 69 6d 67 7b 6d 61 78 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 73 63 72 65 65 6e 2d 72 65 61 64 65 72 2d 6f 6e 6c 79 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e Data Ascii: nd-size:contain;background-repeat:no-repeat;display:inline-flex;justify-content:center;align-items:center}#onetrust-pc-sdk .pc-logo img,#onetrust-pc-sdk .ot-pc-logo img{max-height:100%;max-width:100%}#onetrust-pc-sdk .screen-reader-only,#onetrust-pc-sdk .
2024-10-30 07:46:29 UTC	1369	IN	Data Raw: 6f 70 61 63 69 74 79 3a 31 7d 7d 2e 6f 74 2d 63 6f 6f 6b 69 65 2d 6c 61 62 65 6c 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 34 32 36 70 78 29 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 38 39 36 70 78 29 61 6e 64 20 28 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 20 6c 61 6e 64 73 63 61 70 65 29 7b 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 70 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 35 65 6d 7d 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 69 6e 70 75 74 3a 66 6f 63 75 73 2b 6c 61 62 65 6c 7b 6f 75 74 6c 69 6e 65 3a 31 70 78 20 73 6f 6c 69 64 20 23 Data Ascii: opacity:1}}.ot-cookie-label{text-decoration:underline}@media only screen and (min-width: 426px)and (max-width: 896px)and (orientation: landscape){#onetrust-pc-sdk p{font-size:.75em}}#onetrust-banner-sdk .banner-option-input:focus+label{outline:1px solid #
2024-10-30 07:46:29 UTC	1369	IN	Data Raw: 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 7b 68 65 69 67 68 74 3a 32 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 2e 35 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 20 70 61 74 68 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 20 70 61 74 68 7b 66 69 6c 6c 3a 23 33 32 61 65 38 38 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 67 65 6e 65 72 Data Ascii: st-banner-sdk .ot-optout-signal svg,#onetrust-pc-sdk .ot-optout-signal svg{height:20px;width:30px;transform:scale(0.5)}#onetrust-banner-sdk .ot-optout-signal svg path,#onetrust-pc-sdk .ot-optout-signal svg path{fill:#32ae88}#onetrust-consent-sdk .ot-gener
2024-10-30 07:46:29 UTC	1369	IN	Data Raw: 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 2d 67 72 6f 75 70 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 63 6f 6e 74 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 67 61 70 3a 2e 32 35 72 65 6d 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 70 61 72 61 67 72 61 70 68 2c 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 2d 67 72 6f 75 70 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 70 61 72 61 67 72 61 70 68 7b 6d 61 72 Data Ascii: netrust-consent-sdk .ot-signature-health-group .ot-signature-cont{display:flex;flex-direction:column;gap:.25rem}#onetrust-consent-sdk .ot-signature-health .ot-signature-paragraph,#onetrust-consent-sdk .ot-signature-health-group .ot-signature-paragraph{mar
2024-10-30 07:46:29 UTC	1369	IN	Data Raw: 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 69 6e 70 75 74 2d 66 69 65 6c 64 2d 63 6f 6e 74 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 69 6e 70 75 74 7b 77 69 64 74 68 3a 36 35 25 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 2d 66 6f 72 6d 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 2d 66 6f 72 6d 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 6c 61 62 65 6c 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 66 6f 6e 74 2d Data Ascii: st-consent-sdk .ot-input-field-cont .ot-signature-input{width:65%}#onetrust-consent-sdk .ot-signature-health-form{display:flex;flex-direction:column}#onetrust-consent-sdk .ot-signature-health-form .ot-signature-label{margin-bottom:0;line-height:20px;font-
2024-10-30 07:46:29 UTC	1369	IN	Data Raw: 61 62 65 6c 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 69 6e 70 75 74 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 75 6c 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 6c 69 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 6e 61 76 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 61 62 6c 65 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 68 65 61 64 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 64 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 62 6f 64 79 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 Data Ascii: abel,#onetrust-banner-sdk input,#onetrust-banner-sdk ul,#onetrust-banner-sdk li,#onetrust-banner-sdk nav,#onetrust-banner-sdk table,#onetrust-banner-sdk thead,#onetrust-banner-sdk tr,#onetrust-banner-sdk td,#onetrust-banner-sdk tbody,#onetrust-banner-sdk
2024-10-30 07:46:30 UTC	1369	IN	Data Raw: 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 73 65 63 74 69 6f 6e 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 61 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 6c 61 62 65 6c 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 69 6e 70 75 74 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 75 6c 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 6c 69 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 6e 61 76 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 74 61 62 6c 65 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 74 68 65 61 64 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b Data Ascii: ,#ot-sdk-cookie-policy section,#ot-sdk-cookie-policy a,#ot-sdk-cookie-policy label,#ot-sdk-cookie-policy input,#ot-sdk-cookie-policy ul,#ot-sdk-cookie-policy li,#ot-sdk-cookie-policy nav,#ot-sdk-cookie-policy table,#ot-sdk-cookie-policy thead,#ot-sdk-cook

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49846	172.67.72.50	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:30 UTC	359	OUT	GET /kameleoon.js HTTP/1.1 Host: qchmhd61sj.kameleoon.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 07:46:30 UTC	953	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 07:46:30 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close last-modified: Mon, 28 Oct 2024 13:46:08 GMT vary: Accept-Encoding etag: W/"671f95a0-4ce4c" expires: Wed, 30 Oct 2024 07:46:43 GMT Cache-Control: max-age=3600, s-maxage=5400 cdn-cache-control: max-age=5400; public; stale-if-error=604800; stale-while-revalidate=604800 strict-transport-security: max-age=31536000; includeSubDomains; preload CF-Cache-Status: HIT Age: 5303 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fIwe3JJo8%2BlwLKXDlbWuUl5kqhDTG2uifW2BRrkB%2BYz%2BxWFooim0Nn8Ptt9%2F3dnca8VCfTgjpG6yPXkLxBuPeo3QzHvL8dAbCJScr5sq320rtOasm%2F619QyBKLY49erdZizrkZXV6p%2F8"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da9cabae9560c13-DFW alt-svc: h3=":443"; ma=86400
2024-10-30 07:46:30 UTC	416	IN	Data Raw: 37 62 66 63 0d 0a 69 66 20 28 75 6e 64 65 66 69 6e 65 64 20 3d 3d 3d 20 77 69 6e 64 6f 77 2e 4b 61 6d 65 6c 65 6f 6f 6e 29 7b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 6b 62 6f 77 73 65 72 3d 74 28 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 69 29 7b 69 66 28 74 5b 69 5d 29 72 65 74 75 72 6e 20 74 5b 69 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6e 3d 74 5b 69 5d 3d 7b 69 3a 69 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 69 5d 2e 63 61 6c 6c 28 6e 2e 65 78 70 6f 72 74 73 2c 6e 2c 6e 2e 65 78 70 6f 72 74 73 2c 72 29 2c 6e 2e 6c 3d 21 30 2c 6e 2e Data Ascii: 7bfcif (undefined === window.Kameleoon){(function(){!function(e,t){e.kbowser=t()}(this,(function(){return function(e){var t={};function r(i){if(t[i])return t[i].exports;var n=t[i]={i:i,l:!1,exports:{}};return e[i].call(n.exports,n,n.exports,r),n.l=!0,n.
2024-10-30 07:46:30 UTC	1369	IN	Data Raw: 74 72 69 6e 67 54 61 67 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 53 79 6d 62 6f 6c 2e 74 6f 53 74 72 69 6e 67 54 61 67 2c 7b 76 61 6c 75 65 3a 22 4d 6f 64 75 6c 65 22 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 7d 2c 72 2e 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 31 26 74 26 26 28 65 3d 72 28 65 29 29 2c 38 26 74 29 72 65 74 75 72 6e 20 65 3b 69 66 28 34 26 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 69 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 3b 69 66 28 72 2e 72 28 Data Ascii: tringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},r.t=function(e,t){if(1&t&&(e=r(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var i=Object.create(null);if(r.r(
2024-10-30 07:46:30 UTC	1369	IN	Data Raw: 61 72 20 65 3d 73 5b 74 5d 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 6e 75 6c 6c 21 3d 3d 65 26 26 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 5b 74 5d 3d 65 5b 74 5d 7d 29 29 7d 3b 66 6f 72 28 74 3d 30 2c 72 3d 73 2e 6c 65 6e 67 74 68 3b 74 3c 72 3b 74 2b 3d 31 29 6f 28 29 3b 72 65 74 75 72 6e 20 65 7d 2c 65 7d 28 29 3b 74 2e 64 65 66 61 75 6c 74 3d 6e 2c 65 2e 65 78 70 6f 72 74 73 3d 74 2e 64 65 66 61 75 6c 74 7d 2c 31 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3d 21 30 2c 74 2e 4f 53 5f 4d 41 50 3d 74 2e 50 4c 41 54 46 4f 52 4d 53 5f 4d 41 50 3d 76 6f 69 64 20 30 3b 74 2e 50 4c 41 Data Ascii: ar e=s[t];"object"==typeof e&&null!==e&&Object.keys(e).forEach((function(t){i[t]=e[t]}))};for(t=0,r=s.length;t<r;t+=1)o();return e},e}();t.default=n,e.exports=t.default},18:function(e,t,r){"use strict";t.__esModule=!0,t.OS_MAP=t.PLATFORMS_MAP=void 0;t.PLA
2024-10-30 07:46:30 UTC	1369	IN	Data Raw: 68 69 73 2e 70 61 72 73 65 64 52 65 73 75 6c 74 2e 62 72 6f 77 73 65 72 3d 7b 7d 3b 76 61 72 20 74 3d 61 2e 64 65 66 61 75 6c 74 2e 66 69 6e 64 28 69 2e 64 65 66 61 75 6c 74 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 2e 74 65 73 74 29 72 65 74 75 72 6e 20 74 2e 74 65 73 74 28 65 29 3b 69 66 28 74 2e 74 65 73 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 72 65 74 75 72 6e 20 74 2e 74 65 73 74 2e 73 6f 6d 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 74 65 73 74 28 74 29 7d 29 29 3b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 42 72 6f 77 73 65 72 27 73 20 74 65 73 74 20 66 75 6e 63 74 69 6f 6e 20 69 73 20 6e 6f 74 20 76 61 6c 69 64 22 29 7d 29 29 Data Ascii: his.parsedResult.browser={};var t=a.default.find(i.default,(function(t){if("function"==typeof t.test)return t.test(e);if(t.test instanceof Array)return t.test.some((function(t){return e.test(t)}));throw new Error("Browser's test function is not valid")}))
2024-10-30 07:46:30 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 74 65 73 74 28 74 29 7d 29 29 3b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 42 72 6f 77 73 65 72 27 73 20 74 65 73 74 20 66 75 6e 63 74 69 6f 6e 20 69 73 20 6e 6f 74 20 76 61 6c 69 64 22 29 7d 29 29 3b 72 65 74 75 72 6e 20 74 26 26 28 74 68 69 73 2e 70 61 72 73 65 64 52 65 73 75 6c 74 2e 70 6c 61 74 66 6f 72 6d 3d 74 2e 64 65 73 63 72 69 62 65 28 74 68 69 73 2e 67 65 74 55 41 28 29 29 29 2c 74 68 69 73 2e 70 61 72 73 65 64 52 65 73 75 6c 74 2e 70 6c 61 74 66 6f 72 6d 7d 2c 74 2e 70 61 72 73 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 61 72 73 65 42 72 6f 77 73 65 72 28 29 2c 74 68 69 73 2e 70 61 72 73 65 4f 53 28 29 2c 74 68 69 73 2e 70 61 72 73 65 50 6c 61 74 66 Data Ascii: tion(t){return e.test(t)}));throw new Error("Browser's test function is not valid")}));return t&&(this.parsedResult.platform=t.describe(this.getUA())),this.parsedResult.platform},t.parse=function(){return this.parseBrowser(),this.parseOS(),this.parsePlatf
2024-10-30 07:46:30 UTC	1369	IN	Data Raw: 2e 67 65 74 46 69 72 73 74 4d 61 74 63 68 28 73 2c 65 29 7c 7c 6e 2e 64 65 66 61 75 6c 74 2e 67 65 74 46 69 72 73 74 4d 61 74 63 68 28 2f 28 3f 3a 77 68 61 6c 65 29 5b 5c 73 2f 5d 28 5c 64 2b 28 3f 3a 5c 2e 5c 64 2b 29 2b 29 2f 69 2c 65 29 3b 72 65 74 75 72 6e 20 72 26 26 28 74 2e 76 65 72 73 69 6f 6e 3d 72 29 2c 74 7d 7d 2c 7b 74 65 73 74 3a 5b 2f 4d 5a 42 72 6f 77 73 65 72 2f 69 5d 2c 64 65 73 63 72 69 62 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 6e 61 6d 65 3a 22 4d 5a 20 42 72 6f 77 73 65 72 22 7d 2c 72 3d 6e 2e 64 65 66 61 75 6c 74 2e 67 65 74 46 69 72 73 74 4d 61 74 63 68 28 2f 28 3f 3a 4d 5a 42 72 6f 77 73 65 72 29 5b 5c 73 2f 5d 28 5c 64 2b 28 3f 3a 5c 2e 5c 64 2b 29 2b 29 2f 69 2c 65 29 7c 7c 6e 2e 64 65 66 61 75 6c 74 2e 67 Data Ascii: .getFirstMatch(s,e)\|\|n.default.getFirstMatch(/(?:whale)[\s/](\d+(?:\.\d+)+)/i,e);return r&&(t.version=r),t}},{test:[/MZBrowser/i],describe:function(e){var t={name:"MZ Browser"},r=n.default.getFirstMatch(/(?:MZBrowser)[\s/](\d+(?:\.\d+)+)/i,e)\|\|n.default.g
2024-10-30 07:46:30 UTC	1369	IN	Data Raw: 6f 6e 7c 6d 78 69 6f 73 29 5b 5c 73 2f 5d 28 5c 64 2b 28 5c 2e 3f 5f 3f 5c 64 2b 29 2b 29 2f 69 2c 65 29 3b 72 65 74 75 72 6e 20 72 26 26 28 74 2e 76 65 72 73 69 6f 6e 3d 72 29 2c 74 7d 7d 2c 7b 74 65 73 74 3a 5b 2f 65 70 69 70 68 61 6e 79 2f 69 5d 2c 64 65 73 63 72 69 62 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 6e 61 6d 65 3a 22 45 70 69 70 68 61 6e 79 22 7d 2c 72 3d 6e 2e 64 65 66 61 75 6c 74 2e 67 65 74 46 69 72 73 74 4d 61 74 63 68 28 73 2c 65 29 7c 7c 6e 2e 64 65 66 61 75 6c 74 2e 67 65 74 46 69 72 73 74 4d 61 74 63 68 28 2f 28 3f 3a 65 70 69 70 68 61 6e 79 29 5b 5c 73 2f 5d 28 5c 64 2b 28 5c 2e 3f 5f 3f 5c 64 2b 29 2b 29 2f 69 2c 65 29 3b 72 65 74 75 72 6e 20 72 26 26 28 74 2e 76 65 72 73 69 6f 6e 3d 72 29 2c 74 7d 7d 2c 7b 74 Data Ascii: on\|mxios)[\s/](\d+(\.?_?\d+)+)/i,e);return r&&(t.version=r),t}},{test:[/epiphany/i],describe:function(e){var t={name:"Epiphany"},r=n.default.getFirstMatch(s,e)\|\|n.default.getFirstMatch(/(?:epiphany)[\s/](\d+(\.?_?\d+)+)/i,e);return r&&(t.version=r),t}},{t
2024-10-30 07:46:30 UTC	1369	IN	Data Raw: 6d 73 69 65 20 7c 72 76 3a 29 28 5c 64 2b 28 5c 2e 3f 5f 3f 5c 64 2b 29 2b 29 2f 69 2c 65 29 3b 72 65 74 75 72 6e 20 72 26 26 28 74 2e 76 65 72 73 69 6f 6e 3d 72 29 2c 74 7d 7d 2c 7b 74 65 73 74 3a 5b 2f 5c 73 65 64 67 5c 2f 2f 69 5d 2c 64 65 73 63 72 69 62 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 6e 61 6d 65 3a 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 7d 2c 72 3d 6e 2e 64 65 66 61 75 6c 74 2e 67 65 74 46 69 72 73 74 4d 61 74 63 68 28 2f 5c 73 65 64 67 5c 2f 28 5c 64 2b 28 5c 2e 3f 5f 3f 5c 64 2b 29 2b 29 2f 69 2c 65 29 3b 72 65 74 75 72 6e 20 72 26 26 28 74 2e 76 65 72 73 69 6f 6e 3d 72 29 2c 74 7d 7d 2c 7b 74 65 73 74 3a 5b 2f 65 64 67 28 5b 65 61 5d 7c 69 6f 73 29 2f 69 5d 2c 64 65 73 63 72 69 62 65 3a 66 75 6e 63 74 69 6f Data Ascii: msie \|rv:)(\d+(\.?_?\d+)+)/i,e);return r&&(t.version=r),t}},{test:[/\sedg\//i],describe:function(e){var t={name:"Microsoft Edge"},r=n.default.getFirstMatch(/\sedg\/(\d+(\.?_?\d+)+)/i,e);return r&&(t.version=r),t}},{test:[/edg([ea]\|ios)/i],describe:functio
2024-10-30 07:46:30 UTC	1369	IN	Data Raw: 3d 7b 6e 61 6d 65 3a 22 42 6c 61 63 6b 42 65 72 72 79 22 7d 2c 72 3d 6e 2e 64 65 66 61 75 6c 74 2e 67 65 74 46 69 72 73 74 4d 61 74 63 68 28 73 2c 65 29 7c 7c 6e 2e 64 65 66 61 75 6c 74 2e 67 65 74 46 69 72 73 74 4d 61 74 63 68 28 2f 62 6c 61 63 6b 62 65 72 72 79 5b 5c 64 5d 2b 5c 2f 28 5c 64 2b 28 5c 2e 3f 5f 3f 5c 64 2b 29 2b 29 2f 69 2c 65 29 3b 72 65 74 75 72 6e 20 72 26 26 28 74 2e 76 65 72 73 69 6f 6e 3d 72 29 2c 74 7d 7d 2c 7b 74 65 73 74 3a 5b 2f 28 77 65 62 7c 68 70 77 29 5b 6f 30 5d 73 2f 69 5d 2c 64 65 73 63 72 69 62 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 6e 61 6d 65 3a 22 57 65 62 4f 53 20 42 72 6f 77 73 65 72 22 7d 2c 72 3d 6e 2e 64 65 66 61 75 6c 74 2e 67 65 74 46 69 72 73 74 4d 61 74 63 68 28 73 2c 65 29 7c 7c 6e 2e Data Ascii: ={name:"BlackBerry"},r=n.default.getFirstMatch(s,e)\|\|n.default.getFirstMatch(/blackberry[\d]+\/(\d+(\.?_?\d+)+)/i,e);return r&&(t.version=r),t}},{test:[/(web\|hpw)[o0]s/i],describe:function(e){var t={name:"WebOS Browser"},r=n.default.getFirstMatch(s,e)\|\|n.
2024-10-30 07:46:30 UTC	1369	IN	Data Raw: 73 2c 65 29 3b 72 65 74 75 72 6e 20 72 26 26 28 74 2e 76 65 72 73 69 6f 6e 3d 72 29 2c 74 7d 7d 2c 7b 74 65 73 74 3a 5b 2f 63 68 72 6f 6d 65 7c 63 72 69 6f 73 7c 63 72 6d 6f 2f 69 5d 2c 64 65 73 63 72 69 62 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 6e 61 6d 65 3a 22 43 68 72 6f 6d 65 22 7d 2c 72 3d 6e 2e 64 65 66 61 75 6c 74 2e 67 65 74 46 69 72 73 74 4d 61 74 63 68 28 2f 28 3f 3a 63 68 72 6f 6d 65 7c 63 72 69 6f 73 7c 63 72 6d 6f 29 5c 2f 28 5c 64 2b 28 5c 2e 3f 5f 3f 5c 64 2b 29 2b 29 2f 69 2c 65 29 3b 72 65 74 75 72 6e 20 72 26 26 28 74 2e 76 65 72 73 69 6f 6e 3d 72 29 2c 74 7d 7d 2c 7b 74 65 73 74 3a 5b 2f 47 53 41 2f 69 5d 2c 64 65 73 63 72 69 62 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 6e 61 6d 65 3a 22 47 Data Ascii: s,e);return r&&(t.version=r),t}},{test:[/chrome\|crios\|crmo/i],describe:function(e){var t={name:"Chrome"},r=n.default.getFirstMatch(/(?:chrome\|crios\|crmo)\/(\d+(\.?_?\d+)+)/i,e);return r&&(t.version=r),t}},{test:[/GSA/i],describe:function(e){var t={name:"G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49834	104.18.86.42	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:30 UTC	599	OUT	GET /logos/static/ot_close.svg HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://all.accor.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 07:46:30 UTC	873	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 07:46:30 GMT Content-Type: image/svg+xml Content-Length: 651 Connection: close Content-MD5: pcXWFGpuVeSg/jVnYCseRg== Last-Modified: Mon, 28 Oct 2024 06:29:35 GMT ETag: 0x8DCF719E3F55B90 x-ms-request-id: c589eed9-801e-00b7-4469-299c8f000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 69449 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8da9cabbe9be2cc9-DFW
2024-10-30 07:46:30 UTC	496	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 34 38 2e 33 33 33 22 20 68 65 69 67 68 74 3d 22 33 34 38 2e 33 33 33 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 34 38 2e 33 33 33 20 33 34 38 2e 33 33 34 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 35 36 35 36 35 36 22 20 64 3d 22 4d 33 33 36 2e 35 35 39 20 36 38 2e 36 31 31 4c 32 33 31 2e 30 31 36 20 31 37 34 2e 31 36 35 6c 31 30 35 2e 35 34 33 20 31 30 35 2e 35 34 39 63 31 35 2e 36 39 39 20 31 35 2e 37 30 35 20 31 35 2e 36 39 39 20 34 31 2e 31 34 35 20 30 20 35 36 2e 38 35 2d 37 2e 38 34 34 20 37 2e 38 34 34 2d 31 38 2e 31 32 38 20 31 31 2e 37 36 39 2d 32 38 2e 34 30 37 20 31 31 2e 37 36 39 2d 31 30 2e 32 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="348.333" height="348.333" viewBox="0 0 348.333 348.334"><path fill="#565656" d="M336.559 68.611L231.016 174.165l105.543 105.549c15.699 15.705 15.699 41.145 0 56.85-7.844 7.844-18.128 11.769-28.407 11.769-10.2
2024-10-30 07:46:30 UTC	155	IN	Data Raw: 34 20 31 35 2e 36 39 36 2d 31 35 2e 36 38 37 20 34 31 2e 31 32 37 2d 31 35 2e 36 38 37 20 35 36 2e 38 32 39 20 30 6c 31 30 35 2e 35 36 33 20 31 30 35 2e 35 35 34 4c 32 37 39 2e 37 32 31 20 31 31 2e 37 36 37 63 31 35 2e 37 30 35 2d 31 35 2e 36 38 37 20 34 31 2e 31 33 39 2d 31 35 2e 36 38 37 20 35 36 2e 38 33 32 20 30 20 31 35 2e 37 30 35 20 31 35 2e 36 39 39 20 31 35 2e 37 30 35 20 34 31 2e 31 34 35 2e 30 30 36 20 35 36 2e 38 34 34 7a 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: 4 15.696-15.687 41.127-15.687 56.829 0l105.563 105.554L279.721 11.767c15.705-15.687 41.139-15.687 56.832 0 15.705 15.699 15.705 41.145.006 56.844z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49848	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:30 UTC	5992	OUT	GET /assets/fonts/roboto/bold/roboto-bold.woff2 HTTP/1.1 Host: all.accor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://all.accor.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://all.accor.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=uXhrmD2Na/K1uglc4DSccWmUi3lwT6U0aN5NKqvcu8d5WGWybG4+Fjgl4ne6nVjifX1jzgyPIuRTBhS6nanmMOLamS/KiojPrxeLcFng8UzPO+81sa87bs4RFhGAg5SdnTRio+RJdn41ZezkVQzm+QQNKVTMJBE8fIzHUqlLtmYsp4GqzAo9Tqkn29+6s06cnyhW9Bg2AjaE3z+uY1Kha+K1N+xGE1wxY+ov1hMjJJFJQKo0Zzr8yVUmc0uGx6VyOI/GCYB98MMi2baM/noo1d0GCT/eTJnamWBVosFVl6rGjGRpxA8WWwcog7Ny/HlQVp6w8cTkKFTg/8KjIPnCBapACqcVA8DvW2Oym2gj1AtBv4YYfUMq3TEu4mXRkOJJVmAh7NCUHwLhEc4aXJBIqbW6JkrW0slp4+M4RmDR1e+A3GrFYXelb56QL3DRn/v55w+TZWXTMoZhYCD+Z9T66/ [TRUNCATED]
2024-10-30 07:46:31 UTC	837	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: authorization, content-type, x-requested-with Access-Control-Allow-Methods: PUT, GET, POST, DELETE, OPTIONS Access-Control-Allow-Origin: * Age: 161141 Cache-control: public, max-age=3600, stale-while-revalidate=21600 Content-Type: font/woff2 Date: Wed, 30 Oct 2024 07:46:31 GMT Last-Modified: Wed, 16 Oct 2024 09:00:04 GMT P3P: CP="NO P3P POLICY" Referrer-Policy: origin Server: ECAcc (lhd/35F0) Strict-Transport-Security: max-age=15552000 Timing-Allow-Origin: * X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Clacks-Overhead: GNU Terry Pratchett X-Iinfo: 15-133980910-133961841 pNNy RT(1730113249990 3) q(0 1 1 0) r(1 1) U24 X-XSS-Protection: 1; mode=block Content-Length: 65972 Connection: close
2024-10-30 07:46:31 UTC	16383	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 01 b4 00 12 00 00 00 02 be 5c 00 01 01 4b 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 7e 1b 81 cb 24 1c ac 4c 06 60 00 89 2e 08 48 09 83 3c 11 0c 0a 87 c5 1c 86 e0 45 0b 94 1e 00 01 36 02 24 03 a8 38 04 20 05 88 7d 07 e4 66 0c 82 29 5b aa 80 b2 00 2a e5 68 e7 88 d8 36 01 a0 05 f9 bc 6e 43 80 de 55 37 33 ab ce d9 6e 84 31 ee b6 f4 10 5b 87 a7 7a fa 09 68 5b e0 1a a6 57 c4 7e d0 9d 03 d4 43 7d cd cb fe ff ff ff ff ff ff ff 5f 9b 4c c2 b6 92 ec 76 92 4d 3f 5a 4a f9 ca 53 01 45 14 39 7c ee d4 23 28 98 a5 64 e4 48 c8 93 17 4e 65 5e e5 e4 65 f2 7a d2 14 45 5b 68 4e ee 75 95 ab 93 7b 4a 84 d4 40 29 9f aa 51 37 03 f5 1c e1 f3 85 8a 2a 22 bc 97 7d d2 b1 65 4d dd 72 d5 b1 09 a5 b5 a8 9a Data Ascii: wOF2\K?FFTM~$L`.H<E6$8 }f)[h6nCU73n1[zh[W~C}_LvM?ZJSE9\|#(dHNe^ezE[hNu{J@)Q7"}eMr
2024-10-30 07:46:31 UTC	16383	IN	Data Raw: 09 48 f0 68 97 fa 61 04 d9 c2 84 91 d5 b0 35 fc b8 86 c1 ce f2 fe c0 10 70 8b ab ae 31 cd 7f 51 a2 26 a5 b9 25 49 94 66 41 83 36 b5 da 68 13 bf 3f 80 c8 d5 17 15 1e 1b d0 a8 a8 1c 04 03 4d 16 80 af 97 92 6f c6 30 0f e8 01 66 49 94 29 67 57 c3 d8 3d 17 a3 dd 2a 80 2a 1e 27 1e 17 59 a5 b6 45 f2 4b 5a ce d7 f9 7e 3a a1 b4 d4 bd e7 63 77 04 26 d2 05 c0 ad 01 95 f3 51 f3 3e 78 14 a1 72 90 5b d0 8e f4 c6 a7 55 5a 99 f9 cd 0a da 94 e0 87 fc 35 fa 29 ba 19 e0 53 1e 69 86 4a 6d 20 c0 8e 74 73 08 f5 8e 2f db 14 9b 71 24 c3 42 e3 01 4b 1b b6 c8 af 1d 39 fb 7f dc b9 c1 65 80 22 46 dc e1 88 7e b1 aa 39 0d d0 a9 d3 36 cc a5 74 6d 8d 00 d3 89 66 d6 92 f8 5f 22 ac 82 21 ee da 3f bc 01 50 87 d2 31 64 ea 29 f6 8a 67 9d 6b 85 e5 d4 06 45 6b b0 7d 79 6c 9a ca f9 42 86 26 92 Data Ascii: Hha5p1Q&%IfA6h?Mo0fI)gW=**'YEKZ~:cw&Q>xr[UZ5)SiJm ts/q$BK9e"F~96tmf_"!?P1d)gkEk}ylB&
2024-10-30 07:46:31 UTC	16383	IN	Data Raw: 58 4a 3d 57 7a a4 89 e7 96 91 21 2c 4f 0f 05 ac 5f 3e 8f 89 d7 8f b1 01 e6 b9 f0 fb 72 6e 16 b6 36 41 ba a0 37 59 6a b6 c3 a5 cb 77 83 33 2d b3 2d 63 8c d8 b9 82 4a ed 64 2a b2 bb 25 8a c7 f7 be b3 de fe aa e8 6b f2 e2 5f ce c3 c3 21 59 a4 94 c7 06 67 9e 0d e3 12 d1 e4 c7 99 d4 2c 3b 47 b0 00 74 4c fa d2 88 42 d1 19 64 6f 8c 38 2a d3 15 fb 42 2f 21 c1 fd 31 88 58 0a 52 95 59 9c e9 a5 8f e8 2e d5 31 3a 51 97 dd 0d 4d 6d 3c 2a 78 a4 bd 0b 92 71 5c ae a7 74 43 33 9b 8f 4b 2d 95 5f 80 73 82 f8 f4 20 b7 78 8c f7 7d 01 ea 01 73 c5 27 28 ea 4d a0 16 50 4b 71 0a 1b 27 ea d2 31 aa 2f ac 36 92 bd 52 19 ca 37 77 41 2b b6 7b 4f 03 36 e2 c7 ff 71 ec 86 ec 71 68 f6 d6 2b cf 3c e8 b1 c3 23 36 45 7f bc 1c 0f c6 5b bd b5 aa 03 d7 d9 92 2a e4 55 e8 2a cb 57 96 1a c1 92 65 Data Ascii: XJ=Wz!,O_>rn6A7Yjw3--cJd%k_!Yg,;GtLBdo8B/!1XRY.1:QMm<xq\tC3K-_s x}s'(MPKq'1/6R7wA+{O6qqh+<#6E[U*We
2024-10-30 07:46:31 UTC	16383	IN	Data Raw: ce 1c f1 77 ea 5f 13 4c 47 99 e7 1f 00 90 b0 12 0e 4a 09 d8 cc 38 7a 9b 6a 5e fc 64 34 4e 67 4f 16 ec d1 56 f8 82 6b 0a 0a 41 6a 1e 59 2c 36 c9 7c c4 a9 79 52 33 08 08 26 50 22 c6 ec 1a 3b 44 01 81 db 87 8c 2b f1 63 2d da 53 32 0d 85 9e 6b 0c 58 8c f9 dd 66 f9 61 ef b0 d1 3a 88 7d 43 58 e3 d2 84 56 92 b0 59 13 b7 b1 28 77 6a d5 a9 28 c9 2a ad e7 a7 35 16 c7 8c 95 de 82 52 bd 39 19 2f b8 95 5e b2 c9 6f 36 0e dc 31 8e f5 d1 7f 8e f1 1b c6 a4 e0 f6 2b 86 cc 80 db f2 8d 78 bc 9c 06 23 01 c5 8d cc 48 20 d5 54 34 1a d4 7a b9 f6 21 04 f1 b1 45 37 b9 49 02 5d 21 35 f6 43 33 37 f0 3d 9e 77 ba f9 79 eb e9 d1 d1 ef 39 be bc 07 37 8c f5 36 16 7e 91 e4 25 a1 f5 ba b6 a4 2a fd b2 04 2c 85 b2 dc 88 cd 8c da 43 03 18 58 47 55 5b fe fa 8a 95 78 25 96 24 d4 e5 58 22 f7 93 Data Ascii: w_LGJ8zj^d4NgOVkAjY,6\|yR3&P";D+c-S2kXfa:}CXVY(wj(5R9/^o61+x#H T4z!E7I]!5C37=wy976~%,CXGU[x%$X"
2024-10-30 07:46:31 UTC	440	IN	Data Raw: fb c9 ea d7 a8 aa 26 a9 22 03 9a 7d 42 19 2e 0e 53 f8 66 f3 db c4 aa 01 d8 8f 43 a7 5f ba 3d cb e4 50 4f ae 37 24 c9 a3 91 7c 98 ee d7 e8 d7 68 b6 29 46 37 88 4d 67 fd 46 11 6d 28 a6 85 12 4f 52 7c 47 9c d3 74 85 7c 17 53 a0 94 ee 28 a3 7b 2a e1 e9 32 18 f4 4f 3b 97 57 a3 f1 fe b4 bf dc 4d 86 43 ff 2b 11 be 8c 86 ff f5 7b 17 13 9f 07 ef 04 50 2f 7d cc 20 1d 28 ca ea 42 7a 67 a5 b4 69 19 4f a5 26 14 db 4c a4 f1 c3 00 09 f6 bc 4b c1 c4 cf c8 48 22 bb 46 ec 6e c4 35 21 79 89 ae 01 b2 7e 49 7e 1c d5 ca a1 de c1 f6 a6 1f 0f a8 2e b2 1b 0c 81 a1 30 38 02 a3 37 41 00 81 a1 48 0c 0e 6e b3 00 68 10 40 8d 82 46 52 84 c2 ad 20 b9 54 5f e6 1f e4 9d 43 fb c4 ad 3a 95 2d df 61 53 1d bb 8f b1 cc 4e 20 25 db 4b b2 f3 c5 33 ca f9 b4 70 be 97 b6 41 12 02 50 da 8c 4e 25 23 Data Ascii: &"}B.SfC_=PO7$\|h)F7MgFm(OR\|Gt\|S({*2O;WMC+{P/} (BzgiO&LKH"Fn5!y~I~.087AHnh@FR T_C:-aSN %K3pAPN%#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49849	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:30 UTC	6333	OUT	GET /assets/fonts/roboto/regular/roboto-regular.woff2 HTTP/1.1 Host: all.accor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://all.accor.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://all.accor.com/a/en/new-app-offer/app-download.html?source_caller=bulk&af_qr=true&shortlink=5m1nc8of&c=20241013_ALL_AppBonusingMobileLp&af_ad=QR_code_20241013_ALL_AppBonusingMobileLp&pid=QR_code&deep_link_value=accor%3A%2F%2Fsearch%2Foffer%3Fpage_id%3Dddc8e830-2fc5-4492-ae7f-a63574b202f4&af_adset=EN Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=uXhrmD2Na/K1uglc4DSccWmUi3lwT6U0aN5NKqvcu8d5WGWybG4+Fjgl4ne6nVjifX1jzgyPIuRTBhS6nanmMOLamS/KiojPrxeLcFng8UzPO+81sa87bs4RFhGAg5SdnTRio+RJdn41ZezkVQzm+QQNKVTMJBE8fIzHUqlLtmYsp4GqzAo9Tqkn29+6s06cnyhW9Bg2AjaE3z+uY1Kha+K1N+xGE1wxY+ov1hMjJJFJQKo0Zzr8yVUmc0uGx6VyOI/GCYB98MMi2baM/noo1d0GCT/eTJnamWBVosFVl6rGjGRpxA8WWwcog7Ny/HlQVp6w8cTkKFTg/8KjIPnCBapACqcVA8DvW2Oym2gj1AtBv4YYfUMq3TEu4mXRkOJJVmAh7NCUHwLhEc4aXJBIqbW6JkrW0slp4+M4RmDR1e+A3GrFYXelb56QL3DRn/v55w+TZWXTMoZhYCD+Z9T66/ [TRUNCATED] If-Modified-Since: Wed, 16 Oct 2024 09:00:04 GMT
2024-10-30 07:46:31 UTC	799	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: authorization, content-type, x-requested-with Access-Control-Allow-Methods: PUT, GET, POST, DELETE, OPTIONS Access-Control-Allow-Origin: * Age: 161141 Cache-control: public, max-age=3600, stale-while-revalidate=21600 Date: Wed, 30 Oct 2024 07:46:31 GMT Last-Modified: Wed, 16 Oct 2024 09:00:04 GMT P3P: CP="NO P3P POLICY" Referrer-Policy: origin Server: ECAcc (lhd/35CC) Strict-Transport-Security: max-age=15552000 Timing-Allow-Origin: * X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Clacks-Overhead: GNU Terry Pratchett X-Iinfo: 17-193066133-192648724 pNNy RT(1730113249447 3) q(0 0 0 -1) r(0 0) U24 X-XSS-Protection: 1; mode=block Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49857	104.18.86.42	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:30 UTC	386	OUT	GET /scripttemplates/202409.2.0/assets/otFlat.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 07:46:31 UTC	853	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 07:46:31 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Content-MD5: CDHNBOyaHPNE3EDr/Gzy5w== Last-Modified: Mon, 28 Oct 2024 06:29:24 GMT x-ms-request-id: 5f2ce6c8-801e-00f8-1e2e-295897000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 44535 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8da9cabfffd4e93a-DFW
2024-10-30 07:46:31 UTC	516	IN	Data Raw: 33 34 66 32 0d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 6f 74 46 6c 61 74 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 68 74 6d 6c 22 3a 20 22 50 47 52 70 64 69 42 70 5a 44 30 69 62 32 35 6c 64 48 4a 31 63 33 51 74 59 6d 46 75 62 6d 56 79 4c 58 4e 6b 61 79 49 67 59 32 78 68 63 33 4d 39 49 6d 39 30 52 6d 78 68 64 43 49 2b 50 47 52 70 64 69 42 79 62 32 78 6c 50 53 4a 6b 61 57 46 73 62 32 63 69 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 4e 6b 61 79 31 6a 62 32 35 30 59 57 6c 75 5a 58 49 69 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 4e 6b 61 79 31 79 62 33 63 69 50 6a 78 6b 61 58 59 67 61 57 51 39 49 6d 39 75 5a 58 52 Data Ascii: 34f2 { "name": "otFlat", "html": "PGRpdiBpZD0ib25ldHJ1c3QtYmFubmVyLXNkayIgY2xhc3M9Im90RmxhdCI+PGRpdiByb2xlPSJkaWFsb2ciPjxkaXYgY2xhc3M9Im90LXNkay1jb250YWluZXIiPjxkaXYgY2xhc3M9Im90LXNkay1yb3ciPjxkaXYgaWQ9Im9uZXR
2024-10-30 07:46:31 UTC	1369	IN	Data Raw: 63 6d 56 6d 50 53 49 6a 49 6a 35 77 62 32 78 70 59 33 6b 38 4c 32 45 2b 50 43 39 6b 61 58 59 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 5a 48 42 6b 4c 57 4e 76 62 6e 52 68 61 57 35 6c 63 69 49 2b 50 47 67 7a 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 6b 63 47 51 74 64 47 6c 30 62 47 55 69 50 6c 64 6c 49 47 4e 76 62 47 78 6c 59 33 51 67 5a 47 46 30 59 53 42 70 62 69 42 76 63 6d 52 6c 63 69 42 30 62 79 42 77 63 6d 39 32 61 57 52 6c 4f 6a 77 76 61 44 4d 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 5a 48 42 6b 4c 57 4e 76 62 6e 52 6c 62 6e 51 69 50 6a 78 77 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 6b 63 47 51 74 5a 47 56 7a 59 79 49 2b 5a 47 56 7a 59 33 4a 70 63 48 52 70 62 32 34 38 4c 33 41 2b 50 43 39 6b 61 58 59 Data Ascii: cmVmPSIjIj5wb2xpY3k8L2E+PC9kaXY+PGRpdiBjbGFzcz0ib3QtZHBkLWNvbnRhaW5lciI+PGgzIGNsYXNzPSJvdC1kcGQtdGl0bGUiPldlIGNvbGxlY3QgZGF0YSBpbiBvcmRlciB0byBwcm92aWRlOjwvaDM+PGRpdiBjbGFzcz0ib3QtZHBkLWNvbnRlbnQiPjxwIGNsYXNzPSJvdC1kcGQtZGVzYyI+ZGVzY3JpcHRpb248L3A+PC9kaXY
2024-10-30 07:46:31 UTC	1369	IN	Data Raw: 6a 34 38 4c 32 52 70 64 6a 34 38 49 53 30 74 49 45 4e 73 62 33 4e 6c 49 45 4a 31 64 48 52 76 62 69 42 46 54 6b 51 74 4c 54 34 38 4c 32 52 70 64 6a 34 38 4c 32 52 70 64 6a 34 3d 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 63 73 73 22 3a 20 22 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 31 38 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 46 6c 61 74 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 7a 2d 69 6e 64 65 78 3a 32 31 34 37 34 38 33 36 34 35 3b 62 6f 74 74 6f 6d 3a 30 3b 72 69 67 68 74 3a 30 3b 6c 65 66 74 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 6d 61 78 2d 68 Data Ascii: j48L2Rpdj48IS0tIENsb3NlIEJ1dHRvbiBFTkQtLT48L2Rpdj48L2Rpdj4=", "css": "#onetrust-banner-sdk{box-shadow:0 0 18px rgba(0,0,0,.2)}#onetrust-banner-sdk.otFlat{position:fixed;z-index:2147483645;bottom:0;right:0;left:0;background-color:#fff;max-h
2024-10-30 07:46:31 UTC	1369	IN	Data Raw: 63 79 2d 74 69 74 6c 65 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 65 78 74 7b 63 6f 6c 6f 72 3a 64 69 6d 67 72 61 79 3b 66 6c 6f 61 74 3a 6c 65 66 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 2d 70 61 72 65 6e 74 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 Data Ascii: cy-title,#onetrust-banner-sdk #onetrust-policy-text{color:dimgray;float:left}#onetrust-banner-sdk #onetrust-button-group-parent{min-height:1px;text-align:center}#onetrust-banner-sdk #onetrust-button-group{display:inline-block}#onetrust-banner-sdk #onetrus
2024-10-30 07:46:31 UTC	1369	IN	Data Raw: 74 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 77 69 64 74 68 3a 61 75 74 6f 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 33 70 78 3b 6d 61 72 67 69 6e 3a 30 20 30 20 31 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 32 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 69 6e 70 75 74 20 2a 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e Data Ascii: t{cursor:pointer;width:auto;height:auto;border:none;padding:0;padding-right:3px;margin:0 0 10px;font-size:.82em;line-height:1.4}#onetrust-banner-sdk .banner-option-input *{pointer-events:none;font-size:inherit;line-height:inherit}#onetrust-banner-sdk .ban
2024-10-30 07:46:31 UTC	1369	IN	Data Raw: 74 61 69 6e 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 64 65 74 61 69 6c 73 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 3b 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 64 70 64 2d 63 6f 6e 74 61 69 6e 65 72 7b 66 6c 6f 61 74 3a 6c 65 66 74 7d 23 6f 6e 65 74 72 75 73 74 2d Data Ascii: tainer,#onetrust-banner-sdk .banner-option-details{transition:all 300ms ease-in 0s;-webkit-transition:all 300ms ease-in 0s;-moz-transition:all 300ms ease-in 0s;-o-transition:all 300ms ease-in 0s}#onetrust-banner-sdk .ot-dpd-container{float:left}#onetrust-
2024-10-30 07:46:31 UTC	1369	IN	Data Raw: 73 63 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 64 70 64 2d 64 65 73 63 3e 2e 6f 74 2d 62 2d 61 64 64 6c 2d 64 65 73 63 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 34 32 35 70 78 29 7b 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 63 6c 6f 73 65 2d 62 74 6e 2d 63 6f 6e 74 61 69 6e 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 36 70 78 3b 72 69 67 68 74 3a 32 70 78 7d 23 6f 6e 65 74 Data Ascii: sc{margin-bottom:10px}#onetrust-banner-sdk .ot-dpd-desc>.ot-b-addl-desc{margin-top:10px;margin-bottom:10px;font-size:1em}@media only screen and (max-width: 425px){#onetrust-banner-sdk #onetrust-close-btn-container{position:absolute;top:6px;right:2px}#onet
2024-10-30 07:46:31 UTC	1369	IN	Data Raw: 74 74 6f 6e 2d 67 72 6f 75 70 20 62 75 74 74 6f 6e 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 68 61 73 2d 72 65 6a 65 63 74 2d 61 6c 6c 2d 62 75 74 74 6f 6e 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 7b 66 6c 6f 61 74 3a 6c 65 66 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 68 61 73 2d 72 65 6a 65 63 74 2d 61 6c 6c 2d 62 75 74 74 6f 6e 20 23 6f 6e 65 74 72 75 73 74 2d 72 65 6a 65 63 Data Ascii: tton-group button{display:inline-block}#onetrust-banner-sdk #onetrust-button-group{margin-right:0;text-align:center}#onetrust-banner-sdk .has-reject-all-button #onetrust-pc-btn-handler{float:left}#onetrust-banner-sdk .has-reject-all-button #onetrust-rejec
2024-10-30 07:46:31 UTC	1369	IN	Data Raw: 68 61 6e 64 6c 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 7b 77 69 64 74 68 3a 31 30 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 20 23 6f 6e 65 74 72 75 73 74 2d 61 63 63 65 70 74 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 20 23 6f 6e 65 74 72 75 73 74 2d 72 65 6a 65 63 74 2d 61 6c 6c 2d 68 61 Data Ascii: handler,#onetrust-banner-sdk.ot-iab-2 #onetrust-button-group #onetrust-pc-btn-handler{width:100%}#onetrust-banner-sdk.ot-iab-2 #onetrust-button-group #onetrust-accept-btn-handler,#onetrust-banner-sdk.ot-iab-2 #onetrust-button-group #onetrust-reject-all-ha
2024-10-30 07:46:31 UTC	1369	IN	Data Raw: 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 7b 77 69 64 74 68 3a 35 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 69 74 6c 65 7b 77 69 64 74 68 3a 35 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 65 78 74 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 3a 6e 6f 74 28 2e 6f 74 2d 64 70 64 2d 64 65 73 63 29 3e 2e 6f 74 2d 62 2d 61 64 64 6c 2d 64 65 73 63 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 65 6d 3b 77 69 64 74 68 3a 35 30 Data Ascii: #onetrust-banner-sdk .ot-optout-signal{width:50%}#onetrust-banner-sdk.ot-iab-2 #onetrust-policy-title{width:50%}#onetrust-banner-sdk.ot-iab-2 #onetrust-policy-text,#onetrust-banner-sdk.ot-iab-2 :not(.ot-dpd-desc)>.ot-b-addl-desc{margin-bottom:1em;width:50

