Edit tour

Windows Analysis Report
https://parlatoscatering.com/?utm_source=google&utm_medium=organic&utm_campaign=gmb

Overview

General Information

Sample URL:	https://parlatoscatering.com/?utm_source=google&utm_medium=organic&utm_campaign=gmb
Analysis ID:	1676427
Infos:

Detection

Score:	48
Range:	0 - 100
Confidence:	100%

Signatures

Suricata IDS alerts for network traffic

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6748 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7052 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2152,i,12751529918615607170,13619416143622172560,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2232 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 4472 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://parlatoscatering.com/?utm_source=google&utm_medium=organic&utm_campaign=gmb" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Suricata Signatures

ET EXPLOIT_KIT Malicious TA2726 TDS Domain in DNS Lookup (javascripterhub .com)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-04-28T17:33:42.082238+0200	2061094	1	Exploit Kit Activity Detected	192.168.2.4	52463	1.1.1.1	53	UDP
2025-04-28T17:33:42.082777+0200	2061094	1	Exploit Kit Activity Detected	192.168.2.4	56705	1.1.1.1	53	UDP

ET EXPLOIT_KIT Malicious TA2726 TDS Domain in TLS SNI (javascripterhub .com)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-04-28T17:33:43.614390+0200	2061100	1	Exploit Kit Activity Detected	192.168.2.4	49742	194.87.232.26	443	TCP

HTTP traffic detected: POST /ccm/collect?en=page_view&dl=https%3A%2F%2Fparlatoscatering.com%2F&scrsrc=www.googletagmanager.com&frm=0&rnd=881265630.1745854427&dt=The%20Best%20Italian%20Catering%20Service%20in%20Oakville%20%7C%20Parlato%27s%20Catering&auid=834765053.1745854427&navt=n&npa=0&gtm=45He54n0v892923405za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=102887800~103051953~103077950~103106314~103106316~103116026~103130360~103130362~103130495~103130497~103200004&tft=1745854426737&tfd=8538&apve=1 HTTP/1.1host: www.google.comcontent-length: 0sec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: */*origin: https://parlatoscatering.comx-client-data: CKq1yQEIi7bJAQiktskBCKmdygEI0qDKAQig4coBCJahywEInP7MAQiFoM0Bsec-fetch-site: cross-sitesec-fetch-mode: no-corssec-fetch-dest: emptysec-fetch-storage-access: activereferer: https://parlatoscatering.com/accept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=4, i

Source: chromecache_193.2.dr	String found in binary or memory: http://cdn1.iconfinder.com/data/icons/cc_mono_icon_set/blacks/16x16/br_down.png
Source: chromecache_426.2.dr	String found in binary or memory: http://creativecommons.org/licenses/by/4.0/
Source: chromecache_346.2.dr	String found in binary or memory: http://css-tricks.com
Source: chromecache_346.2.dr	String found in binary or memory: http://daverupert.com
Source: chromecache_420.2.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_420.2.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_382.2.dr	String found in binary or memory: http://fontforge.sf.net)
Source: chromecache_382.2.dr	String found in binary or memory: http://fontforge.sf.net)Created
Source: chromecache_382.2.dr	String found in binary or memory: http://fontforge.sf.net)IoniconsIoniconsMediumMediumFontForge
Source: chromecache_291.2.dr	String found in binary or memory: http://foodshop-parlatoscatering.com
Source: chromecache_285.2.dr	String found in binary or memory: http://getharvest.com
Source: chromecache_231.2.dr	String found in binary or memory: http://github.com/requirejs/almond/LICENSE
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: http://gmpg.org/xfn/11
Source: chromecache_325.2.dr	String found in binary or memory: http://gsgd.co.uk/sandbox/jquery/easing/
Source: chromecache_426.2.dr	String found in binary or memory: http://ionicons.com/
Source: chromecache_441.2.dr	String found in binary or memory: http://isotope.metafizzy.co
Source: chromecache_388.2.dr, chromecache_231.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_208.2.dr	String found in binary or memory: http://labs.rampinteractive.co.uk/touchSwipe/
Source: chromecache_255.2.dr	String found in binary or memory: http://malsup.com/jquery/block/
Source: chromecache_443.2.dr	String found in binary or memory: http://nicolasgallagher.com/micro-clearfix-hack/
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: http://parlatoscatering.com/about-us/
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: http://parlatoscatering.com/index.php/homepages/experiences/
Source: chromecache_208.2.dr	String found in binary or memory: http://plugins.jquery.com/project/touchSwipe
Source: chromecache_329.2.dr, chromecache_370.2.dr	String found in binary or memory: http://sachinchoolur.github.io/lightGallery/
Source: chromecache_346.2.dr	String found in binary or memory: http://sam.zoy.org/wtfpl/
Source: chromecache_363.2.dr	String found in binary or memory: http://stackoverflow.com/questions/384286/javascript-isdom-how-do-you-check-if-a-javascript-object-i
Source: chromecache_322.2.dr, chromecache_392.2.dr	String found in binary or memory: http://stackoverflow.com/questions/6333249/firstelementchild-doesnt-work-in-internet-explorer-7-what
Source: chromecache_443.2.dr, chromecache_317.2.dr, chromecache_449.2.dr	String found in binary or memory: http://tamarind.imaginem.co
Source: chromecache_443.2.dr	String found in binary or memory: http://themeforest.net/licenses/regular_extended
Source: chromecache_443.2.dr	String found in binary or memory: http://themeforest.net/user/imaginem
Source: chromecache_346.2.dr	String found in binary or memory: http://www.alistapart.com/articles/creating-intrinsic-ratios-for-video/
Source: chromecache_277.2.dr	String found in binary or memory: http://www.codrops.com
Source: chromecache_208.2.dr	String found in binary or memory: http://www.github.com/mattbryson
Source: chromecache_317.2.dr, chromecache_449.2.dr	String found in binary or memory: http://www.gnu.org/licenses/gpl-2.0.html
Source: chromecache_248.2.dr, chromecache_326.2.dr, chromecache_320.2.dr, chromecache_231.2.dr, chromecache_263.2.dr	String found in binary or memory: http://www.gnu.org/licenses/gpl-3.0.html)
Source: chromecache_221.2.dr, chromecache_255.2.dr	String found in binary or memory: http://www.gnu.org/licenses/gpl.html
Source: chromecache_277.2.dr	String found in binary or memory: http://www.hardcode.nl/subcategory_1/article_317-array-shuffle-function
Source: chromecache_277.2.dr	String found in binary or memory: http://www.html5rocks.com/en/tutorials/pagevisibility/intro/
Source: chromecache_307.2.dr, chromecache_360.2.dr	String found in binary or memory: http://www.idangero.us/
Source: chromecache_307.2.dr, chromecache_360.2.dr	String found in binary or memory: http://www.idangero.us/swiper/
Source: chromecache_221.2.dr, chromecache_255.2.dr, chromecache_277.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: http://www.w3schools.com/css/css_syntax.asp
Source: chromecache_222.2.dr, chromecache_396.2.dr, chromecache_347.2.dr, chromecache_257.2.dr, chromecache_333.2.dr, chromecache_385.2.dr, chromecache_361.2.dr, chromecache_275.2.dr, chromecache_405.2.dr, chromecache_312.2.dr, chromecache_423.2.dr, chromecache_327.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;
Source: chromecache_222.2.dr, chromecache_396.2.dr, chromecache_347.2.dr, chromecache_257.2.dr, chromecache_333.2.dr, chromecache_385.2.dr, chromecache_361.2.dr, chromecache_275.2.dr, chromecache_405.2.dr, chromecache_312.2.dr, chromecache_423.2.dr, chromecache_327.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;register_conversion=1;
Source: chromecache_222.2.dr, chromecache_396.2.dr, chromecache_347.2.dr, chromecache_257.2.dr, chromecache_333.2.dr, chromecache_385.2.dr, chromecache_361.2.dr, chromecache_275.2.dr, chromecache_405.2.dr, chromecache_312.2.dr, chromecache_423.2.dr, chromecache_327.2.dr	String found in binary or memory: https://ade.googlesyndication.com/ddm/activity/
Source: chromecache_327.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_386.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_241.2.dr	String found in binary or memory: https://api.jqueryui.com/position/
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://api.w.org/
Source: chromecache_222.2.dr, chromecache_396.2.dr, chromecache_347.2.dr, chromecache_257.2.dr, chromecache_333.2.dr, chromecache_385.2.dr, chromecache_361.2.dr, chromecache_275.2.dr, chromecache_405.2.dr, chromecache_312.2.dr, chromecache_423.2.dr, chromecache_327.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_271.2.dr	String found in binary or memory: https://cdn.trustindex.io/assets/platform/Google/icon.svg
Source: chromecache_271.2.dr	String found in binary or memory: https://cdn.trustindex.io/assets/platform/Google/star/f.svg
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://cdn.trustindex.io/loader.js
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://cdn.trustindex.io/loader.js?1b1045689970900caf5922f380
Source: chromecache_362.2.dr	String found in binary or memory: https://chmln.github.io/flatpickr/#altinput
Source: chromecache_362.2.dr	String found in binary or memory: https://chmln.github.io/flatpickr/#dateformat
Source: chromecache_362.2.dr	String found in binary or memory: https://chmln.github.io/flatpickr/#disable
Source: chromecache_362.2.dr	String found in binary or memory: https://chmln.github.io/flatpickr/#inline-calendar
Source: chromecache_362.2.dr	String found in binary or memory: https://chmln.github.io/flatpickr/examples/#flatpickr-external-elements
Source: chromecache_256.2.dr	String found in binary or memory: https://connect.facebook.net/
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://connect.facebook.net/en_US/fbevents.js?v=next
Source: chromecache_256.2.dr	String found in binary or memory: https://connect.facebook.net/log/fbevents_telemetry/
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://developers.google.com/analytics/devguides/collection/analyticsjs/
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Roboto:100%2C500%2C400
Source: chromecache_446.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/cabin/v27/u-4g0qWljRw-Pd815fNqc8T_wAFcX-c37OngHXi-Ag.woff2)
Source: chromecache_446.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/cabin/v27/u-4g0qWljRw-Pd815fNqc8T_wAFcX-c37OnhHXi-Ag.woff2)
Source: chromecache_446.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/cabin/v27/u-4g0qWljRw-Pd815fNqc8T_wAFcX-c37OnuHXg.woff2)
Source: chromecache_446.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/cabin/v27/u-4i0qWljRw-PfU81xCKCpdpbgZJl6Xvp9nsBXw.woff2)
Source: chromecache_446.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/cabin/v27/u-4i0qWljRw-PfU81xCKCpdpbgZJl6XvptnsBXw.woff2)
Source: chromecache_446.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/cabin/v27/u-4i0qWljRw-PfU81xCKCpdpbgZJl6Xvqdns.woff2)
Source: chromecache_446.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/nunito/v26/XRXV3I6Li01BKofIMeaBXso.woff2)
Source: chromecache_446.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/nunito/v26/XRXV3I6Li01BKofINeaB.woff2)
Source: chromecache_446.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/nunito/v26/XRXV3I6Li01BKofIO-aBXso.woff2)
Source: chromecache_446.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/nunito/v26/XRXV3I6Li01BKofIOOaBXso.woff2)
Source: chromecache_446.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/nunito/v26/XRXV3I6Li01BKofIOuaBXso.woff2)
Source: chromecache_446.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/nunito/v26/XRXX3I6Li01BKofIMNaDRs4.woff2)
Source: chromecache_446.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/nunito/v26/XRXX3I6Li01BKofIMNaHRs71cA.woff2)
Source: chromecache_446.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/nunito/v26/XRXX3I6Li01BKofIMNaMRs71cA.woff2)
Source: chromecache_446.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/nunito/v26/XRXX3I6Li01BKofIMNaNRs71cA.woff2)
Source: chromecache_446.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/nunito/v26/XRXX3I6Li01BKofIMNaORs71cA.woff2)
Source: chromecache_446.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqW106F15M.woff2)
Source: chromecache_446.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWt06F15M.woff2)
Source: chromecache_446.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtE6F15M.woff2)
Source: chromecache_446.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtU6F15M.woff2)
Source: chromecache_446.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtk6F15M.woff2)
Source: chromecache_446.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWu06F15M.woff2)
Source: chromecache_446.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2)
Source: chromecache_446.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuk6F15M.woff2)
Source: chromecache_446.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWvU6F15M.woff2)
Source: chromecache_446.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWxU6F15M.woff2)
Source: chromecache_446.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2)
Source: chromecache_446.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS2mu1aB.woff2)
Source: chromecache_446.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2)
Source: chromecache_446.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2)
Source: chromecache_446.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2)
Source: chromecache_446.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2)
Source: chromecache_446.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2)
Source: chromecache_446.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSymu1aB.woff2)
Source: chromecache_446.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2)
Source: chromecache_446.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTVOmu1aB.woff2)
Source: chromecache_446.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ptmono/v13/9oRONYoBnWILk-9AnC8zMw.woff2)
Source: chromecache_446.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ptmono/v13/9oRONYoBnWILk-9AnCEzM-Py.woff2)
Source: chromecache_446.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ptmono/v13/9oRONYoBnWILk-9AnCIzM-Py.woff2)
Source: chromecache_446.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ptmono/v13/9oRONYoBnWILk-9AnCszM-Py.woff2)
Source: chromecache_350.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3-UBGEe.woff2)
Source: chromecache_350.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3CUBGEe.woff2)
Source: chromecache_350.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3GUBGEe.woff2)
Source: chromecache_350.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2)
Source: chromecache_350.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3OUBGEe.woff2)
Source: chromecache_350.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2)
Source: chromecache_350.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2)
Source: chromecache_350.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMawCUBGEe.woff2)
Source: chromecache_350.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2)
Source: chromecache_427.2.dr	String found in binary or memory: https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE)
Source: chromecache_363.2.dr	String found in binary or memory: https://github.com/bfred-it/object-fit-images
Source: chromecache_436.2.dr	String found in binary or memory: https://github.com/ded/bonzo
Source: chromecache_426.2.dr	String found in binary or memory: https://github.com/driftyco/ionicons
Source: chromecache_426.2.dr	String found in binary or memory: https://github.com/google/material-design-icons
Source: chromecache_219.2.dr, chromecache_285.2.dr	String found in binary or memory: https://github.com/harvesthq/chosen
Source: chromecache_219.2.dr, chromecache_285.2.dr	String found in binary or memory: https://github.com/harvesthq/chosen/blob/master/LICENSE.md
Source: chromecache_297.2.dr	String found in binary or memory: https://github.com/imakewebthings/jquery-waypoints/blob/master/licenses.txt
Source: chromecache_405.2.dr	String found in binary or memory: https://github.com/krux/postscribe/blob/master/LICENSE.
Source: chromecache_277.2.dr	String found in binary or memory: https://github.com/louisremi/jquery-smartresize/blob/master/jquery.debouncedresize.js
Source: chromecache_208.2.dr	String found in binary or memory: https://github.com/mattbryson/TouchSwipe-Jquery-Plugin
Source: chromecache_227.2.dr	String found in binary or memory: https://github.com/microsoft/clarity
Source: chromecache_192.2.dr	String found in binary or memory: https://github.com/nickpettit/glide
Source: chromecache_363.2.dr	String found in binary or memory: https://github.com/nk-o/jarallax
Source: chromecache_363.2.dr	String found in binary or memory: https://github.com/nk-o/jarallax/issues/110
Source: chromecache_363.2.dr	String found in binary or memory: https://github.com/nk-o/jarallax/issues/181
Source: chromecache_363.2.dr	String found in binary or memory: https://github.com/nk-o/jarallax/issues/75
Source: chromecache_363.2.dr	String found in binary or memory: https://github.com/nk-o/jarallax/issues/9
Source: chromecache_388.2.dr	String found in binary or memory: https://github.com/woocommerce/selectWoo
Source: chromecache_388.2.dr	String found in binary or memory: https://github.com/woocommerce/selectWoo/blob/master/LICENSE.md
Source: chromecache_396.2.dr, chromecache_257.2.dr, chromecache_333.2.dr, chromecache_385.2.dr, chromecache_405.2.dr, chromecache_327.2.dr	String found in binary or memory: https://google.com
Source: chromecache_222.2.dr, chromecache_396.2.dr, chromecache_347.2.dr, chromecache_257.2.dr, chromecache_333.2.dr, chromecache_385.2.dr, chromecache_361.2.dr, chromecache_275.2.dr, chromecache_405.2.dr, chromecache_312.2.dr, chromecache_423.2.dr, chromecache_327.2.dr	String found in binary or memory: https://google.com/pagead/form-data
Source: chromecache_396.2.dr, chromecache_257.2.dr, chromecache_333.2.dr, chromecache_385.2.dr, chromecache_405.2.dr, chromecache_327.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_222.2.dr, chromecache_396.2.dr, chromecache_347.2.dr, chromecache_257.2.dr, chromecache_333.2.dr, chromecache_385.2.dr, chromecache_361.2.dr, chromecache_275.2.dr, chromecache_405.2.dr, chromecache_312.2.dr, chromecache_423.2.dr, chromecache_327.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion
Source: chromecache_208.2.dr	String found in binary or memory: https://greensock.com
Source: chromecache_208.2.dr	String found in binary or memory: https://greensock.com/standard-license
Source: chromecache_256.2.dr	String found in binary or memory: https://gw.conversionsapigateway.com
Source: chromecache_248.2.dr, chromecache_326.2.dr, chromecache_320.2.dr, chromecache_231.2.dr, chromecache_263.2.dr	String found in binary or memory: https://incsub.com)
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://javascripterhub.com/L4ohvt4YKKxSh9iz1MjAh9Mf2JnXlXIqVaHT9cVsuey
Source: chromecache_349.2.dr, chromecache_356.2.dr, chromecache_241.2.dr, chromecache_453.2.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_241.2.dr, chromecache_453.2.dr	String found in binary or memory: https://jqueryui.com
Source: chromecache_222.2.dr, chromecache_396.2.dr, chromecache_347.2.dr, chromecache_257.2.dr, chromecache_333.2.dr, chromecache_385.2.dr, chromecache_361.2.dr, chromecache_275.2.dr, chromecache_405.2.dr, chromecache_312.2.dr, chromecache_423.2.dr, chromecache_327.2.dr	String found in binary or memory: https://m.youtube.com
Source: chromecache_269.2.dr	String found in binary or memory: https://modernizr.com/download/?-applicationcache-audio-backgroundsize-borderimage-borderradius-boxs
Source: chromecache_363.2.dr	String found in binary or memory: https://nkdev.info
Source: chromecache_327.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_222.2.dr, chromecache_396.2.dr, chromecache_347.2.dr, chromecache_257.2.dr, chromecache_333.2.dr, chromecache_385.2.dr, chromecache_361.2.dr, chromecache_275.2.dr, chromecache_405.2.dr, chromecache_312.2.dr, chromecache_423.2.dr, chromecache_327.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/ccm/collect
Source: chromecache_222.2.dr, chromecache_396.2.dr, chromecache_347.2.dr, chromecache_257.2.dr, chromecache_333.2.dr, chromecache_385.2.dr, chromecache_361.2.dr, chromecache_275.2.dr, chromecache_405.2.dr, chromecache_312.2.dr, chromecache_423.2.dr, chromecache_327.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_291.2.dr, chromecache_317.2.dr, chromecache_449.2.dr	String found in binary or memory: https://parlatoscatering.com/
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/#organization
Source: chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/about-us/
Source: chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/ancaster-venues/
Source: chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/ayr-venues/
Source: chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/bolton-venues/
Source: chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/burlington-venues/
Source: chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/caledon-venues/
Source: chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/catering-event-reviews/
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/comments/feed/
Source: chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/contact-us/
Source: chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/corporate-events/
Source: chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/corporate/
Source: chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/daily-office-catering/
Source: chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/destination-weddings/
Source: chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/dundas-venues/
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/feed/
Source: chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/freelton-venues/
Source: chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/gallery/
Source: chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/hamilton-venues/
Source: chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/menus/
Source: chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/milton-venues/
Source: chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/mississauga-venues/
Source: chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/newmarket-venues/
Source: chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/oakville-venues/
Source: chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/our-blog/
Source: chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/privacy-policy/
Source: chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/private-event-catering/
Source: chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/toronto-venues/
Source: chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/weddings/
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-Content/uploads/2025/02/wooden_bg.jpg
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/Premium-SEO/includes/seo-automation-styles.css?ver=6
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/advanced-coupons-for-woocommerce-free/css/acfw-block
Source: chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/advanced-coupons-for-woocommerce-free/dist/assets/in
Source: chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/advanced-coupons-for-woocommerce-free/dist/common/No
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=6.0.6
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.0.6
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.0.6
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/duracelltomi-google-tag-manager/dist/js/gtm4wp-form-
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/flexible-shipping/assets/dist/css/free-shipping.css?
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/google-analytics-dashboard-for-wp/assets/js/frontend
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/imaginem-core/assets/js/chosen/chosen.css?ver=6.7.2
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/imaginem-core/assets/js/chosen/chosen.jquery.js
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/imaginem-core/assets/js/classie.js
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/imaginem-core/assets/js/flatpickr/flatpickr.js
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/imaginem-core/assets/js/flatpickr/flatpickr.min.css?
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/imaginem-core/assets/js/isotope/jquery.isotope.min.j
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/imaginem-core/assets/js/jarallax/jarallax.js?ver=1.4
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/imaginem-core/assets/js/jquery.easing.min.js
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/imaginem-core/assets/js/jquery.fitvids.js
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/imaginem-core/assets/js/jquery.gridrotator.js
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/imaginem-core/assets/js/lightbox/css/lg-transitions.
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/imaginem-core/assets/js/lightbox/css/lightgallery.cs
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/imaginem-core/assets/js/lightbox/js/lightgallery-all
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/imaginem-core/assets/js/ls.unveilhooks.min.js
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/imaginem-core/assets/js/modernizr.custom.47002.js
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/imaginem-core/assets/js/owlcarousel/owl.carousel.css
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/imaginem-core/assets/js/owlcarousel/owl.carousel.min
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/imaginem-core/assets/js/page-elements.js
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/imaginem-core/assets/js/swiper/swiper.css?ver=6.7.2
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/imaginem-core/assets/js/swiper/swiper.jquery.min.js
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/imaginem-core/assets/js/tilt.jquery.js
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/imaginem-core/assets/js/waypoints/waypoints.min.js
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/mailchimp-for-wp/assets/css/form-themes.css?ver=4.10
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/points-and-rewards-for-woocommerce/public/css/points
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/points-and-rewards-for-woocommerce/public/js/points-
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.5.6
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.5.6
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.5.6
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/subscriptions-for-woocommerce/public/css/subscriptio
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/subscriptions-for-woocommerce/public/js/subscription
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/ultimate-woocommerce-points-and-rewards/public/css/p
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/ultimate-woocommerce-points-and-rewards/public/js/po
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/woo-delivery/block/assets/css/frontend.css?ver=1.3.6
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/woo-gift-cards-lite/public/css/woocommerce_gift_card
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/woocommerce-subscriptions-pro/common/css/woocommerce
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/woocommerce-subscriptions-pro/common/js/woocommerce-
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/woocommerce-subscriptions-pro/public/js/wps-public.m
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/woocommerce/assets/client/blocks/wc-blocks.css?ver=w
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/woocommerce/assets/css/brands.css?ver=9.8.2
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=9.
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?v
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=9.8.2
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart-variation
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ve
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/woocommerce/assets/js/frontend/order-attribution.min
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/woocommerce/assets/js/frontend/single-product.min.js
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ve
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/woocommerce/assets/js/selectWoo/selectWoo.full.min.j
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/woocommerce/assets/js/sourcebuster/sourcebuster.min.
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/wordpress-popup/assets/hustle-ui/css/hustle-global.m
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/wordpress-popup/assets/hustle-ui/css/hustle-icons.mi
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/wordpress-popup/assets/hustle-ui/css/hustle-info.min
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/wordpress-popup/assets/hustle-ui/css/hustle-popup.mi
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/wordpress-popup/assets/hustle-ui/fonts/hustle-icons-
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/wordpress-popup/assets/hustle-ui/js/hustle-ui.min.js
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/wordpress-popup/assets/js/front.min.js?ver=7.8.7
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/yith-woocommerce-product-add-ons/assets/css/front.cs
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/yith-woocommerce-product-add-ons/assets/js/front.min
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/plugins/yith-woocommerce-product-add-ons/plugin-fw/assets/cs
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/themes/tamarind-child/style.css?ver=1.0.0
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/themes/tamarind-child/style.css?ver=2.0
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/themes/tamarind/css/animations.css?ver=6.7.2
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/themes/tamarind/css/fonts/et-fonts/et-fonts.css?ver=6.7.2
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/themes/tamarind/css/fonts/feather-webfont/feather.css?ver=6.
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/themes/tamarind/css/fonts/font-awesome/css/font-awesome.min.
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/themes/tamarind/css/fonts/fontello/css/fontello.css?ver=6.7.
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/themes/tamarind/css/fonts/ionicons/css/ionicons.min.css?ver=
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/themes/tamarind/css/fonts/simple-line-icons/simple-line-icon
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/themes/tamarind/css/responsive.css?ver=6.7.2
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/themes/tamarind/js/common.js?ver=1.3
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/themes/tamarind/js/lazysizes.min.js
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/themes/tamarind/js/menu/superfish.js
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/themes/tamarind/js/menu/verticalmenu.js
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/themes/tamarind/js/velocity.min.js
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/themes/tamarind/js/velocity.ui.js
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/themes/tamarind/style.css?ver=3.1
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/uploads/2018/10/logo_responsive_2.png
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/uploads/2018/10/logo_responsive_alt_2.png
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/uploads/2018/11/cropped-favicon-3-180x180.jpg
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/uploads/2018/11/cropped-favicon-3-192x192.jpg
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/uploads/2018/11/cropped-favicon-3-270x270.jpg
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/uploads/2018/11/cropped-favicon-3-32x32.jpg
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/uploads/2019/07/bkg-img1-min.jpg);background-position:center
Source: chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/uploads/2019/07/tina-cover.jpg
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/uploads/2019/11/logo_responsive_IT.png
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/uploads/2021/03/FCT.png
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/uploads/2021/03/Infiniti.png
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/uploads/2021/03/Mckesson.png
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/uploads/2021/03/Scotiabank.png
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/uploads/2021/03/big-ass-fans.png
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/uploads/2021/03/cardinal-health.png
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/uploads/2021/03/honda.png
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/uploads/2021/03/pfizer.png
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/uploads/2021/03/the-salvation-army.png
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/uploads/2021/03/toyota.png
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/uploads/2021/03/volswagon.png
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/uploads/2021/03/woodward.png
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/uploads/2022/02/Recoginition-300x81.png
Source: chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/uploads/2022/02/Recoginition.png
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/uploads/2022/05/The-Best-Toronto.png
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/uploads/2022/06/DHL.png
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/uploads/2022/06/DLL-Group.png
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/uploads/2022/06/Ferrari-v2.png
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/uploads/2022/06/Home-Depot.png
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/uploads/2022/06/Interluxe_Logo.png
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/uploads/2022/06/MG-Steel.png
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/uploads/2022/06/OEC-.png
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/uploads/2022/06/Travelers_Logo.png
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/uploads/2022/06/el-con.png
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/uploads/2022/06/fernbrook.png
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/uploads/2022/06/staples.png
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/uploads/2022/07/BDO-2.png
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/uploads/2022/07/bond.png
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/uploads/2022/07/bunge.png
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/uploads/2022/07/sensus-v2.png
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/uploads/2022/08/Client_Millipore_Sigma.png
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/uploads/2022/08/Rock-Lacrosse.png
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/uploads/2022/08/client_subaru.png
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/uploads/2022/09/Amica-Senior-Lifestyle.png
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/uploads/2022/09/Esso.png
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/uploads/2022/09/Jan-Kelly.png
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/uploads/2022/09/air_miles.png
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/uploads/2022/09/baffinland.png
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/uploads/2022/09/treasure-hill.png
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/uploads/2022/11/Aventus-Development.png
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/uploads/2022/11/Prince-Margaret-Cancer-Centre.png
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/uploads/2022/11/Re-Max.png
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/uploads/2022/11/Sheridan-College.png
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/uploads/2022/11/Sick-Kids.png
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/uploads/2022/11/illumi.png
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/uploads/2024/03/Pinnacle-3-1-jpg.webp);background-position:c
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/uploads/2024/03/buffet-station-02-jpg.webp);
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/uploads/2024/03/corporate-event-min-1-jpg.webp);
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/uploads/2024/03/happy-customer-min-jpg.webp);
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/uploads/2024/03/intimate-event-2-min-jpg.webp);
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/uploads/2024/03/parlatos-catering-weddings-min-jpg.webp);
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/uploads/2025/01/logo_responsive_alt_2.png
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/uploads/2025/02/wooden_bg.jpg
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-content/uploads/2025/04/a-warm-lifestyle-advertisement-for-parla_uDj
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-includes/css/dashicons.min.css?ver=6.7.2
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-includes/css/dist/block-library/style.min.css?ver=6.7.2
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-includes/js/clipboard.min.js?ver=2.0.11
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-includes/js/dist/hooks.min.js?ver=4d63a3d491d11ffd8ac6
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-includes/js/hoverIntent.min.js?ver=1.10.2
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-includes/js/imagesloaded.min.js?ver=5.0.0
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-includes/js/jquery/ui/datepicker.min.js?ver=1.13.3
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-includes/js/jquery/ui/progressbar.min.js?ver=1.13.3
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-includes/js/jquery/ui/tooltip.min.js?ver=1.13.3
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-includes/js/thickbox/thickbox.css?ver=6.7.2
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-includes/js/underscore.min.js?ver=1.13.7
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-includes/js/wp-util.min.js?ver=6.7.2
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-json/
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fparlatoscatering.com%2F
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fparlatoscatering.com%2F&#038
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/wp-json/wp/v2/pages/12226
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/xmlrpc.php
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://parlatoscatering.com/xmlrpc.php?rsd
Source: chromecache_322.2.dr, chromecache_392.2.dr	String found in binary or memory: https://rw.marchex.io/2/sendtov2
Source: chromecache_373.2.dr	String found in binary or memory: https://rw1.marchex.io/dni/jsrw1/
Source: chromecache_322.2.dr, chromecache_392.2.dr	String found in binary or memory: https://rw1.marchex.io/euinc/ctc/callformpop?cmp=
Source: chromecache_322.2.dr, chromecache_392.2.dr	String found in binary or memory: https://rw1.marchex.io/euinc/getnumdata.js?
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://schema.org
Source: chromecache_222.2.dr, chromecache_347.2.dr, chromecache_333.2.dr, chromecache_385.2.dr, chromecache_361.2.dr, chromecache_275.2.dr, chromecache_312.2.dr, chromecache_423.2.dr, chromecache_327.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_222.2.dr, chromecache_347.2.dr, chromecache_333.2.dr, chromecache_385.2.dr, chromecache_361.2.dr, chromecache_275.2.dr, chromecache_312.2.dr, chromecache_423.2.dr, chromecache_327.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_386.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_386.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_222.2.dr, chromecache_396.2.dr, chromecache_347.2.dr, chromecache_257.2.dr, chromecache_333.2.dr, chromecache_385.2.dr, chromecache_361.2.dr, chromecache_275.2.dr, chromecache_405.2.dr, chromecache_312.2.dr, chromecache_423.2.dr, chromecache_327.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_443.2.dr	String found in binary or memory: https://themeforest.net/user/imaginem
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://threebestrated.ca/caterers-in-oakville-on
Source: chromecache_426.2.dr	String found in binary or memory: https://twitter.com/benjsperry
Source: chromecache_426.2.dr	String found in binary or memory: https://twitter.com/ionicframework
Source: chromecache_242.2.dr	String found in binary or memory: https://una.im/CSSgram/
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.exactmetrics.com/
Source: chromecache_405.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_386.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_386.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_386.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_327.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_386.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_222.2.dr, chromecache_396.2.dr, chromecache_347.2.dr, chromecache_257.2.dr, chromecache_333.2.dr, chromecache_385.2.dr, chromecache_361.2.dr, chromecache_275.2.dr, chromecache_405.2.dr, chromecache_312.2.dr, chromecache_423.2.dr, chromecache_327.2.dr	String found in binary or memory: https://www.google.com/ccm/collect
Source: chromecache_376.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/undefined/?random
Source: chromecache_222.2.dr, chromecache_396.2.dr, chromecache_347.2.dr, chromecache_257.2.dr, chromecache_333.2.dr, chromecache_385.2.dr, chromecache_361.2.dr, chromecache_275.2.dr, chromecache_405.2.dr, chromecache_312.2.dr, chromecache_423.2.dr, chromecache_327.2.dr	String found in binary or memory: https://www.google.com/pagead/form-data
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.google.com/search?q=PARLATOS
Source: chromecache_222.2.dr, chromecache_396.2.dr, chromecache_347.2.dr, chromecache_257.2.dr, chromecache_333.2.dr, chromecache_385.2.dr, chromecache_361.2.dr, chromecache_275.2.dr, chromecache_405.2.dr, chromecache_312.2.dr, chromecache_423.2.dr, chromecache_327.2.dr	String found in binary or memory: https://www.google.com/travel/flights/click/conversion
Source: chromecache_327.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_327.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_222.2.dr, chromecache_396.2.dr, chromecache_347.2.dr, chromecache_257.2.dr, chromecache_333.2.dr, chromecache_385.2.dr, chromecache_361.2.dr, chromecache_275.2.dr, chromecache_405.2.dr, chromecache_312.2.dr, chromecache_423.2.dr, chromecache_327.2.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_386.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=GT-5D4HZWZ
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_222.2.dr, chromecache_396.2.dr, chromecache_347.2.dr, chromecache_257.2.dr, chromecache_333.2.dr, chromecache_385.2.dr, chromecache_361.2.dr, chromecache_275.2.dr, chromecache_405.2.dr, chromecache_312.2.dr, chromecache_423.2.dr, chromecache_327.2.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.instagram.com/parlatoscatering/
Source: chromecache_222.2.dr, chromecache_347.2.dr, chromecache_333.2.dr, chromecache_385.2.dr, chromecache_361.2.dr, chromecache_275.2.dr, chromecache_312.2.dr, chromecache_423.2.dr, chromecache_327.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_428.2.dr	String found in binary or memory: https://www.themepunch.com/links/slider_revolution_wordpress_regular_license
Source: chromecache_428.2.dr	String found in binary or memory: https://www.themepunch.com/support-center
Source: chromecache_222.2.dr, chromecache_396.2.dr, chromecache_347.2.dr, chromecache_257.2.dr, chromecache_333.2.dr, chromecache_385.2.dr, chromecache_361.2.dr, chromecache_275.2.dr, chromecache_405.2.dr, chromecache_312.2.dr, chromecache_423.2.dr, chromecache_327.2.dr	String found in binary or memory: https://www.youtube.com
Source: chromecache_275.2.dr, chromecache_312.2.dr, chromecache_423.2.dr, chromecache_327.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: https://yoast.com/wordpress/plugins/seo/

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443

Source: unknown	HTTPS traffic detected: 142.250.69.4:443 -> 192.168.2.4:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.240.53.162:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.240.53.162:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 194.87.232.26:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.240.53.162:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.240.53.162:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.240.53.162:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.240.53.162:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 57.144.134.128:443 -> 192.168.2.4:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.169.252.120:443 -> 192.168.2.4:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.178.49.196:443 -> 192.168.2.4:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.169.252.120:443 -> 192.168.2.4:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.168.147.115:443 -> 192.168.2.4:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.71:443 -> 192.168.2.4:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.71:443 -> 192.168.2.4:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.141.157:443 -> 192.168.2.4:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.141.157:443 -> 192.168.2.4:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.178.49.162:443 -> 192.168.2.4:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.68.226:443 -> 192.168.2.4:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 76.223.116.242:443 -> 192.168.2.4:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 57.144.134.1:443 -> 192.168.2.4:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 57.144.134.1:443 -> 192.168.2.4:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 57.144.134.1:443 -> 192.168.2.4:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.175.38.6:443 -> 192.168.2.4:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.175.38.6:443 -> 192.168.2.4:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.125.62.241:443 -> 192.168.2.4:49773 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.169.252.120:443 -> 192.168.2.4:49778 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 57.144.134.1:443 -> 192.168.2.4:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 57.144.134.1:443 -> 192.168.2.4:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 57.144.134.1:443 -> 192.168.2.4:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 57.144.134.1:443 -> 192.168.2.4:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 57.144.134.1:443 -> 192.168.2.4:49781 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.178.49.196:443 -> 192.168.2.4:49785 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 76.223.116.242:443 -> 192.168.2.4:49786 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.28.10:443 -> 192.168.2.4:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.125.62.241:443 -> 192.168.2.4:49787 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.4:49788 version: TLS 1.2

