Edit tour

Windows Analysis Report
https://www.baidu.com/link?url=CvCuJHQ5mUiF8tzYwW4LExI5DJ7e8SA78W1tu_uckwU-RgMoIZevncSlciEmtvdq&wd=cmljaGFyZC5wZXBpQGdlcmZsb3J1c2EuY29t

Overview

General Information

Sample URL:	https://www.baidu.com/link?url=CvCuJHQ5mUiF8tzYwW4LExI5DJ7e8SA78W1tu_uckwU-RgMoIZevncSlciEmtvdq&wd=cmljaGFyZC5wZXBpQGdlcmZsb3J1c2EuY29t
Analysis ID:	1426820
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6912 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 3676 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2320 --field-trial-handle=2276,i,15163067033320989908,4814463325388249182,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 4188 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4180 --field-trial-handle=2276,i,15163067033320989908,4814463325388249182,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 4104 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4360 --field-trial-handle=2276,i,15163067033320989908,4814463325388249182,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 5072 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.baidu.com/link?url=CvCuJHQ5mUiF8tzYwW4LExI5DJ7e8SA78W1tu_uckwU-RgMoIZevncSlciEmtvdq&wd=cmljaGFyZC5wZXBpQGdlcmZsb3J1c2EuY29t" MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://www.youtube.com/embed/wAD9uO9YAQw?playlist=wAD9uO9YAQw&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&origin=https%3A%2F%2Fniceindiatravel.com&widgetid=1	HTTP Parser: No favicon
Source: https://www.youtube.com/embed/wAD9uO9YAQw?playlist=wAD9uO9YAQw&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&origin=https%3A%2F%2Fniceindiatravel.com&widgetid=1	HTTP Parser: No favicon
Source: https://www.youtube.com/embed/wAD9uO9YAQw?playlist=wAD9uO9YAQw&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&origin=https%3A%2F%2Fniceindiatravel.com&widgetid=1	HTTP Parser: No favicon
Source: https://www.youtube.com/embed/wAD9uO9YAQw?playlist=wAD9uO9YAQw&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&origin=https%3A%2F%2Fniceindiatravel.com&widgetid=1	HTTP Parser: No favicon
Source: https://www.youtube.com/embed/wAD9uO9YAQw?playlist=wAD9uO9YAQw&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&origin=https%3A%2F%2Fniceindiatravel.com&widgetid=1	HTTP Parser: No favicon
Source: https://www.youtube.com/embed/wAD9uO9YAQw?playlist=wAD9uO9YAQw&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&origin=https%3A%2F%2Fniceindiatravel.com&widgetid=1	HTTP Parser: No favicon
Source: https://www.youtube.com/embed/wAD9uO9YAQw?playlist=wAD9uO9YAQw&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&origin=https%3A%2F%2Fniceindiatravel.com&widgetid=1	HTTP Parser: No favicon

Source: unknown

HTTPS traffic detected: 173.222.162.42:443 -> 192.168.2.11:49761 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 23.208.128.100:443 -> 192.168.2.11:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.208.128.100:443 -> 192.168.2.11:49720 version: TLS 1.2

Source: unknown

HTTPS traffic detected: 173.222.162.42:443 -> 192.168.2.11:49761 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.3
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.3
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.3
Source: unknown	TCP traffic detected without corresponding DNS query: 23.208.128.100
Source: unknown	TCP traffic detected without corresponding DNS query: 23.208.128.100
Source: unknown	TCP traffic detected without corresponding DNS query: 23.208.128.100
Source: unknown	TCP traffic detected without corresponding DNS query: 23.208.128.100
Source: unknown	TCP traffic detected without corresponding DNS query: 23.208.128.100
Source: unknown	TCP traffic detected without corresponding DNS query: 23.208.128.100
Source: unknown	TCP traffic detected without corresponding DNS query: 23.208.128.100
Source: unknown	TCP traffic detected without corresponding DNS query: 23.208.128.100
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.3
Source: unknown	TCP traffic detected without corresponding DNS query: 23.208.128.100
Source: unknown	TCP traffic detected without corresponding DNS query: 23.208.128.100
Source: unknown	TCP traffic detected without corresponding DNS query: 23.208.128.100
Source: unknown	TCP traffic detected without corresponding DNS query: 23.208.128.100
Source: unknown	TCP traffic detected without corresponding DNS query: 23.208.128.100
Source: unknown	TCP traffic detected without corresponding DNS query: 23.208.128.100
Source: unknown	TCP traffic detected without corresponding DNS query: 23.208.128.100
Source: unknown	TCP traffic detected without corresponding DNS query: 23.208.128.100
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 23.208.128.100
Source: unknown	TCP traffic detected without corresponding DNS query: 23.208.128.100
Source: unknown	TCP traffic detected without corresponding DNS query: 23.208.128.100
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.3
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.3
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.3
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /link?url=CvCuJHQ5mUiF8tzYwW4LExI5DJ7e8SA78W1tu_uckwU-RgMoIZevncSlciEmtvdq&wd=cmljaGFyZC5wZXBpQGdlcmZsb3J1c2EuY29t HTTP/1.1Host: www.baidu.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://www.baidu.com/link?url=CvCuJHQ5mUiF8tzYwW4LExI5DJ7e8SA78W1tu_uckwU-RgMoIZevncSlciEmtvdq&wd=cmljaGFyZC5wZXBpQGdlcmZsb3J1c2EuY29tAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: niceindiatravel.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.baidu.com/link?url=CvCuJHQ5mUiF8tzYwW4LExI5DJ7e8SA78W1tu_uckwU-RgMoIZevncSlciEmtvdq&wd=cmljaGFyZC5wZXBpQGdlcmZsb3J1c2EuY29tAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/css/dist/block-library/style.min.css?ver=6.5.2 HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.9.3 HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/salient/css/font-awesome-legacy.min.css?ver=4.7.1 HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/salient/css/build/grid-system.css?ver=16.1.3 HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/salient/css/build/style.css?ver=16.1.3 HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/salient/css/build/elements/element-testimonial.css?ver=16.1.3 HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/salient/css/build/elements/element-fancy-box.css?ver=16.1.3 HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/salient/css/build/elements/element-video-lightbox.css?ver=16.1.3 HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/salient/css/build/third-party/cf7.css?ver=16.1.3 HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/salient/css/build/responsive.css?ver=16.1.3 HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/salient/css/build/ascend.css?ver=16.1.3 HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/salient/menu-dynamic.css?ver=47034 HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/js_composer_salient/assets/css/js_composer.min.css?ver=7.1 HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/salient/css/salient-dynamic-styles.css?ver=34291 HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/revslider6620n-1/public/assets/fonts/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://niceindiatravel.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/02/nit-logo-new-2021.jpg HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/revslider6620n-1/public/assets/assets/dummy.png HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iframe_api?ver=7.1 HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/salient/css/fonts/fontawesome-webfont.woff?v=4.2 HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://niceindiatravel.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://niceindiatravel.com/wp-content/themes/salient/css/font-awesome-legacy.min.css?ver=4.7.1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/salient/css/fonts/icomoon.woff?v=1.6 HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://niceindiatravel.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://niceindiatravel.com/wp-content/themes/salient/css/build/style.css?ver=16.1.3Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/revslider6620n-1/public/assets/fonts/font-awesome/css/font-awesome.css HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/salient/css/build/style-non-critical.css?ver=16.1.3 HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/02/nit-logo-new-2021.jpg HTTP/1.1Host: niceindiatravel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/revslider6620n-1/public/assets/assets/dummy.png HTTP/1.1Host: niceindiatravel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/salient/css/build/plugins/magnific.css?ver=8.6.0 HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/salient/css/build/off-canvas/core.css?ver=16.1.3 HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/revslider6620n-1/public/assets/css/rs6.css?ver=6.6.20 HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/ui/menu.min.js?ver=1.13.2 HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/dist/vendor/wp-polyfill-inert.min.js?ver=3.1.2 HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.14.0 HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/dist/dom-ready.min.js?ver=f77871ff7694fffea381 HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/dist/hooks.min.js?ver=2810c76e705dd1a53b18 HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6 HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/dist/a11y.min.js?ver=d90eebea464f6c09bfd5 HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/ui/autocomplete.min.js?ver=1.13.2 HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/salient/nectar/assets/functions/ajax-search/wpss-search-suggest.js HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.9.3 HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.9.3 HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/salient/js/build/third-party/jquery.easing.min.js?ver=1.3 HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/salient/js/build/third-party/jquery.mousewheel.min.js?ver=3.1.13 HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/salient/js/build/priority.js?ver=16.1.3 HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/salient/js/build/third-party/transit.min.js?ver=0.9.9 HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/salient/js/build/third-party/waypoints.js?ver=4.0.2 HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/salient/js/build/third-party/imagesLoaded.min.js?ver=4.1.4 HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/salient/js/build/third-party/hoverintent.min.js?ver=1.9 HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/salient/js/build/third-party/magnific.js?ver=7.0.1 HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/salient-core/js/third-party/touchswipe.min.js?ver=1.0 HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/salient/js/build/elements/nectar-testimonial-slider.js?ver=16.1.3 HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/salient/js/build/third-party/anime.min.js?ver=4.5.1 HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/salient/js/build/third-party/superfish.js?ver=1.5.8 HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/salient/js/build/init.js?ver=16.1.3 HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/js_composer_salient/assets/js/dist/js_composer_front.min.js?ver=7.1 HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/revslider6620n-1/public/assets/js/rbtools.min.js?ver=6.6.20 HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/revslider6620n-1/public/assets/js/rs6.min.js?ver=6.6.20 HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/10/ganga.jpg HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/10/nepal1.jpg HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/10/lank1.jpg HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/10/bhtan1.jpg HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/10/mald.jpg HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/11/2.jpg HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/10/lank1.jpg HTTP/1.1Host: niceindiatravel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/revslider6620n-1/public/assets/fonts/revicons/revicons.woff?5510888 HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://niceindiatravel.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://niceindiatravel.com/wp-content/plugins/revslider6620n-1/public/assets/css/rs6.css?ver=6.6.20Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/10/nepal1.jpg HTTP/1.1Host: niceindiatravel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/10/bg1-1.jpg HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/10/ganga.jpg HTTP/1.1Host: niceindiatravel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/10/t10.jpg HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/10/7.jpg HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/10/mald.jpg HTTP/1.1Host: niceindiatravel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/10/4-1.jpg HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/7ebf4817/www-widgetapi.vflset/www-widgetapi.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/10/3-1.jpg HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/10/5.jpg HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/10/bhtan1.jpg HTTP/1.1Host: niceindiatravel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/11/2.jpg HTTP/1.1Host: niceindiatravel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/10/bg1-1.jpg HTTP/1.1Host: niceindiatravel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/10/1-2.jpg HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/wAD9uO9YAQw?playlist=wAD9uO9YAQw&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&origin=https%3A%2F%2Fniceindiatravel.com&widgetid=1 HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/player/7ebf4817/www-player.css HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.youtube.com/embed/wAD9uO9YAQw?playlist=wAD9uO9YAQw&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&origin=https%3A%2F%2Fniceindiatravel.com&widgetid=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/10/testimonial.jpg HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/7ebf4817/www-embed-player.vflset/www-embed-player.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/embed/wAD9uO9YAQw?playlist=wAD9uO9YAQw&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&origin=https%3A%2F%2Fniceindiatravel.com&widgetid=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/player/7ebf4817/player_ias.vflset/en_US/base.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/embed/wAD9uO9YAQw?playlist=wAD9uO9YAQw&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&origin=https%3A%2F%2Fniceindiatravel.com&widgetid=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/10/t10.jpg HTTP/1.1Host: niceindiatravel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/7ebf4817/player_ias.vflset/en_US/embed.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/embed/wAD9uO9YAQw?playlist=wAD9uO9YAQw&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&origin=https%3A%2F%2Fniceindiatravel.com&widgetid=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /instream/ad_status.js HTTP/1.1Host: static.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/th/3pcSFWJI7a5SNv89Az7bTi6V80M4jnn3bPXR3H-Ku18.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /80u-Vp0LwT_GzPtXdBZwLam5D06IleML6OJ6fgd3yr_LnC9097d3fFdw1o3BZ8djM465KIoBYbA=s68-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.ggpht.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/10/5.jpg HTTP/1.1Host: niceindiatravel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/wp-emoji-release.min.js?ver=6.5.2 HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /80u-Vp0LwT_GzPtXdBZwLam5D06IleML6OJ6fgd3yr_LnC9097d3fFdw1o3BZ8djM465KIoBYbA=s68-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.ggpht.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/10/7.jpg HTTP/1.1Host: niceindiatravel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/10/1-2.jpg HTTP/1.1Host: niceindiatravel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/10/4-5.jpg HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /generate_204?sUKJnQ HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/embed/wAD9uO9YAQw?playlist=wAD9uO9YAQw&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&origin=https%3A%2F%2Fniceindiatravel.com&widgetid=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/player/7ebf4817/player_ias.vflset/en_US/captions.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/embed/wAD9uO9YAQw?playlist=wAD9uO9YAQw&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&origin=https%3A%2F%2Fniceindiatravel.com&widgetid=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/player/7ebf4817/player_ias.vflset/en_US/endscreen.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/embed/wAD9uO9YAQw?playlist=wAD9uO9YAQw&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&origin=https%3A%2F%2Fniceindiatravel.com&widgetid=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/player?prettyPrint=false HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1713301547&ei=y5MeZqSPB9aoy_sPxcuI0A8&ip=81.181.57.52&id=o-AGTEz6yrZN30zWRHetU01zfPZPIBkqXwN_jxSqpNGk-M&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=rv&mm=31%2C29&mn=sn-p5qlsn76%2Csn-p5qddn7r&ms=au%2Crdu&mv=m&mvi=5&pl=26&initcwndbps=1037500&bui=AaUN6a0X-vPuPWnoZdJnY8gcaw5_Rec69zGixzS_kVy6dh8yJJHbZPIDav7sGh5eMsIrcUMSgNZoV-eJ&spc=UWF9f_C907pjE2i9QlVivDiO3bFloqFrBkw3MS1j9d3XXjQUG-40uVYW-Q&vprv=1&svpuc=1&mime=audio%2Fwebm&ns=8Io3oEW7FSAr8VYj4CRq5ycQ&gir=yes&clen=2888165&dur=156.941&lmt=1693419053011705&mt=1713279665&fvip=5&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=4432434&n=65_ILddd0oaXCA&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRgIhAIqn_cmzA9wxw9Qv3XmYLmzgIYuMyqkUCJ74E3gyfGPmAiEAyvaE7AH2ALtvgZL7TmmJy3gr_gksqFvhADtsOLFIvXM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ALClDIEwRQIhALaMd8X8P3LTQ-dzb36htdQmyx7RegKRkqR_w8GTV_GCAiAXEkpCyRYR_s7h1aB1LlSa8sV2f8SVngOiCKBfSgfTuQ%3D%3D&alr=yes&cpn=F6GU1QEdhoMLD-Np&cver=1.20240409.01.00&range=0-66070&rn=2&rbuf=0&pot=IjiLjYuO7ZMYRsjq_8fGyrrCxeH71N7n7_7EzuHE-9L6-snnwsbI6sHb3vXCyMzqyurAzK6-z6i4yQ==&ump=1&srfvp=1 HTTP/1.1Host: rr5---sn-p5qlsn76.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iframe_api?ver=7.1 HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
Source: global traffic	HTTP traffic detected: GET /vi_webp/wAD9uO9YAQw/sddefault.webp HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1713301547&ei=y5MeZqSPB9aoy_sPxcuI0A8&ip=81.181.57.52&id=o-AGTEz6yrZN30zWRHetU01zfPZPIBkqXwN_jxSqpNGk-M&itag=397&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=rv&mm=31%2C29&mn=sn-p5qlsn76%2Csn-p5qddn7r&ms=au%2Crdu&mv=m&mvi=5&pl=26&initcwndbps=1037500&bui=AaUN6a0X-vPuPWnoZdJnY8gcaw5_Rec69zGixzS_kVy6dh8yJJHbZPIDav7sGh5eMsIrcUMSgNZoV-eJ&spc=UWF9f_C907pjE2i9QlVivDiO3bFloqFrBkw3MS1j9d3XXjQUG-40uVYW-Q&vprv=1&svpuc=1&mime=video%2Fmp4&ns=8Io3oEW7FSAr8VYj4CRq5ycQ&gir=yes&clen=8585092&dur=156.920&lmt=1693475130863016&mt=1713279665&fvip=5&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=4437434&n=65_ILddd0oaXCA&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIhAIJD2XoyAZdDtZec9zoNpH93qOSJ9tDx0ji_zhe-crfHAiAiIRnPfFyfm5dlKv_4IedTtbt55HI_TuklC2DIglN3cQ%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ALClDIEwRQIhALaMd8X8P3LTQ-dzb36htdQmyx7RegKRkqR_w8GTV_GCAiAXEkpCyRYR_s7h1aB1LlSa8sV2f8SVngOiCKBfSgfTuQ%3D%3D&alr=yes&cpn=F6GU1QEdhoMLD-Np&cver=1.20240409.01.00&range=0-176547&rn=1&rbuf=0&pot=IjhWAlYBMBzFyRVlIkgbRWdNGG4mWwNoMnEZQTxLJl0ndRRoH0kVZRxUA3ofRxFlF2UdQ3MxEidlRg==&ump=1&srfvp=1 HTTP/1.1Host: rr5---sn-p5qlsn76.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/wAD9uO9YAQw?playlist=wAD9uO9YAQw&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&origin=https%3A%2F%2Fniceindiatravel.com&widgetid=1 HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/next?prettyPrint=false HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1713301547&ei=y5MeZqSPB9aoy_sPxcuI0A8&ip=81.181.57.52&id=o-AGTEz6yrZN30zWRHetU01zfPZPIBkqXwN_jxSqpNGk-M&itag=398&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=rv&mm=31%2C29&mn=sn-p5qlsn76%2Csn-p5qddn7r&ms=au%2Crdu&mv=m&mvi=5&pl=26&initcwndbps=1037500&bui=AaUN6a0X-vPuPWnoZdJnY8gcaw5_Rec69zGixzS_kVy6dh8yJJHbZPIDav7sGh5eMsIrcUMSgNZoV-eJ&spc=UWF9f_C907pjE2i9QlVivDiO3bFloqFrBkw3MS1j9d3XXjQUG-40uVYW-Q&vprv=1&svpuc=1&mime=video%2Fmp4&ns=8Io3oEW7FSAr8VYj4CRq5ycQ&gir=yes&clen=15356387&dur=156.920&lmt=1693475295824447&mt=1713279665&fvip=5&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=4437434&n=65_ILddd0oaXCA&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIgDgSjMet05B9aDksP9m164a7Ii8bfIUCpyPIF0Iu1qVQCIQDAgJB0tAqjMUhsCFgApfB_yN2W-bhf-qss2eYwVMrOtg%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ALClDIEwRQIhALaMd8X8P3LTQ-dzb36htdQmyx7RegKRkqR_w8GTV_GCAiAXEkpCyRYR_s7h1aB1LlSa8sV2f8SVngOiCKBfSgfTuQ%3D%3D&alr=yes&cpn=F6GU1QEdhoMLD-Np&cver=1.20240409.01.00&range=0-1103&rn=3&rbuf=0&pot=IjiUaJRu8nYHpNcP4CLZL6Un2gTkMcEC8BvbK_4h5DflH9YC3SPXD94-wRDdLdMP1Q_fKbFb0E2nLA==&ump=1&srfvp=1 HTTP/1.1Host: rr5---sn-p5qlsn76.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1713301547&ei=y5MeZqSPB9aoy_sPxcuI0A8&ip=81.181.57.52&id=o-AGTEz6yrZN30zWRHetU01zfPZPIBkqXwN_jxSqpNGk-M&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=rv&mm=31%2C29&mn=sn-p5qlsn76%2Csn-p5qddn7r&ms=au%2Crdu&mv=m&mvi=5&pl=26&initcwndbps=1037500&bui=AaUN6a0X-vPuPWnoZdJnY8gcaw5_Rec69zGixzS_kVy6dh8yJJHbZPIDav7sGh5eMsIrcUMSgNZoV-eJ&spc=UWF9f_C907pjE2i9QlVivDiO3bFloqFrBkw3MS1j9d3XXjQUG-40uVYW-Q&vprv=1&svpuc=1&mime=audio%2Fwebm&ns=8Io3oEW7FSAr8VYj4CRq5ycQ&gir=yes&clen=2888165&dur=156.941&lmt=1693419053011705&mt=1713279665&fvip=5&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=4432434&n=65_ILddd0oaXCA&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRgIhAIqn_cmzA9wxw9Qv3XmYLmzgIYuMyqkUCJ74E3gyfGPmAiEAyvaE7AH2ALtvgZL7TmmJy3gr_gksqFvhADtsOLFIvXM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ALClDIEwRQIhALaMd8X8P3LTQ-dzb36htdQmyx7RegKRkqR_w8GTV_GCAiAXEkpCyRYR_s7h1aB1LlSa8sV2f8SVngOiCKBfSgfTuQ%3D%3D&alr=yes&cpn=F6GU1QEdhoMLD-Np&cver=1.20240409.01.00&range=66071-131606&rn=4&rbuf=3763&pot=IjgJ1gnQb8iaGkqxfZxEkTiZR7p5j1y8baVGlWOfeYl4oUu8QJ1KsUOAXK5Ak06xSLFClyzlTfM6kg==&ump=1&srfvp=1 HTTP/1.1Host: rr5---sn-p5qlsn76.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/10/3-1.jpg HTTP/1.1Host: niceindiatravel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/10/testimonial.jpg HTTP/1.1Host: niceindiatravel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ptracking?html5=1&video_id=wAD9uO9YAQw&cpn=F6GU1QEdhoMLD-Np&ei=y5MeZqSPB9aoy_sPxcuI0A8&ptk=youtube_none&pltype=contentugc HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-YouTube-Ad-Signals: dt=1713279945329&flash=0&frm=2&u_tz=120&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1267%2C713&vis=2&wgl=true&ca_type=imagesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-YouTube-Utc-Offset: 120X-YouTube-Client-Name: 56X-YouTube-Client-Version: 1.20240409.01.00X-YouTube-Time-Zone: Europe/ZurichX-Goog-Visitor-Id: CgtJMG1ONlpYUjdsOCjIp_qwBjIKCgJVUxIEGgAgKA%3D%3Dsec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/embed/wAD9uO9YAQw?playlist=wAD9uO9YAQw&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&origin=https%3A%2F%2Fniceindiatravel.com&widgetid=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
Source: global traffic	HTTP traffic detected: GET /api/stats/playback?ns=yt&el=embedded&cpn=F6GU1QEdhoMLD-Np&ver=2&cmt=0.212&fmt=397&fs=0&rt=4.271&euri=https%3A%2F%2Fniceindiatravel.com%2F&lact=4311&cl=623129822&mos=1&volume=100&cbr=Chrome&cbrver=117.0.0.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240409.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&epm=1&delay=4&hl=en_US&cr=US&len=157&fexp=v1%2C23858057%2C125239%2C21348%2C76094%2C54572%2C73455%2C230596%2C84737%2C36318%2C6271%2C26443548%2C7111%2C31786%2C4557%2C9954%2C1192%2C10512%2C15711%2C273%2C6966%2C2%2C6689%2C2007%2C4957%2C4115%2C12518%2C1263%2C5498%2C796%2C643%2C5538%2C2893%2C2%2C531%2C819%2C531%2C4712%2C5599%2C1104%2C4465&rtn=14&afmt=251&size=1267%3A713&inview=0&muted=1&vis=3&docid=wAD9uO9YAQw&ei=y5MeZqSPB9aoy_sPxcuI0A8&plid=AAYWOBKoz4xd3wIM&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2FwAD9uO9YAQw%3Fplaylist%3DwAD9uO9YAQw%26iv_load_policy%3D3%26enablejsapi%3D1%26disablekb%3D1%26autoplay%3D1%26controls%3D0%26showinfo%3D0%26rel%3D0%26loop%3D1%26origin%3Dhttps%253A%252F%252Fniceindiatravel.com%26widgetid%3D1&list=TLGG0nOp5Ks1AkExNjA0MjAyNA&of=wbAUJoLFDaeeOSJrHXH1sg&vm=CAEQABgEOjJBSHFpSlRJaWlUV3AtaVVHU3dxLUpoNjVrV0taQVJBeTRCbVVLMmJUWXhKOURvQUVkd2J3QVBta0tES0l3V1JHa3UzUFV5akd4WUhVUEZvYWZzdmJ3VzNvV3ZjMWR6Q3ZYY3B0Wjd2aWh4NV9qdk9kR3NGMFRSLTdDcmRpYy1ydVI4bW1ZYi1oNjd3Tzc2cXd3bXBXcG1FMTliMUhRM0x4dW53SEV5RUFXNEFoAg HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-YouTube-Ad-Signals: dt=1713279945329&flash=0&frm=2&u_tz=120&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1267%2C713&vis=2&wgl=true&ca_type=imagesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-YouTube-Utc-Offset: 120X-YouTube-Client-Name: 56X-YouTube-Client-Version: 1.20240409.01.00X-YouTube-Time-Zone: Europe/ZurichX-Goog-Visitor-Id: CgtJMG1ONlpYUjdsOCjIp_qwBjIKCgJVUxIEGgAgKA%3D%3Dsec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/embed/wAD9uO9YAQw?playlist=wAD9uO9YAQw&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&origin=https%3A%2F%2Fniceindiatravel.com&widgetid=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1713301547&ei=y5MeZqSPB9aoy_sPxcuI0A8&ip=81.181.57.52&id=o-AGTEz6yrZN30zWRHetU01zfPZPIBkqXwN_jxSqpNGk-M&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=rv&mm=31%2C29&mn=sn-p5qlsn76%2Csn-p5qddn7r&ms=au%2Crdu&mv=m&mvi=5&pl=26&initcwndbps=1037500&bui=AaUN6a0X-vPuPWnoZdJnY8gcaw5_Rec69zGixzS_kVy6dh8yJJHbZPIDav7sGh5eMsIrcUMSgNZoV-eJ&spc=UWF9f_C907pjE2i9QlVivDiO3bFloqFrBkw3MS1j9d3XXjQUG-40uVYW-Q&vprv=1&svpuc=1&mime=audio%2Fwebm&ns=8Io3oEW7FSAr8VYj4CRq5ycQ&gir=yes&clen=2888165&dur=156.941&lmt=1693419053011705&mt=1713279665&fvip=5&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=4432434&n=65_ILddd0oaXCA&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRgIhAIqn_cmzA9wxw9Qv3XmYLmzgIYuMyqkUCJ74E3gyfGPmAiEAyvaE7AH2ALtvgZL7TmmJy3gr_gksqFvhADtsOLFIvXM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ALClDIEwRQIhALaMd8X8P3LTQ-dzb36htdQmyx7RegKRkqR_w8GTV_GCAiAXEkpCyRYR_s7h1aB1LlSa8sV2f8SVngOiCKBfSgfTuQ%3D%3D&alr=yes&cpn=F6GU1QEdhoMLD-Np&cver=1.20240409.01.00&range=131607-285234&rn=5&rbuf=7526&pot=MnRHeEeFuHFwnkdAG16jL-aDngYNrsZJj72wzzuSl1KI99-wPjwpBfmvgTdvejBBkb8hRejODoqY6-NrNRoYj5BeGx9EzDVgBwEAWR3SrWqoEDJk5EzPIQjvWotgBGd18NKfWwDX1mK17wp_gi85l7DQQ1Dbbw==&ump=1&srfvp=1 HTTP/1.1Host: rr5---sn-p5qlsn76.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/10/4-1.jpg HTTP/1.1Host: niceindiatravel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi_webp/wAD9uO9YAQw/sddefault.webp HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1713301547&ei=y5MeZqSPB9aoy_sPxcuI0A8&ip=81.181.57.52&id=o-AGTEz6yrZN30zWRHetU01zfPZPIBkqXwN_jxSqpNGk-M&itag=397&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=rv&mm=31%2C29&mn=sn-p5qlsn76%2Csn-p5qddn7r&ms=au%2Crdu&mv=m&mvi=5&pl=26&initcwndbps=1037500&bui=AaUN6a0X-vPuPWnoZdJnY8gcaw5_Rec69zGixzS_kVy6dh8yJJHbZPIDav7sGh5eMsIrcUMSgNZoV-eJ&spc=UWF9f_C907pjE2i9QlVivDiO3bFloqFrBkw3MS1j9d3XXjQUG-40uVYW-Q&vprv=1&svpuc=1&mime=video%2Fmp4&ns=8Io3oEW7FSAr8VYj4CRq5ycQ&gir=yes&clen=8585092&dur=156.920&lmt=1693475130863016&mt=1713279665&fvip=5&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=4437434&n=65_ILddd0oaXCA&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIhAIJD2XoyAZdDtZec9zoNpH93qOSJ9tDx0ji_zhe-crfHAiAiIRnPfFyfm5dlKv_4IedTtbt55HI_TuklC2DIglN3cQ%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ALClDIEwRQIhALaMd8X8P3LTQ-dzb36htdQmyx7RegKRkqR_w8GTV_GCAiAXEkpCyRYR_s7h1aB1LlSa8sV2f8SVngOiCKBfSgfTuQ%3D%3D&alr=yes&cpn=F6GU1QEdhoMLD-Np&cver=1.20240409.01.00&range=176548-398200&rn=6&rbuf=7502&pot=MnRHeEeFuHFwnkdAG16jL-aDngYNrsZJj72wzzuSl1KI99-wPjwpBfmvgTdvejBBkb8hRejODoqY6-NrNRoYj5BeGx9EzDVgBwEAWR3SrWqoEDJk5EzPIQjvWotgBGd18NKfWwDX1mK17wp_gi85l7DQQ1Dbbw==&ump=1&srfvp=1 HTTP/1.1Host: rr5---sn-p5qlsn76.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /generate_204?eIuGOg HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/embed/wAD9uO9YAQw?playlist=wAD9uO9YAQw&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&origin=https%3A%2F%2Fniceindiatravel.com&widgetid=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1713301547&ei=y5MeZqSPB9aoy_sPxcuI0A8&ip=81.181.57.52&id=o-AGTEz6yrZN30zWRHetU01zfPZPIBkqXwN_jxSqpNGk-M&itag=398&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=rv&mm=31%2C29&mn=sn-p5qlsn76%2Csn-p5qddn7r&ms=au%2Crdu&mv=m&mvi=5&pl=26&initcwndbps=1037500&bui=AaUN6a0X-vPuPWnoZdJnY8gcaw5_Rec69zGixzS_kVy6dh8yJJHbZPIDav7sGh5eMsIrcUMSgNZoV-eJ&spc=UWF9f_C907pjE2i9QlVivDiO3bFloqFrBkw3MS1j9d3XXjQUG-40uVYW-Q&vprv=1&svpuc=1&mime=video%2Fmp4&ns=8Io3oEW7FSAr8VYj4CRq5ycQ&gir=yes&clen=15356387&dur=156.920&lmt=1693475295824447&mt=1713279665&fvip=5&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=4437434&n=65_ILddd0oaXCA&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIgDgSjMet05B9aDksP9m164a7Ii8bfIUCpyPIF0Iu1qVQCIQDAgJB0tAqjMUhsCFgApfB_yN2W-bhf-qss2eYwVMrOtg%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ALClDIEwRQIhALaMd8X8P3LTQ-dzb36htdQmyx7RegKRkqR_w8GTV_GCAiAXEkpCyRYR_s7h1aB1LlSa8sV2f8SVngOiCKBfSgfTuQ%3D%3D&alr=yes&cpn=F6GU1QEdhoMLD-Np&cver=1.20240409.01.00&range=657413-2460933&rn=7&rbuf=11660&pot=MnRHeEeFuHFwnkdAG16jL-aDngYNrsZJj72wzzuSl1KI99-wPjwpBfmvgTdvejBBkb8hRejODoqY6-NrNRoYj5BeGx9EzDVgBwEAWR3SrWqoEDJk5EzPIQjvWotgBGd18NKfWwDX1mK17wp_gi85l7DQQ1Dbbw==&ump=1&srfvp=1 HTTP/1.1Host: rr5---sn-p5qlsn76.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/player?prettyPrint=false HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
Source: global traffic	HTTP traffic detected: GET /80u-Vp0LwT_GzPtXdBZwLam5D06IleML6OJ6fgd3yr_LnC9097d3fFdw1o3BZ8djM465KIoBYbA=s88-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.ggpht.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1713301547&ei=y5MeZqSPB9aoy_sPxcuI0A8&ip=81.181.57.52&id=o-AGTEz6yrZN30zWRHetU01zfPZPIBkqXwN_jxSqpNGk-M&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=rv&mm=31%2C29&mn=sn-p5qlsn76%2Csn-p5qddn7r&ms=au%2Crdu&mv=m&mvi=5&pl=26&initcwndbps=1037500&bui=AaUN6a0X-vPuPWnoZdJnY8gcaw5_Rec69zGixzS_kVy6dh8yJJHbZPIDav7sGh5eMsIrcUMSgNZoV-eJ&spc=UWF9f_C907pjE2i9QlVivDiO3bFloqFrBkw3MS1j9d3XXjQUG-40uVYW-Q&vprv=1&svpuc=1&mime=audio%2Fwebm&ns=8Io3oEW7FSAr8VYj4CRq5ycQ&gir=yes&clen=2888165&dur=156.941&lmt=1693419053011705&mt=1713279665&fvip=5&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=4432434&n=65_ILddd0oaXCA&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRgIhAIqn_cmzA9wxw9Qv3XmYLmzgIYuMyqkUCJ74E3gyfGPmAiEAyvaE7AH2ALtvgZL7TmmJy3gr_gksqFvhADtsOLFIvXM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ALClDIEwRQIhALaMd8X8P3LTQ-dzb36htdQmyx7RegKRkqR_w8GTV_GCAiAXEkpCyRYR_s7h1aB1LlSa8sV2f8SVngOiCKBfSgfTuQ%3D%3D&alr=yes&cpn=F6GU1QEdhoMLD-Np&cver=1.20240409.01.00&range=285235-563147&rn=8&rbuf=14339&pot=MnRHeEeFuHFwnkdAG16jL-aDngYNrsZJj72wzzuSl1KI99-wPjwpBfmvgTdvejBBkb8hRejODoqY6-NrNRoYj5BeGx9EzDVgBwEAWR3SrWqoEDJk5EzPIQjvWotgBGd18NKfWwDX1mK17wp_gi85l7DQQ1Dbbw==&ump=1&srfvp=1 HTTP/1.1Host: rr5---sn-p5qlsn76.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/stats/playback?ns=yt&el=embedded&cpn=jRkNZCQf5oAkxA7P&ver=2&cmt=0.001&fmt=397&fs=0&rt=3.186&euri=https%3A%2F%2Fniceindiatravel.com%2F&lact=3242&cl=623129822&mos=1&volume=100&cbr=Chrome&cbrver=117.0.0.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240409.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&autoplay=1&epm=1&splay=1&delay=4&hl=en_US&cr=US&len=156.941&fexp=v1%2C23858057%2C125239%2C21348%2C76094%2C54572%2C73455%2C230596%2C84737%2C36318%2C6271%2C26443548%2C7111%2C31786%2C4557%2C9954%2C1192%2C10512%2C15711%2C273%2C6966%2C2%2C6689%2C2007%2C4957%2C4115%2C12518%2C1263%2C5498%2C796%2C643%2C5538%2C2893%2C2%2C531%2C819%2C531%2C4712%2C5599%2C1104%2C4465&rtn=14&afmt=251&size=1267%3A713&inview=0&muted=1&docid=wAD9uO9YAQw&ei=z5MeZqaINPHUy_sP0eWdmAw&plid=AAYWOBLu246nWADi&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2FwAD9uO9YAQw%3Fplaylist%3DwAD9uO9YAQw%26iv_load_policy%3D3%26enablejsapi%3D1%26disablekb%3D1%26autoplay%3D1%26controls%3D0%26showinfo%3D0%26rel%3D0%26loop%3D1%26origin%3Dhttps%253A%252F%252Fniceindiatravel.com%26widgetid%3D1&list=TLGG0nOp5Ks1AkExNjA0MjAyNA&of=wbAUJoLFDaeeOSJrHXH1sg&vm=CAEQABgEOjJBSHFpSlRKQ0o0WWhpVHlHMVJqeEhSbnJlNUk1alNPVXV4ZUw0cEQ5UlVzeXIxeUxnUWJ3QVBta0tETEtnc3NpZGtCNXlKTU5mRU1yZWRTR1dyMHo2ZGlNTmNSRlJPZVJzcVp1LXFOc2xfWU5ScHZjZm9GWThIWFhXOFllQnlGbzBzVDRmYzFkZHFzMUxoejRjdWpCb084Zkp3am82MmdhQ2w3cFVtUGVURmdoAg HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-YouTube-Ad-Signals: dt=1713279950337&flash=0&frm=2&u_tz=120&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1267%2C713&vis=1&wgl=true&ca_type=imagesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-YouTube-Utc-Offset: 120X-YouTube-Client-Name: 56X-YouTube-Client-Version: 1.20240409.01.00X-YouTube-Time-Zone: Europe/ZurichX-Goog-Visitor-Id: CgtJMG1ONlpYUjdsOCjOp_qwBjIKCgJVUxIEGgAgKA%3D%3Dsec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/embed/wAD9uO9YAQw?playlist=wAD9uO9YAQw&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&origin=https%3A%2F%2Fniceindiatravel.com&widgetid=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
Source: global traffic	HTTP traffic detected: GET /ptracking?html5=1&video_id=wAD9uO9YAQw&cpn=jRkNZCQf5oAkxA7P&ei=z5MeZqaINPHUy_sP0eWdmAw&ptk=youtube_none&pltype=contentugc HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-YouTube-Ad-Signals: dt=1713279950337&flash=0&frm=2&u_tz=120&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1267%2C713&vis=1&wgl=true&ca_type=imagesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-YouTube-Utc-Offset: 120X-YouTube-Client-Name: 56X-YouTube-Client-Version: 1.20240409.01.00X-YouTube-Time-Zone: Europe/ZurichX-Goog-Visitor-Id: CgtJMG1ONlpYUjdsOCjOp_qwBjIKCgJVUxIEGgAgKA%3D%3Dsec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/embed/wAD9uO9YAQw?playlist=wAD9uO9YAQw&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&origin=https%3A%2F%2Fniceindiatravel.com&widgetid=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/next?prettyPrint=false HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
Source: global traffic	HTTP traffic detected: GET /80u-Vp0LwT_GzPtXdBZwLam5D06IleML6OJ6fgd3yr_LnC9097d3fFdw1o3BZ8djM465KIoBYbA=s88-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.ggpht.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1713301551&ei=z5MeZqaINPHUy_sP0eWdmAw&ip=81.181.57.52&id=o-AK_VQZE_CF6ri6TpPkU94rAltzRFhx-zyw8UyDbm92an&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=rv&mm=31%2C26&mn=sn-p5qddn7r%2Csn-q4fzen7y&ms=au%2Conr&mv=m&mvi=5&pl=26&initcwndbps=1037500&bui=AaUN6a3s47I8DH5tfER8eoONooFMs4s3jVxna4ZF91C8A1Gza_IOqkYGPnQpPK-o_ksgN35FfuGDEzM0&spc=UWF9f23cm3E0SyaFNYj9c7site_J8s_S8LscSx3wF1hOKBtyWYP0GnG2Cg&vprv=1&svpuc=1&mime=audio%2Fwebm&ns=3MU0XGYF0YLhwMCoDsoy4rUQ&gir=yes&clen=2888165&dur=156.941&lmt=1693419053011705&mt=1713279665&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=4432434&n=dE3EcJJbXrJoeg&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRgIhAO7O0riH-82oSBBVPyjd5Jxsi6zAO8WXqcCVaOGoDhzkAiEAhjrR__t-wBjgV8KW0_wFgo4NtgnzzCnYPIhVd-d0xXc%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ALClDIEwRAIgY7oNLxdHQ3y5ea4JM0eSAhzCz5EIZ0n4m6puyJNJL08CIGp4e60VLA3egstDcbPjOmgcwu1FjGiah0x4Yw6p70ys&alr=yes&cpn=jRkNZCQf5oAkxA7P&cver=1.20240409.01.00&range=0-66070&rn=2&rbuf=0&pot=IjgKlAqSbIqZW0nzft5H0zvbRPh6zV_-budF12Dbest740j-Q99J80DCX-xD0U3zS_NB1S-nTrE50A==&ump=1&srfvp=1 HTTP/1.1Host: rr5---sn-p5qddn7r.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1713301551&ei=z5MeZqaINPHUy_sP0eWdmAw&ip=81.181.57.52&id=o-AK_VQZE_CF6ri6TpPkU94rAltzRFhx-zyw8UyDbm92an&itag=397&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=rv&mm=31%2C26&mn=sn-p5qddn7r%2Csn-q4fzen7y&ms=au%2Conr&mv=m&mvi=5&pl=26&initcwndbps=1037500&bui=AaUN6a3s47I8DH5tfER8eoONooFMs4s3jVxna4ZF91C8A1Gza_IOqkYGPnQpPK-o_ksgN35FfuGDEzM0&spc=UWF9f23cm3E0SyaFNYj9c7site_J8s_S8LscSx3wF1hOKBtyWYP0GnG2Cg&vprv=1&svpuc=1&mime=video%2Fmp4&ns=3MU0XGYF0YLhwMCoDsoy4rUQ&gir=yes&clen=8585092&dur=156.920&lmt=1693475130863016&mt=1713279665&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=4437434&n=dE3EcJJbXrJoeg&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIhAIpZ5-V8TcXgSJcV3Ro_-49ScSFGgmouPJFlW7XWIxODAiAKoKNtQ9rOitIeyA9V0dKt5fDaKVlQr2vO1zTEv9tOvA%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ALClDIEwRAIgY7oNLxdHQ3y5ea4JM0eSAhzCz5EIZ0n4m6puyJNJL08CIGp4e60VLA3egstDcbPjOmgcwu1FjGiah0x4Yw6p70ys&alr=yes&cpn=jRkNZCQf5oAkxA7P&cver=1.20240409.01.00&range=0-176547&rn=1&rbuf=0&pot=Ijius661yK09fO3U2vnj9J_84N_e6vvZysDh8MT83uzfxOzZ5_jt1OTl-8vn9unU79Tl8ouA6pad9w==&ump=1&srfvp=1&altitags=396%2C395 HTTP/1.1Host: rr5---sn-p5qddn7r.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1713301551&ei=z5MeZqaINPHUy_sP0eWdmAw&ip=81.181.57.52&id=o-AK_VQZE_CF6ri6TpPkU94rAltzRFhx-zyw8UyDbm92an&itag=398&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=rv&mm=31%2C26&mn=sn-p5qddn7r%2Csn-q4fzen7y&ms=au%2Conr&mv=m&mvi=5&pl=26&initcwndbps=1037500&bui=AaUN6a3s47I8DH5tfER8eoONooFMs4s3jVxna4ZF91C8A1Gza_IOqkYGPnQpPK-o_ksgN35FfuGDEzM0&spc=UWF9f23cm3E0SyaFNYj9c7site_J8s_S8LscSx3wF1hOKBtyWYP0GnG2Cg&vprv=1&svpuc=1&mime=video%2Fmp4&ns=3MU0XGYF0YLhwMCoDsoy4rUQ&gir=yes&clen=15356387&dur=156.920&lmt=1693475295824447&mt=1713279665&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=4437434&n=dE3EcJJbXrJoeg&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRAIgUZTH4tUnOL9pbm5TsI-QSUN1NOPnlxyhCCtIoRPDzQQCIHjiPJh-Vx-Q-dVoHfFNuAvDp7638SgMVZfwowDlRL8y&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ALClDIEwRAIgY7oNLxdHQ3y5ea4JM0eSAhzCz5EIZ0n4m6puyJNJL08CIGp4e60VLA3egstDcbPjOmgcwu1FjGiah0x4Yw6p70ys&alr=yes&cpn=jRkNZCQf5oAkxA7P&cver=1.20240409.01.00&range=0-1103&rn=3&rbuf=0&pot=MnQOO1U1F0jKng4Dp2KSNN3y5y1bzjJ_A48XTu9WWa58lwemsUacv72qMXWZBCh6QHNGA2g-Xv1rlLyKc0KseW9DyEcqmFQyYx-p5jqaYxJ9cHrsLlEJc5aqrr1JtQj8jYdY1BLU61mhhQZT1FkQt74QnYDxdw==&ump=1&srfvp=1 HTTP/1.1Host: rr5---sn-p5qddn7r.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1713301551&ei=z5MeZqaINPHUy_sP0eWdmAw&ip=81.181.57.52&id=o-AK_VQZE_CF6ri6TpPkU94rAltzRFhx-zyw8UyDbm92an&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=rv&mm=31%2C26&mn=sn-p5qddn7r%2Csn-q4fzen7y&ms=au%2Conr&mv=m&mvi=5&pl=26&initcwndbps=1037500&bui=AaUN6a3s47I8DH5tfER8eoONooFMs4s3jVxna4ZF91C8A1Gza_IOqkYGPnQpPK-o_ksgN35FfuGDEzM0&spc=UWF9f23cm3E0SyaFNYj9c7site_J8s_S8LscSx3wF1hOKBtyWYP0GnG2Cg&vprv=1&svpuc=1&mime=audio%2Fwebm&ns=3MU0XGYF0YLhwMCoDsoy4rUQ&gir=yes&clen=2888165&dur=156.941&lmt=1693419053011705&mt=1713279665&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=4432434&n=dE3EcJJbXrJoeg&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRgIhAO7O0riH-82oSBBVPyjd5Jxsi6zAO8WXqcCVaOGoDhzkAiEAhjrR__t-wBjgV8KW0_wFgo4NtgnzzCnYPIhVd-d0xXc%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ALClDIEwRAIgY7oNLxdHQ3y5ea4JM0eSAhzCz5EIZ0n4m6puyJNJL08CIGp4e60VLA3egstDcbPjOmgcwu1FjGiah0x4Yw6p70ys&alr=yes&cpn=jRkNZCQf5oAkxA7P&cver=1.20240409.01.00&range=66071-131606&rn=4&rbuf=3763&pot=MnQOO1U1F0jKng4Dp2KSNN3y5y1bzjJ_A48XTu9WWa58lwemsUacv72qMXWZBCh6QHNGA2g-Xv1rlLyKc0KseW9DyEcqmFQyYx-p5jqaYxJ9cHrsLlEJc5aqrr1JtQj8jYdY1BLU61mhhQZT1FkQt74QnYDxdw==&ump=1&srfvp=1 HTTP/1.1Host: rr5---sn-p5qddn7r.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/02/cropped-nit-logo-only-2021.png HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/10/ko.jpg HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/10/slide5.jpg HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1713301551&ei=z5MeZqaINPHUy_sP0eWdmAw&ip=81.181.57.52&id=o-AK_VQZE_CF6ri6TpPkU94rAltzRFhx-zyw8UyDbm92an&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=rv&mm=31%2C26&mn=sn-p5qddn7r%2Csn-q4fzen7y&ms=au%2Conr&mv=m&mvi=5&pl=26&initcwndbps=1037500&bui=AaUN6a3s47I8DH5tfER8eoONooFMs4s3jVxna4ZF91C8A1Gza_IOqkYGPnQpPK-o_ksgN35FfuGDEzM0&spc=UWF9f23cm3E0SyaFNYj9c7site_J8s_S8LscSx3wF1hOKBtyWYP0GnG2Cg&vprv=1&svpuc=1&mime=audio%2Fwebm&ns=3MU0XGYF0YLhwMCoDsoy4rUQ&gir=yes&clen=2888165&dur=156.941&lmt=1693419053011705&mt=1713279665&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=4432434&n=dE3EcJJbXrJoeg&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRgIhAO7O0riH-82oSBBVPyjd5Jxsi6zAO8WXqcCVaOGoDhzkAiEAhjrR__t-wBjgV8KW0_wFgo4NtgnzzCnYPIhVd-d0xXc%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ALClDIEwRAIgY7oNLxdHQ3y5ea4JM0eSAhzCz5EIZ0n4m6puyJNJL08CIGp4e60VLA3egstDcbPjOmgcwu1FjGiah0x4Yw6p70ys&alr=yes&cpn=jRkNZCQf5oAkxA7P&cver=1.20240409.01.00&range=131607-174704&rn=5&rbuf=7525&pot=MnQOO1U1F0jKng4Dp2KSNN3y5y1bzjJ_A48XTu9WWa58lwemsUacv72qMXWZBCh6QHNGA2g-Xv1rlLyKc0KseW9DyEcqmFQyYx-p5jqaYxJ9cHrsLlEJc5aqrr1JtQj8jYdY1BLU61mhhQZT1FkQt74QnYDxdw==&ump=1&srfvp=1 HTTP/1.1Host: rr5---sn-p5qddn7r.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1713301551&ei=z5MeZqaINPHUy_sP0eWdmAw&ip=81.181.57.52&id=o-AK_VQZE_CF6ri6TpPkU94rAltzRFhx-zyw8UyDbm92an&itag=397&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=rv&mm=31%2C26&mn=sn-p5qddn7r%2Csn-q4fzen7y&ms=au%2Conr&mv=m&mvi=5&pl=26&initcwndbps=1037500&bui=AaUN6a3s47I8DH5tfER8eoONooFMs4s3jVxna4ZF91C8A1Gza_IOqkYGPnQpPK-o_ksgN35FfuGDEzM0&spc=UWF9f23cm3E0SyaFNYj9c7site_J8s_S8LscSx3wF1hOKBtyWYP0GnG2Cg&vprv=1&svpuc=1&mime=video%2Fmp4&ns=3MU0XGYF0YLhwMCoDsoy4rUQ&gir=yes&clen=8585092&dur=156.920&lmt=1693475130863016&mt=1713279665&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=4437434&n=dE3EcJJbXrJoeg&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIhAIpZ5-V8TcXgSJcV3Ro_-49ScSFGgmouPJFlW7XWIxODAiAKoKNtQ9rOitIeyA9V0dKt5fDaKVlQr2vO1zTEv9tOvA%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ALClDIEwRAIgY7oNLxdHQ3y5ea4JM0eSAhzCz5EIZ0n4m6puyJNJL08CIGp4e60VLA3egstDcbPjOmgcwu1FjGiah0x4Yw6p70ys&alr=yes&cpn=jRkNZCQf5oAkxA7P&cver=1.20240409.01.00&range=176548-398200&rn=6&rbuf=7245&pot=MnQOO1U1F0jKng4Dp2KSNN3y5y1bzjJ_A48XTu9WWa58lwemsUacv72qMXWZBCh6QHNGA2g-Xv1rlLyKc0KseW9DyEcqmFQyYx-p5jqaYxJ9cHrsLlEJc5aqrr1JtQj8jYdY1BLU61mhhQZT1FkQt74QnYDxdw==&ump=1&srfvp=1 HTTP/1.1Host: rr5---sn-p5qddn7r.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1713301551&ei=z5MeZqaINPHUy_sP0eWdmAw&ip=81.181.57.52&id=o-AK_VQZE_CF6ri6TpPkU94rAltzRFhx-zyw8UyDbm92an&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=rv&mm=31%2C26&mn=sn-p5qddn7r%2Csn-q4fzen7y&ms=au%2Conr&mv=m&mvi=5&pl=26&initcwndbps=1037500&bui=AaUN6a3s47I8DH5tfER8eoONooFMs4s3jVxna4ZF91C8A1Gza_IOqkYGPnQpPK-o_ksgN35FfuGDEzM0&spc=UWF9f23cm3E0SyaFNYj9c7site_J8s_S8LscSx3wF1hOKBtyWYP0GnG2Cg&vprv=1&svpuc=1&mime=audio%2Fwebm&ns=3MU0XGYF0YLhwMCoDsoy4rUQ&gir=yes&clen=2888165&dur=156.941&lmt=1693419053011705&mt=1713279665&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=4432434&n=dE3EcJJbXrJoeg&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRgIhAO7O0riH-82oSBBVPyjd5Jxsi6zAO8WXqcCVaOGoDhzkAiEAhjrR__t-wBjgV8KW0_wFgo4NtgnzzCnYPIhVd-d0xXc%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ALClDIEwRAIgY7oNLxdHQ3y5ea4JM0eSAhzCz5EIZ0n4m6puyJNJL08CIGp4e60VLA3egstDcbPjOmgcwu1FjGiah0x4Yw6p70ys&alr=yes&cpn=jRkNZCQf5oAkxA7P&cver=1.20240409.01.00&range=174705-298327&rn=7&rbuf=9201&pot=MnQOO1U1F0jKng4Dp2KSNN3y5y1bzjJ_A48XTu9WWa58lwemsUacv72qMXWZBCh6QHNGA2g-Xv1rlLyKc0KseW9DyEcqmFQyYx-p5jqaYxJ9cHrsLlEJc5aqrr1JtQj8jYdY1BLU61mhhQZT1FkQt74QnYDxdw==&ump=1&srfvp=1 HTTP/1.1Host: rr5---sn-p5qddn7r.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/10/4-5.jpg HTTP/1.1Host: niceindiatravel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1713301551&ei=z5MeZqaINPHUy_sP0eWdmAw&ip=81.181.57.52&id=o-AK_VQZE_CF6ri6TpPkU94rAltzRFhx-zyw8UyDbm92an&itag=398&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=rv&mm=31%2C26&mn=sn-p5qddn7r%2Csn-q4fzen7y&ms=au%2Conr&mv=m&mvi=5&pl=26&initcwndbps=1037500&bui=AaUN6a3s47I8DH5tfER8eoONooFMs4s3jVxna4ZF91C8A1Gza_IOqkYGPnQpPK-o_ksgN35FfuGDEzM0&spc=UWF9f23cm3E0SyaFNYj9c7site_J8s_S8LscSx3wF1hOKBtyWYP0GnG2Cg&vprv=1&svpuc=1&mime=video%2Fmp4&ns=3MU0XGYF0YLhwMCoDsoy4rUQ&gir=yes&clen=15356387&dur=156.920&lmt=1693475295824447&mt=1713279665&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=4437434&n=dE3EcJJbXrJoeg&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRAIgUZTH4tUnOL9pbm5TsI-QSUN1NOPnlxyhCCtIoRPDzQQCIHjiPJh-Vx-Q-dVoHfFNuAvDp7638SgMVZfwowDlRL8y&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ALClDIEwRAIgY7oNLxdHQ3y5ea4JM0eSAhzCz5EIZ0n4m6puyJNJL08CIGp4e60VLA3egstDcbPjOmgcwu1FjGiah0x4Yw6p70ys&alr=yes&cpn=jRkNZCQf5oAkxA7P&cver=1.20240409.01.00&range=657413-1911423&rn=8&rbuf=11180&pot=MnQOO1U1F0jKng4Dp2KSNN3y5y1bzjJ_A48XTu9WWa58lwemsUacv72qMXWZBCh6QHNGA2g-Xv1rlLyKc0KseW9DyEcqmFQyYx-p5jqaYxJ9cHrsLlEJc5aqrr1JtQj8jYdY1BLU61mhhQZT1FkQt74QnYDxdw==&ump=1&srfvp=1 HTTP/1.1Host: rr5---sn-p5qddn7r.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1713301551&ei=z5MeZqaINPHUy_sP0eWdmAw&ip=81.181.57.52&id=o-AK_VQZE_CF6ri6TpPkU94rAltzRFhx-zyw8UyDbm92an&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=rv&mm=31%2C26&mn=sn-p5qddn7r%2Csn-q4fzen7y&ms=au%2Conr&mv=m&mvi=5&pl=26&initcwndbps=1037500&bui=AaUN6a3s47I8DH5tfER8eoONooFMs4s3jVxna4ZF91C8A1Gza_IOqkYGPnQpPK-o_ksgN35FfuGDEzM0&spc=UWF9f23cm3E0SyaFNYj9c7site_J8s_S8LscSx3wF1hOKBtyWYP0GnG2Cg&vprv=1&svpuc=1&mime=audio%2Fwebm&ns=3MU0XGYF0YLhwMCoDsoy4rUQ&gir=yes&clen=2888165&dur=156.941&lmt=1693419053011705&mt=1713279665&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=4432434&n=dE3EcJJbXrJoeg&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRgIhAO7O0riH-82oSBBVPyjd5Jxsi6zAO8WXqcCVaOGoDhzkAiEAhjrR__t-wBjgV8KW0_wFgo4NtgnzzCnYPIhVd-d0xXc%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ALClDIEwRAIgY7oNLxdHQ3y5ea4JM0eSAhzCz5EIZ0n4m6puyJNJL08CIGp4e60VLA3egstDcbPjOmgcwu1FjGiah0x4Yw6p70ys&alr=yes&cpn=jRkNZCQf5oAkxA7P&cver=1.20240409.01.00&range=298328-563147&rn=9&rbuf=14775&pot=MnQOO1U1F0jKng4Dp2KSNN3y5y1bzjJ_A48XTu9WWa58lwemsUacv72qMXWZBCh6QHNGA2g-Xv1rlLyKc0KseW9DyEcqmFQyYx-p5jqaYxJ9cHrsLlEJc5aqrr1JtQj8jYdY1BLU61mhhQZT1FkQt74QnYDxdw==&ump=1&srfvp=1 HTTP/1.1Host: rr5---sn-p5qddn7r.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/02/cropped-nit-logo-only-2021.png HTTP/1.1Host: niceindiatravel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/stats/watchtime?ns=yt&el=embedded&cpn=F6GU1QEdhoMLD-Np&ver=2&cmt=2.093&fmt=398&fs=0&rt=14.471&euri=https%3A%2F%2Fniceindiatravel.com%2F&lact=14512&cl=623129822&state=paused&volume=100%2C100%2C100%2C100%2C100&cbr=Chrome&cbrver=117.0.0.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240409.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&delay=4&hl=en_US&cr=US&len=157&rtn=24&afmt=251&idpj=-1&ldpj=-22&rti=14&size=1267%3A713&inview=0&st=0%2C0.402%2C1.731%2C1.94%2C2.058&et=0.212%2C1.731%2C1.94%2C2.058%2C2.093&muted=1%2C1%2C1%2C1%2C1&vis=3%2C3%2C3%2C3%2C3&docid=wAD9uO9YAQw&ei=y5MeZqSPB9aoy_sPxcuI0A8&plid=AAYWOBKoz4xd3wIM&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2FwAD9uO9YAQw%3Fplaylist%3DwAD9uO9YAQw%26iv_load_policy%3D3%26enablejsapi%3D1%26disablekb%3D1%26autoplay%3D1%26controls%3D0%26showinfo%3D0%26rel%3D0%26loop%3D1%26origin%3Dhttps%253A%252F%252Fniceindiatravel.com%26widgetid%3D1&list=TLGG0nOp5Ks1AkExNjA0MjAyNA&of=wbAUJoLFDaeeOSJrHXH1sg&vm=CAEQABgEOjJBSHFpSlRJaWlUV3AtaVVHU3dxLUpoNjVrV0taQVJBeTRCbVVLMmJUWXhKOURvQUVkd2J3QVBta0tES0l3V1JHa3UzUFV5akd4WUhVUEZvYWZzdmJ3VzNvV3ZjMWR6Q3ZYY3B0Wjd2aWh4NV9qdk9kR3NGMFRSLTdDcmRpYy1ydVI4bW1ZYi1oNjd3Tzc2cXd3bXBXcG1FMTliMUhRM0x4dW53SEV5RUFXNEFoAg HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-YouTube-Ad-Signals: dt=1713279945329&flash=0&frm=2&u_tz=120&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1267%2C713&vis=2&wgl=true&ca_type=imagesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-YouTube-Utc-Offset: 120X-YouTube-Client-Name: 56X-YouTube-Client-Version: 1.20240409.01.00X-YouTube-Time-Zone: Europe/ZurichX-Goog-Visitor-Id: CgtJMG1ONlpYUjdsOCjIp_qwBjIKCgJVUxIEGgAgKA%3D%3Dsec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/embed/wAD9uO9YAQw?playlist=wAD9uO9YAQw&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&origin=https%3A%2F%2Fniceindiatravel.com&widgetid=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
Source: global traffic	HTTP traffic detected: GET /about/ HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/10/slide5.jpg HTTP/1.1Host: niceindiatravel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/10/ko.jpg HTTP/1.1Host: niceindiatravel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/10/about.jpg HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://niceindiatravel.com/about/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/10/ganga-1.jpg HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://niceindiatravel.com/about/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/10/1-7.jpg HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://niceindiatravel.com/about/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/10/2-8.jpg HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://niceindiatravel.com/about/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1713301551&ei=z5MeZqaINPHUy_sP0eWdmAw&ip=81.181.57.52&id=o-AK_VQZE_CF6ri6TpPkU94rAltzRFhx-zyw8UyDbm92an&itag=398&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=rv&mm=31%2C26&mn=sn-p5qddn7r%2Csn-q4fzen7y&ms=au%2Conr&mv=m&mvi=5&pl=26&initcwndbps=1037500&bui=AaUN6a3s47I8DH5tfER8eoONooFMs4s3jVxna4ZF91C8A1Gza_IOqkYGPnQpPK-o_ksgN35FfuGDEzM0&spc=UWF9f23cm3E0SyaFNYj9c7site_J8s_S8LscSx3wF1hOKBtyWYP0GnG2Cg&vprv=1&svpuc=1&mime=video%2Fmp4&ns=3MU0XGYF0YLhwMCoDsoy4rUQ&gir=yes&clen=15356387&dur=156.920&lmt=1693475295824447&mt=1713279665&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=4437434&n=dE3EcJJbXrJoeg&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRAIgUZTH4tUnOL9pbm5TsI-QSUN1NOPnlxyhCCtIoRPDzQQCIHjiPJh-Vx-Q-dVoHfFNuAvDp7638SgMVZfwowDlRL8y&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ALClDIEwRAIgY7oNLxdHQ3y5ea4JM0eSAhzCz5EIZ0n4m6puyJNJL08CIGp4e60VLA3egstDcbPjOmgcwu1FjGiah0x4Yw6p70ys&alr=yes&cpn=jRkNZCQf5oAkxA7P&cver=1.20240409.01.00&range=1911424-3548470&rn=10&rbuf=19797&pot=MnQOO1U1F0jKng4Dp2KSNN3y5y1bzjJ_A48XTu9WWa58lwemsUacv72qMXWZBCh6QHNGA2g-Xv1rlLyKc0KseW9DyEcqmFQyYx-p5jqaYxJ9cHrsLlEJc5aqrr1JtQj8jYdY1BLU61mhhQZT1FkQt74QnYDxdw==&ump=1&srfvp=1 HTTP/1.1Host: rr5---sn-p5qddn7r.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/stats/watchtime?ns=yt&el=embedded&cpn=jRkNZCQf5oAkxA7P&ver=2&cmt=2.323&fmt=398&fs=0&rt=14.442&euri=https%3A%2F%2Fniceindiatravel.com%2F&lact=14498&cl=623129822&state=paused&volume=100%2C100%2C100%2C100%2C100%2C100%2C100&cbr=Chrome&cbrver=117.0.0.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240409.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&autoplay=1&splay=1&delay=4&hl=en_US&cr=US&len=156.941&rtn=24&afmt=251&idpj=0&ldpj=-17&rti=14&size=1267%3A713&inview=0&st=0%2C0.155%2C2.06%2C2.244%2C2.244%2C2.295%2C2.323&et=0.001%2C2.06%2C2.244%2C2.244%2C2.295%2C2.323%2C2.323&muted=1%2C1%2C1%2C1%2C1%2C1%2C1&vis=0%2C0%2C3%2C3%2C0%2C3%2C3&docid=wAD9uO9YAQw&ei=z5MeZqaINPHUy_sP0eWdmAw&plid=AAYWOBLu246nWADi&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2FwAD9uO9YAQw%3Fplaylist%3DwAD9uO9YAQw%26iv_load_policy%3D3%26enablejsapi%3D1%26disablekb%3D1%26autoplay%3D1%26controls%3D0%26showinfo%3D0%26rel%3D0%26loop%3D1%26origin%3Dhttps%253A%252F%252Fniceindiatravel.com%26widgetid%3D1&list=TLGG0nOp5Ks1AkExNjA0MjAyNA&of=wbAUJoLFDaeeOSJrHXH1sg&vm=CAEQABgEOjJBSHFpSlRKQ0o0WWhpVHlHMVJqeEhSbnJlNUk1alNPVXV4ZUw0cEQ5UlVzeXIxeUxnUWJ3QVBta0tETEtnc3NpZGtCNXlKTU5mRU1yZWRTR1dyMHo2ZGlNTmNSRlJPZVJzcVp1LXFOc2xfWU5ScHZjZm9GWThIWFhXOFllQnlGbzBzVDRmYzFkZHFzMUxoejRjdWpCb084Zkp3am82MmdhQ2w3cFVtUGVURmdoAg HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-YouTube-Ad-Signals: dt=1713279950337&flash=0&frm=2&u_tz=120&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1267%2C713&vis=2&wgl=true&ca_type=imagesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-YouTube-Utc-Offset: 120X-YouTube-Client-Name: 56X-YouTube-Client-Version: 1.20240409.01.00X-YouTube-Time-Zone: Europe/ZurichX-Goog-Visitor-Id: CgtJMG1ONlpYUjdsOCjOp_qwBjIKCgJVUxIEGgAgKA%3D%3Dsec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/embed/wAD9uO9YAQw?playlist=wAD9uO9YAQw&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&origin=https%3A%2F%2Fniceindiatravel.com&widgetid=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/10/slide1.jpg HTTP/1.1Host: niceindiatravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://niceindiatravel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/10/ganga-1.jpg HTTP/1.1Host: niceindiatravel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/10/2-8.jpg HTTP/1.1Host: niceindiatravel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1713301547&ei=y5MeZqSPB9aoy_sPxcuI0A8&ip=81.181.57.52&id=o-AGTEz6yrZN30zWRHetU01zfPZPIBkqXwN_jxSqpNGk-M&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=rv&mm=31%2C29&mn=sn-p5qlsn76%2Csn-p5qddn7r&ms=au%2Crdu&mv=m&mvi=5&pl=26&initcwndbps=1037500&bui=AaUN6a0X-vPuPWnoZdJnY8gcaw5_Rec69zGixzS_kVy6dh8yJJHbZPIDav7sGh5eMsIrcUMSgNZoV-eJ&spc=UWF9f_C907pjE2i9QlVivDiO3bFloqFrBkw3MS1j9d3XXjQUG-40uVYW-Q&vprv=1&svpuc=1&mime=audio%2Fwebm&ns=8Io3oEW7FSAr8VYj4CRq5ycQ&gir=yes&clen=2888165&dur=156.941&lmt=1693419053011705&mt=1713279665&fvip=5&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=4432434&n=65_ILddd0oaXCA&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRgIhAIqn_cmzA9wxw9Qv3XmYLmzgIYuMyqkUCJ74E3gyfGPmAiEAyvaE7AH2ALtvgZL7TmmJy3gr_gksqFvhADtsOLFIvXM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ALClDIEwRQIhALaMd8X8P3LTQ-dzb36htdQmyx7RegKRkqR_w8GTV_GCAiAXEkpCyRYR_s7h1aB1LlSa8sV2f8SVngOiCKBfSgfTuQ%3D%3D&alr=yes&cpn=F6GU1QEdhoMLD-Np&cver=1.20240409.01.00&range=563148-1120503&rn=9&rbuf=27908&pot=MnRHeEeFuHFwnkdAG16jL-aDngYNrsZJj72wzzuSl1KI99-wPjwpBfmvgTdvejBBkb8hRejODoqY6-NrNRoYj5BeGx9EzDVgBwEAWR3SrWqoEDJk5EzPIQjvWotgBGd18NKfWwDX1mK17wp_gi85l7DQQ1Dbbw==&ump=1&srfvp=1 HTTP/1.1Host: rr5---sn-p5qlsn76.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1713301547&ei=y5MeZqSPB9aoy_sPxcuI0A8&ip=81.181.57.52&id=o-AGTEz6yrZN30zWRHetU01zfPZPIBkqXwN_jxSqpNGk-M&itag=398&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=rv&mm=31%2C29&mn=sn-p5qlsn76%2Csn-p5qddn7r&ms=au%2Crdu&mv=m&mvi=5&pl=26&initcwndbps=1037500&bui=AaUN6a0X-vPuPWnoZdJnY8gcaw5_Rec69zGixzS_kVy6dh8yJJHbZPIDav7sGh5eMsIrcUMSgNZoV-eJ&spc=UWF9f_C907pjE2i9QlVivDiO3bFloqFrBkw3MS1j9d3XXjQUG-40uVYW-Q&vprv=1&svpuc=1&mime=video%2Fmp4&ns=8Io3oEW7FSAr8VYj4CRq5ycQ&gir=yes&clen=15356387&dur=156.920&lmt=1693475295824447&mt=1713279665&fvip=5&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=4437434&n=65_ILddd0oaXCA&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIgDgSjMet05B9aDksP9m164a7Ii8bfIUCpyPIF0Iu1qVQCIQDAgJB0tAqjMUhsCFgApfB_yN2W-bhf-qss2eYwVMrOtg%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ALClDIEwRQIhALaMd8X8P3LTQ-dzb36htdQmyx7RegKRkqR_w8GTV_GCAiAXEkpCyRYR_s7h1aB1LlSa8sV2f8SVngOiCKBfSgfTuQ%3D%3D&alr=yes&cpn=F6GU1QEdhoMLD-Np&cver=1.20240409.01.00&range=2460934-4325537&rn=10&rbuf=29027&pot=MnRHeEeFuHFwnkdAG16jL-aDngYNrsZJj72wzzuSl1KI99-wPjwpBfmvgTdvejBBkb8hRejODoqY6-NrNRoYj5BeGx9EzDVgBwEAWR3SrWqoEDJk5EzPIQjvWotgBGd18NKfWwDX1mK17wp_gi85l7DQQ1Dbbw==&ump=1&srfvp=1 HTTP/1.1Host: rr5---sn-p5qlsn76.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/10/about.jpg HTTP/1.1Host: niceindiatravel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/stats/watchtime?ns=yt&el=embedded&cpn=F6GU1QEdhoMLD-Np&ver=2&cmt=2.093&fmt=398&fs=0&rt=24.459&euri=https%3A%2F%2Fniceindiatravel.com%2F&lact=24500&cl=623129822&state=paused&volume=100&cbr=Chrome&cbrver=117.0.0.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240409.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&delay=4&hl=en_US&cr=US&len=157&rtn=34&afmt=251&idpj=-1&ldpj=-22&rti=24&size=1267%3A713&inview=0&st=2.093&et=2.093&muted=1&vis=3&docid=wAD9uO9YAQw&ei=y5MeZqSPB9aoy_sPxcuI0A8&plid=AAYWOBKoz4xd3wIM&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2FwAD9uO9YAQw%3Fplaylist%3DwAD9uO9YAQw%26iv_load_policy%3D3%26enablejsapi%3D1%26disablekb%3D1%26autoplay%3D1%26controls%3D0%26showinfo%3D0%26rel%3D0%26loop%3D1%26origin%3Dhttps%253A%252F%252Fniceindiatravel.com%26widgetid%3D1&list=TLGG0nOp5Ks1AkExNjA0MjAyNA&of=wbAUJoLFDaeeOSJrHXH1sg&vm=CAEQABgEOjJBSHFpSlRJaWlUV3AtaVVHU3dxLUpoNjVrV0taQVJBeTRCbVVLMmJUWXhKOURvQUVkd2J3QVBta0tES0l3V1JHa3UzUFV5akd4WUhVUEZvYWZzdmJ3VzNvV3ZjMWR6Q3ZYY3B0Wjd2aWh4NV9qdk9kR3NGMFRSLTdDcmRpYy1ydVI4bW1ZYi1oNjd3Tzc2cXd3bXBXcG1FMTliMUhRM0x4dW53SEV5RUFXNEFoAg HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-YouTube-Ad-Signals: dt=1713279945329&flash=0&frm=2&u_tz=120&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1267%2C713&vis=2&wgl=true&ca_type=imagesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-YouTube-Utc-Offset: 120X-YouTube-Client-Name: 56X-YouTube-Client-Version: 1.20240409.01.00X-YouTube-Time-Zone: Europe/ZurichX-Goog-Visitor-Id: CgtJMG1ONlpYUjdsOCjIp_qwBjIKCgJVUxIEGgAgKA%3D%3Dsec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/embed/wAD9uO9YAQw?playlist=wAD9uO9YAQw&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&origin=https%3A%2F%2Fniceindiatravel.com&widgetid=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/10/1-7.jpg HTTP/1.1Host: niceindiatravel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1713301551&ei=z5MeZqaINPHUy_sP0eWdmAw&ip=81.181.57.52&id=o-AK_VQZE_CF6ri6TpPkU94rAltzRFhx-zyw8UyDbm92an&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=rv&mm=31%2C26&mn=sn-p5qddn7r%2Csn-q4fzen7y&ms=au%2Conr&mv=m&mvi=5&pl=26&initcwndbps=1037500&bui=AaUN6a3s47I8DH5tfER8eoONooFMs4s3jVxna4ZF91C8A1Gza_IOqkYGPnQpPK-o_ksgN35FfuGDEzM0&spc=UWF9f23cm3E0SyaFNYj9c7site_J8s_S8LscSx3wF1hOKBtyWYP0GnG2Cg&vprv=1&svpuc=1&mime=audio%2Fwebm&ns=3MU0XGYF0YLhwMCoDsoy4rUQ&gir=yes&clen=2888165&dur=156.941&lmt=1693419053011705&mt=1713279665&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=4432434&n=dE3EcJJbXrJoeg&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRgIhAO7O0riH-82oSBBVPyjd5Jxsi6zAO8WXqcCVaOGoDhzkAiEAhjrR__t-wBjgV8KW0_wFgo4NtgnzzCnYPIhVd-d0xXc%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ALClDIEwRAIgY7oNLxdHQ3y5ea4JM0eSAhzCz5EIZ0n4m6puyJNJL08CIGp4e60VLA3egstDcbPjOmgcwu1FjGiah0x4Yw6p70ys&alr=yes&cpn=jRkNZCQf5oAkxA7P&cver=1.20240409.01.00&range=563148-1120503&rn=11&rbuf=27341&pot=MnQOO1U1F0jKng4Dp2KSNN3y5y1bzjJ_A48XTu9WWa58lwemsUacv72qMXWZBCh6QHNGA2g-Xv1rlLyKc0KseW9DyEcqmFQyYx-p5jqaYxJ9cHrsLlEJc5aqrr1JtQj8jYdY1BLU61mhhQZT1FkQt74QnYDxdw==&ump=1&srfvp=1 HTTP/1.1Host: rr5---sn-p5qddn7r.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/stats/watchtime?ns=yt&el=embedded&cpn=jRkNZCQf5oAkxA7P&ver=2&cmt=2.66&fmt=398&fs=0&rt=24.431&euri=https%3A%2F%2Fniceindiatravel.com%2F&lact=24487&cl=623129822&state=paused&volume=100%2C100&cbr=Chrome&cbrver=117.0.0.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240409.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&autoplay=1&splay=1&delay=4&hl=en_US&cr=US&len=156.941&rtn=34&afmt=251&idpj=0&ldpj=-17&rti=24&size=1267%3A713&inview=0&st=2.323%2C2.56&et=2.56%2C2.66&muted=1%2C1&vis=0%2C3&docid=wAD9uO9YAQw&ei=z5MeZqaINPHUy_sP0eWdmAw&plid=AAYWOBLu246nWADi&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2FwAD9uO9YAQw%3Fplaylist%3DwAD9uO9YAQw%26iv_load_policy%3D3%26enablejsapi%3D1%26disablekb%3D1%26autoplay%3D1%26controls%3D0%26showinfo%3D0%26rel%3D0%26loop%3D1%26origin%3Dhttps%253A%252F%252Fniceindiatravel.com%26widgetid%3D1&list=TLGG0nOp5Ks1AkExNjA0MjAyNA&of=wbAUJoLFDaeeOSJrHXH1sg&vm=CAEQABgEOjJBSHFpSlRKQ0o0WWhpVHlHMVJqeEhSbnJlNUk1alNPVXV4ZUw0cEQ5UlVzeXIxeUxnUWJ3QVBta0tETEtnc3NpZGtCNXlKTU5mRU1yZWRTR1dyMHo2ZGlNTmNSRlJPZVJzcVp1LXFOc2xfWU5ScHZjZm9GWThIWFhXOFllQnlGbzBzVDRmYzFkZHFzMUxoejRjdWpCb084Zkp3am82MmdhQ2w3cFVtUGVURmdoAg HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-YouTube-Ad-Signals: dt=1713279950337&flash=0&frm=2&u_tz=120&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1267%2C713&vis=2&wgl=true&ca_type=imagesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-YouTube-Utc-Offset: 120X-YouTube-Client-Name: 56X-YouTube-Client-Version: 1.20240409.01.00X-YouTube-Time-Zone: Europe/ZurichX-Goog-Visitor-Id: CgtJMG1ONlpYUjdsOCjOp_qwBjIKCgJVUxIEGgAgKA%3D%3Dsec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/embed/wAD9uO9YAQw?playlist=wAD9uO9YAQw&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&origin=https%3A%2F%2Fniceindiatravel.com&widgetid=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/10/slide1.jpg HTTP/1.1Host: niceindiatravel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=ljy_wqnS3hyaHxVqbiufgqC58LEy6fJPoNnlaB1r1r0R9J8m48-ju5_BuR9bZd7hp52cke_gQjSkLkXhiff08w1K3pJWHjRZjOvNMjjmCLSJFWh_tjGvoL_xseuO6ltrzu2iXTJZCB4YRJoT3TE54tBtO2gqB_Wyhrv_-iaQMPQ
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=FN9J7vk0Qw-UjHk49772n7JzLNcCT9U-cM9TjX94A0FnAyHn9ouNBwmmMYU71s0GAoxaOhgGEijCmm8ZR4J53huiRlKagAnDEldrRrf75iYOEELbrltQ5bL1xXZqhWyliHF_x1nWbOnwNj3EenNhVZSPCaaC6_xKn7Znsez-Of4
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=iM8v3umza5Vel3FipZ_XdIKQzwWFjZOuZVMUemHytZ-z-9zSgc8ojLW3r5CnIkJFOR9deaNapE_-vgoD8UdlJjvmk0jF17qRnzHy_B4fVd7T4liHMSNl3a9l71ODH_bJsQ3EzqSBfSpfQWwE_hE3SxiocbzhfSG0QwS13OIxBG0

Source: chromecache_214.2.dr, chromecache_224.2.dr	String found in binary or memory: <div class="bottom-meta-wrap"><ul class="off-canvas-social-links mobile-only"><li><a target="_blank" rel="noopener" href="https://www.facebook.com/niceindiatravel/"><span class="screen-reader-text">facebook</span><i class="fa fa-facebook" aria-hidden="true"></i> </a></li><li><a target="_blank" rel="noopener" href="https://www.instagram.com/niceindiatravel/"><span class="screen-reader-text">instagram</span><i class="fa fa-instagram" aria-hidden="true"></i> </a></li></ul></div><!--/bottom-meta-wrap--> equals www.facebook.com (Facebook)
Source: chromecache_224.2.dr	String found in binary or memory: <div class="nectar-youtube-bg"><span>https://www.youtube.com/watch?v=wAD9uO9YAQw</span></div> </div> equals www.youtube.com (Youtube)
Source: chromecache_283.2.dr	String found in binary or memory: (g.Lo(c,"redirector.googlevideo.com"),d=c.toString()):c.j.match("rr?[1-9].*\\.c\\.youtube\\.com$")?(g.Lo(c,"www.youtube.com"),d=c.toString()):(c=GBa(d),BJ(c)&&(d=c));c=new g.CP(d);c.set("cmo=pf","1");e&&c.set("cmo=td","a1.googlevideo.com");return c}; equals www.youtube.com (Youtube)
Source: chromecache_214.2.dr, chromecache_224.2.dr	String found in binary or memory: <li id="social-in-menu" class="button_social_group"><a target="_blank" rel="noopener" href="https://www.facebook.com/niceindiatravel/"><span class="screen-reader-text">facebook</span><i class="fa fa-facebook" aria-hidden="true"></i> </a><a target="_blank" rel="noopener" href="https://www.instagram.com/niceindiatravel/"><span class="screen-reader-text">instagram</span><i class="fa fa-instagram" aria-hidden="true"></i> </a></li></ul> equals www.facebook.com (Facebook)
Source: chromecache_224.2.dr	String found in binary or memory: <script type="text/javascript" src="https://www.youtube.com/iframe_api?ver=7.1" id="vc_youtube_iframe_api_js-js"></script> equals www.youtube.com (Youtube)
Source: chromecache_283.2.dr	String found in binary or memory: ZQa=function(a,b){if(!a.j["0"]){var c=new EK("0","fakesb",{video:new AK(0,0,0,void 0,void 0,"auto")});a.j["0"]=b?new FQ(new g.CP("http://www.youtube.com/videoplayback"),c,"fake"):new QQ(new g.CP("http://www.youtube.com/videoplayback"),c,new pQ(0,0),new pQ(0,0))}}; equals www.youtube.com (Youtube)
Source: chromecache_283.2.dr	String found in binary or memory: a))):this.Od(g.RV(a.errorMessage)):this.Od(TV(this,"HTML5_NO_AVAILABLE_FORMATS_FALLBACK_WITH_LINK_SHORT","//www.youtube.com/supported_browsers")):(a=d.hostLanguage,c="//support.google.com/youtube/?p=player_error1",a&&(c=g.jn(c,{hl:a})),this.Od(TV(this,"GENERIC_WITH_LINK_AND_CPN",c,!0)),d.uc&&!d.D&&PYa(this,function(e){if(g.xU(e,b.api,!$R(b.api.U()))){e={as3:!1,html5:!0,player:!0,cpn:b.api.getVideoData().clientPlaybackNonce};var f=b.api;f.zc("onFeedbackArticleRequest",{articleId:3037019,helpContext:"player_error", equals www.youtube.com (Youtube)
Source: chromecache_283.2.dr	String found in binary or memory: a.BASE_YT_URL)\|\|"")\|\|xBa(this.Df)\|\|this.protocol+"://www.youtube.com/";h=b?b.eventLabel:a.el;d="detailpage";"adunit"===h?d=this.D?"embedded":"detailpage":"embedded"===h\|\|this.N?d=WB(d,h,$Ra):h&&(d="embedded");this.La=d;dua();h=null;d=b?b.playerStyle:a.ps;f=g.Fb(aSa,d);!d\|\|f&&!this.N\|\|(h=d);this.playerStyle=h;this.oa=(this.K=g.Fb(aSa,this.playerStyle))&&"play"!==this.playerStyle&&"jamboard"!==this.playerStyle;this.Vo=!this.oa;this.Qa=VB(!1,a.disableplaybackui);this.disablePaidContentOverlay=VB(!1, equals www.youtube.com (Youtube)
Source: chromecache_283.2.dr	String found in binary or memory: a.severity,e,pK(a.details),f)}else this.qa.publish("nonfatalerror",a),d=/^pp/.test(this.videoData.clientPlaybackNonce),this.ze(a.errorCode,a.details),d&&"manifest.net.connect"===a.errorCode&&(a="https://www.youtube.com/generate_204?cpn="+this.videoData.clientPlaybackNonce+"&t="+(0,g.ZC)(),JX(a,"manifest",function(h){b.G=!0;b.ma("pathprobe",h)},function(h){b.ze(h.errorCode,h.details)}))}}; equals www.youtube.com (Youtube)
Source: chromecache_296.2.dr	String found in binary or memory: function Rr(a,b,c){this.o=this.g=this.h=null;this.i=0;this.G=!1;this.u=[];this.l=null;this.O={};if(!a)throw Error("YouTube player element ID required.");this.id=Qa(this);this.K=c;c=document;if(a="string"===typeof a?c.getElementById(a):a)if(c="iframe"===a.tagName.toLowerCase(),b.host\|\|(b.host=c?nc(a.src):"https://www.youtube.com"),this.h=new Lr(b),c\|\|(b=Sr(this,a),this.o=a,(c=a.parentNode)&&c.replaceChild(b,a),a=b),this.g=a,this.g.id\|\|(this.g.id="widget"+Qa(this.g)),Fr[this.g.id]=this,window.postMessage){this.l= equals www.youtube.com (Youtube)
Source: chromecache_283.2.dr	String found in binary or memory: g.Va("Goog_AdSense_Lidar_getUrlSignalsList",yjb);var pBa=na(["//tpc.googlesyndication.com/sodar/",""]);var eNa={z5a:0,w5a:1,t5a:2,u5a:3,v5a:4,y5a:5,x5a:6};var upa=(new Date).getTime();var Pka="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.]*.moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),Qka=/\bocr\b/;var Ska=/(?:\[\|%5B)([a-zA-Z0-9_]+)(?:\]\|%5D)/g;g.x(Vu,g.Kd);Vu.prototype.dispose=function(){window.removeEventListener("offline",this.C);window.removeEventListener("online",this.C);this.Qn.Qj(this.G);delete Vu.instance}; equals www.youtube.com (Youtube)
Source: chromecache_283.2.dr	String found in binary or memory: g.YR=function(a){a=VR(a.Ga);return"www.youtube-nocookie.com"===a?"www.youtube.com":a}; equals www.youtube.com (Youtube)
Source: chromecache_283.2.dr	String found in binary or memory: g.iS=function(a){var b=g.YR(a);pSa.includes(b)&&(b="www.youtube.com");return a.protocol+"://"+b}; equals www.youtube.com (Youtube)
Source: chromecache_283.2.dr	String found in binary or memory: g.k.getVideoUrl=function(a,b,c,d,e,f){b={list:b};c&&(e?b.time_continue=c:b.t=c);c=g.YR(this);e="www.youtube.com"===c;!f&&d&&e?f="https://youtu.be/"+a:g.RR(this)?(f="https://"+c+"/fire",b.v=a):(f&&e?(f=this.protocol+"://"+c+"/shorts/"+a,d&&(b.feature="share")):(f=this.protocol+"://"+c+"/watch",b.v=a),oD&&(a=jpa())&&(b.ebc=a));return g.jn(f,b)}; equals www.youtube.com (Youtube)
Source: chromecache_283.2.dr	String found in binary or memory: r;this.jj=b?b.hl\|\|"en_US":YB("en_US",a.hl);this.region=b?b.contentRegion\|\|"US":YB("US",a.cr);this.hostLanguage=b?b.hostLanguage\|\|"en":YB("en",a.host_language);this.Po=!this.Gc&&Math.random()<g.XI(this.experiments,"web_player_api_logging_fraction");this.Za=!this.Gc;this.enabledEngageTypes=new Set;this.deviceIsAudioOnly=!(null==b\|\|!b.deviceIsAudioOnly);this.Ld=XB(this.Ld,a.ismb);this.Vo?(r=a.vss_host\|\|"s.youtube.com","s.youtube.com"===r&&(r=VR(this.Ga)\|\|"www.youtube.com")):r="video.google.com";this.Xm= equals www.youtube.com (Youtube)
Source: chromecache_283.2.dr	String found in binary or memory: this.W.Ba&&(a.authuser=this.W.Ba);this.W.pageId&&(a.pageid=this.W.pageId);isNaN(this.cryptoPeriodIndex)\|\|(a.cpi=this.cryptoPeriodIndex.toString());var e=(e=/_(TV\|STB\|GAME\|OTT\|ATV\|BDP)_/.exec(g.oc()))?e[1]:"";"ATV"===e&&(a.cdt=e);this.G=a;this.G.session_id=d;this.oa=!0;"widevine"===this.B.flavor&&(this.G.hdr="1");"playready"===this.B.flavor&&(b=Number(sR(b.experiments,"playready_first_play_expiration")),!isNaN(b)&&0<=b&&(this.G.mfpe=""+b),this.oa=!1);b="";g.lR(this.B)?kR(this.B)?(d=c.B)&&(b="https://www.youtube.com/api/drm/fps?ek="+ equals www.youtube.com (Youtube)
Source: chromecache_283.2.dr	String found in binary or memory: var H3={};var Bfb=/[&\?]action_proxy=1/,Afb=/[&\?]token=([\w-])/,Cfb=/[&\?]video_id=([\w-])/,Dfb=/[&\?]index=([\d-])/,Efb=/[&\?]m_pos_ms=([\d-])/,Gfb=/[&\?]vvt=([\w-]*)/,sfb="ca_type dt el flash u_tz u_his u_h u_w u_ah u_aw u_cd u_nplug u_nmime frm u_java bc bih biw brdim vis wgl".split(" "),Ffb="www.youtube-nocookie.com youtube-nocookie.com www.youtube-nocookie.com:443 youtube.googleapis.com www.youtubeedu.com www.youtubeeducation.com video.google.com redirector.gvt1.com".split(" "),vfb={android:"ANDROID", equals www.youtube.com (Youtube)
Source: chromecache_264.2.dr	String found in binary or memory: var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/7ebf4817\/www-widgetapi.vflset\/www-widgetapi.js';try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptURL(scriptUrl)}catch(e){}var YT;if(!window["YT"])YT={loading:0,loaded:0};var YTConfig;if(!window["YTConfig"])YTConfig={"host":"https://www.youtube.com"}; equals www.youtube.com (Youtube)
Source: chromecache_224.2.dr	String found in binary or memory: ve always wanted!</h2><div class="divider-wrap" data-alignment="default"><div style="height: 10px;" class="divider"></div></div><a href="https://www.youtube.com/watch?v=wAD9uO9YAQw" data-style="default" data-parent-hover="" data-font-style="p" data-color="default" class="play_button large nectar_video_lightbox pp"><span><span class="screen-reader-text">Play Video</span><span class="play"><span class="inner-wrap inner"><svg version="1.1" equals www.youtube.com (Youtube)

Source: unknown

DNS traffic detected: queries for: www.baidu.com

Source: unknown

HTTP traffic detected: POST /youtubei/v1/player?prettyPrint=false HTTP/1.1Host: www.youtube.comConnection: keep-aliveContent-Length: 3375sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-Youtube-Bootstrap-Logged-In: falsesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonX-Youtube-Client-Name: 56X-Youtube-Client-Version: 1.20240409.01.00X-Goog-Visitor-Id: CgtJMG1ONlpYUjdsOCjIp_qwBjIKCgJVUxIEGgAgKA%3D%3Dsec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.youtube.comX-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/embed/wAD9uO9YAQw?playlist=wAD9uO9YAQw&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&origin=https%3A%2F%2Fniceindiatravel.com&widgetid=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D

Source: chromecache_349.2.dr	String found in binary or memory: http://api.jqueryui.com/position/
Source: chromecache_253.2.dr	String found in binary or memory: http://briancherne.github.io/jquery-hoverIntent/
Source: chromecache_275.2.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_275.2.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_290.2.dr	String found in binary or memory: http://go.wpbakery.com/licensing
Source: chromecache_248.2.dr	String found in binary or memory: http://gsgd.co.uk/sandbox/jquery/easing/
Source: chromecache_269.2.dr, chromecache_349.2.dr, chromecache_324.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_349.2.dr, chromecache_324.2.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_315.2.dr	String found in binary or memory: http://labs.rampinteractive.co.uk/touchSwipe/
Source: chromecache_315.2.dr	String found in binary or memory: http://plugins.jquery.com/project/touchSwipe
Source: chromecache_283.2.dr, chromecache_267.2.dr, chromecache_296.2.dr	String found in binary or memory: http://tools.ietf.org/html/rfc1950
Source: chromecache_315.2.dr	String found in binary or memory: http://www.github.com/mattbryson
Source: chromecache_283.2.dr	String found in binary or memory: http://www.youtube.com/videoplayback
Source: chromecache_283.2.dr	String found in binary or memory: http://youtube.com/drm/2012/10/10
Source: chromecache_283.2.dr	String found in binary or memory: http://youtube.com/streaming/metadata/segment/102015
Source: chromecache_283.2.dr	String found in binary or memory: http://youtube.com/streaming/otf/durations/112015
Source: chromecache_283.2.dr	String found in binary or memory: http://youtube.com/yt/2012/10/10
Source: chromecache_283.2.dr	String found in binary or memory: https://admin.youtube.com
Source: chromecache_344.2.dr	String found in binary or memory: https://angular.io/license
Source: chromecache_214.2.dr, chromecache_224.2.dr	String found in binary or memory: https://api.w.org/
Source: chromecache_290.2.dr	String found in binary or memory: https://apis.google.com/js/plusone.js
Source: chromecache_290.2.dr	String found in binary or memory: https://assets.pinterest.com/js/pinit.js
Source: chromecache_296.2.dr	String found in binary or memory: https://developers.google.com/youtube/iframe_api_reference#Events
Source: chromecache_283.2.dr	String found in binary or memory: https://docs.google.com/get_video_info
Source: chromecache_224.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Dancing
Source: chromecache_214.2.dr, chromecache_224.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Open
Source: chromecache_224.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Raleway:500%2C100&display=swap
Source: chromecache_214.2.dr, chromecache_224.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Varela
Source: chromecache_314.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/dancingscript/v25/If2RXTr6YS-zF4S-kcSWSVi_szLgiuE.woff2)
Source: chromecache_314.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/dancingscript/v25/If2RXTr6YS-zF4S-kcSWSVi_szLuiuEViw.woff2)
Source: chromecache_314.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/dancingscript/v25/If2RXTr6YS-zF4S-kcSWSVi_szLviuEViw.woff2)
Source: chromecache_343.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCuM73w0aXpsog.woff2)
Source: chromecache_343.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCuM73w2aXpsog.woff2)
Source: chromecache_343.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCuM73w3aXpsog.woff2)
Source: chromecache_343.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCuM73w5aXo.woff2)
Source: chromecache_343.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCuM73w9aXpsog.woff2)
Source: chromecache_319.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2)
Source: chromecache_319.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS2mu1aB.woff2)
Source: chromecache_319.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2)
Source: chromecache_319.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2)
Source: chromecache_319.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2)
Source: chromecache_319.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2)
Source: chromecache_319.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2)
Source: chromecache_319.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSymu1aB.woff2)
Source: chromecache_319.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2)
Source: chromecache_319.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTVOmu1aB.woff2)
Source: chromecache_343.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/playfairdisplay/v37/nuFvD-vYSZviVYUb_rj3ij__anPXJzDwcbmjWBN2PKdFvXDTbtPY
Source: chromecache_343.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/playfairdisplay/v37/nuFvD-vYSZviVYUb_rj3ij__anPXJzDwcbmjWBN2PKdFvXDXbtM.
Source: chromecache_343.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/playfairdisplay/v37/nuFvD-vYSZviVYUb_rj3ij__anPXJzDwcbmjWBN2PKdFvXDYbtPY
Source: chromecache_343.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/playfairdisplay/v37/nuFvD-vYSZviVYUb_rj3ij__anPXJzDwcbmjWBN2PKdFvXDZbtPY
Source: chromecache_262.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/raleway/v29/1Ptug8zYS_SKggPNyC0ITw.woff2)
Source: chromecache_262.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/raleway/v29/1Ptug8zYS_SKggPNyCAIT5lu.woff2)
Source: chromecache_262.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/raleway/v29/1Ptug8zYS_SKggPNyCIIT5lu.woff2)
Source: chromecache_262.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/raleway/v29/1Ptug8zYS_SKggPNyCMIT5lu.woff2)
Source: chromecache_262.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/raleway/v29/1Ptug8zYS_SKggPNyCkIT5lu.woff2)
Source: chromecache_343.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2)
Source: chromecache_343.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2)
Source: chromecache_343.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2)
Source: chromecache_343.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCBc4EsA.woff2)
Source: chromecache_343.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCRc4EsA.woff2)
Source: chromecache_343.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2)
Source: chromecache_343.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2)
Source: chromecache_343.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_343.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_343.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_343.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_343.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_343.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_343.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)
Source: chromecache_343.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/varelaround/v20/w8gdH283Tvk__Lua32TysjIfp8uP.woff2)
Source: chromecache_343.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/varelaround/v20/w8gdH283Tvk__Lua32TysjIfpcuPP9g.woff2)
Source: chromecache_343.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/varelaround/v20/w8gdH283Tvk__Lua32TysjIfqMuPP9g.woff2)
Source: chromecache_343.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/varelaround/v20/w8gdH283Tvk__Lua32TysjIfqcuPP9g.woff2)
Source: chromecache_283.2.dr, chromecache_267.2.dr, chromecache_296.2.dr	String found in binary or memory: https://github.com/madler/zlib/blob/master/zlib.h
Source: chromecache_315.2.dr	String found in binary or memory: https://github.com/mattbryson/TouchSwipe-Jquery-Plugin
Source: chromecache_315.2.dr	String found in binary or memory: https://greensock.com
Source: chromecache_315.2.dr	String found in binary or memory: https://greensock.com/standard-license
Source: chromecache_283.2.dr	String found in binary or memory: https://i.ytimg.com/vi/
Source: chromecache_283.2.dr	String found in binary or memory: https://jnn-pa.googleapis.com
Source: chromecache_214.2.dr, chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com
Source: chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/
Source: chromecache_214.2.dr	String found in binary or memory: https://niceindiatravel.com/?p=19
Source: chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/about/
Source: chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/bhutan/
Source: chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/bhutan/5-days-in-bhutan/
Source: chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/blog/
Source: chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/buddhist-tour/
Source: chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/bv/
Source: chromecache_214.2.dr, chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/comments/feed/
Source: chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/contact/
Source: chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/ev/
Source: chromecache_214.2.dr, chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/feed/
Source: chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/india/
Source: chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/india/the-golden-triangle-5-days/
Source: chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/india/the-golden-triangle-7-days-including-varanasi-and-khajuraho/
Source: chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/maldives/
Source: chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/maldives/4-days-in-maldives/
Source: chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/nepal/
Source: chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/nepal/5-days-in-nepal/
Source: chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/sri-lanka/
Source: chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/sri-lanka/5-days-in-sri-lanka/
Source: chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/sv/
Source: chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/the-golden-triangle-4-days/
Source: chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/tv/
Source: chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/visa/
Source: chromecache_214.2.dr, chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.9.3
Source: chromecache_214.2.dr, chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.9.3
Source: chromecache_214.2.dr, chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.9.3
Source: chromecache_214.2.dr, chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-content/plugins/js_composer_salient/assets/css/js_composer.min.css?ve
Source: chromecache_214.2.dr, chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-content/plugins/js_composer_salient/assets/js/dist/js_composer_front.
Source: chromecache_214.2.dr, chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-content/plugins/revslider6620n-1/public/assets/css/rs6.css?ver=6.6.20
Source: chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-content/plugins/revslider6620n-1/public/assets/fonts/font-awesome/css
Source: chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-content/plugins/revslider6620n-1/public/assets/fonts/font-awesome/fon
Source: chromecache_214.2.dr, chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-content/plugins/revslider6620n-1/public/assets/js/rbtools.min.js?ver=
Source: chromecache_214.2.dr, chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-content/plugins/revslider6620n-1/public/assets/js/rs6.min.js?ver=6.6.
Source: chromecache_214.2.dr, chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-content/plugins/salient-core/js/third-party/touchswipe.min.js?ver=1.0
Source: chromecache_214.2.dr, chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-content/themes/salient/css/build/ascend.css?ver=16.1.3
Source: chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-content/themes/salient/css/build/elements/element-fancy-box.css?ver=1
Source: chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-content/themes/salient/css/build/elements/element-testimonial.css?ver
Source: chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-content/themes/salient/css/build/elements/element-video-lightbox.css?
Source: chromecache_214.2.dr, chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-content/themes/salient/css/build/grid-system.css?ver=16.1.3
Source: chromecache_214.2.dr, chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-content/themes/salient/css/build/off-canvas/core.css?ver=16.1.3
Source: chromecache_214.2.dr, chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-content/themes/salient/css/build/plugins/magnific.css?ver=8.6.0
Source: chromecache_214.2.dr, chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-content/themes/salient/css/build/responsive.css?ver=16.1.3
Source: chromecache_214.2.dr, chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-content/themes/salient/css/build/style-non-critical.css?ver=16.1.3
Source: chromecache_214.2.dr, chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-content/themes/salient/css/build/style.css?ver=16.1.3
Source: chromecache_214.2.dr, chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-content/themes/salient/css/build/third-party/cf7.css?ver=16.1.3
Source: chromecache_214.2.dr, chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-content/themes/salient/css/font-awesome-legacy.min.css?ver=4.7.1
Source: chromecache_214.2.dr, chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-content/themes/salient/css/salient-dynamic-styles.css?ver=34291
Source: chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-content/themes/salient/js/build/elements/nectar-testimonial-slider.js
Source: chromecache_214.2.dr, chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-content/themes/salient/js/build/init.js?ver=16.1.3
Source: chromecache_214.2.dr, chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-content/themes/salient/js/build/priority.js?ver=16.1.3
Source: chromecache_214.2.dr, chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-content/themes/salient/js/build/third-party/anime.min.js?ver=4.5.1
Source: chromecache_214.2.dr, chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-content/themes/salient/js/build/third-party/hoverintent.min.js?ver=1.
Source: chromecache_214.2.dr, chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-content/themes/salient/js/build/third-party/imagesLoaded.min.js?ver=4
Source: chromecache_214.2.dr, chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-content/themes/salient/js/build/third-party/jquery.easing.min.js?ver=
Source: chromecache_214.2.dr, chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-content/themes/salient/js/build/third-party/jquery.mousewheel.min.js?
Source: chromecache_214.2.dr, chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-content/themes/salient/js/build/third-party/magnific.js?ver=7.0.1
Source: chromecache_214.2.dr, chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-content/themes/salient/js/build/third-party/superfish.js?ver=1.5.8
Source: chromecache_214.2.dr, chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-content/themes/salient/js/build/third-party/transit.min.js?ver=0.9.9
Source: chromecache_214.2.dr, chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-content/themes/salient/js/build/third-party/waypoints.js?ver=4.0.2
Source: chromecache_214.2.dr, chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-content/themes/salient/nectar/assets/functions/ajax-search/wpss-searc
Source: chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-content/uploads/2018/10/1-2.jpg
Source: chromecache_214.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-content/uploads/2018/10/1-7.jpg
Source: chromecache_214.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-content/uploads/2018/10/2-8.jpg
Source: chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-content/uploads/2018/10/3-1.jpg
Source: chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-content/uploads/2018/10/4-1.jpg
Source: chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-content/uploads/2018/10/5.jpg
Source: chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-content/uploads/2018/10/7.jpg
Source: chromecache_214.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-content/uploads/2018/10/about.jpg);
Source: chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-content/uploads/2018/10/bg1-1.jpg);
Source: chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-content/uploads/2018/10/bhtan1.jpg
Source: chromecache_214.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-content/uploads/2018/10/ganga-1.jpg
Source: chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-content/uploads/2018/10/ganga.jpg
Source: chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-content/uploads/2018/10/lank1.jpg
Source: chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-content/uploads/2018/10/mald.jpg
Source: chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-content/uploads/2018/10/nepal1.jpg
Source: chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-content/uploads/2018/10/t10.jpg
Source: chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-content/uploads/2018/10/testimonial.jpg);
Source: chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-content/uploads/2018/11/2.jpg
Source: chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-content/uploads/2021/02/cropped-nit-logo-only-2021.png
Source: chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-content/uploads/2021/02/nit-logo-new-2021.jpg
Source: chromecache_214.2.dr, chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-content/uploads/salient/menu-dynamic.css?ver=47034
Source: chromecache_214.2.dr, chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-includes/css/dist/block-library/style.min.css?ver=6.5.2
Source: chromecache_214.2.dr, chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-includes/js/dist/a11y.min.js?ver=d90eebea464f6c09bfd5
Source: chromecache_214.2.dr, chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-includes/js/dist/dom-ready.min.js?ver=f77871ff7694fffea381
Source: chromecache_214.2.dr, chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-includes/js/dist/hooks.min.js?ver=2810c76e705dd1a53b18
Source: chromecache_214.2.dr, chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6
Source: chromecache_214.2.dr, chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.14.0
Source: chromecache_214.2.dr, chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-includes/js/dist/vendor/wp-polyfill-inert.min.js?ver=3.1.2
Source: chromecache_214.2.dr, chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
Source: chromecache_214.2.dr, chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
Source: chromecache_214.2.dr, chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
Source: chromecache_214.2.dr, chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-includes/js/jquery/ui/autocomplete.min.js?ver=1.13.2
Source: chromecache_214.2.dr, chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2
Source: chromecache_214.2.dr, chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-includes/js/jquery/ui/menu.min.js?ver=1.13.2
Source: chromecache_214.2.dr, chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-json/
Source: chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fniceindiatravel.com%2F
Source: chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fniceindiatravel.com%2F&f
Source: chromecache_214.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fniceindiatravel.com%2Fabout%2
Source: chromecache_214.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-json/wp/v2/pages/19
Source: chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/wp-json/wp/v2/pages/6
Source: chromecache_214.2.dr, chromecache_224.2.dr	String found in binary or memory: https://niceindiatravel.com/xmlrpc.php?rsd
Source: chromecache_267.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_283.2.dr	String found in binary or memory: https://redux.js.org/api/store#subscribelistener
Source: chromecache_283.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers
Source: chromecache_283.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-4-store#middleware
Source: chromecache_283.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-6-async-logic#using-the-redux-thunk-middleware
Source: chromecache_283.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=missing_quality
Source: chromecache_283.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=noaudio
Source: chromecache_283.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=report_playback
Source: chromecache_283.2.dr	String found in binary or memory: https://support.google.com/youtube/answer/6276924
Source: chromecache_300.2.dr	String found in binary or memory: https://una.im/CSSgram/
Source: chromecache_283.2.dr	String found in binary or memory: https://viacon.corp.google.com
Source: chromecache_290.2.dr	String found in binary or memory: https://wpbakery.com)
Source: chromecache_283.2.dr	String found in binary or memory: https://www.googleapis.com/certificateprovisioning/v1/devicecertificates/create?key=AIzaSyB-5OLKTx2i
Source: chromecache_283.2.dr	String found in binary or memory: https://www.gstatic.com/ytlr/img/sign_in_avatar_default.png?rn=
Source: chromecache_352.2.dr	String found in binary or memory: https://www.niceindiatravel.com/
Source: chromecache_264.2.dr, chromecache_296.2.dr	String found in binary or memory: https://www.youtube.com
Source: chromecache_283.2.dr	String found in binary or memory: https://www.youtube.com/api/drm/fps?ek=
Source: chromecache_283.2.dr	String found in binary or memory: https://www.youtube.com/generate_204?cpn=
Source: chromecache_224.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api?ver=7.1
Source: chromecache_224.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=wAD9uO9YAQw
Source: chromecache_283.2.dr	String found in binary or memory: https://youtu.be/
Source: chromecache_283.2.dr	String found in binary or memory: https://youtube.com/api/drm/fps?ek=uninitialized
Source: chromecache_283.2.dr	String found in binary or memory: https://youtubei.googleapis.com/youtubei/
Source: chromecache_283.2.dr	String found in binary or memory: https://yurt.corp.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 23.208.128.100:443 -> 192.168.2.11:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.208.128.100:443 -> 192.168.2.11:49720 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@24/279@48/23

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2320 --field-trial-handle=2276,i,15163067033320989908,4814463325388249182,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.baidu.com/link?url=CvCuJHQ5mUiF8tzYwW4LExI5DJ7e8SA78W1tu_uckwU-RgMoIZevncSlciEmtvdq&wd=cmljaGFyZC5wZXBpQGdlcmZsb3J1c2EuY29t"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4180 --field-trial-handle=2276,i,15163067033320989908,4814463325388249182,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4360 --field-trial-handle=2276,i,15163067033320989908,4814463325388249182,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2320 --field-trial-handle=2276,i,15163067033320989908,4814463325388249182,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4180 --field-trial-handle=2276,i,15163067033320989908,4814463325388249182,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4360 --field-trial-handle=2276,i,15163067033320989908,4814463325388249182,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers	0%	URL Reputation	safe
https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers	0%	URL Reputation	safe
https://redux.js.org/tutorials/fundamentals/part-4-store#middleware	0%	URL Reputation	safe
https://una.im/CSSgram/	0%	URL Reputation	safe
http://gsgd.co.uk/sandbox/jquery/easing/	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
rr5.sn-p5qddn7r.googlevideo.com	173.194.7.170	true	false	high
i.ytimg.com	64.233.176.119	true	false	high
rr5.sn-p5qlsn76.googlevideo.com	172.217.135.202	true	false	high
static.doubleclick.net	142.250.105.148	true	false	high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
youtube-ui.l.google.com	108.177.122.190	true	false	high
googleads.g.doubleclick.net	74.125.136.155	true	false	high
play.google.com	142.250.9.113	true	false	high
www.wshifen.com	183.240.99.202	true	false	unknown
photos-ugc.l.googleusercontent.com	142.250.105.132	true	false	high
www.google.com	64.233.176.147	true	false	high
www.niceindiatravel.com.cdn.hstgr.net	191.101.104.47	true	false	unknown
niceindiatravel.com	84.32.84.89	true	false	unknown
www.niceindiatravel.com	unknown	unknown	false	unknown
yt3.ggpht.com	unknown	unknown	false	high
rr5---sn-p5qlsn76.googlevideo.com	unknown	unknown	false	high
rr5---sn-p5qddn7r.googlevideo.com	unknown	unknown	false	high
www.youtube.com	unknown	unknown	false	high
www.baidu.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://niceindiatravel.com/wp-includes/css/dist/block-library/style.min.css?ver=6.5.2	false	unknown
https://yt3.ggpht.com/80u-Vp0LwT_GzPtXdBZwLam5D06IleML6OJ6fgd3yr_LnC9097d3fFdw1o3BZ8djM465KIoBYbA=s88-c-k-c0x00ffffff-no-rj	false	high
https://www.youtube.com/api/stats/watchtime?ns=yt&el=embedded&cpn=jRkNZCQf5oAkxA7P&ver=2&cmt=2.323&fmt=398&fs=0&rt=14.442&euri=https%3A%2F%2Fniceindiatravel.com%2F&lact=14498&cl=623129822&state=paused&volume=100%2C100%2C100%2C100%2C100%2C100%2C100&cbr=Chrome&cbrver=117.0.0.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240409.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&autoplay=1&splay=1&delay=4&hl=en_US&cr=US&len=156.941&rtn=24&afmt=251&idpj=0&ldpj=-17&rti=14&size=1267%3A713&inview=0&st=0%2C0.155%2C2.06%2C2.244%2C2.244%2C2.295%2C2.323&et=0.001%2C2.06%2C2.244%2C2.244%2C2.295%2C2.323%2C2.323&muted=1%2C1%2C1%2C1%2C1%2C1%2C1&vis=0%2C0%2C3%2C3%2C0%2C3%2C3&docid=wAD9uO9YAQw&ei=z5MeZqaINPHUy_sP0eWdmAw&plid=AAYWOBLu246nWADi&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2FwAD9uO9YAQw%3Fplaylist%3DwAD9uO9YAQw%26iv_load_policy%3D3%26enablejsapi%3D1%26disablekb%3D1%26autoplay%3D1%26controls%3D0%26showinfo%3D0%26rel%3D0%26loop%3D1%26origin%3Dhttps%253A%252F%252Fniceindiatravel.com%26widgetid%3D1&list=TLGG0nOp5Ks1AkExNjA0MjAyNA&of=wbAUJoLFDaeeOSJrHXH1sg&vm=CAEQABgEOjJBSHFpSlRKQ0o0WWhpVHlHMVJqeEhSbnJlNUk1alNPVXV4ZUw0cEQ5UlVzeXIxeUxnUWJ3QVBta0tETEtnc3NpZGtCNXlKTU5mRU1yZWRTR1dyMHo2ZGlNTmNSRlJPZVJzcVp1LXFOc2xfWU5ScHZjZm9GWThIWFhXOFllQnlGbzBzVDRmYzFkZHFzMUxoejRjdWpCb084Zkp3am82MmdhQ2w3cFVtUGVURmdoAg	false	high
https://niceindiatravel.com/wp-content/uploads/2018/10/7.jpg	false	unknown
https://niceindiatravel.com/wp-content/plugins/revslider6620n-1/public/assets/fonts/font-awesome/css/font-awesome.css	false	unknown
https://www.youtube.com/s/player/7ebf4817/www-player.css	false	high
https://niceindiatravel.com/wp-content/themes/salient/css/build/ascend.css?ver=16.1.3	false	unknown
https://niceindiatravel.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.9.3	false	unknown
https://niceindiatravel.com/wp-content/uploads/2018/10/about.jpg	false	unknown
https://www.youtube.com/api/stats/watchtime?ns=yt&el=embedded&cpn=jRkNZCQf5oAkxA7P&ver=2&cmt=2.66&fmt=398&fs=0&rt=24.431&euri=https%3A%2F%2Fniceindiatravel.com%2F&lact=24487&cl=623129822&state=paused&volume=100%2C100&cbr=Chrome&cbrver=117.0.0.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240409.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&autoplay=1&splay=1&delay=4&hl=en_US&cr=US&len=156.941&rtn=34&afmt=251&idpj=0&ldpj=-17&rti=24&size=1267%3A713&inview=0&st=2.323%2C2.56&et=2.56%2C2.66&muted=1%2C1&vis=0%2C3&docid=wAD9uO9YAQw&ei=z5MeZqaINPHUy_sP0eWdmAw&plid=AAYWOBLu246nWADi&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2FwAD9uO9YAQw%3Fplaylist%3DwAD9uO9YAQw%26iv_load_policy%3D3%26enablejsapi%3D1%26disablekb%3D1%26autoplay%3D1%26controls%3D0%26showinfo%3D0%26rel%3D0%26loop%3D1%26origin%3Dhttps%253A%252F%252Fniceindiatravel.com%26widgetid%3D1&list=TLGG0nOp5Ks1AkExNjA0MjAyNA&of=wbAUJoLFDaeeOSJrHXH1sg&vm=CAEQABgEOjJBSHFpSlRKQ0o0WWhpVHlHMVJqeEhSbnJlNUk1alNPVXV4ZUw0cEQ5UlVzeXIxeUxnUWJ3QVBta0tETEtnc3NpZGtCNXlKTU5mRU1yZWRTR1dyMHo2ZGlNTmNSRlJPZVJzcVp1LXFOc2xfWU5ScHZjZm9GWThIWFhXOFllQnlGbzBzVDRmYzFkZHFzMUxoejRjdWpCb084Zkp3am82MmdhQ2w3cFVtUGVURmdoAg	false	high
https://www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8	false	high
https://niceindiatravel.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1	false	unknown
https://googleads.g.doubleclick.net/pagead/id?slf_rd=1	false	high
https://niceindiatravel.com/wp-content/plugins/js_composer_salient/assets/js/dist/js_composer_front.min.js?ver=7.1	false	unknown
https://niceindiatravel.com/wp-content/uploads/2018/10/slide5.jpg	false	unknown
https://niceindiatravel.com/wp-content/uploads/2018/10/4-5.jpg	false	unknown
https://niceindiatravel.com/wp-content/themes/salient/css/salient-dynamic-styles.css?ver=34291	false	unknown
https://niceindiatravel.com/#ajax-content-wrap	false	unknown
https://www.youtube.com/s/player/7ebf4817/www-widgetapi.vflset/www-widgetapi.js	false	high
https://niceindiatravel.com/wp-content/themes/salient/css/build/elements/element-video-lightbox.css?ver=16.1.3	false	unknown
https://niceindiatravel.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.14.0	false	unknown
https://niceindiatravel.com/wp-content/themes/salient/js/build/third-party/transit.min.js?ver=0.9.9	false	unknown
https://niceindiatravel.com/wp-content/plugins/js_composer_salient/assets/css/js_composer.min.css?ver=7.1	false	unknown
https://niceindiatravel.com/wp-includes/js/dist/vendor/wp-polyfill-inert.min.js?ver=3.1.2	false	unknown
https://niceindiatravel.com/wp-content/uploads/2018/10/1-2.jpg	false	unknown
https://niceindiatravel.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.9.3	false	unknown
https://niceindiatravel.com/wp-content/uploads/2018/10/4-1.jpg	false	unknown
https://www.youtube.com/s/player/7ebf4817/player_ias.vflset/en_US/endscreen.js	false	high
https://niceindiatravel.com/wp-content/plugins/revslider6620n-1/public/assets/js/rbtools.min.js?ver=6.6.20	false	unknown
https://www.youtube.com/generate_204?eIuGOg	false	high
https://www.youtube.com/ptracking?html5=1&video_id=wAD9uO9YAQw&cpn=jRkNZCQf5oAkxA7P&ei=z5MeZqaINPHUy_sP0eWdmAw&ptk=youtube_none&pltype=contentugc	false	high
https://niceindiatravel.com/wp-content/themes/salient/js/build/elements/nectar-testimonial-slider.js?ver=16.1.3	false	unknown
https://www.youtube.com/s/player/7ebf4817/www-embed-player.vflset/www-embed-player.js	false	high
https://niceindiatravel.com/wp-content/themes/salient/css/build/elements/element-fancy-box.css?ver=16.1.3	false	unknown
https://niceindiatravel.com/wp-content/uploads/2018/10/3-1.jpg	false	unknown
https://niceindiatravel.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0	false	unknown
https://niceindiatravel.com/wp-content/themes/salient/js/build/third-party/jquery.mousewheel.min.js?ver=3.1.13	false	unknown
https://niceindiatravel.com/wp-content/plugins/revslider6620n-1/public/assets/fonts/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0	false	unknown
https://niceindiatravel.com/about/	false	unknown
https://www.youtube.com/s/player/7ebf4817/player_ias.vflset/en_US/embed.js	false	high
https://www.google.com/js/th/3pcSFWJI7a5SNv89Az7bTi6V80M4jnn3bPXR3H-Ku18.js	false	high
https://niceindiatravel.com/wp-includes/js/jquery/ui/menu.min.js?ver=1.13.2	false	unknown
https://yt3.ggpht.com/80u-Vp0LwT_GzPtXdBZwLam5D06IleML6OJ6fgd3yr_LnC9097d3fFdw1o3BZ8djM465KIoBYbA=s68-c-k-c0x00ffffff-no-rj	false	high
https://niceindiatravel.com/wp-includes/js/jquery/ui/autocomplete.min.js?ver=1.13.2	false	unknown
https://play.google.com/log?format=json&hasfast=true&authuser=0	false	high
https://niceindiatravel.com/wp-content/uploads/2018/10/testimonial.jpg	false	unknown
https://niceindiatravel.com/wp-content/uploads/2021/02/cropped-nit-logo-only-2021.png	false	unknown
https://niceindiatravel.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.9.3	false	unknown
https://niceindiatravel.com/wp-content/themes/salient/css/build/grid-system.css?ver=16.1.3	false	unknown
https://niceindiatravel.com/wp-content/themes/salient/css/build/third-party/cf7.css?ver=16.1.3	false	unknown
https://niceindiatravel.com/wp-content/uploads/2018/10/t10.jpg	false	unknown
https://www.youtube.com/api/stats/watchtime?ns=yt&el=embedded&cpn=F6GU1QEdhoMLD-Np&ver=2&cmt=2.093&fmt=398&fs=0&rt=14.471&euri=https%3A%2F%2Fniceindiatravel.com%2F&lact=14512&cl=623129822&state=paused&volume=100%2C100%2C100%2C100%2C100&cbr=Chrome&cbrver=117.0.0.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240409.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&delay=4&hl=en_US&cr=US&len=157&rtn=24&afmt=251&idpj=-1&ldpj=-22&rti=14&size=1267%3A713&inview=0&st=0%2C0.402%2C1.731%2C1.94%2C2.058&et=0.212%2C1.731%2C1.94%2C2.058%2C2.093&muted=1%2C1%2C1%2C1%2C1&vis=3%2C3%2C3%2C3%2C3&docid=wAD9uO9YAQw&ei=y5MeZqSPB9aoy_sPxcuI0A8&plid=AAYWOBKoz4xd3wIM&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2FwAD9uO9YAQw%3Fplaylist%3DwAD9uO9YAQw%26iv_load_policy%3D3%26enablejsapi%3D1%26disablekb%3D1%26autoplay%3D1%26controls%3D0%26showinfo%3D0%26rel%3D0%26loop%3D1%26origin%3Dhttps%253A%252F%252Fniceindiatravel.com%26widgetid%3D1&list=TLGG0nOp5Ks1AkExNjA0MjAyNA&of=wbAUJoLFDaeeOSJrHXH1sg&vm=CAEQABgEOjJBSHFpSlRJaWlUV3AtaVVHU3dxLUpoNjVrV0taQVJBeTRCbVVLMmJUWXhKOURvQUVkd2J3QVBta0tES0l3V1JHa3UzUFV5akd4WUhVUEZvYWZzdmJ3VzNvV3ZjMWR6Q3ZYY3B0Wjd2aWh4NV9qdk9kR3NGMFRSLTdDcmRpYy1ydVI4bW1ZYi1oNjd3Tzc2cXd3bXBXcG1FMTliMUhRM0x4dW53SEV5RUFXNEFoAg	false	high
https://niceindiatravel.com/wp-content/themes/salient/css/build/style-non-critical.css?ver=16.1.3	false	unknown
https://niceindiatravel.com/wp-content/themes/salient/css/build/style.css?ver=16.1.3	false	unknown
https://niceindiatravel.com/wp-content/themes/salient/css/fonts/icomoon.woff?v=1.6	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers	chromecache_283.2.dr	false	URL Reputation: safe URL Reputation: safe	unknown
https://niceindiatravel.com/wp-content/themes/salient/css/build/elements/element-fancy-box.css?ver=1	chromecache_224.2.dr	false		unknown
https://niceindiatravel.com/wp-json/wp/v2/pages/6	chromecache_224.2.dr	false		unknown
https://www.youtube.com	chromecache_264.2.dr, chromecache_296.2.dr	false		high
https://niceindiatravel.com/wp-content/plugins/js_composer_salient/assets/js/dist/js_composer_front.	chromecache_214.2.dr, chromecache_224.2.dr	false		unknown
https://admin.youtube.com	chromecache_283.2.dr	false		high
https://niceindiatravel.com/sv/	chromecache_224.2.dr	false		unknown
https://wpbakery.com)	chromecache_290.2.dr	false		low
https://niceindiatravel.com/blog/	chromecache_224.2.dr	false		unknown
https://niceindiatravel.com/bhutan/5-days-in-bhutan/	chromecache_224.2.dr	false		unknown
https://redux.js.org/tutorials/fundamentals/part-4-store#middleware	chromecache_283.2.dr	false	URL Reputation: safe	unknown
https://niceindiatravel.com/wp-content/themes/salient/css/build/elements/element-testimonial.css?ver	chromecache_224.2.dr	false		unknown
https://niceindiatravel.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fniceindiatravel.com%2F&f	chromecache_224.2.dr	false		unknown
https://yurt.corp.google.com	chromecache_283.2.dr	false		high
https://www.youtube.com/generate_204?cpn=	chromecache_283.2.dr	false		high
https://niceindiatravel.com/wp-content/plugins/revslider6620n-1/public/assets/fonts/font-awesome/fon	chromecache_224.2.dr	false		unknown
https://niceindiatravel.com/wp-content/themes/salient/js/build/third-party/hoverintent.min.js?ver=1.	chromecache_214.2.dr, chromecache_224.2.dr	false		unknown
https://niceindiatravel.com/wp-content/themes/salient/js/build/elements/nectar-testimonial-slider.js	chromecache_224.2.dr	false		unknown
https://assets.pinterest.com/js/pinit.js	chromecache_290.2.dr	false		high
https://greensock.com/standard-license	chromecache_315.2.dr	false		high
http://tools.ietf.org/html/rfc1950	chromecache_283.2.dr, chromecache_267.2.dr, chromecache_296.2.dr	false		high
https://niceindiatravel.com/maldives/4-days-in-maldives/	chromecache_224.2.dr	false		unknown
https://niceindiatravel.com/nepal/	chromecache_224.2.dr	false		unknown
https://niceindiatravel.com/contact/	chromecache_224.2.dr	false		unknown
https://niceindiatravel.com/bv/	chromecache_224.2.dr	false		unknown
https://niceindiatravel.com/maldives/	chromecache_224.2.dr	false		unknown
https://niceindiatravel.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fniceindiatravel.com%2Fabout%2	chromecache_214.2.dr	false		unknown
https://niceindiatravel.com/wp-content/plugins/revslider6620n-1/public/assets/fonts/font-awesome/css	chromecache_224.2.dr	false		unknown
https://niceindiatravel.com/sri-lanka/	chromecache_224.2.dr	false		unknown
https://niceindiatravel.com/india/	chromecache_224.2.dr	false		unknown
https://support.google.com/youtube/?p=report_playback	chromecache_283.2.dr	false		high
http://go.wpbakery.com/licensing	chromecache_290.2.dr	false		high
https://developers.google.com/youtube/iframe_api_reference#Events	chromecache_296.2.dr	false		high
http://youtube.com/streaming/metadata/segment/102015	chromecache_283.2.dr	false		high
https://youtu.be/	chromecache_283.2.dr	false		high
https://niceindiatravel.com/bhutan/	chromecache_224.2.dr	false		unknown
https://niceindiatravel.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fniceindiatravel.com%2F	chromecache_224.2.dr	false		unknown
https://niceindiatravel.com/ev/	chromecache_224.2.dr	false		unknown
https://una.im/CSSgram/	chromecache_300.2.dr	false	URL Reputation: safe	unknown
https://youtube.com/api/drm/fps?ek=uninitialized	chromecache_283.2.dr	false		high
https://docs.google.com/get_video_info	chromecache_283.2.dr	false		high
http://www.github.com/mattbryson	chromecache_315.2.dr	false		high
http://fontawesome.io/license	chromecache_275.2.dr	false		high
http://gsgd.co.uk/sandbox/jquery/easing/	chromecache_248.2.dr	false	URL Reputation: safe	unknown
https://niceindiatravel.com/tv/	chromecache_224.2.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
183.240.99.202	www.wshifen.com	China	56040	CMNET-GUANGDONG-APChinaMobilecommunicationscorporation	false
172.217.135.202	rr5.sn-p5qlsn76.googlevideo.com	United States	15169	GOOGLEUS	false
142.250.105.156	unknown	United States	15169	GOOGLEUS	false
142.250.105.132	photos-ugc.l.googleusercontent.com	United States	15169	GOOGLEUS	false
173.194.219.136	unknown	United States	15169	GOOGLEUS	false
173.194.7.170	rr5.sn-p5qddn7r.googlevideo.com	United States	15169	GOOGLEUS	false
142.250.9.113	play.google.com	United States	15169	GOOGLEUS	false
142.251.15.91	unknown	United States	15169	GOOGLEUS	false
64.233.176.119	i.ytimg.com	United States	15169	GOOGLEUS	false
84.32.84.114	unknown	Lithuania	33922	NTT-LT-ASLT	false
108.177.122.190	youtube-ui.l.google.com	United States	15169	GOOGLEUS	false
154.62.106.12	unknown	United States	174	COGENT-174US	false
84.32.84.89	niceindiatravel.com	Lithuania	33922	NTT-LT-ASLT	false
142.250.105.148	static.doubleclick.net	United States	15169	GOOGLEUS	false
191.101.104.47	www.niceindiatravel.com.cdn.hstgr.net	Chile	61317	ASDETUKhttpwwwheficedcomGB	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
74.125.136.155	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
64.233.176.147	www.google.com	United States	15169	GOOGLEUS	false
142.250.9.103	unknown	United States	15169	GOOGLEUS	false
142.251.15.119	unknown	United States	15169	GOOGLEUS	false
74.125.136.132	unknown	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.9
192.168.2.11

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1426820
Start date and time:	2024-04-16 17:04:04 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 2s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://www.baidu.com/link?url=CvCuJHQ5mUiF8tzYwW4LExI5DJ7e8SA78W1tu_uckwU-RgMoIZevncSlciEmtvdq&wd=cmljaGFyZC5wZXBpQGdlcmZsb3J1c2EuY29t
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	19
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@24/279@48/23
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://niceindiatravel.com/#ajax-content-wrap Browse: https://niceindiatravel.com/about/

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, audiodg.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.105.94, 172.217.215.102, 172.217.215.113, 172.217.215.138, 172.217.215.101, 172.217.215.100, 172.217.215.139, 172.253.124.84, 34.104.35.123, 172.253.124.95, 142.251.15.94, 40.68.123.157, 23.47.204.55, 199.232.210.172, 192.229.211.108, 20.3.187.198, 13.85.23.206, 64.233.177.95, 108.177.122.95, 74.125.138.95, 64.233.185.95, 142.250.105.95, 142.250.9.95, 64.233.176.95, 74.125.136.95, 142.251.15.95, 173.194.219.95, 172.217.215.94, 172.217.215.95, 108.177.122.94, 23.47.204.82, 23.47.204.46, 23.47.204.78, 23.47.204.74, 23.47.204.44, 23.47.204.80
Excluded domains from analysis (whitelisted): fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, fonts.gstatic.com, slscr.update.microsoft.com, clientservices.googleapis.com, ctldl.windowsupdate.com, a767.dspw65.akamai.net, jnn-pa.googleapis.com, wu-bg-shim.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, download.windowsupdate.com.edgesuite.net, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, clients.l.google.com, glb.sls.prod.dcat.dsp.trafficmanager.net
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtSetInformationFile calls found.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Apr 16 14:04:57 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	3.9797405027464303
Encrypted:	false
SSDEEP:	48:8vgodjTUmCJHQidAKZdA1nehwiZUklqeh3y+3:8vgYs+8y
MD5:	37A60672E425AB725A57EF615A1A2DD2
SHA1:	D6B121D730F80B937BE4CB4FD3204911960A4B55
SHA-256:	C2848D1FE78B48E21239C36904B0910BCB09EB84744DF5462D4EF3C8B70216BF
SHA-512:	7F963ABDB235F02A25EE27973E028EE3E5F7CB4B50B69CA7D8A3EBD9ACF64B5D8FD214CD730DBD39F072227F75C45FD911FF2D31B310A466FEED42AB9C37DA05
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......er........y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EWXX..PROGRA~1..t......O.I.X.x....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.x....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.V..Chrome..>......CW.V.X.x....M.....................g.u.C.h.r.o.m.e.....`.1.....EW.V..APPLIC~1..H......CW.V.X.x..........................g.u.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.X.x............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............E<.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Apr 16 14:04:57 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9978410448620507
Encrypted:	false
SSDEEP:	48:8nodjTUmCJHQidAKZdA1geh/iZUkAQkqehsy+2:8nYsa9Qly
MD5:	82BA2805DB0466979542CFF7DCB7B3D6
SHA1:	5D7D6CC374216D542F3350BC6AFCFBD9A280B473
SHA-256:	1A87698404C439BF13AFC37CEF8B30AC38E3E5816F012CA7AB8D374B1BD69D39
SHA-512:	23F6A0E4F65F6F7A703ED7DB0DF3BD3022755417305941C2E90DAC4B67B60220E88D1CDC9CBB8E06989F625E1F4952A6EABDD3FC3EA497F1183A8CFBF5932EFC
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....,[r........y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EWXX..PROGRA~1..t......O.I.X.x....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.x....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.V..Chrome..>......CW.V.X.x....M.....................g.u.C.h.r.o.m.e.....`.1.....EW.V..APPLIC~1..H......CW.V.X.x..........................g.u.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.X.x............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............E<.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 5 09:52:18 2023, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2691
Entropy (8bit):	4.005821798300868
Encrypted:	false
SSDEEP:	48:87odjTUmCCHQidAKZdA148eh7sFiZUkmgqeh7syy+BX:87YsBngy
MD5:	D507068F0A5A3E343D2962C58CC13314
SHA1:	9F3B924F815D6B26828FA8CAE5E00B68046D4042
SHA-256:	87C4A0307870316CBAB018490CDDB84D2F90ACB4EC69F539E998A0BB8E5A59F4
SHA-512:	B435FF30BBBD1CFF4AD6C6820CD51988683453801D62B6EF6D6AD50A7A0B4797EFBBF9AD480888BDA304F92BB4D229DA1C20FFDF0834E73BC1451298FFB24C3E
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....s4..z.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EWXX..PROGRA~1..t......O.I.X.x....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.x....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.V..Chrome..>......CW.V.X.x....M.....................g.u.C.h.r.o.m.e.....`.1.....EW.V..APPLIC~1..H......CW.V.X.x..........................g.u.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VEW.V............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............E<.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Apr 16 14:04:57 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9926152865906666
Encrypted:	false
SSDEEP:	48:8hodjTUmCJHQidAKZdA1lehDiZUkwqeh4y+R:8hYsXKy
MD5:	7F08B283FCB31BA40F580C3BF35D86BE
SHA1:	D0A10032EE350D3A5B10CE008F6CCB45B02B9D48
SHA-256:	42F47FB42BE2D3E1B32E4069F6A9F030C559E29A876986C70EE5C63B98C2D3A8
SHA-512:	CD33FB8CF30C8B83B00F076250B95BEDFA15ACB149687496149884FD0DD26632271FFE7CD232AF35D84E9178A551D2BE099FA210D4B9D40E93EA1C00B3C8F6B2
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....KTr........y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EWXX..PROGRA~1..t......O.I.X.x....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.x....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.V..Chrome..>......CW.V.X.x....M.....................g.u.C.h.r.o.m.e.....`.1.....EW.V..APPLIC~1..H......CW.V.X.x..........................g.u.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.X.x............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............E<.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Apr 16 14:04:57 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9823822050310107
Encrypted:	false
SSDEEP:	48:8CodjTUmCJHQidAKZdA17ehBiZUk1W1qehmy+C:8CYsn9Gy
MD5:	1156C8C8C5AA0B5DE71CCC36A27BC23D
SHA1:	1C9FE3E1AC374D43E79E092981ACCC1AA8CEB21D
SHA-256:	8B33737BB6F09A18D8CB8365081BAAF716AE96D2AD97928D72D58A679A04069A
SHA-512:	72136858E51A5E1F55BE5996F1B7CC77039005595B066CEF8C910D5EDE36E47D9A54996CE3EFB58290F19EBD53B7CD50B307F52E4C4A81C85A96D5FBB802F2A9
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......_r........y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EWXX..PROGRA~1..t......O.I.X.x....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.x....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.V..Chrome..>......CW.V.X.x....M.....................g.u.C.h.r.o.m.e.....`.1.....EW.V..APPLIC~1..H......CW.V.X.x..........................g.u.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.X.x............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............E<.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Apr 16 14:04:57 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9936713012429887
Encrypted:	false
SSDEEP:	48:8uodjTUmCJHQidAKZdA1duTiehOuTbbiZUk5OjqehOuTbgy+yT+:8uYsFTLTbxWOvTbgy7T
MD5:	1B828AC25C8544DA572650DC2898C804
SHA1:	61F403283010DB64E7502530012E0D514ABE4D02
SHA-256:	794D023C48F164851B5617B40BD03ABCEFE72FF3C75126FF5DDFD1B15C3641FE
SHA-512:	FE15036CCD9AEFAF5E8433770C43EB6A163DC89B2B86CFE4EAA97A1D4EC8AA027E36B181A79488CDCF87BB21E8B56364C66308AEB1F621F2C9012FFB72363D1D
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Kr........y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EWXX..PROGRA~1..t......O.I.X.x....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.x....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.V..Chrome..>......CW.V.X.x....M.....................g.u.C.h.r.o.m.e.....`.1.....EW.V..APPLIC~1..H......CW.V.X.x..........................g.u.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.X.x............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............E<.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	66132
Entropy (8bit):	7.98785028072025
Encrypted:	false
SSDEEP:	1536:TYyVkAfeH2rXQt8ZkUHU1geFnuIsc5WWrBCeOJ:TY2kAWiNHU1lsIv5WWrBCv
MD5:	7572C5022D21D6DF9C256C33A264D22C
SHA1:	869F011FD8C2D4C55CC17DDF852489AEF154FAD7
SHA-256:	B0507BA16E88B935EE721E783C973B79AC4794B0B506D21C58D028D994357CB7
SHA-512:	DCF98DF4FADE36B22356E609371637B12D823AC9D5D0B15C40AD9273D08DCEC8930B0E7CD0CB1B358749046DCDB67E010E1A4F2F5E1D5FE53C3EC9F6CD227982
Malicious:	false
Reputation:	low
Preview:	:..../....wAD9uO9YAQw... ........0.j.............p.........E..B...B...B..B..B..webmB...B....S.g.....,...M.t.M..S...I.fS.........DM..S...T.kS..........M..S...S.kS...........I.f....B@D..H.C@M..google/video-fileWA.google/video-file.T.k....s....c........."...eng..A_OPUSc..OpusHead..8........V..c..V.......G;.....bd...S.kA................'.........A....N!........N....u1..............A.......x......Q.......B......a..............q.............8.........P....._.......................................J.............."7.............$......".....'.7.....I.....h..C.u".S.....................@...).....#.u.g-g<...&c..^..\..'8.'HF.[...a.. _......P..Op..K..L.}6P[$..k..Hm..&S...x.@...w....j..<6.................Z.Jh.G2J.%.q$g.....v.F7.._...8..Mq.......a.........k.$P.hc..@...=..}.7].SaT....c.M.o.....Dy..BR.-r.~...z.0.i..-..@..u.i*`vHis..}h.O]....XOz......]..6?..#.s...1d....~.].Rs,....\|..v.....3...B.`..P..po.&..^...D.n.../.8c}...!.@...Q.....FS.R.e..`.n

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	81966
Entropy (8bit):	7.997149071454234
Encrypted:	true
SSDEEP:	1536:lFtTvo0olAiqDb4AaH8bJ6u4G66MOjZIrHG1XX6iben4s9b1B0+jQ6g:lrTIqnYcNcGDJUUuNl1B0+jhg
MD5:	BCC539CAAB7D05E47FAF9704811DA8AF
SHA1:	ED040CFB0CAFFCD390C2E45C1939326C0B8629E1
SHA-256:	614C3A1B2E9778C77F163173CE99F1B3F7961801E5B013354F8B40449B93A6FF
SHA-512:	71178B99B08E2C03F7C1BAC9EA863FF4B98D4BF06CCFD16EB4FF44ABD81085514A0B18378F0D7DE0F02864EC5FB0E4583B7EF99ABDE43684748F0AB0CDF4DFC3
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-content/uploads/2018/11/2.jpg
Preview:	RIFF&@..WEBPVP8X........W.....VP8 .?..0....X...>I..D"......(......'....?b}..>m..._.?...n.~S......]..k.........?....K...3..._....}J..~..........3...O.?.]..........w..?..............C...-e.4.?.?....#.q.........1O./....B.e..........1....).}.o.O.>....8.I........7.~....>......].......~.W.....'....i.O..........y...w.?.....x../.'.....O._........a.......?...........?......................._...\|;~..........s....E2m\|.0g..1.W=......N....(o.]..#;.i&.^.v.d...v...kd~..$.c..a.yDg...........(t.n...5...IT..$..0\.Z.>6.8.`.J.[.U..(v..K..XOO%SS^.,.#_l.9.....~B...T......o...i.....r.V....W}.9..)......T..N.z..(...Q6.W0.?.=..._.q?EZA.....E._"..g.>..a%.r...UD\|8..4^..C.OFJv......o...=..C..\|.8;....=}!.....&&,)\A)..0..SP+...E.\|.MX..!SJA.(.$>..}LbB6..0.:.v....Y......{`.6`.q{DH.G..G....L..g..a.9.&U.j.7.z.l>.OO.9*.H4$EeO,...1..2.~.U.6.N..._.AU...."...J&..J.+0..u....V..<F.7.\|.W.t.1f7..A.w........IR.\..@~4.....i....q.Gc....... ..e.Yv..+r.t..I....A?{2........b9..>.W....!..e..%.