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49850	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:30 UTC	6331	OUT	GET /assets/fonts/roboto/medium/roboto-medium.woff2 HTTP/1.1 Host: all.accor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://all.accor.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://all.accor.com/a/en/new-app-offer/app-download.html?source_caller=bulk&af_qr=true&shortlink=5m1nc8of&c=20241013_ALL_AppBonusingMobileLp&af_ad=QR_code_20241013_ALL_AppBonusingMobileLp&pid=QR_code&deep_link_value=accor%3A%2F%2Fsearch%2Foffer%3Fpage_id%3Dddc8e830-2fc5-4492-ae7f-a63574b202f4&af_adset=EN Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=uXhrmD2Na/K1uglc4DSccWmUi3lwT6U0aN5NKqvcu8d5WGWybG4+Fjgl4ne6nVjifX1jzgyPIuRTBhS6nanmMOLamS/KiojPrxeLcFng8UzPO+81sa87bs4RFhGAg5SdnTRio+RJdn41ZezkVQzm+QQNKVTMJBE8fIzHUqlLtmYsp4GqzAo9Tqkn29+6s06cnyhW9Bg2AjaE3z+uY1Kha+K1N+xGE1wxY+ov1hMjJJFJQKo0Zzr8yVUmc0uGx6VyOI/GCYB98MMi2baM/noo1d0GCT/eTJnamWBVosFVl6rGjGRpxA8WWwcog7Ny/HlQVp6w8cTkKFTg/8KjIPnCBapACqcVA8DvW2Oym2gj1AtBv4YYfUMq3TEu4mXRkOJJVmAh7NCUHwLhEc4aXJBIqbW6JkrW0slp4+M4RmDR1e+A3GrFYXelb56QL3DRn/v55w+TZWXTMoZhYCD+Z9T66/ [TRUNCATED] If-Modified-Since: Wed, 16 Oct 2024 09:00:04 GMT
2024-10-30 07:46:31 UTC	796	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: authorization, content-type, x-requested-with Access-Control-Allow-Methods: PUT, GET, POST, DELETE, OPTIONS Access-Control-Allow-Origin: * Age: 161141 Cache-control: public, max-age=3600, stale-while-revalidate=21600 Date: Wed, 30 Oct 2024 07:46:31 GMT Last-Modified: Wed, 16 Oct 2024 09:00:04 GMT P3P: CP="NO P3P POLICY" Referrer-Policy: origin Server: ECAcc (lhd/35CC) Strict-Transport-Security: max-age=15552000 Timing-Allow-Origin: * X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Clacks-Overhead: GNU Terry Pratchett X-Iinfo: 14-68638889-68634949 pNNy RT(1730113249173 3) q(0 0 0 0) r(1 1) U24 X-XSS-Protection: 1; mode=block Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49858	104.18.86.42	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:30 UTC	393	OUT	GET /scripttemplates/202409.2.0/assets/otCommonStyles.css HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 07:46:31 UTC	869	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 07:46:31 GMT Content-Type: text/css Content-Length: 24745 Connection: close Content-MD5: A9jekd5UoO8SyzJ6LiStug== Last-Modified: Mon, 28 Oct 2024 06:29:35 GMT ETag: 0x8DCF719E44FC05C x-ms-request-id: 53612677-301e-00ea-772e-296c8b000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 6637 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8da9cac00bec2cbf-DFW
2024-10-30 07:46:31 UTC	500	IN	Data Raw: 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 6e 65 74 72 75 73 74 2d 76 65 6e 64 6f 72 73 2d 6c 69 73 74 2d 68 61 6e 64 6c 65 72 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 63 6f 6c 6f 72 3a 23 31 66 39 36 64 62 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 6e 65 74 72 75 73 74 2d 76 65 6e 64 6f 72 73 2d 6c 69 73 74 2d 68 61 6e 64 6c 65 72 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 31 66 39 36 64 62 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 3a 66 6f 63 75 73 7b 6f 75 74 Data Ascii: #onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .onetrust-vendors-list-handler:hover{color:#1f96db}#onetrust-banner-sdk:focus{out
2024-10-30 07:46:31 UTC	1369	IN	Data Raw: 2d 6f 66 66 73 65 74 3a 31 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 62 6e 72 2d 77 2d 6c 6f 67 6f 20 2e 6f 74 2d 62 6e 72 2d 6c 6f 67 6f 7b 68 65 69 67 68 74 3a 36 34 70 78 3b 77 69 64 74 68 3a 36 34 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 74 63 66 32 2d 76 65 6e 64 6f 72 2d 63 6f 75 6e 74 2e 6f 74 2d 74 65 78 74 2d 62 6f 6c 64 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 63 6c 6f 73 65 2d 69 63 6f 6e 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 63 6c 6f 73 65 2d 69 63 6f 6e 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 2e 6f 74 2d 63 6c 6f 73 65 2d 69 63 6f 6e 7b 62 61 Data Ascii: -offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-tcf2-vendor-count.ot-text-bold{font-weight:bold}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-icon,#ot-sync-ntfy .ot-close-icon{ba
2024-10-30 07:46:31 UTC	1369	IN	Data Raw: 64 61 74 61 2d 70 61 72 65 6e 74 2d 69 64 5d 20 2a 7b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 68 69 64 65 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 68 69 64 65 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 2e 6f 74 2d 68 69 64 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 62 75 74 74 6f 6e 2e 6f 74 2d 6c 69 6e 6b 2d 62 74 6e 3a 68 6f 76 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 62 75 74 74 6f 6e 2e 6f 74 2d 6c 69 6e 6b 2d 62 74 6e 3a Data Ascii: data-parent-id] *{font-size:inherit;font-weight:inherit;color:inherit}#onetrust-banner-sdk .ot-hide,#onetrust-pc-sdk .ot-hide,#ot-sync-ntfy .ot-hide{display:none !important}#onetrust-banner-sdk button.ot-link-btn:hover,#onetrust-pc-sdk button.ot-link-btn:
2024-10-30 07:46:31 UTC	1369	IN	Data Raw: 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 70 63 2d 6c 6f 67 6f 20 69 6d 67 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 70 63 2d 6c 6f 67 6f 20 69 6d 67 7b 6d 61 78 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 73 63 72 65 65 6e 2d 72 65 61 64 65 72 2d 6f 6e 6c 79 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e Data Ascii: nd-size:contain;background-repeat:no-repeat;display:inline-flex;justify-content:center;align-items:center}#onetrust-pc-sdk .pc-logo img,#onetrust-pc-sdk .ot-pc-logo img{max-height:100%;max-width:100%}#onetrust-pc-sdk .screen-reader-only,#onetrust-pc-sdk .
2024-10-30 07:46:31 UTC	1369	IN	Data Raw: 6f 70 61 63 69 74 79 3a 31 7d 7d 2e 6f 74 2d 63 6f 6f 6b 69 65 2d 6c 61 62 65 6c 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 34 32 36 70 78 29 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 38 39 36 70 78 29 61 6e 64 20 28 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 20 6c 61 6e 64 73 63 61 70 65 29 7b 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 70 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 35 65 6d 7d 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 69 6e 70 75 74 3a 66 6f 63 75 73 2b 6c 61 62 65 6c 7b 6f 75 74 6c 69 6e 65 3a 31 70 78 20 73 6f 6c 69 64 20 23 Data Ascii: opacity:1}}.ot-cookie-label{text-decoration:underline}@media only screen and (min-width: 426px)and (max-width: 896px)and (orientation: landscape){#onetrust-pc-sdk p{font-size:.75em}}#onetrust-banner-sdk .banner-option-input:focus+label{outline:1px solid #
2024-10-30 07:46:31 UTC	1369	IN	Data Raw: 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 7b 68 65 69 67 68 74 3a 32 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 2e 35 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 20 70 61 74 68 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 20 70 61 74 68 7b 66 69 6c 6c 3a 23 33 32 61 65 38 38 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 67 65 6e 65 72 Data Ascii: st-banner-sdk .ot-optout-signal svg,#onetrust-pc-sdk .ot-optout-signal svg{height:20px;width:30px;transform:scale(0.5)}#onetrust-banner-sdk .ot-optout-signal svg path,#onetrust-pc-sdk .ot-optout-signal svg path{fill:#32ae88}#onetrust-consent-sdk .ot-gener
2024-10-30 07:46:31 UTC	1369	IN	Data Raw: 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 2d 67 72 6f 75 70 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 63 6f 6e 74 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 67 61 70 3a 2e 32 35 72 65 6d 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 70 61 72 61 67 72 61 70 68 2c 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 2d 67 72 6f 75 70 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 70 61 72 61 67 72 61 70 68 7b 6d 61 72 Data Ascii: netrust-consent-sdk .ot-signature-health-group .ot-signature-cont{display:flex;flex-direction:column;gap:.25rem}#onetrust-consent-sdk .ot-signature-health .ot-signature-paragraph,#onetrust-consent-sdk .ot-signature-health-group .ot-signature-paragraph{mar
2024-10-30 07:46:31 UTC	1369	IN	Data Raw: 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 69 6e 70 75 74 2d 66 69 65 6c 64 2d 63 6f 6e 74 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 69 6e 70 75 74 7b 77 69 64 74 68 3a 36 35 25 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 2d 66 6f 72 6d 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 2d 66 6f 72 6d 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 6c 61 62 65 6c 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 66 6f 6e 74 2d Data Ascii: st-consent-sdk .ot-input-field-cont .ot-signature-input{width:65%}#onetrust-consent-sdk .ot-signature-health-form{display:flex;flex-direction:column}#onetrust-consent-sdk .ot-signature-health-form .ot-signature-label{margin-bottom:0;line-height:20px;font-
2024-10-30 07:46:31 UTC	1369	IN	Data Raw: 61 62 65 6c 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 69 6e 70 75 74 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 75 6c 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 6c 69 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 6e 61 76 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 61 62 6c 65 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 68 65 61 64 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 64 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 62 6f 64 79 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 Data Ascii: abel,#onetrust-banner-sdk input,#onetrust-banner-sdk ul,#onetrust-banner-sdk li,#onetrust-banner-sdk nav,#onetrust-banner-sdk table,#onetrust-banner-sdk thead,#onetrust-banner-sdk tr,#onetrust-banner-sdk td,#onetrust-banner-sdk tbody,#onetrust-banner-sdk
2024-10-30 07:46:31 UTC	1369	IN	Data Raw: 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 73 65 63 74 69 6f 6e 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 61 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 6c 61 62 65 6c 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 69 6e 70 75 74 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 75 6c 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 6c 69 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 6e 61 76 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 74 61 62 6c 65 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 74 68 65 61 64 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b Data Ascii: ,#ot-sdk-cookie-policy section,#ot-sdk-cookie-policy a,#ot-sdk-cookie-policy label,#ot-sdk-cookie-policy input,#ot-sdk-cookie-policy ul,#ot-sdk-cookie-policy li,#ot-sdk-cookie-policy nav,#ot-sdk-cookie-policy table,#ot-sdk-cookie-policy thead,#ot-sdk-cook

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49851	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:31 UTC	5974	OUT	GET /a/libs/granite/csrf/token.json HTTP/1.1 Host: all.accor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://all.accor.com/a/en/new-app-offer/app-download.html?source_caller=bulk&af_qr=true&shortlink=5m1nc8of&c=20241013_ALL_AppBonusingMobileLp&af_ad=QR_code_20241013_ALL_AppBonusingMobileLp&pid=QR_code&deep_link_value=accor%3A%2F%2Fsearch%2Foffer%3Fpage_id%3Dddc8e830-2fc5-4492-ae7f-a63574b202f4&af_adset=EN Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=uXhrmD2Na/K1uglc4DSccWmUi3lwT6U0aN5NKqvcu8d5WGWybG4+Fjgl4ne6nVjifX1jzgyPIuRTBhS6nanmMOLamS/KiojPrxeLcFng8UzPO+81sa87bs4RFhGAg5SdnTRio+RJdn41ZezkVQzm+QQNKVTMJBE8fIzHUqlLtmYsp4GqzAo9Tqkn29+6s06cnyhW9Bg2AjaE3z+uY1Kha+K1N+xGE1wxY+ov1hMjJJFJQKo0Zzr8yVUmc0uGx6VyOI/GCYB98MMi2baM/noo1d0GCT/eTJnamWBVosFVl6rGjGRpxA8WWwcog7Ny/HlQVp6w8cTkKFTg/8KjIPnCBapACqcVA8DvW2Oym2gj1AtBv4YYfUMq3TEu4mXRkOJJVmAh7NCUHwLhEc4aXJBIqbW6JkrW0slp4+M4RmDR1e+A3GrFYXelb56QL3DRn/v55w+TZWXTMoZhYCD+Z9T66/ [TRUNCATED]
2024-10-30 07:46:31 UTC	683	IN	HTTP/1.1 200 OK Age: 511 cache-control: max-age=600,public Content-Type: application/json Date: Wed, 30 Oct 2024 07:46:31 GMT expires: -1 Last-Modified: Wed, 30 Oct 2024 07:41:54 GMT Server: ECAcc (lhd/3592) Strict-Transport-Security: max-age=31557600 Vary: Accept-Encoding X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Content-Type-Options: nosniff x-frame-options: SAMEORIGIN x-frame-options: SAMEORIGIN X-Iinfo: 17-206387638-206387639 NNYN CT(6 8 0) RT(1730274113751 3) q(0 0 0 0) r(0 0) U24 X-Served-By: cache-ams2100118-AMS x-sky-isauth: 0 X-Timer: S1730274114.493412,VS0,VS0,VE1 x-vhost: prod-allcom-publish Content-Length: 2 Connection: close
2024-10-30 07:46:31 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49852	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:31 UTC	6114	OUT	GET /conf/all/settings/wcm/segments.seg.js HTTP/1.1 Host: all.accor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, /; q=0.01 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://all.accor.com/a/en/new-app-offer/app-download.html?source_caller=bulk&af_qr=true&shortlink=5m1nc8of&c=20241013_ALL_AppBonusingMobileLp&af_ad=QR_code_20241013_ALL_AppBonusingMobileLp&pid=QR_code&deep_link_value=accor%3A%2F%2Fsearch%2Foffer%3Fpage_id%3Dddc8e830-2fc5-4492-ae7f-a63574b202f4&af_adset=EN Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=uXhrmD2Na/K1uglc4DSccWmUi3lwT6U0aN5NKqvcu8d5WGWybG4+Fjgl4ne6nVjifX1jzgyPIuRTBhS6nanmMOLamS/KiojPrxeLcFng8UzPO+81sa87bs4RFhGAg5SdnTRio+RJdn41ZezkVQzm+QQNKVTMJBE8fIzHUqlLtmYsp4GqzAo9Tqkn29+6s06cnyhW9Bg2AjaE3z+uY1Kha+K1N+xGE1wxY+ov1hMjJJFJQKo0Zzr8yVUmc0uGx6VyOI/GCYB98MMi2baM/noo1d0GCT/eTJnamWBVosFVl6rGjGRpxA8WWwcog7Ny/HlQVp6w8cTkKFTg/8KjIPnCBapACqcVA8DvW2Oym2gj1AtBv4YYfUMq3TEu4mXRkOJJVmAh7NCUHwLhEc4aXJBIqbW6JkrW0slp4+M4RmDR1e+A3GrFYXelb56QL3DRn/v55w+TZWXTMoZhYCD+Z9T66/ [TRUNCATED]
2024-10-30 07:46:31 UTC	626	IN	HTTP/1.1 301 Moved Permanently Content-Type: text/html; charset=iso-8859-1 Date: Wed, 30 Oct 2024 07:46:31 GMT Location: https://all.accor.com/a/conf/all/settings/wcm/segments.seg.js server: MF 8700 S - Dyna-VT - Stage V All-in-One Server-Timing: dtSInfo;desc="0", dtRpid;desc="-1030047312" Set-Cookie: incap_ses_951_3039981=GL4CVhbxPgx+DtlaoqEyDVbkIWcAAAAA0uuNvYfu1J2VDDucdA8ZtQ==; path=/ Strict-Transport-Security: max-age=15552000 Vary: Accept-Encoding X-CDN: Imperva X-CDN-Forward: EdgeCast X-Iinfo: 18-10840609-10838869 PNNy RT(1730274390704 3) q(0 0 0 0) r(0 0) U24 Content-Length: 269 Connection: close
2024-10-30 07:46:31 UTC	269	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 6c 6c 2e 61 63 63 6f 72 2e 63 6f 6d 2f 61 2f 63 6f 6e 66 2f 61 6c 6c 2f 73 65 74 74 69 6e 67 73 2f 77 63 6d 2f 73 65 67 6d 65 6e 74 73 2e 73 65 67 2e 6a 73 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://all.accor.com/a/conf/all/settings/wcm/segments.seg.js">here</a>.</p><