Source: classification engine

Classification label: mal48.win@23/469@54/17

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2152,i,12751529918615607170,13619416143622172560,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2232 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://parlatoscatering.com/?utm_source=google&utm_medium=organic&utm_campaign=gmb"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2152,i,12751529918615607170,13619416143622172560,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2232 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://parlatoscatering.com/?utm_source=google&utm_medium=organic&utm_campaign=gmb	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://parlatoscatering.com/	0%	Avira URL Cloud	safe
https://parlatoscatering.com/wp-content/uploads/2022/05/The-Best-Toronto.png	0%	Avira URL Cloud	safe
https://chmln.github.io/flatpickr/examples/#flatpickr-external-elements	0%	Avira URL Cloud	safe
https://parlatoscatering.com/wp-content/uploads/2022/06/OEC-.png	0%	Avira URL Cloud	safe
https://parlatoscatering.com/weddings/	0%	Avira URL Cloud	safe
https://parlatoscatering.com/wp-content/uploads/2022/06/Ferrari-v2.png	0%	Avira URL Cloud	safe
https://parlatoscatering.com/wp-content/plugins/imaginem-core/assets/js/owlcarousel/owl.carousel.css	0%	Avira URL Cloud	safe
https://parlatoscatering.com/wp-content/uploads/2025/04/a-warm-lifestyle-advertisement-for-parla_uDj	0%	Avira URL Cloud	safe
https://parlatoscatering.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.0.6	0%	Avira URL Cloud	safe
https://parlatoscatering.com/wp-content/plugins/ultimate-woocommerce-points-and-rewards/public/js/po	0%	Avira URL Cloud	safe
https://parlatoscatering.com/xmlrpc.php?rsd	0%	Avira URL Cloud	safe
https://parlatoscatering.com/wp-content/themes/tamarind/css/fonts/feather-webfont/feather.css?ver=6.	0%	Avira URL Cloud	safe
https://parlatoscatering.com/wp-content/uploads/2022/06/el-con.png	0%	Avira URL Cloud	safe
https://parlatoscatering.com/wp-content/uploads/2021/03/big-ass-fans.png	0%	Avira URL Cloud	safe
https://parlatoscatering.com/wp-content/uploads/2022/11/Prince-Margaret-Cancer-Centre.png	0%	Avira URL Cloud	safe
https://parlatoscatering.com/wp-includes/js/hoverIntent.min.js?ver=1.10.2	0%	Avira URL Cloud	safe
https://parlatoscatering.com/wp-content/uploads/2024/03/intimate-event-2-min-jpg.webp);	0%	Avira URL Cloud	safe
http://parlatoscatering.com/about-us/	0%	Avira URL Cloud	safe
https://parlatoscatering.com/wp-content/plugins/imaginem-core/assets/js/modernizr.custom.47002.js	0%	Avira URL Cloud	safe
https://parlatoscatering.com/wp-content/plugins/imaginem-core/assets/js/isotope/jquery.isotope.min.j	0%	Avira URL Cloud	safe
https://parlatoscatering.com/wp-includes/js/jquery/ui/tooltip.min.js?ver=1.13.3	0%	Avira URL Cloud	safe
https://parlatoscatering.com/wp-content/plugins/wordpress-popup/assets/hustle-ui/css/hustle-icons.mi	0%	Avira URL Cloud	safe
https://parlatoscatering.com/wp-content/plugins/wordpress-popup/assets/hustle-ui/css/hustle-info.min	0%	Avira URL Cloud	safe
https://parlatoscatering.com/milton-venues/	0%	Avira URL Cloud	safe
https://parlatoscatering.com/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.5.6	0%	Avira URL Cloud	safe
https://parlatoscatering.com/wp-content/uploads/2021/03/volswagon.png	0%	Avira URL Cloud	safe
https://parlatoscatering.com/wp-content/plugins/duracelltomi-google-tag-manager/dist/js/gtm4wp-form-	0%	Avira URL Cloud	safe
http://fontforge.sf.net)IoniconsIoniconsMediumMediumFontForge	0%	Avira URL Cloud	safe
http://www.hardcode.nl/subcategory_1/article_317-array-shuffle-function	0%	Avira URL Cloud	safe
https://parlatoscatering.com/wp-content/plugins/wordpress-popup/assets/js/front.min.js?ver=7.8.7	0%	Avira URL Cloud	safe
https://parlatoscatering.com/wp-content/themes/tamarind-child/style.css?ver=1.0.0	0%	Avira URL Cloud	safe
https://parlatoscatering.com/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.5.6	0%	Avira URL Cloud	safe
https://parlatoscatering.com/wp-content/plugins/woo-delivery/block/assets/css/frontend.css?ver=1.3.6	0%	Avira URL Cloud	safe
https://parlatoscatering.com/wp-content/plugins/imaginem-core/assets/js/waypoints/waypoints.min.js	0%	Avira URL Cloud	safe
https://parlatoscatering.com/wp-content/uploads/2024/03/corporate-event-min-1-jpg.webp);	0%	Avira URL Cloud	safe
https://parlatoscatering.com/wp-content/uploads/2022/08/client_subaru.png	0%	Avira URL Cloud	safe
https://parlatoscatering.com/wp-content/uploads/2021/03/Mckesson.png	0%	Avira URL Cloud	safe
https://parlatoscatering.com/wp-content/uploads/2022/11/Sheridan-College.png	0%	Avira URL Cloud	safe
http://www.html5rocks.com/en/tutorials/pagevisibility/intro/	0%	Avira URL Cloud	safe
https://parlatoscatering.com/burlington-venues/	0%	Avira URL Cloud	safe
https://parlatoscatering.com/#organization	0%	Avira URL Cloud	safe
https://parlatoscatering.com/xmlrpc.php	0%	Avira URL Cloud	safe
https://parlatoscatering.com/wp-content/uploads/2022/07/BDO-2.png	0%	Avira URL Cloud	safe
https://parlatoscatering.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ve	0%	Avira URL Cloud	safe
https://parlatoscatering.com/wp-includes/css/dist/block-library/style.min.css?ver=6.7.2	0%	Avira URL Cloud	safe
https://parlatoscatering.com/wp-content/uploads/2018/11/cropped-favicon-3-32x32.jpg	0%	Avira URL Cloud	safe
https://parlatoscatering.com/wp-content/themes/tamarind/style.css?ver=3.1	0%	Avira URL Cloud	safe
https://parlatoscatering.com/wp-content/plugins/woocommerce/assets/js/sourcebuster/sourcebuster.min.	0%	Avira URL Cloud	safe
https://parlatoscatering.com/wp-content/themes/tamarind/js/menu/verticalmenu.js	0%	Avira URL Cloud	safe
https://parlatoscatering.com/wp-content/uploads/2022/08/Client_Millipore_Sigma.png	0%	Avira URL Cloud	safe
https://parlatoscatering.com/wp-content/uploads/2022/11/Re-Max.png	0%	Avira URL Cloud	safe
https://parlatoscatering.com/wp-content/plugins/imaginem-core/assets/js/page-elements.js	0%	Avira URL Cloud	safe
https://parlatoscatering.com/wp-content/uploads/2022/09/treasure-hill.png	0%	Avira URL Cloud	safe
http://nicolasgallagher.com/micro-clearfix-hack/	0%	Avira URL Cloud	safe
https://parlatoscatering.com/wp-content/uploads/2022/09/baffinland.png	0%	Avira URL Cloud	safe
https://parlatoscatering.com/oakville-venues/	0%	Avira URL Cloud	safe
https://parlatoscatering.com/wp-content/uploads/2024/03/parlatos-catering-weddings-min-jpg.webp);	0%	Avira URL Cloud	safe
https://parlatoscatering.com/wp-content/uploads/2022/07/bunge.png	0%	Avira URL Cloud	safe
http://foodshop-parlatoscatering.com	0%	Avira URL Cloud	safe
https://parlatoscatering.com/wp-content/plugins/woocommerce-subscriptions-pro/common/css/woocommerce	0%	Avira URL Cloud	safe
https://parlatoscatering.com/wp-content/plugins/yith-woocommerce-product-add-ons/assets/js/front.min	0%	Avira URL Cloud	safe
https://parlatoscatering.com/newmarket-venues/	0%	Avira URL Cloud	safe
https://parlatoscatering.com/catering-event-reviews/	0%	Avira URL Cloud	safe
https://parlatoscatering.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1	0%	Avira URL Cloud	safe
https://parlatoscatering.com/wp-content/uploads/2022/02/Recoginition.png	0%	Avira URL Cloud	safe
https://parlatoscatering.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart-variation	0%	Avira URL Cloud	safe
https://parlatoscatering.com/wp-content/plugins/flexible-shipping/assets/dist/css/free-shipping.css?	0%	Avira URL Cloud	safe
https://parlatoscatering.com/wp-content/uploads/2022/07/bond.png	0%	Avira URL Cloud	safe
https://parlatoscatering.com/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.5.6	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
star-mini.c10r.facebook.com	57.144.134.1	true	false	high
beacons-handoff.gcp.gvt2.com	74.125.138.94	true	false	high
c-msn-pme.trafficmanager.net	20.125.62.241	true	false	high
ax-0001.ax-msedge.net	150.171.28.10	true	false	high
stats.g.doubleclick.net	142.250.141.157	true	false	high
scontent.xx.fbcdn.net	57.144.134.128	true	false	high
vmss-clarity-ingest-eus2-e.eastus2.cloudapp.azure.com	172.175.38.6	true	false	high
googleads.g.doubleclick.net	142.250.68.226	true	false	high
parlatoscatering.com	162.240.53.162	true	false	unknown
s.ksrndkehqnwntyxlhgto.com	3.168.147.115	true	false	high
www.google.com	142.250.69.4	true	false	high
analytics.google.com	192.178.49.206	true	false	high
td.doubleclick.net	192.178.49.162	true	false	high
javascripterhub.com	194.87.232.26	true	false	high
process.iconnode.com	76.223.116.242	true	false	high
dhtt2nmvztmk3.cloudfront.net	3.169.252.120	true	false	high
s-part-0043.t-0009.t-msedge.net	13.107.246.71	true	false	high
www.facebook.com	unknown	unknown	false	high
rw1.marchex.io	unknown	unknown	false	high
www.clarity.ms	unknown	unknown	false	high
beacons.gcp.gvt2.com	unknown	unknown	false	high
connect.facebook.net	unknown	unknown	false	high
cdn.trustindex.io	unknown	unknown	false	high
c.clarity.ms	unknown	unknown	false	high
k.clarity.ms	unknown	unknown	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://parlatoscatering.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.0.6	chromecache_383.2.dr, chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
https://stats.g.doubleclick.net/g/collect	chromecache_222.2.dr, chromecache_347.2.dr, chromecache_333.2.dr, chromecache_385.2.dr, chromecache_361.2.dr, chromecache_275.2.dr, chromecache_312.2.dr, chromecache_423.2.dr, chromecache_327.2.dr	false		high
https://parlatoscatering.com/wp-content/uploads/2025/04/a-warm-lifestyle-advertisement-for-parla_uDj	chromecache_383.2.dr, chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
https://parlatoscatering.com/wp-content/uploads/2022/06/OEC-.png	chromecache_383.2.dr, chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
https://parlatoscatering.com/	chromecache_291.2.dr, chromecache_317.2.dr, chromecache_449.2.dr	false	Avira URL Cloud: safe	unknown
http://daverupert.com	chromecache_346.2.dr	false		high
https://chmln.github.io/flatpickr/examples/#flatpickr-external-elements	chromecache_362.2.dr	false	Avira URL Cloud: safe	unknown
https://twitter.com/benjsperry	chromecache_426.2.dr	false		high
https://parlatoscatering.com/weddings/	chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
https://parlatoscatering.com/wp-content/plugins/imaginem-core/assets/js/owlcarousel/owl.carousel.css	chromecache_383.2.dr, chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
https://parlatoscatering.com/wp-content/uploads/2022/06/Ferrari-v2.png	chromecache_383.2.dr, chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
https://parlatoscatering.com/wp-content/uploads/2022/05/The-Best-Toronto.png	chromecache_383.2.dr, chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_386.2.dr	false		high
https://parlatoscatering.com/wp-content/plugins/ultimate-woocommerce-points-and-rewards/public/js/po	chromecache_383.2.dr, chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
https://parlatoscatering.com/xmlrpc.php?rsd	chromecache_383.2.dr, chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
https://parlatoscatering.com/wp-content/uploads/2024/03/intimate-event-2-min-jpg.webp);	chromecache_383.2.dr, chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
https://www.youtube.com	chromecache_222.2.dr, chromecache_396.2.dr, chromecache_347.2.dr, chromecache_257.2.dr, chromecache_333.2.dr, chromecache_385.2.dr, chromecache_361.2.dr, chromecache_275.2.dr, chromecache_405.2.dr, chromecache_312.2.dr, chromecache_423.2.dr, chromecache_327.2.dr	false		high
https://parlatoscatering.com/wp-content/uploads/2022/06/el-con.png	chromecache_383.2.dr, chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
http://www.opensource.org/licenses/mit-license.php	chromecache_221.2.dr, chromecache_255.2.dr, chromecache_277.2.dr	false		high
https://parlatoscatering.com/wp-content/plugins/imaginem-core/assets/js/modernizr.custom.47002.js	chromecache_383.2.dr, chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
https://parlatoscatering.com/wp-content/uploads/2021/03/big-ass-fans.png	chromecache_383.2.dr, chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
https://parlatoscatering.com/wp-content/themes/tamarind/css/fonts/feather-webfont/feather.css?ver=6.	chromecache_383.2.dr, chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
https://parlatoscatering.com/wp-includes/js/hoverIntent.min.js?ver=1.10.2	chromecache_383.2.dr, chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
https://parlatoscatering.com/wp-content/uploads/2022/11/Prince-Margaret-Cancer-Centre.png	chromecache_383.2.dr, chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
http://parlatoscatering.com/about-us/	chromecache_383.2.dr, chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
https://parlatoscatering.com/wp-content/plugins/imaginem-core/assets/js/isotope/jquery.isotope.min.j	chromecache_383.2.dr, chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
https://m.youtube.com	chromecache_222.2.dr, chromecache_396.2.dr, chromecache_347.2.dr, chromecache_257.2.dr, chromecache_333.2.dr, chromecache_385.2.dr, chromecache_361.2.dr, chromecache_275.2.dr, chromecache_405.2.dr, chromecache_312.2.dr, chromecache_423.2.dr, chromecache_327.2.dr	false		high
https://www.themepunch.com/support-center	chromecache_428.2.dr	false		high
https://parlatoscatering.com/wp-content/plugins/wordpress-popup/assets/hustle-ui/css/hustle-icons.mi	chromecache_383.2.dr, chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
https://parlatoscatering.com/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.5.6	chromecache_383.2.dr, chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
https://parlatoscatering.com/wp-content/plugins/wordpress-popup/assets/hustle-ui/css/hustle-info.min	chromecache_383.2.dr, chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
https://stats.g.doubleclick.net/j/collect	chromecache_386.2.dr	false		high
https://parlatoscatering.com/wp-content/plugins/duracelltomi-google-tag-manager/dist/js/gtm4wp-form-	chromecache_383.2.dr, chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
https://parlatoscatering.com/wp-content/uploads/2021/03/volswagon.png	chromecache_383.2.dr, chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/microsoft/clarity	chromecache_227.2.dr	false		high
https://parlatoscatering.com/wp-includes/js/jquery/ui/tooltip.min.js?ver=1.13.3	chromecache_383.2.dr, chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/pagead/form-data	chromecache_222.2.dr, chromecache_396.2.dr, chromecache_347.2.dr, chromecache_257.2.dr, chromecache_333.2.dr, chromecache_385.2.dr, chromecache_361.2.dr, chromecache_275.2.dr, chromecache_405.2.dr, chromecache_312.2.dr, chromecache_423.2.dr, chromecache_327.2.dr	false		high
https://parlatoscatering.com/milton-venues/	chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
https://parlatoscatering.com/wp-content/plugins/wordpress-popup/assets/js/front.min.js?ver=7.8.7	chromecache_383.2.dr, chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
http://fontforge.sf.net)IoniconsIoniconsMediumMediumFontForge	chromecache_382.2.dr	false	Avira URL Cloud: safe	unknown
http://www.hardcode.nl/subcategory_1/article_317-array-shuffle-function	chromecache_277.2.dr	false	Avira URL Cloud: safe	unknown
https://parlatoscatering.com/wp-content/plugins/woo-delivery/block/assets/css/frontend.css?ver=1.3.6	chromecache_383.2.dr, chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/woocommerce/selectWoo	chromecache_388.2.dr	false		high
https://parlatoscatering.com/wp-content/themes/tamarind-child/style.css?ver=1.0.0	chromecache_383.2.dr, chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
https://parlatoscatering.com/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.5.6	chromecache_383.2.dr, chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
https://parlatoscatering.com/wp-content/uploads/2022/08/client_subaru.png	chromecache_383.2.dr, chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
http://www.html5rocks.com/en/tutorials/pagevisibility/intro/	chromecache_277.2.dr	false	Avira URL Cloud: safe	unknown
https://parlatoscatering.com/wp-content/plugins/imaginem-core/assets/js/waypoints/waypoints.min.js	chromecache_383.2.dr, chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
https://parlatoscatering.com/wp-content/uploads/2024/03/corporate-event-min-1-jpg.webp);	chromecache_383.2.dr, chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
http://www.idangero.us/swiper/	chromecache_307.2.dr, chromecache_360.2.dr	false		high
https://parlatoscatering.com/wp-content/uploads/2021/03/Mckesson.png	chromecache_383.2.dr, chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
https://parlatoscatering.com/wp-content/uploads/2022/11/Sheridan-College.png	chromecache_383.2.dr, chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
https://parlatoscatering.com/burlington-venues/	chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
https://parlatoscatering.com/xmlrpc.php	chromecache_383.2.dr, chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
https://schema.org	chromecache_383.2.dr, chromecache_291.2.dr	false		high
https://parlatoscatering.com/#organization	chromecache_383.2.dr, chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
https://parlatoscatering.com/wp-content/uploads/2022/07/BDO-2.png	chromecache_383.2.dr, chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
https://rw1.marchex.io/euinc/getnumdata.js?	chromecache_322.2.dr, chromecache_392.2.dr	false		high
https://parlatoscatering.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ve	chromecache_383.2.dr, chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
http://gmpg.org/xfn/11	chromecache_383.2.dr, chromecache_291.2.dr	false		high
https://cdn.trustindex.io/loader.js?1b1045689970900caf5922f380	chromecache_383.2.dr, chromecache_291.2.dr	false		high
https://connect.facebook.net/	chromecache_256.2.dr	false		high
https://parlatoscatering.com/wp-content/uploads/2018/11/cropped-favicon-3-32x32.jpg	chromecache_383.2.dr, chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
https://greensock.com/standard-license	chromecache_208.2.dr	false		high
https://parlatoscatering.com/wp-includes/css/dist/block-library/style.min.css?ver=6.7.2	chromecache_383.2.dr, chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
https://parlatoscatering.com/wp-content/themes/tamarind/js/menu/verticalmenu.js	chromecache_383.2.dr, chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
https://parlatoscatering.com/wp-content/plugins/woocommerce/assets/js/sourcebuster/sourcebuster.min.	chromecache_383.2.dr, chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
https://parlatoscatering.com/wp-content/themes/tamarind/style.css?ver=3.1	chromecache_383.2.dr, chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
http://malsup.com/jquery/block/	chromecache_255.2.dr	false		high
https://github.com/ded/bonzo	chromecache_436.2.dr	false		high
https://parlatoscatering.com/wp-content/uploads/2022/08/Client_Millipore_Sigma.png	chromecache_383.2.dr, chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
https://parlatoscatering.com/wp-content/uploads/2022/11/Re-Max.png	chromecache_383.2.dr, chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
https://stats.g.doubleclick.net/g/collect?v=2&	chromecache_222.2.dr, chromecache_347.2.dr, chromecache_333.2.dr, chromecache_385.2.dr, chromecache_361.2.dr, chromecache_275.2.dr, chromecache_312.2.dr, chromecache_423.2.dr, chromecache_327.2.dr	false		high
https://parlatoscatering.com/wp-content/plugins/imaginem-core/assets/js/page-elements.js	chromecache_383.2.dr, chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
https://parlatoscatering.com/wp-content/uploads/2022/09/treasure-hill.png	chromecache_383.2.dr, chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
http://nicolasgallagher.com/micro-clearfix-hack/	chromecache_443.2.dr	false	Avira URL Cloud: safe	unknown
http://www.idangero.us/	chromecache_307.2.dr, chromecache_360.2.dr	false		high
https://github.com/nk-o/jarallax/issues/110	chromecache_363.2.dr	false		high
https://parlatoscatering.com/wp-content/uploads/2022/09/baffinland.png	chromecache_383.2.dr, chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
https://parlatoscatering.com/wp-content/uploads/2024/03/parlatos-catering-weddings-min-jpg.webp);	chromecache_383.2.dr, chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
https://jqueryui.com	chromecache_241.2.dr, chromecache_453.2.dr	false		high
http://sam.zoy.org/wtfpl/	chromecache_346.2.dr	false		high
https://yoast.com/wordpress/plugins/seo/	chromecache_383.2.dr, chromecache_291.2.dr	false		high
http://themeforest.net/user/imaginem	chromecache_443.2.dr	false		high
https://parlatoscatering.com/oakville-venues/	chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
http://foodshop-parlatoscatering.com	chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
https://parlatoscatering.com/wp-content/uploads/2022/07/bunge.png	chromecache_383.2.dr, chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
https://parlatoscatering.com/wp-content/plugins/woocommerce-subscriptions-pro/common/css/woocommerce	chromecache_383.2.dr, chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
https://parlatoscatering.com/wp-content/plugins/yith-woocommerce-product-add-ons/assets/js/front.min	chromecache_383.2.dr, chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
https://parlatoscatering.com/newmarket-venues/	chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
https://parlatoscatering.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1	chromecache_383.2.dr, chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
https://parlatoscatering.com/catering-event-reviews/	chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
https://parlatoscatering.com/wp-content/uploads/2022/02/Recoginition.png	chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
https://twitter.com/ionicframework	chromecache_426.2.dr	false		high
https://parlatoscatering.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart-variation	chromecache_383.2.dr, chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
https://parlatoscatering.com/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.5.6	chromecache_383.2.dr, chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
https://parlatoscatering.com/wp-content/plugins/flexible-shipping/assets/dist/css/free-shipping.css?	chromecache_383.2.dr, chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
https://parlatoscatering.com/wp-content/uploads/2022/07/bond.png	chromecache_383.2.dr, chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
https://connect.facebook.net/en_US/fbevents.js?v=next	chromecache_383.2.dr, chromecache_291.2.dr	false		high
https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE)	chromecache_427.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
76.223.116.242	process.iconnode.com	United States	16509	AMAZON-02US	false
20.125.62.241	c-msn-pme.trafficmanager.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
192.178.49.162	td.doubleclick.net	United States	15169	GOOGLEUS	false
57.144.134.128	scontent.xx.fbcdn.net	Belgium	2686	ATGS-MMD-ASUS	false
3.168.147.115	s.ksrndkehqnwntyxlhgto.com	United States	16509	AMAZON-02US	false
194.87.232.26	javascripterhub.com	Russian Federation	48347	MTW-ASRU	false
150.171.28.10	ax-0001.ax-msedge.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
3.169.252.120	dhtt2nmvztmk3.cloudfront.net	United States	16509	AMAZON-02US	false
142.250.69.4	www.google.com	United States	15169	GOOGLEUS	false
172.175.38.6	vmss-clarity-ingest-eus2-e.eastus2.cloudapp.azure.com	United States	7018	ATT-INTERNET4US	false
192.178.49.196	unknown	United States	15169	GOOGLEUS	false
13.107.246.71	s-part-0043.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.68.226	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
162.240.53.162	parlatoscatering.com	United States	46606	UNIFIEDLAYER-AS-1US	false
57.144.134.1	star-mini.c10r.facebook.com	Belgium	2686	ATGS-MMD-ASUS	false
142.250.141.157	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1676427
Start date and time:	2025-04-28 17:32:07 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 50s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://parlatoscatering.com/?utm_source=google&utm_medium=organic&utm_campaign=gmb
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.win@23/469@54/17

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, RuntimeBroker.exe, ShellExperienceHost.exe, SIHClient.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 192.178.49.174, 142.250.68.227, 142.250.141.84, 192.178.49.206, 23.220.73.19, 142.250.68.232, 192.178.49.170, 192.178.49.163, 142.250.68.238
Excluded domains from analysis (whitelisted): fonts.googleapis.com, accounts.google.com, slscr.update.microsoft.com, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, www.googletagmanager.com, c.bing.com, update.googleapis.com, clients.l.google.com, c.pki.goog, www.google-analytics.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://parlatoscatering.com/?utm_source=google&utm_medium=organic&utm_campaign=gmb

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 210 x 88, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2156
Entropy (8bit):	7.816099628726708
Encrypted:	false
SSDEEP:	48:bL/6lV5r6dpK4o0aJXJXa0uJP1LZiv40DEo5u1h6:bLS5r6dpK4JaXJXzw1LIAGZYW
MD5:	ABBEF4428661447F5DC1CFCCC457FEB4
SHA1:	C4462CDCD7A7DA4EF78F86D09B7C54FE73B54733
SHA-256:	CA63E0B1068D5635258EA34B1C1ADFBC66EDC3DD3DB5B08AE05D4804878EF6B3
SHA-512:	9FD15C47569F7D2BF1E8498D6C1F3F445FEDBBBF7476CCEFF1E412D7D9C492AA4B641713A6D27CED87D517BF3454D1E8F192BA8AE0FD4938410042702CF1513F
Malicious:	false
Reputation:	low
URL:	https://parlatoscatering.com/wp-content/uploads/2022/08/Client_Millipore_Sigma.png
Preview:	.PNG........IHDR.......X......lY.....gAMA......a.....sRGB.........pHYs................3PLTEGpL^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^.$I.....tRNS.9.t....&..aN...O.z....IDATx..Z....6....i......$...u.5...u.8^z.^z.^z.^z.^.....?...Tn.......P&.d...i@..u%..mI.62.[..lC.G6.d..MC1E.b.'Duj...<.+.......~V..@..8.".a.:4...vl<..'G_":q....... $.g...F60.`3d.V...z.O.(X.....H...;Hj%[..CK6..ld..4.+D...mHI#7.eLk6..ld..v.HukDH.[H...i).-\e......~f. ]..B....v...$...u.O.........k..L..y.Ah$...W.....T+HM#.!v...mO..\...Z...P.-.....M...e.R....0.(g...E.>C.q.>>.T.w..@..`.?..j,..Jtm.?C:Y.\|j.Q..V+H...t..t.....5.`..H.+....O..W.(..vba..=.P.u.-..u.u.[6.?9K..!..^...7...R...4..r....7N...K..O.Ln..^...h/.'H..W.R.n.NYA.'G.O..H..........;. ...(...........7Q..9:I].i...RB...N..$.d...v..O......R..d..[.y.-o...H}.nV.G....&..V...{.....-.+........A.E.).....G.s.>.. ...\C.6.A.g......R\.>!....3.d....1.3......$.x.D.Iz....>...GA<...O..&$....S..T.g....n.d.d...~H ........)l.

Source: https://parlatoscatering.com/?utm_source=google&utm_medium=organic&utm_campaign=gmb	HTTP Parser: No favicon
Source: https://parlatoscatering.com/?utm_source=google&utm_medium=organic&utm_campaign=gmb	HTTP Parser: No favicon
Source: https://parlatoscatering.com/?utm_source=google&utm_medium=organic&utm_campaign=gmb	HTTP Parser: No favicon
Source: https://parlatoscatering.com/?utm_source=google&utm_medium=organic&utm_campaign=gmb	HTTP Parser: No favicon

Source: Network traffic	Suricata IDS: 2061092 - Severity 1 - ET EXPLOIT_KIT Malicious TA2726 TDS Domain in DNS Lookup (javascripterhub .com) : 192.168.2.4:56705 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2061094 - Severity 1 - ET EXPLOIT_KIT Malicious TA2726 TDS Domain in DNS Lookup (javascripterhub .com) : 192.168.2.4:56705 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2061092 - Severity 1 - ET EXPLOIT_KIT Malicious TA2726 TDS Domain in DNS Lookup (javascripterhub .com) : 192.168.2.4:52463 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2061094 - Severity 1 - ET EXPLOIT_KIT Malicious TA2726 TDS Domain in DNS Lookup (javascripterhub .com) : 192.168.2.4:52463 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2061098 - Severity 1 - ET EXPLOIT_KIT Malicious TA2726 TDS Domain in TLS SNI (javascripterhub .com) : 192.168.2.4:49742 -> 194.87.232.26:443
Source: Network traffic	Suricata IDS: 2061100 - Severity 1 - ET EXPLOIT_KIT Malicious TA2726 TDS Domain in TLS SNI (javascripterhub .com) : 192.168.2.4:49742 -> 194.87.232.26:443

Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 192.178.49.195
Source: unknown	TCP traffic detected without corresponding DNS query: 192.178.49.195
Source: unknown	TCP traffic detected without corresponding DNS query: 192.178.49.195
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 192.178.49.195
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 192.178.49.195
Source: unknown	TCP traffic detected without corresponding DNS query: 192.178.49.195
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: <a class="ntips" title="Facebook" href="https://www.facebook.com/parlatoscatering" target="_blank"> equals www.facebook.com (Facebook)
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: <script type='application/ld+json' class='yoast-schema-graph yoast-schema-graph--main'>{"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://parlatoscatering.com/#organization","name":"Parlato's Catering","url":"https://parlatoscatering.com/","sameAs":["https://www.facebook.com/parlatoscatering/","https://www.instagram.com/parlatoscatering/"],"logo":{"@type":"ImageObject","@id":"https://parlatoscatering.com/#logo","url":"https://parlatoscatering.com/wp-content/uploads/2018/11/favicon-3.jpg","width":35,"height":35,"caption":"Parlato's Catering"},"image":{"@id":"https://parlatoscatering.com/#logo"}},{"@type":"WebSite","@id":"https://parlatoscatering.com/#website","url":"https://parlatoscatering.com/","name":"Parlato's Catering","publisher":{"@id":"https://parlatoscatering.com/#organization"},"potentialAction":{"@type":"SearchAction","target":"https://parlatoscatering.com/?s={search_term_string}","query-input":"required name=search_term_string"}},{"@type":"ImageObject","@id":"https://parlatoscatering.com/#primaryimage","url":"https://parlatoscatering.com/wp-content/uploads/2021/03/Scotiabank.png","width":175,"height":88},{"@type":"WebPage","@id":"https://parlatoscatering.com/#webpage","url":"https://parlatoscatering.com/","inLanguage":"en-US","name":"The Best Italian Catering Service in Oakville \| Parlato's Catering","isPartOf":{"@id":"https://parlatoscatering.com/#website"},"about":{"@id":"https://parlatoscatering.com/#organization"},"primaryImageOfPage":{"@id":"https://parlatoscatering.com/#primaryimage"},"datePublished":"2018-05-08T05:26:18+00:00","dateModified":"2025-04-25T18:18:21+00:00","description":"The Best Italian Catering Service in Oakville, Burlington, Milton, Hamilton and Mississauga - Our Team Will Help You Bring Your Event Vision To Reality."}]}</script> equals www.facebook.com (Facebook)
Source: chromecache_275.2.dr, chromecache_312.2.dr, chromecache_423.2.dr, chromecache_327.2.dr	String found in binary or memory: Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Gk:function(){e=pb()},Ed:function(){d()}}};var $b=ua(["data-gtm-yt-inspected-"]),kI=["www.youtube.com","www.youtube-nocookie.com"],lI,mI=!1; equals www.youtube.com (Youtube)
Source: chromecache_222.2.dr	String found in binary or memory: Wt();Ao(function(){a();xo(b)\|\|Mm(a,b)},b)},Wt=function(){return[N.m.T,N.m.U]},Xt=/^(?:www\.)?google(?:\.com?)?(?:\.[a-z]{2}t?)?$/,Yt=/^www\.googleadservices\.com$/,bu=/^gad_source[_=](\d+)$/;function gu(){return Io("dedupe_gclid",function(){return yr()})};var hu=/^(www\.)?google(\.com?)?(\.[a-z]{2}t?)?$/,iu=/^www.googleadservices.com$/;function ju(a){a\|\|(a=ku());return a.po?!1:a.nn\|\|a.on\|\|a.rn\|\|a.pn\|\|a.df\|\|a.Wm\|\|a.qn\|\|a.dn?!0:!1}function ku(){var a={},b=ds(!0);a.po=!!b._up;var c=ut();a.nn=c.aw!==void 0;a.on=c.dc!==void 0;a.rn=c.wbraid!==void 0;a.pn=c.gbraid!==void 0;a.qn=c.gclsrc==="aw.ds";a.df=Ut().df;var d=A.referrer?fk(lk(A.referrer),"host"):"";a.dn=hu.test(d);a.Wm=iu.test(d);return a};var lu=["https://www.google.com","https://www.youtube.com","https://m.youtube.com"]; equals www.youtube.com (Youtube)
Source: chromecache_327.2.dr	String found in binary or memory: Xt();Bo(function(){a();yo(b)\|\|Nm(a,b)},b)},Xt=function(){return[N.m.T,N.m.U]},Yt=/^(?:www\.)?google(?:\.com?)?(?:\.[a-z]{2}t?)?$/,Zt=/^www\.googleadservices\.com$/,cu=/^gad_source[_=](\d+)$/;function hu(){return Jo("dedupe_gclid",function(){return Ar()})};var iu=/^(www\.)?google(\.com?)?(\.[a-z]{2}t?)?$/,ju=/^www.googleadservices.com$/;function ku(a){a\|\|(a=lu());return a.po?!1:a.nn\|\|a.on\|\|a.rn\|\|a.pn\|\|a.df\|\|a.Wm\|\|a.qn\|\|a.dn?!0:!1}function lu(){var a={},b=fs(!0);a.po=!!b._up;var c=vt();a.nn=c.aw!==void 0;a.on=c.dc!==void 0;a.rn=c.wbraid!==void 0;a.pn=c.gbraid!==void 0;a.qn=c.gclsrc==="aw.ds";a.df=Vt().df;var d=A.referrer?fk(lk(A.referrer),"host"):"";a.dn=iu.test(d);a.Wm=ju.test(d);return a};var mu=["https://www.google.com","https://www.youtube.com","https://m.youtube.com"]; equals www.youtube.com (Youtube)
Source: chromecache_275.2.dr, chromecache_423.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var h=PE(a,c,e);O(121);if(h["gtm.elementUrl"]==="https://www.facebook.com/tr/")return O(122),!0;if(d&&f){for(var m=Ab(b,g.length),n=0;n<g.length;++n)g[n](h,m);return m.done}for(var p=0;p<g.length;++p)g[p](h,function(){});return!0},SE=function(){var a=[],b=function(c){return eb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_275.2.dr, chromecache_312.2.dr, chromecache_423.2.dr, chromecache_327.2.dr	String found in binary or memory: if(!(f\|\|g\|\|h\|\|m.length\|\|n.length))return;var q={Kh:f,Ih:g,Jh:h,vi:m,wi:n,cf:p,Lb:e},r=z.YT;if(r)return r.ready&&r.ready(d),e;var t=z.onYouTubeIframeAPIReady;z.onYouTubeIframeAPIReady=function(){t&&t();d()};D(function(){for(var u=A.getElementsByTagName("script"),v=u.length,w=0;w<v;w++){var x=u[w].getAttribute("src");if(vI(x,"iframe_api")\|\|vI(x,"player_api"))return e}for(var y=A.getElementsByTagName("iframe"),B=y.length,C=0;C<B;C++)if(!mI&&tI(y[C],q.cf))return rc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_256.2.dr	String found in binary or memory: return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(b){var c=typeof a.URL==="function"?a.URL:a.webkitURL;c=new c(b);c=c.hostname.endsWith(".facebook.com")&&c.pathname=="/signals/iwl.js";if(!c)throw new Error("Disallowed script URL");return b}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_256.2.dr	String found in binary or memory: return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_256.2.dr	String found in binary or memory: return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";var a={ENDPOINT:"https://www.facebook.com/tr/",INSTAGRAM_TRIGGER_ATTRIBUTION:"https://www.instagram.com/tr/",AEM_ENDPOINT:"https://www.facebook.com/.well-known/aggregated-event-measurement/",GPS_ENDPOINT:"https://www.facebook.com/privacy_sandbox/pixel/register/trigger/",TOPICS_API_ENDPOINT:"https://www.facebook.com/privacy_sandbox/topics/registration/"};j.exports=a})();return j.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_222.2.dr	String found in binary or memory: return f}hI.K="internal.enableAutoEventOnTimer";var $b=ua(["data-gtm-yt-inspected-"]),jI=["www.youtube.com","www.youtube-nocookie.com"],kI,lI=!1; equals www.youtube.com (Youtube)
Source: chromecache_396.2.dr, chromecache_347.2.dr, chromecache_257.2.dr, chromecache_333.2.dr, chromecache_385.2.dr, chromecache_361.2.dr, chromecache_405.2.dr	String found in binary or memory: return f}iI.K="internal.enableAutoEventOnTimer";var $b=ua(["data-gtm-yt-inspected-"]),kI=["www.youtube.com","www.youtube-nocookie.com"],lI,mI=!1; equals www.youtube.com (Youtube)
Source: chromecache_383.2.dr, chromecache_291.2.dr	String found in binary or memory: src="https://www.facebook.com/tr?id=879485519444738&ev=PageView&noscript=1" /> equals www.facebook.com (Facebook)
Source: chromecache_291.2.dr	String found in binary or memory: var incOpt = {"conditional_tags":{"is_single":false,"is_singular":true,"is_tag":false,"is_category":false,"is_author":false,"is_date":false,"is_post_type_archive":false,"is_404":false,"is_front_page":true,"is_search":false,"is_product_tag":false,"is_product_category":false,"is_shop":false,"is_woocommerce":false,"is_checkout":false,"is_cart":false,"is_account_page":false,"order-received":false},"is_admin":"","real_page_id":"12226","thereferrer":"","actual_url":"parlatoscatering.com\/?ob=open-bridge%2Fevents","full_actual_url":"https:\/\/parlatoscatering.com\/?ob=open-bridge%2Fevents","native_share_enpoints":{"facebook":"https:\/\/www.facebook.com\/sharer\/sharer.php?u=https%3A%2F%2Fparlatoscatering.com","twitter":"https:\/\/twitter.com\/intent\/tweet?url=https%3A%2F%2Fparlatoscatering.com&text=Catering%20Oakville","pinterest":"https:\/\/www.pinterest.com\/pin\/create\/button\/?url=https%3A%2F%2Fparlatoscatering.com","reddit":"https:\/\/www.reddit.com\/submit?url=https%3A%2F%2Fparlatoscatering.com","linkedin":"https:\/\/www.linkedin.com\/shareArticle?mini=true&url=https%3A%2F%2Fparlatoscatering.com","vkontakte":"https:\/\/vk.com\/share.php?url=https%3A%2F%2Fparlatoscatering.com","whatsapp":"https:\/\/api.whatsapp.com\/send?text=https%3A%2F%2Fparlatoscatering.com","email":"mailto:?subject=Catering%20Oakville&body=https%3A%2F%2Fparlatoscatering.com"},"ajaxurl":"https:\/\/parlatoscatering.com\/wp-admin\/admin-ajax.php","page_id":"12226","page_slug":"","is_upfront":"","script_delay":"3000"}; equals www.facebook.com (Facebook)
Source: chromecache_291.2.dr	String found in binary or memory: var incOpt = {"conditional_tags":{"is_single":false,"is_singular":true,"is_tag":false,"is_category":false,"is_author":false,"is_date":false,"is_post_type_archive":false,"is_404":false,"is_front_page":true,"is_search":false,"is_product_tag":false,"is_product_category":false,"is_shop":false,"is_woocommerce":false,"is_checkout":false,"is_cart":false,"is_account_page":false,"order-received":false},"is_admin":"","real_page_id":"12226","thereferrer":"","actual_url":"parlatoscatering.com\/?ob=open-bridge%2Fevents","full_actual_url":"https:\/\/parlatoscatering.com\/?ob=open-bridge%2Fevents","native_share_enpoints":{"facebook":"https:\/\/www.facebook.com\/sharer\/sharer.php?u=https%3A%2F%2Fparlatoscatering.com","twitter":"https:\/\/twitter.com\/intent\/tweet?url=https%3A%2F%2Fparlatoscatering.com&text=Catering%20Oakville","pinterest":"https:\/\/www.pinterest.com\/pin\/create\/button\/?url=https%3A%2F%2Fparlatoscatering.com","reddit":"https:\/\/www.reddit.com\/submit?url=https%3A%2F%2Fparlatoscatering.com","linkedin":"https:\/\/www.linkedin.com\/shareArticle?mini=true&url=https%3A%2F%2Fparlatoscatering.com","vkontakte":"https:\/\/vk.com\/share.php?url=https%3A%2F%2Fparlatoscatering.com","whatsapp":"https:\/\/api.whatsapp.com\/send?text=https%3A%2F%2Fparlatoscatering.com","email":"mailto:?subject=Catering%20Oakville&body=https%3A%2F%2Fparlatoscatering.com"},"ajaxurl":"https:\/\/parlatoscatering.com\/wp-admin\/admin-ajax.php","page_id":"12226","page_slug":"","is_upfront":"","script_delay":"3000"}; equals www.linkedin.com (Linkedin)
Source: chromecache_291.2.dr	String found in binary or memory: var incOpt = {"conditional_tags":{"is_single":false,"is_singular":true,"is_tag":false,"is_category":false,"is_author":false,"is_date":false,"is_post_type_archive":false,"is_404":false,"is_front_page":true,"is_search":false,"is_product_tag":false,"is_product_category":false,"is_shop":false,"is_woocommerce":false,"is_checkout":false,"is_cart":false,"is_account_page":false,"order-received":false},"is_admin":"","real_page_id":"12226","thereferrer":"","actual_url":"parlatoscatering.com\/?ob=open-bridge%2Fevents","full_actual_url":"https:\/\/parlatoscatering.com\/?ob=open-bridge%2Fevents","native_share_enpoints":{"facebook":"https:\/\/www.facebook.com\/sharer\/sharer.php?u=https%3A%2F%2Fparlatoscatering.com","twitter":"https:\/\/twitter.com\/intent\/tweet?url=https%3A%2F%2Fparlatoscatering.com&text=Catering%20Oakville","pinterest":"https:\/\/www.pinterest.com\/pin\/create\/button\/?url=https%3A%2F%2Fparlatoscatering.com","reddit":"https:\/\/www.reddit.com\/submit?url=https%3A%2F%2Fparlatoscatering.com","linkedin":"https:\/\/www.linkedin.com\/shareArticle?mini=true&url=https%3A%2F%2Fparlatoscatering.com","vkontakte":"https:\/\/vk.com\/share.php?url=https%3A%2F%2Fparlatoscatering.com","whatsapp":"https:\/\/api.whatsapp.com\/send?text=https%3A%2F%2Fparlatoscatering.com","email":"mailto:?subject=Catering%20Oakville&body=https%3A%2F%2Fparlatoscatering.com"},"ajaxurl":"https:\/\/parlatoscatering.com\/wp-admin\/admin-ajax.php","page_id":"12226","page_slug":"","is_upfront":"","script_delay":"3000"}; equals www.twitter.com (Twitter)
Source: chromecache_383.2.dr	String found in binary or memory: var incOpt = {"conditional_tags":{"is_single":false,"is_singular":true,"is_tag":false,"is_category":false,"is_author":false,"is_date":false,"is_post_type_archive":false,"is_404":false,"is_front_page":true,"is_search":false,"is_product_tag":false,"is_product_category":false,"is_shop":false,"is_woocommerce":false,"is_checkout":false,"is_cart":false,"is_account_page":false,"order-received":false},"is_admin":"","real_page_id":"12226","thereferrer":"","actual_url":"parlatoscatering.com\/?utm_source=google&utm_medium=organic&utm_campaign=gmb","full_actual_url":"https:\/\/parlatoscatering.com\/?utm_source=google&utm_medium=organic&utm_campaign=gmb","native_share_enpoints":{"facebook":"https:\/\/www.facebook.com\/sharer\/sharer.php?u=https%3A%2F%2Fparlatoscatering.com","twitter":"https:\/\/twitter.com\/intent\/tweet?url=https%3A%2F%2Fparlatoscatering.com&text=Catering%20Oakville","pinterest":"https:\/\/www.pinterest.com\/pin\/create\/button\/?url=https%3A%2F%2Fparlatoscatering.com","reddit":"https:\/\/www.reddit.com\/submit?url=https%3A%2F%2Fparlatoscatering.com","linkedin":"https:\/\/www.linkedin.com\/shareArticle?mini=true&url=https%3A%2F%2Fparlatoscatering.com","vkontakte":"https:\/\/vk.com\/share.php?url=https%3A%2F%2Fparlatoscatering.com","whatsapp":"https:\/\/api.whatsapp.com\/send?text=https%3A%2F%2Fparlatoscatering.com","email":"mailto:?subject=Catering%20Oakville&body=https%3A%2F%2Fparlatoscatering.com"},"ajaxurl":"https:\/\/parlatoscatering.com\/wp-admin\/admin-ajax.php","page_id":"12226","page_slug":"","is_upfront":"","script_delay":"3000"}; equals www.facebook.com (Facebook)
Source: chromecache_383.2.dr	String found in binary or memory: var incOpt = {"conditional_tags":{"is_single":false,"is_singular":true,"is_tag":false,"is_category":false,"is_author":false,"is_date":false,"is_post_type_archive":false,"is_404":false,"is_front_page":true,"is_search":false,"is_product_tag":false,"is_product_category":false,"is_shop":false,"is_woocommerce":false,"is_checkout":false,"is_cart":false,"is_account_page":false,"order-received":false},"is_admin":"","real_page_id":"12226","thereferrer":"","actual_url":"parlatoscatering.com\/?utm_source=google&utm_medium=organic&utm_campaign=gmb","full_actual_url":"https:\/\/parlatoscatering.com\/?utm_source=google&utm_medium=organic&utm_campaign=gmb","native_share_enpoints":{"facebook":"https:\/\/www.facebook.com\/sharer\/sharer.php?u=https%3A%2F%2Fparlatoscatering.com","twitter":"https:\/\/twitter.com\/intent\/tweet?url=https%3A%2F%2Fparlatoscatering.com&text=Catering%20Oakville","pinterest":"https:\/\/www.pinterest.com\/pin\/create\/button\/?url=https%3A%2F%2Fparlatoscatering.com","reddit":"https:\/\/www.reddit.com\/submit?url=https%3A%2F%2Fparlatoscatering.com","linkedin":"https:\/\/www.linkedin.com\/shareArticle?mini=true&url=https%3A%2F%2Fparlatoscatering.com","vkontakte":"https:\/\/vk.com\/share.php?url=https%3A%2F%2Fparlatoscatering.com","whatsapp":"https:\/\/api.whatsapp.com\/send?text=https%3A%2F%2Fparlatoscatering.com","email":"mailto:?subject=Catering%20Oakville&body=https%3A%2F%2Fparlatoscatering.com"},"ajaxurl":"https:\/\/parlatoscatering.com\/wp-admin\/admin-ajax.php","page_id":"12226","page_slug":"","is_upfront":"","script_delay":"3000"}; equals www.linkedin.com (Linkedin)
Source: chromecache_383.2.dr	String found in binary or memory: var incOpt = {"conditional_tags":{"is_single":false,"is_singular":true,"is_tag":false,"is_category":false,"is_author":false,"is_date":false,"is_post_type_archive":false,"is_404":false,"is_front_page":true,"is_search":false,"is_product_tag":false,"is_product_category":false,"is_shop":false,"is_woocommerce":false,"is_checkout":false,"is_cart":false,"is_account_page":false,"order-received":false},"is_admin":"","real_page_id":"12226","thereferrer":"","actual_url":"parlatoscatering.com\/?utm_source=google&utm_medium=organic&utm_campaign=gmb","full_actual_url":"https:\/\/parlatoscatering.com\/?utm_source=google&utm_medium=organic&utm_campaign=gmb","native_share_enpoints":{"facebook":"https:\/\/www.facebook.com\/sharer\/sharer.php?u=https%3A%2F%2Fparlatoscatering.com","twitter":"https:\/\/twitter.com\/intent\/tweet?url=https%3A%2F%2Fparlatoscatering.com&text=Catering%20Oakville","pinterest":"https:\/\/www.pinterest.com\/pin\/create\/button\/?url=https%3A%2F%2Fparlatoscatering.com","reddit":"https:\/\/www.reddit.com\/submit?url=https%3A%2F%2Fparlatoscatering.com","linkedin":"https:\/\/www.linkedin.com\/shareArticle?mini=true&url=https%3A%2F%2Fparlatoscatering.com","vkontakte":"https:\/\/vk.com\/share.php?url=https%3A%2F%2Fparlatoscatering.com","whatsapp":"https:\/\/api.whatsapp.com\/send?text=https%3A%2F%2Fparlatoscatering.com","email":"mailto:?subject=Catering%20Oakville&body=https%3A%2F%2Fparlatoscatering.com"},"ajaxurl":"https:\/\/parlatoscatering.com\/wp-admin\/admin-ajax.php","page_id":"12226","page_slug":"","is_upfront":"","script_delay":"3000"}; equals www.twitter.com (Twitter)
Source: chromecache_275.2.dr, chromecache_405.2.dr, chromecache_423.2.dr	String found in binary or memory: var xH=function(a,b,c,d,e){var f=mE("fsl",c?"nv.mwt":"mwt",0),g;g=c?mE("fsl","nv.ids",[]):mE("fsl","ids",[]);if(!g.length)return!0;var h=rE(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);O(121);if(m==="https://www.facebook.com/tr/")return O(122),!0;h["gtm.elementUrl"]=m;h["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(h["gtm.interactedFormName"]=a.getAttribute("name"));e&&(h["gtm.formSubmitElement"]=e,h["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!JC(h,LC(b, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: parlatoscatering.com
Source: global traffic	DNS traffic detected: DNS query: javascripterhub.com
Source: global traffic	DNS traffic detected: DNS query: cdn.trustindex.io
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: s.ksrndkehqnwntyxlhgto.com
Source: global traffic	DNS traffic detected: DNS query: www.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: rw1.marchex.io
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: process.iconnode.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: k.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: c.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: beacons.gcp.gvt2.com

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2025-04-28T17:33:42.082238+0200	2061092	ET EXPLOIT_KIT Malicious TA2726 TDS Domain in DNS Lookup (javascripterhub .com)	1	192.168.2.4	52463	1.1.1.1	53	UDP
2025-04-28T17:33:42.082238+0200	2061094	ET EXPLOIT_KIT Malicious TA2726 TDS Domain in DNS Lookup (javascripterhub .com)	1	192.168.2.4	52463	1.1.1.1	53	UDP
2025-04-28T17:33:42.082777+0200	2061092	ET EXPLOIT_KIT Malicious TA2726 TDS Domain in DNS Lookup (javascripterhub .com)	1	192.168.2.4	56705	1.1.1.1	53	UDP
2025-04-28T17:33:42.082777+0200	2061094	ET EXPLOIT_KIT Malicious TA2726 TDS Domain in DNS Lookup (javascripterhub .com)	1	192.168.2.4	56705	1.1.1.1	53	UDP
2025-04-28T17:33:43.614390+0200	2061098	ET EXPLOIT_KIT Malicious TA2726 TDS Domain in TLS SNI (javascripterhub .com)	1	192.168.2.4	49742	194.87.232.26	443	TCP
2025-04-28T17:33:43.614390+0200	2061100	ET EXPLOIT_KIT Malicious TA2726 TDS Domain in TLS SNI (javascripterhub .com)	1	192.168.2.4	49742	194.87.232.26	443	TCP

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 28, 2025 17:33:33.481982946 CEST	53	52466	1.1.1.1	192.168.2.4
Apr 28, 2025 17:33:33.500155926 CEST	53	52644	1.1.1.1	192.168.2.4
Apr 28, 2025 17:33:34.455996990 CEST	57503	53	192.168.2.4	1.1.1.1
Apr 28, 2025 17:33:34.455996990 CEST	59078	53	192.168.2.4	1.1.1.1
Apr 28, 2025 17:33:34.596586943 CEST	53	59078	1.1.1.1	192.168.2.4
Apr 28, 2025 17:33:34.601181984 CEST	53	57503	1.1.1.1	192.168.2.4
Apr 28, 2025 17:33:34.748385906 CEST	53	51695	1.1.1.1	192.168.2.4
Apr 28, 2025 17:33:35.221945047 CEST	53	62725	1.1.1.1	192.168.2.4
Apr 28, 2025 17:33:38.710371017 CEST	64750	53	192.168.2.4	1.1.1.1
Apr 28, 2025 17:33:38.710371017 CEST	50742	53	192.168.2.4	1.1.1.1
Apr 28, 2025 17:33:38.952085972 CEST	53	64750	1.1.1.1	192.168.2.4
Apr 28, 2025 17:33:38.952191114 CEST	53	50742	1.1.1.1	192.168.2.4
Apr 28, 2025 17:33:42.082237959 CEST	52463	53	192.168.2.4	1.1.1.1
Apr 28, 2025 17:33:42.082777023 CEST	56705	53	192.168.2.4	1.1.1.1
Apr 28, 2025 17:33:42.205199003 CEST	53	55237	1.1.1.1	192.168.2.4
Apr 28, 2025 17:33:42.224174976 CEST	53	49690	1.1.1.1	192.168.2.4
Apr 28, 2025 17:33:42.625233889 CEST	53	56705	1.1.1.1	192.168.2.4
Apr 28, 2025 17:33:42.652693987 CEST	53	52463	1.1.1.1	192.168.2.4
Apr 28, 2025 17:33:43.433568001 CEST	59801	53	192.168.2.4	1.1.1.1
Apr 28, 2025 17:33:43.433748007 CEST	62453	53	192.168.2.4	1.1.1.1
Apr 28, 2025 17:33:43.507486105 CEST	53	57264	1.1.1.1	192.168.2.4
Apr 28, 2025 17:33:43.611485958 CEST	53	59801	1.1.1.1	192.168.2.4
Apr 28, 2025 17:33:43.650459051 CEST	53	62453	1.1.1.1	192.168.2.4
Apr 28, 2025 17:33:46.286735058 CEST	62954	53	192.168.2.4	1.1.1.1
Apr 28, 2025 17:33:46.286890030 CEST	54531	53	192.168.2.4	1.1.1.1
Apr 28, 2025 17:33:46.287801027 CEST	55283	53	192.168.2.4	1.1.1.1
Apr 28, 2025 17:33:46.287939072 CEST	54638	53	192.168.2.4	1.1.1.1
Apr 28, 2025 17:33:46.430448055 CEST	53	55283	1.1.1.1	192.168.2.4
Apr 28, 2025 17:33:46.430465937 CEST	53	54638	1.1.1.1	192.168.2.4
Apr 28, 2025 17:33:46.440310955 CEST	53	62954	1.1.1.1	192.168.2.4
Apr 28, 2025 17:33:46.446152925 CEST	53	54531	1.1.1.1	192.168.2.4
Apr 28, 2025 17:33:47.191796064 CEST	60598	53	192.168.2.4	1.1.1.1
Apr 28, 2025 17:33:47.191946030 CEST	55432	53	192.168.2.4	1.1.1.1
Apr 28, 2025 17:33:47.200865984 CEST	53656	53	192.168.2.4	1.1.1.1
Apr 28, 2025 17:33:47.200982094 CEST	58881	53	192.168.2.4	1.1.1.1
Apr 28, 2025 17:33:47.201477051 CEST	60599	53	192.168.2.4	1.1.1.1
Apr 28, 2025 17:33:47.201653004 CEST	58384	53	192.168.2.4	1.1.1.1
Apr 28, 2025 17:33:47.310590982 CEST	55590	53	192.168.2.4	1.1.1.1
Apr 28, 2025 17:33:47.310734034 CEST	62928	53	192.168.2.4	1.1.1.1
Apr 28, 2025 17:33:47.333937883 CEST	53	55432	1.1.1.1	192.168.2.4
Apr 28, 2025 17:33:47.335393906 CEST	53	60598	1.1.1.1	192.168.2.4
Apr 28, 2025 17:33:47.345031023 CEST	53	60599	1.1.1.1	192.168.2.4
Apr 28, 2025 17:33:47.345446110 CEST	53	58384	1.1.1.1	192.168.2.4
Apr 28, 2025 17:33:47.345597982 CEST	53	58881	1.1.1.1	192.168.2.4
Apr 28, 2025 17:33:47.376099110 CEST	53	53656	1.1.1.1	192.168.2.4
Apr 28, 2025 17:33:47.500921965 CEST	53	62928	1.1.1.1	192.168.2.4
Apr 28, 2025 17:33:47.517128944 CEST	53	59755	1.1.1.1	192.168.2.4
Apr 28, 2025 17:33:47.517810106 CEST	53	55590	1.1.1.1	192.168.2.4
Apr 28, 2025 17:33:47.654052973 CEST	58899	53	192.168.2.4	1.1.1.1
Apr 28, 2025 17:33:47.654207945 CEST	65513	53	192.168.2.4	1.1.1.1
Apr 28, 2025 17:33:47.654890060 CEST	50980	53	192.168.2.4	1.1.1.1
Apr 28, 2025 17:33:47.656363964 CEST	55305	53	192.168.2.4	1.1.1.1
Apr 28, 2025 17:33:47.794312954 CEST	53	58899	1.1.1.1	192.168.2.4
Apr 28, 2025 17:33:47.794481993 CEST	53	65513	1.1.1.1	192.168.2.4
Apr 28, 2025 17:33:47.796210051 CEST	53	50980	1.1.1.1	192.168.2.4
Apr 28, 2025 17:33:47.798480988 CEST	53	55305	1.1.1.1	192.168.2.4
Apr 28, 2025 17:33:48.125843048 CEST	54485	53	192.168.2.4	1.1.1.1
Apr 28, 2025 17:33:48.126028061 CEST	49502	53	192.168.2.4	1.1.1.1
Apr 28, 2025 17:33:48.128248930 CEST	54723	53	192.168.2.4	1.1.1.1
Apr 28, 2025 17:33:48.128421068 CEST	50805	53	192.168.2.4	1.1.1.1
Apr 28, 2025 17:33:48.194188118 CEST	54334	53	192.168.2.4	1.1.1.1
Apr 28, 2025 17:33:48.194345951 CEST	55119	53	192.168.2.4	1.1.1.1
Apr 28, 2025 17:33:48.266069889 CEST	53	54485	1.1.1.1	192.168.2.4
Apr 28, 2025 17:33:48.266223907 CEST	53	49502	1.1.1.1	192.168.2.4
Apr 28, 2025 17:33:48.268287897 CEST	53	54723	1.1.1.1	192.168.2.4
Apr 28, 2025 17:33:48.268428087 CEST	53	50805	1.1.1.1	192.168.2.4
Apr 28, 2025 17:33:48.334783077 CEST	53	55119	1.1.1.1	192.168.2.4
Apr 28, 2025 17:33:48.337730885 CEST	53	54334	1.1.1.1	192.168.2.4
Apr 28, 2025 17:33:48.405213118 CEST	64622	53	192.168.2.4	1.1.1.1
Apr 28, 2025 17:33:48.405352116 CEST	62483	53	192.168.2.4	1.1.1.1
Apr 28, 2025 17:33:48.546979904 CEST	53	62483	1.1.1.1	192.168.2.4
Apr 28, 2025 17:33:48.547516108 CEST	53	64622	1.1.1.1	192.168.2.4
Apr 28, 2025 17:33:48.904629946 CEST	52905	53	192.168.2.4	1.1.1.1
Apr 28, 2025 17:33:48.905095100 CEST	52709	53	192.168.2.4	1.1.1.1
Apr 28, 2025 17:33:49.045557976 CEST	53	52709	1.1.1.1	192.168.2.4
Apr 28, 2025 17:33:49.053411007 CEST	53	52905	1.1.1.1	192.168.2.4
Apr 28, 2025 17:33:50.342473984 CEST	55040	53	192.168.2.4	1.1.1.1
Apr 28, 2025 17:33:50.342612028 CEST	53602	53	192.168.2.4	1.1.1.1
Apr 28, 2025 17:33:50.484765053 CEST	53	55040	1.1.1.1	192.168.2.4
Apr 28, 2025 17:33:50.485801935 CEST	53	53602	1.1.1.1	192.168.2.4
Apr 28, 2025 17:33:51.151632071 CEST	60366	53	192.168.2.4	1.1.1.1
Apr 28, 2025 17:33:51.151632071 CEST	57475	53	192.168.2.4	1.1.1.1
Apr 28, 2025 17:33:51.249727964 CEST	53085	53	192.168.2.4	1.1.1.1
Apr 28, 2025 17:33:51.250300884 CEST	52129	53	192.168.2.4	1.1.1.1
Apr 28, 2025 17:33:51.251576900 CEST	57921	53	192.168.2.4	1.1.1.1
Apr 28, 2025 17:33:51.251652956 CEST	55378	53	192.168.2.4	1.1.1.1
Apr 28, 2025 17:33:51.262094021 CEST	63857	53	192.168.2.4	1.1.1.1
Apr 28, 2025 17:33:51.262276888 CEST	62031	53	192.168.2.4	1.1.1.1
Apr 28, 2025 17:33:51.289026022 CEST	53	56134	1.1.1.1	192.168.2.4
Apr 28, 2025 17:33:51.296952963 CEST	53	57475	1.1.1.1	192.168.2.4
Apr 28, 2025 17:33:51.297199965 CEST	53	60366	1.1.1.1	192.168.2.4
Apr 28, 2025 17:33:51.391993046 CEST	53	57921	1.1.1.1	192.168.2.4
Apr 28, 2025 17:33:51.392415047 CEST	53	55378	1.1.1.1	192.168.2.4
Apr 28, 2025 17:33:51.397588015 CEST	53	52129	1.1.1.1	192.168.2.4
Apr 28, 2025 17:33:51.402211905 CEST	53	63857	1.1.1.1	192.168.2.4
Apr 28, 2025 17:33:51.402410984 CEST	53	62031	1.1.1.1	192.168.2.4
Apr 28, 2025 17:33:51.421361923 CEST	53	53085	1.1.1.1	192.168.2.4
Apr 28, 2025 17:33:52.322329998 CEST	53	50660	1.1.1.1	192.168.2.4
Apr 28, 2025 17:33:52.356962919 CEST	51627	53	192.168.2.4	1.1.1.1
Apr 28, 2025 17:33:52.357316971 CEST	63841	53	192.168.2.4	1.1.1.1
Apr 28, 2025 17:33:52.497805119 CEST	53	51627	1.1.1.1	192.168.2.4
Apr 28, 2025 17:33:52.512586117 CEST	53	63841	1.1.1.1	192.168.2.4
Apr 28, 2025 17:34:11.322871923 CEST	53	61660	1.1.1.1	192.168.2.4
Apr 28, 2025 17:34:16.266998053 CEST	138	138	192.168.2.4	192.168.2.255
Apr 28, 2025 17:34:32.485351086 CEST	53	60609	1.1.1.1	192.168.2.4
Apr 28, 2025 17:34:34.328515053 CEST	53	62484	1.1.1.1	192.168.2.4
Apr 28, 2025 17:34:49.263238907 CEST	61798	53	192.168.2.4	1.1.1.1
Apr 28, 2025 17:34:49.263586044 CEST	57888	53	192.168.2.4	1.1.1.1
Apr 28, 2025 17:34:49.403523922 CEST	53	61798	1.1.1.1	192.168.2.4
Apr 28, 2025 17:34:49.403726101 CEST	53	57888	1.1.1.1	192.168.2.4
Apr 28, 2025 17:34:50.288815975 CEST	60885	53	192.168.2.4	1.1.1.1
Apr 28, 2025 17:34:50.289138079 CEST	64040	53	192.168.2.4	1.1.1.1
Apr 28, 2025 17:34:50.429410934 CEST	53	60885	1.1.1.1	192.168.2.4
Apr 28, 2025 17:34:50.429436922 CEST	53	64040	1.1.1.1	192.168.2.4
Apr 28, 2025 17:34:52.322004080 CEST	61037	53	192.168.2.4	1.1.1.1
Apr 28, 2025 17:34:52.462964058 CEST	53	61037	1.1.1.1	192.168.2.4
Apr 28, 2025 17:34:53.322144985 CEST	61037	53	192.168.2.4	1.1.1.1
Apr 28, 2025 17:34:53.463161945 CEST	53	61037	1.1.1.1	192.168.2.4
Apr 28, 2025 17:34:54.335912943 CEST	61037	53	192.168.2.4	1.1.1.1
Apr 28, 2025 17:34:54.476854086 CEST	53	61037	1.1.1.1	192.168.2.4
Apr 28, 2025 17:34:56.352292061 CEST	61037	53	192.168.2.4	1.1.1.1
Apr 28, 2025 17:34:56.493671894 CEST	53	61037	1.1.1.1	192.168.2.4

Timestamp	Bytes transferred	Direction	Data
Apr 28, 2025 17:33:39.993518114 CEST	200	OUT	GET /r/r4.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Apr 28, 2025 17:33:40.143359900 CEST	1243	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="cacerts" Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]} Content-Length: 530 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 28 Apr 2025 15:00:42 GMT Expires: Mon, 28 Apr 2025 15:50:42 GMT Cache-Control: public, max-age=3000 Age: 1978 Last-Modified: Thu, 03 Apr 2025 14:18:00 GMT Content-Type: application/pkix-crl Vary: Accept-Encoding Data Raw: 30 82 02 0e 30 82 01 93 02 01 01 30 0a 06 08 2a 86 48 ce 3d 04 03 03 30 47 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 22 30 20 06 03 55 04 0a 13 19 47 6f 6f 67 6c 65 20 54 72 75 73 74 20 53 65 72 76 69 63 65 73 20 4c 4c 43 31 14 30 12 06 03 55 04 03 13 0b 47 54 53 20 52 6f 6f 74 20 52 34 17 0d 32 35 30 34 30 33 30 38 30 30 30 30 5a 17 0d 32 36 30 32 32 38 30 37 35 39 35 39 5a 30 81 e9 30 2f 02 10 6e 47 a9 ce 4f 46 c2 3d e2 49 ea cc 38 94 53 73 17 0d 31 39 30 39 33 30 30 30 30 30 30 30 5a 30 0c 30 0a 06 03 55 1d 15 04 03 0a 01 05 30 2c 02 0d 01 f0 9c 5b 70 05 a6 dc 86 e2 f9 9e f3 17 0d 32 30 30 31 33 31 30 30 30 30 30 30 5a 30 0c 30 0a 06 03 55 1d 15 04 03 0a 01 05 30 2c 02 0d 01 fe a5 81 44 7e 3b fd 3b b8 1c 24 98 17 0d 32 33 30 36 31 33 30 30 30 30 30 30 5a 30 0c 30 0a 06 03 55 1d 15 04 03 0a 01 05 30 2c 02 0d 02 16 68 25 e1 70 04 40 61 24 91 f5 40 17 0d 32 35 30 34 30 33 30 38 30 30 30 30 5a 30 0c 30 0a 06 03 55 1d 15 04 03 0a 01 05 30 2c 02 0d 02 00 8e b2 58 e7 b5 94 0c 1f f9 00 44 17 0d 32 35 30 [TRUNCATED] Data Ascii: 000H=0G10UUS1"0 UGoogle Trust Services LLC10UGTS Root R4250403080000Z260228075959Z00/nGOF=I8Ss190930000000Z00U0,[p200131000000Z00U0,D~;;$230613000000Z00U0,h%p@a$@250403080000Z00U0,XD250403080000Z00U/0-0U0U#0LtI6>j0H=i0f1>2en:IN@g=;bQZ~`NX1?^4y[$\4{;$zDeU6O

Timestamp	Bytes transferred	Direction	Data
2025-04-28 15:33:40 UTC	309	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=a4ptEbr7MMRw9kd&MD=CX29paFN HTTP/1.1 host: slscr.update.microsoft.com accept: / user-agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 accept-encoding: identity
2025-04-28 15:33:40 UTC	541	IN	HTTP/1.1 200 OK cache-control: no-cache pragma: no-cache content-type: application/octet-stream expires: -1 last-modified: Mon, 01 Jan 0001 00:00:00 GMT etag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" ms-correlationid: 6dd9c157-be53-4c55-9bc8-8e843d3b5aa9 ms-requestid: a15a9b6c-7e5e-4373-badb-8f5e673257e4 ms-cv: zAK1imzKhE+P9cfE.0 x-microsoft-slsclientcache: 2880 content-disposition: attachment; filename=environment.cab x-content-type-options: nosniff date: Mon, 28 Apr 2025 15:33:39 GMT content-length: 24490
2025-04-28 15:33:40 UTC	1460	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2025-04-28 15:33:40 UTC	1460	IN	Data Raw: c7 c3 8f 06 b6 24 05 3c f9 2c cb e0 99 86 1a f8 03 ca b3 04 d8 16 f0 f9 32 7f 28 14 e1 08 d8 03 b6 5f ca 00 2c ca e8 4f 1f 06 4e 31 f0 2f 3c 0e 0b 50 12 26 c4 00 85 7e 42 c0 00 c8 0f fa 0d c7 c3 a0 90 23 e5 21 63 33 1e a7 e6 2a f9 c3 ee 4b 69 ce 94 9b 68 c7 7b df ba c7 eb c3 55 b3 50 05 c8 b4 a7 ea a2 5e 5e cd 3a a2 aa 75 43 4b 97 f4 bd 25 ec 55 81 8f 48 6a d4 2b fb 61 52 86 d0 3b 01 14 b0 69 f4 31 7a b6 35 59 f1 51 9b 07 06 22 e9 3b 54 1f 1c 09 53 6c 08 99 9d 74 59 32 ad 33 42 5a f5 2c 05 bf b7 e9 cf 8f 5d 2c 89 c9 8a 5f 6c 65 4c 0c 6d 6a 3f 83 6c b8 bf a3 10 39 92 ad fd bc d8 94 f7 ca 6b ef 90 4b eb 87 76 34 1d 50 f6 0b 7d 4a 62 19 4b 92 ae d4 3f 79 3c 37 e1 2d 6c bc f7 fc 95 94 bd 9c f5 56 86 da 39 b9 b3 67 4c 1a 17 d4 27 59 97 fa bb 03 e7 1b 32 9c 5f Data Ascii: $<,2(_,ON1/<P&~B#!c3*Kih{UP^^:uCK%UHj+aR;i1z5YQ";TSltY23BZ,],_leLmj?l9kKv4P}JbK?y<7-lV9gL'Y2_
2025-04-28 15:33:40 UTC	1460	IN	Data Raw: 99 5f f0 57 d3 49 7b b2 e4 e5 c0 9e f2 e2 b5 17 92 26 2b c1 a3 c2 60 60 5d 36 2c de 60 61 ea e8 98 df 55 7a a8 91 e4 a9 84 e0 3b 6e 95 89 91 fc a7 0f 95 af 35 36 d1 a7 99 9e 88 5e 1c 90 6f 76 55 35 c9 a6 7b 9c 57 31 1c 7d 98 8c a5 d0 5c 66 01 23 08 79 a0 ac fd 28 e3 66 c4 5d bc 06 ed c2 ac 2e 85 85 1d 2c f9 63 f9 ae 62 0a e0 dc fd 65 e4 07 da 27 83 27 db 54 2f 30 4f ab 57 35 d0 e3 25 bc 3a 8a 0f 18 ab 06 65 1d c3 c6 d7 dc 20 e5 92 42 df 59 3a dd 99 b4 1e 33 04 f5 9c 31 69 0f ec 13 9b b8 7c 93 51 3a 5b 90 33 78 d9 c2 f9 a0 e5 54 1d b7 41 12 7c ea 48 f9 8b 32 9d cb 22 59 19 02 65 dd 61 fc 1e b6 2d 6d 85 1b 49 c9 9e 9d a6 e3 15 82 bd e8 4e 07 0a 96 41 09 6c 7a 91 fe 23 c6 ec 81 c3 34 b3 bc bd 6d 1b a2 f9 9d 9a 55 ad 27 0b b3 da 0d 82 7c 98 8d 2d 3b d6 c6 13 Data Ascii: _WI{&+``]6,`aUz;n56^ovU5{W1}\f#y(f].,cbe''T/0OW5%:e BY:31i\|Q:[3xTA\|H2"Yea-mINAlz#4mU'\|-;
2025-04-28 15:33:40 UTC	1460	IN	Data Raw: 2d 5f d0 00 d0 07 f4 72 f6 e6 e8 44 69 fd 25 5f 10 dc 3f 70 f7 40 41 25 f8 69 80 38 20 27 0e a0 36 fd 40 ab 6d 7e e0 7e 60 1f a0 bb cd 0f 54 fd d7 fc c0 df e9 fb c7 c8 07 c3 96 47 48 09 90 7f f5 08 49 7f e5 05 82 72 c3 a4 de 98 91 55 c3 ea 10 ce a3 13 c3 f7 12 97 f6 c4 ce d7 c2 d9 28 f3 83 ce ec 99 14 4b d4 be 03 9e 48 26 e8 06 e4 1c e3 a4 41 09 dd e2 d3 84 db 86 e8 d2 f6 fb 0d f2 bb 63 cb fd 6b 48 cc 83 a9 85 16 0a 62 17 34 a2 dc b2 5c 8e 5a 11 11 25 46 bc 99 aa 15 3b c9 46 0f 5f 5e b9 9a fd a8 03 36 50 d9 0b 10 d7 86 2a ed 8c d3 6e 1f ed e9 f0 96 84 f7 3b dc 1d 9e 09 6e c5 df da 17 74 23 13 af d2 ac 85 dd 4d 74 ea 15 fd 52 cf 64 7f b7 fa f3 19 03 d1 3c 1d f9 9e 49 c6 ae 97 08 66 b1 ba 94 91 c7 2a c7 ee c7 ef 55 45 e4 5e a7 ed 2e 5d 46 59 44 0d 4b 8d 93 Data Ascii: -_rDi%_?p@A%i8 '6@m~~`TGHIrU(KH&AckHb4\Z%F;F_^6Pn;nt#MtRd<IfUE^.]FYDK
2025-04-28 15:33:40 UTC	1460	IN	Data Raw: f4 d2 5b 0d c4 46 f4 08 0d 64 b7 dd 0e 23 c4 4a be c6 2c 08 e4 15 96 43 0e 90 12 6e 83 93 e4 22 73 bf 9c 43 a3 72 7e 18 32 1c 87 83 10 55 1d 3d 13 70 78 a0 df ea 3e bc 8f 9c f3 c9 cd b2 63 9f 56 68 27 2f ce f2 f7 d1 be 1e 37 ef db 07 4d 38 19 d3 72 07 4b 21 bd e4 5a 22 2f df 9c d9 42 cd 28 ce 46 7d 02 5e c0 3a 7d 59 8f ba 2b d9 8a 6a ee ee 00 2f 1d b9 28 fd 40 78 e3 bc e0 27 36 dd fd 43 d9 6a 3e 0d 73 ca 91 ee 0f 3d a6 1a b5 25 8c d1 15 8a d7 f8 93 2e 54 ac df 56 e1 7f ed 19 54 17 27 34 90 14 e3 70 8c 6c 7f ff 7e 4f 51 14 1e 4e 05 72 47 b2 4d 89 4e f9 67 77 f4 77 a9 eb f6 50 12 1e aa 0b b0 6d 8f 25 51 7d 17 52 f8 55 b8 68 f5 90 ab 07 5f 36 1f f1 e4 1e e5 fb f3 73 97 9a e6 1d ab bb ee b9 59 5a f2 3c e8 6d 9f be 51 7b 02 c0 7d d8 d6 01 4c 12 85 7b 05 e0 5e Data Ascii: [Fd#J,Cn"sCr~2U=px>cVh'/7M8rK!Z"/B(F}^:}Y+j/(@x'6Cj>s=%.TVT'4pl~OQNrGMNgwwPm%Q}RUh_6sYZ<mQ{}L{^
2025-04-28 15:33:40 UTC	1460	IN	Data Raw: 17 7a 50 e3 3d 37 50 78 c6 9b 00 9e b1 6c 93 1f 64 fc 47 28 e5 6f 7b 2c 3f 66 9c 1b c0 91 91 7f f1 eb 59 11 28 38 61 06 ff bf 92 d0 14 5f 4d 0f e8 d9 e9 00 5a 30 6e 48 2f 23 03 13 4d 57 f0 f8 e5 8d 51 9b 88 0d f9 1d 57 58 98 cf e8 0b 8c f6 eb 9c da ff e4 4a 13 15 29 0c 69 75 94 79 e3 95 50 e5 48 e0 90 99 54 fe c5 90 26 13 97 27 85 89 ed 99 b4 32 69 b3 23 07 e3 9e fb e7 e2 e9 27 ff d9 3c 6e 78 48 c3 3d 4c b0 78 83 47 97 43 99 4b fa 65 6a 2b a5 20 16 23 d3 dd e2 46 1d 6b 79 16 e2 7b e7 3e e7 71 eb 7f c8 e3 4a 49 a0 64 7e e6 71 7f e6 71 7f e6 71 7f e6 71 7f e6 71 7f e6 71 7f e6 71 7f e6 71 7f e6 71 7f e6 71 7f e6 71 7f e6 71 7f e6 71 7f e6 71 7f e6 71 ff ab f3 b8 5d a3 0e 92 5e 1d d9 33 07 9d b4 5a 5b 1f 36 94 07 fb 31 44 46 72 24 1d af 77 ba 94 e6 6b df 96 Data Ascii: zP=7PxldG(o{,?fY(8a_MZ0nH/#MWQWXJ)iuyPHT&'2i#'<nxH=LxGCKej+ #Fky{>qJId~qqqqqqqqqqqqqqq]^3Z[61DFr$wk
2025-04-28 15:33:40 UTC	1460	IN	Data Raw: 72 61 74 69 6f 6e 73 20 50 75 65 72 74 6f 20 52 69 63 6f 31 16 30 14 06 03 55 04 05 13 0d 32 33 30 38 32 39 2b 34 35 34 32 33 37 30 1f 06 03 55 1d 23 04 18 30 16 80 14 ad 94 76 8f 83 ad 0e 03 a3 e8 3b b0 d7 34 68 d4 79 3a 7d dc 30 60 06 03 55 1d 1f 04 59 30 57 30 55 a0 53 a0 51 86 4f 68 74 74 70 3a 2f 2f 77 77 77 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 70 6b 69 6f 70 73 2f 63 72 6c 2f 4d 69 63 72 6f 73 6f 66 74 25 32 30 55 70 64 61 74 65 25 32 30 53 69 67 6e 69 6e 67 25 32 30 43 41 25 32 30 32 2e 31 2e 63 72 6c 30 6d 06 08 2b 06 01 05 05 07 01 01 04 61 30 5f 30 5d 06 08 2b 06 01 05 05 07 30 02 86 51 68 74 74 70 3a 2f 2f 77 77 77 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 70 6b 69 6f 70 73 2f 63 65 72 74 73 2f 4d 69 63 72 6f 73 6f 66 74 25 32 30 55 Data Ascii: rations Puerto Rico10U230829+4542370U#0v;4hy:}0`UY0W0USQOhttp://www.microsoft.com/pkiops/crl/Microsoft%20Update%20Signing%20CA%202.1.crl0m+a0_0]+0Qhttp://www.microsoft.com/pkiops/certs/Microsoft%20U
2025-04-28 15:33:40 UTC	1460	IN	Data Raw: 6c d5 21 c9 b8 50 68 05 c3 e4 09 c9 bd 51 c9 5f 6d 75 4f 8d 35 30 c5 8c c1 83 b2 1f 93 b5 72 6f d2 44 90 1d ed 7f 13 a9 7d 53 24 9c aa 46 c0 8f c5 c5 be bf c8 55 14 fe 87 35 fe cd d5 7e 02 d2 87 68 00 c9 b8 d7 44 cb 71 db a4 8b b3 e0 0e a6 0b ce 12 7d f6 68 dc c0 91 31 f8 59 2c 2c f5 d5 d1 2e 08 9d 2b 30 6a 6e aa ad 9e 16 4e 27 d0 ba 3b 1a 81 30 43 38 92 87 e1 6c 6f 43 3d 2d 4e 1f 0d 10 c1 f8 fa bc 84 c8 93 c3 9e 47 fc b6 fa d1 2f b6 af 39 3e 9c 3f 1c f1 4d a4 16 d3 0a e2 e7 4e f5 37 88 03 46 8e 1e cc 77 c1 47 d3 44 b7 e4 35 23 db eb 20 cb 2a f5 57 ae 2e 00 3b 6b e6 a3 6e 05 99 70 bb 76 3b d8 3c b4 76 f6 28 15 3a 25 d4 26 a4 08 9f d9 7e 7b 44 8a b7 15 8a c6 c5 78 2a 9d 32 c4 83 7b b9 6e 42 14 99 5d 49 7f 45 99 57 a7 33 77 44 1a ff 47 a3 71 b7 b0 b1 56 8a Data Ascii: l!PhQ_muO50roD}S$FU5~hDq}h1Y,,.+0jnN';0C8loC=-NG/9>?MN7FwGD5# W.;knpv;<v(:%&~{Dx2{nB]IEW3wDGqV
2025-04-28 15:33:40 UTC	1460	IN	Data Raw: 42 06 0a 2b 06 01 04 01 82 37 02 01 0c 31 34 30 32 a0 14 80 12 00 4d 00 69 00 63 00 72 00 6f 00 73 00 6f 00 66 00 74 a1 1a 80 18 68 74 74 70 3a 2f 2f 77 77 77 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 04 82 01 00 3d cd 0e 0a 7b 43 82 69 14 76 9b c2 1b 25 6c 3f 01 d0 b8 bb 6f e9 4d 62 55 f3 7a 5b c4 05 04 2e 09 48 41 fd e9 13 24 1e f0 71 f0 79 9e 8e a7 ea d7 72 49 9f 71 e8 41 4c 0a 8e 69 71 3c 8f e9 56 c5 9d a0 e6 3c df 48 88 1c cf 7f eb a0 34 f3 ff 37 ca 6d 9f c7 86 eb 12 35 0a 45 a5 81 a8 f8 53 6d c6 11 4e ef 37 77 2a 73 bf 08 f9 ee ba 8d b8 48 1a 93 32 44 3a cd 7c 41 2d e3 20 7e 34 a2 7c 2b 93 92 2f 0a 5f 17 c8 65 98 79 74 bb e7 1c 1a e2 6c a4 15 db cf ae 5b 18 f9 9a 82 ab 98 f5 13 93 f3 0f 89 71 a4 2f c0 7e Data Ascii: B+71402Microsofthttp://www.microsoft.com0H={Civ%l?oMbUz[.HA$qyrIqALiq<V<H47m5ESmN7wsH2D:\|A- ~4\|+/_eytl[q/~
2025-04-28 15:33:40 UTC	1460	IN	Data Raw: a3 82 01 1b 30 82 01 17 30 1d 06 03 55 1d 0e 04 16 04 14 ec 97 76 68 29 fe 13 4f cd 74 c6 25 18 f2 00 7c da 7d d7 a7 30 1f 06 03 55 1d 23 04 18 30 16 80 14 d5 63 3a 5c 8a 31 90 f3 43 7b 7c 46 1b c5 33 68 5a 85 6d 55 30 56 06 03 55 1d 1f 04 4f 30 4d 30 4b a0 49 a0 47 86 45 68 74 74 70 3a 2f 2f 63 72 6c 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 70 6b 69 2f 63 72 6c 2f 70 72 6f 64 75 63 74 73 2f 4d 69 63 54 69 6d 53 74 61 50 43 41 5f 32 30 31 30 2d 30 37 2d 30 31 2e 63 72 6c 30 5a 06 08 2b 06 01 05 05 07 01 01 04 4e 30 4c 30 4a 06 08 2b 06 01 05 05 07 30 02 86 3e 68 74 74 70 3a 2f 2f 77 77 77 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 70 6b 69 2f 63 65 72 74 73 2f 4d 69 63 54 69 6d 53 74 61 50 43 41 5f 32 30 31 30 2d 30 37 2d 30 31 2e 63 72 74 30 0c 06 Data Ascii: 00Uvh)Ot%\|}0U#0c:\1C{\|F3hZmU0VUO0M0KIGEhttp://crl.microsoft.com/pki/crl/products/MicTimStaPCA_2010-07-01.crl0Z+N0L0J+0>http://www.microsoft.com/pki/certs/MicTimStaPCA_2010-07-01.crt0