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	176609
Entropy (8bit):	7.962544155528945
Encrypted:	false
SSDEEP:	3072:sQt2aPl+DCJOyfaPmYB9X8pliJalwWvYRDqEpWg8jjJlIPAgDU+subZ:90arliPmYB6pCA4NWgYjnqlDHF9
MD5:	806DC9467A0FBB07622B8B84468D7D71
SHA1:	7DA493FEC8FBF0A3D6F18F2F86B72CE9A12A7EC5
SHA-256:	E3013FE931412EA7838A34403A3D1658CAA1A92E610EA30EBC8B5F01BD9E1931
SHA-512:	0F31F7510CA7B2FCDA55EC1CA6008875A39B9C8DC93756AC51060FA159109F5DEA0FE5F2EFE90552357F583B5351BD10769681A91383B118EF2E44019F8DBD43
Malicious:	false
Reputation:	low
Preview:	:..../....wAD9uO9YAQw... ......0.j...........p...........ftypdash....iso6av01mp41....moov...lmvhd......3...3...2.....................................................@..................................(mvex... trex............................trak...\tkhd......3...3.............................................................@....V..........mdia... mdhd......3...3...2.....U......Ghdlr........vide............ISO Media file produced by Google Inc.....1minf...$dinf....dref............url ........stbl....stsd............av01.........................V...H...H..........AOM Coding............................av1C.........$..>.$........colrnclx...........stts............stsc............stco............stsz................stss............vmhd................sidx..........2.......................................d...........$g..>........K...........@..,.......3...........U...<........M..............0...................YD..P...........0.........................................PJ..J........?..

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7964), with no line terminators
Category:	downloaded
Size (bytes):	7964
Entropy (8bit):	4.958668862210391
Encrypted:	false
SSDEEP:	192:0u1WCO7EWPWNDqDjMEhii9SqMk96WhQ2K531AlL:EPiE+M
MD5:	3DE4483C1DA99FD3A391C5EBABDC3699
SHA1:	E413B4C9B07831B173F3900D8777DA9BC58E4928
SHA-256:	03F2590278435D8E660CAE76D3C900B6223B06DAC3F526CC43F66B6213B3B63E
SHA-512:	4290288B27B07F975DE099D66D8B79B37E126DBF16A54D7AE10BEF539AB14A1E90104BCD53728376959DD0231AE8822BC915C3F8AF39D8AD251735C904C223FE
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-content/themes/salient/css/build/plugins/magnific.css?ver=8.6.0
Preview:	.mfp-bg{top:0;left:0;width:100%;height:100%!important;z-index:104200;overflow:hidden;position:fixed!important;background:#0b0b0b;opacity:.8}.mfp-wrap{top:0;left:0;width:100%;height:100%;z-index:104300;position:fixed;outline:0!important;-webkit-backface-visibility:hidden}.mfp-container{text-align:center;position:absolute;width:100%;height:100%;left:0;top:0;padding:0 20px;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}.mfp-container:before{content:'';display:inline-block;height:100%;vertical-align:middle}.mfp-align-top .mfp-container:before{display:none}.mfp-content{position:relative;display:inline-block;vertical-align:middle;margin:0 auto;text-align:left;z-index:104500}.mfp-ajax-holder .mfp-content,.mfp-inline-holder .mfp-content{width:100%;cursor:auto}.mfp-ajax-cur{cursor:progress}.mfp-zoom-out-cur,.mfp-zoom-out-cur .mfp-image-holder .mfp-close{cursor:-moz-zoom-out;cursor:-webkit-zoom-out;cursor:zoom-out}.mfp-zoom{cursor:pointer;cursor:-webkit-zoom-in;cu

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 600x400, components 3
Category:	dropped
Size (bytes):	42842
Entropy (8bit):	7.957086389069286
Encrypted:	false
SSDEEP:	768:pH2Oox5TM2GYXmcZ0gBemQmj+m0dKejVmOw3Hqr7aYTWSECoPp/3HDDAVky:pWbx5Tz2DopgKWmOw3HaaYTWSECoPV3y
MD5:	BDC45A7F050A282BAA786C6DC022DBFD
SHA1:	79F7DED12CF7F227170D70BAF8584A5C44D6AA78
SHA-256:	B9CE36C7724C79320207D10FE0F37E5DC4C696FD4ABED80D0F51DFDC261E1593
SHA-512:	877C8F7310DBC3E79931F9FD181DF24AAC817742DC0538155175182BC4B583DD0BE0613E0F6BF8915BA74AA3D0F9B7FDBB114AC44CAA74F94AC37FEC92BAFCFF
Malicious:	false
Reputation:	low
Preview:	......Exif..II...........................J...........R...(...........i.......Z.......H.......H.................X......................C..............................................!........."$".$.......C.........................................................................X.."........................................F.......................!.1..AQ."aq....2B...#R.b.....$r.3C....Sc%4T..................................7........................!1AQ..aq....."...#2...$B3R.r.............?..&.....U.J%..x.P..5.V..q.m..=....?P.U.]..C.yf..4...@=>.Sc..Hb`R...)....S....z..n6....Zq.@.7.......m.....I...Du..D...../.Fbg..Hn2'. .';S..a?.(.s4...K.JsQN.1....Ab[z.JpDI....)..h......3...h....\|.OQO3.....H..3.}).G.g..~.....9.4...?.H...1Ng..lR.......Zq..qM0w.(.A.L...h...d...8.3.QQ...u. .(.D..r@.T[.""........'..M$.'...Z`..`.....DE9;g.....Syf`...s@"..@..;b.1<....T.8$.I.!...C[`..t3S.9.$u..0..2f;.7.I...^vfj...?.b.L.3...'...O...Ze.;.....1.....3.). ..j."w...q....L..z.........06..H...SH.

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 21808, version 1.0
Category:	downloaded
Size (bytes):	21808
Entropy (8bit):	7.990089742249444
Encrypted:	true
SSDEEP:	384:un+6K7p/OKUc5j+p/zjkvSiHTIPjw8e9mvBFVqJrcLk65GH6rTYACQVyt+5Qb5WA:E+6Gp/x5+p/zrw8e9mpatI3O6r4A5TeP
MD5:	BED0B6EF830A8FDCA63DB20160803630
SHA1:	C21459429E36D6CB01DC9D15569F52BB33DA6ACD
SHA-256:	2044A0ABFD7B116F6D091D6D9227A5720BD4848519CD38D274B2A3A9356969DD
SHA-512:	0FB9C0A8EBC6CEB2B87FBB0C6871BF7C32435497D7FC6FBDC58E318940F64FAD1E8503AD1AFA949CBFE85963DD8C78B889BDB6410E42EDEB5820DD88AB80AF5A
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/varelaround/v20/w8gdH283Tvk__Lua32TysjIfp8uP.woff2
Preview:	wOF2......U0.........T..........................V..,....`.................X..:..6.$..b. ..X.....V...'......R...>;..[.%^.P.8..l..........d..4@.....LR&.h].w'.....];......a..k.Lp.....)..l..o8..2......s3}..X.....@.......u....\.2...)._86r..I.c..Iu....J..+..ff..AQ..q.9.Rf&.....jObWl.Px.b._..csjd.$O.D...V..'.E.A...&.l.........s.s.{K.@$F...........gd#F. F.....7...O.y.K.t.[._Ni:.f.$0.......5......Y ..B.1..P.8.ap.tZ.Z.Z.X.-...k..99,.......h..D.khi..EPT@.%C...^.(..[.+._.G......lr.ya5.L...* ..2.......).C..t.sQ...U_{\|..............M.fj..,....#.2.JZ(."`.E[.T2..!.[cX....m.....L..X..4.1&.M......7.[o..."..Ie...\|..W.Vn...o.....S..lZ..l...%$b..8N.a............y(.ZJ...2.....v..M85...-.1Xr..Sb..Mx..........>.;s...?.z.%...R..0.......w....v..p..'D..!I.V.....[.aR.lT.".Gkcu..T.kU7)B...p.(..9.E..#.x.........n..hDB.@r...EP.2... F.h>.NY..3..z9..O>\...qO{......d..6...$}.M..z..)..).8._.C....0.O,$..=599+PX?.>...KnL8..1I[..S........:....nn\|$... ..0.3w.........].

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 1600x872, components 3
Category:	dropped
Size (bytes):	332679
Entropy (8bit):	7.979550858514382
Encrypted:	false
SSDEEP:	6144:1iAF40ZUuxTe8VRjMUJLkIQfJVgwYZHggxzt/OMc2483uf4nGs/e:0WUGe8VRAU6f/gwYRgcF5cB0uf4nGr
MD5:	11B4FB5BA8574C162CF27CBA1F9ED667
SHA1:	ED32B0F365AC288771DA8313F59490B546742F3B
SHA-256:	74B1C4DDC0B69C16E07771F6A72F9B25EEE1A40E9A86C357615EAB18C49131B4
SHA-512:	E5070C2E985A80D46479D96BC74C16EA178D8E60C02484A92CEFA091EC93C153B22295E07CB7A2BFA98A2FE7C4EFE869C553A2901FC2493B149E85B4C63D0C95
Malicious:	false
Reputation:	low
Preview:	......Exif..II...........................J...........R...(...........i.......Z.......H.......H.................@...........h..........C..............................................!........."$".$.......C.......................................................................h.@..".........................................P.........................!.1."AQa.q.2..#B...Rb...$3..r..%C.4S....c&DTs..56EUt.................................7.......................!1.A."Qaq...2......#B..3R..$Cb............?...E....`.ps...W......e......=A.Q.=N'....}.....i...s]..3.dt...A....v.8.[jH...c..!.%.....SYm....W...L..........m5.(.lg.{y.2:.....\|^.......-K.LiS...@T..^....5.cOLE.7.s.....S.CR..5.6).zo..51..j@51..4......P!W5.4...WT...MOJ..qMOM.M...=#L..J..c.j..i..P.&.=5...S.b......sJ........G4..SP.SS...5=b....1.J.....>)P9.OJ.94..K...SS....jjzX.Cb......O.j.5zT....6(...\|SS.....5zT.jT.P.SWT....J..LE=.5#OH....T..;....P.4.OML.MO.zT...,S.CSWT....>)P9.,S..jl\|WF.;..T....cO.T....J....

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	38090
Entropy (8bit):	7.988301118124248
Encrypted:	false
SSDEEP:	768:KUOkLXYOuLoBuVjKTNy3Etbx4oW8Kum8znwREYQYinjIW9lrdXb:KUfYV8BudKTk3ubxRAume7Y+njImXb
MD5:	D026F30CD7CB6C45AA21E1496799FAAA
SHA1:	30427B7267ACBDD20D13DD29D9405F0EB39B4BBE
SHA-256:	75BE061D0AAECFB9EE8A0967272D97D6E82CA0C39DBDB8F74F30CE01630A3D3D
SHA-512:	AE9D4A81BD4F293263C0F3516C22428549A4A9A683DC8616107B0E7D62A4775234ACD39FE699343E8C2FED41DC783A1F20B250598624807664599FF3BFF02572
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-content/uploads/2021/02/nit-logo-new-2021.jpg
Preview:	RIFF...WEBPVP8X........?.....VP8 .....E...@...>Q&.E.."(...q...M.w.J....@.n........8...............?..s....n..........n.v.......O.o..._.m~r.{.1._.o.7.......~\|.........k.......s......{...r.e.!.............=.............^............W..\....._...~....)...........?P.......f....._.....~....W.>...y\..T..}..G.....:?..1...C.?...~]\|.~]..._.O...>C0......_.?.............._.?.....?..V............{...]...........?o.B...3.......?.......u.........?;.............e..S.L...V...7b..j4.:.#I.F.A.......b.m.......F.SeJ)....R.l.E6T..QM.(..SeJ)....R.l.E.q.7.@...&:......v7....e.x.H...F.SeJ)....R.l.E6T..QM.(..SeJ)....R.l.B>.......I.S. F...i.......C.5.6T..QM.(..SeJ)....R.l.E6T..QM.(..SeJ.f.3.....E.S.H.U.n..u#d..Etjs.)..%w.&@\|.......R.l.E6T..QM.(..SeJ)....R.l.E6T..Igd...]..=8.A.K..9....<m.....c...w.0..1..SeJ)....R.l.E6T..QM.(..SeJ)....R.l.E68..K...U.........3{..B.#Lb....]..N...h.Y4L,.&.M..&...D..ad.0.{.....)......R.l.BR.4...MG'.A.mM.y+...i;n..O.8...J...A.b..t..

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2907), with no line terminators
Category:	downloaded
Size (bytes):	2907
Entropy (8bit):	4.907704520860964
Encrypted:	false
SSDEEP:	48:ZQzY8sOwL8WomGZF5ioJkmtVoJboJOoJDJGfoJ7oJDJYoJDJxoJDoJ5EToJ5pJa3:ZFvxemGZF5ioJkmzoJboJOoJDJGoJ7oQ
MD5:	95D25ACAA065BDA5FCC73E8EE7FDA319
SHA1:	081F78E7DDE10F8CEAFB2ACB17B11B66C103DAB7
SHA-256:	0CD378FDD81BE4D06D9A0261A67BEBC8E88B41670DBB2E64162B2C7012B355DC
SHA-512:	3C53672665D66746DA3C0BA31D454020FF1D8056D337C7A62F6B8A132DD42866303419C7F1B489B02DDEFFDF976C0FD0080CC5FC5D820BF5183418E65BE73637
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-content/themes/salient/css/build/third-party/cf7.css?ver=16.1.3
Preview:	.wpcf7-form p span{color:#000}.light .wpcf7 div.wpcf7-response-output,div.wpcf7-validation-errors{color:#666!important}div.wpcf7 img.ajax-loader{margin-top:10px;display:inline-block}.wpcf7-not-valid-tip{background:none repeat scroll 0 0 #fff}.minimal-form-input .wpcf7-not-valid-tip{position:absolute;top:100%}.wpcf7-form .wpcf7-not-valid-tip{top:-3px;padding:2px 6px;border:0;box-shadow:0 4px 9px rgba(0,0,0,.07)}.wpb_column.centered-text .wpcf7-form .wpcf7-not-valid-tip{text-align:left}.wpcf7 .wpcf7-response-output{background-color:#fff;margin-left:0;margin-top:10px}.nectar-wpcf7-rounded-form input[type=date],.nectar-wpcf7-rounded-form input[type=email],.nectar-wpcf7-rounded-form input[type=tel],.nectar-wpcf7-rounded-form input[type=text],.nectar-wpcf7-rounded-form input[type=url]{border-radius:50px}.wpcf7-form .nectar-wpcf7-inline-form{display:flex;flex-direction:row;padding:27px 0}.material .wpcf7-form .nectar-wpcf7-inline-form{padding:1.5em 0}.wpcf7-form .nectar-wpcf7-inline-form>div:

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	166132
Entropy (8bit):	7.998575147818379
Encrypted:	true
SSDEEP:	3072:ewdzC31P5Y2kJsdUM1mPzFbLSu5QHzAoQjLHQUFGrP81HdkTfLFRRg/:eie3bY24sdX1al5QHzXoLHQUFmPIdkT6
MD5:	4CBE255F0EA72A3ED332BC477CE5EC1A
SHA1:	A030375B5AD2A4FC154745728F295B512C50DF1A
SHA-256:	8B7B24495D75D37272300E48B10E7D289AC28E0A650D3C71185F4A79E892A2EF
SHA-512:	5F46DA0A0C05DC860095AB36981D4904B8985BB248CE44FDF555FBC6FE4C3397AFAE5FCE32FDCBBA9F962F6EDF54FF23F225049E14FE55173E0A760D15F57923
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-content/uploads/2018/10/1-7.jpg
Preview:	RIFF...WEBPVP8X..............VP8 H...P........>I..D".....h(......d.R.i=...p....u...............Y.y........./X....?r.q=.....{..+.......w...........~._.?{>.....................`.!./.........q.+.;.'._..?....m.....-...?.............?....!.7._......?...?._...?x....\|.\|...._.{..................................?...?........m...'.....?...}......_.OC..........W.......~.}..]...o...h..............................?............o.k.......?.........E:.Ju.........Y.cN.7G.4...5....4=K......p2\...+J..00...Sa....^)..6....nD.J.Q.t.I.yK.vF....pU..U.....T....M...iO.W..fV.=..}... C.P..oa...-.S...h.Z..W......x.l..x...=..b...0.....?....nL......7.........fh.1}..J..,.....j5.8.9.fS.~.+6.L5.&.9.\|.uz\|....7..g"..\|UI./..bw-..d...-...o)y.>.$W..4.;d.(......E.....~}C.JG....La..T..ge..5.3h...~.w..E.)..I.+....j..@..Q.d..`..._L:.N..-B..@.....;._..W...1.y....$...O...Bv.{...e.T....3...^."..`b..sY.....:.=..`..h.C..^...3..3]-"G.{..)p_A4$y.Y0X%.QY+fEm.M....[.A.9../..L1..G..P..0..r.

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	221716
Entropy (8bit):	7.998175002423804
Encrypted:	true
SSDEEP:	6144:uRy57zJg6y1vGRo6VtiVz/tool/vyHipJBv:uRyJzH0eRo6jUmiHyHipJN
MD5:	9A12B3BA47246606F52C9086EDCD95C9
SHA1:	13BAAB551AE1187F50EAABAE9B51B677687ECD20
SHA-256:	A0CD5DFCCB0905D26F95D9AC721E98C54AA47A0EC3A581CFE656213D9F0F0CB1
SHA-512:	446804579205F3A62A5018986D49F6FF01731A8EC8700E99AA7310C14EDDD34F058505E61236B29392EE41A4FFDE831823D280AA8BF6A101249DE7CF42280588
Malicious:	false
Reputation:	low
Preview:	:....1....wAD9uO9YAQw... ......0...j...........p.........]..7.]K....P.....e..#.........i..........y.y...4..*Z.s.\|x.R.BU......6..e.,W9.&..t..F..T.m'..\|].:.(s..l...F....O.'..Xt...J..;../..La..P.<...d&..:i..........l.^.....e.....^.$n........cG.Xv..J...p..n.@#.31.g:q.Ltv.2...x.gE......n...nv..z.o......`...7..C%I.....WU..../..O....7.y...d.S...G[...s..T.t....c.h.....2..0...!.{$p...B.p..D.R.t..4.....&J^....!7....g.....b..W..:W...l.qt.I....r.U...-;mZ&...$.bx...w....P.FeH.N0....;.......}....I3/T....DE..c.H.....[..f..(NS....X<\|.7p...U.C...d.....MI...m....^.Yt>.v.u.l.......2..0.P...{$p..."Cp..!:o.....h.......{..w...@"PS.. ...:-..n...^....\...]%.mX]=..=A..{..t....U!we.P...g...$\ZR....:.......'&.........Q...W...cf...ic.O.XZ.).x..P.D.......2."..`.......2..(.P..T..(.. .(?....Y.;Xz....\|CK......X(.N.Z.Bi...i0...[#..:...}.;h..X.z..&e...'......dW3r.(...2.....AVN.(.2.....-.@am?.;...!k.:o..FR.w...m..`..5....M.Om.,.gE.r.hMg.b...@..h..P...R....7.O.....Eb

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25646), with no line terminators
Category:	downloaded
Size (bytes):	25646
Entropy (8bit):	4.947699015731433
Encrypted:	false
SSDEEP:	768:RRe56M1xBS50PLZlVsVG4mRJGojXLJTxg85Q58MDt:RRe56M1xYePLZlVsVG4mRJGojXNTK
MD5:	45E001E9A476BC6AA8312923EE953B5A
SHA1:	0A6E5B6414E4FC559CE0C4ACCFADFCD2F27DF913
SHA-256:	2AF9B4FEC27508B453812D713AB62650F4F46F85AD2DC92BF910C0253126D6EF
SHA-512:	EEFF6A069222591042E42CFED5240E970AB4B101255FAEACF3D27939DF49376C4FD8079D14EEB095748DCBD90A16DAC492E5B14C9540BFDD126CF08FD6117691
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-content/themes/salient/css/build/style-non-critical.css?ver=16.1.3
Preview:	#header-outer[data-lhe=animated_underline] #top nav>ul>li>a{transition:color .2s ease}.sf-menu>li>a>.sf-sub-indicator i{transition:color .2s ease}.sf-shadow .sf-shadow-off{background:none repeat scroll 0 0 transparent}#header-outer:not([data-header-resize="1"]):not([data-format=left-header]) #logo img{transition:opacity .2s ease}#header-outer[data-using-secondary="1"]:not([data-format=left-header]){transition:transform .32s ease,background-color .3s ease 0s,box-shadow .3s ease 0s,margin .25s ease}#top nav ul #nectar-user-account a span,#top nav ul #search-btn a span{-webkit-transition:color .2s ease;transition:color .2s ease}#top ul .slide-out-widget-area-toggle a i.label{-webkit-transition:color .2s ease;transition:color .2s ease}#header-outer:not(.no-transition) .nectar-menu-icon.svg-icon svg path,#slide-out-width-area .nectar-menu-icon.svg-icon svg path{transition:fill .2s ease}#header-outer header .sf-menu>li.nectar-regular-menu-item>a>.nectar-menu-icon{transition:color .2s ease}#h

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 600x400, components 3
Category:	dropped
Size (bytes):	84720
Entropy (8bit):	7.965943376580128
Encrypted:	false
SSDEEP:	1536:gknu8PwFeFNw1zd3TmZTu7zKlHzcPvlSfnzL81RuayMlcggXNgZCyYBofHYF5:gt8oFeFNwDmZT2m9evE6uayMSgMNgcyM
MD5:	201EC4F6313CADE2D913089C89CD606D
SHA1:	247476B6F3A80D73EB1350C196B46A5CF59F8766
SHA-256:	645E0E43FCE8AB76B1785D6E8016ED02F3E96FC07B64FD778A023AB3D06372B5
SHA-512:	11307D7E8730B0764F2E637ACA108B641CA896B1F5FD32BFE3E4F865E50EB576CB28168320A0B61A6F94D8A0217C6D8AD8A0853ACF63FBCD62DEF44761EB5148
Malicious:	false
Reputation:	low
Preview:	......Exif..II...........................J...........R...(...........i.......Z.......H.......H.................X......................C..............................................!........."$".$.......C.........................................................................X..".........................................H..........................!1A.."Qa.q2B...#R.....$3br.....CS.%4..DTcs..................................A........................!1.AQ.aq..."......2..#B.Rr..3...$4CSb..............?..9.1..lQ.c.9.F.....=h.99..s4...<.w.....=h.q.$....t ..g.8....>h...E.d`u..,g....=..I4....>....2z...ojH.C.(.....c........PB.<q.E.z...u.I.J(.......C.9=(.<..v....1..>.{Q..q.j..C...py.E...<..%...9..3...^.g...C.2=.......v..h...qI.C...=03G...Z>..\|PI...=.I.....9.......p.$..(t...P.9....i#..)@.:..V.;......HO..'.h#i@qJN{.RE(c...08.K.......%...(.A.I....I..)?9....v.$.R.nic.HI.{...("..y.J.......A.....d...c...rF;.I,......Zx......niX....+...(...J.D.9.4.qI$c..}.I.@)#.}.R.".......

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15240, version 1.0
Category:	downloaded
Size (bytes):	15240
Entropy (8bit):	7.983955659494597
Encrypted:	false
SSDEEP:	384:szfE4y+lVW5OR2/Lrs54iBMccur8IULRWNS:szfE4RUk2E54imkNU7
MD5:	486C7FA9E90852FC9AFA63CEADC49B4B
SHA1:	5ECC8DB45A690703DC1BEF6F8DB2B6F5B865CF07
SHA-256:	A60B1BA9DAA11468BF1B846E8515E51B97023F341F2962A9623B9D8AAA7904AD
SHA-512:	D4F6A73660714F58B4CE7B0AE91BDD435DC7ED766EA4959556449E68377536BC48CFF2602FA54A0ECD6BD86ACA78CB3C0DAA3A19B7DB572A233797A3A394E968
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCuM73w5aXo.woff2
Preview:	wOF2......;........h..;'..........................6.....r.`?STATD..F.....\|......6.$..B. ..d..............x.12.!l...`.gF...B...... G...n......SWA..vt.3\T..j....&....3.z$...k..9%.....NH...Y....f...l#.M...-+'.ijA.E.;7....$z..<u{^. . ..~........qB.XH..,.uiN..1...r.]U....s.SV6.DI.H..A. ..(6V.=.\.r."...d.....;........'.........p@6J..,..T...............nb......?.V.,s..\H...iRIn.zo...+6j..P..\|.2....c.......o.(.&u.vcW"5.-:.I..PZ.`...?o....6...Tz..NJ.1U.B.G..g.xGxx_..@........../ZB.R....9e.eH.q........$....V.+D.GU]...F.....8`.v...I.`...6...LM+.7....<....)C..CO...:.S.\...,wg...^...p.&...A(....b.....e.t.t.K.t".)......Z..Rx.+....<......2&.x.CA^.a....\.....^...)....E.%..a..f.r.N...U..%.3...7T..q[b.c.s..V.kE......\|.C.!""..o.U!.$......"..HQ....d...c.G%a!.B<.?s.p.0.@.`1`.. .4@&@.....c.......h.JH...A.b.x.P.d...@*....L/(...?4P.t.AT.i.....0..{.L$....z:../}M5..v......].......XZ..ho.w...l...B.Zc.'C....c.!...z=.HNL.%K..69..5....,&.=.T.^Y7..9\...lWk..L...!/A.z.

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	298062
Entropy (8bit):	7.999307614653437
Encrypted:	true
SSDEEP:	6144:mzQ8lZ3wRMRLtMk/tyLuWfYir2V/FVaamxsT/dJngVO6KdefaP:S/3qkF6SVi+3gqefQ
MD5:	C75D18E07CF817B173B2FA5FD32F69D0
SHA1:	69D1FF01CD9407BD699849B2CFF5B09086B5C62C
SHA-256:	18081998FA0D5D837174EA00B7907AEAC4033EE12643B829FDE81EF344A0B637
SHA-512:	48AD3BCB6688048803D0FE7C52FDC8E9849CAB1B7CD50E1A71730C93956FA306D629F6E770B9945E14BF69C2E013884B652035CED447FA666622802B3A018FE1
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-content/uploads/2018/10/about.jpg
Preview:	RIFFF...WEBPVP8X........?.....VP8 @........@...>M..D".."0..HP..di.x..`^.meK4..F....5..J..?q}8._.$}.y....;...............N..z...........]...../..._._.?............^............g......?............_..................G..._.......a.3.{.7......._..q.......9.k........ ................p........\|...._...>..(..........=......#}s./.?................G.....O......S.u..................O............_....w..?......]...g......I.....G....g....?.}....I...g...._........3..........p}.........?...?....q.!.'.........>........".....Q..w._5...;......#..........h......P...{F.......m.d..\|..r..V_..2.f..3Z..0P+Z..c'F.,@XY...%3H..........9hw..e..uH......G.\|...k..G~>...`....o6.40.....X.%~l. ..R"'i.gz.U......ym0.wk.~..=.=2...`GL.......~.....k..O...AN....,.?`...S#....&..k.u.V.."y...F..;R..}3ey=.g.....5...Yb..(...M..9t.1..wc:q.......\|.>...n...T~...f...=..M......y..4..E...pX .e..j.I...<..l~..&.......F...xv~..Gy{k.....<:........v..!~.....o...\|Y.Mq...hk....gK..._......1.

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	9141
Entropy (8bit):	5.2975271144294185
Encrypted:	false
SSDEEP:	192:s6zoFrnW4iaX3LzDk1jpJLB2hlq717+3uClD2tFtJ7bykd+SHS+F:s6Udn3LzoJphH8uClD2tFtJ7byTwtF
MD5:	A8127C1A87BB4F99EDBEEC7C37311DCD
SHA1:	9997A1745F48BDD233DBE9BD8164DAA53EBA105B
SHA-256:	F313D12EA6124BD28FC4A6B7163D253BB83D5AEAB5EDCE594880C5C3DF475CBC
SHA-512:	AA10DDC5B29905C60A058FAED3F5F195F7577CEAC46489E02461B5135732194DAA3AEF4AA473127BF8C753312E02074CFDAC8D0F8F0CC8AA544C7F8E02BEBD08
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6
Preview:	/! This file is auto-generated /.(()=>{var t={2058:(t,e,r)=>{var n;!function(){"use strict";var i={not_string:/[^s]/,not_bool:/[^t]/,not_type:/[^T]/,not_primitive:/[^v]/,number:/[diefg]/,numeric_arg:/[bcdiefguxX]/,json:/[j]/,not_json:/[^j]/,text:/^[^\x25]+/,modulo:/^\x25{2}/,placeholder:/^\x25(?:([1-9]\d)\$\|$([^)]+)$)?(\+)?(0\|'[^$])?(-)?(\d+)?(?:\.(\d+))?([b-gijostTuvxX])/,key:/^([a-z_][a-z_\d])/i,key_access:/^\.([a-z_][a-z_\d]*)/i,index_access:/^\[(\d+)\]/,sign:/^[+-]/};function a(t){return function(t,e){var r,n,o,s,l,u,p,c,f,d=1,h=t.length,g="";for(n=0;n<h;n++)if("string"==typeof t[n])g+=t[n];else if("object"==typeof t[n]){if((s=t[n]).keys)for(r=e[d],o=0;o<s.keys.length;o++){if(null==r)throw new Error(a('[sprintf] Cannot access property "%s" of undefined value "%s"',s.keys[o],s.keys[o-1]));r=r[s.keys[o]]}else r=s.param_no?e[s.param_no]:e[d++];if(i.not_type.test(s.type)&&i.not_primitive.test(s.type)&&r instanceof Function&&(r=r()),i.numeric_arg.test(s.type)&&"number"!=typeof r&&

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9357)
Category:	downloaded
Size (bytes):	9375
Entropy (8bit):	5.399984359772224
Encrypted:	false
SSDEEP:	192:KKirvjKPsO/kAvi8uErTNi7OasUrxq0G/2X8EpW7QYovE3aCn9h:KtesO/kAOErTNiSasUNqpo8EpW7QYosp
MD5:	20F13F992FD02EAD68FB17893467A8B5
SHA1:	8B37D46D93EB907CF0F8F95C3220EDA45387389E
SHA-256:	CB225CBE89436BB47D3B4486CD9CEE63DB751CDAF60409F496253CA8BE549DAE
SHA-512:	CBCBD38DC2176F280C94D561FABB45F68FDE3D0417C9D60100AD9C8360828501BE5615FDC3ACDBD3D3722C3A6327CA8B4E21590963850AE1F29C375DABAB9E62
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-content/plugins/salient-core/js/third-party/touchswipe.min.js?ver=1.0
Preview:	/* Touch swipe */.(function(d){var m="left",l="right",c="up",s="down",b="in",t="out",j="none",o="auto",i="swipe",p="pinch",u="tap",x="horizontal",q="vertical",g="all",e="start",h="move",f="end",n="cancel",a="ontouchstart" in window,v="TouchSwipe";var k={fingers:1,threshold:75,cancelThreshold:25,pinchThreshold:20,maxTimeThreshold:null,fingerReleaseThreshold:250,swipe:null,swipeLeft:null,swipeRight:null,swipeUp:null,swipeDown:null,swipeStatus:null,pinchIn:null,pinchOut:null,pinchStatus:null,click:null,tap:null,triggerOnTouchEnd:true,triggerOnTouchLeave:false,allowPageScroll:"auto",fallbackToMouseEvents:true,excludedElements:"button, input, select, textarea, a, .noSwipe"};d.fn.swipe=function(A){var z=d(this),y=z.data(v);if(y&&typeof A==="string"){if(y[A]){return y[A].apply(this,Array.prototype.slice.call(arguments,1))}else{d.error("Method "+A+" does not exist on jQuery.swipe")}}else{if(!y&&(typeof A==="object"\|\|!A)){return r.apply(this,arguments)}}return z};d.fn.swipe.defaults=k;d.fn.swip

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1603
Entropy (8bit):	5.2727801090429285
Encrypted:	false
SSDEEP:	24:hY6svD+6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z8x/S8f:3qD+2+pUAew85zsaA
MD5:	78FD7C1A980B9162702E6F984A25B7A6
SHA1:	E832ABE897CDAA5E36131733AF619F174AD0F9C5
SHA-256:	1C5A3539A6FBE5420A519540FF6662EFEACB0BB1B9B8314C74064694A0D52C0B
SHA-512:	06B0C9A98D1F6B5BCF81D81574258B7D479579CD80FC51105C58B99263D802EFD64ECF6B5A9A3105C1046FB7EE3F776547E1593436AFC3E6C0820D149C0913BA
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 404 (Not Found)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4124), with no line terminators
Category:	downloaded
Size (bytes):	4124
Entropy (8bit):	4.665364156237669
Encrypted:	false
SSDEEP:	96:9lCTJFpgauXdNzg698TizNI4DyDmzHAW6RzKX35yG:SJ7gaC9VNTimHn
MD5:	D7DB0AC4F7FCCB30F70AD595708D4C81
SHA1:	A2671BCDB549F5041C2E739EA5F2D230802FD3A1
SHA-256:	13E4707C8A478039077986C3124AFC7A6A13B41C92A082614255123E65434613
SHA-512:	DCA40EF65312CE246B2383D1C42421BA8B327E791639DEC2632FC7A874282B23AB63D827E3B929299139D20C86521E798C5F54724E701743764F5A80DB2FD357
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-content/uploads/salient/menu-dynamic.css?ver=47034
Preview:	#header-outer .nectar-ext-menu-item .image-layer-outer,#header-outer .nectar-ext-menu-item .image-layer,#header-outer .nectar-ext-menu-item .color-overlay,#slide-out-widget-area .nectar-ext-menu-item .image-layer-outer,#slide-out-widget-area .nectar-ext-menu-item .color-overlay,#slide-out-widget-area .nectar-ext-menu-item .image-layer{position:absolute;top:0;left:0;width:100%;height:100%;overflow:hidden;}.nectar-ext-menu-item .inner-content{position:relative;z-index:10;width:100%;}.nectar-ext-menu-item .image-layer{background-size:cover;background-position:center;transition:opacity 0.25s ease 0.1s;}.nectar-ext-menu-item .image-layer video{object-fit:cover;width:100%;height:100%;}#header-outer nav .nectar-ext-menu-item .image-layer:not(.loaded){background-image:none!important;}#header-outer nav .nectar-ext-menu-item .image-layer{opacity:0;}#header-outer nav .nectar-ext-menu-item .image-layer.loaded{opacity:1;}.nectar-ext-menu-item span[class*="inherit-h"] + .menu-item-desc{margin-top:0.

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	557419
Entropy (8bit):	7.994256369909578
Encrypted:	true
SSDEEP:	12288:RAuzTd3RzyahN+3PRVSr+6d9h8FNIYvldp9vip3fm/klMiljecA2X9oULl4:R93tyahNSAKkhiKp31lMixA2XZl4
MD5:	B44FD8F325D20A272A9D14D47F74DE40
SHA1:	89867C2C4464097CD191A34C76ED8C09C7CA2CD5
SHA-256:	E39008CC8199C293BC14CE700904B279F298EA7F3896833CA207602F442102EB
SHA-512:	E62FD3F0153944AE2EBF05511A0643409E7101F95D3ECFB8627DCF977B96D7713DD40AF6642C98AA40FD5734B09936B5B4E9360262C3F0030DA7DF021E1B11D8
Malicious:	false
Reputation:	low
Preview:	:....1....wAD9uO9YAQw... ........0."j.............p.."...D..C.u"...u1.BW.....z..:^v".Hez9k.Vf..{#.3..lmD..t..... .j.>F.K...t&..gK.']..H./..\3#S.@..T.I..T[.RT.Y...f...$$...m.\....-.+bQ-.#h....=W..^3<..0. TN:..G..$.A...H\........p.......:px1Fk6O....]KD.l...w.....%,k....l.;....U.Xqe:.Z.......@g..i..f..">.t".-I.....A.k.&..T.&<_....!.x..?.".v.....V..wk.c..JB2../....%.$..?D..I..8...Gz^....I.....v..Rz)..4.2.H......-s......A4....m]ai.>+.`h:.... .PV...E.i.x.r..?......M......g~N... .="..P.$\(...h../T...l..\|.......J......~.v..8g.$..k...(1W.XHH.[...[l2...X.5.u0<U..".%..[..-.'.....U..~...K....."L..e.tGe..A..,.....$.!..foax.....i...Y.......j.y.+..B{......V..x.)...f.-.O..3...u...l..v... ....;..,L.E.../..8.o......+..",N.K.`.`c[.!.. + .. ..;..@..L0./(s..Je%.&1.?zny...7.XU>sZ.z.O....y.J......>....+v...,.8..]...C.........j.o..1..P..9....9....Vva...'..z.?..n.k...Pp.&F..t.Dm....n.%..y.m..v........Q..+....m..*D.............H.v..d..s2:......B.8.js.. ....t'7.;.

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 1600x828, components 3
Category:	dropped
Size (bytes):	280857
Entropy (8bit):	7.965184552252637
Encrypted:	false
SSDEEP:	6144:Q7n9EjIcKupP+vTqhW/0OZOwWfyFRnjVf+PXw5QPIZoB2YeJajjWx:QCjIc7p02HJfyvB+PX2YIO0YeJuy
MD5:	6C92DFD42224A5D11F117269F87EFA07
SHA1:	74DD7FDDC96AF9686737C9262108623D5323AB4C
SHA-256:	53274A5934BABC9C4828F03831BBCCA87CED9279B5C7096F505F38F05CB3E56D
SHA-512:	23D73E2812FDEFA9BA884D971116FD701011825DB64464E0A55594D00D95556ACDD1C4FCBC2832D89C0592B1EF592ECB79D571D325855FD5967D6D62893CB66A
Malicious:	false
Reputation:	low
Preview:	......Exif..II*...........................J...........R...(...........i.......Z.......H.......H.................@...........<..........C..............................................!........."$".$.......C.......................................................................<.@..".........................................U.......................!..1.A."Qa..q.2...#B...Rb...$3r.%4C....S..&Tc.5s..'Dd..7Uu..................................:.......................!1.A."Q.2aq........#.3B..R.C$br..............?..!3.....m..(...K......H"<.....)..".......iYT....#p.=.(~T..p1@.H..+..=.......j`..1...bc...=.{.0.8.a.H.....Z(...h.+....A~.....C.. .8.h.....QA..ds...&..L....3.UP..Br1.o=..}3HP.p.RD66d..0i...N..@..ed.3..nK....;.j.2S.j$.).ILn.H..Q)<.O1I%)..D,A.G.2.0A.j.76..)`s.[.x&=)..<...D\.A..h.e,..........'......z.I..>..;.D.&.d..Q..2G E..AY..Q.@.MQ.J.`.h&S."..1$.Z............d..c.8.=.;LD@'..u..8.t.VF$SA)...,..q..E&.x(.H?.<.sQ.I.D.....H.r_.v.G.G.........).......Y...v:....E:..\.

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 600x400, components 3
Category:	dropped
Size (bytes):	106419
Entropy (8bit):	7.967358313858868
Encrypted:	false
SSDEEP:	3072:trAWQRIM+Iv5iUT9BRQmYiiZpEuc99J55/DOm:JAbWZPURvnOpEucd55/im
MD5:	6CCA297AC4B3F11F585AB8A40F84C992
SHA1:	679B3AD5F8ADFA317E0769BDC497F6C2E1619561
SHA-256:	E6E4A66241BE50816E62F116E7E52FA78513D8B68F03E752A080437E1C493889
SHA-512:	FFACF1F4E1A03E62BBD8800DC40AA7899712A04DFD0AB98906A6EBF28D381D97BF02BE888E175460E77B6137EE668DB429EDE439650482C861947EB5C6E4F083
Malicious:	false
Reputation:	low
Preview:	......Exif..II...........................J...........R...(...........i.......Z.......H.......H.................X......................C..............................................!........."$".$.......C.........................................................................X.."........................................J.........................!.1."AQ..2aq#..B..R...$3b..Cr....%4.&S.s..Tc...................................;......................!..1A."Qq.a.......2..#B..3R.C.4br..............?.....T.6..l....G.j..j.6j.ej1.7..,n...............I$R?!..G..$..:'u....1...3&.xV ...pq.H..1A#....j..%y.....g.{...un...2.55Z..%S.ic.2.>...:.gyY....0@.>`N....iV...2D........<...me..t.<#.R..$.F'.% ..B... .G....Aje...).!.;#...#..F...1z...,.@.-.+...L.....Y...,.......;/=....]x.......z..km.\.Y..U.......a..N...5CH..GD....pH.$.....O....Jd%...Va...1..l...<l .<L? m...mQ..".....3....0\|..8.%Qd...<.s....~...VX.}L..1..,=.w.h?.....tc.^8.i....c.4W...[.e."...R.A,....G;p.'...\ ...

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	87553
Entropy (8bit):	5.262620498676155
Encrypted:	false
SSDEEP:	1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO
MD5:	826EB77E86B02AB7724FE3D0141FF87C
SHA1:	79CD3587D565AFE290076A8D36C31C305A573D18
SHA-256:	CB6F2D32C49D1C2B25E9FFC9AAAFA3F83075346C01BCD4AE6EB187392A4292CF
SHA-512:	FC79FDB76763025DC39FAC045A215FF155EF2F492A0E9640079D6F089FA6218AF2B3AB7C6EAF636827DEE9294E6939A95AB24554E870C976679C25567AD6374C
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	89
Entropy (8bit):	4.3201744632306305
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM2m2/uDlhlk8Slnl6tH1p:6v/lhPfZM2B/6Ti8Wnl6tVp
MD5:	9595C1F394CC081BF8ADCB178E58961A
SHA1:	A6BFCB6DD7873CA3056858AC3A4A5F84D35B92DE
SHA-256:	6F5AB9F4FAE78BAEFF20F1ADA7B617A16B8D9FD95AD56FE2D2A96C2AFBEEABF3
SHA-512:	8671691007A85B19FD093783A89E183E87832647A4DB80155A4DC5D0CE665B6FF48781819F701ADD362C292037F548AAE2E39C79F895CC21AD764E4F2B4AB3DE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................pHYs.................IDAT..c`.......bU2.....IEND.B`.

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (9462)
Category:	downloaded
Size (bytes):	63830
Entropy (8bit):	5.292483339515509
Encrypted:	false
SSDEEP:	1536:Oapt3FxlwOXe14lL4n4a/bS4aa514aXMH4faqtxjDc1JHRU65LbJ/tlGZ3iTJyk3:h/3NwOO1iLUH/bSHa51HXMHsasxjDc1B
MD5:	1A30B69CB36675C527E3D59A795662E3
SHA1:	3DEE211661FCB1B6E9D5B6AD385B22959CCA825E
SHA-256:	2D172C7129D9F7C9B5137243F228012C86B077A92606F10159570936B87D4922
SHA-512:	B09358A313092C0D23014AD35B434BBA53232CD39A782CA8C1D7B5760C4DC7007F6AA2318DE7BF055C259AE31FF970F73138A5DBB9A00DF4F6091E4A01359612
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/about/
Preview:	<!doctype html>.<html lang="en-US" class="no-js">.<head>..<meta charset="UTF-8">..<meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=0" /><title>About – Nice India Travel</title>.<meta name='robots' content='max-image-preview:large' />.<link rel='dns-prefetch' href='//fonts.googleapis.com' />.<link rel="alternate" type="application/rss+xml" title="Nice India Travel » Feed" href="https://niceindiatravel.com/feed/" />.<link rel="alternate" type="application/rss+xml" title="Nice India Travel » Comments Feed" href="https://niceindiatravel.com/comments/feed/" />.<script type="text/javascript">./* <![CDATA[ /.window._wpemojiSettings = {"baseUrl":"https:\/\/s.w.org\/images\/core\/emoji\/15.0.3\/72x72\/","ext":".png","svgUrl":"https:\/\/s.w.org\/images\/core\/emoji\/15.0.3\/svg\/","svgExt":".svg","source":{"concatemoji":"https:\/\/niceindiatravel.com\/wp-includes\/js\/wp-emoji-release.min.js?ver=6.5.2"}};./! This file is auto-

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	1163
Entropy (8bit):	3.8650296949916862
Encrypted:	false
SSDEEP:	12:5Qqf9S9GEXSkU3eCrUkk+7FSbqaj+QItEr95I1eiHiAOTE/8JItg0+ktiZ1qrGoZ:5QqFSUdoqaj+0I17hNkJ1V8ijtN74
MD5:	1F940552A1ACAB0758B5F2A879C1C0F3
SHA1:	3EA27FAA12ADA13BE4E2BE3B9AFC5CF5E7F95205
SHA-256:	F440192B21E15B6999973576344A9E404C1153B4F2FB1B70C6663E8CFB770977
SHA-512:	FDB214051621C785136E5E98AC0BEA404E444089B2E031F724B0C9C165E2266642BFAA19D6072B9FD7D9417BC247FFC07BBA9B266BA72D60374BD837A8B2AFEF
Malicious:	false
Reputation:	low
Preview:	:.........wAD9uO9YAQw... ......0.j...........p..........ftypdash....iso6av01mp41....moov...lmvhd......5...5...2.....................................................@..................................(mvex... trex............................trak...\tkhd......5...5.............................................................@...............mdia... mdhd......5...5...2.....U......Ghdlr........vide............ISO Media file produced by Google Inc.....1minf...$dinf....dref............url ........stbl....stsd............av01.............................H...H..........AOM Coding............................av1C.........-L............colrnclx...........stts............stsc............stco............stsz................stss............vmhd................sidx..........2....................................................l..>.......(...........j0..,........V..............<........z...........k..0.......fh..............P...........0.......W........................4..........W...J...........\.

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	29
Entropy (8bit):	4.142295219190901
Encrypted:	false
SSDEEP:	3:lZOwFQvn:lQw6n
MD5:	1FA71744DB23D0F8DF9CCE6719DEFCB7
SHA1:	E4BE9B7136697942A036F97CF26EBAF703AD2067
SHA-256:	EED0DC1FDB5D97ED188AE16FD5E1024A5BB744AF47340346BE2146300A6C54B9
SHA-512:	17FA262901B608368EB4B70910DA67E1F11B9CFB2C9DC81844F55BEE1DB3EC11F704D81AB20F2DDA973378F9C0DF56EAAD8111F34B92E4161A4D194BA902F82F
Malicious:	false
Reputation:	low
URL:	https://static.doubleclick.net/instream/ad_status.js
Preview:	window.google_ad_status = 1;.

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	142282
Entropy (8bit):	4.974007021744505
Encrypted:	false
SSDEEP:	1536:zLlDyhEXDXf/rehfNlRpXZBpVt7mlaseqtml/rqMidsC1BoU2eAgvbLCXw:gr3n7mlaseqtml/rqVdsCH2eAg/v
MD5:	1697AFFA800F93DF8368DC4216C2ADB2
SHA1:	6DB8C363C9AB080AC51C1FBF6465650090F09D62
SHA-256:	BE0EB927E17CB638B97AEA2C4EE78B143B2006638AD68C51D7F449C9A302D24B
SHA-512:	993250EE1F8F1B7192AB6A9F3ED2A8B1873980D94DDABC71163F96FFFBC017725E6D5743537375681FC25A6C415351DA9BD750575E864B7455F5ED0632EA1FE0
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-content/themes/salient/css/salient-dynamic-styles.css?ver=34291
Preview:	.nectar-color-accent-color,body a,label span,body [class^="icon-"].icon-default-style,.blog-recent[data-style*="classic_enhanced"] .post-meta a:hover i,.masonry.classic_enhanced .post .post-meta a:hover i,.comment-list .comment-meta a:hover,.comment-list .comment-meta a:focus,.comment-author a:hover,.comment-author a:focus,.post .post-header h2 a,.post .post-header a:hover,.post .post-header a:focus,#single-below-header a:hover,#single-below-header a:focus,.comment-list .pingback .comment-body > a:hover,[data-style="list_featured_first_row"] .meta-category a,[data-style="list_featured_first_row"] .meta-category a,.nectar-fancy-box[data-style="color_box_hover"][data-color="accent-color"] .icon-default-style,div[data-style="minimal"] .toggle:hover > .toggle-title a,div[data-style="minimal"] .toggle.open > .toggle-title a,#footer-outer #copyright li a i:hover,.ascend .comment-list .reply a,body.material .widget:not(.nectar_popular_posts_widget):not(.recent_posts_extra_widget) li a:hover,b

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Category:	downloaded
Size (bytes):	48236
Entropy (8bit):	7.994912604882335
Encrypted:	true
SSDEEP:	768:uj6JxavgLx5rjTH3CdZ3y11o4uMb2IVEhiB6z6GAAHJApICtBgso6HaOjTXHRWK:ujoa4LxZPCdm3B2IVEhiB62apApISxos
MD5:	015C126A3520C9A8F6A27979D0266E96
SHA1:	2ACF956561D44434A6D84204670CF849D3215D5F
SHA-256:	3C4D6A1421C7DDB7E404521FE8C4CD5BE5AF446D7689CD880BE26612EAAD3CFA
SHA-512:	02A20F2788BB1C3B2C7D3142C664CDEC306B6BA5366E57E33C008EDB3EB78638B98DC03CDF932A9DC440DED7827956F99117E7A3A4D55ACADD29B006032D9C5C
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
Preview:	wOF2.......l......D...............................O..B..h?HVAR.x.`?STAT.$'...0+...\|.../V........+..2.0..6.6.$..`. ..~......[B4q.....t..P.M_.z...1..R.S...u.#..R....fR.1.N.v.N.P...;.2........!Z......Qs...5f.G.K.an2&....2.........C.H.t..N!.....nh.<(.vN.....j.._.L.P.t..Ai.%.............._I.i,..o,C.].H.X9.....a.=N....k.....n.L..k.f.u..{...:.}^\[..~5...Z`...........`!...%4..,...K0..&.a/....P....S....m.Z......u...D.j.F...f.0`I.`.`.h#..)(FQ.F!o$........S.).MV8%Rh...r...x...T]$.=......Y...!.3.&U..."....Q....{.l/0..d..4iJ/..}...3....i[Z..NG.WD...>.[U..Q.h..@m.=..S...1C2...d...<..v.?.q.f..n...OUz.....&Z......Z."..N.....n...9.B..C..W....}...W..6Zs.i.+Z........jB.n..x.8M.....q..@I....-.%..,C,..K..#.2...4)/.v_..x.<....t.....%[.4?.=j.V..jj''..W.u..q....I.L.=......E...\.M.7{.>......W........C.`...,9$......\..o........y...4A..m.P.,X..=?.:................wF`..+.P..........M!.4.......l.>M..t.ff5r..^..Z.g...!fA,hIIQ...e.R>B.AH.VuX..>..\.=.ky...1>C....>C.c.;...6D.

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52052), with no line terminators
Category:	downloaded
Size (bytes):	52052
Entropy (8bit):	4.862211524300556
Encrypted:	false
SSDEEP:	384:ZnR+elaVtOiR4A089lUTSICPuByE36v9HbuErGgVZwzHokiKuJw0pR:WHEIkiKue0pR
MD5:	2FCE555AF65A8098C5889FC6D17A80D5
SHA1:	6D9596FC4BBF19EE552EA8C311A782EEA5E76826
SHA-256:	B6543A23B52F6AE7F172B6E9B860F05FCC744CE5C7DF6A20DF94B733CFB52D48
SHA-512:	F87F3C3D240FE2AFB12C067DF2102EEDB13493AA2A5EBC7451648438ED552EC6167257C5629BF93C601912E42EC8ABCF632D32E0D610E0B794C811C825D8761B
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-content/themes/salient/css/build/ascend.css?ver=16.1.3
Preview:	body.ascend #header-outer[data-full-width=false] #top nav>.buttons{margin-left:15px}body.ascend .slide-out-hover-icon-effect.small .lines-button{top:10px}body.ascend:not(.mobile) .slide-out-hover-icon-effect:not(.small) .lines-button{top:-1px}body.ascend #header-outer[data-has-menu=true] .lines-button{top:10px}body.ascend #header-outer .cart-contents .cart-wrap span{width:17px;line-height:17px;font-size:10px;font-family:'Open Sans',sans-serif;font-weight:600}.ascend #header-outer[data-full-width=false] #top nav ul #nectar-user-account>div,.ascend #header-outer[data-full-width=false] #top nav ul #search-btn>div,.ascend #header-outer[data-full-width=false] #top nav ul .nectar-woo-cart>div,.ascend #header-outer[data-full-width=false] #top nav ul .slide-out-widget-area-toggle>div{padding-left:19px}#page-header-wrap,.ascend .container-wrap,.ascend .project-title,.ascend .vc_text_separator div,.carousel-wrap .left-border,.carousel-wrap .right-border,.carousel-wrap[data-full-width=true] .caro

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 1600x404, components 3
Category:	dropped
Size (bytes):	74579
Entropy (8bit):	7.954951830968148
Encrypted:	false
SSDEEP:	1536:mNiBEATtoC9165CLw36EDz+777777777777777nvlUBgM/glUB1MhD:Ho216ELW6izcvlUyM4CBA
MD5:	BBBBAC286C6609E3402544158AE4CDAA
SHA1:	F784D19A880392757CB0B8977459CD53176A08A7
SHA-256:	7FA55810C5C081727739F130A7CF5D6F32D1A2064F4FD2654DC07676BE3242F0
SHA-512:	FD45A9A612CC1DC39B005B24D2DE9DDE3870EF9E3A1C99A9696834CB79D962D69EA705C0F7F1D4B9DFECBFEBBD412432C7C02B541400B530F98296301474CD42
Malicious:	false
Reputation:	low
Preview:	......Exif..II*...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100....................@.......................http://ns.adobe.com/xap/1.0/.<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Go XMP SDK 1.0"><rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"></rdf:RDF></x:xmpmeta>.<?xpacket end="w"?>...C..............................................!........."$".$.......C.........................................................................@..".........................................c...........................!1...AQaq"2V....7BUrtu...........#3456Rbs.......$S.%8C...&DTcEFv...de..................................D.........................!1AQ...Saq..."24...3R..B.#$5r..b......C.............?..h..""...." ...""...9.h%...d....Ejq..ED.xn...U0...@y.7.g.....8t.&.o;n......K;s...TH3..gi]..Q.Y.x...Iw..p3...M....r.....z.gi...1.u....^...[#)....

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	123686
Entropy (8bit):	7.992376447652466
Encrypted:	true
SSDEEP:	3072:CmyqFBSQc4qBZBtaCqJOc+pYhpp1aBMRDbF5u27E4kKaMLU:ryQSQRGZBcEc+Yp1aBqHXOKJLU
MD5:	30342F44487400438C76F0CB37473A83
SHA1:	60B94B76558F7E2DBCE7E64C7C08B2700D11EBA2
SHA-256:	15E3C45C963164C01059A954755DDA8FC9FC44BC6E85FDF0205A8CEF8B036653
SHA-512:	A9B2E387B55C66CE953BB594DAE7AE1A2E29C6AEAEEFC3EE3E801152D46331D8CB2E764D83E288CC9280193989263D65E559C84A1C34AE47A465C7B7A34A00AD
Malicious:	false
Reputation:	low
Preview:	:....1....wAD9uO9YAQw... ........0...j.............p.........C.u"...'..A.......89zg.....5.-..X.~Y.....I.LC.v.]...E....Qc..QT...i..6.....>.{..E....`]....q...j._...z.p~.C.w.`...c..A..>i...!.@r.=ool.i1p..1...?..JC.X.E0H.;.0:....> {.j...8...].H)...N...W...o...^6v.<.......E..6l..$4\|6.?..^.;...Lm...Q~.....L#...%6o..8........"+.......-..7i{.....9q1v......uZ[.5.{.\.. ......V...&..($..A.ad....P...!N[1.....?\|.......\|#....(........$..A#.......:TMd/M........-.....e..B@.V...rq...cb...6....P&..Y..J..bR5ls...JN....\..G.`Y..`p.-U=....:...\|Xt.'..}..D.....sB....n`....Zf..f..7\|.U.E<".._..(O....Ng.j...............%$...B\|}TQ.[Fn...;..By..*I..22B..z...!.L8q...F..}.!....../_Lx...u.Q...V.........yP.v_T..y...ks...A+..(...GD._g.....@k.YJs...E$.......S.MM.q.........O).....>...........CW.k.!.f.7@~Ppg...z....F..Lk...>..j.".....p2.H.6Ri..Ht^..z.0..*.^8........MQ....B..W......"..e..rd;.G #.J........1..Z...(f.V.@E.......uX.......~i.....^.^..............

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23134), with no line terminators
Category:	downloaded
Size (bytes):	23134
Entropy (8bit):	4.935780644053068
Encrypted:	false
SSDEEP:	192:x5aS2lGRGqabW+pRJU4rXN4zbd5lslrkj9Q+b05IZraCjy+kRbbzWl/Zujdbb6B5:WZW+pRJI67Ssa
MD5:	07E3E5BEBFD51391FDCE8F22E2227F60
SHA1:	E68FFE20DE185AD1B4BF46C2D8BB958170E34545
SHA-256:	0EF88A12BB81AC87AF9F1264DB481FF55B3D81511C4A6B51F0C331B64A69A71B
SHA-512:	BAB7B9859691AC69163F356B8B6851272BD2C1F4CA0B95D344213A539540F25EBF30F58D8D8EB69C5C00E558325CBB2650C5CAD7E14DCDCB6715CFF70429B0BD
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-content/themes/salient/css/build/off-canvas/core.css?ver=16.1.3
Preview:	@media only screen and (min-width:691px){#slide-out-widget-area .secondary-header-text{display:none}}@media only screen and (max-width:999px) and (min-width:691px){body.original #slide-out-widget-area .inner .off-canvas-menu-container.mobile-only .menu.secondary-header-items{display:none}}#slide-out-widget-area.fullscreen-split .off-canvas-menu-container .nectar-menu-item-with-icon span:after,#slide-out-widget-area.fullscreen-split .off-canvas-menu-container li a:after,.material #slide-out-widget-area[class=slide-out-from-right] .off-canvas-menu-container .nectar-menu-item-with-icon span:after,.material #slide-out-widget-area[class=slide-out-from-right] .off-canvas-menu-container li a:after{-webkit-transition:-webkit-transform .3s ease-out,border-color .3s ease-out;transition:transform .3s ease-out,border-color .3s ease-out;position:absolute;display:block;bottom:-6px;left:0;width:100%;-webkit-transform:scaleX(0);transform:scaleX(0);border-top:2px solid #000;content:'';padding-bottom:

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1191
Entropy (8bit):	4.978652788120321
Encrypted:	false
SSDEEP:	24:tol0AMLRhH4ecrfHg2vhfLMwxXKpMTSR/te9mujedJ6lbM:mlnMll4ecTgY1VapMGBuaylw
MD5:	1CC2B4D52614D6AC9CBD713DB95602F0
SHA1:	30D8FB056B5D7A939321E148C3E7947358F5EFDA
SHA-256:	612F766167943FC5BBC5E1E43B9A6D62A8A4DFE6DEEB7464545DF559A14F7C99
SHA-512:	420392D5797CC229DC299026FC8F77256D4E03A8C46D9C33EE74CC010C68B1B9329121C938EDDC216ECE3FDFE25F61A9E8087105E9CF9B15579677633AA9AFB1
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-content/themes/salient/nectar/assets/functions/ajax-search/wpss-search-suggest.js
Preview:	/*. Salient search autocomplete. . @package Salient. * @author ThemeNectar. /. / global jQuery */. .jQuery(document).ready(function ($) {...."use strict";....if( $('#search-outer.nectar').length > 0 ) {......var acs_action = 'myprefix_autocompletesearch';... ...$("body").on('focus','#s',function() {........if( !$(this).hasClass('ui-autocomplete-input') ) {..........$(this).autocomplete({ ......delay: 50,......position: {of: "#search-outer #search .container" },......appendTo: $("#search-box"), ......source: function(req, response){ .......$.getJSON(MyAcSearch.url+'?callback=?&action='+acs_action, req, response); ......}, ......select: function(event, ui) { . if( ui.item.target == '_blank' ) {. window.open(ui.item.link); . } else {. window.location.href = ui.item.link; . }...........}, ......minLength: 2, .....}).data( "ui-autocomplete" )._renderItem = function( ul, item ) {......return $( "<li>" ).......append(

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (9462)
Category:	downloaded
Size (bytes):	93622
Entropy (8bit):	5.346446728077325
Encrypted:	false
SSDEEP:	1536:Yap4J93f3dxluOXC64EU4fy4fu4PeD4ff4fM4fN464fQ4f5Xqtx6U6Dc1JHRU659:Xc3VuOS6XUsysuxsfsMsNbsQsJsxADcP
MD5:	865BFE5BB98D5497CCC6E3DAE759E047
SHA1:	C1DC914A78475FC8817661830F99D71FCB9F723F
SHA-256:	75519ECDB70776290E1C7E8D701751E9FFB077E6500285D6CF615F2A5DBD785B
SHA-512:	E9CCE53AA938897A8C2C594E340C743D44ABD5D7D6E000302331B611ABD76EA851FB744C4E3A837C6D59472E491710BA46BF1FDB115E6A6A888FB4B72F21B62B
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/
Preview:	<!doctype html>.<html lang="en-US" class="no-js">.<head>..<meta charset="UTF-8">..<meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=0" /><title>Nice India Travel – India \| Nepal \| Sri Lanka \| Bhutan \| Maldives</title>.<meta name='robots' content='max-image-preview:large' />.<link rel='dns-prefetch' href='//fonts.googleapis.com' />.<link rel="alternate" type="application/rss+xml" title="Nice India Travel » Feed" href="https://niceindiatravel.com/feed/" />.<link rel="alternate" type="application/rss+xml" title="Nice India Travel » Comments Feed" href="https://niceindiatravel.com/comments/feed/" />.<script type="text/javascript">./* <![CDATA[ */.window._wpemojiSettings = {"baseUrl":"https:\/\/s.w.org\/images\/core\/emoji\/15.0.3\/72x72\/","ext":".png","svgUrl":"https:\/\/s.w.org\/images\/core\/emoji\/15.0.3\/svg\/","svgExt":".svg","source":{"concatemoji":"https:\/\/niceindiatravel.com\/wp-includes\/js\/wp-emoji-release.min

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 48208, version 1.0
Category:	downloaded
Size (bytes):	48208
Entropy (8bit):	7.9958232364340525
Encrypted:	true
SSDEEP:	768:4niiDrjlhOaQ/MCUsBD7rYJPvL8HLaJagHkij8pKoA8caCAW61V8AMdE:dArpQ/MCUsBctoHOMokiAk19ur
MD5:	C49B7C3643F781D71645C5A40A78B5BF
SHA1:	E71138026B38AFC443FB60DA5FFC2244C4F5EB11
SHA-256:	8CBC049DDBD7CA67068451CE754401833499959C4C6ED7B98F664D42E0597808
SHA-512:	B71533F82F759AD7BEC575C8FA3F4D76E78362718E56934D5D5629A906AB66BCD402E177A80D0072E816B1290EA7C091E919CF3EB8444BFEBA116437EE2EB22E
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/raleway/v29/1Ptug8zYS_SKggPNyC0ITw.woff2
Preview:	wOF2.......P......................................o...l..P?HVAR...`?STAT.8'2..4....../~.....$..U..,.0..<.6.$..T. ..J.. ...[;mq...v..>.7.......e..f..P.^...]....a.. ..4...._.TD...i......p.T!..).).......}.Zm...Zq8.....]$C;9[...0...H..).....)....F.eP..G.t^..}V.Y.hO1..T&m..3.GLP&}.R..E.pC7.......Q..c.D.'....:d..$7D2D2....zu3.W. ..z......\...d.....o.[..,.....7[2&76.P.^..X.M.b.;..Atu..N.M.....b...#..K. AE.v.....P%..u.....u.:..$@... ..z5S.x9.UbN.f.:..[.$..BK.!......@h...... b..0 .....ky.k^....".C..8.......a.....3r..HBB..P..L.../.Frfx>.....!..;+e(.z...r...9\|.%..n1....Yv.\:..e..%v].....r.%v.#.-././.]"..,38$H.1.(.1..{d.dE..I.S.8.Jy.2.....p....66.....E.X".....}W...!.gw..&+2...2.Yf.p.w......8.9...IL..7.$.W..\D....@.:m.JjN...4.c=@.kUu2..0{.d...~x..=c......~n.Y..-.R!FM!.....1V`@.....K.eH...C...U.u...'{../=8Yd.M&.g.}...GI...}b.0U........&E.T4)S.....dY@...j... ..3..'.d.{._.*.Z.!:......,......\|.n.......N..a..=..A#.(.@ ..#......U.".g.;.WJ.....LP.. C...!

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	1163
Entropy (8bit):	3.8650296949916862
Encrypted:	false
SSDEEP:	12:5Qqf9S9GEXSkU3eCrUkk+7FSbqaj+QItEr95I1eiHiAOTE/8JItg0+ktiZ1qrGoZ:5QqFSUdoqaj+0I17hNkJ1V8ijtN74
MD5:	1F940552A1ACAB0758B5F2A879C1C0F3
SHA1:	3EA27FAA12ADA13BE4E2BE3B9AFC5CF5E7F95205
SHA-256:	F440192B21E15B6999973576344A9E404C1153B4F2FB1B70C6663E8CFB770977
SHA-512:	FDB214051621C785136E5E98AC0BEA404E444089B2E031F724B0C9C165E2266642BFAA19D6072B9FD7D9417BC247FFC07BBA9B266BA72D60374BD837A8B2AFEF
Malicious:	false
Reputation:	low
Preview:	:.........wAD9uO9YAQw... ......0.j...........p..........ftypdash....iso6av01mp41....moov...lmvhd......5...5...2.....................................................@..................................(mvex... trex............................trak...\tkhd......5...5.............................................................@...............mdia... mdhd......5...5...2.....U......Ghdlr........vide............ISO Media file produced by Google Inc.....1minf...$dinf....dref............url ........stbl....stsd............av01.............................H...H..........AOM Coding............................av1C.........-L............colrnclx...........stts............stsc............stco............stsz................stss............vmhd................sidx..........2....................................................l..>.......(...........j0..,........V..............<........z...........k..0.......fh..............P...........0.......W........................4..........W...J...........\.

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	234188
Entropy (8bit):	7.9988919865846935
Encrypted:	true
SSDEEP:	6144:+o6/DoMqay81U+zUckOkxCay4vBpj00OzwCSc4:P6/DvUcHkoivBpjHCP4
MD5:	20ABE34CF60C5D651E541032C1396F8E
SHA1:	D91DBB9A8EB4DAE9CDAA15AB1906652E332BFA9C
SHA-256:	057DCEB8616CEE832476DF552B25E1304DEFD5D3C244E09029BEFFB30B19C281
SHA-512:	CA8C1BA9C066FC5F47252892CAF470023B6B13B4987A8776F808785890CCCEE3ACC99408FE550115728D28CD10A83774971D16710FC5D1B8C317F3E86EAE4DFE
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-content/uploads/2018/10/4-5.jpg
Preview:	RIFF...WEBPVP8X........?..;..VP8 ........@.<.>Q$.E#.#...J.p..ce...K.S............T..j.?j..R.cY....hT.. ......L._......`..]..X.......c.)..Z=..\.?.......!...}.........._.g...?...?.z..+....o.?..._..x.........#...g.............. .....].....#.....Ox/.....?..p...........}....^..{._........S...L......................c.?........?........].}......._..y...~~......\|g...?.........._......c...?................._.....7./...?\|.........O......................\|........W........m...?.?.o............o......0....!..6./nay ..jdo.2w..9..............H...).24..if$..Y....f.......dWb.vt._D.LZ...}p...}..\|...-..n.)..09?.x...H....;.C..o...=...@(..k...?...8.Dz...4V...)XI.9'...Z..6......{...P7.6.<P.qdb:...:.........h...`.w...y..PV.......f..].......F]K.J2.s%.-..fj..T78;..GX..1.B8*2.m....:E..f_...JH.}.D...%...Y.S.2.Tvg~Sa...B].8..........e..e../...G..N...t....P1..=7.b..Vj....~!,..3..B....q....[(..Od..~..9...fC.Z..GO..\|.....\m..../...........q...i...~$..../1.(/n.^...O.K;..P...E..;..F.u@

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	34352
Entropy (8bit):	7.993054420366631
Encrypted:	true
SSDEEP:	768:Z/gOYBHBqqGAPrjuLsh1OksYunxkA8yUT1gwpPhEAu:1gTBnGAPrjNsYuxkTg66Au
MD5:	55B1C2E7B3E972A35803B0744652E118
SHA1:	D8B8029E64F7D8A7B3C6C4792C184715FFFAB1C5
SHA-256:	603F2CE2551442E4201B23CD7BA337745FCC20EF02E79A45914AEF195D2EAADA
SHA-512:	2B9F89B4B82768AF8065AADB4EB0CC3391D16C9382ADA4EE84DC2CDCEA4087BF83A19173296AA755038CC8A6A6ABFCB92C94E7F4517C0A088EA258FA3C7F1AA8
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-content/uploads/2018/10/ganga.jpg
Preview:	RIFF(...WEBPVP8X........W.....VP8 .........X...>Q&.E..!$&..@...M,..s..`~.\|%.9.].<........6_!.L.%..uv..F.P...7.#......../^..tW.o..?........W.........{....+.?./.G...o.s.......R.S.....W.....>..._..x.x..\|..v.....-.............S....<.......@..g.......s....w...'.N..Z...W.G..?..y...&............~U..~o..g.....c...........?......M.-...?...?q...E...W.7.......~W\|....g.............'...E..Ds...tQ;.....Y...T.....L..?.......-...W..p6..iH#..!.4.Us.%....;..4..6..l.aw.3...;T.>.F.\.-..T...k..Q.0.<....$...].rI9.#..SIw.Jn..b........;.G>..Q.z...ae.:d.*q.dG^.&.hO....p.nNv.jF7[..>R.=l.2.....N....x.o.[........5d.\|?A....W....Pc..4...Y....,.......$....ic.w%R...GH.%....$...?......0..3a.....z\..x.SM[.,e.<.Pq!.q....].q#[..6.h...84....c..Y.J'.W..\.j...2.....{.k...e.vd..$-.+.9.e....m........y7:....`GMoo..P.#Z..`.\....FG....../.0.........\...c....K......T. .igA..".FRS(o.UEs....bW.{Wqx.S......i;.{.....D..g.HU.b.#..?pX^0C..!=..9p..EWzhV\|.e.u.`.})...Y.e...._.5l.(..K

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17638)
Category:	downloaded
Size (bytes):	17741
Entropy (8bit):	5.294608590099363
Encrypted:	false
SSDEEP:	384:f7LTpKyzqrGGpLZo12xhMFoFlm5dwi7SeigzrLL:XTppX12j2LD7SeH
MD5:	572D66E85091711B6EE76609573A8364
SHA1:	332031949D78A49E8A18611556253660574E47DB
SHA-256:	5CBDA29EA5096AC9404C59C77493A2F467D0EB4A27F16C750B61FC0D888DD716
SHA-512:	CF8394AB0DFCA8D2E99F59626C037D06CA03C7A9DB3458A8E6503A0AE4E9F4D94AF376FCF61832095ABE37915D049A6D20DCEDC67D59DD268A48A512E543FAD1
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-content/themes/salient/js/build/third-party/anime.min.js?ver=4.5.1
Preview:	/. anime.js v3.2.1. * (c) 2020 Julian Garnier. * Released under the MIT license. * animejs.com. */..!function(n,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define(e):n.anime=e()}(this,function(){"use strict";var n={update:null,begin:null,loopBegin:null,changeBegin:null,change:null,changeComplete:null,loopComplete:null,complete:null,loop:1,direction:"normal",autoplay:!0,timelineOffset:0},e={duration:1e3,delay:0,endDelay:0,easing:"easeOutElastic(1, .5)",round:0},t=["translateX","translateY","translateZ","rotate","rotateX","rotateY","rotateZ","scale","scaleX","scaleY","scaleZ","skew","skewX","skewY","perspective","matrix","matrix3d"],r={CSS:{},springs:{}};function a(n,e,t){return Math.min(Math.max(n,e),t)}function o(n,e){return n.indexOf(e)>-1}function u(n,e){return n.apply(null,e)}var i={arr:function(n){return Array.isArray(n)},obj:function(n){return o(Object.prototype.toString.call(n),"Object")},pth:function(n){retu

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HTL:zL
MD5:	C78FC4C73991971736F95F00B7C09E4F
SHA1:	2BFE006346297E446B58308E3F37169A4BC29046
SHA-256:	C70E533105E5FE64092A52295354E975F8D6DDF470DA3F7AE4A6D4F3FC915283
SHA-512:	5F85D1EA2C4DB38DF3A6FC5414C03EDA186CF86A84F9D0E4C37053791060936B486A0493B54010319FCBA943ED4E95F58045C3EDD135952E69CED9EE87BD21F0
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xNDkSEAnO_geygEZjtxIFDbtXVmo=?alt=proto
Preview:	CgkKBw27V1ZqGgA=

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 1600x718, components 3
Category:	dropped
Size (bytes):	335024
Entropy (8bit):	7.973003839862488
Encrypted:	false
SSDEEP:	6144:Df76bOLClNH1QRC7xzfZfRkIPkoKx2u8dqJUe/X9aqcqp:Df76bOuH1gC7bfdPkoKx2u8ELPjcqp
MD5:	EAF2C2AD41910ED91617CA6442389C0A
SHA1:	004D5D0CAB717C4B49158CD97E0B04A664718B67
SHA-256:	6D8D7588B0EC7F1CBB775E0E2633ECC7CFD1DBFCE8E2A8D88C6AD8DAD900B253
SHA-512:	C8270535DB87BED14910703D6A18066D6D7F73C5040F7F87376B4347C95950EE809207F35E08F77A455404FB983FCFA733A248F2B6DC11703E5387017CCA867A
Malicious:	false
Reputation:	low
Preview:	......Exif..II*...........................J...........R...(...........i.......Z.......H.......H.................@......................yhttp://ns.adobe.com/xap/1.0/.<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Go XMP SDK 1.0"><rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"><rdf:Description xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" rdf:about="" xmpRights:Marked="False"></rdf:Description></rdf:RDF></x:xmpmeta>.<?xpacket end="w"?>...C..............................................!........."$".$.......C.........................................................................@..".........................................J..........................!1A..Qa."q.#2B..R.....3b.$Cr..S..%4..Dc..5..s'................................C......................!..1A.Qaq...".......2.#BR.br$3C.....4..%c.S............?.....~....x?6Js.(v.....O'=.jYQy.'..q9={.].....4!...(G.].zv.vG.....~.......28...]A.bhpA.....?. .......+....

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	176609
Entropy (8bit):	7.962544155528945
Encrypted:	false
SSDEEP:	3072:sQt2aPl+DCJOyfaPmYB9X8pliJalwWvYRDqEpWg8jjJlIPAgDU+subZ:90arliPmYB6pCA4NWgYjnqlDHF9
MD5:	806DC9467A0FBB07622B8B84468D7D71
SHA1:	7DA493FEC8FBF0A3D6F18F2F86B72CE9A12A7EC5
SHA-256:	E3013FE931412EA7838A34403A3D1658CAA1A92E610EA30EBC8B5F01BD9E1931
SHA-512:	0F31F7510CA7B2FCDA55EC1CA6008875A39B9C8DC93756AC51060FA159109F5DEA0FE5F2EFE90552357F583B5351BD10769681A91383B118EF2E44019F8DBD43
Malicious:	false
Reputation:	low
Preview:	:..../....wAD9uO9YAQw... ......0.j...........p...........ftypdash....iso6av01mp41....moov...lmvhd......3...3...2.....................................................@..................................(mvex... trex............................trak...\tkhd......3...3.............................................................@....V..........mdia... mdhd......3...3...2.....U......Ghdlr........vide............ISO Media file produced by Google Inc.....1minf...$dinf....dref............url ........stbl....stsd............av01.........................V...H...H..........AOM Coding............................av1C.........$..>.$........colrnclx...........stts............stsc............stco............stsz................stss............vmhd................sidx..........2.......................................d...........$g..>........K...........@..,.......3...........U...<........M..............0...................YD..P...........0.........................................PJ..J........?..

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	153691
Entropy (8bit):	7.992695359344546
Encrypted:	true
SSDEEP:	3072:1YTcg5IMVDu8cDCmyqFBSQc4qBZBtaCqJOc+pYhpp1aBMRDbF5u25:6lFIDryQSQRGZBcEc+Yp1aBqHX5
MD5:	C553551C3F0150E8048047A2DEBB60D7
SHA1:	3E615C590333F40309FDC0FF06E7F61435C23782
SHA-256:	89418AE0865FAFEA1063062FEE3C5A94535764F133FD29D5A50A27A8E9138230
SHA-512:	7029660580023BD58443635CCE73CF30D2D4FE80CD1E0F47D037F8EABB80F77FC92382FC8A924725A2CDC7250A93C6E6AEC6E028BA8E09235842ECFC8AD9C1B3
Malicious:	false
Reputation:	low
Preview:	:....1....wAD9uO9YAQw... ........0...j.............p........v +.a..j..I. .5].[....`.w.....2Vk.^.^..C..o..O.t..d..5....`...."..yzNJ....8ikG..{._-....O.d3$.....#..:C.VGR...F0.2._..Y..eq1.v.vyS.'......M..1&Z\9q..A....].....TFV5Y.......h.Mk%G.T0iV.'...X..m..J...v......vb8.3.(.D...J...d^.\..d.+NW....@.-...bu..J.#..5..I@..Wd.....y{i.a...\|.......p...j.K.D.9..:.k.3$..Ol..1.!..!.x.9...S...$..b.P.....1.Z4K.R...(~....F.G.=..4h.s.BA....tA.....9.......<#.......I.x.6BF....;q.x.....`.XUU....m.N....!...O/."4} R.$..D...i\ShE.M..&q....^Ar..N.;..C.7..1M6U.[o..C.Y.....1........c.?..{.:.R^.q..9...+.&..........".d.$.\..Q.V....5.c......i.%.}.H.q. z..dF.O..'%A.!..[..Ks'1.h......C....;U...0..~.s.4..u9..5....;4.......3\.sV..#.Z..../S.W..=.d.......OH. ._i&. C..J.m..4.M..&('"..u".......9.t....Y>[S.M.;.\|..I.ei\|Yn(D....M...u.{..3..\|.M......H..SN.....k.6..@.Z....{.'2..\A..&#o>.v.XP.%.%-W..,.........RE..E...W...#L.R.tN..[.,.....H....]L.YXT.C#G..~.R.fsU5.qW...p

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	115492
Entropy (8bit):	7.998190552852711
Encrypted:	true
SSDEEP:	3072:s+HvC1HXB26yP1KmC2+ZxYfW50d12zgLY6K9:s+Hvy3KP1Kb2ite8OC
MD5:	F00EC0D380408B49BD37428310C02A25
SHA1:	74359747CD6CB85AF24B1AB8394CF929C99C2520
SHA-256:	5CE9FB55002B1F11F094829E704EBFA4BA219E20F1FE1C69B61403D8721DDBF5
SHA-512:	36986EBE7085E174E31E808AE617443D30B590B133499DAC1349E1618316C8E6F4844FEA73A1BDF58B074C4A8C8295A81D7F64D771622FCC6B6854CCC903680D
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-content/uploads/2018/10/2-8.jpg
Preview:	RIFF....WEBPVP8X..............VP8 x...0........>Q..D#......8....h...`....S..._.e...+....6.. ?................Z.T.q...c...O]..=...~.{........3.g.7..............9...../.'.?.Ol......=......o..O..#.3.3....................................O..............W.....?)>A.".{.W.......?{................_.?.{.............%.............._.?z..}..F.....o......~..........?.\|..L.................a.....O...?.~....7...?.G.....?......................?...$nnX..y.....?C.1.......Vs.....{s....B..-f...3....$.'!.%........I...7m.0.R....{,.m=J.........WL.V.e....e.....=.....T...N......y.>u....J.8)Xy...l\.P..a..B...3..v..Z.....5.P.......NjG\.x3s.}."q.P..R.z.>.....!g_?(..4V@...\|+^H.......Cd.ib..(?....YP...].......j]_......6aJ.{..P.4.8.0N3...3~....2g..B.c.....>....6..MN0....e^^..v`....d..`..5hr.~a.....9.....Bj.<.......w.s ..............{.7.fc:...A...P>.<....p..T.!.......%....`....I.K._5....GT.a{Mwe..Sfy:/l.a]q..i..r..$..?.CI.......=..tU.T.E.(Q..ie..0......`m..z..U

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	65599
Entropy (8bit):	7.9915825226334505
Encrypted:	true
SSDEEP:	1536:7mswBROJRioXl4FKTA67HFRrW0USlZaLj:jwBki0V7av
MD5:	A3CBC456BB50646DD093957221B965C0
SHA1:	B11A5CB904F38EDB3667073D87DC6D31F1E6557F
SHA-256:	761B2A65AE5D3BE65594AD8C9B27A36A37979C9B23DEAE5AB8441CFE90BAB344
SHA-512:	45530B9C39A9948F8C8EB4559E4FD227A1B6EB5EE7A0684BE3246A8CB20775BEF36B3402FF3C8FD94B6DE8E99B18BA2C0028CD5E859094C7D6DBA1A2D3FA5FE8
Malicious:	false
Reputation:	low
Preview:	:....1....wAD9uO9YAQw... ........0...j.............p........3i.H.....^..R...G....L@.I..e......f..bfX.4.c.bHI.c?..dO...'\|./...M]^Z...O.'_W..$.V.]...T.-....t...#.Z.....CD...D....y.h........b...$....d.;.p@M_..)1..$.b.z...%.......KL......3..K...xb&........A,.....S..e....l.q.K..T/W.. ..>9..h..../.N.i.u@..)h..9\|;...3u...?N#.....7}.y.$.S...3..GC..-sM#..q.7.&..&..G'.......(.>.lAl....DL.l.t...~r.s......Z...<.lhXB.!q..m~.......z.q.......t..>..v>/.........-)...H.r..I..}..>.....(T..m.:.A)...{.^R...QQ0:.d....iX.8.H.U.{.y..............`...{.6x./\|.r..A....C.5...KG?...........[,$.<.f.v...jVZ....[#.....xGD.#H.........6XR.\|..8.~.....{.......Q..../...s....O..............H..=.k..{..[....D.3+..............F.....E.1.(..J.G.F%....D:.:..8....&T....6\|JLC~....ku..I/.U.%......-.bR.@...w.....G[>.o.....RZ.....0.J&..BP?F..?..,z.Y...e`.A'..........L? .-.j..~M... ..O......y...x...B.H.....b.suCR8..C...p.V.\|....c.M.".t..b....jm.;_.].(.Hl..f...S......_R.O.:....

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (422)
Category:	downloaded
Size (bytes):	457
Entropy (8bit):	5.062678748736029
Encrypted:	false
SSDEEP:	12:Uz77mxDChzQiwBmGam7vp9PSu7QqBYAQ7:Q778Ch3wBmGH7vKM7ux
MD5:	E4BC17CC45CA91AB0F09DEA134975C51
SHA1:	3C03312717FB495C051D02A3D27EC0D8ABC2557D
SHA-256:	5A43A22E48F94B7A45A9A9B1A107F197213B73307FDFA2E6B2DAADAB264F94D2
SHA-512:	F8E537A2168B94875BB7DDB9A20037C5BC79831C8B4E726F224F8D7C723C5C4B4512551697CF7BFB6CE4B5F8365DC1C027107FFE3435EA27C686F5AE96D921E7
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-includes/js/dist/dom-ready.min.js?ver=f77871ff7694fffea381
Preview:	/! This file is auto-generated /.(()=>{"use strict";var e={d:(t,d)=>{for(var o in d)e.o(d,o)&&!e.o(t,o)&&Object.defineProperty(t,o,{enumerable:!0,get:d[o]})},o:(e,t)=>Object.prototype.hasOwnProperty.call(e,t)},t={};function d(e){"undefined"!=typeof document&&("complete"!==document.readyState&&"interactive"!==document.readyState?document.addEventListener("DOMContentLoaded",e):e())}e.d(t,{default:()=>d}),(window.wp=window.wp\|\|{}).domReady=t.default})();

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 1600x1067, components 3
Category:	dropped
Size (bytes):	193476
Entropy (8bit):	7.976024942523635
Encrypted:	false
SSDEEP:	3072:M94dHbeGH8cEuYEUN8WeDVgUZvcsoBA8WFsz0IFxxIB9EMmgwXSyLjXnPWYDLFYD:deGH8MWje5hcsIAvuA+I01XSyLj/nYFv
MD5:	2372F371D82C5218B4958C254CC207E4
SHA1:	1DC639C959D4D3E7FA24537830167922D20F9D19
SHA-256:	1D7C9B5B5736370AB10E43751BD6136EB12CC72B345DD0AA296112EA25703DA7
SHA-512:	52528DD21917C7F54D71CA8BF3B0E9A49E73858EC237B7BF4006B2CC568F2ADA76B8DDCA46ED0848F55DBE019A1B95E0C497D05AA089CCD0282B3D482D3D5D7E
Malicious:	false
Reputation:	low
Preview:	......Exif..II...........................J...........R...(...........i.......Z.......H.......H.................@...........+..........$Photoshop 3.0.8BIM..........Z...%G...C..............................................!........."$".$.......C.......................................................................+.@..".........................................Q........................!.1AQ.."aq...2..#BR...3b...$r....%CS.4c...&5DT.6stUd..................................4........................!1A."Q2aq..#3B...R.......b............?...R).W.+..[..1A.....=..+t........N..@.#.9..!4(..#...@...R..@#.i..PB.. .'.GT ..B....... ....5....(....@.......h...X...MR......&....)A@.......UH...@!Il.H.. ..wB...0.....!.:B.(R.h.T.......j..B...Bj.B.@.B...I...9!4.O..@M...a.P.)..X.h. ...F....I.....B......!..M..........P.4!.&. .&....'H.!4 .R.@.....!A4"...B..sN..=.....M...N.J......\|&.a.!4.(uB..;..D'.B.i...5...0....B.....A.T...F...[.....!4 . &.I.&..T.......B.B.0.HP.............E!..&..R...$....t

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 1600x1067, components 3
Category:	dropped
Size (bytes):	389296
Entropy (8bit):	7.9675162020106995
Encrypted:	false
SSDEEP:	6144:HRJ7DEW2m1XtvuICbLO4XedUBuiYh+y42RQTU3ZP0dfCAyXqDB6fz4YCBfxUrmwV:Hzzd19v4nXasuiYdRKTU3ZmHYUdGrGbu
MD5:	9D1477470AFF3441BD872CD6A929C2D4
SHA1:	52A1378FF25104C32FFF0AA69F8B14DDD7672D1D
SHA-256:	694352559D914BC30B91115D3239C020D64038C9C82D6913E6E7CC7057BEDFF6
SHA-512:	82D2DF1A1F84B099A5FB568A4EC3D80075044F292F14EBA2EC4F62BA4025C32739D81B52A282601A7FEA69162174456635D997BE6C503AF6A70B2C3009FDF3C7
Malicious:	false
Reputation:	low
Preview:	......Exif..II...........................J...........R...(...........i.......Z.......H.......H.................@...........+..........$Photoshop 3.0.8BIM..........Z...%G...C..............................................!........."$".$.......C.......................................................................+.@.."........................................M.......................!..1AQ.."a.q..#2....B...R..$3b..r.CS..%4D.c.s5...d...................................E........................!1.A.Q."aq.....2....#.B.3R.....$br..C.%S4..............?..d.sT>.L.".Dm..N..wM....V<=.t.rA.:w..=]A.c.....G=......D....V......$.2..J........w..\....g&..$g.T.+.D..#.H.w5%.............9.......P. {f..]E0Bd.pj.;.[Dw.40p..F'.....@.@..U.r.>.AI.`b.......v.r...QJ...<.(..RG....(....qQ.`..%r..H..]u..F}..- .R.4A .....$.j...W...I...YR.....6.."s..h.Da9.3P.......G..._A.2'.P. #.\...#.J...^. ...A...=;.(..g...9.D...W.n....19.Q..MZ.J.A.....T.....TBs.........psE2d.Q.....h...L.\....RA$..T+

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1599
Entropy (8bit):	5.267838660635414
Encrypted:	false
SSDEEP:	24:hY6svD+6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z8xZS8f:3qD+2+pUAew85zssA
MD5:	5EDBA73F30F0D3A342CECCB3A34BFE45
SHA1:	3F39E4C8EF00408D327260F5328162AB3E5D3CAF
SHA-256:	F768529B209DB7EDF38AA0DA2A69C1C1DBE5A760D457FE74080D3AD76F14A0C2
SHA-512:	C302E3CCC2D9F2E12133ED07082A78260613F1B8C756D9EB2CF0A7AF63C425D4A8956B01EAE3FC3DFAB506DACF6416B0B53929D535CFA2AD81951183A6526FE7
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 404 (Not Found)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 68x68, components 3
Category:	dropped
Size (bytes):	6036
Entropy (8bit):	7.912843097963705
Encrypted:	false
SSDEEP:	96:/hmRpo9QuefLOFGKr0YxGf4d0FeT2V+8xoabzsNDw3clDWdgCtJfp8oKSVA:/cxfL1ZfG0Fec+ZN03oDWdFtJhdpVA
MD5:	7BD620851826BC84FB8ACD578B8D5976
SHA1:	D302C6F554BCAA60A708E699A95F1927258C532F
SHA-256:	8470516CA0F5BEBAAE1E80A2CFB613C7B8900F721D271F91DC90E05B4ACC8A07
SHA-512:	667404E2CE7AFB9D598E104D889F860C20A5ABD9318AD1466BE9BBD060B397C1DAB8322843677A2A9D840841ED2CC58A91AD0C80E18D4EE175CCE3A3AB05E408
Malicious:	false
Reputation:	low
Preview:	......JFIF......................................................................................................................................................D.D............................................2...........................!..".1A2a#3CQq....$%R.................................7........................!."1.A.2Qq.Ba.#Rb..3......r..............?..>....D.6.FT...u...}..CMU...k..E.i..c.d...h@Efc......V..../.Q....}B.%...y.[........_z.D..e!'.m..........z....CQJ.o..13a....!%.I...q.'u^...)....$g..m..O.P...l.+...n...l.g.{i)G....x/r....!.YFA8$...R.C`.HV(.z.Z$....X,a........>o.N>..e.%.q.ve..^...0.X.o.z..i.Z+m."..-....U....Au..Ll>..r...;...(.@.....z.)......F.I...s@.Y..M..%..Z..:.+.[.>.i-5{....v..?.)..FA...N.m..L-.._..G.~.W.....2.\|0!...8?o#.7Et+Y...9..&.E.F2.?..<..`:....c@k.b.E..j.=...O.~y?......#.(..(?..T...?#..b.?.....%..JG.{(..(...C..X....]5.S.......>...X..z...........p...p.P.......1....#m;x]..~N.C..._.}.f.~v/....f'o.....31%q....#.r.~....w*.

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	168869
Entropy (8bit):	5.038993843265338
Encrypted:	false
SSDEEP:	1536:7i9FKQURh9dWCBU+A/Mo+nDQ3RPJfKnx7v1gm+m1NXs3J0oHL6Ui68G5TCecjlT7:PUzNVi/rj
MD5:	6E7D81FBC3E82669F10DB52CE76F3EDE
SHA1:	04F999E28D83E6DEFB33CF8BD49E48D14E151A21
SHA-256:	5FF660FA21052BEE0193098500C35AC9C3EC882149CF4926F37E3B68012EFD3C
SHA-512:	2B176F5395ED34390C8EF4CD9CD6558A793F55A2692CF90C6D87327DEB48B36D361567DE6373492190415C3DE77FB0ED7C349244B7A4EF17A7C1C16E581E9579
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-content/themes/salient/css/build/style.css?ver=16.1.3
Preview:	a,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,em,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,object,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{margin:0;padding:0;border:0;font-size:100%;font:inherit;vertical-align:baseline}input[type=submit]{-webkit-appearance:none}html{max-width:100%;overflow-y:scroll;overflow-x:hidden}body{max-width:100%;overflow:hidden;background:#fff;font-family:'Open Sans',Helvetica,sans-serif;color:#676767;position:relative}ol,ul{list-style:none}input[type=text]::-ms-clear{display:none}sup{font-size:.5em;vertical-align:super}sub{font-size:.5em;vertical-align:sub}p:empty{display:none}article,aside,details,figcaption,figure,footer,header,hgroup,menu,nav,section{display:block}*{-webkit-box-sizing:border

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	1637115
Entropy (8bit):	7.998348155829875
Encrypted:	true
SSDEEP:	24576:/bgF80XcG8qL0sBGsKDSM15yK/lovBz6m/niuosZknnbCMirM3L59iI+ir8C5:/bgFbcnsHKDp1WJvposmbZYeWIPp5
MD5:	0E4470C69B3BDBC9E59D08F45BFA21C4
SHA1:	82073A0678E4FCAA99E4500BEFCBDA755B5267DD
SHA-256:	33DF3EB10C3AE1C70C999C48C591706CF4208CE6B05E095C9C8593B2D0B5067C
SHA-512:	34F41EB577C930938021B967B6D568FB2F5654CAF9A3D5DD2327F6C80E7DB5700CF7EAA8ADF37347B0FA4EE5B26FACC157354BB540C56AE31C43BEE6C0DD071C
Malicious:	false
Reputation:	low
Preview:	:....1....wAD9uO9YAQw... ......0..tj...........p..c........moof....mfhd............traf....tfhd....................tfdt......R.....trun......................2................]...............................................7.......................f..............................................................................................c................................................................x...............................................................................................................................................)...............................!...............+.......6..............A=......'........l...............G...............6............... .......................^...............j.......................7.......................................................&.......................................6......N.......................................1...............................5................................9...............5.......9......=.....

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (39335), with no line terminators
Category:	downloaded
Size (bytes):	39335
Entropy (8bit):	4.9578394123115315
Encrypted:	false
SSDEEP:	384:IhrW8KpdwYSMGBcyVwu3/AQFPwavj3gEcgFK7B2vmN8Cagg:58nMHCVASPH8ab
MD5:	1862DBF0180F8038CAEF90192172EABE
SHA1:	95081A8989FA138458FDA054A3D9FD87E1A97804
SHA-256:	129D5A14516908DDABFF7B729EDFBE4CDC9B09502381A864549594848D34171E
SHA-512:	29ED9B8A31A322D898A485CBE67F952D6019B67B92E0F85F28CED4ADBB3B1C12E3BBAE1925CEE317CC23EFDF0A4520595D007A16D85E7AD02F6B6535C5F40197
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-content/themes/salient/css/build/responsive.css?ver=16.1.3
Preview:	:root{--mobile-container-width:88%}@media only screen and (min-width:1300px){.container,.post-area.standard-minimal.full-width-content .post .inner-wrap{max-width:1100px}}@media only screen and (min-width:1000px) and (max-width:1300px){#author-bio #author-info{width:544px}#project-meta ul li .nectar-love-wrap.fadein{margin-right:11px;padding-right:11px}#page-header-bg .span_6 .subheader{font-size:24px}#boxed .nectar-slider-wrap[data-full-width=false] .swiper-slide .content h2,.nectar-slider-wrap[data-full-width=false] .swiper-slide .content h2{font-size:32px;line-height:50px}body .swiper-slide .content p{font-size:20px;line-height:34px}.nectar-slider-wrap[data-full-width=false] .swiper-slide .content p{font-size:14px;line-height:24px}.portfolio-items:not(.carousel) .col .work-item.style-2 i{line-height:32px;height:32px;width:32px;font-size:14px}#top nav>ul>li>a{padding-left:8px}.sf-sub-indicator{left:6px}.nectar-slider-wrap[data-full-width=false] .swiper-slide .content p.transparent-bg

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	74236
Entropy (8bit):	7.997141526873429
Encrypted:	true
SSDEEP:	1536:9JJFDlCznO3tASvmjqJRsyM3MYJJDZmVd6tC7HcPQ/6Vtg3mobHW+Tb:9JXrmj+Rsy2JJsX6878PjVtjkv
MD5:	F7DBA56E7CE804466B67621407BA4E25
SHA1:	23D56BCD413FF3C6AF3C4B8AAE5E8A9DAA79CA97
SHA-256:	01F618A0EC99E11877A8E88DBC98C2B48BD48B9F027AD4C1A6772FE7F6394571
SHA-512:	24FBF547576FABC193E664AC67CD5A886E52563A8B4E8A83B8B484C276F6231CECB89868060460BA9737D72494A6396A4E27033C1CDA79C72E5AD8837F7AACD3
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-content/uploads/2018/10/1-2.jpg
Preview:	RIFF.!..WEBPVP8X........W.....VP8 P!..Pt...X...>M..D"..#1...`..lh..;....3.b......1$#....F..yw.. r?.......{.o.7...o..?.S..t.5.;...?.{g.(.......G.......=..O.E.......7..._...>......I...g.......p....~......'..............................n.....(..............'....'...^.....?..3.....W.../...\|....?......_.?..t.?.....?.?6?....;...e.s.....g./.....q...9.;._......_......Q...g......5...o.........._.........._.[.../._..........o...?....e...........?p~.................7.........o........S...........I...............fa..h..2.#...))....=.Zf..b...o..<..66..K-..j!xt"s...Z.........6..%.RG!.#...0..D.tT........g.<..[..mG.=...x.W..=..95E..Ay2.r......7.s...E..cf......X........l...3 .QY8.g.%.?.s. m..L.......8....&,....q[.%.>..h8...Y.Y.?.....i.a...6I..........R0.&X..#.Q.....7...AG.2}+.B...a..\......!?...T.?3.%c.-...4.E..E...a.........2dF_..+.H`.a.4.9...i..m.$.G..p.......j....f.l[.u.B.....g.K..7.#...%...H.A.7.T......}..).....WY...%..B.YB,../y3\|I4.M.d...Msc..7k.B6.}.

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	106480
Entropy (8bit):	7.997976161730291
Encrypted:	true
SSDEEP:	1536:r9CJ5LznZgZVwDXxOnqzJtgD0Y3tZOzUhtqDxJ+Ctgnoz6wae+93ykj23DWCAVxN:gTnZIVwDUqzgoY3byFJhpn+IyVxAO
MD5:	4D37E823A4A25DE0094719319D074892
SHA1:	89F998510F7C1265E00C435DD469D074D967F2B0
SHA-256:	1F24B2C31FCF080F41C4A2149732688139D5F9BBF0CC8DFEDC3EF43CC7EF4162
SHA-512:	69D2CBD9818ED20DAF480056087CFA0E4A844CABD3B92505266BFAE155425FDED59F6085C89A98A11F4B7430B1FFB81EADAC9E3E7665917219B5CA83CB09D8F3
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-content/uploads/2018/10/bhtan1.jpg
Preview:	RIFF...WEBPVP8X........W.....VP8 D...0!...X...>A..D".."9\|=.P..@.+\..o...w._.~...X..u.._.<.=../:.......c...'...............U._.W.g._.>............G........_................o.o._...\|.~............+.....O............y..?.~..^..............?..,...;...~..'....`..}......?....W.'.'...A...k.+..._./.?.?..t.........?.~.x.i.......E...g......5...?.G...?......O.?......./.......W....c......................'......K.....K...'.............s...................C..............R...n...}Q.r+.i.9~V..yqU"...x.)...pZN2EjJ.h[...n.....rKo;.(X.6#3.\.d.....I.G.geDz=2....[....W..X..qpa...{s..t..vy......&G.N.....a..?.].....F@.N..;.D.....T ..a/..O.=!2s..D..7.b....f....M..@^...I]ET\`.f..}...[....k.bt.....-R^L..PT.`..Z4.....fk.I..5\|(....f..\|..}m.V..;+..i..8[.y@.....Y2..y..F....~.v..Z......o..'...H....J...f.wY..1@....6C.....o..d...Q...y..(."......'.1...N..g...S.k......T.4s@...A...._...8....HD.E~....S..z8.Wu..ld.-....\|g..C......M:..?;5.F\a....i06./.p.t.y}.D....TU.....b...)C.co_...!Q

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8999), with no line terminators
Category:	downloaded
Size (bytes):	8999
Entropy (8bit):	5.0596643810577016
Encrypted:	false
SSDEEP:	192:NKasXzHD9D5/6J8bvctcfqqTapzikrCeexsvfip9Y8pY7pZpz9n+HyQ8m8Fwmtre:wjzHD9Dpm8L2cfqqTapOeexsvfip9Yne
MD5:	900BAD1DBD9B131A99F31703A66340F3
SHA1:	CA580144BE55DABAE951A984529A5250D279B129
SHA-256:	3C9EB9BB1076BBB11745885964334DF870BF7EB621DAA5E7475A9A5CF4B2E424
SHA-512:	D0CF2C673096B76E4018A4A7F2B900570BA0094116E69BA4528B96E27F5339CD20A1CCD68ADBBA0F1E1D854CFF08A7EA10605D75D04AC5BE3E2F8CD1DA04A552
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-content/themes/salient/js/build/third-party/waypoints.js?ver=4.0.2
Preview:	!function(){"use strict";var t=0,e={};function i(o){if(!o)throw new Error("No options passed to Waypoint constructor");if(!o.element)throw new Error("No element option passed to Waypoint constructor");if(!o.handler)throw new Error("No handler option passed to Waypoint constructor");this.key="waypoint-"+t,this.options=i.Adapter.extend({},i.defaults,o),this.element=this.options.element,this.adapter=new i.Adapter(this.element),this.callback=o.handler,this.axis=this.options.horizontal?"horizontal":"vertical",this.enabled=this.options.enabled,this.triggerPoint=null,this.group=i.Group.findOrCreate({name:this.options.group,axis:this.axis}),this.context=i.Context.findOrCreateByElement(this.options.context),i.offsetAliases[this.options.offset]&&(this.options.offset=i.offsetAliases[this.options.offset]),this.group.add(this),this.context.add(this),e[this.key]=this,t+=1}i.prototype.queueTrigger=function(t){this.group.queueTrigger(this,t)},i.prototype.trigger=function(t){this.enabled&&this.callback

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	65599
Entropy (8bit):	7.9915825226334505
Encrypted:	true
SSDEEP:	1536:7mswBROJRioXl4FKTA67HFRrW0USlZaLj:jwBki0V7av
MD5:	A3CBC456BB50646DD093957221B965C0
SHA1:	B11A5CB904F38EDB3667073D87DC6D31F1E6557F
SHA-256:	761B2A65AE5D3BE65594AD8C9B27A36A37979C9B23DEAE5AB8441CFE90BAB344
SHA-512:	45530B9C39A9948F8C8EB4559E4FD227A1B6EB5EE7A0684BE3246A8CB20775BEF36B3402FF3C8FD94B6DE8E99B18BA2C0028CD5E859094C7D6DBA1A2D3FA5FE8
Malicious:	false
Reputation:	low
Preview:	:....1....wAD9uO9YAQw... ........0...j.............p........3i.H.....^..R...G....L@.I..e......f..bfX.4.c.bHI.c?..dO...'\|./...M]^Z...O.'_W..$.V.]...T.-....t...#.Z.....CD...D....y.h........b...$....d.;.p@M_..)1..$.b.z...%.......KL......3..K...xb&........A,.....S..e....l.q.K..T/W.. ..>9..h..../.N.i.u@..)h..9\|;...3u...?N#.....7}.y.$.S...3..GC..-sM#..q.7.&..&..G'.......(.>.lAl....DL.l.t...~r.s......Z...<.lhXB.!q..m~.......z.q.......t..>..v>/.........-)...H.r..I..}..>.....(T..m.:.A)...{.^R...QQ0:.d....iX.8.H.U.{.y..............`...{.6x./\|.r..A....C.5...KG?...........[,$.<.f.v...jVZ....[#.....xGD.#H.........6XR.\|..8.~.....{.......Q..../...s....O..............H..=.k..{..[....D.3+..............F.....E.1.(..J.G.F%....D:.:..8....&T....6\|JLC~....ku..I/.U.%......-.bR.@...w.....G[>.o.....RZ.....0.J&..BP?F..?..,z.Y...e`.A'..........L? .-.j..~M... ..O......y...x...B.H.....b.suCR8..C...p.V.\|....c.M.".t..b....jm.;_.].(.Hl..f...S......_R.O.:....