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49861	104.18.86.42	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:31 UTC	366	OUT	GET /logos/static/ot_close.svg HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 07:46:31 UTC	873	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 07:46:31 GMT Content-Type: image/svg+xml Content-Length: 651 Connection: close Content-MD5: pcXWFGpuVeSg/jVnYCseRg== Last-Modified: Mon, 28 Oct 2024 06:29:35 GMT ETag: 0x8DCF719E3F55B90 x-ms-request-id: c589eed9-801e-00b7-4469-299c8f000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 69450 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8da9cac23981e9c6-DFW
2024-10-30 07:46:31 UTC	496	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 34 38 2e 33 33 33 22 20 68 65 69 67 68 74 3d 22 33 34 38 2e 33 33 33 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 34 38 2e 33 33 33 20 33 34 38 2e 33 33 34 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 35 36 35 36 35 36 22 20 64 3d 22 4d 33 33 36 2e 35 35 39 20 36 38 2e 36 31 31 4c 32 33 31 2e 30 31 36 20 31 37 34 2e 31 36 35 6c 31 30 35 2e 35 34 33 20 31 30 35 2e 35 34 39 63 31 35 2e 36 39 39 20 31 35 2e 37 30 35 20 31 35 2e 36 39 39 20 34 31 2e 31 34 35 20 30 20 35 36 2e 38 35 2d 37 2e 38 34 34 20 37 2e 38 34 34 2d 31 38 2e 31 32 38 20 31 31 2e 37 36 39 2d 32 38 2e 34 30 37 20 31 31 2e 37 36 39 2d 31 30 2e 32 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="348.333" height="348.333" viewBox="0 0 348.333 348.334"><path fill="#565656" d="M336.559 68.611L231.016 174.165l105.543 105.549c15.699 15.705 15.699 41.145 0 56.85-7.844 7.844-18.128 11.769-28.407 11.769-10.2
2024-10-30 07:46:31 UTC	155	IN	Data Raw: 34 20 31 35 2e 36 39 36 2d 31 35 2e 36 38 37 20 34 31 2e 31 32 37 2d 31 35 2e 36 38 37 20 35 36 2e 38 32 39 20 30 6c 31 30 35 2e 35 36 33 20 31 30 35 2e 35 35 34 4c 32 37 39 2e 37 32 31 20 31 31 2e 37 36 37 63 31 35 2e 37 30 35 2d 31 35 2e 36 38 37 20 34 31 2e 31 33 39 2d 31 35 2e 36 38 37 20 35 36 2e 38 33 32 20 30 20 31 35 2e 37 30 35 20 31 35 2e 36 39 39 20 31 35 2e 37 30 35 20 34 31 2e 31 34 35 2e 30 30 36 20 35 36 2e 38 34 34 7a 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: 4 15.696-15.687 41.127-15.687 56.829 0l105.563 105.554L279.721 11.767c15.705-15.687 41.139-15.687 56.832 0 15.705 15.699 15.705 41.145.006 56.844z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49863	151.101.3.10	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:31 UTC	581	OUT	GET /accorApi/header?brand=all&lang=en&pos=usa HTTP/1.1 Host: aem-api.accor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://all.accor.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://all.accor.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 07:46:32 UTC	744	IN	HTTP/1.1 200 OK Connection: close Content-Length: 9475 x-frame-options: SAMEORIGIN x-frame-options: SAMEORIGIN x-sky-isauth: 0 cache-control: public, max-age=600 x-vhost: prod-apiaccor-publish access-control-allow-origin: https://all.accor.com access-control-allow-methods: GET, OPTIONS access-control-allow-headers: Content-Type, Authorization content-type: application/json;charset=utf-8 X-Content-Type-Options: nosniff Accept-Ranges: bytes Age: 0 Date: Wed, 30 Oct 2024 07:46:31 GMT Strict-Transport-Security: max-age=31557600 set-cookie: affinity="d8409cd89188c3c9"; Path=/; HttpOnly; secure X-Served-By: cache-dfw-ktki8620051-DFW X-Cache: MISS X-Timer: S1730274391.427850,VS0,VS0,VE520 Vary: Accept-Encoding,Origin
2024-10-30 07:46:32 UTC	1378	IN	Data Raw: 5b 7b 22 69 64 22 3a 22 69 74 65 6d 30 22 2c 22 74 65 78 74 22 3a 22 53 74 61 79 22 2c 22 74 72 61 63 6b 69 6e 67 22 3a 22 73 74 61 79 22 2c 22 74 61 72 67 65 74 22 3a 22 5f 73 65 6c 66 22 2c 22 70 61 6e 65 6c 73 22 3a 5b 5b 7b 22 69 64 22 3a 22 69 74 65 6d 30 2d 70 61 6e 65 6c 2d 35 64 39 65 62 36 65 31 2d 34 30 61 22 2c 22 74 65 78 74 22 3a 22 46 69 6e 64 20 61 20 68 6f 74 65 6c 22 2c 22 74 72 61 63 6b 69 6e 67 22 3a 22 66 69 6e 64 5f 61 5f 68 6f 74 65 6c 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 6c 6c 2e 61 63 63 6f 72 2e 63 6f 6d 2f 75 73 61 2f 69 6e 64 65 78 2e 65 6e 2e 73 68 74 6d 6c 22 2c 22 68 69 67 68 6c 69 67 68 74 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 69 74 65 6d 31 2d 70 61 6e 65 6c 2d 30 38 61 35 62 64 37 63 2d 38 37 30 Data Ascii: [{"id":"item0","text":"Stay","tracking":"stay","target":"_self","panels":[[{"id":"item0-panel-5d9eb6e1-40a","text":"Find a hotel","tracking":"find_a_hotel","url":"https://all.accor.com/usa/index.en.shtml","highlight":false},{"id":"item1-panel-08a5bd7c-870
2024-10-30 07:46:32 UTC	1378	IN	Data Raw: 22 2c 22 74 72 61 63 6b 69 6e 67 22 3a 22 70 72 65 70 61 72 65 5f 79 6f 75 72 5f 74 72 69 70 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 6c 6c 2e 61 63 63 6f 72 2e 63 6f 6d 2f 67 62 2f 6f 66 66 65 72 73 2d 74 72 61 76 65 6c 2d 69 64 65 61 73 2f 69 6e 64 65 78 2e 73 68 74 6d 6c 22 2c 22 68 69 67 68 6c 69 67 68 74 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 69 74 65 6d 32 2d 70 61 6e 65 6c 2d 65 31 38 37 39 37 38 37 2d 39 63 66 22 2c 22 74 65 78 74 22 3a 22 46 61 6d 69 6c 79 20 67 65 74 61 77 61 79 22 2c 22 75 72 6c 22 3a 22 2f 63 6f 6e 74 65 6e 74 2f 61 6c 6c 2f 65 6e 2f 6c 69 6d 69 74 6c 65 73 73 2f 74 68 65 6d 61 74 69 63 73 2f 66 61 6d 69 6c 79 22 2c 22 68 69 67 68 6c 69 67 68 74 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 69 74 65 6d Data Ascii: ","tracking":"prepare_your_trip","url":"https://all.accor.com/gb/offers-travel-ideas/index.shtml","highlight":false},{"id":"item2-panel-e1879787-9cf","text":"Family getaway","url":"/content/all/en/limitless/thematics/family","highlight":false},{"id":"item
2024-10-30 07:46:32 UTC	1378	IN	Data Raw: 6b 69 6e 67 22 3a 22 6c 6f 79 61 6c 74 79 5f 70 72 6f 67 72 61 6d 22 2c 22 74 61 72 67 65 74 22 3a 22 5f 73 65 6c 66 22 2c 22 70 61 6e 65 6c 73 22 3a 5b 5b 7b 22 69 64 22 3a 22 69 74 65 6d 30 2d 70 61 6e 65 6c 2d 61 39 65 36 39 34 30 63 2d 30 34 65 22 2c 22 74 65 78 74 22 3a 22 44 69 73 63 6f 76 65 72 20 74 68 65 20 70 72 6f 67 72 61 6d 6d 65 22 2c 22 74 72 61 63 6b 69 6e 67 22 3a 22 72 65 61 73 6f 6e 73 5f 74 6f 5f 6a 6f 69 6e 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 6c 6c 2e 61 63 63 6f 72 2e 63 6f 6d 2f 6c 6f 79 61 6c 74 79 2d 70 72 6f 67 72 61 6d 2f 72 65 61 73 6f 6e 73 74 6f 6a 6f 69 6e 2f 69 6e 64 65 78 2e 65 6e 2e 73 68 74 6d 6c 22 2c 22 68 69 67 68 6c 69 67 68 74 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 69 74 65 6d 31 2d 70 61 Data Ascii: king":"loyalty_program","target":"_self","panels":[[{"id":"item0-panel-a9e6940c-04e","text":"Discover the programme","tracking":"reasons_to_join","url":"https://all.accor.com/loyalty-program/reasonstojoin/index.en.shtml","highlight":false},{"id":"item1-pa
2024-10-30 07:46:32 UTC	1378	IN	Data Raw: 2c 22 64 65 73 63 22 3a 22 3c 70 3e 31 35 25 20 64 69 73 63 6f 75 6e 74 20 61 6c 6c 20 79 65 61 72 20 72 6f 75 6e 64 3c 2f 70 3e 5c 72 5c 6e 22 2c 22 62 75 74 74 6f 6e 54 65 78 74 22 3a 22 44 69 73 63 6f 76 65 72 20 4e 6f 77 22 2c 22 74 79 70 65 22 3a 22 70 75 73 68 22 7d 5d 7d 2c 7b 22 69 64 22 3a 22 69 74 65 6d 32 22 2c 22 74 65 78 74 22 3a 22 20 44 65 61 6c 73 22 2c 22 74 72 61 63 6b 69 6e 67 22 3a 22 6f 66 66 65 72 73 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 6c 6c 2e 61 63 63 6f 72 2e 63 6f 6d 2f 61 2f 65 6e 2f 64 65 61 6c 73 2d 63 6f 72 6e 65 72 2e 68 74 6d 6c 22 2c 22 74 61 72 67 65 74 22 3a 22 5f 73 65 6c 66 22 7d 2c 7b 22 69 64 22 3a 22 69 74 65 6d 33 22 2c 22 74 65 78 74 22 3a 22 4f 75 72 20 70 61 72 74 6e 65 72 73 22 2c 22 74 72 61 Data Ascii: ,"desc":"<p>15% discount all year round</p>\r\n","buttonText":"Discover Now","type":"push"}]},{"id":"item2","text":" Deals","tracking":"offers","url":"https://all.accor.com/a/en/deals-corner.html","target":"_self"},{"id":"item3","text":"Our partners","tra
2024-10-30 07:46:32 UTC	1378	IN	Data Raw: 6c 6c 2e 61 63 63 6f 72 2e 63 6f 6d 2f 61 63 74 69 76 69 74 69 65 73 2d 61 6e 64 2d 65 76 65 6e 74 73 2f 69 6e 64 65 78 2e 65 6e 2e 73 68 74 6d 6c 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 2e 61 68 73 74 61 74 69 63 2e 63 6f 6d 2f 69 73 2f 69 6d 61 67 65 2f 61 63 63 6f 72 68 6f 74 65 6c 73 2f 61 6a 61 5f 70 5f 35 37 33 36 2d 30 32 31 22 2c 22 61 6c 74 22 3a 22 41 6c 6c 20 6f 75 72 20 65 78 70 65 72 69 65 6e 63 65 73 20 41 4c 54 20 22 2c 22 74 69 74 6c 65 22 3a 22 41 6c 6c 20 6f 75 72 20 65 78 70 65 72 69 65 6e 63 65 73 22 2c 22 64 65 73 63 22 3a 22 3c 70 3e 43 6f 6e 63 65 72 74 73 2c 20 73 70 6f 72 74 73 2c 20 65 78 68 69 62 69 74 69 6f 6e 73 2c 20 43 61 6e 64 6c 65 6c 69 67 68 74 2c 20 61 6e 64 20 6d 6f 72 65 2e 20 41 63 63 65 73 73 20 74 6f Data Ascii: ll.accor.com/activities-and-events/index.en.shtml","src":"https://m.ahstatic.com/is/image/accorhotels/aja_p_5736-021","alt":"All our experiences ALT ","title":"All our experiences","desc":"<p>Concerts, sports, exhibitions, Candlelight, and more. Access to
2024-10-30 07:46:32 UTC	1378	IN	Data Raw: 64 2d 6d 65 65 74 69 6e 67 73 2e 65 6e 2e 73 68 74 6d 6c 22 2c 22 68 69 67 68 6c 69 67 68 74 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 69 74 65 6d 31 2d 70 61 6e 65 6c 2d 36 34 36 62 38 64 66 66 2d 65 36 66 22 2c 22 74 65 78 74 22 3a 22 54 72 61 69 6e 69 6e 67 20 73 65 73 73 69 6f 6e 73 22 2c 22 74 72 61 63 6b 69 6e 67 22 3a 22 74 72 61 69 6e 69 6e 67 5f 73 65 73 73 69 6f 6e 73 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 65 74 69 6e 67 73 2e 61 63 63 6f 72 2e 63 6f 6d 2f 6f 75 72 2d 65 76 65 6e 74 2d 74 79 70 65 73 2f 74 72 61 69 6e 69 6e 67 5f 73 65 73 73 69 6f 6e 2f 69 6e 64 65 78 2e 65 6e 2e 73 68 74 6d 6c 22 2c 22 68 69 67 68 6c 69 67 68 74 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 69 74 65 6d 32 2d 70 61 6e 65 6c 2d 38 63 30 Data Ascii: d-meetings.en.shtml","highlight":false},{"id":"item1-panel-646b8dff-e6f","text":"Training sessions","tracking":"training_sessions","url":"https://meetings.accor.com/our-event-types/training_session/index.en.shtml","highlight":false},{"id":"item2-panel-8c0
2024-10-30 07:46:32 UTC	1207	IN	Data Raw: 68 74 22 3a 66 61 6c 73 65 7d 5d 2c 5b 7b 22 69 64 22 3a 22 73 69 6d 70 6c 65 5f 6e 61 76 5f 31 2d 70 61 6e 65 6c 2d 36 36 39 61 63 38 63 35 2d 63 33 38 22 2c 22 74 65 78 74 22 3a 22 4f 55 52 20 4d 45 4d 42 45 52 53 48 49 50 20 43 41 52 44 53 22 2c 22 74 79 70 65 22 3a 22 74 69 74 6c 65 22 7d 2c 7b 22 69 64 22 3a 22 69 74 65 6d 30 2d 70 61 6e 65 6c 2d 36 37 30 32 33 35 33 37 2d 63 62 64 22 2c 22 74 65 78 74 22 3a 22 41 4c 4c 20 50 4c 55 53 20 56 6f 79 61 67 65 75 72 22 2c 22 74 72 61 63 6b 69 6e 67 22 3a 22 61 6c 6c 5f 70 6c 75 73 5f 76 6f 79 61 67 65 75 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 62 75 73 69 6e 65 73 73 74 72 61 76 65 6c 2e 61 63 63 6f 72 2e 63 6f 6d 2f 70 72 6f 6d 6f 74 69 6f 6e 73 2d 6f 66 66 65 72 73 2f 61 6c 6c 2d 70 6c 75 Data Ascii: ht":false}],[{"id":"simple_nav_1-panel-669ac8c5-c38","text":"OUR MEMBERSHIP CARDS","type":"title"},{"id":"item0-panel-67023537-cbd","text":"ALL PLUS Voyageur","tracking":"all_plus_voyageur","url":"https://businesstravel.accor.com/promotions-offers/all-plu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49856	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:31 UTC	5535	OUT	GET /ruxitagentjs_ICA7NVfhqrux_10285240307101407.js HTTP/1.1 Host: all.accor.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=uXhrmD2Na/K1uglc4DSccWmUi3lwT6U0aN5NKqvcu8d5WGWybG4+Fjgl4ne6nVjifX1jzgyPIuRTBhS6nanmMOLamS/KiojPrxeLcFng8UzPO+81sa87bs4RFhGAg5SdnTRio+RJdn41ZezkVQzm+QQNKVTMJBE8fIzHUqlLtmYsp4GqzAo9Tqkn29+6s06cnyhW9Bg2AjaE3z+uY1Kha+K1N+xGE1wxY+ov1hMjJJFJQKo0Zzr8yVUmc0uGx6VyOI/GCYB98MMi2baM/noo1d0GCT/eTJnamWBVosFVl6rGjGRpxA8WWwcog7Ny/HlQVp6w8cTkKFTg/8KjIPnCBapACqcVA8DvW2Oym2gj1AtBv4YYfUMq3TEu4mXRkOJJVmAh7NCUHwLhEc4aXJBIqbW6JkrW0slp4+M4RmDR1e+A3GrFYXelb56QL3DRn/v55w+TZWXTMoZhYCD+Z9T66/ [TRUNCATED]
2024-10-30 07:46:31 UTC	663	IN	HTTP/1.1 200 OK Age: 161142 Cache-Control: public, max-age=3600, stale-while-revalidate=21600 Content-Type: text/javascript; charset=utf-8 Date: Wed, 30 Oct 2024 07:46:31 GMT Expires: Thu, 30 Oct 2025 07:46:31 GMT Last-Modified: Mon, 28 Oct 2024 11:00:49 GMT P3P: CP="NO P3P POLICY" Referrer-Policy: origin Server: ECAcc (lhd/35C9) Strict-Transport-Security: max-age=15552000 Vary: Accept-Encoding X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Clacks-Overhead: GNU Terry Pratchett X-Iinfo: 16-157356282-157353079 pNNy RT(1730113249534 2) q(0 0 0 0) r(1 1) U24 X-XSS-Protection: 1; mode=block Content-Length: 225705 Connection: close
2024-10-30 07:46:31 UTC	16383	IN	Data Raw: 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 61 6e 64 20 6c 69 63 65 6e 73 65 73 20 73 65 65 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 79 6e 61 74 72 61 63 65 2e 63 6f 6d 2f 63 6f 6d 70 61 6e 79 2f 74 72 75 73 74 2d 63 65 6e 74 65 72 2f 63 75 73 74 6f 6d 65 72 73 2f 72 65 70 6f 72 74 73 2f 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 4b 61 28 29 7b 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 22 22 2e 63 6f 6e 63 61 74 28 22 5f 5f 64 54 43 6f 6f 6b 69 65 22 2c 22 3d 22 29 2e 63 6f 6e 63 61 74 28 22 31 22 2c 22 3b 53 61 6d 65 53 69 74 65 3d 4c 61 78 22 29 3b 76 61 72 20 42 61 3d 2d 31 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 69 6e 64 65 78 4f 66 28 22 5f 5f 64 54 43 6f 6f 6b 69 65 22 29 3b 64 6f 63 75 6d 65 6e Data Ascii: /* Copyright and licenses see https://www.dynatrace.com/company/trust-center/customers/reports/ */(function(){function Ka(){document.cookie="".concat("__dTCookie","=").concat("1",";SameSite=Lax");var Ba=-1!==document.cookie.indexOf("__dTCookie");documen
2024-10-30 07:46:31 UTC	1	IN	Data Raw: 3d Data Ascii: =
2024-10-30 07:46:31 UTC	16383	IN	Data Raw: 71 2e 64 54 5f 3b 69 66 28 78 26 26 22 65 61 22 69 6e 20 78 26 26 22 31 30 32 38 35 32 34 30 33 30 37 31 30 31 34 30 37 22 3d 3d 3d 78 2e 76 65 72 73 69 6f 6e 29 72 65 74 75 72 6e 20 78 2e 74 64 74 6f 28 29 3b 71 3d 71 21 3d 3d 71 2e 70 61 72 65 6e 74 3f 71 2e 70 61 72 65 6e 74 3a 76 6f 69 64 20 30 7d 7d 63 61 74 63 68 28 57 29 7b 7d 72 65 74 75 72 6e 20 67 7d 66 75 6e 63 74 69 6f 6e 20 4d 63 28 67 2c 71 2c 78 29 7b 76 61 72 20 57 3d 6b 61 28 22 70 63 6c 22 29 3b 57 3d 67 2e 6c 65 6e 67 74 68 2d 57 3b 30 3c 57 26 26 67 2e 73 70 6c 69 63 65 28 30 2c 57 29 3b 57 3d 46 28 51 61 28 68 64 28 29 2c 78 29 29 3b 66 6f 72 28 76 61 72 20 49 3d 5b 5d 2c 78 61 3d 57 3f 22 22 2e 63 6f 6e 63 61 74 28 57 2c 22 24 22 29 3a 22 22 2c 48 62 3d 30 3b 48 62 3c 67 2e 6c 65 6e Data Ascii: q.dT_;if(x&&"ea"in x&&"10285240307101407"===x.version)return x.tdto();q=q!==q.parent?q.parent:void 0}}catch(W){}return g}function Mc(g,q,x){var W=ka("pcl");W=g.length-W;0<W&&g.splice(0,W);W=F(Qa(hd(),x));for(var I=[],xa=W?"".concat(W,"$"):"",Hb=0;Hb<g.len
2024-10-30 07:46:31 UTC	16383	IN	Data Raw: 71 68 3d 50 65 5b 51 65 5d 3b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 71 68 26 26 28 54 62 5b 51 65 5d 3d 71 68 29 7d 72 61 28 54 62 29 7d 76 61 72 20 52 65 3d 6e 75 6c 6c 3d 3d 3d 28 64 65 3d 28 41 64 3d 50 28 29 29 2e 67 43 50 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 64 65 3f 76 6f 69 64 20 30 3a 64 65 2e 63 61 6c 6c 28 41 64 29 2c 72 68 3d 4f 28 22 63 75 63 22 29 3b 69 66 28 52 65 26 26 52 65 21 3d 3d 72 68 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 70 6c 61 74 66 6f 72 6d 50 72 65 66 69 78 20 61 6e 64 20 63 75 63 20 64 6f 20 6e 6f 74 20 6d 61 74 63 68 21 22 29 3b 48 65 3d 21 30 7d 69 66 28 21 48 65 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 45 72 72 6f 72 20 64 75 72 69 6e 67 20 63 6f 6e 66 69 67 20 69 6e 69 74 69 61 6c 69 7a 61 74 69 Data Ascii: qh=Pe[Qe];"undefined"!==typeof qh&&(Tb[Qe]=qh)}ra(Tb)}var Re=null===(de=(Ad=P()).gCP)\|\|void 0===de?void 0:de.call(Ad),rh=O("cuc");if(Re&&Re!==rh)throw Error("platformPrefix and cuc do not match!");He=!0}if(!He)throw Error("Error during config initializati
2024-10-30 07:46:31 UTC	2	IN	Data Raw: 54 54 Data Ascii: TT
2024-10-30 07:46:31 UTC	16383	IN	Data Raw: 4f 4e 22 21 3d 3d 6b 26 26 22 53 55 42 4d 49 54 22 21 3d 3d 6b 26 26 22 52 45 53 45 54 22 21 3d 3d 6b 26 26 22 49 4d 41 47 45 22 21 3d 3d 6b 3f 6e 75 6c 6c 3a 62 2e 76 61 6c 75 65 2c 61 3d 50 61 28 62 2e 69 64 29 2c 66 3d 0a 21 6b 7c 7c 22 42 55 54 54 4f 4e 22 21 3d 3d 6b 26 26 22 53 55 42 4d 49 54 22 21 3d 3d 6b 26 26 22 52 45 53 45 54 22 21 3d 3d 6b 3f 65 62 28 61 2c 66 29 3a 65 62 28 66 2c 61 29 29 2c 66 7c 7c 28 66 3d 65 62 28 4c 62 28 62 29 29 29 2c 6e 3d 66 29 3a 6e 3d 22 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 66 3d 22 22 3b 69 66 28 44 62 28 62 29 26 26 22 48 49 44 44 45 4e 22 21 3d 3d 6b 7c 7c 62 26 26 22 42 55 54 54 4f 4e 22 3d 3d 3d 62 2e 6e 6f 64 65 4e 61 6d 65 29 6b 3d 22 49 4d 41 47 45 22 3d 3d 3d 6b 3f 62 2e 67 65 74 41 74 74 72 69 62 Data Ascii: ON"!==k&&"SUBMIT"!==k&&"RESET"!==k&&"IMAGE"!==k?null:b.value,a=Pa(b.id),f=!k\|\|"BUTTON"!==k&&"SUBMIT"!==k&&"RESET"!==k?eb(a,f):eb(f,a)),f\|\|(f=eb(Lb(b))),n=f):n="";break;case 1:f="";if(Db(b)&&"HIDDEN"!==k\|\|b&&"BUTTON"===b.nodeName)k="IMAGE"===k?b.getAttrib
2024-10-30 07:46:31 UTC	16383	IN	Data Raw: 54 62 28 62 2c 66 2c 6e 2c 6b 29 3b 72 65 74 75 72 6e 20 6b 7d 2c 7b 71 62 3a 6e 75 6c 6c 2c 61 64 3a 4e 75 6d 62 65 72 2e 4d 41 58 5f 56 41 4c 55 45 7d 29 2e 71 62 7d 0a 66 75 6e 63 74 69 6f 6e 20 74 65 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 47 61 28 61 2c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 66 2e 69 6e 69 74 69 61 74 6f 72 54 79 70 65 3d 3d 3d 62 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 51 63 28 61 29 7b 72 65 74 75 72 6e 20 53 69 26 26 72 61 28 61 2c 31 33 29 26 26 22 6e 61 76 69 67 61 74 69 6f 6e 22 21 3d 3d 61 2e 65 6e 74 72 79 54 79 70 65 7c 7c 72 61 28 61 2c 5b 22 5f 64 74 43 6c 22 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 43 65 28 61 29 7b 72 65 74 75 72 6e 20 41 6d 26 26 72 61 28 61 2c 31 34 29 7c 7c 72 61 28 61 2c 5b 22 65 6e 74 72 79 Data Ascii: Tb(b,f,n,k);return k},{qb:null,ad:Number.MAX_VALUE}).qb}function te(a,b){return Ga(a,function(f){return f.initiatorType===b})}function Qc(a){return Si&&ra(a,13)&&"navigation"!==a.entryType\|\|ra(a,["_dtCl"])}function Ce(a){return Am&&ra(a,14)\|\|ra(a,["entry
2024-10-30 07:46:31 UTC	2	IN	Data Raw: 29 7b Data Ascii: ){
2024-10-30 07:46:31 UTC	16383	IN	Data Raw: 62 3d 55 63 3b 66 3d 62 2e 74 69 6d 65 73 74 61 6d 70 3b 76 61 72 20 6e 3d 62 2e 67 72 6f 75 70 2c 42 3d 62 2e 74 72 69 67 67 65 72 3b 0a 61 2e 61 76 28 6b 2c 22 74 76 6e 22 2c 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 47 28 62 2e 6e 61 6d 65 29 29 29 3b 61 2e 61 76 28 6b 2c 22 74 76 74 22 2c 66 2b 22 22 29 3b 61 2e 61 76 28 6b 2c 22 74 76 6d 22 2c 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 6e 62 28 62 29 29 29 3b 61 2e 61 76 28 6b 2c 22 74 76 74 72 67 22 2c 42 2b 22 22 29 3b 6e 26 26 61 2e 61 76 28 6b 2c 22 74 76 67 22 2c 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 47 28 6e 29 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 24 67 28 29 7b 48 6a 7c 7c 28 48 6a 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 Data Ascii: b=Uc;f=b.timestamp;var n=b.group,B=b.trigger;a.av(k,"tvn",encodeURIComponent(G(b.name)));a.av(k,"tvt",f+"");a.av(k,"tvm",encodeURIComponent(nb(b)));a.av(k,"tvtrg",B+"");n&&a.av(k,"tvg",encodeURIComponent(G(n)))}}function $g(){Hj\|\|(Hj=document.createEleme
2024-10-30 07:46:31 UTC	16383	IN	Data Raw: 5d 29 3b 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 6e 6a 28 29 7b 65 69 3d 76 6c 2e 63 6f 6e 6e 65 63 74 69 6f 6e 3b 7a 62 28 22 65 6e 69 22 29 26 26 65 69 26 26 75 66 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 66 2c 6b 29 7b 21 62 26 26 45 66 26 26 65 69 26 26 28 62 3d 22 22 2e 63 6f 6e 63 61 74 28 65 69 2e 65 66 66 65 63 74 69 76 65 54 79 70 65 7c 7c 0a 22 2d 22 2c 22 7c 22 29 2e 63 6f 6e 63 61 74 28 65 69 2e 64 6f 77 6e 6c 69 6e 6b 7c 7c 2d 31 29 2c 65 69 2e 74 79 70 65 26 26 28 62 3d 22 22 2e 63 6f 6e 63 61 74 28 62 2c 22 7c 22 29 2e 63 6f 6e 63 61 74 28 65 69 2e 74 79 70 65 29 29 2c 61 2e 61 76 28 6b 2c 22 6e 69 22 2c 62 2c 21 31 29 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 57 6c 28 61 29 7b 72 65 74 75 72 6e 22 6c 6f 6e 67 74 61 73 6b 22 3d Data Ascii: ]);return b}function nj(){ei=vl.connection;zb("eni")&&ei&&uf(function(a,b,f,k){!b&&Ef&&ei&&(b="".concat(ei.effectiveType\|\|"-","\|").concat(ei.downlink\|\|-1),ei.type&&(b="".concat(b,"\|").concat(ei.type)),a.av(k,"ni",b,!1))})}function Wl(a){return"longtask"=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49855	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:31 UTC	5569	OUT	GET /a/etc/cloudsettings.kernel.js/conf/all/settings/cloudsettings/default/contexthub HTTP/1.1 Host: all.accor.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=uXhrmD2Na/K1uglc4DSccWmUi3lwT6U0aN5NKqvcu8d5WGWybG4+Fjgl4ne6nVjifX1jzgyPIuRTBhS6nanmMOLamS/KiojPrxeLcFng8UzPO+81sa87bs4RFhGAg5SdnTRio+RJdn41ZezkVQzm+QQNKVTMJBE8fIzHUqlLtmYsp4GqzAo9Tqkn29+6s06cnyhW9Bg2AjaE3z+uY1Kha+K1N+xGE1wxY+ov1hMjJJFJQKo0Zzr8yVUmc0uGx6VyOI/GCYB98MMi2baM/noo1d0GCT/eTJnamWBVosFVl6rGjGRpxA8WWwcog7Ny/HlQVp6w8cTkKFTg/8KjIPnCBapACqcVA8DvW2Oym2gj1AtBv4YYfUMq3TEu4mXRkOJJVmAh7NCUHwLhEc4aXJBIqbW6JkrW0slp4+M4RmDR1e+A3GrFYXelb56QL3DRn/v55w+TZWXTMoZhYCD+Z9T66/ [TRUNCATED]
2024-10-30 07:46:31 UTC	812	IN	HTTP/1.1 200 OK Age: 164193 cache-control: max-age=864000, stale-if-error=3600, stale-while-revalidate=3600 Content-Type: application/javascript; charset=utf-8 Date: Wed, 30 Oct 2024 07:46:31 GMT Etag: "4072373aaeec72ecb1cfd1006ed76265d6e36ca4-gzip+ident" Last-Modified: Mon, 28 Oct 2024 11:00:52 GMT Server: ECAcc (lhd/3729) Strict-Transport-Security: max-age=31557600 Vary: Accept-Encoding X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Content-Type-Options: nosniff x-frame-options: SAMEORIGIN x-frame-options: SAMEORIGIN X-Iinfo: 16-16239761-16239763 NNNY CT(15 16 0) RT(1730113252346 4) q(0 0 0 11) r(0 0) U24 X-Served-By: cache-fra-etou8220122-FRA x-sky-isauth: 0 X-Timer: S1730113253.576660,VS0,VS0,VE3 x-vhost: prod-allcom-publish Content-Length: 329309 Connection: close
2024-10-30 07:46:31 UTC	16383	IN	Data Raw: 2f 2a 0a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 33 2e 35 2e 31 0a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 0a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 68 74 74 70 73 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 0a 20 44 61 74 65 3a 20 32 30 32 30 2d 30 35 2d 30 34 54 32 32 3a 34 39 5a 0a 20 53 69 7a 7a 6c 65 20 43 53 53 20 53 65 6c 65 63 74 Data Ascii: /* jQuery JavaScript Library v3.5.1 https://jquery.com/ Includes Sizzle.js https://sizzlejs.com/ Copyright JS Foundation and other contributors Released under the MIT license https://jquery.org/license Date: 2020-05-04T22:49Z Sizzle CSS Select
2024-10-30 07:46:31 UTC	1	IN	Data Raw: 72 Data Ascii: r
2024-10-30 07:46:31 UTC	16383	IN	Data Raw: 20 47 3d 64 28 62 5b 76 5d 2c 76 2c 6e 29 3b 6e 75 6c 6c 21 3d 47 26 26 7a 2e 70 75 73 68 28 47 29 7d 65 6c 73 65 20 66 6f 72 28 76 20 69 6e 20 62 29 47 3d 64 28 62 5b 76 5d 2c 76 2c 6e 29 2c 6e 75 6c 6c 21 3d 47 26 26 7a 2e 70 75 73 68 28 47 29 3b 72 65 74 75 72 6e 20 69 64 28 7a 29 7d 2c 67 75 69 64 3a 31 2c 73 75 70 70 6f 72 74 3a 4b 61 7d 29 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 28 71 2e 66 6e 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 7a 62 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 29 3b 71 2e 65 61 63 68 28 22 42 6f 6f 6c 65 61 6e 20 4e 75 6d 62 65 72 20 53 74 72 69 6e 67 20 46 75 6e 63 74 69 6f 6e 20 41 72 72 61 79 20 44 61 74 65 20 52 65 67 45 78 70 20 4f 62 6a 65 63 74 20 45 72 Data Ascii: G=d(b[v],v,n);null!=G&&z.push(G)}else for(v in b)G=d(b[v],v,n),null!=G&&z.push(G);return id(z)},guid:1,support:Ka});"function"===typeof Symbol&&(q.fn[Symbol.iterator]=zb[Symbol.iterator]);q.each("Boolean Number String Function Array Date RegExp Object Er
2024-10-30 07:46:31 UTC	16383	IN	Data Raw: 29 3a 32 2a 28 22 65 76 65 6e 22 3d 3d 3d 42 5b 33 5d 7c 7c 22 6f 64 64 22 3d 3d 3d 42 5b 33 5d 29 29 2c 42 5b 35 5d 3d 2b 28 42 5b 37 5d 2b 42 5b 38 5d 7c 7c 22 6f 64 64 22 3d 3d 3d 42 5b 33 5d 29 29 3a 42 5b 33 5d 26 26 64 2e 65 72 72 6f 72 28 42 5b 30 5d 29 3b 72 65 74 75 72 6e 20 42 7d 2c 50 53 45 55 44 4f 3a 66 75 6e 63 74 69 6f 6e 28 42 29 7b 76 61 72 20 4c 2c 4a 3d 21 42 5b 36 5d 26 26 42 5b 32 5d 3b 69 66 28 48 63 2e 43 48 49 4c 44 2e 74 65 73 74 28 42 5b 30 5d 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 42 5b 33 5d 3f 42 5b 32 5d 3d 42 5b 34 5d 7c 7c 42 5b 35 5d 7c 7c 22 22 3a 4a 26 26 71 64 2e 74 65 73 74 28 4a 29 26 26 0a 28 4c 3d 47 63 28 4a 2c 21 30 29 29 26 26 28 4c 3d 4a 2e 69 6e 64 65 78 4f 66 28 22 29 22 2c 4a 2e 6c 65 6e 67 74 68 2d 4c 29 Data Ascii: ):2*("even"===B[3]\|\|"odd"===B[3])),B[5]=+(B[7]+B[8]\|\|"odd"===B[3])):B[3]&&d.error(B[0]);return B},PSEUDO:function(B){var L,J=!B[6]&&B[2];if(Hc.CHILD.test(B[0]))return null;B[3]?B[2]=B[4]\|\|B[5]\|\|"":J&&qd.test(J)&&(L=Gc(J,!0))&&(L=J.indexOf(")",J.length-L)
2024-10-30 07:46:31 UTC	16383	IN	Data Raw: 69 6f 6e 28 62 2c 64 29 7b 75 61 2e 72 65 6d 6f 76 65 28 62 2c 64 29 7d 7d 29 3b 71 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 64 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 64 29 7b 76 61 72 20 6e 2c 70 3d 74 68 69 73 5b 30 5d 2c 76 3d 70 26 26 70 2e 61 74 74 72 69 62 75 74 65 73 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 62 29 7b 69 66 28 74 68 69 73 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 7a 3d 68 62 2e 67 65 74 28 70 29 3b 69 66 28 31 3d 3d 3d 70 2e 6e 6f 64 65 54 79 70 65 26 26 0a 21 75 61 2e 67 65 74 28 70 2c 22 68 61 73 44 61 74 61 41 74 74 72 73 22 29 29 7b 66 6f 72 28 6e 3d 76 2e 6c 65 6e 67 74 68 3b 6e 2d 2d 3b 29 69 66 28 76 5b 6e 5d 29 7b 76 61 72 20 47 3d 76 5b 6e 5d 2e 6e 61 6d 65 3b 30 3d 3d 3d 47 2e 69 6e 64 65 78 4f 66 28 22 64 61 74 61 2d 22 29 26 Data Ascii: ion(b,d){ua.remove(b,d)}});q.fn.extend({data:function(b,d){var n,p=this[0],v=p&&p.attributes;if(void 0===b){if(this.length){var z=hb.get(p);if(1===p.nodeType&&!ua.get(p,"hasDataAttrs")){for(n=v.length;n--;)if(v[n]){var G=v[n].name;0===G.indexOf("data-")&
2024-10-30 07:46:31 UTC	16383	IN	Data Raw: 3d 28 51 7c 7c 76 29 26 26 22 62 6f 72 64 65 72 2d 62 6f 78 22 3d 3d 3d 71 2e 63 73 73 28 6e 2c 22 62 6f 78 53 69 7a 69 6e 67 22 2c 21 31 2c 47 29 3b 76 3d 76 3f 72 62 28 6e 2c 64 2c 76 2c 4b 2c 47 29 3a 30 3b 4b 26 26 51 26 26 28 76 2d 3d 4d 61 74 68 2e 63 65 69 6c 28 6e 5b 22 6f 66 66 73 65 74 22 2b 64 5b 30 5d 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2b 0a 64 2e 73 6c 69 63 65 28 31 29 5d 2d 70 61 72 73 65 46 6c 6f 61 74 28 47 5b 64 5d 29 2d 72 62 28 6e 2c 64 2c 22 62 6f 72 64 65 72 22 2c 21 31 2c 47 29 2d 2e 35 29 29 3b 76 26 26 28 7a 3d 67 63 2e 65 78 65 63 28 70 29 29 26 26 22 70 78 22 21 3d 3d 28 7a 5b 33 5d 7c 7c 22 70 78 22 29 26 26 28 6e 2e 73 74 79 6c 65 5b 64 5d 3d 70 2c 70 3d 71 2e 63 73 73 28 6e 2c 64 29 29 3b 72 65 74 75 72 6e 20 55 61 28 Data Ascii: =(Q\|\|v)&&"border-box"===q.css(n,"boxSizing",!1,G);v=v?rb(n,d,v,K,G):0;K&&Q&&(v-=Math.ceil(n["offset"+d[0].toUpperCase()+d.slice(1)]-parseFloat(G[d])-rb(n,d,"border",!1,G)-.5));v&&(z=gc.exec(p))&&"px"!==(z[3]\|\|"px")&&(n.style[d]=p,p=q.css(n,d));return Ua(
2024-10-30 07:46:31 UTC	16383	IN	Data Raw: 63 74 69 6f 6e 20 6e 28 61 61 2c 74 61 2c 76 61 2c 72 61 29 7b 76 61 72 20 4d 61 2c 46 61 3d 74 61 3b 69 66 28 21 5a 29 7b 5a 3d 21 30 3b 47 26 26 6d 2e 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 47 29 3b 70 3d 76 6f 69 64 20 30 3b 76 3d 72 61 7c 7c 22 22 3b 4e 2e 72 65 61 64 79 53 74 61 74 65 3d 30 3c 61 61 3f 34 3a 30 3b 72 61 3d 32 30 30 3c 3d 61 61 26 26 33 30 30 3e 61 61 7c 7c 33 30 34 3d 3d 3d 61 61 3b 76 61 26 26 28 4d 61 3d 50 62 28 61 2c 4e 2c 76 61 29 29 3b 21 72 61 26 26 0a 2d 31 3c 71 2e 69 6e 41 72 72 61 79 28 22 73 63 72 69 70 74 22 2c 61 2e 64 61 74 61 54 79 70 65 73 29 26 26 28 61 2e 63 6f 6e 76 65 72 74 65 72 73 5b 22 74 65 78 74 20 73 63 72 69 70 74 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 3b 4d 61 3d 6d 64 28 61 2c 4d 61 2c 4e 2c 72 Data Ascii: ction n(aa,ta,va,ra){var Ma,Fa=ta;if(!Z){Z=!0;G&&m.clearTimeout(G);p=void 0;v=ra\|\|"";N.readyState=0<aa?4:0;ra=200<=aa&&300>aa\|\|304===aa;va&&(Ma=Pb(a,N,va));!ra&&-1<q.inArray("script",a.dataTypes)&&(a.converters["text script"]=function(){});Ma=md(a,Ma,N,r
2024-10-30 07:46:31 UTC	5	IN	Data Raw: 74 6f 72 65 73 Data Ascii: tores
2024-10-30 07:46:31 UTC	16383	IN	Data Raw: 2d 70 61 72 74 69 61 6c 6c 79 2d 72 65 61 64 79 22 2c 45 56 45 4e 54 5f 53 54 4f 52 45 5f 52 45 47 49 53 54 45 52 45 44 3a 22 73 74 6f 72 65 2d 72 65 67 69 73 74 65 72 65 64 22 2c 45 56 45 4e 54 5f 53 54 4f 52 45 5f 52 45 41 44 59 3a 22 73 74 6f 72 65 2d 72 65 61 64 79 22 2c 45 56 45 4e 54 5f 53 54 4f 52 45 5f 55 50 44 41 54 45 44 3a 22 73 74 6f 72 65 2d 75 70 64 61 74 65 64 22 2c 50 45 52 53 49 53 54 45 4e 43 45 5f 43 4f 4e 54 41 49 4e 45 52 5f 4e 41 4d 45 3a 22 43 6f 6e 74 65 78 74 48 75 62 50 65 72 73 69 73 74 65 6e 63 65 22 2c 53 45 52 56 49 43 45 5f 52 41 57 5f 52 45 53 50 4f 4e 53 45 5f 4b 45 59 3a 22 2f 5f 2f 72 61 77 2d 72 65 73 70 6f 6e 73 65 22 2c 53 45 52 56 49 43 45 5f 52 45 53 50 4f 4e 53 45 5f 54 49 4d 45 5f 4b 45 59 3a 22 2f 5f 2f 72 65 73 Data Ascii: -partially-ready",EVENT_STORE_REGISTERED:"store-registered",EVENT_STORE_READY:"store-ready",EVENT_STORE_UPDATED:"store-updated",PERSISTENCE_CONTAINER_NAME:"ContextHubPersistence",SERVICE_RAW_RESPONSE_KEY:"/_/raw-response",SERVICE_RESPONSE_TIME_KEY:"/_/res
2024-10-30 07:46:31 UTC	16383	IN	Data Raw: 61 72 20 48 3d 78 2e 63 6f 6e 74 61 69 6e 65 72 2c 49 3d 78 2e 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 3b 72 65 74 75 72 6e 20 41 2e 63 61 6c 6c 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 4f 29 7b 4f 3d 43 6f 6e 74 65 78 74 48 75 62 2e 55 74 69 6c 73 2e 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 4f 29 3b 49 2e 73 65 74 49 74 65 6d 28 48 2c 4f 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 4f 3d 49 2e 67 65 74 49 74 65 6d 28 48 29 3b 4f 3d 43 6f 6e 74 65 78 74 48 75 62 2e 55 74 69 6c 73 2e 4a 53 4f 4e 2e 70 61 72 73 65 28 4f 29 3b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 3d 6d 2e 74 79 70 65 28 4f 29 3f 4f 3a 7b 7d 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 78 3d 22 63 6f 6e 74 65 78 74 68 75 62 2e 74 Data Ascii: ar H=x.container,I=x.window.sessionStorage;return A.call(this,function(O){O=ContextHub.Utils.JSON.stringify(O);I.setItem(H,O)},function(){var O=I.getItem(H);O=ContextHub.Utils.JSON.parse(O);return"object"===m.type(O)?O:{}})},function(){var x="contexthub.t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49865	35.190.80.1	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:31 UTC	556	OUT	OPTIONS /report/v4?s=fIwe3JJo8%2BlwLKXDlbWuUl5kqhDTG2uifW2BRrkB%2BYz%2BxWFooim0Nn8Ptt9%2F3dnca8VCfTgjpG6yPXkLxBuPeo3QzHvL8dAbCJScr5sq320rtOasm%2F619QyBKLY49erdZizrkZXV6p%2F8 HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://qchmhd61sj.kameleoon.eu Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 07:46:31 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Wed, 30 Oct 2024 07:46:31 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49859	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:31 UTC	5710	OUT	GET /services/business-referer/scripts-v2410/main.js HTTP/1.1 Host: all.accor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://all.accor.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=uXhrmD2Na/K1uglc4DSccWmUi3lwT6U0aN5NKqvcu8d5WGWybG4+Fjgl4ne6nVjifX1jzgyPIuRTBhS6nanmMOLamS/KiojPrxeLcFng8UzPO+81sa87bs4RFhGAg5SdnTRio+RJdn41ZezkVQzm+QQNKVTMJBE8fIzHUqlLtmYsp4GqzAo9Tqkn29+6s06cnyhW9Bg2AjaE3z+uY1Kha+K1N+xGE1wxY+ov1hMjJJFJQKo0Zzr8yVUmc0uGx6VyOI/GCYB98MMi2baM/noo1d0GCT/eTJnamWBVosFVl6rGjGRpxA8WWwcog7Ny/HlQVp6w8cTkKFTg/8KjIPnCBapACqcVA8DvW2Oym2gj1AtBv4YYfUMq3TEu4mXRkOJJVmAh7NCUHwLhEc4aXJBIqbW6JkrW0slp4+M4RmDR1e+A3GrFYXelb56QL3DRn/v55w+TZWXTMoZhYCD+Z9T66/ [TRUNCATED]
2024-10-30 07:46:31 UTC	606	IN	HTTP/1.1 200 OK Age: 161129 Cache-control: public, max-age=3600, stale-while-revalidate=21600 Content-Type: text/javascript Date: Wed, 30 Oct 2024 07:46:31 GMT Last-Modified: Mon, 28 Oct 2024 11:01:02 GMT P3P: CP="NO P3P POLICY" Referrer-Policy: origin Server: ECAcc (lhd/3599) Strict-Transport-Security: max-age=15552000 Vary: Accept-Encoding X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Clacks-Overhead: GNU Terry Pratchett X-Iinfo: 17-204440767-204440043 pNNy RT(1730113261310 3) q(0 0 0 0) r(0 0) U24 X-XSS-Protection: 1; mode=block Content-Length: 1262 Connection: close
2024-10-30 07:46:31 UTC	1262	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 72 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 72 2e 6d 3d 65 2c 72 2e 63 3d 74 2c 72 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 6e 7d 29 7d 2c 72 2e 72 3d 66 75 6e Data Ascii: !function(e){var t={};function r(n){if(t[n])return t[n].exports;var o=t[n]={i:n,l:!1,exports:{}};return e[n].call(o.exports,o,o.exports,r),o.l=!0,o.exports}r.m=e,r.c=t,r.d=function(e,t,n){r.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},r.r=fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49860	65.109.119.234	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:31 UTC	552	OUT	GET /geolocation HTTP/1.1 Host: data.kameleoon.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://all.accor.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://all.accor.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 07:46:31 UTC	723	IN	HTTP/1.1 204 No Content Server: nginx Date: Wed, 30 Oct 2024 07:46:31 GMT Connection: close Content-Security-Policy: default-src 'none'; script-src 'self'; connect-src 'self'; img-src 'self'; style-src 'self' 'nonce-superNonce';base-uri 'self';form-action 'self' Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Access-Control-Allow-Origin: * Access-Control-Expose-Headers: geoip_city, geoip_region_name, geoip_country_name, geoip_postal_code, geoip_latitude, geoip_longitude geoip_city: Dallas geoip_region_name: Texas geoip_country_name: United States geoip_postal_code: 75247 geoip_latitude: 32.81670 geoip_longitude: -96.88340