Timestamp	Bytes transferred	Direction	Data
2025-04-28 15:33:43 UTC	607	OUT	GET /L4ohvt4YKKxSh9iz1MjAh9Mf2JnXlXIqVaHT9cVsuey HTTP/1.1 Host: javascripterhub.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://parlatoscatering.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 15:33:43 UTC	811	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Apr 2025 15:33:43 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: keep-alive Cache-Control: no-cache, no-store, must-revalidate,post-check=0,pre-check=0 Expires: 0 Last-Modified: Mon, 28 Apr 2025 15:33:43 GMT Pragma: no-cache Set-Cookie: _subid=29g0eq228k3c0;Expires=Thursday, 29-May-2025 15:33:43 GMT;Max-Age=2678400;Path=/ Set-Cookie: 0c9c8=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEzMVwiOjE3NDU4NTQ0MjMsXCI2NlwiOjE3NDU4NTQ0MjN9LFwiY2FtcGFpZ25zXCI6e1wiMjVcIjoxNzQ1ODU0NDIzLFwiMjNcIjoxNzQ1ODU0NDIzfSxcInRpbWVcIjoxNzQ1ODU0NDIzfSJ9.CkOOMdrt071vz2hqtqf2_LHcHExOsn2kuUf3VeNLUZ8;Expires=Tuesday, 27-Aug-2080 07:07:26 GMT;Max-Age=1746113623;Path=/ Vary: Accept-Encoding Access-Control-Allow-Origin: *

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	100598
Entropy (8bit):	4.858904036323655
Encrypted:	false
SSDEEP:	768:e+cW3+zav5T1A1uYIY21x1SYNYpvQ34VDVLYMYm:1v57YIYNYNYpvQ36YMYm
MD5:	3B221FB3B8667D564FCFAA4EA53897D5
SHA1:	E6285A38B7C694ECDE50AAC13146B1EE0AA8438D
SHA-256:	7F04964B6F5F4B346EA751B3D9779648257DE6749E0085997874D5292835BD08
SHA-512:	1032DBB221665FD8F5221BDC785B2B6EA4AD3446D322EE0AA028FCB615E81366D2C50EBA8580F1873AD2541D59863414A5C154074B908EA31C32C267BB1E9AF1
Malicious:	false
Reputation:	low
URL:	https://parlatoscatering.com/wp-content/themes/tamarind/css/animations.css?ver=6.7.2
Preview:	/* Modal Animations /...md-show {.. visibility: visible;..}../ Individual modal styles with animations/transitions /..../ Effect 1: Fade in and scale up /...md-effect-1 .md-content {.. -webkit-transform: scale(0.7);.. -moz-transform: scale(0.7);.. -ms-transform: scale(0.7);.. transform: scale(0.7);.. opacity: 0;.. -webkit-transition: all 0.3s;.. -moz-transition: all 0.3s;.. transition: all 0.3s;..}.....md-show.md-effect-1 .md-content {.. -webkit-transform: scale(1);.. -moz-transform: scale(1);.. -ms-transform: scale(1);.. transform: scale(1);.. opacity: 1;..}..../ Effect 2: Slide from the right */...md-effect-2 .md-content {.. -webkit-transform: translateX(20%);.. -moz-transform: translateX(20%);.. -ms-transform: translateX(20%);.. transform: translateX(20%);.. opacity: 0;.. -webkit-transition: all 0.3s cubic-bezier(0.25, 0.5, 0.5, 0.9);.. -moz-transition: all 0.3s cubic-bezier(0.25, 0.5, 0.5, 0.9);.. transition: all 0.3s cubic-bezier(0.25, 0.5, 0.5, 0.9);..

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (515)
Category:	downloaded
Size (bytes):	36241
Entropy (8bit):	4.860950939169277
Encrypted:	false
SSDEEP:	768:Wn3tFJMkaKTzP35hsxQqFaq1cvdr+H8cFIJElLSW8WF3ezwDFWF0LbmzDCpfVqEN:Wn3tbMuzP3XDqZ1cvdr+XlNkzwDA4gY
MD5:	2C7990C549A767AE60A5C9F3D4122112
SHA1:	1D7BAE31E143C6862796FD90702ECA777BA31B06
SHA-256:	2AD9FD64EACF8CF1CAB9B3047076AE2E00CD23EDE1726D192E7734C53E05185E
SHA-512:	AE216B781265F3E915D372458C2E6F06CF1F60FC02A3F759309089F918F25870186F1A292187C37641C778D23AA2163BEF8A438D13F62F6B86CA5440A2BF3D96
Malicious:	false
Reputation:	low
URL:	https://parlatoscatering.com/wp-content/plugins/yith-woocommerce-product-add-ons/assets/css/front.css?ver=4.20.0
Preview:	form.cart:has(#yith-wapo-container .yith-wapo-block),.:is(.woocommerce div.product .elementor-widget-woocommerce-product-add-to-cart) form.cart.variations_form .woocommerce-variation-add-to-cart {. display: block !important;.}..yith-wapo-block , .yith-wapo-block :before, .yith-wapo-block *:after {. box-sizing: border-box;.}.#yith-wapo-container .yith-wapo-block {. padding: var( --yith-wapo-block-padding );.}..yith-wapo-block .yith-wapo-addon.empty-title{. margin-top: 20px;.}..yith-wapo-block .yith-wapo-addon:not(:first-child):not(.empty-title):not(.toggle-open) {. margin-top: 20px;.}..yith-wapo-block .yith-wapo-addon:not(:first-child):not(.empty-title).wapo-toggle.toggle-closed {. margin-top: initial;.}..yith-wapo-block .yith-wapo-addon:after {. content: '';. display: block;. clear: both;.}..yith-wapo-block .yith-wapo-addon .addon-header{. display: flex;. align-items: center;. column-gap: 10px;.}..yith-wapo-block .yith-wapo-addon .addon-header .title-image{. max-width: 1

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 175 x 88, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2732
Entropy (8bit):	7.64246858749717
Encrypted:	false
SSDEEP:	48:tMYLNn2D8tRJ3e4v7rKAgSuhkyu/wjc2GbK8HN5aNOlVMoHvYCSfhm80bW:6YR24tm4v7rKAgLG64JWe5TlRHvI0S
MD5:	29972B4AA2CC16864DEF00E89DC742D3
SHA1:	6F3DE19634AE6FEDDC49DAFA13F9B0ECF04F852C
SHA-256:	FA1BBC1D99C2260678C7A8783B35EBBF7962642A27B938BFED99091C5CD976CE
SHA-512:	398A7DDA82D139BE5E5F2D676CDD10223B3506E0BA94B595E04E05449305F5268E8D3B73B0C2D27E12BAA657CB5F5F724FF1E576C2CCA0DD3A02C7F0715AD63D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......X.......W....&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)" xmpMM:InstanceID="xmp.iid:D9DC456D8D8311EBA095AF8C2E877A90" xmpMM:DocumentID="xmp.did:D9DC456E8D8311EBA095AF8C2E877A90"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D9DC456B8D8311EBA095AF8C2E877A90" stRef:documentID="xmp.did:D9DC456C8D8311EBA095AF8C2E877A90"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..Tu....tEXtSoftware.Adobe ImageReadyq.e<...fPLTEGpLWWW[[[aaa...]]]SSS...```}}}...SSStttjjj...OOOdddyyy...ppp[[[......ddd...wwwmmmTTTgggXXXPPPNNNJJJDDD..

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64686)
Category:	downloaded
Size (bytes):	64721
Entropy (8bit):	5.233096072202302
Encrypted:	false
SSDEEP:	1536:C4D+8QgGaXN+GPAcm9j9BYkIw2rJa5R6eCSHQTT9eVo:BD+8QgGaX4G/CUk4rk5R6erwTBeu
MD5:	73C1267948FA3C7EFDC294988E4D4FAC
SHA1:	AA97D3151E8E7394CF192B6E2AEF23393AEEE051
SHA-256:	8F23F4D73567951AAD3DE77955DC35D8EECF118103CF1197C188828ABB32DE61
SHA-512:	32C790893244FDE515D93ED86A1152659F8716F2DADA92350B39408110E5FDA8F0A3C188254506FEFA68A097BF4EAE68933D3DF6E826A6DCBD843FFDE9DCE1A0
Malicious:	false
Reputation:	low
URL:	https://cdn.trustindex.io/loader.js
Preview:	(()=>{"use strict";class t{static setCommonConstants(){this.script=document.currentScript,this.loadedCss=[],this.loadedJs=[]}static addCSS(t,e,i=!1,s=null){if(void 0===this.loadedCss&&(this.loadedCss=[]),!t\|\|-1!==this.loadedCss.indexOf(t))return e?e():null;let r=document.createElement("link");return r.type="text/css",r.rel="stylesheet",r.href=t,i&&window!==window.parent&&this.isCrossDomainIframe()?window.parent.document.head.appendChild(r):document.head.appendChild(r),document.head.appendChild(r),"function"==typeof e&&r.addEventListener("load",e),"function"==typeof s&&r.addEventListener("error",s),this.loadedCss.push(t)}static addJS(t,e,i=!1){if(void 0===this.loadedJs&&(this.loadedJs=[]),!t\|\|-1!==this.loadedJs.indexOf(t))return e?e():null;let s=document.createElement("script");return s.type="text/javascript",s.src=t,i&&window!==window.parent&&this.isCrossDomainIframe()?window.parent.document.head.appendChild(s):document.head.appendChild(s),e&&s.addEventListener("load",e),this.loadedJs.

Timestamp	Bytes transferred	Direction	Data
2025-04-28 15:33:47 UTC	532	OUT	GET /loader.js HTTP/1.1 host: cdn.trustindex.io sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: / sec-fetch-site: cross-site sec-fetch-mode: no-cors sec-fetch-dest: script sec-fetch-storage-access: active referer: https://parlatoscatering.com/ accept-encoding: identity accept-language: en-US,en;q=0.9
2025-04-28 15:33:47 UTC	800	IN	HTTP/1.1 200 OK content-type: text/javascript content-length: 64721 date: Mon, 28 Apr 2025 06:57:28 GMT server: Apache/2.4.52 (Ubuntu) last-modified: Thu, 24 Apr 2025 07:26:15 GMT accept-ranges: bytes referrer-policy: origin access-control-allow-origin: * access-control-allow-headers: origin, x-requested-with, content-type access-control-allow-methods: GET cross-origin-resource-policy: cross-origin cross-origin-embedder-policy: require-corp content-security-policy: frame-ancestors 'self' *; x-frame-options: SAMEORIGIN etag: "fcd1-63381220b6a62" vary: Accept-Encoding x-cache: Hit from cloudfront via: 1.1 63f82aa6ad71973644d89df49cde0622.cloudfront.net (CloudFront) x-amz-cf-pop: LAX54-P8 x-amz-cf-id: reCduMjH42C9I8QmPL2SHyc7_lE7hOkVRnIWwtiGMR6OS0LV4MCBLg== age: 30978
2025-04-28 15:33:47 UTC	1460	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6c 61 73 73 20 74 7b 73 74 61 74 69 63 20 73 65 74 43 6f 6d 6d 6f 6e 43 6f 6e 73 74 61 6e 74 73 28 29 7b 74 68 69 73 2e 73 63 72 69 70 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 2c 74 68 69 73 2e 6c 6f 61 64 65 64 43 73 73 3d 5b 5d 2c 74 68 69 73 2e 6c 6f 61 64 65 64 4a 73 3d 5b 5d 7d 73 74 61 74 69 63 20 61 64 64 43 53 53 28 74 2c 65 2c 69 3d 21 31 2c 73 3d 6e 75 6c 6c 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 74 68 69 73 2e 6c 6f 61 64 65 64 43 73 73 26 26 28 74 68 69 73 2e 6c 6f 61 64 65 64 43 73 73 3d 5b 5d 29 2c 21 74 7c 7c 2d 31 21 3d 3d 74 68 69 73 2e 6c 6f 61 64 65 64 43 73 73 2e 69 6e 64 65 78 4f 66 28 74 29 29 72 65 74 75 72 6e 20 65 3f 65 28 29 3a 6e 75 6c Data Ascii: (()=>{"use strict";class t{static setCommonConstants(){this.script=document.currentScript,this.loadedCss=[],this.loadedJs=[]}static addCSS(t,e,i=!1,s=null){if(void 0===this.loadedCss&&(this.loadedCss=[]),!t\|\|-1!==this.loadedCss.indexOf(t))return e?e():nul
2025-04-28 15:33:47 UTC	1460	IN	Data Raw: 64 6e 55 72 6c 26 26 74 68 69 73 2e 63 64 6e 55 72 6c 29 72 65 74 75 72 6e 20 74 68 69 73 2e 63 64 6e 55 72 6c 3b 6c 65 74 20 74 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 74 72 75 73 74 69 6e 64 65 78 2e 69 6f 2f 22 3b 69 66 28 74 68 69 73 2e 73 63 72 69 70 74 26 26 74 68 69 73 2e 73 63 72 69 70 74 2e 73 72 63 29 7b 6c 65 74 20 65 3d 74 68 69 73 2e 73 63 72 69 70 74 2e 73 72 63 2e 73 70 6c 69 74 28 22 2f 22 29 3b 65 2e 70 6f 70 28 29 2c 74 3d 65 2e 6a 6f 69 6e 28 22 2f 22 29 2b 22 2f 22 7d 72 65 74 75 72 6e 2d 31 3d 3d 3d 74 2e 69 6e 64 65 78 4f 66 28 22 74 72 75 73 74 69 6e 64 65 78 2e 22 29 26 26 28 74 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 74 72 75 73 74 69 6e 64 65 78 2e 69 6f 2f 22 29 2c 74 68 69 73 2e 63 64 6e 55 72 6c 3d 74 2c 74 7d 73 74 61 74 Data Ascii: dnUrl&&this.cdnUrl)return this.cdnUrl;let t="https://cdn.trustindex.io/";if(this.script&&this.script.src){let e=this.script.src.split("/");e.pop(),t=e.join("/")+"/"}return-1===t.indexOf("trustindex.")&&(t="https://cdn.trustindex.io/"),this.cdnUrl=t,t}stat
2025-04-28 15:33:47 UTC	1460	IN	Data Raw: 2e 74 65 73 74 28 65 2e 68 6f 73 74 6e 61 6d 65 29 26 26 2d 31 3d 3d 3d 65 2e 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 22 74 65 73 74 2f 77 69 64 67 65 74 2e 68 74 6d 6c 22 29 7d 73 74 61 74 69 63 20 69 73 41 64 6d 69 6e 45 64 69 74 55 72 6c 28 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 2c 2d 31 21 3d 3d 74 2e 69 6e 64 65 78 4f 66 28 22 77 69 64 67 65 74 2f 65 64 69 74 22 29 7d 73 74 61 74 69 63 20 69 73 43 72 6f 73 73 44 6f 6d 61 69 6e 49 66 72 61 6d 65 28 29 7b 69 66 28 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 3d 3d 3d 77 69 6e 64 6f 77 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 6c 65 74 20 74 3d 6e 65 77 20 55 52 4c 28 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e Data Ascii: .test(e.hostname)&&-1===e.href.indexOf("test/widget.html")}static isAdminEditUrl(t){return void 0===t&&(t=location.href),-1!==t.indexOf("widget/edit")}static isCrossDomainIframe(){if(window.parent===window)return!1;try{let t=new URL(window.parent.location
2025-04-28 15:33:47 UTC	1460	IN	Data Raw: 69 6e 69 74 28 29 7b 7d 73 74 61 74 69 63 20 69 6e 69 74 5f 70 61 67 65 72 28 29 7b 2d 31 21 3d 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 2e 69 6e 64 65 78 4f 66 28 22 70 61 67 65 3d 74 65 73 74 69 6d 6f 6e 69 61 6c 2d 77 69 64 67 65 74 73 2f 74 61 62 73 2f 63 72 65 61 74 65 2d 77 69 64 67 65 74 2e 70 68 70 22 29 26 26 28 74 68 69 73 2e 64 65 73 74 72 6f 79 57 69 64 67 65 74 73 28 29 2c 74 68 69 73 2e 69 6e 69 74 57 69 64 67 65 74 73 46 72 6f 6d 44 6f 6d 28 21 30 29 29 7d 73 74 61 74 69 63 20 73 65 74 43 6f 6e 73 74 61 6e 74 73 28 29 7b 74 68 69 73 2e 73 65 74 43 6f 6d 6d 6f 6e 43 6f 6e 73 74 61 6e 74 73 28 29 2c 74 68 69 73 2e 73 76 67 73 3d 7b 67 6f 6f 64 3a 27 3c 73 76 67 20 73 74 79 6c 65 3d Data Ascii: init(){}static init_pager(){-1!==decodeURIComponent(location.href).indexOf("page=testimonial-widgets/tabs/create-widget.php")&&(this.destroyWidgets(),this.initWidgetsFromDom(!0))}static setConstants(){this.setCommonConstants(),this.svgs={good:'<svg style=
2025-04-28 15:33:47 UTC	1460	IN	Data Raw: 67 68 74 3a 20 32 35 70 78 3b 20 74 6f 70 3a 20 2d 33 70 78 22 2c 45 62 61 79 3a 22 68 65 69 67 68 74 3a 20 32 35 70 78 3b 20 74 6f 70 3a 20 2d 32 70 78 22 2c 53 69 74 65 6a 61 62 62 65 72 3a 22 68 65 69 67 68 74 3a 20 32 30 70 78 3b 20 74 6f 70 3a 20 31 70 78 22 2c 54 68 75 6d 62 74 61 63 6b 3a 22 68 65 69 67 68 74 3a 20 32 35 70 78 3b 20 74 6f 70 3a 20 2d 33 70 78 22 2c 50 72 6f 76 65 6e 65 78 70 65 72 74 3a 22 68 65 69 67 68 74 3a 20 32 35 70 78 3b 20 74 6f 70 3a 20 31 70 78 22 2c 48 6f 74 65 6c 73 3a 22 68 65 69 67 68 74 3a 20 32 32 70 78 3b 20 74 6f 70 3a 20 2d 31 70 78 22 2c 5a 69 6c 6c 6f 77 3a 22 68 65 69 67 68 74 3a 20 31 37 70 78 22 2c 59 65 6c 6c 3a 22 68 65 69 67 68 74 3a 20 31 38 70 78 22 2c 43 68 65 63 6b 61 74 72 61 64 65 3a 22 68 65 69 67 Data Ascii: ght: 25px; top: -3px",Ebay:"height: 25px; top: -2px",Sitejabber:"height: 20px; top: 1px",Thumbtack:"height: 25px; top: -3px",Provenexpert:"height: 25px; top: 1px",Hotels:"height: 22px; top: -1px",Zillow:"height: 17px",Yell:"height: 18px",Checkatrade:"heig
2025-04-28 15:33:47 UTC	1460	IN	Data Raw: 30 70 78 3b 20 68 65 69 67 68 74 3a 20 34 31 70 78 22 2c 57 6f 72 64 70 72 65 73 73 50 6c 75 67 69 6e 3a 22 68 65 69 67 68 74 3a 20 33 35 70 78 22 2c 5a 6f 6f 76 65 72 3a 22 68 65 69 67 68 74 3a 20 32 32 70 78 22 2c 41 72 75 6b 65 72 65 73 6f 3a 22 68 65 69 67 68 74 3a 20 32 35 70 78 22 2c 22 41 72 75 6b 65 72 65 73 6f 2d 72 6f 22 3a 22 68 65 69 67 68 74 3a 20 32 39 70 78 22 2c 50 72 69 63 65 73 70 79 3a 22 68 65 69 67 68 74 3a 20 33 39 70 78 22 2c 22 50 72 69 63 65 73 70 79 2d 64 6b 22 3a 22 68 65 69 67 68 74 3a 20 34 32 70 78 22 2c 22 50 72 69 63 65 73 70 79 2d 66 69 22 3a 22 68 65 69 67 68 74 3a 20 33 35 70 78 22 2c 22 50 72 69 63 65 73 70 79 2d 66 72 22 3a 22 68 65 69 67 68 74 3a 20 33 31 70 78 22 2c 22 50 72 69 63 65 73 70 79 2d 6e 6f 22 3a 22 68 65 Data Ascii: 0px; height: 41px",WordpressPlugin:"height: 35px",Zoover:"height: 22px",Arukereso:"height: 25px","Arukereso-ro":"height: 29px",Pricespy:"height: 39px","Pricespy-dk":"height: 42px","Pricespy-fi":"height: 35px","Pricespy-fr":"height: 31px","Pricespy-no":"he
2025-04-28 15:33:47 UTC	1460	IN	Data Raw: 68 65 69 67 68 74 3a 20 32 30 70 78 22 2c 57 68 69 63 68 74 72 75 73 74 65 64 74 72 61 64 65 72 73 3a 22 77 69 64 74 68 3a 20 33 34 70 78 3b 20 68 65 69 67 68 74 3a 20 32 33 70 78 3b 20 74 6f 70 3a 20 2d 31 70 78 22 2c 41 62 69 61 3a 22 77 69 64 74 68 3a 20 34 30 70 78 3b 20 68 65 69 67 68 74 3a 20 31 36 70 78 22 2c 45 62 61 79 3a 22 77 69 64 74 68 3a 20 34 35 70 78 3b 20 68 65 69 67 68 74 3a 20 31 38 70 78 3b 20 74 6f 70 3a 20 31 70 78 22 2c 42 42 42 3a 22 77 69 64 74 68 3a 20 34 32 70 78 3b 20 68 65 69 67 68 74 3a 20 31 36 70 78 3b 20 74 6f 70 3a 20 32 70 78 22 2c 57 6f 72 64 70 72 65 73 73 50 6c 75 67 69 6e 3a 22 77 69 64 74 68 3a 20 38 35 70 78 3b 20 68 65 69 67 68 74 3a 20 31 31 70 78 3b 20 74 6f 70 3a 20 32 70 78 22 2c 41 72 75 6b 65 72 65 73 6f 3a Data Ascii: height: 20px",Whichtrustedtraders:"width: 34px; height: 23px; top: -1px",Abia:"width: 40px; height: 16px",Ebay:"width: 45px; height: 18px; top: 1px",BBB:"width: 42px; height: 16px; top: 2px",WordpressPlugin:"width: 85px; height: 11px; top: 2px",Arukereso:
2025-04-28 15:33:47 UTC	1460	IN	Data Raw: 22 6c 6f 61 64 65 72 22 29 29 2e 66 6f 72 45 61 63 68 28 28 74 3d 3e 7b 69 66 28 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 74 69 2d 77 69 64 67 65 74 2d 69 6e 69 74 65 64 22 29 29 72 65 74 75 72 6e 3b 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 74 69 2d 77 69 64 67 65 74 2d 69 6e 69 74 65 64 22 2c 21 30 29 3b 6c 65 74 20 69 3d 74 68 69 73 2e 67 65 74 53 63 72 69 70 74 4b 65 79 28 74 29 3b 69 66 28 21 69 29 72 65 74 75 72 6e 3b 6c 65 74 20 73 3d 42 6f 6f 6c 65 61 6e 28 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 65 6e 61 62 6c 65 2d 64 65 6c 61 79 2d 6c 6f 61 64 22 29 29 3b 69 66 28 22 53 43 52 49 50 54 22 3d 3d 3d 74 2e 74 61 67 4e 61 6d 65 29 7b 6c 65 74 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 Data Ascii: "loader")).forEach((t=>{if(t.getAttribute("data-ti-widget-inited"))return;t.setAttribute("data-ti-widget-inited",!0);let i=this.getScriptKey(t);if(!i)return;let s=Boolean(t.getAttribute("data-enable-delay-load"));if("SCRIPT"===t.tagName){let e=document.cr
2025-04-28 15:33:47 UTC	1460	IN	Data Raw: 53 6e 69 70 70 65 74 4c 6f 61 64 65 64 29 7b 6c 65 74 20 74 3d 2f 64 61 74 61 2d 72 69 63 68 2d 73 6e 69 70 70 65 74 3d 22 28 5b 5e 22 5d 2b 29 22 2f 2e 65 78 65 63 28 65 29 3b 74 26 26 74 5b 31 5d 26 26 28 74 68 69 73 2e 72 69 63 68 53 6e 69 70 70 65 74 4c 6f 61 64 65 64 3d 21 30 2c 74 68 69 73 2e 61 64 64 4a 53 28 74 68 69 73 2e 67 65 74 43 44 4e 55 72 6c 28 29 2b 22 61 73 73 65 74 73 2f 6a 73 2f 72 69 63 68 73 6e 69 70 70 65 74 2e 6a 73 3f 22 2b 74 5b 31 5d 29 29 7d 74 2e 69 73 54 72 69 67 67 65 72 4c 6f 61 64 28 31 30 30 29 3f 73 3f 77 69 6e 64 6f 77 2e 74 69 45 6c 65 6d 65 6e 74 54 6f 57 61 69 74 46 6f 72 41 63 74 69 76 69 74 79 2e 70 75 73 68 28 74 29 3a 6e 65 77 20 54 72 75 73 74 69 6e 64 65 78 57 69 64 67 65 74 28 6e 75 6c 6c 2c 74 29 3a 69 3f 6e Data Ascii: SnippetLoaded){let t=/data-rich-snippet="([^"]+)"/.exec(e);t&&t[1]&&(this.richSnippetLoaded=!0,this.addJS(this.getCDNUrl()+"assets/js/richsnippet.js?"+t[1]))}t.isTriggerLoad(100)?s?window.tiElementToWaitForActivity.push(t):new TrustindexWidget(null,t):i?n
2025-04-28 15:33:47 UTC	1460	IN	Data Raw: 63 2d 5f 3d 22 2f 67 2c 27 73 72 63 3d 22 27 29 2e 72 65 70 6c 61 63 65 28 2f 63 6f 6e 73 65 6e 74 2d 6f 72 69 67 69 6e 61 6c 2d 73 72 63 73 65 74 2d 5f 3d 22 2f 67 2c 27 73 72 63 73 65 74 3d 22 27 29 2e 72 65 70 6c 61 63 65 28 2f 63 6f 6e 73 65 6e 74 2d 6f 72 69 67 69 6e 61 6c 2d 64 61 74 61 2d 73 72 63 2d 5f 3d 22 2f 67 2c 27 64 61 74 61 2d 73 72 63 3d 22 27 29 2e 72 65 70 6c 61 63 65 28 2f 63 6f 6e 73 65 6e 74 2d 6f 72 69 67 69 6e 61 6c 2d 64 61 74 61 2d 73 72 63 73 65 74 3d 22 2f 67 2c 27 64 61 74 61 2d 73 72 63 73 65 74 3d 22 27 29 2e 72 65 70 6c 61 63 65 28 2f 3c 6e 6f 73 63 72 69 70 74 3e 5b 5e 3c 5d 2b 3c 5c 2f 6e 6f 73 63 72 69 70 74 3e 2f 67 2c 22 22 29 2e 72 65 70 6c 61 63 65 28 2f 64 61 74 61 2d 28 3f 3a 6c 61 7a 79 2d 7c 74 69 2d 29 3f 73 72 Data Ascii: c-_="/g,'src="').replace(/consent-original-srcset-_="/g,'srcset="').replace(/consent-original-data-src-_="/g,'data-src="').replace(/consent-original-data-srcset="/g,'data-srcset="').replace(/<noscript>[^<]+<\/noscript>/g,"").replace(/data-(?:lazy-\|ti-)?sr