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2320)
Category:	downloaded
Size (bytes):	2392
Entropy (8bit):	5.115603596289524
Encrypted:	false
SSDEEP:	48:qua9/SHQZqr5hp4RB667CGA9Ah8KG98sbfEPEUGrUZzrUJoDrFquYyYWjYPIIbFl:1g/urbY6GijazArEcP7uMVwI1ebYR9
MD5:	56BA0CDB72B1B00226A21FE08251054A
SHA1:	82BEF20F71EB674C7D1D63242C80AFBC1E6D8274
SHA-256:	15A71D32B340BF3641581AC5B4F37887B9CB3981477D5886EC5849749C8A36E7
SHA-512:	6F33BBC08A61FF3FBFD3533F16355F7C804F2C151496DA3FF0BC14939E7BAA44CA7DA56BC93FB555AFD59E1ACE12BEB8DECCF3E3FA208AE66D66B8D4F40BA718
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-content/themes/salient/js/build/third-party/jquery.easing.min.js?ver=1.3
Preview:	/. jQuery Easing v1.4.1 - http://gsgd.co.uk/sandbox/jquery/easing/./.!function(n){"function"==typeof define&&define.amd?define(["jquery"],function(e){return n(e)}):"object"==typeof module&&"object"==typeof module.exports?module.exports=n(require("jquery")):n(jQuery)}(function(n){function e(n){var e=7.5625,t=2.75;return n<1/t?enn:n<2/t?e(n-=1.5/t)n+.75:n<2.5/t?e(n-=2.25/t)n+.9375:e(n-=2.625/t)n+.984375}void 0!==n.easing&&(n.easing.jswing=n.easing.swing);var t=Math.pow,u=Math.sqrt,r=Math.sin,i=Math.cos,a=Math.PI,o=1.70158,c=1.525o,s=2a/3,f=2a/4.5;return n.extend(n.easing,{def:"easeOutQuad",swing:function(e){return n.easing[n.easing.def](e)},easeInQuad:function(n){return nn},easeOutQuad:function(n){return 1-(1-n)(1-n)},easeInOutQuad:function(n){return n<.5?2nn:1-t(-2n+2,2)/2},easeInCubic:function(n){return nnn},easeOutCubic:function(n){return 1-t(1-n,3)},easeInOutCubic:function(n){return n<.5?4nnn:1-t(-2n+2,3)/2},easeInQuart:function(n){return nnnn},easeOutQuar

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1922), with no line terminators
Category:	downloaded
Size (bytes):	1922
Entropy (8bit):	5.05262498167261
Encrypted:	false
SSDEEP:	48:BgrtH6pSqr1h7gM10kKgMZKQhCrgp2OBqLZ:EH6pSq09qZ
MD5:	B08178F9F045F881029F695E4B939291
SHA1:	E62866A6042F4F2A0CA8BF8621F550803ED0F006
SHA-256:	2FF736AB797EEDC5190BF7DAE8FF0BD0DCD546D7CCE417ED909A608CE385ACD8
SHA-512:	C4E70EFD0652460E72CEE7C7E68244D24B3F8A3BA5F8B6A322C71B4CF55B022D454B19DE8092FFF8F3C47E1DB676B4B9B8EBF8A6DD962739922D37DBB0C0252E
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-content/themes/salient/js/build/priority.js?ver=16.1.3
Preview:	var headerEl=document.getElementById("header-outer"),headerSpaceEl=document.getElementById("header-space");void 0!==headerEl&&null!=headerEl&&void 0!==headerSpaceEl&&null!=headerSpaceEl&&headerSpaceEl.hasAttribute("data-secondary-header-display")&&(headerSpaceEl.style.height=headerEl.clientHeight+"px"),jQuery(function(e){"use strict";var t,a,r,n,o,d,i=!1;function h(){var a=t.offset().top;e("#page-header-wrap.fullscreen-header").css("height","auto"),t.css("height",parseInt(window.innerHeight)-parseInt(a)+"px")}if(navigator.userAgent.match(/(Android\|iPod\|iPhone\|iPad\|BlackBerry\|IEMobile\|Opera Mini)/)&&(i=!0),i&&e("#page-header-bg.fullscreen-header").length>0){t=e("#page-header-bg"),h();var l=window.innerWidth,s=window.innerHeight;e(window).resize(function(){e(window).width()!=l&&e(window).height!=s&&(h(),l=window.innerWidth,s=window.innerHeight)})}i&&e(".nectar_fullscreen_zoom_recent_projects").length>0&&(a=e(".body-border-top").length>0&&e(window).width()>1e3?e(".body-border-top").height

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	375431
Entropy (8bit):	5.172068307418267
Encrypted:	false
SSDEEP:	3072:nBEeoWyyu+qzb1ACPRpDp2AmtpNvgQ8Qp+J3262whGAzHDcHMHHfXhJe62tIbz9L:nF6ygCCPRpDpl5MAzHKMgI+u
MD5:	A0356157D149B7BF1CF2EC157AE56E32
SHA1:	6B659AF962163268F4FAADF9E4CAC107D32CD1C5
SHA-256:	D05732EFD6C3C6AB81B8591DC5B0EA738487223630B9E72AAF55075616424C08
SHA-512:	872D3F07F04406C9C8728F6AFDC28B3EAA206D20BB058A38BF9D99AFEA1452C90B8AFA1751FE177485B0B50E07F92BD5B05E38295A60CFDC66C42643EC1C4EE7
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-content/themes/salient/js/build/init.js?ver=16.1.3
Preview:	!function(t,e,a){"use strict";var n,i,s=t(e),r=t("body"),o=t("#slide-out-widget-area"),l=t("#slide-out-widget-area-bg"),d=t("#header-outer"),c=t("#header-secondary-outer"),h=t("#header-outer #search-btn a"),u=t("#wpadminbar"),p=t("#ajax-loading-screen"),f=t(".body-border-top"),g=t("#page-header-bg"),m=t("#footer-outer"),v=!(!e.nectarOptions\|\|!e.nectarOptions.delay_js\|\|"1"!==e.nectarOptions.delay_js),b=t(".body-border-right").length>0?t(".body-border-right").width():0,w=d.is("[data-logo-height]")?parseInt(d.attr("data-logo-height")):30,y=d.is("[data-padding]")?parseInt(d.attr("data-padding")):28,_=d.is("[data-shrink-num]")?d.attr("data-shrink-num"):6,C=!!d.is('[data-condense="true"]'),x=!!d.is('[data-using-logo="1"]'),k=!!d.is('[data-header-resize="1"]'),$=!!d.is('[data-transparent-header="true"]'),T=(d.is('[data-mobile-fixed="1"]'),r.is("[data-header-format]")?r.attr("data-header-format"):"default"),I=r.is("[data-hhun]")?r.attr("data-hhun"):"",E=!!r.is('[data-contained-header="true"]')

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	93462
Entropy (8bit):	7.997684778865807
Encrypted:	true
SSDEEP:	1536:NkvdGicsyGqeU9QpJhYcem2sFWzpk6+SzqK7grekg3ISHHmevULkhmGdE2S2VzTT:N/6qeoQkm2suP+KcrmFvUF2S2VzT9Uc
MD5:	1EA3F70D2635D36D642D64C8EF6342BC
SHA1:	8983AD541B36F46941D22E73BDD9E26F61FB75CE
SHA-256:	CB791AE1E6824998C2DD52D459E580B819EAD771BE3F9A857ADCF1997F8D67BE
SHA-512:	E887B366A839F25603A10A61227529410B7C9DC1CE5EBDFC2A4495E00008788EB40729663D46947924544CED4A2507C60F912077ADD00815F8A8055CDD4009E7
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-content/uploads/2018/10/mald.jpg
Preview:	RIFF.m..WEBPVP8X........W.....VP8 jl..P....*X...>I..D"....M.(...6S.}._HT.S.U... m.....z._.......+<.._....o.?.o._..........zk{7......M\|............??.....j.....7.................o.o.....t_..................O..................7.......{............?h..?....y......._.o...?..........=...........~s..._.3./.O...........w....s.....~.~........?\|~..A.3.../.?D.E.........G.......5.g.'.O.....O...c.l.K.c.7./.?W.]......._..9.O.O.7........c.o.?....?.?........;..........]..........O...B...?.g..._.....n...7.O.........s.....G._..............................=........k.4b....<..E.\...3E.R...@+.....w/.p.....Gr.}..v.\....%......m>K6....\...I1..C..\|.x...s.Q....!...x.%..,.......kn...;....I.. l!...s.6.U....q.n.. ..)o).d.....-.s"...TQ\|..]>.^{..n...=...aO7.2.Px.).y...J..z..5.^iv..c?...VT/.p;.....o..<...w.G..F.........d..<.r.6H.o.........Xs..Qg...5...9..)..l...5W.E#.;h..5..G.,]..T....v..cs7.a......W..J+)F..M.R.>f.v.JQ...k@.....Y...z.4......@O..?.(..~.EM.p.q.$..rO..+.\.%\|......f

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	14424
Entropy (8bit):	7.970943887466097
Encrypted:	false
SSDEEP:	384:2ieWiSKL9xnHUzRzYcp0uZvBUGcHPpVPZkMPe:2Zbt9NHU9NiGcxVPyM2
MD5:	997D6AB05A6BD41F8FB60A85BBFFBA31
SHA1:	D86EA5C89DBB57BC8114F2C3BB2B4DB81932678E
SHA-256:	8762E4A3DD1F95890E2C0891B8D1377BB7B1704DB5E74424621B4CA083497D70
SHA-512:	8118A5671BA50D51F7D41071A28B672133B0B7C3941B3867E315D61D1B7B3BF6E6F20D0C5390FC036516AB0301FCADD6D4B25D0D2F812FC514FB879771D36BA6
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-content/uploads/2021/02/cropped-nit-logo-only-2021.png
Preview:	RIFFP8..WEBPVP8X..............VP8 p7...........>Q&.E#."....8.....T..Z.d.%T.........?....g......e......]....W....@.m.........?.\|1.u.C....._......l.A.....o.......~......O.w....._...?t?....;.O..U..G...W./.....^...}@?...z..#..n..yw1.....}..E.......~y.a.o._............n...?.>..g...o`.....~W...}....._..n_O.....M...........o.......c.......(.E...N.....tR?..e5k..........q..b.\V...=..g..3.{:.<..n..IO,w~0,8....uP<......~....3.q....B.f.L.`..tC..L7.+Q..~/+....w).;..`..j.....n...n...]..,A..q..R..Iy,<w)..4..>0..t\|.L....:>....C..{40.....D..c... 5.P...):.......y~!.....-J......8.C../....L;p..s}6..8c;.....+...Y.R..L.L&.G.Rfcal.3;f.e.. $......{d..-..4._..k..[..7...lW.&.....5^.=.......0..$.\|.....W..y..i.........#E......$V.......,...).2qgp C...d....i0.Sc.e..i.....q..J..v.lw2..........S.?..->Q.O.q..$....m..[....%Ci{.%..:..7!+.....t...{.W....G.....Ji.#i..J......q..ch... .^.n.Z.M..Lk.l..s.a+H...`..;....p....2b.....L...c...C.jD..P..3~MuF.....f.Y.L&..4eQ......-...

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1933)
Category:	downloaded
Size (bytes):	2245
Entropy (8bit):	5.165575698403949
Encrypted:	false
SSDEEP:	48:u0ldgE01d01a3TSHJcdDjSAKRSkEwznxTqGXkSySfJbpGzHWSWlYQRTCtmP6RPcy:tGp3TPaALkDzxsEH6RPcRbo
MD5:	507093401CD1D74603963E9A93012460
SHA1:	40920E71E0DC7B172C80AC5905F9A9C42AA8ACF0
SHA-256:	86A156B80C4342D46AA6BFDF42944E34CD85F5935E38C20BD58445006CA12A96
SHA-512:	954AA6351D223570B9E8E22CF329C2020D114D0DA46FC5D62109FBDAB4DE4F29FD14BF56FC7C831BB65609FD2120DD198990B3C47034D0EA5D1B1F3540E4DD1D
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-content/themes/salient/js/build/third-party/hoverintent.min.js?ver=1.9
Preview:	/!. hoverIntent v1.9.0 // 2017.09.01 // jQuery v1.7.0+. * http://briancherne.github.io/jquery-hoverIntent/. . You may use hoverIntent under the terms of the MIT license. Basically that. * means you are free to use hoverIntent as long as this header is left intact.. * Copyright 2007-2017 Brian Cherne. /.!function(factory){"use strict";"function"==typeof define&&define.amd?define(["jquery"],factory):jQuery&&!jQuery.fn.hoverIntent&&factory(jQuery)}(function($){"use strict";var cX,cY,_cfg={interval:100,sensitivity:6,timeout:0},INSTANCE_COUNT=0,track=function(ev){cX=ev.pageX,cY=ev.pageY},compare=function(ev,$el,s,cfg){if(Math.sqrt((s.pX-cX)(s.pX-cX)+(s.pY-cY)*(s.pY-cY))<cfg.sensitivity)return $el.off(s.event,track),delete s.timeoutId,s.isActive=!0,ev.pageX=cX,ev.pageY=cY,delete s.pX,delete s.pY,cfg.over.apply($el[0],[ev]);s.pX=cX,s.pY=cY,s.timeoutId=setTimeout(function(){compare(ev,$el,s,cfg)},cfg.interval)},delay=function(ev,$el,s,out){return delete $el.data("hoverIntent")[s.id],ou

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	73576
Entropy (8bit):	7.997095096037552
Encrypted:	true
SSDEEP:	1536:ainuuGy9CJc9YDnWFbkLIB0DkxatUE9pfGIl5O2/tH:ainuZy9COFwDEKfGsHH
MD5:	B5623549161A15462FBABC40AEAA5377
SHA1:	6FA6B7CDA61206A00C09F49B943CB3F11A7C6A9E
SHA-256:	4090914583451C38A395BAA867906F50F74FE0BEB788D66D1D32DDF2654897BE
SHA-512:	3BAF43DC7774509CFC265D7D32C81A431CC15ED588ACFAAD5368CE2B45BFD00958077BDB83587CDB4F351AD450A99DE8F7D8C971B9902421F4DCA367A4E81728
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-content/uploads/2018/10/5.jpg
Preview:	RIFF`...WEBPVP8X........W.....VP8 .........X...>M..D".."0...P..fm~..~S...k...lD.~.6... .s....4d?u.g...o".1........}...>.......K.g.../...?..........;....7..............c.G.....O.Ou_.=@........s.{.g..qo._Y.....>S.........5.q......Ok....8h.#\|...._.~l.C...............>G...o..Q?.}..O._..............?J~0...K............%......x.l.........._.........C.?....?._.?......7.....?.....N...h......./.?......k............w..}9...'.O.....?......................\|8~....m.Y8...J..4..e c..f..f.c.\..hb.4O^(.J~]....'.^....u.Z'.-..[..Q..q}.8Fb7.....:.....V..P.E...^..@..;..]...=..b....9[-gY..WO...!....\.t.V.J@\R...j...<L..W=.MQ..nc).b..Y.........F.k..F....^.m....j.O.<.&s.Md....ZC0]..l.Y.~..1{,.'.+3..u..M..G..)..m.nh..e^.2.@nQJJ.v.j.$..u......J.\|Q...(.p.>2.e.tn:O..Y.Y.\|.n.@9I.}.~.....]..0......W.]&..a....R.....wd[f.......T!.~.I..v...4.z....s....g.R..~...Q!5.m..TY..0+d{...91i.JV...<...+..kP ....<...P........=..K..3.... ..m...a...<..=.....d.?.X._..o..!......".f..M._<U.

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (51956)
Category:	downloaded
Size (bytes):	53204
Entropy (8bit):	5.740940263912164
Encrypted:	false
SSDEEP:	1536:jNgNO7TKNxyM99LQfclwyPDEKgGG/pf8fboeyo:eN7NhQ0vPDEz/OfbFl
MD5:	CDD7AE97DA717C5CD5C0794E9E1DBC80
SHA1:	93774FDB1927298E20142F2554083AC39C0A5B0F
SHA-256:	DE9712156248EDAE5236FF3D033EDB4E2E95F343388E79F76CF5D1DC7F8ABB5F
SHA-512:	7E894B0D015271E6B4CD0E8420E02A16499C91F63A4A303BB9015C8789B12757A9EF9F88135EE0C3B8287A91DD40A7918670061ACE48EE7D5188BCC8C1ABA9D9
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/th/3pcSFWJI7a5SNv89Az7bTi6V80M4jnn3bPXR3H-Ku18.js
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function E(D){return D}var r=function(D){return E.call(this,D)},F=this\|\|self,l=function(D,G,Z,H,N,O,W,J,u,z,X,e){for(X=(z=75,44);;)try{if(z==D)break;else{if(5==z)return J;if(17==z)X=99,J=u.createPolicy(O,{createHTML:r,createScript:r,createScriptURL:r}),z=G;else{if(z==G)return X=44,J;z==H?(F.console[N](e.message),z=G):52==z?z=F.console?H:G:75==z?(J=W,u=F.trustedTypes,z=Z):z==Z?z=u&&u.createPolicy?17:5:95==z&&(X=44,z=52)}}}catch(P){if(44==X)throw P;99==X&&(e=P,z=95)}};(0,eval)(function(D,G){return(G=l(28,90,89,7,"error","ad",null))&&1===D.eval(G.createScript("1"))?function(Z){return G.createScript(Z)}:function(Z){return""+Z}}(F)(Array(7824*Math.random()\|0).join("\n")+['//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (353)
Category:	downloaded
Size (bytes):	39738
Entropy (8bit):	4.972024528639363
Encrypted:	false
SSDEEP:	768:K1B1FFNOiRE82RhSTCLlz6lM/9caVZ2YTTAqoCU/Gke:K1/hTExRhSTCLlzoM/9caVZ2YTTAqoCx
MD5:	051A48CF0660A088E37487842A8896F9
SHA1:	849DB5EBCA8E63D8883377FF07C91FC6F21B601D
SHA-256:	A2B4C3AD220C8D28533887965FBB1E6C1382588D200EB9D95250F929A567BA1A
SHA-512:	41D81A48D117CC79EC5DCA1793DBE56FF32024C04992E1BE3F3E0B99C772FE5BAAF629699E7CAD6B7501118B964EE24DCC5FD17E146B21C2AA58D6BB1F356FFA
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-content/plugins/js_composer_salient/assets/css/js_composer.min.css?ver=7.1
Preview:	...vc_parallax-inner iframe,..vc_video-bg iframe {. max-width: 1000%.}...vc_clearfix:after,..vc_column-inner::after,..vc_el-clearfix,..vc_row:after {. clear: both.}...container:before,..container:after,..container-fluid:before,..container-fluid:after,..row:before,..row:after,..modal-footer:before,..modal-footer:after,..vc_row:before,..vc_row:after {. content: " ";. display: table;.}..container:after,..container-fluid:after,..row:after,..vc_row:after {. clear: both;.}...vc-composer-icon,.[class=" vc_arrow-icon-"],.[class^=vc_arrow-icon-] {. speak: none;. font-variant: normal;. text-transform: none;. -webkit-font-smoothing: antialiased;. -moz-osx-font-smoothing: grayscale.}...vc_row:after,..vc_row:before {. content: " ";. display: table.}../nectar addition*/.@media (max-width: 690px) {. .vc_hidden-xs {. display: none!important. }. .vc_el-clearfix-xs {. clear: both. }.}..@media (min-width: 691px) and (max-width: 999px) {. .vc_hi

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	39240
Entropy (8bit):	7.994865631468202
Encrypted:	true
SSDEEP:	768:aDMkojsJsUykxUQqTBXxYUo1LZG0XyfT4jXyEDFOymOTe:OMkojf6ahR41YuyY7BOLOTe
MD5:	554334A50B9C986AA288F0E873317257
SHA1:	5AA74640C6CDF8308843D70273EC6A298E320CAA
SHA-256:	2C8BB74EED91C9C4B7FC265C4259088716AA4069886AAD426A181934C2CEC709
SHA-512:	8464F416ABE0C73E6F9C4626F933F16E8F9DDF1CA63F13413786D00903E78818A8E399AA431895E8C27A77BFF0DF7CAD02C5E3233C92EFEBFFA7BBABFED28FE6
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi_webp/wAD9uO9YAQw/sddefault.webp
Preview:	RIFF@...WEBPVP8 4............>Q$.E..!.%..)@..en..V..NK..<.j..~....f...?..)...o...z^._..<..~.\|.._1/`.s.'.......V..\|.~.~.{....G....oVOQ..}M...........)_.}....G............?@y....oQ..~.././.....{}......?.~......O./.....P.!...............b.I.....w..^.w.....O.....?.{#........(>...._.{.c..o._..R_..i......'._........m................C.......~.....~.......ad.W..EM."..SeH...T.Rl..6T..EM."..SeH...T.Rl..6T..EM."..SeH...T.Rl..6T..<n:..Hf]+6..r0......Qc.'.....e\|../..y.z...LN.&....@...(K.e...>..c...Y.".....y...p.R.e9O./0.p...=."."...?Xs.I.k..rN.....P..?..Y.b..DF.=&..L.P.'.=...g..d....`+.cu..o..\.m...t..v\|.X.4.....?...2D......u..F>)O..RN....1.-.3.R).^...\|.O}.vZL..R.....{2...Z....F.3.^.............R..\...hTT=N.(p...z;..>C...x1..*..s.....K..?.Dg.KV..;7o.1A_.F1..>....Iv.<.Kd..~.n.G]......yVw=...........VD.f..4.T2.W!k...e..g.\..k..C..........\|42...R.r.....~'...g....>........'G\..-.4Y..c.p..z.v[.....$.aLs..u..#>/r..w..`...;I..n.W/N.y.F..

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	30704
Entropy (8bit):	7.993281492066437
Encrypted:	true
SSDEEP:	384:nEanKalCmCTW7yCiwecpkxwT2Ce8I6HZpkSIzqU5q53NZQCrz1e/HRx9PqUztb7q:nvKalQaXePLJ65pII5dZxzuT9yMIpow
MD5:	212678F200B29232D39FD0E991E08A45
SHA1:	4D982AD0B312B9B9F2B26E4C8364E0EDDC2BE3A6
SHA-256:	5A9581B99E59528CDF831358F0DC2FA5C98806098C708FD4A43627866B3AFB61
SHA-512:	4A31ED708EB6BFA799605FFBC4386CCE08A4E5437CA34A016489773669169999C99FD0C4EA50908A34BA0FDC70C4B5CE005DACD44BF7505F12FCBD018184020A
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-content/uploads/2018/10/t10.jpg
Preview:	RIFF.w..WEBPVP8X..............VP8 Dw..0....* ...>Q&.F#...$R.....gn..8..U(.l...c....}.?`b...-.........x..9.......3...y....oM..Hz.......w....._Zo@.;.[..[.:....O...;.^O....../;.....f[...#k..}.=..o.$..0....N<......c........x...33r......n. ...B..!..M_...llr..39.....f;......D..cR.........\|.u.rQnO.N.\_.........G..&un...Y.kZ................+r.{$A....C....\|.9......Y.o;.HA.....b......7?.'Z...\|ZR.......-.. .....0.i.....x...`.w..7.}.....}E..-d.B.s!..=.G.../h....W.W.....Zc..#z....}...5.!M........h.55{H.....Y>.<A..I.!......Z_..].Y.....O..Y..t...T.r<%J9.N..6`.2..;...cO..:........e.....V...V.W..X............>...i..9.9Dh.\|.._..F.Li. .2Q...k.._..o..s.J(^.,..c......l.A.(,m.H#..(.`.cn.....r7......:.....s..g.... .v..._(.N..Y....\|.8...E.....`...kZ.C..6.:../.........?.~E.).b.*.O..A`.0HB...h.mh..cj.).F....dJ-..K......1.......dNs.s..y..^.=).3=.h.......:Xj5...JmH..:Se....\|..\|..[...t.x.......q..<........{.)....\z\|..y.B.:#.%t...~.Vb.hot.....Y....x.V.../Ub>.qE

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	266
Entropy (8bit):	3.372025038269723
Encrypted:	false
SSDEEP:	6:yk5ZAAkasHBYOaEPltls+4JeSEHj+iqkepygP+k4qGnGs:3Dkh7Pb3SkXi94Z
MD5:	6B9EDF480F981B8823BFA4F1CFBC31CC
SHA1:	F18956D70DB97B78F823DD05EBBD42376024CB8D
SHA-256:	F6081B18EB89EBB290BEB7EBFE945DEE0F738064DDB07960CDBEFA63F0C37F72
SHA-512:	6711CE548E8F05F99A9D6C387D2EEECE3C98E80756F0EA5A53BFB2C064A7BE550D9DBCA366413A3D1C92F91F9CABA56AAEBCAF415482EA2189313E8CD048CFEC
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-content/plugins/revslider6620n-1/public/assets/assets/dummy.png
Preview:	RIFF....WEBPVP8X..............ALPH......VP8 ....0...........%...p......EXIF....Exif..II...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100........................................

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	70247
Entropy (8bit):	7.9779366816981465
Encrypted:	false
SSDEEP:	1536:OoMAcUoWFVRDkbRck+Qr+7TFvHGml4U3/gfK8BHG:QfQRDZtQi7TFvHTG9f9HG
MD5:	CDEFB1CCB81420240EF1398E1774286E
SHA1:	EAE89C7A0DC3E4C535AD86F701ACA61E187260D9
SHA-256:	6E7DBB1B5ADA501EA6B457FE1461CAAC2758A319406F801C1DE27AB8E999B87C
SHA-512:	5EA675031B1D061B82741DFA3D4EFF3709A92E6D3B1C59DCFF8D1967B86EA381E93DEBD1C223A08705ADACA19B52004C4E1FC0DFBD951C96B708EF0F2D81428B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............x......pHYs............... .IDATx..y.\U.....;.=$!.a.%,... ....2".3>..q..w.8o.y.o.9n.(:.O.dW...@..!$l!k'.,.w.^w9..q.V.......o..T.S..;...RJ.F..".......c......W..3.SO.7...:......./..v-<.(l..O=......]......~.T...C+.......}.e.<..l....v8.lx...U..#..y..0.n.f".P.@O.l.....!.RJ.k^..].k.(.....k4.G+.........\|..x.v..).l.5..3.TB..\-.k.).B.e.<..._.[..g{.Ip..p.%p.Q...MM~.X..<Z..4....7nT3...n8..x...l..J..p...j.e..(.8..?..]. .P..E.......CK...h.V.4uO$......{.U....x.k.mo.....}c.H...J)..~e%.m./..&..be.ho....My.....R..==* ..L..C.y/.L..-Y.........`.C.j,....8.2.a.<....mk..NSq .^..M[.v.ij...h.!..w....?......U.yW..9s.ne@.`G.$...rD.-.1.L.p...Q._)..=..w...J.p3..U@S.h.@S..b.......?(%..#...VB...u...H.5.'.y?..#.;..f%..,.h............q8...B...8.8.B...Z...$......p...i....5;;.l%...v.H.9.#.T....5$..2...t....I.J@Y.FFT..=....PH....-.0... ...Z....B........j....].J.e...k0Jd.^.CcH.?....y.._.....Q....>.n:tH....}*...#....6Z....)......../.Q....

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	221716
Entropy (8bit):	7.998175002423804
Encrypted:	true
SSDEEP:	6144:uRy57zJg6y1vGRo6VtiVz/tool/vyHipJBv:uRyJzH0eRo6jUmiHyHipJN
MD5:	9A12B3BA47246606F52C9086EDCD95C9
SHA1:	13BAAB551AE1187F50EAABAE9B51B677687ECD20
SHA-256:	A0CD5DFCCB0905D26F95D9AC721E98C54AA47A0EC3A581CFE656213D9F0F0CB1
SHA-512:	446804579205F3A62A5018986D49F6FF01731A8EC8700E99AA7310C14EDDD34F058505E61236B29392EE41A4FFDE831823D280AA8BF6A101249DE7CF42280588
Malicious:	false
Reputation:	low
Preview:	:....1....wAD9uO9YAQw... ......0...j...........p.........]..7.]K....P.....e..#.........i..........y.y...4..*Z.s.\|x.R.BU......6..e.,W9.&..t..F..T.m'..\|].:.(s..l...F....O.'..Xt...J..;../..La..P.<...d&..:i..........l.^.....e.....^.$n........cG.Xv..J...p..n.@#.31.g:q.Ltv.2...x.gE......n...nv..z.o......`...7..C%I.....WU..../..O....7.y...d.S...G[...s..T.t....c.h.....2..0...!.{$p...B.p..D.R.t..4.....&J^....!7....g.....b..W..:W...l.qt.I....r.U...-;mZ&...$.bx...w....P.FeH.N0....;.......}....I3/T....DE..c.H.....[..f..(NS....X<\|.7p...U.C...d.....MI...m....^.Yt>.v.u.l.......2..0.P...{$p..."Cp..!:o.....h.......{..w...@"PS.. ...:-..n...^....\...]%.mX]=..=A..{..t....U!we.P...g...$\ZR....:.......'&.........Q...W...cf...ic.O.XZ.).x..P.D.......2."..`.......2..(.P..T..(.. .(?....Y.;Xz....\|CK......X(.N.Z.Bi...i0...[#..:...}.;h..X.z..&e...'......dW3r.(...2.....AVN.(.2.....-.@am?.;...!k.:o..FR.w...m..`..5....M.Om.,.gE.r.hMg.b...@..h..P...R....7.O.....Eb

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3560
Entropy (8bit):	5.426410566283457
Encrypted:	false
SSDEEP:	96:vOS0aEfOS0abFZOGOS0aWxOS0a2Vc+uKOS0a/NvOXaEfOXabFZOGOXaWxOXa2VcC:tpEdpSqpWnpc3p5EvSiW9cNV
MD5:	46447A582638E878FF6882EB886618A7
SHA1:	032109E2A0E4E6EF0346615B5136F845CF0FBE25
SHA-256:	539B9E9B39CF97AC53AF5E8173C21A842589D8A570FDFF3C4E2F99BCC1ABB6EA
SHA-512:	800E1526655C675FD9159F23ED1FBBC8F5D0A987A65CEF1327F534944371BF35E8CCA16CF5FE76BFEEF322E7E2BEF303C07478C4A77ABDEAEF5408DECE0B02B9
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Raleway:500%2C100&display=swap
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Raleway';. font-style: normal;. font-weight: 100;. font-display: swap;. src: url(https://fonts.gstatic.com/s/raleway/v29/1Ptug8zYS_SKggPNyCAIT5lu.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Raleway';. font-style: normal;. font-weight: 100;. font-display: swap;. src: url(https://fonts.gstatic.com/s/raleway/v29/1Ptug8zYS_SKggPNyCkIT5lu.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ vietnamese */.@font-face {. font-family: 'Raleway';. font-style: normal;. font-weight: 100;. font-display: swap;. src: url(https://fonts.gstatic.com/s/raleway/v29/1Ptug8zYS_SKggPNyCIIT5lu.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;.}./

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11701), with no line terminators
Category:	downloaded
Size (bytes):	11701
Entropy (8bit):	5.062908922762702
Encrypted:	false
SSDEEP:	96:XNUdaXqhQOq5AHV9UbrHpPv+0HY0+QrCXr6HLvGFELCJ96p1e62FMEEVL:Gd7h/qm19yJP2YYYrCb+vOJ0p1eTC
MD5:	1F618232C5CEF12EF69F78CC5D9A1C68
SHA1:	50F8A9D1EAC8863C6A4EDFD645302AA6E92BBEFA
SHA-256:	6EE8819E4A98BD666EFEAA9E39D1D27512668DF6B3252E05A3E8BBB01056309B
SHA-512:	22F8F20E4810F7347CC43C6D09604508A15867B5750858EAC84F86FEBE691BD4D56FD9F8D0A8CE08C3B89DD258EF8076561F7A2B818AD83D9E11FBA8A2F8A981
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-content/themes/salient/css/build/elements/element-fancy-box.css?ver=16.1.3
Preview:	.nectar-fancy-box{overflow:hidden;position:relative;padding:13%}.full-width-content .vc_col-sm-12 .vc_col-sm-12>.wpb_wrapper>.nectar-fancy-box,.full-width-content>.span_12>.vc_col-sm-12>.wpb_wrapper>.nectar-fancy-box{padding:5%}.full-width-content .vc_col-sm-12 .vc_col-sm-12>.wpb_wrapper>.nectar-fancy-box .inner,.full-width-content>.span_12>.vc_col-sm-12>.wpb_wrapper>.nectar-fancy-box .inner{padding-bottom:8%}.nectar-fancy-box:after{display:block;position:absolute;content:' ';width:100%;height:6px;left:0;bottom:0;background:#fff;z-index:5;transform:scaleX(0) translateZ(0);-webkit-transform:scaleX(0) translateZ(0);transform-origin:0 0;-webkit-transform-origin:0 0;-webkit-transition:.45s cubic-bezier(.24,1,.3,1);transition:.45s cubic-bezier(.24,1,.3,1)}.nectar-fancy-box:hover:after{-webkit-transform:scaleX(1) translateZ(0);transform:scaleX(1) translateZ(0)}.nectar-fancy-box[data-style=default] .inner ,.nectar-fancy-box[data-style=hover_desc] .inner ,.nectar-fancy-box[data-style=paralla

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (501)
Category:	downloaded
Size (bytes):	993
Entropy (8bit):	5.296465059141274
Encrypted:	false
SSDEEP:	24:E1XXIbtEHvIYWwmqAK/HJ2cNAXzk5vuHM8aJLtMCRWZ4FhQ:E1XXmtEPT6cLAXzk5kaJL+CwYhQ
MD5:	18FA9D887502EAF3ECEBE202FF6D074B
SHA1:	A382CF931B3B48CC3C0AD837050A6A4F19A7E9B3
SHA-256:	1C24B29901701D6CCFB50D996BFE8056802B70AA71FA76F6C65E8C392B65F35E
SHA-512:	3E3D79730A10809265F382AD2589859C7EEEBDDBB6ECF231965926207E17C6DDB3A4DCC5F626EA102B1968D65BB5342282DD6329768A705D1B5335ECE7530203
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/iframe_api?ver=7.1
Preview:	var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/7ebf4817\/www-widgetapi.vflset\/www-widgetapi.js';try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptURL(scriptUrl)}catch(e){}var YT;if(!window["YT"])YT={loading:0,loaded:0};var YTConfig;if(!window["YTConfig"])YTConfig={"host":"https://www.youtube.com"};.if(!YT.loading){YT.loading=1;(function(){var l=[];YT.ready=function(f){if(YT.loaded)f();else l.push(f)};window.onYTReady=function(){YT.loaded=1;var i=0;for(;i<l.length;i++)try{l[i]()}catch(e){}};YT.setConfig=function(c){var k;for(k in c)if(c.hasOwnProperty(k))YTConfig[k]=c[k]};var a=document.createElement("script");a.type="text/javascript";a.id="www-widgetapi-script";a.src=scriptUrl;a.async=true;var c=document.currentScript;if(c){var n=c.nonce\|\|c.getAttribute("nonce");if(n)a.setAttribute("nonce",.n)}var b=document.getElementsByTagName("script")[0];b.parentNode.insertBefore(a,b)})()};.

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (59701)
Category:	downloaded
Size (bytes):	113381
Entropy (8bit):	4.921824878665509
Encrypted:	false
SSDEEP:	1536:MZeJKfZdlk2u5SOV+UQ37410kxJdPfrF3Ps:MZeJMTk2u5SOV+UQ37410kTd3Z3Ps
MD5:	51A8390B47AA0582CF2D9C96C5ADDEE2
SHA1:	B16A640874025D085C38119A1A02A3460F83F2DE
SHA-256:	98CECF88A23542FA047CE46EEDB650B5C5128761ED4386C0977B847094DDFA20
SHA-512:	711162AB43E59E0FF5F050CCA4278682194248A13EF2EE1F00AB276B6221E7A4DDDEB9645E8798E7F67A34F0001C8F63469F2B2C3E6D4E2519ADA30B6775E191
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-includes/css/dist/block-library/style.min.css?ver=6.5.2
Preview:	@charset "UTF-8";.wp-block-archives{box-sizing:border-box}.wp-block-archives-dropdown label{display:block}.wp-block-avatar{line-height:0}.wp-block-avatar,.wp-block-avatar img{box-sizing:border-box}.wp-block-avatar.aligncenter{text-align:center}.wp-block-audio{box-sizing:border-box}.wp-block-audio figcaption{margin-bottom:1em;margin-top:.5em}.wp-block-audio audio{min-width:300px;width:100%}.wp-block-button__link{box-sizing:border-box;cursor:pointer;display:inline-block;text-align:center;word-break:break-word}.wp-block-button__link.aligncenter{text-align:center}.wp-block-button__link.alignright{text-align:right}:where(.wp-block-button__link){border-radius:9999px;box-shadow:none;padding:calc(.667em + 2px) calc(1.333em + 2px);text-decoration:none}.wp-block-button[style*=text-decoration] .wp-block-button__link{text-decoration:inherit}.wp-block-buttons>.wp-block-button.has-custom-width{max-width:none}.wp-block-buttons>.wp-block-button.has-custom-width .wp-block-button__link{width:100%}.wp-bl

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	39240
Entropy (8bit):	7.994865631468202
Encrypted:	true
SSDEEP:	768:aDMkojsJsUykxUQqTBXxYUo1LZG0XyfT4jXyEDFOymOTe:OMkojf6ahR41YuyY7BOLOTe
MD5:	554334A50B9C986AA288F0E873317257
SHA1:	5AA74640C6CDF8308843D70273EC6A298E320CAA
SHA-256:	2C8BB74EED91C9C4B7FC265C4259088716AA4069886AAD426A181934C2CEC709
SHA-512:	8464F416ABE0C73E6F9C4626F933F16E8F9DDF1CA63F13413786D00903E78818A8E399AA431895E8C27A77BFF0DF7CAD02C5E3233C92EFEBFFA7BBABFED28FE6
Malicious:	false
Reputation:	low
Preview:	RIFF@...WEBPVP8 4............>Q$.E..!.%..)@..en..V..NK..<.j..~....f...?..)...o...z^._..<..~.\|.._1/`.s.'.......V..\|.~.~.{....G....oVOQ..}M...........)_.}....G............?@y....oQ..~.././.....{}......?.~......O./.....P.!...............b.I.....w..^.w.....O.....?.{#........(>...._.{.c..o._..R_..i......'._........m................C.......~.....~.......ad.W..EM."..SeH...T.Rl..6T..EM."..SeH...T.Rl..6T..EM."..SeH...T.Rl..6T..<n:..Hf]+6..r0......Qc.'.....e\|../..y.z...LN.&....@...(K.e...>..c...Y.".....y...p.R.e9O./0.p...=."."...?Xs.I.k..rN.....P..?..Y.b..DF.=&..L.P.'.=...g..d....`+.cu..o..\.m...t..v\|.X.4.....?...2D......u..F>)O..RN....1.-.3.R).^...\|.O}.vZL..R.....{2...Z....F.3.^.............R..\...hTT=N.(p...z;..>C...x1..*..s.....K..?.Dg.KV..;7o.1A_.F1..>....Iv.<.Kd..~.n.G]......yVw=...........VD.f..4.T2.W!k...e..g.\..k..C..........\|42...R.r.....~'...g....>........'G\..-.4Y..c.p..z.v[.....$.aLs..u..#>/r..w..`...;I..n.W/N.y.F..

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (682)
Category:	downloaded
Size (bytes):	327958
Entropy (8bit):	5.591298145874855
Encrypted:	false
SSDEEP:	3072:GzuOqj0CNtc8X4bxe5+kaLHX/07GFJ7CiU+tmsKupc/KCbjuloaa0Bx7zaytP6jF:mCNYkKHX/0SFAiU+oepMKC3ulJad0yh
MD5:	04285CAA68F8C66024F4F2330FED1013
SHA1:	372E6AD3EBCB0E28EB277F44D86EA34CA17A94EA
SHA-256:	EE0C4CA8A9D1BBF35389905F8A8D98C0FE6008B67EE81CE13ED03E4154608191
SHA-512:	B34FD0ECD597A39ECFD1E14AB1E5A179CE1BE8723BD1A69B50B2E0F7A6A0D3F1F94ED0DE564F7038DCCDC324D1F1FDBDC3071E2F65424463C5CC9C140A1C3352
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/7ebf4817/www-embed-player.vflset/www-embed-player.js
Preview:	(function(){'use strict';var m;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var fa=ca(this);function u(a,b){if(b)a:{var c=fa;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}}.u("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}.function c(f,g){this.h=f;ba(this,"description",{configurable:!0,writable:!0,va

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 42672, version 1.0
Category:	downloaded
Size (bytes):	42672
Entropy (8bit):	7.993551568828384
Encrypted:	true
SSDEEP:	768:pYHh9WEN+5jYuvlkL8sghJa1FQezYRRrz24Qrbfl1Qqs39bSuPTmN6NOZ5:2B9WgQjVKFQ4sIbrUB39uuKNqOZ5
MD5:	313C8623838A8F431E533AC98EBDD9AD
SHA1:	F0C53FFB6CD19E9AF37C7B60DF45C7C4E11AC796
SHA-256:	A29A97013AD393D493ACB1E33515D103C2F6A2CF6634250FAF7CC176720A6135
SHA-512:	247FAE49D012B7A710E64339FC9143D940342C03C31E8282C5FC51B1B8D9F912B583D5AB036A8D7A89EA612BD243F05C082CAFD055E744285F2F310140054DE1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/dancingscript/v25/If2RXTr6YS-zF4S-kcSWSVi_szLgiuE.woff2
Preview:	wOF2..............T....=.................................J?HVAR.u.`?STATX'...:/L.....\|..Z..v.0..T.6.$..h. ........[.<q....3..5.[.4..n..q...,M.. (F.8..... ....M2f............gx.!S.0NY%.......c.!.R#.s\..Ht."BbyM...m0.V6..L......2...nre"...&....v.J..fd.T...6w+.8e]..."..d...z..2.._............g75.4Y...p-..Up.6....j............#......O\|i.B.Z!oU.M...2:30......,.z..../:....'..L.K2W......]b...=qv.#.....r1!..<.K.Qq.b.-..+@].F."P..W.~5..b<...4E.t._.<........1..C.B!.mJ..L.k]..N.Ru.P3....).$.#.{....9Z..........?...4Kt.7......u....u...m....!!.R...).. R...vy..t./..v8.....B8$.C..r.9.H..c{.m.c.7.w..6ME.G.(..Q..I... t........J.h......(!.%.2\|1......c....x..6.6+.....?Wd.x.&..3.h`....L.o......k.[.G...]$.11:'..v7..q.N.Ls...?.x.........\...bE}H.P..q.u..J;....{..g....no..a..tJ...I..........T..;......)...5`~..,..Z..s.%.."OK..G. ..2......=..c.`..Z.......?....u...&......x.R.:.X...............]._........jv.W...O.....l...."......Y...* ]UU.....tE.y6...$!..b^~Yi

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9937)
Category:	downloaded
Size (bytes):	10114
Entropy (8bit):	5.024778031070341
Encrypted:	false
SSDEEP:	192:rcn1gNsoBeuLLE2mBrnYgfGGFTsPdQlJh1NmgKzH:rrjMunE7x/3sPd469
MD5:	E2BC91C1D4C06617208975356D06BDF6
SHA1:	9B1E91E6DE18346B34CC8ADBD87D918C82E47AFC
SHA-256:	DC50C28F1DB50DBCE579D4738A0E55001A5F954DF3307CA5D502F42202D1D05C
SHA-512:	AAD0938903B15F8F45C4C349999E2AE15608252E8A9DCD263E9884D5847628249035CC504F88386A1378514A1B0C5998AC7ED707638DE010375D01843F8303DC
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-includes/js/jquery/ui/menu.min.js?ver=1.13.2
Preview:	/!. jQuery UI Menu 1.13.2. * http://jqueryui.com. . Copyright jQuery Foundation and other contributors. * Released under the MIT license.. * http://jquery.org/license. /.!function(e){"use strict";"function"==typeof define&&define.amd?define(["jquery","./core"],e):e(jQuery)}(function(a){"use strict";return a.widget("ui.menu",{version:"1.13.2",defaultElement:"<ul>",delay:300,options:{icons:{submenu:"ui-icon-caret-1-e"},items:"> ",menus:"ul",position:{my:"left top",at:"right top"},role:"menu",blur:null,focus:null,select:null},_create:function(){this.activeMenu=this.element,this.mouseHandled=!1,this.lastMousePosition={x:null,y:null},this.element.uniqueId().attr({role:this.options.role,tabIndex:0}),this._addClass("ui-menu","ui-widget ui-widget-content"),this._on({"mousedown .ui-menu-item":function(e){e.preventDefault(),this._activateItem(e)},"click .ui-menu-item":function(e){var t=a(e.target),i=a(a.ui.safeActiveElement(this.document[0]));!this.mouseHandled&&t.not(".ui-state-disabled

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (38582), with no line terminators
Category:	downloaded
Size (bytes):	38590
Entropy (8bit):	5.294651497536075
Encrypted:	false
SSDEEP:	384:rO70wDgKuJz+ZbNuSPlVTzkRnddaJQUky7nrTDKUgigNC1Qaa3rJBFgTsVNmlio4:w0qumBs/0Xnaiwa6ssUoqAMnwtB
MD5:	92F8C01350C630F414F5D0B015AD6864
SHA1:	EAB40AB4E77F92F2FB17684AAF44B579A51B8034
SHA-256:	17B79ECE7EF9D1454A90156690D33D64387B67A7A7548FC826012512E287A937
SHA-512:	C2D619D5CBEC24AAA5DA29A80031ECE9EE65B949F38E00E75EF6EBFFA0A38B3FD3F32F271A941D3E0D1F001B90D0A30D3A9CF342E409FE3FB75AC47A3361FF9A
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
Preview:	!function(r){"use strict";var t,e,n;e={},(n=function(r){if(e[r])return e[r].exports;var o=e[r]={i:r,l:!1,exports:{}};return t[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}).m=t=[function(r,t,e){e(1),e(70),e(77),e(80),e(81),e(83),e(95),e(96),e(98),e(101),e(103),e(104),e(113),e(114),e(117),e(123),e(138),e(140),e(141),r.exports=e(142)},function(r,t,e){var n=e(2),o=e(38),a=e(62),c=e(67),i=e(69);n({target:"Array",proto:!0,arity:1,forced:e(6)((function(){return 4294967297!==[].push.call({length:4294967296},1)}))\|\|!function(){try{Object.defineProperty([],"length",{writable:!1}).push()}catch(r){return r instanceof TypeError}}()},{push:function(r){var t=o(this),e=a(t),n=arguments.length;i(e+n);for(var u=0;u<n;u++)t[e]=arguments[u],e++;return c(t,e),e}})},function(t,e,n){var o=n(3),a=n(4).f,c=n(42),i=n(46),u=n(36),f=n(54),s=n(66);t.exports=function(t,e){var n,p,l,y=t.target,h=t.global,v=t.stat,g=h?o:v?o[y]\|\|u(y,{}):o[y]&&o[y].prototype;if(g)for(n in e){if(p=e[n],l=t.dontCallGetSet?(l=a(g,n)

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (13054), with no line terminators
Category:	downloaded
Size (bytes):	13054
Entropy (8bit):	5.177767631277299
Encrypted:	false
SSDEEP:	384:I/Igki2JjSTXMpzZJ3eY+3kY+H6cqv8s+pfYm03pYToAAA:I/IgNwjSTXMpeY+3kY0dqv8s+pfYm03M
MD5:	917602D642F84A211838F0C1757C4DC1
SHA1:	392DF3FB4B0EC96CE4EBB5616E6B2A5C55A54BF8
SHA-256:	D702E5ED1E573918D912775AC1E88987FC177AA51EFE1253A08F71AB54F96516
SHA-512:	92AFC44A2405434F119E8E57732E232CDFADBDBA1948D3E89EAB596282119D14CF9707F36037B22C9DD6F3104AADECC28B9301D044842D60DD43CEA98DDBC929
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.9.3
Preview:	(()=>{"use strict";const e=e=>Math.abs(parseInt(e,10)),t=(e,t,a)=>{const n=new CustomEvent(`wpcf7${t}`,{bubbles:!0,detail:a});"string"==typeof e&&(e=document.querySelector(e)),e.dispatchEvent(n)},a=(e,a)=>{const n=new Map([["init","init"],["validation_failed","invalid"],["acceptance_missing","unaccepted"],["spam","spam"],["aborted","aborted"],["mail_sent","sent"],["mail_failed","failed"],["submitting","submitting"],["resetting","resetting"],["validating","validating"],["payment_required","payment-required"]]);n.has(a)&&(a=n.get(a)),Array.from(n.values()).includes(a)\|\|(a=`custom-${a=(a=a.replace(/[^0-9a-z]+/i," ").trim()).replace(/\s+/,"-")}`);const r=e.getAttribute("data-status");if(e.wpcf7.status=a,e.setAttribute("data-status",a),e.classList.add(a),r&&r!==a){e.classList.remove(r);const a={contactFormId:e.wpcf7.id,pluginVersion:e.wpcf7.pluginVersion,contactFormLocale:e.wpcf7.locale,unitTag:e.wpcf7.unitTag,containerPostId:e.wpcf7.containerPost,status:e.wpcf7.status,prevStatus:r};t(e,"st

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	124806
Entropy (8bit):	7.998422717252236
Encrypted:	true
SSDEEP:	3072:tLMxJY7WZx3FsDUvRME9C9TFdCC/qRb6/OzZzkieUIWsb:tLMxJYCZ5e2R99mBWRe/OzZzmUTsb
MD5:	044A4CE894DBEAB310F688E7301BC8CE
SHA1:	4EC4C96532FB98148CCA34EEBCFE03100626F3B0
SHA-256:	76980960BA9A93D95BEE0468EEEEE7525A65BBE600B0D141FB3098F1293BE008
SHA-512:	154343D0C15E20C2DAC9DC408F6B66F0787253B218403FDD6C2D46AF3B6DE441DD1017DEF6C2086555A4EF0BB91220AB8DEAE7979EFB9C29F0A81F73C7EC2079
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-content/uploads/2018/10/testimonial.jpg
Preview:	RIFF~...WEBPVP8X........?....VP8 ....p....@.+.>Q(.F#....r.....gnn.....W..-.F.;.G............n..G.....j..tX.P.....~W~..).Q.;F.}o..<.........w...............g./.........\|.}<.....'.+....._.C.?H...m.......7./........>..._.......K..w...../.}.=..+.G.%...oA..?..O.......~.......~......7./.....q...............z?.........7...!.1.y.?....J..7.........8?e......o........4...A..Fz......Y..x..V....kP.3.................Y.....,..Ce.{,.\.+.u.,...N..../......A...Nic...R/..0vg.)P..l#=..}O"...T3.......J._.....N.eFj..H....J..X/.x*.....g.....e.w.R..4..8=5P..J.........((...r.g..Rr...L.:}.HBsyP.9..B..Fg..p.x.YVV7..r...bk......./....9E...g.).^...7.A._~.'...jd..F..A.C...a..3.%...........l..]..c.?\|9/.y..2.BG^.sN.:.qh~............9(.D.o.S..U..!..,.......Pe...:.........../;A}d......L.d....\|... .i..<.$.qIK..b^..j..2.a..&.....#...:.49Q.SY/..q0?..P....}..<KN.y....X.1].p93..[.(.....-\|...Q...}..In%..i.#...-...Y...\.F....q..m\|p..b.^..(.8.{......s..y..z..`.` .h%V...fX..

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	567778
Entropy (8bit):	7.999655164248096
Encrypted:	true
SSDEEP:	12288:W0dVfy3dW2hO87dQXb6appoix28eUcXpbx7eDTg3xm:MtLKXbPo3UcZl2+M
MD5:	78957DF4C4DBB4027553D0F1E49C0624
SHA1:	BD0888BEAC96137608EAB9F00344F9DD375E6F70
SHA-256:	3A58B975815B5C4AD0D1A3E6DE6847F6D96F120F005746B4CBE8677DE0B194F3
SHA-512:	D41FCEC34546127C24B6FB9E785FDA52B7D571D88B7FB43AD19CA7B58E78BC42AFF3CCDC8BBD59383CFB8F03B9E0F84A667203135C2541CA54C271F5F167A357
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-content/uploads/2018/10/ko.jpg
Preview:	RIFF...WEBPVP8X........?..;..VP8 6...po...@.<.>E..D".....$(.D...........n.....~{......>c.?...w........o`...X.......s.......s=...~....;....._.o..............;.........z.....g....n....u.w.....?..d....~......_.?V.'.../._..>..........'.................?..?............................#...g.?....a.}..x...S.o.../.?Q.............{...?....D...s.......?....2...7.7.o.?...............z......_....`?......A.....o..............W......J.5...7._.....A...q...7.G.....................................?..CK.R...8ik...l.....}.?..Z#AQ......[gy...k.Z..... p..z..6...~J_E~c.......u..M.A./..`...?...s...Q\:../<f!2......3w.#.....G3f.....dp.........L....h..imHK.n......d.\~.r."2.\.......lH..IU..F?.....F/,...t...L./..E.p:.<.%.,_.....p.....y.t....g.A..v...U.W\|.P.Jt.I..M..+D.Tz......Goat.....=8s5..X.....w.e.Q.8.;5p...~.Y.9)F../.."....~..$\|..ce......usZ.\..z.<...VI.H.O.k{.y.R.........o..EQ..... ...U.2w....6.1].^...@G.....h)..[*.~oP...Y\.yX....x.b@.R~.\0+wj(8.Jb].{..F........u.?F.

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	1254074
Entropy (8bit):	7.999139331801718
Encrypted:	true
SSDEEP:	24576:rMb6qc8WYvVlSy/yv4CEgpTy6es58W//WvOB+CmtCiZWaIHAl1oBLVSRUvx:ryvc8WFy/yv4Bgp37XYdBLWaIgl1oJVx
MD5:	8E50146146B0E622D6EF07D867A9F1A5
SHA1:	BE8D999A6C0605AD9FBF0B5E98E2E66D597AF1A6
SHA-256:	9272BB6896D5C1C4815CF7B3CE9A5A4558CA64B2DD385BACFF6C9356DDA201A2
SHA-512:	574CA01B687C16B1B054327E2D6429CA107517ED55B27773BF291AA53F431502DD5F7CD302E7F4D6F8E1CD3B0318D0121A9B190B8AD3B6BB55CAEE23D7157814
Malicious:	false
Reputation:	low
Preview:	:....1....wAD9uO9YAQw... ......0..(j...........p..L........Tmoof....mfhd...........<traf....tfhd....................tfdt......^.....trun...........\..~\|......9 ...............C...............-.......................................................................................................................W...............8..............................................................................$........R...............n.......................................................I...............d.......~...............................................Q...............P.......K..............^........<......................................y.......C,...............................................`...............0.......................................................................{......o&.......................0...............X.......................................................................................................................................f....................

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (372)
Category:	downloaded
Size (bytes):	36925
Entropy (8bit):	4.818577996442379
Encrypted:	false
SSDEEP:	768:mpMtI+A4CSIDqvnI+YTBrFPvVrJjhiRAiiE7:mytI+A4GDUI+Y9rpVljhiIE7
MD5:	45EB6ABEE2991F8F270E61FFC448EFDF
SHA1:	5CAFEBED10AC12FFA836C595218FD317B7F61F73
SHA-256:	DDB31822D0A99CE7B4370F5FBAE25ED76D0D58A9F8F9B0912CC1FC8156D1E7E4
SHA-512:	CE0068384C3F8CCE37D06B233E3180BA366819F159B28490A101D16F874A0DCF3024D20962C3A44F6A94CAE1979D04E1609E3A259AF593BFEC284268397399E0
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-content/plugins/revslider6620n-1/public/assets/fonts/font-awesome/css/font-awesome.css
Preview:	/!. Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome. * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License). /./ FONT PATH. * -------------------------- /.@font-face {. font-family: 'FontAwesome';. src: url('../fonts/fontawesome-webfont.eot?v=4.7.0');. src: url('../fonts/fontawesome-webfont.eot?#iefix&v=4.7.0') format('embedded-opentype'), url('../fonts/fontawesome-webfont.woff2?v=4.7.0') format('woff2'), url('../fonts/fontawesome-webfont.woff?v=4.7.0') format('woff'), url('../fonts/fontawesome-webfont.ttf?v=4.7.0') format('truetype'), url('../fonts/fontawesome-webfont.svg?v=4.7.0#fontawesomeregular') format('svg');. font-weight: normal;. font-style: normal;. font-display: swap;.}../ makes the font 33% larger relative to the icon container */..fa-lg {. font-size: 1.33333333em;. line-height: 0.75em;. vertical-align: -15%;.}..fa-2x {. font-size: 2em;.}..fa-3x {. font-size: 3em;.}..fa-4x {. font-size: 4em;.}..fa-5x {.

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2894
Entropy (8bit):	5.130108035080603
Encrypted:	false
SSDEEP:	48:HrjSTxswDB/P7LUS0BvpKkR2/HSXmpgMPnfFrYHe1rcYlX3orrkdEv4Hm6Hid:HC+2/Vpb/flue1pFdEv4Hmo0
MD5:	3FD2AFA98866679439097F4AB102FE0A
SHA1:	DBC9C4139E49D0D9FB41B7191AAD1A2DB6C555FD
SHA-256:	CCD31FFA708D025833F954B3E0560CEDD58DF9A0D2706B2CCEE5F501C5B2467B
SHA-512:	82811EF42ABD80CBEBD4A74D35475FC3871478FC25A486B08BB7E04921B7824DB56C56B2191E9AB56A421552B483A2E64F966396711E5F248AFAE9D1DED22CB2
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.9.3
Preview:	.wpcf7 .screen-reader-response {..position: absolute;..overflow: hidden;..clip: rect(1px, 1px, 1px, 1px);..clip-path: inset(50%);..height: 1px;..width: 1px;..margin: -1px;..padding: 0;..border: 0;..word-wrap: normal !important;.}...wpcf7 form .wpcf7-response-output {..margin: 2em 0.5em 1em;..padding: 0.2em 1em;..border: 2px solid #00a0d2; /* Blue /.}...wpcf7 form.init .wpcf7-response-output,..wpcf7 form.resetting .wpcf7-response-output,..wpcf7 form.submitting .wpcf7-response-output {..display: none;.}...wpcf7 form.sent .wpcf7-response-output {..border-color: #46b450; / Green /.}...wpcf7 form.failed .wpcf7-response-output,..wpcf7 form.aborted .wpcf7-response-output {..border-color: #dc3232; / Red /.}...wpcf7 form.spam .wpcf7-response-output {..border-color: #f56e28; / Orange /.}...wpcf7 form.invalid .wpcf7-response-output,..wpcf7 form.unaccepted .wpcf7-response-output,..wpcf7 form.payment-required .wpcf7-response-output {..border-color: #ffb900; / Yellow */.}...wpcf7-form-contro

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	277976
Entropy (8bit):	7.994106410625166
Encrypted:	true
SSDEEP:	6144:8KJLTRQLp/luTj1sqEjxJc5dJvSNCFdjfihjjIy7++JY0e5zqAfE:52JM9NEjY5zyCFdLEl7Fe0az/E
MD5:	CCF498A5C761657156A9DD1CF6BFEF0B
SHA1:	0A863CEF54A3AE35EA51F3E958F37FE164FE34CD
SHA-256:	15A68E984A3EB004D29F1BF710E36CB0947F592BCD809AF43E2331DAC843A10E
SHA-512:	723090FC3119D24980BC19AA15575C7C99356E8484B47209D6CAB75275ED8E5C5CC6B2BC28F7C61D6494A3AF6F263ACE13C930D5E29F19190E94B4CED68B5970
Malicious:	false
Reputation:	low
Preview:	:....1....wAD9uO9YAQw... ........0...j.............p......!...f...j....-.X,B..'.ZJ.>./=K...S\|g........Y......?u...Y.x..UH.Mh.\...F.....L.....,x..-vm.S.i.a...Nf=IR......B.x..FP....p.R27 .Y..]-......A-.......}.........(.....@F5.web...K2T.?...1..9.&.i.,....YJ.=..%.M.~..D..T.\|.....oi...S8N.\..\...."tw..u..6."...I.v3.4..:1..$.H..KS.}..&Q....."./P~.z...d..!i.. ,.......V)..z...._.D.N.....PE...Z.~..3.].EZ..@..7.....z~.(.p......n..o"/...T.D.7..Fa.S..X....h...A...K.~o...(...o]q...]!...Z..a...A)......dk.:.^+$.a2Y/....?a.b9..K....,....."r..(..T...;...>C._...V.......&..h../4...3T3.../N...Y%(....["D...k.@...\km.,..e.h....H.Z4&.2.r)..G4..r}....a..w.^..PHx....<<.......b....#..................O..3.'..e.<. .M......U.f.-.8..i.n..z..)D#.?c.-..\|{...e.... .......\|.bf.AwN7o...7.].Bo.....{.9..eF.^..$.!.s.!L...If...F.)U...k..6....v.......a..h1.z...L.b..)..X[LN.....j.4_?.....f...r`[i`..Gx7][V8..'......C.!.~.B.R.".b6_..VnC`.A....9.j.&*...~.P<%?.,.@............

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	34352
Entropy (8bit):	7.993054420366631
Encrypted:	true
SSDEEP:	768:Z/gOYBHBqqGAPrjuLsh1OksYunxkA8yUT1gwpPhEAu:1gTBnGAPrjNsYuxkTg66Au
MD5:	55B1C2E7B3E972A35803B0744652E118
SHA1:	D8B8029E64F7D8A7B3C6C4792C184715FFFAB1C5
SHA-256:	603F2CE2551442E4201B23CD7BA337745FCC20EF02E79A45914AEF195D2EAADA
SHA-512:	2B9F89B4B82768AF8065AADB4EB0CC3391D16C9382ADA4EE84DC2CDCEA4087BF83A19173296AA755038CC8A6A6ABFCB92C94E7F4517C0A088EA258FA3C7F1AA8
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-content/uploads/2018/10/ganga-1.jpg
Preview:	RIFF(...WEBPVP8X........W.....VP8 .........X...>Q&.E..!$&..@...M,..s..`~.\|%.9.].<........6_!.L.%..uv..F.P...7.#......../^..tW.o..?........W.........{....+.?./.G...o.s.......R.S.....W.....>..._..x.x..\|..v.....-.............S....<.......@..g.......s....w...'.N..Z...W.G..?..y...&............~U..~o..g.....c...........?......M.-...?...?q...E...W.7.......~W\|....g.............'...E..Ds...tQ;.....Y...T.....L..?.......-...W..p6..iH#..!.4.Us.%....;..4..6..l.aw.3...;T.>.F.\.-..T...k..Q.0.<....$...].rI9.#..SIw.Jn..b........;.G>..Q.z...ae.:d.*q.dG^.&.hO....p.nNv.jF7[..>R.=l.2.....N....x.o.[........5d.\|?A....W....Pc..4...Y....,.......$....ic.w%R...GH.%....$...?......0..3a.....z\..x.SM[.,e.<.Pq!.q....].q#[..6.h...84....c..Y.J'.W..\.j...2.....{.k...e.vd..$-.+.9.e....m........y7:....`GMoo..P.#Z..`.\....FG....../.0.........\...c....K......T. .igA..".FRS(o.UEs....bW.{Wqx.S......i;.{.....D..g.HU.b.#..?pX^0C..!=..9p..EWzhV\|.e.u.`.})...Y.e...._.5l.(..K

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 600x400, components 3
Category:	dropped
Size (bytes):	87629
Entropy (8bit):	7.97656778297731
Encrypted:	false
SSDEEP:	1536:Yc6nAMJrWyNqkaF28K6CF+x6NYTRMmSF01rUbLOcvmrIUTNL2R0BoSnoRAcUIW:R6AGE+F4lTaM1r3cvmrIh6nt51
MD5:	0AA16E31C11C1DBA2548BADCA6699F60
SHA1:	AD37ECFEDE2C97FB6D93C12885FD9C1AC72DB900
SHA-256:	5B193A8695F0F15AE2B7B81846C5F9886D61E44906E54F7CF332528F6084D094
SHA-512:	4F25CF22B80704CB90CE01948BCC55FFBB43210566AF35D907C61D7EC354EF509CEFBBE8EBFF54BC3A4F6E0254E096A68CFC06E4505E62294540C0E4610A56B7
Malicious:	false
Reputation:	low
Preview:	......Exif..II...........................J...........R...(...........i.......Z.......H.......H.................X......................C..............................................!........."$".$.......C.........................................................................X..".........................................F.........................!1.A."Qa..2q...#BR..3b....$....CSr.%4c.'5.................................9........................!1A..."Qaq.......2....#BR3S.Cb.............?.......}1.[.n...6.~.oN.....$_`;.r.kZ.......o...%...I....;.yv$^......8l.......,..X. ....nl}.0...x....9.XUK..7......k.....JZR..?.:.7.....^..&...T..M...Jl..V...}...,h.7.'..Q...o.. 5.T.}1..'"..=0J.1p..G...olM.6`{...:&.H...#.G.l..d..U6...-....mB.Y...2?.'.Xibf.j<.1....?xJ..:.uh6a....8(;s.-$9ip...G.+..<.pq*.%.@......I..q.....VCqko..#.F...N...R. 8.......0..,....@...$S...+....4..I.........L2....t>a....-,H.......#...Z].,..8.o{..._...{a.%4..[.9..8.^...alX.C............r...r5..#E..M.-~o.p...

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1604
Entropy (8bit):	5.268027136303121
Encrypted:	false
SSDEEP:	24:hY6sv7zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5zF5cUeh3:3q3+pUAew85zvc/h3
MD5:	DC116BFBFD7B5EF441DA8062F5C02169
SHA1:	0AE353B9604CF429F5C69530333E0C44B5E837DE
SHA-256:	295EB26CB69D6F217D4323D4492C2668123E325A3F47403E38294913FD7A206D
SHA-512:	56D00FD44F67A5B62D914926EE8254F391F8BB3FA90D380632492B14F0ECF43331EEB22405667A5BED05A665AB8219534C0F2CEB62FFB711C433C5BA982FBAD8
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 405 (Method Not Allowed)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:u

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15752)
Category:	downloaded
Size (bytes):	18726
Entropy (8bit):	4.756109283632968
Encrypted:	false
SSDEEP:	384:WTbvzWuPTb9Uh3o//bEPjXgA2k1efAJmpr:WX6U9Uh3o//YrXgAGfACr
MD5:	B976B651932BFD25B9DDB5B7693D88A7
SHA1:	7FCB7CB5C11227F9213B1E08A07D0212209E1432
SHA-256:	4E6CE5444C7F396CEF0EB1FA3611034151E485DD06FBE5573A5583E1EEBC98C3
SHA-512:	A241EBDCFAF153D5C2A86761145B2575CBE734B4F416ACBFAC082AE5C6EB7C706BD6CA3BC286B7E1A0F9E326729252DCB95B776750C4A3A0D81F2AA6258EA39F
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-includes/js/wp-emoji-release.min.js?ver=6.5.2
Preview:	/! This file is auto-generated /.// Source: wp-includes/js/twemoji.min.js.var twemoji=function(){"use strict";var h={base:"https://cdn.jsdelivr.net/gh/jdecked/twemoji@15.0.3/assets/",ext:".png",size:"72x72",className:"emoji",convert:{fromCodePoint:function(d){d="string"==typeof d?parseInt(d,16):d;if(d<65536)return e(d);return e(55296+((d-=65536)>>10),56320+(1023&d))},toCodePoint:o},onerror:function(){this.parentNode&&this.parentNode.replaceChild(x(this.alt,!1),this)},parse:function(d,u){u&&"function"!=typeof u\|\|(u={callback:u});return h.doNotParse=u.doNotParse,("string"==typeof d?function(d,a){return n(d,function(d){var u,f,c=d,e=N(d),b=a.callback(e,a);if(e&&b){for(f in c="<img ".concat('class="',a.className,'" ','draggable="false" ','alt="',d,'"',' src="',b,'"'),u=a.attributes(d,e))u.hasOwnProperty(f)&&0!==f.indexOf("on")&&-1===c.indexOf(" "+f+"=")&&(c=c.concat(" ",f,'="',u[f].replace(t,r),'"'));c=c.concat("/>")}return c})}:function(d,u){var f,c,e,b,a,t,r,n,o,s,i,l=function d(u,f){v

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (555)
Category:	downloaded
Size (bytes):	2541942
Entropy (8bit):	5.661994653691614
Encrypted:	false
SSDEEP:	49152:pQtmJGhwng3ERelvF8D1SzIbfYsDY2A+b3W4UFGFVq9:NFrlFU
MD5:	A313E336BF114BBDD177631DD91BFDE0
SHA1:	0FFBAF2E82DD663B99A57AE0F480E9B337FB3B91
SHA-256:	2A37BF65D22180399B97261EC096F8CB8E63C9CBB661FEE1FF29318DF87D0BF6
SHA-512:	9971F3492DBC72FD9EDAF28E47CCB345A57076888500358D35E68C436DB45BD78C141986425944BEB9CD845087C2137EC5DA0138EE8D87E6500CD1366C30941C
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/7ebf4817/player_ias.vflset/en_US/base.js
Preview:	var _yt_player={};(function(g){var window=this;/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././*.. (The MIT License).. Copyright (C) 2014 by Vitaly Puzrin.. Permission is hereby granted, free of charge, to any person obtaining a copy. of this software and associated documentation files (the "Software"), to deal. in the Software without restriction, including without limitation the rights. to use, copy, modify, merge, publish, distribute, sublicense, and/or sell. copies of the Software, and to permit persons to whom the Software is. furnished to do so, subject to the following conditions:.. The above copyright notice and this permission notice shall be included in. all copies or substantial portions of the Software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR. IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,. FITNESS FOR A PARTICULAR PURPOSE AND NONIN

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	557419
Entropy (8bit):	7.994256369909578
Encrypted:	true
SSDEEP:	12288:RAuzTd3RzyahN+3PRVSr+6d9h8FNIYvldp9vip3fm/klMiljecA2X9oULl4:R93tyahNSAKkhiKp31lMixA2XZl4
MD5:	B44FD8F325D20A272A9D14D47F74DE40
SHA1:	89867C2C4464097CD191A34C76ED8C09C7CA2CD5
SHA-256:	E39008CC8199C293BC14CE700904B279F298EA7F3896833CA207602F442102EB
SHA-512:	E62FD3F0153944AE2EBF05511A0643409E7101F95D3ECFB8627DCF977B96D7713DD40AF6642C98AA40FD5734B09936B5B4E9360262C3F0030DA7DF021E1B11D8
Malicious:	false
Reputation:	low
Preview:	:....1....wAD9uO9YAQw... ........0."j.............p.."...D..C.u"...u1.BW.....z..:^v".Hez9k.Vf..{#.3..lmD..t..... .j.>F.K...t&..gK.']..H./..\3#S.@..T.I..T[.RT.Y...f...$$...m.\....-.+bQ-.#h....=W..^3<..0. TN:..G..$.A...H\........p.......:px1Fk6O....]KD.l...w.....%,k....l.;....U.Xqe:.Z.......@g..i..f..">.t".-I.....A.k.&..T.&<_....!.x..?.".v.....V..wk.c..JB2../....%.$..?D..I..8...Gz^....I.....v..Rz)..4.2.H......-s......A4....m]ai.>+.`h:.... .PV...E.i.x.r..?......M......g~N... .="..P.$\(...h../T...l..\|.......J......~.v..8g.$..k...(1W.XHH.[...[l2...X.5.u0<U..".%..[..-.'.....U..~...K....."L..e.tGe..A..,.....$.!..foax.....i...Y.......j.y.+..B{......V..x.)...f.-.O..3...u...l..v... ....;..,L.E.../..8.o......+..",N.K.`.`c[.!.. + .. ..;..@..L0./(s..Je%.&1.?zny...7.XU>sZ.z.O....y.J......>....+v...,.8..]...C.........j.o..1..P..9....9....Vva...'..z.?..n.k...Pp.&F..t.Dm....n.%..y.m..v........Q..+....m..*D.............H.v..d..s2:......B.8.js.. ....t'7.;.

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	80594
Entropy (8bit):	7.99734866352568
Encrypted:	true
SSDEEP:	1536:jFY/Mr5rmoFlWLVD6TcScCjdY5ZRxSv62+rLWVmSR19CO+D4hOKImX/:m/MNjFlV3cg07S8rLgB79COTOhmX/
MD5:	D965BBA5010BCEA95034A8D26846B0AA
SHA1:	60A28C033D02E40096FA8A7A362EB5A8A86B8352
SHA-256:	D2BB4314A7374825EA83C92F8EAC4B077D6D63B5BC4D228F8AE52FFD0631C901
SHA-512:	69317B98E5C25AF41C7D5CAC2BA0975CAB254BE54012245159FD462FA65167F33D1CD1F61FC52FF2FB63566195DCD16905992FC36CC0F3C66A09AED4978A77F1
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-content/uploads/2018/10/4-1.jpg
Preview:	RIFF.:..WEBPVP8X........W.....VP8 &:...U...X...>I..D"....}. ...fn......"$#..v.<>s.?.u..........h..=.......>................\|..O.Y.W.....?.?@.........o.......?.?u?...d.....'...o..o..................g..l..?............/.o......?s?..........'.......?.......?.?.ug..o....9...?....q...s...?.y..0............{E........A.(.+...o..? .../.......?.........w.D........p_X.y.......?.=.?..C.'..?....I.i.........?........O.7.O.......A.....g.....?s~......c.w.........).........................._.......?.\|-~....Y.E@o<R(\|.....0.g.....a......m.w.s...uexC.ey.5K.....1+..... T..lX.i.r..@qo...../..@e....(..^I.m.v.c.r..-.........P...^../.k]s...[..D.....e...;j2..N..._a}.U?..............9.R...MM..i..aB..7.5l..Au.ET.V.G.....^..{..b.8......B.E... ..."[.Y0_O.O?..~b...\|......N.`n..y.@.+vmp.'3...y..(..:'V.H.......oI..a..k8.f....{hw.....T6..........L..-.....BVv?.\87.k..O.(S%....P.z.9..k.t.^.....!....";..?...9._w...N5....?.G3...S.Ql.....//2....a...5o.Q...?.....)..g..A...MQ.p.g.o.G.;k.l..Rt.i

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1609
Entropy (8bit):	5.268171846580519
Encrypted:	false
SSDEEP:	24:hY6sv7zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5zF5cUehk2:3q3+pUAew85zvc/hk2
MD5:	20D444971B8254AC39C8145D99D6CA4C
SHA1:	72E41F2A340F4A6E3A748CB57D293631390B733A
SHA-256:	A04F41837D317573EA61EA29ABBA7C4FF4E38C9177DA68F4706B9C13921A8D82
SHA-512:	BEA16497D014481EE10EB80A129846B7B184AB1ECA242FA38B84255C6461C748A62F1BD6C15D1807F8B5E926E550C30AB47F8A40AE43BE229E6AB857C4EA6F6F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 405 (Method Not Allowed)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:u

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 600x400, components 3
Category:	dropped
Size (bytes):	84259
Entropy (8bit):	7.9615257917309465
Encrypted:	false
SSDEEP:	1536:U4hkZfrlmxIiiKQtlWIMoDUU0jzY6Kt2c6FRkO7G0QmC:UCk7o6KIlW+DUj+ukYG04
MD5:	D5EC148DCEB6C1EF24265037E6013C3D
SHA1:	9144F22A9CC480977DB22C376D2C9B9E4412A09D
SHA-256:	284A8844FD8610D8BAA9DB8A3958E3E98094350E2B96EA0B1CFCCB80D5722B03
SHA-512:	6CDD692ACB045A55796A3D6981EF17F6BA790CDB4E4147FDFE78BB8CCDC70CA37CEA7266DD7313D083685A38F66284749F31B929C8157043E7E2536355C5CAF0
Malicious:	false
Reputation:	low
Preview:	......Exif..II...........................J...........R...(...........i.......Z.......H.......H.................X......................C..............................................!........."$".$.......C.........................................................................X..".........................................E.........................!.1A.Q.."aq2.#B...R....3b.$r....%C.Sc&4Dd.................................7........................!1A..Q"aq....2...#....BR.3$Sr............?...2...i@...:kKS.K......r..J63..q..#..:....@..C.?.-..{.$.......C...@}...:.c.:f....ix..s.a...... ..(......2.o........eb...Ys.<h...^....[S.rNt...?.[m..:.+tw....x:e..n8..<..s.<tX0.=.......P.\X..:......pu..n4..}g...l.L...iP.8..9.n2P....l...'Zw....N24\....<..:.,<k3.8.T....Z..8.@.ymq$.x..j.J-...0..)..L".....:q..d...%K.q...i.2N..Uw......0.1...8.I.....O.Dk.9...J..?.OF-.......}......9:.'......i.C`.c.m9.TR..%.W%...l.F.~.O.....,...'.C.....R[..R......AA....{....iQ..D...qS77.?-*.F.

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	304652
Entropy (8bit):	7.999408132228232
Encrypted:	true
SSDEEP:	6144:HR62SzP3tSKyTC6kOz+mGzRF5OqXMkRCJ9EQAP0sWMDxA+hZVX8e:H82q3tSKyvRzALsqNm9E9HW0nhb7
MD5:	5913E24BA30A13386A4D7FBF31DA19D4
SHA1:	2D5622D44FD84FB67D89B225878A47986591354E
SHA-256:	ACAF902B5C0212A185C07F612C5C16A02A1AD4DA463753E832B8FA74C369DB16
SHA-512:	67B20CC93EF3FFB0F11895C0A9B1C5915CE6F8A96092C291796652D4D5EA96F875678EAF9F1946E1324B30DC61D9F6B5AF5D815633786ABD75EA1A6E43E082F1
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-content/uploads/2018/10/bg1-1.jpg
Preview:	RIFF....WEBPVP8X........?..g..VP8 `...p....@.h.>Q".D..!!+.kPp..cn..('.?}..W`...O.y.y.]..<.\|....t.W..7..........s..T...[........s....>....=........K.s.....o.~.................o._...>..x.............;...g...?.?.}.?..s....._..I?:.{.?.~?........./.O....7.....7......`...1.......~#.-.....O'.M...k...G............._....................zc}....>..........O....h}..../..................G.......\|.~.~.v...<X....C.jf-.K..[._.9.i..l...<.#.V...K.S.^.4..M.._v.BI8.....^..-....ew..9......0.w.s[[HJ..4\.V.....~._~c...YtD9....%pcZ63...J..O...R9:...#.9R.M..-.5....oy.'[m.%c.X`R...nMR..+..B@........%...#M.*B....z .V.E3..Y&iD.a;.AQ..")..kihq0B..=..:...h.......L\|..`9}.+.e.]....uW...:+..V.wf...7..N\|u....8..5....n....0';...S.q.3. >.H?../.Q........[{I~.H\......Y.....!U..a{..R.F3..w..b......\o.%D....&...X._..W..Q...0!j....+..E.zb....OL..r.`..I..q.c...:lb`..g..m~=... .....u6.2.Q.R<..R.;.\..7$.,.s.>B....+....7M.$.w...V...3O..n....n@.m..cL.$K\|..zZ......{W.x.........S...J....j....

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 21912, version 1.0
Category:	downloaded
Size (bytes):	21912
Entropy (8bit):	6.481892660618966
Encrypted:	false
SSDEEP:	384:Bm+sn/05DNN6jdhvdMChAtJ06rdexsBcX9XkpC7AqxLrIAqKXOd5:c+sn/2NN6jXmChJ6QxwpC7bxnIAfA
MD5:	907BC7D21FDC1B3045D824DDD359DB8E
SHA1:	BB9CA1CFA43EA8DADD221B4428014D3B350E5E6A
SHA-256:	253DA3174FD517B8B572319807F488B09D2D8C73F0A654361B493FD6B72CC3B1
SHA-512:	9C42F7BDF90E17AED54F555FC27D6D25B9559E5D45E84F6EF2226F6A2F2558F0B802C7898EF5EA7A1718A9B9948251F6B9AA6F0D89F94AFD46ABAC59DE1B5E81
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-content/themes/salient/css/fonts/icomoon.woff?v=1.6
Preview:	wOFF......U.......UL........................OS/2.......`...`....cmap...h...<...<pai.gasp................glyf......N...N.7}..head..QH...6...6%V.Ihhea..Q....$...$...fhmtx..Q....p...pZ...loca..S.........%E..maxp..S.... ... ...Xname..S..........J..post..Ux... ... ...............................3...................................@........@...@............... ................................. ...D.@....... .........$.4.6.R.V.g.t.v............... ...........>.V.X............ .........#.4.6.P.T.g.t.v............... ...........>.U.X........... . . ............................#.........-.;.O.I.......H................................................................................................79..................79..................79...........+.......7....'...+......+....+......+.....................7'.....+......+./.+......+./..............&.C..%'>.54'..'&#"............32670.1..6?.64.47>.7632............#"'..'&5..... nJJTTJJn nJJT9i-....d..q..S88?@78T....T87@?88S..^.-i9TJJn nJJTT

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (745)
Category:	downloaded
Size (bytes):	26583
Entropy (8bit):	4.801142969566439
Encrypted:	false
SSDEEP:	768:WKiitGHBpfOiaCKaUGia7tyIADu8vVeTUVEMm7BGBS:TtEJz5Zy/Du8vY3
MD5:	7493AC7B2815C1B0DB6EC26A2080B625
SHA1:	35B090889DB267C357C08A2BD28F4A9FC199D796
SHA-256:	AF6AAD45DFEA3DAD21AE2D7D9B2B44E7EE84EC9B9DF016489EC4F003EDF1314F
SHA-512:	0EAC8F30EAFDF236CA0D8E96599CE6DAE7A99EB4E48AEAFBCB2E9DD0A239AA8AAC7145FFCF32719E90E0D505C5BCCC89F4EB6B367AF49DB3ADFBCA0C9983A9A3
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-content/plugins/js_composer_salient/assets/js/dist/js_composer_front.min.js?ver=7.1
Preview:	/!. WPBakery Page Builder v6.0.0 (https://wpbakery.com). * Copyright 2011-2021 Michael M, WPBakery. * License: Commercial. More details: http://go.wpbakery.com/licensing. /..// jscs:disable.// jshint ignore: start..(function($) {. "function" != typeof window.vc_js && (window.vc_js = function() {. / nectar addition /. vc_rowBehaviour();. }), "function" != typeof window.vc_plugin_flexslider && (window.vc_plugin_flexslider = function($parent) {. ($parent ? $parent.find(".wpb_flexslider") : jQuery(".wpb_flexslider")).each(function() {. var this_element = jQuery(this),. sliderTimeout = 1e3 parseInt(this_element.attr("data-interval"), 10),. sliderFx = this_element.attr("data-flex_fx"),. slideshow = 0 == sliderTimeout ? !1 : !0;. this_element.is(":visible") && this_element.flexslider({. animation: sliderFx,. slideshow: slideshow,. slideshowSpeed: s

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 600x400, components 3
Category:	dropped
Size (bytes):	42842
Entropy (8bit):	7.957086389069286
Encrypted:	false
SSDEEP:	768:pH2Oox5TM2GYXmcZ0gBemQmj+m0dKejVmOw3Hqr7aYTWSECoPp/3HDDAVky:pWbx5Tz2DopgKWmOw3HaaYTWSECoPV3y
MD5:	BDC45A7F050A282BAA786C6DC022DBFD
SHA1:	79F7DED12CF7F227170D70BAF8584A5C44D6AA78
SHA-256:	B9CE36C7724C79320207D10FE0F37E5DC4C696FD4ABED80D0F51DFDC261E1593
SHA-512:	877C8F7310DBC3E79931F9FD181DF24AAC817742DC0538155175182BC4B583DD0BE0613E0F6BF8915BA74AA3D0F9B7FDBB114AC44CAA74F94AC37FEC92BAFCFF
Malicious:	false
Reputation:	low
Preview:	......Exif..II...........................J...........R...(...........i.......Z.......H.......H.................X......................C..............................................!........."$".$.......C.........................................................................X.."........................................F.......................!.1..AQ."aq....2B...#R.b.....$r.3C....Sc%4T..................................7........................!1AQ..aq....."...#2...$B3R.r.............?..&.....U.J%..x.P..5.V..q.m..=....?P.U.]..C.yf..4...@=>.Sc..Hb`R...)....S....z..n6....Zq.@.7.......m.....I...Du..D...../.Fbg..Hn2'. .';S..a?.(.s4...K.JsQN.1....Ab[z.JpDI....)..h......3...h....\|.OQO3.....H..3.}).G.g..~.....9.4...?.H...1Ng..lR.......Zq..qM0w.(.A.L...h...d...8.3.QQ...u. .(.D..r@.T[.""........'..M$.'...Z`..`.....DE9;g.....Syf`...s@"..@..;b.1<....T.8$.I.!...C[`..t3S.9.$u..0..2f;.7.I...^vfj...?.b.L.3...'...O...Ze.;.....1.....3.). ..j."w...q....L..z.........06..H...SH.

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15860, version 1.0
Category:	downloaded
Size (bytes):	15860
Entropy (8bit):	7.988022700476719
Encrypted:	false
SSDEEP:	384:S7qmPTF4N21t//YW2FS6+1XxrsbGmjlAbvqMmtCN:S621tHY4xwbGmjloSM7N
MD5:	E9F5AAF547F165386CD313B995DDDD8E
SHA1:	ACDEF5603C2387B0E5BFFD744B679A24A8BC1968
SHA-256:	F5AEBDFEA35D1E7656EF4ACC5DB1F243209755AE3300943EF8FC6280F363C860
SHA-512:	2A71EDB5490F286642A874D52A1969F54282BC43CB24E8D5A297E13B320321FB7B7AF5524EAC609CF5F95EE08D5E4EC5803E2A3C8D13C09F6CC38713C665D0CE
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
Preview:	wOF2......=...........=..........................d.....^.`.. .H..<........8........6.$.... ..~. ..)..~E......6..J..`.. :.....8.;..5......!.l.j.%SX.SDm...RXh...&.X......5..._...............@...8...Gi..g.;9..'.Q......1..5.U.....w.+.hn..........c.....5.#{..%.#.JP..i.J..U(.6.D5V.<"Ex6"...k..[..{.?.d2....{.........W.......S...hT,.l..'.9.;[@..._.L..\|+...)......S...9F......T..t...-=X.:FtZ..uZ.[.?..f<.....@.....'...I...e..........8.?..-R.3,%X...I2\|.Wk{i...V2C....H$.H.LH.{.........(...6U..%W[t.R....j.........iS..%..L....rf.=..7..9i.I...1.Mj..C..u.B.........vJ.....+.u$.=..3..T..R.._.gs...6).$.-.PUH..Hl....WDd.......fK.(B.F1>..5.._[..]}VA#X...c.....%.(s50...m...^...1...'.$U*H.t...H...s.AZu...'...8.p...@.@.....q..Y.#.....#.....G.....G@..o8. A........:.........S.:..N.S.j.....tav.}.9h..s.....he.......{,~k...,eK.z}.......5%G...l.uCK.....V..............m.....U}.Sz..Z.c.{.....:..g......>h..'\|Z........a....^.b...o.>...g........f../w'....Ja.o(

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22079), with no line terminators
Category:	downloaded
Size (bytes):	22079
Entropy (8bit):	5.244841170173948
Encrypted:	false
SSDEEP:	96:z6m+PaU0SkukZdjjqsCkskPDJoIRnK6RmMJiUdAIgFZFMqUlAUZ2nxHMfAATAvNg:ODJM3inxOVbKXltutfOepNrGax8W3
MD5:	D908A3A6EEBDA928824C97BF18F423D2
SHA1:	75DD1C37B1BF6CF9E4054CFE19C1121A7C7AA7F2
SHA-256:	20BF1273C65DD45F65E5BCCF1976AB54E77C61FBD5049BD2F636EE486158DAD5
SHA-512:	096404DF16293F43BDFF8DB30A0EEE0D76625724541153B0CACFDD0DC2CFEBD52AB9D78C346FEB80E6D1E8CD966B7A0CF32ED1EA81F1E1A496DB2D2CA687BCD8
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-content/themes/salient/css/build/grid-system.css?ver=16.1.3
Preview:	.col{position:relative;display:block;width:100%}.full-page-inner>.container>.span_12,.full-page-inner>.span_12,html body .vc_row-fluid>.span_12{display:flex;display:-ms-flexbox;-ms-flex-wrap:wrap;flex-wrap:wrap;float:none}@media (min-width:691px){.col{margin-right:2%}}.col:last-child{margin-right:0}.col.col_last{margin-right:0}.compose-mode .vc_row-fluid>.span_12>.vc_element,.compose-mode .vc_row-fluid>.span_12>.vc_element>.wpb_column,.full-page-inner>.container>.span_12>.wpb_column,.full-page-inner>.span_12>.wpb_column,html body .vc_row-fluid>.span_12>.wpb_column{float:none;margin-right:0}.compose-mode #nectar_fullscreen_rows .full-page-inner>.container>.span_12>.vc_element:not([class=offset-]),.compose-mode .vc_row-fluid>.span_12>.vc_element:not([class=offset-]),.compose-mode .vc_row-fluid>.span_12>.vc_element>.wpb_column:not([class=offset-]),.full-page-inner>.container>.span_12>.wpb_column:not([class=offset-]),.full-page-inner>.span_12>.wpb_column:not([class*=offset-]),html body

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 600x400, components 3
Category:	dropped
Size (bytes):	64830
Entropy (8bit):	7.954702422736903
Encrypted:	false
SSDEEP:	1536:ZyWZyOcefdaG6069sqzgyw1Z86sxrxmO8IHwC/P:ZyWsO1fIG659s2gyh64JpH
MD5:	8EDDF35845A458F858475A40DA3E82C9
SHA1:	6505764EAAA743F2B37CEF2D58F8D7DEC229A1F4
SHA-256:	A6449E02A40BEB9ACE1E244DD51772BF1B1440A28D6D741D5FA285C843D32B47
SHA-512:	EFEAA90B80C9F27FAF6C956A443EE630BC5882FB45653159DC3DDC0721FE926BEA1BA5C94B3CEB4D94123A3A25F1DFDAB0F0CA9D612C649E32B4E4C916F4ACE4
Malicious:	false
Reputation:	low
Preview:	......Exif..II...........................J...........R...(...........i.......Z.......H.......H.................X......................C..............................................!........."$".$.......C.........................................................................X.."........................................J.........................!.1A.Q.."aq2..#B..R..b..$3....%r..&C.5..'4STUs................................:........................!1A.Q."........aq2BR...#.3br................?.....i.C]S..hi........h.1.9....h.-2"....L...i.....hcN.t4.@:.v4..n.m<.X...x.\......-.'Qeq....k'R7...r2.H..W.41+.n,..-.:....a..X.-.$.Upy...a..\|.h........./.8..\.a{....;.~u.z....!.+\|rC.....h....1....^....{..;@.uu...K.m8..1P1.4q..(.....-...-.icN.o.,i..4X.n44..,.m0...:....Cq....c@P.icO..C.,..h.h......./:.......1...-. ih.y.`7K.8..`.#..t..C.:Z......@..4.....,i..C@..Z:X. cCN#C.E.....;.`....-;.....`.{i}.t..H`.....-.{h.k9.n....@....hc@...?...1.K.8...@..G......c@.;K@..@.:v...

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30343)
Category:	downloaded
Size (bytes):	49935
Entropy (8bit):	4.823273149899454
Encrypted:	false
SSDEEP:	768:Gza+79Vdo9IKlr+Klk3Yi+fwYUf2l8yQ/e9vf:Gza2o2KlrniSUf2l7f9vf
MD5:	57302B6CEC774F116A26A5E1690E7F91
SHA1:	069D18F167DC68937186D69CAA58410B5820721D
SHA-256:	7ADB967745932B25C31DA3EF4A92F2B8E166926A7A8476FE8C8C58FC84B95FA3
SHA-512:	E51C5B6B302D87540E94436C016DAB3B8981248E591D1FAC8CA016E3B9CD234E2164FC55B651AC03DFF254E5A2482777D8E17F906C65FA238187A1A1F4E3A317
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-content/themes/salient/css/font-awesome-legacy.min.css?ver=4.7.1
Preview:	.@font-face{..font-family:'FontAwesome';..src:url('fonts/fontawesome-webfont.eot?v=4.2');..src:url('fonts/fontawesome-webfont.eot?#iefix&v=4.2') format('embedded-opentype'),...url('fonts/fontawesome-webfont.svg#fontawesomeregular?v=4.2') format('svg'),.. url('fonts/fontawesome-webfont.woff?v=4.2') format('woff'),.. url('fonts/fontawesome-webfont.ttf?v=4.2') format('truetype');..font-weight:normal;..font-display: block;..font-style:normal;.}.i[class^="icon-"],[class=" icon-"], i[class="fa-"], span[class="fa-"]{font-family:FontAwesome;font-weight:normal;font-style:normal;text-decoration:inherit;-webkit-font-smoothing:antialiased;margin-right:.3em;}.[class^="icon-"]:before,[class=" icon-"]:before{text-decoration:inherit;speak:none;}..icon-large:before{vertical-align:-10%;font-size:1.3333333333333333em;}.[class^="icon-"].icon-fixed-width,[class=" icon-"].icon-fixed-width{display:inline-block;width:1.1428571428571428em;text-align:right;padding-right:0.2857142857142857em;}[class^

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (531)
Category:	downloaded
Size (bytes):	221027
Entropy (8bit):	5.615047186684503
Encrypted:	false
SSDEEP:	1536:5ihMF2MaL/qPniSa/WMrI4elyflZPkDbt+6/a1s4+1xlUEYStaqs/d+oOgyH1ZoU:MtLS1salO6NhxtaqYCgllnnCi8gmO9s
MD5:	1107B7A330627D55520221EF3896BF2F
SHA1:	616C242C609A34459D517A07204C5701A92D2E3A
SHA-256:	B21C1F8361A4EA371B21BFF8C83B80C4B1932A5A83E1C85060D3E6AF098B5D82
SHA-512:	82AB2FABD91E26E4A70CFE903C7987B8FB5CAF0B97191EB0877E04734D9E08F7201667D36383129A5F0E2FF0DF60637BACDF58A0E537E4E24AF56F33A1DDA895
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/7ebf4817/www-widgetapi.vflset/www-widgetapi.js
Preview:	(function(){'use strict';var r;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var da=ca(this);function v(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}}.v("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}.function c(f,g){this.g=f;ba(this,"description",{configurable:!0,writable:!0,va

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8171), with no line terminators
Category:	downloaded
Size (bytes):	8171
Entropy (8bit):	5.072859919696532
Encrypted:	false
SSDEEP:	192:wRNh5qCAj4ZKBOZi9pFdInflm7ukrLjS9f89dmpb:wRrfViT685kfX
MD5:	DDA652DB133FDDB9B80A05C6D1B5C540
SHA1:	60C8514C57A5DB2980C4B046B0DD479BD427357B
SHA-256:	C1A9A3E223BAD631DFF12D33B5499EB145CB08D8621C20D9D73870E78D97AFE4
SHA-512:	05CB3673448A79AA81887C60A82ABA51F9A843DC13AB4FC39B3E6D8AE7D632732D9AFEFAF72FC3D197C2795A3364FDFD4F83C9B628644D98F1C9017BFD435E62
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-includes/js/dist/vendor/wp-polyfill-inert.min.js?ver=3.1.2
Preview:	!function(e){"object"==typeof exports&&"undefined"!=typeof module\|\|"function"!=typeof define\|\|!define.amd?e():define("inert",e)}((function(){"use strict";var e,t,n,i,o,r,s=function(e,t,n){return t&&a(e.prototype,t),n&&a(e,n),e};function a(e,t){for(var n=0;n<t.length;n++){var i=t[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(e,i.key,i)}}function d(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function u(e,t){d(this,u),this._inertManager=t,this._rootElement=e,this._managedNodes=new Set,this._rootElement.hasAttribute("aria-hidden")?this._savedAriaHidden=this._rootElement.getAttribute("aria-hidden"):this._savedAriaHidden=null,this._rootElement.setAttribute("aria-hidden","true"),this._makeSubtreeUnfocusable(this._rootElement),this._observer=new MutationObserver(this._onMutation.bind(this)),this._observer.observe(this._rootElement,{attributes:!0,childList:!0,subtree:!0})}function h(e,t){d(this,h),thi

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	43161
Entropy (8bit):	7.988579365537269
Encrypted:	false
SSDEEP:	768:79C8UCuZc7M1zIO/ykGTO0F7COg2Dsv+EhZvFLN0BwbHdHraM0el2hKKH8kBO7r:79C8UCyc7M5IO/VD0FtX+QQ9HyDYH
MD5:	F66C1551305C643950AF1D0607B5338B
SHA1:	60D284370D8EE169C8A97D67B5135F7C9DD36C06
SHA-256:	08FDEB8D539575F7D2AE9C5232F1CBB72DFE10D53F9D71F037A27A865452590D
SHA-512:	423EAB938A1A3B4774975D9739719B7958A7728056847AF5F05E4ECA6DB61CDA55E4011A5236991AB8A0EE41F7B66E4DBA3D25FC49001440A133FFC84CF0433C
Malicious:	false
Reputation:	low
Preview:	:....1....wAD9uO9YAQw... ........0...j.............p.....B..v +.a..j..I. .5].[....`.w.....2Vk.^.^..C..o..O.t..d..5....`...."..yzNJ....8ikG..{._-....O.d3$.....#..:C.VGR...F0.2._..Y..eq1.v.vyS.'......M..1&Z\9q..A....].....TFV5Y.......h.Mk%G.T0iV.'...X..m..J...v......vb8.3.(.D...J...d^.\..d.+NW....@.-...bu..J.#..5..I@..Wd.....y{i.a...\|.......p...j.K.D.9..:.k.3$..Ol..1.!..!.x.9...S...$..b.P.....1.Z4K.R...(~....F.G.=..4h.s.BA....tA.....9.......<#.......I.x.6BF....;q.x.....`.XUU....m.N....!...O/."4} R.$..D...i\ShE.M..&q....^Ar..N.;..C.7..1M6U.[o..C.Y.....1........c.?..{.:.R^.q..9...+.&..........".d.$.\..Q.V....5.c......i.%.}.H.q. z..dF.O..'%A.!..[..Ks'1.h......C....;U...0..~.s.4..u9..5....;4.......3\.sV..#.Z..../S.W..=.d.......OH. ._i&. C..J.m..4.M..&('"..u".......9.t....Y>[S.M.;.\|..I.ei\|Yn(D....M...u.{..3..\|.M......H..SN.....k.6..@.Z....{.'2..\A..&#o>.v.XP.%.%-W..,.........RE..E...W...#L.R.tN..[.,.....H....]L.YXT.C#G..~.R.fsU5.qW...p

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 600x400, components 3
Category:	dropped
Size (bytes):	87549
Entropy (8bit):	7.964944261631586
Encrypted:	false
SSDEEP:	1536:Hh4CACuAvpcpqR5BKfbuZ57vW98fL3E4LZgvRzHz8yvqG80keu9CYN8OsG:DFuAvpcpqR5BKyK9WTEw4p4+qmD49Nfv
MD5:	EE7BC7B5938376A84203DF10957998F5
SHA1:	403E884A5A4F68E2DEFFBF62E07141E052F52F31
SHA-256:	BA901F5987CEFBEE27A1E019F23347FD2275D4A195DC59B0701E49E609CB2F5F
SHA-512:	1A637CA71BE809AD09CBE96BC1FB7C69BCF14F371E17D2BF502B38F1D12908791AA32BFD605600C96DCE0AB14AB81E94D68312048308B6DD8453C051C5AE66DD
Malicious:	false
Reputation:	low
Preview:	......Exif..II...........................J...........R...(...........i.......Z.......H.......H.................X......................C..............................................!........."$".$.......C.........................................................................X..".........................................G..........................!1."A..Q2a.#Bq...$R....3b.C...%r...&45DSc.T.................................A........................!1.AQaq..."......2....#3B.Rb.Cr.....$4.............?......}.\|......C.ER.....k...@..........cF.B...E....0.7.ED.q...648.U(.......5he...:?..]Z..t<t\|hu.^D.....$hB........N.<u..I.].J...Uy%..xw.q.k..j.....1...O....S......>:.i^:.:.^Iq..J....u.^Iq..w.+.]...R.K..c..u..mT.y$G..x.^Iq.q.[.....y#.].K..cQ].....K.A.Q].4...t.5J.$J.....m.]Ea.....[..WQ.rK...X..5..I..4.iB4.j....Z..S..j"....4...:..#.v4.]..DR...4\|h...Lh.....I...F........>...r....SE#QX)25.9..DR...hq..L.r..k....5.J.h.....E.......5........D2.....4`5.J(..~.8..j!.@4lh.hB..D

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (12602)
Category:	downloaded
Size (bytes):	58327
Entropy (8bit):	5.311482916354694
Encrypted:	false
SSDEEP:	1536:CHgDu08H5HrZ818mdmUPrRMghSk5h5rEUUrIUkx0+8rkUIpLM+IrAI9dHvQruF:AZ+P4F
MD5:	08F3FA5CD7040C88C7DDF43DEADDE2A9
SHA1:	CD026E9A65B6C13B7140A87F2D550ECC165B1AF2
SHA-256:	D2A7A173045C7ED2C9474EE0EDD3EBC0389454132B0A16E55B3EAE6402C46A05
SHA-512:	2F04909977B0C8866BE6ECCD9C68937A9A836CA474D609F9CA5F7BCE6E0BEF29E907D24B194CDB728FB747028BEC3FCB0E99A340AA796204C8B01E397D98921E
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-content/plugins/revslider6620n-1/public/assets/css/rs6.css?ver=6.6.20
Preview:	/* FIX FOR WORDPRESS's CRAZY <p> TAG ANOMALY /..rs-p-wp-fix { display: none !important; margin: 0 !important; height: 0px !important; }../ NEW Z-INDEX FIX/..wp-block-themepunch-revslider { position: relative }../ FIX FOR QUICK LOADING OF SLIDER SCRIPTS AND WP-ROCKET READDING IMG TAG INTO DOM/./rs-sbg-px rs-sbg-wrap img { display:none !important}/../ MODAL BASICS */.rs-modal { position: fixed !important; z-index: 9999999 !important; pointer-events: none !important;}.rs-modal.rs-modal-auto { top: auto;bottom: auto;left: auto; right:auto; }.rs-modal.rs-modal-fullwidth,.rs-modal.rs-modal-fullscreen { top: 0px; left: 0px; width: 100%; height: 100%; }.rs-modal rs-fullwidth-wrap { position: absolute; top: 0px; left: 0px; height: 100%;}.rs-module-wrap.rs-modal { display:none; max-height: 100% !important; overflow: auto !important; pointer-events: auto !important;}.rs-module-wrap.hideallscrollbars.rs-modal { overflow: hidden !important; max-width: 100% !important}.rs-modal-cover { widt

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 7536, version 1.0
Category:	downloaded
Size (bytes):	7536
Entropy (8bit):	7.911731253324186
Encrypted:	false
SSDEEP:	192:340F/mM4Oa0wA2jPOf2X62xqpjjjaT64iSNizw:34sxBwCujqpj/aT6nSYzw
MD5:	04EB8FC57F27498E5AE37523E3BFB2C7
SHA1:	D942AE11706C3F7E511E3C49B0E4574D7AD199C4
SHA-256:	F7B9C3065E55FA3B9E320093612E7B30DCB14355A44EC461247B495A3E729686
SHA-512:	FA6508C8A1A822794036174B0B9DBC6E91B5AFC1FD340381B868EDE6D928DD0F3E66B5A91308D2C0C4C4C64B27DAB7761A904C0B6E6B3C0E3E736E5D6342F365
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-content/plugins/revslider6620n-1/public/assets/fonts/revicons/revicons.woff?5510888
Preview:	wOFF.......p................................OS/2...D...D...V>(H.cmap.......f.......&cvt ................fpgm..............x;gasp................glyf...........j.!T.head...$...6...6.j=.hhea...\... ...$....hmtx...\|..._....\|c..loca.......Z...Z...maxp...8... ... .[.\|name...X.........+!post.......;...!..O.prep.......V...V....x.c`d..8.......i...C..f\|.`..............08.`xa...?.!.9.a.P..$...f.Cx.c```f.`..F.......\|... -. ..aa`x........./L^..........PT.......@Q+...............,..j2.`d..>...Y..u..x.c`@.F.F.A..@......x..U.v.V..<dp.:d.....8P..).0i.v!........t..>.k.B.V....}=$.t..,..G[g.:.F.#}..k......=.J.I\.u/....q]..OI...$Jj..P..X.Y'X'.. VOU.g.....eID.D...&I..'..g..%I %.....PB5..R.L....q.@.F..uXT.C.'.5...FW9....F..../{..:....1.x.~......?vJN...Tq.V..0._..L.@..bE....t..1=t:..J.F....(....(...........ST.]q..@f.\J.lt.D..&R...N5.....G.......\..<U2.z..3;{q1.n'..p...2ovv.C.W.....L..G..b~>B.Pj~"N$.FX...qW B.1.....S.9tE..f].1....J.a=....~..N$+.gQ..H..c.u..gPK...;2.C.".....3.a.

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13479)
Category:	downloaded
Size (bytes):	13577
Entropy (8bit):	5.272065782731947
Encrypted:	false
SSDEEP:	192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp
MD5:	9FFEB32E2D9EFBF8F70CAABDED242267
SHA1:	3AD0C10E501AC2A9BFA18F9CD7E700219B378738
SHA-256:	5274F11E6FB32AE0CF2DFB9F8043272865C397A7C4223B4CFA7D50EA52FBDE89
SHA-512:	8D6BE545508A1C38278B8AD780C3758AE48A25E4E12EEE443375AA56031D9B356F8C90F22D4F251140FA3F65603AF40523165E33CAE2E2D62FC78EC106E3D731
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
Preview:	/! jQuery Migrate v3.4.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /."undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){return t(e,window)}):"object"==typeof module&&module.exports?module.exports=t(require("jquery"),window):t(jQuery,window)}(function(s,n){"use strict";function e(e){return 0<=function(e,t){for(var r=/^(\d+)\.(\d+)\.(\d+)/,n=r.exec(e)\|\|[],o=r.exec(t)\|\|[],a=1;a<=3;a++){if(+o[a]<+n[a])return 1;if(+n[a]<+o[a])return-1}return 0}(s.fn.jquery,e)}s.migrateVersion="3.4.1";var t=Object.create(null);s.migrateDisablePatches=function(){for(var e=0;e<arguments.length;e++)t[arguments[e]]=!0},s.migrateEnablePatches=function(){for(var e=0;e<arguments.length;e++)delete t[arguments[e]]},s.migrateIsPatchEnabled=function(e){return!t[e]},n.console&&n.console.log&&(s&&e("3.0.0")&&!e("5.0.0")\|\|n.console.log("JQMIGRATE: jQuery 3.x-4.x REQUIRED"),s.migrateWarnings

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 773x516, components 3
Category:	dropped
Size (bytes):	166466
Entropy (8bit):	7.969534338599138
Encrypted:	false
SSDEEP:	3072:/WlFczG7oxYYl8/DbAdqOHAxffBZ1L2lsKIBHwUXw:/zz+Yy2gxBrgPIBHwD
MD5:	D000E97D79C6F2EF34E431E832A1B4A9
SHA1:	25F599B91604832E28AD07EB1EF23F7BE6AF5747
SHA-256:	E1EB549EE509B0C9B845BADF9E8FBD6F48C52C14B3C9CFBB6AFA9D8E1F23CCD9
SHA-512:	FCC5E52B510ECE8C05B3AE898DB8246AC0C2D1DA4E01AE75A5DDD4BD2688E52C85EBF5ABF2F266DA556B941EF8EBE8417AC12AE656511A163D1113FAEDD4111B
Malicious:	false
Reputation:	low
Preview:	......Exif..II...........................J...........R...(...........i.......Z.......H.......H........................................$Photoshop 3.0.8BIM..........Z...%G...C..............................................!........."$".$.......C............................................................................".........................................J.........................!.1."AQ..2aq..#B....R...$3b.r..%4C..S..5Tc.&6D.................................3.......................!1.AQ.."aq.2......B..#R...............?..OP.l.8+..o.@..C....p.W.......(...:.Au...G5=4U>,.g.w...1.w;.'.v.....xQO..:RS35.O.@.2..9......\G....&...N6..%W.......c.....k....m;...z.~.jSIWu5{.U '.....r..m..r6....y.o.V.G.O.~......}N<.z..$s.#..zh.T.:...8.......;.H...s...)...\.<...)J..ul....X.......q.P.i$..m5+.%M\...k."..c.V$..`.......'9.v..o..x....C.....2......G...~4....9g..m..AQN...CT... .G(.s....8>..[.\.P?P.....v.\|..F.,........./.....>..f.`....[:....5.W[o..Q...4..G..6.... ...a.P..

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 600x400, components 3
Category:	dropped
Size (bytes):	97578
Entropy (8bit):	7.971887137342456
Encrypted:	false
SSDEEP:	1536:X+VEchwOqIjrhdB2+3OIoaDaLZOq7w48fH4pTv1gEu+Ka69D+jF+e2rCXamv1Uue:X78wYhdQ++aaLQ818fH4pTveEua61Q2Z
MD5:	3B4A99E531644396D9BBC611501FE7B4
SHA1:	0DFDAA0CA21364D45CCA512C5DF9BFBE7E6CB838
SHA-256:	6F32B33408BDDC726E0069F1E07F21B6D322ED3E301ACF09BEED212201D82F1A
SHA-512:	981443B5B000F94A7B5A52D7056DFFDB68173AEB13E784457C3A1C8E9A3595BBDCA284C922B11EFAC32ACC9BA9721BA9B0EA10664A6A0556D8453D950FD962C3
Malicious:	false
Reputation:	low
Preview:	......Exif..II...........................J...........R...(...........i.......Z.......H.......H.................X......................C..............................................!........."$".$.......C.........................................................................X..".........................................M.........................!.1."AQ..aq2...#BR.3b....$r....C...%4S.Dc.t...Uds.................................A......................!..1A.Qa.q....".....2B..#.Rb3r.$s..C..c..............?....i.h....z;...W.x.8>..#.0u...1..%.....\|X.MJ.l..Ol..i..h+h..V.#.<....T..}N...~..Uu......Ik`..rA>.[.-..u....._.....`g.1..e. _...h..N..]^H.....\m=..W...r...N.{.^F5.%.....jh.(cP#......D..k.o.....A..O......9..O:D.{`.....3..\.#...}...x./...RBv....m.Y...D.....J.E...K..<.S&p....X..+nuu...b"<4..F.c.{.p....S....}.w....55..g.9..}.O.v..^.P.........G..[.?...%:..u<...Z...$....Y-T..P$......bY..$.N....1.s..m(..3.5..Fu.!..Nu(J...U].1V.;}mS......H.....y#W...K........JM.

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 88x88, components 3
Category:	downloaded
Size (bytes):	9101
Entropy (8bit):	7.944572268065278
Encrypted:	false
SSDEEP:	192:kZW+mxasVjIbRVuNt9rgNHHk2a1/e40mzilDoEu:4pMKruNt6ZHJa1WhlDG
MD5:	2A144728297E75D0D279E80E51CF29EE
SHA1:	6B4077066B07166DE2F17A6F1CF679BACBAEABEB
SHA-256:	EA31A7DBBCC8412F336DF9C27D2F847A3E9EEA07E29987075497029AD05A9324
SHA-512:	29FCC1AA19C8921AA173BBFD2A6C1872FC46A675AB4C16B7E40EE572D23EBFBBB92335804DE7F5915415346458220AE8089FAAABAEFBFBCE56646C431B5FF3D3
Malicious:	false
Reputation:	low
URL:	https://yt3.ggpht.com/80u-Vp0LwT_GzPtXdBZwLam5D06IleML6OJ6fgd3yr_LnC9097d3fFdw1o3BZ8djM465KIoBYbA=s88-c-k-c0x00ffffff-no-rj
Preview:	......JFIF......................................................................................................................................................X.X............................................6........................!..."1..#.2AQ3.B....$4CRabqr..................................7.......................!..."1.AQ2a.#q..BR...3br.$.S..............?....<...^.w8.w?......Y....~...).[s.\|..f......L........SH..<.X....?.<Z....&...>3=..Al....=m.7.....]Z....V`n@...l....#.+.z.....&.n...0Q.\|.x...=%.uXM#..e.Y........H...bZ...........,.G..{....,z...7.....C........p......._....w.>>.H}..9..1Q.?%..dAI.+3.c.P...)(..ldx'..[.5lBi.@>.&....A?...r......v...<w...{{(.....y...[.\..u.m............t..z.ao..'.......9...e....p.P...x%%... ........;..Q....g...<......tx3j.U.....T......N.$......g..G.>.\|.....mt........I......]...nC<x.U..e.H....vc.......se..G6wmk..R..$g...~.'e4..s.@.!..B2.1...K4q.)@..A......C,..,.B.d#...T.P....^+.......x.:T@#....f..EH..[7.......I.T.L....

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 800x533, components 3
Category:	dropped
Size (bytes):	44495
Entropy (8bit):	7.9690008233780185
Encrypted:	false
SSDEEP:	768:aonXbuQ00ZbXjK327cgSBip7h5Bsfts7+q9TvdzeEAGA1Qp1jBIr2ag7A:fnruQ0ejKIcy7h0ftsKqVvEJG3plaaad
MD5:	BA972177E1D8E05205F8CDFE0E9AA968
SHA1:	66F5CEEDB01AEF3FC0E97F5BECD959D9BC80E58F
SHA-256:	CDD1EC9022196010E64ED78E6C7CD02CAF7E54B23FD6857B3423A7E362DC3F0F
SHA-512:	7152232165A38A62B4E1588B28C97924FDCC8D56031CA9B84388797708DA8F795F5F9CF1C9330216F428B04C7305E6CF33C6D4FB0296C740B1907D7E867A7A29
Malicious:	false
Reputation:	low
Preview:	......Exif..II*...........................J...........R...(...........i.......Z.......H.......H................. ......................C..............................................!........."$".$.......C......................................................................... .."........................................L........................!1.."AQaq....2..#BR....3br.$C....4DScs.T..%d..5Et.................................2.......................!.1AQ.a.."q..BR.....2#...............?..r..B'.s.x....B.(../.nF`.\Pa.A..........@4....\1a.@..."4"......7 ..(..H3A5.4.5.4......h.......k...(.D.4.\J.k.i...A..........A...B...%.4.\H........\..A10..&..h.`..[.2.&0....)3\Rb.$.p\..!....& .....n0.y..`& c..L.. a0........&.c...s......f&-..`0....&=b.L...b.1<.L@.,...1#\.c...&.f&)2@c.....bG..1a..?G..b.7#0<.u...&... ..A.q...sA.."...@4",2...........4..5.L.\Hk.......D...%.....3As\..k.h.....F.h"!...Di.3\H0M.H3A11.M..q ..nk..bb....&.`..).a.....i ..p\.....&..@...L.4d0...LR.......2..............,$.p\...&-.L

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5477)
Category:	downloaded
Size (bytes):	5594
Entropy (8bit):	5.0603456829137325
Encrypted:	false
SSDEEP:	96:bwRxr6JAXgWWwrrSTrmM4KvlGC89QPjRxq2uVBXeHRGKrc4oPUGPgNhd+qLoBV7J:bwjrycrr3rKvE9IjRxjGjgNhdTLo3re+
MD5:	E2C1A80B99251B7B94726B41312FB160
SHA1:	6D3E11174E22668E69DF236E5C4542168F7CBFEC
SHA-256:	96ABF166B3CBB5F7DF525D86FDEEECCEA4AF3C120B19BC26B0613530A94E8B44
SHA-512:	4B93D9F46C4964ED7AB53F6BDD6269FD269F9F7D5EBBCB96AF382531A8434F876C9A0A96A27458F60AE4DE3FB7B5FB8FAFD58936C7E8A0E47B1A2EC72F95B68F
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-content/themes/salient/js/build/third-party/imagesLoaded.min.js?ver=4.1.4
Preview:	/!. imagesLoaded PACKAGED v4.1.4. * JavaScript is all like "You images are done yet or what?". * MIT License. */..!function(e,t){"function"==typeof define&&define.amd?define("ev-emitter/ev-emitter",t):"object"==typeof module&&module.exports?module.exports=t():e.EvEmitter=t()}("undefined"!=typeof window?window:this,function(){function e(){}var t=e.prototype;return t.on=function(e,t){if(e&&t){var i=this._events=this._events\|\|{},n=i[e]=i[e]\|\|[];return n.indexOf(t)==-1&&n.push(t),this}},t.once=function(e,t){if(e&&t){this.on(e,t);var i=this._onceEvents=this._onceEvents\|\|{},n=i[e]=i[e]\|\|{};return n[t]=!0,this}},t.off=function(e,t){var i=this._events&&this._events[e];if(i&&i.length){var n=i.indexOf(t);return n!=-1&&i.splice(n,1),this}},t.emitEvent=function(e,t){var i=this._events&&this._events[e];if(i&&i.length){i=i.slice(0),t=t\|\|[];for(var n=this._onceEvents&&this._onceEvents[e],o=0;o<i.length;o++){var r=i[o],s=n&&n[r];s&&(this.off(e,r),delete n[r]),r.apply(this,t)}return this}},t.allOff=

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 88x88, components 3
Category:	dropped
Size (bytes):	9101
Entropy (8bit):	7.944572268065278
Encrypted:	false
SSDEEP:	192:kZW+mxasVjIbRVuNt9rgNHHk2a1/e40mzilDoEu:4pMKruNt6ZHJa1WhlDG
MD5:	2A144728297E75D0D279E80E51CF29EE
SHA1:	6B4077066B07166DE2F17A6F1CF679BACBAEABEB
SHA-256:	EA31A7DBBCC8412F336DF9C27D2F847A3E9EEA07E29987075497029AD05A9324
SHA-512:	29FCC1AA19C8921AA173BBFD2A6C1872FC46A675AB4C16B7E40EE572D23EBFBBB92335804DE7F5915415346458220AE8089FAAABAEFBFBCE56646C431B5FF3D3
Malicious:	false
Reputation:	low
Preview:	......JFIF......................................................................................................................................................X.X............................................6........................!..."1..#.2AQ3.B....$4CRabqr..................................7.......................!..."1.AQ2a.#q..BR...3br.$.S..............?....<...^.w8.w?......Y....~...).[s.\|..f......L........SH..<.X....?.<Z....&...>3=..Al....=m.7.....]Z....V`n@...l....#.+.z.....&.n...0Q.\|.x...=%.uXM#..e.Y........H...bZ...........,.G..{....,z...7.....C........p......._....w.>>.H}..9..1Q.?%..dAI.+3.c.P...)(..ldx'..[.5lBi.@>.&....A?...r......v...<w...{{(.....y...[.\..u.m............t..z.ao..'.......9...e....p.P...x%%... ........;..Q....g...<......tx3j.U.....T......N.$......g..G.>.\|.....mt........I......]...nC<x.U..e.H....vc.......se..G6wmk..R..$g...~.'e4..s.@.!..B2.1...K4q.)@..A......C,..,.B.d#...T.P....^+.......x.:T@#....f..EH..[7.......I.T.L....

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	57344
Entropy (8bit):	7.996500928275649
Encrypted:	true
SSDEEP:	1536:55aw7PkMXwalpnM2wqFPFlwevNqgbCFFhIENVu+:55awzkaw4hM2wqFjT1chI8VZ
MD5:	FBB703EFAB0358C3B5F9F40A7D1A6E89
SHA1:	8CCAB3805F16954F9C17986287308F339B208020
SHA-256:	9D27E612231B4997AC762C0653071D018B85E19392BB876A411E273FC5F54CF8
SHA-512:	893A56DCEC32D151DFB6968296C5916B39FBFC5112CDD765F68015FDA1F4FB9DBCFD087922E8D83F267070F4A358D01205375B8A01253D98849A69F10323D273
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-content/uploads/2018/10/nepal1.jpg
Preview:	RIFF....WEBPVP8X........W.....VP8 T....O...X...>Q .D#.!$.9.....gn..;....B.l...7.j.....>.M. .F.........W...:.;.I..-.......~..e...?......O...~.....@...F.7.oj.....1.i..o...~\...O...o..V.....g......o....`_f...7._.?......w.....{..I...g...?....7.#..............................}...........?.......=.........o.?....#......J....Md.{..G...S0#.....M....g.p....+.....K...."u.:@[..2.+.....\. Vy,.h....&7..a3...;.L.$....@......g^.;.o=p..E(.'t....h..`........k.../..2....Q......g...F...V....W".Jj........dA.%ab..a .53].l](..>.(........Vl..?...qZ.i......=..W.,.....\|.FV.&...Q..R..oy.....G.%e..Ww.p...$d(......JH..F....sB.....H0#U..Gp[."-.R.H....7Fl.....wV....CX...&q.=...y...>......P.h`Z,.D..`R..=@Zk..,..3.7...kY..'\lPW+.x...........8.efk.8.......l......~.-.%9.vq.I[.rL..t.c;...j........\|,./..I~.Tm..#.RH`...L...}..i..#Ge\..04.....+..d.g...@...~..K....!I..A.../....E......\......m....q...].t..S.#.........=.[N..t.:Xq{.....]C.*.#..vO.T%p...........d....[...:

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (546)
Category:	downloaded
Size (bytes):	72968
Entropy (8bit):	5.585123206443124
Encrypted:	false
SSDEEP:	1536:23RtYrWR63/rhd6fBn6As3kQ51C7bHwuKGSz+/CPaY:AYrRtdUqk3nZal
MD5:	455A0D233A05DC579BC463DA3E3DD500
SHA1:	63983A593DA8CD1F82D0EA44B6EA60DDB468657A
SHA-256:	4FA42D567BF54C4DD82D5AC5B9B4AF81FE652FA84C9236E5534FEAD8F4109F7F
SHA-512:	642C0F162205D05A10E0005B4C2BDB6284F94C2E3DDC0889613EC1FFF66D3B38199D66B716B61D78BE798BDA82BB3CCC93C019FACD22BA3F9B43ED250DAFEE97
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/7ebf4817/player_ias.vflset/en_US/captions.js
Preview:	(function(g){var window=this;'use strict';var qpb=function(a,b){return b?a.captionsInitialState:"CAPTIONS_INITIAL_STATE_UNKNOWN"},rpb=function(a,b){var c=new g.pS;.c.languageCode=a.languageCode;c.languageName=a.languageName;c.name=a.name;c.displayName=a.displayName;c.kind=a.kind;c.isDefault=!1;c.j=a.j;c.isTranslateable=a.isTranslateable;c.vssId=a.vssId;c.url=a.url;c.translationLanguage=b;a.xtags&&(c.xtags=a.xtags);a.captionId&&(c.captionId=a.captionId);return c},spb=function(a,b){var c,d,e;.return g.H(function(f){if(1==f.j)return c=a+"\|"+b,g.z(f,g.rD(),2);if(3!=f.j){d=f.B;if(!d)throw g.VC("gct");return g.z(f,g.ES(d),3)}e=f.B;return f.return(e.get("captions",c))})},tpb=function(a,b,c){spb(a,b).then(function(d){d&&c(d.trackData,new g.pS(d.metadata))})},wpb=function(a){if(!upb.test(a))throw Error("'"+a+"' is not a valid hex color");.4==a.length&&(a=a.replace(vpb,"#$1$1$2$2$3$3"));a=a.toLowerCase();a=parseInt(a.slice(1),16);return[a>>16,a>>8&255,a&255]},xpb=function(){return g.sC("yt-playe

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 21904, version 1.0
Category:	downloaded
Size (bytes):	21904
Entropy (8bit):	7.98939992555791
Encrypted:	false
SSDEEP:	384:eXMHUgnRzho+S92bDlphaT9MjSVEDZJlW0vQD9eXj0Np/eC9r88S53:eXM0uRzm8BnaTi8EDZ/W5eAL/zr+Z
MD5:	27B2F94167BCE460F3E669C52BE7301E
SHA1:	DE5636D6096F5A29F0764AA563C54F157B1F9DE9
SHA-256:	51C8EAE79BF05BBCC1811DA8CB56FF69D87D40BAFDCE8282FEA8A43259B4AFCB
SHA-512:	D3A0171BAD1FD474DB5CF4800A7A8F23B74716554657E73A0DB79E63A9FC72B7D06CAB5F89C550B71CB1E955A2C536EAE4718833BA73071BA0EAEEEE21B5CF82
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/playfairdisplay/v37/nuFvD-vYSZviVYUb_rj3ij__anPXJzDwcbmjWBN2PKdFvXDXbtM.woff2
Preview:	wOF2......U...........U+............................x....`?STATH..,.....$..)..~..6.$..`. ..x..s...v.'...@t'PR....\|#...$B.Y=.aR.<......C.`....V...(..\.z..`.k....9XU<.<.ve8.....r......t..a.0,.OS../$c3.LB.O."(.......a.=./.nwj..$d..c....y}...._..........(H.../..E.;=..w".81..1t..........#T@.........".GD.......Y.%/...,2&$.B..2.".0.Vq.T......V.......c...U.RA.h.w.!+....K..l..m1.=..\x......t..W.W.Fc.u.Tb}...k...`.p.....c...s..qH.xh..........._..@...3...+..............s.d..!E...P.e.Hf..}...V.....\..r5..............rpB..d?..l/.1...F.SZ@A.Y.L......^i.db..G.X...\|..vo.........4D..!>.~>...2.Z.19[..9...c.l.P.) g.6......p....\|?....?C.fa`.niW.j.^.m...K......9x..........X...q........,bIXTO.=.$..f...e{f%y<.3#Y.#KN.V.C.d...#.x.8..n..n....%..-.-.-.-....7._.....#dI....d.o.......u.].j...<<?..Y......`E&?.n...D..r.lD-..).P.d..D.Y%..{hX....a.j...q..Y.,d..B.. ..."S+....S.(Y......gl./.\.....1@..`~Ku..\|J7........(.,.........#.Q..f8..U..$5..bL:.......%CX.Y*.U.......