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49862	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:31 UTC	5787	OUT	GET /components/header-aem/scripts/main.js HTTP/1.1 Host: all.accor.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=uXhrmD2Na/K1uglc4DSccWmUi3lwT6U0aN5NKqvcu8d5WGWybG4+Fjgl4ne6nVjifX1jzgyPIuRTBhS6nanmMOLamS/KiojPrxeLcFng8UzPO+81sa87bs4RFhGAg5SdnTRio+RJdn41ZezkVQzm+QQNKVTMJBE8fIzHUqlLtmYsp4GqzAo9Tqkn29+6s06cnyhW9Bg2AjaE3z+uY1Kha+K1N+xGE1wxY+ov1hMjJJFJQKo0Zzr8yVUmc0uGx6VyOI/GCYB98MMi2baM/noo1d0GCT/eTJnamWBVosFVl6rGjGRpxA8WWwcog7Ny/HlQVp6w8cTkKFTg/8KjIPnCBapACqcVA8DvW2Oym2gj1AtBv4YYfUMq3TEu4mXRkOJJVmAh7NCUHwLhEc4aXJBIqbW6JkrW0slp4+M4RmDR1e+A3GrFYXelb56QL3DRn/v55w+TZWXTMoZhYCD+Z9T66/ [TRUNCATED]
2024-10-30 07:46:31 UTC	640	IN	HTTP/1.1 200 OK Age: 161064 Cache-control: public, max-age=3600, stale-while-revalidate=21600 Content-Type: text/javascript Date: Wed, 30 Oct 2024 07:46:31 GMT Last-Modified: Mon, 28 Oct 2024 11:02:07 GMT P3P: CP="NO P3P POLICY" Referrer-Policy: origin Server: ECAcc (lhd/35C5) Strict-Transport-Security: max-age=15552000 Vary: Accept-Encoding X-Accor-asset: ecom X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Clacks-Overhead: GNU Terry Pratchett X-Iinfo: 12-42075469-42075470 NNNY CT(16 18 0) RT(1730113326535 4) q(0 0 0 0) r(1 1) U24 X-XSS-Protection: 1; mode=block Content-Length: 1869630 Connection: close
2024-10-30 07:46:32 UTC	16383	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 74 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 65 2c 6e 2e 63 3d 74 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 6e 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 72 7d 29 7d 2c 6e 2e 72 3d 66 75 6e Data Ascii: !function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=fun
2024-10-30 07:46:32 UTC	16383	IN	Data Raw: 26 26 28 73 3d 63 28 73 2c 69 28 61 72 67 75 6d 65 6e 74 73 5b 31 5d 29 29 29 2c 73 3c 30 26 26 28 73 3d 6e 2b 73 29 3b 73 3e 3d 30 3b 73 2d 2d 29 69 66 28 73 20 69 6e 20 74 26 26 74 5b 73 5d 3d 3d 3d 65 29 72 65 74 75 72 6e 20 73 7c 7c 30 3b 72 65 74 75 72 6e 2d 31 7d 3a 75 7d 2c 31 31 39 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 37 32 39 33 29 2c 6f 3d 6e 28 35 31 31 32 29 2c 69 3d 6e 28 37 33 39 32 29 2c 61 3d 6f 28 22 73 70 65 63 69 65 73 22 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 69 3e 3d 35 31 7c 7c 21 72 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 5b 5d 3b 72 65 74 75 72 6e 28 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 7b 7d 29 5b 61 5d 3d 66 75 6e Data Ascii: &&(s=c(s,i(arguments[1]))),s<0&&(s=n+s);s>=0;s--)if(s in t&&t[s]===e)return s\|\|0;return-1}:u},1194:function(e,t,n){var r=n(7293),o=n(5112),i=n(7392),a=o("species");e.exports=function(e){return i>=51\|\|!r((function(){var t=[];return(t.constructor={})[a]=fun
2024-10-30 07:46:32 UTC	2	IN	Data Raw: 68 7d Data Ascii: h}
2024-10-30 07:46:32 UTC	16383	IN	Data Raw: 3b 65 2e 65 78 70 6f 72 74 73 3d 63 7d 2c 36 36 37 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 37 32 39 33 29 3b 65 2e 65 78 70 6f 72 74 73 3d 21 72 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 4f 62 6a 65 63 74 2e 70 72 65 76 65 6e 74 45 78 74 65 6e 73 69 6f 6e 73 28 7b 7d 29 29 7d 29 29 7d 2c 32 31 30 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 34 33 37 34 29 2c 6f 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2c 69 3d 6f 2e 61 70 70 6c 79 2c 61 3d 6f 2e 63 61 6c 6c 3b 65 2e 65 78 70 6f 72 74 73 3d 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 26 26 52 65 66 6c 65 63 74 2e 61 Data Ascii: ;e.exports=c},6677:function(e,t,n){var r=n(7293);e.exports=!r((function(){return Object.isExtensible(Object.preventExtensions({}))}))},2104:function(e,t,n){var r=n(4374),o=Function.prototype,i=o.apply,a=o.call;e.exports="object"==typeof Reflect&&Reflect.a
2024-10-30 07:46:32 UTC	16383	IN	Data Raw: 3d 3d 72 28 65 29 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 69 28 65 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 61 28 73 29 7d 7d 28 65 29 3a 69 28 6f 28 65 29 29 7d 7d 2c 38 30 30 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 36 33 32 34 29 2c 6f 3d 6e 28 37 34 38 29 2e 63 6f 6e 63 61 74 28 22 6c 65 6e 67 74 68 22 2c 22 70 72 6f 74 6f 74 79 70 65 22 29 3b 74 2e 66 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 72 28 65 2c 6f 29 7d 7d 2c 35 31 38 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 2e 66 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 Data Ascii: ==r(e)?function(e){try{return i(e)}catch(e){return a(s)}}(e):i(o(e))}},8006:function(e,t,n){var r=n(6324),o=n(748).concat("length","prototype");t.f=Object.getOwnPropertyNames\|\|function(e){return r(e,o)}},5181:function(e,t){t.f=Object.getOwnPropertySymbols
2024-10-30 07:46:32 UTC	16383	IN	Data Raw: 28 67 2c 56 2c 61 29 2c 41 28 63 29 7d 29 3a 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 7d 2c 33 38 33 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 37 38 35 34 29 2c 6f 3d 6e 28 37 32 39 33 29 2c 69 3d 6e 28 37 30 37 32 29 2c 61 3d 6e 28 32 36 30 29 2e 4e 41 54 49 56 45 5f 41 52 52 41 59 5f 42 55 46 46 45 52 5f 56 49 45 57 53 2c 73 3d 72 2e 41 72 72 61 79 42 75 66 66 65 72 2c 63 3d 72 2e 49 6e 74 38 41 72 72 61 79 3b 65 2e 65 78 70 6f 72 74 73 3d 21 61 7c 7c 21 6f 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 28 31 29 7d 29 29 7c 7c 21 6f 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 65 77 20 63 28 2d 31 29 7d 29 29 7c 7c 21 69 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 65 77 20 63 2c 6e 65 77 20 63 28 6e Data Ascii: (g,V,a),A(c)}):e.exports=function(){}},3832:function(e,t,n){var r=n(7854),o=n(7293),i=n(7072),a=n(260).NATIVE_ARRAY_BUFFER_VIEWS,s=r.ArrayBuffer,c=r.Int8Array;e.exports=!a\|\|!o((function(){c(1)}))\|\|!o((function(){new c(-1)}))\|\|!i((function(e){new c,new c(n
2024-10-30 07:46:32 UTC	16383	IN	Data Raw: 28 2f 5d 2a 29 2f 2c 6c 3d 69 28 75 2e 65 78 65 63 29 3b 72 26 26 21 6f 26 26 61 28 73 2c 22 6e 61 6d 65 22 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6c 28 75 2c 63 28 74 68 69 73 29 29 5b 31 5d 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 22 22 7d 7d 7d 29 7d 2c 35 38 33 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 28 32 31 30 39 29 28 7b 67 6c 6f 62 61 6c 3a 21 30 7d 2c 7b 67 6c 6f 62 61 6c 54 68 69 73 3a 6e 28 37 38 35 34 29 7d 29 7d 2c 38 38 36 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 32 31 30 39 29 2c 6f 3d 6e 28 37 38 35 34 29 2c 69 3d 6e 28 35 30 30 35 29 2c 61 3d 6e 28 32 31 30 34 29 2c 73 3d 6e 28 31 37 30 Data Ascii: (/]*)/,l=i(u.exec);r&&!o&&a(s,"name",{configurable:!0,get:function(){try{return l(u,c(this))[1]}catch(e){return""}}})},5837:function(e,t,n){n(2109)({global:!0},{globalThis:n(7854)})},8862:function(e,t,n){var r=n(2109),o=n(7854),i=n(5005),a=n(2104),s=n(170
2024-10-30 07:46:32 UTC	16383	IN	Data Raw: 20 74 2c 6e 3d 65 2e 66 61 63 61 64 65 2c 72 3d 65 2e 76 61 6c 75 65 3b 69 66 28 75 65 28 65 29 26 26 28 74 3d 4c 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 4e 3f 56 2e 65 6d 69 74 28 22 75 6e 68 61 6e 64 6c 65 64 52 65 6a 65 63 74 69 6f 6e 22 2c 72 2c 6e 29 3a 73 65 28 65 65 2c 6e 2c 72 29 7d 29 29 2c 65 2e 72 65 6a 65 63 74 69 6f 6e 3d 4e 7c 7c 75 65 28 65 29 3f 32 3a 31 2c 74 2e 65 72 72 6f 72 29 29 74 68 72 6f 77 20 74 2e 76 61 6c 75 65 7d 29 29 7d 2c 75 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 31 21 3d 3d 65 2e 72 65 6a 65 63 74 69 6f 6e 26 26 21 65 2e 70 61 72 65 6e 74 7d 2c 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 28 45 2c 75 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 65 2e 66 61 63 61 64 65 3b 4e 3f 56 2e 65 Data Ascii: t,n=e.facade,r=e.value;if(ue(e)&&(t=L((function(){N?V.emit("unhandledRejection",r,n):se(ee,n,r)})),e.rejection=N\|\|ue(e)?2:1,t.error))throw t.value}))},ue=function(e){return 1!==e.rejection&&!e.parent},le=function(e){d(E,u,(function(){var t=e.facade;N?V.e
2024-10-30 07:46:32 UTC	16383	IN	Data Raw: 3d 78 28 61 2c 50 2c 54 29 2b 53 2c 50 3d 54 2b 4f 2c 54 3d 6b 28 61 2c 66 2c 54 2b 45 29 3b 72 65 74 75 72 6e 20 50 3c 61 2e 6c 65 6e 67 74 68 26 26 28 4c 2b 3d 78 28 61 2c 50 29 29 2c 4c 7d 7d 29 7d 2c 35 33 30 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 32 31 30 34 29 2c 6f 3d 6e 28 36 39 31 36 29 2c 69 3d 6e 28 31 37 30 32 29 2c 61 3d 6e 28 37 30 30 37 29 2c 73 3d 6e 28 37 32 39 33 29 2c 63 3d 6e 28 39 36 37 30 29 2c 75 3d 6e 28 36 31 34 29 2c 6c 3d 6e 28 39 33 30 33 29 2c 64 3d 6e 28 37 34 36 36 29 2c 66 3d 6e 28 31 33 34 30 29 2c 5f 3d 6e 28 34 34 38 38 29 2c 70 3d 6e 28 31 35 33 30 29 2c 68 3d 6e 28 38 31 37 33 29 2c 6d 3d 6e 28 36 34 37 29 2c 76 3d 6e 28 37 36 35 31 29 2c 67 Data Ascii: =x(a,P,T)+S,P=T+O,T=k(a,f,T+E);return P<a.length&&(L+=x(a,P)),L}})},5306:function(e,t,n){"use strict";var r=n(2104),o=n(6916),i=n(1702),a=n(7007),s=n(7293),c=n(9670),u=n(614),l=n(9303),d=n(7466),f=n(1340),_=n(4488),p=n(1530),h=n(8173),m=n(647),v=n(7651),g
2024-10-30 07:46:32 UTC	6	IN	Data Raw: 29 2c 6f 3d 6e 28 Data Ascii: ),o=n(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49864	35.240.103.94	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:31 UTC	3119	OUT	GET /authentication/v2.0/authorization?appId=all.accor&prompt=none&redirect_uri=https%3A%2F%2Fall.accor.com%2Fenroll-loyalty%2Fcheck-authent.html HTTP/1.1 Host: api.accor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://all.accor.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: org=evy; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; OAU_all.accor=eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJhcHBfaWQiOiJhbGwuYWNjb3IiLCJzdGF0ZSI6ImYzNTYwZWQyYThjNDZhZjQxOTllZjgiLCJub25jZSI6IjIxZDBhMGU1ZWQ4YzU2NTZkZjI4ZjYiLCJyZWRpcmVjdF9zaXRlX3VyaSI6Imh0dHBzOi8vYWxsLmFjY29yLmNvbSIsInByb21wdCI6Im5vbmUiLCJleHAiOjE3MzAyNzYxODQsImlhdCI6MTczMDI3NDM4NH0.T264QRl7YWH19MgynN8-Xaq1G1flI3hkXf6P-98bxX9zquvQYl9l1yVvirNK7SO9IARz9C1cgTuaozOE3ITULDlEyLbPAquuYSLfESRfVzyb0HFEhbkdMISJ5nmsUq2QiYFJRgGSRoU7UjHDLoo8646JuA_ZnO1550QeNYS8xuV9EoK4B4oFEgezMDX9rf6Or31D63HUbbL51dSeHY26E7TwHYN6SeodaZL7NeaUEJN-G93F7ktNq824Z5C11HTL2mkWUM6Aaz0nua4XKjGekRh9_QQpoOau3wMyp586RfBxn38C0agFPUi7WA_4FusMHRg-90n9XBuE3e_0KE46Uw; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjo [TRUNCATED]
2024-10-30 07:46:32 UTC	1938	IN	HTTP/1.1 302 Found Date: Wed, 30 Oct 2024 07:46:32 GMT Content-Type: application/json Content-Length: 0 Connection: close x-amzn-RequestId: 961285e1-bbf2-4018-9189-3c98edbf11bf Set-Cookie: OAU_all.accor=eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJhcHBfaWQiOiJhbGwuYWNjb3IiLCJzdGF0ZSI6Ijk0MzE1OWJmZjNlMjgzNDdhNTc2YjQiLCJub25jZSI6ImYyYjUzNGVlYmM2NTBiZmYyNzQyZjAiLCJyZWRpcmVjdF9zaXRlX3VyaSI6Imh0dHBzOi8vYWxsLmFjY29yLmNvbSIsInByb21wdCI6Im5vbmUiLCJleHAiOjE3MzAyNzYxOTIsImlhdCI6MTczMDI3NDM5Mn0.dDbp5yo22Nkc_T2_ilnkSeZsJlH33J88WQce53kGtp7b_xXc-2rGkQXx-VD15Zw61YvyBN-FbPdfODEVwEOjwA95X-YiFBZq0afvv1-bDUyUZJqQEKjb8T53boJ6aeFhRDRRGz1PvuQn8IcQst_mDKKJHNHrjHtDhzx4TbbmfnMeRAvGxsWZqRrNVJLsxtGTRVAbr-pcr79auRdsdiiVMHZngXHEFuB-K5MUmf_WsGQLV6Db-UHxgdfGu9vYR-01M6R64Ifelcqv0eSDL_lHRPZz9nu4GOjrAQuorhzEhAfIrwIDG9wAZTjcp-KUuCz3QBGKkHYwzrk0BLSoO-aUgA; Secure; HttpOnly; Path=/; SameSite=None x-amz-apigw-id: AdCd0GXAjoEEM9Q= Location: https://login.accor.com/as/authorization.oauth2?client_id=all.accor&response_type=code&accorregister=false&request=eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJjbGllbnRfaWQiOiJhbGwuYWNjb3IiLCJyZXNwb25zZV90eXBlIjoiY29kZSIsInJlZGlyZWN0X3VyaSI6Imh0dHBzOi8vYWxsLmFjY29yLmNvbS9lbnJvbGwtbG95YWx0eS9jaGVjay1hdXRoZW50Lmh0bWw_YXBwSWQ9YWxsLmFjY29yIiwic2NvcGUiOiJvcGVuaWQgQVBJV0VCLlVTRVIuQUxMIEFQU1IuQUxMIiwicHJvbXB0Ijoibm9uZSIsInN0YXRlIjoiOTQzMTU5YmZmM2UyODM0N2E1NzZiNCIsIm5vbmNlIjoiZjJiNTM0ZWViYzY1MGJmZjI3NDJmMCIsImV4cCI6MTczMDI3NjE5MiwiaWF0IjoxNzMwMjc0MzkyfQ.Ol8o9CD0gi2mEfGt4p-2D2dm40hKH0kbxSF5f5RnJxiASxPmciJCNWVLYzD_Ju8vWMvvRBvf616h8cG5hDiZzj7dts_dw5hoSwkHCV7l_Gj3FIUds8Tg7lWkkGHvYFP0xQleWQkubTwZ3eDglRjEHt3gNX9gLKhGIzZkLWkU8sYNiYMlg_e0cbk6dk0ax-3HSszRKV9QGVlx6v2TYUEG-zCGGIFYq1j7w3_AqrNXpdXKmLkYEm34j_pM0QLsNr2ckvWPCle0HiRuZOptsqqupb-CVOTLITv2BsV1Qay30fxSgFjqJie5-UuMfkmAb7_1Sf-CJlnoJaKRQzwEKN-K6A&prompt=none X-Amzn-Trace-Id: Root=1-6721e458-177f39ae33c2e64936ded167;Parent=6484d7e652368225;Sampled=0;Lineage=1:5a15d23f:0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	49873	35.190.80.1	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:32 UTC	490	OUT	POST /report/v4?s=fIwe3JJo8%2BlwLKXDlbWuUl5kqhDTG2uifW2BRrkB%2BYz%2BxWFooim0Nn8Ptt9%2F3dnca8VCfTgjpG6yPXkLxBuPeo3QzHvL8dAbCJScr5sq320rtOasm%2F619QyBKLY49erdZizrkZXV6p%2F8 HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 444 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 07:46:32 UTC	444	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 34 35 35 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 37 32 2e 35 30 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 72 65 73 70 6f 6e 73 65 2e 69 6e 76 61 6c 69 64 2e 69 6e 63 6f 6d 70 6c 65 74 65 5f 63 68 75 6e 6b 65 64 5f 65 6e 63 6f 64 69 6e 67 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b Data Ascii: [{"age":0,"body":{"elapsed_time":1455,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"172.67.72.50","status_code":200,"type":"http.response.invalid.incomplete_chunked_encoding"},"type":"network
2024-10-30 07:46:32 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Wed, 30 Oct 2024 07:46:32 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	49866	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:32 UTC	5838	OUT	GET /enroll-loyalty/assets/verifyEnroll-D5kC1PyP.js HTTP/1.1 Host: all.accor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://all.accor.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://all.accor.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=uXhrmD2Na/K1uglc4DSccWmUi3lwT6U0aN5NKqvcu8d5WGWybG4+Fjgl4ne6nVjifX1jzgyPIuRTBhS6nanmMOLamS/KiojPrxeLcFng8UzPO+81sa87bs4RFhGAg5SdnTRio+RJdn41ZezkVQzm+QQNKVTMJBE8fIzHUqlLtmYsp4GqzAo9Tqkn29+6s06cnyhW9Bg2AjaE3z+uY1Kha+K1N+xGE1wxY+ov1hMjJJFJQKo0Zzr8yVUmc0uGx6VyOI/GCYB98MMi2baM/noo1d0GCT/eTJnamWBVosFVl6rGjGRpxA8WWwcog7Ny/HlQVp6w8cTkKFTg/8KjIPnCBapACqcVA8DvW2Oym2gj1AtBv4YYfUMq3TEu4mXRkOJJVmAh7NCUHwLhEc4aXJBIqbW6JkrW0slp4+M4RmDR1e+A3GrFYXelb56QL3DRn/v55w+TZWXTMoZhYCD+Z9T66/ [TRUNCATED]
2024-10-30 07:46:33 UTC	860	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: authorization, content-type, x-requested-with Access-Control-Allow-Methods: PUT, GET, POST, DELETE, OPTIONS Access-Control-Allow-Origin: https://all.accor.com Age: 161143 Cache-control: public, max-age=3600, stale-while-revalidate=21600 Content-Type: text/javascript Date: Wed, 30 Oct 2024 07:46:32 GMT Last-Modified: Mon, 28 Oct 2024 11:00:49 GMT P3P: CP="NO P3P POLICY" Referrer-Policy: origin Server: ECAcc (lhd/35A8) Strict-Transport-Security: max-age=15552000 Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Clacks-Overhead: GNU Terry Pratchett X-Iinfo: 5-3273310-3250718 sNNN RT(1730113246797 2373) q(0 0 0 0) r(1 1) U24 X-XSS-Protection: 1; mode=block Content-Length: 3340 Connection: close
2024-10-30 07:46:33 UTC	3340	IN	Data Raw: 69 6d 70 6f 72 74 7b 61 7d 66 72 6f 6d 22 2e 2f 61 78 69 6f 73 2d 43 4a 46 55 64 33 36 62 2e 6a 73 22 3b 69 6d 70 6f 72 74 7b 67 20 61 73 20 45 2c 73 20 61 73 20 52 7d 66 72 6f 6d 22 2e 2f 69 6e 64 65 78 2d 43 7a 75 35 52 69 53 79 2e 6a 73 22 3b 69 6d 70 6f 72 74 7b 45 20 61 73 20 6d 7d 66 72 6f 6d 22 2e 2f 69 6e 64 65 78 2d 42 4a 77 69 77 42 41 6a 2e 6a 73 22 3b 69 6d 70 6f 72 74 7b 67 20 61 73 20 79 7d 66 72 6f 6d 22 2e 2f 69 6e 64 65 78 2d 43 42 37 31 4d 51 4f 32 2e 6a 73 22 3b 63 6f 6e 73 74 20 64 3d 7b 6e 61 6d 65 3a 22 73 74 61 74 75 73 22 2c 73 74 61 74 65 3a 7b 69 63 6f 6e 3a 22 65 72 72 6f 72 22 2c 62 69 67 48 65 61 64 69 6e 67 3a 22 65 72 72 6f 72 2e 67 65 6e 65 72 69 63 2e 74 69 74 6c 65 22 2c 70 61 72 61 67 72 61 70 68 3a 22 65 72 72 6f 72 2e Data Ascii: import{a}from"./axios-CJFUd36b.js";import{g as E,s as R}from"./index-Czu5RiSy.js";import{E as m}from"./index-BJwiwBAj.js";import{g as y}from"./index-CB71MQO2.js";const d={name:"status",state:{icon:"error",bigHeading:"error.generic.title",paragraph:"error.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49867	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:32 UTC	6457	OUT	GET /a/conf/all/settings/wcm/segments.seg.js HTTP/1.1 Host: all.accor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, /; q=0.01 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://all.accor.com/a/en/new-app-offer/app-download.html?source_caller=bulk&af_qr=true&shortlink=5m1nc8of&c=20241013_ALL_AppBonusingMobileLp&af_ad=QR_code_20241013_ALL_AppBonusingMobileLp&pid=QR_code&deep_link_value=accor%3A%2F%2Fsearch%2Foffer%3Fpage_id%3Dddc8e830-2fc5-4492-ae7f-a63574b202f4&af_adset=EN Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=uXhrmD2Na/K1uglc4DSccWmUi3lwT6U0aN5NKqvcu8d5WGWybG4+Fjgl4ne6nVjifX1jzgyPIuRTBhS6nanmMOLamS/KiojPrxeLcFng8UzPO+81sa87bs4RFhGAg5SdnTRio+RJdn41ZezkVQzm+QQNKVTMJBE8fIzHUqlLtmYsp4GqzAo9Tqkn29+6s06cnyhW9Bg2AjaE3z+uY1Kha+K1N+xGE1wxY+ov1hMjJJFJQKo0Zzr8yVUmc0uGx6VyOI/GCYB98MMi2baM/noo1d0GCT/eTJnamWBVosFVl6rGjGRpxA8WWwcog7Ny/HlQVp6w8cTkKFTg/8KjIPnCBapACqcVA8DvW2Oym2gj1AtBv4YYfUMq3TEu4mXRkOJJVmAh7NCUHwLhEc4aXJBIqbW6JkrW0slp4+M4RmDR1e+A3GrFYXelb56QL3DRn/v55w+TZWXTMoZhYCD+Z9T66/ [TRUNCATED]
2024-10-30 07:46:33 UTC	749	IN	HTTP/1.1 200 OK Age: 161139 Content-Type: text/javascript; charset=UTF-8 Date: Wed, 30 Oct 2024 07:46:32 GMT Etag: "f9a9ff9f1ac84ed151c02ec06ce527a5c1b503e429b2239934853376e3df489f-gzip+ident" Last-Modified: Mon, 28 Oct 2024 11:00:53 GMT Server: ECAcc (lhd/35B8) Strict-Transport-Security: max-age=31557600 Vary: Accept-Encoding X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Content-Type-Options: nosniff x-frame-options: SAMEORIGIN x-frame-options: SAMEORIGIN X-Iinfo: 13-51731764-51731766 NNNY CT(15 20 0) RT(1730113252534 11) q(0 0 0 -1) r(0 1) U24 X-Served-By: cache-fra-etou8220074-FRA x-sky-isauth: 0 X-Timer: S1730113253.443589,VS0,VS0,VE89 x-vhost: prod-allcom-publish Content-Length: 65457 Connection: close
2024-10-30 07:46:33 UTC	16383	IN	Data Raw: 69 66 20 28 77 69 6e 64 6f 77 2e 43 6f 6e 74 65 78 74 48 75 62 20 26 26 20 43 6f 6e 74 65 78 74 48 75 62 2e 53 65 67 6d 65 6e 74 45 6e 67 69 6e 65 29 20 7b 0a 76 61 72 20 53 20 3d 20 43 6f 6e 74 65 78 74 48 75 62 2e 53 65 67 6d 65 6e 74 45 6e 67 69 6e 65 2e 53 65 67 6d 65 6e 74 3b 0a 76 61 72 20 53 52 20 3d 20 43 6f 6e 74 65 78 74 48 75 62 2e 53 65 67 6d 65 6e 74 45 6e 67 69 6e 65 2e 53 65 67 6d 65 6e 74 52 65 66 65 72 65 6e 63 65 3b 0a 76 61 72 20 50 20 3d 20 43 6f 6e 74 65 78 74 48 75 62 2e 53 65 67 6d 65 6e 74 45 6e 67 69 6e 65 2e 50 72 6f 70 65 72 74 79 3b 0a 76 61 72 20 4f 20 3d 20 43 6f 6e 74 65 78 74 48 75 62 2e 53 65 67 6d 65 6e 74 45 6e 67 69 6e 65 2e 4f 70 65 72 61 74 6f 72 3b 0a 76 61 72 20 46 52 20 3d 20 43 6f 6e 74 65 78 74 48 75 62 2e 53 65 Data Ascii: if (window.ContextHub && ContextHub.SegmentEngine) {var S = ContextHub.SegmentEngine.Segment;var SR = ContextHub.SegmentEngine.SegmentReference;var P = ContextHub.SegmentEngine.Property;var O = ContextHub.SegmentEngine.Operator;var FR = ContextHub.Se
2024-10-30 07:46:33 UTC	16383	IN	Data Raw: 75 6d 22 29 2c 6e 65 77 20 4f 28 27 65 71 75 61 6c 2e 73 74 72 69 6e 67 27 2c 6e 65 77 20 50 28 22 63 75 73 74 6f 6d 65 72 5c 2f 6c 6f 79 61 6c 74 79 53 74 61 74 75 73 22 29 2c 22 44 69 61 6d 6f 6e 64 22 29 2c 6e 65 77 20 4f 28 27 65 71 75 61 6c 2e 73 74 72 69 6e 67 27 2c 6e 65 77 20 50 28 22 63 75 73 74 6f 6d 65 72 5c 2f 6c 6f 79 61 6c 74 79 53 74 61 74 75 73 22 29 2c 22 4c 69 6d 69 74 6c 65 73 73 22 29 29 2c 6e 65 77 20 4f 28 27 65 71 75 61 6c 2e 73 74 72 69 6e 67 27 2c 6e 65 77 20 50 28 22 70 6f 73 5c 2f 63 6f 75 6e 74 72 79 22 29 2c 22 64 65 75 74 73 63 68 6c 61 6e 64 22 29 2c 6e 65 77 20 4f 28 27 65 71 75 61 6c 2e 73 74 72 69 6e 67 27 2c 6e 65 77 20 50 28 22 70 6f 73 5c 2f 6c 61 6e 67 75 61 67 65 22 29 2c 22 64 65 22 29 29 29 3b 0a 0a 6e 65 77 20 53 Data Ascii: um"),new O('equal.string',new P("customer\/loyaltyStatus"),"Diamond"),new O('equal.string',new P("customer\/loyaltyStatus"),"Limitless")),new O('equal.string',new P("pos\/country"),"deutschland"),new O('equal.string',new P("pos\/language"),"de")));new S
2024-10-30 07:46:33 UTC	2	IN	Data Raw: 7a 65 Data Ascii: ze
2024-10-30 07:46:33 UTC	16383	IN	Data Raw: 61 6c 61 6e 64 5c 75 30 30 32 44 66 69 6a 69 22 2c 44 2b 22 61 6c 6c 5f 75 6e 6c 6f 67 67 65 64 5f 65 6e 5f 6e 65 77 5c 75 30 30 32 44 7a 65 61 6c 61 6e 64 5c 75 30 30 32 44 66 69 6a 69 22 2c 30 5d 2c 6e 65 77 20 4f 28 27 61 6e 64 27 2c 6e 65 77 20 4f 28 27 65 71 75 61 6c 2e 73 74 72 69 6e 67 27 2c 6e 65 77 20 50 28 22 63 75 73 74 6f 6d 65 72 5c 2f 43 6f 6e 6e 65 63 74 65 64 22 29 2c 22 66 61 6c 73 65 22 29 2c 6e 65 77 20 4f 28 27 65 71 75 61 6c 2e 73 74 72 69 6e 67 27 2c 6e 65 77 20 50 28 22 70 6f 73 5c 2f 63 6f 75 6e 74 72 79 22 29 2c 22 6e 65 77 5c 75 30 30 32 44 7a 65 61 6c 61 6e 64 5c 75 30 30 32 44 66 69 6a 69 22 29 2c 6e 65 77 20 4f 28 27 65 71 75 61 6c 2e 73 74 72 69 6e 67 27 2c 6e 65 77 20 50 28 22 70 6f 73 5c 2f 6c 61 6e 67 75 61 67 65 22 29 2c Data Ascii: aland\u002Dfiji",D+"all_unlogged_en_new\u002Dzealand\u002Dfiji",0],new O('and',new O('equal.string',new P("customer\/Connected"),"false"),new O('equal.string',new P("pos\/country"),"new\u002Dzealand\u002Dfiji"),new O('equal.string',new P("pos\/language"),
2024-10-30 07:46:33 UTC	16306	IN	Data Raw: 28 27 65 71 75 61 6c 2e 73 74 72 69 6e 67 27 2c 6e 65 77 20 50 28 22 70 6f 73 5c 2f 63 6f 75 6e 74 72 79 22 29 2c 22 74 75 72 6b 65 79 22 29 2c 6e 65 77 20 4f 28 27 65 71 75 61 6c 2e 73 74 72 69 6e 67 27 2c 6e 65 77 20 50 28 22 70 6f 73 5c 2f 6c 61 6e 67 75 61 67 65 22 29 2c 22 74 72 22 29 29 29 3b 0a 0a 6e 65 77 20 53 28 5b 22 61 6c 6c 5f 75 6e 6c 6f 67 67 65 64 5f 74 72 5f 74 75 72 6b 65 79 22 2c 44 2b 22 61 6c 6c 5f 75 6e 6c 6f 67 67 65 64 5f 74 72 5f 74 75 72 6b 65 79 22 2c 30 5d 2c 6e 65 77 20 4f 28 27 61 6e 64 27 2c 6e 65 77 20 4f 28 27 65 71 75 61 6c 2e 73 74 72 69 6e 67 27 2c 6e 65 77 20 50 28 22 63 75 73 74 6f 6d 65 72 5c 2f 43 6f 6e 6e 65 63 74 65 64 22 29 2c 22 66 61 6c 73 65 22 29 2c 6e 65 77 20 4f 28 27 65 71 75 61 6c 2e 73 74 72 69 6e 67 27 Data Ascii: ('equal.string',new P("pos\/country"),"turkey"),new O('equal.string',new P("pos\/language"),"tr")));new S(["all_unlogged_tr_turkey",D+"all_unlogged_tr_turkey",0],new O('and',new O('equal.string',new P("customer\/Connected"),"false"),new O('equal.string'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	49869	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:32 UTC	6026	OUT	GET /scripts/main-footer-light.js HTTP/1.1 Host: all.accor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://all.accor.com/a/en/new-app-offer/app-download.html?source_caller=bulk&af_qr=true&shortlink=5m1nc8of&c=20241013_ALL_AppBonusingMobileLp&af_ad=QR_code_20241013_ALL_AppBonusingMobileLp&pid=QR_code&deep_link_value=accor%3A%2F%2Fsearch%2Foffer%3Fpage_id%3Dddc8e830-2fc5-4492-ae7f-a63574b202f4&af_adset=EN Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=uXhrmD2Na/K1uglc4DSccWmUi3lwT6U0aN5NKqvcu8d5WGWybG4+Fjgl4ne6nVjifX1jzgyPIuRTBhS6nanmMOLamS/KiojPrxeLcFng8UzPO+81sa87bs4RFhGAg5SdnTRio+RJdn41ZezkVQzm+QQNKVTMJBE8fIzHUqlLtmYsp4GqzAo9Tqkn29+6s06cnyhW9Bg2AjaE3z+uY1Kha+K1N+xGE1wxY+ov1hMjJJFJQKo0Zzr8yVUmc0uGx6VyOI/GCYB98MMi2baM/noo1d0GCT/eTJnamWBVosFVl6rGjGRpxA8WWwcog7Ny/HlQVp6w8cTkKFTg/8KjIPnCBapACqcVA8DvW2Oym2gj1AtBv4YYfUMq3TEu4mXRkOJJVmAh7NCUHwLhEc4aXJBIqbW6JkrW0slp4+M4RmDR1e+A3GrFYXelb56QL3DRn/v55w+TZWXTMoZhYCD+Z9T66/ [TRUNCATED] If-Modified-Since: Mon, 28 Oct 2024 11:00:52 GMT
2024-10-30 07:46:33 UTC	629	IN	HTTP/1.1 304 Not Modified Age: 161140 Cache-control: public, max-age=3600, stale-while-revalidate=21600 Date: Wed, 30 Oct 2024 07:46:32 GMT Last-Modified: Mon, 28 Oct 2024 11:00:52 GMT P3P: CP="NO P3P POLICY" Referrer-Policy: origin Server: ECAcc (lhd/35D0) Strict-Transport-Security: max-age=15552000 Strict-Transport-Security: max-age=15552000 Vary: Accept-Encoding X-Accor-asset: ecom X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Clacks-Overhead: GNU Terry Pratchett X-Iinfo: 17-174814289-174805022 pNNy RT(1730113251974 9) q(0 0 0 0) r(1 1) U24 X-XSS-Protection: 1; mode=block Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	49868	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:32 UTC	5021	OUT	GET /.rum/@adobe/helix-rum-js@%5E2/dist/rum-standalone.js HTTP/1.1 Host: all.accor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://all.accor.com/a/en/new-app-offer/app-download.html?source_caller=bulk&af_qr=true&shortlink=5m1nc8of&c=20241013_ALL_AppBonusingMobileLp&af_ad=QR_code_20241013_ALL_AppBonusingMobileLp&pid=QR_code&deep_link_value=accor%3A%2F%2Fsearch%2Foffer%3Fpage_id%3Dddc8e830-2fc5-4492-ae7f-a63574b202f4&af_adset=EN Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=uXhrmD2Na/K1uglc4DSccWmUi3lwT6U0aN5NKqvcu8d5WGWybG4+Fjgl4ne6nVjifX1jzgyPIuRTBhS6nanmMOLamS/KiojPrxeLcFng8UzPO+81sa87bs4RFhGAg5SdnTRio+RJdn41ZezkVQzm+QQNKVTMJBE8fIzHUqlLtmYsp4GqzAo9Tqkn29+6s06cnyhW9Bg2AjaE3z+uY1Kha+K1N+xGE1wxY+ov1hMjJJFJQKo0Zzr8yVUmc0uGx6VyOI/GCYB98MMi2baM/noo1d0GCT/eTJnamWBVosFVl6rGjGRpxA8WWwcog7Ny/HlQVp6w8cTkKFTg/8KjIPnCBapACqcVA8DvW2Oym2gj1AtBv4YYfUMq3TEu4mXRkOJJVmAh7NCUHwLhEc4aXJBIqbW6JkrW0slp4+M4RmDR1e+A3GrFYXelb56QL3DRn/v55w+TZWXTMoZhYCD+Z9T66/ [TRUNCATED]
2024-10-30 07:46:33 UTC	946	IN	HTTP/1.1 404 Not Found Accept-Ranges: bytes Cache-control: private, max-age=3600, stale-while-revalidate=21600 Content-Type: text/html; charset=utf-8 Date: Wed, 30 Oct 2024 07:46:32 GMT P3P: CP="NO P3P POLICY" Referrer-Policy: origin server: MF 8700 S - Dyna-VT - Stage V All-in-One Server-Timing: dtSInfo;desc="0", dtRpid;desc="-177340047" Set-Cookie: org=evy; path=/; Max-Age=900; domain=.accor.com; SameSite=none; Secure Strict-Transport-Security: max-age=15552000 traceresponse: 00-a35d0c63c10f3ee5084e4a3345242f70-a380cc8560f16313-01 Vary: Origin, Accept-Encoding X-Accor-asset: wise X-CDN: Imperva X-CDN-Forward: EdgeCast X-Clacks-Overhead: GNU Terry Pratchett x-dt-tracestate: b7404764-46223171@dt X-Iinfo: 14-96811778-96811779 NNNY CT(13 16 0) RT(1730274391978 3) q(0 0 0 -1) r(1 1) U24 X-OneAgent-JS-Injection: true X-ruxit-JS-Agent: true X-XSS-Protection: 1; mode=block Content-Length: 11427 Connection: close
2024-10-30 07:46:33 UTC	749	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 2f 72 75 78 69 74 61 67 65 6e 74 6a 73 5f 49 43 41 37 4e 56 66 68 71 72 75 78 5f 31 30 32 38 35 32 34 30 33 30 37 31 30 31 34 30 37 2e 6a 73 22 20 64 61 74 61 2d 64 74 63 6f 6e 66 69 67 3d 22 72 69 64 3d 52 49 44 5f 35 37 32 34 32 32 30 36 36 7c 72 70 69 64 3d 2d 31 37 37 33 34 30 30 34 37 7c 64 6f 6d 61 69 6e 3d 61 63 63 6f 72 2e 63 6f 6d 7c 72 65 70 6f 72 74 55 72 6c 3d 2f 72 62 5f 38 30 62 65 39 36 33 66 2d 61 38 35 39 2d 34 38 30 38 2d 39 62 32 61 2d 63 65 62 38 64 34 34 64 66 37 33 38 7c 61 70 70 3d 30 64 61 65 32 37 31 30 65 63 39 38 Data Ascii: <!DOCTYPE html><html lang="en"><head><script type="text/javascript" src="/ruxitagentjs_ICA7NVfhqrux_10285240307101407.js" data-dtconfig="rid=RID_572422066\|rpid=-177340047\|domain=accor.com\|reportUrl=/rb_80be963f-a859-4808-9b2a-ceb8d44df738\|app=0dae2710ec98
2024-10-30 07:46:33 UTC	5808	IN	Data Raw: 69 6d 65 4f 75 74 29 20 7b 20 76 61 72 20 6b 61 6d 65 6c 65 6f 6f 6e 53 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 27 73 63 72 69 70 74 27 29 5b 30 5d 3b 76 61 72 20 6b 61 6d 65 6c 65 6f 6f 6e 43 63 20 3d 20 27 2a 7b 20 76 69 73 69 62 69 6c 69 74 79 3a 20 68 69 64 64 65 6e 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 27 3b 76 61 72 20 6b 61 6d 65 6c 65 6f 6f 6e 53 74 6e 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 74 79 6c 65 27 29 3b 6b 61 6d 65 6c 65 6f 6f 6e 53 74 6e 2e 74 79 70 65 20 3d 20 27 74 65 78 74 2f 63 73 73 27 3b 6b 61 6d 65 6c 65 6f 6f 6e 53 74 6e Data Ascii: imeOut) { var kameleoonS = document.getElementsByTagName('script')[0];var kameleoonCc = '*{ visibility: hidden !important; background-image: none !important; }';var kameleoonStn = document.createElement('style');kameleoonStn.type = 'text/css';kameleoonStn
2024-10-30 07:46:33 UTC	4870	IN	Data Raw: 5f 5f 68 69 67 68 6c 69 67 68 74 22 3e 3c 61 20 68 72 65 66 3d 22 2f 69 6e 64 65 78 2e 6a 73 70 22 3e e8 af a5 e5 9c b0 e5 9d 80 e6 97 a0 e6 95 88 3c 2f 61 3e 3c 2f 64 69 76 3e 3c 70 3e 3c 61 20 68 72 65 66 3d 22 2f 69 6e 64 65 78 2e 6a 73 70 22 3e e6 82 a8 e5 8f af e4 bb a5 e5 9c a8 20 e8 bf 99 e9 87 8c 20 e6 89 be e5 88 b0 3c 2f 61 3e 20 61 6c 6c 2e 61 63 63 6f 72 2e 63 6f 6d 2e 3c 62 72 2f 3e e4 bf 9d e8 af 81 e4 bb a5 e6 9c 80 e6 83 a0 e4 bb b7 e6 a0 bc e9 a2 84 e8 ae a2 e9 9b 85 e9 ab 98 e9 85 92 e5 ba 97 e9 9b 86 e5 9b a2 e5 9c a8 20 e5 85 a8 e7 90 83 20 34 30 20 e5 a4 9a e4 b8 aa e5 9b bd e5 ae b6 e7 9a 84 20 34 2c 30 30 30 20 e5 ae b6 e9 85 92 e5 ba 97 3c 2f 70 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 72 72 6f 72 73 5f 5f 6c 69 6e 6b 22 3e 3c 61 Data Ascii: __highlight"><a href="/index.jsp"></a></div><p><a href="/index.jsp"> </a> all.accor.com.<br/> 40 4,000 </p><div class="errors__link"><a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	49870	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:32 UTC	5780	OUT	GET /a/libs/granite/csrf/token.json HTTP/1.1 Host: all.accor.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=uXhrmD2Na/K1uglc4DSccWmUi3lwT6U0aN5NKqvcu8d5WGWybG4+Fjgl4ne6nVjifX1jzgyPIuRTBhS6nanmMOLamS/KiojPrxeLcFng8UzPO+81sa87bs4RFhGAg5SdnTRio+RJdn41ZezkVQzm+QQNKVTMJBE8fIzHUqlLtmYsp4GqzAo9Tqkn29+6s06cnyhW9Bg2AjaE3z+uY1Kha+K1N+xGE1wxY+ov1hMjJJFJQKo0Zzr8yVUmc0uGx6VyOI/GCYB98MMi2baM/noo1d0GCT/eTJnamWBVosFVl6rGjGRpxA8WWwcog7Ny/HlQVp6w8cTkKFTg/8KjIPnCBapACqcVA8DvW2Oym2gj1AtBv4YYfUMq3TEu4mXRkOJJVmAh7NCUHwLhEc4aXJBIqbW6JkrW0slp4+M4RmDR1e+A3GrFYXelb56QL3DRn/v55w+TZWXTMoZhYCD+Z9T66/ [TRUNCATED]
2024-10-30 07:46:33 UTC	683	IN	HTTP/1.1 200 OK Age: 512 cache-control: max-age=600,public Content-Type: application/json Date: Wed, 30 Oct 2024 07:46:32 GMT expires: -1 Last-Modified: Wed, 30 Oct 2024 07:41:54 GMT Server: ECAcc (lhd/3592) Strict-Transport-Security: max-age=31557600 Vary: Accept-Encoding X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Content-Type-Options: nosniff x-frame-options: SAMEORIGIN x-frame-options: SAMEORIGIN X-Iinfo: 17-206387638-206387639 NNYN CT(6 8 0) RT(1730274113751 3) q(0 0 0 0) r(0 0) U24 X-Served-By: cache-ams2100118-AMS x-sky-isauth: 0 X-Timer: S1730274114.493412,VS0,VS0,VE1 x-vhost: prod-allcom-publish Content-Length: 2 Connection: close
2024-10-30 07:46:33 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	49874	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:32 UTC	6281	OUT	GET /_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3&ns=1&cb=1220902006 HTTP/1.1 Host: all.accor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://all.accor.com/a/en/new-app-offer/app-download.html?source_caller=bulk&af_qr=true&shortlink=5m1nc8of&c=20241013_ALL_AppBonusingMobileLp&af_ad=QR_code_20241013_ALL_AppBonusingMobileLp&pid=QR_code&deep_link_value=accor%3A%2F%2Fsearch%2Foffer%3Fpage_id%3Dddc8e830-2fc5-4492-ae7f-a63574b202f4&af_adset=EN Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=uXhrmD2Na/K1uglc4DSccWmUi3lwT6U0aN5NKqvcu8d5WGWybG4+Fjgl4ne6nVjifX1jzgyPIuRTBhS6nanmMOLamS/KiojPrxeLcFng8UzPO+81sa87bs4RFhGAg5SdnTRio+RJdn41ZezkVQzm+QQNKVTMJBE8fIzHUqlLtmYsp4GqzAo9Tqkn29+6s06cnyhW9Bg2AjaE3z+uY1Kha+K1N+xGE1wxY+ov1hMjJJFJQKo0Zzr8yVUmc0uGx6VyOI/GCYB98MMi2baM/noo1d0GCT/eTJnamWBVosFVl6rGjGRpxA8WWwcog7Ny/HlQVp6w8cTkKFTg/8KjIPnCBapACqcVA8DvW2Oym2gj1AtBv4YYfUMq3TEu4mXRkOJJVmAh7NCUHwLhEc4aXJBIqbW6JkrW0slp4+M4RmDR1e+A3GrFYXelb56QL3DRn/v55w+TZWXTMoZhYCD+Z9T66/ [TRUNCATED]
2024-10-30 07:46:33 UTC	269	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Content-Type: application/javascript Date: Wed, 30 Oct 2024 07:46:32 GMT server: MF 8700 S - Dyna-VT - Stage V All-in-One X-CDN-Forward: EdgeCast X-Robots-Tag: noindex Content-Length: 89646 Connection: close
2024-10-30 07:46:33 UTC	1264	IN	Data Raw: 76 61 72 20 5f 30 78 64 66 61 38 3d 5b 27 5c 78 34 35 5c 78 35 38 5c 78 36 36 5c 78 34 34 5c 78 36 39 5c 78 36 37 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 35 34 5c 78 36 33 5c 78 34 62 5c 78 37 32 5c 78 35 35 5c 78 34 35 5c 78 33 33 5c 78 34 34 5c 78 37 33 5c 78 36 33 5c 78 34 66 5c 78 37 38 5c 78 34 33 5c 78 35 34 5c 78 37 37 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 36 66 5c 78 34 63 5c 78 34 34 5c 78 37 35 5c 78 35 37 5c 78 37 37 5c 78 33 64 27 2c 27 5c 78 34 39 5c 78 37 33 5c 78 34 66 5c 78 34 32 5c 78 35 33 5c 78 34 31 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 35 34 5c 78 36 33 5c 78 34 66 5c 78 33 34 5c 78 35 37 5c 78 36 33 5c 78 34 66 5c 78 34 32 5c 78 35 32 5c 78 34 31 5c 78 34 35 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 33 36 5c 78 33 33 5c 78 34 33 5c 78 Data Ascii: var _0xdfa8=['\x45\x58\x66\x44\x69\x67\x3d\x3d','\x54\x63\x4b\x72\x55\x45\x33\x44\x73\x63\x4f\x78\x43\x54\x77\x3d','\x77\x6f\x4c\x44\x75\x57\x77\x3d','\x49\x73\x4f\x42\x53\x41\x3d\x3d','\x54\x63\x4f\x34\x57\x63\x4f\x42\x52\x41\x45\x3d','\x77\x36\x33\x43\x
2024-10-30 07:46:33 UTC	16383	IN	Data Raw: 37 35 5c 78 37 37 5c 78 37 30 5c 78 33 37 5c 78 34 33 5c 78 36 64 5c 78 37 37 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 36 66 5c 78 36 66 5c 78 36 63 5c 78 37 37 5c 78 36 66 5c 78 34 39 5c 78 33 64 27 2c 27 5c 78 36 36 5c 78 36 33 5c 78 34 62 5c 78 37 31 5c 78 35 31 5c 78 36 37 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 37 32 5c 78 37 34 5c 78 34 31 5c 78 36 35 5c 78 35 31 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 37 32 5c 78 34 38 5c 78 34 33 5c 78 36 61 5c 78 35 32 5c 78 36 33 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 37 30 5c 78 35 30 5c 78 34 33 5c 78 36 39 5c 78 33 38 5c 78 34 66 5c 78 33 37 5c 78 37 37 5c 78 36 66 5c 78 34 31 5c 78 33 64 27 2c 27 5c 78 34 62 5c 78 33 38 5c 78 34 66 5c 78 34 62 5c 78 34 36 5c 78 34 31 5c 78 35 Data Ascii: 75\x77\x70\x37\x43\x6d\x77\x3d\x3d','\x77\x6f\x6f\x6c\x77\x6f\x49\x3d','\x66\x63\x4b\x71\x51\x67\x3d\x3d','\x77\x72\x74\x41\x65\x51\x3d\x3d','\x77\x72\x48\x43\x6a\x52\x63\x3d','\x77\x70\x50\x43\x69\x38\x4f\x37\x77\x6f\x41\x3d','\x4b\x38\x4f\x4b\x46\x41\x5
2024-10-30 07:46:33 UTC	16383	IN	Data Raw: 78 37 33 5c 78 34 62 5c 78 35 32 5c 78 34 32 5c 78 36 33 5c 78 34 66 5c 78 35 38 5c 78 37 37 5c 78 37 32 5c 78 34 39 5c 78 36 38 5c 78 37 37 5c 78 36 66 5c 78 36 36 5c 78 34 34 5c 78 37 33 5c 78 37 37 5c 78 35 35 5c 78 37 34 5c 78 37 37 5c 78 33 36 5c 78 34 63 5c 78 34 34 5c 78 37 36 5c 78 36 65 5c 78 35 30 5c 78 34 34 5c 78 36 66 5c 78 35 37 5c 78 35 36 5c 78 37 38 5c 78 36 34 5c 78 34 37 5c 78 34 31 5c 78 34 37 5c 78 34 31 5c 78 35 33 5c 78 36 32 5c 78 34 33 5c 78 36 38 5c 78 34 31 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 33 37 5c 78 36 65 5c 78 34 34 5c 78 36 38 5c 78 35 36 5c 78 34 34 5c 78 34 34 5c 78 36 37 5c 78 34 38 5c 78 35 34 5c 78 34 34 5c 78 37 30 5c 78 34 31 5c 78 34 35 5c 78 34 65 5c 78 37 37 5c 78 33 34 5c 78 33 37 5c 78 34 33 5c Data Ascii: x73\x4b\x52\x42\x63\x4f\x58\x77\x72\x49\x68\x77\x6f\x66\x44\x73\x77\x55\x74\x77\x36\x4c\x44\x76\x6e\x50\x44\x6f\x57\x56\x78\x64\x47\x41\x47\x41\x53\x62\x43\x68\x41\x3d\x3d','\x77\x37\x6e\x44\x68\x56\x44\x44\x67\x48\x54\x44\x70\x41\x45\x4e\x77\x34\x37\x43\
2024-10-30 07:46:33 UTC	6379	IN	Data Raw: 35 39 5c 78 35 35 5c 78 37 37 5c 78 33 35 5c 78 34 64 5c 78 37 33 5c 78 37 37 5c 78 33 35 5c 78 33 39 5c 78 34 34 5c 78 34 64 5c 78 36 33 5c 78 34 62 5c 78 32 66 5c 78 37 37 5c 78 33 35 5c 78 33 38 5c 78 37 35 5c 78 36 36 5c 78 33 38 5c 78 34 66 5c 78 37 39 5c 78 35 39 5c 78 34 64 5c 78 34 62 5c 78 35 32 5c 78 37 37 5c 78 33 36 5c 78 37 61 5c 78 34 33 5c 78 36 62 5c 78 36 33 5c 78 34 62 5c 78 35 61 5c 78 34 63 5c 78 36 33 5c 78 34 62 5c 78 33 35 5c 78 34 34 5c 78 35 32 5c 78 36 32 5c 78 34 34 5c 78 36 64 5c 78 34 64 5c 78 34 62 5c 78 37 39 5c 78 35 34 5c 78 34 34 5c 78 35 38 5c 78 34 34 5c 78 37 36 5c 78 33 38 5c 78 34 62 5c 78 33 32 5c 78 34 31 5c 78 34 34 5c 78 35 31 5c 78 34 35 5c 78 37 37 5c 78 37 32 5c 78 35 34 5c 78 34 34 5c 78 37 35 5c 78 36 33 5c Data Ascii: 59\x55\x77\x35\x4d\x73\x77\x35\x39\x44\x4d\x63\x4b\x2f\x77\x35\x38\x75\x66\x38\x4f\x79\x59\x4d\x4b\x52\x77\x36\x7a\x43\x6b\x63\x4b\x5a\x4c\x63\x4b\x35\x44\x52\x62\x44\x6d\x4d\x4b\x79\x54\x44\x58\x44\x76\x38\x4b\x32\x41\x44\x51\x45\x77\x72\x54\x44\x75\x63\
2024-10-30 07:46:33 UTC	1452	IN	Data Raw: 78 36 35 27 5d 28 29 3b 7d 7d 3b 5f 30 78 31 62 36 36 35 35 28 29 3b 7d 28 5f 30 78 64 66 61 38 2c 30 78 31 36 37 29 29 3b 76 61 72 20 5f 30 78 38 64 66 61 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 30 39 37 61 35 2c 5f 30 78 31 35 37 36 64 62 29 7b 5f 30 78 32 30 39 37 61 35 3d 5f 30 78 32 30 39 37 61 35 2d 30 78 30 3b 76 61 72 20 5f 30 78 32 35 37 62 31 38 3d 5f 30 78 64 66 61 38 5b 5f 30 78 32 30 39 37 61 35 5d 3b 69 66 28 5f 30 78 38 64 66 61 5b 27 5c 78 36 39 5c 78 36 65 5c 78 36 39 5c 78 37 34 5c 78 36 39 5c 78 36 31 5c 78 36 63 5c 78 36 39 5c 78 37 61 5c 78 36 35 5c 78 36 34 27 5d 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 5f 30 78 33 39 38 61 38 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e Data Ascii: x65']();}};_0x1b6655();}(_0xdfa8,0x167));var _0x8dfa=function(_0x2097a5,_0x1576db){_0x2097a5=_0x2097a5-0x0;var _0x257b18=_0xdfa8[_0x2097a5];if(_0x8dfa['\x69\x6e\x69\x74\x69\x61\x6c\x69\x7a\x65\x64']===undefined){(function(){var _0x398a8d=function(){return
2024-10-30 07:46:33 UTC	10164	IN	Data Raw: 5c 78 36 35 5c 78 34 31 5c 78 37 34 27 5d 28 5f 30 78 34 38 63 37 35 36 29 5b 27 5c 78 37 34 5c 78 36 66 5c 78 35 33 5c 78 37 34 5c 78 37 32 5c 78 36 39 5c 78 36 65 5c 78 36 37 27 5d 28 30 78 31 30 29 29 5b 27 5c 78 37 33 5c 78 36 63 5c 78 36 39 5c 78 36 33 5c 78 36 35 27 5d 28 2d 30 78 32 29 3b 7d 5f 30 78 31 64 61 36 34 31 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 5f 30 78 32 62 35 37 63 33 29 3b 66 6f 72 28 76 61 72 20 5f 30 78 35 36 61 34 38 35 3d 30 78 30 3b 5f 30 78 35 36 61 34 38 35 3c 30 78 31 30 30 3b 5f 30 78 35 36 61 34 38 35 2b 2b 29 7b 5f 30 78 32 64 35 30 33 61 5b 5f 30 78 35 36 61 34 38 35 5d 3d 5f 30 78 35 36 61 34 38 35 3b 7d 66 6f 72 28 5f 30 78 35 36 61 34 38 35 3d 30 78 30 3b 5f 30 78 35 36 61 34 38 35 3c 30 78 31 30 Data Ascii: \x65\x41\x74'](_0x48c756)['\x74\x6f\x53\x74\x72\x69\x6e\x67'](0x10))['\x73\x6c\x69\x63\x65'](-0x2);}_0x1da641=decodeURIComponent(_0x2b57c3);for(var _0x56a485=0x0;_0x56a485<0x100;_0x56a485++){_0x2d503a[_0x56a485]=_0x56a485;}for(_0x56a485=0x0;_0x56a485<0x10
2024-10-30 07:46:33 UTC	16383	IN	Data Raw: 32 33 5c 78 35 65 5c 78 32 61 27 29 5d 28 5f 30 78 31 34 32 35 38 34 5b 5f 30 78 38 64 66 61 28 27 30 78 32 63 27 2c 20 27 5c 78 33 38 5c 78 36 38 5c 78 33 33 5c 78 34 31 27 29 5d 28 5f 30 78 65 36 36 34 66 62 2c 30 78 33 29 2c 30 78 34 29 29 3b 5f 30 78 32 63 36 65 62 32 2b 3d 27 5c 78 33 64 5c 78 33 64 27 3b 62 72 65 61 6b 3b 7d 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 5c 78 33 36 27 3a 5f 30 78 32 63 36 65 62 32 2b 3d 5f 30 78 35 66 30 32 39 37 5b 5f 30 78 38 64 66 61 28 27 30 78 32 64 27 2c 20 27 5c 78 32 31 5c 78 32 35 5c 78 37 36 5c 78 37 36 27 29 5d 28 5f 30 78 31 34 32 35 38 34 5b 5f 30 78 38 64 66 61 28 27 30 78 32 65 27 2c 20 27 5c 78 37 39 5c 78 36 33 5c 78 34 31 5c 78 32 33 27 29 5d 28 5f 30 78 31 34 32 35 38 34 5b 5f 30 78 38 64 66 61 28 27 Data Ascii: 23\x5e\x2a')](_0x142584[_0x8dfa('0x2c', '\x38\x68\x33\x41')](_0xe664fb,0x3),0x4));_0x2c6eb2+='\x3d\x3d';break;}continue;case'\x36':_0x2c6eb2+=_0x5f0297[_0x8dfa('0x2d', '\x21\x25\x76\x76')](_0x142584[_0x8dfa('0x2e', '\x79\x63\x41\x23')](_0x142584[_0x8dfa('
2024-10-30 07:46:33 UTC	16383	IN	Data Raw: 78 32 62 38 32 32 39 3b 7d 2c 27 5c 78 35 61 5c 78 36 39 5c 78 34 34 27 3a 66 75 6e 63 74 69 6f 6e 20 5f 30 78 31 65 36 35 34 61 28 5f 30 78 33 34 65 35 36 64 2c 5f 30 78 34 64 35 65 66 61 29 7b 72 65 74 75 72 6e 20 5f 30 78 33 34 65 35 36 64 2b 5f 30 78 34 64 35 65 66 61 3b 7d 2c 27 5c 78 37 31 5c 78 34 39 5c 78 35 33 27 3a 66 75 6e 63 74 69 6f 6e 20 5f 30 78 32 39 39 63 63 38 28 5f 30 78 34 32 62 35 30 63 2c 5f 30 78 36 35 31 61 64 32 29 7b 72 65 74 75 72 6e 20 5f 30 78 34 32 62 35 30 63 28 5f 30 78 36 35 31 61 64 32 29 3b 7d 2c 27 5c 78 37 30 5c 78 36 32 5c 78 34 61 27 3a 66 75 6e 63 74 69 6f 6e 20 5f 30 78 63 34 64 32 39 36 28 5f 30 78 32 65 62 33 33 38 2c 5f 30 78 35 61 63 66 33 34 29 7b 72 65 74 75 72 6e 20 5f 30 78 32 65 62 33 33 38 2b 5f 30 78 35 Data Ascii: x2b8229;},'\x5a\x69\x44':function _0x1e654a(_0x34e56d,_0x4d5efa){return _0x34e56d+_0x4d5efa;},'\x71\x49\x53':function _0x299cc8(_0x42b50c,_0x651ad2){return _0x42b50c(_0x651ad2);},'\x70\x62\x4a':function _0xc4d296(_0x2eb338,_0x5acf34){return _0x2eb338+_0x5
2024-10-30 07:46:33 UTC	4855	IN	Data Raw: 3b 7d 5d 2c 5b 5f 30 78 38 64 66 61 28 27 30 78 31 61 39 27 2c 20 27 5c 78 37 32 5c 78 34 32 5c 78 33 32 5c 78 34 31 27 29 2c 5f 30 78 38 64 66 61 28 27 30 78 31 37 31 27 2c 20 27 5c 78 36 63 5c 78 36 64 5c 78 36 65 5c 78 35 64 27 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 5b 5f 30 78 38 64 66 61 28 27 30 78 31 61 61 27 2c 20 27 5c 78 33 30 5c 78 35 62 5c 78 35 64 5c 78 37 37 27 29 5d 3b 7d 5d 2c 5b 5f 30 78 38 64 66 61 28 27 30 78 31 61 62 27 2c 20 27 5c 78 34 31 5c 78 37 35 5c 78 33 33 5c 78 33 31 27 29 2c 5f 30 78 38 64 66 61 28 27 30 78 31 61 63 27 2c 20 27 5c 78 36 63 5c 78 36 64 5c 78 36 65 5c 78 35 64 27 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 30 78 33 30 37 30 37 32 5b 5f 30 78 38 64 66 61 Data Ascii: ;}],[_0x8dfa('0x1a9', '\x72\x42\x32\x41'),_0x8dfa('0x171', '\x6c\x6d\x6e\x5d'),function(){return window[_0x8dfa('0x1aa', '\x30\x5b\x5d\x77')];}],[_0x8dfa('0x1ab', '\x41\x75\x33\x31'),_0x8dfa('0x1ac', '\x6c\x6d\x6e\x5d'),function(){return _0x307072[_0x8dfa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	49871	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:32 UTC	6365	OUT	GET /components/footer/assets/images/logo-fevad.jpg HTTP/1.1 Host: all.accor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://all.accor.com/a/en/new-app-offer/app-download.html?source_caller=bulk&af_qr=true&shortlink=5m1nc8of&c=20241013_ALL_AppBonusingMobileLp&af_ad=QR_code_20241013_ALL_AppBonusingMobileLp&pid=QR_code&deep_link_value=accor%3A%2F%2Fsearch%2Foffer%3Fpage_id%3Dddc8e830-2fc5-4492-ae7f-a63574b202f4&af_adset=EN Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=uXhrmD2Na/K1uglc4DSccWmUi3lwT6U0aN5NKqvcu8d5WGWybG4+Fjgl4ne6nVjifX1jzgyPIuRTBhS6nanmMOLamS/KiojPrxeLcFng8UzPO+81sa87bs4RFhGAg5SdnTRio+RJdn41ZezkVQzm+QQNKVTMJBE8fIzHUqlLtmYsp4GqzAo9Tqkn29+6s06cnyhW9Bg2AjaE3z+uY1Kha+K1N+xGE1wxY+ov1hMjJJFJQKo0Zzr8yVUmc0uGx6VyOI/GCYB98MMi2baM/noo1d0GCT/eTJnamWBVosFVl6rGjGRpxA8WWwcog7Ny/HlQVp6w8cTkKFTg/8KjIPnCBapACqcVA8DvW2Oym2gj1AtBv4YYfUMq3TEu4mXRkOJJVmAh7NCUHwLhEc4aXJBIqbW6JkrW0slp4+M4RmDR1e+A3GrFYXelb56QL3DRn/v55w+TZWXTMoZhYCD+Z9T66/ [TRUNCATED] If-Modified-Since: Wed, 16 Oct 2024 09:39:23 GMT
2024-10-30 07:46:33 UTC	629	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Age: 161100 Cache-control: public, max-age=3600, stale-while-revalidate=21600 Date: Wed, 30 Oct 2024 07:46:32 GMT Last-Modified: Wed, 16 Oct 2024 09:39:23 GMT P3P: CP="NO P3P POLICY" Referrer-Policy: origin Server: ECAcc (lhd/3585) Strict-Transport-Security: max-age=15552000 Strict-Transport-Security: max-age=15552000 Vary: Accept-Encoding X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Clacks-Overhead: GNU Terry Pratchett X-Iinfo: 18-26261679-26229307 pNNy RT(1730113291979 10) q(0 1 1 6) r(1 1) U24 X-XSS-Protection: 1; mode=block Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	49875	35.240.103.94	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:33 UTC	551	OUT	OPTIONS /referential/v1/pos//currencies?groupByContinent=true HTTP/1.1 Host: api.accor.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: apikey,content-type Origin: https://all.accor.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://all.accor.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 07:46:33 UTC	946	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 07:46:33 GMT Content-Type: application/json Content-Length: 13238 Connection: close Server: CloudFront X-Cache: Hit from cloudfront Via: 1.1 9857ab0da41c7a88865f55b9cdc654ac.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BRU50-P1 X-Amz-Cf-Id: YmNW52Dcha5mhTchjhDavK0mNHKFxD0qWd1FLTroY3K5LCgFhjBGMw== Age: 3580 Access-Control-Allow-Origin: https://all.accor.com Access-Control-Allow-Headers: accept,apikey,clientid,origin,Content-Type,consumerType,hmac,applicationId,Target-Env,raw,apsmKey,apsrKey,x-version,Authorization,cache-control,jwtoken,appId,traceid,x-traceid,x-origin,uidTokenLight,x-xsrf-token,x-target-env,identification-token,lang,country,app-id,x-trace-id,caller,x-origin,x-caller,x-traceid,uuid,X-Authenticated-Client-ID,X-Authenticated-User-ID,partnercode Access-Control-Max-Age: 3628800 Access-Control-Allow-Methods: GET, POST, PUT, DELETE Access-Control-Allow-Credentials: true
2024-10-30 07:46:33 UTC	13238	IN	Data Raw: 5b 7b 22 63 6f 6e 74 69 6e 65 6e 74 43 6f 64 65 22 3a 22 61 66 72 69 63 61 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 4c 61 62 65 6c 22 3a 22 41 66 72 69 63 61 20 2d 20 4d 69 64 64 6c 65 20 45 61 73 74 22 2c 22 63 75 72 72 65 6e 63 79 4c 69 73 74 22 3a 5b 7b 22 63 75 72 72 65 6e 63 79 43 6f 64 65 22 3a 22 44 5a 44 22 2c 22 63 75 72 72 65 6e 63 79 4c 61 62 65 6c 22 3a 22 41 6c 67 65 72 69 61 6e 20 44 69 6e 61 72 22 2c 22 63 75 72 72 65 6e 63 79 53 79 6d 62 6f 6c 22 3a 22 d8 af 2e d8 ac 22 2c 22 61 63 63 6f 72 43 6f 75 6e 74 72 79 43 6f 64 65 22 3a 5b 22 61 6c 67 65 72 69 61 22 5d 2c 22 69 73 6f 43 6f 75 6e 74 72 79 43 6f 64 65 22 3a 5b 22 64 7a 22 5d 7d 2c 7b 22 63 75 72 72 65 6e 63 79 43 6f 64 65 22 3a 22 41 4f 41 22 2c 22 63 75 72 72 65 6e 63 79 4c 61 62 65 6c Data Ascii: [{"continentCode":"africa","continentLabel":"Africa - Middle East","currencyList":[{"currencyCode":"DZD","currencyLabel":"Algerian Dinar","currencySymbol":".","accorCountryCode":["algeria"],"isoCountryCode":["dz"]},{"currencyCode":"AOA","currencyLabel