Timestamp	Bytes transferred	Direction	Data
2025-04-28 15:33:47 UTC	1134	OUT	POST /ccm/collect?en=page_view&dl=https%3A%2F%2Fparlatoscatering.com%2F&scrsrc=www.googletagmanager.com&frm=0&rnd=881265630.1745854427&dt=The%20Best%20Italian%20Catering%20Service%20in%20Oakville%20%7C%20Parlato%27s%20Catering&auid=834765053.1745854427&navt=n&npa=0&gtm=45He54n0v892923405za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=102887800~103051953~103077950~103106314~103106316~103116026~103130360~103130362~103130495~103130497~103200004&tft=1745854426737&tfd=8538&apve=1 HTTP/1.1 host: www.google.com content-length: 0 sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: / origin: https://parlatoscatering.com x-client-data: CKq1yQEIi7bJAQiktskBCKmdygEI0qDKAQig4coBCJahywEInP7MAQiFoM0B sec-fetch-site: cross-site sec-fetch-mode: no-cors sec-fetch-dest: empty sec-fetch-storage-access: active referer: https://parlatoscatering.com/ accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=4, i
2025-04-28 15:33:47 UTC	565	IN	HTTP/1.1 200 OK date: Mon, 28 Apr 2025 15:33:47 GMT content-type: text/plain cache-control: no-cache, no-store, must-revalidate expires: Fri, 01 Jan 1990 00:00:00 GMT pragma: no-cache vary: Origin vary: X-Origin vary: Referer server: scaffolding on HTTPServer2 content-length: 0 x-xss-protection: 0 x-frame-options: SAMEORIGIN x-content-type-options: nosniff access-control-allow-origin: https://parlatoscatering.com access-control-expose-headers: date,vary,vary,vary,server,content-length alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
2025-04-28 15:33:49 UTC	1460	OUT	GET /pagead/1p-user-list/undefined/?random=1745854427628&cv=11&fst=1745852400000&bg=ffffff&guid=ON&async=1&gtm=45be54n0z8812274689za201zb9179331475&gcd=13l3l3l3l1l1&dma=0&tag_exp=102887800~103051953~103071290~103077950~103106314~103106316~103116025~103130360~103130362~103200001&ptag_exp=102887800~103051953~103071290~103077950~103106314~103106316~103116026~103130360~103130362~103200004&u_w=1280&u_h=1024&url=https%3A%2F%2Fparlatoscatering.com%2F%3Futm_source%3Dgoogle%26utm_medium%3Dorganic%26utm_campaign%3Dgmb&hn=www.googleadservices.com&frm=0&tiba=The%20Best%20Italian%20Catering%20Service%20in%20Oakville%20%7C%20Parlato%27s%20Catering&npa=0&pscdl=noapi&auid=834765053.1745854427&uaa=x86&uab=64&uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&_tu=Cg&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwDZpuyz4kuNSVZur6Pr2nA4lgGpKruHDhVr_g&random=1477689070&rmt_tld=0&ipr=y HTTP/1.1 host: www.google.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 x-client-data: CKq1yQEIi7bJAQiktskBCKmdygEI0qDKAQig4coBCJahywEInP7MAQiFoM0B sec-fetch-site: cross-site sec-fetch-mode: no-cors sec-fetch-
2025-04-28 15:33:49 UTC	162	OUT	Data Raw: 64 65 73 74 3a 20 69 6d 61 67 65 0d 0a 73 65 63 2d 66 65 74 63 68 2d 73 74 6f 72 61 67 65 2d 61 63 63 65 73 73 3a 20 61 63 74 69 76 65 0d 0a 72 65 66 65 72 65 72 3a 20 68 74 74 70 73 3a 2f 2f 70 61 72 6c 61 74 6f 73 63 61 74 65 72 69 6e 67 2e 63 6f 6d 2f 0d 0a 61 63 63 65 70 74 2d 65 6e 63 6f 64 69 6e 67 3a 20 69 64 65 6e 74 69 74 79 0d 0a 61 63 63 65 70 74 2d 6c 61 6e 67 75 61 67 65 3a 20 65 6e 2d 55 53 2c 65 6e 3b 71 3d 30 2e 39 0d 0a 70 72 69 6f 72 69 74 79 3a 20 69 0d 0a 0d 0a Data Ascii: dest: imagesec-fetch-storage-access: activereferer: https://parlatoscatering.com/accept-encoding: identityaccept-language: en-US,en;q=0.9priority: i
2025-04-28 15:33:49 UTC	583	IN	HTTP/1.1 200 OK p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" timing-allow-origin: * cross-origin-resource-policy: cross-origin date: Mon, 28 Apr 2025 15:33:49 GMT pragma: no-cache expires: Fri, 01 Jan 1990 00:00:00 GMT cache-control: no-cache, no-store, must-revalidate content-type: image/gif content-security-policy: script-src 'none'; object-src 'none' x-content-type-options: nosniff server: cafe content-length: 42 x-xss-protection: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
2025-04-28 15:33:49 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Timestamp	Bytes transferred	Direction	Data
2025-04-28 15:33:48 UTC	591	OUT	GET /widgets/1b/1b1045689970900caf5922f380/content.html HTTP/1.1 host: cdn.trustindex.io sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: / origin: https://parlatoscatering.com sec-fetch-site: cross-site sec-fetch-mode: cors sec-fetch-dest: empty referer: https://parlatoscatering.com/ accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=1, i
2025-04-28 15:33:48 UTC	783	IN	HTTP/1.1 200 OK content-type: text/html content-length: 21609 date: Mon, 28 Apr 2025 15:33:47 GMT server: Apache/2.4.52 (Ubuntu) last-modified: Fri, 25 Apr 2025 02:18:24 GMT etag: "5469-63390f2f454bf" accept-ranges: bytes referrer-policy: origin access-control-allow-origin: * access-control-allow-headers: origin, x-requested-with, content-type access-control-allow-methods: GET cross-origin-resource-policy: cross-origin cross-origin-embedder-policy: require-corp content-security-policy: frame-ancestors 'self' *; x-frame-options: SAMEORIGIN vary: Accept-Encoding x-cache: Miss from cloudfront via: 1.1 b272c1f126011069f9ff56625304953e.cloudfront.net (CloudFront) x-amz-cf-pop: LAX54-P8 x-amz-cf-id: nhiF1DURjQdTSlowufeITzUcMJAEu1MmjEOLD39o18EIeAqaw0qTmA==
2025-04-28 15:33:48 UTC	1460	IN	Data Raw: 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 69 2d 77 69 64 67 65 74 20 74 69 2d 6e 6f 2d 70 72 6f 66 69 6c 65 2d 69 6d 67 22 20 64 61 74 61 2d 6c 61 79 6f 75 74 2d 69 64 3d 22 33 36 22 20 64 61 74 61 2d 6c 61 79 6f 75 74 2d 63 61 74 65 67 6f 72 79 3d 22 73 6c 69 64 65 72 22 20 64 61 74 61 2d 73 65 74 2d 69 64 3d 22 64 61 72 6b 2d 63 6f 6e 74 72 61 73 74 22 20 64 61 74 61 2d 70 69 64 3d 22 31 62 31 30 34 35 36 38 39 39 37 30 39 30 30 63 61 66 35 39 32 32 66 33 38 30 22 20 64 61 74 61 2d 6c 61 6e 67 75 61 67 65 3d 22 65 6e 22 20 64 61 74 61 2d 72 65 76 69 65 77 2d 74 61 72 67 65 74 2d 77 69 64 74 68 3d 22 33 30 30 22 20 64 61 74 61 2d 63 73 73 2d 76 65 72 73 69 6f 6e 3d 22 32 22 20 64 61 74 61 2d 66 6f 6f 74 65 72 2d 6c 69 6e 6b 2d 64 6f 6d 61 69 6e 3d 22 74 72 Data Ascii: <div class="ti-widget ti-no-profile-img" data-layout-id="36" data-layout-category="slider" data-set-id="dark-contrast" data-pid="1b1045689970900caf5922f380" data-language="en" data-review-target-width="300" data-css-version="2" data-footer-link-domain="tr
2025-04-28 15:33:48 UTC	1460	IN	Data Raw: 64 65 78 2e 69 6f 2f 61 73 73 65 74 73 2f 70 6c 61 74 66 6f 72 6d 2f 47 6f 6f 67 6c 65 2f 73 74 61 72 2f 66 2e 73 76 67 22 20 61 6c 74 3d 22 47 6f 6f 67 6c 65 22 20 77 69 64 74 68 3d 22 31 37 22 20 68 65 69 67 68 74 3d 22 31 37 22 20 6c 6f 61 64 69 6e 67 3d 22 6c 61 7a 79 22 20 2f 3e 3c 69 6d 67 20 63 6c 61 73 73 3d 22 74 69 2d 73 74 61 72 20 66 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 74 72 75 73 74 69 6e 64 65 78 2e 69 6f 2f 61 73 73 65 74 73 2f 70 6c 61 74 66 6f 72 6d 2f 47 6f 6f 67 6c 65 2f 73 74 61 72 2f 66 2e 73 76 67 22 20 61 6c 74 3d 22 47 6f 6f 67 6c 65 22 20 77 69 64 74 68 3d 22 31 37 22 20 68 65 69 67 68 74 3d 22 31 37 22 20 6c 6f 61 64 69 6e 67 3d 22 6c 61 7a 79 22 20 2f 3e 3c 69 6d 67 20 63 6c 61 73 73 3d 22 74 69 2d 73 74 61 Data Ascii: dex.io/assets/platform/Google/star/f.svg" alt="Google" width="17" height="17" loading="lazy" /><img class="ti-star f" src="https://cdn.trustindex.io/assets/platform/Google/star/f.svg" alt="Google" width="17" height="17" loading="lazy" /><img class="ti-sta
2025-04-28 15:33:48 UTC	1460	IN	Data Raw: 6f 67 6c 65 22 20 77 69 64 74 68 3d 22 32 30 22 20 68 65 69 67 68 74 3d 22 32 30 22 20 6c 6f 61 64 69 6e 67 3d 22 6c 61 7a 79 22 20 2f 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 69 2d 70 72 6f 66 69 6c 65 2d 64 65 74 61 69 6c 73 22 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 69 2d 6e 61 6d 65 22 3e 20 50 61 74 74 69 20 45 64 6d 75 6e 64 73 20 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 69 2d 64 61 74 65 22 3e 41 70 72 69 6c 20 31 36 2c 20 32 30 32 35 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 74 69 2d 73 74 61 72 73 22 3e 3c 69 6d 67 20 63 6c 61 73 73 3d 22 74 69 2d 73 74 61 72 20 66 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 74 72 75 73 74 69 6e 64 65 78 2e 69 6f Data Ascii: ogle" width="20" height="20" loading="lazy" /> <div class="ti-profile-details"> <div class="ti-name"> Patti Edmunds </div> <div class="ti-date">April 16, 2025</div> </div> </div> <span class="ti-stars"><img class="ti-star f" src="https://cdn.trustindex.io
2025-04-28 15:33:48 UTC	1460	IN	Data Raw: 6c 61 70 73 65 2d 74 65 78 74 3d 22 48 69 64 65 22 20 64 61 74 61 2d 6f 70 65 6e 2d 74 65 78 74 3d 22 52 65 61 64 20 6d 6f 72 65 22 20 3e 3c 2f 73 70 61 6e 3e 20 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 69 2d 72 65 76 69 65 77 2d 69 74 65 6d 20 73 6f 75 72 63 65 2d 47 6f 6f 67 6c 65 20 74 69 2d 69 6d 61 67 65 2d 6c 61 79 6f 75 74 2d 74 68 75 6d 62 6e 61 69 6c 22 20 64 61 74 61 2d 69 64 3d 22 37 65 31 63 33 37 32 32 39 33 39 30 63 66 35 65 64 39 32 64 34 34 65 64 63 37 37 62 62 30 37 65 22 20 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 69 2d 69 6e 6e 65 72 22 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 69 2d 72 65 76 69 65 77 2d 68 65 61 64 65 72 22 3e 20 3c 69 6d 67 20 63 6c 61 73 73 3d 22 74 69 2d 70 6c 61 74 66 Data Ascii: lapse-text="Hide" data-open-text="Read more" ></span> </div> </div> <div class="ti-review-item source-Google ti-image-layout-thumbnail" data-id="7e1c37229390cf5ed92d44edc77bb07e" > <div class="ti-inner"> <div class="ti-review-header"> <img class="ti-platf
2025-04-28 15:33:48 UTC	1460	IN	Data Raw: 61 73 20 61 20 67 72 65 61 74 20 65 78 70 65 72 69 65 6e 63 65 2c 20 61 6e 64 20 77 65 20 77 69 6c 6c 20 62 65 20 62 61 63 6b 21 3c 2f 64 69 76 3e 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 74 69 2d 72 65 61 64 2d 6d 6f 72 65 22 20 64 61 74 61 2d 63 6f 6e 74 61 69 6e 65 72 3d 22 2e 74 69 2d 72 65 76 69 65 77 2d 63 6f 6e 74 65 6e 74 22 20 64 61 74 61 2d 63 6f 6c 6c 61 70 73 65 2d 74 65 78 74 3d 22 48 69 64 65 22 20 64 61 74 61 2d 6f 70 65 6e 2d 74 65 78 74 3d 22 52 65 61 64 20 6d 6f 72 65 22 20 3e 3c 2f 73 70 61 6e 3e 20 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 69 2d 72 65 76 69 65 77 2d 69 74 65 6d 20 73 6f 75 72 63 65 2d 47 6f 6f 67 6c 65 20 74 69 2d 69 6d 61 67 65 2d 6c 61 79 6f 75 74 2d 74 68 75 6d 62 6e 61 69 6c Data Ascii: as a great experience, and we will be back!</div> <span class="ti-read-more" data-container=".ti-review-content" data-collapse-text="Hide" data-open-text="Read more" ></span> </div> </div> <div class="ti-review-item source-Google ti-image-layout-thumbnail
2025-04-28 15:33:48 UTC	1460	IN	Data Raw: 65 6e 74 20 66 6f 6f 64 2e 20 20 50 61 72 6c 61 74 6f 27 73 20 73 74 61 66 66 20 64 69 64 20 61 20 67 72 65 61 74 20 6a 6f 62 20 70 72 65 70 61 72 69 6e 67 20 61 20 62 75 66 66 65 74 20 73 74 79 6c 65 20 6c 75 6e 63 68 65 6f 6e 20 61 74 20 74 68 65 20 6c 61 73 74 20 6d 69 6e 75 74 65 2e 20 49 20 6c 6f 76 65 64 20 74 68 65 20 66 6f 6f 64 2c 20 73 75 63 68 20 64 65 6c 69 63 69 6f 75 73 20 73 61 6e 64 77 69 63 68 65 73 20 61 6e 64 20 63 72 75 64 69 74 c3 a9 73 20 61 6e 64 20 73 6f 20 77 65 6c 6c 20 73 65 72 76 65 64 20 61 6e 64 20 69 6d 70 72 65 73 73 69 76 65 2e 20 20 54 68 61 6e 6b 20 79 6f 75 21 3c 2f 64 69 76 3e 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 74 69 2d 72 65 61 64 2d 6d 6f 72 65 22 20 64 61 74 61 2d 63 6f 6e 74 61 69 6e 65 72 3d 22 2e 74 69 2d Data Ascii: ent food. Parlato's staff did a great job preparing a buffet style luncheon at the last minute. I loved the food, such delicious sandwiches and crudits and so well served and impressive. Thank you!</div> <span class="ti-read-more" data-container=".ti-
2025-04-28 15:33:48 UTC	1460	IN	Data Raw: 6f 6f 67 6c 65 2f 73 74 61 72 2f 66 2e 73 76 67 22 20 61 6c 74 3d 22 47 6f 6f 67 6c 65 22 20 77 69 64 74 68 3d 22 31 37 22 20 68 65 69 67 68 74 3d 22 31 37 22 20 6c 6f 61 64 69 6e 67 3d 22 6c 61 7a 79 22 20 2f 3e 3c 2f 73 70 61 6e 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 69 2d 72 65 76 69 65 77 2d 74 65 78 74 2d 63 6f 6e 74 61 69 6e 65 72 20 74 69 2d 72 65 76 69 65 77 2d 63 6f 6e 74 65 6e 74 22 3e 41 6c 77 61 79 73 20 67 72 65 61 74 20 66 6f 6f 64 20 61 6e 64 20 73 65 72 76 69 63 65 2e 20 49 20 68 69 67 68 6c 79 20 72 65 63 6f 6d 6d 65 6e 64 20 50 61 72 6c 61 74 6f 27 73 20 66 6f 72 20 61 6e 79 20 65 76 65 6e 74 2e 20 54 68 65 79 20 6a 75 73 74 20 63 61 74 65 72 65 64 20 6f 75 72 20 48 6f 6c 69 64 61 79 20 6c 75 6e 63 68 20 66 6f 72 20 6f 75 72 20 6f Data Ascii: oogle/star/f.svg" alt="Google" width="17" height="17" loading="lazy" /></span> <div class="ti-review-text-container ti-review-content">Always great food and service. I highly recommend Parlato's for any event. They just catered our Holiday lunch for our o
2025-04-28 15:33:48 UTC	1460	IN	Data Raw: 6f 67 6c 65 2f 73 74 61 72 2f 66 2e 73 76 67 22 20 61 6c 74 3d 22 47 6f 6f 67 6c 65 22 20 77 69 64 74 68 3d 22 31 37 22 20 68 65 69 67 68 74 3d 22 31 37 22 20 6c 6f 61 64 69 6e 67 3d 22 6c 61 7a 79 22 20 2f 3e 3c 69 6d 67 20 63 6c 61 73 73 3d 22 74 69 2d 73 74 61 72 20 66 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 74 72 75 73 74 69 6e 64 65 78 2e 69 6f 2f 61 73 73 65 74 73 2f 70 6c 61 74 66 6f 72 6d 2f 47 6f 6f 67 6c 65 2f 73 74 61 72 2f 66 2e 73 76 67 22 20 61 6c 74 3d 22 47 6f 6f 67 6c 65 22 20 77 69 64 74 68 3d 22 31 37 22 20 68 65 69 67 68 74 3d 22 31 37 22 20 6c 6f 61 64 69 6e 67 3d 22 6c 61 7a 79 22 20 2f 3e 3c 2f 73 70 61 6e 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 69 2d 72 65 76 69 65 77 2d 74 65 78 74 2d 63 6f 6e 74 61 69 6e 65 Data Ascii: ogle/star/f.svg" alt="Google" width="17" height="17" loading="lazy" /><img class="ti-star f" src="https://cdn.trustindex.io/assets/platform/Google/star/f.svg" alt="Google" width="17" height="17" loading="lazy" /></span> <div class="ti-review-text-containe
2025-04-28 15:33:48 UTC	1460	IN	Data Raw: 73 65 74 73 2f 70 6c 61 74 66 6f 72 6d 2f 47 6f 6f 67 6c 65 2f 73 74 61 72 2f 66 2e 73 76 67 22 20 61 6c 74 3d 22 47 6f 6f 67 6c 65 22 20 77 69 64 74 68 3d 22 31 37 22 20 68 65 69 67 68 74 3d 22 31 37 22 20 6c 6f 61 64 69 6e 67 3d 22 6c 61 7a 79 22 20 2f 3e 3c 69 6d 67 20 63 6c 61 73 73 3d 22 74 69 2d 73 74 61 72 20 66 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 74 72 75 73 74 69 6e 64 65 78 2e 69 6f 2f 61 73 73 65 74 73 2f 70 6c 61 74 66 6f 72 6d 2f 47 6f 6f 67 6c 65 2f 73 74 61 72 2f 66 2e 73 76 67 22 20 61 6c 74 3d 22 47 6f 6f 67 6c 65 22 20 77 69 64 74 68 3d 22 31 37 22 20 68 65 69 67 68 74 3d 22 31 37 22 20 6c 6f 61 64 69 6e 67 3d 22 6c 61 7a 79 22 20 2f 3e 3c 69 6d 67 20 63 6c 61 73 73 3d 22 74 69 2d 73 74 61 72 20 66 22 20 73 72 63 3d Data Ascii: sets/platform/Google/star/f.svg" alt="Google" width="17" height="17" loading="lazy" /><img class="ti-star f" src="https://cdn.trustindex.io/assets/platform/Google/star/f.svg" alt="Google" width="17" height="17" loading="lazy" /><img class="ti-star f" src=
2025-04-28 15:33:48 UTC	1460	IN	Data Raw: 20 6c 6f 61 64 69 6e 67 3d 22 6c 61 7a 79 22 20 2f 3e 3c 69 6d 67 20 63 6c 61 73 73 3d 22 74 69 2d 73 74 61 72 20 66 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 74 72 75 73 74 69 6e 64 65 78 2e 69 6f 2f 61 73 73 65 74 73 2f 70 6c 61 74 66 6f 72 6d 2f 47 6f 6f 67 6c 65 2f 73 74 61 72 2f 66 2e 73 76 67 22 20 61 6c 74 3d 22 47 6f 6f 67 6c 65 22 20 77 69 64 74 68 3d 22 31 37 22 20 68 65 69 67 68 74 3d 22 31 37 22 20 6c 6f 61 64 69 6e 67 3d 22 6c 61 7a 79 22 20 2f 3e 3c 69 6d 67 20 63 6c 61 73 73 3d 22 74 69 2d 73 74 61 72 20 66 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 74 72 75 73 74 69 6e 64 65 78 2e 69 6f 2f 61 73 73 65 74 73 2f 70 6c 61 74 66 6f 72 6d 2f 47 6f 6f 67 6c 65 2f 73 74 61 72 2f 66 2e 73 76 67 22 20 61 6c 74 3d 22 47 Data Ascii: loading="lazy" /><img class="ti-star f" src="https://cdn.trustindex.io/assets/platform/Google/star/f.svg" alt="Google" width="17" height="17" loading="lazy" /><img class="ti-star f" src="https://cdn.trustindex.io/assets/platform/Google/star/f.svg" alt="G

Timestamp	Bytes transferred	Direction	Data
2025-04-28 15:33:48 UTC	534	OUT	GET /tag/r0wzqcuce4 HTTP/1.1 host: www.clarity.ms sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: / sec-fetch-site: cross-site sec-fetch-mode: no-cors sec-fetch-dest: script sec-fetch-storage-access: active referer: https://parlatoscatering.com/ accept-encoding: identity accept-language: en-US,en;q=0.9
2025-04-28 15:33:48 UTC	509	IN	HTTP/1.1 200 OK date: Mon, 28 Apr 2025 15:33:47 GMT content-type: application/x-javascript content-length: 838 cache-control: no-cache, no-store expires: -1 set-cookie: CLID=698f1011d336462e9b19e762b5218805.20250428.20260428; expires=Tue, 28 Apr 2026 15:33:47 GMT; path=/; secure; samesite=none; httponly request-context: appId=cid-v1:e97341f6-8fff-46a6-9229-fbbfe0892c78 x-azure-ref: 20250428T153347Z-r185b9c9945h44q7hC1PHX7s0n00000018bg00000000e299 x-cache: CONFIG_NOCACHE accept-ranges: bytes
2025-04-28 15:33:48 UTC	838	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 61 2c 72 2c 69 2c 74 2c 79 29 7b 66 75 6e 63 74 69 6f 6e 20 73 79 6e 63 28 29 7b 28 6e 65 77 20 49 6d 61 67 65 29 2e 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 2e 63 6c 61 72 69 74 79 2e 6d 73 2f 63 2e 67 69 66 22 7d 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3f 73 79 6e 63 28 29 3a 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 73 79 6e 63 29 3b 69 66 28 61 5b 63 5d 2e 76 7c 7c 61 5b 63 5d 2e 74 29 72 65 74 75 72 6e 20 61 5b 63 5d 28 22 65 76 65 6e 74 22 2c 63 2c 22 64 75 70 2e 22 2b 69 2e 70 72 6f 6a 65 63 74 49 64 29 3b 61 5b 63 5d 2e 74 3d 21 30 2c 28 74 3d 6c 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 72 29 29 2e Data Ascii: !function(c,l,a,r,i,t,y){function sync(){(new Image).src="https://c.clarity.ms/c.gif"}"complete"==document.readyState?sync():window.addEventListener("load",sync);if(a[c].v\|\|a[c].t)return a[c]("event",c,"dup."+i.projectId);a[c].t=!0,(t=l.createElement(r)).
2025-04-28 15:33:48 UTC	603	OUT	GET /s/0.8.1/clarity.js HTTP/1.1 host: www.clarity.ms sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: / sec-fetch-site: cross-site sec-fetch-mode: no-cors sec-fetch-dest: script sec-fetch-storage-access: active referer: https://parlatoscatering.com/ accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: CLID=698f1011d336462e9b19e762b5218805.20250428.20260428
2025-04-28 15:33:48 UTC	531	IN	HTTP/1.1 200 OK date: Mon, 28 Apr 2025 15:33:48 GMT content-type: application/javascript;charset=utf-8 content-length: 71973 vary: Accept-Encoding last-modified: Wed, 19 Mar 2025 20:16:05 GMT etag: "0x8DD6722E0B7F6F4" x-ms-request-id: deab9b93-001e-0079-7a0e-acd2ff000000 x-ms-version: 2018-03-28 access-control-allow-origin: * x-azure-ref: 20250428T153348Z-r185b9c9945h44q7hC1PHX7s0n00000018bg00000000e2a0 cache-control: public, max-age=86400 x-fd-int-roxy-purgeid: 79034942 x-cache: TCP_HIT accept-ranges: bytes
2025-04-28 15:33:48 UTC	1460	IN	Data Raw: 2f 2a 20 63 6c 61 72 69 74 79 2d 6a 73 20 76 30 2e 38 2e 31 3a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6d 69 63 72 6f 73 6f 66 74 2f 63 6c 61 72 69 74 79 20 28 4c 69 63 65 6e 73 65 3a 20 4d 49 54 29 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 6e 75 6c 6c 2c 67 65 74 20 61 64 64 28 29 7b 72 65 74 75 72 6e 20 58 61 7d 2c 67 65 74 20 67 65 74 28 29 7b 72 65 74 75 72 6e 20 46 61 7d 2c 67 65 74 20 67 65 74 49 64 28 29 7b 72 65 74 75 72 6e 20 50 61 7d 2c 67 65 74 20 67 65 74 4e 6f 64 65 28 29 7b 72 65 74 75 72 6e 20 71 61 7d 2c 67 65 74 20 67 65 74 56 61 6c 75 65 28 29 7b 72 65 74 75 72 6e 20 55 61 7d 2c Data Ascii: /* clarity-js v0.8.1: https://github.com/microsoft/clarity (License: MIT) */!function(){"use strict";var t=Object.freeze({__proto__:null,get add(){return Xa},get get(){return Fa},get getId(){return Pa},get getNode(){return qa},get getValue(){return Ua},
2025-04-28 15:33:48 UTC	1460	IN	Data Raw: 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6b 69 7d 2c 67 65 74 20 69 64 28 29 7b 72 65 74 75 72 6e 20 4d 69 7d 2c 67 65 74 20 6d 65 74 61 64 61 74 61 28 29 7b 72 65 74 75 72 6e 20 4f 69 7d 2c 67 65 74 20 73 61 76 65 28 29 7b 72 65 74 75 72 6e 20 49 69 7d 2c 67 65 74 20 73 68 6f 72 74 69 64 28 29 7b 72 65 74 75 72 6e 20 50 69 7d 2c 67 65 74 20 73 74 61 72 74 28 29 7b 72 65 74 75 72 6e 20 54 69 7d 2c 67 65 74 20 73 74 6f 70 28 29 7b 72 65 74 75 72 6e 20 45 69 7d 7d 29 2c 6f 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 6e 75 6c 6c 2c 67 65 74 20 64 61 74 61 28 29 7b 72 65 74 75 72 6e 20 57 69 7d 2c 67 65 74 20 65 6e 76 65 6c 6f 70 65 28 29 7b 72 65 74 75 72 6e 20 71 69 7d 2c 67 65 74 20 73 74 61 72 74 28 29 7b 72 65 74 75 72 6e 20 Data Ascii: on(){return ki},get id(){return Mi},get metadata(){return Oi},get save(){return Ii},get shortid(){return Pi},get start(){return Ti},get stop(){return Ei}}),o=Object.freeze({__proto__:null,get data(){return Wi},get envelope(){return qi},get start(){return
2025-04-28 15:33:48 UTC	1460	IN	Data Raw: 61 72 43 6f 64 65 41 74 28 75 29 3b 69 66 28 61 3d 61 7c 7c 63 3e 3d 34 38 26 26 63 3c 3d 35 37 2c 72 3d 72 7c 7c 36 34 3d 3d 3d 63 2c 69 3d 39 3d 3d 3d 63 7c 7c 31 30 3d 3d 3d 63 7c 7c 31 33 3d 3d 3d 63 7c 7c 33 32 3d 3d 3d 63 2c 30 3d 3d 3d 75 7c 7c 75 3d 3d 3d 74 2e 6c 65 6e 67 74 68 2d 31 7c 7c 69 29 7b 69 66 28 61 7c 7c 72 29 7b 6e 75 6c 6c 3d 3d 3d 6f 26 26 28 6f 3d 74 2e 73 70 6c 69 74 28 22 22 29 29 3b 76 61 72 20 73 3d 74 2e 73 75 62 73 74 72 69 6e 67 28 65 2b 31 2c 69 3f 75 3a 75 2b 31 29 3b 73 3d 76 26 26 6e 75 6c 6c 21 3d 3d 79 3f 73 2e 6d 61 74 63 68 28 79 29 3f 73 3a 54 28 73 2c 22 e2 96 aa 22 2c 22 e2 96 ab 22 29 3a 53 28 73 29 2c 6f 2e 73 70 6c 69 63 65 28 65 2b 31 2d 6e 2c 73 2e 6c 65 6e 67 74 68 2c 73 29 2c 6e 2b 3d 73 2e 6c 65 6e 67 74 Data Ascii: arCodeAt(u);if(a=a\|\|c>=48&&c<=57,r=r\|\|64===c,i=9===c\|\|10===c\|\|13===c\|\|32===c,0===u\|\|u===t.length-1\|\|i){if(a\|\|r){null===o&&(o=t.split(""));var s=t.substring(e+1,i?u:u+1);s=v&&null!==y?s.match(y)?s:T(s,"",""):S(s),o.splice(e+1-n,s.length,s),n+=s.lengt
2025-04-28 15:33:48 UTC	1460	IN	Data Raw: 2b 65 2e 6c 65 6e 67 74 68 29 3b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 72 29 2e 63 6f 6e 63 61 74 28 65 2e 6c 65 6e 67 74 68 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 29 2e 63 6f 6e 63 61 74 28 69 29 7d 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 53 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 72 65 70 6c 61 63 65 28 70 2c 22 e2 80 a2 22 29 7d 66 75 6e 63 74 69 6f 6e 20 54 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 4f 28 29 2c 74 3f 74 2e 72 65 70 6c 61 63 65 28 6d 2c 65 29 2e 72 65 70 6c 61 63 65 28 67 2c 6e 29 3a 74 7d 66 75 6e 63 74 69 6f 6e 20 45 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 35 2a 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 74 2e 6c 65 6e 67 74 68 2f 35 29 2b 31 29 2c 6e 3d 22 22 2c 61 3d 30 3b 61 3c 65 3b 61 2b 2b 29 6e 2b 3d 61 3e Data Ascii: +e.length);return"".concat(r).concat(e.length.toString(36)).concat(i)}return t}function S(t){return t.replace(p,"")}function T(t,e,n){return O(),t?t.replace(m,e).replace(g,n):t}function E(t){for(var e=5*(Math.floor(t.length/5)+1),n="",a=0;a<e;a++)n+=a>
2025-04-28 15:33:48 UTC	1460	IN	Data Raw: 6c 59 3d 6e 2c 4e 2e 73 63 72 6f 6c 6c 54 69 6d 65 3d 61 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 32 3a 4e 2e 6d 6f 76 65 58 3d 65 2c 4e 2e 6d 6f 76 65 59 3d 6e 2c 4e 2e 6d 6f 76 65 54 69 6d 65 3d 61 2c 4e 2e 70 6f 69 6e 74 65 72 50 72 65 76 58 3d 4e 2e 70 6f 69 6e 74 65 72 58 2c 4e 2e 70 6f 69 6e 74 65 72 50 72 65 76 59 3d 4e 2e 70 6f 69 6e 74 65 72 59 2c 4e 2e 70 6f 69 6e 74 65 72 50 72 65 76 54 69 6d 65 3d 4e 2e 70 6f 69 6e 74 65 72 54 69 6d 65 2c 4e 2e 70 6f 69 6e 74 65 72 58 3d 65 2c 4e 2e 70 6f 69 6e 74 65 72 59 3d 6e 2c 4e 2e 70 6f 69 6e 74 65 72 54 69 6d 65 3d 61 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 33 3a 4e 2e 64 6f 77 6e 58 3d 65 2c 4e 2e 64 6f 77 6e 59 3d 6e 2c 4e 2e 64 6f 77 6e 54 69 6d 65 3d 61 2c 4e 2e 70 6f 69 6e 74 65 72 50 72 65 76 58 3d Data Ascii: lY=n,N.scrollTime=a;break;case 12:N.moveX=e,N.moveY=n,N.moveTime=a,N.pointerPrevX=N.pointerX,N.pointerPrevY=N.pointerY,N.pointerPrevTime=N.pointerTime,N.pointerX=e,N.pointerY=n,N.pointerTime=a;break;case 13:N.downX=e,N.downY=n,N.downTime=a,N.pointerPrevX=
2025-04-28 15:33:48 UTC	1460	IN	Data Raw: 3d 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 4a 28 29 7b 42 26 26 55 28 42 29 2c 42 3d 71 28 47 2c 56 29 2c 46 3d 6c 28 29 7d 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 76 61 72 20 74 3d 6c 28 29 3b 41 3d 7b 67 61 70 3a 74 2d 46 7d 2c 72 69 28 32 35 29 2c 41 2e 67 61 70 3c 33 65 35 3f 42 3d 71 28 47 2c 56 29 3a 75 6f 26 26 28 6a 28 22 63 6c 61 72 69 74 79 22 2c 22 73 75 73 70 65 6e 64 22 29 2c 41 6f 28 29 2c 5b 22 6d 6f 75 73 65 6d 6f 76 65 22 2c 22 74 6f 75 63 68 73 74 61 72 74 22 5d 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4a 69 28 64 6f 63 75 6d 65 6e 74 2c 74 2c 66 6f 29 7d 29 29 2c 5b 22 72 65 73 69 7a 65 22 2c 22 73 63 72 6f 6c 6c 22 2c 22 70 61 67 65 73 68 6f 77 22 5d 2e 66 6f 72 45 61 63 68 28 28 66 75 6e Data Ascii: =null;function J(){B&&U(B),B=q(G,V),F=l()}function G(){var t=l();A={gap:t-F},ri(25),A.gap<3e5?B=q(G,V):uo&&(j("clarity","suspend"),Ao(),["mousemove","touchstart"].forEach((function(t){return Ji(document,t,fo)})),["resize","scroll","pageshow"].forEach((fun
2025-04-28 15:33:48 UTC	1460	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 29 2c 69 3b 66 75 6e 63 74 69 6f 6e 20 75 28 75 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 75 29 7b 69 66 28 6e 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 47 65 6e 65 72 61 74 6f 72 20 69 73 20 61 6c 72 65 61 64 79 20 65 78 65 63 75 74 69 6e 67 2e 22 29 3b 66 6f 72 28 3b 69 26 26 28 69 3d 30 2c 75 5b 30 5d 26 26 28 6f 3d 30 29 29 2c 6f 3b 29 74 72 79 7b 69 66 28 6e 3d 31 2c 61 26 26 28 72 3d 32 26 75 5b 30 5d 3f 61 2e 72 65 74 75 72 6e 3a 75 5b 30 5d 3f 61 2e 74 68 72 6f 77 7c 7c 28 28 72 3d 61 2e 72 65 74 75 72 6e 29 26 26 72 2e 63 61 6c 6c 28 61 29 2c 30 29 3a 61 2e 6e 65 78 74 29 26 26 21 28 72 Data Ascii: function(){return this}),i;function u(u){return function(c){return function(u){if(n)throw new TypeError("Generator is already executing.");for(;i&&(i=0,u[0]&&(o=0)),o;)try{if(n=1,a&&(r=2&u[0]?a.return:u[0]?a.throw\|\|((r=a.return)&&r.call(a),0):a.next)&&!(r
2025-04-28 15:33:48 UTC	1460	IN	Data Raw: 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 74 28 74 2c 65 29 7b 69 66 28 6c 6f 28 29 26 26 74 26 26 65 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 6c 65 6e 67 74 68 3c 32 35 35 29 7b 66 6f 72 28 76 61 72 20 6e 3d 28 74 20 69 6e 20 75 74 3f 75 74 5b 74 5d 3a 5b 5d 29 2c 61 3d 30 3b 61 3c 65 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 5b 61 5d 26 26 65 5b 61 5d 2e 6c 65 6e 67 74 68 3c 32 35 35 26 26 6e 2e 70 75 73 68 28 65 5b 61 5d 29 3b 75 74 5b 74 5d 3d 6e 7d 7d 66 75 6e 63 74 69 6f 6e 20 64 74 28 29 7b 72 69 28 33 34 29 7d 66 75 6e 63 74 69 6f 6e 20 66 74 28 29 7b 75 74 3d 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 70 74 28 74 29 7b 72 65 74 75 72 6e 20 69 74 28 74 68 69 73 2c 76 6f 69 64 Data Ascii: }))}function lt(t,e){if(lo()&&t&&e&&"string"==typeof t&&t.length<255){for(var n=(t in ut?ut[t]:[]),a=0;a<e.length;a++)"string"==typeof e[a]&&e[a].length<255&&n.push(e[a]);ut[t]=n}}function dt(){ri(34)}function ft(){ut={}}function pt(t){return it(this,void
2025-04-28 15:33:48 UTC	1460	IN	Data Raw: 6e 3d 5b 5d 2c 61 3d 21 31 2c 72 3d 5b 5d 2c 6f 2e 6c 61 62 65 6c 3d 31 3b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 61 3f 5b 33 2c 33 5d 3a 5b 34 2c 65 2e 72 65 61 64 28 29 5d 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 69 3d 6f 2e 73 65 6e 74 28 29 2c 61 3d 69 2e 64 6f 6e 65 2c 72 3d 69 2e 76 61 6c 75 65 2c 61 3f 5b 32 2c 6e 5d 3a 28 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 72 29 2c 5b 33 2c 31 5d 29 3b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 5b 32 2c 6e 5d 7d 7d 29 29 7d 29 29 7d 76 61 72 20 79 74 3d 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 62 74 28 74 29 7b 74 72 79 7b 69 66 28 21 79 74 29 72 65 74 75 72 6e 3b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 70 61 72 73 65 28 74 29 7d 63 61 74 Data Ascii: n=[],a=!1,r=[],o.label=1;case 1:return a?[3,3]:[4,e.read()];case 2:return i=o.sent(),a=i.done,r=i.value,a?[2,n]:(n.push.apply(n,r),[3,1]);case 3:return[2,n]}}))}))}var yt=null;function bt(t){try{if(!yt)return;var e=function(t){try{return JSON.parse(t)}cat