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	1803589
Entropy (8bit):	7.998641684709591
Encrypted:	true
SSDEEP:	49152:zyvc8WFy/yv4Bgp37XYdBLWaIgl1oJVubgFbcHsHKDpl:zyvUF9lpkPxDr8ugFAHNl
MD5:	41BEE54D154EF5E68ED02CAF283D5743
SHA1:	C88DC1E21871766EE3EBF4254870058DAC1C5E76
SHA-256:	22B672DA6F42BCD4C8F6027AEA69AA4AA9BFA0254765943BEB39A5F9C3CD7591
SHA-512:	D34F52FB6B600396B16223B5C409558CC32C79C05C487F8CCDEC567CCF2887DE7F1FB25F34EDAECB419A7D3A1DC9277A580A246FA95253DA5F5F8587D50E9E3C
Malicious:	false
Reputation:	low
Preview:	:....1....wAD9uO9YAQw... ......0..(j...........p..n.......Tmoof....mfhd...........<traf....tfhd....................tfdt......^.....trun...........\..~\|......9 ...............C...............-.......................................................................................................................W...............8..............................................................................$........R...............n.......................................................I...............d.......~...............................................Q...............P.......K..............^........<......................................y.......C,...............................................`...............0.......................................................................{......o&.......................0...............X.......................................................................................................................................f....................

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11513), with no line terminators
Category:	downloaded
Size (bytes):	11513
Entropy (8bit):	5.205720179763049
Encrypted:	false
SSDEEP:	192:wNmuf8NM+UHN9Rr7lZBNWzd4PMfm/vx3imWAel/L0Fx18b2VautyX2fkiYgu0OOJ:wwuf8N5UHvRr5ZBNW+PMfm/hibLexa2b
MD5:	EFC27E253FAE1B7B891FB5A40E687768
SHA1:	AD12044651FFAC0BADCD0E42F32EDEF91678B1FF
SHA-256:	46E36DD6CA93014E4915C723632BF180D27CC96CCFB7C26E69213E1A82129A62
SHA-512:	42FAD6D6BEEAB116CBE8B149DF6B64D65C4998C0A2CC0562BC831AD02ACD82F2B6B9B33836047AAFD6C2D7CF31A6E91FEACA42A2FA6C6077B7F737DEA40D36E6
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.9.3
Preview:	(()=>{"use strict";var t={d:(e,i)=>{for(var s in i)t.o(i,s)&&!t.o(e,s)&&Object.defineProperty(e,s,{enumerable:!0,get:i[s]})},o:(t,e)=>Object.prototype.hasOwnProperty.call(t,e),r:t=>{"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})}},e={};function i(t){if(this.formData={},this.tree={},!(t instanceof FormData))return this;this.formData=t;const e=()=>{const t=new Map;return t.largestIndex=0,t.set=function(e,i){""===e?e=t.largestIndex++:/^[0-9]+$/.test(e)&&(e=parseInt(e),t.largestIndex<=e&&(t.largestIndex=e+1)),Map.prototype.set.call(t,e,i)},t};this.tree=e();const i=/^(?<name>[a-z][-a-z0-9_:])(?<array>(?:\[(?:[a-z][-a-z0-9_:]\|[0-9])\]))/i;for(const[t,s]of this.formData){const o=t.match(i);if(o)if(""===o.groups.array)this.tree.set(o.groups.name,s);else{const t=[...o.groups.array.matchAll(/\[([a-z][-a-z0-9_:]\|[0-9])\]/gi)].map((([t,e])=>e));t.unshift(o.groups.name);const i=t.pop

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2352
Entropy (8bit):	5.3925528705855665
Encrypted:	false
SSDEEP:	48:ccOLJ/eaOLHg/5RVc+uoOLjN0oAcOCJ/eaOCHg/5RVc+uoOCjN0oD:ccOLJXOLAbVc+uoOLjNccOCJXOCAbVcK
MD5:	501BD8F890E782B0BAFBE2BAD21ED4DD
SHA1:	5DA0DFA889FAA49DAB43F2B5306C79447AA2DBB8
SHA-256:	B1D9E89B7D2C39137B19496CECB47F8B86180D87E53AB976C44B894CF0045570
SHA-512:	21BC93C6304C09E02C7935C78D023038A219111EE00F46BAC09163E33D51644C62E21725824B9A248CB2730F7A7E7EE48B9B2DF43DA3AE417C9DE70F7C2EC7EA
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Dancing+Script%3Aregular%2C700&ver=7.1
Preview:	/* vietnamese /.@font-face {. font-family: 'Dancing Script';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/dancingscript/v25/If2RXTr6YS-zF4S-kcSWSVi_szLviuEViw.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;.}./ latin-ext /.@font-face {. font-family: 'Dancing Script';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/dancingscript/v25/If2RXTr6YS-zF4S-kcSWSVi_szLuiuEViw.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin */.@font-face {. font-family: 'Dancing Script';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/dancingscript/v25/If2RXTr6YS-zF4S-kcSWSVi_szLgiuE.woff2) format('woff2');. unicode-range: U+0000

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45047)
Category:	downloaded
Size (bytes):	165339
Entropy (8bit):	5.523318757286319
Encrypted:	false
SSDEEP:	3072:r7079mB8NkhkzfAZNnlaI+UMzW1c4g7jGizAHKv:rY9mB+kKzo7nlljPCnf
MD5:	0A7176E860C4303F557950B75FB8A898
SHA1:	C292EB1B902ED06FCCD65A684D6B311E1290CAA9
SHA-256:	C4596B16B126326B0D8FC2FB8BF91389AD3DC4671A269187913C19A8F2AD1094
SHA-512:	5750A3C56B690171317B60985217C8787A6D29576DC07DACACC9FB2E8349B43C81894B3B2940EDC6F2D1AE1F1F2BDB165283BD5653E289D8272BCFC90F94229A
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-content/plugins/revslider6620n-1/public/assets/js/rbtools.min.js?ver=6.6.20
Preview:	!function(t){var e={};function n(r){if(e[r])return e[r].exports;var i=e[r]={i:r,l:!1,exports:{}};return t[r].call(i.exports,i,i.exports,n),i.l=!0,i.exports}n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:r})},n.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var i in t)n.d(r,i,function(e){return t[e]}.bind(null,i));return r},n.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return n.d(e,"a",e),e},n.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},n.p="",n(n.s=1)}([function(t,e){t.exports=jQuery},function(t,e,n){n(2),n(6),t.exports=n(4)},function(t,e,n

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (2322)
Category:	downloaded
Size (bytes):	2358
Entropy (8bit):	5.195577996716204
Encrypted:	false
SSDEEP:	48:Q7ZoaXCwG54toFsQ9it47DxKQiGaiGBq0K8HzwwQ0sGvayXk2:wxXCwG5ts/DQjvXdysYd
MD5:	85CCFA6BFEB1F46E967D204F827FF4DC
SHA1:	37F9F7A030569DDED1441F85916B7EB0EEFD59EB
SHA-256:	BB4E63C126BEAE75728FC000A8847D4D91427B7A63E711F3668DE1C20BD5D76C
SHA-512:	1F05740E7D7BC782AC44BBF371312A8E2D684D55A6E7DA2038C266E8E8208CF3629C4AE048F96CF785BEC2377786C2498A7EC82BB4160C2620E510CF7164848A
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-includes/js/dist/a11y.min.js?ver=d90eebea464f6c09bfd5
Preview:	/! This file is auto-generated /.(()=>{"use strict";var e={n:t=>{var n=t&&t.__esModule?()=>t.default:()=>t;return e.d(n,{a:n}),n},d:(t,n)=>{for(var o in n)e.o(n,o)&&!e.o(t,o)&&Object.defineProperty(t,o,{enumerable:!0,get:n[o]})},o:(e,t)=>Object.prototype.hasOwnProperty.call(e,t),r:e=>{"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})}},t={};e.r(t),e.d(t,{setup:()=>d,speak:()=>p});const n=window.wp.domReady;var o=e.n(n);const i=window.wp.i18n;function a(e="polite"){const t=document.createElement("div");t.id=`a11y-speak-${e}`,t.className="a11y-speak-region",t.setAttribute("style","position: absolute;margin: -1px;padding: 0;height: 1px;width: 1px;overflow: hidden;clip: rect(1px, 1px, 1px, 1px);-webkit-clip-path: inset(50%);clip-path: inset(50%);border: 0;word-wrap: normal !important;"),t.setAttribute("aria-live",e),t.setAttribute("aria-relevant","additions text"),t.setAttribute("a

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 600x400, components 3
Category:	dropped
Size (bytes):	68321
Entropy (8bit):	7.963017655543066
Encrypted:	false
SSDEEP:	1536:GPdWy1scQpcW78ioGHgIOQgI6g2MGq6tE6Iw5cIilIOaOvdq7O5:K8pcKo+g9EXyE6L5SILOFd5
MD5:	5B953F48EFFA1103BE5C64302C73A30F
SHA1:	C62558452C3507B3399FC2951DA81ACF151CB9BF
SHA-256:	144DD862695C8B4EDB08D61F8C33B46C595914619A38DE649EAA1E1D9F527535
SHA-512:	31A369E73B7D49482BB758126FDC678EF536850F924E6D645554F9E67D063E53795E07FFC1C0249DF4DF98A5D8CB80844E02CD27B28AE4DA8D2D64F09134E618
Malicious:	false
Reputation:	low
Preview:	......Exif..II*...........................J...........R...(...........i.......Z.......H.......H.................X......................C..............................................!........."$".$.......C.........................................................................X.."........................................J.........................!.1."AQ..aq2...#BR.$3b.....r..C.4c....S.%5T.ds.................................6........................!1A..Q.."aq2.......#B.3..Rb$............?....h..-..Jy.../...4_....:-.~.,q.K.{h.1...:....g.:I<~Z.....PV..]....g.J....DN..y......<.C.q..,.4.n5.C.......<w....pF....h...D.{..G.iG=.....:#....n.]@0.=....h....\....W..Ia...+.{i=.dc...aB:,......D..{h.m....R..{c....=$.4@....D{...@.5,.q...}..0].9.{v..:,!s...#F.9...?.+,q.$.8........y2G..'HxA..P.0;i8..I.jV_.....X.].(T....T...p.u\.W@)..i%A.O.G.D{..-.......6B..S...%...Y.>.......K}5..\|..MMM.A...1%=,.i.$.X...b. .8.S...k..><..V..qO...b.F...K?}#..8.T'..i..p4.....D..>.A.:Y.4..>.aD.

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4272)
Category:	downloaded
Size (bytes):	4307
Entropy (8bit):	5.146101486826543
Encrypted:	false
SSDEEP:	96:vHyiUGUQs6c7DE/3sc/YrEBAr44BPwKxbqtNMHlWh/C2fWRi+RRmps:fyiUGUQ/cHg3NZBT4JbqtNMHiC/RiLps
MD5:	072D3F6E5C446F57D5C544F9931860E2
SHA1:	EE6AA3D65B474309376468B24BB6F829A4514809
SHA-256:	2CB546FBDDA7995D374FFFA4B2F6530BBCF57D014639DDF76DE45DF43D593045
SHA-512:	19CEB31EC694AC5C42A0A7B02CFC1C31DDFC033DD62916A1C55BBBDD2435E21F73127C539687633E96F2706B2D75C37609B44A9C9462B63F9F96795CB4495968
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-includes/js/dist/hooks.min.js?ver=2810c76e705dd1a53b18
Preview:	/! This file is auto-generated /.(()=>{"use strict";var t={d:(e,n)=>{for(var r in n)t.o(n,r)&&!t.o(e,r)&&Object.defineProperty(e,r,{enumerable:!0,get:n[r]})},o:(t,e)=>Object.prototype.hasOwnProperty.call(t,e),r:t=>{"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})}},e={};t.r(e),t.d(e,{actions:()=>S,addAction:()=>m,addFilter:()=>p,applyFilters:()=>k,createHooks:()=>h,currentAction:()=>w,currentFilter:()=>I,defaultHooks:()=>f,didAction:()=>O,didFilter:()=>j,doAction:()=>b,doingAction:()=>x,doingFilter:()=>T,filters:()=>z,hasAction:()=>v,hasFilter:()=>y,removeAction:()=>A,removeAllActions:()=>F,removeAllFilters:()=>g,removeFilter:()=>_});const n=function(t){return"string"!=typeof t\|\|""===t?(console.error("The namespace must be a non-empty string."),!1):!!/^[a-zA-Z][a-zA-Z0-9_.\-\/]*$/.test(t)\|\|(console.error("The namespace can only contain numbers, letters, dashes, periods, unders

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	22388
Entropy (8bit):	5.340794659982224
Encrypted:	false
SSDEEP:	192:N/dB0q4e6uyfrbqGIwYMH17o/A85q1H6uy2rbqGIwYRe1qW/uaDqPN6uyIrbqGIO:ZFuq9PUhq9IW/q935Cq9C
MD5:	CB6AFEA6EE75D2FC22E4A22512425465
SHA1:	F91258C83A54D1D44DF8637909885B300B5D305B
SHA-256:	31FE46164CE2459191CA1F7727FD742CE01833EE4F705459E88D43F53FCC9F80
SHA-512:	91FDA973E0A4490AC58E5F3881A5600E41721DB09714047CE3666C680961710DC060D454FA1A668D8D43A21D9D8358CEF90BE89D199AA9BD4124D32F9F8FBF0B
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Open+Sans%3A300%2C400%2C600%2C700&subset=latin%2Clatin-ext
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 300;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 300;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 300;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Open Sans';. font-style: normal;

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7281)
Category:	downloaded
Size (bytes):	7416
Entropy (8bit):	5.331948687854139
Encrypted:	false
SSDEEP:	96:PEcg7lrL7LMgkubetbEL/Q0O3fWt2GANOr+FDVq26A00NmSvzuzGyXPn1BBLt8:Pi7lrPVSbV5y+FUVb4
MD5:	8E9392EC75B6EF18BA671A0A4432D1B1
SHA1:	7E7A63444FB918382D51BD2F7BD3757C0434FF10
SHA-256:	FDCB39EEC676F0D52A9647156D6E1C5E0668EBDBB1060CB8FF89D5B4AB4695E8
SHA-512:	5E3B713B57787FF0093A86B7B91180C7EB878CD652080258FD094CE4F978881795126671EE9AB0BC782310D8AA2FF83AF6733CB0E4FA6A0A57FE611062275890
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-content/themes/salient/js/build/third-party/transit.min.js?ver=0.9.9
Preview:	/!. jQuery Transit - CSS3 transitions and transformations.* (c) 2011-2012 Rico Sta. Cruz <rico@ricostacruz.com>.* MIT Licensed..*/..(function(k){k.transit={version:"0.9.9",propertyMap:{marginLeft:"margin",marginRight:"margin",marginBottom:"margin",marginTop:"margin",paddingLeft:"padding",paddingRight:"padding",paddingBottom:"padding",paddingTop:"padding"},enabled:true,useTransitionEnd:false};var d=document.createElement("div");var q={};function b(v){if(v in d.style){return v}var u=["Moz","Webkit","O","ms"];var r=v.charAt(0).toUpperCase()+v.substr(1);if(v in d.style){return v}for(var t=0;t<u.length;++t){var s=u[t]+r;if(s in d.style){return s}}}function e(){d.style[q.transform]="";d.style[q.transform]="rotateY(90deg)";return d.style[q.transform]!==""}var a=navigator.userAgent.toLowerCase().indexOf("chrome")>-1;q.transition=b("transition");q.transitionDelay=b("transitionDelay");q.transform=b("transform");q.transformOrigin=b("transformOrigin");q.transform3d=e();var i={transition:"transit

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	368256
Entropy (8bit):	7.99947942483432
Encrypted:	true
SSDEEP:	6144:lc1jTgUzzccnID0X0WeBNXnw7ccu+p9Ionp4oXHtQmWxO+4a5C11YL:yFc6ZnIaDeB5ycSI0p44Wx9y0L
MD5:	8B1AF94257738AD4355B0853384C9312
SHA1:	10F0D9506A639C6B255DD100CD3D124A5566915F
SHA-256:	2C9D0F289826DF679600F9DBB935891660D5D144CFC06B36D22517DB91DDA943
SHA-512:	06430AFBCC1821AA6B5D81C64292A16F0C4F596416ACA1E3387BC1F9A57AAC81A40F9E05D098EDC284E9D074C136C88A914C673C4CE69B4C9FDEE697740A3605
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-content/uploads/2018/10/slide5.jpg
Preview:	RIFFx...WEBPVP8X........?....VP8 ...P....@.+.>Q".E#.!".U.pp..ba..n..~..5.&Z.j......6......O..#..dpk......a..\~x.5......U..3....{..(...s......<........\|....U.w.).......~.y..........t.......G.O....?.S...?......#.?...............E.....w..._...\|E.....G.....a.............../..}?.?..j.........G....S_..r...W...[...7.w........................._.?...?.~....r...{.O...7..................................?j...........~.~#...........>.....i.[._.?....S......O.........G..n......S.........o...?t...G..............\|..~^...Q...../.>=?........w...^._~....~......?.?....B...~...g._...........\|A.......\.`Um6.D._.Y.]4...KH..kU...s...6.cN?N>.o.O..b...R.......+.\9E....%MiX"+..R.4\|m....(.....+..8cf.....a]..g..&.5....PJ.[T........h`...../i4........J..L.f....u...7....0.......@..w.N.9P...vtJM.~5.fI.f..Wc..<.'.nyB.+~.z.u25#y.aD.\|....Sb.$VT.z$..,..'.\|.P.][...J..T]...\.......T.V.Yc..?3.\|9....&.9...z>..B.W.2fW..[.D.g\|...w....u.D...]. ....)A....AgR..#b..."<Pm.a..."......0.o..0.....w..({

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1606
Entropy (8bit):	5.268388270264093
Encrypted:	false
SSDEEP:	24:hY6sv7zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5zF5cUehG0:3q3+pUAew85zvc/hG0
MD5:	010AC21CFFBF2E910B2D0C66A924E377
SHA1:	3427A3E7C925D1B7B2B85CFE7B7FE27DE71258FA
SHA-256:	E6A2AE9B4E1A304837C40C31C647C66F66611946FCFA9E4C4D1AF8BDF509FC0B
SHA-512:	AB224CF32B402A86EDC557F3CD48B345FD34BB7E0168FBAF3A4152FDBF039F62FF8E17428420AF20F5F89BD5C4E1C986AE977479DAD96C82C9D59AA1FB36196A
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 405 (Method Not Allowed)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:u

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6625), with no line terminators
Category:	downloaded
Size (bytes):	6625
Entropy (8bit):	5.021395915232743
Encrypted:	false
SSDEEP:	192:cvtxGU52v1wAsFYM3qypqEdSmNql44UakS:cvwQ3sFWqxUaP
MD5:	FD7EF2E4737ACD74FD0DCDC3B515E304
SHA1:	0D792B33F12A48EE8AAAF2560A63A5682470645B
SHA-256:	1D52E1AC7D3BC25A8B0FFC257153F9DD50249F96FE9A4DF5E0D771241A69062C
SHA-512:	3C4358F9605F1CCE097F36689099B8364C43CC360C3D4F5CA77BE5CEE43BB818C6562496F26AD57CE44C34C474FE4CCB6DEED01A14ED259D498F5BC17F9532C7
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.14.0
Preview:	var runtime=function(t){"use strict";var e,r=Object.prototype,n=r.hasOwnProperty,o=Object.defineProperty\|\|function(t,e,r){t[e]=r.value},i=(w="function"==typeof Symbol?Symbol:{}).iterator\|\|"@@iterator",a=w.asyncIterator\|\|"@@asyncIterator",c=w.toStringTag\|\|"@@toStringTag";function u(t,e,r){return Object.defineProperty(t,e,{value:r,enumerable:!0,configurable:!0,writable:!0}),t[e]}try{u({},"")}catch(r){u=function(t,e,r){return t[e]=r}}function h(t,r,n,i){var a,c,u,h;r=r&&r.prototype instanceof v?r:v,r=Object.create(r.prototype),i=new O(i\|\|[]);return o(r,"_invoke",{value:(a=t,c=n,u=i,h=f,function(t,r){if(h===p)throw new Error("Generator is already running");if(h===y){if("throw"===t)throw r;return{value:e,done:!0}}for(u.method=t,u.arg=r;;){var n=u.delegate;if(n&&(n=function t(r,n){var o=n.method,i=r.iterator[o];return i===e?(n.delegate=null,"throw"===o&&r.iterator.return&&(n.method="return",n.arg=e,t(r,n),"throw"===n.method)\|\|"return"!==o&&(n.method="throw",n.arg=new TypeError("The iterator

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8281)
Category:	downloaded
Size (bytes):	8466
Entropy (8bit):	5.052750167223151
Encrypted:	false
SSDEEP:	192:QYAtBY1jWBoYfgZn+gSEmaAGCkHjpXCNd882E9cNS/JWmx:QYAvSWBoYfon+gSDkrH1XCNd882E9cNw
MD5:	CE2136461C78408405538B0D3FA6B403
SHA1:	CF46492E7045A2671B2432ACE845C9BC772924F4
SHA-256:	1E4307AC8B8C4D489C755729B6B1914A876F8693590E802B43EE4AC91B9AA354
SHA-512:	C96E4FFC5ED8BD62CC0A5417554215CD95182679327A57814903E842A0C9C6B73AE4CBAA6B8E9B8377C0ED4620B97E443877055F74A90F2BA7375E9CA834F21C
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-includes/js/jquery/ui/autocomplete.min.js?ver=1.13.2
Preview:	/!. jQuery UI Autocomplete 1.13.2. * http://jqueryui.com. . Copyright jQuery Foundation and other contributors. * Released under the MIT license.. * http://jquery.org/license. */.!function(e){"use strict";"function"==typeof define&&define.amd?define(["jquery","./menu","./core"],e):e(jQuery)}(function(o){"use strict";return o.widget("ui.autocomplete",{version:"1.13.2",defaultElement:"<input>",options:{appendTo:null,autoFocus:!1,delay:300,minLength:1,position:{my:"left top",at:"left bottom",collision:"none"},source:null,change:null,close:null,focus:null,open:null,response:null,search:null,select:null},requestIndex:0,pending:0,liveRegionTimer:null,_create:function(){var i,s,n,e=this.element[0].nodeName.toLowerCase(),t="textarea"===e,e="input"===e;this.isMultiLine=t\|\|!e&&this._isContentEditable(this.element),this.valueMethod=this.element[t\|\|e?"val":"text"],this.isNewMenu=!0,this._addClass("ui-autocomplete-input"),this.element.attr("autocomplete","off"),this._on(this.element,{keydown:

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	87006
Entropy (8bit):	7.997344327233381
Encrypted:	true
SSDEEP:	1536:GhecIVjEOABKUXKKlCTbWB/2Y2eaCdbABXOQVyZIxj/brh7mN4FesPEwxqKa2NBK:GALjEOABKhK0b5J7EAB+QV8IRZ7DJ88e
MD5:	5DB5EFED134E74EECFA4702ED7EB0FED
SHA1:	DF0223CBB889891407D55263B2546C8B98AEEAD1
SHA-256:	28683BD53044D212C98335E8944810A3DAD67ADC1218BB7DF10177E3AA726963
SHA-512:	8C0990348F488C2CCBA2D99294169DB4767DD2676BA8AA410B2AD07E356DC7131C0669B46C3F590D4307DCA63E9173044B507687E5578DD67F039ED1EA900EC2
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-content/uploads/2018/10/lank1.jpg
Preview:	RIFF.S..WEBPVP8X........W.....VP8 2S.......X...>I..D"......(...13e....Q....._.i._.{.\|....=\|...7..............I...o./pO...}K...............m=.........._.G...c.w...O......>.?..............B.L.....>}.....?...\|.}...a...k./..........<[...O.......\|..G...W........)....y...;...O`_d...+.........>..O..R.^.C.......?._.}....o......?.?....K.....o....y=..].....?.o.......z..........._..........xP@.d...?5ha...W.o....P@..!.`..%/.w......o.R..A.z.......s .}e..&Q\../.\|.s.4.>.Y.....r....J..B.>i3D..B\...L7.....fz..-.A....5I.L.4..I........\|......g...z,R........MPVq....g.Bq.Tq..!.P.+..."..w.B.U.h...Y.0;.o.V.b...\|ki.B..$\|}.](d.g..;.i......L>.11eo2b..ne.....al...P\|....t....8..A.....).....t..'...k....i.L....e.5..j.{.Abe'p.6+....H......qu.3.".p}..v/^.u.67...!#$n5..S.p......neQ..........ZP..b>i.sC..s.N.i........c.os..m..G./.S..g?..u.../..lsP..,.4:.C.6...}.F.]1'...#.[ ....3P....A..W..E...f.@.e.xM...L.i.-......H....c@.6A}..9......"..i...R._Pf.v.u..DH..Xx.x..2z]...T.......(...1s.

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	264883
Entropy (8bit):	7.994183974695864
Encrypted:	true
SSDEEP:	6144:1RQLp/luTj1sqEjxJc5dJvSNCFdjfihjjIy7++JY0e5zqAfE:z2JM9NEjY5zyCFdLEl7Fe0az/E
MD5:	4306F4D8C4220D96CE8DFF5D07BD0645
SHA1:	5C659C972F64D0EC31B33A15B7CB5DC8E8780AD5
SHA-256:	D131383811C3E5160B7EC71449D4B1E891BEDB79E88751ABDDF4B3D8C7313274
SHA-512:	BC89870CC1E2B823B8AB01710AE96CBC2427C436D48DC68B31C1F800E69E1A7924475FBD189AF7EF951C7640BF455D62397B6C0F67AC299E90C3B72C92060227
Malicious:	false
Reputation:	low
Preview:	:....1....wAD9uO9YAQw... ........0..j.............p.....S .....8<t5,....F..JF.k.~%.......n..1...y...;:.P.7.g).8e... .....}h.$..R.#.J.qH........D.9... ...#j,...[f.d.Y...rb...jlV....2G.;...F....r[...n..s..K0.AU........=fs..R........V..$s...1r.......2$...+`...............T....._I.l.$.w..H.e..i.l.+\|[....?..........H...!uh.....1Nv3.x..7..%D.$S.......7...U.....u%..0...s.........y@/g...y.....s...[Q.A1<.u..FR!.wR..u .......\|.%'.g-.(.P......h!.P7....e?..W...&..M$..>..#..{Q}.....Ys......9JP.lq#C.!..E..V.@.M....0.8mkd8.@}..V#....1..Ae.......q.7I.Jr.m.....-.j9...Dq....J..6%.q9..._...syq..y.q...V$L`.x.E.y.)..%.d=vl.d."..ic/.k.8.)..&......9.K....j.,..!V.c..'Bo......a.. ...<....tb.J/.4m....0K......M..$e.....Hx.f}F.Nr'.s0.j.d..0B.... JO..v.5.Q.-D.%~...uLF..7......;..._.v.`.......N..>[N.....v8.....&.:S.q!zi.TE...:..m.t`...h.@)k...A.'..;..c.... $ng[e*..;....%.\|2`.]..)..Ae.......V...x_\.....~...6....y...w.#.+....Z..o...R.M...Yg.y.....X~..M......)..A.ae

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15744, version 1.0
Category:	downloaded
Size (bytes):	15744
Entropy (8bit):	7.986588355476176
Encrypted:	false
SSDEEP:	384:z1TLklSElcS5V6qQTMUP07JwirW6RlLwK79/:p7EJ5E2bJwi5jLwK79/
MD5:	15D9F621C3BD1599F0169DCF0BD5E63E
SHA1:	7CA9C5967F3BB8BFFEAB24B639B49C1E7D03FA52
SHA-256:	F6734F8177112C0839B961F96D813FCB189D81B60E96C33278C1983B6F419615
SHA-512:	D35A47162FC160CD5F806C3BB7FEB50EC96FDFC81753660EAD22EF33F89BE6B1BFD63D1135F6B479D35C2E9D30F2360FFC8819EFCA672270E230635BCB206C82
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......=........t..=..........................d..d..^.`.. .T..<.....\|..{........6.$.... ..t. ..I.3.%.....8..&....4Z.\|t .8.........D...$.uNE.P.E.Ak...=.x.9Xz.`.I..R....#F+B`..}.RP\|E...Z\.W[.............C...QB....m...cm.?.F.g.......Q....3......p...L2.[......!+@U..^~.......D.?.......j...U...c..U.l.6{...m.CD].h.t.....Q8.....@P...L.c.....+...ZD..2.K...:..4{g..:..~....v......<..H^.R.'....8....?.;...uy.VW..8=.".F..*.....@E....c....=..Ib.....y8$.a){.......KiIW.&..~.}..1..w.M..{.4......!..{..F.H.5#K...t..5.w...ve;. '......NJ......'(%;...?...D...M.Cq,<.=?.f......._...V..bA.(..37..v....+.uY.C.b.w8AF..3.n.-..'..U%.2....o.l."...^bj..aoF.!`....A....j...'.:Z.u...[..p.GW:U%.Ejq...:I...C........S.C...sJe.6D...<.UM,..&h..z}.y\|..9...D..j...n..B.$..T....?../.Q..=B...C._.f.#.:Bo.@]T.(..v..F..+d...". ......R..R..R....!..~A....X............>!`p..,08. 9.../.....r..Q.......Qpg.\ko...C..3..Y.y..t'.d9..>#\|..3..?.#..$....i........g5.z....S....{3..Sp..S2..w.6........

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 600x400, components 3
Category:	dropped
Size (bytes):	65215
Entropy (8bit):	7.9713179175568945
Encrypted:	false
SSDEEP:	1536:cKo7Wije0MfV4ZRTnQlPUqyD7MXU5SZ5cgdpGr4n0s+x0:9o7WiofgUsqyDOJKgerNs/
MD5:	B491E387BFD0E97609C0D118B5E7273A
SHA1:	B3DE38E9FCD06D653CC66568BEB4C86695C26BEC
SHA-256:	0A9B3BA70482D3FFA20387D93FF71BA3EAEA13FAA89D2B6ECA826903B0578838
SHA-512:	F56152CF425130F1C17F6B737D1C67C21F0C3B39103193709667BFD7285809897933996308B3947FA1FA911E23E09B3981BAAD844DBD31330DEE3D0DDCF98B61
Malicious:	false
Reputation:	low
Preview:	......Exif..II...........................J...........R...(...........i.......Z.......H.......H.................X......................C..............................................!........."$".$.......C.........................................................................X..".........................................G.........................!1A.."Qa.q.2..#B..R....$3b...r.CS..%5..4...................................(......................!.1AQ...".aq2.B.............?...qJ.v..x._Rx....9..4`b...`R.@..0....G.h....qB.....N=.Q.....8.1.R.QQ@..1J"..P.".8. ..h`..P./.X....f.G4......._zt.qC..(w..1B...0;P.qE.Q..(.8../.(...]...#....E.(...K...'..F(.._.Di..(v......X.Q.4.N(.x....h...>(.JB.E.)T...b....1@...?.hw.. .zY....P.....P.*...$..T.Q`P.M.8.QP.hb.E....K....q..,..J.A.D~..I..@'......"..0.P..P.Q........p+S ...t...h..R.F..(..\|.....P. ...y.K..1@...)X..0....b..@...f..<R..sC..{.<S..v..1K.j<v. ..,v...,....E..^.J.>.`#..C..P. ...../.1.@...:P.4..X.Cx9..^(m.hF;P#=ix...#.X.K".(..."....\|P.dqE

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	60346
Entropy (8bit):	7.996637561344551
Encrypted:	true
SSDEEP:	1536:fNWx2jHwvggj/4bV2J67lOIr5hqoOtx/F35XFqfcBzyx5j0:f4x2jHIy2Js5nqoOt331oc0k
MD5:	B46DFCF94D5E4010C71A2502FC5F85E6
SHA1:	1BA833EF83ACBD65D3D7A72B3A2BDEE7E6547483
SHA-256:	A1111A301A0DF8303B4B3F05610914BF4D1657DFCFD8796189A64A9DE6DAABEE
SHA-512:	2C11A540CF6094A1178B54370B31726F9396032D372A5E158E6964A37B8C088679111748B22834EDAE4C821D84E274DF0463033DF83BB364A022FD350225FD7D
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-content/uploads/2018/10/3-1.jpg
Preview:	RIFF....WEBPVP8X........W.....VP8 ....PV...*X...>Q .D#.!"-..Pp..M.w.../B/....pT&.0h.l........?B..........M........~..........'....g.....}L.[._.7.E.g.o.OP?..:=..w}..d...O...o.....g........l.............,}..../._.}.._.O....8.!...?5?....k...y...G.#.?...?.~............$._........c.........z.....S......p/.....~...........o..........'.G.....M....._...w.......~a...9...S.w.?./..........I.......g.......SgG0.c....t....+O..3....#..A[.zO.~o..s.E...N..V6..}.PG{.....^.R....^!..6.a..$.t..HU.....!..?.Wf6....m.].^.P..d.JA1sF{....H...?4g&t.0.1?.v[D.]..{........'.@8.X..!`.s..Rt&...GXj.....J..x...QWC{,..M..}.9=+@....@.........I..I.P..............?M...&&!.y...nV...._n.uFWx........:..s?v.p.Q.....\|x..i.~...HC...<.#<.......u!.3z...d.......pB!....kg...\|...y.e1$.........Y<."..e....n....)N...%,)..<..;..xY..<......j.tv.p..F-...^..e..<.[!H..OU...$....8i.._tD.{..]......q..w?.}.v...cy.I[../.....N.Mv.._}...2..~....T-..V.ms..........`.s....N./...f1.G.G..i.a"..x..#.

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21205), with no line terminators
Category:	downloaded
Size (bytes):	21205
Entropy (8bit):	5.249788317174228
Encrypted:	false
SSDEEP:	384:gHTLkCoiKXCBQYMwoTR+YbeAkCGMBgXdgnL/7bQJ6dHMQs++C551aPu5:g3eIMp3hGEgdgnLIJcHU++CZou5
MD5:	8D0B3B2F86E0025489B660454AC76419
SHA1:	9F7E9AC535F3E75ACE0015339499E286837623DD
SHA-256:	FD0062DADC441AC836028282DFDA635DA47F4280756D07AB0908FAF71818E05E
SHA-512:	208366D97E4146CED14923E4455CDAC9A2D862A068D850A4CB8FB7E5A06061BEA03B60005601350693529F1263E49AF9D5B5ECD7BBBF0EC5ABCE2F108DF72405
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-content/themes/salient/js/build/third-party/magnific.js?ver=7.0.1
Preview:	!function(e){"function"==typeof define&&define.amd?define(["jquery"],e):"object"==typeof exports?e(require("jquery")):e(window.jQuery\|\|window.Zepto)}(function(e){var t,n,i,o,a,r,s=function(){},l=!!window.jQuery,c=e(window),p=function(e,n){t.ev.on("mfp"+e+".mfp",n)},d=function(t,n,i,o){var a=document.createElement("div");return a.className="mfp-"+t,i&&(a.innerHTML=i),o?n&&n.appendChild(a):(a=e(a),n&&a.appendTo(n)),a},u=function(n,i){t.ev.triggerHandler("mfp"+n,i),t.st.callbacks&&(n=n.charAt(0).toLowerCase()+n.slice(1),t.st.callbacks[n]&&t.st.callbacks[n].apply(t,e.isArray(i)?i:[i]))},f=function(n){return n===r&&t.currTemplate.closeBtn\|\|(t.currTemplate.closeBtn=e(t.st.closeMarkup.replace("%title%",t.st.tClose)),r=n),t.currTemplate.closeBtn},m=function(){e.magnificPopup.instance\|\|((t=new s).init(),e.magnificPopup.instance=t)};s.prototype={constructor:s,init:function(){var n=navigator.appVersion;t.isIE7=-1!==n.indexOf("MSIE 7."),t.isIE8=-1!==n.indexOf("MSIE 8."),t.isLowIE=t.isIE7\|\|t.isIE8,

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 773x516, components 3
Category:	dropped
Size (bytes):	128403
Entropy (8bit):	7.96744445206872
Encrypted:	false
SSDEEP:	1536:fs8cOWo9SmzSDhqC3Rqr4GpXAM2KhORcBrCupG1VBY6vZFiEpfodTPFyoVk8HZXR:Yo9SUSUFKghOArCupGJ1xvfoxPF1kGGK
MD5:	4B41DD514E450D30C16501BFD2631512
SHA1:	447ED786CDC6CE8C04552D95C6567A821115B698
SHA-256:	ED797FF575EF7F2A24C408AD365F47C64E0D53BCCCEE7B53B26061A82EA00E99
SHA-512:	ABA1B3A77481726CBACDEA98470AF0994874A59BB4B0BFFDDB84594DD2D99A4ACCF4141B06E8E928D6E7BA2FC31A971E6E744EF5C3CC0CCD5E2EEFFE88492FD0
Malicious:	false
Reputation:	low
Preview:	......Exif..II*...........................J...........R...(...........i.......Z.......H.......H........................................$Photoshop 3.0.8BIM..........Z...%G...C..............................................!........."$".$.......C............................................................................".........................................P.........................!.1..AQ."aq2....#B.3Rb...$r...%....4C..&5Sc...Tdes...................................8........................!.1A"Q..2aq....#B.R....3...$CS............?..h...1.......k,h.mA4c..dG...c......Q.:4Fr0.3.q..N...?m...CQ\|..._.mQ!.N6...?L...M\|....UB..(..4....2G.X.1F.g....%...>}V<.[4.....\.;7..YY....8f....{i.H..Ec..9...M..m...C..;p...<....<....G.......TS.&...j]<.f.....:...........$.\|=d5.$...Jx...._C.._...S..\..=9z.u...,..QN...J.x...J..r....._......1Q.u...j...%T.Lk8..dV.!G8.8.P):.<.<5rE8\......#8.3.8..v..A9.....:es..q.~..-k..%........u..m]q.W.P.~..<u.....FL...eA....2q.v..gvl.....,.X.

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 68x68, components 3
Category:	downloaded
Size (bytes):	6036
Entropy (8bit):	7.912843097963705
Encrypted:	false
SSDEEP:	96:/hmRpo9QuefLOFGKr0YxGf4d0FeT2V+8xoabzsNDw3clDWdgCtJfp8oKSVA:/cxfL1ZfG0Fec+ZN03oDWdFtJhdpVA
MD5:	7BD620851826BC84FB8ACD578B8D5976
SHA1:	D302C6F554BCAA60A708E699A95F1927258C532F
SHA-256:	8470516CA0F5BEBAAE1E80A2CFB613C7B8900F721D271F91DC90E05B4ACC8A07
SHA-512:	667404E2CE7AFB9D598E104D889F860C20A5ABD9318AD1466BE9BBD060B397C1DAB8322843677A2A9D840841ED2CC58A91AD0C80E18D4EE175CCE3A3AB05E408
Malicious:	false
Reputation:	low
URL:	https://yt3.ggpht.com/80u-Vp0LwT_GzPtXdBZwLam5D06IleML6OJ6fgd3yr_LnC9097d3fFdw1o3BZ8djM465KIoBYbA=s68-c-k-c0x00ffffff-no-rj
Preview:	......JFIF......................................................................................................................................................D.D............................................2...........................!..".1A2a#3CQq....$%R.................................7........................!."1.A.2Qq.Ba.#Rb..3......r..............?..>....D.6.FT...u...}..CMU...k..E.i..c.d...h@Efc......V..../.Q....}B.%...y.[........_z.D..e!'.m..........z....CQJ.o..13a....!%.I...q.'u^...)....$g..m..O.P...l.+...n...l.g.{i)G....x/r....!.YFA8$...R.C`.HV(.z.Z$....X,a........>o.N>..e.%.q.ve..^...0.X.o.z..i.Z+m."..-....U....Au..Ll>..r...;...(.@.....z.)......F.I...s@.Y..M..%..Z..:.+.[.>.i-5{....v..?.)..FA...N.m..L-.._..G.~.W.....2.\|0!...8?o#.7Et+Y...9..&.E.F2.?..<..`:....c@k.b.E..j.=...O.~y?......#.(..(?..T...?#..b.?.....%..JG.{(..(...C..X....]5.S.......>...X..z...........p...p.P.......1....#m;x]..~N.C..._.}.f.~v/....f'o.....31%q....#.r.~....w*.

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2620)
Category:	downloaded
Size (bytes):	2711
Entropy (8bit):	5.221876664182422
Encrypted:	false
SSDEEP:	48:NbBSHLadoNsotDykhwy5irSUdhw7SUKYE4R1ZOlxOcHyOqCpi4tGErM7eeqxPNke:VBdGDh2uYxOcHyOqCg4z4E3
MD5:	2A651F118ED794F9BDC86EF7EB86859A
SHA1:	044DAF3A8F2789D7B80948DCF640BB72775F9DF0
SHA-256:	C962E74A0CD768609B29C247028BD61C3229A50BB3ABE908FEEAA98962EB0971
SHA-512:	29A20F42BA55BCDE7849AA21B8A26BE89D0911CF480197557FD53C12566AB076BA56C34B789ADA36B41B679B0E5017EA2F845F767DCD0041C0F5AB1C9BB616D1
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-content/themes/salient/js/build/third-party/jquery.mousewheel.min.js?ver=3.1.13
Preview:	/!. jQuery Mousewheel 3.1.13. * Copyright OpenJS Foundation and other contributors. */.!function(e){"function"==typeof define&&define.amd?define(["jquery"],e):"object"==typeof exports?module.exports=e:e(jQuery)}(function(u){var f,d,e=["wheel","mousewheel","DOMMouseScroll","MozMousePixelScroll"],t="onwheel"in window.document\|\|9<=window.document.documentMode?["wheel"]:["mousewheel","DomMouseScroll","MozMousePixelScroll"],w=Array.prototype.slice;if(u.event.fixHooks)for(var i=e.length;i;)u.event.fixHooks[e[--i]]=u.event.mouseHooks;var c=u.event.special.mousewheel={version:"3.1.12",setup:function(){if(this.addEventListener)for(var e=t.length;e;)this.addEventListener(t[--e],n,{passive:false});else this.onmousewheel=n;u.data(this,"mousewheel-line-height",c.getLineHeight(this)),u.data(this,"mousewheel-page-height",c.getPageHeight(this))},teardown:function(){if(this.removeEventListener)for(var e=t.length;e;)this.removeEventListener(t[--e],n,!1);else this.onmousewheel=null;u.removeData(this,"

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6273), with no line terminators
Category:	downloaded
Size (bytes):	6273
Entropy (8bit):	4.900607782767638
Encrypted:	false
SSDEEP:	192:WozS60B6m6Tt3MMArr1suG9GqZSD4OV16QKY1f2taCYBt4xxU:WREt3pArr1suSfZhXsyaZt4xxU
MD5:	E1ACCD02B0B968F54D170BBCB3568836
SHA1:	DB89AB4D0085CDADBAE6B693A1838E5EFC96FD56
SHA-256:	EC75DA813D229DAAE40434291FF4B8C51875C66A810B3EB5A54D71E20A01AB4E
SHA-512:	702E98810EE56DA290BA262A9E8A21E4799568AD29586860ECE62187B2F5E488D0BEF0BE51DEABBE00FCB170DB32B52030D97512279F00920C15E3589EF9582F
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-content/themes/salient/css/build/elements/element-testimonial.css?ver=16.1.3
Preview:	.col.testimonial_slider{float:none}.testimonial_slider{float:none;opacity:0;margin-bottom:21px}html:not(.js) .testimonial_slider{opacity:1;height:auto}.testimonial_slider:not([data-style*=multiple_visible]) blockquote{padding-left:0;text-align:center;color:inherit;background-image:none;font-size:22px;width:100%;margin:0 auto;opacity:0;position:absolute}.testimonial_slider blockquote p{padding-bottom:30px}.testimonial_slider .controls ul{margin:0;display:block;text-align:center;width:100%}.testimonial_slider .controls ul li{list-style:none;cursor:pointer;display:inline}.testimonial_slider .controls ul li .pagination-switch{background-color:rgba(0,0,0,0);border:1px solid #333;border-radius:10px 10px 10px 10px;cursor:pointer;display:inline-block;height:10px;margin:0 4px;transition:background-color .2s linear 0s,border-color .2s linear 0s;width:10px}.testimonial_slider .controls ul li .pagination-switch.active,.testimonial_slider .controls ul li .pagination-switch:hover{background-color:#3

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 77160, version 4.459
Category:	downloaded
Size (bytes):	77160
Entropy (8bit):	7.996509451516447
Encrypted:	true
SSDEEP:	1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2
MD5:	AF7AE505A9EED503F8B8E6982036873E
SHA1:	D6F48CBA7D076FB6F2FD6BA993A75B9DC1ECBF0C
SHA-256:	2ADEFCBC041E7D18FCF2D417879DC5A09997AA64D675B7A3C4B6CE33DA13F3FE
SHA-512:	838FEFDBC14901F41EDF995A78FDAC55764CD4912CCB734B8BEA4909194582904D8F2AFDF2B6C428667912CE4D65681A1044D045D1BC6DE2B14113F0315FC892
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-content/plugins/revslider6620n-1/public/assets/fonts/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0
Preview:	wOF2......-h..........-.........................?FFTM.. .`..r.....(..X.6.$..p..... .....u[R.rGa......'.=.:..&..=r........].t..E.n.......1F...@....\|....f.m.`.$..@d[BQ.$([U<+(..@P.5..`....>.P..;.(..1..l..h...)..Yy..Ji......\|%..^..G..3..n........D..p\Yr .L.P.....t.)......6R.^"S.L~.YR.CXR...4...F.y\[..7n..\|.s.q..M..%K......,.....L.t.'....M.,..c..+b....O.s.^.$...z...m...h&gb...v.....'..6.:....s.m.b.1.m0"....*V.....c.$,0ATPT.1.....<..;...`..'.H.?.s.:..ND.....I..$..T..[..b4........,....bl6...IL.i}.&.4.m,'....#....Rw..bu..,K......v....m_-...\H....HH.......?...m..9P...)9.J..$.....8......~.;.r..n.=$.....Nddn.!'....;...8..'.N...!.-..J.........X.=.,......"`:....... {......K!'...-FH....#$~.Z_.......N5VU8F....%.P..........Cp..$.Q.......r.....k.k...3...:R.%....2{.....h%.)8..........ILK.6v.#......,;.6..N.2.hv...........OO..t#....xT..Bf....q^.#....?{.5b.I..%-WZ..b.A...^.1..n5.....NQ.Y'.........S.....!t" .`b3..%....35....fv;....l..9.:jgf?gr..p.x. ..\|.. $. e.

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	57010
Entropy (8bit):	7.996497317904476
Encrypted:	true
SSDEEP:	1536:aTbse+J7vUQRxAb7YlQS+WGn8RYbYv8GZK/u5xd7:2se+Nchb7YmWjFnH7
MD5:	3649084E4507B2D6E714DEC0A2D8D303
SHA1:	D9D9AAF17A95B3C12F582BAA54A534B0C157DC04
SHA-256:	A7FA88131C9C9F51F69177A730E1B941600B5A3342C72424E9073F2FAE024BFC
SHA-512:	55F3BF4F57FF352CEC7C9A7B62237ECB957FC59D79D6D1C2F2D25ED12ABE2F665A37658F92C713F0596839E1D7EA4FA1A6E36CCFDBBD6A6F3BF624079BCE8645
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-content/uploads/2018/10/7.jpg
Preview:	RIFF....WEBPVP8X........W.....VP8 ....p....X...>Q .D#.!!/...p..cn.6C..l4c.I..?d...o....O..c.[...\|.....r......V..}A.....-.....O...?p.x=...~.{......;.....'......?h_._..i=.?..j............?........O..$_e}9.#.?........O...........7......`/........._.C......A......E.W...?......k.....o......_......)...../.oW..x.~..o.G.........~v}0.u......./k.T...].........>._...\|&.....{...O....Y..-...-..2F$M.E.....;%.e.j(.T.X.............6^mk..M...E...=.W./.[......i`74.fY....F......{.<Ro..RQ........;....<&\|.......}..PzM.`..T.i.o9.bV.@.#..4....(.kZ.....s.+... .]@Lt._.%..8.J.(S:......1f-...K.......X[..oY &..;&.URvs..: .I!-..c.....r......(.(y......3=...}....@P..\|\..U6..B8..4.x..\.u...Y........0'O1..o>2V...4......) .{.....H6}.#.sY...g..S...\|..g.(.T.1.....E..'.....3?B;!.-.C.l'...Gt...U..:..;P..0.Y:.h.-$Nr.E...P....>...iw.[]..v..4UN...$.\....J..91....Pv...QK8....o.r..R.....H...^.m..........._..X...gGo..i.q...X>.pT....+.vp;.\7j.<@....@....W..-m:.j^......c.../.9.:7$.\|.*.....>.4\.....?

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 600x400, components 3
Category:	dropped
Size (bytes):	81275
Entropy (8bit):	7.970282525798369
Encrypted:	false
SSDEEP:	1536:BLkx7Kx/+KEvUkyZ17pYlaARntu7imFNX9qynCxQp1NKDb7DkAYgXkmBG:BAFipYoAzgNX9qUC+AP74sA
MD5:	18193656FF5688AB67C5C68E9D2CEE24
SHA1:	3506A61857D07DF5ABCED8DFF009FD1A6CC2D669
SHA-256:	A841181B32ED6D990D69251EB6CB6B55990265C03C32DDB7708C9653DE4031A4
SHA-512:	85B01614824DA0D419D6D0B09036902589521D6D310BC579FFF248491E834298B96F0738F3A841FA6A0B4B3BEDD42B5836E5A15A77585CE04EAE787FF7404295
Malicious:	false
Reputation:	low
Preview:	......Exif..II...........................J...........R...(...........i.......Z.......H.......H.................X......................C..............................................!........."$".$.......C.........................................................................X..".........................................X.........................!.1."AQ..aq2...#BR......$3br.CS.....%4c...&6dt...'EUVsu......................................;........................!1AQ.."aq...2........#R..B$.3Cbr.............?..0....O._O_....Zz..........d...5.O.S.[8....3g..X.u....TD.CCGs{}.T..(x.F.H......j..!......ZB.Bdo..U...........^.....4.......(O.........2..T.!......>..-.23] <........T.E.q.\..3.[.. U.(..z.y'......^.UJ.j.m.L/....^...'.%N...gJG.C.$.....Q......$.j....4V..T.$`I.d.;2...q..n.......?%'^[...ou.....b.F.y..\.=NA.......!W...]..AM=I..e.6.......a.s.N..j....f&E..M.g.O...:......nSum.I).]...N....i....q..N...Q..E..D.U...M..JXf.....G]kDh...f..kZu.Z..kz.4.4. i6.W....

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 98024, version 4.7
Category:	downloaded
Size (bytes):	98024
Entropy (8bit):	7.996821929003623
Encrypted:	true
SSDEEP:	1536:Te9lM9ITKMpPtandzpLwETpNfdFj2yExmni83X3t4MCWzSBE2RM5RgUAkzm7zl+b:VWKQta9pBNT1n3X3BnmBI5Wx7zlvKfF
MD5:	FEE66E712A8A08EEF5805A46892932AD
SHA1:	28B782240B3E76DB824E12C02754A9731A167527
SHA-256:	BA0C59DEB5450F5CB41B3F93609EE2D0D995415877DDFA223E8A8A7533474F07
SHA-512:	9C776DEA55A01FD854EA23B3463D9AC716077D406ECBE8ED0C9B6120FF7E60357F0521AB3E3BF9D4E17CA2C44A5D63EE58A4E7A37A3D3F26415A98D11C99E04F
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-content/themes/salient/css/fonts/fontawesome-webfont.woff?v=4.2
Preview:	wOFF......~.................................FFTM...0........k.G.GDEF...L....... ....OS/2...l...>...`.2z@cmap.......i......:.gasp................glyf... .._y..L....Mhead..b....3...6...-hhea..b........$....hmtx..b.........Ey..loca..e............\maxp..l........ .,..name..m....D......post..o`.......u.............=.......O<0.....1h.x.c`d``..b...`b`d`d:.$Y.<.......x.c`f.d........b.................b......l...\|6.F.0#....F....n..x...J.q...gje..>."..D...>..{.E.O >........,".u.^..[[[...j.os..._.M..%:0g80..........B...L.s.z.. 1Y..lKWv..es.t..)Mk^.Z...m......b.k..2....6...>'.Y......jukZ..g..m2. ......(.4..-iEk..v..}..X.B...Y`....`.....c..9.Z.JV..5.e..Y.6.G...`3..\|.6.....[uI.p.n.-.....[p.L...0...Lp.;.....%....8.o...>F8.....G8...`..W........".E^.._.=(.K,F.K.+.y..b..............x.....T.0..o.}{.uuuwUW..n.njmz-..nv....E.EAA..J!*..(..hD.2c..%F...Eb.b6...$&.....7.....UUW7.....t.w...{.9...8.m.8b...I.............7..S.E..G.!.3.....j..=.w;.P.^I..A;RR.n...k..LS....).o8G.([.

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	66132
Entropy (8bit):	7.98785028072025
Encrypted:	false
SSDEEP:	1536:TYyVkAfeH2rXQt8ZkUHU1geFnuIsc5WWrBCeOJ:TY2kAWiNHU1lsIv5WWrBCv
MD5:	7572C5022D21D6DF9C256C33A264D22C
SHA1:	869F011FD8C2D4C55CC17DDF852489AEF154FAD7
SHA-256:	B0507BA16E88B935EE721E783C973B79AC4794B0B506D21C58D028D994357CB7
SHA-512:	DCF98DF4FADE36B22356E609371637B12D823AC9D5D0B15C40AD9273D08DCEC8930B0E7CD0CB1B358749046DCDB67E010E1A4F2F5E1D5FE53C3EC9F6CD227982
Malicious:	false
Reputation:	low
Preview:	:..../....wAD9uO9YAQw... ........0.j.............p.........E..B...B...B..B..B..webmB...B....S.g.....,...M.t.M..S...I.fS.........DM..S...T.kS..........M..S...S.kS...........I.f....B@D..H.C@M..google/video-fileWA.google/video-file.T.k....s....c........."...eng..A_OPUSc..OpusHead..8........V..c..V.......G;.....bd...S.kA................'.........A....N!........N....u1..............A.......x......Q.......B......a..............q.............8.........P....._.......................................J.............."7.............$......".....'.7.....I.....h..C.u".S.....................@...).....#.u.g-g<...&c..^..\..'8.'HF.[...a.. _......P..Op..K..L.}6P[$..k..Hm..&S...x.@...w....j..<6.................Z.Jh.G2J.%.q$g.....v.F7.._...8..Mq.......a.........k.$P.hc..@...=..}.7].SaT....c.M.o.....Dy..BR.-r.~...z.0.i..-..@..u.i*`vHis..}h.O]....XOz......]..6?..#.s...1d....~.].Rs,....\|..v.....3...B.`..P..po.&..^...D.n.../.8c}...!.@...Q.....FS.R.e..`.n

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 1600x828, components 3
Category:	dropped
Size (bytes):	563589
Entropy (8bit):	7.965093342590285
Encrypted:	false
SSDEEP:	12288:HlkT84pZvws87zzi/58nCSe6VsLKHsy3AmRTZFM7:HlkT8yCs87zzAZis2BXRQ7
MD5:	21CCFCDE5CD9EFF7A0762D74F256AD94
SHA1:	D6F1E31905CC3D296640DB3DA82A5C7BCBD3348D
SHA-256:	9DD419E7D8A152DF67F62AADC2D8FEC89723072B6F70F8DAE7FA53030851BAC6
SHA-512:	AC2F4BB1DE63BEFFFCA19813B5CF5D22F9495CB231C4481E90BE556D97D06159ECDFF7341750408B3E9A576C3E200C964E193FE6AFFD190591938552CF723CC2
Malicious:	false
Reputation:	low
Preview:	......Exif..II...........................J...........R...(...........i.......Z.......H.......H.................@...........<..........C..............................................!........."$".$.......C.......................................................................<.@..".........................................N.........................!.1."AQ..2aq#..B...R...$3b.r..C...%4S..&D.c.'5Eds.................................2......................!.1A."Q.aq2.....B....#.R.3............?..C..X...&.dr...$.m...u[f..2..4dd ..S........c..@...$zh.-I..Z3.....=..7$.zj... L%..tQ... .#8..j.K....PS..C./...<6<...F4R......U.F9..@l.t.......M..yX{..mF.EW............".<.\..a........QS4.3...F.C..q.....j.....4......{~..V..o.-.x.2..(bJ.....}u...J..9V.$"Y...[Y..u<..0T#m. ?K.b?...IR....]ACU%..yk"b. ..p;...)yd.Y..B.c.=.5..6..6m.?.....t.#'.....(...Q..]......)...TS,.* .n...G.q.H.>.'[q.t5pR.hl.8./8...QX..Z...uzFh.X..<.l......:....Z..ZKW..F...0..5....Mh.w.....RQ.O.F'.u*..H.+..;...

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (10036), with no line terminators
Category:	downloaded
Size (bytes):	10036
Entropy (8bit):	5.05373092555311
Encrypted:	false
SSDEEP:	192:c7qapDOnPQAbFLcyhFAAAZAjRqKJAyAO1yr8BYltqIaQvgCNjwmEpvhZGXCVo/m7:cCBcy0K11yM4ICNj2JMlEOPnGUL2
MD5:	8CF9457F0F9F569E3C2B06DA9F080DFB
SHA1:	4E9ED75C8CB83D9D9FA718F45DF48FDD2FD4C2B2
SHA-256:	1F43C81819A40DE0F975C86D171049F104E19FEA5C082431712C5864809638A6
SHA-512:	88872D7FC808BC061D2A9713064A6726DA60D747714C05F3A7DC6CCA2CFDCE145B0B269F7242A5F5C00C20CA1642A176E875477D02E01897BD594D7697DA88B6
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-content/themes/salient/js/build/elements/nectar-testimonial-slider.js?ver=16.1.3
Preview:	!function(t){"use strict";function i(t,i,e,s){this.el=t,this.type=i,this.resizeVideoToCover=e,this.fullWidthContentColumns=s,this.flickityEl=null,this.createTestimonialControls()}i.prototype.createTestimonialControls=function(){var i,e,s,l=t("body.vc_editor").length>0?"> div":"blockquote";if("multiple_visible"!=this.type&&"multiple_visible_minimal"!=this.type)if(this.el.animate({opacity:"1"},800),this.el.find("blockquote").length>1){this.el.find(".controls, .testimonial-next-prev").remove(),this.el.append('<div class="controls"><ul></ul></div>');var n=this.el.find("blockquote").length;i=this.el;for(var a=0;a<n;a++)this.el.is('[data-style="minimal"]')?i.find(".controls ul").append("<li>"+(a+1)+"</li>"):i.find(".controls ul").append('<li><span class="pagination-switch"></span></li>');if(this.el.is('[data-style="minimal"]')){if(this.el.append('<div class="testimonial-next-prev"><a href="#" class="prev fa fa-angle-left"></a><a href="#" class="next fa fa-angle-right"></a></div>'),this.el.fi

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	9165
Entropy (8bit):	5.503249998605394
Encrypted:	false
SSDEEP:	192:TWDV8kjRYFk2S2pmk2Sjk2ScHk2SWNFQNDN8NW3XNtNGqN+lNn1NhN6ND3eNhNzF:6ZyO2SuP2S42S32ScFe5Kkdjjwn73Azw
MD5:	54012217A2F92DCDE1B06F251DDE0699
SHA1:	E0C656AE0C488005C54EBF44AB98C353502DD3AF
SHA-256:	0C40F133AB5CF66FE80E6090B41E41BAB8D8B44D28732C059C0E5070EE62B13C
SHA-512:	F807A31D44817946A8B42D383817CF4772F2F2682A8AEC01F7414AED8C3A48466C447045A0755841CC594B35B7E65A9C1A4C5049B990802A4A8A35523E2ACFEC
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Varela+Round%3A400%7CRoboto%3A700%2C400%7CPlayfair+Display%3A400%7CMontserrat%3A700&subset=latin&ver=6.5.2
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 700;. src: url(https://fonts.gstatic.com/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCuM73w0aXpsog.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 700;. src: url(https://fonts.gstatic.com/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCuM73w9aXpsog.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ vietnamese */.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 700;. src: url(https://fonts.gstatic.com/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCuM73w2aXpsog.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3391)
Category:	downloaded
Size (bytes):	58747
Entropy (8bit):	5.55982827695861
Encrypted:	false
SSDEEP:	768:Q+1U8xSsEqpzEopUivGtR8WSO/ulAohey4L5MV3Vn:u8BtpUi05/u94Le/n
MD5:	7A1773C5C44AC04205D5A182E7CAFA0D
SHA1:	0B1BF4828C39F0A224FECC1C7DBB255C743463E5
SHA-256:	1DCBCB6B5819B6D5B7F4342BDCCC2DA6761E76DA37694366972385AE6AFC2881
SHA-512:	E02E5FDB668BA31F9C09A339CB84E60D4DBDE1D6270EA6479053D037EF4FD7C6FD6522EB9959C38A38ACB440B8FC0380653BB8E0298977448985C7932764B6E0
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/7ebf4817/player_ias.vflset/en_US/embed.js
Preview:	(function(g){var window=this;/. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC All Rights Reserved... Use of this source code is governed by an MIT-style license that can be. found in the LICENSE file at https://angular.io/license././.. Copyright 2017 Google LLC. SPDX-License-Identifier: BSD-3-Clause./.'use strict';var Zqb=function(a){a.mutedAutoplay=!1;a.endSeconds=NaN;a.limitedPlaybackDurationInSeconds=NaN;g.RS(a)},$qb=function(){return{I:"svg",.X:{height:"100%",version:"1.1",viewBox:"0 0 110 26",width:"100%"},V:[{I:"path",Fc:!0,S:"ytp-svg-fill",X:{d:"M 16.68,.99 C 13.55,1.03 7.02,1.16 4.99,1.68 c -1.49,.4 -2.59,1.6 -2.99,3 -0.69,2.7 -0.68,8.31 -0.68,8.31 0,0 -0.01,5.61 .68,8.31 .39,1.5 1.59,2.6 2.99,3 2.69,.7 13.40,.68 13.40,.68 0,0 10.70,.01 13.40,-0.68 1.5,-0.4 2.59,-1.6 2.99,-3 .69,-2.7 .68,-8.31 .68,-8.31 0,0 .11,-5.61 -0.68,-8.31 -0.4,-1.5 -1.59,-2.6 -2.99,-3 C 29.11,.98 18.40,.99 18.40,.99 c 0,0 -0.67,-0.01 -1.71,0 z m 72.21,.90 0,21.28 2.78,0 .31,-1.37 .

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	410361
Entropy (8bit):	5.407510727730583
Encrypted:	false
SSDEEP:	6144:s2X9FbK4ejCXH2x34Fqjqg2KduXrrsWJ8cnTFq7Fix7PavP6t7VBZmfEsSIfF:bbKfT34FUdubKcnTFqZqPuP6xofP
MD5:	5A07507270B0EEAB0B7D4251E3C42B3C
SHA1:	98BFA22886492CC2A53929425002039676302676
SHA-256:	C5F3B2F654D2D8210A481C0164F0A53430CD09B77C34374FE23C9A03F5AD00FB
SHA-512:	2324F3A549EFD6FF6E5DE407DEF511C16C751B435A1682E8664C5089365E97734068F1681B6796EF30E4CBC4911B15D36BA7C8FCCC133A8E3CE59DB458FEC299
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-content/plugins/revslider6620n-1/public/assets/js/rs6.min.js?ver=6.6.20
Preview:	!function(T,C){"use strict";function A(){T("body").data("rs-fullScreenMode",!T("body").data("rs-fullScreenMode")),T("body").data("rs-fullScreenMode")&&setTimeout(function(){D.window.trigger("resize")},200)}function P(e,t){return T(0==t?e:(1==t?e:(2==t?e:(3==t?e:(4==t?e:e.parentNode).parentNode).parentNode).parentNode).parentNode)}function r(e,t,i){if(D[t]!==C){D[t].syncload--;var a,r=D.gA(e,"reference");for(a in D[t].loadqueue)D[t].loadqueue.hasOwnProperty(a)&&"loaded"!==D[t].loadqueue[a].progress&&r==D[t].loadqueue[a].src&&(D[t].loadqueue[a].img=e,D[t].loadqueue[a].progress=i,D[t].loadqueue[a].width=e.naturalWidth,D[t].loadqueue[a].height=e.naturalHeight);m(t)}}function t(e){function t(){e!==C&&D!==C&&D[e]!==C&&(0==T("body").find(D[e].c).length\|\|null===D[e]\|\|null===D[e].c\|\|D[e].c===C\|\|0===D[e].length?(E(e),clearInterval(D[e].cdint)):(D[e].c.trigger("revolution.slide.slideatend"),1==D[e].c.data("conthoverchanged")&&(D[e].conthover=D[e].c.data("conthover"),D[e].c.data("conthoverchanged"

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	381266
Entropy (8bit):	5.187091322609732
Encrypted:	false
SSDEEP:	1536:Ioi8ZHMCbS/SgVcBqILJPptpJKztM6oyi+MOn4y2Ox5juDEnXrDJc7MsByDCAY6I:Ioi8ZiSgKBjSoyJuf8tcHgo3N
MD5:	0EE2A2FEAD693A415E0FAFE77B8EB5B5
SHA1:	9E4071A140B8019E25ADD69C5ECF3118AF26900A
SHA-256:	A7A5B6803D9439FC3AE01128AC16617EB9DF87658B3884B7454353779A729DDF
SHA-512:	7857B6EC9FFBEEC0F4F77142C48C068AF74207B52EB794A8AFB21E7F3B60BEBA56BABB11ED49593CE91678432D0A3E35A2424C490BE99033F112897EC52A50F8
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/7ebf4817/www-player.css
Preview:	@charset "UTF-8";.html5-video-player{position:relative;width:100%;height:100%;overflow:hidden;z-index:0;outline:0;font-family:"YouTube Noto",Roboto,Arial,Helvetica,sans-serif;color:#eee;text-align:left;direction:ltr;font-size:11px;line-height:1.3;-webkit-font-smoothing:antialiased;-webkit-tap-highlight-color:rgba(0,0,0,0);touch-action:manipulation;-ms-high-contrast-adjust:none;forced-color-adjust:none}.html5-video-player:not(.ytp-transparent),.html5-video-player.unstarted-mode,.html5-video-player.ad-showing,.html5-video-player.ended-mode{background-color:#000}.ytd-video-masthead-ad-primary-video-renderer .html5-video-player:not(.ytp-transparent),.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.unstarted-mode,.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.ad-showing,.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.ended-mode{background-color:transparent}.ytp-big-mode{font-size:17px}.ytp-autohide{cursor:none}.html5-video-player a{color

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	1864673
Entropy (8bit):	7.999035846283256
Encrypted:	true
SSDEEP:	24576:q5yK/lovBz6m/niuosZknnbCMirM3L59iI+ir8Cv7RBYgcAHk8fI4dHv+y4ce3hf:qWJvposmbZYeWIPpv7RVPQq2yleP+W
MD5:	88D9594225C7B8CA17D794D7CE0F4218
SHA1:	5F413BFE9B4FA5C0DD2954411F6403E2A0E19E0E
SHA-256:	427D983D8245A3EFB431970473DC0009F2E1D96D7380215B6ADD3B32078D2BB0
SHA-512:	FD61895F8A051A65AB4B08DDD5A9E8C8ECB599D9F212F2620EE9CDCD4E8B32B1F33F927C78F580E39AAD9A4EF61823A90717BD629930ABA47808A58A5874D6BE
Malicious:	false
Reputation:	low
Preview:	:....2....wAD9uO9YAQw... ......0....j...........p..q.......Lmoof....mfhd...........4traf....tfhd....................tfdt............trun...........T..N.......OL...............................................................................................................j......................8{...............5...............................................o...............................................s.......,.......z.......................................................................n...............................................0.............................._................................7...............r.......................................................................................n.......................5..............................................D................(..............................................R................#...............1......................8........................................................U...................................

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12834), with no line terminators
Category:	downloaded
Size (bytes):	12834
Entropy (8bit):	5.068129520190666
Encrypted:	false
SSDEEP:	192:8UeAxMeiKytsS4MXRmsv7p1Op7HrC847WVGB/VSrs+s:4hV16Hy7DBMrq
MD5:	66D49803772A45D6EBC5D81562F6376A
SHA1:	745B04E14922BC8FFA25FBE6787F26235D15B129
SHA-256:	22461C72B84FB47535C72E98657348AED96B269F6CD00DD81C82513EF28E6345
SHA-512:	127C2D1FDE4E263F39566125DF0A32A9A4AAF22F589718C22B995351A3CA6F16875BB2B177400BDFE49AA0EE14D6404A0F223CBBB0DE4786455E629D4286BB10
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-content/themes/salient/css/build/elements/element-video-lightbox.css?ver=16.1.3
Preview:	.nectar-video-box .play_button_mouse_follow{transition:opacity .3s ease}.nectar-video-box .play_button_mouse_follow:not(.visible){opacity:0}.nectar-video-box .play_button_mouse_follow:before{border-width:2px}.nectar-video-box .play_button_mouse_follow svg{width:12px}.nectar-video-box .play_button_mouse_follow.nectar_video_lightbox{width:94px;height:94px;left:0;top:0;margin-top:-47px;margin-left:-47px;pointer-events:none}.nectar-video-box[data-mouse-style=see_through_contrast] .play_button_mouse_follow{mix-blend-mode:difference}.nectar-video-box[data-mouse-style=see_through_contrast],.nectar-video-box[data-mouse-style=see_through_contrast]>.inner-wrap{background-color:#fff}@media only screen and (max-width:690px){.nectar-video-box .play_button_mouse_follow.nectar_video_lightbox{width:60px;height:60px;margin-top:-30px;margin-left:-30px}.nectar-video-box .play_button_mouse_follow.nectar_video_lightbox svg{width:10px}}.nectar-video-box[data-mouse-style=solid_color] .play_button_mouse_follo

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (8189)
Category:	downloaded
Size (bytes):	21438
Entropy (8bit):	5.300921910116817
Encrypted:	false
SSDEEP:	384:Sdw5JLVFVS3dufvQNaHCip8fuxNhBGX0CiS+w/pf2229FkFvd:XS36Z5vkO7kv
MD5:	C4E68A0F3463C0BD3C39EAB38815E881
SHA1:	0CE58644E9F3C5063A11453FF287C5EC096465A7
SHA-256:	CA7DCE2391845E8AEC7DA135F33FABD10F74EED28A532AC66FD01F761FCFB42F
SHA-512:	E871F258F625A5C8E8EC3848242352FD75DCB0F0B580333FCE07625A6A2F53E83F22E4DD7492F2D12A880709D540DE0BCDD9B335D853FE9CCCFC0EFCCF718BCE
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2
Preview:	/! jQuery UI - v1.13.2 - 2022-07-14. http://jqueryui.com.* Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js, effects/effect-clip.js, effects/effect-drop.js, effects/effect-explode.js, effects/effect-fade.js, effects/effect-fold.js, effects/effect-highlight.js, effects/effect-puff.js, effects/effect-pulsate.js, effects/effect-scale.js, effects/effect-shake.js, effects/effect-size.js, effects/effect-slide.js, effects/effect-transfer.js, focusable.js, form-reset-mixin.js, jquery-patch.js, keycode.js, labels.js, scroll-parent.js, tabbable.js, unique-id.js, widgets/accordion.js, widgets/autocomplete.js, widgets/button.js, widgets/checkboxradio.js, widgets/controlgroup.js, widgets/datepicker.js, widgets/dialog.js, widgets/draggable.js, widgets/droppable.js, widgets/menu.js, widgets/mouse.js, widgets/progressbar.js, widgets/resizable.js, widgets/selectable.js, widgets/selectmenu.js, widgets/slider.js, widgets/sorta

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (607)
Category:	downloaded
Size (bytes):	34509
Entropy (8bit):	5.377068625005245
Encrypted:	false
SSDEEP:	384:d8WJGde9gSJBJGW8GOgQbFOfQUXiWsyOlkToXp/myJhSGLy9pEpC6I:d8AgCQbUg6T82
MD5:	77F6E57F9BC074B800AA4AE017462292
SHA1:	CBF33DCE03B02EFA69FE677D5FDED8DD2C9CBF7A
SHA-256:	3B156A4F8DC38470EAE04DC5D34D357A9AB5C13884B9E8E701D4EA1BBEF4B265
SHA-512:	FFD84DF253064F6D22140542266370C1C6030E77061AD0569515487EDC8932D833636162EE3B31D352FD04CBD745A4599E807AC98B39A8280BC0873BA9A7BB52
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/7ebf4817/player_ias.vflset/en_US/endscreen.js
Preview:	(function(g){var window=this;'use strict';var Btb=function(a,b){a.gb("onAutonavCoundownStarted",b)},i6=function(a,b,c){g.vv(a.element,"ytp-suggestion-set",!!b.videoId);.var d=b.playlistId;c=b.fh(c?c:"mqdefault.jpg");var e=null,f=null;b instanceof g.zS&&(b.lengthText?(e=b.lengthText\|\|null,f=b.Dw\|\|null):b.lengthSeconds&&(e=g.BG(b.lengthSeconds),f=g.BG(b.lengthSeconds,!0)));var h=!!d;d=h&&"RD"===g.ZSa(d).type;var l=b instanceof g.zS?b.isLivePlayback:null,m=b instanceof g.zS?b.isUpcoming:null,n=b.author,p=b.shortViewCount,q=b.publishedTimeText,r=[],t=[];n&&r.push(n);p&&(r.push(p),t.push(p));q&&t.push(q);c={title:b.title,author:n,author_and_views:r.join(" \u2022 "),aria_label:b.ariaLabel\|\|.g.MJ("Watch $TITLE",{TITLE:b.title}),duration:e,timestamp:f,url:b.Pk(),is_live:l,is_upcoming:m,is_list:h,is_mix:d,background:c?"background-image: url("+c+")":"",views_and_publish_time:t.join(" \u2022 "),autoplayAlternativeHeader:b.us};b instanceof g.yS&&(c.playlist_length=b.playlistLength);a.update(c)},j6

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5692), with no line terminators
Category:	downloaded
Size (bytes):	5692
Entropy (8bit):	5.030640807030057
Encrypted:	false
SSDEEP:	96:PQlNKX1zRos8L1M8EZI8Y2VWSfxUeNBhQ4lMq3Yd2HD:PFusSOu8YxuDh1L
MD5:	BECA72584B7B6DF68F09CD56ACD813CC
SHA1:	C3788C2E7BCFBDB9067FB5579E9CF323609A2187
SHA-256:	E40C49D2D7CFC035902C7B8471E9736B9A05B2ADC59ED919567063676D3B793E
SHA-512:	1667BB61B00AF922A31E247B96CA2641FABA9500020BF27F957CAF91F87F582D832B6DC3B4C885E5031416C871B8F803CD13D670614AE5A76B351786BAB71B6A
Malicious:	false
Reputation:	low
URL:	https://niceindiatravel.com/wp-content/themes/salient/js/build/third-party/superfish.js?ver=1.5.8
Preview:	!function(e){"use strict";e(window).on("resize",function(){e(".sf-menu ul.tracked-pos").removeClass("tracked-pos")});var t,s,n,a,r,o,i,h,l,d,p,u,f,c,m,v,g=(s="sf-breadcrumb",n="sf-js-enabled",a="sf-with-ul",r="sf-arrows",o=function(){var t=/iPhone\|iPad\|iPod/i.test(navigator.userAgent);return t&&e("html").css("cursor","pointer").on("click",e.noop),t}(),i="behavior"in(t=document.documentElement.style)&&"fill"in t&&/iemobile/i.test(navigator.userAgent),h=function(e,t){var s=n;t.cssArrows&&(s+=" "+r),e.toggleClass(s)},l=function(e){e.children("a").toggleClass(a)},d=function(e){var t=e.css("ms-touch-action");t="pan-y"===t?"auto":"pan-y",e.css("ms-touch-action",t)},p=function(t){var s=e(this),n=s.siblings(t.data.popUpSelector);n.length>0&&n.is(":hidden")&&(s.one("click.superfish",!1),"MSPointerDown"===t.type?s.trigger("focus"):e.proxy(u,s.parent("li"))())},u=function(){var t=e(this),s=v(t);e(this).parents(".megamenu").length>0\|\|(clearTimeout(s.sfTimer),t.siblings().superfish("hide").end().su

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (532)
Category:	downloaded
Size (bytes):	633
Entropy (8bit):	5.1842299227377975
Encrypted:	false
SSDEEP:	12:haxVVexDJ+3bJ8VPgpe+Ze+lwvv+llrXzKYXkVf9jQdzc3Mxx7ssN:haHVCV+Lr4vSbXkVxKzc3Mxx7ssN
MD5:	ECA5FA7172A43B60A6FA5BEE959E737C
SHA1:	0A01F9BDBAF753C17223519D9E504C8949D3DC02
SHA-256:	30A729C0D9EFF1D938DE7C3DA83A7F097BBD1FBA1B0D0F155CE49C9C2C9C5DC4
SHA-512:	7E14AE16265C69F0D8469D167D2328772901D92CD6C54043AB1DD4BDC5DDF703F780209114AF1E27E1F59E1B82848A01DA521CDD1772651C3258575A109C25D2
Malicious:	false
Reputation:	low
URL:	https://www.baidu.com/link?url=CvCuJHQ5mUiF8tzYwW4LExI5DJ7e8SA78W1tu_uckwU-RgMoIZevncSlciEmtvdq&wd=cmljaGFyZC5wZXBpQGdlcmZsb3J1c2EuY29t
Preview:	<!DOCTYPE html><html><head><meta charset="UTF-8"><meta content="always" name="referrer"><script>try{if(window.opener&&window.opener.bds&&window.opener.bds.pdc&&window.opener.bds.pdc.sendLinkLog){window.opener.bds.pdc.sendLinkLog();}}catch(e) {};var timeout = 0;if(/bdlksmp/.test(window.location.href)){var reg = /bdlksmp=([^=&]+)/,matches = window.location.href.match(reg);timeout = matches[1] ? matches[1] : 0};setTimeout(function(){window.location.replace("https://www.niceindiatravel.com/")},timeout);window.opener=null;</script>.<noscript><META http-equiv="refresh" content="0;URL='https://www.niceindiatravel.com/'"></noscript>.

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 16, 2024 17:04:57.988074064 CEST	192.168.2.11	1.1.1.1	0x9918	Standard query (0)	www.baidu.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:04:57.988212109 CEST	192.168.2.11	1.1.1.1	0xe047	Standard query (0)	www.baidu.com	65	IN (0x0001)	false
Apr 16, 2024 17:05:00.080636024 CEST	192.168.2.11	1.1.1.1	0x81ab	Standard query (0)	www.niceindiatravel.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:00.082093954 CEST	192.168.2.11	1.1.1.1	0xd920	Standard query (0)	www.niceindiatravel.com	65	IN (0x0001)	false
Apr 16, 2024 17:05:00.957333088 CEST	192.168.2.11	1.1.1.1	0xf78c	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:00.957990885 CEST	192.168.2.11	1.1.1.1	0x5063	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 16, 2024 17:05:02.231954098 CEST	192.168.2.11	1.1.1.1	0xbb00	Standard query (0)	niceindiatravel.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:02.232336044 CEST	192.168.2.11	1.1.1.1	0x1c77	Standard query (0)	niceindiatravel.com	65	IN (0x0001)	false
Apr 16, 2024 17:05:15.478786945 CEST	192.168.2.11	1.1.1.1	0x4c4a	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:15.478981018 CEST	192.168.2.11	1.1.1.1	0xcd51	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Apr 16, 2024 17:05:16.316092014 CEST	192.168.2.11	1.1.1.1	0xfd04	Standard query (0)	niceindiatravel.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:16.316092014 CEST	192.168.2.11	1.1.1.1	0x8690	Standard query (0)	niceindiatravel.com	65	IN (0x0001)	false
Apr 16, 2024 17:05:43.832078934 CEST	192.168.2.11	1.1.1.1	0x2f4d	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:43.832819939 CEST	192.168.2.11	1.1.1.1	0x3d70	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Apr 16, 2024 17:05:45.024961948 CEST	192.168.2.11	1.1.1.1	0x6694	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:45.025549889 CEST	192.168.2.11	1.1.1.1	0x73bd	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Apr 16, 2024 17:05:46.740906000 CEST	192.168.2.11	1.1.1.1	0x2567	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:46.741261005 CEST	192.168.2.11	1.1.1.1	0x423b	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Apr 16, 2024 17:05:46.793890953 CEST	192.168.2.11	1.1.1.1	0x9c71	Standard query (0)	static.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:46.794043064 CEST	192.168.2.11	1.1.1.1	0x7319	Standard query (0)	static.doubleclick.net	65	IN (0x0001)	false
Apr 16, 2024 17:05:46.795032978 CEST	192.168.2.11	1.1.1.1	0xd033	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:46.795228958 CEST	192.168.2.11	1.1.1.1	0xbd07	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 16, 2024 17:05:46.797527075 CEST	192.168.2.11	1.1.1.1	0x72c7	Standard query (0)	yt3.ggpht.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:46.802942038 CEST	192.168.2.11	1.1.1.1	0x8194	Standard query (0)	yt3.ggpht.com	65	IN (0x0001)	false
Apr 16, 2024 17:05:47.365838051 CEST	192.168.2.11	1.1.1.1	0xa3b6	Standard query (0)	yt3.ggpht.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:47.365988016 CEST	192.168.2.11	1.1.1.1	0xee09	Standard query (0)	yt3.ggpht.com	65	IN (0x0001)	false
Apr 16, 2024 17:05:48.415541887 CEST	192.168.2.11	1.1.1.1	0xb7ea	Standard query (0)	rr5---sn-p5qlsn76.googlevideo.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:48.415967941 CEST	192.168.2.11	1.1.1.1	0xa1dc	Standard query (0)	rr5---sn-p5qlsn76.googlevideo.com	65	IN (0x0001)	false
Apr 16, 2024 17:05:48.696429968 CEST	192.168.2.11	1.1.1.1	0x1605	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:48.698139906 CEST	192.168.2.11	1.1.1.1	0xdc75	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Apr 16, 2024 17:05:48.707140923 CEST	192.168.2.11	1.1.1.1	0x1436	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:48.708050966 CEST	192.168.2.11	1.1.1.1	0x9257	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Apr 16, 2024 17:05:49.363300085 CEST	192.168.2.11	1.1.1.1	0x8f64	Standard query (0)	rr5---sn-p5qlsn76.googlevideo.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:49.363300085 CEST	192.168.2.11	1.1.1.1	0xb746	Standard query (0)	rr5---sn-p5qlsn76.googlevideo.com	65	IN (0x0001)	false
Apr 16, 2024 17:05:50.734138966 CEST	192.168.2.11	1.1.1.1	0xf29f	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:50.734185934 CEST	192.168.2.11	1.1.1.1	0x2ed9	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Apr 16, 2024 17:05:52.808120012 CEST	192.168.2.11	1.1.1.1	0x56e4	Standard query (0)	rr5---sn-p5qddn7r.googlevideo.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:52.808815956 CEST	192.168.2.11	1.1.1.1	0x5af8	Standard query (0)	rr5---sn-p5qddn7r.googlevideo.com	65	IN (0x0001)	false
Apr 16, 2024 17:05:55.321325064 CEST	192.168.2.11	1.1.1.1	0xcd40	Standard query (0)	rr5---sn-p5qddn7r.googlevideo.com	65	IN (0x0001)	false
Apr 16, 2024 17:05:55.321325064 CEST	192.168.2.11	1.1.1.1	0x6f5	Standard query (0)	rr5---sn-p5qddn7r.googlevideo.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:06:03.630132914 CEST	192.168.2.11	1.1.1.1	0xda9c	Standard query (0)	niceindiatravel.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:06:03.630506992 CEST	192.168.2.11	1.1.1.1	0x3e44	Standard query (0)	niceindiatravel.com	65	IN (0x0001)	false
Apr 16, 2024 17:06:16.899238110 CEST	192.168.2.11	1.1.1.1	0xd5fd	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:06:16.899332047 CEST	192.168.2.11	1.1.1.1	0xd2b6	Standard query (0)	play.google.com	65	IN (0x0001)	false
Apr 16, 2024 17:06:17.390530109 CEST	192.168.2.11	1.1.1.1	0x17a0	Standard query (0)	niceindiatravel.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:06:17.390713930 CEST	192.168.2.11	1.1.1.1	0x582a	Standard query (0)	niceindiatravel.com	65	IN (0x0001)	false
Apr 16, 2024 17:06:18.011832952 CEST	192.168.2.11	1.1.1.1	0x1914	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:06:18.012245893 CEST	192.168.2.11	1.1.1.1	0x311a	Standard query (0)	play.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 16, 2024 17:04:58.092546940 CEST	1.1.1.1	192.168.2.11	0x9918	No error (0)	www.baidu.com	www.a.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 17:04:58.092546940 CEST	1.1.1.1	192.168.2.11	0x9918	No error (0)	www.a.shifen.com	www.wshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 17:04:58.092546940 CEST	1.1.1.1	192.168.2.11	0x9918	No error (0)	www.wshifen.com		183.240.99.202	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:04:58.092546940 CEST	1.1.1.1	192.168.2.11	0x9918	No error (0)	www.wshifen.com		183.240.99.24	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:04:58.093259096 CEST	1.1.1.1	192.168.2.11	0xe047	No error (0)	www.baidu.com	www.a.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 17:04:58.093259096 CEST	1.1.1.1	192.168.2.11	0xe047	No error (0)	www.a.shifen.com	www.wshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 17:05:00.276969910 CEST	1.1.1.1	192.168.2.11	0x81ab	No error (0)	www.niceindiatravel.com	www.niceindiatravel.com.cdn.hstgr.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 17:05:00.276969910 CEST	1.1.1.1	192.168.2.11	0x81ab	No error (0)	www.niceindiatravel.com.cdn.hstgr.net		191.101.104.47	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:00.591532946 CEST	1.1.1.1	192.168.2.11	0xd920	No error (0)	www.niceindiatravel.com	www.niceindiatravel.com.cdn.hstgr.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 17:05:01.063047886 CEST	1.1.1.1	192.168.2.11	0xf78c	No error (0)	www.google.com		64.233.176.147	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:01.063047886 CEST	1.1.1.1	192.168.2.11	0xf78c	No error (0)	www.google.com		64.233.176.105	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:01.063047886 CEST	1.1.1.1	192.168.2.11	0xf78c	No error (0)	www.google.com		64.233.176.106	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:01.063047886 CEST	1.1.1.1	192.168.2.11	0xf78c	No error (0)	www.google.com		64.233.176.104	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:01.063047886 CEST	1.1.1.1	192.168.2.11	0xf78c	No error (0)	www.google.com		64.233.176.103	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:01.063047886 CEST	1.1.1.1	192.168.2.11	0xf78c	No error (0)	www.google.com		64.233.176.99	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:01.063079119 CEST	1.1.1.1	192.168.2.11	0x5063	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 16, 2024 17:05:02.396630049 CEST	1.1.1.1	192.168.2.11	0xbb00	No error (0)	niceindiatravel.com		84.32.84.89	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:14.873941898 CEST	1.1.1.1	192.168.2.11	0x1d2b	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:14.873941898 CEST	1.1.1.1	192.168.2.11	0x1d2b	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:14.925266981 CEST	1.1.1.1	192.168.2.11	0xa69f	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 17:05:14.925266981 CEST	1.1.1.1	192.168.2.11	0xa69f	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:15.583426952 CEST	1.1.1.1	192.168.2.11	0x4c4a	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 17:05:15.583426952 CEST	1.1.1.1	192.168.2.11	0x4c4a	No error (0)	youtube-ui.l.google.com		108.177.122.190	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:15.583426952 CEST	1.1.1.1	192.168.2.11	0x4c4a	No error (0)	youtube-ui.l.google.com		108.177.122.91	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:15.583426952 CEST	1.1.1.1	192.168.2.11	0x4c4a	No error (0)	youtube-ui.l.google.com		64.233.185.93	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:15.583426952 CEST	1.1.1.1	192.168.2.11	0x4c4a	No error (0)	youtube-ui.l.google.com		142.251.15.93	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:15.583426952 CEST	1.1.1.1	192.168.2.11	0x4c4a	No error (0)	youtube-ui.l.google.com		74.125.138.136	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:15.583426952 CEST	1.1.1.1	192.168.2.11	0x4c4a	No error (0)	youtube-ui.l.google.com		142.251.15.136	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:15.583426952 CEST	1.1.1.1	192.168.2.11	0x4c4a	No error (0)	youtube-ui.l.google.com		64.233.185.91	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:15.583426952 CEST	1.1.1.1	192.168.2.11	0x4c4a	No error (0)	youtube-ui.l.google.com		74.125.138.190	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:15.583426952 CEST	1.1.1.1	192.168.2.11	0x4c4a	No error (0)	youtube-ui.l.google.com		172.217.215.190	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:15.583426952 CEST	1.1.1.1	192.168.2.11	0x4c4a	No error (0)	youtube-ui.l.google.com		108.177.122.136	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:15.583426952 CEST	1.1.1.1	192.168.2.11	0x4c4a	No error (0)	youtube-ui.l.google.com		172.217.215.91	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:15.583426952 CEST	1.1.1.1	192.168.2.11	0x4c4a	No error (0)	youtube-ui.l.google.com		74.125.138.91	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:15.583426952 CEST	1.1.1.1	192.168.2.11	0x4c4a	No error (0)	youtube-ui.l.google.com		74.125.138.93	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:15.583426952 CEST	1.1.1.1	192.168.2.11	0x4c4a	No error (0)	youtube-ui.l.google.com		142.251.15.91	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:15.583426952 CEST	1.1.1.1	192.168.2.11	0x4c4a	No error (0)	youtube-ui.l.google.com		142.251.15.190	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:15.583426952 CEST	1.1.1.1	192.168.2.11	0x4c4a	No error (0)	youtube-ui.l.google.com		64.233.185.136	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:15.583529949 CEST	1.1.1.1	192.168.2.11	0xcd51	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 17:05:15.583529949 CEST	1.1.1.1	192.168.2.11	0xcd51	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Apr 16, 2024 17:05:16.532432079 CEST	1.1.1.1	192.168.2.11	0xfd04	No error (0)	niceindiatravel.com		154.62.106.12	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:29.029664040 CEST	1.1.1.1	192.168.2.11	0xaa2e	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 17:05:29.029664040 CEST	1.1.1.1	192.168.2.11	0xaa2e	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:43.936732054 CEST	1.1.1.1	192.168.2.11	0x2f4d	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 17:05:43.936732054 CEST	1.1.1.1	192.168.2.11	0x2f4d	No error (0)	youtube-ui.l.google.com		142.251.15.91	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:43.936732054 CEST	1.1.1.1	192.168.2.11	0x2f4d	No error (0)	youtube-ui.l.google.com		74.125.138.93	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:43.936732054 CEST	1.1.1.1	192.168.2.11	0x2f4d	No error (0)	youtube-ui.l.google.com		74.125.138.91	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:43.936732054 CEST	1.1.1.1	192.168.2.11	0x2f4d	No error (0)	youtube-ui.l.google.com		64.233.185.93	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:43.936732054 CEST	1.1.1.1	192.168.2.11	0x2f4d	No error (0)	youtube-ui.l.google.com		142.251.15.93	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:43.936732054 CEST	1.1.1.1	192.168.2.11	0x2f4d	No error (0)	youtube-ui.l.google.com		74.125.138.136	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:43.936732054 CEST	1.1.1.1	192.168.2.11	0x2f4d	No error (0)	youtube-ui.l.google.com		64.233.185.91	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:43.936732054 CEST	1.1.1.1	192.168.2.11	0x2f4d	No error (0)	youtube-ui.l.google.com		142.251.15.190	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:43.936732054 CEST	1.1.1.1	192.168.2.11	0x2f4d	No error (0)	youtube-ui.l.google.com		173.194.219.93	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:43.936732054 CEST	1.1.1.1	192.168.2.11	0x2f4d	No error (0)	youtube-ui.l.google.com		64.233.185.190	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:43.936732054 CEST	1.1.1.1	192.168.2.11	0x2f4d	No error (0)	youtube-ui.l.google.com		142.251.15.136	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:43.936732054 CEST	1.1.1.1	192.168.2.11	0x2f4d	No error (0)	youtube-ui.l.google.com		173.194.219.91	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:43.936732054 CEST	1.1.1.1	192.168.2.11	0x2f4d	No error (0)	youtube-ui.l.google.com		64.233.185.136	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:43.936732054 CEST	1.1.1.1	192.168.2.11	0x2f4d	No error (0)	youtube-ui.l.google.com		74.125.138.190	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:43.936732054 CEST	1.1.1.1	192.168.2.11	0x2f4d	No error (0)	youtube-ui.l.google.com		173.194.219.136	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:43.936732054 CEST	1.1.1.1	192.168.2.11	0x2f4d	No error (0)	youtube-ui.l.google.com		108.177.122.93	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:43.937777042 CEST	1.1.1.1	192.168.2.11	0x3d70	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 17:05:43.937777042 CEST	1.1.1.1	192.168.2.11	0x3d70	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Apr 16, 2024 17:05:45.130208969 CEST	1.1.1.1	192.168.2.11	0x6694	No error (0)	i.ytimg.com		64.233.176.119	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:45.130208969 CEST	1.1.1.1	192.168.2.11	0x6694	No error (0)	i.ytimg.com		173.194.219.119	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:45.130208969 CEST	1.1.1.1	192.168.2.11	0x6694	No error (0)	i.ytimg.com		142.250.9.119	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:45.130208969 CEST	1.1.1.1	192.168.2.11	0x6694	No error (0)	i.ytimg.com		108.177.122.119	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:45.130208969 CEST	1.1.1.1	192.168.2.11	0x6694	No error (0)	i.ytimg.com		64.233.177.119	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:45.130208969 CEST	1.1.1.1	192.168.2.11	0x6694	No error (0)	i.ytimg.com		142.251.15.119	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:45.130208969 CEST	1.1.1.1	192.168.2.11	0x6694	No error (0)	i.ytimg.com		142.250.105.119	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:45.130208969 CEST	1.1.1.1	192.168.2.11	0x6694	No error (0)	i.ytimg.com		172.253.124.119	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:45.130208969 CEST	1.1.1.1	192.168.2.11	0x6694	No error (0)	i.ytimg.com		64.233.185.119	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:45.130208969 CEST	1.1.1.1	192.168.2.11	0x6694	No error (0)	i.ytimg.com		74.125.138.119	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:45.130208969 CEST	1.1.1.1	192.168.2.11	0x6694	No error (0)	i.ytimg.com		74.125.136.119	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:45.130208969 CEST	1.1.1.1	192.168.2.11	0x6694	No error (0)	i.ytimg.com		172.217.215.119	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:46.845376968 CEST	1.1.1.1	192.168.2.11	0x2567	No error (0)	googleads.g.doubleclick.net		74.125.136.155	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:46.845376968 CEST	1.1.1.1	192.168.2.11	0x2567	No error (0)	googleads.g.doubleclick.net		74.125.136.157	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:46.845376968 CEST	1.1.1.1	192.168.2.11	0x2567	No error (0)	googleads.g.doubleclick.net		74.125.136.156	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:46.845376968 CEST	1.1.1.1	192.168.2.11	0x2567	No error (0)	googleads.g.doubleclick.net		74.125.136.154	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:46.845607042 CEST	1.1.1.1	192.168.2.11	0x423b	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Apr 16, 2024 17:05:46.898384094 CEST	1.1.1.1	192.168.2.11	0x9c71	No error (0)	static.doubleclick.net		142.250.105.148	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:46.898384094 CEST	1.1.1.1	192.168.2.11	0x9c71	No error (0)	static.doubleclick.net		142.250.105.149	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:46.899296045 CEST	1.1.1.1	192.168.2.11	0xd033	No error (0)	www.google.com		142.250.9.103	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:46.899296045 CEST	1.1.1.1	192.168.2.11	0xd033	No error (0)	www.google.com		142.250.9.104	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:46.899296045 CEST	1.1.1.1	192.168.2.11	0xd033	No error (0)	www.google.com		142.250.9.99	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:46.899296045 CEST	1.1.1.1	192.168.2.11	0xd033	No error (0)	www.google.com		142.250.9.105	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:46.899296045 CEST	1.1.1.1	192.168.2.11	0xd033	No error (0)	www.google.com		142.250.9.106	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:46.899296045 CEST	1.1.1.1	192.168.2.11	0xd033	No error (0)	www.google.com		142.250.9.147	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:46.901820898 CEST	1.1.1.1	192.168.2.11	0x72c7	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 17:05:46.901820898 CEST	1.1.1.1	192.168.2.11	0x72c7	No error (0)	photos-ugc.l.googleusercontent.com		142.250.105.132	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:46.902599096 CEST	1.1.1.1	192.168.2.11	0xbd07	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 16, 2024 17:05:46.907262087 CEST	1.1.1.1	192.168.2.11	0x8194	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 17:05:47.470557928 CEST	1.1.1.1	192.168.2.11	0xee09	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 17:05:47.470851898 CEST	1.1.1.1	192.168.2.11	0xa3b6	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 17:05:47.470851898 CEST	1.1.1.1	192.168.2.11	0xa3b6	No error (0)	photos-ugc.l.googleusercontent.com		74.125.136.132	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:48.520688057 CEST	1.1.1.1	192.168.2.11	0xb7ea	No error (0)	rr5---sn-p5qlsn76.googlevideo.com	rr5.sn-p5qlsn76.googlevideo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 17:05:48.520688057 CEST	1.1.1.1	192.168.2.11	0xb7ea	No error (0)	rr5.sn-p5qlsn76.googlevideo.com		172.217.135.202	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:48.520950079 CEST	1.1.1.1	192.168.2.11	0xa1dc	No error (0)	rr5---sn-p5qlsn76.googlevideo.com	rr5.sn-p5qlsn76.googlevideo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 17:05:48.800744057 CEST	1.1.1.1	192.168.2.11	0x1605	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 17:05:48.800744057 CEST	1.1.1.1	192.168.2.11	0x1605	No error (0)	youtube-ui.l.google.com		173.194.219.136	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:48.800744057 CEST	1.1.1.1	192.168.2.11	0x1605	No error (0)	youtube-ui.l.google.com		173.194.219.93	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:48.800744057 CEST	1.1.1.1	192.168.2.11	0x1605	No error (0)	youtube-ui.l.google.com		173.194.219.190	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:48.800744057 CEST	1.1.1.1	192.168.2.11	0x1605	No error (0)	youtube-ui.l.google.com		142.250.105.93	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:48.800744057 CEST	1.1.1.1	192.168.2.11	0x1605	No error (0)	youtube-ui.l.google.com		64.233.176.136	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:48.800744057 CEST	1.1.1.1	192.168.2.11	0x1605	No error (0)	youtube-ui.l.google.com		64.233.177.93	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:48.800744057 CEST	1.1.1.1	192.168.2.11	0x1605	No error (0)	youtube-ui.l.google.com		142.250.105.190	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:48.800744057 CEST	1.1.1.1	192.168.2.11	0x1605	No error (0)	youtube-ui.l.google.com		64.233.176.190	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:48.800744057 CEST	1.1.1.1	192.168.2.11	0x1605	No error (0)	youtube-ui.l.google.com		142.250.105.91	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:48.800744057 CEST	1.1.1.1	192.168.2.11	0x1605	No error (0)	youtube-ui.l.google.com		64.233.177.190	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:48.800744057 CEST	1.1.1.1	192.168.2.11	0x1605	No error (0)	youtube-ui.l.google.com		64.233.177.136	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:48.800744057 CEST	1.1.1.1	192.168.2.11	0x1605	No error (0)	youtube-ui.l.google.com		173.194.219.91	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:48.800744057 CEST	1.1.1.1	192.168.2.11	0x1605	No error (0)	youtube-ui.l.google.com		64.233.176.91	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:48.800744057 CEST	1.1.1.1	192.168.2.11	0x1605	No error (0)	youtube-ui.l.google.com		64.233.176.93	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:48.800744057 CEST	1.1.1.1	192.168.2.11	0x1605	No error (0)	youtube-ui.l.google.com		64.233.177.91	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:48.800744057 CEST	1.1.1.1	192.168.2.11	0x1605	No error (0)	youtube-ui.l.google.com		142.250.105.136	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:48.802480936 CEST	1.1.1.1	192.168.2.11	0xdc75	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 17:05:48.802480936 CEST	1.1.1.1	192.168.2.11	0xdc75	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Apr 16, 2024 17:05:48.811597109 CEST	1.1.1.1	192.168.2.11	0x1436	No error (0)	googleads.g.doubleclick.net		142.250.105.156	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:48.811597109 CEST	1.1.1.1	192.168.2.11	0x1436	No error (0)	googleads.g.doubleclick.net		142.250.105.154	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:48.811597109 CEST	1.1.1.1	192.168.2.11	0x1436	No error (0)	googleads.g.doubleclick.net		142.250.105.155	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:48.811597109 CEST	1.1.1.1	192.168.2.11	0x1436	No error (0)	googleads.g.doubleclick.net		142.250.105.157	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:48.812638044 CEST	1.1.1.1	192.168.2.11	0x9257	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Apr 16, 2024 17:05:49.468493938 CEST	1.1.1.1	192.168.2.11	0xb746	No error (0)	rr5---sn-p5qlsn76.googlevideo.com	rr5.sn-p5qlsn76.googlevideo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 17:05:49.486987114 CEST	1.1.1.1	192.168.2.11	0x8f64	No error (0)	rr5---sn-p5qlsn76.googlevideo.com	rr5.sn-p5qlsn76.googlevideo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 17:05:49.486987114 CEST	1.1.1.1	192.168.2.11	0x8f64	No error (0)	rr5.sn-p5qlsn76.googlevideo.com		172.217.135.202	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:50.581737041 CEST	1.1.1.1	192.168.2.11	0x606	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 17:05:50.581737041 CEST	1.1.1.1	192.168.2.11	0x606	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:50.838372946 CEST	1.1.1.1	192.168.2.11	0xf29f	No error (0)	i.ytimg.com		142.251.15.119	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:50.838372946 CEST	1.1.1.1	192.168.2.11	0xf29f	No error (0)	i.ytimg.com		64.233.176.119	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:50.838372946 CEST	1.1.1.1	192.168.2.11	0xf29f	No error (0)	i.ytimg.com		74.125.138.119	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:50.838372946 CEST	1.1.1.1	192.168.2.11	0xf29f	No error (0)	i.ytimg.com		64.233.177.119	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:50.838372946 CEST	1.1.1.1	192.168.2.11	0xf29f	No error (0)	i.ytimg.com		172.253.124.119	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:50.838372946 CEST	1.1.1.1	192.168.2.11	0xf29f	No error (0)	i.ytimg.com		74.125.136.119	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:50.838372946 CEST	1.1.1.1	192.168.2.11	0xf29f	No error (0)	i.ytimg.com		108.177.122.119	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:50.838372946 CEST	1.1.1.1	192.168.2.11	0xf29f	No error (0)	i.ytimg.com		142.250.9.119	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:50.838372946 CEST	1.1.1.1	192.168.2.11	0xf29f	No error (0)	i.ytimg.com		142.250.105.119	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:50.838372946 CEST	1.1.1.1	192.168.2.11	0xf29f	No error (0)	i.ytimg.com		173.194.219.119	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:50.838372946 CEST	1.1.1.1	192.168.2.11	0xf29f	No error (0)	i.ytimg.com		172.217.215.119	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:50.838372946 CEST	1.1.1.1	192.168.2.11	0xf29f	No error (0)	i.ytimg.com		64.233.185.119	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:52.913863897 CEST	1.1.1.1	192.168.2.11	0x56e4	No error (0)	rr5---sn-p5qddn7r.googlevideo.com	rr5.sn-p5qddn7r.googlevideo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 17:05:52.913863897 CEST	1.1.1.1	192.168.2.11	0x56e4	No error (0)	rr5.sn-p5qddn7r.googlevideo.com		173.194.7.170	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:52.923394918 CEST	1.1.1.1	192.168.2.11	0x5af8	No error (0)	rr5---sn-p5qddn7r.googlevideo.com	rr5.sn-p5qddn7r.googlevideo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 17:05:55.426450014 CEST	1.1.1.1	192.168.2.11	0x6f5	No error (0)	rr5---sn-p5qddn7r.googlevideo.com	rr5.sn-p5qddn7r.googlevideo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 17:05:55.426450014 CEST	1.1.1.1	192.168.2.11	0x6f5	No error (0)	rr5.sn-p5qddn7r.googlevideo.com		173.194.7.170	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:05:55.426812887 CEST	1.1.1.1	192.168.2.11	0xcd40	No error (0)	rr5---sn-p5qddn7r.googlevideo.com	rr5.sn-p5qddn7r.googlevideo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 17:06:03.834594011 CEST	1.1.1.1	192.168.2.11	0xda9c	No error (0)	niceindiatravel.com		84.32.84.114	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:06:12.481408119 CEST	1.1.1.1	192.168.2.11	0xd583	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 17:06:12.481408119 CEST	1.1.1.1	192.168.2.11	0xd583	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:06:17.003732920 CEST	1.1.1.1	192.168.2.11	0xd5fd	No error (0)	play.google.com		142.250.9.113	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:06:17.003732920 CEST	1.1.1.1	192.168.2.11	0xd5fd	No error (0)	play.google.com		142.250.9.138	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:06:17.003732920 CEST	1.1.1.1	192.168.2.11	0xd5fd	No error (0)	play.google.com		142.250.9.139	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:06:17.003732920 CEST	1.1.1.1	192.168.2.11	0xd5fd	No error (0)	play.google.com		142.250.9.101	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:06:17.003732920 CEST	1.1.1.1	192.168.2.11	0xd5fd	No error (0)	play.google.com		142.250.9.100	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:06:17.003732920 CEST	1.1.1.1	192.168.2.11	0xd5fd	No error (0)	play.google.com		142.250.9.102	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:06:17.513039112 CEST	1.1.1.1	192.168.2.11	0x17a0	No error (0)	niceindiatravel.com		84.32.84.101	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:06:18.117373943 CEST	1.1.1.1	192.168.2.11	0x1914	No error (0)	play.google.com		64.233.177.113	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:06:18.117373943 CEST	1.1.1.1	192.168.2.11	0x1914	No error (0)	play.google.com		64.233.177.100	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:06:18.117373943 CEST	1.1.1.1	192.168.2.11	0x1914	No error (0)	play.google.com		64.233.177.139	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:06:18.117373943 CEST	1.1.1.1	192.168.2.11	0x1914	No error (0)	play.google.com		64.233.177.101	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:06:18.117373943 CEST	1.1.1.1	192.168.2.11	0x1914	No error (0)	play.google.com		64.233.177.102	A (IP address)	IN (0x0001)	false
Apr 16, 2024 17:06:18.117373943 CEST	1.1.1.1	192.168.2.11	0x1914	No error (0)	play.google.com		64.233.177.138	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.11	49711	183.240.99.202	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:04:59 UTC	769	OUT	GET /link?url=CvCuJHQ5mUiF8tzYwW4LExI5DJ7e8SA78W1tu_uckwU-RgMoIZevncSlciEmtvdq&wd=cmljaGFyZC5wZXBpQGdlcmZsb3J1c2EuY29t HTTP/1.1 Host: www.baidu.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:04:59 UTC	536	IN	HTTP/1.1 200 OK Bdpagetype: 3 Content-Type: text/html Date: Tue, 16 Apr 2024 15:04:59 GMT P3p: CP=" OTI DSP COR IVA OUR IND COM " Server: BWS/1.1 Set-Cookie: BAIDUID=A27FA62BF5E50205ABE20D62D264AD2F:FG=1; max-age=31536000; expires=Wed, 16-Apr-25 15:04:59 GMT; domain=.baidu.com; path=/; version=1; comment=bd Set-Cookie: BDSVRTM=0; path=/ Traceid: 171327989907161917548589300359342687868 Vary: Accept-Encoding X-Ua-Compatible: IE=Edge,chrome=1 X-Xss-Protection: 1;mode=block Connection: close Transfer-Encoding: chunked
2024-04-16 15:04:59 UTC	640	IN	Data Raw: 32 37 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 61 6c 77 61 79 73 22 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 3e 3c 73 63 72 69 70 74 3e 74 72 79 7b 69 66 28 77 69 6e 64 6f 77 2e 6f 70 65 6e 65 72 26 26 77 69 6e 64 6f 77 2e 6f 70 65 6e 65 72 2e 62 64 73 26 26 77 69 6e 64 6f 77 2e 6f 70 65 6e 65 72 2e 62 64 73 2e 70 64 63 26 26 77 69 6e 64 6f 77 2e 6f 70 65 6e 65 72 2e 62 64 73 2e 70 64 63 2e 73 65 6e 64 4c 69 6e 6b 4c 6f 67 29 7b 77 69 6e 64 6f 77 2e 6f 70 65 6e 65 72 2e 62 64 73 2e 70 64 63 2e 73 65 6e 64 4c 69 6e 6b 4c 6f 67 28 29 3b 7d 7d 63 61 74 63 68 28 65 29 20 7b 7d 3b 76 61 72 20 74 Data Ascii: 279<!DOCTYPE html><html><head><meta charset="UTF-8"><meta content="always" name="referrer"><script>try{if(window.opener&&window.opener.bds&&window.opener.bds.pdc&&window.opener.bds.pdc.sendLinkLog){window.opener.bds.pdc.sendLinkLog();}}catch(e) {};var t
2024-04-16 15:04:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.11	49715	191.101.104.47	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:00 UTC	798	OUT	GET / HTTP/1.1 Host: www.niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://www.baidu.com/link?url=CvCuJHQ5mUiF8tzYwW4LExI5DJ7e8SA78W1tu_uckwU-RgMoIZevncSlciEmtvdq&wd=cmljaGFyZC5wZXBpQGdlcmZsb3J1c2EuY29t Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:01 UTC	554	IN	HTTP/1.1 301 Moved Permanently Server: hcdn Date: Tue, 16 Apr 2024 15:05:01 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close x-powered-by: PHP/8.1.27 x-redirect-by: WordPress location: https://niceindiatravel.com/ cache-control: public, max-age=604800 expires: Tue, 23 Apr 2024 15:05:01 GMT platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 4305228cabf3406f0a4a1b66f8951486-bos-edge1 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 0.998

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.11	49717	23.208.128.100	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:02 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-16 15:05:02 UTC	468	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/073D) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus2-z1 Cache-Control: public, max-age=143967 Date: Tue, 16 Apr 2024 15:05:02 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.11	49720	23.208.128.100	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:02 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-16 15:05:02 UTC	531	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0rcGnYgAAAAANOnx9vccHTr21ROgX9ESTU0pDRURHRTAzMDkAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=143976 Date: Tue, 16 Apr 2024 15:05:02 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-16 15:05:02 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.11	49718	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:03 UTC	794	OUT	GET / HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.baidu.com/link?url=CvCuJHQ5mUiF8tzYwW4LExI5DJ7e8SA78W1tu_uckwU-RgMoIZevncSlciEmtvdq&wd=cmljaGFyZC5wZXBpQGdlcmZsb3J1c2EuY29t Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:04 UTC	734	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding x-powered-by: PHP/8.1.27 link: <https://niceindiatravel.com/wp-json/>; rel="https://api.w.org/" link: <https://niceindiatravel.com/wp-json/wp/v2/pages/6>; rel="alternate"; type="application/json" link: <https://niceindiatravel.com/>; rel=shortlink cache-control: public, max-age=604800 expires: Tue, 23 Apr 2024 15:05:04 GMT platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 13a9d822a4a443fd7e9ac7328868b217-asc-edge6 x-hcdn-cache-status: DYNAMIC x-hcdn-upstream-rt: 1.167
2024-04-16 15:05:04 UTC	635	IN	Data Raw: 35 64 61 65 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 30 22 20 2f 3e 3c 74 69 74 6c 65 3e 4e 69 63 65 20 49 6e 64 69 61 20 54 72 61 76 65 6c 20 26 23 38 32 31 31 3b 20 49 6e 64 69 61 20 7c 20 4e 65 70 61 6c 20 7c 20 53 72 69 20 4c 61 6e 6b 61 20 7c 20 42 68 Data Ascii: 5dae<!doctype html><html lang="en-US" class="no-js"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=0" /><title>Nice India Travel – India \| Nepal \| Sri Lanka \| Bh
2024-04-16 15:05:04 UTC	1369	IN	Data Raw: 2f 2f 6e 69 63 65 69 6e 64 69 61 74 72 61 76 65 6c 2e 63 6f 6d 2f 63 6f 6d 6d 65 6e 74 73 2f 66 65 65 64 2f 22 20 2f 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 2f 2a 20 3c 21 5b 43 44 41 54 41 5b 20 2a 2f 0a 77 69 6e 64 6f 77 2e 5f 77 70 65 6d 6f 6a 69 53 65 74 74 69 6e 67 73 20 3d 20 7b 22 62 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 2e 77 2e 6f 72 67 5c 2f 69 6d 61 67 65 73 5c 2f 63 6f 72 65 5c 2f 65 6d 6f 6a 69 5c 2f 31 35 2e 30 2e 33 5c 2f 37 32 78 37 32 5c 2f 22 2c 22 65 78 74 22 3a 22 2e 70 6e 67 22 2c 22 73 76 67 55 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 2e 77 2e 6f 72 67 5c 2f 69 6d 61 67 65 73 5c 2f 63 6f 72 65 5c 2f 65 6d 6f 6a 69 5c 2f 31 35 2e 30 2e 33 5c 2f Data Ascii: //niceindiatravel.com/comments/feed/" /><script type="text/javascript">/* <![CDATA[ */window._wpemojiSettings = {"baseUrl":"https:\/\/s.w.org\/images\/core\/emoji\/15.0.3\/72x72\/","ext":".png","svgUrl":"https:\/\/s.w.org\/images\/core\/emoji\/15.0.3\/
2024-04-16 15:05:04 UTC	1369	IN	Data Raw: 75 64 38 33 64 5c 75 64 63 32 36 5c 75 32 30 30 64 5c 75 32 62 31 62 22 2c 22 5c 75 64 38 33 64 5c 75 64 63 32 36 5c 75 32 30 30 62 5c 75 32 62 31 62 22 29 7d 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 73 65 6c 66 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 3f 6e 65 77 20 4f 66 66 73 63 72 65 65 6e 43 61 6e 76 61 73 28 33 30 30 2c 31 35 30 29 3a 69 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 63 61 6e 76 61 73 22 29 2c 61 3d 72 2e 67 65 74 43 6f 6e 74 65 78 74 28 22 32 64 22 2c 7b 77 69 6c 6c 52 65 61 64 46 72 65 71 75 65 6e 74 6c 79 3a 21 Data Ascii: ud83d\udc26\u200d\u2b1b","\ud83d\udc26\u200b\u2b1b")}return!1}function f(e,t,n){var r="undefined"!=typeof WorkerGlobalScope&&self instanceof WorkerGlobalScope?new OffscreenCanvas(300,150):i.createElement("canvas"),a=r.getContext("2d",{willReadFrequently:!
2024-04-16 15:05:04 UTC	1369	IN	Data Raw: 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 20 69 6e 20 65 29 6e 2e 73 75 70 70 6f 72 74 73 5b 74 5d 3d 65 5b 74 5d 2c 6e 2e 73 75 70 70 6f 72 74 73 2e 65 76 65 72 79 74 68 69 6e 67 3d 6e 2e 73 75 70 70 6f 72 74 73 2e 65 76 65 72 79 74 68 69 6e 67 26 26 6e 2e 73 75 70 70 6f 72 74 73 5b 74 5d 2c 22 66 6c 61 67 22 21 3d 3d 74 26 26 28 6e 2e 73 75 70 70 6f 72 74 73 2e 65 76 65 72 79 74 68 69 6e 67 45 78 63 65 70 74 46 6c 61 67 3d 6e 2e 73 75 70 70 6f 72 74 73 2e 65 76 65 72 79 74 68 69 6e 67 45 78 63 65 70 74 46 6c 61 67 26 26 6e 2e 73 75 70 70 6f 72 74 73 5b 74 5d 29 3b 6e 2e 73 75 70 70 6f 72 74 73 2e 65 76 65 72 79 74 68 69 6e 67 45 78 63 65 70 74 46 6c 61 67 3d 6e 2e 73 75 70 70 6f 72 74 73 2e 65 76 65 72 79 74 68 Data Ascii: ).then(function(e){for(var t in e)n.supports[t]=e[t],n.supports.everything=n.supports.everything&&n.supports[t],"flag"!==t&&(n.supports.everythingExceptFlag=n.supports.everythingExceptFlag&&n.supports[t]);n.supports.everythingExceptFlag=n.supports.everyth
2024-04-16 15:05:04 UTC	1369	IN	Data Raw: 20 32 70 78 29 20 63 61 6c 63 28 31 2e 33 33 33 65 6d 20 2b 20 32 70 78 29 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 31 32 35 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 66 69 6c 65 5f 5f 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 33 32 33 37 33 63 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 73 74 79 6c 65 20 69 64 3d 27 67 6c 6f 62 61 6c 2d 73 74 79 6c 65 73 2d 69 6e 6c 69 6e 65 2d 63 73 73 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 3e 0a 62 6f 64 79 7b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 62 6c 61 63 6b 3a 20 23 30 30 30 30 30 30 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 63 79 61 6e 2d 62 6c 75 69 73 68 Data Ascii: 2px) calc(1.333em + 2px);font-size:1.125em}.wp-block-file__button{background:#32373c;color:#fff;text-decoration:none}</style><style id='global-styles-inline-css' type='text/css'>body{--wp--preset--color--black: #000000;--wp--preset--color--cyan-bluish
2024-04-16 15:05:04 UTC	1369	IN	Data Raw: 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 63 6f 6f 6c 2d 74 6f 2d 77 61 72 6d 2d 73 70 65 63 74 72 75 6d 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 28 37 34 2c 32 33 34 2c 32 32 30 29 20 30 25 2c 72 67 62 28 31 35 31 2c 31 32 30 2c 32 30 39 29 20 32 30 25 2c 72 67 62 28 32 30 37 2c 34 32 2c 31 38 36 29 20 34 30 25 2c 72 67 62 28 32 33 38 2c 34 34 2c 31 33 30 29 20 36 30 25 2c 72 67 62 28 32 35 31 2c 31 30 35 2c 39 38 29 20 38 30 25 2c 72 67 62 28 32 35 34 2c 32 34 38 2c 37 36 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 62 6c 75 73 68 2d 6c 69 67 68 74 2d 70 75 72 70 6c 65 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 28 32 35 35 2c Data Ascii: --gradient--cool-to-warm-spectrum: linear-gradient(135deg,rgb(74,234,220) 0%,rgb(151,120,209) 20%,rgb(207,42,186) 40%,rgb(238,44,130) 60%,rgb(251,105,98) 80%,rgb(254,248,76) 100%);--wp--preset--gradient--blush-light-purple: linear-gradient(135deg,rgb(255,
2024-04-16 15:05:04 UTC	1369	IN	Data Raw: 30 2e 34 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 68 61 64 6f 77 2d 2d 73 68 61 72 70 3a 20 36 70 78 20 36 70 78 20 30 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 32 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 68 61 64 6f 77 2d 2d 6f 75 74 6c 69 6e 65 64 3a 20 36 70 78 20 36 70 78 20 30 70 78 20 2d 33 70 78 20 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 31 29 2c 20 36 70 78 20 36 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 31 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 68 61 64 6f 77 2d 2d 63 72 69 73 70 3a 20 36 70 78 20 36 70 78 20 30 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 31 29 3b 7d 3a 77 68 65 72 65 28 2e 69 73 2d 6c 61 79 6f 75 74 2d 66 6c 65 78 29 7b 67 61 70 3a 20 30 2e 35 65 Data Ascii: 0.4);--wp--preset--shadow--sharp: 6px 6px 0px rgba(0, 0, 0, 0.2);--wp--preset--shadow--outlined: 6px 6px 0px -3px rgba(255, 255, 255, 1), 6px 6px rgba(0, 0, 0, 1);--wp--preset--shadow--crisp: 6px 6px 0px rgba(0, 0, 0, 1);}:where(.is-layout-flex){gap: 0.5e
2024-04-16 15:05:04 UTC	1369	IN	Data Raw: 30 3b 7d 3a 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 73 2e 69 73 2d 6c 61 79 6f 75 74 2d 66 6c 65 78 29 7b 67 61 70 3a 20 32 65 6d 3b 7d 3a 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 73 2e 69 73 2d 6c 61 79 6f 75 74 2d 67 72 69 64 29 7b 67 61 70 3a 20 32 65 6d 3b 7d 3a 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 74 65 6d 70 6c 61 74 65 2e 69 73 2d 6c 61 79 6f 75 74 2d 66 6c 65 78 29 7b 67 61 70 3a 20 31 2e 32 35 65 6d 3b 7d 3a 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 74 65 6d 70 6c 61 74 65 2e 69 73 2d 6c 61 79 6f 75 74 2d 67 72 69 64 29 7b 67 61 70 3a 20 31 2e 32 35 65 6d 3b 7d 2e 68 61 73 2d 62 6c 61 63 6b 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d Data Ascii: 0;}:where(.wp-block-columns.is-layout-flex){gap: 2em;}:where(.wp-block-columns.is-layout-grid){gap: 2em;}:where(.wp-block-post-template.is-layout-flex){gap: 1.25em;}:where(.wp-block-post-template.is-layout-grid){gap: 1.25em;}.has-black-color{color: var(--
2024-04-16 15:05:04 UTC	1369	IN	Data Raw: 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 77 68 69 74 65 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 77 68 69 74 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 70 61 6c 65 2d 70 69 6e 6b 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 70 61 6c 65 2d 70 69 6e 6b 29 20 21 69 6d 70 6f 72 74 61 6e Data Ascii: kground-color: var(--wp--preset--color--cyan-bluish-gray) !important;}.has-white-background-color{background-color: var(--wp--preset--color--white) !important;}.has-pale-pink-background-color{background-color: var(--wp--preset--color--pale-pink) !importan
2024-04-16 15:05:04 UTC	1369	IN	Data Raw: 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 77 68 69 74 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 70 61 6c 65 2d 70 69 6e 6b 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 70 61 6c 65 2d 70 69 6e 6b 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 72 65 64 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 72 65 64 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 2d 62 6f 72 64 65 Data Ascii: ar(--wp--preset--color--white) !important;}.has-pale-pink-border-color{border-color: var(--wp--preset--color--pale-pink) !important;}.has-vivid-red-border-color{border-color: var(--wp--preset--color--vivid-red) !important;}.has-luminous-vivid-orange-borde