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	49877	45.60.155.180	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:33 UTC	3483	OUT	GET /as/authorization.oauth2?client_id=all.accor&response_type=code&accorregister=false&request=eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJjbGllbnRfaWQiOiJhbGwuYWNjb3IiLCJyZXNwb25zZV90eXBlIjoiY29kZSIsInJlZGlyZWN0X3VyaSI6Imh0dHBzOi8vYWxsLmFjY29yLmNvbS9lbnJvbGwtbG95YWx0eS9jaGVjay1hdXRoZW50Lmh0bWw_YXBwSWQ9YWxsLmFjY29yIiwic2NvcGUiOiJvcGVuaWQgQVBJV0VCLlVTRVIuQUxMIEFQU1IuQUxMIiwicHJvbXB0Ijoibm9uZSIsInN0YXRlIjoiOTQzMTU5YmZmM2UyODM0N2E1NzZiNCIsIm5vbmNlIjoiZjJiNTM0ZWViYzY1MGJmZjI3NDJmMCIsImV4cCI6MTczMDI3NjE5MiwiaWF0IjoxNzMwMjc0MzkyfQ.Ol8o9CD0gi2mEfGt4p-2D2dm40hKH0kbxSF5f5RnJxiASxPmciJCNWVLYzD_Ju8vWMvvRBvf616h8cG5hDiZzj7dts_dw5hoSwkHCV7l_Gj3FIUds8Tg7lWkkGHvYFP0xQleWQkubTwZ3eDglRjEHt3gNX9gLKhGIzZkLWkU8sYNiYMlg_e0cbk6dk0ax-3HSszRKV9QGVlx6v2TYUEG-zCGGIFYq1j7w3_AqrNXpdXKmLkYEm34j_pM0QLsNr2ckvWPCle0HiRuZOptsqqupb-CVOTLITv2BsV1Qay30fxSgFjqJie5-UuMfkmAb7_1Sf-CJlnoJaKRQzwEKN-K6A&prompt=none HTTP/1.1 Host: login.accor.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://all.accor.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: org=evy; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; visid_incap_2545443=x63MuavjQSixxrfQIYQ8PVHkIWcAAAAAQUIPAAAAAAD7hEgkFIFfLMg2zvFAlnfu; incap_ses_170_2545443=JXk2KzhmDUb9sg2vRfZbAlHkIWcAAAAAZwwpmYkZ8jK3gatMO3ubIQ==; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjoiQUgiLCJyZXRhaW5lZG1lcmNoYW50aWQiOiJBSCJ9; PF=rzKdP15zeTktpJEnKeJiir; nlbi_2545443_2409386=KQ4PXT8ThySMkp7Cfgr57wAAAAC8n1r1/3YJSkZts8tTePag; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+30+2024+03%3A46%3A29+GMT-0400+(Eastern+Daylight+Time)&version=202409.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&genVendors=V62%3A0%2CV37%3A0%2CV67%3A0%2CV38%3A0%2CV64%3A0%2CV58%3A0%2CV25%3A0%2CV26%3A0%2CV42%3A0%2CV9%3A0%2CV8%3A0%2CV27%3A0%2CV51%3A0%2CV39%3A0%2CV23%3A0%2CV55%3A0%2C [TRUNCATED]
2024-10-30 07:46:34 UTC	832	IN	HTTP/1.1 302 Found Date: Wed, 30 Oct 2024 07:46:34 GMT Content-Type: text/html;charset=utf-8 Content-Length: 0 Connection: close X-Frame-Options: SAMEORIGIN Referrer-Policy: origin Cache-Control: no-cache, no-store Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Set-Cookie: PF=rzKdP15zeTktpJEnKeJiir; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: pfidpaid=; Path=/; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; HttpOnly; SameSite=None Location: https://all.accor.com/enroll-loyalty/check-authent.html?appId=all.accor&error_description=Authentication+is+required.&state=943159bff3e28347a576b4&error=login_required#. Strict-Transport-Security: max-age=31536000; includeSubDomains X-CDN: Imperva X-Iinfo: 59-25145564-25145718 NNNY CT(156 163 0) RT(1730274393346 556) q(0 0 0 -1) r(1 1) U5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	49876	35.240.103.94	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:33 UTC	2958	OUT	GET /referential/v1/pos/countries?siteCode=all HTTP/1.1 Host: api.accor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" content-type: application/json apikey: LJreOkXhuneMHZaeenwDZAl8DKlZGdDO sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://all.accor.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://all.accor.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: org=evy; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; OAU_all.accor=eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJhcHBfaWQiOiJhbGwuYWNjb3IiLCJzdGF0ZSI6ImYzNTYwZWQyYThjNDZhZjQxOTllZjgiLCJub25jZSI6IjIxZDBhMGU1ZWQ4YzU2NTZkZjI4ZjYiLCJyZWRpcmVjdF9zaXRlX3VyaSI6Imh0dHBzOi8vYWxsLmFjY29yLmNvbSIsInByb21wdCI6Im5vbmUiLCJleHAiOjE3MzAyNzYxODQsImlhdCI6MTczMDI3NDM4NH0.T264QRl7YWH19MgynN8-Xaq1G1flI3hkXf6P-98bxX9zquvQYl9l1yVvirNK7SO9IARz9C1cgTuaozOE3ITULDlEyLbPAquuYSLfESRfVzyb0HFEhbkdMISJ5nmsUq2QiYFJRgGSRoU7UjHDLoo8646JuA_ZnO1550QeNYS8xuV9EoK4B4oFEgezMDX9rf6Or31D63HUbbL51dSeHY26E7TwHYN6SeodaZL7NeaUEJN-G93F7ktNq824Z5C11HTL2mkWUM6Aaz0nua4XKjGekRh9_QQpoOau3wMyp586RfBxn38C0agFPUi7WA_4FusMHRg-90n9XBuE3e_0KE46Uw; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjo [TRUNCATED]
2024-10-30 07:46:34 UTC	460	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 07:46:34 GMT Content-Type: application/json Content-Length: 33138 Connection: close Server: CloudFront X-Cache: Hit from cloudfront Via: 1.1 20bac96d0c0df74d5e600294d22661e6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BRU50-P1 X-Amz-Cf-Id: o09o40g2U87880hOYmas0hygUIcF7pC2FMsGNHFgAUeK9RZ-eY6SEA== Age: 8 Access-Control-Allow-Credentials: true Vary: Origin Access-Control-Allow-Origin: https://all.accor.com
2024-10-30 07:46:34 UTC	15924	IN	Data Raw: 5b 7b 22 63 6f 6e 74 69 6e 65 6e 74 43 6f 64 65 22 3a 22 61 66 72 69 63 61 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 4c 61 62 65 6c 22 3a 22 41 66 72 69 63 61 20 2d 20 4d 69 64 64 6c 65 20 45 61 73 74 22 2c 22 63 6f 75 6e 74 72 79 4c 69 73 74 22 3a 5b 7b 22 61 63 63 6f 72 43 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 61 6c 67 65 72 69 61 22 2c 22 61 63 63 6f 72 43 6f 75 6e 74 72 79 4c 61 62 65 6c 22 3a 22 41 6c 67 65 72 69 61 22 2c 22 61 63 63 6f 72 43 6f 75 6e 74 72 79 4c 61 6e 67 75 61 67 65 4c 61 62 65 6c 22 3a 22 41 6c 67 65 72 69 61 20 2d 20 45 6e 67 6c 69 73 68 22 2c 22 68 6f 6d 65 70 61 67 65 55 72 6c 22 3a 22 2f 61 2f 65 6e 2e 68 74 6d 6c 22 2c 22 69 73 6f 43 6f 75 6e 74 72 79 43 6f 64 65 22 3a 5b 22 64 7a 22 5d 2c 22 6c 61 6e 67 75 61 67 65 43 6f 64 65 22 Data Ascii: [{"continentCode":"africa","continentLabel":"Africa - Middle East","countryList":[{"accorCountryCode":"algeria","accorCountryLabel":"Algeria","accorCountryLanguageLabel":"Algeria - English","homepageUrl":"/a/en.html","isoCountryCode":["dz"],"languageCode"
2024-10-30 07:46:34 UTC	16384	IN	Data Raw: 75 61 67 65 43 6f 64 65 22 3a 22 65 6e 22 2c 22 6c 61 6e 67 75 61 67 65 4c 61 62 65 6c 22 3a 22 45 6e 67 6c 69 73 68 22 2c 22 70 6f 69 6e 74 4f 66 53 61 6c 65 22 3a 22 75 73 61 22 2c 22 6f 72 64 65 72 49 64 22 3a 31 36 32 7d 2c 7b 22 61 63 63 6f 72 43 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 75 6e 69 74 65 64 2d 73 74 61 74 65 73 2d 6f 66 2d 61 6d 65 72 69 63 61 22 2c 22 61 63 63 6f 72 43 6f 75 6e 74 72 79 4c 61 62 65 6c 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 20 6f 66 20 41 6d 65 72 69 63 61 22 2c 22 61 63 63 6f 72 43 6f 75 6e 74 72 79 4c 61 6e 67 75 61 67 65 4c 61 62 65 6c 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 20 6f 66 20 41 6d 65 72 69 63 61 20 2d 20 45 6e 67 6c 69 73 68 22 2c 22 68 6f 6d 65 70 61 67 65 55 72 6c 22 3a 22 2f 61 2f 65 6e Data Ascii: uageCode":"en","languageLabel":"English","pointOfSale":"usa","orderId":162},{"accorCountryCode":"united-states-of-america","accorCountryLabel":"United States of America","accorCountryLanguageLabel":"United States of America - English","homepageUrl":"/a/en
2024-10-30 07:46:34 UTC	830	IN	Data Raw: 79 4c 61 6e 67 75 61 67 65 4c 61 62 65 6c 22 3a 22 d0 a0 d0 be d1 81 d1 81 d0 b8 d1 8f 22 2c 22 68 6f 6d 65 70 61 67 65 55 72 6c 22 3a 22 2f 61 2f 72 75 2e 68 74 6d 6c 22 2c 22 69 73 6f 43 6f 75 6e 74 72 79 43 6f 64 65 22 3a 5b 22 72 75 22 2c 22 61 6d 22 2c 22 61 7a 22 2c 22 62 79 22 2c 22 6b 67 22 2c 22 74 6a 22 2c 22 74 6d 22 2c 22 75 7a 22 5d 2c 22 6c 61 6e 67 75 61 67 65 43 6f 64 65 22 3a 22 72 75 22 2c 22 6c 61 6e 67 75 61 67 65 4c 61 62 65 6c 22 3a 22 d0 a0 d1 83 d1 81 d1 81 d0 ba d0 b8 d0 b9 22 2c 22 70 6f 69 6e 74 4f 66 53 61 6c 65 22 3a 22 72 75 73 73 69 61 22 2c 22 6f 72 64 65 72 49 64 22 3a 31 33 33 7d 2c 7b 22 61 63 63 6f 72 43 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 75 6b 72 61 69 6e 65 22 2c 22 61 63 63 6f 72 43 6f 75 6e 74 72 79 4c 61 62 65 Data Ascii: yLanguageLabel":"","homepageUrl":"/a/ru.html","isoCountryCode":["ru","am","az","by","kg","tj","tm","uz"],"languageCode":"ru","languageLabel":"","pointOfSale":"russia","orderId":133},{"accorCountryCode":"ukraine","accorCountryLabe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	49878	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:34 UTC	6104	OUT	GET /enroll-loyalty/assets/axios-CJFUd36b.js HTTP/1.1 Host: all.accor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://all.accor.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://all.accor.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=uXhrmD2Na/K1uglc4DSccWmUi3lwT6U0aN5NKqvcu8d5WGWybG4+Fjgl4ne6nVjifX1jzgyPIuRTBhS6nanmMOLamS/KiojPrxeLcFng8UzPO+81sa87bs4RFhGAg5SdnTRio+RJdn41ZezkVQzm+QQNKVTMJBE8fIzHUqlLtmYsp4GqzAo9Tqkn29+6s06cnyhW9Bg2AjaE3z+uY1Kha+K1N+xGE1wxY+ov1hMjJJFJQKo0Zzr8yVUmc0uGx6VyOI/GCYB98MMi2baM/noo1d0GCT/eTJnamWBVosFVl6rGjGRpxA8WWwcog7Ny/HlQVp6w8cTkKFTg/8KjIPnCBapACqcVA8DvW2Oym2gj1AtBv4YYfUMq3TEu4mXRkOJJVmAh7NCUHwLhEc4aXJBIqbW6JkrW0slp4+M4RmDR1e+A3GrFYXelb56QL3DRn/v55w+TZWXTMoZhYCD+Z9T66/ [TRUNCATED]
2024-10-30 07:46:34 UTC	863	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: authorization, content-type, x-requested-with Access-Control-Allow-Methods: PUT, GET, POST, DELETE, OPTIONS Access-Control-Allow-Origin: https://all.accor.com Age: 161144 Cache-control: public, max-age=3600, stale-while-revalidate=21600 Content-Type: text/javascript Date: Wed, 30 Oct 2024 07:46:34 GMT Last-Modified: Mon, 28 Oct 2024 11:00:50 GMT P3P: CP="NO P3P POLICY" Referrer-Policy: origin Server: ECAcc (lhd/35E7) Strict-Transport-Security: max-age=15552000 Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Clacks-Overhead: GNU Terry Pratchett X-Iinfo: 18-214202022-214187733 pNNy RT(1730113249926 5) q(0 0 0 0) r(0 0) U24 X-XSS-Protection: 1; mode=block Content-Length: 36174 Connection: close
2024-10-30 07:46:34 UTC	16383	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6c 69 6e 6b 22 29 2e 72 65 6c 4c 69 73 74 3b 69 66 28 74 26 26 74 2e 73 75 70 70 6f 72 74 73 26 26 74 2e 73 75 70 70 6f 72 74 73 28 22 6d 6f 64 75 6c 65 70 72 65 6c 6f 61 64 22 29 29 72 65 74 75 72 6e 3b 66 6f 72 28 63 6f 6e 73 74 20 73 20 6f 66 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 6c 69 6e 6b 5b 72 65 6c 3d 22 6d 6f 64 75 6c 65 70 72 65 6c 6f 61 64 22 5d 27 29 29 72 28 73 29 3b 6e 65 77 20 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 28 73 3d 3e 7b 66 6f 72 28 63 6f 6e 73 74 20 69 20 6f 66 20 73 29 69 66 28 69 2e 74 79 70 65 3d 3d 3d 22 63 68 69 6c 64 4c 69 73 74 22 29 66 6f Data Ascii: (function(){const t=document.createElement("link").relList;if(t&&t.supports&&t.supports("modulepreload"))return;for(const s of document.querySelectorAll('link[rel="modulepreload"]'))r(s);new MutationObserver(s=>{for(const i of s)if(i.type==="childList")fo
2024-10-30 07:46:34 UTC	1	IN	Data Raw: 6d Data Ascii: m
2024-10-30 07:46:34 UTC	16383	IN	Data Raw: 65 20 6d 75 73 74 20 62 65 20 61 20 6e 6f 6e 2d 65 6d 70 74 79 20 73 74 72 69 6e 67 22 29 3b 63 6f 6e 73 74 20 70 3d 61 2e 66 69 6e 64 4b 65 79 28 73 2c 75 29 3b 28 21 70 7c 7c 73 5b 70 5d 3d 3d 3d 76 6f 69 64 20 30 7c 7c 66 3d 3d 3d 21 30 7c 7c 66 3d 3d 3d 76 6f 69 64 20 30 26 26 73 5b 70 5d 21 3d 3d 21 31 29 26 26 28 73 5b 70 7c 7c 6c 5d 3d 4d 28 63 29 29 7d 63 6f 6e 73 74 20 6f 3d 28 63 2c 6c 29 3d 3e 61 2e 66 6f 72 45 61 63 68 28 63 2c 28 66 2c 75 29 3d 3e 69 28 66 2c 75 2c 6c 29 29 3b 69 66 28 61 2e 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 28 74 29 7c 7c 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 6f 28 74 2c 6e 29 3b 65 6c 73 65 20 69 66 28 61 2e 69 73 53 74 72 69 6e 67 28 74 29 26 26 28 74 3d 74 2e 74 72 Data Ascii: e must be a non-empty string");const p=a.findKey(s,u);(!p\|\|s[p]===void 0\|\|f===!0\|\|f===void 0&&s[p]!==!1)&&(s[p\|\|l]=M(c))}const o=(c,l)=>a.forEach(c,(f,u)=>i(f,u,l));if(a.isPlainObject(t)\|\|t instanceof this.constructor)o(t,n);else if(a.isString(t)&&(t=t.tr
2024-10-30 07:46:34 UTC	3407	IN	Data Raw: 79 7b 79 3d 64 28 79 29 7d 63 61 74 63 68 28 67 29 7b 6d 2e 63 61 6c 6c 28 74 68 69 73 2c 67 29 3b 62 72 65 61 6b 7d 7d 74 72 79 7b 75 3d 54 65 2e 63 61 6c 6c 28 74 68 69 73 2c 79 29 7d 63 61 74 63 68 28 64 29 7b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 65 6a 65 63 74 28 64 29 7d 66 6f 72 28 70 3d 30 2c 62 3d 66 2e 6c 65 6e 67 74 68 3b 70 3c 62 3b 29 75 3d 75 2e 74 68 65 6e 28 66 5b 70 2b 2b 5d 2c 66 5b 70 2b 2b 5d 29 3b 72 65 74 75 72 6e 20 75 7d 67 65 74 55 72 69 28 74 29 7b 74 3d 46 28 74 68 69 73 2e 64 65 66 61 75 6c 74 73 2c 74 29 3b 63 6f 6e 73 74 20 6e 3d 76 65 28 74 2e 62 61 73 65 55 52 4c 2c 74 2e 75 72 6c 29 3b 72 65 74 75 72 6e 20 71 65 28 6e 2c 74 2e 70 61 72 61 6d 73 2c 74 2e 70 61 72 61 6d 73 53 65 72 69 61 6c 69 7a 65 72 29 7d 7d 61 Data Ascii: y{y=d(y)}catch(g){m.call(this,g);break}}try{u=Te.call(this,y)}catch(d){return Promise.reject(d)}for(p=0,b=f.length;p<b;)u=u.then(f[p++],f[p++]);return u}getUri(t){t=F(this.defaults,t);const n=ve(t.baseURL,t.url);return qe(n,t.params,t.paramsSerializer)}}a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	49880	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:34 UTC	6379	OUT	GET /enroll-loyalty/check-authent.html?appId=all.accor&error_description=Authentication+is+required.&state=943159bff3e28347a576b4&error=login_required HTTP/1.1 Host: all.accor.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://all.accor.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; incap_ses_1388_3039981=WwV9UFsZYQbcTBz5zCpDE0/kIWcAAAAAAlW7vDjSIvNuKK2ooaDNBg==; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; incap_ses_1237_3039981=RMkdawpcO0pafv9zF7UqEVDkIWcAAAAAOdDq+0nC/oeq6w4fyTL3Fg==; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJl [TRUNCATED]
2024-10-30 07:46:34 UTC	798	IN	HTTP/1.1 200 OK Age: 161143 Cache-control: private, max-age=3600, stale-while-revalidate=21600 Content-Security-Policy: frame-ancestors https://*.accor.com Content-Type: text/html; charset=utf-8 Date: Wed, 30 Oct 2024 07:46:34 GMT Last-Modified: Mon, 28 Oct 2024 11:00:51 GMT P3P: CP="NO P3P POLICY" Referrer-Policy: origin Server: ECAcc (lhd/35DA) Strict-Transport-Security: max-age=15552000 Strict-Transport-Security: max-age=15552000 Vary: Accept-Encoding X-Accor-asset: ecom X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Clacks-Overhead: GNU Terry Pratchett X-Iinfo: 14-82680703-82658554 pNNN RT(1730113251484 3) q(0 0 0 -1) r(1 1) U24 X-OneAgent-JS-Injection: true X-ruxit-JS-Agent: true X-XSS-Protection: 1; mode=block Content-Length: 2649 Connection: close
2024-10-30 07:46:34 UTC	2649	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 2f 72 75 78 69 74 61 67 65 6e 74 6a 73 5f 49 43 41 37 4e 56 66 68 71 72 75 78 5f 31 30 32 38 35 32 34 30 33 30 37 31 30 31 34 30 37 2e 6a 73 22 20 64 61 74 61 2d 64 74 63 6f 6e 66 69 67 3d 22 72 69 64 3d 52 49 44 5f 2d 31 38 36 39 34 30 37 32 39 35 7c 72 70 69 64 3d 2d 38 39 36 37 36 37 35 38 33 7c 64 6f 6d 61 69 6e 3d 61 63 63 6f 72 2e 63 6f 6d 7c 72 65 70 6f 72 74 55 72 6c 3d 2f 72 62 5f 38 30 62 65 39 36 33 66 2d 61 38 35 39 2d 34 38 30 38 2d 39 62 32 61 2d 63 65 62 38 64 34 34 64 66 37 33 38 7c 61 70 70 3d 30 64 61 65 32 37 Data Ascii: <!doctype html><html lang="en"> <head><script type="text/javascript" src="/ruxitagentjs_ICA7NVfhqrux_10285240307101407.js" data-dtconfig="rid=RID_-1869407295\|rpid=-896767583\|domain=accor.com\|reportUrl=/rb_80be963f-a859-4808-9b2a-ceb8d44df738\|app=0dae27