Timestamp	Bytes transferred	Direction	Data
2025-04-28 15:33:48 UTC	541	OUT	GET /122811.js HTTP/1.1 host: s.ksrndkehqnwntyxlhgto.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: / sec-fetch-site: cross-site sec-fetch-mode: no-cors sec-fetch-dest: script sec-fetch-storage-access: active referer: https://parlatoscatering.com/ accept-encoding: identity accept-language: en-US,en;q=0.9
2025-04-28 15:33:48 UTC	581	IN	HTTP/1.1 200 OK content-type: application/javascript content-length: 9003 date: Mon, 28 Apr 2025 15:33:48 GMT last-modified: Wed, 09 Apr 2025 15:23:11 GMT etag: "a64faab4f58fd7b515ca19136c7b4190" x-amz-server-side-encryption: AES256 cache-control: max-age=0 content-encoding: gzip x-amz-version-id: 7VIM7GACmSImzN2_avx3rUKgrOsPAf3J accept-ranges: bytes server: AmazonS3 x-cache: Miss from cloudfront via: 1.1 6450e6aa1b306135c330b9d3210d80a0.cloudfront.net (CloudFront) x-amz-cf-pop: LAX54-P3 x-amz-cf-id: DY83oOeNKvcb7io-auLxOHJk_-6bav0dQwsNW-V9TOOaRTqjtR-_Eg==
2025-04-28 15:33:48 UTC	1460	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 ed 7d ed 76 e3 36 92 e8 ab a8 39 33 2d b2 45 cb 52 db ee 74 5a 51 b2 c9 6c 32 93 39 c9 64 6e 3a 73 f7 9e ab d6 e8 52 24 24 d1 a2 48 99 a4 2c ab 6d ed 99 57 d8 b3 bf f6 f5 e6 49 6e e1 1b 20 41 4a 56 db fd 91 e8 e4 c3 22 50 55 28 14 80 42 01 28 14 32 94 ff 12 2e 50 b2 ca ed c9 2a f6 f3 30 89 6d a7 71 db b8 f6 d2 86 3f 43 fe 7c 9c dc a0 ac d1 6f 04 89 bf 5a a0 38 6f 5f ad 50 ba 79 8d 22 e4 e7 49 fa 75 14 d9 cd 30 5e ae f2 41 be 59 a2 be c5 71 ac 61 d3 e9 35 26 49 da b0 31 a9 10 28 74 7a f0 e7 0b 85 6a 3b 42 f1 34 9f 41 72 ab 85 cb 94 39 83 70 d8 4e d1 22 b9 46 5f e7 79 1a 8e 57 39 b2 9b 29 ba 5a 85 29 0a 30 e1 6d 63 eb 36 9e 77 3a 1d a7 87 c9 ff 7e ed 8f 22 e4 05 59 5f fc ba bb bb 05 96 5f dd ae d2 e8 d5 5f 5e ff f4 d7 f6 d2 4b Data Ascii: }v693-ERtZQl29dn:sR$$H,mWIn AJV"PU(B(2.P*0mq?C\|oZ8o_Py"Iu0^AYqa5&I1(tzj;B4Ar9pN"F_yW9)Z)0mc6w:~"Y___^K
2025-04-28 15:33:48 UTC	1460	IN	Data Raw: a3 9d 70 19 94 0a cc 95 01 3d 18 ea 60 58 93 b5 53 47 1f 30 24 8f 4c 2e 50 03 0d b6 d5 a2 0d 6f ec 1f 16 00 4a 93 8a e2 a9 6c d6 20 b5 33 30 48 40 73 b5 2d ae 72 74 6c 3e b0 70 cf 3a 77 76 0a a4 80 0d 23 a0 05 a4 5b c5 e4 33 6a 4f 40 9a 26 25 cb e2 c6 b7 48 a7 aa a1 ba 06 a3 6f ce fe d7 45 e7 e2 e5 d9 0f 7f e1 35 28 60 63 b1 94 09 16 52 4a 62 28 e6 2b 62 f8 9c 77 6b 9d 7d ac 65 2c 30 49 f5 d4 16 24 62 85 61 19 c9 62 0d 61 40 f8 d3 89 ac 15 48 af 8c 44 47 80 99 87 66 d3 d9 dd 1f 35 b4 9e a2 a2 f4 0e fa 45 e3 a2 83 6b ab 4c f5 4a 2f c5 eb 6c 36 18 b5 be 4b 1b 31 8c e2 49 7c 93 5e 6d d2 75 bc 9e bd dd 04 e1 db 4b 65 24 44 97 eb 08 2d 2e 67 c9 fc 6a ba f6 27 d3 f1 8c d8 e7 e6 86 16 fa cf 62 c4 a7 d1 66 16 45 8b f0 6a e9 ad 37 5e 88 96 b3 a9 bf 1b 7b e4 af d2 Data Ascii: p=`XSG0$L.PoJl 30H@s-rtl>p:wv#[3jO@&%HoE5(`cRJb(+bwk}e,0I$baba@HDGf5EkLJ/l6K1I\|^muKe$D-.gj'bfEj7^{
2025-04-28 15:33:48 UTC	1460	IN	Data Raw: 36 9f 1b b9 f3 91 52 6f 34 19 07 0b 3f 9b 86 61 18 a0 55 7a ed 65 97 b1 6d 5d f1 1a 17 31 1c ce 5f 31 43 0e 59 e3 be 2d a8 34 e3 8e 2c a4 1b 37 b7 9e 28 9b 5b b4 ae 5c 45 e0 0c ae 57 9a a5 fd 3a a1 5b 54 bb 08 f8 9b 6b 99 05 70 6d d7 86 b4 88 86 50 30 32 0a 99 29 ba 46 d8 15 0b 6f 72 95 b8 d0 61 07 dd 61 0b 0a 69 15 52 3b 43 de f3 05 01 ae e3 4d 7b 4c 7a 9d 14 c8 12 76 65 bd 04 80 b9 66 22 db 54 37 a5 c0 22 7c b1 7e 22 9d d6 50 db 1d 55 7a 69 89 34 f0 c2 57 c6 db a2 64 d8 42 b7 d9 74 45 12 5b f1 aa 49 62 e9 ab 25 b2 35 b0 9a 46 16 c3 fc c4 41 81 64 bb 27 a6 3e cb a5 4a 4f 79 7b c5 81 58 20 82 8f 97 a1 93 2b bd b7 08 d0 25 00 52 ad 1b 40 9e 53 10 ae 33 0d 10 67 04 42 a8 88 62 f6 39 c9 26 d3 9f 21 f7 82 b2 c8 57 c6 06 88 97 04 82 2f 86 0d 00 9f 0f 0b 8d 56 Data Ascii: 6Ro4?aUzem]1_1CY-4,7([\EW:[TkpmP02)ForaaiR;CM{Lzvef"T7"\|~"PUzi4WdBtE[Ib%5FAd'>JOy{X +%R@S3gBb9&!W/V
2025-04-28 15:33:48 UTC	1460	IN	Data Raw: b4 09 92 da 44 cd 1f a0 61 1b 77 0a 7a 9a cc 16 75 ce 03 0c c3 62 21 0f 30 10 8b 24 7f c3 43 71 2f e9 1e 30 18 77 8b f8 b7 30 1c 61 de c3 7b 8f e3 14 79 73 e9 f6 40 66 43 6e 5c ed d1 82 c6 86 2b 8f 65 63 d3 b1 81 58 29 61 5a ef 32 b1 72 7b ed a4 f4 81 87 c2 b6 e8 62 fa de cc 88 3d e6 b8 00 99 36 41 ea 1b a5 30 9f e5 f7 a2 f0 11 34 c6 27 37 0f ed a5 20 0f 69 c9 92 32 fc a4 da f2 bd 2a b1 82 78 0f 56 5f f9 fd c8 7c 14 ba 6b 5b 8c 45 a0 17 02 1f 2e 75 4e 2d 07 3b 92 9b e4 38 72 03 f9 c9 5c 21 90 dc 45 8f bc 31 8c 49 75 b1 3e 45 f9 b7 ac 5f 7e b3 f9 c5 9b e2 c8 33 f8 de 09 c0 71 b7 3e 8a c4 aa 5c da 20 a3 b9 26 ef 78 9a 83 a3 e6 cc f2 45 f4 5d 92 3a cc ff 0e ca 33 b3 f0 cd e6 fb c0 80 c6 ee ca 02 0c 26 8d ff b6 09 10 76 e7 e0 c0 52 82 95 bb 78 20 98 76 49 87 Data Ascii: Dawzub!0$Cq/0w0a{ys@fCn\+ecX)aZ2r{b=6A04'7 i2*xV_\|k[E.uN-;8r\!E1Iu>E_~3q>\ &xE]:3&vRx vI
2025-04-28 15:33:48 UTC	1460	IN	Data Raw: 85 2b db 3d cd bd 1f 34 5a 29 ae a2 88 20 ca 03 64 50 b7 00 36 d8 e8 73 24 ec 3e 3e 1b 77 fe 88 97 49 83 30 2c 93 a5 2d 1e 7e e8 e1 37 20 66 e1 44 dc 83 64 d0 55 ca 44 09 f0 c6 21 35 6d 41 ae 4c 89 80 6f 66 10 dc be 4a a0 33 33 10 ee 54 32 8e 98 19 06 f7 28 19 ec ca 0c 73 3e ec 19 82 d3 15 60 ef 76 30 7e b7 93 eb bb 5d 2c df ed e2 f7 4e 30 2b e6 23 31 c4 c9 b3 2b 75 d3 c2 c1 ba d0 3c b3 e1 e3 0c c5 d7 a3 a0 34 8c 2a c2 e4 50 54 ad 4b fa fd 46 8d 06 76 2a 58 a2 7a 97 38 1a 54 62 7f 4e 82 19 55 54 89 dd 2c 92 6f 00 d5 90 11 37 9d b0 8a 54 24 22 d2 b0 05 6d 9c ff 24 0d de b6 ae a5 be 99 93 2d 29 25 f8 fb 85 42 4a 48 30 5b 2a 7e 92 22 7b 90 2d 87 22 80 0a 73 5d 7a 26 9c 56 14 95 21 df 2a 2a 22 93 27 1d ed 8e 5b 48 17 c1 4c 99 c7 03 af 2f 9f e6 c4 5a 47 c7 23 Data Ascii: +=4Z) dP6s$>>wI0,-~7 fDdUD!5mALofJ33T2(s>`v0~],N0+#1+u<4PTKFvXz8TbNUT,o7T$"m$-)%BJH0[~"{-"s]z&V!*"'[HL/ZG#
2025-04-28 15:33:48 UTC	1460	IN	Data Raw: 42 3c c8 0f cf 8a 90 a6 c7 6f ec 65 c4 0a d6 93 78 87 aa ce f9 52 5e 90 2b 42 80 41 8c 03 b8 05 f4 39 a5 59 8a 26 56 5d cf db 81 49 ef eb f5 ee 01 7b 2f c2 87 f6 e6 bd 88 6b 3d 7d b7 a8 f2 30 c7 4f df 1e 22 2b 86 ba 9f b0 34 e0 fb 91 7e 70 71 69 d4 ef 29 2f 12 dc ca 23 ea 34 3b 4c 6c 3a 85 fd a4 67 c2 39 a8 a0 07 97 a5 a9 90 c3 45 fa ce 12 3d 40 a0 87 c8 f3 7d 88 f3 5d a4 49 10 df 41 98 0c ff 1e b2 d4 30 0e 28 e4 71 24 a9 15 71 88 20 49 78 ba c3 e5 48 d1 ef 21 46 15 e1 fe 45 3c 8e 10 d5 12 0a 76 14 fe 07 56 6e c4 da 26 c9 65 47 7d fa b6 53 06 16 fe 44 80 12 0f f7 78 c4 1f 5b 81 df 72 b3 56 49 8e 65 32 40 a3 1b 61 cf 9a 2e 60 71 3c ed e2 04 10 96 76 77 e8 86 2d ee f0 6f 83 39 cf 68 b6 e0 f3 cd 1b 7c e5 47 fa e7 57 a1 39 45 34 87 a3 c9 54 03 32 95 7d 28 ef Data Ascii: B<oexR^+BA9Y&V]I{/k=}0O"+4~pqi)/#4;Ll:g9E=@}]IA0(q$q IxH!FE<vVn&eG}SDx[rVIe2@a.`q<vw-o9h\|GW9E4T2}(
2025-04-28 15:33:48 UTC	243	IN	Data Raw: 21 0a 1f b3 38 42 5f 74 18 da ef 1f b3 c7 d0 12 78 81 74 b8 3c 62 79 b4 00 3a f5 0b 87 b5 29 ca bf 8d 10 fe f9 cd e6 fb 00 5b a6 ed 2c c5 b7 74 05 2a 46 90 46 18 71 90 d3 fc ab 68 ca dd 1d 0e 9c b9 5c 82 fd 90 63 6a af e4 84 66 47 ef 6f e9 13 1d ba ee 89 76 2d 7a a2 7d cf aa a2 07 5a f2 44 9f c2 92 e7 b8 3e 39 ae 4f 7e 63 eb 13 45 c9 bd df 65 8a 56 f0 87 5d ad b8 e4 05 54 55 c7 1f 77 b8 8e 3b 5c c7 1d ae e3 0c 72 9c 41 8e 3b 5c 55 73 06 3e a1 51 e7 8c e3 f9 fd f1 fc fe 38 0f 1c cf ef 8f e7 f7 c7 f3 fb 8f e3 fc de 6d 10 f5 5c 9e a4 8e be db 47 df ed e3 ac 75 f4 dd 3e fa 6e 1f e7 d3 a3 ef f6 bd 66 54 e5 82 96 3a af 1e 6f 2d 1f 6f 2d 1f e7 d9 e3 ad e5 e3 ad e5 e3 ac 7c bc b5 fc 41 67 e8 6d ef ff 03 56 91 74 14 64 f5 00 00 Data Ascii: !8B_txt<by:)[,t*FFqh\cjfGov-z}ZD>9O~cEeV]TUw;\rA;\Us>Q8m\Gu>nfT:o-o-\|AgmVtd

Timestamp	Bytes transferred	Direction	Data
2025-04-28 15:33:48 UTC	1035	OUT	POST /g/collect?v=2&tid=G-GW7KZEW258&cid=1652206519.1745854423&gtm=45je54n0v884456208z8812274689za200zb812274689&aip=1&dma=0&gcd=13l3l3l3l1l1&npa=0&frm=0&tag_exp=102887800~103051953~103077950~103106314~103106316~103116025~103130360~103130362~103200001&ptag_exp=102887800~103051953~103071290~103077950~103106314~103106316~103116026~103130360~103130362~103200004 HTTP/1.1 host: stats.g.doubleclick.net content-length: 0 sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: / origin: https://parlatoscatering.com x-client-data: CKq1yQEIi7bJAQiktskBCKmdygEI0qDKAQig4coBCJahywEInP7MAQiFoM0B sec-fetch-site: cross-site sec-fetch-mode: no-cors sec-fetch-dest: empty sec-fetch-storage-access: active referer: https://parlatoscatering.com/ accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=4, i
2025-04-28 15:33:48 UTC	836	IN	HTTP/1.1 204 No Content access-control-allow-origin: https://parlatoscatering.com date: Mon, 28 Apr 2025 15:33:48 GMT pragma: no-cache expires: Fri, 01 Jan 1990 00:00:00 GMT cache-control: no-cache, no-store, must-revalidate access-control-allow-credentials: true content-type: text/plain cross-origin-resource-policy: cross-origin content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:122:0 cross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:122:0 report-to: {"group":"ascnsrsggc:122:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:122:0"}],} server: Golfe2 content-length: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
2025-04-28 15:33:48 UTC	1065	OUT	POST /g/collect?v=2&tid=G-JDDZWVEG5D&cid=1652206519.1745854423&gtm=45je54n0v888745312z8812274689za200zb812274689&aip=1&dma=0&gcd=13l3l3l3l1l1&npa=0&frm=0&tag_exp=102887800~103051953~103071290~103077950~103106314~103106316~103116025~103130360~103130362~103130498~103130500~103200001&ptag_exp=102887800~103051953~103071290~103077950~103106314~103106316~103116026~103130360~103130362~103200004 HTTP/1.1 host: stats.g.doubleclick.net content-length: 0 sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: / origin: https://parlatoscatering.com x-client-data: CKq1yQEIi7bJAQiktskBCKmdygEI0qDKAQig4coBCJahywEInP7MAQiFoM0B sec-fetch-site: cross-site sec-fetch-mode: no-cors sec-fetch-dest: empty sec-fetch-storage-access: active referer: https://parlatoscatering.com/ accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=4, i
2025-04-28 15:33:48 UTC	836	IN	HTTP/1.1 204 No Content access-control-allow-origin: https://parlatoscatering.com date: Mon, 28 Apr 2025 15:33:48 GMT pragma: no-cache expires: Fri, 01 Jan 1990 00:00:00 GMT cache-control: no-cache, no-store, must-revalidate access-control-allow-credentials: true content-type: text/plain cross-origin-resource-policy: cross-origin content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:122:0 cross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:122:0 report-to: {"group":"ascnsrsggc:122:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:122:0"}],} server: Golfe2 content-length: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

Timestamp	Bytes transferred	Direction	Data
2025-04-28 15:33:48 UTC	543	OUT	GET /euinc/number-changer.js HTTP/1.1 host: rw1.marchex.io sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: / sec-fetch-site: cross-site sec-fetch-mode: no-cors sec-fetch-dest: script sec-fetch-storage-access: active referer: https://parlatoscatering.com/ accept-encoding: identity accept-language: en-US,en;q=0.9
2025-04-28 15:33:48 UTC	490	IN	HTTP/1.1 200 OK date: Mon, 28 Apr 2025 15:33:48 GMT content-type: text/javascript content-length: 324 last-modified: Thu, 07 Nov 2024 15:43:41 GMT etag: "0x8DCFF42F4675771" x-ms-request-id: d2d6c558-201e-0066-1b09-b70960000000 x-ms-version: 2018-03-28 x-azure-ref: 20250428T153348Z-r185b9c99452kw7thC1PHXqskc000000136000000000aymf cache-control: public, max-age=300 x-fd-int-roxy-purgeid: 9 x-cache: TCP_REVALIDATED_HIT x-cache-info: L1_T2 x-cdn: AZUR accept-ranges: bytes
2025-04-28 15:33:48 UTC	324	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 20 20 20 20 69 66 20 28 76 73 5f 61 63 63 6f 75 6e 74 5f 69 64 29 20 7b 0d 0a 09 09 76 61 72 20 6a 73 2c 0d 0a 09 09 69 64 20 3d 20 22 6a 73 72 77 74 61 67 22 2c 0d 0a 09 09 72 65 66 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 27 73 63 72 69 70 74 27 29 5b 30 5d 3b 0d 0a 20 20 20 20 20 20 20 20 6a 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 0d 0a 09 09 6a 73 2e 69 64 20 3d 20 69 64 3b 0d 0a 09 09 6a 73 2e 61 73 79 6e 63 20 3d 20 74 72 75 65 3b 0d 0a 09 09 6a 73 2e 73 72 63 20 3d 20 22 68 74 74 70 73 3a 2f 2f 72 77 31 2e 6d 61 72 63 68 65 78 2e 69 6f 2f 64 6e 69 2f 6a 73 72 77 31 2f 22 2b 20 Data Ascii: (function() { if (vs_account_id) {var js,id = "jsrwtag",ref = document.getElementsByTagName('script')[0]; js = document.createElement('script');js.id = id;js.async = true;js.src = "https://rw1.marchex.io/dni/jsrw1/"+
2025-04-28 15:33:49 UTC	546	OUT	GET /dni/jsrw1/fwABAWC34EZ1vABg HTTP/1.1 host: rw1.marchex.io sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: / sec-fetch-site: cross-site sec-fetch-mode: no-cors sec-fetch-dest: script sec-fetch-storage-access: active referer: https://parlatoscatering.com/ accept-encoding: identity accept-language: en-US,en;q=0.9
2025-04-28 15:33:49 UTC	436	IN	HTTP/1.1 200 OK date: Mon, 28 Apr 2025 15:33:49 GMT content-type: application/javascript content-length: 35601 vary: Accept-Encoding access-control-allow-origin: * request-context: appId=cid-v1:dde100e2-d5f0-4e61-9393-5836966c1fc5 x-azure-ref: 20250428T153348Z-r185b9c99452kw7thC1PHXqskc000000136000000000aynz cache-control: public, max-age=300 x-fd-int-roxy-purgeid: 9 x-cache: TCP_MISS x-cdn: AZUR accept-ranges: bytes
2025-04-28 15:33:49 UTC	1460	IN	Data Raw: 2f 2f 20 50 41 54 45 4e 54 20 50 45 4e 44 49 4e 47 0a 0a 66 75 6e 63 74 69 6f 6e 20 5f 76 73 5f 70 6f 70 75 70 28 75 72 6c 2c 20 77 69 64 2c 20 68 74 29 7b 0a 20 20 20 20 76 61 72 20 77 69 6e 3b 0a 20 20 20 20 68 74 20 20 3d 20 68 74 20 20 7c 7c 20 36 30 30 3b 0a 20 20 20 20 77 69 64 20 3d 20 77 69 64 20 7c 7c 20 36 35 30 3b 0a 0a 20 20 20 20 77 69 6e 20 3d 20 77 69 6e 64 6f 77 2e 6f 70 65 6e 28 75 72 6c 2c 20 27 56 53 50 4f 50 55 50 27 2c 20 22 74 6f 6f 6c 62 61 72 3d 6e 6f 2c 73 74 61 74 75 73 3d 6e 6f 2c 6c 6f 63 61 74 69 6f 6e 3d 6e 6f 2c 6d 65 6e 75 62 61 72 3d 6e 6f 2c 22 2b 0a 20 20 20 20 20 20 20 20 22 72 65 73 69 7a 61 62 6c 65 3d 79 65 73 2c 73 63 72 6f 6c 6c 62 61 72 73 3d 79 65 73 2c 68 65 69 67 68 74 3d 22 20 2b 20 68 74 20 2b 20 22 2c 77 69 Data Ascii: // PATENT PENDINGfunction _vs_popup(url, wid, ht){ var win; ht = ht \|\| 600; wid = wid \|\| 650; win = window.open(url, 'VSPOPUP', "toolbar=no,status=no,location=no,menubar=no,"+ "resizable=yes,scrollbars=yes,height=" + ht + ",wi
2025-04-28 15:33:49 UTC	1460	IN	Data Raw: 20 76 73 5f 69 6e 74 6c 5f 63 6c 61 73 73 0a 20 20 20 20 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 72 75 65 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 66 69 6e 64 49 6e 74 6c 52 65 77 72 69 74 65 4e 75 6d 28 20 73 74 72 69 70 70 65 64 4e 75 6d 4f 6e 50 61 67 65 2c 20 69 73 45 31 36 34 2c 20 74 61 62 6c 65 4f 66 52 65 77 72 69 74 65 73 20 29 20 7b 0a 20 20 20 20 76 61 72 20 69 2c 20 72 65 77 72 69 74 65 43 61 6e 64 69 64 61 74 65 2c 20 61 6e 79 52 75 6c 65 2c 20 66 72 6f 6d 4e 75 6d 2c 20 69 6e 74 6c 5f 72 65 77 72 69 74 65 5f 6e 75 6d 3b 0a 20 20 20 20 76 61 72 20 6e 75 6d 4f 66 52 65 77 72 69 74 65 73 20 3d 20 74 61 62 6c 65 4f 66 52 65 77 72 69 74 65 73 2e 6c 65 Data Ascii: vs_intl_class ) { return true; } return false;}function findIntlRewriteNum( strippedNumOnPage, isE164, tableOfRewrites ) { var i, rewriteCandidate, anyRule, fromNum, intl_rewrite_num; var numOfRewrites = tableOfRewrites.le
2025-04-28 15:33:49 UTC	1460	IN	Data Raw: 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 6e 79 52 75 6c 65 20 3d 20 74 61 62 6c 65 4f 66 52 65 77 72 69 74 65 73 5b 69 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 20 74 61 62 6c 65 4f 66 52 65 77 72 69 74 65 73 5b 69 5d 2e 64 6f 6e 74 20 21 3d 3d 20 27 31 27 20 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 65 62 75 67 28 22 61 62 6f 75 74 20 74 6f 20 72 65 77 72 69 74 65 20 61 6e 79 20 6e 75 6d 62 65 72 20 77 69 74 68 20 22 20 2b 20 61 6e 79 52 75 6c 65 2e 6e 75 6d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 20 69 73 45 31 36 34 20 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 61 Data Ascii: } } else { anyRule = tableOfRewrites[i]; if( tableOfRewrites[i].dont !== '1' ) { debug("about to rewrite any number with " + anyRule.num); if( isE164 ) { return a
2025-04-28 15:33:49 UTC	1460	IN	Data Raw: 74 6c 52 65 77 72 69 74 65 4e 75 6d 62 65 72 20 3d 20 67 65 74 52 65 77 72 69 74 65 4e 75 6d 62 65 72 28 20 6d 61 74 63 68 2c 20 74 61 62 6c 65 4f 66 52 65 77 72 69 74 65 73 20 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 20 69 6e 74 6c 52 65 77 72 69 74 65 4e 75 6d 62 65 72 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 20 3d 20 6e 6f 64 65 2e 6e 6f 64 65 56 61 6c 75 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 6f 64 65 2e 6e 6f 64 65 56 61 6c 75 65 20 3d 20 74 2e 73 75 62 73 74 72 28 20 30 2c 20 6d 61 74 63 68 2e 69 6e 64 65 78 20 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2b 20 69 6e 74 6c 52 65 77 72 69 74 65 4e 75 6d 62 65 72 0a 20 20 20 Data Ascii: tlRewriteNumber = getRewriteNumber( match, tableOfRewrites ); if ( intlRewriteNumber) { t = node.nodeValue; node.nodeValue = t.substr( 0, match.index ) + intlRewriteNumber
2025-04-28 15:33:49 UTC	1460	IN	Data Raw: 65 4e 75 6d 62 65 72 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2b 20 74 2e 73 75 62 73 74 72 28 20 6d 61 74 63 68 2e 69 6e 64 65 78 20 2b 20 6d 61 74 63 68 5b 30 5d 2e 6c 65 6e 67 74 68 20 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 72 65 61 6b 3b 0a 0a 20 20 20 20 20 20 20 20 63 61 73 65 20 27 41 27 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 6e 6f 64 65 2e 68 72 65 66 20 3d 20 27 74 65 6c 3a 27 20 2b 20 65 73 63 46 75 6e 63 28 20 69 6e 74 6c 52 65 77 72 69 74 65 4e 75 6d 62 65 72 20 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6e 6f 64 65 2e 74 65 78 74 20 3d 20 69 6e 74 6c 52 65 77 72 69 74 65 4e 75 6d 62 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 72 65 61 6b 3b 0a 20 20 20 20 7d 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 67 65 74 47 65 Data Ascii: eNumber + t.substr( match.index + match[0].length ); break; case 'A': node.href = 'tel:' + escFunc( intlRewriteNumber ); node.text = intlRewriteNumber; break; }}function getGe
2025-04-28 15:33:49 UTC	1460	IN	Data Raw: 20 69 66 20 28 6d 75 74 61 74 69 6f 6e 73 4c 69 73 74 5b 6d 75 74 61 74 69 6f 6e 49 6e 64 65 78 5d 2e 61 64 64 65 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 20 21 3d 20 30 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 61 64 64 65 64 4e 6f 64 65 49 6e 64 65 78 20 3d 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 61 64 64 65 64 4e 6f 64 65 49 6e 64 65 78 20 3d 20 30 3b 20 61 64 64 65 64 4e 6f 64 65 49 6e 64 65 78 20 3c 20 6d 75 74 61 74 69 6f 6e 73 4c 69 73 74 5b 6d 75 74 61 74 69 6f 6e 49 6e 64 65 78 5d 2e 61 64 64 65 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 3b 20 2b 2b 61 64 64 65 64 4e 6f 64 65 49 6e 64 65 78 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: if (mutationsList[mutationIndex].addedNodes.length != 0) { var addedNodeIndex = 0; for (addedNodeIndex = 0; addedNodeIndex < mutationsList[mutationIndex].addedNodes.length; ++addedNodeIndex) {
2025-04-28 15:33:49 UTC	1460	IN	Data Raw: 73 2a 31 5c 5c 73 2a 5b 2e 2d 5d 3f 5c 5c 73 2a 29 3f 28 5c 5c 28 3f 29 28 5c 5c 64 2a 29 28 5c 5c 64 7b 33 7d 29 28 28 3f 3a 5b 29 5c 5c 73 2e 5c 5c 2d 5c 5c 78 41 44 5c 5c 78 42 37 5c 5c 75 32 30 31 30 5c 5c 75 32 30 31 31 5c 5c 75 32 30 31 33 5c 5c 75 32 30 31 34 5c 5c 75 32 30 31 35 5c 5c 75 32 30 32 32 5c 5c 75 32 30 32 37 5c 5c 75 32 30 34 33 5c 5c 75 32 30 36 33 5c 5c 75 32 32 31 32 5d 7c 25 32 30 29 2a 29 28 5c 5c 64 7b 33 7d 29 28 28 3f 3a 5b 5c 5c 73 2e 5c 5c 2d 5c 5c 78 41 44 5c 5c 78 42 37 5c 5c 75 32 30 31 30 5c 5c 75 32 30 31 31 5c 5c 75 32 30 31 33 5c 5c 75 32 30 31 34 5c 5c 75 32 30 31 35 5c 5c 75 32 30 32 32 5c 5c 75 32 30 32 37 5c 5c 75 32 30 34 33 5c 5c 75 32 30 36 33 5c 5c 75 32 32 31 32 5d 7c 25 32 30 29 2a 29 28 5c 5c 64 7b 34 7d 29 Data Ascii: s1\\s[.-]?\\s)?(\\(?)(\\d)(\\d{3})((?:[)\\s.\\-\\xAD\\xB7\\u2010\\u2011\\u2013\\u2014\\u2015\\u2022\\u2027\\u2043\\u2063\\u2212]\|%20))(\\d{3})((?:[\\s.\\-\\xAD\\xB7\\u2010\\u2011\\u2013\\u2014\\u2015\\u2022\\u2027\\u2043\\u2063\\u2212]\|%20))(\\d{4})
2025-04-28 15:33:49 UTC	1460	IN	Data Raw: 20 20 20 20 20 20 20 69 66 28 20 74 68 69 73 2e 64 62 67 20 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 20 21 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 20 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 6d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 6c 65 72 74 28 6d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 2c 0a 0a 20 20 20 20 62 61 73 65 36 34 3a 20 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 Data Ascii: if( this.dbg ){ if (typeof console != 'undefined' && typeof console.log == 'function') { console.log(m); } else { alert(m); } } }, base64: "ABCDEFGHIJKLMNOPQRSTUVW
2025-04-28 15:33:49 UTC	1460	IN	Data Raw: 6f 6e 28 6e 29 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 5f 76 73 6e 6f 63 6f 6f 6b 69 65 73 29 20 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 76 20 3d 20 74 68 69 73 2e 67 65 74 5f 73 70 65 63 69 66 69 63 5f 63 6f 6f 6b 69 65 28 6e 29 3b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 76 20 3d 3d 20 6e 75 6c 6c 20 3f 20 6e 75 6c 6c 20 3a 20 74 68 69 73 2e 75 6e 65 73 63 28 76 29 3b 0a 20 20 20 20 7d 2c 0a 0a 20 20 20 20 77 72 69 74 65 5f 6e 75 6d 64 61 74 61 3a 20 66 75 6e 63 74 69 6f 6e 28 6e 61 6d 65 2c 20 76 61 6c 75 65 2c 20 65 78 70 29 20 7b 0a 20 20 20 20 20 20 20 20 74 68 69 73 2e 6e 75 6d 64 61 74 61 20 3d 20 5b 6e 61 6d 65 2c 76 61 6c 75 65 2c 65 78 70 5d 3b 0a 20 20 20 20 7d 2c 0a 0a 20 20 20 20 6e 75 6d 64 61 74 Data Ascii: on(n){ if (_vsnocookies) return null; var v = this.get_specific_cookie(n); return v == null ? null : this.unesc(v); }, write_numdata: function(name, value, exp) { this.numdata = [name,value,exp]; }, numdat
2025-04-28 15:33:49 UTC	715	OUT	GET /euinc/getnumdata.js?var=_vsrkpd.d;acc=fwABAWC34EZ1vABg;cky=rkpd_fwABAWC34EZ1vABg;ign=1;url=https%3A%2F%2Fparlatoscatering.com%2F%3Futm_source%3Dgoogle%26utm_medium%3Dorganic%26utm_campaign%3Dgmb; HTTP/1.1 host: rw1.marchex.io sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: / sec-fetch-site: cross-site sec-fetch-mode: no-cors sec-fetch-dest: script sec-fetch-storage-access: active referer: https://parlatoscatering.com/ accept-encoding: identity accept-language: en-US,en;q=0.9
2025-04-28 15:33:49 UTC	1323	IN	HTTP/1.1 200 OK date: Mon, 28 Apr 2025 15:33:49 GMT content-type: text/javascript p3p: CP="NOI COR NID TAI OUR BUS STA" vary: Accept-Encoding,User-Agent strict-transport-security: max-age=31536000; includeSubDomains x-frame-options: SAMEORIGIN x-content-type-options: nosniff referrer-policy: same-origin content-security-policy: default-src 'self' www.google-analytics.com privacy-policy.truste.com .marchex.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' www.google-analytics.com privacy-policy.truste.com .marchex.io; style-src 'self' 'unsafe-inline' fonts.googleapis.com; img-src 'self' privacy-policy.truste.com; font-src 'self' fonts.gstatic.com fonts.googleapis.com; media-src 'self'; permissions-policy: accelerometer=(), autoplay=, camera=(), cross-origin-isolated=(), display-capture=(), document-domain=, encrypted-media=, fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=, payment=(), picture-in-picture=(), publickey-credentials-get=, screen-wake-lock=(), sync-xhr=, usb=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(), hid=(), idle-detection=(), serial=(), window-placement=() x-azure-ref: 20250428T153349Z-r185b9c99452kw7thC1PHXqskc000000136000000000ayqx x-cdn: AZUR x-cache: CONFIG_NOCACHE content-length: 249
2025-04-28 15:33:51 UTC	546	OUT	GET /dni/jsrw1/fwABAV2mSHhvMQA0 HTTP/1.1 host: rw1.marchex.io sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: / sec-fetch-site: cross-site sec-fetch-mode: no-cors sec-fetch-dest: script sec-fetch-storage-access: active referer: https://parlatoscatering.com/ accept-encoding: identity accept-language: en-US,en;q=0.9
2025-04-28 15:33:51 UTC	436	IN	HTTP/1.1 200 OK date: Mon, 28 Apr 2025 15:33:50 GMT content-type: application/javascript content-length: 35601 vary: Accept-Encoding access-control-allow-origin: * request-context: appId=cid-v1:dde100e2-d5f0-4e61-9393-5836966c1fc5 x-azure-ref: 20250428T153350Z-r185b9c99452kw7thC1PHXqskc000000136000000000ayrs cache-control: public, max-age=300 x-fd-int-roxy-purgeid: 9 x-cache: TCP_MISS x-cdn: AZUR accept-ranges: bytes
2025-04-28 15:33:51 UTC	715	OUT	GET /euinc/getnumdata.js?var=_vsrkpd.d;acc=fwABAV2mSHhvMQA0;cky=rkpd_fwABAV2mSHhvMQA0;ign=1;url=https%3A%2F%2Fparlatoscatering.com%2F%3Futm_source%3Dgoogle%26utm_medium%3Dorganic%26utm_campaign%3Dgmb; HTTP/1.1 host: rw1.marchex.io sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: / sec-fetch-site: cross-site sec-fetch-mode: no-cors sec-fetch-dest: script sec-fetch-storage-access: active referer: https://parlatoscatering.com/ accept-encoding: identity accept-language: en-US,en;q=0.9
2025-04-28 15:33:51 UTC	1323	IN	HTTP/1.1 200 OK date: Mon, 28 Apr 2025 15:33:51 GMT content-type: text/javascript p3p: CP="NOI COR NID TAI OUR BUS STA" vary: Accept-Encoding,User-Agent strict-transport-security: max-age=31536000; includeSubDomains x-frame-options: SAMEORIGIN x-content-type-options: nosniff referrer-policy: same-origin content-security-policy: default-src 'self' www.google-analytics.com privacy-policy.truste.com .marchex.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' www.google-analytics.com privacy-policy.truste.com .marchex.io; style-src 'self' 'unsafe-inline' fonts.googleapis.com; img-src 'self' privacy-policy.truste.com; font-src 'self' fonts.gstatic.com fonts.googleapis.com; media-src 'self'; permissions-policy: accelerometer=(), autoplay=, camera=(), cross-origin-isolated=(), display-capture=(), document-domain=, encrypted-media=, fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=, payment=(), picture-in-picture=(), publickey-credentials-get=, screen-wake-lock=(), sync-xhr=, usb=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(), hid=(), idle-detection=(), serial=(), window-placement=() x-azure-ref: 20250428T153351Z-r185b9c99452kw7thC1PHXqskc000000136000000000ayt0 x-cdn: AZUR x-cache: CONFIG_NOCACHE content-length: 249