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.11	49719	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:04 UTC	595	OUT	GET /wp-includes/css/dist/block-library/style.min.css?ver=6.5.2 HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:11 UTC	587	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:10 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: public, max-age=2592000 expires: Thu, 16 May 2024 15:05:10 GMT last-modified: Mon, 15 Apr 2024 17:34:16 GMT etag: W/"1bae5-661d6518-18ead7fe8b5b1d81;gz" platform: hostinger content-security-policy: upgrade-insecure-requests x-turbo-charged-by: LiteSpeed alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: ba58db7fe998244b02763bf3f41e0fb6-asc-edge3 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 5.651
2024-04-16 15:05:11 UTC	782	IN	Data Raw: 31 62 61 65 35 0d 0a 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 2d 64 72 6f 70 64 6f 77 6e 20 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 20 69 6d 67 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 2e 61 6c 69 67 6e 63 65 6e 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 77 70 2d Data Ascii: 1bae5@charset "UTF-8";.wp-block-archives{box-sizing:border-box}.wp-block-archives-dropdown label{display:block}.wp-block-avatar{line-height:0}.wp-block-avatar,.wp-block-avatar img{box-sizing:border-box}.wp-block-avatar.aligncenter{text-align:center}.wp-
2024-04-16 15:05:11 UTC	1369	IN	Data Raw: 2a 3d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 5d 20 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 69 6e 68 65 72 69 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 73 3e 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 2e 68 61 73 2d 63 75 73 74 6f 6d 2d 77 69 64 74 68 7b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 73 3e 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 2e 68 61 73 2d 63 75 73 74 6f 6d 2d 77 69 64 74 68 20 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 73 3e 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 2e 68 Data Ascii: *=text-decoration] .wp-block-button__link{text-decoration:inherit}.wp-block-buttons>.wp-block-button.has-custom-width{max-width:none}.wp-block-buttons>.wp-block-button.has-custom-width .wp-block-button__link{width:100%}.wp-block-buttons>.wp-block-button.h
2024-04-16 15:05:11 UTC	1369	IN	Data Raw: 65 6d 20 31 2e 33 33 33 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 20 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 3a 77 68 65 72 65 28 2e 69 73 2d 73 74 79 6c 65 2d 6f 75 74 6c 69 6e 65 29 3a 6e 6f 74 28 2e 68 61 73 2d 74 65 78 74 2d 63 6f 6c 6f 72 29 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 3a 77 68 65 72 65 28 2e 69 73 2d 73 74 79 6c 65 2d 6f 75 74 6c 69 6e 65 29 3e 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 3a 6e 6f 74 28 2e 68 61 73 2d 74 65 78 74 2d 63 6f 6c 6f 72 29 7b 63 6f 6c 6f 72 3a 63 75 72 72 65 6e 74 43 6f 6c 6f 72 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 20 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 3a 77 68 65 72 65 28 2e 69 73 2d 73 74 79 Data Ascii: em 1.333em}.wp-block-button .wp-block-button__link:where(.is-style-outline):not(.has-text-color),.wp-block-button:where(.is-style-outline)>.wp-block-button__link:not(.has-text-color){color:currentColor}.wp-block-button .wp-block-button__link:where(.is-sty
2024-04-16 15:05:11 UTC	1369	IN	Data Raw: 5d 29 7b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 77 69 64 74 68 3a 6d 65 64 69 75 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 73 2e 69 73 2d 76 65 72 74 69 63 61 6c 7b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 73 2e 69 73 2d 76 65 72 74 69 63 61 6c 3e 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 73 3e 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 73 2e 69 73 2d 63 6f 6e 74 65 6e 74 2d 6a 75 73 74 69 66 69 Data Ascii: ]){border-left-width:medium}.wp-block-buttons.is-vertical{flex-direction:column}.wp-block-buttons.is-vertical>.wp-block-button:last-child{margin-bottom:0}.wp-block-buttons>.wp-block-button{display:inline-block;margin:0}.wp-block-buttons.is-content-justifi
2024-04-16 15:05:11 UTC	1369	IN	Data Raw: 74 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 61 6c 65 6e 64 61 72 20 74 68 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 3b 70 61 64 64 69 6e 67 3a 2e 32 35 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 61 6c 65 6e 64 61 72 20 74 68 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 61 6c 65 6e 64 61 72 20 63 61 70 74 69 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 61 6c 65 6e 64 61 72 20 74 61 62 6c 65 7b 62 6f 72 64 65 72 2d 63 6f 6c 6c 61 70 73 65 3a 63 6f 6c 6c 61 70 73 65 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 61 6c 65 6e 64 61 72 20 74 61 62 6c 65 3a 77 68 65 72 65 28 3a 6e 6f 74 28 2e 68 61 73 2d 74 65 78 74 2d 63 6f Data Ascii: td,.wp-block-calendar th{border:1px solid;padding:.25em}.wp-block-calendar th{font-weight:400}.wp-block-calendar caption{background-color:inherit}.wp-block-calendar table{border-collapse:collapse;width:100%}.wp-block-calendar table:where(:not(.has-text-co
2024-04-16 15:05:11 UTC	1369	IN	Data Raw: 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 73 3a 6e 6f 74 28 2e 69 73 2d 6e 6f 74 2d 73 74 61 63 6b 65 64 2d 6f 6e 2d 6d 6f 62 69 6c 65 29 3e 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 7b 66 6c 65 78 2d 62 61 73 69 73 3a 31 30 30 25 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 38 32 70 78 29 7b 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 73 3a 6e 6f 74 28 2e 69 73 2d 6e 6f 74 2d 73 74 61 63 6b 65 64 2d 6f 6e 2d 6d 6f 62 69 6c 65 29 3e 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 7b 66 6c 65 78 2d 62 61 73 69 73 3a 30 3b 66 6c 65 78 2d 67 72 6f 77 3a 31 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 73 3a 6e 6f 74 28 2e 69 73 2d 6e 6f 74 2d 73 74 61 63 6b 65 64 2d 6f 6e 2d 6d 6f 62 69 6c 65 Data Ascii: wp-block-columns:not(.is-not-stacked-on-mobile)>.wp-block-column{flex-basis:100%!important}}@media (min-width:782px){.wp-block-columns:not(.is-not-stacked-on-mobile)>.wp-block-column{flex-basis:0;flex-grow:1}.wp-block-columns:not(.is-not-stacked-on-mobile
2024-04-16 15:05:11 UTC	1369	IN	Data Raw: 3a 74 61 62 6c 65 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 6c 69 73 74 7b 63 6c 65 61 72 3a 62 6f 74 68 3b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 6c 69 73 74 20 2e 63 6f 6d 6d 65 6e 74 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 32 2e 32 35 65 6d 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 2e 32 35 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 6c 69 73 74 20 2e 63 6f 6d 6d 65 6e 74 20 70 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 38 3b 6d 61 72 Data Ascii: :table}.wp-block-post-comments .commentlist{clear:both;list-style:none;margin:0;padding:0}.wp-block-post-comments .commentlist .comment{min-height:2.25em;padding-left:3.25em}.wp-block-post-comments .commentlist .comment p{font-size:1em;line-height:1.8;mar
2024-04-16 15:05:11 UTC	1369	IN	Data Raw: 2e 63 6f 6d 6d 65 6e 74 2d 66 6f 72 6d 2d 63 6f 6f 6b 69 65 73 2d 63 6f 6e 73 65 6e 74 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 67 61 70 3a 2e 32 35 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 2d 66 6f 72 6d 2d 63 6f 6f 6b 69 65 73 2d 63 6f 6e 73 65 6e 74 20 23 77 70 2d 63 6f 6d 6d 65 6e 74 2d 63 6f 6f 6b 69 65 73 2d 63 6f 6e 73 65 6e 74 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2e 33 35 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 2d 72 65 70 6c 79 2d 74 69 74 6c 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 2d 72 65 70 6c 79 2d 74 69 74 Data Ascii: .comment-form-cookies-consent{display:flex;gap:.25em}.wp-block-post-comments .comment-form-cookies-consent #wp-comment-cookies-consent{margin-top:.35em}.wp-block-post-comments .comment-reply-title{margin-bottom:0}.wp-block-post-comments .comment-reply-tit
2024-04-16 15:05:11 UTC	1369	IN	Data Raw: 67 69 6e 61 74 69 6f 6e 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6d 6d 65 6e 74 73 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 70 72 65 76 69 6f 75 73 2d 61 72 72 6f 77 3a 6e 6f 74 28 2e 69 73 2d 61 72 72 6f 77 2d 63 68 65 76 72 6f 6e 29 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 58 28 31 29 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6d 6d 65 6e 74 73 2d 70 61 67 69 6e 61 74 69 6f 6e 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6d 6d 65 6e 74 73 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 6e 65 78 74 2d 61 72 72 6f 77 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 63 68 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6d 6d 65 6e 74 73 2d 70 61 67 69 6e 61 74 69 6f 6e 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6d 6d 65 6e 74 73 2d 70 Data Ascii: gination .wp-block-comments-pagination-previous-arrow:not(.is-arrow-chevron){transform:scaleX(1)}.wp-block-comments-pagination .wp-block-comments-pagination-next-arrow{display:inline-block;margin-left:1ch}.wp-block-comments-pagination .wp-block-comments-p
2024-04-16 15:05:11 UTC	1369	IN	Data Raw: 63 6f 76 65 72 20 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 67 72 61 64 69 65 6e 74 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 20 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 67 72 61 64 69 65 6e 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 69 6e 69 74 69 61 6c 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 3a 62 65 66 6f 72 65 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 3a 62 65 66 6f 72 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 Data Ascii: cover .has-background-dim.has-background-gradient,.wp-block-cover-image .has-background-dim.has-background-gradient{background-color:initial}.wp-block-cover-image.has-background-dim:before,.wp-block-cover.has-background-dim:before{background-color:inherit

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.11	49721	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:05 UTC	604	OUT	GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.9.3 HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:06 UTC	585	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:06 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: public, max-age=2592000 expires: Thu, 16 May 2024 15:05:06 GMT last-modified: Tue, 16 Apr 2024 08:16:15 GMT etag: W/"b4e-661e33cf-47be337bdae0a023;gz" platform: hostinger content-security-policy: upgrade-insecure-requests x-turbo-charged-by: LiteSpeed alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 015d15a47f31850131c91d24e064c878-asc-edge4 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 1.080
2024-04-16 15:05:06 UTC	784	IN	Data Raw: 62 34 65 0d 0a 2e 77 70 63 66 37 20 2e 73 63 72 65 65 6e 2d 72 65 61 64 65 72 2d 72 65 73 70 6f 6e 73 65 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 09 63 6c 69 70 3a 20 72 65 63 74 28 31 70 78 2c 20 31 70 78 2c 20 31 70 78 2c 20 31 70 78 29 3b 0a 09 63 6c 69 70 2d 70 61 74 68 3a 20 69 6e 73 65 74 28 35 30 25 29 3b 0a 09 68 65 69 67 68 74 3a 20 31 70 78 3b 0a 09 77 69 64 74 68 3a 20 31 70 78 3b 0a 09 6d 61 72 67 69 6e 3a 20 2d 31 70 78 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 62 6f 72 64 65 72 3a 20 30 3b 0a 09 77 6f 72 64 2d 77 72 61 70 3a 20 6e 6f 72 6d 61 6c 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 2e 77 70 63 66 37 20 66 6f 72 6d 20 2e 77 70 63 66 37 2d Data Ascii: b4e.wpcf7 .screen-reader-response {position: absolute;overflow: hidden;clip: rect(1px, 1px, 1px, 1px);clip-path: inset(50%);height: 1px;width: 1px;margin: -1px;padding: 0;border: 0;word-wrap: normal !important;}.wpcf7 form .wpcf7-
2024-04-16 15:05:06 UTC	1369	IN	Data Raw: 3b 20 2f 2a 20 4f 72 61 6e 67 65 20 2a 2f 0a 7d 0a 0a 2e 77 70 63 66 37 20 66 6f 72 6d 2e 69 6e 76 61 6c 69 64 20 2e 77 70 63 66 37 2d 72 65 73 70 6f 6e 73 65 2d 6f 75 74 70 75 74 2c 0a 2e 77 70 63 66 37 20 66 6f 72 6d 2e 75 6e 61 63 63 65 70 74 65 64 20 2e 77 70 63 66 37 2d 72 65 73 70 6f 6e 73 65 2d 6f 75 74 70 75 74 2c 0a 2e 77 70 63 66 37 20 66 6f 72 6d 2e 70 61 79 6d 65 6e 74 2d 72 65 71 75 69 72 65 64 20 2e 77 70 63 66 37 2d 72 65 73 70 6f 6e 73 65 2d 6f 75 74 70 75 74 20 7b 0a 09 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 66 66 62 39 30 30 3b 20 2f 2a 20 59 65 6c 6c 6f 77 20 2a 2f 0a 7d 0a 0a 2e 77 70 63 66 37 2d 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 77 72 61 70 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 7d 0a 0a 2e Data Ascii: ; /* Orange /}.wpcf7 form.invalid .wpcf7-response-output,.wpcf7 form.unaccepted .wpcf7-response-output,.wpcf7 form.payment-required .wpcf7-response-output {border-color: #ffb900; / Yellow */}.wpcf7-form-control-wrap {position: relative;}.
2024-04-16 15:05:06 UTC	753	IN	Data Raw: 69 61 20 28 70 72 65 66 65 72 73 2d 72 65 64 75 63 65 64 2d 6d 6f 74 69 6f 6e 3a 20 72 65 64 75 63 65 29 20 7b 0a 09 2e 77 70 63 66 37 2d 73 70 69 6e 6e 65 72 3a 3a 62 65 66 6f 72 65 20 7b 0a 09 09 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 20 62 6c 69 6e 6b 3b 0a 09 09 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 32 30 30 30 6d 73 3b 0a 09 7d 0a 7d 0a 0a 40 6b 65 79 66 72 61 6d 65 73 20 73 70 69 6e 20 7b 0a 09 66 72 6f 6d 20 7b 0a 09 09 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0a 09 7d 0a 0a 09 74 6f 20 7b 0a 09 09 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0a 09 7d 0a 7d 0a 0a 40 6b 65 79 66 72 61 6d 65 73 20 62 6c 69 6e 6b 20 7b 0a 09 66 72 6f 6d 20 7b 0a 09 09 6f 70 61 Data Ascii: ia (prefers-reduced-motion: reduce) {.wpcf7-spinner::before {animation-name: blink;animation-duration: 2000ms;}}@keyframes spin {from {transform: rotate(0deg);}to {transform: rotate(360deg);}}@keyframes blink {from {opa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.11	49722	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:05 UTC	604	OUT	GET /wp-content/themes/salient/css/font-awesome-legacy.min.css?ver=4.7.1 HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:07 UTC	586	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:07 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: public, max-age=2592000 expires: Thu, 16 May 2024 15:05:07 GMT last-modified: Tue, 11 Jan 2022 15:21:50 GMT etag: W/"c30f-61dda08e-29d4fef9117b0200;gz" platform: hostinger content-security-policy: upgrade-insecure-requests x-turbo-charged-by: LiteSpeed alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 2d9aba57d6eb3e32f56baba80afe0921-asc-edge5 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 1.656
2024-04-16 15:05:07 UTC	783	IN	Data Raw: 63 33 30 66 0d 0a 0a 40 66 6f 6e 74 2d 66 61 63 65 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 6f 6e 74 41 77 65 73 6f 6d 65 27 3b 0a 09 73 72 63 3a 75 72 6c 28 27 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 3f 76 3d 34 2e 32 27 29 3b 0a 09 73 72 63 3a 75 72 6c 28 27 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 3f 23 69 65 66 69 78 26 76 3d 34 2e 32 27 29 20 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 27 29 2c 0a 09 09 75 72 6c 28 27 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 73 76 67 23 66 6f 6e 74 61 77 65 73 6f 6d 65 72 65 67 75 6c 61 72 3f 76 3d 34 2e 32 27 29 20 66 6f 72 6d 61 74 28 27 73 76 67 Data Ascii: c30f@font-face{font-family:'FontAwesome';src:url('fonts/fontawesome-webfont.eot?v=4.2');src:url('fonts/fontawesome-webfont.eot?#iefix&v=4.2') format('embedded-opentype'),url('fonts/fontawesome-webfont.svg#fontawesomeregular?v=4.2') format('svg
2024-04-16 15:05:07 UTC	1369	IN	Data Raw: 6c 2d 61 6c 69 67 6e 3a 2d 31 30 25 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 65 6d 3b 7d 0a 5b 63 6c 61 73 73 5e 3d 22 69 63 6f 6e 2d 22 5d 2e 69 63 6f 6e 2d 66 69 78 65 64 2d 77 69 64 74 68 2c 5b 63 6c 61 73 73 2a 3d 22 20 69 63 6f 6e 2d 22 5d 2e 69 63 6f 6e 2d 66 69 78 65 64 2d 77 69 64 74 68 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 2e 31 34 32 38 35 37 31 34 32 38 35 37 31 34 32 38 65 6d 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 2e 32 38 35 37 31 34 32 38 35 37 31 34 32 38 35 37 65 6d 3b 7d 5b 63 6c 61 73 73 5e 3d 22 69 63 6f 6e 2d 22 5d 2e 69 63 6f 6e 2d 66 69 78 65 64 2d 77 69 64 74 68 2e 69 63 6f 6e 2d Data Ascii: l-align:-10%;font-size:1.3333333333333333em;}[class^="icon-"].icon-fixed-width,[class*=" icon-"].icon-fixed-width{display:inline-block;width:1.1428571428571428em;text-align:right;padding-right:0.2857142857142857em;}[class^="icon-"].icon-fixed-width.icon-
2024-04-16 15:05:07 UTC	1369	IN	Data Raw: 64 74 68 3a 61 75 74 6f 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 25 20 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 72 65 70 65 61 74 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 7d 0a 2e 69 63 6f 6e 2d 73 74 61 63 6b 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 32 65 6d 3b 68 65 69 67 68 74 3a 32 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 65 6d 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a Data Ascii: dth:auto;height:auto;line-height:normal;vertical-align:baseline;background-image:none;background-position:0% 0%;background-repeat:repeat;margin-top:0;}.icon-stack{position:relative;display:inline-block;width:2em;height:2em;line-height:2em;vertical-align:
2024-04-16 15:05:07 UTC	1369	IN	Data Raw: 66 69 6c 74 65 72 3a 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 42 61 73 69 63 49 6d 61 67 65 28 72 6f 74 61 74 69 6f 6e 3d 31 29 3b 7d 0a 2e 69 63 6f 6e 2d 72 6f 74 61 74 65 2d 31 38 30 3a 62 65 66 6f 72 65 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 38 30 64 65 67 29 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 38 30 64 65 67 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 38 30 64 65 67 29 3b 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 38 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 38 30 64 65 67 29 3b 66 69 6c 74 65 72 3a 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 Data Ascii: filter:progid:DXImageTransform.Microsoft.BasicImage(rotation=1);}.icon-rotate-180:before{-webkit-transform:rotate(180deg);-moz-transform:rotate(180deg);-ms-transform:rotate(180deg);-o-transform:rotate(180deg);transform:rotate(180deg);filter:progid:DXImag
2024-04-16 15:05:07 UTC	1369	IN	Data Raw: 2e 69 63 6f 6e 2d 74 68 2d 6c 61 72 67 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 39 22 3b 7d 0a 2e 69 63 6f 6e 2d 74 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 61 22 3b 7d 0a 2e 69 63 6f 6e 2d 74 68 2d 6c 69 73 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 62 22 3b 7d 0a 2e 69 63 6f 6e 2d 6f 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 63 22 3b 7d 0a 2e 69 63 6f 6e 2d 72 65 6d 6f 76 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 64 22 3b 7d 0a 2e 69 63 6f 6e 2d 7a 6f 6f 6d 2d 69 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 65 22 3b 7d 0a 2e 69 63 6f 6e 2d 7a 6f 6f 6d 2d 6f 75 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 Data Ascii: .icon-th-large:before{content:"\f009";}.icon-th:before{content:"\f00a";}.icon-th-list:before{content:"\f00b";}.icon-ok:before{content:"\f00c";}.icon-remove:before{content:"\f00d";}.icon-zoom-in:before{content:"\f00e";}.icon-zoom-out:before{content:"
2024-04-16 15:05:07 UTC	1369	IN	Data Raw: 63 6f 6e 2d 62 6f 6f 6b 6d 61 72 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 65 22 3b 7d 0a 2e 69 63 6f 6e 2d 70 72 69 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 66 22 3b 7d 0a 2e 69 63 6f 6e 2d 63 61 6d 65 72 61 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 33 30 22 3b 7d 0a 2e 69 63 6f 6e 2d 66 6f 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 33 31 22 3b 7d 0a 2e 69 63 6f 6e 2d 62 6f 6c 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 33 32 22 3b 7d 0a 2e 69 63 6f 6e 2d 69 74 61 6c 69 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 33 33 22 3b 7d 0a 2e 69 63 6f 6e 2d 74 65 78 74 2d 68 65 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 Data Ascii: con-bookmark:before{content:"\f02e";}.icon-print:before{content:"\f02f";}.icon-camera:before{content:"\f030";}.icon-font:before{content:"\f031";}.icon-bold:before{content:"\f032";}.icon-italic:before{content:"\f033";}.icon-text-height:before{content
2024-04-16 15:05:07 UTC	1369	IN	Data Raw: 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 35 32 22 3b 7d 0a 2e 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 35 33 22 3b 7d 0a 2e 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 35 34 22 3b 7d 0a 2e 69 63 6f 6e 2d 70 6c 75 73 2d 73 69 67 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 35 35 22 3b 7d 0a 2e 69 63 6f 6e 2d 6d 69 6e 75 73 2d 73 69 67 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 35 36 22 3b 7d 0a 2e 69 63 6f 6e 2d 72 65 6d 6f 76 65 2d 73 69 67 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 35 37 22 3b 7d 0a 2e 69 63 6f 6e 2d 6f 6b 2d 73 69 67 6e 3a 62 65 Data Ascii: efore{content:"\f052";}.icon-chevron-left:before{content:"\f053";}.icon-chevron-right:before{content:"\f054";}.icon-plus-sign:before{content:"\f055";}.icon-minus-sign:before{content:"\f056";}.icon-remove-sign:before{content:"\f057";}.icon-ok-sign:be
2024-04-16 15:05:07 UTC	1369	IN	Data Raw: 6e 2d 63 6f 6d 6d 65 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 35 22 3b 7d 0a 2e 69 63 6f 6e 2d 6d 61 67 6e 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 36 22 3b 7d 0a 2e 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 37 22 3b 7d 0a 2e 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 38 22 3b 7d 0a 2e 69 63 6f 6e 2d 72 65 74 77 65 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 39 22 3b 7d 0a 2e 69 63 6f 6e 2d 73 68 6f 70 70 69 6e 67 2d 63 61 72 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 61 22 3b 7d 0a 2e 69 63 6f 6e 2d 66 6f 6c 64 65 72 Data Ascii: n-comment:before{content:"\f075";}.icon-magnet:before{content:"\f076";}.icon-chevron-up:before{content:"\f077";}.icon-chevron-down:before{content:"\f078";}.icon-retweet:before{content:"\f079";}.icon-shopping-cart:before{content:"\f07a";}.icon-folder
2024-04-16 15:05:07 UTC	1369	IN	Data Raw: 39 36 22 3b 7d 0a 2e 69 63 6f 6e 2d 62 6f 6f 6b 6d 61 72 6b 2d 65 6d 70 74 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 37 22 3b 7d 0a 2e 69 63 6f 6e 2d 70 68 6f 6e 65 2d 73 69 67 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 38 22 3b 7d 0a 2e 69 63 6f 6e 2d 74 77 69 74 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 39 22 3b 7d 0a 2e 69 63 6f 6e 2d 66 61 63 65 62 6f 6f 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 61 22 3b 7d 0a 2e 69 63 6f 6e 2d 67 69 74 68 75 62 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 62 22 3b 7d 0a 2e 69 63 6f 6e 2d 75 6e 6c 6f 63 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 63 22 3b 7d 0a 2e 69 63 6f 6e 2d Data Ascii: 96";}.icon-bookmark-empty:before{content:"\f097";}.icon-phone-sign:before{content:"\f098";}.icon-twitter:before{content:"\f099";}.icon-facebook:before{content:"\f09a";}.icon-github:before{content:"\f09b";}.icon-unlock:before{content:"\f09c";}.icon-
2024-04-16 15:05:07 UTC	1369	IN	Data Raw: 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 37 22 3b 7d 0a 2e 69 63 6f 6e 2d 73 69 67 6e 2d 62 6c 61 6e 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 38 22 3b 7d 0a 2e 69 63 6f 6e 2d 72 65 6f 72 64 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 39 22 3b 7d 0a 2e 69 63 6f 6e 2d 6c 69 73 74 2d 75 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 61 22 3b 7d 0a 2e 69 63 6f 6e 2d 6c 69 73 74 2d 6f 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 62 22 3b 7d 0a 2e 69 63 6f 6e 2d 73 74 72 69 6b 65 74 68 72 6f 75 67 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 63 22 3b 7d 0a 2e 69 63 6f 6e 2d 75 6e 64 65 72 6c 69 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 Data Ascii: fore{content:"\f0c7";}.icon-sign-blank:before{content:"\f0c8";}.icon-reorder:before{content:"\f0c9";}.icon-list-ul:before{content:"\f0ca";}.icon-list-ol:before{content:"\f0cb";}.icon-strikethrough:before{content:"\f0cc";}.icon-underline:before{conte

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.11	49724	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:05 UTC	599	OUT	GET /wp-content/themes/salient/css/build/grid-system.css?ver=16.1.3 HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:06 UTC	586	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:06 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: public, max-age=2592000 expires: Thu, 16 May 2024 15:05:06 GMT last-modified: Sat, 18 Nov 2023 11:56:28 GMT etag: W/"563f-6558a66c-95f3d3dcdd875bd5;gz" platform: hostinger content-security-policy: upgrade-insecure-requests x-turbo-charged-by: LiteSpeed alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: c65c5a686a3c0d6f76cbd65baad4d366-asc-edge5 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 1.052
2024-04-16 15:05:06 UTC	783	IN	Data Raw: 35 36 33 66 0d 0a 2e 63 6f 6c 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 66 75 6c 6c 2d 70 61 67 65 2d 69 6e 6e 65 72 3e 2e 63 6f 6e 74 61 69 6e 65 72 3e 2e 73 70 61 6e 5f 31 32 2c 2e 66 75 6c 6c 2d 70 61 67 65 2d 69 6e 6e 65 72 3e 2e 73 70 61 6e 5f 31 32 2c 68 74 6d 6c 20 62 6f 64 79 20 2e 76 63 5f 72 6f 77 2d 66 6c 75 69 64 3e 2e 73 70 61 6e 5f 31 32 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 2d 6d 73 2d 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 3b 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 3b 66 6c 6f 61 74 3a 6e 6f 6e 65 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 36 39 31 70 78 29 7b 2e 63 Data Ascii: 563f.col{position:relative;display:block;width:100%}.full-page-inner>.container>.span_12,.full-page-inner>.span_12,html body .vc_row-fluid>.span_12{display:flex;display:-ms-flexbox;-ms-flex-wrap:wrap;flex-wrap:wrap;float:none}@media (min-width:691px){.c
2024-04-16 15:05:06 UTC	1369	IN	Data Raw: 2e 63 6f 6d 70 6f 73 65 2d 6d 6f 64 65 20 2e 76 63 5f 72 6f 77 2d 66 6c 75 69 64 3e 2e 73 70 61 6e 5f 31 32 3e 2e 76 63 5f 65 6c 65 6d 65 6e 74 3e 2e 77 70 62 5f 63 6f 6c 75 6d 6e 3a 6e 6f 74 28 5b 63 6c 61 73 73 2a 3d 6f 66 66 73 65 74 2d 5d 29 2c 2e 66 75 6c 6c 2d 70 61 67 65 2d 69 6e 6e 65 72 3e 2e 63 6f 6e 74 61 69 6e 65 72 3e 2e 73 70 61 6e 5f 31 32 3e 2e 77 70 62 5f 63 6f 6c 75 6d 6e 3a 6e 6f 74 28 5b 63 6c 61 73 73 2a 3d 6f 66 66 73 65 74 2d 5d 29 2c 2e 66 75 6c 6c 2d 70 61 67 65 2d 69 6e 6e 65 72 3e 2e 73 70 61 6e 5f 31 32 3e 2e 77 70 62 5f 63 6f 6c 75 6d 6e 3a 6e 6f 74 28 5b 63 6c 61 73 73 2a 3d 6f 66 66 73 65 74 2d 5d 29 2c 68 74 6d 6c 20 62 6f 64 79 20 2e 76 63 5f 72 6f 77 2d 66 6c 75 69 64 3e 2e 73 70 61 6e 5f 31 32 3e 2e 77 70 62 5f 63 6f 6c Data Ascii: .compose-mode .vc_row-fluid>.span_12>.vc_element>.wpb_column:not([class=offset-]),.full-page-inner>.container>.span_12>.wpb_column:not([class=offset-]),.full-page-inner>.span_12>.wpb_column:not([class*=offset-]),html body .vc_row-fluid>.span_12>.wpb_col
2024-04-16 15:05:06 UTC	1369	IN	Data Raw: 61 6e 5f 31 32 3e 2e 6f 6e 65 2d 66 6f 75 72 74 68 73 3a 6e 6f 74 28 5b 63 6c 61 73 73 2a 3d 76 63 5f 63 6f 6c 2d 78 73 2d 5d 29 2c 2e 76 63 5f 72 6f 77 2d 66 6c 75 69 64 5b 64 61 74 61 2d 63 6f 6c 75 6d 6e 2d 6d 61 72 67 69 6e 3d 6e 6f 6e 65 5d 2e 66 75 6c 6c 2d 77 69 64 74 68 2d 63 6f 6e 74 65 6e 74 3e 2e 73 70 61 6e 5f 31 32 3e 2e 6f 6e 65 2d 66 6f 75 72 74 68 73 3a 6e 6f 74 28 5b 63 6c 61 73 73 2a 3d 76 63 5f 63 6f 6c 2d 78 73 2d 5d 29 2c 62 6f 64 79 5b 64 61 74 61 2d 63 6f 6c 2d 67 61 70 2a 3d 70 78 5d 20 2e 66 75 6c 6c 2d 77 69 64 74 68 2d 63 6f 6e 74 65 6e 74 20 2e 69 6e 6e 65 72 5f 72 6f 77 5b 64 61 74 61 2d 63 6f 6c 75 6d 6e 2d 6d 61 72 67 69 6e 3d 64 65 66 61 75 6c 74 5d 2c 62 6f 64 79 5b 64 61 74 61 2d 63 6f 6c 2d 67 61 70 2a 3d 70 78 5d 20 2e Data Ascii: an_12>.one-fourths:not([class=vc_col-xs-]),.vc_row-fluid[data-column-margin=none].full-width-content>.span_12>.one-fourths:not([class=vc_col-xs-]),body[data-col-gap=px] .full-width-content .inner_row[data-column-margin=default],body[data-col-gap=px] .
2024-04-16 15:05:06 UTC	1369	IN	Data Raw: 2d 77 69 64 74 68 2d 63 6f 6e 74 65 6e 74 3e 2e 73 70 61 6e 5f 31 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 62 6f 64 79 5b 64 61 74 61 2d 63 6f 6c 2d 67 61 70 2a 3d 70 78 5d 20 2e 66 75 6c 6c 2d 77 69 64 74 68 2d 63 6f 6e 74 65 6e 74 20 2e 69 6e 6e 65 72 5f 72 6f 77 5b 64 61 74 61 2d 63 6f 6c 75 6d 6e 2d 6d 61 72 67 69 6e 3d 64 65 66 61 75 6c 74 5d 3e 2e 73 70 61 6e 5f 31 32 3e 2e 77 70 62 5f 63 6f 6c 75 6d 6e 2c 62 6f 64 79 5b 64 61 74 61 2d 63 6f 6c 2d 67 61 70 2a 3d 70 78 5d 20 2e 66 75 6c 6c 2d 77 69 64 74 68 2d 63 6f 6e 74 65 6e 74 20 2e 69 6e 6e 65 72 5f 72 6f 77 5b 64 61 74 61 2d 63 6f 6c 75 6d 6e 2d 6d 61 72 67 69 6e 3d 6e 6f 6e 65 5d 3e 2e 73 70 61 6e 5f 31 32 3e 2e 77 70 62 5f 63 6f 6c 75 6d 6e Data Ascii: -width-content>.span_12{margin-left:0;margin-right:0}body[data-col-gap=px] .full-width-content .inner_row[data-column-margin=default]>.span_12>.wpb_column,body[data-col-gap=px] .full-width-content .inner_row[data-column-margin=none]>.span_12>.wpb_column
2024-04-16 15:05:06 UTC	1369	IN	Data Raw: 5f 64 65 70 74 68 5d 3e 2e 76 63 5f 63 6f 6c 75 6d 6e 2d 69 6e 6e 65 72 3e 2e 63 6f 6c 75 6d 6e 2d 62 67 2d 6f 76 65 72 6c 61 79 2d 77 72 61 70 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 33 30 70 78 20 36 30 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 35 29 7d 2e 77 70 62 5f 63 6f 6c 75 6d 6e 5b 64 61 74 61 2d 73 68 61 64 6f 77 3d 6c 61 72 67 65 5f 64 65 70 74 68 5d 3e 2e 76 63 5f 63 6f 6c 75 6d 6e 2d 69 6e 6e 65 72 3e 2e 63 6f 6c 75 6d 6e 2d 62 67 2d 6f 76 65 72 6c 61 79 2d 77 72 61 70 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 34 30 70 78 20 31 30 30 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 35 29 2c 30 20 32 35 70 78 20 38 30 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 29 7d 2e 77 70 62 5f 63 6f 6c 75 6d 6e 5b 64 61 74 61 2d 73 68 61 64 6f Data Ascii: _depth]>.vc_column-inner>.column-bg-overlay-wrap{box-shadow:0 30px 60px rgba(0,0,0,.15)}.wpb_column[data-shadow=large_depth]>.vc_column-inner>.column-bg-overlay-wrap{box-shadow:0 40px 100px rgba(0,0,0,.15),0 25px 80px rgba(0,0,0,.1)}.wpb_column[data-shado
2024-04-16 15:05:06 UTC	1369	IN	Data Raw: 69 6d 61 74 69 6f 6e 3d 72 65 76 65 61 6c 2d 66 72 6f 6d 2d 6c 65 66 74 5d 3e 2e 76 63 5f 63 6f 6c 75 6d 6e 2d 69 6e 6e 65 72 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 31 32 30 25 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 31 32 30 25 29 7d 62 6f 64 79 5b 64 61 74 61 2d 6d 2d 61 6e 69 6d 61 74 65 3d 22 31 22 5d 20 2e 77 70 62 5f 63 6f 6c 75 6d 6e 2e 68 61 73 2d 61 6e 69 6d 61 74 69 6f 6e 5b 64 61 74 61 2d 61 6e 69 6d 61 74 69 6f 6e 3d 72 65 76 65 61 6c 2d 66 72 6f 6d 2d 72 69 67 68 74 5d 3e 2e 76 63 5f 63 6f 6c 75 6d 6e 2d 69 6e 6e 65 72 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 31 32 30 25 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 Data Ascii: imation=reveal-from-left]>.vc_column-inner{transform:translateX(-120%);-webkit-transform:translateX(-120%)}body[data-m-animate="1"] .wpb_column.has-animation[data-animation=reveal-from-right]>.vc_column-inner{transform:translateX(120%);-webkit-transform:t
2024-04-16 15:05:06 UTC	1369	IN	Data Raw: 64 69 6e 67 2d 32 2d 70 65 72 63 65 6e 74 5b 64 61 74 61 2d 62 6f 72 64 65 72 2d 77 69 64 74 68 2a 3d 70 78 5d 3e 2e 76 63 5f 63 6f 6c 75 6d 6e 2d 69 6e 6e 65 72 2c 2e 63 6f 6c 2e 70 61 64 64 69 6e 67 2d 33 2d 70 65 72 63 65 6e 74 5b 64 61 74 61 2d 62 6f 72 64 65 72 2d 77 69 64 74 68 2a 3d 70 78 5d 3e 2e 76 63 5f 63 6f 6c 75 6d 6e 2d 69 6e 6e 65 72 2c 2e 63 6f 6c 2e 70 61 64 64 69 6e 67 2d 34 2d 70 65 72 63 65 6e 74 5b 64 61 74 61 2d 62 6f 72 64 65 72 2d 77 69 64 74 68 2a 3d 70 78 5d 3e 2e 76 63 5f 63 6f 6c 75 6d 6e 2d 69 6e 6e 65 72 2c 2e 63 6f 6c 2e 70 61 64 64 69 6e 67 2d 35 2d 70 65 72 63 65 6e 74 5b 64 61 74 61 2d 62 6f 72 64 65 72 2d 77 69 64 74 68 2a 3d 70 78 5d 3e 2e 76 63 5f 63 6f 6c 75 6d 6e 2d 69 6e 6e 65 72 2c 2e 63 6f 6c 2e 70 61 64 64 69 6e Data Ascii: ding-2-percent[data-border-width=px]>.vc_column-inner,.col.padding-3-percent[data-border-width=px]>.vc_column-inner,.col.padding-4-percent[data-border-width=px]>.vc_column-inner,.col.padding-5-percent[data-border-width=px]>.vc_column-inner,.col.paddin
2024-04-16 15:05:06 UTC	1369	IN	Data Raw: 70 5d 29 7b 77 69 64 74 68 3a 38 2e 33 33 33 33 33 33 33 33 25 7d 2e 76 63 5f 63 6f 6c 2d 78 73 2d 35 5c 2f 35 3a 6e 6f 74 28 5b 64 61 74 61 2d 74 2d 77 2d 69 6e 68 65 72 69 74 73 3d 73 6d 61 6c 6c 5f 64 65 73 6b 74 6f 70 5d 29 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 76 63 5f 63 6f 6c 2d 78 73 2d 34 5c 2f 35 3a 6e 6f 74 28 5b 64 61 74 61 2d 74 2d 77 2d 69 6e 68 65 72 69 74 73 3d 73 6d 61 6c 6c 5f 64 65 73 6b 74 6f 70 5d 29 7b 77 69 64 74 68 3a 38 30 25 7d 2e 76 63 5f 63 6f 6c 2d 78 73 2d 33 5c 2f 35 3a 6e 6f 74 28 5b 64 61 74 61 2d 74 2d 77 2d 69 6e 68 65 72 69 74 73 3d 73 6d 61 6c 6c 5f 64 65 73 6b 74 6f 70 5d 29 7b 77 69 64 74 68 3a 36 30 25 7d 2e 76 63 5f 63 6f 6c 2d 78 73 2d 32 5c 2f 35 3a 6e 6f 74 28 5b 64 61 74 61 2d 74 2d 77 2d 69 6e 68 65 72 69 74 Data Ascii: p]){width:8.33333333%}.vc_col-xs-5\/5:not([data-t-w-inherits=small_desktop]){width:100%}.vc_col-xs-4\/5:not([data-t-w-inherits=small_desktop]){width:80%}.vc_col-xs-3\/5:not([data-t-w-inherits=small_desktop]){width:60%}.vc_col-xs-2\/5:not([data-t-w-inherit
2024-04-16 15:05:07 UTC	1369	IN	Data Raw: 6c 2d 78 73 2d 70 75 73 68 2d 31 30 7b 6c 65 66 74 3a 38 33 2e 33 33 33 33 33 33 33 33 25 7d 2e 76 63 5f 63 6f 6c 2d 78 73 2d 70 75 73 68 2d 39 7b 6c 65 66 74 3a 37 35 25 7d 2e 76 63 5f 63 6f 6c 2d 78 73 2d 70 75 73 68 2d 38 7b 6c 65 66 74 3a 36 36 2e 36 36 36 36 36 36 36 37 25 7d 2e 76 63 5f 63 6f 6c 2d 78 73 2d 70 75 73 68 2d 37 7b 6c 65 66 74 3a 35 38 2e 33 33 33 33 33 33 33 33 25 7d 2e 76 63 5f 63 6f 6c 2d 78 73 2d 70 75 73 68 2d 36 7b 6c 65 66 74 3a 35 30 25 7d 2e 76 63 5f 63 6f 6c 2d 78 73 2d 70 75 73 68 2d 35 7b 6c 65 66 74 3a 34 31 2e 36 36 36 36 36 36 36 37 25 7d 2e 76 63 5f 63 6f 6c 2d 78 73 2d 70 75 73 68 2d 34 7b 6c 65 66 74 3a 33 33 2e 33 33 33 33 33 33 33 33 25 7d 2e 76 63 5f 63 6f 6c 2d 78 73 2d 70 75 73 68 2d 33 7b 6c 65 66 74 3a 32 35 25 Data Ascii: l-xs-push-10{left:83.33333333%}.vc_col-xs-push-9{left:75%}.vc_col-xs-push-8{left:66.66666667%}.vc_col-xs-push-7{left:58.33333333%}.vc_col-xs-push-6{left:50%}.vc_col-xs-push-5{left:41.66666667%}.vc_col-xs-push-4{left:33.33333333%}.vc_col-xs-push-3{left:25%
2024-04-16 15:05:07 UTC	1369	IN	Data Raw: 61 72 67 69 6e 2d 6c 65 66 74 3a 36 30 25 7d 2e 76 63 5f 63 6f 6c 2d 78 73 2d 6f 66 66 73 65 74 2d 32 5c 2f 35 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 30 25 7d 2e 76 63 5f 63 6f 6c 2d 78 73 2d 6f 66 66 73 65 74 2d 31 5c 2f 35 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 30 25 7d 2e 76 63 5f 63 6f 6c 2d 78 73 2d 6f 66 66 73 65 74 2d 30 5c 2f 35 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 36 39 30 70 78 29 7b 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 35 5c 2f 35 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 34 5c 2f 35 7b 77 69 64 74 68 3a 38 30 25 7d 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 33 5c 2f 35 7b 77 69 64 74 68 3a 36 30 25 7d 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 32 5c 2f 35 7b 77 69 64 74 68 Data Ascii: argin-left:60%}.vc_col-xs-offset-2\/5{margin-left:40%}.vc_col-xs-offset-1\/5{margin-left:20%}.vc_col-xs-offset-0\/5{margin-left:0}@media (min-width:690px){.vc_col-sm-5\/5{width:100%}.vc_col-sm-4\/5{width:80%}.vc_col-sm-3\/5{width:60%}.vc_col-sm-2\/5{width

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.11	49723	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:05 UTC	593	OUT	GET /wp-content/themes/salient/css/build/style.css?ver=16.1.3 HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:07 UTC	587	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:06 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: public, max-age=2592000 expires: Thu, 16 May 2024 15:05:06 GMT last-modified: Tue, 02 Jan 2024 05:16:50 GMT etag: W/"293a5-65939c42-d46a1437e357b0b0;gz" platform: hostinger content-security-policy: upgrade-insecure-requests x-turbo-charged-by: LiteSpeed alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 2522ffc7613dc9ceb8fd24529a7d3846-asc-edge4 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 1.072
2024-04-16 15:05:07 UTC	782	IN	Data Raw: 32 30 30 30 30 0d 0a 61 2c 61 62 62 72 2c 61 63 72 6f 6e 79 6d 2c 61 64 64 72 65 73 73 2c 61 70 70 6c 65 74 2c 61 72 74 69 63 6c 65 2c 61 73 69 64 65 2c 61 75 64 69 6f 2c 62 2c 62 69 67 2c 62 6c 6f 63 6b 71 75 6f 74 65 2c 62 6f 64 79 2c 63 61 6e 76 61 73 2c 63 61 70 74 69 6f 6e 2c 63 65 6e 74 65 72 2c 63 69 74 65 2c 63 6f 64 65 2c 64 64 2c 64 65 6c 2c 64 65 74 61 69 6c 73 2c 64 66 6e 2c 64 69 76 2c 64 6c 2c 64 74 2c 65 6d 2c 65 6d 62 65 64 2c 66 69 65 6c 64 73 65 74 2c 66 69 67 63 61 70 74 69 6f 6e 2c 66 69 67 75 72 65 2c 66 6f 6f 74 65 72 2c 66 6f 72 6d 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 2c 68 65 61 64 65 72 2c 68 67 72 6f 75 70 2c 68 74 6d 6c 2c 69 2c 69 66 72 61 6d 65 2c 69 6d 67 2c 69 6e 73 2c 6b 62 64 2c 6c 61 62 65 6c 2c 6c 65 67 Data Ascii: 20000a,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,em,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,leg
2024-04-16 15:05:07 UTC	1369	IN	Data Raw: 79 3a 6e 6f 6e 65 7d 73 75 70 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 35 65 6d 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 73 75 70 65 72 7d 73 75 62 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 35 65 6d 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 73 75 62 7d 70 3a 65 6d 70 74 79 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 61 72 74 69 63 6c 65 2c 61 73 69 64 65 2c 64 65 74 61 69 6c 73 2c 66 69 67 63 61 70 74 69 6f 6e 2c 66 69 67 75 72 65 2c 66 6f 6f 74 65 72 2c 68 65 61 64 65 72 2c 68 67 72 6f 75 70 2c 6d 65 6e 75 2c 6e 61 76 2c 73 65 63 74 69 6f 6e 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2a 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f Data Ascii: y:none}sup{font-size:.5em;vertical-align:super}sub{font-size:.5em;vertical-align:sub}p:empty{display:none}article,aside,details,figcaption,figure,footer,header,hgroup,menu,nav,section{display:block}*{-webkit-box-sizing:border-box;-moz-box-sizing:border-bo
2024-04-16 15:05:07 UTC	1369	IN	Data Raw: 2d 66 6c 65 78 2d 68 65 69 67 68 74 29 20 2e 6f 63 6d 2d 65 66 66 65 63 74 2d 77 72 61 70 2d 69 6e 6e 65 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 66 6c 65 78 2d 67 72 6f 77 3a 31 7d 62 6f 64 79 3a 6e 6f 74 28 2e 6e 65 63 74 61 72 2d 6e 6f 2d 66 6c 65 78 2d 68 65 69 67 68 74 29 20 2e 63 6f 6e 74 61 69 6e 65 72 2d 77 72 61 70 7b 66 6c 65 78 2d 67 72 6f 77 3a 31 7d 70 7b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 7d 62 6f 64 79 20 2e 75 69 2d 77 69 64 67 65 74 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 4f 70 65 6e 20 53 61 6e 73 27 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 6e 65 63 74 61 72 2d 73 6b 69 70 2d 74 6f 2d 63 Data Ascii: -flex-height) .ocm-effect-wrap-inner{display:flex;flex-direction:column;flex-grow:1}body:not(.nectar-no-flex-height) .container-wrap{flex-grow:1}p{-webkit-font-smoothing:antialiased}body .ui-widget{font-family:'Open Sans';font-weight:400}.nectar-skip-to-c
2024-04-16 15:05:07 UTC	1369	IN	Data Raw: 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 7d 2e 6e 65 63 74 61 72 2d 62 67 2d 77 68 69 74 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 7d 23 68 65 61 64 65 72 2d 6f 75 74 65 72 20 2e 73 63 72 65 65 6e 2d 72 65 61 64 65 72 2d 74 65 78 74 7b 68 65 69 67 68 74 3a 31 70 78 7d 2e 6f 76 65 72 66 6c 6f 77 2d 78 2d 68 69 64 64 65 6e 7b 6f 76 65 72 66 6c 6f 77 2d 78 3a 68 69 64 64 65 6e 7d 2e 6e 65 63 74 61 72 2d 6f 76 65 72 66 6c 6f 77 2d 68 69 64 64 65 6e 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 6e 65 63 74 61 72 2d 70 73 65 75 64 6f 2d 65 78 70 61 6e 64 3a 62 65 66 6f 72 65 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 Data Ascii: kground-color:#000}.nectar-bg-white{background-color:#fff}#header-outer .screen-reader-text{height:1px}.overflow-x-hidden{overflow-x:hidden}.nectar-overflow-hidden{overflow:hidden}.nectar-pseudo-expand:before{position:absolute;top:0;left:0;width:100%;heig
2024-04-16 15:05:07 UTC	1369	IN	Data Raw: 30 30 30 7d 2e 72 6f 77 20 2e 63 6f 6c 20 2e 77 70 2d 63 61 70 74 69 6f 6e 20 69 6d 67 2c 2e 77 70 2d 63 61 70 74 69 6f 6e 20 69 6d 67 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 65 6d 7b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 7d 63 61 70 74 69 6f 6e 2c 74 64 2c 74 68 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 63 6f 6e 74 61 69 6e 65 72 2d 77 72 61 70 2c 2e 70 72 6f 6a 65 63 74 2d 74 69 74 6c 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 38 66 38 66 38 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7a 2d 69 6e 64 65 78 3a 31 30 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 Data Ascii: 000}.row .col .wp-caption img,.wp-caption img{margin-bottom:0;display:block;margin-right:0}em{font-style:italic}caption,td,th{font-weight:400;text-align:left}.container-wrap,.project-title{background-color:#f8f8f8;position:relative;z-index:10;margin-top:0
2024-04-16 15:05:07 UTC	1369	IN	Data Raw: 2c 62 6f 64 79 20 68 35 2e 6c 69 67 68 74 2c 62 6f 64 79 20 68 36 2e 6c 69 67 68 74 2c 70 2e 6c 69 67 68 74 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 7d 62 6f 64 79 20 68 31 20 65 6d 2c 62 6f 64 79 20 68 32 20 65 6d 2c 62 6f 64 79 20 68 33 20 65 6d 2c 62 6f 64 79 20 68 34 20 65 6d 7b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 7d 2e 74 65 78 74 2d 61 6c 69 67 6e 2d 63 65 6e 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 70 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 32 37 70 78 7d 2e 72 6f 77 20 2e 63 6f 6c 20 70 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 63 6f 6e 74 61 69 6e 65 72 20 2e 72 6f 77 3a 6c 61 73 74 2d Data Ascii: ,body h5.light,body h6.light,p.light{text-transform:none;font-weight:300}body h1 em,body h2 em,body h3 em,body h4 em{font-size:inherit}.text-align-center{text-align:center}p{padding-bottom:27px}.row .col p:last-child{padding-bottom:0}.container .row:last-
2024-04-16 15:05:07 UTC	1369	IN	Data Raw: 79 2d 6f 75 74 65 72 20 75 6c 20 6c 69 2c 23 6d 6f 62 69 6c 65 2d 6d 65 6e 75 20 6f 6c 20 6c 69 2c 23 6d 6f 62 69 6c 65 2d 6d 65 6e 75 20 75 6c 20 6c 69 2c 23 73 65 61 72 63 68 2d 6f 75 74 65 72 20 6f 6c 20 6c 69 2c 23 73 65 61 72 63 68 2d 6f 75 74 65 72 20 75 6c 20 6c 69 2c 23 73 6c 69 64 65 2d 6f 75 74 2d 77 69 64 67 65 74 2d 61 72 65 61 20 6f 6c 20 6c 69 2c 23 73 6c 69 64 65 2d 6f 75 74 2d 77 69 64 67 65 74 2d 61 72 65 61 20 75 6c 20 6c 69 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 7d 2e 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 20 69 6d 67 7b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 61 75 74 6f 7d 2e 6e 6f 2d 74 72 61 6e 73 66 6f 72 6d 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 69 6e 68 65 72 69 74 21 69 6d 70 6f Data Ascii: y-outer ul li,#mobile-menu ol li,#mobile-menu ul li,#search-outer ol li,#search-outer ul li,#slide-out-widget-area ol li,#slide-out-widget-area ul li{list-style:none}.main-content img{max-width:100%;height:auto}.no-transform{-webkit-transform:inherit!impo
2024-04-16 15:05:07 UTC	1369	IN	Data Raw: 2d 35 30 76 77 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 65 66 74 3a 35 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 76 77 3b 77 69 64 74 68 3a 31 30 30 76 77 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 62 6f 64 79 20 2e 63 6f 6e 74 61 69 6e 65 72 2d 77 72 61 70 20 5b 63 6c 61 73 73 2a 3d 77 70 2d 62 6c 6f 63 6b 5d 2e 61 6c 69 67 6e 66 75 6c 6c 20 69 6d 67 2c 62 6f 64 79 20 2e 63 6f 6e 74 61 69 6e 65 72 2d 77 72 61 70 20 5b 63 6c 61 73 73 2a 3d 77 70 2d 62 6c 6f 63 6b 5d 2e 61 6c 69 67 6e 77 69 64 65 20 69 6d 67 7b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 73 65 61 72 63 68 5f 5f 69 6e 73 69 64 65 2d 77 72 61 70 70 65 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 3a 61 Data Ascii: -50vw!important;left:50%;max-width:100vw;width:100vw;position:relative}body .container-wrap [class=wp-block].alignfull img,body .container-wrap [class=wp-block].alignwide img{max-width:none;width:100%}.wp-block-search__inside-wrapper{display:flex;flex:a
2024-04-16 15:05:07 UTC	1369	IN	Data Raw: 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 62 6f 72 64 65 72 3a 33 70 78 20 73 6f 6c 69 64 20 23 65 35 65 35 65 35 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 30 70 78 7d 2e 64 65 66 61 75 6c 74 2d 6c 6f 61 64 69 6e 67 2d 69 63 6f 6e 3a 62 65 66 6f 72 65 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 30 30 30 20 74 72 61 6e 73 70 61 72 65 6e 74 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 30 30 25 3b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 33 70 78 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 25 Data Ascii: ock;position:relative;border:3px solid #e5e5e5;margin-top:-20px}.default-loading-icon:before{position:absolute;content:"";border-color:#000 transparent transparent;border-radius:100%;border-style:solid;border-width:3px;display:block;height:100%;width:100%
2024-04-16 15:05:07 UTC	1369	IN	Data Raw: 62 65 66 6f 72 65 5f 62 6c 6f 67 5f 6c 6f 6f 70 5f 65 6e 64 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 34 25 7d 23 61 6a 61 78 2d 63 6f 6e 74 65 6e 74 2d 77 72 61 70 20 2e 66 6f 72 63 65 2d 63 6f 6e 74 61 69 6e 65 64 2d 72 6f 77 73 20 2e 6e 65 63 74 61 72 2d 67 6c 6f 62 61 6c 2d 73 65 63 74 69 6f 6e 3e 2e 63 6f 6e 74 61 69 6e 65 72 2c 2e 6e 65 63 74 61 72 5f 68 6f 6f 6b 5f 61 66 74 65 72 5f 63 6f 6e 74 65 6e 74 3e 2e 63 6f 6e 74 61 69 6e 65 72 2c 2e 6e 65 63 74 61 72 5f 68 6f 6f 6b 5f 62 65 66 6f 72 65 5f 63 6f 6e 74 65 6e 74 5f 67 6c 6f 62 61 6c 5f 73 65 63 74 69 6f 6e 3e 2e 63 6f 6e 74 61 69 6e 65 72 2c 2e 6e 65 63 74 61 72 5f 68 6f 6f 6b 5f 67 6c 6f 62 61 6c 5f 73 65 63 74 69 6f 6e 5f 61 66 74 65 72 5f 63 6f 6e 74 65 6e 74 3e 2e 63 6f 6e 74 61 69 6e 65 72 Data Ascii: before_blog_loop_end{padding-top:4%}#ajax-content-wrap .force-contained-rows .nectar-global-section>.container,.nectar_hook_after_content>.container,.nectar_hook_before_content_global_section>.container,.nectar_hook_global_section_after_content>.container

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.11	49727	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:05 UTC	616	OUT	GET /wp-content/themes/salient/css/build/elements/element-testimonial.css?ver=16.1.3 HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:08 UTC	586	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:08 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: public, max-age=2592000 expires: Thu, 16 May 2024 15:05:07 GMT last-modified: Sun, 21 Aug 2022 16:33:48 GMT etag: W/"1881-63025e6c-c6826749503aeba0;gz" platform: hostinger content-security-policy: upgrade-insecure-requests x-turbo-charged-by: LiteSpeed alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: b880e4370c7dec89ef1fd52c70a6947e-asc-edge4 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 1.768
2024-04-16 15:05:08 UTC	783	IN	Data Raw: 31 38 38 31 0d 0a 2e 63 6f 6c 2e 74 65 73 74 69 6d 6f 6e 69 61 6c 5f 73 6c 69 64 65 72 7b 66 6c 6f 61 74 3a 6e 6f 6e 65 7d 2e 74 65 73 74 69 6d 6f 6e 69 61 6c 5f 73 6c 69 64 65 72 7b 66 6c 6f 61 74 3a 6e 6f 6e 65 3b 6f 70 61 63 69 74 79 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 31 70 78 7d 68 74 6d 6c 3a 6e 6f 74 28 2e 6a 73 29 20 2e 74 65 73 74 69 6d 6f 6e 69 61 6c 5f 73 6c 69 64 65 72 7b 6f 70 61 63 69 74 79 3a 31 3b 68 65 69 67 68 74 3a 61 75 74 6f 7d 2e 74 65 73 74 69 6d 6f 6e 69 61 6c 5f 73 6c 69 64 65 72 3a 6e 6f 74 28 5b 64 61 74 61 2d 73 74 79 6c 65 2a 3d 6d 75 6c 74 69 70 6c 65 5f 76 69 73 69 62 6c 65 5d 29 20 62 6c 6f 63 6b 71 75 6f 74 65 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 Data Ascii: 1881.col.testimonial_slider{float:none}.testimonial_slider{float:none;opacity:0;margin-bottom:21px}html:not(.js) .testimonial_slider{opacity:1;height:auto}.testimonial_slider:not([data-style*=multiple_visible]) blockquote{padding-left:0;text-align:cente
2024-04-16 15:05:08 UTC	1369	IN	Data Raw: 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 2e 32 73 20 6c 69 6e 65 61 72 20 30 73 2c 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 20 2e 32 73 20 6c 69 6e 65 61 72 20 30 73 3b 77 69 64 74 68 3a 31 30 70 78 7d 2e 74 65 73 74 69 6d 6f 6e 69 61 6c 5f 73 6c 69 64 65 72 20 2e 63 6f 6e 74 72 6f 6c 73 20 75 6c 20 6c 69 20 2e 70 61 67 69 6e 61 74 69 6f 6e 2d 73 77 69 74 63 68 2e 61 63 74 69 76 65 2c 2e 74 65 73 74 69 6d 6f 6e 69 61 6c 5f 73 6c 69 64 65 72 20 2e 63 6f 6e 74 72 6f 6c 73 20 75 6c 20 6c 69 20 2e 70 61 67 69 6e 61 74 69 6f 6e 2d 73 77 69 74 63 68 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 33 33 7d 2e 74 65 73 74 69 6d 6f 6e 69 61 6c 5f 73 6c 69 64 65 72 20 2e 63 6f 6e 74 72 6f 6c 73 Data Ascii: ;transition:background-color .2s linear 0s,border-color .2s linear 0s;width:10px}.testimonial_slider .controls ul li .pagination-switch.active,.testimonial_slider .controls ul li .pagination-switch:hover{background-color:#333}.testimonial_slider .controls
2024-04-16 15:05:08 UTC	1369	IN	Data Raw: 6f 63 6b 71 75 6f 74 65 20 2e 74 69 74 6c 65 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 6f 70 61 63 69 74 79 3a 2e 36 7d 2e 74 65 73 74 69 6d 6f 6e 69 61 6c 5f 73 6c 69 64 65 72 3a 6e 6f 74 28 5b 64 61 74 61 2d 73 74 79 6c 65 3d 6d 69 6e 69 6d 61 6c 5d 29 20 62 6c 6f 63 6b 71 75 6f 74 65 20 2e 74 69 74 6c 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 7d 2e 6e 65 63 74 61 72 5f 73 69 6e 67 6c 65 5f 74 65 73 74 69 6d 6f 6e 69 61 6c 20 2e 74 69 74 6c 65 2c 2e 74 65 73 74 69 6d 6f 6e 69 61 6c 5f 73 6c 69 64 65 72 5b 64 61 74 61 2d 73 74 79 6c 65 2a 3d 6d 75 6c 74 69 70 6c 65 5f 76 69 73 69 62 6c 65 5d 20 62 6c 6f 63 6b 71 75 6f 74 65 20 2e 74 69 74 6c 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 7d 2e 6c 69 67 68 74 20 2e 74 65 73 74 69 6d 6f 6e 69 61 Data Ascii: ockquote .title{color:inherit;opacity:.6}.testimonial_slider:not([data-style=minimal]) blockquote .title{font-size:12px}.nectar_single_testimonial .title,.testimonial_slider[data-style*=multiple_visible] blockquote .title{font-size:14px}.light .testimonia
2024-04-16 15:05:08 UTC	1369	IN	Data Raw: 73 6c 69 64 65 72 20 2e 69 6d 61 67 65 2d 69 63 6f 6e 2e 68 61 73 2d 62 67 7b 77 69 64 74 68 3a 35 30 70 78 3b 68 65 69 67 68 74 3a 35 30 70 78 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 74 65 78 74 2d 69 6e 64 65 6e 74 3a 2d 39 39 39 39 70 78 7d 2e 74 65 73 74 69 6d 6f 6e 69 61 6c 5f 73 6c 69 64 65 72 20 62 6c 6f 63 6b 71 75 6f 74 65 20 70 20 2e 62 6f 74 74 6f 6d 2d 61 72 72 6f 77 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 6e 65 63 74 61 72 5f 73 69 6e 67 6c 65 5f 74 65 73 74 69 6d 6f 6e 69 61 6c 20 2e 69 6d 61 67 65 2d 69 63 6f 6e 2c 2e 74 65 73 74 69 6d 6f 6e 69 61 6c 5f 73 6c 69 64 65 72 5b 64 61 74 61 2d 73 74 79 6c 65 3d 6d 75 6c 74 69 70 6c 65 5f 76 69 73 69 62 6c 65 5f 6d 69 6e 69 6d 61 6c 5d 20 2e 69 6d 61 67 65 2d 69 63 6f 6e 7b 77 69 64 74 68 3a Data Ascii: slider .image-icon.has-bg{width:50px;height:50px;border:none;text-indent:-9999px}.testimonial_slider blockquote p .bottom-arrow{display:none}.nectar_single_testimonial .image-icon,.testimonial_slider[data-style=multiple_visible_minimal] .image-icon{width:
2024-04-16 15:05:08 UTC	1369	IN	Data Raw: 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 69 6e 68 65 72 69 74 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 35 5c 30 30 61 30 5c 66 30 30 35 5c 30 30 61 30 5c 66 30 30 35 5c 30 30 61 30 5c 66 30 30 35 5c 30 30 61 30 5c 66 30 30 35 22 3b 63 6f 6c 6f 72 3a 23 30 30 30 3b 66 6c 6f 61 74 3a 6c 65 66 74 7d 2e 66 75 6c 6c 2d 77 69 64 74 68 2d 63 6f 6e 74 65 6e 74 20 2e 74 65 73 74 69 6d 6f 6e 69 61 6c 5f 73 6c 69 64 65 72 2c 2e 74 6f 67 67 6c 65 73 20 2e 74 65 73 74 69 6d 6f 6e 69 61 6c 5f 73 6c 69 64 65 72 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 7d 2e 66 75 6c 6c 2d 77 69 64 74 68 2d 63 6f 6e 74 65 6e 74 20 2e 74 65 73 74 69 6d 6f 6e 69 Data Ascii: ext-decoration:inherit;-webkit-font-smoothing:antialiased;content:"\f005\00a0\f005\00a0\f005\00a0\f005\00a0\f005";color:#000;float:left}.full-width-content .testimonial_slider,.toggles .testimonial_slider{padding-bottom:20px}.full-width-content .testimoni
2024-04-16 15:05:08 UTC	27	IN	Data Raw: 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 33 33 70 78 7d 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: x;line-height:33px}}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.11	49729	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:07 UTC	614	OUT	GET /wp-content/themes/salient/css/build/elements/element-fancy-box.css?ver=16.1.3 HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:08 UTC	586	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:08 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: public, max-age=2592000 expires: Thu, 16 May 2024 15:05:08 GMT last-modified: Sun, 16 Jul 2023 04:45:30 GMT etag: W/"2db5-64b375ea-e143b4ef76dd9e73;gz" platform: hostinger content-security-policy: upgrade-insecure-requests x-turbo-charged-by: LiteSpeed alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 093a25f0ef6fb3051daf9665b5a74d2a-asc-edge6 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 1.099
2024-04-16 15:05:08 UTC	783	IN	Data Raw: 32 64 62 35 0d 0a 2e 6e 65 63 74 61 72 2d 66 61 6e 63 79 2d 62 6f 78 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 70 61 64 64 69 6e 67 3a 31 33 25 7d 2e 66 75 6c 6c 2d 77 69 64 74 68 2d 63 6f 6e 74 65 6e 74 20 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 31 32 20 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 31 32 3e 2e 77 70 62 5f 77 72 61 70 70 65 72 3e 2e 6e 65 63 74 61 72 2d 66 61 6e 63 79 2d 62 6f 78 2c 2e 66 75 6c 6c 2d 77 69 64 74 68 2d 63 6f 6e 74 65 6e 74 3e 2e 73 70 61 6e 5f 31 32 3e 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 31 32 3e 2e 77 70 62 5f 77 72 61 70 70 65 72 3e 2e 6e 65 63 74 61 72 2d 66 61 6e 63 79 2d 62 6f 78 7b 70 61 64 64 69 6e 67 3a 35 25 7d 2e 66 75 6c 6c 2d 77 69 64 74 68 2d 63 6f 6e 74 65 6e 74 20 2e Data Ascii: 2db5.nectar-fancy-box{overflow:hidden;position:relative;padding:13%}.full-width-content .vc_col-sm-12 .vc_col-sm-12>.wpb_wrapper>.nectar-fancy-box,.full-width-content>.span_12>.vc_col-sm-12>.wpb_wrapper>.nectar-fancy-box{padding:5%}.full-width-content .
2024-04-16 15:05:08 UTC	1369	IN	Data Raw: 78 3a 68 6f 76 65 72 3a 61 66 74 65 72 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 58 28 31 29 20 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 58 28 31 29 20 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 7d 2e 6e 65 63 74 61 72 2d 66 61 6e 63 79 2d 62 6f 78 5b 64 61 74 61 2d 73 74 79 6c 65 3d 64 65 66 61 75 6c 74 5d 20 2e 69 6e 6e 65 72 20 2a 2c 2e 6e 65 63 74 61 72 2d 66 61 6e 63 79 2d 62 6f 78 5b 64 61 74 61 2d 73 74 79 6c 65 3d 68 6f 76 65 72 5f 64 65 73 63 5d 20 2e 69 6e 6e 65 72 20 2a 2c 2e 6e 65 63 74 61 72 2d 66 61 6e 63 79 2d 62 6f 78 5b 64 61 74 61 2d 73 74 79 6c 65 3d 70 61 72 61 6c 6c 61 78 5f 68 6f 76 65 72 5d 20 2e 69 6e 6e 65 72 20 2a 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 6e 65 Data Ascii: x:hover:after{-webkit-transform:scaleX(1) translateZ(0);transform:scaleX(1) translateZ(0)}.nectar-fancy-box[data-style=default] .inner ,.nectar-fancy-box[data-style=hover_desc] .inner ,.nectar-fancy-box[data-style=parallax_hover] .inner *{color:#fff}.ne
2024-04-16 15:05:08 UTC	1369	IN	Data Raw: 6e 73 66 6f 72 6d 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 34 2c 31 2c 2e 33 2c 31 29 2c 6f 70 61 63 69 74 79 20 2e 35 35 73 20 65 61 73 65 20 2e 32 35 73 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 74 72 61 6e 73 66 6f 72 6d 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 34 2c 31 2c 2e 33 2c 31 29 2c 6f 70 61 63 69 74 79 20 2e 35 35 73 20 65 61 73 65 20 2e 32 35 73 3b 6f 70 61 63 69 74 79 3a 31 7d 62 6f 64 79 20 2e 6e 65 63 74 61 72 2d 66 61 6e 63 79 2d 62 6f 78 20 2e 6c 69 6e 6b 2d 74 65 78 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 7d 2e 6e 65 63 74 61 72 2d 66 61 6e 63 79 2d 62 6f 78 20 2e 6c 69 6e 6b 2d 74 65 78 74 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 4f 70 65 6e 20 53 61 6e 73 27 3b 6c 69 6e 65 2d 68 65 69 67 68 74 Data Ascii: nsform .6s cubic-bezier(.24,1,.3,1),opacity .55s ease .25s;transition:transform .6s cubic-bezier(.24,1,.3,1),opacity .55s ease .25s;opacity:1}body .nectar-fancy-box .link-text{font-size:12px}.nectar-fancy-box .link-text{font-family:'Open Sans';line-height
2024-04-16 15:05:08 UTC	1369	IN	Data Raw: 70 78 3b 68 65 69 67 68 74 3a 31 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 6f 70 61 63 69 74 79 3a 30 3b 6c 65 66 74 3a 2d 36 70 78 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 33 35 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 31 32 2c 2e 37 35 2c 2e 34 2c 31 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 33 35 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 31 32 2c 2e 37 35 2c 2e 34 2c 31 29 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 74 6f 70 3a 31 31 70 78 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 32 37 70 78 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 Data Ascii: px;height:1px;background-color:#fff;opacity:0;left:-6px;cursor:pointer;transition:all .35s cubic-bezier(.12,.75,.4,1);-webkit-transition:all .35s cubic-bezier(.12,.75,.4,1);pointer-events:none;top:11px;transform:translateX(-27px);-webkit-transform:transla
2024-04-16 15:05:08 UTC	1369	IN	Data Raw: 2c 2e 6e 65 63 74 61 72 2d 66 61 6e 63 79 2d 62 6f 78 5b 64 61 74 61 2d 73 74 79 6c 65 3d 68 6f 76 65 72 5f 64 65 73 63 5d 5b 64 61 74 61 2d 61 6c 69 67 6e 6d 65 6e 74 3d 72 69 67 68 74 5d 20 2e 69 6e 6e 65 72 2d 77 72 61 70 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 7d 2e 6e 65 63 74 61 72 2d 66 61 6e 63 79 2d 62 6f 78 5b 64 61 74 61 2d 73 74 79 6c 65 3d 68 6f 76 65 72 5f 64 65 73 63 5d 5b 64 61 74 61 2d 61 6c 69 67 6e 6d 65 6e 74 3d 63 65 6e 74 65 72 5d 20 2e 69 6e 6e 65 72 2c 2e 6e 65 63 74 61 72 2d 66 61 6e 63 79 2d 62 6f 78 5b 64 61 74 61 2d 73 74 79 6c 65 3d 68 6f 76 65 72 5f 64 65 73 63 5d 5b 64 61 74 61 2d 61 6c 69 67 6e 6d 65 6e 74 3d 63 65 6e 74 65 72 5d 20 2e 69 6e 6e 65 72 20 69 2c 2e 6e 65 63 74 61 72 2d 66 61 6e 63 79 2d 62 6f 78 5b Data Ascii: ,.nectar-fancy-box[data-style=hover_desc][data-alignment=right] .inner-wrap{text-align:right}.nectar-fancy-box[data-style=hover_desc][data-alignment=center] .inner,.nectar-fancy-box[data-style=hover_desc][data-alignment=center] .inner i,.nectar-fancy-box[
2024-04-16 15:05:08 UTC	1369	IN	Data Raw: 78 2d 6c 61 79 65 72 7b 77 69 64 74 68 3a 31 30 30 25 3b 6c 65 66 74 3a 30 3b 62 6f 74 74 6f 6d 3a 30 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 7a 2d 69 6e 64 65 78 3a 31 7d 2e 6e 65 63 74 61 72 2d 66 61 6e 63 79 2d 62 6f 78 5b 64 61 74 61 2d 73 74 79 6c 65 3d 68 6f 76 65 72 5f 64 65 73 63 5d 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 3b 70 61 64 64 69 6e 67 3a 31 31 25 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 74 72 61 6e 73 66 6f 72 6d 20 2e 36 35 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 30 35 2c 2e 32 2c 2e 31 2c 31 29 2c 62 6f 78 2d 73 68 61 64 6f 77 20 2e 36 35 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 30 35 2c 2e 32 2c 2e 31 2c 31 29 7d 2e 6e 65 63 74 Data Ascii: x-layer{width:100%;left:0;bottom:0;height:100%;position:absolute;z-index:1}.nectar-fancy-box[data-style=hover_desc]{display:flex;flex-wrap:wrap;padding:11%;transition:transform .65s cubic-bezier(.05,.2,.1,1),box-shadow .65s cubic-bezier(.05,.2,.1,1)}.nect
2024-04-16 15:05:08 UTC	1369	IN	Data Raw: 2e 36 35 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 30 35 2c 2e 32 2c 2e 31 2c 31 29 7d 23 61 6a 61 78 2d 63 6f 6e 74 65 6e 74 2d 77 72 61 70 20 2e 6e 65 63 74 61 72 2d 66 61 6e 63 79 2d 62 6f 78 5b 64 61 74 61 2d 73 74 79 6c 65 3d 68 6f 76 65 72 5f 64 65 73 63 5d 20 2e 62 6f 78 2d 62 67 3a 61 66 74 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6e 65 63 74 61 72 2d 66 61 6e 63 79 2d 62 6f 78 5b 64 61 74 61 2d 73 74 79 6c 65 3d 68 6f 76 65 72 5f 64 65 73 63 5d 20 2e 62 6f 78 2d 62 67 3a 61 66 74 65 72 2c 2e 6e 65 63 74 61 72 2d 66 61 6e 63 79 2d 62 6f 78 5b 64 61 74 61 2d 73 74 79 6c 65 3d 68 6f 76 65 72 5f 64 65 73 63 5d 2e 68 6f 76 65 72 65 64 20 2e 62 6f 78 2d 62 67 Data Ascii: .65s cubic-bezier(.05,.2,.1,1)}#ajax-content-wrap .nectar-fancy-box[data-style=hover_desc] .box-bg:after{background-color:transparent!important}.nectar-fancy-box[data-style=hover_desc] .box-bg:after,.nectar-fancy-box[data-style=hover_desc].hovered .box-bg
2024-04-16 15:05:08 UTC	1369	IN	Data Raw: 3a 31 30 70 78 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 32 30 70 78 29 7d 2e 6e 65 63 74 61 72 2d 66 61 6e 63 79 2d 62 6f 78 5b 64 61 74 61 2d 73 74 79 6c 65 3d 68 6f 76 65 72 5f 64 65 73 63 5d 2e 68 6f 76 65 72 65 64 20 2e 68 6f 76 65 72 2d 63 6f 6e 74 65 6e 74 7b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 29 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 36 35 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 30 35 2c 2e 32 2c 2e 31 2c 31 29 20 2e 31 35 73 2c 74 72 61 6e 73 66 6f 72 6d 20 2e 36 35 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 30 35 2c 2e 32 2c 2e 31 2c 31 29 20 2e 31 35 73 7d 2e 6d 61 74 65 72 69 61 6c 20 2e 6e 65 63 74 61 72 2d 66 61 6e 63 79 Data Ascii: :10px;transform:translateY(20px)}.nectar-fancy-box[data-style=hover_desc].hovered .hover-content{opacity:1;transform:translateY(0);transition:opacity .65s cubic-bezier(.05,.2,.1,1) .15s,transform .65s cubic-bezier(.05,.2,.1,1) .15s}.material .nectar-fancy
2024-04-16 15:05:08 UTC	1348	IN	Data Raw: 62 6f 78 5b 64 61 74 61 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3d 22 35 70 78 22 5d 5b 64 61 74 61 2d 73 74 79 6c 65 3d 70 61 72 61 6c 6c 61 78 5f 68 6f 76 65 72 5d 20 2e 70 61 72 61 6c 6c 61 78 49 6d 67 2d 72 65 6e 64 65 72 65 64 2d 6c 61 79 65 72 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 6e 65 63 74 61 72 2d 66 61 6e 63 79 2d 62 6f 78 5b 64 61 74 61 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3d 22 31 30 70 78 22 5d 5b 64 61 74 61 2d 73 74 79 6c 65 3d 70 61 72 61 6c 6c 61 78 5f 68 6f 76 65 72 5d 20 2e 70 61 72 61 6c 6c 61 78 49 6d 67 2d 72 65 6e 64 65 72 65 64 2d 6c 61 79 65 72 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 30 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e Data Ascii: box[data-border-radius="5px"][data-style=parallax_hover] .parallaxImg-rendered-layer{border-radius:5px;overflow:hidden}.nectar-fancy-box[data-border-radius="10px"][data-style=parallax_hover] .parallaxImg-rendered-layer{border-radius:10px;overflow:hidden}.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.11	49730	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:07 UTC	619	OUT	GET /wp-content/themes/salient/css/build/elements/element-video-lightbox.css?ver=16.1.3 HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:09 UTC	586	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:08 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: public, max-age=2592000 expires: Thu, 16 May 2024 15:05:08 GMT last-modified: Tue, 11 Jan 2022 15:21:50 GMT etag: W/"3222-61dda08e-90b0ec828bad37fa;gz" platform: hostinger content-security-policy: upgrade-insecure-requests x-turbo-charged-by: LiteSpeed alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: e60abd2552132bb662e3f4c02818aed3-asc-edge5 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 1.038
2024-04-16 15:05:09 UTC	783	IN	Data Raw: 33 32 32 32 0d 0a 2e 6e 65 63 74 61 72 2d 76 69 64 65 6f 2d 62 6f 78 20 2e 70 6c 61 79 5f 62 75 74 74 6f 6e 5f 6d 6f 75 73 65 5f 66 6f 6c 6c 6f 77 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 33 73 20 65 61 73 65 7d 2e 6e 65 63 74 61 72 2d 76 69 64 65 6f 2d 62 6f 78 20 2e 70 6c 61 79 5f 62 75 74 74 6f 6e 5f 6d 6f 75 73 65 5f 66 6f 6c 6c 6f 77 3a 6e 6f 74 28 2e 76 69 73 69 62 6c 65 29 7b 6f 70 61 63 69 74 79 3a 30 7d 2e 6e 65 63 74 61 72 2d 76 69 64 65 6f 2d 62 6f 78 20 2e 70 6c 61 79 5f 62 75 74 74 6f 6e 5f 6d 6f 75 73 65 5f 66 6f 6c 6c 6f 77 3a 62 65 66 6f 72 65 7b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 32 70 78 7d 2e 6e 65 63 74 61 72 2d 76 69 64 65 6f 2d 62 6f 78 20 2e 70 6c 61 79 5f 62 75 74 74 6f 6e 5f 6d 6f 75 73 65 5f 66 6f 6c 6c Data Ascii: 3222.nectar-video-box .play_button_mouse_follow{transition:opacity .3s ease}.nectar-video-box .play_button_mouse_follow:not(.visible){opacity:0}.nectar-video-box .play_button_mouse_follow:before{border-width:2px}.nectar-video-box .play_button_mouse_foll
2024-04-16 15:05:09 UTC	1369	IN	Data Raw: 6f 5f 6c 69 67 68 74 62 6f 78 7b 77 69 64 74 68 3a 36 30 70 78 3b 68 65 69 67 68 74 3a 36 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 33 30 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 33 30 70 78 7d 2e 6e 65 63 74 61 72 2d 76 69 64 65 6f 2d 62 6f 78 20 2e 70 6c 61 79 5f 62 75 74 74 6f 6e 5f 6d 6f 75 73 65 5f 66 6f 6c 6c 6f 77 2e 6e 65 63 74 61 72 5f 76 69 64 65 6f 5f 6c 69 67 68 74 62 6f 78 20 73 76 67 7b 77 69 64 74 68 3a 31 30 70 78 7d 7d 2e 6e 65 63 74 61 72 2d 76 69 64 65 6f 2d 62 6f 78 5b 64 61 74 61 2d 6d 6f 75 73 65 2d 73 74 79 6c 65 3d 73 6f 6c 69 64 5f 63 6f 6c 6f 72 5d 20 2e 70 6c 61 79 5f 62 75 74 74 6f 6e 5f 6d 6f 75 73 65 5f 66 6f 6c 6c 6f 77 3a 62 65 66 6f 72 65 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 Data Ascii: o_lightbox{width:60px;height:60px;margin-top:-30px;margin-left:-30px}.nectar-video-box .play_button_mouse_follow.nectar_video_lightbox svg{width:10px}}.nectar-video-box[data-mouse-style=solid_color] .play_button_mouse_follow:before{border:none}@-webkit-ke
2024-04-16 15:05:09 UTC	1369	IN	Data Raw: 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 25 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 63 6f 6e 74 65 6e 74 3a 27 27 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 34 35 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 31 35 2c 2e 32 2c 2e 31 2c 31 29 20 30 73 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 34 35 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 31 35 2c 2e 32 2c 2e 31 2c 31 29 20 30 73 7d 2e 6e 65 63 74 61 72 5f 76 69 64 65 6f 5f 6c 69 67 68 74 62 6f 78 2e 70 6c 61 79 5f 62 75 74 74 6f 6e 5f 77 69 74 68 5f 74 65 78 74 3a 6e 6f 74 28 5b 64 61 74 61 2d 73 74 79 6c 65 3d 73 6d 61 6c 6c 5d 29 20 2e 70 6c 61 79 3e 2e 69 6e 6e 65 72 2d 77 72 61 70 3a 62 65 66 6f 72 65 7b 62 61 63 6b 67 72 6f 75 Data Ascii: eight:100%;width:100%;display:block;content:'';transition:all .45s cubic-bezier(.15,.2,.1,1) 0s;-webkit-transition:all .45s cubic-bezier(.15,.2,.1,1) 0s}.nectar_video_lightbox.play_button_with_text:not([data-style=small]) .play>.inner-wrap:before{backgrou
2024-04-16 15:05:09 UTC	1369	IN	Data Raw: 62 65 7a 69 65 72 28 2e 32 35 2c 2e 39 2c 2e 32 2c 31 29 20 30 73 20 69 6e 66 69 6e 69 74 65 3b 61 6e 69 6d 61 74 69 6f 6e 3a 70 75 6c 73 65 2d 31 20 32 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 35 2c 2e 39 2c 2e 32 2c 31 29 20 30 73 20 69 6e 66 69 6e 69 74 65 7d 2e 73 70 61 6e 5f 31 32 2e 64 61 72 6b 20 2e 6e 65 63 74 61 72 5f 76 69 64 65 6f 5f 6c 69 67 68 74 62 6f 78 2e 70 6c 61 79 5f 62 75 74 74 6f 6e 5f 77 69 74 68 5f 74 65 78 74 20 2e 70 6c 61 79 3a 61 66 74 65 72 2c 2e 73 70 61 6e 5f 31 32 2e 64 61 72 6b 20 2e 6e 65 63 74 61 72 5f 76 69 64 65 6f 5f 6c 69 67 68 74 62 6f 78 2e 70 6c 61 79 5f 62 75 74 74 6f 6e 5f 77 69 74 68 5f 74 65 78 74 20 2e 70 6c 61 79 3a 62 65 66 6f 72 65 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 70 Data Ascii: bezier(.25,.9,.2,1) 0s infinite;animation:pulse-1 2.6s cubic-bezier(.25,.9,.2,1) 0s infinite}.span_12.dark .nectar_video_lightbox.play_button_with_text .play:after,.span_12.dark .nectar_video_lightbox.play_button_with_text .play:before{-webkit-animation:p
2024-04-16 15:05:09 UTC	1369	IN	Data Raw: 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 7a 2d 69 6e 64 65 78 3a 31 30 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 30 30 70 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 6e 65 63 74 61 72 5f 76 69 64 65 6f 5f 6c 69 67 68 74 62 6f 78 20 2e 70 6c 61 79 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 25 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 34 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 31 39 2c 31 2c 2e 32 32 2c 31 29 20 30 73 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 34 73 20 63 75 62 69 Data Ascii: t:0;width:100%;height:100%;z-index:10;border-radius:200px;box-sizing:border-box;-webkit-box-sizing:border-box}.nectar_video_lightbox .play{display:block;height:100%;width:100%;transition:all .4s cubic-bezier(.19,1,.22,1) 0s;-webkit-transition:all .4s cubi
2024-04-16 15:05:09 UTC	1369	IN	Data Raw: 75 74 74 6f 6e 5f 77 69 74 68 5f 74 65 78 74 5b 64 61 74 61 2d 73 74 79 6c 65 3d 62 6f 72 64 65 72 65 64 5f 74 6f 70 5d 5b 64 61 74 61 2d 66 6f 6e 74 2d 73 74 79 6c 65 3d 68 31 5d 20 2e 62 75 74 74 6f 6e 2d 62 67 2c 2e 6e 65 63 74 61 72 5f 76 69 64 65 6f 5f 6c 69 67 68 74 62 6f 78 2e 70 6c 61 79 5f 62 75 74 74 6f 6e 5f 77 69 74 68 5f 74 65 78 74 5b 64 61 74 61 2d 73 74 79 6c 65 3d 62 6f 72 64 65 72 65 64 5f 74 6f 70 5d 5b 64 61 74 61 2d 66 6f 6e 74 2d 73 74 79 6c 65 3d 68 31 5d 20 73 70 61 6e 2e 70 6c 61 79 2c 2e 6e 65 63 74 61 72 5f 76 69 64 65 6f 5f 6c 69 67 68 74 62 6f 78 2e 70 6c 61 79 5f 62 75 74 74 6f 6e 5f 77 69 74 68 5f 74 65 78 74 5b 64 61 74 61 2d 73 74 79 6c 65 3d 62 6f 72 64 65 72 65 64 5f 74 6f 70 5d 5b 64 61 74 61 2d 66 6f 6e 74 2d 73 74 79 Data Ascii: utton_with_text[data-style=bordered_top][data-font-style=h1] .button-bg,.nectar_video_lightbox.play_button_with_text[data-style=bordered_top][data-font-style=h1] span.play,.nectar_video_lightbox.play_button_with_text[data-style=bordered_top][data-font-sty
2024-04-16 15:05:09 UTC	1369	IN	Data Raw: 75 74 74 6f 6e 5f 77 69 74 68 5f 74 65 78 74 5b 64 61 74 61 2d 73 74 79 6c 65 3d 73 6d 61 6c 6c 5d 20 2e 62 75 74 74 6f 6e 2d 62 67 2d 77 72 61 70 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 30 70 78 7d 2e 6e 65 63 74 61 72 5f 76 69 64 65 6f 5f 6c 69 67 68 74 62 6f 78 2e 70 6c 61 79 5f 62 75 74 74 6f 6e 5f 77 69 74 68 5f 74 65 78 74 5b 64 61 74 61 2d 73 74 79 6c 65 3d 62 6f 72 64 65 72 65 64 5f 74 6f 70 5d 20 73 76 67 2c 2e 6e 65 63 74 61 72 5f 76 69 64 65 6f 5f 6c 69 67 68 74 62 6f 78 2e 70 6c 61 79 5f 62 75 74 74 6f 6e 5f 77 69 74 68 5f 74 65 78 74 5b 64 61 74 61 2d 73 74 79 6c 65 3d 73 6d 61 6c 6c 5d 20 73 76 67 7b 68 65 69 67 68 74 3a 31 30 70 78 3b 77 69 64 74 68 3a 31 30 70 78 7d 2e 6e 65 63 74 61 72 5f 76 69 64 65 6f 5f 6c 69 67 68 74 62 6f 78 2e 70 Data Ascii: utton_with_text[data-style=small] .button-bg-wrap{margin-top:-20px}.nectar_video_lightbox.play_button_with_text[data-style=bordered_top] svg,.nectar_video_lightbox.play_button_with_text[data-style=small] svg{height:10px;width:10px}.nectar_video_lightbox.p
2024-04-16 15:05:09 UTC	1369	IN	Data Raw: 6e 65 63 74 61 72 5f 76 69 64 65 6f 5f 6c 69 67 68 74 62 6f 78 2e 70 6c 61 79 5f 62 75 74 74 6f 6e 5f 77 69 74 68 5f 74 65 78 74 5b 64 61 74 61 2d 73 74 79 6c 65 3d 73 6d 61 6c 6c 5d 20 70 61 74 68 7b 66 69 6c 6c 3a 23 30 30 30 7d 2e 6c 69 67 68 74 20 2e 6e 65 63 74 61 72 5f 76 69 64 65 6f 5f 6c 69 67 68 74 62 6f 78 2e 70 6c 61 79 5f 62 75 74 74 6f 6e 5f 77 69 74 68 5f 74 65 78 74 5b 64 61 74 61 2d 73 74 79 6c 65 3d 62 6f 72 64 65 72 65 64 5f 74 6f 70 5d 20 2e 70 6c 61 79 3e 2e 69 6e 6e 65 72 2d 77 72 61 70 3a 62 65 66 6f 72 65 2c 2e 6c 69 67 68 74 20 2e 6e 65 63 74 61 72 5f 76 69 64 65 6f 5f 6c 69 67 68 74 62 6f 78 2e 70 6c 61 79 5f 62 75 74 74 6f 6e 5f 77 69 74 68 5f 74 65 78 74 5b 64 61 74 61 2d 73 74 79 6c 65 3d 73 6d 61 6c 6c 5d 20 2e 70 6c 61 79 3e Data Ascii: nectar_video_lightbox.play_button_with_text[data-style=small] path{fill:#000}.light .nectar_video_lightbox.play_button_with_text[data-style=bordered_top] .play>.inner-wrap:before,.light .nectar_video_lightbox.play_button_with_text[data-style=small] .play>
2024-04-16 15:05:09 UTC	1369	IN	Data Raw: 6c 61 7a 79 7b 6f 70 61 63 69 74 79 3a 30 7d 2e 6e 65 63 74 61 72 2d 76 69 64 65 6f 2d 62 6f 78 20 69 6d 67 2e 6e 65 63 74 61 72 2d 6c 61 7a 79 2e 6c 6f 61 64 65 64 7b 6f 70 61 63 69 74 79 3a 31 7d 2e 6e 65 63 74 61 72 2d 76 69 64 65 6f 2d 62 6f 78 5b 64 61 74 61 2d 68 6f 76 65 72 3d 7a 6f 6f 6d 5f 62 75 74 74 6f 6e 5d 20 69 6d 67 2c 2e 6e 65 63 74 61 72 2d 76 69 64 65 6f 2d 62 6f 78 5b 64 61 74 61 2d 68 6f 76 65 72 3d 7a 6f 6f 6d 5f 62 75 74 74 6f 6e 5d 3a 68 6f 76 65 72 20 69 6d 67 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 3b 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 23 61 6a 61 78 2d 63 6f 6e 74 65 6e 74 Data Ascii: lazy{opacity:0}.nectar-video-box img.nectar-lazy.loaded{opacity:1}.nectar-video-box[data-hover=zoom_button] img,.nectar-video-box[data-hover=zoom_button]:hover img{transition:none;-webkit-transition:none;-webkit-transform:none;transform:none}#ajax-content
2024-04-16 15:05:09 UTC	1112	IN	Data Raw: 64 65 6f 2d 62 6f 78 5b 64 61 74 61 2d 68 6f 76 65 72 3d 7a 6f 6f 6d 5f 62 75 74 74 6f 6e 5d 20 2e 6e 65 63 74 61 72 5f 76 69 64 65 6f 5f 6c 69 67 68 74 62 6f 78 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6e 65 63 74 61 72 2d 76 69 64 65 6f 2d 62 6f 78 20 2e 69 6e 6e 65 72 2d 77 72 61 70 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 6e 65 63 74 61 72 2d 76 69 64 65 6f 2d 62 6f 78 20 2e 70 6c 61 79 20 2e 69 6e 6e 65 72 2d 77 72 61 70 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 7d 2e 6e 65 63 74 61 72 2d 76 69 64 65 6f 2d 62 6f 78 5b 64 61 74 61 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 2a 3d 70 78 5d 3e Data Ascii: deo-box[data-hover=zoom_button] .nectar_video_lightbox{background-color:transparent!important}.nectar-video-box .inner-wrap{overflow:hidden}.nectar-video-box .play .inner-wrap{display:block;width:100%;height:100%}.nectar-video-box[data-border-radius*=px]>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.11	49731	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:08 UTC	603	OUT	GET /wp-content/themes/salient/css/build/third-party/cf7.css?ver=16.1.3 HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:10 UTC	585	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:10 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: public, max-age=2592000 expires: Thu, 16 May 2024 15:05:10 GMT last-modified: Sat, 18 Nov 2023 11:56:28 GMT etag: W/"b5b-6558a66c-460757eb1536189b;gz" platform: hostinger content-security-policy: upgrade-insecure-requests x-turbo-charged-by: LiteSpeed alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 80307829d1945c75916a43d8631561b4-asc-edge4 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 2.094
2024-04-16 15:05:10 UTC	784	IN	Data Raw: 62 35 62 0d 0a 2e 77 70 63 66 37 2d 66 6f 72 6d 20 70 20 73 70 61 6e 7b 63 6f 6c 6f 72 3a 23 30 30 30 7d 2e 6c 69 67 68 74 20 2e 77 70 63 66 37 20 64 69 76 2e 77 70 63 66 37 2d 72 65 73 70 6f 6e 73 65 2d 6f 75 74 70 75 74 2c 64 69 76 2e 77 70 63 66 37 2d 76 61 6c 69 64 61 74 69 6f 6e 2d 65 72 72 6f 72 73 7b 63 6f 6c 6f 72 3a 23 36 36 36 21 69 6d 70 6f 72 74 61 6e 74 7d 64 69 76 2e 77 70 63 66 37 20 69 6d 67 2e 61 6a 61 78 2d 6c 6f 61 64 65 72 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 30 70 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 2e 77 70 63 66 37 2d 6e 6f 74 2d 76 61 6c 69 64 2d 74 69 70 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 20 72 65 70 65 61 74 20 73 63 72 6f 6c 6c 20 30 20 30 20 23 66 66 66 7d 2e 6d 69 6e 69 6d 61 6c Data Ascii: b5b.wpcf7-form p span{color:#000}.light .wpcf7 div.wpcf7-response-output,div.wpcf7-validation-errors{color:#666!important}div.wpcf7 img.ajax-loader{margin-top:10px;display:inline-block}.wpcf7-not-valid-tip{background:none repeat scroll 0 0 #fff}.minimal
2024-04-16 15:05:10 UTC	1369	IN	Data Raw: 5b 74 79 70 65 3d 75 72 6c 5d 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 70 78 7d 2e 77 70 63 66 37 2d 66 6f 72 6d 20 2e 6e 65 63 74 61 72 2d 77 70 63 66 37 2d 69 6e 6c 69 6e 65 2d 66 6f 72 6d 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 70 61 64 64 69 6e 67 3a 32 37 70 78 20 30 7d 2e 6d 61 74 65 72 69 61 6c 20 2e 77 70 63 66 37 2d 66 6f 72 6d 20 2e 6e 65 63 74 61 72 2d 77 70 63 66 37 2d 69 6e 6c 69 6e 65 2d 66 6f 72 6d 7b 70 61 64 64 69 6e 67 3a 31 2e 35 65 6d 20 30 7d 2e 77 70 63 66 37 2d 66 6f 72 6d 20 2e 6e 65 63 74 61 72 2d 77 70 63 66 37 2d 69 6e 6c 69 6e 65 2d 66 6f 72 6d 3e 64 69 76 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 2e 77 70 63 66 37 2d Data Ascii: [type=url]{border-radius:50px}.wpcf7-form .nectar-wpcf7-inline-form{display:flex;flex-direction:row;padding:27px 0}.material .wpcf7-form .nectar-wpcf7-inline-form{padding:1.5em 0}.wpcf7-form .nectar-wpcf7-inline-form>div:last-child{padding-right:0}.wpcf7-
2024-04-16 15:05:10 UTC	766	IN	Data Raw: 77 70 63 66 37 2d 73 75 62 6d 69 74 7b 6d 69 6e 2d 77 69 64 74 68 3a 32 35 25 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 30 3b 74 6f 70 3a 30 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 63 6c 69 70 2d 70 61 74 68 3a 69 6e 73 65 74 28 36 70 78 20 72 6f 75 6e 64 20 76 61 72 28 2d 2d 6e 65 63 74 61 72 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 29 29 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 39 39 39 70 78 29 7b 2e 6e 65 63 74 61 72 2d 77 70 63 66 37 2d 69 6e 6c 69 6e 65 2d 73 75 62 73 63 72 69 62 65 2d 66 6f 72 6d 20 2e 77 70 63 66 37 2d 73 75 62 6d 69 74 7b 6d 69 6e 2d 77 69 64 74 68 3a 33 35 25 Data Ascii: wpcf7-submit{min-width:25%;position:absolute;right:0;top:0;height:100%;transform:none!important;clip-path:inset(6px round var(--nectar-border-radius))}@media only screen and (max-width:999px){.nectar-wpcf7-inline-subscribe-form .wpcf7-submit{min-width:35%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.11	49732	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:08 UTC	598	OUT	GET /wp-content/themes/salient/css/build/responsive.css?ver=16.1.3 HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:10 UTC	586	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:09 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: public, max-age=2592000 expires: Thu, 16 May 2024 15:05:09 GMT last-modified: Mon, 18 Dec 2023 06:22:36 GMT etag: W/"99a7-657fe52c-d2c185c4a2f47af4;gz" platform: hostinger content-security-policy: upgrade-insecure-requests x-turbo-charged-by: LiteSpeed alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 4ebb4074102d632c6227fe3e0a850455-asc-edge4 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 1.081
2024-04-16 15:05:10 UTC	783	IN	Data Raw: 39 39 61 37 0d 0a 3a 72 6f 6f 74 7b 2d 2d 6d 6f 62 69 6c 65 2d 63 6f 6e 74 61 69 6e 65 72 2d 77 69 64 74 68 3a 38 38 25 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 33 30 30 70 78 29 7b 2e 63 6f 6e 74 61 69 6e 65 72 2c 2e 70 6f 73 74 2d 61 72 65 61 2e 73 74 61 6e 64 61 72 64 2d 6d 69 6e 69 6d 61 6c 2e 66 75 6c 6c 2d 77 69 64 74 68 2d 63 6f 6e 74 65 6e 74 20 2e 70 6f 73 74 20 2e 69 6e 6e 65 72 2d 77 72 61 70 7b 6d 61 78 2d 77 69 64 74 68 3a 31 31 30 30 70 78 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 30 30 30 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 31 33 30 30 70 78 29 7b 23 61 75 74 68 6f 72 2d 62 69 6f 20 23 Data Ascii: 99a7:root{--mobile-container-width:88%}@media only screen and (min-width:1300px){.container,.post-area.standard-minimal.full-width-content .post .inner-wrap{max-width:1100px}}@media only screen and (min-width:1000px) and (max-width:1300px){#author-bio #
2024-04-16 15:05:10 UTC	1369	IN	Data Raw: 63 6f 6c 20 2e 77 6f 72 6b 2d 69 74 65 6d 2e 73 74 79 6c 65 2d 32 20 69 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 33 32 70 78 3b 68 65 69 67 68 74 3a 33 32 70 78 3b 77 69 64 74 68 3a 33 32 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 7d 23 74 6f 70 20 6e 61 76 3e 75 6c 3e 6c 69 3e 61 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 38 70 78 7d 2e 73 66 2d 73 75 62 2d 69 6e 64 69 63 61 74 6f 72 7b 6c 65 66 74 3a 36 70 78 7d 2e 6e 65 63 74 61 72 2d 73 6c 69 64 65 72 2d 77 72 61 70 5b 64 61 74 61 2d 66 75 6c 6c 2d 77 69 64 74 68 3d 66 61 6c 73 65 5d 20 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 20 2e 63 6f 6e 74 65 6e 74 20 70 2e 74 72 61 6e 73 70 61 72 65 6e 74 2d 62 67 20 73 70 61 6e 2c 62 6f 64 79 20 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 20 2e 63 6f 6e 74 65 6e Data Ascii: col .work-item.style-2 i{line-height:32px;height:32px;width:32px;font-size:14px}#top nav>ul>li>a{padding-left:8px}.sf-sub-indicator{left:6px}.nectar-slider-wrap[data-full-width=false] .swiper-slide .content p.transparent-bg span,body .swiper-slide .conten
2024-04-16 15:05:10 UTC	1369	IN	Data Raw: 6f 75 72 74 68 73 2e 73 70 61 6e 5f 33 2e 72 69 67 68 74 2d 65 64 67 65 2c 2e 6f 6e 65 2d 66 6f 75 72 74 68 73 2e 73 70 61 6e 5f 33 2e 72 69 67 68 74 2d 65 64 67 65 2c 2e 6f 6e 65 2d 66 6f 75 72 74 68 73 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 33 2e 72 69 67 68 74 2d 65 64 67 65 3a 6e 6f 74 28 5b 63 6c 61 73 73 2a 3d 76 63 5f 63 6f 6c 2d 78 73 2d 5d 29 2c 2e 6f 6e 65 2d 66 6f 75 72 74 68 73 2e 76 63 5f 73 70 61 6e 33 2e 72 69 67 68 74 2d 65 64 67 65 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 70 6f 72 74 66 6f 6c 69 6f 2d 69 74 65 6d 73 20 2e 63 6f 6c 7b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 38 70 78 7d 2e 70 6f 72 74 66 6f 6c 69 6f 2d 69 74 65 6d 73 3a 6e 6f 74 28 2e 63 61 72 Data Ascii: ourths.span_3.right-edge,.one-fourths.span_3.right-edge,.one-fourths.vc_col-sm-3.right-edge:not([class*=vc_col-xs-]),.one-fourths.vc_span3.right-edge{margin-right:0}.portfolio-items .col{width:100%;margin-left:0;margin-bottom:8px}.portfolio-items:not(.car
2024-04-16 15:05:10 UTC	1369	IN	Data Raw: 61 6a 61 78 2d 63 6f 6e 74 65 6e 74 2d 77 72 61 70 20 2e 70 6f 72 74 66 6f 6c 69 6f 2d 66 69 6c 74 65 72 73 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 35 70 78 3b 66 6c 6f 61 74 3a 6e 6f 6e 65 3b 63 6c 65 61 72 3a 62 6f 74 68 3b 68 65 69 67 68 74 3a 61 75 74 6f 7d 23 70 61 67 65 2d 68 65 61 64 65 72 2d 62 67 5b 64 61 74 61 2d 70 61 72 61 6c 6c 61 78 3d 22 31 22 5d 20 2e 70 72 6f 6a 65 63 74 2d 74 69 74 6c 65 20 2e 73 70 61 6e 5f 36 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 37 30 70 78 7d 2e 70 61 67 65 2d 68 65 61 64 65 72 2d 6e 6f 2d 62 67 20 2e 70 6f 72 74 66 6f 6c 69 6f 2d 66 69 6c 74 65 72 73 20 75 6c 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 31 30 30 25 7d 68 74 6d 6c 2e 6a 73 20 23 70 61 67 65 2d 68 65 61 64 65 72 2d Data Ascii: ajax-content-wrap .portfolio-filters{margin-top:15px;float:none;clear:both;height:auto}#page-header-bg[data-parallax="1"] .project-title .span_6{padding-right:70px}.page-header-no-bg .portfolio-filters ul{position:absolute;width:100%}html.js #page-header-
2024-04-16 15:05:10 UTC	1369	IN	Data Raw: 7d 2e 76 63 5f 72 6f 77 2d 66 6c 75 69 64 20 5b 63 6c 61 73 73 2a 3d 76 63 5f 73 70 61 6e 5d 7b 77 69 64 74 68 3a 31 30 30 25 21 69 6d 70 6f 72 74 61 6e 74 7d 62 6f 64 79 20 23 68 65 61 64 65 72 2d 6f 75 74 65 72 5b 64 61 74 61 2d 66 75 6c 6c 2d 77 69 64 74 68 3d 74 72 75 65 5d 20 68 65 61 64 65 72 3e 2e 63 6f 6e 74 61 69 6e 65 72 2c 62 6f 64 79 20 23 68 65 61 64 65 72 2d 73 65 63 6f 6e 64 61 72 79 2d 6f 75 74 65 72 5b 64 61 74 61 2d 66 75 6c 6c 2d 77 69 64 74 68 3d 74 72 75 65 5d 3e 2e 63 6f 6e 74 61 69 6e 65 72 2c 62 6f 64 79 5b 64 61 74 61 2d 73 6c 69 64 65 2d 6f 75 74 2d 77 69 64 67 65 74 2d 61 72 65 61 2d 73 74 79 6c 65 3d 73 69 6d 70 6c 65 5d 20 23 68 65 61 64 65 72 2d 6f 75 74 65 72 5b 64 61 74 61 2d 66 75 6c 6c 2d 77 69 64 74 68 3d 74 72 75 65 5d Data Ascii: }.vc_row-fluid [class*=vc_span]{width:100%!important}body #header-outer[data-full-width=true] header>.container,body #header-secondary-outer[data-full-width=true]>.container,body[data-slide-out-widget-area-style=simple] #header-outer[data-full-width=true]
2024-04-16 15:05:10 UTC	1369	IN	Data Raw: 64 74 68 3a 34 30 70 78 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 35 70 78 7d 62 6f 64 79 3a 6e 6f 74 28 2e 6f 72 69 67 69 6e 61 6c 29 20 2e 62 79 70 6f 73 74 61 75 74 68 6f 72 3e 2e 63 6f 6d 6d 65 6e 74 2d 62 6f 64 79 3e 2e 63 6f 6d 6d 65 6e 74 2d 61 75 74 68 6f 72 3e 69 6d 67 2e 61 76 61 74 61 72 7b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 32 70 78 7d 62 6f 64 79 3a 6e 6f 74 28 2e 6d 61 74 65 72 69 61 6c 29 20 2e 63 6f 6d 6d 65 6e 74 2d 6c 69 73 74 20 2e 63 68 69 6c 64 72 65 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6e 6f 6e 65 7d 62 6f 64 79 2e 61 73 63 65 6e 64 20 23 61 6a 61 78 2d 63 6f 6e 74 65 6e 74 2d 77 72 61 70 20 2e 63 6f 6d 6d 65 6e 74 2d 6c 69 73 74 20 2e 63 68 69 6c 64 72 65 6e 7b 6d 61 Data Ascii: dth:40px;top:0;left:0;margin-bottom:5px}body:not(.original) .bypostauthor>.comment-body>.comment-author>img.avatar{border-width:2px}body:not(.material) .comment-list .children{background-image:none}body.ascend #ajax-content-wrap .comment-list .children{ma
2024-04-16 15:05:10 UTC	1369	IN	Data Raw: 63 74 61 72 2d 62 75 74 74 6f 6e 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 70 6f 73 74 2d 61 72 65 61 20 23 70 61 67 69 6e 61 74 69 6f 6e 2c 2e 70 6f 73 74 2d 61 72 65 61 2e 6d 61 73 6f 6e 72 79 20 23 70 61 67 69 6e 61 74 69 6f 6e 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 7d 62 6f 64 79 20 2e 70 6f 72 74 66 6f 6c 69 6f 2d 69 74 65 6d 73 5b 64 61 74 61 2d 70 73 3d 22 36 22 5d 20 2e 77 6f 72 6b 2d 69 74 65 6d 20 2e 70 61 72 61 6c 6c 61 78 49 6d 67 2d 6c 61 79 65 72 73 3e 64 69 76 20 2e 62 67 2d 69 6d 67 3a 61 66 74 65 72 7b 6f 70 61 63 69 74 79 3a 31 7d 62 6f 64 79 20 2e 70 6f 72 74 66 6f 6c 69 6f 2d 69 74 65 6d 73 5b 64 61 74 61 2d 70 73 3d 22 36 22 5d 20 2e 77 69 64 65 5f 74 61 6c 6c 20 2e 77 6f 72 6b 2d 69 74 65 6d 20 2e 77 6f 72 6b 2d 6d 65 74 Data Ascii: ctar-button{display:block}.post-area #pagination,.post-area.masonry #pagination{padding-left:0}body .portfolio-items[data-ps="6"] .work-item .parallaxImg-layers>div .bg-img:after{opacity:1}body .portfolio-items[data-ps="6"] .wide_tall .work-item .work-met
2024-04-16 15:05:10 UTC	1369	IN	Data Raw: 73 65 63 74 69 6f 6e 2d 74 69 74 6c 65 20 68 31 2c 62 6f 64 79 2e 73 65 61 72 63 68 20 23 70 61 67 65 2d 68 65 61 64 65 72 2d 62 67 20 68 31 2c 62 6f 64 79 2e 73 69 6e 67 6c 65 2e 73 69 6e 67 6c 65 2d 70 6f 73 74 20 2e 72 6f 77 20 2e 63 6f 6c 2e 73 65 63 74 69 6f 6e 2d 74 69 74 6c 65 2e 73 70 61 6e 5f 31 32 20 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 33 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 34 70 78 7d 23 70 61 67 65 2d 68 65 61 64 65 72 2d 62 67 20 2e 73 70 61 6e 5f 36 7b 74 6f 70 3a 61 75 74 6f 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6c 6f 61 74 3a 6e 6f 6e 65 7d 23 70 61 67 65 2d 68 65 61 64 65 72 2d 62 67 20 2e 61 75 74 68 6f 72 2d 73 65 63 74 69 6f 6e 20 2e 6d 65 74 61 2d 61 75 74 68 6f 72 Data Ascii: section-title h1,body.search #page-header-bg h1,body.single.single-post .row .col.section-title.span_12 h1{font-size:24px;line-height:30px;margin-bottom:4px}#page-header-bg .span_6{top:auto!important;float:none}#page-header-bg .author-section .meta-author
2024-04-16 15:05:10 UTC	1369	IN	Data Raw: 65 6e 74 20 2e 63 6f 6c 2e 73 70 61 6e 5f 32 20 2e 63 6f 6c 2e 73 70 61 6e 5f 32 20 69 6d 67 2c 2e 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 20 2e 63 6f 6c 2e 73 70 61 6e 5f 33 20 2e 63 6f 6c 2e 73 70 61 6e 5f 32 20 69 6d 67 2c 2e 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 20 2e 63 6f 6c 2e 73 70 61 6e 5f 34 20 2e 63 6f 6c 2e 73 70 61 6e 5f 32 20 69 6d 67 2c 2e 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 20 2e 63 6f 6c 2e 73 70 61 6e 5f 36 20 2e 63 6f 6c 2e 73 70 61 6e 5f 32 20 69 6d 67 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 33 70 78 3b 74 6f 70 3a 2d 33 70 78 7d 2e 6e 65 63 74 61 72 2d 73 6c 69 64 65 72 2d 77 72 61 70 5b 64 61 74 61 2d 66 75 6c 6c 2d 77 69 64 74 68 3d 66 61 6c 73 65 5d 20 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 20 2e 63 6f 6e 74 65 6e 74 20 70 2e 74 Data Ascii: ent .col.span_2 .col.span_2 img,.main-content .col.span_3 .col.span_2 img,.main-content .col.span_4 .col.span_2 img,.main-content .col.span_6 .col.span_2 img{padding-right:13px;top:-3px}.nectar-slider-wrap[data-full-width=false] .swiper-slide .content p.t
2024-04-16 15:05:10 UTC	1369	IN	Data Raw: 73 69 6f 6e 2c 62 6f 64 79 20 23 68 65 61 64 65 72 2d 6f 75 74 65 72 2e 74 72 61 6e 73 70 61 72 65 6e 74 20 23 74 6f 70 20 2e 73 70 61 6e 5f 33 20 23 6c 6f 67 6f 5b 64 61 74 61 2d 73 75 70 70 6c 69 65 64 2d 6d 6c 2d 73 74 61 72 74 69 6e 67 3d 74 72 75 65 5d 20 69 6d 67 2e 73 74 61 72 74 69 6e 67 2d 6c 6f 67 6f 3a 6e 6f 74 28 2e 64 61 72 6b 2d 76 65 72 73 69 6f 6e 29 3a 6e 6f 74 28 2e 6d 6f 62 69 6c 65 2d 6f 6e 6c 79 2d 6c 6f 67 6f 29 2c 62 6f 64 79 20 23 68 65 61 64 65 72 2d 6f 75 74 65 72 3a 6e 6f 74 28 2e 74 72 61 6e 73 70 61 72 65 6e 74 29 20 23 74 6f 70 20 2e 73 70 61 6e 5f 33 20 23 6c 6f 67 6f 5b 64 61 74 61 2d 73 75 70 70 6c 69 65 64 2d 6d 6c 3d 74 72 75 65 5d 20 69 6d 67 3a 6e 6f 74 28 2e 6d 6f 62 69 6c 65 2d 6f 6e 6c 79 2d 6c 6f 67 6f 29 7b 64 69 Data Ascii: sion,body #header-outer.transparent #top .span_3 #logo[data-supplied-ml-starting=true] img.starting-logo:not(.dark-version):not(.mobile-only-logo),body #header-outer:not(.transparent) #top .span_3 #logo[data-supplied-ml=true] img:not(.mobile-only-logo){di

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.11	49733	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:10 UTC	594	OUT	GET /wp-content/themes/salient/css/build/ascend.css?ver=16.1.3 HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:11 UTC	586	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:11 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: public, max-age=2592000 expires: Thu, 16 May 2024 15:05:11 GMT last-modified: Sat, 18 Nov 2023 11:56:28 GMT etag: W/"cb54-6558a66c-1241e8a3f6a5b229;gz" platform: hostinger content-security-policy: upgrade-insecure-requests x-turbo-charged-by: LiteSpeed alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 85a41b9c16400db7e10cb45f33494017-asc-edge4 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 1.021
2024-04-16 15:05:11 UTC	783	IN	Data Raw: 63 62 35 34 0d 0a 62 6f 64 79 2e 61 73 63 65 6e 64 20 23 68 65 61 64 65 72 2d 6f 75 74 65 72 5b 64 61 74 61 2d 66 75 6c 6c 2d 77 69 64 74 68 3d 66 61 6c 73 65 5d 20 23 74 6f 70 20 6e 61 76 3e 2e 62 75 74 74 6f 6e 73 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 35 70 78 7d 62 6f 64 79 2e 61 73 63 65 6e 64 20 2e 73 6c 69 64 65 2d 6f 75 74 2d 68 6f 76 65 72 2d 69 63 6f 6e 2d 65 66 66 65 63 74 2e 73 6d 61 6c 6c 20 2e 6c 69 6e 65 73 2d 62 75 74 74 6f 6e 7b 74 6f 70 3a 31 30 70 78 7d 62 6f 64 79 2e 61 73 63 65 6e 64 3a 6e 6f 74 28 2e 6d 6f 62 69 6c 65 29 20 2e 73 6c 69 64 65 2d 6f 75 74 2d 68 6f 76 65 72 2d 69 63 6f 6e 2d 65 66 66 65 63 74 3a 6e 6f 74 28 2e 73 6d 61 6c 6c 29 20 2e 6c 69 6e 65 73 2d 62 75 74 74 6f 6e 7b 74 6f 70 3a 2d 31 70 78 7d 62 6f 64 79 2e 61 Data Ascii: cb54body.ascend #header-outer[data-full-width=false] #top nav>.buttons{margin-left:15px}body.ascend .slide-out-hover-icon-effect.small .lines-button{top:10px}body.ascend:not(.mobile) .slide-out-hover-icon-effect:not(.small) .lines-button{top:-1px}body.a
2024-04-16 15:05:11 UTC	1369	IN	Data Raw: 6f 67 67 6c 65 3e 64 69 76 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 39 70 78 7d 23 70 61 67 65 2d 68 65 61 64 65 72 2d 77 72 61 70 2c 2e 61 73 63 65 6e 64 20 2e 63 6f 6e 74 61 69 6e 65 72 2d 77 72 61 70 2c 2e 61 73 63 65 6e 64 20 2e 70 72 6f 6a 65 63 74 2d 74 69 74 6c 65 2c 2e 61 73 63 65 6e 64 20 2e 76 63 5f 74 65 78 74 5f 73 65 70 61 72 61 74 6f 72 20 64 69 76 2c 2e 63 61 72 6f 75 73 65 6c 2d 77 72 61 70 20 2e 6c 65 66 74 2d 62 6f 72 64 65 72 2c 2e 63 61 72 6f 75 73 65 6c 2d 77 72 61 70 20 2e 72 69 67 68 74 2d 62 6f 72 64 65 72 2c 2e 63 61 72 6f 75 73 65 6c 2d 77 72 61 70 5b 64 61 74 61 2d 66 75 6c 6c 2d 77 69 64 74 68 3d 74 72 75 65 5d 20 2e 63 61 72 6f 75 73 65 6c 2d 68 65 61 64 69 6e 67 2c 2e 70 61 67 65 2d 68 65 61 64 65 72 2d 6e 6f 2d 62 67 2c Data Ascii: oggle>div{padding-left:19px}#page-header-wrap,.ascend .container-wrap,.ascend .project-title,.ascend .vc_text_separator div,.carousel-wrap .left-border,.carousel-wrap .right-border,.carousel-wrap[data-full-width=true] .carousel-heading,.page-header-no-bg,
2024-04-16 15:05:11 UTC	1369	IN	Data Raw: 63 65 6e 64 20 23 73 69 64 65 62 61 72 20 2e 77 69 64 67 65 74 2e 77 69 64 67 65 74 5f 63 61 74 65 67 6f 72 69 65 73 20 6c 69 20 61 2c 2e 61 73 63 65 6e 64 20 23 73 69 64 65 62 61 72 20 2e 77 69 64 67 65 74 2e 77 69 64 67 65 74 5f 6e 61 76 5f 6d 65 6e 75 20 6c 69 20 61 2c 2e 61 73 63 65 6e 64 20 23 73 69 64 65 62 61 72 20 2e 77 69 64 67 65 74 2e 77 69 64 67 65 74 5f 70 61 67 65 73 20 6c 69 20 61 7b 70 61 64 64 69 6e 67 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 73 63 65 6e 64 20 23 66 6f 6f 74 65 72 2d 6f 75 74 65 72 20 23 66 6f 6f 74 65 72 2d 77 69 64 67 65 74 73 20 2e 63 6f 6c 20 75 6c 20 6c 69 20 61 2c 2e 61 73 63 65 6e 64 20 23 73 69 64 65 62 61 72 20 64 69 76 20 75 6c 20 6c 69 20 61 Data Ascii: cend #sidebar .widget.widget_categories li a,.ascend #sidebar .widget.widget_nav_menu li a,.ascend #sidebar .widget.widget_pages li a{padding:0!important;border:none!important}.ascend #footer-outer #footer-widgets .col ul li a,.ascend #sidebar div ul li a
2024-04-16 15:05:11 UTC	1369	IN	Data Raw: 3b 68 65 69 67 68 74 3a 32 33 70 78 3b 77 69 64 74 68 3a 31 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 32 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 74 6f 70 3a 31 70 78 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 32 35 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 31 32 2c 2e 37 35 2c 2e 34 2c 31 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 32 35 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 31 32 2c 2e 37 35 2c 2e 34 2c 31 29 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 7d 2e 63 61 72 6f 75 73 65 6c 2d 77 72 61 70 20 2e 63 6f 6e 74 72 6f 6c 2d 77 72 61 70 20 2e 69 74 65 6d 2d 63 6f 75 6e 74 7b 68 65 69 67 68 74 3a 32 33 70 Data Ascii: ;height:23px;width:10px;line-height:22px;font-size:14px;cursor:pointer;top:1px;transition:all .25s cubic-bezier(.12,.75,.4,1);-webkit-transition:all .25s cubic-bezier(.12,.75,.4,1);box-sizing:content-box}.carousel-wrap .control-wrap .item-count{height:23p
2024-04-16 15:05:11 UTC	1369	IN	Data Raw: 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 7d 2e 61 73 63 65 6e 64 20 5b 64 61 74 61 2d 66 75 6c 6c 2d 77 69 64 74 68 3d 66 61 6c 73 65 5d 20 2e 63 61 72 6f 75 73 65 6c 2d 70 72 65 76 3a 68 6f 76 65 72 20 69 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 31 38 70 78 29 7d 2e 61 73 63 65 6e 64 20 5b 64 61 74 61 2d 66 75 6c 6c 2d 77 69 64 74 68 3d 66 61 6c 73 65 5d 20 2e 63 61 72 6f 75 73 65 6c 2d 70 72 65 76 2e 6e 65 78 74 2d 68 6f 76 65 72 65 64 2c 2e 61 73 63 65 6e 64 20 5b 64 61 74 61 2d 66 75 6c 6c 2d 77 69 64 74 68 3d 66 61 6c 73 65 5d 20 2e 69 74 65 6d 2d 63 6f 75 6e 74 2e 6e 65 78 74 2d 68 6f 76 65 72 65 64 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 31 38 Data Ascii: city:1;transform:translateX(0)}.ascend [data-full-width=false] .carousel-prev:hover i{transform:translateX(-18px)}.ascend [data-full-width=false] .carousel-prev.next-hovered,.ascend [data-full-width=false] .item-count.next-hovered{transform:translateX(-18
2024-04-16 15:05:11 UTC	1369	IN	Data Raw: 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 30 36 22 7d 62 6f 64 79 5b 64 61 74 61 2d 68 65 61 64 65 72 2d 73 65 61 72 63 68 3d 66 61 6c 73 65 5d 2e 61 73 63 65 6e 64 20 23 68 65 61 64 65 72 2d 6f 75 74 65 72 5b 64 61 74 61 2d 68 61 73 2d 6d 65 6e 75 3d 66 61 6c 73 65 5d 5b 64 61 74 61 2d 63 61 72 74 3d 66 61 6c 73 65 5d 5b 64 61 74 61 2d 66 75 6c 6c 2d 77 69 64 74 68 3d 74 72 75 65 5d 20 2e 73 6c 69 64 65 2d 6f 75 74 2d 77 69 64 67 65 74 2d 61 72 65 61 2d 74 6f 67 67 6c 65 3a 6e 6f 74 28 2e 6d 6f 62 69 6c 65 2d 69 63 6f 6e 29 20 61 3a 6e 6f 74 28 2e 75 73 69 6e 67 2d 6c 61 62 65 6c 29 20 2e 6c 69 6e 65 73 2d 62 75 74 74 6f 6e 7b 74 6f 70 3a 2d 31 70 78 7d 2e 61 73 63 65 6e 64 20 23 68 65 61 64 65 72 2d 6f 75 74 65 72 20 61 2e 63 61 72 Data Ascii: t:before{content:"\e606"}body[data-header-search=false].ascend #header-outer[data-has-menu=false][data-cart=false][data-full-width=true] .slide-out-widget-area-toggle:not(.mobile-icon) a:not(.using-label) .lines-button{top:-1px}.ascend #header-outer a.car
2024-04-16 15:05:11 UTC	1369	IN	Data Raw: 64 61 74 61 2d 63 61 72 74 3d 74 72 75 65 5d 20 23 74 6f 70 20 6e 61 76 20 75 6c 20 2e 73 6c 69 64 65 2d 6f 75 74 2d 77 69 64 67 65 74 2d 61 72 65 61 2d 74 6f 67 67 6c 65 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 61 73 63 65 6e 64 5b 64 61 74 61 2d 68 65 61 64 65 72 2d 73 65 61 72 63 68 3d 66 61 6c 73 65 5d 20 23 68 65 61 64 65 72 2d 6f 75 74 65 72 5b 64 61 74 61 2d 66 75 6c 6c 2d 77 69 64 74 68 3d 74 72 75 65 5d 5b 64 61 74 61 2d 63 61 72 74 3d 66 61 6c 73 65 5d 5b 64 61 74 61 2d 66 6f 72 6d 61 74 3d 63 65 6e 74 65 72 65 64 2d 6d 65 6e 75 5d 20 23 74 6f 70 20 6e 61 76 20 75 6c 20 23 73 6f 63 69 61 6c 2d 69 6e 2d 6d 65 6e 75 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 33 70 78 7d 2e 61 73 63 65 6e 64 20 23 68 65 61 64 65 72 2d 6f 75 74 Data Ascii: data-cart=true] #top nav ul .slide-out-widget-area-toggle{position:relative}.ascend[data-header-search=false] #header-outer[data-full-width=true][data-cart=false][data-format=centered-menu] #top nav ul #social-in-menu{margin-right:13px}.ascend #header-out
2024-04-16 15:05:11 UTC	1369	IN	Data Raw: 66 61 6c 73 65 5d 20 23 74 6f 70 20 6e 61 76 20 75 6c 20 2e 73 6c 69 64 65 2d 6f 75 74 2d 77 69 64 67 65 74 2d 61 72 65 61 2d 74 6f 67 67 6c 65 20 61 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 7d 2e 61 73 63 65 6e 64 3a 6e 6f 74 28 5b 64 61 74 61 2d 68 65 61 64 65 72 2d 66 6f 72 6d 61 74 3d 64 65 66 61 75 6c 74 5d 29 20 23 68 65 61 64 65 72 2d 6f 75 74 65 72 5b 64 61 74 61 2d 66 75 6c 6c 2d 77 69 64 74 68 3d 74 72 75 65 5d 3a 6e 6f 74 28 5b 64 61 74 61 2d 66 6f 72 6d 61 74 3d 6c 65 66 74 2d 68 65 61 64 65 72 5d 29 20 23 73 65 61 72 63 68 2d 62 74 6e 2c 2e 61 73 63 65 6e 64 5b 64 61 74 61 2d 68 65 61 64 65 72 2d 73 65 61 72 63 68 3d 66 61 6c 73 65 5d 3a 6e 6f 74 28 5b 64 61 74 61 2d 68 65 61 64 65 72 2d 66 6f 72 6d 61 74 3d 64 65 66 61 75 6c 74 5d 29 20 23 68 65 Data Ascii: false] #top nav ul .slide-out-widget-area-toggle a{border:none}.ascend:not([data-header-format=default]) #header-outer[data-full-width=true]:not([data-format=left-header]) #search-btn,.ascend[data-header-search=false]:not([data-header-format=default]) #he
2024-04-16 15:05:11 UTC	1369	IN	Data Raw: 64 61 74 61 2d 68 61 73 2d 62 75 74 74 6f 6e 73 3d 6e 6f 5d 20 23 74 6f 70 20 6e 61 76 3e 2e 62 75 74 74 6f 6e 73 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 39 39 39 70 78 29 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 36 39 31 70 78 29 7b 62 6f 64 79 2e 61 73 63 65 6e 64 20 23 73 6c 69 64 65 2d 6f 75 74 2d 77 69 64 67 65 74 2d 61 72 65 61 20 2e 69 6e 6e 65 72 20 2e 6f 66 66 2d 63 61 6e 76 61 73 2d 6d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 2e 6d 6f 62 69 6c 65 2d 6f 6e 6c 79 20 2e 6d 65 6e 75 2e 73 65 63 6f 6e 64 61 72 79 2d 68 65 61 64 65 72 2d 69 74 65 6d 73 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 Data Ascii: data-has-buttons=no] #top nav>.buttons{margin-right:0}@media only screen and (max-width:999px) and (min-width:691px){body.ascend #slide-out-widget-area .inner .off-canvas-menu-container.mobile-only .menu.secondary-header-items{display:none}}@media only sc
2024-04-16 15:05:11 UTC	1369	IN	Data Raw: 70 61 72 65 6e 74 5b 64 61 74 61 2d 74 72 61 6e 73 70 61 72 65 6e 74 2d 68 65 61 64 65 72 3d 74 72 75 65 5d 5b 64 61 74 61 2d 66 75 6c 6c 2d 77 69 64 74 68 3d 74 72 75 65 5d 5b 64 61 74 61 2d 72 65 6d 6f 76 65 2d 62 6f 72 64 65 72 3d 74 72 75 65 5d 20 23 74 6f 70 20 6e 61 76 20 75 6c 20 2e 73 6c 69 64 65 2d 6f 75 74 2d 77 69 64 67 65 74 2d 61 72 65 61 2d 74 6f 67 67 6c 65 20 61 3a 61 66 74 65 72 2c 2e 61 73 63 65 6e 64 20 23 68 65 61 64 65 72 2d 6f 75 74 65 72 2e 74 72 61 6e 73 70 61 72 65 6e 74 5b 64 61 74 61 2d 74 72 61 6e 73 70 61 72 65 6e 74 2d 68 65 61 64 65 72 3d 74 72 75 65 5d 5b 64 61 74 61 2d 66 75 6c 6c 2d 77 69 64 74 68 3d 74 72 75 65 5d 5b 64 61 74 61 2d 72 65 6d 6f 76 65 2d 62 6f 72 64 65 72 3d 74 72 75 65 5d 20 2e 63 61 72 74 2d 63 6f 6e 74 Data Ascii: parent[data-transparent-header=true][data-full-width=true][data-remove-border=true] #top nav ul .slide-out-widget-area-toggle a:after,.ascend #header-outer.transparent[data-transparent-header=true][data-full-width=true][data-remove-border=true] .cart-cont