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	49882	151.101.3.10	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:34 UTC	2083	OUT	GET /accorApi/header?brand=all&lang=en&pos=usa HTTP/1.1 Host: aem-api.accor.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: org=evy; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjoiQUgiLCJyZXRhaW5lZG1lcmNoYW50aWQiOiJBSCJ9; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+30+2024+03%3A46%3A29+GMT-0400+(Eastern+Daylight+Time)&version=202409.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&genVendors=V62%3A0%2CV37%3A0%2CV67%3A0%2CV38%3A0%2CV64%3A0%2CV58%3A0%2CV25%3A0%2CV26%3A0%2CV42%3A0%2CV9%3A0%2CV8%3A0%2CV27%3A0%2CV51%3A0%2CV39%3A0%2CV23%3A0%2CV55%3A0%2CV5%3A0%2CV34%3A0%2CV10%3A0%2CV53%3A0%2CV59%3A0%2CV74%3A0%2CV36%3A0%2CV49%3A0%2CV65%3A0%2CV19%3A0%2CV33%3A0%2CV57%3A0%2CV52%3A0%2CV48%3A0%2CV29%3A0%2CV17%3A0%2CV11%3A0%2CV56%3A0%2CV12%3A0%2CV72%3A0%2CV13%3A0%2CV41%3A0%2CV40%3A0%2CV68%3A0%2CV60%3A0%2CV50%3A0%2CV15%3 [TRUNCATED]
2024-10-30 07:46:35 UTC	589	IN	HTTP/1.1 200 OK Connection: close Content-Length: 9475 x-frame-options: SAMEORIGIN x-frame-options: SAMEORIGIN x-sky-isauth: 0 cache-control: public, max-age=600 x-vhost: prod-apiaccor-publish content-type: application/json;charset=utf-8 X-Content-Type-Options: nosniff Accept-Ranges: bytes Age: 0 Date: Wed, 30 Oct 2024 07:46:35 GMT Strict-Transport-Security: max-age=31557600 set-cookie: affinity="b37584db3bc770ad"; Path=/; HttpOnly; secure X-Served-By: cache-dfw-ktki8620054-DFW X-Cache: MISS X-Timer: S1730274395.558341,VS0,VS0,VE523 Vary: Accept-Encoding,Origin
2024-10-30 07:46:35 UTC	1378	IN	Data Raw: 5b 7b 22 69 64 22 3a 22 69 74 65 6d 30 22 2c 22 74 65 78 74 22 3a 22 53 74 61 79 22 2c 22 74 72 61 63 6b 69 6e 67 22 3a 22 73 74 61 79 22 2c 22 74 61 72 67 65 74 22 3a 22 5f 73 65 6c 66 22 2c 22 70 61 6e 65 6c 73 22 3a 5b 5b 7b 22 69 64 22 3a 22 69 74 65 6d 30 2d 70 61 6e 65 6c 2d 36 32 30 66 36 35 65 66 2d 34 33 66 22 2c 22 74 65 78 74 22 3a 22 46 69 6e 64 20 61 20 68 6f 74 65 6c 22 2c 22 74 72 61 63 6b 69 6e 67 22 3a 22 66 69 6e 64 5f 61 5f 68 6f 74 65 6c 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 6c 6c 2e 61 63 63 6f 72 2e 63 6f 6d 2f 75 73 61 2f 69 6e 64 65 78 2e 65 6e 2e 73 68 74 6d 6c 22 2c 22 68 69 67 68 6c 69 67 68 74 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 69 74 65 6d 31 2d 70 61 6e 65 6c 2d 65 61 31 30 61 66 64 35 2d 38 66 39 Data Ascii: [{"id":"item0","text":"Stay","tracking":"stay","target":"_self","panels":[[{"id":"item0-panel-620f65ef-43f","text":"Find a hotel","tracking":"find_a_hotel","url":"https://all.accor.com/usa/index.en.shtml","highlight":false},{"id":"item1-panel-ea10afd5-8f9
2024-10-30 07:46:35 UTC	1378	IN	Data Raw: 22 2c 22 74 72 61 63 6b 69 6e 67 22 3a 22 70 72 65 70 61 72 65 5f 79 6f 75 72 5f 74 72 69 70 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 6c 6c 2e 61 63 63 6f 72 2e 63 6f 6d 2f 67 62 2f 6f 66 66 65 72 73 2d 74 72 61 76 65 6c 2d 69 64 65 61 73 2f 69 6e 64 65 78 2e 73 68 74 6d 6c 22 2c 22 68 69 67 68 6c 69 67 68 74 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 69 74 65 6d 32 2d 70 61 6e 65 6c 2d 39 63 32 37 63 39 37 34 2d 64 66 66 22 2c 22 74 65 78 74 22 3a 22 46 61 6d 69 6c 79 20 67 65 74 61 77 61 79 22 2c 22 75 72 6c 22 3a 22 2f 63 6f 6e 74 65 6e 74 2f 61 6c 6c 2f 65 6e 2f 6c 69 6d 69 74 6c 65 73 73 2f 74 68 65 6d 61 74 69 63 73 2f 66 61 6d 69 6c 79 22 2c 22 68 69 67 68 6c 69 67 68 74 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 69 74 65 6d Data Ascii: ","tracking":"prepare_your_trip","url":"https://all.accor.com/gb/offers-travel-ideas/index.shtml","highlight":false},{"id":"item2-panel-9c27c974-dff","text":"Family getaway","url":"/content/all/en/limitless/thematics/family","highlight":false},{"id":"item
2024-10-30 07:46:35 UTC	1378	IN	Data Raw: 6b 69 6e 67 22 3a 22 6c 6f 79 61 6c 74 79 5f 70 72 6f 67 72 61 6d 22 2c 22 74 61 72 67 65 74 22 3a 22 5f 73 65 6c 66 22 2c 22 70 61 6e 65 6c 73 22 3a 5b 5b 7b 22 69 64 22 3a 22 69 74 65 6d 30 2d 70 61 6e 65 6c 2d 61 32 35 36 32 33 66 64 2d 33 34 66 22 2c 22 74 65 78 74 22 3a 22 44 69 73 63 6f 76 65 72 20 74 68 65 20 70 72 6f 67 72 61 6d 6d 65 22 2c 22 74 72 61 63 6b 69 6e 67 22 3a 22 72 65 61 73 6f 6e 73 5f 74 6f 5f 6a 6f 69 6e 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 6c 6c 2e 61 63 63 6f 72 2e 63 6f 6d 2f 6c 6f 79 61 6c 74 79 2d 70 72 6f 67 72 61 6d 2f 72 65 61 73 6f 6e 73 74 6f 6a 6f 69 6e 2f 69 6e 64 65 78 2e 65 6e 2e 73 68 74 6d 6c 22 2c 22 68 69 67 68 6c 69 67 68 74 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 69 74 65 6d 31 2d 70 61 Data Ascii: king":"loyalty_program","target":"_self","panels":[[{"id":"item0-panel-a25623fd-34f","text":"Discover the programme","tracking":"reasons_to_join","url":"https://all.accor.com/loyalty-program/reasonstojoin/index.en.shtml","highlight":false},{"id":"item1-pa
2024-10-30 07:46:35 UTC	1378	IN	Data Raw: 2c 22 64 65 73 63 22 3a 22 3c 70 3e 31 35 25 20 64 69 73 63 6f 75 6e 74 20 61 6c 6c 20 79 65 61 72 20 72 6f 75 6e 64 3c 2f 70 3e 5c 72 5c 6e 22 2c 22 62 75 74 74 6f 6e 54 65 78 74 22 3a 22 44 69 73 63 6f 76 65 72 20 4e 6f 77 22 2c 22 74 79 70 65 22 3a 22 70 75 73 68 22 7d 5d 7d 2c 7b 22 69 64 22 3a 22 69 74 65 6d 32 22 2c 22 74 65 78 74 22 3a 22 20 44 65 61 6c 73 22 2c 22 74 72 61 63 6b 69 6e 67 22 3a 22 6f 66 66 65 72 73 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 6c 6c 2e 61 63 63 6f 72 2e 63 6f 6d 2f 61 2f 65 6e 2f 64 65 61 6c 73 2d 63 6f 72 6e 65 72 2e 68 74 6d 6c 22 2c 22 74 61 72 67 65 74 22 3a 22 5f 73 65 6c 66 22 7d 2c 7b 22 69 64 22 3a 22 69 74 65 6d 33 22 2c 22 74 65 78 74 22 3a 22 4f 75 72 20 70 61 72 74 6e 65 72 73 22 2c 22 74 72 61 Data Ascii: ,"desc":"<p>15% discount all year round</p>\r\n","buttonText":"Discover Now","type":"push"}]},{"id":"item2","text":" Deals","tracking":"offers","url":"https://all.accor.com/a/en/deals-corner.html","target":"_self"},{"id":"item3","text":"Our partners","tra
2024-10-30 07:46:35 UTC	1378	IN	Data Raw: 6c 6c 2e 61 63 63 6f 72 2e 63 6f 6d 2f 61 63 74 69 76 69 74 69 65 73 2d 61 6e 64 2d 65 76 65 6e 74 73 2f 69 6e 64 65 78 2e 65 6e 2e 73 68 74 6d 6c 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 2e 61 68 73 74 61 74 69 63 2e 63 6f 6d 2f 69 73 2f 69 6d 61 67 65 2f 61 63 63 6f 72 68 6f 74 65 6c 73 2f 61 6a 61 5f 70 5f 35 37 33 36 2d 30 32 31 22 2c 22 61 6c 74 22 3a 22 41 6c 6c 20 6f 75 72 20 65 78 70 65 72 69 65 6e 63 65 73 20 41 4c 54 20 22 2c 22 74 69 74 6c 65 22 3a 22 41 6c 6c 20 6f 75 72 20 65 78 70 65 72 69 65 6e 63 65 73 22 2c 22 64 65 73 63 22 3a 22 3c 70 3e 43 6f 6e 63 65 72 74 73 2c 20 73 70 6f 72 74 73 2c 20 65 78 68 69 62 69 74 69 6f 6e 73 2c 20 43 61 6e 64 6c 65 6c 69 67 68 74 2c 20 61 6e 64 20 6d 6f 72 65 2e 20 41 63 63 65 73 73 20 74 6f Data Ascii: ll.accor.com/activities-and-events/index.en.shtml","src":"https://m.ahstatic.com/is/image/accorhotels/aja_p_5736-021","alt":"All our experiences ALT ","title":"All our experiences","desc":"<p>Concerts, sports, exhibitions, Candlelight, and more. Access to
2024-10-30 07:46:35 UTC	1378	IN	Data Raw: 64 2d 6d 65 65 74 69 6e 67 73 2e 65 6e 2e 73 68 74 6d 6c 22 2c 22 68 69 67 68 6c 69 67 68 74 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 69 74 65 6d 31 2d 70 61 6e 65 6c 2d 30 32 30 32 34 35 62 66 2d 39 39 63 22 2c 22 74 65 78 74 22 3a 22 54 72 61 69 6e 69 6e 67 20 73 65 73 73 69 6f 6e 73 22 2c 22 74 72 61 63 6b 69 6e 67 22 3a 22 74 72 61 69 6e 69 6e 67 5f 73 65 73 73 69 6f 6e 73 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 65 74 69 6e 67 73 2e 61 63 63 6f 72 2e 63 6f 6d 2f 6f 75 72 2d 65 76 65 6e 74 2d 74 79 70 65 73 2f 74 72 61 69 6e 69 6e 67 5f 73 65 73 73 69 6f 6e 2f 69 6e 64 65 78 2e 65 6e 2e 73 68 74 6d 6c 22 2c 22 68 69 67 68 6c 69 67 68 74 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 69 74 65 6d 32 2d 70 61 6e 65 6c 2d 37 34 36 Data Ascii: d-meetings.en.shtml","highlight":false},{"id":"item1-panel-020245bf-99c","text":"Training sessions","tracking":"training_sessions","url":"https://meetings.accor.com/our-event-types/training_session/index.en.shtml","highlight":false},{"id":"item2-panel-746
2024-10-30 07:46:35 UTC	1207	IN	Data Raw: 68 74 22 3a 66 61 6c 73 65 7d 5d 2c 5b 7b 22 69 64 22 3a 22 73 69 6d 70 6c 65 5f 6e 61 76 5f 31 2d 70 61 6e 65 6c 2d 34 31 65 37 33 39 35 37 2d 65 35 33 22 2c 22 74 65 78 74 22 3a 22 4f 55 52 20 4d 45 4d 42 45 52 53 48 49 50 20 43 41 52 44 53 22 2c 22 74 79 70 65 22 3a 22 74 69 74 6c 65 22 7d 2c 7b 22 69 64 22 3a 22 69 74 65 6d 30 2d 70 61 6e 65 6c 2d 65 35 65 30 37 63 31 64 2d 66 35 35 22 2c 22 74 65 78 74 22 3a 22 41 4c 4c 20 50 4c 55 53 20 56 6f 79 61 67 65 75 72 22 2c 22 74 72 61 63 6b 69 6e 67 22 3a 22 61 6c 6c 5f 70 6c 75 73 5f 76 6f 79 61 67 65 75 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 62 75 73 69 6e 65 73 73 74 72 61 76 65 6c 2e 61 63 63 6f 72 2e 63 6f 6d 2f 70 72 6f 6d 6f 74 69 6f 6e 73 2d 6f 66 66 65 72 73 2f 61 6c 6c 2d 70 6c 75 Data Ascii: ht":false}],[{"id":"simple_nav_1-panel-41e73957-e53","text":"OUR MEMBERSHIP CARDS","type":"title"},{"id":"item0-panel-e5e07c1d-f55","text":"ALL PLUS Voyageur","tracking":"all_plus_voyageur","url":"https://businesstravel.accor.com/promotions-offers/all-plu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	49881	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:34 UTC	5910	OUT	GET /services/business-referer/scripts-v2410/main.js HTTP/1.1 Host: all.accor.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=uXhrmD2Na/K1uglc4DSccWmUi3lwT6U0aN5NKqvcu8d5WGWybG4+Fjgl4ne6nVjifX1jzgyPIuRTBhS6nanmMOLamS/KiojPrxeLcFng8UzPO+81sa87bs4RFhGAg5SdnTRio+RJdn41ZezkVQzm+QQNKVTMJBE8fIzHUqlLtmYsp4GqzAo9Tqkn29+6s06cnyhW9Bg2AjaE3z+uY1Kha+K1N+xGE1wxY+ov1hMjJJFJQKo0Zzr8yVUmc0uGx6VyOI/GCYB98MMi2baM/noo1d0GCT/eTJnamWBVosFVl6rGjGRpxA8WWwcog7Ny/HlQVp6w8cTkKFTg/8KjIPnCBapACqcVA8DvW2Oym2gj1AtBv4YYfUMq3TEu4mXRkOJJVmAh7NCUHwLhEc4aXJBIqbW6JkrW0slp4+M4RmDR1e+A3GrFYXelb56QL3DRn/v55w+TZWXTMoZhYCD+Z9T66/ [TRUNCATED]
2024-10-30 07:46:34 UTC	606	IN	HTTP/1.1 200 OK Age: 161132 Cache-control: public, max-age=3600, stale-while-revalidate=21600 Content-Type: text/javascript Date: Wed, 30 Oct 2024 07:46:34 GMT Last-Modified: Mon, 28 Oct 2024 11:01:02 GMT P3P: CP="NO P3P POLICY" Referrer-Policy: origin Server: ECAcc (lhd/3599) Strict-Transport-Security: max-age=15552000 Vary: Accept-Encoding X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Clacks-Overhead: GNU Terry Pratchett X-Iinfo: 17-204440767-204440043 pNNy RT(1730113261310 3) q(0 0 0 0) r(0 0) U24 X-XSS-Protection: 1; mode=block Content-Length: 1262 Connection: close
2024-10-30 07:46:34 UTC	1262	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 72 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 72 2e 6d 3d 65 2c 72 2e 63 3d 74 2c 72 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 6e 7d 29 7d 2c 72 2e 72 3d 66 75 6e Data Ascii: !function(e){var t={};function r(n){if(t[n])return t[n].exports;var o=t[n]={i:n,l:!1,exports:{}};return e[n].call(o.exports,o,o.exports,r),o.l=!0,o.exports}r.m=e,r.c=t,r.d=function(e,t,n){r.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},r.r=fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	49887	104.18.32.137	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:34 UTC	593	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://all.accor.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://all.accor.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 07:46:34 UTC	370	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 07:46:34 GMT Content-Type: application/json Content-Length: 66 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: GET, OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8da9cad7ed6aa927-DFW
2024-10-30 07:46:34 UTC	66	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 54 58 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 54 65 78 61 73 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d Data Ascii: {"country":"US","state":"TX","stateName":"Texas","continent":"NA"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	49884	35.240.103.94	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:35 UTC	3023	OUT	POST /referential/v1/best-visit/cookie-attribution HTTP/1.1 Host: api.accor.com Connection: keep-alive Content-Length: 40 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 apikey: asHOCgjzKWHp8O7qXPKOfBTZ4k9Sq6IA sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://all.accor.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://all.accor.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: org=evy; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjoiQUgiLCJyZXRhaW5lZG1lcmNoYW50aWQiOiJBSCJ9; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+30+2024+03%3A46%3A29+GMT-0400+(Eastern+Daylight+Time)&version=202409.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&genVendors=V62%3A0%2CV37%3A0%2CV67%3A0%2CV38%3A0%2CV64%3A0%2CV58%3A0%2CV25%3A0%2CV26%3A0%2CV42%3A0%2CV9%3A0%2CV8%3A0%2CV27%3A0%2CV51%3A0%2CV39%3A0%2CV23%3A0%2CV55%3A0%2CV5%3A0%2CV34%3A0%2CV10%3A0%2CV53%3A0%2CV59%3A0%2CV74%3A0%2CV36%3A0%2CV49%3A0%2CV65%3A0%2CV19%3A0%2CV33%3A0%2CV57%3A0%2CV52%3A0%2CV48%3A0%2CV29%3A0%2CV17%3A0%2CV11%3A0%2CV56%3A0%2CV12%3A0%2CV72%3A0%2CV13%3A0%2CV41%3A0%2CV40%3A0%2CV68%3A0%2CV60%3A0%2CV50%3A0%2CV15%3 [TRUNCATED]
2024-10-30 07:46:35 UTC	40	OUT	Data Raw: 7b 22 61 66 66 63 6f 6f 6b 69 65 22 3a 22 65 67 46 2b 72 34 52 4b 79 48 68 6c 53 44 47 54 30 48 4e 4f 53 41 3d 3d 22 7d Data Ascii: {"affcookie":"egF+r4RKyHhlSDGT0HNOSA=="}
2024-10-30 07:46:35 UTC	790	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 07:46:35 GMT Content-Type: application/json Content-Length: 265 Connection: close Server: CloudFront Set-Cookie: affcookie=egF+r4RKyHhlSDGT0HNOSA==; Max-Age=2678400; Path=/; domain=.accor.com; SameSite=None; Secure Set-Cookie: trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjoiQUgiLCJyZXRhaW5lZG1lcmNoYW50aWQiOiJBSCJ9; Max-Age=2678400; Path=/; domain=.accor.com; SameSite=None; Secure X-Cache: Miss from cloudfront Via: 1.1 bca52b70421b8043e27a70a0a8860acc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BRU50-P1 X-Amz-Cf-Id: BdIzlduGp1h-AF_w4_lmeaty7-VoFGhwpC9T55OF7M4V7AiSAejhFQ== Access-Control-Allow-Credentials: true Vary: Origin Access-Control-Allow-Origin: https://all.accor.com
2024-10-30 07:46:35 UTC	265	IN	Data Raw: 7b 22 61 66 66 43 6f 6f 6b 69 65 22 3a 22 41 48 7c 41 48 7c 41 48 7c 41 48 22 2c 22 63 75 72 72 65 6e 74 56 69 73 69 74 22 3a 7b 22 73 6f 75 72 63 65 49 64 22 3a 22 41 48 22 2c 22 6d 65 72 63 68 61 6e 74 49 64 22 3a 22 41 48 22 2c 22 6c 65 76 65 72 4c 61 62 65 6c 22 3a 22 44 69 72 65 63 74 20 41 63 63 65 73 73 22 2c 22 6c 65 76 65 72 43 61 74 65 67 6f 72 79 22 3a 31 7d 2c 22 6f 75 74 70 75 74 42 65 73 74 56 69 73 69 74 22 3a 7b 22 73 6f 75 72 63 65 49 64 22 3a 22 41 48 22 2c 22 6d 65 72 63 68 61 6e 74 49 64 22 3a 22 41 48 22 2c 22 6c 65 76 65 72 4c 61 62 65 6c 22 3a 22 44 69 72 65 63 74 20 41 63 63 65 73 73 22 2c 22 6c 65 76 65 72 43 61 74 65 67 6f 72 79 22 3a 31 7d 2c 22 61 66 66 63 6f 6f 6b 69 65 22 3a 22 65 67 46 2b 72 34 52 4b 79 48 68 6c 53 44 47 54 Data Ascii: {"affCookie":"AH\|AH\|AH\|AH","currentVisit":{"sourceId":"AH","merchantId":"AH","leverLabel":"Direct Access","leverCategory":1},"outputBestVisit":{"sourceId":"AH","merchantId":"AH","leverLabel":"Direct Access","leverCategory":1},"affcookie":"egF+r4RKyHhlSDGT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	49885	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:35 UTC	6470	OUT	GET /_Incapsula_Resource?SWKMTFSR=1&e=0.40031580321636673 HTTP/1.1 Host: all.accor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://all.accor.com/a/en/new-app-offer/app-download.html?source_caller=bulk&af_qr=true&shortlink=5m1nc8of&c=20241013_ALL_AppBonusingMobileLp&af_ad=QR_code_20241013_ALL_AppBonusingMobileLp&pid=QR_code&deep_link_value=accor%3A%2F%2Fsearch%2Foffer%3Fpage_id%3Dddc8e830-2fc5-4492-ae7f-a63574b202f4&af_adset=EN Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; incap_ses_1388_3039981=WwV9UFsZYQbcTBz5zCpDE0/kIWcAAAAAAlW7vDjSIvNuKK2ooaDNBg==; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; incap_ses_1237_3039981=RMkdawpcO0pafv9zF7UqEVDkIWcAAAAAOdDq+0nC/oeq6w4fyTL3Fg==; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJl [TRUNCATED]
2024-10-30 07:46:35 UTC	253	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Content-Type: text/plain Date: Wed, 30 Oct 2024 07:46:35 GMT server: MF 8700 S - Dyna-VT - Stage V All-in-One X-CDN-Forward: EdgeCast X-Robots-Tag: noindex Content-Length: 1 Connection: close
2024-10-30 07:46:35 UTC	1	IN	Data Raw: 31 Data Ascii: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	49888	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:35 UTC	4680	OUT	GET /assets/fonts/montserrat/bold/montserrat-bold.woff2 HTTP/1.1 Host: all.accor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://all.accor.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://all.accor.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; ___utmvc=uXhrmD2Na/K1uglc4DSccWmUi3lwT6U0aN5NKqvcu8d5WGWybG4+Fjgl4ne6nVjifX1jzgyPIuRTBhS6nanmMOLamS/KiojPrxeLcFng8UzPO+81sa87bs4RFhGAg5SdnTRio+RJdn41ZezkVQzm+QQNKVTMJBE8fIzHUqlLtmYsp4GqzAo9Tqkn29+6s06cnyhW9Bg2AjaE3z+uY1Kha+K1N+xGE1wxY+ov1hMjJJFJQKo0Zzr8yVUmc0uGx6VyOI/GCYB98MMi2baM/noo1d0GCT/eTJnamWBVosFVl6rGjGRpxA8WWwcog7Ny/HlQVp6w8cTkKFTg/8KjIPnCBapACqcVA8DvW2Oym2gj1AtBv4YYfUMq3TEu4mXRkOJJVmAh7NCUHwLhEc4aXJBIqbW6JkrW0slp4+M4RmDR1e+A3GrFYXelb56QL3DRn/v55w+TZWXTMoZhYCD+Z9T66/ [TRUNCATED]
2024-10-30 07:46:35 UTC	839	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: authorization, content-type, x-requested-with Access-Control-Allow-Methods: PUT, GET, POST, DELETE, OPTIONS Access-Control-Allow-Origin: * Age: 161145 Cache-control: public, max-age=3600, stale-while-revalidate=21600 Content-Type: font/woff2 Date: Wed, 30 Oct 2024 07:46:35 GMT Last-Modified: Wed, 16 Oct 2024 09:00:04 GMT P3P: CP="NO P3P POLICY" Referrer-Policy: origin Server: ECAcc (lhd/35E7) Strict-Transport-Security: max-age=15552000 Timing-Allow-Origin: * X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Clacks-Overhead: GNU Terry Pratchett X-Iinfo: 18-214202037-214187739 pNNy RT(1730113249964 13) q(0 0 0 -1) r(1 1) U24 X-XSS-Protection: 1; mode=block Content-Length: 88708 Connection: close
2024-10-30 07:46:35 UTC	15563	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 5a 84 00 12 00 00 00 04 9d 7c 00 01 5a 17 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 81 7a 1b 87 cc 5e 1c 81 80 46 06 60 00 8c 1e 08 81 64 09 9a 6d 11 08 0a 87 ac 40 86 ca 1c 0b 9d 64 00 01 36 02 24 03 bb 44 04 20 05 8c 60 07 81 aa 15 0c 81 55 5b 34 5c d4 8d ff 3e fb ed 9c cb 47 86 a2 ef 85 9f 10 90 44 45 91 37 40 2c 67 2d 4b e7 b6 da 67 f1 50 c7 d3 a6 ba b0 8f 75 f0 ab ae 4d 0a d4 1c e2 81 4a e0 85 ae 9d 1e b2 ce 06 cf f5 aa 94 14 c8 6d b4 5b 66 09 09 f5 bc ce b1 cd a5 9c 07 17 b1 10 d9 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff bf 2b f9 cf f3 ff 6d db 7b dd 73 d7 39 77 9f 7b ef 9b cf 7d 6f 86 37 8f 79 6f de 7b 33 f0 1c 3e 03 ce bc 41 19 7e 03 26 03 46 a2 90 11 Data Ascii: wOF2Z\|Z?FFTMz^F`dm@d6$D `U[4\>GDE7@,g-KgPuMJm[f+m{s9w{}o7yo{3>A~&F
2024-10-30 07:46:35 UTC	821	IN	Data Raw: dd ea 51 bf 0f 0e 8f 8e 4f 4e cf ce 2f f7 d7 f3 7d 7e 23 82 89 de 71 a8 d4 d1 e5 2e 58 45 19 65 33 8e 53 3b ff 7d 47 a2 21 22 c4 c6 f0 90 1d 1d ab 6b 07 e4 43 bd 43 69 1f 60 bb ff 3f 2a 23 14 04 4f 30 d4 45 18 d0 eb 89 fa ea 2e d3 78 fa e2 07 ac f8 61 ba 3a f2 13 33 21 28 bd 13 4f 7a b6 6b 9f 3a ae fa 24 95 d2 8f f4 40 c9 09 34 4a d6 48 f1 cb 58 47 15 15 5f 35 0c 0b e3 f2 e2 bb 3a 23 05 0e f0 f7 89 1d 26 d8 f6 04 a8 48 af 4d 75 77 be 95 ad aa 17 2b 91 a8 fd 7a 6b b0 3b 4e 7a ab cf 2f b3 cc ab 50 8d 2d a3 47 54 af 86 1c 72 56 ea e9 1b cf 70 19 9e 93 28 bd f8 3a 10 b8 4e 97 8e 41 83 da e6 18 d0 57 26 71 5c 5a f6 99 d5 f1 5f 2d 13 80 33 28 85 80 3e 9b dc b9 17 97 df 76 2e e4 61 96 e7 62 2a ed 9d 51 7a 5c 51 9f 2a 5d 07 f4 e9 56 4b 54 89 50 b4 92 c8 27 4e 8f Data Ascii: QON/}~#q.XEe3S;}G!"kCCi`?#O0E.xa:3!(Ozk:$@4JHXG_5:#&HMuw+zk;Nz/P-GTrVp(:NAW&q\Z_-3(>v.abQz\Q*]VKTP'N
2024-10-30 07:46:35 UTC	16383	IN	Data Raw: de 8a 21 15 e1 eb df 04 f8 5c 0a e6 5c d1 bf 56 e9 c9 21 b6 99 13 9e 69 6a e1 60 5a fb ce 64 4a b3 a4 65 e2 e8 fb 96 c6 4e 04 3b 1f a0 bd a6 75 7a 40 af 0c b9 57 f1 ca 1d 1f a9 56 d0 59 0a d3 01 fb 9f 38 3a d3 60 ba 58 ff 9e 80 0e 5e f8 57 50 d7 0c eb 9f 9d 5d c3 3f 87 7a db f9 de 96 51 1a 89 93 54 6e b9 75 c5 8e 25 11 34 5c fa 98 58 8d 7e 5a 70 9e b0 7f 38 6d f0 af d8 19 4d 40 e1 86 9e c2 bd bd 30 ff 03 b8 9f 2a 8c 0a 56 cb d7 bf 99 46 cb 3b cc d4 f9 44 c9 da e0 d5 13 c0 79 c2 be 77 f8 b7 ad 70 b3 82 77 1b f8 91 20 ac ec 63 d6 06 1f 68 34 c0 99 f8 9b bc b9 ab ac c0 83 96 7f 08 9b 6f a0 d6 61 62 7f e0 81 e0 dc 78 f2 4f d8 06 0f 94 b7 45 f6 ca 85 37 4b 94 01 5e 2c 7b c0 39 36 ec 73 bb ea 48 ec 2b 39 16 15 de 2e c1 9e f7 4d 8e 6f c5 30 11 64 01 0f 34 a6 09 Data Ascii: !\\V!ij`ZdJeN;uz@WVY8:`X^WP]?zQTnu%4\X~Zp8mM@0*VF;Dywpw ch4oabxOE7K^,{96sH+9.Mo0d4
2024-10-30 07:46:35 UTC	16383	IN	Data Raw: a9 3c d3 e9 ca b3 5d e6 fc b9 6e 45 f0 3c f7 0d 4e dc 81 c0 78 44 79 a1 ad bc c4 0b d6 c4 5b 5e f2 0c d0 e6 d0 8a f5 ef 8e 93 95 f6 6c d2 ef f5 67 8d 37 f8 78 1f 7b bb b3 7d d8 fa cd 2c 5e 20 0c 11 44 c4 24 4c 11 ed c3 9c 25 76 ff 84 e9 62 60 e9 a3 c6 8f 98 ef 59 5f 34 f2 3d 8a f7 d5 f4 31 12 32 7e 5a b5 ea f4 f6 13 6f 51 04 ac f4 be f6 03 66 bb 8d 1a 90 b5 c8 e8 bd 05 a0 a3 62 25 ec 6d 3c 4d 90 09 3a 41 23 94 8a 9c e3 f4 c0 95 40 28 54 05 0d 57 d7 c3 ab 46 42 44 46 c7 c6 c5 21 e0 2e a4 38 a3 b0 7a 1a 69 a0 95 6e 3a b6 df 83 a5 51 27 06 b6 90 3a 6e 9c 22 61 41 68 cc 66 82 42 18 15 5e 16 b3 ae 00 01 a3 c1 45 13 f1 c2 3a 4c 97 a2 d8 61 4d c6 dd 6b ff bb 0b 95 6a 53 cd ec 75 cb 72 af 7f d9 46 03 f2 b4 bc 34 bf 53 1b cf 13 ac d5 47 43 97 a9 25 21 53 05 8a 32 Data Ascii: <]nE<NxDy[^lg7x{},^ D$L%vb`Y_4=12~ZoQfb%m<M:A#@(TWFBDF!.8zin:Q':n"aAhfB^E:LaMkjSurF4SGC%!S2
2024-10-30 07:46:35 UTC	16383	IN	Data Raw: 87 6d dd 44 22 83 94 cd 19 50 f4 b8 da 0d 05 27 2e ac f0 9b 52 98 3b f6 2f 56 f1 69 c0 c5 c4 ec 89 a0 65 77 a2 50 be 60 fc 85 63 97 6d 2c f5 6b 0a 2d 45 a7 4f 9d dc 9d b3 be 52 f3 db 3a de 04 aa ec 91 8f b4 a9 45 5d ea 80 27 c7 55 3b 1a 0c 5b d0 a2 1f 24 fe 9b 49 64 10 15 94 7b 17 35 bf fa b4 25 0e 08 29 42 43 a6 40 89 8d cd 01 6c d6 bc c3 20 50 90 f1 fc fe c2 25 fe 50 dc 46 30 0c 22 e8 a8 10 30 95 72 1a 8d ba 99 b8 df 8d 9b 08 43 00 4e 42 6e 90 8c 2d 1b f4 95 28 b4 fd dd 76 57 3b d4 79 ff c8 14 b5 12 3c a3 c6 e9 f6 65 be 5a 0f 7d 94 06 1e cd e4 f7 7d 0e ad 91 db 57 53 5b a8 24 e3 df 9e 11 e2 6f ed b2 c2 a9 0d c6 05 12 a1 81 0e 19 a1 fb b6 82 a7 d4 32 00 a1 9e 3e f1 94 9c 61 da 51 67 5e 28 0f e5 64 22 10 99 ac d0 42 79 a0 34 12 4d e1 9f 90 08 66 43 fe 84 Data Ascii: mD"P'.R;/ViewP`cm,k-EOR:E]'U;[$Id{5%)BC@l P%PF0"0rCNBn-(vW;y<eZ}}WS[$o2>aQg^(d"By4MfC
2024-10-30 07:46:35 UTC	16383	IN	Data Raw: f5 dd 0a bd 20 d8 61 85 8d 0a b6 32 77 11 85 f3 99 98 59 14 2e 98 f0 b7 5c 28 55 42 a8 da 50 f0 c9 09 cc 84 14 86 6c 35 37 33 5a da 38 3a eb 99 0c 21 32 56 0b b7 94 96 53 f7 a0 51 a1 f2 00 27 cc 0e c7 cf 12 77 b5 cc fc 5e 8f f0 4e 86 4f 6a b2 cc 5f b2 cf 35 84 dd 18 92 ab 76 2f 6b af ff db ff 94 e8 cb 29 13 5c c0 f7 4e d5 c1 51 c9 8e 6a ba 95 90 1b ce 98 5e 3f f5 63 e1 4e 2c 36 1b f1 04 ce 69 be 6e b5 7b 5c 4b 9b 32 22 d1 ee e6 5a 58 be e7 e1 9e 22 b7 b3 93 8b 8e 04 ba 53 dd 47 3e 4c 94 6f f1 bc 79 04 00 32 3b e2 9c e5 15 3c fd b1 79 d5 b7 ae 54 94 8f 2e 6a 7e 15 77 09 70 a6 d5 f1 f7 b6 73 3e e2 d6 99 d6 bc dc e0 6b 3a 97 02 db 22 09 3c e9 fc 41 33 0e c5 d8 b2 0f b3 58 43 4c 78 42 00 e0 ad e7 97 cd f3 44 a4 ba 12 e4 48 8e c0 d3 bb 75 c3 61 1f dd 12 9c 7c Data Ascii: a2wY.\(UBPl573Z8:!2VSQ'w^NOj_5v/k)\NQj^?cN,6in{\K2"ZX"SG>Loy2;<yT.j~wps>k:"<A3XCLxBDHua\|
2024-10-30 07:46:35 UTC	6792	IN	Data Raw: 1c 28 e8 32 7e ef 35 b4 b4 d7 c6 ee 67 9f 08 bb 82 4d b7 b3 1f e6 56 a6 65 ed cc 8e bd b7 f9 bd 8f 96 58 76 ac dc 6a db 4a 53 7b 1a 2d b1 7b 9c d9 cf 46 df e5 16 43 a7 bd 63 35 2e 14 f1 42 b0 91 5d ad db 54 13 82 a5 7a 91 2e 3c b1 51 9a 3d be 35 a1 68 9b e2 95 8b c1 24 00 f4 1c b2 45 b7 82 e8 d1 9c 64 d3 37 2d 15 32 f4 ca 77 ee 11 75 b0 ff 56 81 2b de 02 1f d6 26 1d 63 10 4d 85 f9 2e b3 b7 46 d6 28 b1 c6 db a7 f4 ed 36 e3 6f e0 06 fa 45 18 8d 24 26 46 88 7f 9e 85 b7 94 28 cd dc a3 67 a7 72 96 75 ce 58 36 bb 58 eb 49 c1 7c 62 cd 11 5b 0d fe dc e6 df d2 4a 34 2b d8 39 4c 76 ee 7f e5 6f 4d e8 56 67 14 8f 40 2b 86 02 34 fd 96 82 df 11 8c 0a ba a7 e2 31 07 f7 d7 62 18 63 e7 8b c6 05 b4 9a 49 80 83 06 17 40 d7 9d 8d 2d bc 04 2e 82 4b e1 b2 f9 e7 11 1b b0 56 66 Data Ascii: (2~5gMVeXvjJS{-{FCc5.B]Tz.<Q=5h$Ed7-2wuV+&cM.F(6oE$&F(gruX6XI\|b[J4+9LvoMVg@+41bcI@-.KVf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	49886	35.240.103.94	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:35 UTC	3002	OUT	GET /referential/v1/pos//currencies?groupByContinent=true HTTP/1.1 Host: api.accor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" content-type: application/json apikey: LJreOkXhuneMHZaeenwDZAl8DKlZGdDO sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://all.accor.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://all.accor.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: org=evy; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJlbnRtZXJjaGFudGlkIjoiQUgiLCJyZXRhaW5lZHNvdXJjZWlkIjoiQUgiLCJyZXRhaW5lZG1lcmNoYW50aWQiOiJBSCJ9; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+30+2024+03%3A46%3A29+GMT-0400+(Eastern+Daylight+Time)&version=202409.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&genVendors=V62%3A0%2CV37%3A0%2CV67%3A0%2CV38%3A0%2CV64%3A0%2CV58%3A0%2CV25%3A0%2CV26%3A0%2CV42%3A0%2CV9%3A0%2CV8%3A0%2CV27%3A0%2CV51%3A0%2CV39%3A0%2CV23%3A0%2CV55%3A0%2CV5%3A0%2CV34%3A0%2CV10%3A0%2CV53%3A0%2CV59%3A0%2CV74%3A0%2CV36%3A0%2CV49%3A0%2CV65%3A0%2CV19%3A0%2CV33%3A0%2CV57%3A0%2CV52%3A0%2CV48%3A0%2CV29%3A0%2CV17%3A0%2CV11%3A0%2CV56%3A0%2CV12%3A0%2CV72%3A0%2CV13%3A0%2CV41%3A0%2CV40%3A0%2CV68%3A0%2CV60%3A0%2CV50%3A0%2CV15%3 [TRUNCATED]
2024-10-30 07:46:35 UTC	460	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 07:46:35 GMT Content-Type: application/json Content-Length: 13238 Connection: close Server: CloudFront X-Cache: Hit from cloudfront Via: 1.1 44d88ba206b56c0540bbbe3f1fa2b8ea.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BRU50-P1 X-Amz-Cf-Id: uQvfgNkK3ZOBTCdVRnp3P7Kmy04fwKmAuYSkF8glgwJBWF6VvcVipg== Age: 9 Access-Control-Allow-Credentials: true Vary: Origin Access-Control-Allow-Origin: https://all.accor.com
2024-10-30 07:46:35 UTC	13238	IN	Data Raw: 5b 7b 22 63 6f 6e 74 69 6e 65 6e 74 43 6f 64 65 22 3a 22 61 66 72 69 63 61 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 4c 61 62 65 6c 22 3a 22 41 66 72 69 63 61 20 2d 20 4d 69 64 64 6c 65 20 45 61 73 74 22 2c 22 63 75 72 72 65 6e 63 79 4c 69 73 74 22 3a 5b 7b 22 63 75 72 72 65 6e 63 79 43 6f 64 65 22 3a 22 44 5a 44 22 2c 22 63 75 72 72 65 6e 63 79 4c 61 62 65 6c 22 3a 22 41 6c 67 65 72 69 61 6e 20 44 69 6e 61 72 22 2c 22 63 75 72 72 65 6e 63 79 53 79 6d 62 6f 6c 22 3a 22 d8 af 2e d8 ac 22 2c 22 61 63 63 6f 72 43 6f 75 6e 74 72 79 43 6f 64 65 22 3a 5b 22 61 6c 67 65 72 69 61 22 5d 2c 22 69 73 6f 43 6f 75 6e 74 72 79 43 6f 64 65 22 3a 5b 22 64 7a 22 5d 7d 2c 7b 22 63 75 72 72 65 6e 63 79 43 6f 64 65 22 3a 22 41 4f 41 22 2c 22 63 75 72 72 65 6e 63 79 4c 61 62 65 6c Data Ascii: [{"continentCode":"africa","continentLabel":"Africa - Middle East","currencyList":[{"currencyCode":"DZD","currencyLabel":"Algerian Dinar","currencySymbol":".","accorCountryCode":["algeria"],"isoCountryCode":["dz"]},{"currencyCode":"AOA","currencyLabel