Timestamp	Bytes transferred	Direction	Data
2025-04-28 15:33:48 UTC	1460	OUT	GET /pagead/viewthroughconversion/undefined/?random=1745854427628&cv=11&fst=1745854427628&bg=ffffff&guid=ON&async=1&gtm=45be54n0z8812274689za201zb9179331475&gcd=13l3l3l3l1l1&dma=0&tag_exp=102887800~103051953~103071290~103077950~103106314~103106316~103116025~103130360~103130362~103200001&ptag_exp=102887800~103051953~103071290~103077950~103106314~103106316~103116026~103130360~103130362~103200004&u_w=1280&u_h=1024&url=https%3A%2F%2Fparlatoscatering.com%2F%3Futm_source%3Dgoogle%26utm_medium%3Dorganic%26utm_campaign%3Dgmb&hn=www.googleadservices.com&frm=0&tiba=The%20Best%20Italian%20Catering%20Service%20in%20Oakville%20%7C%20Parlato%27s%20Catering&npa=0&pscdl=noapi&auid=834765053.1745854427&uaa=x86&uab=64&uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&_tu=Cg&rfmt=3&fmt=4 HTTP/1.1 host: googleads.g.doubleclick.net sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: / x-client-data: CKq1yQEIi7bJAQiktskBCKmdygEI0qDKAQig4coBCJahywEInP7MAQiFoM0B sec-fetch-site: cross-site sec-fetch-mode: no-cors sec-fetch-dest: script sec-fetch-storage-access: active referer: https://parlatoscatering.com/ accept-encoding: identity accept-languag
2025-04-28 15:33:48 UTC	21	OUT	Data Raw: 65 3a 20 65 6e 2d 55 53 2c 65 6e 3b 71 3d 30 2e 39 0d 0a 0d 0a Data Ascii: e: en-US,en;q=0.9
2025-04-28 15:33:48 UTC	817	IN	HTTP/1.1 200 OK p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" timing-allow-origin: * cross-origin-resource-policy: cross-origin date: Mon, 28 Apr 2025 15:33:48 GMT pragma: no-cache expires: Fri, 01 Jan 1990 00:00:00 GMT cache-control: no-cache, must-revalidate content-type: text/javascript; charset=UTF-8 x-content-type-options: nosniff content-disposition: attachment; filename="f.txt" server: cafe x-xss-protection: 0 set-cookie: test_cookie=CheckForPermission; expires=Mon, 28-Apr-2025 15:48:48 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 accept-ranges: none vary: Accept-Encoding content-length: 4113
2025-04-28 15:33:48 UTC	1460	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6b 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 64 2c 62 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 64 5d 3d 62 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 Data Ascii: (function(){var s = {};(function(){var k=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,d,b){if(a==Array.prototype\|\|a==Object.prototype)return a;a[d]=b.value;return a};function l(a){a=["object"==typeof globalThis&&globalThis,a
2025-04-28 15:33:48 UTC	1460	IN	Data Raw: 65 22 2c 63 72 65 64 65 6e 74 69 61 6c 73 3a 22 69 6e 63 6c 75 64 65 22 2c 6b 65 65 70 61 6c 69 76 65 3a 21 30 2c 6d 65 74 68 6f 64 3a 22 50 4f 53 54 22 2c 6d 6f 64 65 3a 22 6e 6f 2d 63 6f 72 73 22 2c 72 65 64 69 72 65 63 74 3a 22 66 6f 6c 6c 6f 77 22 7d 3b 66 75 6e 63 74 69 6f 6e 20 44 28 61 29 7b 69 66 28 74 79 70 65 6f 66 20 7a 2e 66 65 74 63 68 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 7b 76 61 72 20 64 3d 75 28 4f 62 6a 65 63 74 2c 22 61 73 73 69 67 6e 22 29 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 2c 7b 7d 2c 43 29 3b 74 72 79 7b 76 61 72 20 62 3d 7a 2e 66 65 74 63 68 28 61 2c 64 29 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2c 21 30 7d 63 Data Ascii: e",credentials:"include",keepalive:!0,method:"POST",mode:"no-cors",redirect:"follow"};function D(a){if(typeof z.fetch==="function"){var d=u(Object,"assign").call(Object,{},C);try{var b=z.fetch(a,d);if(b)return b.then(function(){}).catch(function(){}),!0}c
2025-04-28 15:33:48 UTC	1193	IN	Data Raw: 6f 67 6c 65 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 31 70 2d 75 73 65 72 2d 6c 69 73 74 2f 75 6e 64 65 66 69 6e 65 64 2f 3f 72 61 6e 64 6f 6d 5c 78 33 64 31 37 34 35 38 35 34 34 32 37 36 32 38 5c 78 32 36 63 76 5c 78 33 64 31 31 5c 78 32 36 66 73 74 5c 78 33 64 31 37 34 35 38 35 32 34 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 35 34 6e 30 7a 38 38 31 32 32 37 34 36 38 39 7a 61 32 30 31 7a 62 39 31 37 39 33 33 31 34 37 35 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 74 61 67 5f 65 78 70 5c 78 33 64 31 30 32 38 38 37 38 30 30 7e 31 30 33 30 35 Data Ascii: ogle.com/pagead/1p-user-list/undefined/?random\x3d1745854427628\x26cv\x3d11\x26fst\x3d1745852400000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be54n0z8812274689za201zb9179331475\x26gcd\x3d13l3l3l3l1l1\x26dma\x3d0\x26tag_exp\x3d102887800~10305

Timestamp	Bytes transferred	Direction	Data
2025-04-28 15:33:48 UTC	1460	OUT	GET /td/rul/undefined?random=1745854427628&cv=11&fst=1745854427628&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be54n0z8812274689za201zb9179331475&gcd=13l3l3l3l1l1&dma=0&tag_exp=102887800~103051953~103071290~103077950~103106314~103106316~103116025~103130360~103130362~103200001&ptag_exp=102887800~103051953~103071290~103077950~103106314~103106316~103116026~103130360~103130362~103200004&u_w=1280&u_h=1024&url=https%3A%2F%2Fparlatoscatering.com%2F%3Futm_source%3Dgoogle%26utm_medium%3Dorganic%26utm_campaign%3Dgmb&hn=www.googleadservices.com&frm=0&tiba=The%20Best%20Italian%20Catering%20Service%20in%20Oakville%20%7C%20Parlato%27s%20Catering&npa=0&pscdl=noapi&auid=834765053.1745854427&uaa=x86&uab=64&uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&_tu=Cg HTTP/1.1 host: td.doubleclick.net sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" upgrade-insecure-requests: 1 user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 x-browser-channel: stable x-browser-year: 2025 x-browser-validation: wTKGXmLo+sPWz1JKKbFzUyHly1Q= x-browser-copyright: Copyright 2025 Google LL
2025-04-28 15:33:48 UTC	334	OUT	Data Raw: 43 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0d 0a 78 2d 63 6c 69 65 6e 74 2d 64 61 74 61 3a 20 43 4b 71 31 79 51 45 49 69 37 62 4a 41 51 69 6b 74 73 6b 42 43 4b 6d 64 79 67 45 49 30 71 44 4b 41 51 69 67 34 63 6f 42 43 4a 61 68 79 77 45 49 6e 50 37 4d 41 51 69 46 6f 4d 30 42 0d 0a 73 65 63 2d 66 65 74 63 68 2d 73 69 74 65 3a 20 63 72 6f 73 73 2d 73 69 74 65 0d 0a 73 65 63 2d 66 65 74 63 68 2d 6d 6f 64 65 3a 20 6e 61 76 69 67 61 74 65 0d 0a 73 65 63 2d 66 65 74 63 68 2d 64 65 73 74 3a 20 69 66 72 61 6d 65 0d 0a 73 65 63 2d 66 65 74 63 68 2d 73 74 6f 72 61 67 65 2d 61 63 63 65 73 73 3a 20 61 63 74 69 76 65 0d 0a 72 65 66 65 72 65 72 3a 20 68 74 74 70 73 3a 2f 2f 70 61 72 6c 61 74 6f 73 63 61 74 65 72 69 6e 67 2e 63 6f 6d 2f 0d 0a 61 Data Ascii: C. All rights reserved.x-client-data: CKq1yQEIi7bJAQiktskBCKmdygEI0qDKAQig4coBCJahywEInP7MAQiFoM0Bsec-fetch-site: cross-sitesec-fetch-mode: navigatesec-fetch-dest: iframesec-fetch-storage-access: activereferer: https://parlatoscatering.com/a
2025-04-28 15:33:48 UTC	758	IN	HTTP/1.1 200 OK p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" timing-allow-origin: * cross-origin-resource-policy: cross-origin date: Mon, 28 Apr 2025 15:33:48 GMT pragma: no-cache expires: Fri, 01 Jan 1990 00:00:00 GMT cache-control: no-cache, must-revalidate content-type: text/html; charset=UTF-8 x-content-type-options: nosniff server: cafe x-xss-protection: 0 set-cookie: test_cookie=CheckForPermission; expires=Mon, 28-Apr-2025 15:48:48 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 accept-ranges: none vary: Accept-Encoding content-length: 13
2025-04-28 15:33:48 UTC	13	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <html></html>

Timestamp	Bytes transferred	Direction	Data
2025-04-28 15:33:49 UTC	1045	OUT	GET /tr/?id=879485519444738&ev=PageView&dl=https%3A%2F%2Fparlatoscatering.com%2F%3Futm_source%3Dgoogle%26utm_medium%3Dorganic%26utm_campaign%3Dgmb&rl=&if=false&ts=1745854427839&sw=1280&sh=1024&v=next&r=stable&a=wordpress-6.7.2-4.0.0&ec=0&o=12318&eid=ob3_plugin-set_2da3bb69388ed1bff17b4aca9a5a6a5c3bea1ba8efda920e2a3321af5cba10fc&fbp=fb.1.1745854427836.239607434665111749&cs_est=true&ler=empty&cdl=API_unavailable&it=1745854427372&coo=false&exp=k0&rqm=GET HTTP/1.1 host: www.facebook.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 sec-fetch-site: cross-site sec-fetch-mode: no-cors sec-fetch-dest: image sec-fetch-storage-access: active referer: https://parlatoscatering.com/ accept-encoding: identity accept-language: en-US,en;q=0.9 priority: i
2025-04-28 15:33:49 UTC	446	IN	HTTP/1.1 200 OK content-type: text/plain access-control-allow-origin: access-control-allow-credentials: true strict-transport-security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin content-length: 0 server: proxygen-bolt x-fb-connection-quality: GOOD; q=0.7, rtt=143, rtx=0, c=10, mss=1346, tbw=3556, tp=-1, tpl=-1, uplat=0, ullat=0 alt-svc: h3=":443"; ma=86400 date: Mon, 28 Apr 2025 15:33:48 GMT
2025-04-28 15:33:49 UTC	938	OUT	GET /tr/?id=2368513903501669&ev=PageView&dl=https%3A%2F%2Fparlatoscatering.com%2F%3Futm_source%3Dgoogle%26utm_medium%3Dorganic%26utm_campaign%3Dgmb&rl=&if=false&ts=1745854428410&sw=1280&sh=1024&v=next&r=stable&ec=0&o=12316&fbp=fb.1.1745854427836.239607434665111749&cs_est=true&ler=empty&cdl=API_unavailable&it=1745854427372&coo=false&exp=k0&rqm=GET HTTP/1.1 host: www.facebook.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 sec-fetch-site: cross-site sec-fetch-mode: no-cors sec-fetch-dest: image sec-fetch-storage-access: active referer: https://parlatoscatering.com/ accept-encoding: identity accept-language: en-US,en;q=0.9 priority: i
2025-04-28 15:33:49 UTC	446	IN	HTTP/1.1 200 OK content-type: text/plain access-control-allow-origin: access-control-allow-credentials: true strict-transport-security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin content-length: 0 server: proxygen-bolt x-fb-connection-quality: GOOD; q=0.7, rtt=143, rtx=0, c=10, mss=1346, tbw=3936, tp=-1, tpl=-1, uplat=0, ullat=0 alt-svc: h3=":443"; ma=86400 date: Mon, 28 Apr 2025 15:33:49 GMT
2025-04-28 15:33:49 UTC	1204	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=879485519444738&ev=PageView&dl=https%3A%2F%2Fparlatoscatering.com%2F%3Futm_source%3Dgoogle%26utm_medium%3Dorganic%26utm_campaign%3Dgmb&rl=&if=false&ts=1745854427839&sw=1280&sh=1024&v=next&r=stable&a=wordpress-6.7.2-4.0.0&ec=0&o=12318&eid=ob3_plugin-set_2da3bb69388ed1bff17b4aca9a5a6a5c3bea1ba8efda920e2a3321af5cba10fc&fbp=fb.1.1745854427836.239607434665111749&cs_est=true&ler=empty&cdl=API_unavailable&it=1745854427372&coo=false&exp=k0&rqm=FGET HTTP/1.1 host: www.facebook.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 attribution-reporting-eligible: event-source, trigger, not-navigation-source attribution-reporting-support: not-os, web sec-fetch-site: cross-site sec-fetch-mode: no-cors sec-fetch-dest: image sec-fetch-storage-access: active referer: https://parlatoscatering.com/ accept-encoding: identity accept-language: en-US,en;q=0.9 priority: i
2025-04-28 15:33:49 UTC	1460	IN	HTTP/1.1 200 OK vary: Accept-Encoding content-type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown&brsid=7498387673549852831&cpp=C3&cv=1022290433&st=1745854428983", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown&brsid=7498387673549852831&cpp=C3&cv=1022290433&st=1745854428983"}]}, {"max_age":3600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown&brsid=7498387673549852831&cpp=C3&cv=1022290433&st=1745854428983"}],"group":"network-errors"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src blob: 'self' https://.fbsbx.com .facebook.com .fbcdn.net;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'nonce-b9BapjUJ' blob: data: 'self' connect.facebook.net 'wasm-unsafe-eval' https://.google-analytics.com .google.com;style-src .fbcdn.net data: .facebook.com 'unsafe-inline' https://fonts.googleapis.com;connect-s
2025-04-28 15:33:49 UTC	1460	IN	Data Raw: 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 77 73 73 3a 2f 2f 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 3a 2a 20 77 73 73 3a 2f 2f 2a 2e 77 68 61 74 73 61 70 70 2e 63 6f 6d 3a 2a 20 77 73 73 3a 2f 2f 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 61 74 74 61 63 68 6d 65 6e 74 2e 66 62 73 62 78 2e 63 6f 6d 20 77 73 3a 2f 2f 6c 6f 63 61 6c 68 6f 73 74 3a 2a 20 62 6c 6f 62 3a 20 2a 2e 63 64 6e 69 6e 73 74 61 67 72 61 6d 2e 63 6f 6d 20 27 73 65 6c 66 27 20 68 74 74 70 3a 2f 2f 6c 6f 63 61 6c 68 6f 73 74 3a 33 31 30 33 20 77 73 73 3a 2f 2f 67 61 74 65 77 61 79 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 77 73 73 3a 2f 2f 65 64 67 65 2d 63 68 61 Data Ascii: rc .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com:* wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-cha
2025-04-28 15:33:49 UTC	1460	IN	Data Raw: 66 62 73 62 78 2e 63 6f 6d 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 3b 6f 62 6a 65 63 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 3b 77 6f 72 6b 65 72 2d 73 72 63 20 62 6c 6f 62 3a 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 64 61 74 61 3a 3b 62 6c 6f 63 6b 2d 61 6c 6c 2d 6d 69 78 65 64 2d 63 6f 6e 74 65 6e 74 3b 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 0d 0a 64 6f 63 75 6d 65 6e 74 2d 70 6f 6c 69 63 79 3a 20 66 6f 72 63 65 2d 6c 6f 61 64 2d 61 74 2d 74 6f 70 0d 0a 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c Data Ascii: fbsbx.com .facebook.com .fbcdn.net;object-src data: blob: 'self' https://.fbsbx.com .facebook.com .fbcdn.net;worker-src blob: .facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;document-policy: force-load-at-toppermissions-pol
2025-04-28 15:33:49 UTC	503	IN	Data Raw: 65 78 70 69 72 65 73 3a 20 53 61 74 2c 20 30 31 20 4a 61 6e 20 32 30 30 30 20 30 30 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 78 2d 63 6f 6e 74 65 6e 74 2d 74 79 70 65 2d 6f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 78 2d 78 73 73 2d 70 72 6f 74 65 63 74 69 6f 6e 3a 20 30 0d 0a 78 2d 66 72 61 6d 65 2d 6f 70 74 69 6f 6e 73 3a 20 44 45 4e 59 0d 0a 6f 72 69 67 69 6e 2d 61 67 65 6e 74 2d 63 6c 75 73 74 65 72 3a 20 3f 31 0d 0a 73 74 72 69 63 74 2d 74 72 61 6e 73 70 6f 72 74 2d 73 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 31 35 35 35 32 30 30 30 3b 20 70 72 65 6c 6f 61 64 0d 0a 78 2d 66 62 2d 64 65 62 75 67 3a 20 78 68 38 34 64 54 38 79 33 51 4f 62 6e 38 42 45 57 64 33 6e 35 74 75 4a 78 51 54 44 36 39 2f 41 37 63 37 47 58 62 47 32 57 64 36 42 72 32 Data Ascii: expires: Sat, 01 Jan 2000 00:00:00 GMTx-content-type-options: nosniffx-xss-protection: 0x-frame-options: DENYorigin-agent-cluster: ?1strict-transport-security: max-age=15552000; preloadx-fb-debug: xh84dT8y3QObn8BEWd3n5tuJxQTD69/A7c7GXbG2Wd6Br2
2025-04-28 15:33:49 UTC	67	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc-IENDB`
2025-04-28 15:33:49 UTC	1069	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=2368513903501669&ev=PageView&dl=https%3A%2F%2Fparlatoscatering.com%2F%3Futm_source%3Dgoogle%26utm_medium%3Dorganic%26utm_campaign%3Dgmb&rl=&if=false&ts=1745854428410&sw=1280&sh=1024&v=next&r=stable&ec=0&o=12316&fbp=fb.1.1745854427836.239607434665111749&cs_est=true&ler=empty&cdl=API_unavailable&it=1745854427372&coo=false&exp=k0&rqm=FGET HTTP/1.1 host: www.facebook.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 attribution-reporting-eligible: event-source, trigger attribution-reporting-support: web=os sec-fetch-site: cross-site sec-fetch-mode: no-cors sec-fetch-dest: image sec-fetch-storage-access: active referer: https://parlatoscatering.com/ accept-encoding: identity accept-language: en-US,en;q=0.9 priority: i
2025-04-28 15:33:49 UTC	1460	IN	HTTP/1.1 200 OK vary: Accept-Encoding content-type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown&brsid=7498387677051997145&cpp=C3&cv=1022290433&st=1745854429072", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown&brsid=7498387677051997145&cpp=C3&cv=1022290433&st=1745854429072"}]}, {"max_age":3600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown&brsid=7498387677051997145&cpp=C3&cv=1022290433&st=1745854429072"}],"group":"network-errors"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src blob: 'self' https://.fbsbx.com .facebook.com .fbcdn.net;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'nonce-dZMnQNO2' blob: data: 'self' connect.facebook.net 'wasm-unsafe-eval' https://.google-analytics.com .google.com;style-src .fbcdn.net data: .facebook.com 'unsafe-inline' https://fonts.googleapis.com;connect-s
2025-04-28 15:33:49 UTC	1460	IN	Data Raw: 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 77 73 73 3a 2f 2f 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 3a 2a 20 77 73 73 3a 2f 2f 2a 2e 77 68 61 74 73 61 70 70 2e 63 6f 6d 3a 2a 20 77 73 73 3a 2f 2f 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 61 74 74 61 63 68 6d 65 6e 74 2e 66 62 73 62 78 2e 63 6f 6d 20 77 73 3a 2f 2f 6c 6f 63 61 6c 68 6f 73 74 3a 2a 20 62 6c 6f 62 3a 20 2a 2e 63 64 6e 69 6e 73 74 61 67 72 61 6d 2e 63 6f 6d 20 27 73 65 6c 66 27 20 68 74 74 70 3a 2f 2f 6c 6f 63 61 6c 68 6f 73 74 3a 33 31 30 33 20 77 73 73 3a 2f 2f 67 61 74 65 77 61 79 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 77 73 73 3a 2f 2f 65 64 67 65 2d 63 68 61 Data Ascii: rc .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com:* wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-cha
2025-04-28 15:33:49 UTC	1460	IN	Data Raw: 66 62 73 62 78 2e 63 6f 6d 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 3b 6f 62 6a 65 63 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 3b 77 6f 72 6b 65 72 2d 73 72 63 20 62 6c 6f 62 3a 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 64 61 74 61 3a 3b 62 6c 6f 63 6b 2d 61 6c 6c 2d 6d 69 78 65 64 2d 63 6f 6e 74 65 6e 74 3b 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 0d 0a 64 6f 63 75 6d 65 6e 74 2d 70 6f 6c 69 63 79 3a 20 66 6f 72 63 65 2d 6c 6f 61 64 2d 61 74 2d 74 6f 70 0d 0a 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c Data Ascii: fbsbx.com .facebook.com .fbcdn.net;object-src data: blob: 'self' https://.fbsbx.com .facebook.com .fbcdn.net;worker-src blob: .facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;document-policy: force-load-at-toppermissions-pol
2025-04-28 15:33:49 UTC	527	IN	Data Raw: 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 65 78 70 69 72 65 73 3a 20 53 61 74 2c 20 30 31 20 4a 61 6e 20 32 30 30 30 20 30 30 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 78 2d 63 6f 6e 74 65 6e 74 2d 74 79 70 65 2d 6f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 78 2d 78 73 73 2d 70 72 6f 74 65 63 74 69 6f 6e 3a 20 30 0d 0a 78 2d 66 72 61 6d 65 2d 6f 70 74 69 6f 6e 73 3a 20 44 45 4e 59 0d 0a 6f 72 69 67 69 6e 2d 61 67 65 6e 74 2d 63 6c 75 73 74 65 72 3a 20 3f 31 0d 0a 73 74 72 69 63 74 2d 74 72 61 6e 73 70 6f 72 74 2d 73 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 31 35 35 35 32 30 30 30 3b 20 70 72 65 6c 6f 61 64 0d 0a 78 2d 66 62 2d 64 65 62 75 67 3a 20 5a 6e 67 64 36 37 68 72 33 2b 64 5a 47 2b 6e 74 37 31 4a 4d 38 6a Data Ascii: cache, must-revalidateexpires: Sat, 01 Jan 2000 00:00:00 GMTx-content-type-options: nosniffx-xss-protection: 0x-frame-options: DENYorigin-agent-cluster: ?1strict-transport-security: max-age=15552000; preloadx-fb-debug: Zngd67hr3+dZG+nt71JM8j
2025-04-28 15:33:49 UTC	67	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc-IENDB`

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://parlatoscatering.com/?utm_source=google&utm_medium=organic&utm_campaign=gmb

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 191

Chrome Cache Entry: 192

Chrome Cache Entry: 193

Chrome Cache Entry: 194

Chrome Cache Entry: 195

Chrome Cache Entry: 196

Chrome Cache Entry: 197

Chrome Cache Entry: 198

Chrome Cache Entry: 199

Chrome Cache Entry: 200

Chrome Cache Entry: 201

Chrome Cache Entry: 202

Chrome Cache Entry: 203

Chrome Cache Entry: 204

Chrome Cache Entry: 205

Chrome Cache Entry: 206

Chrome Cache Entry: 207

Chrome Cache Entry: 208

Chrome Cache Entry: 209

Chrome Cache Entry: 210

Chrome Cache Entry: 211

Chrome Cache Entry: 212

Chrome Cache Entry: 213

Chrome Cache Entry: 214

Chrome Cache Entry: 215

Chrome Cache Entry: 216

Chrome Cache Entry: 217

Chrome Cache Entry: 218

Chrome Cache Entry: 219

Chrome Cache Entry: 220

Windows Analysis Report
https://parlatoscatering.com/?utm_source=google&utm_medium=organic&utm_campaign=gmb

Timestamp	Bytes transferred	Direction	Data
2025-04-28 15:33:49 UTC	639	OUT	POST /google-ads/ HTTP/1.1 host: process.iconnode.com content-length: 0 sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" content-type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 accept: / origin: https://parlatoscatering.com sec-fetch-site: cross-site sec-fetch-mode: cors sec-fetch-dest: empty referer: https://parlatoscatering.com/ accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=1, i
2025-04-28 15:33:49 UTC	287	IN	HTTP/1.1 200 OK date: Mon, 28 Apr 2025 15:33:48 GMT content-type: text/html; charset=UTF-8 content-length: 0 server: Apache x-powered-by: PHP/8.3.17 access-control-allow-origin: https://parlatoscatering.com access-control-allow-credentials: true access-control-max-age: 86400

Timestamp	Bytes transferred	Direction	Data
2025-04-28 15:33:49 UTC	655	OUT	GET /privacy_sandbox/topics/registration/?id=879485519444738 HTTP/1.1 host: www.facebook.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: / sec-browsing-topics: ();p=P0000000000000000000000000000000 origin: https://parlatoscatering.com sec-fetch-site: cross-site sec-fetch-mode: cors sec-fetch-dest: empty referer: https://parlatoscatering.com/ accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=1, i
2025-04-28 15:33:49 UTC	1460	IN	HTTP/1.1 200 OK content-type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown&brsid=7498387677196269869&cpp=C3&cv=1022290433&st=1745854429004", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown&brsid=7498387677196269869&cpp=C3&cv=1022290433&st=1745854429004"}]}, {"max_age":3600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown&brsid=7498387677196269869&cpp=C3&cv=1022290433&st=1745854429004"}],"group":"network-errors"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src blob: 'self' https://.fbsbx.com .facebook.com .fbcdn.net;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'nonce-kbZ1s50B' blob: data: 'self' connect.facebook.net 'wasm-unsafe-eval' https://.google-analytics.com .google.com;style-src .fbcdn.net data: .facebook.com 'unsafe-inline' https://fonts.googleapis.com;connect-src *.facebook.com faceb
2025-04-28 15:33:49 UTC	1460	IN	Data Raw: 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 77 73 73 3a 2f 2f 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 3a 2a 20 77 73 73 3a 2f 2f 2a 2e 77 68 61 74 73 61 70 70 2e 63 6f 6d 3a 2a 20 77 73 73 3a 2f 2f 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 61 74 74 61 63 68 6d 65 6e 74 2e 66 62 73 62 78 2e 63 6f 6d 20 77 73 3a 2f 2f 6c 6f 63 61 6c 68 6f 73 74 3a 2a 20 62 6c 6f 62 3a 20 2a 2e 63 64 6e 69 6e 73 74 61 67 72 61 6d 2e 63 6f 6d 20 27 73 65 6c 66 27 20 68 74 74 70 3a 2f 2f 6c 6f 63 61 6c 68 6f 73 74 3a 33 31 30 33 20 77 73 73 3a 2f 2f 67 61 74 65 77 61 79 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 77 73 73 3a 2f 2f 65 64 67 65 2d 63 68 61 74 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 77 73 73 3a 2f 2f 73 6e Data Ascii: ook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://sn
2025-04-28 15:33:49 UTC	1460	IN	Data Raw: 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 3b 6f 62 6a 65 63 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 3b 77 6f 72 6b 65 72 2d 73 72 63 20 62 6c 6f 62 3a 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 64 61 74 61 3a 3b 62 6c 6f 63 6b 2d 61 6c 6c 2d 6d 69 78 65 64 2d 63 6f 6e 74 65 6e 74 3b 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 0d 0a 64 6f 63 75 6d 65 6e 74 2d 70 6f 6c 69 63 79 3a 20 66 6f 72 63 65 2d 6c 6f 61 64 2d 61 74 2d 74 6f 70 0d 0a 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 Data Ascii: m .fbcdn.net;object-src data: blob: 'self' https://.fbsbx.com .facebook.com .fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;document-policy: force-load-at-toppermissions-policy: accelerometer=(),
2025-04-28 15:33:49 UTC	712	IN	Data Raw: 30 20 30 30 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 78 2d 63 6f 6e 74 65 6e 74 2d 74 79 70 65 2d 6f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 78 2d 78 73 73 2d 70 72 6f 74 65 63 74 69 6f 6e 3a 20 30 0d 0a 6f 72 69 67 69 6e 2d 61 67 65 6e 74 2d 63 6c 75 73 74 65 72 3a 20 3f 31 0d 0a 6f 62 73 65 72 76 65 2d 62 72 6f 77 73 69 6e 67 2d 74 6f 70 69 63 73 3a 20 3f 31 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 65 78 70 6f 73 65 2d 68 65 61 64 65 72 73 3a 20 58 2d 46 42 2d 44 65 62 75 67 2c 20 58 2d 4c 6f 61 64 65 72 2d 4c 65 6e 67 74 68 2c 20 58 2d 53 74 61 63 6b 2c 20 45 72 72 6f 72 2d 4d 49 44 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6d 65 74 68 6f 64 73 3a 20 4f 50 54 49 4f 4e 53 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 Data Ascii: 0 00:00:00 GMTx-content-type-options: nosniffx-xss-protection: 0origin-agent-cluster: ?1observe-browsing-topics: ?1access-control-expose-headers: X-FB-Debug, X-Loader-Length, X-Stack, Error-MIDaccess-control-allow-methods: OPTIONSaccess-cont
2025-04-28 15:33:49 UTC	67	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc-IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-04-28 15:33:49 UTC	643	OUT	POST /collect HTTP/1.1 Host: k.clarity.ms Connection: keep-alive Content-Length: 759 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/x-clarity-gzip sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Origin: https://parlatoscatering.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://parlatoscatering.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 15:33:49 UTC	759	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a b5 54 6d 8f db 36 0c fe 2b 84 3e ac 2d c0 38 92 fc 12 fb 8a c3 70 0b d0 ae b8 5d 77 68 6e 0b 06 23 08 64 9b 49 84 93 25 4f 96 93 ad 7b f9 ed 83 92 f4 3a 60 9f 67 01 06 49 93 8f 1e f1 11 fd 07 23 76 53 33 9e 94 89 60 28 90 a3 a8 72 64 9e 9f 3e ff da 4e 2d 65 0c 59 53 76 d5 31 30 64 82 dc c1 93 b9 e4 c5 c5 0e 21 0c e3 cd 7c 3e 28 6f 54 70 63 ab 02 79 6d f7 49 eb fa f9 b7 53 e8 b7 a3 9b 7c 4b b7 7b e7 f6 86 be 89 91 9e 3a 3d f5 b7 ce ef 95 d5 ed 39 d4 aa 7e 50 7a 6f 6f f7 7d c3 36 c8 14 bb a9 eb 4a 60 89 42 96 1c 17 b9 14 1b ac 85 4c 31 4d b1 42 26 f9 2c 15 49 c9 bf 3c 62 91 15 92 a1 9d 8c b9 bc f8 35 5d 88 0b 42 59 2d ae 11 59 22 3b ea 51 37 86 58 0c 55 19 a6 19 b2 e5 f6 c3 8a 61 cd 78 dc 7e b9 fd 39 da c7 6d 38 78 17 82 a1 a5 Data Ascii: Tm6+>-8p]whn#dI%O{:`gI#vS3`(rd>N-eYSv10d!\|>(oTpcymIS\|K{:=9~Pzoo}6J`BL1MB&,I<b5]BY-Y";Q7XUax~9m8x
2025-04-28 15:33:49 UTC	284	IN	HTTP/1.1 204 No Content Server: nginx Date: Mon, 28 Apr 2025 15:33:49 GMT Connection: keep-alive Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://parlatoscatering.com Vary: Origin Request-Context: appId=cid-v1:e97341f6-8fff-46a6-9229-fbbfe0892c78
2025-04-28 15:33:50 UTC	645	OUT	POST /collect HTTP/1.1 Host: k.clarity.ms Connection: keep-alive Content-Length: 34427 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/x-clarity-gzip sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Origin: https://parlatoscatering.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://parlatoscatering.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 15:33:50 UTC	1460	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a ec bd ed 92 e4 36 92 20 f8 2a dc 90 55 9d d4 43 66 12 9f 24 52 96 d7 57 92 fa 43 36 dd 2d 6d 4b 3d 7d 63 a5 ba 34 66 04 33 82 2a 46 30 9a 64 e4 87 b4 ba c7 d8 df f7 f7 6c ed 5e 62 1f 65 9f 64 cd 1d 00 09 67 44 64 e5 57 f5 cc 5c af aa bb 2a e8 70 38 dc 41 10 70 77 c0 1d 3f cf ca d9 d9 db 59 7a 92 9f b0 59 cc 63 66 54 2c 64 1e cf da f4 e6 a7 bf cd 77 f3 52 ce e2 d9 65 be 30 d7 fd 2c 9e b1 b2 59 b5 65 3d 8b 59 9c e2 9f d9 aa ef b7 dd d9 e9 e9 b6 68 eb a2 6f ba 79 d1 97 6d b5 59 9e cc 9b f5 e9 af 77 fd fa a2 6b 76 ed bc 3c 5f 36 cd b2 2e 5f 03 64 5d 2e aa dd fa bc 69 97 c5 a6 9a 23 68 5e ac b7 45 b5 dc 9c 2f d7 97 b3 77 f1 ac 98 9d bd 7d cb 8c 8c 65 cc 62 c6 f3 34 ce 14 77 bf 72 93 b9 d6 ed 9f cd ae ae 9f f3 d7 bb f8 ad 92 22 66 Data Ascii: 6 UCf$RWC6-mK=}c4f3F0dl^bedgDdW\*p8Apw?YzYcfT,dwRe0,Ye=YhoymYwkv<_6._d].i#h^E/w}eb4wr"f
2025-04-28 15:33:50 UTC	1460	OUT	Data Raw: f5 8d e1 19 f8 13 23 7f 02 f8 13 23 7f 12 f8 13 23 7f 12 f8 93 23 7f 12 f8 93 6c 7c 8b 9b 59 2c 81 47 c9 83 11 bd d8 74 c9 b6 2d af ca 7e be f2 a3 fa f4 f4 c7 e2 ba e8 e6 6d b5 ed cb 76 b5 bb 84 e1 3c 8b 25 08 24 47 81 24 08 24 25 10 8b 59 ae de 0d b5 6f 6e 6e 4e ac aa d8 17 cb 75 b1 29 96 65 eb 48 80 cc 72 94 59 82 cc 52 ef 93 00 25 a0 73 44 8a 6d d5 b9 ea d0 25 72 ec 12 09 5d 22 f3 40 9c a2 ee cb 76 53 f4 30 cc 60 5e 3b 0f b4 a8 d3 b6 eb fe e9 16 d5 b2 0f 7f bc 57 65 b9 80 45 09 3a 59 8e 9d ac a0 93 55 8a 0c 73 26 62 ce e4 bb 87 90 c3 65 66 d3 77 03 5d 78 39 8a 85 9f 58 3f 8b 15 bc 1e c5 09 74 fc 33 8b 15 bc 01 25 26 e5 b3 58 c1 9b 50 72 af de 2c 56 d0 e1 ca 75 38 37 ef 62 05 3d ae c6 51 a6 a0 4b 55 16 74 21 7e 9d dd aa 2c 7b fb f9 16 f3 ab 9b ab e4 66 Data Ascii: ####l\|Y,Gt-~mv<%$G$$%YonnNu)eHrYR%sDm%r]"@vS0`^;WeE:YUs&befw]x9X?t3%&XPr,Vu87b=QKUt!~,{f
2025-04-28 15:33:50 UTC	1460	OUT	Data Raw: f0 31 80 a3 22 d5 31 e3 1f 1e 4b eb 6a b1 b1 16 cd 7d 8d c0 06 16 37 43 03 32 8d 19 d3 31 57 c7 de e0 a0 f6 25 49 b7 2e ea fa 2c 62 02 34 cd a3 58 76 7b f1 2c e2 e9 bd 68 75 d1 c2 e4 28 f4 bd 58 b7 1e 4f f2 7d bc 0e 76 a9 36 cb 24 e1 e9 59 94 9e 48 d9 82 4e 7a 04 47 20 8e ce ee c3 91 e9 59 c4 ee 43 50 80 70 a2 ee 43 d1 e9 59 c4 4f f8 bd 38 59 7a 16 89 13 91 df 87 93 a7 67 91 3a 49 f5 21 1c 54 f0 93 64 53 f4 bb b6 a8 cf 22 bd bd c5 ff 9b ed 2d 6e d9 7d 9a c6 91 fb df 09 df 7b a3 be fa a2 2c b7 67 11 e3 e0 40 86 bf 54 7a a0 ba 3c 5a bd 5b 15 ed 76 6c fb 50 e5 e3 6d 37 bb 1e 06 e9 82 d6 4f 84 27 42 cc 82 38 62 9f c5 03 22 6d 84 1d 6d 62 de 56 dd bd fc 41 d5 5f ce 6e 56 65 5b 7e 7a 02 7b 38 c5 1d 78 8c 60 5b 0d 7c ee cb 62 0b 23 c6 da 39 fb 68 cb b6 5a ec a1 Data Ascii: 1"1Kj}7C21W%I.,b4Xv{,hu(XO}v6$YHNzG YCPpCYO8Yzg:I!TdS"-n}{,g@Tz<Z[vlPm7O'B8b"mmbVA_nVe[~z{8x`[\|b#9hZ
2025-04-28 15:33:50 UTC	1460	OUT	Data Raw: 1b ce 5f 7f 5c 11 ef 79 2d f0 1d 9b f1 3b 66 29 c6 09 07 c1 18 21 b3 6e 6e 3d 18 8a 31 a2 45 30 41 45 27 a8 1e b6 cd 4d 74 d2 96 7f db 55 6d 09 d6 e2 75 d5 55 97 55 5d f5 77 67 f6 77 6d 23 10 58 6a a3 8c d3 80 13 8c 33 4e 27 df f0 7a 2e 6f b6 56 f5 c4 f0 90 47 2d 3d d3 9e 5b 17 55 3d 5f 55 eb ad 5d f1 b7 24 2c 6b 6c 22 08 66 61 29 55 7b 58 8a 21 cc 29 0f f8 c6 20 e6 74 f2 41 5e b6 c5 c6 07 fb 3e 8b e7 23 6f db d2 3f fe a2 e1 20 ad 44 e6 46 46 31 9a 3a 9d 7c 83 db a2 2d fd 6a f1 14 3e 6d 97 9d fa fc 02 2e be 29 d0 33 28 57 18 c1 9d ea 80 2b 0c b3 4e 27 9f cc 7c 55 d5 8b 17 63 2a 41 72 13 d6 d8 49 4a f5 76 96 62 6c 77 1a 7c 1d 18 45 0f 70 ba ce 79 b2 7f 2c aa cd 77 1f 93 47 3e e1 d0 c6 e6 b3 e0 ab 71 d1 f9 93 af e6 aa 2e fa 6d 35 7f df 3e 67 e4 41 5e 90 6a Data Ascii: _\y-;f)!nn=1E0AE'MtUmuUU]wgwm#Xj3N'z.oVG-=[U=_U]$,kl"fa)U{X!) tA^>#o? DFF1:\|-j>m.)3(W+N'\|Uc*ArIJvblw\|Epy,wG>q.m5>gA^j
2025-04-28 15:33:50 UTC	1460	OUT	Data Raw: 72 fa fd cc eb b2 08 9f aa 2d 79 48 20 f7 32 85 40 aa 61 3a a1 61 f2 bb 76 db d4 74 a4 1f 28 73 83 b9 9b e0 1c e0 df 1e 7c 9a 3c 63 fe e4 01 86 47 a0 68 f9 94 37 80 41 0e e6 00 86 69 4e a7 cf 41 da d3 03 63 fc 58 6e d4 a3 c5 6e f5 3c 84 15 bc e8 e9 a4 e5 9e 0f 7d d8 f3 66 87 79 7f ab cd bc 2d d7 b4 92 2d c1 63 71 7b 50 02 db b5 5d f8 e2 6f c7 9f 63 43 e3 c4 31 c4 70 fb e7 66 5d 6d 8a 43 53 65 b9 de f6 77 c9 bc ac eb f1 7d 5d 55 25 6c 54 b8 21 3f 00 83 b7 07 0f 89 cb 02 4e 81 e4 25 4e 66 3f 50 8e c8 43 72 55 07 df d9 55 dd 14 7d f8 d4 2c 26 e3 dd c2 a6 ed c2 a9 3a f2 40 57 56 af 9d fb c7 bb ed aa 84 3c a2 c9 7c 55 b4 c5 3c 64 70 2c ab ab 75 d5 23 46 37 29 0d 66 15 c8 31 7e 70 ad b4 25 fb 1f 46 b5 a9 c0 ab 94 a0 9e d0 06 e0 fd 11 87 53 d6 64 66 b6 b0 c9 ec Data Ascii: r-yH 2@a:avt(s\|<cGh7AiNAcXnn<}fy--cq{P]ocC1pf]mCSew}]U%lT!?N%Nf?PCrUU},&:@WV<\|U<dp,u#F7)f1~p%FSdf
2025-04-28 15:33:50 UTC	1460	OUT	Data Raw: 9b df 72 c1 31 e7 f9 88 8b b7 c3 e0 d0 b6 aa 9b 4a 5f 4d 10 ec 7e e5 4d d1 cf 07 77 94 4b 40 3b 22 d5 c5 65 19 04 84 9f 45 4c 4e 51 16 e5 10 37 43 10 f7 68 d1 06 11 49 a6 53 24 17 39 ec 47 76 c2 dc a7 25 dd 37 76 08 7b 3f a5 53 90 7d 7f 44 0e 77 ef 06 44 a3 b3 82 19 8a e8 14 e4 31 c7 ca 80 9d 15 f0 87 62 6f db 6a 5e a2 1a 84 58 1d ae f7 67 d1 27 32 83 3f 1f c0 0d 67 c7 83 4c ef b6 70 19 1d de db 58 1e ae 24 e0 cf 03 2a b9 d5 f0 93 b9 84 3f b4 42 df 34 70 31 e6 44 82 43 fc 4c 30 09 2b a9 b8 bc 2a e6 76 be c1 bb a2 98 0a 8e 31 e0 ed 50 00 df fb 8a 13 fb 1d 26 57 37 78 5a ca 8e a2 8f f9 39 0f ed 85 1f 36 d6 82 f6 83 8f 3b 9b 04 99 e0 4d 56 4c 05 a7 19 94 bd 09 4f 05 10 9c 69 83 3b ac 18 5e 62 05 f0 11 82 73 5c 70 d3 13 c3 ab 9e 00 3e 42 70 1e 09 ae 4a 62 78 Data Ascii: r1J_M~MwK@;"eELNQ7ChIS$9Gv%7v{?S}DwD1boj^Xg'2?gLpX$?B4p1DCL0+v1P&W7xZ96;MVLOi;^bs\p>BpJbx
2025-04-28 15:33:50 UTC	1460	OUT	Data Raw: 7c b0 c8 6e 34 ed bd 95 27 4a e4 5e c0 b1 0e 1f 8b a9 d0 cf eb cd bd 93 77 76 73 67 bc 60 e9 df b4 67 ac 7e a3 bc 98 ff a6 bc 04 e7 23 86 e3 0b 9f 26 70 01 5e 04 7f 7f f6 ef 81 45 d0 c0 fe 23 f5 96 bd 1c d9 d7 b7 4f c9 bc 6e ba 72 24 3a f7 a0 69 00 bf dd 14 a8 36 ab b2 ad fa e3 13 f3 3d 6d 90 f0 3a d0 e9 c0 ef 11 c1 25 86 34 36 05 25 b0 19 76 0e af 61 87 26 9a 61 43 9c ed 4f 4c 3e 4c 0c 77 3d fc e7 6c 9f 5c e0 86 5f cd e0 ab 77 9f fe fe 01 9d 27 88 bc df ad 93 6c ab fc be e5 f3 38 e1 61 e7 34 e8 d1 4c c4 11 58 70 11 dc 23 fa 24 a2 7e 5b f8 f1 44 a9 e9 02 67 4f 8e 2d ef 05 5c 5e 19 f9 ff a7 27 c6 86 56 72 8c c1 07 d3 71 34 23 d1 d4 85 78 f7 c1 ee b7 4d 3e d3 fa 7f d8 9d ed 36 9c d2 a6 a3 fb 53 d3 57 f3 b2 fb 16 09 9c c8 4b c1 e6 62 3e 3f f9 b1 9b e1 5d ae Data Ascii: \|n4'J^wvsg`g~#&p^E#Onr$:i6=m:%46%va&aCOL>Lw=l\_w'l8a4LXp#$~[DgO-\^'Vrq4#xM>6SWKb>?]
2025-04-28 15:33:50 UTC	1460	OUT	Data Raw: 12 fc 5c ce fb 76 57 0e 64 37 7d db 9c 6f 9a 8b a1 61 5f d2 ec 8e 96 d8 2c 71 f6 2c cc 39 f3 60 7c 84 80 9d e2 ee fc aa a8 bb 72 ff a3 66 f0 15 e7 38 34 ed 5d a6 d3 53 15 1f ba 03 c0 e6 95 38 63 3e 89 be cd ab 0f d1 ad 18 8a bb 6d 9b 6d d9 f6 77 e7 36 06 62 55 96 3d 46 be 32 7b ea 80 e7 38 9c 73 49 c6 29 b0 84 e3 d7 45 38 e2 67 9c e3 b8 0d ee 08 e5 39 0e db 7c 7a f9 9e cb 74 da 3d fd 36 b1 fb ae 62 ab 21 3b ce a9 6d e1 74 68 6b 88 ed bd 99 27 7b 57 b3 f1 1c bf a5 e0 36 4d 6e f0 4b ca 83 6b f8 ca 1a d3 9f 26 c1 c4 76 20 7a ff 93 cb 5d 55 bb 83 d3 90 02 56 4c a3 2a b4 3d d4 7c 1f 9e 0f b5 70 98 6e 12 b3 21 ef 32 3a 59 54 d7 d5 c2 cf 8d 7b 31 1b 87 2a a9 e8 a4 b3 b9 88 70 2a ac 30 85 cb 43 5a 0b 2a 7a bd 86 a4 17 e1 98 f9 85 d6 d1 0f e4 70 d2 01 6c af a7 18 Data Ascii: \vWd7}oa_,q,9`\|rf84]S8c>mmw6bU=F2{8sI)E8g9\|zt=6b!;mthk'{W6MnKk&v z]UVL=\|pn!2:YT{1p0CZzpl
2025-04-28 15:33:50 UTC	1460	OUT	Data Raw: 2b 28 f9 a6 78 7f 5d d5 c0 4c fa 2a fb f2 15 4f bf b5 22 fc 6f 5d 50 ed f5 66 0b af 76 db cd 17 f5 f9 a6 29 b6 d5 eb 02 86 4d 2e 64 a6 55 aa c4 c9 38 c6 5e ef 8a e2 fc 36 d7 af 77 c5 e5 b9 96 af 77 c5 d5 75 7d fe e5 aa 6d d6 28 e6 17 4c c8 93 f4 44 1b 93 9f 08 0d 37 45 36 fd 2b ae c4 9b 37 c9 17 30 90 5f 89 2f b8 c4 2b e2 80 a1 df b9 9e 52 3c 45 12 e5 94 c0 eb 5d b1 be 3c 4f e1 9f f3 d7 bb 62 7b fe d7 6a 03 d9 6f e1 f7 f5 39 43 3a af 77 c5 cd 79 fa fa 0a 13 ea 9c b3 d7 17 fd ee fc cb a5 fd e8 60 16 97 39 7c ee 38 2b 05 49 c0 04 fa 47 45 90 04 4c a0 77 54 04 49 c0 44 ce 63 e6 bd 5d df af ca 08 7a 3e 72 fd 1e f9 ee 8b 5c 9f 47 d5 26 f2 fd 1d fd 97 68 e8 e9 01 71 16 8b 5c c4 dc ef 2d fc f7 ff 0f 00 90 09 07 e1 56 41 3e b9 aa 77 d5 c2 86 0a 27 60 22 37 41 c6 Data Ascii: +(x]L*O"o]Pfv)M.dU8^6wwu}m(LD7E6+70_/+R<E]<Ob{jo9C:wy`9\|8+IGELwTIDc]z>r\G&hq\-VA>w'`"7A
2025-04-28 15:33:50 UTC	284	IN	HTTP/1.1 204 No Content Server: nginx Date: Mon, 28 Apr 2025 15:33:50 GMT Connection: keep-alive Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://parlatoscatering.com Vary: Origin Request-Context: appId=cid-v1:e97341f6-8fff-46a6-9229-fbbfe0892c78
2025-04-28 15:33:51 UTC	691	OUT	POST /collect HTTP/1.1 Host: k.clarity.ms Connection: keep-alive Content-Length: 4919 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/x-clarity-gzip sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Origin: https://parlatoscatering.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://parlatoscatering.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: MUID=3889A9E4911B6A0A378BBC38951B6488
2025-04-28 15:33:51 UTC	284	IN	HTTP/1.1 204 No Content Server: nginx Date: Mon, 28 Apr 2025 15:33:51 GMT Connection: keep-alive Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://parlatoscatering.com Vary: Origin Request-Context: appId=cid-v1:e97341f6-8fff-46a6-9229-fbbfe0892c78
2025-04-28 15:33:54 UTC	691	OUT	POST /collect HTTP/1.1 Host: k.clarity.ms Connection: keep-alive Content-Length: 2187 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/x-clarity-gzip sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Origin: https://parlatoscatering.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://parlatoscatering.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: MUID=3A7D0C1BBCC96F54177B19C7BDB66E9F
2025-04-28 15:33:54 UTC	284	IN	HTTP/1.1 204 No Content Server: nginx Date: Mon, 28 Apr 2025 15:33:54 GMT Connection: keep-alive Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://parlatoscatering.com Vary: Origin Request-Context: appId=cid-v1:e97341f6-8fff-46a6-9229-fbbfe0892c78
2025-04-28 15:33:59 UTC	690	OUT	POST /collect HTTP/1.1 Host: k.clarity.ms Connection: keep-alive Content-Length: 293 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/x-clarity-gzip sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Origin: https://parlatoscatering.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://parlatoscatering.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: MUID=3A7D0C1BBCC96F54177B19C7BDB66E9F
2025-04-28 15:33:59 UTC	284	IN	HTTP/1.1 204 No Content Server: nginx Date: Mon, 28 Apr 2025 15:33:59 GMT Connection: keep-alive Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://parlatoscatering.com Vary: Origin Request-Context: appId=cid-v1:e97341f6-8fff-46a6-9229-fbbfe0892c78
2025-04-28 15:34:05 UTC	690	OUT	POST /collect HTTP/1.1 Host: k.clarity.ms Connection: keep-alive Content-Length: 456 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/x-clarity-gzip sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Origin: https://parlatoscatering.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://parlatoscatering.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: MUID=3A7D0C1BBCC96F54177B19C7BDB66E9F
2025-04-28 15:34:05 UTC	284	IN	HTTP/1.1 204 No Content Server: nginx Date: Mon, 28 Apr 2025 15:34:05 GMT Connection: keep-alive Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://parlatoscatering.com Vary: Origin Request-Context: appId=cid-v1:e97341f6-8fff-46a6-9229-fbbfe0892c78
2025-04-28 15:34:22 UTC	690	OUT	POST /collect HTTP/1.1 Host: k.clarity.ms Connection: keep-alive Content-Length: 319 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/x-clarity-gzip sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Origin: https://parlatoscatering.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://parlatoscatering.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: MUID=3A7D0C1BBCC96F54177B19C7BDB66E9F
2025-04-28 15:34:23 UTC	284	IN	HTTP/1.1 204 No Content Server: nginx Date: Mon, 28 Apr 2025 15:34:23 GMT Connection: keep-alive Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://parlatoscatering.com Vary: Origin Request-Context: appId=cid-v1:e97341f6-8fff-46a6-9229-fbbfe0892c78
2025-04-28 15:34:30 UTC	690	OUT	POST /collect HTTP/1.1 Host: k.clarity.ms Connection: keep-alive Content-Length: 258 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/x-clarity-gzip sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Origin: https://parlatoscatering.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://parlatoscatering.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: MUID=3A7D0C1BBCC96F54177B19C7BDB66E9F
2025-04-28 15:34:30 UTC	284	IN	HTTP/1.1 204 No Content Server: nginx Date: Mon, 28 Apr 2025 15:34:30 GMT Connection: keep-alive Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://parlatoscatering.com Vary: Origin Request-Context: appId=cid-v1:e97341f6-8fff-46a6-9229-fbbfe0892c78
2025-04-28 15:34:40 UTC	690	OUT	POST /collect HTTP/1.1 Host: k.clarity.ms Connection: keep-alive Content-Length: 336 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/x-clarity-gzip sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Origin: https://parlatoscatering.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://parlatoscatering.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: MUID=3A7D0C1BBCC96F54177B19C7BDB66E9F
2025-04-28 15:34:41 UTC	284	IN	HTTP/1.1 204 No Content Server: nginx Date: Mon, 28 Apr 2025 15:34:41 GMT Connection: keep-alive Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://parlatoscatering.com Vary: Origin Request-Context: appId=cid-v1:e97341f6-8fff-46a6-9229-fbbfe0892c78
2025-04-28 15:34:50 UTC	690	OUT	POST /collect HTTP/1.1 Host: k.clarity.ms Connection: keep-alive Content-Length: 259 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/x-clarity-gzip sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Origin: https://parlatoscatering.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://parlatoscatering.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: MUID=3A7D0C1BBCC96F54177B19C7BDB66E9F
2025-04-28 15:34:51 UTC	284	IN	HTTP/1.1 204 No Content Server: nginx Date: Mon, 28 Apr 2025 15:34:51 GMT Connection: keep-alive Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://parlatoscatering.com Vary: Origin Request-Context: appId=cid-v1:e97341f6-8fff-46a6-9229-fbbfe0892c78