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.11	49734	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:10 UTC	590	OUT	GET /wp-content/uploads/salient/menu-dynamic.css?ver=47034 HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:12 UTC	586	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:12 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: public, max-age=2592000 expires: Thu, 16 May 2024 15:05:12 GMT last-modified: Tue, 16 Apr 2024 08:35:21 GMT etag: W/"101c-661e3849-27bda4478fad7008;gz" platform: hostinger content-security-policy: upgrade-insecure-requests x-turbo-charged-by: LiteSpeed alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: cfabe87413e74dfcfd52cee4d1db1d4e-asc-edge5 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 1.062
2024-04-16 15:05:12 UTC	783	IN	Data Raw: 31 30 31 63 0d 0a 23 68 65 61 64 65 72 2d 6f 75 74 65 72 20 2e 6e 65 63 74 61 72 2d 65 78 74 2d 6d 65 6e 75 2d 69 74 65 6d 20 2e 69 6d 61 67 65 2d 6c 61 79 65 72 2d 6f 75 74 65 72 2c 23 68 65 61 64 65 72 2d 6f 75 74 65 72 20 2e 6e 65 63 74 61 72 2d 65 78 74 2d 6d 65 6e 75 2d 69 74 65 6d 20 2e 69 6d 61 67 65 2d 6c 61 79 65 72 2c 23 68 65 61 64 65 72 2d 6f 75 74 65 72 20 2e 6e 65 63 74 61 72 2d 65 78 74 2d 6d 65 6e 75 2d 69 74 65 6d 20 2e 63 6f 6c 6f 72 2d 6f 76 65 72 6c 61 79 2c 23 73 6c 69 64 65 2d 6f 75 74 2d 77 69 64 67 65 74 2d 61 72 65 61 20 2e 6e 65 63 74 61 72 2d 65 78 74 2d 6d 65 6e 75 2d 69 74 65 6d 20 2e 69 6d 61 67 65 2d 6c 61 79 65 72 2d 6f 75 74 65 72 2c 23 73 6c 69 64 65 2d 6f 75 74 2d 77 69 64 67 65 74 2d 61 72 65 61 20 2e 6e 65 63 74 61 72 Data Ascii: 101c#header-outer .nectar-ext-menu-item .image-layer-outer,#header-outer .nectar-ext-menu-item .image-layer,#header-outer .nectar-ext-menu-item .color-overlay,#slide-out-widget-area .nectar-ext-menu-item .image-layer-outer,#slide-out-widget-area .nectar
2024-04-16 15:05:12 UTC	1369	IN	Data Raw: 6d 70 6f 72 74 61 6e 74 3b 7d 23 68 65 61 64 65 72 2d 6f 75 74 65 72 20 6e 61 76 20 2e 6e 65 63 74 61 72 2d 65 78 74 2d 6d 65 6e 75 2d 69 74 65 6d 20 2e 69 6d 61 67 65 2d 6c 61 79 65 72 7b 6f 70 61 63 69 74 79 3a 30 3b 7d 23 68 65 61 64 65 72 2d 6f 75 74 65 72 20 6e 61 76 20 2e 6e 65 63 74 61 72 2d 65 78 74 2d 6d 65 6e 75 2d 69 74 65 6d 20 2e 69 6d 61 67 65 2d 6c 61 79 65 72 2e 6c 6f 61 64 65 64 7b 6f 70 61 63 69 74 79 3a 31 3b 7d 2e 6e 65 63 74 61 72 2d 65 78 74 2d 6d 65 6e 75 2d 69 74 65 6d 20 73 70 61 6e 5b 63 6c 61 73 73 2a 3d 22 69 6e 68 65 72 69 74 2d 68 22 5d 20 2b 20 2e 6d 65 6e 75 2d 69 74 65 6d 2d 64 65 73 63 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 2e 34 72 65 6d 3b 7d 23 6d 6f 62 69 6c 65 2d 6d 65 6e 75 20 2e 6e 65 63 74 61 72 2d 65 78 74 2d 6d Data Ascii: mportant;}#header-outer nav .nectar-ext-menu-item .image-layer{opacity:0;}#header-outer nav .nectar-ext-menu-item .image-layer.loaded{opacity:1;}.nectar-ext-menu-item span[class*="inherit-h"] + .menu-item-desc{margin-top:0.4rem;}#mobile-menu .nectar-ext-m
2024-04-16 15:05:12 UTC	1369	IN	Data Raw: 75 74 74 6f 6e 20 2e 74 69 74 6c 65 20 2e 6d 65 6e 75 2d 74 69 74 6c 65 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6e 6f 6e 65 3b 7d 2e 6e 65 63 74 61 72 2d 65 78 74 2d 6d 65 6e 75 2d 69 74 65 6d 5f 5f 62 75 74 74 6f 6e 20 2e 6e 65 63 74 61 72 2d 63 74 61 3a 6e 6f 74 28 5b 64 61 74 61 2d 63 6f 6c 6f 72 3d 22 74 72 61 6e 73 70 61 72 65 6e 74 22 5d 29 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2e 38 65 6d 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 38 65 6d 3b 7d 2e 6e 65 63 74 61 72 2d 65 78 74 2d 6d 65 6e 75 2d 69 74 65 6d 20 2e 63 6f 6c 6f 72 2d 6f 76 65 72 6c 61 79 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 30 2e 35 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 31 35 2c 2e 37 35 2c 2e 35 2c 31 29 3b 7d 2e 6e 65 Data Ascii: utton .title .menu-title-text{background-image:none;}.nectar-ext-menu-item__button .nectar-cta:not([data-color="transparent"]){margin-top:.8em;margin-bottom:.8em;}.nectar-ext-menu-item .color-overlay{transition:opacity 0.5s cubic-bezier(.15,.75,.5,1);}.ne
2024-04-16 15:05:12 UTC	616	IN	Data Raw: 2d 6d 65 6e 75 2d 69 74 65 6d 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 7d 23 73 6c 69 64 65 2d 6f 75 74 2d 77 69 64 67 65 74 2d 61 72 65 61 20 2e 6e 65 63 74 61 72 2d 65 78 74 2d 6d 65 6e 75 2d 69 74 65 6d 20 2e 69 6e 6e 65 72 2d 63 6f 6e 74 65 6e 74 2c 23 6d 6f 62 69 6c 65 2d 6d 65 6e 75 20 2e 6e 65 63 74 61 72 2d 65 78 74 2d 6d 65 6e 75 2d 69 74 65 6d 20 2e 69 6e 6e 65 72 2d 63 6f 6e 74 65 6e 74 7b 77 69 64 74 68 3a 31 30 30 25 3b 7d 23 73 6c 69 64 65 2d 6f 75 74 2d 77 69 64 67 65 74 2d 61 72 65 61 2e 66 75 6c 6c 73 63 72 65 65 6e 2d 61 6c 74 20 2e 6e 65 63 74 61 72 2d 65 78 74 2d 6d 65 6e 75 2d 69 74 65 6d 2c 23 73 6c 69 64 65 2d 6f 75 74 2d 77 69 64 67 65 74 2d 61 72 65 61 2e 66 75 6c 6c 73 63 72 65 65 6e 20 2e 6e 65 63 74 61 72 2d 65 78 74 2d 6d Data Ascii: -menu-item{display:block;}#slide-out-widget-area .nectar-ext-menu-item .inner-content,#mobile-menu .nectar-ext-menu-item .inner-content{width:100%;}#slide-out-widget-area.fullscreen-alt .nectar-ext-menu-item,#slide-out-widget-area.fullscreen .nectar-ext-m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.11	49735	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:10 UTC	614	OUT	GET /wp-content/plugins/js_composer_salient/assets/css/js_composer.min.css?ver=7.1 HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:13 UTC	586	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:13 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: public, max-age=2592000 expires: Thu, 16 May 2024 15:05:13 GMT last-modified: Thu, 15 Feb 2024 10:36:11 GMT etag: W/"9b3a-65cde91b-116665f40d9ab0d7;gz" platform: hostinger content-security-policy: upgrade-insecure-requests x-turbo-charged-by: LiteSpeed alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 1007fbc817704ed4133b7cde97845750-asc-edge6 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 2.126
2024-04-16 15:05:13 UTC	783	IN	Data Raw: 39 62 33 61 0d 0a 0a 0a 2e 76 63 5f 70 61 72 61 6c 6c 61 78 2d 69 6e 6e 65 72 20 69 66 72 61 6d 65 2c 0a 2e 76 63 5f 76 69 64 65 6f 2d 62 67 20 69 66 72 61 6d 65 20 7b 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 30 25 0a 7d 0a 0a 2e 76 63 5f 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 2c 0a 2e 76 63 5f 63 6f 6c 75 6d 6e 2d 69 6e 6e 65 72 3a 3a 61 66 74 65 72 2c 0a 2e 76 63 5f 65 6c 2d 63 6c 65 61 72 66 69 78 2c 0a 2e 76 63 5f 72 6f 77 3a 61 66 74 65 72 20 7b 0a 20 20 20 20 63 6c 65 61 72 3a 20 62 6f 74 68 0a 7d 0a 0a 2e 63 6f 6e 74 61 69 6e 65 72 3a 62 65 66 6f 72 65 2c 0a 2e 63 6f 6e 74 61 69 6e 65 72 3a 61 66 74 65 72 2c 0a 2e 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 64 3a 62 65 66 6f 72 65 2c 0a 2e 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 Data Ascii: 9b3a.vc_parallax-inner iframe,.vc_video-bg iframe { max-width: 1000%}.vc_clearfix:after,.vc_column-inner::after,.vc_el-clearfix,.vc_row:after { clear: both}.container:before,.container:after,.container-fluid:before,.container-flui
2024-04-16 15:05:13 UTC	1369	IN	Data Raw: 0a 0a 2f 2a 6e 65 63 74 61 72 20 61 64 64 69 74 69 6f 6e 2a 2f 0a 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 36 39 30 70 78 29 20 7b 0a 20 20 20 20 2e 76 63 5f 68 69 64 64 65 6e 2d 78 73 20 7b 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 0a 20 20 20 20 7d 0a 20 20 20 20 2e 76 63 5f 65 6c 2d 63 6c 65 61 72 66 69 78 2d 78 73 20 7b 0a 20 20 20 20 20 20 20 20 63 6c 65 61 72 3a 20 62 6f 74 68 0a 20 20 20 20 7d 0a 7d 0a 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 36 39 31 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 39 39 39 70 78 29 20 7b 0a 20 20 20 20 2e 76 63 5f 68 69 64 64 65 6e 2d 73 6d 20 7b 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 21 Data Ascii: /nectar addition/@media (max-width: 690px) { .vc_hidden-xs { display: none!important } .vc_el-clearfix-xs { clear: both }}@media (min-width: 691px) and (max-width: 999px) { .vc_hidden-sm { display: none!
2024-04-16 15:05:13 UTC	1369	IN	Data Raw: 78 73 2d 32 5c 2f 35 2c 0a 2e 76 63 5f 63 6f 6c 2d 78 73 2d 33 5c 2f 35 2c 0a 2e 76 63 5f 63 6f 6c 2d 78 73 2d 34 5c 2f 35 2c 0a 2e 76 63 5f 63 6f 6c 2d 78 73 2d 35 5c 2f 35 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 6d 69 6e 2d 68 65 69 67 68 74 3a 20 31 70 78 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 20 20 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 32 2e 31 25 3b 0a 7d 0a 0a 2e 76 63 5f 63 6f 6c 2d 78 73 2d 31 5c 2f 35 2c 0a 2e 76 63 5f 63 6f 6c 2d 78 Data Ascii: xs-2\/5,.vc_col-xs-3\/5,.vc_col-xs-4\/5,.vc_col-xs-5\/5 { position: relative; min-height: 1px; -webkit-box-sizing: border-box; -moz-box-sizing: border-box; box-sizing: border-box; margin-left: 2.1%;}.vc_col-xs-1\/5,.vc_col-x
2024-04-16 15:05:13 UTC	1369	IN	Data Raw: 20 7d 0a 20 20 20 20 62 6f 64 79 20 2e 76 63 5f 72 6f 77 2d 66 6c 75 69 64 20 2e 76 63 5f 63 6f 6c 2d 6d 64 2d 35 5c 2f 35 20 7b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 0a 20 20 20 20 7d 0a 20 20 20 20 62 6f 64 79 20 2e 76 63 5f 72 6f 77 2d 66 6c 75 69 64 20 2e 76 63 5f 63 6f 6c 2d 6d 64 2d 34 5c 2f 35 20 7b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 38 30 25 3b 0a 20 20 20 20 7d 0a 20 20 20 20 62 6f 64 79 20 2e 76 63 5f 72 6f 77 2d 66 6c 75 69 64 20 2e 76 63 5f 63 6f 6c 2d 6d 64 2d 33 5c 2f 35 20 7b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 36 30 25 3b 0a 20 20 20 20 7d 0a 20 20 20 20 62 6f 64 79 20 2e 76 63 5f 72 6f 77 2d 66 6c 75 69 64 20 2e 76 63 5f 63 6f 6c 2d 6d 64 2d 32 5c 2f 35 20 7b 0a 20 20 20 20 20 20 20 20 77 69 Data Ascii: } body .vc_row-fluid .vc_col-md-5\/5 { width: 100% } body .vc_row-fluid .vc_col-md-4\/5 { width: 80%; } body .vc_row-fluid .vc_col-md-3\/5 { width: 60%; } body .vc_row-fluid .vc_col-md-2\/5 { wi
2024-04-16 15:05:13 UTC	1369	IN	Data Raw: 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 0a 7d 0a 0a 40 66 6f 6e 74 2d 66 61 63 65 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 63 70 62 2d 70 6c 75 67 69 6e 2d 69 63 6f 6e 73 3b 0a 20 20 20 20 73 72 63 3a 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 76 63 5f 69 63 6f 6e 73 5f 76 32 2f 66 6f 6e 74 73 2f 76 63 70 62 2d 70 6c 75 67 69 6e 2d 69 63 6f 6e 73 2e 65 6f 74 3f 66 36 75 64 36 32 29 3b 0a 20 20 20 20 73 72 63 3a 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 76 63 5f 69 63 6f 6e 73 5f 76 32 2f 66 6f 6e 74 73 2f 76 63 70 62 2d 70 6c 75 67 69 6e 2d 69 63 6f 6e 73 2e 65 6f 74 3f 66 36 75 64 36 32 23 69 65 66 69 78 29 20 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e Data Ascii: line-block; vertical-align: middle}@font-face{ font-family:vcpb-plugin-icons; src:url(../fonts/vc_icons_v2/fonts/vcpb-plugin-icons.eot?f6ud62); src:url(../fonts/vc_icons_v2/fonts/vcpb-plugin-icons.eot?f6ud62#iefix) format('embedded-open
2024-04-16 15:05:13 UTC	1369	IN	Data Raw: 72 6f 77 5f 64 6f 77 6e 77 61 72 64 3a 62 65 66 6f 72 65 7b 0a 20 20 20 20 63 6f 6e 74 65 6e 74 3a 22 5c 65 35 64 62 22 0a 7d 0a 2e 76 63 2d 63 2d 69 63 6f 6e 2d 73 79 6e 63 3a 62 65 66 6f 72 65 7b 0a 20 20 20 20 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 32 37 22 0a 7d 0a 2e 76 63 2d 63 2d 69 63 6f 6e 2d 73 65 61 72 63 68 3a 62 65 66 6f 72 65 7b 0a 20 20 20 20 63 6f 6e 74 65 6e 74 3a 22 5c 65 38 62 36 22 0a 7d 0a 2e 76 63 2d 63 2d 69 63 6f 6e 2d 31 2d 31 3a 62 65 66 6f 72 65 7b 0a 20 20 20 20 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 30 30 22 0a 7d 0a 2e 76 63 2d 63 2d 69 63 6f 6e 2d 31 2d 32 5f 31 2d 32 3a 62 65 66 6f 72 65 7b 0a 20 20 20 20 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 30 31 22 0a 7d 0a 2e 76 63 2d 63 2d 69 63 6f 6e 2d 31 2d 33 5f 31 2d 33 5f 31 2d 33 3a 62 Data Ascii: row_downward:before{ content:"\e5db"}.vc-c-icon-sync:before{ content:"\e627"}.vc-c-icon-search:before{ content:"\e8b6"}.vc-c-icon-1-1:before{ content:"\e900"}.vc-c-icon-1-2_1-2:before{ content:"\e901"}.vc-c-icon-1-3_1-3_1-3:b
2024-04-16 15:05:13 UTC	1369	IN	Data Raw: 2e 76 63 2d 63 2d 69 63 6f 6e 2d 6c 61 79 6f 75 74 5f 6c 61 6e 64 73 63 61 70 65 2d 74 61 62 6c 65 74 73 3a 62 65 66 6f 72 65 7b 0a 20 20 20 20 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 31 39 22 0a 7d 0a 2e 76 63 2d 63 2d 69 63 6f 6e 2d 6c 61 79 6f 75 74 5f 70 6f 72 74 72 61 69 74 2d 73 6d 61 72 74 70 68 6f 6e 65 73 3a 62 65 66 6f 72 65 7b 0a 20 20 20 20 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 31 61 22 0a 7d 0a 2e 76 63 2d 63 2d 69 63 6f 6e 2d 6c 61 79 6f 75 74 5f 70 6f 72 74 72 61 69 74 2d 74 61 62 6c 65 74 73 3a 62 65 66 6f 72 65 7b 0a 20 20 20 20 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 31 62 22 0a 7d 0a 2e 76 63 2d 63 2d 69 63 6f 6e 2d 6d 6f 64 65 5f 65 64 69 74 3a 62 65 66 6f 72 65 7b 0a 20 20 20 20 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 31 64 22 0a 7d 0a 2e 76 63 2d Data Ascii: .vc-c-icon-layout_landscape-tablets:before{ content:"\e919"}.vc-c-icon-layout_portrait-smartphones:before{ content:"\e91a"}.vc-c-icon-layout_portrait-tablets:before{ content:"\e91b"}.vc-c-icon-mode_edit:before{ content:"\e91d"}.vc-
2024-04-16 15:05:13 UTC	1369	IN	Data Raw: 65 72 74 20 70 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 0a 2e 77 70 62 5f 74 65 78 74 5f 63 6f 6c 75 6d 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 0a 2e 77 70 62 5f 74 65 78 74 5f 63 6f 6c 75 6d 6e 20 70 3a 6c 61 73 74 2d 63 68 69 6c 64 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 0a 7d 0a 0a 0a 2e 76 63 5f 6d 65 73 73 61 67 65 5f 62 6f 78 2d 69 63 6f 6e 3e 2a 2c 0a 2e 76 63 5f 6d 65 73 73 61 67 65 5f 62 6f 78 2d 69 63 6f 6e 3e 2e 66 61 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 37 65 6d 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 0a 7d 0a 0a 2e 76 63 5f 6d 65 73 73 61 67 65 5f 62 6f 78 2d 69 63 6f 6e 3e 2a 2c 0a 2e 76 63 5f 74 6f 67 67 6c 65 5f 73 69 6d 70 6c 65 20 2e 76 63 5f 74 6f 67 67 6c 65 5f 69 63 6f Data Ascii: ert p:last-child,.wpb_text_column:last-child,.wpb_text_column p:last-child { margin-bottom: 0}.vc_message_box-icon>,.vc_message_box-icon>.fa { font-size: 1.7em; line-height: 1}.vc_message_box-icon>,.vc_toggle_simple .vc_toggle_ico
2024-04-16 15:05:13 UTC	1369	IN	Data Raw: 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 30 0a 7d 0a 0a 2e 76 63 5f 72 6f 77 5b 64 61 74 61 2d 76 63 2d 66 75 6c 6c 2d 77 69 64 74 68 5d 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 6f 70 61 63 69 74 79 20 2e 35 73 20 65 61 73 65 3b 0a 20 20 20 20 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 6f 70 61 63 69 74 79 20 2e 35 73 20 65 61 73 65 3b 0a 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 6f 70 61 63 69 74 79 20 2e 35 73 20 65 61 73 65 3b 0a 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 0a 7d 0a 0a 2e 76 63 5f 72 6f 77 5b 64 61 74 61 2d 76 63 2d 66 75 6c 6c 2d 77 69 64 74 68 5d 2e 76 63 5f 68 69 64 64 65 6e 20 7b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a Data Ascii: width: 100%; z-index: 0}.vc_row[data-vc-full-width] { -webkit-transition: opacity .5s ease; -o-transition: opacity .5s ease; transition: opacity .5s ease; overflow: hidden}.vc_row[data-vc-full-width].vc_hidden { opacity:
2024-04-16 15:05:13 UTC	1369	IN	Data Raw: 3a 20 23 65 61 65 61 65 61 0a 7d 0a 0a 0a 2e 77 70 62 5f 62 75 74 74 6f 6e 3a 68 6f 76 65 72 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 33 33 33 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 36 65 36 65 36 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 2e 31 73 20 6c 69 6e 65 61 72 3b 0a 20 20 20 20 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 2e 31 73 20 6c 69 6e 65 61 72 3b 0a 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 2e 31 73 20 6c 69 6e 65 61 72 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 6e 6f 6e 65 0a Data Ascii: : #eaeaea}.wpb_button:hover { color: #333; background-color: #e6e6e6; -webkit-transition: background-color .1s linear; -o-transition: background-color .1s linear; transition: background-color .1s linear; background-image: none

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.11	49736	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:10 UTC	603	OUT	GET /wp-content/themes/salient/css/salient-dynamic-styles.css?ver=34291 HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:14 UTC	587	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:13 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: public, max-age=2592000 expires: Thu, 16 May 2024 15:05:13 GMT last-modified: Tue, 16 Apr 2024 08:35:21 GMT etag: W/"22bca-661e3849-3893128aba0ec7de;gz" platform: hostinger content-security-policy: upgrade-insecure-requests x-turbo-charged-by: LiteSpeed alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 12ebc31d257df334aad357bcbeae2e9d-asc-edge5 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 2.126
2024-04-16 15:05:14 UTC	782	IN	Data Raw: 32 30 30 30 30 0d 0a 2e 6e 65 63 74 61 72 2d 63 6f 6c 6f 72 2d 61 63 63 65 6e 74 2d 63 6f 6c 6f 72 2c 62 6f 64 79 20 61 2c 6c 61 62 65 6c 20 73 70 61 6e 2c 62 6f 64 79 20 5b 63 6c 61 73 73 5e 3d 22 69 63 6f 6e 2d 22 5d 2e 69 63 6f 6e 2d 64 65 66 61 75 6c 74 2d 73 74 79 6c 65 2c 2e 62 6c 6f 67 2d 72 65 63 65 6e 74 5b 64 61 74 61 2d 73 74 79 6c 65 2a 3d 22 63 6c 61 73 73 69 63 5f 65 6e 68 61 6e 63 65 64 22 5d 20 2e 70 6f 73 74 2d 6d 65 74 61 20 61 3a 68 6f 76 65 72 20 69 2c 2e 6d 61 73 6f 6e 72 79 2e 63 6c 61 73 73 69 63 5f 65 6e 68 61 6e 63 65 64 20 2e 70 6f 73 74 20 2e 70 6f 73 74 2d 6d 65 74 61 20 61 3a 68 6f 76 65 72 20 69 2c 2e 63 6f 6d 6d 65 6e 74 2d 6c 69 73 74 20 2e 63 6f 6d 6d 65 6e 74 2d 6d 65 74 61 20 61 3a 68 6f 76 65 72 2c 2e 63 6f 6d 6d 65 6e Data Ascii: 20000.nectar-color-accent-color,body a,label span,body [class^="icon-"].icon-default-style,.blog-recent[data-style*="classic_enhanced"] .post-meta a:hover i,.masonry.classic_enhanced .post .post-meta a:hover i,.comment-list .comment-meta a:hover,.commen
2024-04-16 15:05:14 UTC	1369	IN	Data Raw: 69 76 5b 64 61 74 61 2d 73 74 79 6c 65 3d 22 6d 69 6e 69 6d 61 6c 22 5d 20 2e 74 6f 67 67 6c 65 2e 6f 70 65 6e 20 3e 20 2e 74 6f 67 67 6c 65 2d 74 69 74 6c 65 20 61 2c 23 66 6f 6f 74 65 72 2d 6f 75 74 65 72 20 23 63 6f 70 79 72 69 67 68 74 20 6c 69 20 61 20 69 3a 68 6f 76 65 72 2c 2e 61 73 63 65 6e 64 20 2e 63 6f 6d 6d 65 6e 74 2d 6c 69 73 74 20 2e 72 65 70 6c 79 20 61 2c 62 6f 64 79 2e 6d 61 74 65 72 69 61 6c 20 2e 77 69 64 67 65 74 3a 6e 6f 74 28 2e 6e 65 63 74 61 72 5f 70 6f 70 75 6c 61 72 5f 70 6f 73 74 73 5f 77 69 64 67 65 74 29 3a 6e 6f 74 28 2e 72 65 63 65 6e 74 5f 70 6f 73 74 73 5f 65 78 74 72 61 5f 77 69 64 67 65 74 29 20 6c 69 20 61 3a 68 6f 76 65 72 2c 62 6f 64 79 2e 6d 61 74 65 72 69 61 6c 20 23 73 69 64 65 62 61 72 20 2e 77 69 64 67 65 74 3a Data Ascii: iv[data-style="minimal"] .toggle.open > .toggle-title a,#footer-outer #copyright li a i:hover,.ascend .comment-list .reply a,body.material .widget:not(.nectar_popular_posts_widget):not(.recent_posts_extra_widget) li a:hover,body.material #sidebar .widget:
2024-04-16 15:05:14 UTC	1369	IN	Data Raw: 70 20 6e 61 76 20 3e 20 2e 73 66 2d 6d 65 6e 75 20 3e 20 2e 62 75 74 74 6f 6e 5f 62 6f 72 64 65 72 65 64 2e 73 66 48 6f 76 65 72 20 3e 20 61 2c 23 68 65 61 64 65 72 2d 6f 75 74 65 72 3a 6e 6f 74 28 2e 74 72 61 6e 73 70 61 72 65 6e 74 29 20 2e 6e 65 63 74 61 72 2d 6d 6f 62 69 6c 65 2d 6f 6e 6c 79 2e 6d 6f 62 69 6c 65 2d 68 65 61 64 65 72 20 61 3a 68 6f 76 65 72 2c 23 68 65 61 64 65 72 2d 6f 75 74 65 72 3a 6e 6f 74 28 2e 74 72 61 6e 73 70 61 72 65 6e 74 29 20 2e 6e 65 63 74 61 72 2d 6d 6f 62 69 6c 65 2d 6f 6e 6c 79 2e 6d 6f 62 69 6c 65 2d 68 65 61 64 65 72 20 6c 69 5b 63 6c 61 73 73 2a 3d 22 63 75 72 72 65 6e 74 22 5d 20 61 7b 63 6f 6c 6f 72 3a 23 31 65 38 33 65 63 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 23 68 65 61 64 65 72 2d 6f 75 74 65 72 20 23 74 6f 70 20 Data Ascii: p nav > .sf-menu > .button_bordered.sfHover > a,#header-outer:not(.transparent) .nectar-mobile-only.mobile-header a:hover,#header-outer:not(.transparent) .nectar-mobile-only.mobile-header li[class*="current"] a{color:#1e83ec!important;}#header-outer #top
2024-04-16 15:05:14 UTC	1369	IN	Data Raw: 65 72 20 61 3a 66 6f 63 75 73 2c 23 66 6f 6f 74 65 72 2d 6f 75 74 65 72 20 61 3a 68 6f 76 65 72 2c 2e 72 65 63 65 6e 74 2d 70 6f 73 74 73 20 2e 70 6f 73 74 2d 68 65 61 64 65 72 20 61 3a 68 6f 76 65 72 2c 2e 72 65 73 75 6c 74 20 61 3a 68 6f 76 65 72 2c 2e 70 6f 73 74 2d 61 72 65 61 2e 73 74 61 6e 64 61 72 64 2d 6d 69 6e 69 6d 61 6c 20 2e 70 6f 73 74 20 2e 70 6f 73 74 2d 6d 65 74 61 20 2e 64 61 74 65 20 61 2c 2e 70 6f 73 74 2d 61 72 65 61 2e 73 74 61 6e 64 61 72 64 2d 6d 69 6e 69 6d 61 6c 20 2e 70 6f 73 74 20 2e 70 6f 73 74 2d 68 65 61 64 65 72 20 68 32 20 61 3a 68 6f 76 65 72 2c 2e 70 6f 73 74 2d 61 72 65 61 2e 73 74 61 6e 64 61 72 64 2d 6d 69 6e 69 6d 61 6c 20 2e 70 6f 73 74 20 2e 6d 6f 72 65 2d 6c 69 6e 6b 3a 68 6f 76 65 72 20 73 70 61 6e 2c 2e 70 6f 73 Data Ascii: er a:focus,#footer-outer a:hover,.recent-posts .post-header a:hover,.result a:hover,.post-area.standard-minimal .post .post-meta .date a,.post-area.standard-minimal .post .post-header h2 a:hover,.post-area.standard-minimal .post .more-link:hover span,.pos
2024-04-16 15:05:14 UTC	1369	IN	Data Raw: 65 61 64 65 72 20 2e 74 69 74 6c 65 2c 62 6f 64 79 20 23 70 61 67 69 6e 61 74 69 6f 6e 20 2e 70 61 67 65 2d 6e 75 6d 62 65 72 73 2e 70 72 65 76 3a 68 6f 76 65 72 2c 62 6f 64 79 20 23 70 61 67 69 6e 61 74 69 6f 6e 20 2e 70 61 67 65 2d 6e 75 6d 62 65 72 73 2e 6e 65 78 74 3a 68 6f 76 65 72 2c 62 6f 64 79 20 23 70 61 67 69 6e 61 74 69 6f 6e 20 61 2e 70 61 67 65 2d 6e 75 6d 62 65 72 73 3a 68 6f 76 65 72 2c 62 6f 64 79 20 23 70 61 67 69 6e 61 74 69 6f 6e 20 61 2e 70 61 67 65 2d 6e 75 6d 62 65 72 73 3a 66 6f 63 75 73 2c 62 6f 64 79 5b 64 61 74 61 2d 66 6f 72 6d 2d 73 75 62 6d 69 74 3d 22 73 65 65 2d 74 68 72 6f 75 67 68 22 5d 20 69 6e 70 75 74 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 2c 62 6f 64 79 5b 64 61 74 61 2d 66 6f 72 6d 2d 73 75 62 6d 69 74 3d 22 73 65 65 Data Ascii: eader .title,body #pagination .page-numbers.prev:hover,body #pagination .page-numbers.next:hover,body #pagination a.page-numbers:hover,body #pagination a.page-numbers:focus,body[data-form-submit="see-through"] input[type=submit],body[data-form-submit="see
2024-04-16 15:05:14 UTC	1369	IN	Data Raw: 68 72 6f 75 67 68 2e 61 63 63 65 6e 74 2d 63 6f 6c 6f 72 5b 64 61 74 61 2d 63 6f 6c 6f 72 2d 6f 76 65 72 72 69 64 65 3d 22 66 61 6c 73 65 22 5d 2c 64 69 76 5b 64 61 74 61 2d 73 74 79 6c 65 3d 22 6d 69 6e 69 6d 61 6c 5f 73 6d 61 6c 6c 22 5d 20 2e 74 6f 67 67 6c 65 2e 61 63 63 65 6e 74 2d 63 6f 6c 6f 72 20 3e 20 2e 74 6f 67 67 6c 65 2d 74 69 74 6c 65 20 61 3a 68 6f 76 65 72 2c 64 69 76 5b 64 61 74 61 2d 73 74 79 6c 65 3d 22 6d 69 6e 69 6d 61 6c 5f 73 6d 61 6c 6c 22 5d 20 2e 74 6f 67 67 6c 65 2e 61 63 63 65 6e 74 2d 63 6f 6c 6f 72 2e 6f 70 65 6e 20 3e 20 2e 74 6f 67 67 6c 65 2d 74 69 74 6c 65 20 61 2c 2e 74 65 73 74 69 6d 6f 6e 69 61 6c 5f 73 6c 69 64 65 72 5b 64 61 74 61 2d 72 61 74 69 6e 67 2d 63 6f 6c 6f 72 3d 22 61 63 63 65 6e 74 2d 63 6f 6c 6f 72 22 5d Data Ascii: hrough.accent-color[data-color-override="false"],div[data-style="minimal_small"] .toggle.accent-color > .toggle-title a:hover,div[data-style="minimal_small"] .toggle.accent-color.open > .toggle-title a,.testimonial_slider[data-rating-color="accent-color"]
2024-04-16 15:05:14 UTC	1369	IN	Data Raw: 2d 70 72 65 76 3a 68 6f 76 65 72 2c 2e 63 61 72 6f 75 73 65 6c 2d 6e 65 78 74 3a 68 6f 76 65 72 2c 2e 6e 65 63 74 61 72 2d 66 6c 69 63 6b 69 74 79 5b 64 61 74 61 2d 63 6f 6e 74 72 6f 6c 73 2a 3d 22 61 72 72 6f 77 73 5f 6f 76 65 72 6c 61 69 64 22 5d 5b 64 61 74 61 2d 63 6f 6e 74 72 6f 6c 2d 63 6f 6c 6f 72 3d 22 61 63 63 65 6e 74 2d 63 6f 6c 6f 72 22 5d 20 2e 66 6c 69 63 6b 69 74 79 2d 70 72 65 76 2d 6e 65 78 74 2d 62 75 74 74 6f 6e 3a 68 6f 76 65 72 3a 62 65 66 6f 72 65 2c 2e 6e 65 63 74 61 72 2d 66 6c 69 63 6b 69 74 79 5b 64 61 74 61 2d 63 6f 6e 74 72 6f 6c 73 3d 22 64 65 66 61 75 6c 74 22 5d 5b 64 61 74 61 2d 63 6f 6e 74 72 6f 6c 2d 63 6f 6c 6f 72 3d 22 61 63 63 65 6e 74 2d 63 6f 6c 6f 72 22 5d 20 2e 66 6c 69 63 6b 69 74 79 2d 70 61 67 65 2d 64 6f 74 73 Data Ascii: -prev:hover,.carousel-next:hover,.nectar-flickity[data-controls*="arrows_overlaid"][data-control-color="accent-color"] .flickity-prev-next-button:hover:before,.nectar-flickity[data-controls="default"][data-control-color="accent-color"] .flickity-page-dots
2024-04-16 15:05:14 UTC	1369	IN	Data Raw: 64 79 5b 64 61 74 61 2d 66 6f 72 6d 2d 73 75 62 6d 69 74 3d 22 72 65 67 75 6c 61 72 22 5d 20 2e 63 6f 6e 74 61 69 6e 65 72 2d 77 72 61 70 20 2e 73 70 61 6e 5f 31 32 2e 6c 69 67 68 74 20 62 75 74 74 6f 6e 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 3a 68 6f 76 65 72 2c 23 73 6c 69 64 65 2d 6f 75 74 2d 77 69 64 67 65 74 2d 61 72 65 61 2c 23 73 6c 69 64 65 2d 6f 75 74 2d 77 69 64 67 65 74 2d 61 72 65 61 2d 62 67 2e 66 75 6c 6c 73 63 72 65 65 6e 2c 23 73 6c 69 64 65 2d 6f 75 74 2d 77 69 64 67 65 74 2d 61 72 65 61 2d 62 67 2e 66 75 6c 6c 73 63 72 65 65 6e 2d 73 70 6c 69 74 2c 23 73 6c 69 64 65 2d 6f 75 74 2d 77 69 64 67 65 74 2d 61 72 65 61 2d 62 67 2e 66 75 6c 6c 73 63 72 65 65 6e 2d 61 6c 74 20 2e 62 67 2d 69 6e 6e 65 72 2c 62 6f 64 79 2e 6d 61 74 65 72 69 61 6c Data Ascii: dy[data-form-submit="regular"] .container-wrap .span_12.light button[type=submit]:hover,#slide-out-widget-area,#slide-out-widget-area-bg.fullscreen,#slide-out-widget-area-bg.fullscreen-split,#slide-out-widget-area-bg.fullscreen-alt .bg-inner,body.material
2024-04-16 15:05:14 UTC	1369	IN	Data Raw: 3a 68 6f 76 65 72 2c 2e 70 6f 73 74 2d 74 61 67 73 20 61 3a 68 6f 76 65 72 2c 23 74 6f 2d 74 6f 70 3a 68 6f 76 65 72 2c 23 74 6f 2d 74 6f 70 2e 64 61 72 6b 3a 68 6f 76 65 72 2c 62 6f 64 79 5b 64 61 74 61 2d 62 75 74 74 6f 6e 2d 73 74 79 6c 65 2a 3d 22 72 6f 75 6e 64 65 64 22 5d 20 23 74 6f 2d 74 6f 70 3a 61 66 74 65 72 2c 23 70 61 67 69 6e 61 74 69 6f 6e 20 61 2e 70 61 67 65 2d 6e 75 6d 62 65 72 73 3a 68 6f 76 65 72 2c 23 70 61 67 69 6e 61 74 69 6f 6e 20 73 70 61 6e 2e 70 61 67 65 2d 6e 75 6d 62 65 72 73 2e 63 75 72 72 65 6e 74 2c 2e 70 6f 72 74 66 6f 6c 69 6f 2d 69 74 65 6d 73 20 2e 63 6f 6c 5b 64 61 74 61 2d 64 65 66 61 75 6c 74 2d 63 6f 6c 6f 72 3d 22 74 72 75 65 22 5d 20 2e 77 6f 72 6b 2d 69 74 65 6d 3a 6e 6f 74 28 2e 73 74 79 6c 65 2d 33 29 20 2e 77 Data Ascii: :hover,.post-tags a:hover,#to-top:hover,#to-top.dark:hover,body[data-button-style*="rounded"] #to-top:after,#pagination a.page-numbers:hover,#pagination span.page-numbers.current,.portfolio-items .col[data-default-color="true"] .work-item:not(.style-3) .w
2024-04-16 15:05:14 UTC	1369	IN	Data Raw: 20 2e 70 6f 73 74 2d 63 6f 6e 74 65 6e 74 20 61 3a 68 6f 76 65 72 20 2e 6c 69 6e 6b 2d 69 6e 6e 65 72 2c 2e 69 6f 73 53 6c 69 64 65 72 20 2e 70 72 65 76 5f 73 6c 69 64 65 3a 68 6f 76 65 72 2c 2e 69 6f 73 53 6c 69 64 65 72 20 2e 6e 65 78 74 5f 73 6c 69 64 65 3a 68 6f 76 65 72 2c 23 68 65 61 64 65 72 2d 6f 75 74 65 72 20 2e 77 69 64 67 65 74 5f 73 68 6f 70 70 69 6e 67 5f 63 61 72 74 20 61 2e 62 75 74 74 6f 6e 2c 23 68 65 61 64 65 72 2d 6f 75 74 65 72 20 61 2e 63 61 72 74 2d 63 6f 6e 74 65 6e 74 73 20 2e 63 61 72 74 2d 77 72 61 70 20 73 70 61 6e 2c 23 68 65 61 64 65 72 2d 6f 75 74 65 72 20 23 6d 6f 62 69 6c 65 2d 63 61 72 74 2d 6c 69 6e 6b 20 2e 63 61 72 74 2d 77 72 61 70 20 73 70 61 6e 2c 23 74 6f 70 20 6e 61 76 20 75 6c 20 2e 73 6c 69 64 65 2d 6f 75 74 2d Data Ascii: .post-content a:hover .link-inner,.iosSlider .prev_slide:hover,.iosSlider .next_slide:hover,#header-outer .widget_shopping_cart a.button,#header-outer a.cart-contents .cart-wrap span,#header-outer #mobile-cart-link .cart-wrap span,#top nav ul .slide-out-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.11	49737	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:11 UTC	568	OUT	GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:13 UTC	602	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:12 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: public, max-age=604800 expires: Tue, 23 Apr 2024 15:05:12 GMT last-modified: Mon, 15 Apr 2024 17:34:16 GMT etag: W/"15601-661d6518-196cd4d1ce9c00d5;gz" platform: hostinger content-security-policy: upgrade-insecure-requests x-turbo-charged-by: LiteSpeed alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: d5d4508685a33c54f6add6a8b4592f1f-asc-edge5 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 1.068
2024-04-16 15:05:13 UTC	767	IN	Data Raw: 31 35 36 30 31 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 37 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 Data Ascii: 15601/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Err
2024-04-16 15:05:13 UTC	1369	IN	Data Raw: 2e 64 6f 63 75 6d 65 6e 74 2c 75 3d 7b 74 79 70 65 3a 21 30 2c 73 72 63 3a 21 30 2c 6e 6f 6e 63 65 3a 21 30 2c 6e 6f 4d 6f 64 75 6c 65 3a 21 30 7d 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 28 6e 3d 6e 7c 7c 43 29 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 69 66 28 6f 2e 74 65 78 74 3d 65 2c 74 29 66 6f 72 28 72 20 69 6e 20 75 29 28 69 3d 74 5b 72 5d 7c 7c 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 26 26 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 72 29 29 26 26 6f 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 72 2c 69 29 3b 6e 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6f 29 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 6f 29 7d 66 75 6e 63 74 69 Data Ascii: .document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}functi
2024-04-16 15:05:13 UTC	1369	IN	Data Raw: 3a 30 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 30 3c 3d 6e 26 26 6e 3c 74 3f 5b 74 68 69 73 5b 6e 5d 5d 3a 5b 5d 29 7d 2c 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 7c 7c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7d 2c 70 75 73 68 3a 73 2c 73 6f 72 74 3a 6f 65 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 6f 65 2e 73 70 6c 69 63 65 7d 2c 63 65 2e 65 78 74 65 6e 64 3d 63 65 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 73 3d 31 2c 75 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6c 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 Data Ascii: :0);return this.pushStack(0<=n&&n<t?[this[n]]:[])},end:function(){return this.prevObject\|\|this.constructor()},push:s,sort:oe.sort,splice:oe.splice},ce.extend=ce.fn.extend=function(){var e,t,n,r,i,o,a=arguments[0]\|\|{},s=1,u=arguments.length,l=!1;for("boole
2024-04-16 15:05:13 UTC	1369	IN	Data Raw: 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 28 63 28 4f 62 6a 65 63 74 28 65 29 29 3f 63 65 2e 6d 65 72 67 65 28 6e 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 5b 65 5d 3a 65 29 3a 73 2e 63 61 6c 6c 28 6e 2c 65 29 29 2c 6e 7d 2c 69 6e 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 3f 2d 31 3a 73 65 2e 63 61 6c 6c 28 74 2c 65 2c 6e 29 7d 2c 69 73 58 4d 4c 44 6f 63 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 6e 3d 65 26 26 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3b 72 65 74 75 72 6e 21 6c 2e Data Ascii: (e,t){var n=t\|\|[];return null!=e&&(c(Object(e))?ce.merge(n,"string"==typeof e?[e]:e):s.call(n,e)),n},inArray:function(e,t,n){return null==t?-1:se.call(t,e,n)},isXMLDoc:function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument\|\|e).documentElement;return!l.
2024-04-16 15:05:13 UTC	1369	IN	Data Raw: 6f 6e 28 65 29 7b 72 65 74 75 72 6e 28 65 2b 22 22 29 2e 72 65 70 6c 61 63 65 28 66 2c 70 29 7d 3b 76 61 72 20 79 65 3d 43 2c 6d 65 3d 73 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 62 2c 77 2c 6f 2c 61 2c 54 2c 72 2c 43 2c 64 2c 69 2c 6b 3d 6d 65 2c 53 3d 63 65 2e 65 78 70 61 6e 64 6f 2c 45 3d 30 2c 6e 3d 30 2c 73 3d 57 28 29 2c 63 3d 57 28 29 2c 75 3d 57 28 29 2c 68 3d 57 28 29 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 74 26 26 28 61 3d 21 30 29 2c 30 7d 2c 66 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c Data Ascii: on(e){return(e+"").replace(f,p)};var ye=C,me=s;!function(){var e,b,w,o,a,T,r,C,d,i,k=me,S=ce.expando,E=0,n=0,s=W(),c=W(),u=W(),h=W(),l=function(e,t){return e===t&&(a=!0),0},f="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|
2024-04-16 15:05:13 UTC	1369	IN	Data Raw: 5d 7b 31 2c 36 7d 22 2b 67 65 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 65 2e 73 6c 69 63 65 28 31 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 4d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 56 28 29 7d 2c 52 3d 4a 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 65 2e 64 69 73 61 62 6c 65 64 26 26 66 65 28 65 2c 22 66 69 65 6c 64 73 65 74 22 29 7d 2c 7b 64 69 72 3a Data Ascii: ]{1,6}"+ge+"?\|\\\\([^\\r\\n\\f])","g"),P=function(e,t){var n="0x"+e.slice(1)-65536;return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},M=function(){V()},R=J(function(e){return!0===e.disabled&&fe(e,"fieldset")},{dir:
2024-04-16 15:05:13 UTC	1369	IN	Data Raw: 72 6e 20 72 65 28 74 2e 72 65 70 6c 61 63 65 28 76 65 2c 22 24 31 22 29 2c 65 2c 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 57 28 29 7b 76 61 72 20 72 3d 5b 5d 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 72 2e 70 75 73 68 28 74 2b 22 20 22 29 3e 62 2e 63 61 63 68 65 4c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 65 5b 72 2e 73 68 69 66 74 28 29 5d 2c 65 5b 74 2b 22 20 22 5d 3d 6e 7d 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 53 5d 3d 21 30 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 24 28 65 29 7b 76 61 72 20 74 3d 54 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 66 69 65 6c 64 73 65 74 22 29 3b 74 72 79 7b 72 65 74 75 72 6e 21 21 65 28 74 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 Data Ascii: rn re(t.replace(ve,"$1"),e,n,r)}function W(){var r=[];return function e(t,n){return r.push(t+" ")>b.cacheLength&&delete e[r.shift()],e[t+" "]=n}}function F(e){return e[S]=!0,e}function $(e){var t=T.createElement("fieldset");try{return!!e(t)}catch(e){retur
2024-04-16 15:05:13 UTC	1369	IN	Data Raw: 6e 28 65 29 7b 72 65 74 75 72 6e 20 69 2e 63 61 6c 6c 28 65 2c 22 2a 22 29 7d 29 2c 6c 65 2e 73 63 6f 70 65 3d 24 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 54 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 73 63 6f 70 65 22 29 7d 29 2c 6c 65 2e 63 73 73 48 61 73 3d 24 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 54 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 3a 68 61 73 28 2a 2c 3a 6a 71 66 61 6b 65 29 22 29 2c 21 31 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 30 7d 7d 29 2c 6c 65 2e 67 65 74 42 79 49 64 3f 28 62 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 72 65 70 6c 61 63 65 28 4f 2c 50 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: n(e){return i.call(e,"")}),le.scope=$(function(){return T.querySelectorAll(":scope")}),le.cssHas=$(function(){try{return T.querySelector(":has(,:jqfake)"),!1}catch(e){return!0}}),le.getById?(b.filter.ID=function(e){var t=e.replace(O,P);return function(e
2024-04-16 15:05:13 UTC	1369	IN	Data Raw: 65 6e 67 74 68 7c 7c 64 2e 70 75 73 68 28 22 7e 3d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 53 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 64 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 64 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 28 74 3d 54 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 72 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e Data Ascii: ength\|\|d.push("~="),e.querySelectorAll("a#"+S+"+*").length\|\|d.push(".#.+[+~]"),e.querySelectorAll(":checked").length\|\|d.push(":checked"),(t=T.createElement("input")).setAttribute("type","hidden"),e.appendChild(t).setAttribute("name","D"),r.appendChild(e).
2024-04-16 15:05:13 UTC	1369	IN	Data Raw: 6c 65 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 2c 72 3d 6e 26 26 75 65 2e 63 61 6c 6c 28 62 2e 61 74 74 72 48 61 6e 64 6c 65 2c 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3f 6e 28 65 2c 74 2c 21 43 29 3a 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 72 3f 72 3a 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 74 29 7d 2c 49 2e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 53 79 6e 74 61 78 20 65 72 72 6f 72 2c 20 75 6e 72 65 63 6f 67 6e 69 7a 65 64 20 65 78 70 72 65 73 73 69 6f 6e 3a 20 22 2b 65 29 7d 2c 63 65 2e 75 6e 69 71 75 65 53 6f 72 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3d 5b 5d 2c 72 3d 30 2c 69 3d 30 3b 69 66 28 61 3d 21 6c 65 2e Data Ascii: le[t.toLowerCase()],r=n&&ue.call(b.attrHandle,t.toLowerCase())?n(e,t,!C):void 0;return void 0!==r?r:e.getAttribute(t)},I.error=function(e){throw new Error("Syntax error, unrecognized expression: "+e)},ce.uniqueSort=function(e){var t,n=[],r=0,i=0;if(a=!le.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.11	49738	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:12 UTC	576	OUT	GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:14 UTC	601	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:14 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: public, max-age=604800 expires: Tue, 23 Apr 2024 15:05:14 GMT last-modified: Mon, 15 Apr 2024 17:34:16 GMT etag: W/"3509-661d6518-edbf3c2c46278430;gz" platform: hostinger content-security-policy: upgrade-insecure-requests x-turbo-charged-by: LiteSpeed alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 79cca6b3c2150ff223bb488dec751c1a-asc-edge4 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 2.277
2024-04-16 15:05:14 UTC	768	IN	Data Raw: 33 35 30 39 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 4d 69 67 72 61 74 65 20 76 33 2e 34 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 26 26 28 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 3d 21 30 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f Data Ascii: 3509/! jQuery Migrate v3.4.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /"undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],functio
2024-04-16 15:05:14 UTC	1369	IN	Data Raw: 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 64 65 6c 65 74 65 20 74 5b 61 72 67 75 6d 65 6e 74 73 5b 65 5d 5d 7d 2c 73 2e 6d 69 67 72 61 74 65 49 73 50 61 74 63 68 45 6e 61 62 6c 65 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 74 5b 65 5d 7d 2c 6e 2e 63 6f 6e 73 6f 6c 65 26 26 6e 2e 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 26 26 28 73 26 26 65 28 22 33 2e 30 2e 30 22 29 26 26 21 65 28 22 35 2e 30 2e 30 22 29 7c 7c 6e 2e 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 4a 51 4d 49 47 52 41 54 45 3a 20 6a 51 75 65 72 79 20 33 2e 78 2d 34 2e 78 20 52 45 51 55 49 52 45 44 22 29 2c 73 2e 6d 69 67 72 61 74 65 57 61 72 6e 69 6e 67 73 26 26 6e 2e 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 Data Ascii: ion(){for(var e=0;e<arguments.length;e++)delete t[arguments[e]]},s.migrateIsPatchEnabled=function(e){return!t[e]},n.console&&n.console.log&&(s&&e("3.0.0")&&!e("5.0.0")\|\|n.console.log("JQMIGRATE: jQuery 3.x-4.x REQUIRED"),s.migrateWarnings&&n.console.log("
2024-04-16 15:05:14 UTC	1369	IN	Data Raw: 5c 73 2a 5b 2d 5c 77 5d 2b 5c 73 2a 29 28 5b 7e 7c 5e 24 2a 5d 3f 3d 29 5c 73 2a 28 5b 2d 5c 77 23 5d 2a 3f 23 5b 2d 5c 77 23 5d 2a 29 5c 73 2a 5c 5d 2f 2c 67 3d 2f 5c 5b 28 5c 73 2a 5b 2d 5c 77 5d 2b 5c 73 2a 29 28 5b 7e 7c 5e 24 2a 5d 3f 3d 29 5c 73 2a 28 5b 2d 5c 77 23 5d 2a 3f 23 5b 2d 5c 77 23 5d 2a 29 5c 73 2a 5c 5d 2f 67 2c 76 3d 2f 5e 5b 5c 73 5c 75 46 45 46 46 5c 78 41 30 5d 2b 7c 28 5b 5e 5c 73 5c 75 46 45 46 46 5c 78 41 30 5d 29 5b 5c 73 5c 75 46 45 46 46 5c 78 41 30 5d 2b 24 2f 67 3b 66 6f 72 28 64 20 69 6e 20 69 28 73 2e 66 6e 2c 22 69 6e 69 74 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 73 2e Data Ascii: \s[-\w]+\s)([~\|^$]?=)\s([-\w#]?#[-\w#])\s\]/,g=/\[(\s[-\w]+\s)([~\|^$]?=)\s([-\w#]?#[-\w#])\s\]/g,v=/^[\s\uFEFF\xA0]+\|([^\s\uFEFF\xA0])[\s\uFEFF\xA0]+$/g;for(d in i(s.fn,"init",function(e){var t=Array.prototype.slice.call(arguments);return s.
2024-04-16 15:05:14 UTC	1369	IN	Data Raw: 72 74 22 29 2c 72 28 73 2e 65 78 70 72 2c 22 66 69 6c 74 65 72 73 22 2c 73 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2c 22 65 78 70 72 2d 70 72 65 2d 70 73 65 75 64 6f 73 22 2c 22 6a 51 75 65 72 79 2e 65 78 70 72 2e 66 69 6c 74 65 72 73 20 69 73 20 64 65 70 72 65 63 61 74 65 64 3b 20 75 73 65 20 6a 51 75 65 72 79 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 22 29 2c 72 28 73 2e 65 78 70 72 2c 22 3a 22 2c 73 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2c 22 65 78 70 72 2d 70 72 65 2d 70 73 65 75 64 6f 73 22 2c 22 6a 51 75 65 72 79 2e 65 78 70 72 5b 27 3a 27 5d 20 69 73 20 64 65 70 72 65 63 61 74 65 64 3b 20 75 73 65 20 6a 51 75 65 72 79 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 22 29 2c 65 28 22 33 2e 31 2e 31 22 29 26 26 63 28 73 2c 22 74 72 69 6d 22 2c 66 75 6e 63 74 69 Data Ascii: rt"),r(s.expr,"filters",s.expr.pseudos,"expr-pre-pseudos","jQuery.expr.filters is deprecated; use jQuery.expr.pseudos"),r(s.expr,":",s.expr.pseudos,"expr-pre-pseudos","jQuery.expr[':'] is deprecated; use jQuery.expr.pseudos"),e("3.1.1")&&c(s,"trim",functi
2024-04-16 15:05:14 UTC	1369	IN	Data Raw: 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 65 2e 70 72 6f 6d 69 73 65 26 26 28 63 28 65 2c 22 73 75 63 63 65 73 73 22 2c 65 2e 64 6f 6e 65 2c 22 6a 71 58 48 52 2d 6d 65 74 68 6f 64 73 22 2c 22 6a 51 58 48 52 2e 73 75 63 63 65 73 73 20 69 73 20 64 65 70 72 65 63 61 74 65 64 20 61 6e 64 20 72 65 6d 6f 76 65 64 22 29 2c 63 28 65 2c 22 65 72 72 6f 72 22 2c 65 2e 66 61 69 6c 2c 22 6a 71 58 48 52 2d 6d 65 74 68 6f 64 73 22 2c 22 6a 51 58 48 52 2e 65 72 72 6f 72 20 69 73 20 64 65 70 72 65 63 61 74 65 64 20 61 6e 64 20 72 65 6d 6f 76 65 64 22 29 2c 63 28 65 2c 22 63 6f 6d 70 6c 65 74 65 22 2c 65 2e 61 6c 77 61 79 73 2c 22 6a 71 58 48 52 2d 6d 65 74 68 6f 64 73 22 2c 22 6a 51 58 48 52 2e 63 6f 6d 70 6c 65 74 65 20 69 73 20 64 Data Ascii: ply(this,arguments);return e.promise&&(c(e,"success",e.done,"jqXHR-methods","jQXHR.success is deprecated and removed"),c(e,"error",e.fail,"jqXHR-methods","jQXHR.error is deprecated and removed"),c(e,"complete",e.always,"jqXHR-methods","jQXHR.complete is d
2024-04-16 15:05:14 UTC	1369	IN	Data Raw: 5f 5f 22 29 7c 7c 22 22 29 7d 29 29 7d 2c 22 74 6f 67 67 6c 65 43 6c 61 73 73 2d 62 6f 6f 6c 22 29 3b 76 61 72 20 51 2c 41 2c 52 3d 21 31 2c 43 3d 2f 5e 5b 61 2d 7a 5d 2f 2c 4e 3d 2f 5e 28 3f 3a 42 6f 72 64 65 72 28 3f 3a 54 6f 70 7c 52 69 67 68 74 7c 42 6f 74 74 6f 6d 7c 4c 65 66 74 29 3f 28 3f 3a 57 69 64 74 68 7c 29 7c 28 3f 3a 4d 61 72 67 69 6e 7c 50 61 64 64 69 6e 67 29 3f 28 3f 3a 54 6f 70 7c 52 69 67 68 74 7c 42 6f 74 74 6f 6d 7c 4c 65 66 74 29 3f 7c 28 3f 3a 4d 69 6e 7c 4d 61 78 29 3f 28 3f 3a 57 69 64 74 68 7c 48 65 69 67 68 74 29 29 24 2f 3b 73 2e 73 77 61 70 26 26 73 2e 65 61 63 68 28 5b 22 68 65 69 67 68 74 22 2c 22 77 69 64 74 68 22 2c 22 72 65 6c 69 61 62 6c 65 4d 61 72 67 69 6e 52 69 67 68 74 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 Data Ascii: __")\|\|"")}))},"toggleClass-bool");var Q,A,R=!1,C=/^[a-z]/,N=/^(?:Border(?:Top\|Right\|Bottom\|Left)?(?:Width\|)\|(?:Margin\|Padding)?(?:Top\|Right\|Bottom\|Left)?\|(?:Min\|Max)?(?:Width\|Height))$/;s.swap&&s.each(["height","width","reliableMarginRight"],function(e,t)
2024-04-16 15:05:14 UTC	1369	IN	Data Raw: 69 28 73 2e 66 6e 2c 22 63 73 73 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 2c 6e 2c 6f 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 3f 28 73 2e 65 61 63 68 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 73 2e 66 6e 2e 63 73 73 2e 63 61 6c 6c 28 6f 2c 65 2c 74 29 7d 29 2c 74 68 69 73 29 3a 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 72 3d 78 28 65 29 2c 6e 3d 72 2c 43 2e 74 65 73 74 28 6e 29 26 26 4e 2e 74 65 73 74 28 6e 5b 30 5d 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2b 6e 2e 73 6c 69 63 65 28 31 29 29 7c 7c 41 5b 72 5d 7c 7c 75 28 22 63 73 73 2d 6e 75 6d 62 65 72 22 2c 27 4e 75 6d 62 65 72 2d Data Ascii: i(s.fn,"css",function(e,t){var r,n,o=this;return e&&"object"==typeof e&&!Array.isArray(e)?(s.each(e,function(e,t){s.fn.css.call(o,e,t)}),this):("number"==typeof t&&(r=x(e),n=r,C.test(n)&&N.test(n[0].toUpperCase()+n.slice(1))\|\|A[r]\|\|u("css-number",'Number-
2024-04-16 15:05:14 UTC	1369	IN	Data Raw: 22 2c 50 29 2c 73 2e 6d 69 67 72 61 74 65 49 73 50 61 74 63 68 45 6e 61 62 6c 65 64 28 22 66 78 2d 69 6e 74 65 72 76 61 6c 22 29 26 26 76 6f 69 64 20 30 3d 3d 3d 53 3f 31 33 3a 53 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 75 28 22 66 78 2d 69 6e 74 65 72 76 61 6c 22 2c 50 29 2c 53 3d 65 7d 7d 29 29 3b 76 61 72 20 4d 3d 73 2e 66 6e 2e 6c 6f 61 64 2c 71 3d 73 2e 65 76 65 6e 74 2e 61 64 64 2c 4f 3d 73 2e 65 76 65 6e 74 2e 66 69 78 3b 73 2e 65 76 65 6e 74 2e 70 72 6f 70 73 3d 5b 5d 2c 73 2e 65 76 65 6e 74 2e 66 69 78 48 6f 6f 6b 73 3d 7b 7d 2c 72 28 73 2e 65 76 65 6e 74 2e 70 72 6f 70 73 2c 22 63 6f 6e 63 61 74 22 2c 73 2e 65 76 65 6e 74 2e 70 72 6f 70 73 2e 63 6f 6e 63 61 74 2c 22 65 76 65 6e 74 2d 6f 6c 64 2d 70 61 74 63 68 22 2c 22 6a 51 75 65 Data Ascii: ",P),s.migrateIsPatchEnabled("fx-interval")&&void 0===S?13:S},set:function(e){u("fx-interval",P),S=e}}));var M=s.fn.load,q=s.event.add,O=s.event.fix;s.event.props=[],s.event.fixHooks={},r(s.event.props,"concat",s.event.props.concat,"event-old-patch","jQue
2024-04-16 15:05:15 UTC	1369	IN	Data Raw: 6e 20 66 6f 63 75 73 6f 75 74 20 72 65 73 69 7a 65 20 73 63 72 6f 6c 6c 20 63 6c 69 63 6b 20 64 62 6c 63 6c 69 63 6b 20 6d 6f 75 73 65 64 6f 77 6e 20 6d 6f 75 73 65 75 70 20 6d 6f 75 73 65 6d 6f 76 65 20 6d 6f 75 73 65 6f 76 65 72 20 6d 6f 75 73 65 6f 75 74 20 6d 6f 75 73 65 65 6e 74 65 72 20 6d 6f 75 73 65 6c 65 61 76 65 20 63 68 61 6e 67 65 20 73 65 6c 65 63 74 20 73 75 62 6d 69 74 20 6b 65 79 64 6f 77 6e 20 6b 65 79 70 72 65 73 73 20 6b 65 79 75 70 20 63 6f 6e 74 65 78 74 6d 65 6e 75 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 63 28 73 2e 66 6e 2c 72 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 30 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 74 68 69 73 2e 6f 6e 28 72 2c 6e 75 6c 6c 2c Data Ascii: n focusout resize scroll click dblclick mousedown mouseup mousemove mouseover mouseout mouseenter mouseleave change select submit keydown keypress keyup contextmenu".split(" "),function(e,r){c(s.fn,r,function(e,t){return 0<arguments.length?this.on(r,null,
2024-04-16 15:05:15 UTC	1369	IN	Data Raw: 2e 55 4e 53 41 46 45 5f 72 65 73 74 6f 72 65 4c 65 67 61 63 79 48 74 6d 6c 50 72 65 66 69 6c 74 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 73 2e 6d 69 67 72 61 74 65 45 6e 61 62 6c 65 50 61 74 63 68 65 73 28 22 73 65 6c 66 2d 63 6c 6f 73 65 64 2d 74 61 67 73 22 29 7d 2c 69 28 73 2c 22 68 74 6d 6c 50 72 65 66 69 6c 74 65 72 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 72 3b 72 65 74 75 72 6e 28 72 3d 28 74 3d 65 29 2e 72 65 70 6c 61 63 65 28 46 2c 22 3c 24 31 3e 3c 2f 24 32 3e 22 29 29 21 3d 3d 74 26 26 54 28 74 29 21 3d 3d 54 28 72 29 26 26 75 28 22 73 65 6c 66 2d 63 6c 6f 73 65 64 2d 74 61 67 73 22 2c 22 48 54 4d 4c 20 74 61 67 73 20 6d 75 73 74 20 62 65 20 70 72 6f 70 65 72 6c 79 20 6e 65 73 74 65 64 20 61 6e 64 20 63 6c 6f 73 65 64 3a 20 Data Ascii: .UNSAFE_restoreLegacyHtmlPrefilter=function(){s.migrateEnablePatches("self-closed-tags")},i(s,"htmlPrefilter",function(e){var t,r;return(r=(t=e).replace(F,"<$1></$2>"))!==t&&T(t)!==T(r)&&u("self-closed-tags","HTML tags must be properly nested and closed:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.11	49739	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:12 UTC	663	OUT	GET /wp-content/plugins/revslider6620n-1/public/assets/fonts/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://niceindiatravel.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:16 UTC	580	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:15 GMT Content-Type: font/woff2 Content-Length: 77160 Connection: close cache-control: public, max-age=604800 expires: Tue, 23 Apr 2024 15:05:14 GMT last-modified: Wed, 20 Dec 2023 12:52:54 GMT etag: "12d68-6582e3a6-b5118e6f72aeede0;;;" platform: hostinger content-security-policy: upgrade-insecure-requests x-turbo-charged-by: LiteSpeed alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: d0d9da25767da8d1fd7e161f0a887b3d-asc-edge4 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 2.144 Accept-Ranges: bytes
2024-04-16 15:05:16 UTC	789	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 2d 68 00 0d 00 00 00 02 86 98 00 01 2d 0e 00 04 01 cb 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 20 06 60 00 85 72 11 08 0a 89 99 28 87 b6 58 01 36 02 24 03 95 70 0b 96 10 00 04 20 05 89 06 07 b4 75 5b 52 09 72 47 61 f7 91 84 2a ba 0d 81 27 ed 3d eb 3a b5 1a 26 d3 cd 3d 72 b7 2a 0a 02 19 e5 1a f1 f6 5d 04 74 07 dc 45 aa 6e a3 b2 ff ff ff ff e4 a4 31 46 db 0e dc 40 e0 d5 f4 fb 7c ad 8a 14 08 66 93 6d 92 60 9b 24 d8 91 a1 40 64 5b 42 51 11 24 28 5b 55 3c 2b 28 ad b8 40 50 d0 35 1e e4 60 81 b0 0e da 3e f6 50 10 1a 3b e1 28 91 d1 31 b3 fd 6c db fe 68 d4 a8 a2 c2 29 9f dc 59 79 94 f2 4a 69 e9 eb 17 ad 85 ce 7c 25 db 81 b7 5e ac 14 47 82 a2 33 b8 12 6e 9e 95 e8 ba da 95 dc 0a c4 cd 90 44 8a 9e Data Ascii: wOF2-h-?FFTM `r(X6$p u[RrGa'=:&=r]tEn1F@\|fm`$@d[BQ$([U<+(@P5`>P;(1lh)YyJi\|%^G3nD
2024-04-16 15:05:16 UTC	1369	IN	Data Raw: 25 1e 10 b6 81 32 7b f4 87 de a9 f5 92 1d 68 25 bb 29 38 c9 11 f6 00 f8 f1 01 0f 18 0a 49 4c 4b 90 36 76 f4 23 ed fb b3 ee fe 06 2c 3b d0 a6 36 87 a0 4e 9a 32 ce 68 76 b7 0f 0e 08 fe ef 7f cd fe eb 0c 4f 4f 91 a7 74 23 16 85 06 e2 78 54 89 ef aa 42 66 02 9d 9e 84 71 5e 16 23 9c ae 9f 96 3f 7b fe 35 62 8a 49 e2 e0 25 2d 57 5a 90 eb b9 62 a4 41 a3 13 0c 5e e4 31 cd d9 6e 35 19 f9 ae e9 8a d7 a6 4e 51 9d 59 27 fa e6 dd cd 12 96 04 fc 91 53 04 dc 18 1f a6 21 74 22 20 06 60 62 33 e9 f7 25 93 07 f4 ef 33 35 bb 02 14 d1 66 76 3b ab 9d d5 ce 6c ce ac ee 39 9c 3a 6a 67 66 3f 67 72 9b f5 70 ff 78 9f 20 80 0f 7c 12 fc 20 24 08 20 65 12 94 1c 12 94 5a 14 28 c5 14 24 77 28 5a 72 53 90 e8 76 2b 9b 5a d9 1c cf d6 71 f6 4d a2 ec 1e 9b ee cd ea dd 99 6d 3f 26 73 5b f6 e5 Data Ascii: %2{h%)8ILK6v#,;6N2hvOOt#xTBfq^#?{5bI%-WZbA^1n5NQY'S!t" `b3%35fv;l9:jgf?grpx \| $ eZ($w(ZrSv+ZqMm?&s[
2024-04-16 15:05:16 UTC	1369	IN	Data Raw: 49 8a d0 c1 2b bb f8 2e f3 4c 1a d8 43 02 78 b1 eb ee 1e 1e be fa ea 86 b1 77 09 da cd 56 db 82 80 81 ba a8 e1 a4 c0 c3 f9 45 78 66 7e 48 60 bd e9 30 1f bc 21 64 94 e8 40 51 7b 4f 68 31 89 17 17 b1 48 c1 b6 46 c3 ab d5 7a 73 1a 8d 37 f3 dd 89 b6 b3 c6 9c 74 0f 72 76 cc e8 a9 d2 6b 9d bb 86 68 65 53 33 b7 db 87 76 99 39 84 71 7c ab 4f 82 ef 97 4b 29 95 55 5c f2 96 41 d2 25 a3 b9 bb 02 c4 6f 1e 7b 6c 3c 86 db 4b b8 ff ba 9d cd 8e a2 a4 8e 69 b3 8f f1 48 eb 47 80 49 85 7a 9d 3d 36 9a 57 57 6f 30 eb d9 0b 7c 15 de 25 41 f7 1a 6a 64 44 29 21 0d 80 a9 70 77 ae c8 ee 5f 82 b3 eb 3b b8 f1 a6 db 63 97 44 23 e9 ff cb 81 4d 90 c0 de 4e 7a 9c f2 05 b7 04 70 b0 5e 8f 43 44 78 de c2 78 6a 29 84 35 4f c8 39 fb 0d a1 60 d1 d2 45 44 58 ee 78 f1 8d 20 dd 92 47 55 c8 c0 ed Data Ascii: I+.LCxwVExf~H`0!d@Q{Oh1HFzs7trvkheS3v9q\|OK)U\A%o{l<KiHGIz=6WWo0\|%AjdD)!pw_;cD#MNzp^CDxxj)5O9`EDXx GU
2024-04-16 15:05:16 UTC	1369	IN	Data Raw: 0e b6 7d 4e ab 2f 62 f5 f6 1a 8e 4e 7b 84 49 99 b3 7c 62 5f 72 c4 65 f8 9d 5f 70 53 69 83 e3 ca 14 0f 3e 12 27 dc 77 ac 35 fc db fa 52 46 2c d1 87 88 25 1e 53 59 96 84 bb c6 57 68 a3 36 4c 5f 69 ec 83 a3 3d 9a 9b be 69 31 f1 33 fe 59 49 37 4e b8 43 70 8d 49 c9 f0 c4 94 be c3 12 28 0f a8 72 af be bd 30 ab dd 7b 6a 89 19 f7 ba 85 72 8b 4b bc 9e 99 e5 d0 a2 6f 29 6c d9 c4 f4 87 33 6e 61 bf 54 31 7f 5c a7 c3 49 19 45 28 e9 6d bd f7 b2 bd df 83 9b 93 c2 44 f4 6c fa ac 7f 65 b3 b3 c7 e6 24 c3 85 df 77 58 9e 88 cc 55 ac fc 28 40 95 84 ae f7 4d f5 61 22 6e ac 0e 2c e4 2a 76 47 b3 1d 96 1c 89 cc a8 13 78 b9 8a ae 3e 95 47 d9 0c 53 82 11 83 80 ee bd 67 c0 cc 89 22 94 51 cb 76 a4 62 14 30 2a 7a db c8 50 45 f4 79 c1 c9 89 8c 3f 37 af 24 13 0b c1 8e d8 f0 25 9e 1d 89 Data Ascii: }N/bN{I\|b_re_pSi>'w5RF,%SYWh6L_i=i13YI7NCpI(r0{jrKo)l3naT1\IE(mDle$wXU(@Ma"n,vGx>GSg"Qvb0zPEy?7$%
2024-04-16 15:05:16 UTC	1369	IN	Data Raw: 91 9e 0f 94 47 5d 8a 79 8f df 83 eb fc 87 fb 23 85 87 1f 37 a9 8f 62 cd e3 24 93 74 c7 1c aa 52 db 24 20 06 be 98 e9 7f 5d e3 b4 61 37 1b cd 46 a3 d1 ae af b2 8f 2c 6e 21 72 cb df 49 7c 32 c0 10 bc e3 b8 38 ea 92 78 ff 36 e7 99 67 53 a6 68 b1 09 b2 93 52 5e 5e 93 44 2e f8 78 8a 4d d1 4d 53 3f e6 bc 9e 27 47 fa 23 fc 7e e1 2b 9d ac ba c4 ec 08 76 34 8a 64 21 46 79 54 dc 39 f1 2d b2 66 56 61 37 68 fb 42 ae cb 17 34 fe ab 9f 96 e8 17 2c a9 32 bc c6 89 c4 fd 15 26 76 54 48 4d 71 70 f0 34 14 3f 02 52 5c b4 bd b2 aa be 58 61 3c 91 d8 34 10 ee 96 1c 40 4d 69 ac 48 d4 44 5f be e8 09 9b 45 11 67 aa cf 52 89 79 b1 4d 9a d3 d1 6c 54 fe d8 a0 4a dd ae 0d ab 96 79 0f 63 ca ce 22 99 48 4a f4 2c 20 36 8a 75 f6 2f da b4 9b e2 0e ad 9d 04 c0 0f 8b 94 e9 89 79 8e 00 97 56 Data Ascii: G]y#7b$tR$ ]a7F,n!rI\|28x6gShR^^D.xMMS?'G#~+v4d!FyT9-fVa7hB4,2&vTHMqp4?R\Xa<4@MiHD_EgRyMlTJyc"HJ, 6u/yV
2024-04-16 15:05:16 UTC	1369	IN	Data Raw: 77 a0 df 57 22 06 05 cf d3 3f 20 9f 27 b9 4f 25 12 8f 61 01 32 19 4e ff 39 1f 8b ad 2c b9 df 9f a1 b6 0f ea 21 9b c5 e2 7f 2e d3 79 7f 97 5a f9 af 25 f2 34 f6 55 c4 f5 5e fa cb 75 a0 cf 86 e2 67 a0 29 02 4d 25 96 00 e7 43 f5 ce 1a 56 e9 a9 07 9a 9e ca 4d 21 7a d4 26 90 9d bc ed d9 7c 16 44 c2 2c a6 69 f5 7e 52 2c 25 b1 fa 7c 4f 22 be fb d9 0c e4 cf 1d 68 5c 33 2b 7f a3 f2 fc 61 ab bd 1a 9c e2 e7 04 80 83 9e 05 88 d0 69 38 93 82 1e 5c 14 24 03 21 31 99 4c 8a e5 61 36 73 b6 0d 7a 12 2b 4d c2 52 ad 62 e7 d2 17 5f 0a 6b e0 b5 76 cb 6a c4 dd e9 8d 1b 55 f8 af e8 a3 92 2d 82 c3 6a 58 fa 47 74 1f 95 0b 98 bf c0 a6 95 62 98 7e 88 cb 9a c0 93 1b ea 96 ba 77 74 d1 f9 ad 8a cd 9d a7 53 12 6b 50 d6 32 ff 8c a0 28 3d 63 76 74 f3 a2 22 9e 5b 33 99 c9 17 26 b6 ad 68 ea Data Ascii: wW"? 'O%a2N9,!.yZ%4U^ug)M%CVM!z&\|D,i~R,%\|O"h\3+ai8\$!1La6sz+MRb_kvjU-jXGtb~wtSkP2(=cvt"[3&h
2024-04-16 15:05:16 UTC	1369	IN	Data Raw: 8d fc 61 91 fc 4a 7f 3f ae 66 44 3f 3d 97 ef 91 89 64 b0 af 28 4b 44 e4 b4 b1 3a e2 9c 44 1e 93 2f 5b e5 23 a2 7f f5 24 41 0c c5 fb 23 4b 48 2e 11 3a 95 9e 78 3f 25 e6 db 56 f4 72 b7 15 40 01 5b 42 24 cc 7d 9e 63 f1 6f 18 e1 93 db 53 36 60 4c 50 66 4d 26 c9 94 80 9b 41 3c 3a 8a 07 ae 76 90 9e c3 9a 0a 51 d2 7e 50 df 1b 10 77 a1 92 ef 5b eb ed 2b 08 f7 9e 14 ad 91 86 8f fb 01 60 2b 6a a3 20 56 df c7 2b 8f 9e 52 2a e3 01 b6 b5 75 a3 6c 7f 21 14 0e a3 fe ea 7c fe 2b 27 af 4b 59 fe 36 9b 36 b6 cd 5f 06 eb 96 75 64 d2 7d 5f 03 87 ac dc 5b ff 79 75 db 98 95 6a 8e a5 00 b0 bb 6f 24 c6 e3 59 3d a0 79 6a 52 9c 11 69 29 8b 16 99 06 62 90 d4 8b 4c 61 44 28 bd 58 fd 55 ca 77 49 08 ab da bb 5a 80 16 24 f4 37 02 da bb ee 39 1a b9 fa 26 7f 99 d6 34 5a c3 dd d6 27 8c 93 Data Ascii: aJ?fD?=d(KD:D/[#$A#KH.:x?%Vr@[B$}coS6`LPfM&A<:vQ~Pw[+`+j V+R*ul!\|+'KY66_ud}_[yujo$Y=yjRi)bLaD(XUwIZ$79&4Z'
2024-04-16 15:05:16 UTC	1369	IN	Data Raw: cf 22 91 fe 2e 63 d6 82 09 56 bb f1 7d 65 e7 4a df da eb 3a 34 32 71 60 47 cc 4f f4 a6 9b 2d 13 14 95 f2 9c af c1 e3 2d 42 94 8b ee 99 4a 97 46 b8 e9 59 c3 db be a2 33 7c ff c5 7c 29 c9 e4 0e 8a e0 f3 06 ac ba ea f6 49 47 ee cc c1 61 be e9 0f 9e a2 08 2b ef 2a bd ef 74 74 50 11 62 ef f6 82 ef 41 dd 1d 18 44 6f 3f 04 43 10 8e a1 67 b4 74 f3 b4 f5 d0 3b f2 b8 c4 49 cb 5d 47 1d 85 98 32 52 45 3c 5e 95 6d 4b 33 94 ac f7 14 a7 2b e1 13 ac 3b df 0d 9a 5b 8b aa 16 cb 33 cb da f9 8f 19 5b 31 b0 bc c1 bd 79 84 76 b8 85 8f 0a 17 23 7f 0f aa dc 70 df 3c 6a d4 69 43 d3 61 66 e6 7e 5c e7 1b 47 a4 03 43 a5 34 1b ee c2 de 64 75 62 74 20 42 a0 4b 97 c2 f5 d0 b1 51 6d bd 13 3d ce 61 9b a6 9b 54 71 3c ad f6 5e 7a e7 d8 a1 f1 af 28 cb de b9 96 47 7e 51 db bc 5a 6f 4f 18 f8 Data Ascii: ".cV}eJ:42q`GO--BJFY3\|\|)IGa+*ttPbADo?Cgt;I]G2RE<^mK3+;[3[1yv#p<jiCaf~\GC4dubt BKQm=aTq<^z(G~QZoO
2024-04-16 15:05:16 UTC	1369	IN	Data Raw: 7a 48 46 7a 30 11 10 f7 5b 0f 44 23 e3 90 41 8c 19 2e f6 e0 ba 25 27 b6 80 77 ad 3d 32 0f 33 1a a4 c9 b8 b7 9d 5a 27 f2 a1 48 78 86 93 aa bb ee 9b 26 07 49 9d 92 34 d0 31 49 ef 9d 4a 69 a4 ad bf 9b 65 e8 7a 94 da 1b cc d3 cd 8f 97 fd 6f e2 d9 b4 9b 8f 7b 83 a9 81 fe b0 69 e7 c3 9f 38 1d 09 30 5b cb 4b b8 2f ee 03 1f 6e 2a ed a8 61 35 f3 11 d2 ed e1 b0 89 10 ea 2c 63 02 90 98 ac e8 fb 98 18 b1 12 d7 2b 9a d5 41 be b7 07 42 44 72 6c 44 6f b8 9f 11 f1 22 24 1f 54 68 da 54 17 b5 99 8a a2 39 e6 ae 24 c6 e5 b2 a3 e9 fe 27 f7 f2 f6 bc f8 e1 10 30 56 88 27 7c e3 22 cf 05 92 98 e2 eb 80 f4 a1 1c 0a c0 91 d7 53 96 41 0f 4a 21 94 d5 8f df 91 d2 36 c6 46 36 52 5c 8a 36 14 5c bf bb 39 b4 08 17 2d f8 5f 3d a6 c1 51 b3 22 39 49 57 2e 5c 2e 0e 7a 6d 6b 7a cb 46 cd b5 55 Data Ascii: zHFz0[D#A.%'w=23Z'Hx&I41IJiezo{i80[K/n*a5,c+ABDrlDo"$ThT9$'0V'\|"SAJ!6F6R\6\9-_=Q"9IW.\.zmkzFU
2024-04-16 15:05:16 UTC	1369	IN	Data Raw: ac f9 69 ce 2d 5d b9 60 e6 05 ce d6 e9 f9 1b cc 37 84 5d 52 e6 0f 0d 21 7a 73 b2 4e fb 96 74 a3 04 8a 91 26 be c5 cc 89 cc 84 6b 29 bc ce 53 4c a5 cd f4 9b 0f 84 cc b9 ae 79 11 37 82 aa 24 b4 b0 cf a5 44 4a ae 4e 1f ca 64 e5 ec 22 89 d4 f9 7f 39 1c e9 0a e6 33 31 20 49 cd 17 97 5a 28 5e 28 0d 6c 77 36 0d 2f f5 40 8e 59 8a 42 8e 5e de d8 d9 7d b0 4f 54 7e 39 63 be 63 c2 f2 8e 5d f9 9a 95 7b e2 29 cb dd 7d ee b9 44 38 ed 24 13 7b 13 fb f0 de 13 c7 79 63 96 2c 12 ca a4 80 7b f6 74 41 ba 57 33 7a 10 48 49 ba ab 6d c3 f0 44 c6 34 dc a4 55 04 fd da 54 33 64 a6 0f 49 d2 0e 9d f3 44 92 29 0d 12 8c e0 49 db ac 8d 2e 01 64 eb 7e e9 5b 0c 2d fb 4b 96 5e 32 80 5a 63 0c 93 da 0a dd 38 fd 83 75 be 2c 59 e9 b4 5e 5c d9 5f a6 ac d4 81 c1 5f f8 2b da 17 63 4a a5 da 1c 24 Data Ascii: i-]`7]R!zsNt&k)SLy7$DJNd"931 IZ(^(lw6/@YB^}OT~9cc]{)}D8${yc,{tAW3zHImD4UT3dID)I.d~[-K^2Zc8u,Y^\__+cJ$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.11	49740	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:12 UTC	631	OUT	GET /wp-content/uploads/2021/02/nit-logo-new-2021.jpg HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:15 UTC	392	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:15 GMT Content-Type: image/webp Content-Length: 38090 Connection: close Cache-Control: public, max-age=31536000 X-Hcdn-Image-Optimizer: f:webp q:85 w:1600 alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 67f969982b37c6fda1b075d983c2fc45-asc-edge6 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 2.555 Accept-Ranges: bytes
2024-04-16 15:05:15 UTC	977	IN	Data Raw: 52 49 46 46 c2 94 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 0c 00 00 00 3f 06 00 93 01 00 56 50 38 20 fe 92 00 00 10 45 02 9d 01 2a 40 06 94 01 3e 51 26 91 45 a3 a2 22 28 a4 92 aa 71 10 0a 09 4d df 77 b3 4a f6 19 fa fa 40 e7 6e fe a9 ed f0 0d ff fe f8 38 7f d7 7f 7f fd a8 fd ff f2 af 8b fc 99 f7 ff ee bf e4 3f db 7f 73 fd dc f9 ea b3 bf 6e fe e5 fa 8f fb 87 bb ff f7 ff 6e de 97 76 8f fc 8f f2 bf 8e 7f 0b 1e 4f fa 6f fb 7f ee 5f e3 bf 6d 7e 72 7f 7b ff 31 fe 5f fb 6f ec 37 d2 cf ea 7f ec ff e5 7e 7c fd 02 fe a4 7f c7 ff 1b fe 6b f6 cb ea cf fb ff da af 73 bf bc de a1 7f b5 7f 7b fd 98 f7 72 ff 65 fb 21 ee c3 fa d7 fa 7f fd bf e6 bf d4 fc 80 7f 3d ff 05 ff cb f3 ff ff ff d6 7f fb cf ff 5e e8 bf e9 bf e5 ff ff ff b5 f0 0d fc ef fd 57 ff 0f 5c df db ff f7 9f Data Ascii: RIFFWEBPVP8X?VP8 E*@>Q&E"(qMwJ@n8?snnvOo_m~r{1_o7~\|ks{re!=^W\
2024-04-16 15:05:15 UTC	1369	IN	Data Raw: 3b 6e 86 e0 4f 90 38 8c c5 18 4a ef 7f db 41 c6 62 00 13 74 c6 87 1d b6 95 14 78 7a 9b 96 d8 cf a3 a6 dc 1a 8a 78 fc c8 d4 b8 20 04 e6 af e6 80 b8 ef 96 9d be 05 35 d2 36 54 8f 54 2b 61 d3 68 cc 49 19 f4 e9 fa f8 8f 5a eb 53 e0 53 5d 23 65 4a 29 b1 dc 82 1d f4 e8 26 a1 ba fa c5 d3 67 cb 26 7a 30 07 34 76 ae 31 bb 8c ba d1 d2 6d 73 6d 10 33 03 3a 6e ff 95 3e 05 35 d2 36 54 a2 9b 2a 50 c9 4a d8 25 2a f7 98 e7 a7 95 54 d1 4b 48 40 9e c9 9c 37 65 fb 24 75 2b c6 1c e9 66 72 6e 73 19 14 09 1d 95 24 0a 07 c1 43 d4 dc 3c 55 e9 bd 42 bf b8 45 99 e1 3a b8 a1 6e 3e 75 e6 c1 7f bd 53 ca f5 b7 1b 8c f9 b2 ca d3 eb 1f 94 3d fa 37 ab ef 32 7c d7 69 13 d9 c7 87 34 7d a7 37 2b d0 c2 79 f8 3c 3f 45 56 1d eb da cb d3 45 57 03 61 e2 d5 e3 22 5a b9 57 3f e4 ee 91 71 b7 11 6c Data Ascii: ;nO8JAbtxzx 56TT+ahIZSS]#eJ)&g&z04v1msm3:n>56TPJ%TKH@7e$u+frns$C<UBE:n>uS=72\|i4}7+y<?EVEWa"ZW?ql
2024-04-16 15:05:15 UTC	1369	IN	Data Raw: 48 d0 03 b1 f8 76 4e 8e 4a b3 ab ca b8 1c 3a 8b 87 d2 47 4b 3e 24 6c f8 24 3b ca bf a3 e4 83 bf 68 ea 08 da 24 f4 bd 13 95 6b 44 9e a3 7a 21 72 48 a8 70 53 12 79 28 21 6b 5d 92 c6 a6 17 d7 7a 60 94 9f d4 84 e8 8e a9 75 86 6e 12 22 52 1f dd f4 cb 68 f1 cd 73 11 6d 28 37 b3 88 c8 d0 82 5b 80 e2 aa e3 15 d4 d3 a0 a8 7d 02 69 d1 07 13 e5 d2 a5 b5 c6 25 89 a7 eb 5b 95 c1 d1 f6 31 de 56 da 65 aa 76 ea 9a 21 b4 e4 6b 8b a1 9f 04 84 bd 95 6d 23 d9 8d 32 ed 5a 48 1a 4e a3 f2 30 fd 11 49 61 c7 8e b4 0c bf af 77 d9 0f ab 7f 16 3d 57 0e ed 77 05 00 82 fe fe bf ca 75 5b 07 b0 f7 31 00 eb 04 41 8b 3c 02 12 a2 68 57 24 3b 38 45 4d e9 25 1f fc 26 5b 78 10 bd 9d 5e 1d 47 d6 9c 4e 0e c0 6c b6 8f b7 12 1d 6c c3 4f ca 40 6e c6 ab cc e4 14 96 92 36 f3 a4 e6 57 b5 be 57 92 20 Data Ascii: HvNJ:GK>$l$;h$kDz!rHpSy(!k]z`un"Rhsm(7[}i%[1Vev!km#2ZHN0Iaw=Wwu[1A<hW$;8EM%&[x^GNllO@n6WW
2024-04-16 15:05:15 UTC	1369	IN	Data Raw: a1 45 8a ac 39 da e3 8f ac 93 00 77 bc 17 dd 5c 3c 6d 82 79 c4 c7 94 53 5d a7 04 fb 22 f2 ca 44 06 04 68 04 fa 32 c0 89 3e bc f2 c5 7d e6 35 31 d6 a8 55 2e 78 9d 16 6f 32 12 46 cc b9 59 62 5e 4f 7a 62 05 9d 2a ec fd 65 92 3c d1 b6 ed fb 17 3d 25 31 7c 7b 5e a7 d0 5c 24 0c 95 4a 85 c4 4a 87 11 ef b1 41 8f 14 89 a5 14 8a 0c f5 ba 53 ea 6c d8 f6 f9 46 54 4f e5 ae 8a 41 4f db 43 81 b2 95 0c a7 ad 00 cc 90 81 5a d9 11 7b bb 49 51 8b e5 e8 18 21 dd 19 0c 92 56 7b e3 dd 14 5b 6f 8b 05 79 97 73 40 9c ca 4d 82 52 90 a7 67 41 93 14 b7 b4 6d 85 8e 43 4c 45 31 84 85 ea 41 13 e5 92 52 3e b6 59 09 c6 ea 7c ba 88 0d 8c 08 38 ed 9a c1 95 56 4c e6 cb ce bf d3 5d 9f 18 78 bc ed 21 f1 28 08 b3 3b 0c d9 da 11 ff dc 9e 1e 36 4d 53 77 eb f1 a1 52 4b 27 96 75 43 b6 0f 37 5d 0d Data Ascii: E9w\<myS]"Dh2>}51U.xo2FYb^Ozb*e<=%1\|{^\$JJASlFTOAOCZ{IQ!V{[oys@MRgAmCLE1AR>Y\|8VL]x!(;6MSwRK'uC7]
2024-04-16 15:05:15 UTC	1369	IN	Data Raw: 2d f9 5a 4d c5 0a 25 64 8a b0 cc cf 1d b0 e1 43 22 9a 83 17 41 77 1e 16 10 cc 59 35 24 bc 04 20 96 cf ca 56 93 4d 8e d7 20 ed 40 b0 f3 d2 98 64 a0 09 00 35 82 f7 6b 7c 99 84 24 8e 6e 8a c0 37 2a 56 79 7e 33 56 89 02 10 e6 48 34 81 61 59 cd d4 d1 ca a6 f0 32 8f 52 ff 23 61 17 42 3f 60 3e 30 e3 17 18 39 c7 c7 e2 00 00 00 00 00 00 00 00 00 03 73 f0 ac f3 8c d7 7b c8 be 87 0d 7f db fe 45 b2 f8 73 87 de 81 ab 95 5c 20 b6 3d ec 26 62 64 65 3a 56 ff 07 36 2b 1e a5 11 8f 27 19 0c c2 6a 16 e5 a9 ee 4c 14 fc c4 8d 0c 54 8c 10 8c 4a bf 7d 14 13 28 65 4f 85 d5 85 86 8b 97 83 26 02 71 e2 55 34 6c c5 a5 47 92 52 15 c5 cd 9b c3 d2 76 b7 ae 38 4f 7c 06 0f 28 c4 39 18 1f 9a b3 da 2a cd 14 63 2f 7d d1 06 7a 90 3a d8 ea 55 98 5e 7a 46 37 f3 26 47 5d b7 3b fb 88 4a c2 b6 f3 Data Ascii: -ZM%dC"AwY5$ VM @d5k\|$n7Vy~3VH4aY2R#aB?`>09s{Es\ =&bde:V6+'jLTJ}(eO&qU4lGRv8O\|(9c/}z:U^zF7&G];J
2024-04-16 15:05:15 UTC	1369	IN	Data Raw: 54 39 3a 10 8c bc 09 ea e5 7e cf 18 e6 51 7a 78 4c aa 69 f5 00 12 a7 b9 fe 92 85 cd e1 96 1f ee 80 50 8a 5d 2b 50 ed b6 8b 68 a1 c7 2c 45 1c cc ce ae 60 71 2a 47 ea 13 16 11 11 62 b9 ec 90 49 25 0d 1d c8 c6 8f 6c c9 c2 da f2 e8 ed ea 7d 18 c4 1e 49 6d e5 dc 7a 10 98 b3 d1 e9 fd a2 08 70 96 4c 07 98 84 0b 2d 4f 19 c4 01 ea 41 1c 1f 79 c9 d6 cf da 20 91 c4 7a 2b a4 06 e7 c0 1c 8a 0c 35 a2 e5 2b dc 8f 24 6c 04 9c 1a f9 99 f0 42 c8 81 1a 9f 7b ed e9 b3 b5 a9 a2 09 7e 3c 58 d0 90 90 f5 ad 8b cf 09 99 ae b2 23 e5 9d 10 42 ed f6 05 b1 02 1a 97 c8 54 96 9e 5b 0e bb c8 c9 2e cb de 6b 75 c4 f9 a8 13 ed 52 76 61 eb 2f 15 b4 28 b3 62 b5 49 4f ac 87 fd a8 82 1c 50 16 f2 51 00 f6 b2 b7 e0 4e 4a 62 6b 82 55 3c 9e 4b af c4 c7 3d 57 92 e6 11 42 fb de bc d1 1b 52 66 59 90 Data Ascii: T9:~QzxLiP]+Ph,E`q*GbI%l}ImzpL-OAy z+5+$lB{~<X#BT[.kuRva/(bIOPQNJbkU<K=WBRfY
2024-04-16 15:05:15 UTC	1369	IN	Data Raw: f1 8a 1a 85 2e 0d 99 aa 64 90 48 d3 07 26 48 1c ed c6 3f 01 da 47 f0 c3 39 d0 95 49 3a f0 f0 99 40 1f a0 76 39 76 29 61 e7 23 67 96 11 7d c1 66 ea 63 9b b7 7d 04 4c 8b 51 0a 96 6d 70 ce 14 40 f9 ce 4e 13 21 05 8c 00 2c 11 8b 7d e4 1c 95 7e b9 93 bd cd 52 8b 47 5c 3c 8e 69 97 c3 9b f3 b5 de b7 e6 04 6e 37 99 83 e4 5a 1f fa 1f 15 92 83 a6 ce b4 d9 e7 da a2 a6 f6 0b 93 22 b5 00 00 77 46 cf 20 dd 2b b9 db 21 3f fb 45 03 87 6f 0c 5d a6 9d 69 cb 16 b6 a4 d6 65 d3 ad f6 82 c6 ad b5 50 9e ca 58 3e 0b 9c d9 d2 aa 19 1a 4e 27 1a ed ac 0c 92 47 94 02 9b 5e 77 79 38 b3 28 7d 56 ac c4 cc 41 a3 7d 7f 88 60 7f 10 71 e0 d7 2c da 30 df e2 99 be 57 cf dc e9 bd ff 83 c1 f2 d0 9d 26 9f d2 a8 7a 3d 09 64 87 58 ee f5 ee e1 56 93 f7 7a 53 3e d5 b2 d0 fb f4 7d c9 e4 1d 88 12 91 Data Ascii: .dH&H?G9I:@v9v)a#g}fc}LQmp@N!,}~RG\<in7Z"wF +!?Eo]iePX>N'G^wy8(}VA}`q,0W&z=dXVzS>}
2024-04-16 15:05:16 UTC	1369	IN	Data Raw: 51 14 42 c3 6f 83 7a 7b 4e 20 6e e9 25 5a 32 c3 93 f5 38 94 3d 6e eb 64 3d f4 77 56 76 71 4a 8c 51 82 0a 7f be 10 d6 c3 df 9a 88 0a ce 51 42 ca 31 0c a2 5d 47 a3 10 a7 fa ec b4 24 3d 12 ef 9d d3 25 ec 5b 27 6b 45 6f a4 fc b7 a6 60 ea d8 75 75 bf 83 cc b9 16 ae 7e 64 76 ad 5e e0 05 41 45 a5 87 e8 09 f5 d7 7f 13 38 aa 3a 75 fe 3c 54 49 f6 77 84 9d 48 87 60 53 d8 41 18 8d 88 55 fd de b2 e5 57 58 2a 69 47 f6 46 b5 95 55 5e d5 2c ef 10 ea 49 61 ca f6 21 9c b6 c6 4e 10 a1 33 cf 8c 2f fa af 49 f2 1b 79 b3 e9 d7 3e a9 8b 75 24 54 08 5e ae fd 37 13 5c b9 fc bf 53 ed 59 65 ff ea 30 35 07 a8 2f 5f 5c 52 89 b7 51 f5 6a 33 0b 4d 99 35 7e 33 3e 5c 2c 3f 23 4f 4c 48 b0 62 54 54 2d a1 53 67 d8 6b 66 36 3d 56 eb f2 b8 a9 d5 9e e9 c6 07 e4 83 c8 4f 0e 60 82 73 40 54 f0 b5 Data Ascii: QBoz{N n%Z28=nd=wVvqJQQB1]G$=%['kEo`uu~dv^AE8:u<TIwH`SAUWX*iGFU^,Ia!N3/Iy>u$T^7\SYe05/_\RQj3M5~3>\,?#OLHbTT-Sgkf6=VO`s@T
2024-04-16 15:05:16 UTC	1369	IN	Data Raw: 47 8b 01 49 2d b6 6c f0 41 bd c8 cd 0b d0 91 d6 db be 21 4f 2d 52 17 dc c2 9e 56 9a a4 7d 7f 22 1e c0 67 a8 54 4a cf 37 e9 d0 29 3b ac 28 cf ba da aa ac 99 c2 18 2e 55 5f 03 23 3d a4 9f 79 7c b9 6b 0d fd 6f 1e 23 21 eb f4 9c 8f b9 84 8b 48 5b 26 1c 3a b6 66 ae bc 80 44 22 ea c9 c8 64 95 d5 a0 e2 b6 bd 48 e3 f3 72 e9 2c 8c 2b e6 4a f0 b0 8c dd 9a bc e0 79 68 02 21 8c c6 ed 43 39 25 a6 8a a6 4d 34 55 1e 53 21 ba de a6 46 d7 13 11 9f fb 7a d8 b5 36 d8 15 e9 fb 82 8f aa 9a d5 02 ec c3 9c 18 0d 92 88 70 3b c2 c2 f4 13 db d4 96 89 cc 08 1d 29 6c 44 cf 32 64 8a f4 ba cf a4 30 a4 be c4 29 2b 5d 55 ae 2b b5 bf c6 af d9 fb da 24 f2 66 98 0e 47 d6 71 15 d4 dd 32 57 70 ec 4c a6 b0 ec 81 08 7a 9a a2 43 6d 8d a6 5b ab e1 24 6c c0 8d d8 20 b1 54 f1 f1 ca 5b 09 56 24 c5 Data Ascii: GI-lA!O-RV}"gTJ7);(.U_#=y\|ko#!H[&:fD"dHr,+Jyh!C9%M4US!Fz6p;)lD2d0)+]U+$fGq2WpLzCm[$l T[V$
2024-04-16 15:05:16 UTC	1369	IN	Data Raw: d0 42 45 51 bc d9 e0 d1 7f a2 de 60 66 be 1d 16 9e 27 b8 20 88 cf bd 91 7d 13 d2 20 4a 54 da aa 51 4c 82 23 c1 52 8b d4 00 5d 86 79 cd 43 a7 e0 30 76 eb 84 f5 1a a2 8e 01 c2 e8 45 d3 73 e4 e3 be e9 76 5e 00 34 69 04 38 5f e0 be 72 ab 81 c6 29 70 24 7d 03 97 5e a5 c1 0a d0 d4 1e 62 77 1e d5 f4 89 a3 70 8f 1f 10 5a 6d 2e 1a 39 7e 78 48 9c 34 05 b8 df 3b 8f 32 05 ea 0e f9 5d b7 a6 fe 15 62 94 c4 d8 5a 54 10 47 29 d4 a7 1e 9e c6 44 11 0b bc e4 23 20 74 4a da 3c e1 1b cf 93 b2 0b bd 12 38 fe 16 11 a0 f5 32 22 de aa 7f 5e dc 35 4b cd 74 46 23 74 1f 30 37 eb d2 fc 95 cd b7 18 da af f9 88 55 cc 6a c8 36 90 46 5e 30 41 fb 42 83 6e be 07 7f 7c 76 0c 8d 00 0f fc 85 b0 9d fa 68 5d bc 08 e9 52 6b 82 57 eb d9 8c d0 71 00 d5 f1 60 e9 50 3a 69 2b 51 57 ab 33 4d aa 4b 09 Data Ascii: BEQ`f' } JTQL#R]yC0vEsv^4i8_r)p$}^bwpZm.9~xH4;2]bZTG)D# tJ<82"^5KtF#t07Uj6F^0ABn\|vh]RkWq`P:i+QW3MK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.11	49742	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:14 UTC	649	OUT	GET /wp-content/plugins/revslider6620n-1/public/assets/assets/dummy.png HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:16 UTC	390	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:16 GMT Content-Type: image/webp Content-Length: 266 Connection: close Cache-Control: public, max-age=31536000 X-Hcdn-Image-Optimizer: f:webp q:85 w:1600 alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 7ce20cf23447a1fbf9696613469831a1-asc-edge5 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 2.155 Accept-Ranges: bytes
2024-04-16 15:05:16 UTC	266	IN	Data Raw: 52 49 46 46 02 01 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 18 00 00 00 00 00 00 00 00 00 41 4c 50 48 02 00 00 00 00 00 56 50 38 20 18 00 00 00 30 01 00 9d 01 2a 01 00 01 00 01 00 1c 25 a4 00 03 70 00 fe fe 06 d0 00 45 58 49 46 ba 00 00 00 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 01 00 00 00 03 a0 04 00 01 Data Ascii: RIFFWEBPVP8XALPHVP8 0%pEXIFExifIIV^(ifHH02100100