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	49883	52.215.19.194	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:35 UTC	531	OUT	GET /2a22008a1a0b.js?lv=1 HTTP/1.1 Host: w.usabilla.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://all.accor.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 07:46:35 UTC	249	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 07:46:35 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public,max-age=0 Etag: "1b9aec27b0e95c222a3fd2afd80670e4" Pragma: no-cache X-Widget-Server: 2.1
2024-10-30 07:46:35 UTC	3861	IN	Data Raw: 66 30 65 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 21 3d 77 69 6e 64 6f 77 26 26 28 77 69 6e 64 6f 77 2e 6c 69 67 68 74 6e 69 6e 67 6a 73 7c 7c 66 75 6e 63 74 69 6f 6e 28 64 2c 66 29 7b 76 61 72 20 65 3d 64 2e 6c 69 67 68 74 6e 69 6e 67 6a 73 3d 7b 6d 6f 64 75 6c 65 73 3a 66 2e 6d 6f 64 75 6c 65 73 7d 2c 72 3d 66 2e 6d 6f 64 75 6c 65 73 3b 65 2e 65 78 70 65 6e 73 69 76 65 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 62 2e 5f 77 61 69 74 66 6f 72 6c 6f 61 64 3d 21 30 3b 72 65 74 75 72 6e 20 62 7d 3b 76 6f 69 64 20 30 3b 65 2e 72 65 71 75 69 72 65 3d 66 2e 72 65 71 75 69 72 65 3b 65 2e 70 72 6f 76 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 6c 29 7b 66 75 6e 63 74 69 6f 6e 20 6d 28 29 7b 76 61 72 20 61 3d 64 2e 63 6f 6e 73 Data Ascii: f0e(function(){window.parent!=window&&(window.lightningjs\|\|function(d,f){var e=d.lightningjs={modules:f.modules},r=f.modules;e.expensive=function(b){b._waitforload=!0;return b};void 0;e.require=f.require;e.provide=function(b,l){function m(){var a=d.cons
2024-10-30 07:46:35 UTC	8178	IN	Data Raw: 31 66 65 61 0d 0a 66 75 6e 63 74 69 6f 6e 20 65 28 61 2c 62 2c 63 29 7b 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 62 2c 63 2c 21 31 29 3a 61 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 2b 62 2c 63 29 7d 77 69 6e 64 6f 77 2e 75 73 61 62 69 6c 6c 61 5f 6c 69 76 65 3d 77 69 6e 64 6f 77 2e 75 73 61 62 69 6c 6c 61 5f 6c 69 76 65 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 75 73 61 62 69 6c 6c 61 5f 6c 69 76 65 2e 6f 6e 45 76 65 6e 74 3d 65 3b 77 69 6e 64 6f 77 2e 75 73 61 62 69 6c 6c 61 5f 6c 69 76 65 2e 73 74 6f 70 45 76 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 61 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 61 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 Data Ascii: 1feafunction e(a,b,c){a.addEventListener?a.addEventListener(b,c,!1):a.attachEvent("on"+b,c)}window.usabilla_live=window.usabilla_live\|\|{};window.usabilla_live.onEvent=e;window.usabilla_live.stopEvent=function(a,b,c){a.removeEventListener?a.removeEventLi
2024-10-30 07:46:35 UTC	11018	IN	Data Raw: 32 62 30 32 0d 0a 72 6f 74 6f 74 79 70 65 2e 6d 72 69 6d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 61 74 63 68 28 22 28 72 69 6d 7c 62 62 31 30 7c 62 6c 61 63 6b 62 65 72 72 79 29 22 29 26 26 21 74 68 69 73 2e 6d 61 74 63 68 28 22 74 61 62 6c 65 74 22 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 66 6f 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 61 74 63 68 28 22 66 69 72 65 66 6f 78 22 29 26 26 74 68 69 73 2e 6d 61 74 63 68 28 22 6d 6f 62 69 6c 65 22 29 26 26 21 74 68 69 73 2e 6d 61 74 63 68 28 22 61 6e 64 72 6f 69 64 22 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 6d 65 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 61 74 63 68 28 22 6d 65 65 67 6f 22 Data Ascii: 2b02rototype.mrim=function(){return this.match("(rim\|bb10\|blackberry)")&&!this.match("tablet")};b.prototype.mfos=function(){return this.match("firefox")&&this.match("mobile")&&!this.match("android")};b.prototype.mmee=function(){return this.match("meego"
2024-10-30 07:46:35 UTC	8969	IN	Data Raw: 32 33 30 31 0d 0a 6e 74 61 67 65 22 2c 22 70 65 72 63 65 6e 74 61 67 65 22 3a 31 30 30 7d 2c 7b 22 74 79 70 65 22 3a 22 63 75 73 74 6f 6d 22 2c 22 6e 61 6d 65 22 3a 22 56 65 72 73 69 6f 6e 20 45 4e 20 44 45 53 4b 54 4f 50 20 53 50 41 22 7d 5d 2c 22 65 22 3a 66 61 6c 73 65 7d 2c 22 39 33 32 63 30 62 37 64 66 62 31 33 22 3a 7b 22 76 22 3a 30 2c 22 61 22 3a 66 61 6c 73 65 2c 22 74 22 3a 5b 7b 22 74 79 70 65 22 3a 22 70 65 72 63 65 6e 74 61 67 65 22 2c 22 70 65 72 63 65 6e 74 61 67 65 22 3a 31 30 30 7d 2c 7b 22 74 79 70 65 22 3a 22 63 75 73 74 6f 6d 22 2c 22 6e 61 6d 65 22 3a 22 56 65 72 73 69 6f 6e 20 45 4e 20 44 45 53 4b 54 4f 50 20 53 53 52 22 7d 5d 2c 22 65 22 3a 66 61 6c 73 65 7d 2c 22 61 34 34 35 36 32 31 32 39 63 32 66 22 3a 7b 22 76 22 3a 32 2c 22 61 Data Ascii: 2301ntage","percentage":100},{"type":"custom","name":"Version EN DESKTOP SPA"}],"e":false},"932c0b7dfb13":{"v":0,"a":false,"t":[{"type":"percentage","percentage":100},{"type":"custom","name":"Version EN DESKTOP SSR"}],"e":false},"a44562129c2f":{"v":2,"a
2024-10-30 07:46:35 UTC	16384	IN	Data Raw: 36 37 66 39 0d 0a 2e 73 68 74 6d 6c 29 22 7d 5d 2c 22 65 22 3a 66 61 6c 73 65 7d 2c 22 31 66 34 35 30 66 66 33 39 30 39 61 22 3a 7b 22 76 22 3a 31 34 2c 22 61 22 3a 74 72 75 65 2c 22 74 22 3a 5b 7b 22 74 79 70 65 22 3a 22 6d 6f 75 73 65 6f 75 74 22 2c 22 74 69 6d 65 22 3a 32 30 30 30 30 2c 22 6d 75 6c 74 69 70 6c 69 65 72 22 3a 31 30 30 30 7d 2c 7b 22 74 79 70 65 22 3a 22 70 65 72 63 65 6e 74 61 67 65 22 2c 22 70 65 72 63 65 6e 74 61 67 65 22 3a 31 30 30 7d 2c 7b 22 74 79 70 65 22 3a 22 70 61 67 65 73 22 2c 22 70 61 67 65 73 22 3a 32 2c 22 6f 70 22 3a 22 6c 65 61 73 74 22 7d 2c 7b 22 74 79 70 65 22 3a 22 75 72 6c 22 2c 22 6d 61 74 63 68 22 3a 22 68 72 65 66 22 2c 22 71 75 65 72 79 22 3a 74 72 75 65 2c 22 69 6e 76 65 72 74 22 3a 66 61 6c 73 65 2c 22 72 65 Data Ascii: 67f9.shtml)"}],"e":false},"1f450ff3909a":{"v":14,"a":true,"t":[{"type":"mouseout","time":20000,"multiplier":1000},{"type":"percentage","percentage":100},{"type":"pages","pages":2,"op":"least"},{"type":"url","match":"href","query":true,"invert":false,"re
2024-10-30 07:46:35 UTC	10241	IN	Data Raw: 2c 22 69 6e 76 65 72 74 22 3a 66 61 6c 73 65 2c 22 72 65 67 65 78 70 22 3a 22 28 5e 68 74 74 70 73 5c 5c 3a 5c 2f 5c 2f 70 75 6c 6c 6d 61 6e 5c 5c 2e 61 63 63 6f 72 5c 5c 2e 63 6f 6d 29 22 7d 5d 2c 22 65 22 3a 7b 22 65 66 66 65 63 74 22 3a 22 76 32 5c 2f 73 6c 69 64 65 6f 75 74 22 2c 22 73 70 65 65 64 22 3a 36 30 30 2c 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 64 36 74 69 7a 66 74 6c 72 70 75 6f 66 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 5c 2f 6c 69 76 65 5c 2f 69 5c 2f 35 37 39 35 66 35 31 65 36 34 61 64 31 30 65 62 37 36 32 64 37 30 63 36 5c 2f 37 33 38 33 39 62 36 33 62 37 37 30 33 62 38 33 30 65 33 35 65 39 65 30 32 33 35 63 39 36 35 63 66 39 37 36 39 35 64 63 2e 68 74 6d 6c 22 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 22 72 69 Data Ascii: ,"invert":false,"regexp":"(^https\\:\/\/pullman\\.accor\\.com)"}],"e":{"effect":"v2\/slideout","speed":600,"location":"https:\/\/d6tizftlrpuof.cloudfront.net\/live\/i\/5795f51e64ad10eb762d70c6\/73839b63b7703b830e35e9e0235c965cf97695dc.html","position":"ri
2024-10-30 07:46:35 UTC	16384	IN	Data Raw: 34 32 35 32 0d 0a 3b 0a 76 61 72 20 53 3d 5b 5d 3b 76 61 72 20 54 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 61 3b 69 66 28 30 3c 3d 78 2e 63 61 6c 6c 28 76 2c 62 29 29 72 65 74 75 72 6e 21 30 3b 76 61 72 20 64 3d 62 2e 67 65 74 54 61 67 73 28 29 3b 76 61 72 20 63 3d 30 3b 66 6f 72 28 61 3d 64 2e 6c 65 6e 67 74 68 3b 63 3c 61 3b 63 2b 2b 29 7b 76 61 72 20 66 3d 64 5b 63 5d 3b 69 66 28 30 3c 3d 78 2e 63 61 6c 6c 28 46 2c 66 29 29 72 65 74 75 72 6e 21 31 7d 76 2e 70 75 73 68 28 62 29 3b 61 3d 62 2e 67 65 74 54 61 67 73 28 29 3b 62 3d 30 3b 66 6f 72 28 63 3d 61 2e 6c 65 6e 67 74 68 3b 62 3c 63 3b 62 2b 2b 29 66 3d 61 5b 62 5d 2c 46 2e 70 75 73 68 28 66 29 3b 72 65 74 75 72 6e 21 30 7d 3b 76 61 72 20 4a 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 Data Ascii: 4252;var S=[];var T=function(b){var a;if(0<=x.call(v,b))return!0;var d=b.getTags();var c=0;for(a=d.length;c<a;c++){var f=d[c];if(0<=x.call(F,f))return!1}v.push(b);a=b.getTags();b=0;for(c=a.length;b<c;b++)f=a[b],F.push(f);return!0};var J=function(b){ret
2024-10-30 07:46:35 UTC	602	IN	Data Raw: 6e 63 74 69 6f 6e 28 61 29 7b 6e 2e 66 6f 72 6d 3d 61 7d 2c 64 69 73 61 62 6c 65 53 63 72 65 65 6e 73 68 6f 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 6e 2e 67 65 6e 65 72 61 74 65 53 63 72 65 65 6e 73 68 6f 74 3d 21 61 7d 2c 6f 6e 4c 6f 61 64 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 79 28 61 29 7d 2c 69 65 31 30 46 6f 63 75 73 46 69 78 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 69 65 31 30 66 6f 63 75 73 66 69 78 3d 21 30 7d 2c 73 65 74 45 76 65 6e 74 43 61 6c 6c 62 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 6e 2e 65 76 65 6e 74 43 61 6c 6c 62 61 63 6b 3d 0a 61 7d 2c 73 65 74 44 61 74 61 4d 61 73 6b 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 6e 2e 6d 61 73 6b 73 3d 61 7c 7c 5b 2f 5b 61 2d 7a 41 2d 5a 30 2d 39 5c 2b 5c 2e 5c 5f 5c 25 5c 2d 5c Data Ascii: nction(a){n.form=a},disableScreenshot:function(a){n.generateScreenshot=!a},onLoad:function(a){y(a)},ie10FocusFix:function(){n.ie10focusfix=!0},setEventCallback:function(a){n.eventCallback=a},setDataMasking:function(a,b){n.masks=a\|\|[/[a-zA-Z0-9\+\.\_\%\-\
2024-10-30 07:46:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	49893	172.67.72.50	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:36 UTC	617	OUT	GET /kameleoon.js HTTP/1.1 Host: qchmhd61sj.kameleoon.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://all.accor.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"671f95a0-4ce4c" If-Modified-Since: Mon, 28 Oct 2024 13:46:08 GMT
2024-10-30 07:46:36 UTC	870	IN	HTTP/1.1 304 Not Modified Date: Wed, 30 Oct 2024 07:46:36 GMT Connection: close last-modified: Mon, 28 Oct 2024 13:46:08 GMT vary: Accept-Encoding etag: W/"671f95a0-4ce4c" expires: Wed, 30 Oct 2024 07:46:43 GMT Cache-Control: max-age=3600, s-maxage=5400 cdn-cache-control: max-age=5400; public; stale-if-error=604800; stale-while-revalidate=604800 strict-transport-security: max-age=31536000; includeSubDomains; preload CF-Cache-Status: HIT Age: 5309 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Yln5wkiSsRdNAfadtJIOSbS3vprXoL9bhcG7Q2hu4iv83H5VG20YiwtvnpPaV4SoQM947Jq8ijd9W0aZwtYoGn0Pb8Lt1zJSAq9aKweDPck4yXrxNyISIHHb8fifg5nCIeTopOZVrK8M"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da9cae07da56b4b-DFW alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	49889	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:36 UTC	6167	OUT	GET /styles-v2410/styles-global.css HTTP/1.1 Host: all.accor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://all.accor.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; incap_ses_1388_3039981=WwV9UFsZYQbcTBz5zCpDE0/kIWcAAAAAAlW7vDjSIvNuKK2ooaDNBg==; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; incap_ses_1237_3039981=RMkdawpcO0pafv9zF7UqEVDkIWcAAAAAOdDq+0nC/oeq6w4fyTL3Fg==; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJl [TRUNCATED] If-Modified-Since: Mon, 28 Oct 2024 11:00:49 GMT
2024-10-30 07:46:36 UTC	582	IN	HTTP/1.1 304 Not Modified Age: 161147 Cache-control: public, max-age=3600, stale-while-revalidate=21600 Date: Wed, 30 Oct 2024 07:46:36 GMT Last-Modified: Mon, 28 Oct 2024 11:00:49 GMT P3P: CP="NO P3P POLICY" Referrer-Policy: origin Server: ECAcc (lhd/35A6) Strict-Transport-Security: max-age=15552000 Vary: Accept-Encoding X-Accor-asset: ecom X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Clacks-Overhead: GNU Terry Pratchett X-Iinfo: 17-20417518-20412504 pNNN RT(1730113249492 3) q(0 0 0 0) r(1 1) U24 X-XSS-Protection: 1; mode=block Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	49892	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:36 UTC	6199	OUT	GET /assets/fonts/montserrat/bold/montserrat-bold.woff2 HTTP/1.1 Host: all.accor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://all.accor.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://all.accor.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; incap_ses_1388_3039981=WwV9UFsZYQbcTBz5zCpDE0/kIWcAAAAAAlW7vDjSIvNuKK2ooaDNBg==; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; incap_ses_1237_3039981=RMkdawpcO0pafv9zF7UqEVDkIWcAAAAAOdDq+0nC/oeq6w4fyTL3Fg==; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJl [TRUNCATED] If-Modified-Since: Wed, 16 Oct 2024 09:00:04 GMT
2024-10-30 07:46:36 UTC	800	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: authorization, content-type, x-requested-with Access-Control-Allow-Methods: PUT, GET, POST, DELETE, OPTIONS Access-Control-Allow-Origin: * Age: 161146 Cache-control: public, max-age=3600, stale-while-revalidate=21600 Date: Wed, 30 Oct 2024 07:46:36 GMT Last-Modified: Wed, 16 Oct 2024 09:00:04 GMT P3P: CP="NO P3P POLICY" Referrer-Policy: origin Server: ECAcc (lhd/35E7) Strict-Transport-Security: max-age=15552000 Timing-Allow-Origin: * X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Clacks-Overhead: GNU Terry Pratchett X-Iinfo: 18-214202037-214187739 pNNy RT(1730113249964 13) q(0 0 0 -1) r(1 1) U24 X-XSS-Protection: 1; mode=block Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	49891	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:36 UTC	6457	OUT	GET /assets/fonts/roboto/bold/roboto-bold.woff2 HTTP/1.1 Host: all.accor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://all.accor.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://all.accor.com/a/en/new-app-offer/app-download.html?source_caller=bulk&af_qr=true&shortlink=5m1nc8of&c=20241013_ALL_AppBonusingMobileLp&af_ad=QR_code_20241013_ALL_AppBonusingMobileLp&pid=QR_code&deep_link_value=accor%3A%2F%2Fsearch%2Foffer%3Fpage_id%3Dddc8e830-2fc5-4492-ae7f-a63574b202f4&af_adset=EN Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; incap_ses_1388_3039981=WwV9UFsZYQbcTBz5zCpDE0/kIWcAAAAAAlW7vDjSIvNuKK2ooaDNBg==; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; incap_ses_1237_3039981=RMkdawpcO0pafv9zF7UqEVDkIWcAAAAAOdDq+0nC/oeq6w4fyTL3Fg==; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJl [TRUNCATED] If-Modified-Since: Wed, 16 Oct 2024 09:00:04 GMT
2024-10-30 07:46:36 UTC	798	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: authorization, content-type, x-requested-with Access-Control-Allow-Methods: PUT, GET, POST, DELETE, OPTIONS Access-Control-Allow-Origin: * Age: 161146 Cache-control: public, max-age=3600, stale-while-revalidate=21600 Date: Wed, 30 Oct 2024 07:46:36 GMT Last-Modified: Wed, 16 Oct 2024 09:00:04 GMT P3P: CP="NO P3P POLICY" Referrer-Policy: origin Server: ECAcc (lhd/35F0) Strict-Transport-Security: max-age=15552000 Timing-Allow-Origin: * X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Clacks-Overhead: GNU Terry Pratchett X-Iinfo: 15-133980910-133961841 pNNy RT(1730113249990 3) q(0 1 1 0) r(1 1) U24 X-XSS-Protection: 1; mode=block Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	49890	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:36 UTC	6140	OUT	GET /enroll-loyalty/assets/index-Czu5RiSy.js HTTP/1.1 Host: all.accor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://all.accor.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://all.accor.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; incap_ses_1388_3039981=WwV9UFsZYQbcTBz5zCpDE0/kIWcAAAAAAlW7vDjSIvNuKK2ooaDNBg==; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; incap_ses_1237_3039981=RMkdawpcO0pafv9zF7UqEVDkIWcAAAAAOdDq+0nC/oeq6w4fyTL3Fg==; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJl [TRUNCATED]
2024-10-30 07:46:36 UTC	860	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: authorization, content-type, x-requested-with Access-Control-Allow-Methods: PUT, GET, POST, DELETE, OPTIONS Access-Control-Allow-Origin: https://all.accor.com Age: 161145 Cache-control: public, max-age=3600, stale-while-revalidate=21600 Content-Type: text/javascript Date: Wed, 30 Oct 2024 07:46:36 GMT Last-Modified: Mon, 28 Oct 2024 11:00:51 GMT P3P: CP="NO P3P POLICY" Referrer-Policy: origin Server: ECAcc (lhd/35B2) Strict-Transport-Security: max-age=15552000 Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Clacks-Overhead: GNU Terry Pratchett X-Iinfo: 8-33456089-33347679 pNNy RT(1730113251090 3) q(0 1 1 -1) r(1 1) U24 X-XSS-Protection: 1; mode=block Content-Length: 8742 Connection: close
2024-10-30 07:46:36 UTC	8742	IN	Data Raw: 69 6d 70 6f 72 74 7b 61 20 61 73 20 63 2c 62 20 61 73 20 6a 7d 66 72 6f 6d 22 2e 2f 61 78 69 6f 73 2d 43 4a 46 55 64 33 36 62 2e 6a 73 22 3b 63 6f 6e 73 74 20 6d 65 3d 65 3d 3e 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 7c 7c 7b 7d 29 2e 6c 65 6e 67 74 68 3d 3d 3d 30 2c 6c 3d 28 65 3d 77 69 6e 64 6f 77 29 3d 3e 7b 63 6f 6e 73 74 20 74 3d 6e 3d 3e 6e 3d 3d 3d 22 67 62 22 3f 22 65 6e 22 3a 6e 2c 72 3d 65 2e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 6c 61 6e 67 3b 72 65 74 75 72 6e 20 74 28 72 29 7c 7c 22 65 6e 22 7d 2c 77 3d 28 65 2c 74 2c 72 3d 79 65 29 3d 3e 65 2b 28 6d 65 28 74 29 3f 22 22 3a 22 3f 22 2b 72 28 74 29 29 2c 45 3d 28 65 2c 74 29 3d 3e 77 28 65 2c 6b 28 74 29 29 2c 68 65 3d 65 3d 3e 74 3d 3e 4f 62 6a 65 63 74 2e Data Ascii: import{a as c,b as j}from"./axios-CJFUd36b.js";const me=e=>Object.keys(e\|\|{}).length===0,l=(e=window)=>{const t=n=>n==="gb"?"en":n,r=e.document.documentElement.lang;return t(r)\|\|"en"},w=(e,t,r=ye)=>e+(me(t)?"":"?"+r(t)),E=(e,t)=>w(e,k(t)),he=e=>t=>Object.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	49894	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:36 UTC	6140	OUT	GET /enroll-loyalty/assets/index-BJwiwBAj.js HTTP/1.1 Host: all.accor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://all.accor.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://all.accor.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; incap_ses_1388_3039981=WwV9UFsZYQbcTBz5zCpDE0/kIWcAAAAAAlW7vDjSIvNuKK2ooaDNBg==; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; incap_ses_1237_3039981=RMkdawpcO0pafv9zF7UqEVDkIWcAAAAAOdDq+0nC/oeq6w4fyTL3Fg==; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJl [TRUNCATED]
2024-10-30 07:46:37 UTC	906	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: authorization, content-type, x-requested-with Access-Control-Allow-Methods: PUT, GET, POST, DELETE, OPTIONS Access-Control-Allow-Origin: https://all.accor.com Age: 161144 Cache-control: public, max-age=3600, stale-while-revalidate=21600 Content-Type: text/javascript Date: Wed, 30 Oct 2024 07:46:36 GMT Last-Modified: Mon, 28 Oct 2024 11:00:52 GMT P3P: CP="NO P3P POLICY" Referrer-Policy: origin Server: ECAcc (lhd/35BD) Strict-Transport-Security: max-age=15552000 Strict-Transport-Security: max-age=15552000 Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Clacks-Overhead: GNU Terry Pratchett X-Iinfo: 18-253370485-253370442 pNNy RT(1730113251392 3) q(0 1 1 0) r(1 1) U24 X-XSS-Protection: 1; mode=block Content-Length: 713 Connection: close
2024-10-30 07:46:37 UTC	713	IN	Data Raw: 63 6f 6e 73 74 20 45 3d 22 45 4e 52 4f 4c 4c 2d 4c 4f 59 41 4c 54 59 22 2c 5f 3d 22 6c 37 78 78 38 37 38 35 32 36 31 62 32 61 33 33 34 35 37 64 62 38 38 39 35 39 61 38 36 37 39 61 31 33 30 37 22 2c 4f 3d 7b 49 4e 56 41 4c 49 44 5f 50 52 4f 4d 4f 43 4f 44 45 3a 22 49 4e 56 41 4c 49 44 5f 50 52 4f 4d 4f 43 4f 44 45 22 2c 50 52 4f 4d 4f 54 49 4f 4e 5f 43 4f 44 45 5f 45 58 50 49 52 45 44 3a 22 50 52 4f 4d 4f 54 49 4f 4e 5f 43 4f 44 45 5f 45 58 50 49 52 45 44 22 2c 49 4e 56 41 4c 49 44 5f 50 52 4f 4d 4f 54 49 4f 4e 5f 43 4f 44 45 3a 22 49 4e 56 41 4c 49 44 5f 50 52 4f 4d 4f 54 49 4f 4e 5f 43 4f 44 45 22 2c 50 52 4f 4d 4f 54 49 4f 4e 5f 43 4f 44 45 5f 41 4c 52 45 41 44 59 5f 55 53 45 44 3a 22 50 52 4f 4d 4f 54 49 4f 4e 5f 43 4f 44 45 5f 41 4c 52 45 41 44 59 5f Data Ascii: const E="ENROLL-LOYALTY",_="l7xx8785261b2a33457db88959a8679a1307",O={INVALID_PROMOCODE:"INVALID_PROMOCODE",PROMOTION_CODE_EXPIRED:"PROMOTION_CODE_EXPIRED",INVALID_PROMOTION_CODE:"INVALID_PROMOTION_CODE",PROMOTION_CODE_ALREADY_USED:"PROMOTION_CODE_ALREADY_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	49895	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:37 UTC	6140	OUT	GET /enroll-loyalty/assets/index-CB71MQO2.js HTTP/1.1 Host: all.accor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://all.accor.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://all.accor.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; incap_ses_1388_3039981=WwV9UFsZYQbcTBz5zCpDE0/kIWcAAAAAAlW7vDjSIvNuKK2ooaDNBg==; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; incap_ses_1237_3039981=RMkdawpcO0pafv9zF7UqEVDkIWcAAAAAOdDq+0nC/oeq6w4fyTL3Fg==; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJl [TRUNCATED]
2024-10-30 07:46:37 UTC	902	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: authorization, content-type, x-requested-with Access-Control-Allow-Methods: PUT, GET, POST, DELETE, OPTIONS Access-Control-Allow-Origin: https://all.accor.com Age: 161145 Cache-control: public, max-age=3600, stale-while-revalidate=21600 Content-Type: text/javascript Date: Wed, 30 Oct 2024 07:46:37 GMT Last-Modified: Mon, 28 Oct 2024 11:00:52 GMT P3P: CP="NO P3P POLICY" Referrer-Policy: origin Server: ECAcc (lhd/35EF) Strict-Transport-Security: max-age=15552000 Strict-Transport-Security: max-age=15552000 Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Clacks-Overhead: GNU Terry Pratchett X-Iinfo: 14-1272356-1247248 pNNy RT(1730113252038 4) q(0 0 0 0) r(1 1) U24 X-XSS-Protection: 1; mode=block Content-Length: 373 Connection: close
2024-10-30 07:46:37 UTC	373	IN	Data Raw: 69 6d 70 6f 72 74 7b 6b 20 61 73 20 6e 2c 6d 20 61 73 20 6f 2c 6e 20 61 73 20 69 7d 66 72 6f 6d 22 2e 2f 69 6e 64 65 78 2d 43 7a 75 35 52 69 53 79 2e 6a 73 22 3b 63 6f 6e 73 74 20 75 3d 28 72 3d 7b 7d 29 3d 3e 61 73 79 6e 63 28 74 3d 7b 7d 29 3d 3e 6e 2e 67 65 74 28 6f 2c 7b 2e 2e 2e 72 2c 2e 2e 2e 74 7d 29 2e 74 68 65 6e 28 28 7b 64 61 74 61 3a 65 7d 29 3d 3e 28 65 2e 66 69 65 6c 64 73 3d 74 2e 66 69 65 6c 64 73 2c 65 2e 66 69 6c 74 65 72 3d 74 2e 66 69 6c 74 65 72 2c 65 29 29 2e 63 61 74 63 68 28 28 29 3d 3e 7b 74 68 72 6f 77 20 69 2e 47 65 74 55 73 65 72 46 61 69 6c 65 64 7d 29 2c 70 3d 22 70 72 6f 66 69 6c 65 22 2c 41 3d 28 72 3d 7b 7d 29 3d 3e 61 73 79 6e 63 28 74 3d 7b 7d 29 3d 3e 7b 63 6f 6e 73 74 7b 73 65 72 76 69 63 65 3a 65 3d 70 2c 70 61 79 6c Data Ascii: import{k as n,m as o,n as i}from"./index-Czu5RiSy.js";const u=(r={})=>async(t={})=>n.get(o,{...r,...t}).then(({data:e})=>(e.fields=t.fields,e.filter=t.filter,e)).catch(()=>{throw i.GetUserFailed}),p="profile",A=(r={})=>async(t={})=>{const{service:e=p,payl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	49897	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:37 UTC	6169	OUT	GET /ruxitagentjs_ICA7NVfhqrux_10285240307101407.js HTTP/1.1 Host: all.accor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://all.accor.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; incap_ses_1388_3039981=WwV9UFsZYQbcTBz5zCpDE0/kIWcAAAAAAlW7vDjSIvNuKK2ooaDNBg==; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; incap_ses_1237_3039981=RMkdawpcO0pafv9zF7UqEVDkIWcAAAAAOdDq+0nC/oeq6w4fyTL3Fg==; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJl [TRUNCATED] If-Modified-Since: Mon, 28 Oct 2024 11:00:49 GMT
2024-10-30 07:46:38 UTC	603	IN	HTTP/1.1 304 Not Modified Age: 161148 Cache-Control: public, max-age=3600, stale-while-revalidate=21600 Date: Wed, 30 Oct 2024 07:46:37 GMT Expires: Thu, 30 Oct 2025 07:46:37 GMT Last-Modified: Mon, 28 Oct 2024 11:00:49 GMT P3P: CP="NO P3P POLICY" Referrer-Policy: origin Server: ECAcc (lhd/35C9) Strict-Transport-Security: max-age=15552000 Vary: Accept-Encoding X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Clacks-Overhead: GNU Terry Pratchett X-Iinfo: 16-157356282-157353079 pNNy RT(1730113249534 2) q(0 0 0 0) r(1 1) U24 X-XSS-Protection: 1; mode=block Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	49913	172.67.72.50	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:37 UTC	359	OUT	GET /kameleoon.js HTTP/1.1 Host: qchmhd61sj.kameleoon.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 07:46:38 UTC	957	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 07:46:37 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close last-modified: Mon, 28 Oct 2024 13:46:08 GMT vary: Accept-Encoding etag: W/"671f95a0-4ce4c" expires: Wed, 30 Oct 2024 07:46:43 GMT Cache-Control: max-age=3600, s-maxage=5400 cdn-cache-control: max-age=5400; public; stale-if-error=604800; stale-while-revalidate=604800 strict-transport-security: max-age=31536000; includeSubDomains; preload CF-Cache-Status: HIT Age: 5310 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tcn6R6Vz9DbV1LgQ9FjSP8%2BDn%2FTvHMuw%2FDd3%2FRF442QiF7kJT9ir%2Fl08k7o%2FrEyJvp9FFm8xe7se%2FsJTQUzODcHAKcuiI2nb7GmBktYHjHiluEyT%2FDvENdObVfndlGeuksabET3ymuRY"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da9caeb182f6bba-DFW alt-svc: h3=":443"; ma=86400
2024-10-30 07:46:38 UTC	412	IN	Data Raw: 37 62 66 38 0d 0a 69 66 20 28 75 6e 64 65 66 69 6e 65 64 20 3d 3d 3d 20 77 69 6e 64 6f 77 2e 4b 61 6d 65 6c 65 6f 6f 6e 29 7b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 6b 62 6f 77 73 65 72 3d 74 28 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 69 29 7b 69 66 28 74 5b 69 5d 29 72 65 74 75 72 6e 20 74 5b 69 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6e 3d 74 5b 69 5d 3d 7b 69 3a 69 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 69 5d 2e 63 61 6c 6c 28 6e 2e 65 78 70 6f 72 74 73 2c 6e 2c 6e 2e 65 78 70 6f 72 74 73 2c 72 29 2c 6e 2e 6c 3d 21 30 2c 6e 2e Data Ascii: 7bf8if (undefined === window.Kameleoon){(function(){!function(e,t){e.kbowser=t()}(this,(function(){return function(e){var t={};function r(i){if(t[i])return t[i].exports;var n=t[i]={i:i,l:!1,exports:{}};return e[i].call(n.exports,n,n.exports,r),n.l=!0,n.
2024-10-30 07:46:38 UTC	1369	IN	Data Raw: 2e 74 6f 53 74 72 69 6e 67 54 61 67 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 53 79 6d 62 6f 6c 2e 74 6f 53 74 72 69 6e 67 54 61 67 2c 7b 76 61 6c 75 65 3a 22 4d 6f 64 75 6c 65 22 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 7d 2c 72 2e 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 31 26 74 26 26 28 65 3d 72 28 65 29 29 2c 38 26 74 29 72 65 74 75 72 6e 20 65 3b 69 66 28 34 26 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 69 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 3b 69 66 28 Data Ascii: .toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},r.t=function(e,t){if(1&t&&(e=r(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var i=Object.create(null);if(
2024-10-30 07:46:38 UTC	1369	IN	Data Raw: 28 29 7b 76 61 72 20 65 3d 73 5b 74 5d 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 6e 75 6c 6c 21 3d 3d 65 26 26 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 5b 74 5d 3d 65 5b 74 5d 7d 29 29 7d 3b 66 6f 72 28 74 3d 30 2c 72 3d 73 2e 6c 65 6e 67 74 68 3b 74 3c 72 3b 74 2b 3d 31 29 6f 28 29 3b 72 65 74 75 72 6e 20 65 7d 2c 65 7d 28 29 3b 74 2e 64 65 66 61 75 6c 74 3d 6e 2c 65 2e 65 78 70 6f 72 74 73 3d 74 2e 64 65 66 61 75 6c 74 7d 2c 31 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3d 21 30 2c 74 2e 4f 53 5f 4d 41 50 3d 74 2e 50 4c 41 54 46 4f 52 4d 53 5f 4d 41 50 3d 76 6f 69 64 20 30 3b 74 Data Ascii: (){var e=s[t];"object"==typeof e&&null!==e&&Object.keys(e).forEach((function(t){i[t]=e[t]}))};for(t=0,r=s.length;t<r;t+=1)o();return e},e}();t.default=n,e.exports=t.default},18:function(e,t,r){"use strict";t.__esModule=!0,t.OS_MAP=t.PLATFORMS_MAP=void 0;t
2024-10-30 07:46:38 UTC	1369	IN	Data Raw: 69 73 3b 74 68 69 73 2e 70 61 72 73 65 64 52 65 73 75 6c 74 2e 62 72 6f 77 73 65 72 3d 7b 7d 3b 76 61 72 20 74 3d 61 2e 64 65 66 61 75 6c 74 2e 66 69 6e 64 28 69 2e 64 65 66 61 75 6c 74 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 2e 74 65 73 74 29 72 65 74 75 72 6e 20 74 2e 74 65 73 74 28 65 29 3b 69 66 28 74 2e 74 65 73 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 72 65 74 75 72 6e 20 74 2e 74 65 73 74 2e 73 6f 6d 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 74 65 73 74 28 74 29 7d 29 29 3b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 42 72 6f 77 73 65 72 27 73 20 74 65 73 74 20 66 75 6e 63 74 69 6f 6e 20 69 73 20 6e 6f 74 20 76 61 6c 69 64 22 Data Ascii: is;this.parsedResult.browser={};var t=a.default.find(i.default,(function(t){if("function"==typeof t.test)return t.test(e);if(t.test instanceof Array)return t.test.some((function(t){return e.test(t)}));throw new Error("Browser's test function is not valid"
2024-10-30 07:46:38 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 74 65 73 74 28 74 29 7d 29 29 3b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 42 72 6f 77 73 65 72 27 73 20 74 65 73 74 20 66 75 6e 63 74 69 6f 6e 20 69 73 20 6e 6f 74 20 76 61 6c 69 64 22 29 7d 29 29 3b 72 65 74 75 72 6e 20 74 26 26 28 74 68 69 73 2e 70 61 72 73 65 64 52 65 73 75 6c 74 2e 70 6c 61 74 66 6f 72 6d 3d 74 2e 64 65 73 63 72 69 62 65 28 74 68 69 73 2e 67 65 74 55 41 28 29 29 29 2c 74 68 69 73 2e 70 61 72 73 65 64 52 65 73 75 6c 74 2e 70 6c 61 74 66 6f 72 6d 7d 2c 74 2e 70 61 72 73 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 61 72 73 65 42 72 6f 77 73 65 72 28 29 2c 74 68 69 73 2e 70 61 72 73 65 4f 53 28 29 2c 74 68 69 73 2e 70 61 72 73 65 50 Data Ascii: function(t){return e.test(t)}));throw new Error("Browser's test function is not valid")}));return t&&(this.parsedResult.platform=t.describe(this.getUA())),this.parsedResult.platform},t.parse=function(){return this.parseBrowser(),this.parseOS(),this.parseP
2024-10-30 07:46:38 UTC	1369	IN	Data Raw: 61 75 6c 74 2e 67 65 74 46 69 72 73 74 4d 61 74 63 68 28 73 2c 65 29 7c 7c 6e 2e 64 65 66 61 75 6c 74 2e 67 65 74 46 69 72 73 74 4d 61 74 63 68 28 2f 28 3f 3a 77 68 61 6c 65 29 5b 5c 73 2f 5d 28 5c 64 2b 28 3f 3a 5c 2e 5c 64 2b 29 2b 29 2f 69 2c 65 29 3b 72 65 74 75 72 6e 20 72 26 26 28 74 2e 76 65 72 73 69 6f 6e 3d 72 29 2c 74 7d 7d 2c 7b 74 65 73 74 3a 5b 2f 4d 5a 42 72 6f 77 73 65 72 2f 69 5d 2c 64 65 73 63 72 69 62 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 6e 61 6d 65 3a 22 4d 5a 20 42 72 6f 77 73 65 72 22 7d 2c 72 3d 6e 2e 64 65 66 61 75 6c 74 2e 67 65 74 46 69 72 73 74 4d 61 74 63 68 28 2f 28 3f 3a 4d 5a 42 72 6f 77 73 65 72 29 5b 5c 73 2f 5d 28 5c 64 2b 28 3f 3a 5c 2e 5c 64 2b 29 2b 29 2f 69 2c 65 29 7c 7c 6e 2e 64 65 66 61 75 Data Ascii: ault.getFirstMatch(s,e)\|\|n.default.getFirstMatch(/(?:whale)[\s/](\d+(?:\.\d+)+)/i,e);return r&&(t.version=r),t}},{test:[/MZBrowser/i],describe:function(e){var t={name:"MZ Browser"},r=n.default.getFirstMatch(/(?:MZBrowser)[\s/](\d+(?:\.\d+)+)/i,e)\|\|n.defau
2024-10-30 07:46:38 UTC	1369	IN	Data Raw: 61 78 74 68 6f 6e 7c 6d 78 69 6f 73 29 5b 5c 73 2f 5d 28 5c 64 2b 28 5c 2e 3f 5f 3f 5c 64 2b 29 2b 29 2f 69 2c 65 29 3b 72 65 74 75 72 6e 20 72 26 26 28 74 2e 76 65 72 73 69 6f 6e 3d 72 29 2c 74 7d 7d 2c 7b 74 65 73 74 3a 5b 2f 65 70 69 70 68 61 6e 79 2f 69 5d 2c 64 65 73 63 72 69 62 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 6e 61 6d 65 3a 22 45 70 69 70 68 61 6e 79 22 7d 2c 72 3d 6e 2e 64 65 66 61 75 6c 74 2e 67 65 74 46 69 72 73 74 4d 61 74 63 68 28 73 2c 65 29 7c 7c 6e 2e 64 65 66 61 75 6c 74 2e 67 65 74 46 69 72 73 74 4d 61 74 63 68 28 2f 28 3f 3a 65 70 69 70 68 61 6e 79 29 5b 5c 73 2f 5d 28 5c 64 2b 28 5c 2e 3f 5f 3f 5c 64 2b 29 2b 29 2f 69 2c 65 29 3b 72 65 74 75 72 6e 20 72 26 26 28 74 2e 76 65 72 73 69 6f 6e 3d 72 29 2c 74 7d Data Ascii: axthon\|mxios)[\s/](\d+(\.?_?\d+)+)/i,e);return r&&(t.version=r),t}},{test:[/epiphany/i],describe:function(e){var t={name:"Epiphany"},r=n.default.getFirstMatch(s,e)\|\|n.default.getFirstMatch(/(?:epiphany)[\s/](\d+(\.?_?\d+)+)/i,e);return r&&(t.version=r),t}
2024-10-30 07:46:38 UTC	1369	IN	Data Raw: 2f 28 3f 3a 6d 73 69 65 20 7c 72 76 3a 29 28 5c 64 2b 28 5c 2e 3f 5f 3f 5c 64 2b 29 2b 29 2f 69 2c 65 29 3b 72 65 74 75 72 6e 20 72 26 26 28 74 2e 76 65 72 73 69 6f 6e 3d 72 29 2c 74 7d 7d 2c 7b 74 65 73 74 3a 5b 2f 5c 73 65 64 67 5c 2f 2f 69 5d 2c 64 65 73 63 72 69 62 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 6e 61 6d 65 3a 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 7d 2c 72 3d 6e 2e 64 65 66 61 75 6c 74 2e 67 65 74 46 69 72 73 74 4d 61 74 63 68 28 2f 5c 73 65 64 67 5c 2f 28 5c 64 2b 28 5c 2e 3f 5f 3f 5c 64 2b 29 2b 29 2f 69 2c 65 29 3b 72 65 74 75 72 6e 20 72 26 26 28 74 2e 76 65 72 73 69 6f 6e 3d 72 29 2c 74 7d 7d 2c 7b 74 65 73 74 3a 5b 2f 65 64 67 28 5b 65 61 5d 7c 69 6f 73 29 2f 69 5d 2c 64 65 73 63 72 69 62 65 3a 66 75 6e Data Ascii: /(?:msie \|rv:)(\d+(\.?_?\d+)+)/i,e);return r&&(t.version=r),t}},{test:[/\sedg\//i],describe:function(e){var t={name:"Microsoft Edge"},r=n.default.getFirstMatch(/\sedg\/(\d+(\.?_?\d+)+)/i,e);return r&&(t.version=r),t}},{test:[/edg([ea]\|ios)/i],describe:fun
2024-10-30 07:46:38 UTC	1369	IN	Data Raw: 61 72 20 74 3d 7b 6e 61 6d 65 3a 22 42 6c 61 63 6b 42 65 72 72 79 22 7d 2c 72 3d 6e 2e 64 65 66 61 75 6c 74 2e 67 65 74 46 69 72 73 74 4d 61 74 63 68 28 73 2c 65 29 7c 7c 6e 2e 64 65 66 61 75 6c 74 2e 67 65 74 46 69 72 73 74 4d 61 74 63 68 28 2f 62 6c 61 63 6b 62 65 72 72 79 5b 5c 64 5d 2b 5c 2f 28 5c 64 2b 28 5c 2e 3f 5f 3f 5c 64 2b 29 2b 29 2f 69 2c 65 29 3b 72 65 74 75 72 6e 20 72 26 26 28 74 2e 76 65 72 73 69 6f 6e 3d 72 29 2c 74 7d 7d 2c 7b 74 65 73 74 3a 5b 2f 28 77 65 62 7c 68 70 77 29 5b 6f 30 5d 73 2f 69 5d 2c 64 65 73 63 72 69 62 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 6e 61 6d 65 3a 22 57 65 62 4f 53 20 42 72 6f 77 73 65 72 22 7d 2c 72 3d 6e 2e 64 65 66 61 75 6c 74 2e 67 65 74 46 69 72 73 74 4d 61 74 63 68 28 73 2c 65 29 Data Ascii: ar t={name:"BlackBerry"},r=n.default.getFirstMatch(s,e)\|\|n.default.getFirstMatch(/blackberry[\d]+\/(\d+(\.?_?\d+)+)/i,e);return r&&(t.version=r),t}},{test:[/(web\|hpw)[o0]s/i],describe:function(e){var t={name:"WebOS Browser"},r=n.default.getFirstMatch(s,e)
2024-10-30 07:46:38 UTC	1369	IN	Data Raw: 74 63 68 28 73 2c 65 29 3b 72 65 74 75 72 6e 20 72 26 26 28 74 2e 76 65 72 73 69 6f 6e 3d 72 29 2c 74 7d 7d 2c 7b 74 65 73 74 3a 5b 2f 63 68 72 6f 6d 65 7c 63 72 69 6f 73 7c 63 72 6d 6f 2f 69 5d 2c 64 65 73 63 72 69 62 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 6e 61 6d 65 3a 22 43 68 72 6f 6d 65 22 7d 2c 72 3d 6e 2e 64 65 66 61 75 6c 74 2e 67 65 74 46 69 72 73 74 4d 61 74 63 68 28 2f 28 3f 3a 63 68 72 6f 6d 65 7c 63 72 69 6f 73 7c 63 72 6d 6f 29 5c 2f 28 5c 64 2b 28 5c 2e 3f 5f 3f 5c 64 2b 29 2b 29 2f 69 2c 65 29 3b 72 65 74 75 72 6e 20 72 26 26 28 74 2e 76 65 72 73 69 6f 6e 3d 72 29 2c 74 7d 7d 2c 7b 74 65 73 74 3a 5b 2f 47 53 41 2f 69 5d 2c 64 65 73 63 72 69 62 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 6e 61 6d Data Ascii: tch(s,e);return r&&(t.version=r),t}},{test:[/chrome\|crios\|crmo/i],describe:function(e){var t={name:"Chrome"},r=n.default.getFirstMatch(/(?:chrome\|crios\|crmo)\/(\d+(\.?_?\d+)+)/i,e);return r&&(t.version=r),t}},{test:[/GSA/i],describe:function(e){var t={nam