Timestamp	Bytes transferred	Direction	Data
2025-04-28 15:33:51 UTC	596	OUT	GET /c.gif HTTP/1.1 host: c.clarity.ms sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 sec-fetch-site: cross-site sec-fetch-mode: no-cors sec-fetch-dest: image sec-fetch-storage-access: active referer: https://parlatoscatering.com/ accept-encoding: identity accept-language: en-US,en;q=0.9 priority: i
2025-04-28 15:33:51 UTC	635	IN	HTTP/1.1 302 Found cache-control: private, no-cache, proxy-revalidate, no-store pragma: no-cache location: https://c.bing.com/c.gif?ctsa=mr&CtsSyncId=1BBDF96BCAC0438DB57CA0D9D4B6028E&RedC=c.clarity.ms&MXFR=3889A9E4911B6A0A378BBC38951B6488 server: Microsoft-IIS/10.0 x-powered-by: ASP.NET p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" set-cookie: SM=T; domain=c.clarity.ms; path=/; SameSite=None; Secure; set-cookie: MUID=3889A9E4911B6A0A378BBC38951B6488; domain=.clarity.ms; expires=Sat, 23-May-2026 15:33:51 GMT; path=/; SameSite=None; Secure; Priority=High; date: Mon, 28 Apr 2025 15:33:50 GMT content-length: 0
2025-04-28 15:33:52 UTC	746	OUT	GET /c.gif?ctsa=mr&CtsSyncId=1BBDF96BCAC0438DB57CA0D9D4B6028E&MUID=3A7D0C1BBCC96F54177B19C7BDB66E9F HTTP/1.1 host: c.clarity.ms sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 sec-fetch-site: cross-site sec-fetch-mode: no-cors sec-fetch-dest: image sec-fetch-storage-access: active referer: https://parlatoscatering.com/ accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: SM=T cookie: MUID=3889A9E4911B6A0A378BBC38951B6488 priority: i
2025-04-28 15:33:52 UTC	835	IN	HTTP/1.1 200 OK cache-control: private, no-cache, proxy-revalidate, no-store pragma: no-cache content-type: image/gif last-modified: Thu, 24 Apr 2025 18:49:29 GMT accept-ranges: bytes etag: "ee17fc9b49b5db1:0" server: Microsoft-IIS/10.0 x-powered-by: ASP.NET p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" set-cookie: SM=C; domain=c.clarity.ms; path=/; SameSite=None; Secure; set-cookie: MUID=3A7D0C1BBCC96F54177B19C7BDB66E9F; domain=.clarity.ms; expires=Sat, 23-May-2026 15:33:52 GMT; path=/; SameSite=None; Secure; Priority=High; set-cookie: MR=0; domain=c.clarity.ms; expires=Mon, 05-May-2025 15:33:52 GMT; path=/; SameSite=None; Secure; set-cookie: ANONCHK=0; domain=c.clarity.ms; expires=Mon, 28-Apr-2025 15:43:52 GMT; path=/; SameSite=None; Secure; date: Mon, 28 Apr 2025 15:33:51 GMT content-length: 42
2025-04-28 15:33:52 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 01 4c 00 3b Data Ascii: GIF89a!,L;

Timestamp	Bytes transferred	Direction	Data
2025-04-28 15:33:51 UTC	1386	OUT	GET /pagead/1p-user-list/undefined/?random=1745854427628&cv=11&fst=1745852400000&bg=ffffff&guid=ON&async=1&gtm=45be54n0z8812274689za201zb9179331475&gcd=13l3l3l3l1l1&dma=0&tag_exp=102887800~103051953~103071290~103077950~103106314~103106316~103116025~103130360~103130362~103200001&ptag_exp=102887800~103051953~103071290~103077950~103106314~103106316~103116026~103130360~103130362~103200004&u_w=1280&u_h=1024&url=https%3A%2F%2Fparlatoscatering.com%2F%3Futm_source%3Dgoogle%26utm_medium%3Dorganic%26utm_campaign%3Dgmb&hn=www.googleadservices.com&frm=0&tiba=The%20Best%20Italian%20Catering%20Service%20in%20Oakville%20%7C%20Parlato%27s%20Catering&npa=0&pscdl=noapi&auid=834765053.1745854427&uaa=x86&uab=64&uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&_tu=Cg&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwDZpuyz4kuNSVZur6Pr2nA4lgGpKruHDhVr_g&random=1477689070&rmt_tld=0&ipr=y HTTP/1.1 host: www.google.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / x-client-data: CKq1yQEIi7bJAQiktskBCKmdygEI0qDKAQig4coBCJahywEInP7MAQiFoM0B sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=1, i
2025-04-28 15:33:51 UTC	583	IN	HTTP/1.1 200 OK p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" timing-allow-origin: * cross-origin-resource-policy: cross-origin date: Mon, 28 Apr 2025 15:33:51 GMT pragma: no-cache expires: Fri, 01 Jan 1990 00:00:00 GMT cache-control: no-cache, no-store, must-revalidate content-type: image/gif content-security-policy: script-src 'none'; object-src 'none' x-content-type-options: nosniff server: cafe content-length: 42 x-xss-protection: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
2025-04-28 15:33:51 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Timestamp	Bytes transferred	Direction	Data
2025-04-28 15:33:52 UTC	374	OUT	GET /google-ads/ HTTP/1.1 host: process.iconnode.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=1, i
2025-04-28 15:33:52 UTC	271	IN	HTTP/1.1 200 OK date: Mon, 28 Apr 2025 15:33:51 GMT content-type: text/html; charset=UTF-8 content-length: 0 server: Apache x-powered-by: PHP/8.3.17 access-control-allow-origin: 10.1.105.164 access-control-allow-credentials: true access-control-max-age: 86400

Timestamp	Bytes transferred	Direction	Data
2025-04-28 15:33:53 UTC	543	OUT	GET /c.gif?ctsa=mr&CtsSyncId=1BBDF96BCAC0438DB57CA0D9D4B6028E&MUID=3A7D0C1BBCC96F54177B19C7BDB66E9F HTTP/1.1 host: c.clarity.ms user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: SM=C cookie: MUID=3A7D0C1BBCC96F54177B19C7BDB66E9F cookie: MR=0 cookie: ANONCHK=0 priority: u=1, i
2025-04-28 15:33:53 UTC	497	IN	HTTP/1.1 200 OK cache-control: private, no-cache, proxy-revalidate, no-store pragma: no-cache content-type: image/gif last-modified: Thu, 24 Apr 2025 18:49:29 GMT accept-ranges: bytes etag: "ee17fc9b49b5db1:0" server: Microsoft-IIS/10.0 x-powered-by: ASP.NET p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" set-cookie: ANONCHK=0; domain=c.clarity.ms; expires=Mon, 28-Apr-2025 15:43:53 GMT; path=/; SameSite=None; Secure; date: Mon, 28 Apr 2025 15:33:52 GMT content-length: 42
2025-04-28 15:33:53 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 01 4c 00 3b Data Ascii: GIF89a!,L;

Timestamp	Bytes transferred	Direction	Data
2025-04-28 15:34:18 UTC	309	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=a4ptEbr7MMRw9kd&MD=CX29paFN HTTP/1.1 host: slscr.update.microsoft.com accept: / user-agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 accept-encoding: identity
2025-04-28 15:34:18 UTC	541	IN	HTTP/1.1 200 OK cache-control: no-cache pragma: no-cache content-type: application/octet-stream expires: -1 last-modified: Mon, 01 Jan 0001 00:00:00 GMT etag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" ms-correlationid: c068c2fd-fbe1-4df8-b9bb-018b96916081 ms-requestid: d70aaec6-5e15-488e-9be9-3cf38e9a7902 ms-cv: K/2PoLrCkEaTlslI.0 x-microsoft-slsclientcache: 1440 content-disposition: attachment; filename=environment.cab x-content-type-options: nosniff date: Mon, 28 Apr 2025 15:34:17 GMT content-length: 30005
2025-04-28 15:34:18 UTC	1460	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2025-04-28 15:34:18 UTC	1460	IN	Data Raw: 25 dc 93 6a 9f d2 e0 c1 ea a0 79 31 c4 ab 34 9c e1 43 a8 b3 7e 55 3a 43 6e 5b 8c bc 1c ac b5 c5 db f6 d5 6b 9a 98 b7 61 91 ec 20 ed 8b 6b 6b 17 65 25 d4 6a aa b6 ca 84 bd 36 98 48 0e 5e cd 7c b0 80 4f 8a 29 1a bd 79 0a 95 15 94 2c 8d 46 d3 90 66 2a a1 20 71 50 9b 63 14 ba 66 53 25 93 57 c9 de 70 e3 0a f9 95 e5 f6 30 46 8b 99 e7 52 08 31 34 2a fb 7b 19 1f 7d d2 b0 1d 12 db 90 d7 13 2b 94 d3 2c 24 3c da 5c c7 eb 72 6a b9 b9 58 16 5c 90 d7 e5 cd 92 95 32 0d 6b cf 04 8d 4e 78 08 6b 05 10 2b 3f 35 f1 9b 05 cf 25 b3 f8 b8 80 45 47 a6 3f 98 fb 9d 6d bb 59 60 bf 35 2a 6a 71 da 05 32 46 9c 40 06 81 a2 d0 24 13 09 4e 44 ad c8 6d e0 34 6a 19 a9 18 60 e4 00 e9 b7 1d ae 08 07 c3 31 50 c7 68 68 e8 50 28 40 75 d8 01 17 46 0a 23 66 bd 70 60 ba 6d fe d2 9a c3 39 9c fb a0 Data Ascii: %jy14C~U:Cn[ka kke%j6H^\|O)y,Ff* qPcfS%Wp0FR14{}+,$<\rjX\2kNxk+?5%EG?mY`5jq2F@$NDm4j`1PhhP(@uF#fp`m9
2025-04-28 15:34:18 UTC	1460	IN	Data Raw: 88 13 d2 ca b4 06 b4 39 d4 f9 dc 75 86 ec f8 71 28 61 7c 4c c7 63 c8 ea 15 e7 75 7d 6d 29 70 2a 71 c0 e4 ec e9 97 37 59 2c ef da 63 ae b1 f3 e5 0b 3b cf df 39 d7 39 fa 82 03 6e ce 5d df 9a 7e b1 21 8c f5 e5 b9 a1 86 fb 42 cd 8f 80 65 85 b7 9b da 6d 66 ca ea e3 34 46 3b 0d 3a b7 43 5e 3d 7a 57 67 f5 fc 5c 06 83 b4 c2 d8 63 75 21 29 ed dd c1 86 8d 5d 43 f3 49 fd 3d 76 02 f5 6a 5c 57 4b 0c 0f 16 4c dc ae 2c 6b d6 f7 77 f2 a8 5d 45 e3 67 7b 15 83 04 9a 73 32 62 e8 67 d8 7e c1 4c 27 14 66 da 01 f8 70 cc af 50 49 02 86 a1 cc 11 74 0c 24 7f 15 ad 28 be 9d 40 0c 81 9d a0 c6 02 69 80 3c 40 a6 20 29 90 04 80 7d 78 26 1e ec 70 98 20 80 f0 1b 08 60 00 70 d4 d7 e1 d0 c7 a1 d0 95 43 18 82 b8 25 55 45 8c a6 3c b1 98 db 86 78 7d 26 94 17 d0 3b 82 42 0d 40 0d 50 49 53 4a Data Ascii: 9uq(a\|Lcu}m)p*q7Y,c;99n]~!Bemf4F;:C^=zWg\cu!)]CI=vj\WKL,kw]Eg{s2bg~L'fpPIt$(@i<@ )}x&p `pC%UE<x}&;B@PISJ
2025-04-28 15:34:18 UTC	1460	IN	Data Raw: 9e 4c 48 88 5f 1b 99 a2 79 07 02 1f 96 7e 0e 91 7d ff 94 85 f8 7a 67 50 22 aa 5f 9d b1 ea a1 e7 40 3d e0 af d4 09 80 e0 46 08 01 02 dc 7c 87 51 31 df 61 b4 fc b5 f8 5f f9 9c 7e 37 d4 2e 33 2b bb ab b5 2d 61 e9 d4 86 25 79 97 ff 9e 60 01 ae e6 85 4f 0d 70 27 cb 1c ca cd c6 bb 4c ee e3 f1 e7 bd 04 1a c4 ed 5f ae e6 74 15 34 ce df 79 d8 bc c2 5b 3a 92 70 aa 60 87 34 ac 37 4f 07 1b c3 55 5a 75 15 93 ac 8f 49 e2 e4 eb 89 76 36 16 f0 83 b7 d5 bb 9f 67 2f 58 2c 57 77 4a 51 b7 7d ea c5 74 6c 12 68 7c 96 77 f7 76 81 a8 ad 31 99 b2 9b a5 fe 82 2e a8 87 5d 00 c3 8c c5 2b de 55 90 4a db 4b 20 93 f0 89 59 6d 27 da 83 c9 06 97 5b cf e2 8c 3a da b1 f1 9f 15 df ae f8 48 9f 72 16 a2 76 86 7d ce 3a 98 57 9f df 1b d0 21 92 e5 7e 21 70 a6 89 08 f9 40 7b 4f 81 e4 ad 37 f1 88 Data Ascii: LH_y~}zgP"_@=F\|Q1a_~7.3+-a%y`Op'L_t4y[:p`47OUZuIv6g/X,WwJQ}tlh\|wv1.]+UJK Ym'[:Hrv}:W!~!p@{O7
2025-04-28 15:34:18 UTC	1460	IN	Data Raw: ec 5b ba a1 ad f4 7e b4 36 22 6b 2a 3a ea b1 10 bb 5a d2 82 b3 0d ce 73 7e 0e e7 48 44 3b 1f 73 dd 54 69 30 7d cb f8 b3 28 bf 32 cd a8 91 6d 34 ad bb 0e d6 22 89 e7 eb 96 b3 8a bc 59 04 0a 5e bc 0b 94 99 3b ef f8 9c bb b7 31 08 30 50 61 9f 34 7d fc aa 6a 32 22 64 fa 76 01 58 be a6 de 25 8f 4c df ca 78 6c 2b 26 9a 9a 4a 74 8f a6 d3 ed aa 44 e2 79 8f 57 ad 97 78 47 09 43 fb f6 b2 69 ae fa ed 0e a6 c8 bc 2d 77 e5 1a be 7a c9 bf 7a 38 df 8f 7f 89 5f 71 93 cd f1 3e a1 da 7c 03 1a 34 f3 b5 5b 8e 92 80 7b dc 29 5e 24 de 2a fe 87 0a 59 f2 e5 dc f9 04 df 73 8a c3 c5 46 cd eb bd 03 6e a2 52 ca 4d 3c 42 8a 91 90 5a 49 6b 4e fc c5 eb 6a e7 27 5f d7 d9 92 eb 99 80 dd 9e 5b 65 18 f5 33 5f 86 4c f2 90 bb f6 e7 d2 ac 36 6f 13 62 f5 9b 39 9d 78 c6 6f 1e a6 9f 96 13 48 6b Data Ascii: [~6"k:Zs~HD;sTi0}(2m4"Y^;10Pa4}j2"dvX%Lxl+&JtDyWxGCi-wzz8_q>\|4[{)^$YsFnRM<BZIkNj'_[e3_L6ob9xoHk
2025-04-28 15:34:18 UTC	1460	IN	Data Raw: e0 22 b7 3c 63 7a e6 a3 86 23 e7 30 2c a5 42 31 a2 ae 1d 00 01 77 ff 02 a6 f0 eb 0b 87 ba f9 f4 b0 9c 8b e6 cf 6e 16 c7 b8 4c f1 8c b4 47 9e 54 c6 be 45 47 91 4e 78 c0 25 c3 da 17 f4 70 5a ff 27 b0 83 21 21 a0 e4 ae fa e7 11 5b d1 a2 1b 58 46 ba 4f bb ee 07 59 6e f4 ab 0a 81 03 c1 db 6d e1 39 50 02 d9 13 3a ab 49 21 bc e7 4b f7 77 6a 95 6b 49 fb ce 2e 4c aa 8c 55 4e a9 ed f2 4b ba 33 65 99 89 da 5f 69 11 cd d0 da 26 9d ba bf 75 33 7c 68 ce 52 23 f7 6e bc 71 bd c0 f4 4c 0b 5d 99 f0 e8 ca 66 97 be 7a a9 35 72 a3 de 49 98 95 65 3a c9 e6 ee 0c cd 45 69 a7 49 e7 1e fb 4f 4f 15 f7 a3 06 9f 47 bd ab 57 ad de 78 c8 98 dc 16 dc f3 dc dc 55 83 32 68 7c fe e1 8e ea 62 90 73 ac a2 96 77 af 48 45 bf 78 17 b3 09 a7 a0 ca 83 66 1e 5a d1 e5 90 4f 7e a6 0b 01 21 3a 95 a5 Data Ascii: "<cz#0,B1wnLGTEGNx%pZ'!![XFOYnm9P:I!KwjkI.LUNK3e_i&u3\|hR#nqL]fz5rIe:EiIOOGWxU2h\|bswHExfZO~!:
2025-04-28 15:34:18 UTC	1460	IN	Data Raw: 32 1b 0a 18 02 7a 78 07 ff b7 e4 2c d8 df 5c 0f 2a b6 bb 00 9c 87 d0 82 ba 63 31 84 2a c7 46 98 eb 69 7b ca ce 9c e6 4a 57 82 55 9d 16 93 e4 b5 57 d0 fa 9c 13 8a fb e0 26 aa cb 42 66 b1 8c b9 47 81 8f 78 e3 fb 48 3f d3 f1 e2 b2 3b da 37 b9 e7 72 09 2f 28 74 c5 3e 08 59 00 a5 23 c9 e2 00 24 d9 ad 9f 24 21 fe a8 3a df 1f 25 21 0e a8 2a 9b 7f 22 09 51 ff 59 12 22 01 43 82 45 51 0d 42 bf 2f 09 89 de 9f 4c c9 db 61 c0 ef 3e d3 70 fe f1 53 0b 5c 79 ac ed 1b 14 3c 55 e6 4d a6 39 95 45 ed 70 7c 08 dc 92 bb c1 42 6b e0 27 49 08 37 a7 00 02 f1 4d 12 f2 3a 2b a0 03 08 78 f1 a7 6c c7 af 6c 11 f6 71 b6 48 c2 c1 c2 15 65 9e c7 e2 24 04 13 c0 70 d4 8d da 51 c3 da c6 c2 de fc 1b fb 24 28 0d 00 1c 00 9f 0c c0 21 2d c4 2b f0 af 6b 41 16 01 24 3a 0d 80 44 c3 38 a6 05 59 7f Data Ascii: 2zx,\c1Fi{JWUW&BfGxH?;7r/(t>Y#$$!:%!*"QY"CEQB/La>pS\y<UM9Ep\|Bk'I7M:+xllqHe$pQ$(!-+kA$:D8Y
2025-04-28 15:34:18 UTC	1460	IN	Data Raw: 7c 24 f8 a0 ce fd 7a 40 64 78 d4 ba d0 e2 f2 bf a4 fc f8 e2 50 c0 60 d0 a5 93 cd 3c de 94 69 0f 58 bd 36 18 c4 18 88 b1 82 8a 48 29 e9 2a 82 cf 65 09 86 26 8b dc 0b 7d bc be 1c f4 58 aa f5 29 c8 ea 5a 78 49 52 be 34 5b fd 1e 8f 4e 87 e0 ce 85 57 93 e2 f3 cf 81 d3 11 8f a5 b2 a4 79 d3 68 e4 07 e8 4e 36 bd 4c 8d 0d 77 9b 0b de f5 6b e4 6f e1 7f cd 83 97 50 96 71 e7 35 a7 8f 91 df 93 06 62 9c c9 b1 75 aa 1e 01 c3 a0 d1 c7 1f 72 06 82 e0 58 00 02 d7 0a cd a4 eb a5 3e 5d c7 86 55 ab e9 22 f1 63 09 2d 9d 13 3e 49 38 57 5c d8 83 67 c1 75 c5 48 f3 65 71 9a a2 b0 a6 47 e8 32 13 f5 41 d5 cc 6d 22 a3 c4 bb 85 55 d2 db 8a a2 79 30 ce 1e a7 f3 90 19 ec 12 95 c4 54 46 a6 8f 96 54 04 f3 6d 0c 27 c7 22 b3 1e f0 47 da b5 bb ec 28 a7 bb 79 3e 7f 40 cc 97 48 c3 94 f8 d8 df Data Ascii: \|$z@dxP`<iX6H)*e&}X)ZxIR4[NWyhN6LwkoPq5burX>]U"c->I8W\guHeqG2Am"Uy0TFTm'"G(y>@H
2025-04-28 15:34:18 UTC	1460	IN	Data Raw: 01 22 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 82 01 0f 00 30 82 01 0a 02 82 01 01 00 a9 9d 26 b6 7a 21 ff 73 7a 7d 44 18 6d a3 7f b8 a4 78 23 38 6f 6b cd 97 ef 3f 75 99 b5 f5 2a e7 7c f9 a2 de ed d8 f1 6e 7b d7 b0 43 9c ac ff 11 e2 94 7d 61 09 b5 51 4e 0f 1b 03 13 b4 e1 92 7e 9e 6b d5 a1 e0 c3 e3 f1 92 12 81 23 1d 9e 5b 8c 83 b9 a6 f2 ce fc 34 44 06 ee 97 6a 1a ad 7a 2a 89 47 bd 67 a2 d1 1b 21 b0 95 e8 29 23 38 98 10 56 c4 12 82 e9 48 03 14 04 7f bf 70 42 b6 d9 b6 04 1b 03 9c 67 15 67 02 d2 9d 6a ae 97 5b 7d 39 7e 4d a2 c1 ac 9f 7c 54 6e 51 8b bf 3d a5 80 c1 91 a9 64 bb 20 52 b5 85 97 b4 95 50 0a 41 6e 51 f1 ca cb 97 e4 bf 2a 74 93 cf a7 ba 48 88 0c 5f 19 af 70 7d 15 f1 9f 24 d6 9c 85 c7 06 de 82 3c 2b c3 8b fc 4e 4e e9 0e fa 79 68 26 98 fa e0 d5 Data Ascii: "0H0&z!sz}Dmx#8ok?u\|n{C}aQN~k#[4DjzGg!)#8VHpBggj[}9~M\|TnQ=d RPAnQtH_p}$<+NNyh&
2025-04-28 15:34:18 UTC	1460	IN	Data Raw: 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 28 30 26 06 03 55 04 03 13 1f 4d 69 63 72 6f 73 6f 66 74 20 55 70 64 61 74 65 20 53 69 67 6e 69 6e 67 20 43 41 20 32 2e 33 30 82 02 22 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 82 02 0f 00 30 82 02 0a 02 82 02 01 00 ac 39 80 cb 34 50 ca 26 3f 5d 76 26 ca d3 8c c1 1d 5c eb 30 97 c6 66 86 26 a6 d5 5d 5f 4f cd 80 4c 0f 67 ec 25 0c bb 39 11 3b 6e 86 fd c7 21 27 60 fc 80 7c 01 89 ad e8 6e cd bd d0 47 5f 58 6d 00 3b 46 57 99 7d 16 b3 76 12 8b ca 9d 86 6c 1d 70 9a 69 d4 45 fe ce 72 ea ca ca 94 60 9d 7c 73 Data Ascii: 10UUS10UWashington10URedmond10UMicrosoft Corporation1(0&UMicrosoft Update Signing CA 2.30"0*H094P&?]v&\0f&]_OLg%9;n!'`\|nG_Xm;FW}vlpiEr`\|s

Target ID:	1
Start time:	11:33:27
Start date:	28/04/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff786830000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Target ID:	2
Start time:	11:33:31
Start date:	28/04/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2152,i,12751529918615607170,13619416143622172560,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2232 /prefetch:3
Imagebase:	0x7ff786830000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false