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.11	49752	108.177.122.190	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:15 UTC	629	OUT	GET /iframe_api?ver=7.1 HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:16 UTC	2088	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 X-Content-Type-Options: nosniff Expires: Tue, 16 Apr 2024 15:05:15 GMT Date: Tue, 16 Apr 2024 15:05:15 GMT Cache-Control: private, max-age=0 X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000 Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9 Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube_main" Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info." Server: ESF X-XSS-Protection: 0 Set-Cookie: YSC=Te33N_oDJog; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none Set-Cookie: VISITOR_INFO1_LIVE=I0mN6ZXR7l8; Domain=.youtube.com; Expires=Sun, 13-Oct-2024 15:05:15 GMT; Path=/; Secure; HttpOnly; SameSite=none Set-Cookie: VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D; Domain=.youtube.com; Expires=Sun, 13-Oct-2024 15:05:15 GMT; Path=/; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-16 15:05:16 UTC	1000	IN	Data Raw: 33 65 31 0d 0a 76 61 72 20 73 63 72 69 70 74 55 72 6c 20 3d 20 27 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 5c 2f 73 5c 2f 70 6c 61 79 65 72 5c 2f 37 65 62 66 34 38 31 37 5c 2f 77 77 77 2d 77 69 64 67 65 74 61 70 69 2e 76 66 6c 73 65 74 5c 2f 77 77 77 2d 77 69 64 67 65 74 61 70 69 2e 6a 73 27 3b 74 72 79 7b 76 61 72 20 74 74 50 6f 6c 69 63 79 3d 77 69 6e 64 6f 77 2e 74 72 75 73 74 65 64 54 79 70 65 73 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 79 6f 75 74 75 62 65 2d 77 69 64 67 65 74 2d 61 70 69 22 2c 7b 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 66 75 6e 63 74 69 6f 6e 28 78 29 7b 72 65 74 75 72 6e 20 78 7d 7d 29 3b 73 63 72 69 70 74 55 72 6c 3d 74 74 50 6f 6c 69 63 79 2e 63 72 65 61 74 65 53 63 72 69 70 74 55 52 Data Ascii: 3e1var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/7ebf4817\/www-widgetapi.vflset\/www-widgetapi.js';try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptUR
2024-04-16 15:05:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.11	49751	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:15 UTC	688	OUT	GET /wp-content/themes/salient/css/fonts/fontawesome-webfont.woff?v=4.2 HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://niceindiatravel.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://niceindiatravel.com/wp-content/themes/salient/css/font-awesome-legacy.min.css?ver=4.7.1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:18 UTC	614	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:17 GMT Content-Type: application/font-woff Content-Length: 98024 Connection: close Vary: Accept-Encoding cache-control: public, max-age=604800 expires: Tue, 23 Apr 2024 15:05:17 GMT last-modified: Tue, 11 Jan 2022 15:21:50 GMT etag: "17ee8-61dda08e-6f417281658a1f26;;;" platform: hostinger content-security-policy: upgrade-insecure-requests x-turbo-charged-by: LiteSpeed alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 7ac363957cd788f96950daa1264d7fee-asc-edge3 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 1.057 Accept-Ranges: bytes
2024-04-16 15:05:18 UTC	755	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 01 7e e8 00 0d 00 00 00 02 86 ac 00 04 00 07 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 01 30 00 00 00 1c 00 00 00 1c 6b be 47 b9 47 44 45 46 00 00 01 4c 00 00 00 1f 00 00 00 20 02 f0 00 04 4f 53 2f 32 00 00 01 6c 00 00 00 3e 00 00 00 60 88 32 7a 40 63 6d 61 70 00 00 01 ac 00 00 01 69 00 00 02 f2 0a bf 3a 7f 67 61 73 70 00 00 03 18 00 00 00 08 00 00 00 08 ff ff 00 03 67 6c 79 66 00 00 03 20 00 01 5f 79 00 02 4c bc 8f f7 ae 4d 68 65 61 64 00 01 62 9c 00 00 00 33 00 00 00 36 10 89 e5 2d 68 68 65 61 00 01 62 d0 00 00 00 1f 00 00 00 24 0f 03 0a b5 68 6d 74 78 00 01 62 f0 00 00 02 f4 00 00 0a f0 45 79 18 85 6c 6f 63 61 00 01 65 e4 00 00 07 16 00 00 0b 10 02 f5 a2 5c 6d 61 78 70 00 01 6c fc 00 00 00 Data Ascii: wOFF~FFTM0kGGDEFL OS/2l>`2z@cmapi:gaspglyf _yLMheadb36-hheab$hmtxbEylocae\maxpl
2024-04-16 15:05:18 UTC	1369	IN	Data Raw: af fd b6 f2 e2 f2 82 f5 22 a1 45 5e 0f cc 5f e1 3d 28 1e 4b 2c 46 93 4b cb 2b ff 79 ef 13 62 f9 c3 f3 00 00 00 00 00 00 01 ff ff 00 02 78 9c bc bd 09 80 54 d5 95 30 fc ee bd 6f a9 7d 7b b5 75 75 75 77 55 57 d5 ab ea 6e e8 6e 6a 6d 7a 2d 9a 9d 6e 76 04 04 c4 16 45 91 45 41 41 10 17 4a 21 2a 88 1b 28 e2 de 68 44 c9 32 63 16 f3 25 46 9c ca a6 93 45 62 12 62 36 bf f9 da 24 26 99 b8 8c 93 e4 37 11 ba 1e df b9 f7 55 55 57 37 0d e8 cc fc 1f 74 bd 77 f7 f5 dc 7b cf 39 f7 9c f3 38 cc 6d e6 38 62 13 e1 c1 49 1c 97 09 da 83 c4 1e b4 0f a1 bc 9a dd 8c 07 37 0b 81 53 9b 45 ee 14 47 ff 21 ee 92 33 9c f8 8c 90 e3 6a c0 e3 94 90 3d 18 77 3b c5 50 b0 5e 49 a6 13 41 3b 52 52 c9 6e 94 08 c6 6b 91 f8 4c 53 e1 2e 94 f5 29 8a 6f 38 47 9f 28 5b b8 ab 29 1c f3 08 39 4f 2c 2c cc Data Ascii: "E^_=(K,FK+ybxT0o}{uuuwUWnnjmz-nvEEAAJ!*(hD2c%FEbb6$&7UUW7tw{98m8bI7SEG!3j=w;P^IA;RRnkLS.)o8G([)9O,,
2024-04-16 15:05:18 UTC	1369	IN	Data Raw: 29 96 fe 6b 08 3d 6f ac bf 5c 8a 86 bb 68 fb 45 08 ce c1 69 da 0c 37 69 0f 3a 2d 21 6d 6e 3a 60 5b 86 47 dc 5d 83 e0 ec 47 45 2c 8b 3b 17 96 c5 73 b2 79 48 36 03 8a 32 04 e8 c6 88 73 14 ee d5 97 3a 17 ee 85 87 ce ca 49 9d 7f a8 40 c8 5e 5c df 77 0e 84 ac b2 4f 56 ce c3 b5 9e 05 b5 9f ac fd 85 3c ad 15 67 3f 5d ab 59 7b 3f 71 4b 8b 67 bc 48 97 5b 03 97 a2 58 10 16 f9 00 b4 26 95 74 64 d2 6e 8f 5b 94 2c d0 fa 5a c0 13 21 48 89 36 23 c0 15 3d 6e 07 dd b3 b5 1d 9a e2 d4 3b 4f a8 bf 57 ff 55 fd fd 89 9d 47 0e 34 5d 5d 17 b0 36 ae d9 b0 70 df f1 37 8e ef 5b b8 61 4d a3 35 50 b7 be f1 c0 91 42 ae 7f 5d 3f fc e1 dc e3 34 e5 ce 13 c8 ff f8 d7 50 ef a6 80 a5 a9 f1 ea c0 9c 37 6f 5c 07 c9 21 d7 ba 1b df 9c 13 b8 ba b1 c9 12 d8 a4 be 82 e7 14 d8 06 8d d9 06 0d ff 84 Data Ascii: )k=o\hEi7i:-!mn:`[G]GE,;syH62s:I@^\wOV<g?]Y{?qKgH[X&tdn[,Z!H6#=n;OWUG4]]6p7[aM5PB]?4P7o\!
2024-04-16 15:05:18 UTC	1369	IN	Data Raw: 9e b7 a9 0f 3a d5 41 b6 c9 0d 38 2c 26 13 ea d1 eb d5 bc 0d 7d 7c 9e a6 62 06 13 14 05 30 b3 95 1f 6c 46 51 12 24 70 78 05 3d c1 c8 08 34 64 64 6d 37 f6 c8 6e 72 06 75 22 82 4e 16 3a 4f c2 0b 75 5e 8a b2 78 40 f1 9d 82 8d aa ea 03 43 ca 47 b2 be 94 e1 83 2a 9c 25 46 8c 3e 54 6d f0 ca 3f ad d6 32 2e e4 6f bb bb 70 ac aa be be aa f0 cb ae 8a 31 b2 72 d5 5c 54 c3 c3 d9 a1 4b 2b 4c c3 d8 9c 63 d9 f3 83 81 c2 90 d5 6e b3 05 02 c1 3a 1c 38 ef a2 c7 cf ce 71 a8 79 bd 4e 8e e0 5c 44 76 c8 6a fe 87 e7 5b f5 a8 dc a6 44 79 2f 8a 2a 3d 48 09 d5 5b 30 e0 6c 89 38 3d ef e3 f4 60 97 44 be 8c 64 26 e2 3c 9c fd 80 da 71 14 52 1b ed f6 ba 7d 0f 7e bf 84 7c 6d 3f 39 5b b2 59 0d 7b f5 48 b7 49 fd c1 17 46 50 b5 83 48 de 70 3b 40 b8 c0 a9 59 9f 12 8b d6 ee db 5b 44 f1 d6 5d Data Ascii: :A8,&}\|b0lFQ$px=4ddm7nru"N:Ou^x@CG%F>Tm?2.op1r\TK+Lcn:8qyN\Dvj[Dy/=H[0l8=`Dd&<qR}~\|m?9[Y{HIFPHp;@Y[D]
2024-04-16 15:05:18 UTC	1369	IN	Data Raw: 86 3e 41 fb 92 2c d0 5f 07 99 a0 32 fc 03 25 a5 35 9b 70 06 c0 79 6e 84 36 2f e1 ae e0 b6 02 c4 02 4d 62 a1 74 17 2c e7 4c 12 d6 ae 92 e9 c6 6c 19 2b f4 39 d6 01 51 a2 47 62 5d 2a e6 93 44 0f 3b e6 01 0d 8f ba 05 91 b9 7b 50 5a 19 21 e5 2a fc e2 55 31 b7 fa be 7c fd 94 e1 b5 73 ef f3 7b dd 22 82 33 11 9b 5c a2 67 82 8e 08 98 f8 89 ab 91 47 12 cf 87 79 b9 85 47 3a 8c 2d 6e 51 67 37 cb ce 60 d4 8f 14 33 fe 78 ce 02 b7 fa 41 78 e6 25 c3 8f 55 1b 8d 06 ef 0e f2 58 4d 5a 87 26 48 58 39 fd 3e 6f b2 e0 01 73 15 ef 02 47 61 10 1c eb ce 0a e1 eb 27 cf 1a be 21 bb 6c c3 bc a9 9d 7c b3 45 57 2d 1a 9d d5 06 65 83 62 88 e9 8c f5 62 78 73 bd be 59 30 87 04 df 36 45 17 d2 eb 9c 3e 9d 29 12 8c 56 b9 91 48 f4 9b e7 0c df b0 7d ba d5 56 3d a3 ce 47 7e e3 0e 59 6b cb 68 8b Data Ascii: >A,_2%5pyn6/Mbt,Ll+9QGb]D;{PZ!U1\|s{"3\gGyG:-nQg7`3xAx%UXMZ&HX9>osGa'!l\|EW-ebbxsY06E>)VH}V=G~Ykh
2024-04-16 15:05:18 UTC	1369	IN	Data Raw: 75 28 e5 a4 cb e0 1c e3 d8 8d 93 80 03 33 81 b2 d1 23 89 a8 98 10 bd 30 81 e5 d3 0c 03 9d 0a 3a dd 4e 7a 7b 02 53 a4 00 1e 4d e8 5d 22 ac c0 60 52 81 bc 0b b5 b1 9d 81 2e 43 dc f6 a0 a7 72 60 2d 06 bb d0 55 7b eb 82 8d 8d 7a 04 8b 6e dc 71 95 f4 04 09 74 c4 78 e3 c3 0d 7f b3 69 63 2b d4 9a 3a 33 59 de e7 e3 b3 99 4e 93 d9 2a 90 61 8e 08 56 f3 d8 50 9e 86 0a bb 60 cc 31 e2 51 a0 62 c8 e7 ce 40 66 11 63 5e 58 98 39 9c cc bc fa f4 ac f1 87 dc b6 f5 9f ef fc 02 91 6a 74 d2 9c 59 0b d3 82 a9 da 68 da be 8e 8d f9 a9 33 d1 09 69 e2 6a 73 91 f4 84 a8 2b 5c 17 c2 38 54 17 76 8d 1b c8 69 7c d7 51 3c 0d 76 bb f6 df b9 63 97 38 c5 f7 31 93 16 11 8b 92 2d a7 99 74 89 c0 98 ab 8a ef 14 f3 89 5c 31 8e a5 e4 e1 99 1f 11 36 b9 f2 02 ce ff 47 ed d6 c4 13 49 ae d8 6e e6 13 Data Ascii: u(3#0:Nz{SM]"`R.Cr`-U{znqtxic+:3YN*aVP`1Qb@fc^X9jtYh3ijs+\8Tvi\|Q<vc81-t\16GIn
2024-04-16 15:05:18 UTC	1369	IN	Data Raw: 10 2c f7 33 9c 9c 04 1c 15 50 21 e6 a4 0f 40 8c 00 69 65 4e 19 71 ec a2 80 46 53 27 7d 40 34 a2 d1 88 c3 8f 7e ba f4 f2 e8 da 2a f8 00 54 0f 28 cd f8 50 d0 ec e8 18 59 2b 97 3d 9d 21 3f 93 7d 3e b9 d0 ae e7 2b a4 e5 f5 c2 f5 b2 c9 77 2a eb 33 c9 f8 55 bd a1 b0 a2 84 73 03 c6 bd c2 a0 af d0 0f 69 1a 5b fe 39 aa 61 89 d2 19 b1 5c db d9 75 e2 57 65 df 59 35 b7 9f a3 09 90 d8 e4 2b b4 b3 b6 ec 2c f2 bb aa c6 69 4b b2 5c f3 e2 ca 9a 65 f9 3c b5 c1 e8 8e 14 cf fa 7a b3 b0 4b d8 43 b5 26 f4 48 64 dd 62 6b 74 dd a9 37 3c c1 a0 47 68 f5 e0 cb 0a b5 66 a7 4f c8 fb 9c 66 70 85 2b 64 3c 8b 38 cc 59 f2 f8 c2 58 d5 1f ae 28 f9 cf b4 00 86 73 95 3e 21 3b 42 f5 54 52 40 4a 09 76 4b f5 9c 55 8b 38 8a 62 1a 55 ce 48 5e 51 1b 3b 4f b9 6b 9e 62 0f 25 d6 5b 51 9a 48 87 0e 06 Data Ascii: ,3P!@ieNqFS'}@4~T(PY+=!?}>+w3Usi[9a\uWeY5+,iK\e<zKC&Hdbkt7<GhfOfp+d<8YX(s>!;BTR@JvKU8bUH^Q;Okb%[QH
2024-04-16 15:05:18 UTC	1369	IN	Data Raw: 50 29 ed 65 0a 9e 30 52 d4 81 94 fe 64 2e d9 8f 14 3a 7e 7d 11 9c 87 b8 ad 74 3c 29 8f a7 2f 12 51 7f 0d 63 dd df 4f e7 42 81 be 47 47 70 ce 3c 85 f7 22 2d 47 e5 a9 2d 02 1c 62 ce a2 ae 79 33 8e 62 e8 ab 23 98 b0 97 e8 35 95 52 50 43 6b 1e 7b 64 cb 9a ee 90 20 d8 ad 36 93 64 b2 92 5d a9 a7 f1 f7 87 80 ca c2 1c 01 aa 4c a5 64 17 e2 4c 75 e9 8b b6 0d ae cd 4c 13 43 7a ab d3 ae f7 c1 49 59 73 f4 b5 3b d0 41 8a 89 40 2a 6e d4 79 da a2 b5 c4 e3 1e c1 ce 4b cb 8f c9 a9 b5 a0 12 de 45 b7 17 8d e9 f6 57 83 fa d5 fb 65 4d 98 16 aa bf 1f f5 c3 a2 bf 8e 78 a8 5b fd 2a 75 1b 0c a8 ff fe a2 04 2d 7a df c7 d2 97 85 72 69 7a 48 3e 9b c9 e2 d2 0c 90 de c7 32 24 95 a2 0c 9f f9 cc 3d c2 5f 85 eb b5 f6 9d ab 1d e7 6a 37 93 7b 1b a7 21 e7 68 37 ce 8e db 10 7c 70 dc 66 73 25 Data Ascii: P)e0Rd.:~}t<)/QcOBGGp<"-G-by3b#5RPCk{d 6d]LdLuLCzIYs;A@nyKEWeMx[u-zrizH>2$=_j7{!h7\|pfs%
2024-04-16 15:05:18 UTC	1369	IN	Data Raw: aa f7 07 db b7 15 c9 25 6e 77 54 8f 18 e7 bb 09 51 b1 7f aa 10 c4 b6 21 3d d2 dc 1e 01 96 bc 30 30 21 db 7f 64 50 b0 e7 24 13 4f ac a2 fa ef 6a 21 25 98 07 f4 16 6c d5 1f 1f 36 62 64 00 b7 88 bf 8d 88 ca 5b 08 36 e6 2c 36 fc c8 60 7f 5e 18 48 e6 fb 8f 14 66 c9 96 01 11 11 33 1a 56 0b df b6 5b 06 f4 d8 38 7c 5c b2 99 4d 97 e9 51 0a 11 e4 d1 d9 6c c6 9c 59 78 6a b0 3f 4b 4f b2 33 da 1d c5 d9 b2 d0 25 29 e8 f9 dc f5 1c e7 29 4a 72 47 c6 bc 51 a5 bf cc bc 29 ee c7 15 e9 32 63 e2 22 a3 84 1e cb e4 5e b0 c2 96 80 3b 87 02 ea 10 1a 40 59 35 af 0e 8e 75 e3 21 e6 ce d1 27 e1 68 88 e6 56 07 47 54 69 20 4d 39 1c b1 d2 02 23 91 28 d7 9f 3c c5 34 d8 73 ab 7b b3 bd ab 91 f6 82 10 ad de 40 96 65 cb 66 51 60 18 ca 47 79 ed 0d a1 38 80 02 4c ea 95 1a 1f 18 fe 22 4b 42 33 Data Ascii: %nwTQ!=00!dP$Oj!%l6bd[6,6`^Hf3V[8\|\MQlYxj?KO3%))JrGQ)2c"^;@Y5u!'hVGTi M9#(<4s{@efQ`Gy8L"KB3
2024-04-16 15:05:18 UTC	1369	IN	Data Raw: 44 b7 8a 4c 4a 61 7c f6 90 2b 51 b2 b4 91 e0 87 68 fe 97 5f ab 7d a7 65 da ce 9e eb ef 7a e6 5f ff b5 f0 1e 0d 62 22 09 50 38 5e fc a7 07 db da d0 8f f5 83 07 3e ff a7 c2 17 b5 ba 34 12 63 c4 26 0e c5 ab a8 86 59 33 d7 5d a4 f4 2a b0 f6 74 49 da 2a 98 0a 72 36 25 20 da dc 01 ea 26 41 00 13 a9 52 85 5e 33 bc 06 b4 24 15 f2 70 b4 c5 2c 7f 61 32 47 c3 87 a8 7d 4f 3e 57 34 ec 37 fc 36 d5 88 83 6e 0e 7f 37 5b b8 59 cc f5 a5 4e 71 a9 be be 94 08 4f fc 65 bf 63 75 2f 3d cb 63 6d 3a 26 96 34 fc ed 1c aa 43 dd 6f d3 cc 3c cc 7f fe 86 7d b9 dc 69 96 41 a0 4f 36 e7 b3 c4 83 8c 4e 9d 59 94 7f a2 d3 cc c8 6d da 05 3a c1 cc b2 66 33 8e 4a 9e 22 03 4d 93 c4 4b 3a c2 45 6b 90 99 92 3a 65 2d 4f b2 9b 07 37 cb 0d 8d 0b 36 17 df e4 3b 6b ec fa 68 7d 13 19 78 cb 3f af 31 e6 Data Ascii: DLJa\|+Qh_}ez_b"P8^>4c&Y3]tIr6% &AR^3$p,a2G}O>W476n7[YNqOecu/=cm:&4Co<}iAO6NYm:f3J"MK:Ek:e-O76;kh}x?1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.11	49750	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:15 UTC	665	OUT	GET /wp-content/themes/salient/css/fonts/icomoon.woff?v=1.6 HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://niceindiatravel.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://niceindiatravel.com/wp-content/themes/salient/css/build/style.css?ver=16.1.3 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:19 UTC	613	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:18 GMT Content-Type: application/font-woff Content-Length: 21912 Connection: close Vary: Accept-Encoding cache-control: public, max-age=604800 expires: Tue, 23 Apr 2024 15:05:18 GMT last-modified: Tue, 08 Aug 2023 07:35:36 GMT etag: "5598-64d1f048-159ba95c4b260028;;;" platform: hostinger content-security-policy: upgrade-insecure-requests x-turbo-charged-by: LiteSpeed alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 67a6a8832aa07da09b56f72a8d6bef34-asc-edge5 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 2.237 Accept-Ranges: bytes
2024-04-16 15:05:19 UTC	756	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 55 98 00 0b 00 00 00 00 55 4c 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4f 53 2f 32 00 00 01 08 00 00 00 60 00 00 00 60 0f 12 0e be 63 6d 61 70 00 00 01 68 00 00 01 3c 00 00 01 3c 70 61 69 89 67 61 73 70 00 00 02 a4 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 02 ac 00 00 4e 9c 00 00 4e 9c 37 7d a0 a0 68 65 61 64 00 00 51 48 00 00 00 36 00 00 00 36 25 56 91 49 68 68 65 61 00 00 51 80 00 00 00 24 00 00 00 24 08 09 04 66 68 6d 74 78 00 00 51 a4 00 00 01 70 00 00 01 70 5a 16 13 e0 6c 6f 63 61 00 00 53 14 00 00 00 ba 00 00 00 ba 25 45 16 a2 6d 61 78 70 00 00 53 d0 00 00 00 20 00 00 00 20 00 87 06 58 6e 61 6d 65 00 00 53 f0 00 00 01 86 00 00 01 86 99 4a 09 fb 70 6f 73 74 00 00 55 78 00 00 00 Data Ascii: wOFFUULOS/2``cmaph<<paigaspglyfNN7}headQH66%VIhheaQ$$fhmtxQppZlocaS%EmaxpS XnameSJpostUx
2024-04-16 15:05:19 UTC	1369	IN	Data Raw: 00 00 01 37 01 07 17 01 27 01 01 05 2b 01 fb 01 01 fe 05 2b 01 d1 03 91 2b fe 05 01 01 fe 05 2b 01 d1 00 00 00 01 00 db ff c4 03 01 03 bc 00 07 00 00 05 07 01 37 27 01 17 01 03 01 2b fe 05 01 01 01 fb 2b fe 2f 11 2b 01 fb 01 01 01 fb 2b fe 2f 00 00 00 00 02 00 06 ff d0 03 f0 03 ba 00 26 00 43 00 00 25 27 3e 01 35 34 27 2e 01 27 26 23 22 07 0e 01 07 06 15 14 17 1e 01 17 16 33 32 36 37 30 14 31 17 16 36 3f 01 36 34 01 34 37 3e 01 37 36 33 32 17 1e 01 17 16 15 14 07 0e 01 07 06 23 22 27 2e 01 27 26 35 03 f0 f7 1b 1e 20 20 6e 4a 4a 54 54 4a 4a 6e 20 20 20 20 6e 4a 4a 54 39 69 2d f7 08 18 09 64 09 fc 71 19 18 53 38 38 3f 40 37 38 54 18 18 18 18 54 38 37 40 3f 38 38 53 18 19 5e f7 2d 69 39 54 4a 4a 6e 20 20 20 20 6e 4a 4a 54 54 4a 4a 6e 20 20 1e 1b 01 f6 09 01 Data Ascii: 7'++++7'++/++/&C%'>54'.'&#"3267016?6447>7632#"'.'&5 nJJTTJJn nJJT9i-dqS88?@78TT87@?88S^-i9TJJn nJJTTJJn
2024-04-16 15:05:19 UTC	1369	IN	Data Raw: 21 6d 16 4d 6c 01 3f 02 01 21 2e 2d 03 cb 25 48 47 17 e5 fe fe 01 da 23 52 53 52 fd 97 02 02 21 25 25 47 99 ac 10 30 30 1a 8a fe 72 a5 14 41 35 1a 01 01 5f 25 25 59 25 25 25 25 59 24 25 01 1d 22 22 42 43 16 56 2a 29 65 2a 2a ba 5f 5f 01 32 4c 00 00 00 01 00 00 00 17 03 fb 03 76 00 32 00 00 13 17 30 36 17 16 17 1e 01 17 16 17 1e 01 37 36 37 3e 01 37 36 37 36 27 26 06 07 06 07 36 16 07 0e 01 23 22 26 27 26 27 2e 01 27 26 07 06 07 0e 01 07 06 00 2a 5d 15 0b 17 18 35 19 18 0e 18 78 48 24 46 47 94 3f 3f 16 15 3a 3a a4 4d 4e 12 58 4d 2d 2d 4d 15 15 26 18 0d 09 09 21 1d 1d 34 32 36 36 5a 1e 1d 02 8c 37 3b 19 0d 48 47 ae 50 4f 1c 32 58 2f 17 3c 3d ae 6d 6d 79 79 33 32 11 3f 3e 6a 35 6d 54 54 65 6c 62 32 41 41 70 22 23 0a 0a 26 26 53 20 21 00 04 00 00 00 40 04 00 Data Ascii: !mMl?!.-%HG#RSR!%%G00rA5_%%Y%%%%Y$%""BCV)e__2Lv206767>7676'&6#"&'&'.'&]5xH$FG??::MNXM--M&!4266Z7;HGPO2X/<=mmyy32?>j5mTTelb2AAp"#&&S !@
2024-04-16 15:05:19 UTC	1369	IN	Data Raw: 32 32 32 32 47 47 32 32 32 32 47 23 19 19 19 19 23 23 19 19 19 19 23 03 c0 25 26 35 16 05 0a 0f 26 26 26 34 35 26 0f 16 10 25 26 35 35 25 26 10 16 0f 26 35 34 26 26 26 0f 0a 05 16 35 25 26 25 26 35 16 05 0a 0f 26 26 26 34 36 25 0f 16 10 25 26 35 35 25 26 10 16 0f 25 36 34 26 26 26 0f 0a 05 16 35 25 26 55 0d 0c 12 58 0b 2e 3f 0c 0c 0d 11 12 0d 3e 3e 4a 0d 0c 12 12 0c 0d 4a 3e 3e 0d 12 11 0d 0c 0c 3f 2e 0b 58 12 0c 0d 0d 0c 12 58 0b 2e 3f 0c 0c 0d 11 12 0d 3e 3e 4a 0d 0c 12 12 0c 0d 4a 3e 3e 0d 12 11 0d 0c 0c 3f 2e 0b 58 12 0c 0d ff 00 32 32 47 47 32 32 32 32 47 47 32 32 56 19 19 23 23 19 19 19 19 23 23 19 19 00 00 02 00 0f 00 0f 03 f1 03 6b 00 20 00 41 00 00 01 32 17 16 17 16 15 14 07 06 07 09 01 26 27 26 35 34 37 36 37 36 33 32 17 16 1f 01 37 36 37 36 33 Data Ascii: 2222GG2222G####%&5&&&45&%&55%&&54&&&5%&%&5&&&46%%&55%&%64&&&5%&UX.?>>JJ>>?.XX.?>>JJ>>?.X22GG2222GG22V####k A2&'&5476763276763
2024-04-16 15:05:19 UTC	1369	IN	Data Raw: 26 01 00 02 00 35 25 26 25 26 35 fe 00 35 25 26 25 26 02 35 fe 00 12 0c 0d 0d 0c 12 02 00 12 0c 0d 0d 0c 03 40 25 26 35 fe 00 35 25 26 25 26 35 02 00 35 25 26 55 0d 0c 12 fe 00 12 0c 0d 0d 0c 12 02 00 12 0c 0d 00 00 00 00 02 00 ab 00 6b 03 2b 03 15 00 18 00 31 00 00 01 32 17 01 16 15 14 07 01 06 23 22 27 26 35 34 37 09 01 26 35 34 37 36 33 21 32 17 01 16 15 14 07 01 06 23 22 27 26 35 34 37 09 01 26 35 34 37 36 33 01 d5 12 0c 01 2b 0d 0d fe d5 0c 12 11 0d 0c 0c 01 0c fe f4 0c 0c 0c 12 ff 00 12 0c 01 2b 0d 0d fe d5 0c 12 11 0d 0c 0c 01 0c fe f4 0c 0c 0c 12 03 15 0c fe d5 0c 12 12 0c fe d5 0c 0c 0d 11 12 0d 01 0c 01 0c 0d 12 12 0c 0c 0c fe d5 0c 12 12 0c fe d5 0c 0c 0d 11 12 0d 01 0c 01 0c 0d 12 12 0c 0c 00 02 00 d5 00 6b 03 00 03 15 00 18 00 2b 00 00 01 32 Data Ascii: &5%&%&55%&%&5@%&55%&%&55%&Uk+12#"'&547&54763!2#"'&547&54763++k+2
2024-04-16 15:05:19 UTC	1369	IN	Data Raw: 19 19 19 23 23 19 19 00 00 01 00 55 00 6b 03 ab 03 15 00 22 00 00 01 32 17 16 15 14 0f 01 21 32 17 16 15 14 07 06 23 21 17 16 15 14 07 06 23 22 27 01 26 35 34 37 01 36 33 01 ab 11 0d 0c 0c e2 02 99 12 0c 0d 0d 0c 12 fd 67 e2 0c 0c 0d 11 12 0d fe d6 0d 0d 01 2a 0d 12 03 15 0c 0d 11 12 0d e1 0d 0c 12 12 0c 0d e1 0d 12 11 0d 0c 0c 01 2b 0d 11 11 0d 01 2b 0c 00 00 01 00 55 00 6b 03 ab 03 15 00 22 00 00 01 32 17 01 16 15 14 07 01 06 23 22 27 26 35 34 3f 01 21 22 27 26 35 34 37 36 33 21 27 26 35 34 37 36 33 02 55 12 0d 01 2a 0d 0d fe d6 0d 12 12 0c 0c 0c e2 fd 67 12 0c 0d 0d 0c 12 02 99 e2 0c 0c 0c 12 03 15 0c fe d5 0c 12 12 0c fe d5 0c 0c 0c 12 12 0d e1 0d 0c 12 12 0c 0d e1 0d 12 12 0c 0c 00 00 05 00 00 00 40 04 00 03 40 00 0e 00 1c 00 39 00 59 00 78 00 00 13 Data Ascii: ##Uk"2!2#!#"'&54763g++Uk"2#"'&54?!"'&54763!'&54763Ug@@9Yx
2024-04-16 15:05:19 UTC	1369	IN	Data Raw: 0c 0d 11 80 12 0d 0c 0d 0c 12 03 95 25 26 35 80 11 0d 0c 0c 0d 11 80 12 0c 0d 0c 0d 12 11 0d 0c fd 80 0c 0d 11 80 12 0d 0c 0d 0c 12 11 0d 0c 25 26 35 80 11 0d 0c 02 80 0c 0d 11 12 0d 0c 0d 0c 12 80 11 0d 0c 0c 0d 11 80 35 26 25 fd 80 0c 0d 11 80 35 26 25 0c 0d 11 12 0c 0d 0c 0d 12 80 11 0d 0c 00 00 04 00 2b ff eb 03 d5 03 95 00 1c 00 39 00 56 00 73 00 00 01 32 17 16 1d 01 14 17 16 3b 01 32 17 16 15 14 07 06 2b 01 22 27 26 3d 01 34 37 36 33 01 33 32 17 16 1d 01 14 07 06 23 22 27 26 3d 01 34 27 26 2b 01 22 27 26 35 34 37 36 33 13 32 17 16 1d 01 14 07 06 2b 01 22 27 26 35 34 37 36 3b 01 32 37 36 3d 01 34 37 36 33 01 33 32 17 16 15 14 07 06 2b 01 22 07 06 1d 01 14 07 06 23 22 27 26 3d 01 34 37 36 33 02 d5 12 0c 0d 0c 0d 12 80 11 0d 0c 0c 0d 11 80 35 26 25 0c Data Ascii: %&5%&55&%5&%+9Vs2;2+"'&=476332#"'&=4'&+"'&547632+"'&5476;276=476332+"#"'&=47635&%
2024-04-16 15:05:19 UTC	1369	IN	Data Raw: b0 3b 65 2a 58 1f 48 11 10 44 34 33 46 fe 89 01 60 3d 4c 2f 1b 0a 19 0e fe 92 01 b0 00 00 00 04 00 03 00 1f 03 ff 03 5e 00 08 00 0c 00 19 00 26 00 00 13 27 23 17 33 13 21 13 21 01 21 27 21 01 22 06 15 14 16 33 32 36 35 34 26 23 21 22 06 15 14 16 33 32 36 35 34 26 23 f0 12 db 13 6e 4f 02 61 cb fc f1 02 00 fe 3a 2b 02 61 fd f0 26 35 35 26 26 35 35 26 01 71 26 36 36 26 25 36 36 25 02 f3 6b 6f fe 36 01 ce fe 9a fd fe 4c 36 26 25 36 36 25 26 36 36 26 25 36 36 25 26 36 00 00 00 01 00 07 00 7e 01 54 02 b9 00 1a 00 00 01 14 07 01 06 23 22 2f 01 26 35 34 3f 01 27 26 35 34 3f 01 36 33 32 17 01 16 15 01 54 06 fe f6 06 07 08 05 1d 06 06 e1 e1 06 06 1d 05 08 07 06 01 0a 06 01 9b 07 06 fe f6 06 06 1d 05 08 07 06 e0 e1 06 07 08 05 1d 06 06 fe f6 06 08 00 00 01 00 1a 00 Data Ascii: ;e*XHD43F`=L/^&'#3!!!'!"32654&#!"32654&#nOa:+a&55&&55&q&66&%66%ko6L6&%66%&66&%66%&6~T#"/&54?'&54?632T
2024-04-16 15:05:19 UTC	1369	IN	Data Raw: 07 17 16 14 07 03 34 27 2e 01 27 26 23 22 07 0e 01 07 06 15 14 17 1e 01 17 16 33 32 37 3e 01 37 36 13 22 26 2f 01 0e 01 07 0e 01 23 22 27 2e 01 27 26 27 26 27 2e 01 27 26 35 34 37 3e 01 37 36 37 36 37 3e 01 37 36 33 32 17 1e 01 17 16 17 16 17 1e 01 17 16 15 14 06 07 0e 01 07 17 16 14 07 0e 01 23 27 17 1e 01 33 32 36 37 36 34 2f 01 37 3e 01 35 34 27 2e 01 27 26 23 22 07 0e 01 07 06 15 14 17 1e 01 17 16 33 32 36 3f 01 05 22 26 27 2e 01 35 34 36 37 3e 01 33 32 16 17 1e 01 15 14 06 07 0e 01 23 11 22 07 0e 01 07 06 15 14 17 1e 01 17 16 33 32 37 3e 01 37 36 35 34 27 2e 01 27 26 23 01 22 26 2f 01 0e 01 07 0e 01 23 22 26 27 2e 01 27 2e 01 27 2e 01 35 34 36 37 3e 01 37 3e 01 37 3e 01 33 32 16 17 1e 01 17 1e 01 17 1e 01 15 14 06 07 0e 01 07 17 16 14 07 0e 01 23 27 Data Ascii: 4'.'&#"327>76"&/#"'.'&'&'.'&547>76767>7632#'326764/7>54'.'&#"326?"&'.5467>32#"327>7654'.'&#"&/#"&'.'.'.5467>7>7>32#'
2024-04-16 15:05:19 UTC	1369	IN	Data Raw: 01 23 22 06 07 0e 01 07 0e 01 07 0e 01 15 14 16 17 1e 01 17 1e 01 17 1e 01 33 32 36 37 3e 01 3f 01 17 22 26 2f 01 15 0e 01 23 22 27 2e 01 27 26 35 34 37 3e 01 37 36 33 32 17 1e 01 17 16 15 14 06 07 31 17 16 14 07 0e 01 23 27 17 1e 01 33 32 36 37 36 34 2f 01 37 3e 01 35 34 27 2e 01 27 26 23 22 07 0e 01 07 06 15 14 17 1e 01 17 16 33 32 36 3f 01 05 22 26 27 2e 01 35 34 36 37 3e 01 33 32 16 17 1e 01 15 14 06 07 0e 01 23 11 22 06 07 0e 01 15 14 16 17 1e 01 33 32 36 37 3e 01 35 34 26 27 2e 01 23 11 22 27 2e 01 27 26 35 34 37 3e 01 37 36 33 32 17 1e 01 17 16 15 14 07 0e 01 07 06 03 22 07 0e 01 07 06 15 14 17 1e 01 17 16 33 32 37 3e 01 37 36 35 34 27 2e 01 27 26 23 03 d2 0a 1e 0a d2 35 88 4b 56 4b 4b 70 20 20 20 20 70 4b 4b 56 55 4b 4b 70 20 20 33 2d d1 0b 0b bb Data Ascii: #"3267>?"&/#"'.'&547>76321#'326764/7>54'.'&#"326?"&'.5467>32#"3267>54&'.#"'.'&547>7632"327>7654'.'&#5KVKKp pKKVUKKp 3-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.11	49748	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:15 UTC	626	OUT	GET /wp-content/plugins/revslider6620n-1/public/assets/fonts/font-awesome/css/font-awesome.css HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:18 UTC	585	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:18 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: public, max-age=2592000 expires: Thu, 16 May 2024 15:05:18 GMT last-modified: Wed, 20 Dec 2023 12:52:54 GMT etag: W/"903d-6582e3a6-1506e8cb45478af;gz" platform: hostinger content-security-policy: upgrade-insecure-requests x-turbo-charged-by: LiteSpeed alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: b2e34f63475d5c17e3d2da8f4b698886-asc-edge4 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 2.069
2024-04-16 15:05:18 UTC	784	IN	Data Raw: 39 30 33 64 0d 0a 2f 2a 21 0a 20 2a 20 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 34 2e 37 2e 30 20 62 79 20 40 64 61 76 65 67 61 6e 64 79 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 20 2d 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 0a 20 2a 20 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 2f 6c 69 63 65 6e 73 65 20 28 46 6f 6e 74 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 53 53 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 0a 2f 2a 20 46 4f 4e 54 20 50 41 54 48 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 46 6f 6e 74 41 77 65 73 Data Ascii: 903d/! Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License) // FONT PATH * -------------------------- */@font-face { font-family: 'FontAwes
2024-04-16 15:05:18 UTC	1369	IN	Data Raw: 72 67 65 72 20 72 65 6c 61 74 69 76 65 20 74 6f 20 74 68 65 20 69 63 6f 6e 20 63 6f 6e 74 61 69 6e 65 72 20 2a 2f 0a 2e 66 61 2d 6c 67 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 33 33 33 33 33 33 33 33 65 6d 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 30 2e 37 35 65 6d 3b 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 2d 31 35 25 3b 0a 7d 0a 2e 66 61 2d 32 78 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 65 6d 3b 0a 7d 0a 2e 66 61 2d 33 78 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 65 6d 3b 0a 7d 0a 2e 66 61 2d 34 78 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 34 65 6d 3b 0a 7d 0a 2e 66 61 2d 35 78 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 35 65 6d 3b 0a 7d 0a 2e 66 61 2d 66 77 20 7b 0a 20 20 77 69 64 74 Data Ascii: rger relative to the icon container */.fa-lg { font-size: 1.33333333em; line-height: 0.75em; vertical-align: -15%;}.fa-2x { font-size: 2em;}.fa-3x { font-size: 3em;}.fa-4x { font-size: 4em;}.fa-5x { font-size: 5em;}.fa-fw { widt
2024-04-16 15:05:18 UTC	1369	IN	Data Raw: 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 3b 0a 20 20 7d 0a 7d 0a 40 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 73 70 69 6e 20 7b 0a 20 20 30 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0a 20 20 7d 0a 20 20 31 30 30 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 3b 0a 20 20 7d 0a 7d 0a 2e 66 61 2d 72 6f 74 61 74 65 2d 39 30 20 7b 0a 20 20 2d 6d 73 2d 66 69 6c 74 65 72 3a 20 22 70 72 6f 67 Data Ascii: transform: rotate(359deg); }}@keyframes fa-spin { 0% { -webkit-transform: rotate(0deg); transform: rotate(0deg); } 100% { -webkit-transform: rotate(359deg); transform: rotate(359deg); }}.fa-rotate-90 { -ms-filter: "prog
2024-04-16 15:05:18 UTC	1369	IN	Data Raw: 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 77 69 64 74 68 3a 20 32 65 6d 3b 0a 20 20 68 65 69 67 68 74 3a 20 32 65 6d 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 65 6d 3b 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0a 7d 0a 2e 66 61 2d 73 74 61 63 6b 2d 31 78 2c 0a 2e 66 61 2d 73 74 61 63 6b 2d 32 78 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 2e 66 61 2d 73 74 61 63 6b 2d 31 78 20 7b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 69 6e 68 65 72 69 74 3b 0a 7d 0a 2e 66 61 2d 73 74 61 63 6b 2d 32 78 20 7b 0a 20 20 66 Data Ascii: ay: inline-block; width: 2em; height: 2em; line-height: 2em; vertical-align: middle;}.fa-stack-1x,.fa-stack-2x { position: absolute; left: 0; width: 100%; text-align: center;}.fa-stack-1x { line-height: inherit;}.fa-stack-2x { f
2024-04-16 15:05:18 UTC	1369	IN	Data Raw: 74 65 6e 74 3a 20 22 5c 66 30 31 35 22 3b 0a 7d 0a 2e 66 61 2d 66 69 6c 65 2d 6f 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 31 36 22 3b 0a 7d 0a 2e 66 61 2d 63 6c 6f 63 6b 2d 6f 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 31 37 22 3b 0a 7d 0a 2e 66 61 2d 72 6f 61 64 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 31 38 22 3b 0a 7d 0a 2e 66 61 2d 64 6f 77 6e 6c 6f 61 64 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 31 39 22 3b 0a 7d 0a 2e 66 61 2d 61 72 72 6f 77 2d 63 69 72 63 6c 65 2d 6f 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 31 61 22 3b 0a 7d 0a 2e 66 61 2d 61 72 72 6f 77 2d 63 69 72 63 Data Ascii: tent: "\f015";}.fa-file-o:before { content: "\f016";}.fa-clock-o:before { content: "\f017";}.fa-road:before { content: "\f018";}.fa-download:before { content: "\f019";}.fa-arrow-circle-o-down:before { content: "\f01a";}.fa-arrow-circ
2024-04-16 15:05:18 UTC	1369	IN	Data Raw: 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 33 36 22 3b 0a 7d 0a 2e 66 61 2d 61 6c 69 67 6e 2d 63 65 6e 74 65 72 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 33 37 22 3b 0a 7d 0a 2e 66 61 2d 61 6c 69 67 6e 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 33 38 22 3b 0a 7d 0a 2e 66 61 2d 61 6c 69 67 6e 2d 6a 75 73 74 69 66 79 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 33 39 22 3b 0a 7d 0a 2e 66 61 2d 6c 69 73 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 33 61 22 3b 0a 7d 0a 2e 66 61 2d 64 65 64 65 6e 74 3a 62 65 66 6f 72 65 2c 0a 2e 66 61 2d 6f 75 74 64 65 6e 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 Data Ascii: { content: "\f036";}.fa-align-center:before { content: "\f037";}.fa-align-right:before { content: "\f038";}.fa-align-justify:before { content: "\f039";}.fa-list:before { content: "\f03a";}.fa-dedent:before,.fa-outdent:before { cont
2024-04-16 15:05:18 UTC	1369	IN	Data Raw: 73 2d 63 69 72 63 6c 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 35 35 22 3b 0a 7d 0a 2e 66 61 2d 6d 69 6e 75 73 2d 63 69 72 63 6c 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 35 36 22 3b 0a 7d 0a 2e 66 61 2d 74 69 6d 65 73 2d 63 69 72 63 6c 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 35 37 22 3b 0a 7d 0a 2e 66 61 2d 63 68 65 63 6b 2d 63 69 72 63 6c 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 35 38 22 3b 0a 7d 0a 2e 66 61 2d 71 75 65 73 74 69 6f 6e 2d 63 69 72 63 6c 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 35 39 22 3b 0a 7d 0a 2e 66 61 2d 69 6e 66 6f 2d 63 69 72 63 6c 65 3a 62 65 66 6f Data Ascii: s-circle:before { content: "\f055";}.fa-minus-circle:before { content: "\f056";}.fa-times-circle:before { content: "\f057";}.fa-check-circle:before { content: "\f058";}.fa-question-circle:before { content: "\f059";}.fa-info-circle:befo
2024-04-16 15:05:18 UTC	1369	IN	Data Raw: 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 37 34 22 3b 0a 7d 0a 2e 66 61 2d 63 6f 6d 6d 65 6e 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 37 35 22 3b 0a 7d 0a 2e 66 61 2d 6d 61 67 6e 65 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 37 36 22 3b 0a 7d 0a 2e 66 61 2d 63 68 65 76 72 6f 6e 2d 75 70 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 37 37 22 3b 0a 7d 0a 2e 66 61 2d 63 68 65 76 72 6f 6e 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 37 38 22 3b 0a 7d 0a 2e 66 61 2d 72 65 74 77 65 65 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 37 39 22 3b 0a 7d 0a 2e 66 61 2d 73 68 6f 70 70 69 6e 67 2d 63 Data Ascii: ontent: "\f074";}.fa-comment:before { content: "\f075";}.fa-magnet:before { content: "\f076";}.fa-chevron-up:before { content: "\f077";}.fa-chevron-down:before { content: "\f078";}.fa-retweet:before { content: "\f079";}.fa-shopping-c
2024-04-16 15:05:18 UTC	1369	IN	Data Raw: 39 33 22 3b 0a 7d 0a 2e 66 61 2d 6c 65 6d 6f 6e 2d 6f 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 39 34 22 3b 0a 7d 0a 2e 66 61 2d 70 68 6f 6e 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 39 35 22 3b 0a 7d 0a 2e 66 61 2d 73 71 75 61 72 65 2d 6f 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 39 36 22 3b 0a 7d 0a 2e 66 61 2d 62 6f 6f 6b 6d 61 72 6b 2d 6f 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 39 37 22 3b 0a 7d 0a 2e 66 61 2d 70 68 6f 6e 65 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 39 38 22 3b 0a 7d 0a 2e 66 61 2d 74 77 69 74 74 65 72 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e Data Ascii: 93";}.fa-lemon-o:before { content: "\f094";}.fa-phone:before { content: "\f095";}.fa-square-o:before { content: "\f096";}.fa-bookmark-o:before { content: "\f097";}.fa-phone-square:before { content: "\f098";}.fa-twitter:before { con
2024-04-16 15:05:18 UTC	1369	IN	Data Raw: 2c 0a 2e 66 61 2d 75 73 65 72 73 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 63 30 22 3b 0a 7d 0a 2e 66 61 2d 63 68 61 69 6e 3a 62 65 66 6f 72 65 2c 0a 2e 66 61 2d 6c 69 6e 6b 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 63 31 22 3b 0a 7d 0a 2e 66 61 2d 63 6c 6f 75 64 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 63 32 22 3b 0a 7d 0a 2e 66 61 2d 66 6c 61 73 6b 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 63 33 22 3b 0a 7d 0a 2e 66 61 2d 63 75 74 3a 62 65 66 6f 72 65 2c 0a 2e 66 61 2d 73 63 69 73 73 6f 72 73 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 63 34 22 3b 0a 7d 0a 2e 66 61 2d 63 6f 70 79 3a 62 65 66 Data Ascii: ,.fa-users:before { content: "\f0c0";}.fa-chain:before,.fa-link:before { content: "\f0c1";}.fa-cloud:before { content: "\f0c2";}.fa-flask:before { content: "\f0c3";}.fa-cut:before,.fa-scissors:before { content: "\f0c4";}.fa-copy:bef

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.11	49759	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:16 UTC	606	OUT	GET /wp-content/themes/salient/css/build/style-non-critical.css?ver=16.1.3 HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:19 UTC	586	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:19 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: public, max-age=2592000 expires: Thu, 16 May 2024 15:05:19 GMT last-modified: Sat, 18 Nov 2023 11:56:28 GMT etag: W/"642e-6558a66c-929611dd122e69e4;gz" platform: hostinger content-security-policy: upgrade-insecure-requests x-turbo-charged-by: LiteSpeed alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 1c0dfc31f98266c33f9f3f97a63f13a1-asc-edge5 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 2.241
2024-04-16 15:05:19 UTC	783	IN	Data Raw: 36 34 32 65 0d 0a 23 68 65 61 64 65 72 2d 6f 75 74 65 72 5b 64 61 74 61 2d 6c 68 65 3d 61 6e 69 6d 61 74 65 64 5f 75 6e 64 65 72 6c 69 6e 65 5d 20 23 74 6f 70 20 6e 61 76 3e 75 6c 3e 6c 69 3e 61 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 63 6f 6c 6f 72 20 2e 32 73 20 65 61 73 65 7d 2e 73 66 2d 6d 65 6e 75 3e 6c 69 3e 61 3e 2e 73 66 2d 73 75 62 2d 69 6e 64 69 63 61 74 6f 72 20 69 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 63 6f 6c 6f 72 20 2e 32 73 20 65 61 73 65 7d 2e 73 66 2d 73 68 61 64 6f 77 20 2e 73 66 2d 73 68 61 64 6f 77 2d 6f 66 66 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 20 72 65 70 65 61 74 20 73 63 72 6f 6c 6c 20 30 20 30 20 74 72 61 6e 73 70 61 72 65 6e 74 7d 23 68 65 61 64 65 72 2d 6f 75 74 65 72 3a 6e 6f 74 28 5b 64 61 74 61 2d 68 65 61 64 65 72 2d Data Ascii: 642e#header-outer[data-lhe=animated_underline] #top nav>ul>li>a{transition:color .2s ease}.sf-menu>li>a>.sf-sub-indicator i{transition:color .2s ease}.sf-shadow .sf-shadow-off{background:none repeat scroll 0 0 transparent}#header-outer:not([data-header-
2024-04-16 15:05:19 UTC	1369	IN	Data Raw: 65 63 74 61 72 2d 6d 65 6e 75 2d 69 63 6f 6e 2e 73 76 67 2d 69 63 6f 6e 20 73 76 67 20 70 61 74 68 2c 23 73 6c 69 64 65 2d 6f 75 74 2d 77 69 64 74 68 2d 61 72 65 61 20 2e 6e 65 63 74 61 72 2d 6d 65 6e 75 2d 69 63 6f 6e 2e 73 76 67 2d 69 63 6f 6e 20 73 76 67 20 70 61 74 68 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 66 69 6c 6c 20 2e 32 73 20 65 61 73 65 7d 23 68 65 61 64 65 72 2d 6f 75 74 65 72 20 68 65 61 64 65 72 20 2e 73 66 2d 6d 65 6e 75 3e 6c 69 2e 6e 65 63 74 61 72 2d 72 65 67 75 6c 61 72 2d 6d 65 6e 75 2d 69 74 65 6d 3e 61 3e 2e 6e 65 63 74 61 72 2d 6d 65 6e 75 2d 69 63 6f 6e 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 63 6f 6c 6f 72 20 2e 32 73 20 65 61 73 65 7d 23 68 65 61 64 65 72 2d 6f 75 74 65 72 2e 73 6c 69 64 65 2d 6f 75 74 2d 68 6f 76 65 72 7b 74 72 61 6e Data Ascii: ectar-menu-icon.svg-icon svg path,#slide-out-width-area .nectar-menu-icon.svg-icon svg path{transition:fill .2s ease}#header-outer header .sf-menu>li.nectar-regular-menu-item>a>.nectar-menu-icon{transition:color .2s ease}#header-outer.slide-out-hover{tran
2024-04-16 15:05:19 UTC	1369	IN	Data Raw: 72 61 70 20 2e 6e 65 63 74 61 72 2d 76 69 64 65 6f 2d 69 6e 6e 65 72 2e 74 72 61 6e 73 69 74 69 6f 6e 2c 2e 77 70 62 5f 72 6f 77 20 2e 72 6f 77 2d 62 67 2d 77 72 61 70 20 2e 72 6f 77 2d 62 67 2e 74 72 61 6e 73 69 74 69 6f 6e 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 74 72 61 6e 73 66 6f 72 6d 20 2e 36 35 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 30 35 2c 2e 32 2c 2e 31 2c 31 29 7d 62 6f 64 79 5b 64 61 74 61 2d 61 6a 61 78 2d 74 72 61 6e 73 69 74 69 6f 6e 73 3d 66 61 6c 73 65 5d 20 2e 74 6f 70 2d 6c 65 76 65 6c 20 2e 72 6f 77 2d 62 67 2d 77 72 61 70 5b 64 61 74 61 2d 62 67 2d 61 6e 69 6d 61 74 69 6f 6e 3d 66 61 64 65 2d 69 6e 5d 20 2e 69 6e 6e 65 72 2d 77 72 61 70 2e 75 73 69 6e 67 2d 69 6d 61 67 65 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 Data Ascii: rap .nectar-video-inner.transition,.wpb_row .row-bg-wrap .row-bg.transition{transition:transform .65s cubic-bezier(.05,.2,.1,1)}body[data-ajax-transitions=false] .top-level .row-bg-wrap[data-bg-animation=fade-in] .inner-wrap.using-image{transition:opacity
2024-04-16 15:05:19 UTC	1369	IN	Data Raw: 6e 74 7d 2e 73 63 72 6f 6c 6c 2d 64 6f 77 6e 2d 77 72 61 70 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 34 73 20 65 61 73 65 7d 2e 70 6f 72 74 66 6f 6c 69 6f 2d 69 74 65 6d 73 5b 64 61 74 61 2d 70 73 3d 22 38 22 5d 20 2e 63 6f 6c 20 2e 77 6f 72 6b 2d 69 6e 66 6f 20 2e 76 65 72 74 2d 63 65 6e 74 65 72 20 6c 69 6e 65 2c 2e 70 6f 72 74 66 6f 6c 69 6f 2d 69 74 65 6d 73 5b 64 61 74 61 2d 70 73 3d 22 38 22 5d 20 6c 69 6e 65 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6e 6f 6e 65 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6e 6f 6e 65 7d 2e 6d 61 73 6f 6e 72 79 2e 63 6c 61 73 73 69 63 20 2e 70 6f 73 74 2d 66 65 61 74 75 72 65 64 2d 69 6d 67 20 69 6d 67 2e 6e 65 63 74 61 72 2d 6c 61 7a 79 2c 2e 70 6f 73 74 2d 61 72 65 61 2e 73 74 61 6e Data Ascii: nt}.scroll-down-wrap{transition:opacity .4s ease}.portfolio-items[data-ps="8"] .col .work-info .vert-center line,.portfolio-items[data-ps="8"] line{-webkit-transition:none;transition:none}.masonry.classic .post-featured-img img.nectar-lazy,.post-area.stan
2024-04-16 15:05:19 UTC	1369	IN	Data Raw: 2e 6c 69 6e 65 73 3a 62 65 66 6f 72 65 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 74 72 61 6e 73 66 6f 72 6d 20 2e 34 35 73 20 65 61 73 65 2c 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 2e 32 73 20 65 61 73 65 2c 6f 70 61 63 69 74 79 20 2e 32 73 20 65 61 73 65 7d 2e 6c 69 6e 65 73 2d 62 75 74 74 6f 6e 2e 78 32 20 2e 6c 69 6e 65 73 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 62 61 63 6b 67 72 6f 75 6e 64 20 2e 32 73 20 65 61 73 65 2c 6f 70 61 63 69 74 79 20 2e 32 73 20 65 61 73 65 7d 2e 6c 69 6e 65 73 2d 62 75 74 74 6f 6e 2e 78 32 20 2e 6c 69 6e 65 73 3a 61 66 74 65 72 2c 2e 6c 69 6e 65 73 2d 62 75 74 74 6f 6e 2e 78 32 20 2e 6c 69 6e 65 73 3a 62 65 66 6f 72 65 7b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 35 30 25 20 35 30 25 3b 74 72 61 6e 73 69 74 69 6f Data Ascii: .lines:before{transition:transform .45s ease,background-color .2s ease,opacity .2s ease}.lines-button.x2 .lines{transition:background .2s ease,opacity .2s ease}.lines-button.x2 .lines:after,.lines-button.x2 .lines:before{transform-origin:50% 50%;transitio
2024-04-16 15:05:19 UTC	1369	IN	Data Raw: 72 65 6e 74 2e 64 61 72 6b 2d 73 6c 69 64 65 20 23 74 6f 70 20 6e 61 76 3e 75 6c 3e 6c 69 5b 63 6c 61 73 73 2a 3d 62 75 74 74 6f 6e 5f 73 6f 6c 69 64 5f 63 6f 6c 6f 72 5d 3e 61 3a 68 6f 76 65 72 2c 23 68 65 61 64 65 72 2d 6f 75 74 65 72 5b 64 61 74 61 2d 6c 68 65 3d 64 65 66 61 75 6c 74 5d 20 23 74 6f 70 20 6e 61 76 20 2e 73 66 2d 6d 65 6e 75 3e 6c 69 5b 63 6c 61 73 73 2a 3d 62 75 74 74 6f 6e 5f 73 6f 6c 69 64 5f 63 6f 6c 6f 72 5d 3e 61 3a 68 6f 76 65 72 2c 23 68 65 61 64 65 72 2d 6f 75 74 65 72 5b 64 61 74 61 2d 6c 68 65 3d 64 65 66 61 75 6c 74 5d 2e 74 72 61 6e 73 70 61 72 65 6e 74 2e 64 61 72 6b 2d 73 6c 69 64 65 20 23 74 6f 70 20 6e 61 76 3e 75 6c 3e 6c 69 5b 63 6c 61 73 73 2a 3d 62 75 74 74 6f 6e 5f 73 6f 6c 69 64 5f 63 6f 6c 6f 72 5d 3e 61 3a 68 6f Data Ascii: rent.dark-slide #top nav>ul>li[class=button_solid_color]>a:hover,#header-outer[data-lhe=default] #top nav .sf-menu>li[class=button_solid_color]>a:hover,#header-outer[data-lhe=default].transparent.dark-slide #top nav>ul>li[class*=button_solid_color]>a:ho
2024-04-16 15:05:19 UTC	1369	IN	Data Raw: 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 61 75 74 6f 7d 23 68 65 61 64 65 72 2d 73 65 63 6f 6e 64 61 72 79 2d 6f 75 74 65 72 20 2e 73 66 2d 6d 65 6e 75 20 6c 69 20 2e 73 66 48 6f 76 65 72 20 2e 6f 6e 2d 6c 65 66 74 2d 73 69 64 65 2c 23 68 65 61 64 65 72 2d 73 65 63 6f 6e 64 61 72 79 2d 6f 75 74 65 72 20 2e 73 66 2d 6d 65 6e 75 20 6c 69 20 6c 69 20 2e 6f 6e 2d 6c 65 66 74 2d 73 69 64 65 2c 2e 73 66 2d 6d 65 6e 75 20 6c 69 20 2e 73 66 48 6f 76 65 72 20 2e 6f 6e 2d 6c 65 66 74 2d 73 69 64 65 2c 2e 73 66 2d 6d 65 6e 75 20 6c 69 20 6c 69 20 2e 6f 6e 2d 6c 65 66 74 2d 73 69 64 65 7b 72 69 67 68 74 3a 32 30 65 6d 3b 6c 65 66 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2d 32 30 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 73 66 2d 6d 65 Data Ascii: ointer-events:auto}#header-secondary-outer .sf-menu li .sfHover .on-left-side,#header-secondary-outer .sf-menu li li .on-left-side,.sf-menu li .sfHover .on-left-side,.sf-menu li li .on-left-side{right:20em;left:auto;margin-right:-20px;margin-left:0}.sf-me
2024-04-16 15:05:19 UTC	1369	IN	Data Raw: 62 6f 64 79 5b 64 61 74 61 2d 62 75 74 74 6f 6e 2d 73 74 79 6c 65 3d 73 6c 69 67 68 74 6c 79 5f 72 6f 75 6e 64 65 64 5f 73 68 61 64 6f 77 5d 20 2e 77 69 64 67 65 74 5f 73 65 61 72 63 68 20 69 6e 70 75 74 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 3a 68 6f 76 65 72 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 62 6f 64 79 20 2e 6e 65 63 74 61 72 2d 62 75 74 74 6f 6e 2e 73 65 65 2d 74 68 72 6f 75 67 68 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 63 6f 6c 2e 6c 69 67 68 74 20 2e 6e 65 63 74 61 72 2d 62 75 74 74 6f 6e 2e 73 65 65 2d 74 68 72 6f 75 67 68 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 2d 63 6f Data Ascii: body[data-button-style=slightly_rounded_shadow] .widget_search input[type=submit]:hover{-webkit-transform:none!important;transform:none!important}body .nectar-button.see-through:hover{border-color:#fff}.col.light .nectar-button.see-through:hover{border-co
2024-04-16 15:05:19 UTC	1369	IN	Data Raw: 3d 61 72 72 6f 77 73 2d 61 6e 64 2d 74 65 78 74 5d 20 2e 6e 65 63 74 61 72 2d 77 6f 6f 2d 63 61 72 6f 75 73 65 6c 2d 74 6f 70 20 61 3a 68 6f 76 65 72 3a 61 66 74 65 72 7b 61 6e 69 6d 61 74 69 6f 6e 3a 70 6f 72 74 53 6c 69 64 65 72 4c 69 6e 65 20 2e 34 35 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 31 35 2c 2e 37 35 2c 2e 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 6e 65 63 74 61 72 2d 63 74 61 5b 64 61 74 61 2d 73 74 79 6c 65 3d 73 65 65 2d 74 68 72 6f 75 67 68 5d 20 2e 6c 69 6e 6b 5f 77 72 61 70 3a 68 6f 76 65 72 20 2e 6c 69 6e 6b 5f 74 65 78 74 3a 61 66 74 65 72 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 38 29 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 6e 65 63 74 61 72 2d 63 74 61 5b 64 61 74 61 2d 73 74 79 6c 65 3d 73 65 65 2d 74 68 72 6f 75 Data Ascii: =arrows-and-text] .nectar-woo-carousel-top a:hover:after{animation:portSliderLine .45s cubic-bezier(.15,.75,.5,1) forwards}.nectar-cta[data-style=see-through] .link_wrap:hover .link_text:after{transform:scale(.8);opacity:0}.nectar-cta[data-style=see-throu
2024-04-16 15:05:19 UTC	1369	IN	Data Raw: 61 73 65 20 2e 32 35 73 20 66 6f 72 77 61 72 64 73 7d 2e 74 65 61 6d 2d 6d 65 6d 62 65 72 3a 68 6f 76 65 72 20 2e 74 65 61 6d 2d 6d 65 74 61 20 2e 6e 65 63 74 61 72 2d 63 74 61 5b 64 61 74 61 2d 73 74 79 6c 65 3d 61 72 72 6f 77 2d 61 6e 69 6d 61 74 69 6f 6e 5d 20 2e 6c 69 6e 6b 5f 77 72 61 70 20 70 6f 6c 79 6c 69 6e 65 2c 2e 74 65 61 6d 2d 6d 65 74 61 20 2e 6e 65 63 74 61 72 2d 63 74 61 5b 64 61 74 61 2d 73 74 79 6c 65 3d 61 72 72 6f 77 2d 61 6e 69 6d 61 74 69 6f 6e 5d 20 2e 6c 69 6e 6b 5f 77 72 61 70 3a 68 6f 76 65 72 20 70 6f 6c 79 6c 69 6e 65 7b 61 6e 69 6d 61 74 69 6f 6e 3a 63 74 61 41 72 72 6f 77 53 74 61 72 74 54 65 61 6d 20 2e 38 73 20 65 61 73 65 20 66 6f 72 77 61 72 64 73 7d 23 61 6a 61 78 2d 63 6f 6e 74 65 6e 74 2d 77 72 61 70 20 2e 6e 65 63 74 Data Ascii: ase .25s forwards}.team-member:hover .team-meta .nectar-cta[data-style=arrow-animation] .link_wrap polyline,.team-meta .nectar-cta[data-style=arrow-animation] .link_wrap:hover polyline{animation:ctaArrowStartTeam .8s ease forwards}#ajax-content-wrap .nect

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.11	49760	154.62.106.12	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:16 UTC	391	OUT	GET /wp-content/uploads/2021/02/nit-logo-new-2021.jpg HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:18 UTC	392	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:18 GMT Content-Type: image/jpeg Content-Length: 74579 Connection: close Cache-Control: public, max-age=31536000 X-Hcdn-Image-Optimizer: f:jpeg q:85 w:1600 alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 8e4e8863d4a22ceeb9ee9988ee81db09-bos-edge2 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 1.740 Accept-Ranges: bytes
2024-04-16 15:05:18 UTC	977	IN	Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 40 06 00 00 03 a0 04 00 01 00 00 00 94 01 00 00 00 00 00 00 ff e1 00 fa 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 Data Ascii: ExifII*V^(ifHH02100100@http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpC
2024-04-16 15:05:18 UTC	1369	IN	Data Raw: 67 69 ea 0b 04 31 ac 75 83 fe c1 b0 5e ae f9 82 5b 23 29 bc cf 09 ff 00 32 62 c0 7b 46 6b db 64 c2 18 76 d1 53 e6 ca 5b 64 4f ad 3b 4d 65 41 33 d4 13 fc 57 92 ef 16 79 2c f6 49 a5 6b 4f e1 8b 97 8e a5 c9 66 ff 00 fc 87 bc c8 b0 97 1e d7 ea 98 e9 2c 16 58 ce fe 3a 59 2b 64 f1 b5 bc 5b 41 fe 67 05 c4 61 bc 43 51 ad e7 86 38 b9 96 9f 4b 45 4b 05 38 1d 84 b5 ce f8 d4 ad 17 9d 72 51 f8 23 14 bc 13 fa bc df d4 68 91 71 82 2d 92 33 2a eb 96 20 ae 3d 32 de 2a 1b f1 46 e6 8f 89 71 e4 ef 05 b8 e7 36 1e a4 a9 3d 35 3a d3 1f 2b c9 da a5 48 9d 7e e9 6c a9 25 e0 da 1a 11 e0 45 79 37 d1 e7 3e 03 c2 ee 3c e5 d6 98 09 3d a4 b7 6a 72 71 a3 f1 f9 3c 15 87 a1 cf 7f 15 6e 8a 3c fb 75 5a 33 59 6c 47 7a a6 b2 d1 71 f3 e6 e9 1e 4b 62 8c 6f 79 fe c3 a4 ac 4e 13 c5 cc ba d4 0a 2a Data Ascii: gi1u^[#)2b{FkdvS[dO;MeA3Wy,IkOf,X:Y+d[AgaCQ8KEK8rQ#hq-3* =2Fq6=5:+H~l%Ey7><=jrq<n<uZ3YlGzqKboyN
2024-04-16 15:05:18 UTC	1369	IN	Data Raw: 62 ab 7f 1d 47 72 80 65 4d 70 a4 77 17 51 0f 50 77 a6 6f 4b 1c 0b 4f 38 2b ab a6 a5 5f 55 65 93 fd 49 7a ad 9e 6b 27 bd e6 cc 72 6b 61 9b 45 0d 8f 10 dd 70 d3 db 4d 8c db 1b e8 89 0d 8e f9 4f 19 6c 1d 00 54 33 6f 12 7f 7b 33 19 e9 6e e5 30 8d ec 92 36 bd 8e 6b 9a e1 9b 48 39 82 3a 42 d3 5a de 74 72 6f 5a 7b 1a d8 ff 00 9c 1e b5 bd 1e a6 99 c9 11 16 83 d0 88 88 02 22 20 08 88 80 22 22 00 88 88 02 22 20 08 88 80 22 22 00 88 88 02 22 20 08 88 80 22 22 00 88 88 02 22 20 08 88 80 22 22 00 88 88 02 22 20 08 88 80 22 22 00 88 88 02 22 20 08 88 80 22 22 00 88 88 02 22 20 08 88 80 22 22 00 88 88 02 22 20 08 88 80 22 22 00 88 88 02 22 20 08 88 80 22 22 00 88 88 02 22 20 08 88 80 22 22 00 88 88 02 22 20 08 88 80 22 22 00 88 88 02 22 20 08 88 80 22 22 00 88 88 02 22 Data Ascii: bGreMpwQPwoKO8+_UeIzk'rkaEpMOlT3o{3n06kH9:BZtroZ{" """ """ """ """ """ """ """ """ """ """ """ """
2024-04-16 15:05:18 UTC	1369	IN	Data Raw: ba cf 6f 7e a0 ee e0 27 37 30 f3 75 8e 85 2f a2 aa 82 b2 11 34 0f 0e 6e e3 d2 0f 41 5b 70 5c 7e df 14 86 4b dd 9a db 1f ba e2 8c 6e ad 27 41 f1 5c 4e f4 44 53 c7 20 44 44 01 11 10 05 ac 34 89 75 15 d7 81 4b 0c 9a d0 52 8d 5d 87 61 7f a6 3e 2d 83 c4 54 fb 11 5c 59 6b b4 54 55 b9 c0 39 ad ca 30 79 de 7b d1 e5 5a 6d ce 73 9c 5c f2 5c e7 12 49 3c e4 ef 2b 75 28 ef 26 70 9a 19 c9 d5 7b b6 1f 11 11 6f 27 42 22 20 08 88 80 f4 5b 6a e5 a0 af 82 b2 13 dd c2 f0 e1 d7 d2 3c 61 6e 7a 0a a8 6b 68 e2 ab a7 76 b4 52 b4 39 a7 2c b6 2d 20 a7 fa 2f b9 ba 48 27 b5 c8 47 e2 bf 19 16 cd b9 13 dd 0f 2e 5e 55 aa ac 73 59 91 58 ad 0d 3a 7d 22 da bd 09 ba 22 2e 72 bc 11 11 00 44 44 01 17 c7 b9 ad 69 73 9c 00 03 32 49 d8 16 a5 d2 26 92 f5 b5 ed 98 66 7d 9b 5b 35 6b 7e 48 fe d7 93 Data Ascii: o~'70u/4nA[p\~Kn'A\NDS DD4uKR]a>-T\YkTU90y{Zms\\I<+u(&p{o'B" [j<anzkhvR9,- /H'G.^UsYX:}"".rDDis2I&f}[5k~H
2024-04-16 15:05:18 UTC	1369	IN	Data Raw: 44 5c b2 93 93 cd 9f 4e b4 b4 a5 69 4d 53 a4 b2 5e bd ec 2d d9 a0 3a c1 2e 19 ac a2 25 e5 d4 f5 65 db 77 00 f6 82 00 f1 83 e5 5a 4d 6c ce 0f f5 01 b7 cb 9d 31 90 83 25 33 1e d6 67 bf 55 c7 33 97 56 63 ca b3 a4 f2 91 1b ed 15 25 53 0f 9f 76 4f ea 6e 75 13 c5 96 da db 75 c8 62 db 05 3b e6 ad 89 82 3b 85 1c 7f fc fd 3b 73 39 01 bb 8d 66 64 b0 f3 e6 58 76 38 65 2c 45 21 42 b3 a3 3d 25 ad 6f 5b 9a e0 ff 00 9a b6 ad 67 cb da cc f2 59 ee 34 57 6b 65 35 ca dd 50 ca 8a 5a 98 c4 91 48 dd ce 69 dd d6 3b 0e d1 b9 7a d4 2e 6f fe 0c c4 de 68 6f 73 87 6f 35 00 4c 0f 7b 43 5a f3 90 78 e8 8e 53 90 3c c2 4c 8f a7 39 4d 02 ce e2 8a a6 d4 a1 ae 32 d9 fb 3e f5 bf 9e c6 82 79 84 44 5c c7 a1 11 10 04 44 40 11 11 00 44 44 01 11 10 04 44 40 11 11 00 44 44 01 11 10 04 44 40 11 11 Data Ascii: D\NiMS^-:.%ewZMl1%3gU3Vc%SvOnuub;;;s9fdXv8e,E!B=%o[gY4Wke5PZHi;z.ohoso5L{CZxS<L9M2>yD\D@DDD@DDD@
2024-04-16 15:05:18 UTC	1369	IN	Data Raw: 93 cf 2b 22 8a 36 97 bd ef 76 4d 6b 40 cc 92 79 82 03 9a 2e 14 f3 45 51 04 73 c1 2b 25 8a 56 87 c6 f6 3b 36 b9 a4 66 08 23 78 21 73 40 11 11 00 44 44 01 11 10 04 44 40 11 11 00 44 44 01 11 10 04 44 40 11 11 00 44 44 01 11 10 04 44 40 11 11 00 44 44 01 11 10 04 44 40 11 11 00 44 44 01 11 10 04 44 40 11 11 00 44 44 01 11 10 04 44 40 11 11 01 d7 53 3c 34 d4 f2 54 54 48 c8 a1 89 85 f2 3d e7 26 b5 a0 66 49 3c c0 05 17 d1 fc 12 dc 3c d7 8c 2b 19 23 2a 2f 3a a6 9a 39 07 75 05 1b 73 e2 59 d4 48 26 47 0f da 90 8e 65 c7 1f 67 78 ab b7 60 d8 5c 75 6e 4e 33 5c 0b 7d 2d 14 64 19 1b b3 77 18 e2 c8 fb 1c fe 85 2d 63 5a c6 86 b4 00 00 c8 00 36 05 da ff 00 c1 b7 ff 00 ba 7f fa a7 f7 6b e8 b8 98 ed 7e 07 d4 44 5c 46 41 11 10 11 cc 6b ba 93 b5 ff 00 d9 47 14 8f 1a ee a4 ed Data Ascii: +"6vMk@y.EQs+%V;6f#x!s@DDD@DDD@DDD@DDD@DDD@DDD@S<4TTH=&fI<<+#*/:9usYH&Gegx`\unN3\}-dw-cZ6k~D\FAkG
2024-04-16 15:05:18 UTC	1369	IN	Data Raw: bd bc a6 e1 42 9a 49 6f d7 9f a9 21 6b 4a aa 8a 95 59 36 f8 6a 08 88 a3 8e c0 88 88 02 22 20 08 88 80 22 22 00 88 88 02 22 20 08 88 80 22 22 00 88 88 02 22 20 08 88 80 22 22 00 88 88 0c 16 32 9f 16 41 49 03 b0 9d be d5 5b 50 64 22 66 d7 d4 be 16 b5 99 6c 2d 2d 69 cc e6 b5 56 3b d2 66 95 f0 5d 1f 9b af 58 06 d1 e6 2d 60 d3 53 4f 5e f9 63 69 3b b5 b2 19 b7 3e b0 16 f2 58 0d 22 db e1 b9 e0 2b f5 04 ec 6b 99 35 ba 76 f7 43 60 3a 84 83 e2 20 1f 12 ec b5 ad 4e 32 8c 6a 41 35 9f 7e 7e a7 3d 7a 73 94 5b 84 9a 7e 45 77 fc 27 b1 1f 82 b6 9f 85 49 f5 27 e1 3d 88 fc 15 b4 fc 2a 4f a9 68 26 ed 68 3d 48 e0 e2 08 6f 7c 46 43 b5 5d bf 08 b2 ec d7 d7 f7 2b 7f 88 5c fe bf 42 db 60 5d 23 69 67 19 50 36 e3 68 c0 56 66 50 38 90 ca 9a 9a f7 c4 c7 e5 bf 57 31 9b 87 58 19 2d ab Data Ascii: BIo!kJY6j" """ """ ""2AI[Pd"fl--iV;f]X-`SO^ci;>X"+k5vC`: N2jA5~~=zs[~Ew'I'=*Oh&h=Ho\|FC]+\B`]#igP6hVfP8W1X-
2024-04-16 15:05:18 UTC	1369	IN	Data Raw: 20 7a 75 fa d3 5f ad 79 b5 d3 5d 32 07 a7 5f ad 35 fa d7 9b 5d 35 d3 20 7a 75 fa d3 5f ad 79 b5 d3 5f ad 32 07 65 5d 5c 54 94 d2 54 cf 20 64 71 b7 59 c4 a8 f1 bd d5 df 69 e0 aa ab 95 ce 11 b0 c5 0c 64 ec 8a 30 4e 4d 1e 2d fd 25 61 34 83 79 12 cc db 5c 12 66 c8 ce b4 e4 1d ee e6 6f 8b 7a f9 84 df 9d ab 69 dd 2b 87 c8 a3 6e ea e9 3d 15 b8 b0 61 d6 6a 14 fa 59 2d 6f 67 72 fe e6 69 17 10 57 2c d7 11 23 90 44 44 01 11 10 05 2d d1 07 a2 25 b3 fc df a2 7a 89 29 f6 82 a9 8c b8 cd f5 06 2d 66 d3 d2 3c eb 7e c3 9c 5a 07 94 6b 0f 2a ca 1f 12 23 f1 59 a8 59 55 6f f4 bf aa c8 de a8 88 bb 0f 92 84 44 40 14 47 08 93 67 c5 17 8c 30 ee e6 9d ce 37 3b 78 e6 11 4a e3 c6 b0 7a d9 75 8f 50 91 bd 4a 5c a2 7a 42 ce db 25 a7 14 c7 98 f3 aa a8 36 a7 2e 7a 59 b2 8e 5c fa 9a 78 b9 Data Ascii: zu_y]2_5]5 zu_y_2e]\TT dqYid0NM-%a4y\fozi+n=ajY-ogriW,#DD-%z)-f<~Zk*#YYUoD@Gg07;xJzuPJ\zB%6.zY\x
2024-04-16 15:05:18 UTC	1369	IN	Data Raw: 38 a9 2d 8c 22 22 c0 c8 22 22 00 b1 98 af f5 5e ed ec 29 be 61 59 35 8c c5 7f aa f7 6f 61 4d f3 0a ce 9f c4 8c 67 f0 b3 f3 b9 bd eb 7b 02 e7 1f e5 1b da 3e 55 c1 bd e8 ec 0b 9c 7f 94 6f 68 f9 57 d4 19 49 3f 46 6d bf a3 e9 ff 00 84 df 9a 17 a1 79 ed bf a3 e9 ff 00 84 df 9a 17 a0 af 96 cb 69 77 5b 02 2d 65 a4 2b 9e 99 6c f5 15 95 98 6e d3 86 6e f6 d6 38 ba 18 44 73 79 a8 33 2e 71 c6 00 e3 bf bd f1 05 a5 e5 e1 29 8f a2 91 d1 4b 67 c3 f1 c8 c7 16 b9 ae a5 98 16 91 bc 11 c6 ec 2a 46 df 0a ad 73 1d 2a 4d 3f 33 92 ad f5 3a 2f 29 a6 bc 8b 6a 8a a4 fe 12 f8 ef d4 ac 39 f0 79 bf dd 5b a3 41 7a 56 a6 d2 15 be 6a 5a d8 a1 a2 be 52 0d 69 e0 8c 9d 49 19 cd 23 33 24 e5 9e c2 33 39 1c ba 42 5c e1 37 36 f0 e9 26 b5 77 1e 51 bf a3 5a 5a 11 7a cd 9c 88 8a 34 ed 08 85 6a 3c Data Ascii: 8-""""^)aY5oaMg{>UohWI?Fmyiw[-e+lnn8Dsy3.q)KgFsM?3:/)j9y[AzVjZRiI#3$39B\76&wQZZz4j<
2024-04-16 15:05:18 UTC	1369	IN	Data Raw: 7e a5 61 cf 83 cd fe ea 95 86 07 75 38 a9 47 26 9f 79 c3 2c 4e 84 5e 4f 3c fc 0b 6c 8a a9 61 fd 38 e9 67 13 dd 05 ae c1 67 b5 55 d6 48 09 6c 70 d2 3b b9 1d 24 ba 4c 80 1d 24 e4 a5 75 d7 ce 12 94 74 af a8 7e 1d b7 4a d6 0c cb 61 8e 29 1f e2 68 93 33 e2 cd 63 3c 1e ad 37 a3 39 c5 3e f6 7b 1c 42 9c d6 71 8b 6b c0 b0 48 aa 34 1c 22 f4 89 41 56 f8 6e 14 16 89 5f 1b 8b 64 8a 6a 47 c6 f6 91 bc 1c 9e 32 3d a1 4f 70 5f 09 5b 25 74 d1 d3 62 7b 44 d6 97 38 e4 6a 60 7f 1d 08 eb 23 20 e0 3c 45 2a e0 97 74 d6 96 8e 7e 0c 43 12 b7 9b cb 3c bc 4d f8 8b cf 6e ad a4 b8 d0 c3 5d 41 53 15 55 2c ed 0f 8a 68 9e 1c d7 b4 f3 82 37 af 42 8a 6b 27 93 3b d3 cc 22 22 f0 04 44 40 11 16 96 e1 67 8b e5 b1 60 aa 7b 15 05 4c 90 57 5d e5 c9 ce 89 e5 af 64 0c c8 bc 82 36 8c c9 68 f1 95 be Data Ascii: ~au8G&y,N^O<la8ggUHlp;$L$ut~Ja)h3c<79>{BqkH4"AVn_djG2=Op_[%tb{D8j`# <E*t~C<Mn]ASU,h7Bk';""D@g`{LW]d6h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.11	49764	154.62.106.12	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:17 UTC	409	OUT	GET /wp-content/plugins/revslider6620n-1/public/assets/assets/dummy.png HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:18 UTC	387	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:18 GMT Content-Type: image/png Content-Length: 89 Connection: close Cache-Control: public, max-age=31536000 X-Hcdn-Image-Optimizer: f:png q:85 w:1600 alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 610542d76a330fc705037f2c1a5c1be1-bos-edge1 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 0.745 Accept-Ranges: bytes
2024-04-16 15:05:18 UTC	89	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 0b 49 44 41 54 08 99 63 60 00 02 00 00 05 00 01 62 55 32 88 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRpHYsIDATc`bU2IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.11	49762	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:17 UTC	603	OUT	GET /wp-content/themes/salient/css/build/plugins/magnific.css?ver=8.6.0 HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:18 UTC	586	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:18 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: public, max-age=2592000 expires: Thu, 16 May 2024 15:05:18 GMT last-modified: Tue, 11 Jan 2022 15:21:50 GMT etag: W/"1f1c-61dda08e-245a6a996a5f11f0;gz" platform: hostinger content-security-policy: upgrade-insecure-requests x-turbo-charged-by: LiteSpeed alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: a7d679c25ed1bbdca1ed4d121e31cd29-asc-edge3 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 1.037
2024-04-16 15:05:18 UTC	783	IN	Data Raw: 31 66 31 63 0d 0a 2e 6d 66 70 2d 62 67 7b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 21 69 6d 70 6f 72 74 61 6e 74 3b 7a 2d 69 6e 64 65 78 3a 31 30 34 32 30 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 21 69 6d 70 6f 72 74 61 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 62 30 62 30 62 3b 6f 70 61 63 69 74 79 3a 2e 38 7d 2e 6d 66 70 2d 77 72 61 70 7b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 7a 2d 69 6e 64 65 78 3a 31 30 34 33 30 30 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 6f 75 74 6c 69 6e 65 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 66 Data Ascii: 1f1c.mfp-bg{top:0;left:0;width:100%;height:100%!important;z-index:104200;overflow:hidden;position:fixed!important;background:#0b0b0b;opacity:.8}.mfp-wrap{top:0;left:0;width:100%;height:100%;z-index:104300;position:fixed;outline:0!important;-webkit-backf
2024-04-16 15:05:18 UTC	1369	IN	Data Raw: 31 30 30 25 3b 63 75 72 73 6f 72 3a 61 75 74 6f 7d 2e 6d 66 70 2d 61 6a 61 78 2d 63 75 72 7b 63 75 72 73 6f 72 3a 70 72 6f 67 72 65 73 73 7d 2e 6d 66 70 2d 7a 6f 6f 6d 2d 6f 75 74 2d 63 75 72 2c 2e 6d 66 70 2d 7a 6f 6f 6d 2d 6f 75 74 2d 63 75 72 20 2e 6d 66 70 2d 69 6d 61 67 65 2d 68 6f 6c 64 65 72 20 2e 6d 66 70 2d 63 6c 6f 73 65 7b 63 75 72 73 6f 72 3a 2d 6d 6f 7a 2d 7a 6f 6f 6d 2d 6f 75 74 3b 63 75 72 73 6f 72 3a 2d 77 65 62 6b 69 74 2d 7a 6f 6f 6d 2d 6f 75 74 3b 63 75 72 73 6f 72 3a 7a 6f 6f 6d 2d 6f 75 74 7d 2e 6d 66 70 2d 7a 6f 6f 6d 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 63 75 72 73 6f 72 3a 2d 77 65 62 6b 69 74 2d 7a 6f 6f 6d 2d 69 6e 3b 63 75 72 73 6f 72 3a 2d 6d 6f 7a 2d 7a 6f 6f 6d 2d 69 6e 3b 63 75 72 73 6f 72 3a 7a 6f 6f 6d 2d 69 6e Data Ascii: 100%;cursor:auto}.mfp-ajax-cur{cursor:progress}.mfp-zoom-out-cur,.mfp-zoom-out-cur .mfp-image-holder .mfp-close{cursor:-moz-zoom-out;cursor:-webkit-zoom-out;cursor:zoom-out}.mfp-zoom{cursor:pointer;cursor:-webkit-zoom-in;cursor:-moz-zoom-in;cursor:zoom-in
2024-04-16 15:05:18 UTC	1369	IN	Data Raw: 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 32 30 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 68 65 69 67 68 74 3a 32 30 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 34 37 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 33 2c 31 2c 2e 33 2c 2e 39 35 29 20 30 73 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 34 37 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 33 2c 31 2c 2e 33 2c 2e 39 35 29 20 30 73 7d 2e 6d 66 70 2d 63 6c 6f 73 65 2d 62 74 6e 2d 69 6e 20 2e 6d 66 70 2d 63 6c 6f 73 65 3a 68 6f 76 65 72 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 Data Ascii: :inline-block;width:20px!important;height:20px;padding-right:0!important;line-height:20px!important;transition:all .47s cubic-bezier(.3,1,.3,.95) 0s;-webkit-transition:all .47s cubic-bezier(.3,1,.3,.95) 0s}.mfp-close-btn-in .mfp-close:hover{transform:rota
2024-04-16 15:05:18 UTC	1369	IN	Data Raw: 78 3b 6f 70 61 63 69 74 79 3a 2e 37 7d 2e 6d 66 70 2d 61 72 72 6f 77 2d 6c 65 66 74 7b 6c 65 66 74 3a 30 7d 62 6f 64 79 2e 6f 72 69 67 69 6e 61 6c 20 2e 6d 66 70 2d 61 72 72 6f 77 2d 6c 65 66 74 20 2e 6d 66 70 2d 61 2c 62 6f 64 79 2e 6f 72 69 67 69 6e 61 6c 20 2e 6d 66 70 2d 61 72 72 6f 77 2d 6c 65 66 74 3a 61 66 74 65 72 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 31 37 70 78 20 73 6f 6c 69 64 20 23 66 66 66 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 31 70 78 7d 62 6f 64 79 2e 6f 72 69 67 69 6e 61 6c 20 2e 6d 66 70 2d 61 72 72 6f 77 2d 6c 65 66 74 20 2e 6d 66 70 2d 62 2c 62 6f 64 79 2e 6f 72 69 67 69 6e 61 6c 20 2e 6d 66 70 2d 61 72 72 6f 77 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 35 70 78 3b 62 6f 72 64 65 72 2d 72 69 Data Ascii: x;opacity:.7}.mfp-arrow-left{left:0}body.original .mfp-arrow-left .mfp-a,body.original .mfp-arrow-left:after{border-right:17px solid #fff;margin-left:31px}body.original .mfp-arrow-left .mfp-b,body.original .mfp-arrow-left:before{margin-left:25px;border-ri
2024-04-16 15:05:18 UTC	1369	IN	Data Raw: 2d 66 69 67 75 72 65 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 7d 2e 6d 66 70 2d 66 69 67 75 72 65 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 27 27 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 30 3b 74 6f 70 3a 35 35 70 78 3b 62 6f 74 74 6f 6d 3a 35 35 70 78 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 72 69 67 68 74 3a 30 3b 77 69 64 74 68 3a 61 75 74 6f 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 7a 2d 69 6e 64 65 78 3a 2d 31 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 34 34 34 7d 2e 6d 66 70 2d 66 69 67 75 72 65 20 73 6d 61 6c 6c 7b 63 6f 6c 6f 72 3a 23 62 64 62 64 62 64 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 34 70 78 7d 2e 6d 66 70 2d 66 69 67 Data Ascii: -figure{line-height:0}.mfp-figure:after{content:'';position:absolute;left:0;top:55px;bottom:55px;display:block;right:0;width:auto;height:auto;z-index:-1;background:#444}.mfp-figure small{color:#bdbdbd;display:block;font-size:12px;line-height:14px}.mfp-fig
2024-04-16 15:05:18 UTC	1369	IN	Data Raw: 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 37 35 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 37 35 29 7d 2e 6d 66 70 2d 61 72 72 6f 77 2d 6c 65 66 74 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 30 7d 2e 6d 66 70 2d 61 72 72 6f 77 2d 72 69 67 68 74 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 31 30 30 25 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 31 30 30 25 7d 2e 61 73 63 65 6e 64 20 2e 6d 66 70 2d 61 72 72 6f 77 2d 6c 65 66 74 2c 2e 6d 61 74 65 72 69 61 6c 20 2e 6d 66 70 2d 61 72 72 6f 77 2d 6c 65 66 74 7b 6c 65 66 74 3a 32 30 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 73 63 65 6e 64 20 2e 6d Data Ascii: t-transform:scale(.75);transform:scale(.75)}.mfp-arrow-left{-webkit-transform-origin:0;transform-origin:0}.mfp-arrow-right{-webkit-transform-origin:100%;transform-origin:100%}.ascend .mfp-arrow-left,.material .mfp-arrow-left{left:20px!important}.ascend .m
2024-04-16 15:05:18 UTC	349	IN	Data Raw: 79 3a 30 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 33 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 2e 33 29 7d 2e 6d 66 70 2d 7a 6f 6f 6d 2d 6f 75 74 2e 6d 66 70 2d 62 67 7b 6f 70 61 63 69 74 79 3a 30 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 7d 2e 6d 66 70 2d 7a 6f 6f 6d 2d 6f 75 74 2e 6d 66 70 2d 72 65 61 64 79 20 2e 6d 66 70 2d 77 69 74 68 2d 61 6e 69 6d 7b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 7d 2e 6d 66 70 2d 7a 6f 6f 6d 2d 6f 75 74 2e 6d 66 70 2d 72 65 61 64 79 2e 6d 66 70 2d 62 67 7b 6f 70 61 63 69 74 79 3a 2e 38 7d 2e 6d 66 70 2d 7a 6f 6f 6d 2d 6f 75 74 2e 6d 66 70 2d 72 65 6d 6f 76 69 6e 67 20 2e 6d 66 Data Ascii: y:0;transition:all .3s ease-in-out;transform:scale(1.3)}.mfp-zoom-out.mfp-bg{opacity:0;transition:all .3s ease-out}.mfp-zoom-out.mfp-ready .mfp-with-anim{opacity:1;transform:scale(1)}.mfp-zoom-out.mfp-ready.mfp-bg{opacity:.8}.mfp-zoom-out.mfp-removing .mf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.11	49763	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:17 UTC	603	OUT	GET /wp-content/themes/salient/css/build/off-canvas/core.css?ver=16.1.3 HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:19 UTC	586	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:19 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: public, max-age=2592000 expires: Thu, 16 May 2024 15:05:19 GMT last-modified: Sat, 18 Nov 2023 11:56:28 GMT etag: W/"5a5e-6558a66c-e9aa6801c21be1bd;gz" platform: hostinger content-security-policy: upgrade-insecure-requests x-turbo-charged-by: LiteSpeed alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: fb27e6c787533c39182110598d07161d-asc-edge5 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 2.123
2024-04-16 15:05:19 UTC	783	IN	Data Raw: 35 61 35 65 0d 0a 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 36 39 31 70 78 29 7b 23 73 6c 69 64 65 2d 6f 75 74 2d 77 69 64 67 65 74 2d 61 72 65 61 20 2e 73 65 63 6f 6e 64 61 72 79 2d 68 65 61 64 65 72 2d 74 65 78 74 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 39 39 39 70 78 29 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 36 39 31 70 78 29 7b 62 6f 64 79 2e 6f 72 69 67 69 6e 61 6c 20 23 73 6c 69 64 65 2d 6f 75 74 2d 77 69 64 67 65 74 2d 61 72 65 61 20 2e 69 6e 6e 65 72 20 2e 6f 66 66 2d 63 61 6e 76 61 73 2d 6d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 2e 6d 6f 62 69 6c 65 2d 6f 6e 6c 79 20 2e 6d Data Ascii: 5a5e@media only screen and (min-width:691px){#slide-out-widget-area .secondary-header-text{display:none}}@media only screen and (max-width:999px) and (min-width:691px){body.original #slide-out-widget-area .inner .off-canvas-menu-container.mobile-only .m
2024-04-16 15:05:19 UTC	1369	IN	Data Raw: 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 74 72 61 6e 73 66 6f 72 6d 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 2c 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 62 6f 74 74 6f 6d 3a 2d 36 70 78 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 58 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 58 28 30 29 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 32 70 78 20 73 6f 6c 69 64 20 23 30 30 30 3b 63 6f 6e 74 65 6e 74 3a 27 27 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 69 6e 68 65 72 69 74 7d 23 73 6c 69 64 65 2d 6f 75 74 2d 77 69 64 67 65 74 2d 61 72 65 61 2e 66 Data Ascii: ;transition:transform .3s ease-out,border-color .3s ease-out;position:absolute;display:block;bottom:-6px;left:0;width:100%;-webkit-transform:scaleX(0);transform:scaleX(0);border-top:2px solid #000;content:'';padding-bottom:inherit}#slide-out-widget-area.f
2024-04-16 15:05:19 UTC	1369	IN	Data Raw: 69 63 6f 6e 2e 6e 65 63 74 61 72 2d 6d 65 6e 75 2d 69 74 65 6d 2d 77 69 74 68 2d 64 65 73 63 20 73 70 61 6e 3a 61 66 74 65 72 7b 62 6f 74 74 6f 6d 3a 30 7d 23 73 6c 69 64 65 2d 6f 75 74 2d 77 69 64 67 65 74 2d 61 72 65 61 2e 66 75 6c 6c 73 63 72 65 65 6e 2d 73 70 6c 69 74 20 2e 6f 66 66 2d 63 61 6e 76 61 73 2d 6d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 6e 65 63 74 61 72 2d 6d 65 6e 75 2d 69 74 65 6d 2d 77 69 74 68 2d 69 63 6f 6e 20 2e 6d 65 6e 75 2d 74 69 74 6c 65 2d 74 65 78 74 3a 61 66 74 65 72 2c 2e 6d 61 74 65 72 69 61 6c 20 23 73 6c 69 64 65 2d 6f 75 74 2d 77 69 64 67 65 74 2d 61 72 65 61 5b 63 6c 61 73 73 2a 3d 73 6c 69 64 65 2d 6f 75 74 2d 66 72 6f 6d 2d 72 69 67 68 74 5d 20 2e 6f 66 66 2d 63 61 6e 76 61 73 2d 6d 65 6e 75 2d 63 6f 6e 74 61 69 Data Ascii: icon.nectar-menu-item-with-desc span:after{bottom:0}#slide-out-widget-area.fullscreen-split .off-canvas-menu-container .nectar-menu-item-with-icon .menu-title-text:after,.material #slide-out-widget-area[class*=slide-out-from-right] .off-canvas-menu-contai
2024-04-16 15:05:19 UTC	1369	IN	Data Raw: 6e 2d 73 70 6c 69 74 20 2e 69 6e 6e 65 72 20 2e 6f 66 66 2d 63 61 6e 76 61 73 2d 6d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 20 6c 69 20 61 3a 66 6f 63 75 73 3a 61 66 74 65 72 2c 23 73 6c 69 64 65 2d 6f 75 74 2d 77 69 64 67 65 74 2d 61 72 65 61 2e 66 75 6c 6c 73 63 72 65 65 6e 2d 73 70 6c 69 74 20 2e 69 6e 6e 65 72 20 2e 6f 66 66 2d 63 61 6e 76 61 73 2d 6d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 20 6c 69 20 61 3a 68 6f 76 65 72 3a 61 66 74 65 72 2c 62 6f 64 79 2e 6d 61 74 65 72 69 61 6c 20 23 73 6c 69 64 65 2d 6f 75 74 2d 77 69 64 67 65 74 2d 61 72 65 61 5b 63 6c 61 73 73 2a 3d 73 6c 69 64 65 2d 6f 75 74 2d 66 72 6f 6d 2d 72 69 67 68 74 5d 20 2e 6f 66 66 2d 63 61 6e 76 61 73 2d 6d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 63 75 72 72 65 6e 74 2d 6d 65 6e Data Ascii: n-split .inner .off-canvas-menu-container li a:focus:after,#slide-out-widget-area.fullscreen-split .inner .off-canvas-menu-container li a:hover:after,body.material #slide-out-widget-area[class*=slide-out-from-right] .off-canvas-menu-container .current-men
2024-04-16 15:05:19 UTC	1369	IN	Data Raw: 20 2e 77 69 64 67 65 74 20 75 6c 2e 70 72 6f 64 75 63 74 5f 6c 69 73 74 5f 77 69 64 67 65 74 20 6c 69 20 61 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 7d 23 73 6c 69 64 65 2d 6f 75 74 2d 77 69 64 67 65 74 2d 61 72 65 61 20 2e 6f 66 66 2d 63 61 6e 76 61 73 2d 6d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 77 69 64 67 65 74 2d 61 72 65 61 2d 61 63 74 69 76 65 20 2e 77 69 64 67 65 74 20 75 6c 2e 70 72 6f 64 75 63 74 5f 6c 69 73 74 5f 77 69 64 67 65 74 20 6c 69 20 61 3a 61 66 74 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 23 73 6c 69 64 65 2d 6f 75 74 2d 77 69 64 67 65 74 2d 61 72 65 61 20 2e 77 69 64 67 65 74 2d 61 72 65 61 2d 61 63 74 69 76 65 20 2e 77 70 2d 63 61 70 74 69 6f 6e 20 2e 77 70 2d 63 61 70 74 69 6f 6e 2d 74 65 78 74 7b 63 6f 6c 6f 72 3a Data Ascii: .widget ul.product_list_widget li a{display:inline}#slide-out-widget-area .off-canvas-menu-container .widget-area-active .widget ul.product_list_widget li a:after{display:none}#slide-out-widget-area .widget-area-active .wp-caption .wp-caption-text{color:
2024-04-16 15:05:19 UTC	1369	IN	Data Raw: 2d 6d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 20 6c 69 20 61 3a 66 6f 63 75 73 2c 23 73 6c 69 64 65 2d 6f 75 74 2d 77 69 64 67 65 74 2d 61 72 65 61 2e 73 6c 69 64 65 2d 6f 75 74 2d 66 72 6f 6d 2d 72 69 67 68 74 20 2e 69 6e 6e 65 72 20 2e 6f 66 66 2d 63 61 6e 76 61 73 2d 6d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 20 6c 69 20 61 3a 68 6f 76 65 72 2c 23 73 6c 69 64 65 2d 6f 75 74 2d 77 69 64 67 65 74 2d 61 72 65 61 2e 73 6c 69 64 65 2d 6f 75 74 2d 66 72 6f 6d 2d 72 69 67 68 74 2d 68 6f 76 65 72 20 2e 69 6e 6e 65 72 20 2e 6f 66 66 2d 63 61 6e 76 61 73 2d 6d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 20 6c 69 20 61 3a 66 6f 63 75 73 2c 23 73 6c 69 64 65 2d 6f 75 74 2d 77 69 64 67 65 74 2d 61 72 65 61 2e 73 6c 69 64 65 2d 6f 75 74 2d 66 72 6f 6d 2d 72 69 67 68 74 2d Data Ascii: -menu-container li a:focus,#slide-out-widget-area.slide-out-from-right .inner .off-canvas-menu-container li a:hover,#slide-out-widget-area.slide-out-from-right-hover .inner .off-canvas-menu-container li a:focus,#slide-out-widget-area.slide-out-from-right-
2024-04-16 15:05:19 UTC	1369	IN	Data Raw: 74 2d 77 69 64 67 65 74 2d 61 72 65 61 20 2e 6e 65 63 74 61 72 2d 68 65 61 64 65 72 2d 74 65 78 74 2d 63 6f 6e 74 65 6e 74 3e 73 70 61 6e 3e 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 62 6f 64 79 20 23 73 6c 69 64 65 2d 6f 75 74 2d 77 69 64 67 65 74 2d 61 72 65 61 20 2e 73 65 63 6f 6e 64 61 72 79 2d 68 65 61 64 65 72 2d 74 65 78 74 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 65 6d 7d 23 73 6c 69 64 65 2d 6f 75 74 2d 77 69 64 67 65 74 2d 61 72 65 61 2c 23 73 6c 69 64 65 2d 6f 75 74 2d 77 69 64 67 65 74 2d 61 72 65 61 2e 73 6c 69 64 65 2d 6f 75 74 2d 66 72 6f 6d 2d 72 69 67 68 74 2d 68 6f 76 65 72 7b 6f 76 65 72 66 6c 6f 77 2d 79 3a 73 63 72 6f 6c 6c 21 69 6d 70 6f 72 74 61 6e 74 3b 6f 76 65 72 66 6c 6f 77 2d 78 Data Ascii: t-widget-area .nectar-header-text-content>span>:last-child{margin-bottom:0}body #slide-out-widget-area .secondary-header-text{line-height:1.4em}#slide-out-widget-area,#slide-out-widget-area.slide-out-from-right-hover{overflow-y:scroll!important;overflow-x
2024-04-16 15:05:19 UTC	1369	IN	Data Raw: 2e 73 6c 69 64 65 2d 6f 75 74 2d 66 72 6f 6d 2d 72 69 67 68 74 20 2e 77 69 64 67 65 74 3a 6e 6f 74 28 2e 6e 65 63 74 61 72 5f 70 6f 70 75 6c 61 72 5f 70 6f 73 74 73 5f 77 69 64 67 65 74 29 3a 6e 6f 74 28 2e 72 65 63 65 6e 74 5f 70 6f 73 74 73 5f 65 78 74 72 61 5f 77 69 64 67 65 74 29 20 6c 69 20 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 23 73 6c 69 64 65 2d 6f 75 74 2d 77 69 64 67 65 74 2d 61 72 65 61 20 2e 6e 65 63 74 61 72 2d 6d 65 6e 75 2d 6c 61 62 65 6c 3a 62 65 66 6f 72 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 7d 62 6f 64 79 5b 64 61 74 61 2d 66 75 6c 6c 2d 77 69 64 74 68 2d 68 65 61 64 65 72 3d 66 61 6c 73 65 5d 20 23 73 6c 69 64 65 2d 6f 75 74 2d 77 69 64 67 65 74 2d 61 72 65 61 20 2e 73 6c 69 64 65 5f 6f Data Ascii: .slide-out-from-right .widget:not(.nectar_popular_posts_widget):not(.recent_posts_extra_widget) li a:hover{color:#fff}#slide-out-widget-area .nectar-menu-label:before{background-color:#fff}body[data-full-width-header=false] #slide-out-widget-area .slide_o
2024-04-16 15:05:20 UTC	1369	IN	Data Raw: 74 61 74 65 28 39 30 64 65 67 29 7d 62 6f 64 79 5b 64 61 74 61 2d 66 75 6c 6c 2d 77 69 64 74 68 2d 68 65 61 64 65 72 3d 66 61 6c 73 65 5d 20 23 73 6c 69 64 65 2d 6f 75 74 2d 77 69 64 67 65 74 2d 61 72 65 61 20 2e 73 6c 69 64 65 5f 6f 75 74 5f 61 72 65 61 5f 63 6c 6f 73 65 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 37 29 7d 62 6f 64 79 20 23 73 6c 69 64 65 2d 6f 75 74 2d 77 69 64 67 65 74 2d 61 72 65 61 20 2e 73 6c 69 64 65 5f 6f 75 74 5f 61 72 65 61 5f 63 6c 6f 73 65 20 2e 69 63 6f 6e 2d 64 65 66 61 75 6c 74 2d 73 74 79 6c 65 5b 63 6c 61 73 73 5e 3d 69 63 6f 6e 2d 5d 7b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 66 6f 6e 74 Data Ascii: tate(90deg)}body[data-full-width-header=false] #slide-out-widget-area .slide_out_area_close:hover{border-color:rgba(255,255,255,.7)}body #slide-out-widget-area .slide_out_area_close .icon-default-style[class^=icon-]{-webkit-backface-visibility:hidden;font
2024-04-16 15:05:20 UTC	1369	IN	Data Raw: 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 32 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 6f 70 3a 2d 34 70 78 3b 6f 70 61 63 69 74 79 3a 2e 36 7d 23 73 6c 69 64 65 2d 6f 75 74 2d 77 69 64 67 65 74 2d 61 72 65 61 3a 6e 6f 74 28 2e 66 75 6c 6c 73 63 72 65 65 6e 29 3a 6e 6f 74 28 2e 66 75 6c 6c 73 63 72 65 65 6e 2d 61 6c 74 29 20 2e 6d 65 6e 75 77 72 61 70 70 65 72 20 6c 69 20 73 6d 61 6c 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 4f 70 65 6e 20 53 61 6e 73 27 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 69 6e 68 65 72 69 74 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 35 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 Data Ascii: nt-weight:600;letter-spacing:2px;position:relative;top:-4px;opacity:.6}#slide-out-widget-area:not(.fullscreen):not(.fullscreen-alt) .menuwrapper li small{font-size:14px;display:block;font-family:'Open Sans';letter-spacing:inherit;margin-top:5px;font-weigh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.11	49765	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:19 UTC	609	OUT	GET /wp-content/plugins/revslider6620n-1/public/assets/css/rs6.css?ver=6.6.20 HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:22 UTC	586	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:21 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: public, max-age=2592000 expires: Thu, 16 May 2024 15:05:21 GMT last-modified: Wed, 20 Dec 2023 12:52:54 GMT etag: W/"e3d7-6582e3a6-cde8b42c504f96bc;gz" platform: hostinger content-security-policy: upgrade-insecure-requests x-turbo-charged-by: LiteSpeed alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 82ea51a493f97f9e52a92d4e0bd5aabb-asc-edge4 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 2.017
2024-04-16 15:05:22 UTC	783	IN	Data Raw: 65 33 64 37 0d 0a 2f 2a 20 46 49 58 20 46 4f 52 20 57 4f 52 44 50 52 45 53 53 27 73 20 43 52 41 5a 59 20 3c 70 3e 20 54 41 47 20 41 4e 4f 4d 41 4c 59 20 2a 2f 0a 2e 72 73 2d 70 2d 77 70 2d 66 69 78 20 7b 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 6d 61 72 67 69 6e 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 68 65 69 67 68 74 3a 20 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 0a 0a 2f 2a 20 4e 45 57 20 5a 2d 49 4e 44 45 58 20 46 49 58 2a 2f 0a 2e 77 70 2d 62 6c 6f 63 6b 2d 74 68 65 6d 65 70 75 6e 63 68 2d 72 65 76 73 6c 69 64 65 72 20 7b 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 20 7d 0a 0a 2f 2a 20 46 49 58 20 46 4f 52 20 51 55 49 43 4b 20 4c 4f 41 44 49 4e 47 20 4f 46 20 53 4c 49 44 45 52 20 Data Ascii: e3d7/* FIX FOR WORDPRESS's CRAZY <p> TAG ANOMALY /.rs-p-wp-fix { display: none !important; margin: 0 !important; height: 0px !important; }/ NEW Z-INDEX FIX/.wp-block-themepunch-revslider { position: relative }/ FIX FOR QUICK LOADING OF SLIDER
2024-04-16 15:05:22 UTC	1369	IN	Data Raw: 6c 61 79 3a 6e 6f 6e 65 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 31 30 30 25 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 6f 76 65 72 66 6c 6f 77 3a 20 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 20 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 20 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0a 72 73 2d 6d 6f 64 75 6c 65 2d 77 72 61 70 2e 68 69 64 65 61 6c 6c 73 63 72 6f 6c 6c 62 61 72 73 2e 72 73 2d 6d 6f 64 61 6c 20 7b 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 25 20 21 69 6d 70 6f 72 74 61 6e 74 7d 0a 72 73 2d 6d 6f 64 61 6c 2d 63 6f 76 65 72 20 7b 20 77 69 64 74 68 3a 20 31 30 30 25 3b 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 20 7a 2d 69 6e 64 65 78 3a 20 Data Ascii: lay:none; max-height: 100% !important; overflow: auto !important; pointer-events: auto !important;}rs-module-wrap.hideallscrollbars.rs-modal { overflow: hidden !important; max-width: 100% !important}rs-modal-cover { width: 100%; height: 100%; z-index:
2024-04-16 15:05:22 UTC	1369	IN	Data Raw: 23 72 65 76 69 63 6f 6e 73 27 29 20 66 6f 72 6d 61 74 28 27 73 76 67 27 29 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 73 77 61 70 3b 0a 7d 0a 0a 20 5b 63 6c 61 73 73 5e 3d 22 72 65 76 69 63 6f 6e 2d 22 5d 3a 62 65 66 6f 72 65 2c 20 5b 63 6c 61 73 73 2a 3d 22 20 72 65 76 69 63 6f 6e 2d 22 5d 3a 62 65 66 6f 72 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 72 65 76 69 63 6f 6e 73 22 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 73 70 65 61 6b 3a 20 6e 65 76 65 72 3b 0a 20 20 73 70 65 61 6b 2d 61 73 3a Data Ascii: #revicons') format('svg'); font-weight: normal; font-style: normal; font-display: swap;} [class^="revicon-"]:before, [class*=" revicon-"]:before { font-family: "revicons"; font-style: normal; font-weight: normal; speak: never; speak-as:
2024-04-16 15:05:22 UTC	1369	IN	Data Raw: 31 34 70 78 2f 31 20 46 6f 6e 74 41 77 65 73 6f 6d 65 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 69 6e 68 65 72 69 74 3b 0a 20 20 74 65 78 74 2d 72 65 6e 64 65 72 69 6e 67 3a 20 61 75 74 6f 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 20 61 6e 74 69 61 6c 69 61 73 65 64 3b 0a 20 20 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 20 67 72 61 79 73 63 61 6c 65 3b 0a 7d 0a 0a 72 73 2d 6d 6f 64 75 6c 65 20 5b 63 6c 61 73 73 5e 3d 22 66 61 2d 22 5d 3a 62 65 66 6f 72 65 2c 0a 72 73 2d 6d 6f 64 75 6c 65 20 5b 63 6c 61 73 73 2a 3d 22 20 66 61 2d 22 5d 3a 62 65 66 6f 72 65 2c 0a 2e 72 62 2d 6d 6f 64 61 6c 2d 77 72 61 70 70 65 72 20 5b 63 6c 61 73 73 5e 3d 22 66 61 2d 22 5d 3a 62 65 66 6f 72 65 2c 0a 2e Data Ascii: 14px/1 FontAwesome; font-size: inherit; text-rendering: auto; -webkit-font-smoothing: antialiased; -moz-osx-font-smoothing: grayscale;}rs-module [class^="fa-"]:before,rs-module [class*=" fa-"]:before,.rb-modal-wrapper [class^="fa-"]:before,.
2024-04-16 15:05:22 UTC	1369	IN	Data Raw: 6e 75 74 65 20 2e 73 72 2d 6f 6e 6c 79 2d 66 6f 63 75 73 61 62 6c 65 3a 61 63 74 69 76 65 2c 0a 23 77 61 69 74 61 6d 69 6e 75 74 65 20 2e 73 72 2d 6f 6e 6c 79 2d 66 6f 63 75 73 61 62 6c 65 3a 66 6f 63 75 73 2c 0a 23 6f 62 6a 65 63 74 6c 69 62 72 61 72 79 20 2e 73 72 2d 6f 6e 6c 79 2d 66 6f 63 75 73 61 62 6c 65 3a 61 63 74 69 76 65 2c 0a 23 6f 62 6a 65 63 74 6c 69 62 72 61 72 79 20 2e 73 72 2d 6f 6e 6c 79 2d 66 6f 63 75 73 61 62 6c 65 3a 66 6f 63 75 73 2c 0a 23 72 73 5f 6f 76 65 72 76 69 65 77 20 2e 73 72 2d 6f 6e 6c 79 2d 66 6f 63 75 73 61 62 6c 65 3a 61 63 74 69 76 65 2c 0a 23 72 73 5f 6f 76 65 72 76 69 65 77 20 2e 73 72 2d 6f 6e 6c 79 2d 66 6f 63 75 73 61 62 6c 65 3a 66 6f 63 75 73 2c 0a 23 72 73 5f 6f 76 65 72 76 69 65 77 5f 6d 65 6e 75 20 2e 73 72 2d Data Ascii: nute .sr-only-focusable:active,#waitaminute .sr-only-focusable:focus,#objectlibrary .sr-only-focusable:active,#objectlibrary .sr-only-focusable:focus,#rs_overview .sr-only-focusable:active,#rs_overview .sr-only-focusable:focus,#rs_overview_menu .sr-
2024-04-16 15:05:22 UTC	1369	IN	Data Raw: 2a 2f 0a 2e 72 65 76 69 63 6f 6e 2d 6c 65 66 74 2d 62 69 67 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 31 66 27 3b 20 7d 20 2f 2a 20 27 ee a0 9f 27 20 2a 2f 0a 2e 72 65 76 69 63 6f 6e 2d 72 69 67 68 74 2d 62 69 67 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 31 65 27 3b 20 7d 20 2f 2a 20 27 ee a0 9e 27 20 2a 2f 0a 2e 72 65 76 69 63 6f 6e 2d 6d 61 67 69 63 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 30 37 27 3b 20 7d 20 2f 2a 20 27 ee a0 87 27 20 2a 2f 0a 2e 72 65 76 69 63 6f 6e 2d 70 69 63 74 75 72 65 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 30 30 27 3b 20 7d 20 2f 2a 20 27 ee a0 80 27 20 2a 2f 0a 2e 72 65 76 69 63 6f 6e 2d 65 78 70 6f 72 74 3a 62 65 66 Data Ascii: /.revicon-left-big:before { content: '\e81f'; } / '' /.revicon-right-big:before { content: '\e81e'; } / '' /.revicon-magic:before { content: '\e807'; } / '' /.revicon-picture:before { content: '\e800'; } / '' */.revicon-export:bef
2024-04-16 15:05:22 UTC	1369	IN	Data Raw: 6c 65 66 74 2d 6f 70 65 6e 2d 6f 75 74 6c 69 6e 65 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 32 65 27 3b 20 7d 20 2f 2a 20 27 ee a0 ae 27 20 2a 2f 0a 2e 72 65 76 69 63 6f 6e 2d 6c 65 66 74 2d 6f 70 65 6e 2d 32 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 32 63 27 3b 20 7d 20 2f 2a 20 27 ee a0 ac 27 20 2a 2f 0a 2e 72 65 76 69 63 6f 6e 2d 72 69 67 68 74 2d 6f 70 65 6e 2d 6f 75 74 6c 69 6e 65 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 32 66 27 3b 20 7d 20 2f 2a 20 27 ee a0 af 27 20 2a 2f 0a 2e 72 65 76 69 63 6f 6e 2d 72 69 67 68 74 2d 6f 70 65 6e 2d 32 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 32 64 27 3b 20 7d 20 2f 2a 20 27 ee a0 ad 27 20 2a 2f 0a 2e 72 Data Ascii: left-open-outline:before { content: '\e82e'; } /* '' /.revicon-left-open-2:before { content: '\e82c'; } / '' /.revicon-right-open-outline:before { content: '\e82f'; } / '' /.revicon-right-open-2:before { content: '\e82d'; } / '' */.r
2024-04-16 15:05:22 UTC	1369	IN	Data Raw: 72 61 70 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 70 78 3b 6c 65 66 74 3a 30 70 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 0a 7d 0a 0a 72 73 2d 63 61 72 6f 75 73 65 6c 2d 77 72 61 70 20 72 73 2d 63 6f 6c 75 6d 6e 20 72 73 2d 6c 61 79 65 72 20 69 6d 67 20 7b 20 77 69 64 74 68 3a 20 30 70 78 3b 20 68 65 69 67 68 74 3a 20 30 70 78 3b 20 7d 0a 0a 72 73 2d 73 62 67 2d 70 78 2c 0a 72 73 2d 73 62 67 2d 77 72 61 70 20 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 30 70 78 3b 20 6c 65 66 74 3a 30 70 78 3b 20 7a 2d 69 6e 64 65 78 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 7d 0a 0a 61 2e 72 73 Data Ascii: rap {position:absolute;top:0px;left:0px;width:100%;height:100%}rs-carousel-wrap rs-column rs-layer img { width: 0px; height: 0px; }rs-sbg-px,rs-sbg-wrap {position:absolute; top:0px; left:0px; z-index:0;width:100%;height:100%;display: block;}a.rs
2024-04-16 15:05:22 UTC	1369	IN	Data Raw: 2e 72 73 2d 74 63 2d 61 63 74 69 76 65 2e 72 73 2d 6c 61 79 65 72 20 3e 20 2e 72 73 2d 74 6f 67 67 6c 65 64 2d 63 6f 6e 74 65 6e 74 20 7b 20 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 7d 0a 2e 72 73 2d 74 63 2d 61 63 74 69 76 65 2e 72 73 2d 6c 61 79 65 72 20 3e 20 2e 72 73 2d 75 6e 74 6f 67 67 6c 65 64 2d 63 6f 6e 74 65 6e 74 20 7b 20 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 7d 0a 0a 2e 72 73 2d 6c 61 79 65 72 2d 76 69 64 65 6f 20 7b 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 20 7d 0a 0a 2e 72 73 5f 68 74 6d 6c 35 76 69 64 62 61 73 69 63 73 74 79 6c 65 73 20 7b 20 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 6f 70 3a 30 70 78 3b 6c 65 66 74 3a 30 70 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 20 6f 76 65 72 Data Ascii: .rs-tc-active.rs-layer > .rs-toggled-content { display:block;}.rs-tc-active.rs-layer > .rs-untoggled-content { display:none;}.rs-layer-video { overflow: hidden }.rs_html5vidbasicstyles { position:relative;top:0px;left:0px;width:100%;height:100%; over
2024-04-16 15:05:22 UTC	1369	IN	Data Raw: 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 20 20 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 74 6f 70 3a 30 70 78 3b 6c 65 66 74 3a 30 70 78 3b 7d 0a 72 73 2d 63 61 72 6f 75 73 65 6c 2d 73 70 61 63 65 20 7b 20 63 6c 65 61 72 3a 62 6f 74 68 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0a 0a 2f 2a 20 41 44 44 45 44 20 46 4f 52 20 53 4c 49 44 45 4c 49 4e 4b 20 4d 41 4e 41 47 45 4d 45 4e 54 20 2a 2f 0a 2e 74 70 5f 69 6e 6e 65 72 5f 70 61 64 64 69 6e 67 20 7b 0a 09 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 09 6d 61 78 2d 68 65 69 67 68 74 Data Ascii: on: absolute; overflow: hidden; width:100%;height:100%;top:0px;left:0px;}rs-carousel-space { clear:both;display:block;width:100%;height:0px;position:relative;}/* ADDED FOR SLIDELINK MANAGEMENT */.tp_inner_padding {box-sizing:border-box;max-height

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.11	49767	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:19 UTC	570	OUT	GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:20 UTC	601	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:20 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: public, max-age=604800 expires: Tue, 23 Apr 2024 15:05:20 GMT last-modified: Mon, 15 Apr 2024 17:34:16 GMT etag: W/"53be-661d6518-5499aeaf35e3680b;gz" platform: hostinger content-security-policy: upgrade-insecure-requests x-turbo-charged-by: LiteSpeed alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: e32653c3b2cf7cd034bf4e334ba922be-asc-edge6 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 1.103
2024-04-16 15:05:20 UTC	768	IN	Data Raw: 35 33 62 65 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 33 2e 32 20 2d 20 32 30 32 32 2d 30 37 2d 31 34 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 74 2e 6a 73 2c 20 70 6f 73 69 74 69 6f 6e 2e 6a 73 2c 20 64 61 74 61 2e 6a 73 2c 20 64 69 73 61 62 6c 65 2d 73 65 6c 65 63 74 69 6f 6e 2e 6a 73 2c 20 65 66 66 65 63 74 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 62 6c 69 6e 64 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 62 6f 75 6e 63 65 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 63 6c 69 70 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 64 72 6f 70 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 Data Ascii: 53be/! jQuery UI - v1.13.2 - 2022-07-14 http://jqueryui.com* Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js, effects/effect-clip.js, effects/effect-drop.js, effects/effec
2024-04-16 15:05:20 UTC	1369	IN	Data Raw: 2f 64 61 74 65 70 69 63 6b 65 72 2e 6a 73 2c 20 77 69 64 67 65 74 73 2f 64 69 61 6c 6f 67 2e 6a 73 2c 20 77 69 64 67 65 74 73 2f 64 72 61 67 67 61 62 6c 65 2e 6a 73 2c 20 77 69 64 67 65 74 73 2f 64 72 6f 70 70 61 62 6c 65 2e 6a 73 2c 20 77 69 64 67 65 74 73 2f 6d 65 6e 75 2e 6a 73 2c 20 77 69 64 67 65 74 73 2f 6d 6f 75 73 65 2e 6a 73 2c 20 77 69 64 67 65 74 73 2f 70 72 6f 67 72 65 73 73 62 61 72 2e 6a 73 2c 20 77 69 64 67 65 74 73 2f 72 65 73 69 7a 61 62 6c 65 2e 6a 73 2c 20 77 69 64 67 65 74 73 2f 73 65 6c 65 63 74 61 62 6c 65 2e 6a 73 2c 20 77 69 64 67 65 74 73 2f 73 65 6c 65 63 74 6d 65 6e 75 2e 6a 73 2c 20 77 69 64 67 65 74 73 2f 73 6c 69 64 65 72 2e 6a 73 2c 20 77 69 64 67 65 74 73 2f 73 6f 72 74 61 62 6c 65 2e 6a 73 2c 20 77 69 64 67 65 74 73 2f 73 Data Ascii: /datepicker.js, widgets/dialog.js, widgets/draggable.js, widgets/droppable.js, widgets/menu.js, widgets/mouse.js, widgets/progressbar.js, widgets/resizable.js, widgets/selectable.js, widgets/selectmenu.js, widgets/slider.js, widgets/sortable.js, widgets/s
2024-04-16 15:05:20 UTC	1369	IN	Data Raw: 64 69 76 22 29 3f 22 73 65 6c 65 63 74 73 74 61 72 74 22 3a 22 6d 6f 75 73 65 64 6f 77 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 6e 28 74 2b 22 2e 75 69 2d 64 69 73 61 62 6c 65 53 65 6c 65 63 74 69 6f 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 7d 29 7d 29 2c 65 6e 61 62 6c 65 53 65 6c 65 63 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 66 66 28 22 2e 75 69 2d 64 69 73 61 62 6c 65 53 65 6c 65 63 74 69 6f 6e 22 29 7d 7d 29 2c 0a 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 55 49 20 46 6f 63 75 73 61 62 6c 65 20 31 2e 31 33 2e 32 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 20 2a 0a 20 2a 20 43 6f 70 Data Ascii: div")?"selectstart":"mousedown",function(){return this.on(t+".ui-disableSelection",function(t){t.preventDefault()})}),enableSelection:function(){return this.off(".ui-disableSelection")}}),/! jQuery UI Focusable 1.13.2 * http://jqueryui.com * * Cop
2024-04-16 15:05:20 UTC	1369	IN	Data Raw: 73 65 74 2d 69 6e 73 74 61 6e 63 65 73 22 29 3b 78 2e 65 61 63 68 28 74 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 72 65 66 72 65 73 68 28 29 7d 29 7d 29 7d 2c 5f 62 69 6e 64 46 6f 72 6d 52 65 73 65 74 48 61 6e 64 6c 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3b 74 68 69 73 2e 66 6f 72 6d 3d 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 5f 66 6f 72 6d 28 29 2c 74 68 69 73 2e 66 6f 72 6d 2e 6c 65 6e 67 74 68 26 26 28 28 74 3d 74 68 69 73 2e 66 6f 72 6d 2e 64 61 74 61 28 22 75 69 2d 66 6f 72 6d 2d 72 65 73 65 74 2d 69 6e 73 74 61 6e 63 65 73 22 29 7c 7c 5b 5d 29 2e 6c 65 6e 67 74 68 7c 7c 74 68 69 73 2e 66 6f 72 6d 2e 6f 6e 28 22 72 65 73 65 74 2e 75 69 2d 66 6f 72 6d 2d 72 65 73 65 74 22 2c 74 68 69 73 2e 5f 66 6f 72 6d 52 65 73 65 74 48 61 Data Ascii: set-instances");x.each(t,function(){this.refresh()})})},_bindFormResetHandler:function(){var t;this.form=this.element._form(),this.form.length&&((t=this.form.data("ui-form-reset-instances")\|\|[]).length\|\|this.form.on("reset.ui-form-reset",this._formResetHa
2024-04-16 15:05:20 UTC	1369	IN	Data Raw: 64 65 20 31 2e 31 33 2e 32 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 78 2e 75 69 2e 6b 65 79 43 6f 64 65 3d 7b 42 41 43 4b 53 50 41 43 45 3a 38 2c 43 4f 4d 4d 41 3a 31 38 38 2c 44 45 4c 45 54 45 3a 34 36 2c 44 4f 57 4e 3a 34 30 2c 45 4e 44 3a 33 35 2c 45 4e 54 45 52 3a 31 33 2c 45 53 43 41 50 45 3a 32 37 2c 48 4f 4d 45 3a 33 36 2c 4c 45 46 54 3a 33 37 2c 50 Data Ascii: de 1.13.2 * http://jqueryui.com * * Copyright jQuery Foundation and other contributors * Released under the MIT license. * http://jquery.org/license */x.ui.keyCode={BACKSPACE:8,COMMA:188,DELETE:46,DOWN:40,END:35,ENTER:13,ESCAPE:27,HOME:36,LEFT:37,P
2024-04-16 15:05:20 UTC	1369	IN	Data Raw: 75 65 72 79 75 69 2e 63 6f 6d 2f 70 6f 73 69 74 69 6f 6e 2f 0a 20 2a 2f 0a 57 3d 4d 61 74 68 2e 6d 61 78 2c 43 3d 4d 61 74 68 2e 61 62 73 2c 6f 3d 2f 6c 65 66 74 7c 63 65 6e 74 65 72 7c 72 69 67 68 74 2f 2c 73 3d 2f 74 6f 70 7c 63 65 6e 74 65 72 7c 62 6f 74 74 6f 6d 2f 2c 72 3d 2f 5b 5c 2b 5c 2d 5d 5c 64 2b 28 5c 2e 5b 5c 64 5d 2b 29 3f 25 3f 2f 2c 6c 3d 2f 5e 5c 77 2b 2f 2c 61 3d 2f 25 24 2f 2c 68 3d 78 2e 66 6e 2e 70 6f 73 69 74 69 6f 6e 2c 78 2e 70 6f 73 69 74 69 6f 6e 3d 7b 73 63 72 6f 6c 6c 62 61 72 57 69 64 74 68 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 65 2c 69 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 3a 28 69 3d 28 65 3d 78 28 22 3c 64 69 76 20 73 74 79 6c 65 3d 27 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 Data Ascii: ueryui.com/position/ */W=Math.max,C=Math.abs,o=/left\|center\|right/,s=/top\|center\|bottom/,r=/[\+\-]\d+(\.[\d]+)?%?/,l=/^\w+/,a=/%$/,h=x.fn.position,x.position={scrollbarWidth:function(){var t,e,i;return void 0!==n?n:(i=(e=x("<div style='display:block;pos
2024-04-16 15:05:20 UTC	1369	IN	Data Raw: 7d 2c 65 3d 39 3d 3d 3d 28 65 3d 28 74 3d 76 29 5b 30 5d 29 2e 6e 6f 64 65 54 79 70 65 3f 7b 77 69 64 74 68 3a 74 2e 77 69 64 74 68 28 29 2c 68 65 69 67 68 74 3a 74 2e 68 65 69 67 68 74 28 29 2c 6f 66 66 73 65 74 3a 7b 74 6f 70 3a 30 2c 6c 65 66 74 3a 30 7d 7d 3a 4e 28 65 29 3f 7b 77 69 64 74 68 3a 74 2e 77 69 64 74 68 28 29 2c 68 65 69 67 68 74 3a 74 2e 68 65 69 67 68 74 28 29 2c 6f 66 66 73 65 74 3a 7b 74 6f 70 3a 74 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 2c 6c 65 66 74 3a 74 2e 73 63 72 6f 6c 6c 4c 65 66 74 28 29 7d 7d 3a 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 3f 7b 77 69 64 74 68 3a 30 2c 68 65 69 67 68 74 3a 30 2c 6f 66 66 73 65 74 3a 7b 74 6f 70 3a 65 2e 70 61 67 65 59 2c 6c 65 66 74 3a 65 2e 70 61 67 65 58 7d 7d 3a 7b 77 69 64 74 68 3a 74 2e Data Ascii: },e=9===(e=(t=v)[0]).nodeType?{width:t.width(),height:t.height(),offset:{top:0,left:0}}:N(e)?{width:t.width(),height:t.height(),offset:{top:t.scrollTop(),left:t.scrollLeft()}}:e.preventDefault?{width:0,height:0,offset:{top:e.pageY,left:e.pageX}}:{width:t.
2024-04-16 15:05:20 UTC	1369	IN	Data Raw: 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 78 2e 75 69 2e 70 6f 73 69 74 69 6f 6e 5b 62 5b 74 5d 5d 26 26 78 2e 75 69 2e 70 6f 73 69 74 69 6f 6e 5b 62 5b 74 5d 5d 5b 65 5d 28 68 2c 7b 74 61 72 67 65 74 57 69 64 74 68 3a 64 2c 74 61 72 67 65 74 48 65 69 67 68 74 3a 70 2c 65 6c 65 6d 57 69 64 74 68 3a 6c 2c 65 6c 65 6d 48 65 69 67 68 74 3a 61 2c 63 6f 6c 6c 69 73 69 6f 6e 50 6f 73 69 74 69 6f 6e 3a 69 2c 63 6f 6c 6c 69 73 69 6f 6e 57 69 64 74 68 3a 6f 2c 63 6f 6c 6c 69 73 69 6f 6e 48 65 69 67 68 74 3a 73 2c 6f 66 66 73 65 74 3a 5b 63 5b 30 5d 2b 75 5b 30 5d 2c 63 5b 31 5d 2b 75 5b 31 5d 5d 2c 6d 79 3a 66 2e 6d 79 2c 61 74 3a 66 2e 61 74 2c 77 69 74 68 69 6e 3a 79 2c 65 6c 65 6d 3a 72 7d 29 7d 29 2c 66 2e 75 73 69 6e 67 26 26 28 74 3d 66 75 6e 63 74 69 6f Data Ascii: ,function(t,e){x.ui.position[b[t]]&&x.ui.position[b[t]][e](h,{targetWidth:d,targetHeight:p,elemWidth:l,elemHeight:a,collisionPosition:i,collisionWidth:o,collisionHeight:s,offset:[c[0]+u[0],c[1]+u[1]],my:f.my,at:f.at,within:y,elem:r})}),f.using&&(t=functio
2024-04-16 15:05:21 UTC	1369	IN	Data Raw: 65 2e 63 6f 6c 6c 69 73 69 6f 6e 48 65 69 67 68 74 3a 6e 3a 30 3c 72 3f 74 2e 74 6f 70 2b 3d 72 3a 30 3c 6c 3f 74 2e 74 6f 70 2d 3d 6c 3a 74 2e 74 6f 70 3d 57 28 74 2e 74 6f 70 2d 73 2c 74 2e 74 6f 70 29 7d 7d 2c 66 6c 69 70 3a 7b 6c 65 66 74 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 3d 65 2e 77 69 74 68 69 6e 2c 6e 3d 69 2e 6f 66 66 73 65 74 2e 6c 65 66 74 2b 69 2e 73 63 72 6f 6c 6c 4c 65 66 74 2c 6f 3d 69 2e 77 69 64 74 68 2c 69 3d 69 2e 69 73 57 69 6e 64 6f 77 3f 69 2e 73 63 72 6f 6c 6c 4c 65 66 74 3a 69 2e 6f 66 66 73 65 74 2e 6c 65 66 74 2c 73 3d 74 2e 6c 65 66 74 2d 65 2e 63 6f 6c 6c 69 73 69 6f 6e 50 6f 73 69 74 69 6f 6e 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 72 3d 73 2d 69 2c 73 3d 73 2b 65 2e 63 6f 6c 6c 69 73 69 6f 6e 57 69 64 74 Data Ascii: e.collisionHeight:n:0<r?t.top+=r:0<l?t.top-=l:t.top=W(t.top-s,t.top)}},flip:{left:function(t,e){var i=e.within,n=i.offset.left+i.scrollLeft,o=i.width,i=i.isWindow?i.scrollLeft:i.offset.left,s=t.left-e.collisionPosition.marginLeft,r=s-i,s=s+e.collisionWidt
2024-04-16 15:05:21 UTC	1369	IN	Data Raw: 7c 7c 65 2e 62 6f 64 79 29 2e 6e 6f 64 65 4e 61 6d 65 3f 69 3a 65 2e 62 6f 64 79 7d 2c 78 2e 75 69 2e 73 61 66 65 42 6c 75 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 26 26 22 62 6f 64 79 22 21 3d 3d 74 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 26 26 78 28 74 29 2e 74 72 69 67 67 65 72 28 22 62 6c 75 72 22 29 7d 2c 0a 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 55 49 20 53 63 72 6f 6c 6c 20 50 61 72 65 6e 74 20 31 2e 31 33 2e 32 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 Data Ascii: \|\|e.body).nodeName?i:e.body},x.ui.safeBlur=function(t){t&&"body"!==t.nodeName.toLowerCase()&&x(t).trigger("blur")},/! jQuery UI Scroll Parent 1.13.2 * http://jqueryui.com * * Copyright jQuery Foundation and other contributors * Released under the