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	49896	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:37 UTC	6170	OUT	GET /services/business-referer/scripts-v2410/main.js HTTP/1.1 Host: all.accor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://all.accor.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; incap_ses_1388_3039981=WwV9UFsZYQbcTBz5zCpDE0/kIWcAAAAAAlW7vDjSIvNuKK2ooaDNBg==; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; incap_ses_1237_3039981=RMkdawpcO0pafv9zF7UqEVDkIWcAAAAAOdDq+0nC/oeq6w4fyTL3Fg==; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJl [TRUNCATED] If-Modified-Since: Mon, 28 Oct 2024 11:01:02 GMT
2024-10-30 07:46:38 UTC	563	IN	HTTP/1.1 304 Not Modified Age: 161135 Cache-control: public, max-age=3600, stale-while-revalidate=21600 Date: Wed, 30 Oct 2024 07:46:37 GMT Last-Modified: Mon, 28 Oct 2024 11:01:02 GMT P3P: CP="NO P3P POLICY" Referrer-Policy: origin Server: ECAcc (lhd/3599) Strict-Transport-Security: max-age=15552000 Vary: Accept-Encoding X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Clacks-Overhead: GNU Terry Pratchett X-Iinfo: 17-204440767-204440043 pNNy RT(1730113261310 3) q(0 0 0 0) r(0 0) U24 X-XSS-Protection: 1; mode=block Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	49909	172.64.155.119	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:37 UTC	380	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 07:46:38 UTC	249	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 07:46:37 GMT Content-Type: text/javascript Content-Length: 77 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8da9caeb28d72cd6-DFW
2024-10-30 07:46:38 UTC	77	IN	Data Raw: 6a 73 6f 6e 46 65 65 64 28 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 54 58 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 54 65 78 61 73 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d 29 3b Data Ascii: jsonFeed({"country":"US","state":"TX","stateName":"Texas","continent":"NA"});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	49899	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:37 UTC	6197	OUT	GET /enroll-loyalty/assets/verifyEnroll-D5kC1PyP.js HTTP/1.1 Host: all.accor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://all.accor.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://all.accor.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; incap_ses_1388_3039981=WwV9UFsZYQbcTBz5zCpDE0/kIWcAAAAAAlW7vDjSIvNuKK2ooaDNBg==; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; incap_ses_1237_3039981=RMkdawpcO0pafv9zF7UqEVDkIWcAAAAAOdDq+0nC/oeq6w4fyTL3Fg==; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJl [TRUNCATED] If-Modified-Since: Mon, 28 Oct 2024 11:00:49 GMT
2024-10-30 07:46:38 UTC	817	IN	HTTP/1.1 304 Not Modified Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: authorization, content-type, x-requested-with Access-Control-Allow-Methods: PUT, GET, POST, DELETE, OPTIONS Access-Control-Allow-Origin: https://all.accor.com Age: 161149 Cache-control: public, max-age=3600, stale-while-revalidate=21600 Date: Wed, 30 Oct 2024 07:46:38 GMT Last-Modified: Mon, 28 Oct 2024 11:00:49 GMT P3P: CP="NO P3P POLICY" Referrer-Policy: origin Server: ECAcc (lhd/35A8) Strict-Transport-Security: max-age=15552000 Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Clacks-Overhead: GNU Terry Pratchett X-Iinfo: 5-3273310-3250718 sNNN RT(1730113246797 2373) q(0 0 0 0) r(1 1) U24 X-XSS-Protection: 1; mode=block Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	49898	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:37 UTC	6190	OUT	GET /enroll-loyalty/assets/axios-CJFUd36b.js HTTP/1.1 Host: all.accor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://all.accor.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://all.accor.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; incap_ses_1388_3039981=WwV9UFsZYQbcTBz5zCpDE0/kIWcAAAAAAlW7vDjSIvNuKK2ooaDNBg==; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; incap_ses_1237_3039981=RMkdawpcO0pafv9zF7UqEVDkIWcAAAAAOdDq+0nC/oeq6w4fyTL3Fg==; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJl [TRUNCATED] If-Modified-Since: Mon, 28 Oct 2024 11:00:50 GMT
2024-10-30 07:46:38 UTC	819	IN	HTTP/1.1 304 Not Modified Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: authorization, content-type, x-requested-with Access-Control-Allow-Methods: PUT, GET, POST, DELETE, OPTIONS Access-Control-Allow-Origin: https://all.accor.com Age: 161148 Cache-control: public, max-age=3600, stale-while-revalidate=21600 Date: Wed, 30 Oct 2024 07:46:38 GMT Last-Modified: Mon, 28 Oct 2024 11:00:50 GMT P3P: CP="NO P3P POLICY" Referrer-Policy: origin Server: ECAcc (lhd/35E7) Strict-Transport-Security: max-age=15552000 Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Clacks-Overhead: GNU Terry Pratchett X-Iinfo: 18-214202022-214187733 pNNy RT(1730113249926 5) q(0 0 0 0) r(0 0) U24 X-XSS-Protection: 1; mode=block Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	49900	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:38 UTC	6190	OUT	GET /enroll-loyalty/assets/index-Czu5RiSy.js HTTP/1.1 Host: all.accor.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://all.accor.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://all.accor.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; incap_ses_1388_3039981=WwV9UFsZYQbcTBz5zCpDE0/kIWcAAAAAAlW7vDjSIvNuKK2ooaDNBg==; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; incap_ses_1237_3039981=RMkdawpcO0pafv9zF7UqEVDkIWcAAAAAOdDq+0nC/oeq6w4fyTL3Fg==; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJl [TRUNCATED] If-Modified-Since: Mon, 28 Oct 2024 11:00:51 GMT
2024-10-30 07:46:38 UTC	817	IN	HTTP/1.1 304 Not Modified Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: authorization, content-type, x-requested-with Access-Control-Allow-Methods: PUT, GET, POST, DELETE, OPTIONS Access-Control-Allow-Origin: https://all.accor.com Age: 161147 Cache-control: public, max-age=3600, stale-while-revalidate=21600 Date: Wed, 30 Oct 2024 07:46:38 GMT Last-Modified: Mon, 28 Oct 2024 11:00:51 GMT P3P: CP="NO P3P POLICY" Referrer-Policy: origin Server: ECAcc (lhd/35B2) Strict-Transport-Security: max-age=15552000 Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Clacks-Overhead: GNU Terry Pratchett X-Iinfo: 8-33456089-33347679 pNNy RT(1730113251090 3) q(0 1 1 -1) r(1 1) U24 X-XSS-Protection: 1; mode=block Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	49903	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:38 UTC	6083	OUT	GET /_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3&ns=1&cb=1220902006 HTTP/1.1 Host: all.accor.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; incap_ses_1388_3039981=WwV9UFsZYQbcTBz5zCpDE0/kIWcAAAAAAlW7vDjSIvNuKK2ooaDNBg==; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; incap_ses_1237_3039981=RMkdawpcO0pafv9zF7UqEVDkIWcAAAAAOdDq+0nC/oeq6w4fyTL3Fg==; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJl [TRUNCATED]
2024-10-30 07:46:38 UTC	269	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Content-Type: application/javascript Date: Wed, 30 Oct 2024 07:46:38 GMT server: MF 8700 S - Dyna-VT - Stage V All-in-One X-CDN-Forward: EdgeCast X-Robots-Tag: noindex Content-Length: 88585 Connection: close
2024-10-30 07:46:38 UTC	11428	IN	Data Raw: 76 61 72 20 5f 30 78 35 34 64 38 3d 5b 27 5c 78 35 37 5c 78 36 61 5c 78 37 36 5c 78 34 33 5c 78 36 39 5c 78 34 31 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 34 65 5c 78 35 35 5c 78 34 65 5c 78 34 32 5c 78 36 36 5c 78 34 32 5c 78 36 34 5c 78 37 35 5c 78 34 39 5c 78 36 33 5c 78 34 62 5c 78 33 31 5c 78 34 34 5c 78 33 30 5c 78 37 38 5c 78 36 37 5c 78 37 37 5c 78 33 35 5c 78 33 37 5c 78 34 34 5c 78 36 38 5c 78 35 31 5c 78 35 34 5c 78 34 33 5c 78 37 30 5c 78 33 33 5c 78 34 63 5c 78 34 34 5c 78 37 36 5c 78 36 33 5c 78 34 66 5c 78 35 32 5c 78 36 35 5c 78 37 33 5c 78 34 62 5c 78 35 31 5c 78 37 37 5c 78 37 30 5c 78 35 34 5c 78 34 33 5c 78 36 62 5c 78 35 32 5c 78 34 64 5c 78 36 34 5c 78 37 37 5c 78 33 37 5c 78 33 39 5c 78 32 62 5c 78 37 37 5c 78 37 31 5c 78 36 34 5c 78 Data Ascii: var _0x54d8=['\x57\x6a\x76\x43\x69\x41\x3d\x3d','\x4e\x55\x4e\x42\x66\x42\x64\x75\x49\x63\x4b\x31\x44\x30\x78\x67\x77\x35\x37\x44\x68\x51\x54\x43\x70\x33\x4c\x44\x76\x63\x4f\x52\x65\x73\x4b\x51\x77\x70\x54\x43\x6b\x52\x4d\x64\x77\x37\x39\x2b\x77\x71\x64\x
2024-10-30 07:46:38 UTC	16383	IN	Data Raw: 78 33 33 5c 78 34 33 5c 78 36 65 5c 78 36 33 5c 78 34 66 5c 78 35 39 27 2c 27 5c 78 37 37 5c 78 37 32 5c 78 34 36 5c 78 37 37 5c 78 34 37 5c 78 37 33 5c 78 34 66 5c 78 35 38 5c 78 34 34 5c 78 33 38 5c 78 34 62 5c 78 33 31 5c 78 37 37 5c 78 33 34 5c 78 35 34 5c 78 34 34 5c 78 36 63 5c 78 36 63 5c 78 35 35 5c 78 37 31 5c 78 36 36 5c 78 36 37 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 35 33 5c 78 36 33 5c 78 34 62 5c 78 35 61 5c 78 37 37 5c 78 33 34 5c 78 37 30 5c 78 34 35 5c 78 34 65 5c 78 37 37 5c 78 37 38 5c 78 34 36 5c 78 37 37 5c 78 33 35 5c 78 33 34 5c 78 33 64 27 2c 27 5c 78 35 61 5c 78 35 31 5c 78 35 38 5c 78 34 34 5c 78 36 39 5c 78 35 31 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 35 38 5c 78 34 33 5c 78 32 66 5c 78 34 33 5c 78 37 34 5c 78 34 35 5c 78 34 35 Data Ascii: x33\x43\x6e\x63\x4f\x59','\x77\x72\x46\x77\x47\x73\x4f\x58\x44\x38\x4b\x31\x77\x34\x54\x44\x6c\x6c\x55\x71\x66\x67\x3d\x3d','\x53\x63\x4b\x5a\x77\x34\x70\x45\x4e\x77\x78\x46\x77\x35\x34\x3d','\x5a\x51\x58\x44\x69\x51\x3d\x3d','\x58\x43\x2f\x43\x74\x45\x45
2024-10-30 07:46:38 UTC	16383	IN	Data Raw: 38 5c 78 34 38 5c 78 36 33 5c 78 34 66 5c 78 33 38 5c 78 37 37 5c 78 37 31 5c 78 34 61 5c 78 37 31 5c 78 37 37 5c 78 37 31 5c 78 36 65 5c 78 34 34 5c 78 36 61 5c 78 35 32 5c 78 32 66 5c 78 34 34 5c 78 37 32 5c 78 33 38 5c 78 34 62 5c 78 34 38 5c 78 34 33 5c 78 37 33 5c 78 34 66 5c 78 36 33 5c 78 37 37 5c 78 33 35 5c 78 35 38 5c 78 34 33 5c 78 37 34 5c 78 37 33 5c 78 34 66 5c 78 36 38 5c 78 36 36 5c 78 34 64 5c 78 34 66 5c 78 34 37 5c 78 34 64 5c 78 36 62 5c 78 36 61 5c 78 34 33 5c 78 37 34 5c 78 36 39 5c 78 35 61 5c 78 35 61 5c 78 34 39 5c 78 36 33 5c 78 34 62 5c 78 36 66 5c 78 37 37 5c 78 37 30 5c 78 35 31 5c 78 36 62 5c 78 37 37 5c 78 33 35 5c 78 37 36 5c 78 34 34 5c 78 36 37 5c 78 34 36 5c 78 37 61 5c 78 34 33 5c 78 37 33 5c 78 34 64 5c 78 34 66 5c 78 Data Ascii: 8\x48\x63\x4f\x38\x77\x71\x4a\x71\x77\x71\x6e\x44\x6a\x52\x2f\x44\x72\x38\x4b\x48\x43\x73\x4f\x63\x77\x35\x58\x43\x74\x73\x4f\x68\x66\x4d\x4f\x47\x4d\x6b\x6a\x43\x74\x69\x5a\x5a\x49\x63\x4b\x6f\x77\x70\x51\x6b\x77\x35\x76\x44\x67\x46\x7a\x43\x73\x4d\x4f\x
2024-10-30 07:46:38 UTC	2082	IN	Data Raw: 5b 27 5c 78 37 30 5c 78 37 32 5c 78 36 66 5c 78 37 34 5c 78 36 66 5c 78 37 34 5c 78 37 39 5c 78 37 30 5c 78 36 35 27 5d 5b 27 5c 78 36 37 5c 78 36 35 5c 78 37 34 5c 78 35 33 5c 78 37 34 5c 78 36 31 5c 78 37 34 5c 78 36 35 27 5d 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 33 34 62 32 32 64 29 7b 66 6f 72 28 76 61 72 20 5f 30 78 31 33 35 65 62 66 3d 30 78 30 2c 5f 30 78 65 62 62 61 31 62 3d 74 68 69 73 5b 27 5c 78 37 33 5c 78 37 34 5c 78 36 31 5c 78 37 34 5c 78 36 35 5c 78 37 33 27 5d 5b 27 5c 78 36 63 5c 78 36 35 5c 78 36 65 5c 78 36 37 5c 78 37 34 5c 78 36 38 27 5d 3b 5f 30 78 31 33 35 65 62 66 3c 5f 30 78 65 62 62 61 31 62 3b 5f 30 78 31 33 35 65 62 66 2b 2b 29 7b 74 68 69 73 5b 27 5c 78 37 33 5c 78 37 34 5c 78 36 31 5c 78 37 34 5c 78 36 35 5c 78 37 33 27 5d Data Ascii: ['\x70\x72\x6f\x74\x6f\x74\x79\x70\x65']['\x67\x65\x74\x53\x74\x61\x74\x65']=function(_0x34b22d){for(var _0x135ebf=0x0,_0xebba1b=this['\x73\x74\x61\x74\x65\x73']['\x6c\x65\x6e\x67\x74\x68'];_0x135ebf<_0xebba1b;_0x135ebf++){this['\x73\x74\x61\x74\x65\x73']
2024-10-30 07:46:38 UTC	16383	IN	Data Raw: 39 33 65 29 7b 72 65 74 75 72 6e 20 5f 30 78 35 30 65 66 32 62 2d 5f 30 78 32 36 63 39 33 65 3b 7d 2c 27 5c 78 34 38 5c 78 35 31 5c 78 35 31 27 3a 66 75 6e 63 74 69 6f 6e 20 5f 30 78 34 36 62 30 37 30 28 5f 30 78 35 63 66 39 63 36 2c 5f 30 78 34 39 33 64 61 62 29 7b 72 65 74 75 72 6e 20 5f 30 78 35 63 66 39 63 36 3d 3d 5f 30 78 34 39 33 64 61 62 3b 7d 2c 27 5c 78 36 39 5c 78 37 36 5c 78 34 33 27 3a 66 75 6e 63 74 69 6f 6e 20 5f 30 78 63 33 63 37 36 33 28 5f 30 78 35 33 63 36 66 30 2c 5f 30 78 33 37 62 62 31 36 29 7b 72 65 74 75 72 6e 20 5f 30 78 35 33 63 36 66 30 3d 3d 5f 30 78 33 37 62 62 31 36 3b 7d 2c 27 5c 78 34 66 5c 78 34 65 5c 78 36 63 27 3a 66 75 6e 63 74 69 6f 6e 20 5f 30 78 34 64 38 37 36 31 28 5f 30 78 32 37 30 63 63 66 2c 5f 30 78 32 36 39 62 Data Ascii: 93e){return _0x50ef2b-_0x26c93e;},'\x48\x51\x51':function _0x46b070(_0x5cf9c6,_0x493dab){return _0x5cf9c6==_0x493dab;},'\x69\x76\x43':function _0xc3c763(_0x53c6f0,_0x37bb16){return _0x53c6f0==_0x37bb16;},'\x4f\x4e\x6c':function _0x4d8761(_0x270ccf,_0x269b
2024-10-30 07:46:38 UTC	963	IN	Data Raw: 5f 30 78 38 35 34 64 28 27 30 78 38 34 27 2c 20 27 5c 78 34 37 5c 78 34 33 5c 78 33 35 5c 78 35 35 27 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 5c 78 33 36 27 3a 69 66 28 5f 30 78 33 35 61 64 65 62 29 7b 76 61 72 20 5f 30 78 31 39 30 63 36 32 3d 6e 65 77 20 5f 30 78 34 37 36 38 39 30 5b 5f 30 78 38 35 34 64 28 27 30 78 38 35 27 2c 20 27 5c 78 34 64 5c 78 34 30 5c 78 33 32 5c 78 33 31 27 29 5d 28 29 3b 5f 30 78 31 39 30 63 36 32 5b 5f 30 78 38 35 34 64 28 27 30 78 38 36 27 2c 20 27 5c 78 34 65 5c 78 33 39 5c 78 33 33 5c 78 33 36 27 29 5d 28 5f 30 78 34 33 31 35 65 66 5b 5f 30 78 38 35 34 64 28 27 30 78 38 37 27 2c 20 27 5c 78 34 63 5c 78 36 61 5c 78 32 36 5c 78 37 37 27 29 5d 28 5f 30 78 31 39 30 63 36 32 5b 5f 30 78 38 35 34 64 28 27 30 78 38 38 27 Data Ascii: _0x854d('0x84', '\x47\x43\x35\x55');continue;case'\x36':if(_0x35adeb){var _0x190c62=new _0x476890[_0x854d('0x85', '\x4d\x40\x32\x31')]();_0x190c62[_0x854d('0x86', '\x4e\x39\x33\x36')](_0x4315ef[_0x854d('0x87', '\x4c\x6a\x26\x77')](_0x190c62[_0x854d('0x88'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	49905	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:38 UTC	6081	OUT	GET /scripts/main-footer-light.js HTTP/1.1 Host: all.accor.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; incap_ses_1388_3039981=WwV9UFsZYQbcTBz5zCpDE0/kIWcAAAAAAlW7vDjSIvNuKK2ooaDNBg==; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; incap_ses_1237_3039981=RMkdawpcO0pafv9zF7UqEVDkIWcAAAAAOdDq+0nC/oeq6w4fyTL3Fg==; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJl [TRUNCATED] If-Modified-Since: Mon, 28 Oct 2024 11:00:52 GMT
2024-10-30 07:46:38 UTC	629	IN	HTTP/1.1 304 Not Modified Age: 161146 Cache-control: public, max-age=3600, stale-while-revalidate=21600 Date: Wed, 30 Oct 2024 07:46:38 GMT Last-Modified: Mon, 28 Oct 2024 11:00:52 GMT P3P: CP="NO P3P POLICY" Referrer-Policy: origin Server: ECAcc (lhd/35D0) Strict-Transport-Security: max-age=15552000 Strict-Transport-Security: max-age=15552000 Vary: Accept-Encoding X-Accor-asset: ecom X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Clacks-Overhead: GNU Terry Pratchett X-Iinfo: 17-174814289-174805022 pNNy RT(1730113251974 9) q(0 0 0 0) r(1 1) U24 X-XSS-Protection: 1; mode=block Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	49901	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:38 UTC	6099	OUT	GET /components/footer/assets/images/logo-fevad.jpg HTTP/1.1 Host: all.accor.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; incap_ses_1388_3039981=WwV9UFsZYQbcTBz5zCpDE0/kIWcAAAAAAlW7vDjSIvNuKK2ooaDNBg==; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; incap_ses_1237_3039981=RMkdawpcO0pafv9zF7UqEVDkIWcAAAAAOdDq+0nC/oeq6w4fyTL3Fg==; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJl [TRUNCATED] If-Modified-Since: Wed, 16 Oct 2024 09:39:23 GMT
2024-10-30 07:46:38 UTC	629	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Age: 161106 Cache-control: public, max-age=3600, stale-while-revalidate=21600 Date: Wed, 30 Oct 2024 07:46:38 GMT Last-Modified: Wed, 16 Oct 2024 09:39:23 GMT P3P: CP="NO P3P POLICY" Referrer-Policy: origin Server: ECAcc (lhd/3585) Strict-Transport-Security: max-age=15552000 Strict-Transport-Security: max-age=15552000 Vary: Accept-Encoding X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Clacks-Overhead: GNU Terry Pratchett X-Iinfo: 18-26261679-26229307 pNNy RT(1730113291979 10) q(0 1 1 6) r(1 1) U24 X-XSS-Protection: 1; mode=block Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	49904	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:38 UTC	6049	OUT	GET /enroll-loyalty/assets/verifyEnroll-D5kC1PyP.js HTTP/1.1 Host: all.accor.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; incap_ses_1388_3039981=WwV9UFsZYQbcTBz5zCpDE0/kIWcAAAAAAlW7vDjSIvNuKK2ooaDNBg==; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; incap_ses_1237_3039981=RMkdawpcO0pafv9zF7UqEVDkIWcAAAAAOdDq+0nC/oeq6w4fyTL3Fg==; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJl [TRUNCATED]
2024-10-30 07:46:38 UTC	860	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: authorization, content-type, x-requested-with Access-Control-Allow-Methods: PUT, GET, POST, DELETE, OPTIONS Access-Control-Allow-Origin: https://all.accor.com Age: 161149 Cache-control: public, max-age=3600, stale-while-revalidate=21600 Content-Type: text/javascript Date: Wed, 30 Oct 2024 07:46:38 GMT Last-Modified: Mon, 28 Oct 2024 11:00:49 GMT P3P: CP="NO P3P POLICY" Referrer-Policy: origin Server: ECAcc (lhd/35A8) Strict-Transport-Security: max-age=15552000 Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Clacks-Overhead: GNU Terry Pratchett X-Iinfo: 5-3273310-3250718 sNNN RT(1730113246797 2373) q(0 0 0 0) r(1 1) U24 X-XSS-Protection: 1; mode=block Content-Length: 3340 Connection: close
2024-10-30 07:46:38 UTC	3340	IN	Data Raw: 69 6d 70 6f 72 74 7b 61 7d 66 72 6f 6d 22 2e 2f 61 78 69 6f 73 2d 43 4a 46 55 64 33 36 62 2e 6a 73 22 3b 69 6d 70 6f 72 74 7b 67 20 61 73 20 45 2c 73 20 61 73 20 52 7d 66 72 6f 6d 22 2e 2f 69 6e 64 65 78 2d 43 7a 75 35 52 69 53 79 2e 6a 73 22 3b 69 6d 70 6f 72 74 7b 45 20 61 73 20 6d 7d 66 72 6f 6d 22 2e 2f 69 6e 64 65 78 2d 42 4a 77 69 77 42 41 6a 2e 6a 73 22 3b 69 6d 70 6f 72 74 7b 67 20 61 73 20 79 7d 66 72 6f 6d 22 2e 2f 69 6e 64 65 78 2d 43 42 37 31 4d 51 4f 32 2e 6a 73 22 3b 63 6f 6e 73 74 20 64 3d 7b 6e 61 6d 65 3a 22 73 74 61 74 75 73 22 2c 73 74 61 74 65 3a 7b 69 63 6f 6e 3a 22 65 72 72 6f 72 22 2c 62 69 67 48 65 61 64 69 6e 67 3a 22 65 72 72 6f 72 2e 67 65 6e 65 72 69 63 2e 74 69 74 6c 65 22 2c 70 61 72 61 67 72 61 70 68 3a 22 65 72 72 6f 72 2e Data Ascii: import{a}from"./axios-CJFUd36b.js";import{g as E,s as R}from"./index-Czu5RiSy.js";import{E as m}from"./index-BJwiwBAj.js";import{g as y}from"./index-CB71MQO2.js";const d={name:"status",state:{icon:"error",bigHeading:"error.generic.title",paragraph:"error.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	49907	152.199.22.100	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:38 UTC	6042	OUT	GET /enroll-loyalty/assets/axios-CJFUd36b.js HTTP/1.1 Host: all.accor.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: affinity="2ebdfa5ef5c60257"; visid_incap_3039981=aLoZH9J6QxGfjZEUY/e05UjkIWcAAAAAQUIPAAAAAAD8rnDeZJaXFTHvonegQuBl; nlbi_3039981_2957830=QXcgLCI6n14w6HoBWE8lKAAAAADgtjvZivnl2RuR4lqzsLiM; incap_ses_1080_3039981=XM/8DXDAIWsSw4gPce78DkjkIWcAAAAAIR4LCu5jeBMxbiXiMj9xYg==; org=evy; nlbi_3039981=FOIWQrBRT3NYQxxRWE8lKAAAAADEdviz1Ib/3hMgCUDc7x9d; incap_ses_1332_3039981=DGpuOGJtQCUFgVGmFjd8EknkIWcAAAAAOYm8YdR7Dhj/9OjvlOLieg==; OAC_all.brand=all; gtmId=GTM-TKQN7D; incap_ses_953_3039981=mO7aBHmhJiZeVnOwn7w5DU7kIWcAAAAAHqE88wY5dAR8XlnNIq7MDQ==; dtCookie=v_4_srv_1_sn_F7FC17886187F3CC2646C809A83C0063_perc_100000_ol_0_mul_1_app-3A0dae2710ec98cad4_1; incap_ses_1388_3039981=WwV9UFsZYQbcTBz5zCpDE0/kIWcAAAAAAlW7vDjSIvNuKK2ooaDNBg==; displayZone=united-states-of-america; contribZone=usa; userLang=en; userCurrency=USD; userLocalization=us; x-aem-variant=usa; incap_ses_1237_3039981=RMkdawpcO0pafv9zF7UqEVDkIWcAAAAAOdDq+0nC/oeq6w4fyTL3Fg==; affcookie=egF+r4RKyHhlSDGT0HNOSA==; trckCookie=eyJjdXJyZW50c291cmNlaWQiOiJBSCIsImN1cnJl [TRUNCATED]
2024-10-30 07:46:38 UTC	863	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: authorization, content-type, x-requested-with Access-Control-Allow-Methods: PUT, GET, POST, DELETE, OPTIONS Access-Control-Allow-Origin: https://all.accor.com Age: 161148 Cache-control: public, max-age=3600, stale-while-revalidate=21600 Content-Type: text/javascript Date: Wed, 30 Oct 2024 07:46:38 GMT Last-Modified: Mon, 28 Oct 2024 11:00:50 GMT P3P: CP="NO P3P POLICY" Referrer-Policy: origin Server: ECAcc (lhd/35E7) Strict-Transport-Security: max-age=15552000 Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN: Imperva X-CDN-Forward: EdgeCast X-Clacks-Overhead: GNU Terry Pratchett X-Iinfo: 18-214202022-214187733 pNNy RT(1730113249926 5) q(0 0 0 0) r(0 0) U24 X-XSS-Protection: 1; mode=block Content-Length: 36174 Connection: close
2024-10-30 07:46:38 UTC	16383	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6c 69 6e 6b 22 29 2e 72 65 6c 4c 69 73 74 3b 69 66 28 74 26 26 74 2e 73 75 70 70 6f 72 74 73 26 26 74 2e 73 75 70 70 6f 72 74 73 28 22 6d 6f 64 75 6c 65 70 72 65 6c 6f 61 64 22 29 29 72 65 74 75 72 6e 3b 66 6f 72 28 63 6f 6e 73 74 20 73 20 6f 66 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 6c 69 6e 6b 5b 72 65 6c 3d 22 6d 6f 64 75 6c 65 70 72 65 6c 6f 61 64 22 5d 27 29 29 72 28 73 29 3b 6e 65 77 20 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 28 73 3d 3e 7b 66 6f 72 28 63 6f 6e 73 74 20 69 20 6f 66 20 73 29 69 66 28 69 2e 74 79 70 65 3d 3d 3d 22 63 68 69 6c 64 4c 69 73 74 22 29 66 6f Data Ascii: (function(){const t=document.createElement("link").relList;if(t&&t.supports&&t.supports("modulepreload"))return;for(const s of document.querySelectorAll('link[rel="modulepreload"]'))r(s);new MutationObserver(s=>{for(const i of s)if(i.type==="childList")fo
2024-10-30 07:46:38 UTC	1	IN	Data Raw: 6d Data Ascii: m
2024-10-30 07:46:38 UTC	16383	IN	Data Raw: 65 20 6d 75 73 74 20 62 65 20 61 20 6e 6f 6e 2d 65 6d 70 74 79 20 73 74 72 69 6e 67 22 29 3b 63 6f 6e 73 74 20 70 3d 61 2e 66 69 6e 64 4b 65 79 28 73 2c 75 29 3b 28 21 70 7c 7c 73 5b 70 5d 3d 3d 3d 76 6f 69 64 20 30 7c 7c 66 3d 3d 3d 21 30 7c 7c 66 3d 3d 3d 76 6f 69 64 20 30 26 26 73 5b 70 5d 21 3d 3d 21 31 29 26 26 28 73 5b 70 7c 7c 6c 5d 3d 4d 28 63 29 29 7d 63 6f 6e 73 74 20 6f 3d 28 63 2c 6c 29 3d 3e 61 2e 66 6f 72 45 61 63 68 28 63 2c 28 66 2c 75 29 3d 3e 69 28 66 2c 75 2c 6c 29 29 3b 69 66 28 61 2e 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 28 74 29 7c 7c 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 6f 28 74 2c 6e 29 3b 65 6c 73 65 20 69 66 28 61 2e 69 73 53 74 72 69 6e 67 28 74 29 26 26 28 74 3d 74 2e 74 72 Data Ascii: e must be a non-empty string");const p=a.findKey(s,u);(!p\|\|s[p]===void 0\|\|f===!0\|\|f===void 0&&s[p]!==!1)&&(s[p\|\|l]=M(c))}const o=(c,l)=>a.forEach(c,(f,u)=>i(f,u,l));if(a.isPlainObject(t)\|\|t instanceof this.constructor)o(t,n);else if(a.isString(t)&&(t=t.tr
2024-10-30 07:46:38 UTC	3407	IN	Data Raw: 79 7b 79 3d 64 28 79 29 7d 63 61 74 63 68 28 67 29 7b 6d 2e 63 61 6c 6c 28 74 68 69 73 2c 67 29 3b 62 72 65 61 6b 7d 7d 74 72 79 7b 75 3d 54 65 2e 63 61 6c 6c 28 74 68 69 73 2c 79 29 7d 63 61 74 63 68 28 64 29 7b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 65 6a 65 63 74 28 64 29 7d 66 6f 72 28 70 3d 30 2c 62 3d 66 2e 6c 65 6e 67 74 68 3b 70 3c 62 3b 29 75 3d 75 2e 74 68 65 6e 28 66 5b 70 2b 2b 5d 2c 66 5b 70 2b 2b 5d 29 3b 72 65 74 75 72 6e 20 75 7d 67 65 74 55 72 69 28 74 29 7b 74 3d 46 28 74 68 69 73 2e 64 65 66 61 75 6c 74 73 2c 74 29 3b 63 6f 6e 73 74 20 6e 3d 76 65 28 74 2e 62 61 73 65 55 52 4c 2c 74 2e 75 72 6c 29 3b 72 65 74 75 72 6e 20 71 65 28 6e 2c 74 2e 70 61 72 61 6d 73 2c 74 2e 70 61 72 61 6d 73 53 65 72 69 61 6c 69 7a 65 72 29 7d 7d 61 Data Ascii: y{y=d(y)}catch(g){m.call(this,g);break}}try{u=Te.call(this,y)}catch(d){return Promise.reject(d)}for(p=0,b=f.length;p<b;)u=u.then(f[p++],f[p++]);return u}getUri(t){t=F(this.defaults,t);const n=ve(t.baseURL,t.url);return qe(n,t.params,t.paramsSerializer)}}a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	49902	3.68.177.71	443	928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 07:46:38 UTC	1372	OUT	GET /api2/event/accor?event=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%3D%3D HTTP/1.1 Host: accorsa.germany-2.evergage.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://all.accor.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://all.accor.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 07:46:38 UTC	881	IN	HTTP/1.1 200 Date: Wed, 30 Oct 2024 07:46:38 GMT Content-Type: application/json;charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALBTG=316IPvPkl9U1Y9/kafxOrIGms4sP6WuEUrz17pCTRPr1cwivw/jYYHTOWMI6AUUjRPUbhtvhgiMBydEMmjTEOlGsgo15RnzqAr0duTvTOJmBBJaNDsY1nra7kpeZCHhkrPn+R8a/oiibQxQFQHVztbzgoRjUw+W0XNv9fygYJEwJo/1D4C0=; Expires=Wed, 06 Nov 2024 07:46:38 GMT; Path=/ Set-Cookie: AWSALBTGCORS=316IPvPkl9U1Y9/kafxOrIGms4sP6WuEUrz17pCTRPr1cwivw/jYYHTOWMI6AUUjRPUbhtvhgiMBydEMmjTEOlGsgo15RnzqAr0duTvTOJmBBJaNDsY1nra7kpeZCHhkrPn+R8a/oiibQxQFQHVztbzgoRjUw+W0XNv9fygYJEwJo/1D4C0=; Expires=Wed, 06 Nov 2024 07:46:38 GMT; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: https://all.accor.com Timing-Allow-Origin: * Cache-Control: no-cache, no-store Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff vary: accept-encoding
2024-10-30 07:46:38 UTC	143	IN	Data Raw: 38 39 0d 0a 7b 22 69 64 22 3a 22 36 37 32 31 65 34 35 65 39 36 36 32 37 63 34 39 66 65 63 62 38 37 30 30 22 2c 22 63 61 6d 70 61 69 67 6e 52 65 73 70 6f 6e 73 65 73 22 3a 5b 5d 2c 22 63 6f 6d 70 69 6c 65 64 43 61 6d 70 61 69 67 6e 54 65 6d 70 6c 61 74 65 73 22 3a 5b 5d 2c 22 65 72 72 6f 72 43 6f 64 65 22 3a 30 2c 22 72 65 73 6f 6c 76 65 64 55 73 65 72 49 64 22 3a 22 31 36 39 33 34 39 62 32 37 65 66 37 65 39 63 63 22 7d 0d 0a Data Ascii: 89{"id":"6721e45e96627c49fecb8700","campaignResponses":[],"compiledCampaignTemplates":[],"errorCode":0,"resolvedUserId":"169349b27ef7e9cc"}
2024-10-30 07:46:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	03:46:08
Start date:	30/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	03:46:12
Start date:	30/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=2000,i,4908088389632724178,9141779666674835467,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	03:46:15
Start date:	30/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://all.accor.com/a/en/new-app-offer.html"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	03:46:24
Start date:	30/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://accor.onelink.me/5GRx/5m1nc8of?af_qr=true
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	03:46:24
Start date:	30/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1716 --field-trial-handle=2024,i,10245821585614290726,11001642237239521171,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://all.accor.com/a/en/new-app-offer.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

QR Codes

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 210

Chrome Cache Entry: 211

Chrome Cache Entry: 212

Chrome Cache Entry: 213

Chrome Cache Entry: 214

Chrome Cache Entry: 215

Chrome Cache Entry: 216

Chrome Cache Entry: 217

Chrome Cache Entry: 218

Chrome Cache Entry: 219

Chrome Cache Entry: 220

Chrome Cache Entry: 221

Chrome Cache Entry: 222

Chrome Cache Entry: 223

Chrome Cache Entry: 224

Chrome Cache Entry: 225

Chrome Cache Entry: 226

Chrome Cache Entry: 227

Chrome Cache Entry: 228

Chrome Cache Entry: 229

Chrome Cache Entry: 230

Chrome Cache Entry: 231

Chrome Cache Entry: 232

Chrome Cache Entry: 233

Chrome Cache Entry: 234

Chrome Cache Entry: 235

Chrome Cache Entry: 236

Windows Analysis Report
https://all.accor.com/a/en/new-app-offer.html