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.11	49768	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:19 UTC	570	OUT	GET /wp-includes/js/jquery/ui/menu.min.js?ver=1.13.2 HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:20 UTC	601	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:20 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: public, max-age=604800 expires: Tue, 23 Apr 2024 15:05:20 GMT last-modified: Mon, 15 Apr 2024 17:34:16 GMT etag: W/"2782-661d6518-1c0fa0f453e53e2a;gz" platform: hostinger content-security-policy: upgrade-insecure-requests x-turbo-charged-by: LiteSpeed alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: ce78005cd3a8e32f202c3196233a1351-asc-edge6 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 1.029
2024-04-16 15:05:20 UTC	768	IN	Data Raw: 32 37 38 32 0d 0a 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 55 49 20 4d 65 6e 75 20 31 2e 31 33 2e 32 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b Data Ascii: 2782/! jQuery UI Menu 1.13.2 * http://jqueryui.com * * Copyright jQuery Foundation and other contributors * Released under the MIT license. * http://jquery.org/license */!function(e){"use strict";"function"==typeof define&&define.amd?define([
2024-04-16 15:05:20 UTC	1369	IN	Data Raw: 6e 74 22 29 2c 74 68 69 73 2e 5f 6f 6e 28 7b 22 6d 6f 75 73 65 64 6f 77 6e 20 2e 75 69 2d 6d 65 6e 75 2d 69 74 65 6d 22 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 5f 61 63 74 69 76 61 74 65 49 74 65 6d 28 65 29 7d 2c 22 63 6c 69 63 6b 20 2e 75 69 2d 6d 65 6e 75 2d 69 74 65 6d 22 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 61 28 65 2e 74 61 72 67 65 74 29 2c 69 3d 61 28 61 2e 75 69 2e 73 61 66 65 41 63 74 69 76 65 45 6c 65 6d 65 6e 74 28 74 68 69 73 2e 64 6f 63 75 6d 65 6e 74 5b 30 5d 29 29 3b 21 74 68 69 73 2e 6d 6f 75 73 65 48 61 6e 64 6c 65 64 26 26 74 2e 6e 6f 74 28 22 2e 75 69 2d 73 74 61 74 65 2d 64 69 73 61 62 6c 65 64 22 29 2e 6c 65 6e 67 74 68 26 26 28 74 68 69 73 2e Data Ascii: nt"),this._on({"mousedown .ui-menu-item":function(e){e.preventDefault(),this._activateItem(e)},"click .ui-menu-item":function(e){var t=a(e.target),i=a(a.ui.safeActiveElement(this.document[0]));!this.mouseHandled&&t.not(".ui-state-disabled").length&&(this.
2024-04-16 15:05:20 UTC	1369	IN	Data Raw: 69 6c 64 72 65 6e 28 22 2e 75 69 2d 73 74 61 74 65 2d 61 63 74 69 76 65 22 29 2c 6e 75 6c 6c 2c 22 75 69 2d 73 74 61 74 65 2d 61 63 74 69 76 65 22 29 2c 74 68 69 73 2e 66 6f 63 75 73 28 65 2c 69 29 29 7d 2c 5f 64 65 73 74 72 6f 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 66 69 6e 64 28 22 2e 75 69 2d 6d 65 6e 75 2d 69 74 65 6d 22 29 2e 72 65 6d 6f 76 65 41 74 74 72 28 22 72 6f 6c 65 20 61 72 69 61 2d 64 69 73 61 62 6c 65 64 22 29 2e 63 68 69 6c 64 72 65 6e 28 22 2e 75 69 2d 6d 65 6e 75 2d 69 74 65 6d 2d 77 72 61 70 70 65 72 22 29 2e 72 65 6d 6f 76 65 55 6e 69 71 75 65 49 64 28 29 2e 72 65 6d 6f 76 65 41 74 74 72 28 22 74 61 62 49 6e 64 65 78 20 72 6f 6c 65 20 61 72 69 61 2d 68 61 73 70 6f 70 75 70 22 29 Data Ascii: ildren(".ui-state-active"),null,"ui-state-active"),this.focus(e,i))},_destroy:function(){var e=this.element.find(".ui-menu-item").removeAttr("role aria-disabled").children(".ui-menu-item-wrapper").removeUniqueId().removeAttr("tabIndex role aria-haspopup")
2024-04-16 15:05:20 UTC	1369	IN	Data Raw: 2e 69 6e 64 65 78 28 74 68 69 73 2e 61 63 74 69 76 65 2e 6e 65 78 74 28 29 29 3f 74 68 69 73 2e 61 63 74 69 76 65 2e 6e 65 78 74 41 6c 6c 28 22 2e 75 69 2d 6d 65 6e 75 2d 69 74 65 6d 22 29 3a 74 29 2e 6c 65 6e 67 74 68 7c 7c 28 69 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 65 2e 6b 65 79 43 6f 64 65 29 2c 74 3d 74 68 69 73 2e 5f 66 69 6c 74 65 72 4d 65 6e 75 49 74 65 6d 73 28 69 29 29 2c 74 2e 6c 65 6e 67 74 68 3f 28 74 68 69 73 2e 66 6f 63 75 73 28 65 2c 74 29 2c 74 68 69 73 2e 70 72 65 76 69 6f 75 73 46 69 6c 74 65 72 3d 69 2c 74 68 69 73 2e 66 69 6c 74 65 72 54 69 6d 65 72 3d 74 68 69 73 2e 5f 64 65 6c 61 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 64 65 6c 65 74 65 20 74 68 69 73 2e 70 72 65 76 69 6f 75 73 46 69 6c 74 65 72 7d 2c 31 65 Data Ascii: .index(this.active.next())?this.active.nextAll(".ui-menu-item"):t).length\|\|(i=String.fromCharCode(e.keyCode),t=this._filterMenuItems(i)),t.length?(this.focus(e,t),this.previousFilter=i,this.filterTimer=this._delay(function(){delete this.previousFilter},1e
2024-04-16 15:05:20 UTC	1369	IN	Data Raw: 2d 69 74 65 6d 22 29 2e 5f 61 64 64 43 6c 61 73 73 28 74 2c 22 75 69 2d 6d 65 6e 75 2d 69 74 65 6d 2d 77 72 61 70 70 65 72 22 29 2c 65 2e 66 69 6c 74 65 72 28 22 2e 75 69 2d 73 74 61 74 65 2d 64 69 73 61 62 6c 65 64 22 29 2e 61 74 74 72 28 22 61 72 69 61 2d 64 69 73 61 62 6c 65 64 22 2c 22 74 72 75 65 22 29 2c 74 68 69 73 2e 61 63 74 69 76 65 26 26 21 61 2e 63 6f 6e 74 61 69 6e 73 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 5b 30 5d 2c 74 68 69 73 2e 61 63 74 69 76 65 5b 30 5d 29 26 26 74 68 69 73 2e 62 6c 75 72 28 29 7d 2c 5f 69 74 65 6d 52 6f 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 6d 65 6e 75 3a 22 6d 65 6e 75 69 74 65 6d 22 2c 6c 69 73 74 62 6f 78 3a 22 6f 70 74 69 6f 6e 22 7d 5b 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 72 6f 6c 65 5d Data Ascii: -item")._addClass(t,"ui-menu-item-wrapper"),e.filter(".ui-state-disabled").attr("aria-disabled","true"),this.active&&!a.contains(this.element[0],this.active[0])&&this.blur()},_itemRole:function(){return{menu:"menuitem",listbox:"option"}[this.options.role]
2024-04-16 15:05:20 UTC	1369	IN	Data Raw: 22 70 61 64 64 69 6e 67 54 6f 70 22 29 29 7c 7c 30 2c 74 3d 65 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 2d 74 68 69 73 2e 61 63 74 69 76 65 4d 65 6e 75 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 2d 74 2d 69 2c 69 3d 74 68 69 73 2e 61 63 74 69 76 65 4d 65 6e 75 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 2c 73 3d 74 68 69 73 2e 61 63 74 69 76 65 4d 65 6e 75 2e 68 65 69 67 68 74 28 29 2c 65 3d 65 2e 6f 75 74 65 72 48 65 69 67 68 74 28 29 2c 74 3c 30 3f 74 68 69 73 2e 61 63 74 69 76 65 4d 65 6e 75 2e 73 63 72 6f 6c 6c 54 6f 70 28 69 2b 74 29 3a 73 3c 74 2b 65 26 26 74 68 69 73 2e 61 63 74 69 76 65 4d 65 6e 75 2e 73 63 72 6f 6c 6c 54 6f 70 28 69 2b 74 2d 73 2b 65 29 29 7d 2c 62 6c 75 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 7c 7c 63 6c 65 61 72 54 69 6d 65 6f 75 Data Ascii: "paddingTop"))\|\|0,t=e.offset().top-this.activeMenu.offset().top-t-i,i=this.activeMenu.scrollTop(),s=this.activeMenu.height(),e=e.outerHeight(),t<0?this.activeMenu.scrollTop(i+t):s<t+e&&this.activeMenu.scrollTop(i+t-s+e))},blur:function(e,t){t\|\|clearTimeou
2024-04-16 15:05:20 UTC	1369	IN	Data Raw: 7b 72 65 74 75 72 6e 21 61 28 65 2e 74 61 72 67 65 74 29 2e 63 6c 6f 73 65 73 74 28 22 2e 75 69 2d 6d 65 6e 75 22 29 2e 6c 65 6e 67 74 68 7d 2c 5f 69 73 44 69 76 69 64 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 2f 5b 5e 5c 2d 5c 75 32 30 31 34 5c 75 32 30 31 33 5c 73 5d 2f 2e 74 65 73 74 28 65 2e 74 65 78 74 28 29 29 7d 2c 63 6f 6c 6c 61 70 73 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 61 63 74 69 76 65 26 26 74 68 69 73 2e 61 63 74 69 76 65 2e 70 61 72 65 6e 74 28 29 2e 63 6c 6f 73 65 73 74 28 22 2e 75 69 2d 6d 65 6e 75 2d 69 74 65 6d 22 2c 74 68 69 73 2e 65 6c 65 6d 65 6e 74 29 3b 74 26 26 74 2e 6c 65 6e 67 74 68 26 26 28 74 68 69 73 2e 5f 63 6c 6f 73 65 28 29 2c 74 68 69 73 2e 66 6f 63 75 73 28 65 Data Ascii: {return!a(e.target).closest(".ui-menu").length},_isDivider:function(e){return!/[^\-\u2014\u2013\s]/.test(e.text())},collapse:function(e){var t=this.active&&this.active.parent().closest(".ui-menu-item",this.element);t&&t.length&&(this._close(),this.focus(e
2024-04-16 15:05:20 UTC	1145	IN	Data Raw: 3d 61 28 74 68 69 73 29 29 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 2d 69 2d 73 3c 30 7d 29 2c 74 68 69 73 2e 66 6f 63 75 73 28 65 2c 74 29 29 3a 74 68 69 73 2e 66 6f 63 75 73 28 65 2c 74 68 69 73 2e 5f 6d 65 6e 75 49 74 65 6d 73 28 74 68 69 73 2e 61 63 74 69 76 65 4d 65 6e 75 29 5b 74 68 69 73 2e 61 63 74 69 76 65 3f 22 6c 61 73 74 22 3a 22 66 69 72 73 74 22 5d 28 29 29 29 3a 74 68 69 73 2e 6e 65 78 74 28 65 29 7d 2c 70 72 65 76 69 6f 75 73 50 61 67 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 69 2c 73 3b 74 68 69 73 2e 61 63 74 69 76 65 3f 74 68 69 73 2e 69 73 46 69 72 73 74 49 74 65 6d 28 29 7c 7c 28 74 68 69 73 2e 5f 68 61 73 53 63 72 6f 6c 6c 28 29 3f 28 69 3d 74 68 69 73 2e 61 63 74 69 76 65 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 2c 73 Data Ascii: =a(this)).offset().top-i-s<0}),this.focus(e,t)):this.focus(e,this._menuItems(this.activeMenu)[this.active?"last":"first"]())):this.next(e)},previousPage:function(e){var t,i,s;this.active?this.isFirstItem()\|\|(this._hasScroll()?(i=this.active.offset().top,s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.11	49769	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:20 UTC	584	OUT	GET /wp-includes/js/dist/vendor/wp-polyfill-inert.min.js?ver=3.1.2 HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:21 UTC	601	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:21 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: public, max-age=604800 expires: Tue, 23 Apr 2024 15:05:21 GMT last-modified: Mon, 15 Apr 2024 17:34:16 GMT etag: W/"1feb-661d6518-73c860547dd46a3e;gz" platform: hostinger content-security-policy: upgrade-insecure-requests x-turbo-charged-by: LiteSpeed alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 537acde69425aa41d2e5adaa54a74d4d-asc-edge3 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 1.052
2024-04-16 15:05:21 UTC	768	IN	Data Raw: 31 66 65 62 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 7c 7c 21 64 65 66 69 6e 65 2e 61 6d 64 3f 65 28 29 3a 64 65 66 69 6e 65 28 22 69 6e 65 72 74 22 2c 65 29 7d 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 74 2c 6e 2c 69 2c 6f 2c 72 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 74 26 26 61 28 65 2e 70 72 6f 74 6f 74 79 70 65 2c 74 29 2c 6e 26 26 61 28 65 2c 6e 29 2c 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 66 6f 72 28 76 Data Ascii: 1feb!function(e){"object"==typeof exports&&"undefined"!=typeof module\|\|"function"!=typeof define\|\|!define.amd?e():define("inert",e)}((function(){"use strict";var e,t,n,i,o,r,s=function(e,t,n){return t&&a(e.prototype,t),n&&a(e,n),e};function a(e,t){for(v
2024-04-16 15:05:21 UTC	1369	IN	Data Raw: 64 64 65 6e 22 2c 22 74 72 75 65 22 29 2c 74 68 69 73 2e 5f 6d 61 6b 65 53 75 62 74 72 65 65 55 6e 66 6f 63 75 73 61 62 6c 65 28 74 68 69 73 2e 5f 72 6f 6f 74 45 6c 65 6d 65 6e 74 29 2c 74 68 69 73 2e 5f 6f 62 73 65 72 76 65 72 3d 6e 65 77 20 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 28 74 68 69 73 2e 5f 6f 6e 4d 75 74 61 74 69 6f 6e 2e 62 69 6e 64 28 74 68 69 73 29 29 2c 74 68 69 73 2e 5f 6f 62 73 65 72 76 65 72 2e 6f 62 73 65 72 76 65 28 74 68 69 73 2e 5f 72 6f 6f 74 45 6c 65 6d 65 6e 74 2c 7b 61 74 74 72 69 62 75 74 65 73 3a 21 30 2c 63 68 69 6c 64 4c 69 73 74 3a 21 30 2c 73 75 62 74 72 65 65 3a 21 30 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 68 28 65 2c 74 29 7b 64 28 74 68 69 73 2c 68 29 2c 74 68 69 73 2e 5f 6e 6f 64 65 3d 65 2c 74 68 69 73 2e 5f 6f Data Ascii: dden","true"),this._makeSubtreeUnfocusable(this._rootElement),this._observer=new MutationObserver(this._onMutation.bind(this)),this._observer.observe(this._rootElement,{attributes:!0,childList:!0,subtree:!0})}function h(e,t){d(this,h),this._node=e,this._o
2024-04-16 15:05:21 UTC	1369	IN	Data Raw: 22 5c 6e 5b 69 6e 65 72 74 5d 20 7b 5c 6e 20 20 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 20 6e 6f 6e 65 3b 5c 6e 20 20 63 75 72 73 6f 72 3a 20 64 65 66 61 75 6c 74 3b 5c 6e 7d 5c 6e 5c 6e 5b 69 6e 65 72 74 5d 2c 20 5b 69 6e 65 72 74 5d 20 2a 20 7b 5c 6e 20 20 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 5c 6e 20 20 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 5c 6e 20 20 2d 6d 73 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 5c 6e 20 20 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 5c 6e 7d 5c 6e 22 2c 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 29 7d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 28 65 3d 41 72 72 61 79 2e 70 72 6f 74 Data Ascii: "\n[inert] {\n pointer-events: none;\n cursor: default;\n}\n\n[inert], [inert] * {\n -webkit-user-select: none;\n -moz-user-select: none;\n -ms-user-select: none;\n user-select: none;\n}\n",e.appendChild(t))}"undefined"!=typeof window&&(e=Array.prot
2024-04-16 15:05:21 UTC	1369	IN	Data Raw: 74 68 69 73 2e 5f 72 6f 6f 74 45 6c 65 6d 65 6e 74 26 26 65 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 69 6e 65 72 74 22 29 26 26 74 68 69 73 2e 5f 61 64 6f 70 74 49 6e 65 72 74 52 6f 6f 74 28 65 29 2c 28 74 2e 63 61 6c 6c 28 65 2c 6e 29 7c 7c 65 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 74 61 62 69 6e 64 65 78 22 29 29 26 26 74 68 69 73 2e 5f 6d 61 6e 61 67 65 4e 6f 64 65 28 65 29 29 7d 7d 2c 7b 6b 65 79 3a 22 5f 6d 61 6e 61 67 65 4e 6f 64 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 3d 74 68 69 73 2e 5f 69 6e 65 72 74 4d 61 6e 61 67 65 72 2e 72 65 67 69 73 74 65 72 28 65 2c 74 68 69 73 29 2c 74 68 69 73 2e 5f 6d 61 6e 61 67 65 64 4e 6f 64 65 73 2e 61 64 64 28 65 29 7d 7d 2c 7b 6b 65 79 3a 22 5f 75 6e 6d 61 6e 61 67 65 4e 6f 64 Data Ascii: this._rootElement&&e.hasAttribute("inert")&&this._adoptInertRoot(e),(t.call(e,n)\|\|e.hasAttribute("tabindex"))&&this._manageNode(e))}},{key:"_manageNode",value:function(e){e=this._inertManager.register(e,this),this._managedNodes.add(e)}},{key:"_unmanageNod
2024-04-16 15:05:21 UTC	1369	IN	Data Raw: 75 6c 6c 21 3d 3d 74 68 69 73 2e 5f 73 61 76 65 64 41 72 69 61 48 69 64 64 65 6e 7d 7d 2c 7b 6b 65 79 3a 22 73 61 76 65 64 41 72 69 61 48 69 64 64 65 6e 22 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 5f 73 61 76 65 64 41 72 69 61 48 69 64 64 65 6e 3d 65 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 73 61 76 65 64 41 72 69 61 48 69 64 64 65 6e 7d 7d 5d 29 2c 69 3d 75 2c 73 28 68 2c 5b 7b 6b 65 79 3a 22 64 65 73 74 72 75 63 74 6f 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3b 74 68 69 73 2e 5f 74 68 72 6f 77 49 66 44 65 73 74 72 6f 79 65 64 28 29 2c 74 68 69 73 2e 5f 6e 6f 64 65 26 26 74 68 69 73 2e 5f 6e 6f 64 65 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 4e 6f 64 65 Data Ascii: ull!==this._savedAriaHidden}},{key:"savedAriaHidden",set:function(e){this._savedAriaHidden=e},get:function(){return this._savedAriaHidden}}]),i=u,s(h,[{key:"destructor",value:function(){var e;this._throwIfDestroyed(),this._node&&this._node.nodeType===Node
2024-04-16 15:05:21 UTC	1369	IN	Data Raw: 21 3d 3d 74 68 69 73 2e 5f 73 61 76 65 64 54 61 62 49 6e 64 65 78 7d 7d 2c 7b 6b 65 79 3a 22 6e 6f 64 65 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 74 68 72 6f 77 49 66 44 65 73 74 72 6f 79 65 64 28 29 2c 74 68 69 73 2e 5f 6e 6f 64 65 7d 7d 2c 7b 6b 65 79 3a 22 73 61 76 65 64 54 61 62 49 6e 64 65 78 22 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 5f 74 68 72 6f 77 49 66 44 65 73 74 72 6f 79 65 64 28 29 2c 74 68 69 73 2e 5f 73 61 76 65 64 54 61 62 49 6e 64 65 78 3d 65 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 74 68 72 6f 77 49 66 44 65 73 74 72 6f 79 65 64 28 29 2c 74 68 69 73 2e 5f 73 61 76 65 64 54 61 62 49 6e 64 65 78 7d 7d 5d 29 2c 6f 3d Data Ascii: !==this._savedTabIndex}},{key:"node",get:function(){return this._throwIfDestroyed(),this._node}},{key:"savedTabIndex",set:function(e){this._throwIfDestroyed(),this._savedTabIndex=e},get:function(){return this._throwIfDestroyed(),this._savedTabIndex}}]),o=
2024-04-16 15:05:21 UTC	571	IN	Data Raw: 6c 6c 28 6e 2e 61 64 64 65 64 4e 6f 64 65 73 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 69 3b 6e 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 4e 6f 64 65 2e 45 4c 45 4d 45 4e 54 5f 4e 4f 44 45 26 26 28 69 3d 65 2e 63 61 6c 6c 28 6e 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 69 6e 65 72 74 5d 22 29 29 2c 74 2e 63 61 6c 6c 28 6e 2c 22 5b 69 6e 65 72 74 5d 22 29 26 26 69 2e 75 6e 73 68 69 66 74 28 6e 29 2c 69 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 73 65 74 49 6e 65 72 74 28 65 2c 21 30 29 7d 29 2c 6f 29 29 7d 29 2c 6f 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 61 74 74 72 69 62 75 74 65 73 22 3a 69 66 28 22 69 6e 65 72 74 22 21 3d 3d 6e 2e 61 74 74 72 69 62 75 74 65 4e 61 6d Data Ascii: ll(n.addedNodes).forEach((function(n){var i;n.nodeType===Node.ELEMENT_NODE&&(i=e.call(n.querySelectorAll("[inert]")),t.call(n,"[inert]")&&i.unshift(n),i.forEach((function(e){this.setInert(e,!0)}),o))}),o);break;case"attributes":if("inert"!==n.attributeNam

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.11	49770	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:20 UTC	587	OUT	GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.14.0 HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:22 UTC	601	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:22 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: public, max-age=604800 expires: Tue, 23 Apr 2024 15:05:22 GMT last-modified: Mon, 15 Apr 2024 17:34:16 GMT etag: W/"19e1-661d6518-aeb0407051888c2d;gz" platform: hostinger content-security-policy: upgrade-insecure-requests x-turbo-charged-by: LiteSpeed alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 04fa52fc0b4cdffe7bdb6d6638000ded-asc-edge6 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 2.202
2024-04-16 15:05:22 UTC	768	IN	Data Raw: 31 39 65 31 0d 0a 76 61 72 20 72 75 6e 74 69 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 72 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 3d 72 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 6f 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 74 5b 65 5d 3d 72 2e 76 61 6c 75 65 7d 2c 69 3d 28 77 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3f 53 79 6d 62 6f 6c 3a 7b 7d 29 2e 69 74 65 72 61 74 6f 72 7c 7c 22 40 40 69 74 65 72 61 74 6f 72 22 2c 61 3d 77 2e 61 73 79 6e 63 49 74 65 72 61 74 6f 72 7c 7c 22 40 40 61 73 79 6e 63 49 74 65 72 61 74 6f 72 22 2c 63 3d 77 2e 74 6f 53 74 72 69 6e Data Ascii: 19e1var runtime=function(t){"use strict";var e,r=Object.prototype,n=r.hasOwnProperty,o=Object.defineProperty\|\|function(t,e,r){t[e]=r.value},i=(w="function"==typeof Symbol?Symbol:{}).iterator\|\|"@@iterator",a=w.asyncIterator\|\|"@@asyncIterator",c=w.toStrin
2024-04-16 15:05:22 UTC	1369	IN	Data Raw: 66 28 6e 26 26 28 6e 3d 66 75 6e 63 74 69 6f 6e 20 74 28 72 2c 6e 29 7b 76 61 72 20 6f 3d 6e 2e 6d 65 74 68 6f 64 2c 69 3d 72 2e 69 74 65 72 61 74 6f 72 5b 6f 5d 3b 72 65 74 75 72 6e 20 69 3d 3d 3d 65 3f 28 6e 2e 64 65 6c 65 67 61 74 65 3d 6e 75 6c 6c 2c 22 74 68 72 6f 77 22 3d 3d 3d 6f 26 26 72 2e 69 74 65 72 61 74 6f 72 2e 72 65 74 75 72 6e 26 26 28 6e 2e 6d 65 74 68 6f 64 3d 22 72 65 74 75 72 6e 22 2c 6e 2e 61 72 67 3d 65 2c 74 28 72 2c 6e 29 2c 22 74 68 72 6f 77 22 3d 3d 3d 6e 2e 6d 65 74 68 6f 64 29 7c 7c 22 72 65 74 75 72 6e 22 21 3d 3d 6f 26 26 28 6e 2e 6d 65 74 68 6f 64 3d 22 74 68 72 6f 77 22 2c 6e 2e 61 72 67 3d 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 54 68 65 20 69 74 65 72 61 74 6f 72 20 64 6f 65 73 20 6e 6f 74 20 70 72 6f 76 69 64 65 20 Data Ascii: f(n&&(n=function t(r,n){var o=n.method,i=r.iterator[o];return i===e?(n.delegate=null,"throw"===o&&r.iterator.return&&(n.method="return",n.arg=e,t(r,n),"throw"===n.method)\|\|"return"!==o&&(n.method="throw",n.arg=new TypeError("The iterator does not provide
2024-04-16 15:05:22 UTC	1369	IN	Data Raw: 2c 22 72 65 74 75 72 6e 22 5d 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 75 28 74 2c 65 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 6e 76 6f 6b 65 28 65 2c 74 29 7d 29 29 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 45 28 74 2c 65 29 7b 76 61 72 20 72 3b 6f 28 74 68 69 73 2c 22 5f 69 6e 76 6f 6b 65 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 65 28 28 66 75 6e 63 74 69 6f 6e 28 72 2c 61 29 7b 21 66 75 6e 63 74 69 6f 6e 20 72 28 6f 2c 69 2c 61 2c 63 29 7b 76 61 72 20 75 3b 69 66 28 22 74 68 72 6f 77 22 21 3d 3d 28 6f 3d 6c 28 74 5b 6f 5d 2c 74 2c 69 29 29 2e 74 79 70 65 29 72 65 74 75 72 6e 28 69 3d 28 75 Data Ascii: ,"return"].forEach((function(e){u(t,e,(function(t){return this._invoke(e,t)}))}))}function E(t,e){var r;o(this,"_invoke",{value:function(o,i){function a(){return new e((function(r,a){!function r(o,i,a,c){var u;if("throw"!==(o=l(t[o],t,i)).type)return(i=(u
2024-04-16 15:05:22 UTC	1369	IN	Data Raw: 3d 3d 64 7c 7c 22 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 22 3d 3d 3d 28 74 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 74 2e 6e 61 6d 65 29 29 7d 2c 74 2e 6d 61 72 6b 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2c 6d 29 3a 28 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 6d 2c 75 28 74 2c 63 2c 22 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 22 29 29 2c 74 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 4c 29 2c 74 7d 2c 74 2e 61 77 72 61 70 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 7b 5f 5f 61 77 61 69 74 3a 74 7d 7d 2c 78 28 45 2e 70 72 6f 74 6f 74 79 70 65 Data Ascii: ==d\|\|"GeneratorFunction"===(t.displayName\|\|t.name))},t.mark=function(t){return Object.setPrototypeOf?Object.setPrototypeOf(t,m):(t.__proto__=m,u(t,c,"GeneratorFunction")),t.prototype=Object.create(L),t},t.awrap=function(t){return{__await:t}},x(E.prototype
2024-04-16 15:05:22 UTC	1369	IN	Data Raw: 6e 67 74 68 2d 31 3b 30 3c 3d 69 3b 2d 2d 69 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 74 72 79 45 6e 74 72 69 65 73 5b 69 5d 2c 63 3d 61 2e 63 6f 6d 70 6c 65 74 69 6f 6e 3b 69 66 28 22 72 6f 6f 74 22 3d 3d 3d 61 2e 74 72 79 4c 6f 63 29 72 65 74 75 72 6e 20 6f 28 22 65 6e 64 22 29 3b 69 66 28 61 2e 74 72 79 4c 6f 63 3c 3d 74 68 69 73 2e 70 72 65 76 29 7b 76 61 72 20 75 3d 6e 2e 63 61 6c 6c 28 61 2c 22 63 61 74 63 68 4c 6f 63 22 29 2c 68 3d 6e 2e 63 61 6c 6c 28 61 2c 22 66 69 6e 61 6c 6c 79 4c 6f 63 22 29 3b 69 66 28 75 26 26 68 29 7b 69 66 28 74 68 69 73 2e 70 72 65 76 3c 61 2e 63 61 74 63 68 4c 6f 63 29 72 65 74 75 72 6e 20 6f 28 61 2e 63 61 74 63 68 4c 6f 63 2c 21 30 29 3b 69 66 28 74 68 69 73 2e 70 72 65 76 3c 61 2e 66 69 6e 61 6c 6c 79 4c 6f 63 29 72 65 Data Ascii: ngth-1;0<=i;--i){var a=this.tryEntries[i],c=a.completion;if("root"===a.tryLoc)return o("end");if(a.tryLoc<=this.prev){var u=n.call(a,"catchLoc"),h=n.call(a,"finallyLoc");if(u&&h){if(this.prev<a.catchLoc)return o(a.catchLoc,!0);if(this.prev<a.finallyLoc)re
2024-04-16 15:05:22 UTC	394	IN	Data Raw: 6e 3d 72 2e 61 72 67 2c 5f 28 6f 29 29 2c 6e 7d 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 69 6c 6c 65 67 61 6c 20 63 61 74 63 68 20 61 74 74 65 6d 70 74 22 29 7d 2c 64 65 6c 65 67 61 74 65 59 69 65 6c 64 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 64 65 6c 65 67 61 74 65 3d 7b 69 74 65 72 61 74 6f 72 3a 6b 28 74 29 2c 72 65 73 75 6c 74 4e 61 6d 65 3a 72 2c 6e 65 78 74 4c 6f 63 3a 6e 7d 2c 22 6e 65 78 74 22 3d 3d 3d 74 68 69 73 2e 6d 65 74 68 6f 64 26 26 28 74 68 69 73 2e 61 72 67 3d 65 29 2c 67 7d 7d 2c 74 7d 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3a 7b 7d 29 3b 74 72 79 7b 72 65 67 65 6e 65 72 61 74 6f 72 52 75 6e 74 69 6d 65 Data Ascii: n=r.arg,_(o)),n}throw new Error("illegal catch attempt")},delegateYield:function(t,r,n){return this.delegate={iterator:k(t),resultName:r,nextLoc:n},"next"===this.method&&(this.arg=e),g}},t}("object"==typeof module?module.exports:{});try{regeneratorRuntime

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.11	49771	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:20 UTC	579	OUT	GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:24 UTC	601	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:23 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: public, max-age=604800 expires: Tue, 23 Apr 2024 15:05:23 GMT last-modified: Mon, 15 Apr 2024 17:34:16 GMT etag: W/"96be-661d6518-ee71cfc9a4c41a6a;gz" platform: hostinger content-security-policy: upgrade-insecure-requests x-turbo-charged-by: LiteSpeed alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 8c8cd06bc853df11385a25d39f61c190-asc-edge4 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 2.161
2024-04-16 15:05:24 UTC	768	IN	Data Raw: 39 36 62 65 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 2c 65 2c 6e 3b 65 3d 7b 7d 2c 28 6e 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 69 66 28 65 5b 72 5d 29 72 65 74 75 72 6e 20 65 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 65 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 72 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 29 2e 6d 3d 74 3d 5b 66 75 6e 63 74 69 6f 6e 28 72 2c 74 2c 65 29 7b 65 28 31 29 2c 65 28 37 30 29 2c 65 28 37 37 29 2c 65 28 38 30 29 2c 65 28 38 31 29 2c 65 28 38 33 29 2c 65 28 39 35 29 2c 65 28 39 36 29 2c 65 28 39 Data Ascii: 96be!function(r){"use strict";var t,e,n;e={},(n=function(r){if(e[r])return e[r].exports;var o=e[r]={i:r,l:!1,exports:{}};return t[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}).m=t=[function(r,t,e){e(1),e(70),e(77),e(80),e(81),e(83),e(95),e(96),e(9
2024-04-16 15:05:24 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 6f 3d 6e 28 33 29 2c 61 3d 6e 28 34 29 2e 66 2c 63 3d 6e 28 34 32 29 2c 69 3d 6e 28 34 36 29 2c 75 3d 6e 28 33 36 29 2c 66 3d 6e 28 35 34 29 2c 73 3d 6e 28 36 36 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 70 2c 6c 2c 79 3d 74 2e 74 61 72 67 65 74 2c 68 3d 74 2e 67 6c 6f 62 61 6c 2c 76 3d 74 2e 73 74 61 74 2c 67 3d 68 3f 6f 3a 76 3f 6f 5b 79 5d 7c 7c 75 28 79 2c 7b 7d 29 3a 6f 5b 79 5d 26 26 6f 5b 79 5d 2e 70 72 6f 74 6f 74 79 70 65 3b 69 66 28 67 29 66 6f 72 28 6e 20 69 6e 20 65 29 7b 69 66 28 70 3d 65 5b 6e 5d 2c 6c 3d 74 2e 64 6f 6e 74 43 61 6c 6c 47 65 74 53 65 74 3f 28 6c 3d 61 28 67 2c 6e 29 29 26 26 6c 2e 76 61 6c 75 65 3a 67 5b 6e 5d 2c 21 Data Ascii: unction(t,e,n){var o=n(3),a=n(4).f,c=n(42),i=n(46),u=n(36),f=n(54),s=n(66);t.exports=function(t,e){var n,p,l,y=t.target,h=t.global,v=t.stat,g=h?o:v?o[y]\|\|u(y,{}):o[y]&&o[y].prototype;if(g)for(n in e){if(p=e[n],l=t.dontCallGetSet?(l=a(g,n))&&l.value:g[n],!
2024-04-16 15:05:24 UTC	1369	IN	Data Raw: 29 7b 76 61 72 20 6e 3d 7b 7d 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 2c 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 2c 61 3d 6f 26 26 21 6e 2e 63 61 6c 6c 28 7b 31 3a 32 7d 2c 31 29 3b 74 2e 66 3d 61 3f 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 21 21 28 72 3d 6f 28 74 68 69 73 2c 72 29 29 26 26 72 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 3a 6e 7d 2c 66 75 6e 63 74 69 6f 6e 28 72 2c 74 2c 65 29 7b 72 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 72 65 74 75 72 6e 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 28 31 26 72 29 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 28 32 26 72 29 2c 77 72 69 74 61 62 6c 65 3a 21 28 34 26 72 29 2c 76 61 6c 75 65 3a 74 7d Data Ascii: ){var n={}.propertyIsEnumerable,o=Object.getOwnPropertyDescriptor,a=o&&!n.call({1:2},1);t.f=a?function(r){return!!(r=o(this,r))&&r.enumerable}:n},function(r,t,e){r.exports=function(r,t){return{enumerable:!(1&r),configurable:!(2&r),writable:!(4&r),value:t}
2024-04-16 15:05:24 UTC	1369	IN	Data Raw: 74 2c 65 29 7b 76 61 72 20 6e 3d 65 28 32 30 29 3b 72 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 72 3f 6e 75 6c 6c 21 3d 3d 72 3a 6e 28 72 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 6f 3d 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 26 26 64 6f 63 75 6d 65 6e 74 2e 61 6c 6c 3b 74 2e 65 78 70 6f 72 74 73 3d 76 6f 69 64 20 30 3d 3d 3d 6f 26 26 6f 21 3d 3d 72 3f 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 7c 7c 72 3d 3d 3d 6f 7d 3a 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 Data Ascii: t,e){var n=e(20);r.exports=function(r){return"object"==typeof r?null!==r:n(r)}},function(t,e,n){var o="object"==typeof document&&document.all;t.exports=void 0===o&&o!==r?function(r){return"function"==typeof r\|\|r===o}:function(r){return"function"==typeof r
2024-04-16 15:05:24 UTC	1369	IN	Data Raw: 3d 65 28 33 30 29 2c 61 3d 54 79 70 65 45 72 72 6f 72 3b 72 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 69 66 28 6e 28 72 29 29 72 65 74 75 72 6e 20 72 3b 74 68 72 6f 77 20 6e 65 77 20 61 28 6f 28 72 29 2b 22 20 69 73 20 6e 6f 74 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 72 2c 74 2c 65 29 7b 76 61 72 20 6e 3d 53 74 72 69 6e 67 3b 72 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6e 28 72 29 7d 63 61 74 63 68 28 72 29 7b 72 65 74 75 72 6e 22 4f 62 6a 65 63 74 22 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 72 2c 74 2c 65 29 7b 76 61 72 20 6e 3d 65 28 37 29 2c 6f 3d 65 28 32 30 29 2c 61 3d 65 28 31 39 29 2c 63 3d 54 79 70 65 45 72 72 6f 72 3b 72 2e 65 78 70 6f 72 Data Ascii: =e(30),a=TypeError;r.exports=function(r){if(n(r))return r;throw new a(o(r)+" is not a function")}},function(r,t,e){var n=String;r.exports=function(r){try{return n(r)}catch(r){return"Object"}}},function(r,t,e){var n=e(7),o=e(20),a=e(19),c=TypeError;r.expor
2024-04-16 15:05:24 UTC	1369	IN	Data Raw: 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 72 65 74 75 72 6e 20 61 28 6f 28 72 29 2c 74 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 72 2c 74 2c 65 29 7b 76 61 72 20 6e 3d 65 28 31 35 29 2c 6f 3d 4f 62 6a 65 63 74 3b 72 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 6f 28 6e 28 72 29 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 6e 3d 6e 28 31 33 29 3b 76 61 72 20 6f 3d 30 2c 61 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2c 63 3d 6e 28 31 2e 2e 74 6f 53 74 72 69 6e 67 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 53 79 6d 62 6f 6c 28 22 2b 28 74 3d 3d 3d 72 3f 22 22 3a 74 29 2b 22 29 5f 22 2b 63 28 2b 2b 6f 2b 61 2c 33 36 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e Data Ascii: n\|\|function(r,t){return a(o(r),t)}},function(r,t,e){var n=e(15),o=Object;r.exports=function(r){return o(n(r))}},function(t,e,n){n=n(13);var o=0,a=Math.random(),c=n(1..toString);t.exports=function(t){return"Symbol("+(t===r?"":t)+")_"+c(++o+a,36)}},function
2024-04-16 15:05:24 UTC	1369	IN	Data Raw: 34 32 2c 77 72 69 74 61 62 6c 65 3a 21 31 7d 29 2e 70 72 6f 74 6f 74 79 70 65 7d 29 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 72 2c 74 2c 65 29 7b 76 61 72 20 6e 3d 65 28 31 39 29 2c 6f 3d 53 74 72 69 6e 67 2c 61 3d 54 79 70 65 45 72 72 6f 72 3b 72 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 69 66 28 6e 28 72 29 29 72 65 74 75 72 6e 20 72 3b 74 68 72 6f 77 20 6e 65 77 20 61 28 6f 28 72 29 2b 22 20 69 73 20 6e 6f 74 20 61 6e 20 6f 62 6a 65 63 74 22 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 6f 3d 6e 28 32 30 29 2c 61 3d 6e 28 34 33 29 2c 63 3d 6e 28 34 37 29 2c 69 3d 6e 28 33 36 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 2c 75 29 7b 76 61 72 20 66 3d 28 75 3d 75 7c 7c 7b 7d 29 2e Data Ascii: 42,writable:!1}).prototype}))},function(r,t,e){var n=e(19),o=String,a=TypeError;r.exports=function(r){if(n(r))return r;throw new a(o(r)+" is not an object")}},function(t,e,n){var o=n(20),a=n(43),c=n(47),i=n(36);t.exports=function(t,e,n,u){var f=(u=u\|\|{}).
2024-04-16 15:05:24 UTC	1369	IN	Data Raw: 29 2c 22 74 6f 53 74 72 69 6e 67 22 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 72 2c 74 2c 65 29 7b 76 61 72 20 6e 3d 65 28 35 29 2c 6f 3d 65 28 33 37 29 2c 61 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2c 63 3d 6e 26 26 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 3b 6f 3d 28 65 3d 6f 28 61 2c 22 6e 61 6d 65 22 29 29 26 26 22 73 6f 6d 65 74 68 69 6e 67 22 3d 3d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2e 6e 61 6d 65 2c 61 3d 65 26 26 28 21 6e 7c 7c 6e 26 26 63 28 61 2c 22 6e 61 6d 65 22 29 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 29 3b 72 2e 65 78 70 6f 72 74 73 3d 7b 45 58 49 53 54 53 3a 65 2c 50 52 4f 50 45 52 3a 6f 2c 43 4f 4e 46 49 47 55 52 41 42 4c 45 3a 61 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 72 2c Data Ascii: ),"toString")},function(r,t,e){var n=e(5),o=e(37),a=Function.prototype,c=n&&Object.getOwnPropertyDescriptor;o=(e=o(a,"name"))&&"something"===function(){}.name,a=e&&(!n\|\|n&&c(a,"name").configurable);r.exports={EXISTS:e,PROPER:o,CONFIGURABLE:a}},function(r,
2024-04-16 15:05:24 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 72 2c 74 2c 65 29 7b 76 61 72 20 6e 3d 65 28 33 37 29 2c 6f 3d 65 28 35 35 29 2c 61 3d 65 28 34 29 2c 63 3d 65 28 34 33 29 3b 72 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 69 3d 6f 28 74 29 2c 75 3d 63 2e 66 2c 66 3d 61 2e 66 2c 73 3d 30 3b 73 3c 69 2e 6c 65 6e 67 74 68 3b 73 2b 2b 29 7b 76 61 72 20 70 3d 69 5b 73 5d 3b 6e 28 72 2c 70 29 7c 7c 65 26 26 6e 28 65 2c 70 29 7c 7c 75 28 72 2c 70 2c 66 28 74 2c 70 29 29 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 72 2c 74 2c 65 29 7b 76 61 72 20 6e 3d 65 28 32 32 29 2c 6f 3d 65 28 31 33 29 2c 61 3d 65 28 35 36 29 2c 63 3d 65 28 36 35 29 2c 69 3d 65 28 34 35 29 2c 75 3d 6f 28 5b 5d 2e 63 6f 6e 63 61 74 29 3b 72 2e 65 78 70 6f 72 74 73 3d 6e 28 22 Data Ascii: tion(r,t,e){var n=e(37),o=e(55),a=e(4),c=e(43);r.exports=function(r,t,e){for(var i=o(t),u=c.f,f=a.f,s=0;s<i.length;s++){var p=i[s];n(r,p)\|\|e&&n(e,p)\|\|u(r,p,f(t,p))}}},function(r,t,e){var n=e(22),o=e(13),a=e(56),c=e(65),i=e(45),u=o([].concat);r.exports=n("
2024-04-16 15:05:24 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 30 3c 28 72 3d 6e 28 72 29 29 3f 6f 28 72 2c 39 30 30 37 31 39 39 32 35 34 37 34 30 39 39 31 29 3a 30 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 72 2c 74 2c 65 29 7b 72 2e 65 78 70 6f 72 74 73 3d 5b 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 2c 22 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 22 2c 22 69 73 50 72 6f 74 6f 74 79 70 65 4f 66 22 2c 22 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 22 2c 22 74 6f 4c 6f 63 61 6c 65 53 74 72 69 6e 67 22 2c 22 74 6f 53 74 72 69 6e 67 22 2c 22 76 61 6c 75 65 4f 66 22 5d 7d 2c 66 75 6e 63 74 69 6f 6e 28 72 2c 74 2c 65 29 7b 74 2e 66 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 7d 2c 66 75 6e 63 74 69 6f 6e 28 72 2c 74 Data Ascii: function(r){return 0<(r=n(r))?o(r,9007199254740991):0}},function(r,t,e){r.exports=["constructor","hasOwnProperty","isPrototypeOf","propertyIsEnumerable","toLocaleString","toString","valueOf"]},function(r,t,e){t.f=Object.getOwnPropertySymbols},function(r,t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.11	49773	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:21 UTC	584	OUT	GET /wp-includes/js/dist/dom-ready.min.js?ver=f77871ff7694fffea381 HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:22 UTC	600	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:22 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: public, max-age=604800 expires: Tue, 23 Apr 2024 15:05:22 GMT last-modified: Mon, 15 Apr 2024 17:34:16 GMT etag: W/"1c9-661d6518-feb2bcea98e28122;gz" platform: hostinger content-security-policy: upgrade-insecure-requests x-turbo-charged-by: LiteSpeed alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 81e41a0955deb59dbfb86c8ba92663bf-asc-edge3 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 1.064
2024-04-16 15:05:22 UTC	469	IN	Data Raw: 31 63 39 0d 0a 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 7b 64 3a 28 74 2c 64 29 3d 3e 7b 66 6f 72 28 76 61 72 20 6f 20 69 6e 20 64 29 65 2e 6f 28 64 2c 6f 29 26 26 21 65 2e 6f 28 74 2c 6f 29 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 6f 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 64 5b 6f 5d 7d 29 7d 2c 6f 3a 28 65 2c 74 29 3d 3e 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 74 29 7d 2c 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 64 28 65 29 7b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 Data Ascii: 1c9/! This file is auto-generated /(()=>{"use strict";var e={d:(t,d)=>{for(var o in d)e.o(d,o)&&!e.o(t,o)&&Object.defineProperty(t,o,{enumerable:!0,get:d[o]})},o:(e,t)=>Object.prototype.hasOwnProperty.call(e,t)},t={};function d(e){"undefined"!=typeof

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.11	49774	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:21 UTC	580	OUT	GET /wp-includes/js/dist/hooks.min.js?ver=2810c76e705dd1a53b18 HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:23 UTC	601	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:23 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: public, max-age=604800 expires: Tue, 23 Apr 2024 15:05:23 GMT last-modified: Mon, 15 Apr 2024 17:34:16 GMT etag: W/"10d3-661d6518-87d85a4691e492e3;gz" platform: hostinger content-security-policy: upgrade-insecure-requests x-turbo-charged-by: LiteSpeed alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: f1e3ecdf9f69766ce35a54ebaad9d46f-asc-edge5 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 1.748
2024-04-16 15:05:23 UTC	768	IN	Data Raw: 31 30 64 33 0d 0a 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 7b 64 3a 28 65 2c 6e 29 3d 3e 7b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 6e 29 74 2e 6f 28 6e 2c 72 29 26 26 21 74 2e 6f 28 65 2c 72 29 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 72 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 6e 5b 72 5d 7d 29 7d 2c 6f 3a 28 74 2c 65 29 3d 3e 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 65 29 2c 72 3a 74 3d 3e 7b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 Data Ascii: 10d3/! This file is auto-generated /(()=>{"use strict";var t={d:(e,n)=>{for(var r in n)t.o(n,r)&&!t.o(e,r)&&Object.defineProperty(e,r,{enumerable:!0,get:n[r]})},o:(t,e)=>Object.prototype.hasOwnProperty.call(t,e),r:t=>{"undefined"!=typeof Symbol&&Symb
2024-04-16 15:05:23 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 7c 7c 22 22 3d 3d 3d 74 3f 28 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 54 68 65 20 6e 61 6d 65 73 70 61 63 65 20 6d 75 73 74 20 62 65 20 61 20 6e 6f 6e 2d 65 6d 70 74 79 20 73 74 72 69 6e 67 2e 22 29 2c 21 31 29 3a 21 21 2f 5e 5b 61 2d 7a 41 2d 5a 5d 5b 61 2d 7a 41 2d 5a 30 2d 39 5f 2e 5c 2d 5c 2f 5d 2a 24 2f 2e 74 65 73 74 28 74 29 7c 7c 28 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 54 68 65 20 6e 61 6d 65 73 70 61 63 65 20 63 61 6e 20 6f 6e 6c 79 20 63 6f 6e 74 61 69 6e 20 6e 75 6d 62 65 72 73 2c 20 6c 65 74 74 65 72 73 2c 20 64 61 73 68 65 73 2c 20 70 65 72 69 6f 64 73 2c 20 75 6e 64 65 72 73 63 6f 72 65 73 20 61 6e 64 20 73 6c 61 73 68 65 73 Data Ascii: unction(t){return"string"!=typeof t\|\|""===t?(console.error("The namespace must be a non-empty string."),!1):!!/^[a-zA-Z][a-zA-Z0-9_.\-\/]*$/.test(t)\|\|(console.error("The namespace can only contain numbers, letters, dashes, periods, underscores and slashes
2024-04-16 15:05:23 UTC	1369	IN	Data Raw: 73 3a 63 5b 69 5d 2e 72 75 6e 73 2c 68 61 6e 64 6c 65 72 73 3a 5b 5d 7d 3b 65 6c 73 65 7b 63 6f 6e 73 74 20 74 3d 63 5b 69 5d 2e 68 61 6e 64 6c 65 72 73 3b 66 6f 72 28 6c 65 74 20 65 3d 74 2e 6c 65 6e 67 74 68 2d 31 3b 65 3e 3d 30 3b 65 2d 2d 29 74 5b 65 5d 2e 6e 61 6d 65 73 70 61 63 65 3d 3d 3d 73 26 26 28 74 2e 73 70 6c 69 63 65 28 65 2c 31 29 2c 6c 2b 2b 2c 63 2e 5f 5f 63 75 72 72 65 6e 74 2e 66 6f 72 45 61 63 68 28 28 74 3d 3e 7b 74 2e 6e 61 6d 65 3d 3d 3d 69 26 26 74 2e 63 75 72 72 65 6e 74 49 6e 64 65 78 3e 3d 65 26 26 74 2e 63 75 72 72 65 6e 74 49 6e 64 65 78 2d 2d 7d 29 29 29 7d 72 65 74 75 72 6e 22 68 6f 6f 6b 52 65 6d 6f 76 65 64 22 21 3d 3d 69 26 26 74 2e 64 6f 41 63 74 69 6f 6e 28 22 68 6f 6f 6b 52 65 6d 6f 76 65 64 22 2c 69 2c 73 29 2c 6c 7d Data Ascii: s:c[i].runs,handlers:[]};else{const t=c[i].handlers;for(let e=t.length-1;e>=0;e--)t[e].namespace===s&&(t.splice(e,1),l++,c.__current.forEach((t=>{t.name===i&&t.currentIndex>=e&&t.currentIndex--})))}return"hookRemoved"!==i&&t.doAction("hookRemoved",i,s),l}
2024-04-16 15:05:23 UTC	814	IN	Data Raw: 61 63 74 69 6f 6e 73 22 29 2c 74 68 69 73 2e 72 65 6d 6f 76 65 46 69 6c 74 65 72 3d 69 28 74 68 69 73 2c 22 66 69 6c 74 65 72 73 22 29 2c 74 68 69 73 2e 68 61 73 41 63 74 69 6f 6e 3d 73 28 74 68 69 73 2c 22 61 63 74 69 6f 6e 73 22 29 2c 74 68 69 73 2e 68 61 73 46 69 6c 74 65 72 3d 73 28 74 68 69 73 2c 22 66 69 6c 74 65 72 73 22 29 2c 74 68 69 73 2e 72 65 6d 6f 76 65 41 6c 6c 41 63 74 69 6f 6e 73 3d 69 28 74 68 69 73 2c 22 61 63 74 69 6f 6e 73 22 2c 21 30 29 2c 74 68 69 73 2e 72 65 6d 6f 76 65 41 6c 6c 46 69 6c 74 65 72 73 3d 69 28 74 68 69 73 2c 22 66 69 6c 74 65 72 73 22 2c 21 30 29 2c 74 68 69 73 2e 64 6f 41 63 74 69 6f 6e 3d 63 28 74 68 69 73 2c 22 61 63 74 69 6f 6e 73 22 29 2c 74 68 69 73 2e 61 70 70 6c 79 46 69 6c 74 65 72 73 3d 63 28 74 68 69 73 2c Data Ascii: actions"),this.removeFilter=i(this,"filters"),this.hasAction=s(this,"actions"),this.hasFilter=s(this,"filters"),this.removeAllActions=i(this,"actions",!0),this.removeAllFilters=i(this,"filters",!0),this.doAction=c(this,"actions"),this.applyFilters=c(this,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.11	49775	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:22 UTC	579	OUT	GET /wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6 HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:24 UTC	601	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:24 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: public, max-age=604800 expires: Tue, 23 Apr 2024 15:05:24 GMT last-modified: Mon, 15 Apr 2024 17:34:16 GMT etag: W/"23b5-661d6518-d801179627e64799;gz" platform: hostinger content-security-policy: upgrade-insecure-requests x-turbo-charged-by: LiteSpeed alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 4f9261d4e00a3394c686291ef4677888-asc-edge5 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 1.798
2024-04-16 15:05:24 UTC	768	IN	Data Raw: 32 33 62 35 0d 0a 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 28 28 29 3d 3e 7b 76 61 72 20 74 3d 7b 32 30 35 38 3a 28 74 2c 65 2c 72 29 3d 3e 7b 76 61 72 20 6e 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 69 3d 7b 6e 6f 74 5f 73 74 72 69 6e 67 3a 2f 5b 5e 73 5d 2f 2c 6e 6f 74 5f 62 6f 6f 6c 3a 2f 5b 5e 74 5d 2f 2c 6e 6f 74 5f 74 79 70 65 3a 2f 5b 5e 54 5d 2f 2c 6e 6f 74 5f 70 72 69 6d 69 74 69 76 65 3a 2f 5b 5e 76 5d 2f 2c 6e 75 6d 62 65 72 3a 2f 5b 64 69 65 66 67 5d 2f 2c 6e 75 6d 65 72 69 63 5f 61 72 67 3a 2f 5b 62 63 64 69 65 66 67 75 78 58 5d 2f 2c 6a 73 6f 6e 3a 2f 5b 6a 5d 2f 2c 6e 6f 74 5f 6a 73 6f 6e 3a 2f 5b 5e 6a 5d 2f 2c 74 65 78 74 3a 2f Data Ascii: 23b5/! This file is auto-generated /(()=>{var t={2058:(t,e,r)=>{var n;!function(){"use strict";var i={not_string:/[^s]/,not_bool:/[^t]/,not_type:/[^T]/,not_primitive:/[^v]/,number:/[diefg]/,numeric_arg:/[bcdiefguxX]/,json:/[j]/,not_json:/[^j]/,text:/
2024-04-16 15:05:24 UTC	1369	IN	Data Raw: 20 75 6e 64 65 66 69 6e 65 64 20 76 61 6c 75 65 20 22 25 73 22 27 2c 73 2e 6b 65 79 73 5b 6f 5d 2c 73 2e 6b 65 79 73 5b 6f 2d 31 5d 29 29 3b 72 3d 72 5b 73 2e 6b 65 79 73 5b 6f 5d 5d 7d 65 6c 73 65 20 72 3d 73 2e 70 61 72 61 6d 5f 6e 6f 3f 65 5b 73 2e 70 61 72 61 6d 5f 6e 6f 5d 3a 65 5b 64 2b 2b 5d 3b 69 66 28 69 2e 6e 6f 74 5f 74 79 70 65 2e 74 65 73 74 28 73 2e 74 79 70 65 29 26 26 69 2e 6e 6f 74 5f 70 72 69 6d 69 74 69 76 65 2e 74 65 73 74 28 73 2e 74 79 70 65 29 26 26 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 46 75 6e 63 74 69 6f 6e 26 26 28 72 3d 72 28 29 29 2c 69 2e 6e 75 6d 65 72 69 63 5f 61 72 67 2e 74 65 73 74 28 73 2e 74 79 70 65 29 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 72 26 26 69 73 4e 61 4e 28 72 29 29 74 68 72 6f 77 20 6e 65 Data Ascii: undefined value "%s"',s.keys[o],s.keys[o-1]));r=r[s.keys[o]]}else r=s.param_no?e[s.param_no]:e[d++];if(i.not_type.test(s.type)&&i.not_primitive.test(s.type)&&r instanceof Function&&(r=r()),i.numeric_arg.test(s.type)&&"number"!=typeof r&&isNaN(r))throw ne
2024-04-16 15:05:24 UTC	1369	IN	Data Raw: 72 3a 28 21 69 2e 6e 75 6d 62 65 72 2e 74 65 73 74 28 73 2e 74 79 70 65 29 7c 7c 63 26 26 21 73 2e 73 69 67 6e 3f 66 3d 22 22 3a 28 66 3d 63 3f 22 2b 22 3a 22 2d 22 2c 72 3d 72 2e 74 6f 53 74 72 69 6e 67 28 29 2e 72 65 70 6c 61 63 65 28 69 2e 73 69 67 6e 2c 22 22 29 29 2c 75 3d 73 2e 70 61 64 5f 63 68 61 72 3f 22 30 22 3d 3d 3d 73 2e 70 61 64 5f 63 68 61 72 3f 22 30 22 3a 73 2e 70 61 64 5f 63 68 61 72 2e 63 68 61 72 41 74 28 31 29 3a 22 20 22 2c 70 3d 73 2e 77 69 64 74 68 2d 28 66 2b 72 29 2e 6c 65 6e 67 74 68 2c 6c 3d 73 2e 77 69 64 74 68 26 26 70 3e 30 3f 75 2e 72 65 70 65 61 74 28 70 29 3a 22 22 2c 67 2b 3d 73 2e 61 6c 69 67 6e 3f 66 2b 72 2b 6c 3a 22 30 22 3d 3d 3d 75 3f 66 2b 6c 2b 72 3a 6c 2b 66 2b 72 29 7d 72 65 74 75 72 6e 20 67 7d 28 66 75 6e 63 Data Ascii: r:(!i.number.test(s.type)\|\|c&&!s.sign?f="":(f=c?"+":"-",r=r.toString().replace(i.sign,"")),u=s.pad_char?"0"===s.pad_char?"0":s.pad_char.charAt(1):" ",p=s.width-(f+r).length,l=s.width&&p>0?u.repeat(p):"",g+=s.align?f+r+l:"0"===u?f+l+r:l+f+r)}return g}(func
2024-04-16 15:05:24 UTC	1369	IN	Data Raw: 69 6e 74 66 3a 6f 7d 7d 2e 63 61 6c 6c 28 65 2c 72 2c 65 2c 74 29 29 7c 7c 28 74 2e 65 78 70 6f 72 74 73 3d 6e 29 29 7d 28 29 7d 7d 2c 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 6e 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 69 29 72 65 74 75 72 6e 20 69 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 61 3d 65 5b 6e 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 6e 5d 28 61 2c 61 2e 65 78 70 6f 72 74 73 2c 72 29 2c 61 2e 65 78 70 6f 72 74 73 7d 72 2e 6e 3d 74 3d 3e 7b 76 61 72 20 65 3d 74 26 26 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 28 29 3d 3e 74 2e 64 65 66 61 75 6c 74 3a 28 29 3d 3e 74 3b 72 65 74 75 72 6e 20 72 2e 64 28 65 2c 7b 61 3a 65 7d 29 2c 65 7d 2c 72 2e 64 3d 28 74 2c 65 29 3d 3e 7b 66 6f 72 Data Ascii: intf:o}}.call(e,r,e,t))\|\|(t.exports=n))}()}},e={};function r(n){var i=e[n];if(void 0!==i)return i.exports;var a=e[n]={exports:{}};return t[n](a,a.exports,r),a.exports}r.n=t=>{var e=t&&t.__esModule?()=>t.default:()=>t;return r.d(e,{a:e}),e},r.d=(t,e)=>{for
2024-04-16 15:05:24 UTC	1369	IN	Data Raw: 6f 6c 65 2e 65 72 72 6f 72 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 74 2c 2e 2e 2e 72 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 65 28 29 2e 73 70 72 69 6e 74 66 28 74 2c 2e 2e 2e 72 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 26 26 69 28 22 73 70 72 69 6e 74 66 20 65 72 72 6f 72 3a 20 5c 6e 5c 6e 22 2b 65 2e 74 6f 53 74 72 69 6e 67 28 29 29 2c 74 7d 7d 76 61 72 20 6f 2c 73 2c 6c 2c 75 3b 6f 3d 7b 22 28 22 3a 39 2c 22 21 22 3a 38 2c 22 2a 22 3a 37 2c 22 2f 22 3a 37 2c 22 25 22 3a 37 2c 22 2b 22 3a 36 2c 22 2d 22 3a 36 2c 22 3c 22 3a 35 2c 22 3c 3d 22 3a 35 2c 22 3e 22 3a 35 2c 22 3e 3d 22 3a 35 2c 22 3d 3d 22 3a 34 2c 22 21 3d 22 3a 34 2c 22 26 26 22 3a 33 2c 22 7c 7c 22 3a 32 2c 22 3f 22 3a 31 2c Data Ascii: ole.error);function a(t,...r){try{return e().sprintf(t,...r)}catch(e){return e instanceof Error&&i("sprintf error: \n\n"+e.toString()),t}}var o,s,l,u;o={"(":9,"!":8,"*":7,"/":7,"%":7,"+":6,"-":6,"<":5,"<=":5,">":5,">=":5,"==":4,"!=":4,"&&":3,"\|\|":2,"?":1,
2024-04-16 15:05:24 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 74 7d 7d 65 6c 73 65 20 73 3d 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 6f 29 3f 65 5b 6f 5d 3a 2b 6f 3b 6c 2e 70 75 73 68 28 73 29 7d 72 65 74 75 72 6e 20 6c 5b 30 5d 7d 28 65 2c 74 29 7d 7d 76 61 72 20 66 3d 7b 63 6f 6e 74 65 78 74 44 65 6c 69 6d 69 74 65 72 3a 22 04 22 2c 6f 6e 4d 69 73 73 69 6e 67 4b 65 79 3a 6e 75 6c 6c 7d 3b 66 75 6e 63 74 69 6f 6e 20 64 28 74 2c 65 29 7b 76 61 72 20 72 3b 66 6f 72 28 72 20 69 6e 20 74 68 69 73 2e 64 61 74 61 3d 74 2c 74 68 69 73 2e 70 6c 75 72 61 6c 46 6f 72 6d 73 3d 7b 7d 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 7b 7d 2c 66 29 74 68 69 73 2e 6f 70 74 69 6f 6e 73 5b 72 5d 3d 76 6f 69 64 20 30 21 3d 3d 65 26 26 72 20 69 6e 20 65 3f 65 5b 72 5d 3a 66 5b 72 5d 7d 64 2e 70 72 6f 74 6f 74 79 Data Ascii: eturn t}}else s=e.hasOwnProperty(o)?e[o]:+o;l.push(s)}return l[0]}(e,t)}}var f={contextDelimiter:"",onMissingKey:null};function d(t,e){var r;for(r in this.data=t,this.pluralForms={},this.options={},f)this.options[r]=void 0!==e&&r in e?e[r]:f[r]}d.prototy
2024-04-16 15:05:24 UTC	1369	IN	Data Raw: 70 6c 79 46 69 6c 74 65 72 73 28 22 69 31 38 6e 2e 67 65 74 74 65 78 74 5f 77 69 74 68 5f 63 6f 6e 74 65 78 74 22 2c 69 2c 74 2c 65 2c 6e 29 2c 72 2e 61 70 70 6c 79 46 69 6c 74 65 72 73 28 22 69 31 38 6e 2e 67 65 74 74 65 78 74 5f 77 69 74 68 5f 63 6f 6e 74 65 78 74 5f 22 2b 75 28 6e 29 2c 69 2c 74 2c 65 2c 6e 29 29 3a 69 7d 3b 69 66 28 74 26 26 73 28 74 2c 65 29 2c 72 29 7b 63 6f 6e 73 74 20 74 3d 74 3d 3e 7b 67 2e 74 65 73 74 28 74 29 26 26 61 28 29 7d 3b 72 2e 61 64 64 41 63 74 69 6f 6e 28 22 68 6f 6f 6b 41 64 64 65 64 22 2c 22 63 6f 72 65 2f 69 31 38 6e 22 2c 74 29 2c 72 2e 61 64 64 41 63 74 69 6f 6e 28 22 68 6f 6f 6b 52 65 6d 6f 76 65 64 22 2c 22 63 6f 72 65 2f 69 31 38 6e 22 2c 74 29 7d 72 65 74 75 72 6e 7b 67 65 74 4c 6f 63 61 6c 65 44 61 74 61 3a Data Ascii: plyFilters("i18n.gettext_with_context",i,t,e,n),r.applyFilters("i18n.gettext_with_context_"+u(n),i,t,e,n)):i};if(t&&s(t,e),r){const t=t=>{g.test(t)&&a()};r.addAction("hookAdded","core/i18n",t),r.addAction("hookRemoved","core/i18n",t)}return{getLocaleData:
2024-04-16 15:05:24 UTC	172	IN	Data Raw: 73 75 62 73 63 72 69 62 65 2e 62 69 6e 64 28 62 29 2c 46 3d 62 2e 5f 5f 2e 62 69 6e 64 28 62 29 2c 53 3d 62 2e 5f 78 2e 62 69 6e 64 28 62 29 2c 6a 3d 62 2e 5f 6e 2e 62 69 6e 64 28 62 29 2c 4c 3d 62 2e 5f 6e 78 2e 62 69 6e 64 28 62 29 2c 54 3d 62 2e 69 73 52 54 4c 2e 62 69 6e 64 28 62 29 2c 44 3d 62 2e 68 61 73 54 72 61 6e 73 6c 61 74 69 6f 6e 2e 62 69 6e 64 28 62 29 7d 29 28 29 2c 28 77 69 6e 64 6f 77 2e 77 70 3d 77 69 6e 64 6f 77 2e 77 70 7c 7c 7b 7d 29 2e 69 31 38 6e 3d 6e 7d 29 28 29 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: subscribe.bind(b),F=b.__.bind(b),S=b._x.bind(b),j=b._n.bind(b),L=b._nx.bind(b),T=b.isRTL.bind(b),D=b.hasTranslation.bind(b)})(),(window.wp=window.wp\|\|{}).i18n=n})();0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.11	49776	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:23 UTC	579	OUT	GET /wp-includes/js/dist/a11y.min.js?ver=d90eebea464f6c09bfd5 HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:25 UTC	600	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:25 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: public, max-age=604800 expires: Tue, 23 Apr 2024 15:05:25 GMT last-modified: Mon, 15 Apr 2024 17:34:16 GMT etag: W/"936-661d6518-609ac5521db5cca0;gz" platform: hostinger content-security-policy: upgrade-insecure-requests x-turbo-charged-by: LiteSpeed alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: b4abe1af369ed296b8a4c43e9d285fcf-asc-edge4 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 2.121
2024-04-16 15:05:25 UTC	769	IN	Data Raw: 39 33 36 0d 0a 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 7b 6e 3a 74 3d 3e 7b 76 61 72 20 6e 3d 74 26 26 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 28 29 3d 3e 74 2e 64 65 66 61 75 6c 74 3a 28 29 3d 3e 74 3b 72 65 74 75 72 6e 20 65 2e 64 28 6e 2c 7b 61 3a 6e 7d 29 2c 6e 7d 2c 64 3a 28 74 2c 6e 29 3d 3e 7b 66 6f 72 28 76 61 72 20 6f 20 69 6e 20 6e 29 65 2e 6f 28 6e 2c 6f 29 26 26 21 65 2e 6f 28 74 2c 6f 29 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 6f 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 6e 5b 6f 5d 7d 29 7d 2c 6f 3a 28 65 2c 74 29 3d 3e 4f 62 6a 65 63 74 2e 70 72 6f Data Ascii: 936/! This file is auto-generated /(()=>{"use strict";var e={n:t=>{var n=t&&t.__esModule?()=>t.default:()=>t;return e.d(n,{a:n}),n},d:(t,n)=>{for(var o in n)e.o(n,o)&&!e.o(t,o)&&Object.defineProperty(t,o,{enumerable:!0,get:n[o]})},o:(e,t)=>Object.pro
2024-04-16 15:05:25 UTC	1369	IN	Data Raw: 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 63 6c 69 70 3a 20 72 65 63 74 28 31 70 78 2c 20 31 70 78 2c 20 31 70 78 2c 20 31 70 78 29 3b 2d 77 65 62 6b 69 74 2d 63 6c 69 70 2d 70 61 74 68 3a 20 69 6e 73 65 74 28 35 30 25 29 3b 63 6c 69 70 2d 70 61 74 68 3a 20 69 6e 73 65 74 28 35 30 25 29 3b 62 6f 72 64 65 72 3a 20 30 3b 77 6f 72 64 2d 77 72 61 70 3a 20 6e 6f 72 6d 61 6c 20 21 69 6d 70 6f 72 74 61 6e 74 3b 22 29 2c 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 6c 69 76 65 22 2c 65 29 2c 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 72 65 6c 65 76 61 6e 74 22 2c 22 61 64 64 69 74 69 6f 6e 73 20 74 65 78 74 22 29 2c 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 61 74 6f 6d 69 63 22 2c 22 74 72 75 65 22 29 Data Ascii: erflow: hidden;clip: rect(1px, 1px, 1px, 1px);-webkit-clip-path: inset(50%);clip-path: inset(50%);border: 0;word-wrap: normal !important;"),t.setAttribute("aria-live",e),t.setAttribute("aria-relevant","additions text"),t.setAttribute("aria-atomic","true")
2024-04-16 15:05:25 UTC	232	IN	Data Raw: 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 61 31 31 79 2d 73 70 65 61 6b 2d 61 73 73 65 72 74 69 76 65 22 29 2c 69 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 61 31 31 79 2d 73 70 65 61 6b 2d 70 6f 6c 69 74 65 22 29 3b 6f 26 26 22 61 73 73 65 72 74 69 76 65 22 3d 3d 3d 74 3f 6f 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 65 3a 69 26 26 28 69 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 65 29 2c 6e 26 26 6e 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 68 69 64 64 65 6e 22 29 7d 6f 28 29 28 64 29 2c 28 77 69 6e 64 6f 77 2e 77 70 3d 77 69 6e 64 6f 77 2e 77 70 7c 7c 7b 7d 29 2e 61 31 31 79 3d 74 7d 29 28 29 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: ocument.getElementById("a11y-speak-assertive"),i=document.getElementById("a11y-speak-polite");o&&"assertive"===t?o.textContent=e:i&&(i.textContent=e),n&&n.removeAttribute("hidden")}o()(d),(window.wp=window.wp\|\|{}).a11y=t})();0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.11	49777	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:23 UTC	578	OUT	GET /wp-includes/js/jquery/ui/autocomplete.min.js?ver=1.13.2 HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:27 UTC	600	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:27 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: public, max-age=604800 expires: Tue, 23 Apr 2024 15:05:27 GMT last-modified: Mon, 15 Apr 2024 17:34:16 GMT etag: W/"2112-661d6518-96636365a52a6d0;gz" platform: hostinger content-security-policy: upgrade-insecure-requests x-turbo-charged-by: LiteSpeed alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: f5fcd79a336e81e4c2d7f00a9f5c54e7-asc-edge3 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 3.846
2024-04-16 15:05:27 UTC	769	IN	Data Raw: 32 31 31 32 0d 0a 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 55 49 20 41 75 74 6f 63 6f 6d 70 6c 65 74 65 20 31 2e 31 33 2e 32 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f Data Ascii: 2112/! jQuery UI Autocomplete 1.13.2 * http://jqueryui.com * * Copyright jQuery Foundation and other contributors * Released under the MIT license. * http://jquery.org/license */!function(e){"use strict";"function"==typeof define&&define.amd?
2024-04-16 15:05:27 UTC	1369	IN	Data Raw: 73 2e 69 73 4d 75 6c 74 69 4c 69 6e 65 3d 74 7c 7c 21 65 26 26 74 68 69 73 2e 5f 69 73 43 6f 6e 74 65 6e 74 45 64 69 74 61 62 6c 65 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 29 2c 74 68 69 73 2e 76 61 6c 75 65 4d 65 74 68 6f 64 3d 74 68 69 73 2e 65 6c 65 6d 65 6e 74 5b 74 7c 7c 65 3f 22 76 61 6c 22 3a 22 74 65 78 74 22 5d 2c 74 68 69 73 2e 69 73 4e 65 77 4d 65 6e 75 3d 21 30 2c 74 68 69 73 2e 5f 61 64 64 43 6c 61 73 73 28 22 75 69 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 69 6e 70 75 74 22 29 2c 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 61 74 74 72 28 22 61 75 74 6f 63 6f 6d 70 6c 65 74 65 22 2c 22 6f 66 66 22 29 2c 74 68 69 73 2e 5f 6f 6e 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2c 7b 6b 65 79 64 6f 77 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 74 68 69 Data Ascii: s.isMultiLine=t\|\|!e&&this._isContentEditable(this.element),this.valueMethod=this.element[t\|\|e?"val":"text"],this.isNewMenu=!0,this._addClass("ui-autocomplete-input"),this.element.attr("autocomplete","off"),this._on(this.element,{keydown:function(e){if(thi
2024-04-16 15:05:27 UTC	1369	IN	Data Raw: 68 69 6e 67 29 2c 74 68 69 73 2e 63 6c 6f 73 65 28 65 29 2c 74 68 69 73 2e 5f 63 68 61 6e 67 65 28 65 29 7d 7d 29 2c 74 68 69 73 2e 5f 69 6e 69 74 53 6f 75 72 63 65 28 29 2c 74 68 69 73 2e 6d 65 6e 75 3d 6f 28 22 3c 75 6c 3e 22 29 2e 61 70 70 65 6e 64 54 6f 28 74 68 69 73 2e 5f 61 70 70 65 6e 64 54 6f 28 29 29 2e 6d 65 6e 75 28 7b 72 6f 6c 65 3a 6e 75 6c 6c 7d 29 2e 68 69 64 65 28 29 2e 61 74 74 72 28 7b 75 6e 73 65 6c 65 63 74 61 62 6c 65 3a 22 6f 6e 22 7d 29 2e 6d 65 6e 75 28 22 69 6e 73 74 61 6e 63 65 22 29 2c 74 68 69 73 2e 5f 61 64 64 43 6c 61 73 73 28 74 68 69 73 2e 6d 65 6e 75 2e 65 6c 65 6d 65 6e 74 2c 22 75 69 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 22 2c 22 75 69 2d 66 72 6f 6e 74 22 29 2c 74 68 69 73 2e 5f 6f 6e 28 74 68 69 73 2e 6d 65 6e 75 2e Data Ascii: hing),this.close(e),this._change(e)}}),this._initSource(),this.menu=o("<ul>").appendTo(this._appendTo()).menu({role:null}).hide().attr({unselectable:"on"}).menu("instance"),this._addClass(this.menu.element,"ui-autocomplete","ui-front"),this._on(this.menu.
2024-04-16 15:05:27 UTC	1369	IN	Data Raw: 2e 64 6f 63 75 6d 65 6e 74 5b 30 5d 2e 62 6f 64 79 29 2c 74 68 69 73 2e 5f 61 64 64 43 6c 61 73 73 28 74 68 69 73 2e 6c 69 76 65 52 65 67 69 6f 6e 2c 6e 75 6c 6c 2c 22 75 69 2d 68 65 6c 70 65 72 2d 68 69 64 64 65 6e 2d 61 63 63 65 73 73 69 62 6c 65 22 29 2c 74 68 69 73 2e 5f 6f 6e 28 74 68 69 73 2e 77 69 6e 64 6f 77 2c 7b 62 65 66 6f 72 65 75 6e 6c 6f 61 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 41 74 74 72 28 22 61 75 74 6f 63 6f 6d 70 6c 65 74 65 22 29 7d 7d 29 7d 2c 5f 64 65 73 74 72 6f 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 73 65 61 72 63 68 69 6e 67 29 2c 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 41 74 74 72 28 22 61 75 74 6f 63 Data Ascii: .document[0].body),this._addClass(this.liveRegion,null,"ui-helper-hidden-accessible"),this._on(this.window,{beforeunload:function(){this.element.removeAttr("autocomplete")}})},_destroy:function(){clearTimeout(this.searching),this.element.removeAttr("autoc
2024-04-16 15:05:27 UTC	1369	IN	Data Raw: 72 63 68 69 6e 67 29 2c 74 68 69 73 2e 73 65 61 72 63 68 69 6e 67 3d 74 68 69 73 2e 5f 64 65 6c 61 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 74 65 72 6d 3d 3d 3d 74 68 69 73 2e 5f 76 61 6c 75 65 28 29 2c 74 3d 74 68 69 73 2e 6d 65 6e 75 2e 65 6c 65 6d 65 6e 74 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 2c 69 3d 73 2e 61 6c 74 4b 65 79 7c 7c 73 2e 63 74 72 6c 4b 65 79 7c 7c 73 2e 6d 65 74 61 4b 65 79 7c 7c 73 2e 73 68 69 66 74 4b 65 79 3b 65 26 26 28 74 7c 7c 69 29 7c 7c 28 74 68 69 73 2e 73 65 6c 65 63 74 65 64 49 74 65 6d 3d 6e 75 6c 6c 2c 74 68 69 73 2e 73 65 61 72 63 68 28 6e 75 6c 6c 2c 73 29 29 7d 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 64 65 6c 61 79 29 7d 2c 73 65 61 72 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 Data Ascii: rching),this.searching=this._delay(function(){var e=this.term===this._value(),t=this.menu.element.is(":visible"),i=s.altKey\|\|s.ctrlKey\|\|s.metaKey\|\|s.shiftKey;e&&(t\|\|i)\|\|(this.selectedItem=null,this.search(null,s))},this.options.delay)},search:function(e,t
2024-04-16 15:05:27 UTC	1369	IN	Data Raw: 29 7b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 7b 6c 61 62 65 6c 3a 65 2c 76 61 6c 75 65 3a 65 7d 3a 6f 2e 65 78 74 65 6e 64 28 7b 7d 2c 65 2c 7b 6c 61 62 65 6c 3a 65 2e 6c 61 62 65 6c 7c 7c 65 2e 76 61 6c 75 65 2c 76 61 6c 75 65 3a 65 2e 76 61 6c 75 65 7c 7c 65 2e 6c 61 62 65 6c 7d 29 7d 29 7d 2c 5f 73 75 67 67 65 73 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 6d 65 6e 75 2e 65 6c 65 6d 65 6e 74 2e 65 6d 70 74 79 28 29 3b 74 68 69 73 2e 5f 72 65 6e 64 65 72 4d 65 6e 75 28 74 2c 65 29 2c 74 68 69 73 2e 69 73 4e 65 77 4d 65 6e 75 3d 21 30 2c 74 68 69 73 2e 6d 65 6e 75 2e 72 65 66 72 65 73 68 28 29 2c 74 2e 73 68 6f 77 28 29 2c 74 68 69 73 2e 5f 72 65 73 69 7a 65 4d 65 6e 75 28 29 2c 74 2e 70 Data Ascii: ){return"string"==typeof e?{label:e,value:e}:o.extend({},e,{label:e.label\|\|e.value,value:e.value\|\|e.label})})},_suggest:function(e){var t=this.menu.element.empty();this._renderMenu(t,e),this.isNewMenu=!0,this.menu.refresh(),t.show(),this._resizeMenu(),t.p
2024-04-16 15:05:27 UTC	865	IN	Data Raw: 29 29 3f 74 68 69 73 2e 5f 69 73 43 6f 6e 74 65 6e 74 45 64 69 74 61 62 6c 65 28 65 2e 70 61 72 65 6e 74 28 29 29 3a 22 74 72 75 65 22 3d 3d 3d 74 29 7d 7d 29 2c 6f 2e 65 78 74 65 6e 64 28 6f 2e 75 69 2e 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2c 7b 65 73 63 61 70 65 52 65 67 65 78 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 72 65 70 6c 61 63 65 28 2f 5b 5c 2d 5c 5b 5c 5d 7b 7d 28 29 2a 2b 3f 2e 2c 5c 5c 5c 5e 24 7c 23 5c 73 5d 2f 67 2c 22 5c 5c 24 26 22 29 7d 2c 66 69 6c 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 69 3d 6e 65 77 20 52 65 67 45 78 70 28 6f 2e 75 69 2e 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2e 65 73 63 61 70 65 52 65 67 65 78 28 74 29 2c 22 69 22 29 3b 72 65 74 75 72 6e 20 6f 2e 67 72 65 70 28 65 2c 66 Data Ascii: ))?this._isContentEditable(e.parent()):"true"===t)}}),o.extend(o.ui.autocomplete,{escapeRegex:function(e){return e.replace(/[\-\[\]{}()*+?.,\\\^$\|#\s]/g,"\\$&")},filter:function(e,t){var i=new RegExp(o.ui.autocomplete.escapeRegex(t),"i");return o.grep(e,f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.11	49778	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:23 UTC	607	OUT	GET /wp-content/themes/salient/nectar/assets/functions/ajax-search/wpss-search-suggest.js HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:24 UTC	600	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:24 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: public, max-age=604800 expires: Tue, 23 Apr 2024 15:05:24 GMT last-modified: Tue, 11 Jan 2022 15:21:50 GMT etag: W/"4a7-61dda08e-933ba5aca2ecec15;gz" platform: hostinger content-security-policy: upgrade-insecure-requests x-turbo-charged-by: LiteSpeed alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: aafd437a93a9ff91d0ee56001f5330a7-asc-edge4 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 1.032
2024-04-16 15:05:24 UTC	769	IN	Data Raw: 34 61 37 0d 0a 2f 2a 2a 0a 20 2a 20 53 61 6c 69 65 6e 74 20 73 65 61 72 63 68 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 0a 20 2a 0a 20 2a 20 40 70 61 63 6b 61 67 65 20 53 61 6c 69 65 6e 74 0a 20 2a 20 40 61 75 74 68 6f 72 20 54 68 65 6d 65 4e 65 63 74 61 72 0a 20 2a 2f 0a 20 2f 2a 20 67 6c 6f 62 61 6c 20 6a 51 75 65 72 79 20 2a 2f 0a 20 0a 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 20 28 24 29 20 7b 0a 09 0a 09 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 09 0a 09 69 66 28 20 24 28 27 23 73 65 61 72 63 68 2d 6f 75 74 65 72 2e 6e 65 63 74 61 72 27 29 2e 6c 65 6e 67 74 68 20 3e 20 30 20 29 20 7b 0a 09 09 0a 09 09 76 61 72 20 61 63 73 5f 61 63 74 69 6f 6e 20 3d 20 27 6d 79 70 72 65 66 69 78 5f 61 75 74 6f 63 6f 6d Data Ascii: 4a7/** * Salient search autocomplete * * @package Salient * @author ThemeNectar / / global jQuery */ jQuery(document).ready(function ($) {"use strict";if( $('#search-outer.nectar').length > 0 ) {var acs_action = 'myprefix_autocom
2024-04-16 15:05:24 UTC	434	IN	Data Raw: 29 3b 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 20 3d 20 75 69 2e 69 74 65 6d 2e 6c 69 6e 6b 3b 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 09 09 09 09 0a 09 09 09 09 09 7d 2c 20 20 0a 09 09 09 09 09 6d 69 6e 4c 65 6e 67 74 68 3a 20 32 2c 20 20 0a 09 09 09 09 7d 29 2e 64 61 74 61 28 20 22 75 69 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 22 20 29 2e 5f 72 65 6e 64 65 72 49 74 65 6d 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 75 6c 2c 20 69 74 65 6d 20 29 20 7b 0a 09 09 09 09 09 72 65 74 75 72 6e 20 24 28 20 22 3c 6c 69 3e 22 20 29 0a 09 09 09 09 09 2e 61 70 70 65 6e 64 28 20 22 3c 61 3e 22 20 2b 20 69 74 65 6d 2e 69 6d 61 67 65 Data Ascii: ); } else { window.location.href = ui.item.link; }}, minLength: 2, }).data( "ui-autocomplete" )._renderItem = function( ul, item ) {return $( "<li>" ).append( "<a>" + item.image

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.11	49779	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:24 UTC	591	OUT	GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.9.3 HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:25 UTC	601	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:25 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: public, max-age=604800 expires: Tue, 23 Apr 2024 15:05:25 GMT last-modified: Tue, 16 Apr 2024 08:16:15 GMT etag: W/"2cf9-661e33cf-98c4278e0fa65493;gz" platform: hostinger content-security-policy: upgrade-insecure-requests x-turbo-charged-by: LiteSpeed alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 15618007c5e9d765c39d32063196f3d1-asc-edge4 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 1.064
2024-04-16 15:05:25 UTC	768	IN	Data Raw: 32 63 66 39 0d 0a 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 7b 64 3a 28 65 2c 69 29 3d 3e 7b 66 6f 72 28 76 61 72 20 73 20 69 6e 20 69 29 74 2e 6f 28 69 2c 73 29 26 26 21 74 2e 6f 28 65 2c 73 29 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 73 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 69 5b 73 5d 7d 29 7d 2c 6f 3a 28 74 2c 65 29 3d 3e 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 65 29 2c 72 3a 74 3d 3e 7b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 74 6f 53 74 72 69 6e 67 54 61 67 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 Data Ascii: 2cf9(()=>{"use strict";var t={d:(e,i)=>{for(var s in i)t.o(i,s)&&!t.o(e,s)&&Object.defineProperty(e,s,{enumerable:!0,get:i[s]})},o:(t,e)=>Object.prototype.hasOwnProperty.call(t,e),r:t=>{"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProper
2024-04-16 15:05:25 UTC	1369	IN	Data Raw: 6e 73 74 5b 74 2c 73 5d 6f 66 20 74 68 69 73 2e 66 6f 72 6d 44 61 74 61 29 7b 63 6f 6e 73 74 20 6f 3d 74 2e 6d 61 74 63 68 28 69 29 3b 69 66 28 6f 29 69 66 28 22 22 3d 3d 3d 6f 2e 67 72 6f 75 70 73 2e 61 72 72 61 79 29 74 68 69 73 2e 74 72 65 65 2e 73 65 74 28 6f 2e 67 72 6f 75 70 73 2e 6e 61 6d 65 2c 73 29 3b 65 6c 73 65 7b 63 6f 6e 73 74 20 74 3d 5b 2e 2e 2e 6f 2e 67 72 6f 75 70 73 2e 61 72 72 61 79 2e 6d 61 74 63 68 41 6c 6c 28 2f 5c 5b 28 5b 61 2d 7a 5d 5b 2d 61 2d 7a 30 2d 39 5f 3a 5d 2a 7c 5b 30 2d 39 5d 2a 29 5c 5d 2f 67 69 29 5d 2e 6d 61 70 28 28 28 5b 74 2c 65 5d 29 3d 3e 65 29 29 3b 74 2e 75 6e 73 68 69 66 74 28 6f 2e 67 72 6f 75 70 73 2e 6e 61 6d 65 29 3b 63 6f 6e 73 74 20 69 3d 74 2e 70 6f 70 28 29 3b 74 2e 72 65 64 75 63 65 28 28 28 74 2c 69 Data Ascii: nst[t,s]of this.formData){const o=t.match(i);if(o)if(""===o.groups.array)this.tree.set(o.groups.name,s);else{const t=[...o.groups.array.matchAll(/\[([a-z][-a-z0-9_:]\|[0-9])\]/gi)].map((([t,e])=>e));t.unshift(o.groups.name);const i=t.pop();t.reduce(((t,i
2024-04-16 15:05:25 UTC	1369	IN	Data Raw: 29 7d 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 30 3d 3d 3d 74 2e 67 65 74 41 6c 6c 28 74 68 69 73 2e 66 69 65 6c 64 29 2e 6c 65 6e 67 74 68 29 74 68 72 6f 77 20 6e 65 77 20 6f 28 74 68 69 73 29 7d 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 74 2e 67 65 74 41 6c 6c 28 74 68 69 73 2e 66 69 65 6c 64 29 2e 65 76 65 72 79 28 28 74 3d 3e 7b 69 66 28 28 74 3d 74 2e 74 72 69 6d 28 29 29 2e 6c 65 6e 67 74 68 3c 36 29 72 65 74 75 72 6e 21 31 3b 69 66 28 2d 31 3d 3d 3d 74 2e 69 6e 64 65 78 4f 66 28 22 40 22 2c 31 29 29 72 65 74 75 72 6e 21 31 3b 69 66 28 74 2e 69 6e 64 65 78 4f 66 28 22 40 22 29 21 3d 3d 74 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 40 22 29 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 5b 65 2c 69 5d 3d 74 2e 73 70 6c 69 74 Data Ascii: )},a=function(t){if(0===t.getAll(this.field).length)throw new o(this)},r=function(t){if(!t.getAll(this.field).every((t=>{if((t=t.trim()).length<6)return!1;if(-1===t.indexOf("@",1))return!1;if(t.indexOf("@")!==t.lastIndexOf("@"))return!1;const[e,i]=t.split
2024-04-16 15:05:25 UTC	1369	IN	Data Raw: 2d 39 5d 7b 32 7d 2d 5b 30 2d 39 5d 7b 32 7d 24 2f 2e 74 65 73 74 28 74 29 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 20 65 3d 6e 65 77 20 44 61 74 65 28 74 29 3b 72 65 74 75 72 6e 21 4e 75 6d 62 65 72 2e 69 73 4e 61 4e 28 65 2e 76 61 6c 75 65 4f 66 28 29 29 7d 29 29 29 74 68 72 6f 77 20 6e 65 77 20 6f 28 74 68 69 73 29 7d 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 74 2e 67 65 74 41 6c 6c 28 74 68 69 73 2e 66 69 65 6c 64 29 2e 65 76 65 72 79 28 28 74 3d 3e 7b 63 6f 6e 73 74 20 65 3d 74 2e 74 72 69 6d 28 29 2e 6d 61 74 63 68 28 2f 5e 28 5b 30 2d 39 5d 7b 32 7d 29 5c 3a 28 5b 30 2d 39 5d 7b 32 7d 29 28 3f 3a 5c 3a 28 5b 30 2d 39 5d 7b 32 7d 29 29 3f 24 2f 29 3b 69 66 28 21 65 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 20 69 3d 70 61 72 73 Data Ascii: -9]{2}-[0-9]{2}$/.test(t))return!1;const e=new Date(t);return!Number.isNaN(e.valueOf())})))throw new o(this)},d=function(t){if(!t.getAll(this.field).every((t=>{const e=t.trim().match(/^([0-9]{2})\:([0-9]{2})(?:\:([0-9]{2}))?$/);if(!e)return!1;const i=pars
2024-04-16 15:05:25 UTC	1369	IN	Data Raw: 29 2c 74 2e 73 65 74 28 22 33 67 32 7c 33 67 70 32 22 2c 22 76 69 64 65 6f 2f 33 67 70 70 32 22 29 2c 74 2e 73 65 74 28 22 74 78 74 7c 61 73 63 7c 63 7c 63 63 7c 68 7c 73 72 74 22 2c 22 74 65 78 74 2f 70 6c 61 69 6e 22 29 2c 74 2e 73 65 74 28 22 63 73 76 22 2c 22 74 65 78 74 2f 63 73 76 22 29 2c 74 2e 73 65 74 28 22 74 73 76 22 2c 22 74 65 78 74 2f 74 61 62 2d 73 65 70 61 72 61 74 65 64 2d 76 61 6c 75 65 73 22 29 2c 74 2e 73 65 74 28 22 69 63 73 22 2c 22 74 65 78 74 2f 63 61 6c 65 6e 64 61 72 22 29 2c 74 2e 73 65 74 28 22 72 74 78 22 2c 22 74 65 78 74 2f 72 69 63 68 74 65 78 74 22 29 2c 74 2e 73 65 74 28 22 63 73 73 22 2c 22 74 65 78 74 2f 63 73 73 22 29 2c 74 2e 73 65 74 28 22 68 74 6d 7c 68 74 6d 6c 22 2c 22 74 65 78 74 2f 68 74 6d 6c 22 29 2c 74 2e 73 Data Ascii: ),t.set("3g2\|3gp2","video/3gpp2"),t.set("txt\|asc\|c\|cc\|h\|srt","text/plain"),t.set("csv","text/csv"),t.set("tsv","text/tab-separated-values"),t.set("ics","text/calendar"),t.set("rtx","text/richtext"),t.set("css","text/css"),t.set("htm\|html","text/html"),t.s
2024-04-16 15:05:25 UTC	1369	IN	Data Raw: 69 6f 6e 2f 76 6e 64 2e 6f 70 65 6e 78 6d 6c 66 6f 72 6d 61 74 73 2d 6f 66 66 69 63 65 64 6f 63 75 6d 65 6e 74 2e 77 6f 72 64 70 72 6f 63 65 73 73 69 6e 67 6d 6c 2e 64 6f 63 75 6d 65 6e 74 22 29 2c 74 2e 73 65 74 28 22 64 6f 63 6d 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 76 6e 64 2e 6d 73 2d 77 6f 72 64 2e 64 6f 63 75 6d 65 6e 74 2e 6d 61 63 72 6f 45 6e 61 62 6c 65 64 2e 31 32 22 29 2c 74 2e 73 65 74 28 22 64 6f 74 78 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 76 6e 64 2e 6f 70 65 6e 78 6d 6c 66 6f 72 6d 61 74 73 2d 6f 66 66 69 63 65 64 6f 63 75 6d 65 6e 74 2e 77 6f 72 64 70 72 6f 63 65 73 73 69 6e 67 6d 6c 2e 74 65 6d 70 6c 61 74 65 22 29 2c 74 2e 73 65 74 28 22 64 6f 74 6d 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 76 6e 64 2e 6d 73 2d 77 6f 72 Data Ascii: ion/vnd.openxmlformats-officedocument.wordprocessingml.document"),t.set("docm","application/vnd.ms-word.document.macroEnabled.12"),t.set("dotx","application/vnd.openxmlformats-officedocument.wordprocessingml.template"),t.set("dotm","application/vnd.ms-wor
2024-04-16 15:05:25 UTC	1369	IN	Data Raw: 6e 2f 76 6e 64 2e 6d 73 2d 70 6f 77 65 72 70 6f 69 6e 74 2e 73 6c 69 64 65 2e 6d 61 63 72 6f 45 6e 61 62 6c 65 64 2e 31 32 22 29 2c 74 2e 73 65 74 28 22 6f 6e 65 74 6f 63 7c 6f 6e 65 74 6f 63 32 7c 6f 6e 65 74 6d 70 7c 6f 6e 65 70 6b 67 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 6e 65 6e 6f 74 65 22 29 2c 74 2e 73 65 74 28 22 6f 78 70 73 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 78 70 73 22 29 2c 74 2e 73 65 74 28 22 78 70 73 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 76 6e 64 2e 6d 73 2d 78 70 73 64 6f 63 75 6d 65 6e 74 22 29 2c 74 2e 73 65 74 28 22 6f 64 74 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 76 6e 64 2e 6f 61 73 69 73 2e 6f 70 65 6e 64 6f 63 75 6d 65 6e 74 2e 74 65 78 74 22 29 2c 74 2e 73 65 74 28 22 6f 64 70 22 2c 22 61 70 70 6c Data Ascii: n/vnd.ms-powerpoint.slide.macroEnabled.12"),t.set("onetoc\|onetoc2\|onetmp\|onepkg","application/onenote"),t.set("oxps","application/oxps"),t.set("xps","application/vnd.ms-xpsdocument"),t.set("odt","application/vnd.oasis.opendocument.text"),t.set("odp","appl
2024-04-16 15:05:25 UTC	1369	IN	Data Raw: 70 61 72 73 65 49 6e 74 28 74 68 69 73 2e 74 68 72 65 73 68 6f 6c 64 29 3c 65 2e 6c 65 6e 67 74 68 29 74 68 72 6f 77 20 6e 65 77 20 6f 28 74 68 69 73 29 7d 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 63 6f 6e 73 74 20 65 3d 74 2e 67 65 74 41 6c 6c 28 74 68 69 73 2e 66 69 65 6c 64 29 3b 6c 65 74 20 69 3d 30 3b 69 66 28 65 2e 66 6f 72 45 61 63 68 28 28 74 3d 3e 7b 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 69 2b 3d 74 2e 6c 65 6e 67 74 68 29 7d 29 29 2c 30 21 3d 3d 69 26 26 69 3c 70 61 72 73 65 49 6e 74 28 74 68 69 73 2e 74 68 72 65 73 68 6f 6c 64 29 29 74 68 72 6f 77 20 6e 65 77 20 6f 28 74 68 69 73 29 7d 2c 78 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 63 6f 6e 73 74 20 65 3d 74 2e 67 65 74 41 6c 6c 28 74 68 69 73 2e 66 69 65 6c 64 29 3b Data Ascii: parseInt(this.threshold)<e.length)throw new o(this)},g=function(t){const e=t.getAll(this.field);let i=0;if(e.forEach((t=>{"string"==typeof t&&(i+=t.length)})),0!==i&&i<parseInt(this.threshold))throw new o(this)},x=function(t){const e=t.getAll(this.field);
2024-04-16 15:05:25 UTC	1175	IN	Data Raw: 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 5b 73 5d 2e 6d 61 74 63 68 65 73 7c 7c 65 5b 73 5d 2e 6d 61 74 63 68 65 73 28 6f 2c 69 29 29 7d 2c 4f 3d 28 7b 72 75 6c 65 4f 62 6a 3a 74 2c 66 6f 72 6d 44 61 74 61 54 72 65 65 3a 69 2c 6f 70 74 69 6f 6e 73 3a 73 7d 29 3d 3e 7b 63 6f 6e 73 74 7b 72 75 6c 65 3a 6f 7d 3d 74 3b 65 5b 6f 5d 2e 63 61 6c 6c 28 74 2c 69 2c 73 29 7d 2c 45 3d 5b 5d 2c 6b 3d 74 3d 3e 5b 2e 2e 2e 45 5d 2e 72 65 64 75 63 65 28 28 28 74 2c 65 29 3d 3e 69 3d 3e 65 28 69 2c 74 29 29 2c 74 29 2c 44 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 3d 7b 7d 29 7b 63 6f 6e 73 74 20 69 3d 28 74 68 69 73 2e 72 75 6c 65 73 3f 3f 5b 5d 29 2e 66 69 6c 74 65 72 28 28 74 3d 3e 49 28 7b 72 75 6c 65 4f 62 6a 3a 74 2c 6f 70 74 69 6f 6e 73 3a 65 7d 29 29 29 Data Ascii: unction"!=typeof e[s].matches\|\|e[s].matches(o,i))},O=({ruleObj:t,formDataTree:i,options:s})=>{const{rule:o}=t;e[o].call(t,i,s)},E=[],k=t=>[...E].reduce(((t,e)=>i=>e(i,t)),t),D=function(t,e={}){const i=(this.rules??[]).filter((t=>I({ruleObj:t,options:e})))

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.11	49780	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:24 UTC	587	OUT	GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.9.3 HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:26 UTC	601	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:26 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: public, max-age=604800 expires: Tue, 23 Apr 2024 15:05:26 GMT last-modified: Tue, 16 Apr 2024 08:16:15 GMT etag: W/"32fe-661e33cf-96e32c0bf2d2bfd7;gz" platform: hostinger content-security-policy: upgrade-insecure-requests x-turbo-charged-by: LiteSpeed alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: afcdef648b9705ede72bbc915cc68c23-asc-edge6 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 1.017
2024-04-16 15:05:26 UTC	768	IN	Data Raw: 33 32 66 65 0d 0a 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 65 3d 65 3d 3e 4d 61 74 68 2e 61 62 73 28 70 61 72 73 65 49 6e 74 28 65 2c 31 30 29 29 2c 74 3d 28 65 2c 74 2c 61 29 3d 3e 7b 63 6f 6e 73 74 20 6e 3d 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 60 77 70 63 66 37 24 7b 74 7d 60 2c 7b 62 75 62 62 6c 65 73 3a 21 30 2c 64 65 74 61 69 6c 3a 61 7d 29 3b 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 28 65 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 65 29 29 2c 65 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6e 29 7d 2c 61 3d 28 65 2c 61 29 3d 3e 7b 63 6f 6e 73 74 20 6e 3d 6e 65 77 20 4d 61 70 28 5b 5b 22 69 6e 69 74 22 2c 22 69 6e 69 74 22 5d 2c 5b 22 76 61 6c 69 64 61 74 69 Data Ascii: 32fe(()=>{"use strict";const e=e=>Math.abs(parseInt(e,10)),t=(e,t,a)=>{const n=new CustomEvent(`wpcf7${t}`,{bubbles:!0,detail:a});"string"==typeof e&&(e=document.querySelector(e)),e.dispatchEvent(n)},a=(e,a)=>{const n=new Map([["init","init"],["validati
2024-04-16 15:05:26 UTC	1369	IN	Data Raw: 26 72 21 3d 3d 61 29 7b 65 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 72 29 3b 63 6f 6e 73 74 20 61 3d 7b 63 6f 6e 74 61 63 74 46 6f 72 6d 49 64 3a 65 2e 77 70 63 66 37 2e 69 64 2c 70 6c 75 67 69 6e 56 65 72 73 69 6f 6e 3a 65 2e 77 70 63 66 37 2e 70 6c 75 67 69 6e 56 65 72 73 69 6f 6e 2c 63 6f 6e 74 61 63 74 46 6f 72 6d 4c 6f 63 61 6c 65 3a 65 2e 77 70 63 66 37 2e 6c 6f 63 61 6c 65 2c 75 6e 69 74 54 61 67 3a 65 2e 77 70 63 66 37 2e 75 6e 69 74 54 61 67 2c 63 6f 6e 74 61 69 6e 65 72 50 6f 73 74 49 64 3a 65 2e 77 70 63 66 37 2e 63 6f 6e 74 61 69 6e 65 72 50 6f 73 74 2c 73 74 61 74 75 73 3a 65 2e 77 70 63 66 37 2e 73 74 61 74 75 73 2c 70 72 65 76 53 74 61 74 75 73 3a 72 7d 3b 74 28 65 2c 22 73 74 61 74 75 73 63 68 61 6e 67 65 64 22 2c 61 29 7d 72 Data Ascii: &r!==a){e.classList.remove(r);const a={contactFormId:e.wpcf7.id,pluginVersion:e.wpcf7.pluginVersion,contactFormLocale:e.wpcf7.locale,unitTag:e.wpcf7.unitTag,containerPostId:e.wpcf7.containerPost,status:e.wpcf7.status,prevStatus:r};t(e,"statuschanged",a)}r
2024-04-16 15:05:26 UTC	1369	IN	Data Raw: 6f 6c 2d 77 72 61 70 5b 64 61 74 61 2d 6e 61 6d 65 5d 22 29 29 72 65 74 75 72 6e 3b 69 66 28 6e 2e 63 6c 6f 73 65 73 74 28 22 2e 6e 6f 76 61 6c 69 64 61 74 65 22 29 29 72 65 74 75 72 6e 7d 63 6f 6e 73 74 20 70 3d 72 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 77 70 63 66 37 2d 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 77 72 61 70 22 29 2c 64 3d 41 72 72 61 79 2e 66 72 6f 6d 28 70 29 2e 72 65 64 75 63 65 28 28 28 65 2c 74 29 3d 3e 28 74 2e 63 6c 6f 73 65 73 74 28 22 2e 6e 6f 76 61 6c 69 64 61 74 65 22 29 7c 7c 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 77 68 65 72 65 28 20 69 6e 70 75 74 2c 20 74 65 78 74 61 72 65 61 2c 20 73 65 6c 65 63 74 20 29 3a 65 6e 61 62 6c 65 64 22 29 2e 66 6f 72 45 61 63 68 28 28 74 3d 3e 7b 69 66 Data Ascii: ol-wrap[data-name]"))return;if(n.closest(".novalidate"))return}const p=r.querySelectorAll(".wpcf7-form-control-wrap"),d=Array.from(p).reduce(((e,t)=>(t.closest(".novalidate")\|\|t.querySelectorAll(":where( input, textarea, select ):enabled").forEach((t=>{if
2024-04-16 15:05:26 UTC	1369	IN	Data Raw: 66 37 2e 70 61 72 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 73 63 72 65 65 6e 2d 72 65 61 64 65 72 2d 72 65 73 70 6f 6e 73 65 20 75 6c 22 29 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 7d 29 28 29 2c 72 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 60 2e 77 70 63 66 37 2d 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 77 72 61 70 5b 64 61 74 61 2d 6e 61 6d 65 3d 22 24 7b 74 7d 22 5d 60 29 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 7b 63 6f 6e 73 74 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 70 61 6e 22 29 3b 74 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 77 70 63 66 37 2d 6e 6f 74 2d 76 61 6c 69 64 2d 74 69 70 22 29 2c 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 68 69 64 64 65 Data Ascii: f7.parent.querySelector(".screen-reader-response ul").appendChild(t)})(),r.querySelectorAll(`.wpcf7-form-control-wrap[data-name="${t}"]`).forEach((e=>{const t=document.createElement("span");t.classList.add("wpcf7-not-valid-tip"),t.setAttribute("aria-hidde
2024-04-16 15:05:26 UTC	1369	IN	Data Raw: 28 22 22 29 7d 29 29 7d 29 29 7d 2c 69 3d 28 65 2c 74 2c 61 29 3d 3e 7b 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 60 5b 64 61 74 61 2d 72 65 66 6c 65 63 74 69 6f 6e 2d 6f 66 3d 22 24 7b 74 7d 22 5d 60 29 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 7b 69 66 28 22 6f 75 74 70 75 74 22 3d 3d 3d 65 2e 74 61 67 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7b 63 6f 6e 73 74 20 74 3d 65 3b 30 3d 3d 3d 61 2e 6c 65 6e 67 74 68 26 26 61 2e 70 75 73 68 28 74 2e 64 61 74 61 73 65 74 2e 64 65 66 61 75 6c 74 29 2c 61 2e 73 6c 69 63 65 28 30 2c 31 29 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 7b 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 46 69 6c 65 26 26 28 65 3d 65 2e 6e 61 6d 65 29 2c 74 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 65 7d 29 29 7d 65 6c 73 65 Data Ascii: ("")}))}))},i=(e,t,a)=>{e.querySelectorAll(`[data-reflection-of="${t}"]`).forEach((e=>{if("output"===e.tagName.toLowerCase()){const t=e;0===a.length&&a.push(t.dataset.default),a.slice(0,1).forEach((e=>{e instanceof File&&(e=e.name),t.textContent=e}))}else
2024-04-16 15:05:26 UTC	1369	IN	Data Raw: 2e 74 68 65 6e 28 28 74 3d 3e 7b 74 2e 70 6f 73 74 65 64 5f 64 61 74 61 5f 68 61 73 68 26 26 28 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 69 6e 70 75 74 5b 6e 61 6d 65 3d 22 5f 77 70 63 66 37 5f 70 6f 73 74 65 64 5f 64 61 74 61 5f 68 61 73 68 22 5d 27 29 2e 76 61 6c 75 65 3d 74 2e 70 6f 73 74 65 64 5f 64 61 74 61 5f 68 61 73 68 29 2c 22 6d 61 69 6c 5f 73 65 6e 74 22 3d 3d 3d 74 2e 73 74 61 74 75 73 26 26 28 65 2e 72 65 73 65 74 28 29 2c 65 2e 77 70 63 66 37 2e 72 65 73 65 74 4f 6e 4d 61 69 6c 53 65 6e 74 3d 21 30 29 2c 74 2e 69 6e 76 61 6c 69 64 5f 66 69 65 6c 64 73 26 26 74 2e 69 6e 76 61 6c 69 64 5f 66 69 65 6c 64 73 2e 66 6f 72 45 61 63 68 28 28 74 3d 3e 7b 63 28 65 2c 74 2e 66 69 65 6c 64 2c 74 2e 6d 65 73 73 61 67 65 29 7d 29 29 2c 65 2e 77 Data Ascii: .then((t=>{t.posted_data_hash&&(e.querySelector('input[name="_wpcf7_posted_data_hash"]').value=t.posted_data_hash),"mail_sent"===t.status&&(e.reset(),e.wpcf7.resetOnMailSent=!0),t.invalid_fields&&t.invalid_fields.forEach((t=>{c(e,t.field,t.message)})),e.w
2024-04-16 15:05:26 UTC	1369	IN	Data Raw: 74 4f 6e 4d 61 69 6c 53 65 6e 74 3f 28 64 65 6c 65 74 65 20 65 2e 77 70 63 66 37 2e 72 65 73 65 74 4f 6e 4d 61 69 6c 53 65 6e 74 2c 61 28 65 2c 22 6d 61 69 6c 5f 73 65 6e 74 22 29 29 3a 61 28 65 2c 22 69 6e 69 74 22 29 2c 6f 2e 61 70 69 52 65 73 70 6f 6e 73 65 3d 6e 2c 74 28 65 2c 22 72 65 73 65 74 22 2c 6f 29 7d 29 29 2e 63 61 74 63 68 28 28 65 3d 3e 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 65 29 29 29 7d 6e 2e 75 73 65 28 28 28 65 2c 74 29 3d 3e 7b 69 66 28 65 2e 77 70 63 66 37 26 26 22 72 65 66 69 6c 6c 22 3d 3d 3d 65 2e 77 70 63 66 37 2e 65 6e 64 70 6f 69 6e 74 29 7b 63 6f 6e 73 74 7b 66 6f 72 6d 3a 74 2c 64 65 74 61 69 6c 3a 6e 7d 3d 65 2e 77 70 63 66 37 3b 70 28 74 29 2c 61 28 74 2c 22 72 65 73 65 74 74 69 6e 67 22 29 7d 72 65 74 75 72 6e 20 74 28 Data Ascii: tOnMailSent?(delete e.wpcf7.resetOnMailSent,a(e,"mail_sent")):a(e,"init"),o.apiResponse=n,t(e,"reset",o)})).catch((e=>console.error(e)))}n.use(((e,t)=>{if(e.wpcf7&&"refill"===e.wpcf7.endpoint){const{form:t,detail:n}=e.wpcf7;p(t),a(t,"resetting")}return t(
2024-04-16 15:05:26 UTC	1369	IN	Data Raw: 64 22 2c 27 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 77 70 63 66 37 2d 73 70 69 6e 6e 65 72 22 3e 3c 2f 73 70 61 6e 3e 27 29 7d 29 29 2c 28 65 3d 3e 7b 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 77 70 63 66 37 2d 65 78 63 6c 75 73 69 76 65 2d 63 68 65 63 6b 62 6f 78 22 29 2e 66 6f 72 45 61 63 68 28 28 74 3d 3e 7b 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 68 61 6e 67 65 22 2c 28 74 3d 3e 7b 63 6f 6e 73 74 20 61 3d 74 2e 74 61 72 67 65 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 29 3b 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 60 69 6e 70 75 74 5b 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 5d 5b 6e 61 6d 65 3d 22 24 7b 61 7d 22 5d 60 29 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 7b 65 21 Data Ascii: d",'<span class="wpcf7-spinner"></span>')})),(e=>{e.querySelectorAll(".wpcf7-exclusive-checkbox").forEach((t=>{t.addEventListener("change",(t=>{const a=t.target.getAttribute("name");e.querySelectorAll(`input[type="checkbox"][name="${a}"]`).forEach((e=>{e!
2024-04-16 15:05:26 UTC	1369	IN	Data Raw: 7b 63 6f 6e 73 74 20 61 3d 28 74 2c 61 29 3d 3e 7b 63 6f 6e 73 74 20 6e 3d 65 28 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 73 74 61 72 74 69 6e 67 2d 76 61 6c 75 65 22 29 29 2c 72 3d 65 28 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 6d 61 78 69 6d 75 6d 2d 76 61 6c 75 65 22 29 29 2c 6f 3d 65 28 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 6d 69 6e 69 6d 75 6d 2d 76 61 6c 75 65 22 29 29 2c 63 3d 74 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 6f 77 6e 22 29 3f 6e 2d 61 2e 76 61 6c 75 65 2e 6c 65 6e 67 74 68 3a 61 2e 76 61 6c 75 65 2e 6c 65 6e 67 74 68 3b 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 63 75 72 72 65 6e 74 2d 76 61 6c 75 65 22 2c 63 29 2c 74 2e 69 Data Ascii: {const a=(t,a)=>{const n=e(t.getAttribute("data-starting-value")),r=e(t.getAttribute("data-maximum-value")),o=e(t.getAttribute("data-minimum-value")),c=t.classList.contains("down")?n-a.value.length:a.value.length;t.setAttribute("data-current-value",c),t.i
2024-04-16 15:05:26 UTC	1347	IN	Data Raw: 65 2e 74 61 72 67 65 74 7d 29 7d 29 29 2c 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 77 70 63 66 37 73 74 61 74 75 73 63 68 61 6e 67 65 64 22 2c 28 65 3d 3e 7b 63 6f 6e 73 74 20 61 3d 65 2e 64 65 74 61 69 6c 2e 73 74 61 74 75 73 3b 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 61 63 74 69 76 65 2d 6f 6e 2d 61 6e 79 22 29 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 7b 65 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 69 6e 65 72 74 22 29 2c 65 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 61 63 74 69 76 65 2d 6f 6e 2d 61 6e 79 22 29 7d 29 29 2c 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 60 2e 69 6e 65 72 74 2d 6f 6e 2d 24 7b 61 7d 60 29 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 7b 65 2e 73 65 74 41 Data Ascii: e.target})})),t.addEventListener("wpcf7statuschanged",(e=>{const a=e.detail.status;t.querySelectorAll(".active-on-any").forEach((e=>{e.removeAttribute("inert"),e.classList.remove("active-on-any")})),t.querySelectorAll(`.inert-on-${a}`).forEach((e=>{e.setA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.11	49781	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:25 UTC	598	OUT	GET /wp-content/themes/salient/js/build/third-party/jquery.easing.min.js?ver=1.3 HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:26 UTC	599	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:26 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: public, max-age=604800 expires: Tue, 23 Apr 2024 15:05:26 GMT last-modified: Tue, 11 Jan 2022 15:21:50 GMT etag: W/"958-61dda08e-258795043a7b34f;gz" platform: hostinger content-security-policy: upgrade-insecure-requests x-turbo-charged-by: LiteSpeed alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: a7a3af5e94a338e89bd0707d0888bed9-asc-edge3 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 1.061
2024-04-16 15:05:26 UTC	770	IN	Data Raw: 39 35 38 0d 0a 2f 2a 0a 2a 20 6a 51 75 65 72 79 20 45 61 73 69 6e 67 20 76 31 2e 34 2e 31 20 2d 20 68 74 74 70 3a 2f 2f 67 73 67 64 2e 63 6f 2e 75 6b 2f 73 61 6e 64 62 6f 78 2f 6a 71 75 65 72 79 2f 65 61 73 69 6e 67 2f 0a 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 28 65 29 7d 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 6e 28 72 65 71 75 69 72 65 28 22 Data Ascii: 958/** jQuery Easing v1.4.1 - http://gsgd.co.uk/sandbox/jquery/easing/*/!function(n){"function"==typeof define&&define.amd?define(["jquery"],function(e){return n(e)}):"object"==typeof module&&"object"==typeof module.exports?module.exports=n(require("
2024-04-16 15:05:26 UTC	1369	IN	Data Raw: 6e 29 7b 72 65 74 75 72 6e 20 6e 3c 2e 35 3f 32 2a 6e 2a 6e 3a 31 2d 74 28 2d 32 2a 6e 2b 32 2c 32 29 2f 32 7d 2c 65 61 73 65 49 6e 43 75 62 69 63 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 2a 6e 2a 6e 7d 2c 65 61 73 65 4f 75 74 43 75 62 69 63 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 31 2d 74 28 31 2d 6e 2c 33 29 7d 2c 65 61 73 65 49 6e 4f 75 74 43 75 62 69 63 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 3c 2e 35 3f 34 2a 6e 2a 6e 2a 6e 3a 31 2d 74 28 2d 32 2a 6e 2b 32 2c 33 29 2f 32 7d 2c 65 61 73 65 49 6e 51 75 61 72 74 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 2a 6e 2a 6e 2a 6e 7d 2c 65 61 73 65 4f 75 74 51 75 61 72 74 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e Data Ascii: n){return n<.5?2nn:1-t(-2n+2,2)/2},easeInCubic:function(n){return nnn},easeOutCubic:function(n){return 1-t(1-n,3)},easeInOutCubic:function(n){return n<.5?4nnn:1-t(-2n+2,3)/2},easeInQuart:function(n){return nnnn},easeOutQuart:function(n){return
2024-04-16 15:05:26 UTC	265	IN	Data Raw: 38 2a 74 28 6e 2d 31 2c 33 29 2b 6f 2a 74 28 6e 2d 31 2c 32 29 7d 2c 65 61 73 65 49 6e 4f 75 74 42 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 3c 2e 35 3f 74 28 32 2a 6e 2c 32 29 2a 28 37 2e 31 38 39 38 31 39 2a 6e 2d 63 29 2f 32 3a 28 74 28 32 2a 6e 2d 32 2c 32 29 2a 28 28 63 2b 31 29 2a 28 32 2a 6e 2d 32 29 2b 63 29 2b 32 29 2f 32 7d 2c 65 61 73 65 49 6e 42 6f 75 6e 63 65 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 31 2d 65 28 31 2d 6e 29 7d 2c 65 61 73 65 4f 75 74 42 6f 75 6e 63 65 3a 65 2c 65 61 73 65 49 6e 4f 75 74 42 6f 75 6e 63 65 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 3c 2e 35 3f 28 31 2d 65 28 31 2d 32 2a 6e 29 29 2f 32 3a 28 31 2b 65 28 32 2a 6e 2d 31 29 29 2f 32 7d 7d 29 2c 6e Data Ascii: 8t(n-1,3)+ot(n-1,2)},easeInOutBack:function(n){return n<.5?t(2n,2)(7.189819n-c)/2:(t(2n-2,2)((c+1)(2n-2)+c)+2)/2},easeInBounce:function(n){return 1-e(1-n)},easeOutBounce:e,easeInOutBounce:function(n){return n<.5?(1-e(1-2n))/2:(1+e(2*n-1))/2}}),n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.11	49782	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:25 UTC	605	OUT	GET /wp-content/themes/salient/js/build/third-party/jquery.mousewheel.min.js?ver=3.1.13 HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:26 UTC	600	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:26 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: public, max-age=604800 expires: Tue, 23 Apr 2024 15:05:26 GMT last-modified: Tue, 11 Jan 2022 15:21:50 GMT etag: W/"a97-61dda08e-e3b9c3c7bde7ba66;gz" platform: hostinger content-security-policy: upgrade-insecure-requests x-turbo-charged-by: LiteSpeed alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: d55cb7b5cb5bae7471887e6a766ec53c-asc-edge5 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 1.064
2024-04-16 15:05:26 UTC	769	IN	Data Raw: 61 39 37 0d 0a 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4d 6f 75 73 65 77 68 65 65 6c 20 33 2e 31 2e 31 33 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 65 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 3a 65 28 6a 51 75 65 72 79 29 7d 28 66 75 6e 63 74 69 6f 6e 28 75 29 7b 76 61 72 20 66 2c 64 2c 65 3d 5b 22 77 68 65 65 6c 22 2c 22 6d 6f 75 Data Ascii: a97/! jQuery Mousewheel 3.1.13 * Copyright OpenJS Foundation and other contributors */!function(e){"function"==typeof define&&define.amd?define(["jquery"],e):"object"==typeof exports?module.exports=e:e(jQuery)}(function(u){var f,d,e=["wheel","mou
2024-04-16 15:05:26 UTC	1369	IN	Data Raw: 65 74 4c 69 6e 65 48 65 69 67 68 74 28 74 68 69 73 29 29 2c 75 2e 64 61 74 61 28 74 68 69 73 2c 22 6d 6f 75 73 65 77 68 65 65 6c 2d 70 61 67 65 2d 68 65 69 67 68 74 22 2c 63 2e 67 65 74 50 61 67 65 48 65 69 67 68 74 28 74 68 69 73 29 29 7d 2c 74 65 61 72 64 6f 77 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 66 6f 72 28 76 61 72 20 65 3d 74 2e 6c 65 6e 67 74 68 3b 65 3b 29 74 68 69 73 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 5b 2d 2d 65 5d 2c 6e 2c 21 31 29 3b 65 6c 73 65 20 74 68 69 73 2e 6f 6e 6d 6f 75 73 65 77 68 65 65 6c 3d 6e 75 6c 6c 3b 75 2e 72 65 6d 6f 76 65 44 61 74 61 28 74 68 69 73 2c 22 6d 6f 75 73 65 77 68 65 65 6c 2d 6c 69 6e 65 2d 68 65 69 Data Ascii: etLineHeight(this)),u.data(this,"mousewheel-page-height",c.getPageHeight(this))},teardown:function(){if(this.removeEventListener)for(var e=t.length;e;)this.removeEventListener(t[--e],n,!1);else this.onmousewheel=null;u.removeData(this,"mousewheel-line-hei
2024-04-16 15:05:26 UTC	585	IN	Data Raw: 2e 6e 6f 72 6d 61 6c 69 7a 65 4f 66 66 73 65 74 26 26 74 68 69 73 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 29 7b 76 61 72 20 72 3d 74 68 69 73 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 3b 65 2e 6f 66 66 73 65 74 58 3d 65 2e 63 6c 69 65 6e 74 58 2d 72 2e 6c 65 66 74 2c 65 2e 6f 66 66 73 65 74 59 3d 65 2e 63 6c 69 65 6e 74 59 2d 72 2e 74 6f 70 7d 72 65 74 75 72 6e 20 65 2e 64 65 6c 74 61 58 3d 6c 2c 65 2e 64 65 6c 74 61 59 3d 73 2c 65 2e 64 65 6c 74 61 46 61 63 74 6f 72 3d 64 2c 65 2e 64 65 6c 74 61 4d 6f 64 65 3d 30 2c 6e 2e 75 6e 73 68 69 66 74 28 65 2c 6f 2c 6c 2c 73 29 2c 66 26 26 77 69 6e 64 6f 77 2e 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 66 29 2c 66 3d 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f Data Ascii: .normalizeOffset&&this.getBoundingClientRect){var r=this.getBoundingClientRect();e.offsetX=e.clientX-r.left,e.offsetY=e.clientY-r.top}return e.deltaX=l,e.deltaY=s,e.deltaFactor=d,e.deltaMode=0,n.unshift(e,o,l,s),f&&window.clearTimeout(f),f=window.setTimeo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.11	49783	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:26 UTC	580	OUT	GET /wp-content/themes/salient/js/build/priority.js?ver=16.1.3 HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:28 UTC	600	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:28 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: public, max-age=604800 expires: Tue, 23 Apr 2024 15:05:28 GMT last-modified: Wed, 03 Jan 2024 11:40:52 GMT etag: W/"782-659547c4-e1fbd5b976d407bb;gz" platform: hostinger content-security-policy: upgrade-insecure-requests x-turbo-charged-by: LiteSpeed alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: d5e9484b83997c4014707bd02d065b84-asc-edge6 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 1.065
2024-04-16 15:05:28 UTC	769	IN	Data Raw: 37 38 32 0d 0a 76 61 72 20 68 65 61 64 65 72 45 6c 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 68 65 61 64 65 72 2d 6f 75 74 65 72 22 29 2c 68 65 61 64 65 72 53 70 61 63 65 45 6c 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 68 65 61 64 65 72 2d 73 70 61 63 65 22 29 3b 76 6f 69 64 20 30 21 3d 3d 68 65 61 64 65 72 45 6c 26 26 6e 75 6c 6c 21 3d 68 65 61 64 65 72 45 6c 26 26 76 6f 69 64 20 30 21 3d 3d 68 65 61 64 65 72 53 70 61 63 65 45 6c 26 26 6e 75 6c 6c 21 3d 68 65 61 64 65 72 53 70 61 63 65 45 6c 26 26 68 65 61 64 65 72 53 70 61 63 65 45 6c 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 73 65 63 6f 6e 64 61 72 79 2d 68 65 61 64 65 72 2d 64 69 73 70 6c 61 79 22 29 26 26 28 68 Data Ascii: 782var headerEl=document.getElementById("header-outer"),headerSpaceEl=document.getElementById("header-space");void 0!==headerEl&&null!=headerEl&&void 0!==headerSpaceEl&&null!=headerSpaceEl&&headerSpaceEl.hasAttribute("data-secondary-header-display")&&(h
2024-04-16 15:05:28 UTC	1165	IN	Data Raw: 7b 65 28 77 69 6e 64 6f 77 29 2e 77 69 64 74 68 28 29 21 3d 6c 26 26 65 28 77 69 6e 64 6f 77 29 2e 68 65 69 67 68 74 21 3d 73 26 26 28 68 28 29 2c 6c 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 2c 73 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 69 67 68 74 29 7d 29 7d 69 26 26 65 28 22 2e 6e 65 63 74 61 72 5f 66 75 6c 6c 73 63 72 65 65 6e 5f 7a 6f 6f 6d 5f 72 65 63 65 6e 74 5f 70 72 6f 6a 65 63 74 73 22 29 2e 6c 65 6e 67 74 68 3e 30 26 26 28 61 3d 65 28 22 2e 62 6f 64 79 2d 62 6f 72 64 65 72 2d 74 6f 70 22 29 2e 6c 65 6e 67 74 68 3e 30 26 26 65 28 77 69 6e 64 6f 77 29 2e 77 69 64 74 68 28 29 3e 31 65 33 3f 65 28 22 2e 62 6f 64 79 2d 62 6f 72 64 65 72 2d 74 6f 70 22 29 2e 68 65 69 67 68 74 28 29 3a 30 2c 65 28 22 2e 6e 65 63 74 61 72 5f 66 75 6c Data Ascii: {e(window).width()!=l&&e(window).height!=s&&(h(),l=window.innerWidth,s=window.innerHeight)})}i&&e(".nectar_fullscreen_zoom_recent_projects").length>0&&(a=e(".body-border-top").length>0&&e(window).width()>1e3?e(".body-border-top").height():0,e(".nectar_ful

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.11	49784	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:26 UTC	594	OUT	GET /wp-content/themes/salient/js/build/third-party/transit.min.js?ver=0.9.9 HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:28 UTC	601	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:28 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: public, max-age=604800 expires: Tue, 23 Apr 2024 15:05:28 GMT last-modified: Tue, 11 Jan 2022 15:21:50 GMT etag: W/"1cf8-61dda08e-e85c900b6eb92f20;gz" platform: hostinger content-security-policy: upgrade-insecure-requests x-turbo-charged-by: LiteSpeed alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 4afe027dc2466fe68ac05b166b2cd790-asc-edge4 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 1.070
2024-04-16 15:05:28 UTC	768	IN	Data Raw: 31 63 66 38 0d 0a 2f 2a 21 0a 2a 20 6a 51 75 65 72 79 20 54 72 61 6e 73 69 74 20 2d 20 43 53 53 33 20 74 72 61 6e 73 69 74 69 6f 6e 73 20 61 6e 64 20 74 72 61 6e 73 66 6f 72 6d 61 74 69 6f 6e 73 0a 2a 20 28 63 29 20 32 30 31 31 2d 32 30 31 32 20 52 69 63 6f 20 53 74 61 2e 20 43 72 75 7a 20 3c 72 69 63 6f 40 72 69 63 6f 73 74 61 63 72 75 7a 2e 63 6f 6d 3e 0a 2a 20 4d 49 54 20 4c 69 63 65 6e 73 65 64 2e 0a 2a 2f 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 6b 2e 74 72 61 6e 73 69 74 3d 7b 76 65 72 73 69 6f 6e 3a 22 30 2e 39 2e 39 22 2c 70 72 6f 70 65 72 74 79 4d 61 70 3a 7b 6d 61 72 67 69 6e 4c 65 66 74 3a 22 6d 61 72 67 69 6e 22 2c 6d 61 72 67 69 6e 52 69 67 68 74 3a 22 6d 61 72 67 69 6e 22 2c 6d 61 72 67 69 6e 42 6f 74 74 6f 6d 3a 22 6d 61 72 67 69 6e 22 Data Ascii: 1cf8/! jQuery Transit - CSS3 transitions and transformations* (c) 2011-2012 Rico Sta. Cruz <rico@ricostacruz.com>* MIT Licensed.*/(function(k){k.transit={version:"0.9.9",propertyMap:{marginLeft:"margin",marginRight:"margin",marginBottom:"margin"
2024-04-16 15:05:28 UTC	1369	IN	Data Raw: 61 72 20 61 3d 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 63 68 72 6f 6d 65 22 29 3e 2d 31 3b 71 2e 74 72 61 6e 73 69 74 69 6f 6e 3d 62 28 22 74 72 61 6e 73 69 74 69 6f 6e 22 29 3b 71 2e 74 72 61 6e 73 69 74 69 6f 6e 44 65 6c 61 79 3d 62 28 22 74 72 61 6e 73 69 74 69 6f 6e 44 65 6c 61 79 22 29 3b 71 2e 74 72 61 6e 73 66 6f 72 6d 3d 62 28 22 74 72 61 6e 73 66 6f 72 6d 22 29 3b 71 2e 74 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 3d 62 28 22 74 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 22 29 3b 71 2e 74 72 61 6e 73 66 6f 72 6d 33 64 3d 65 28 29 3b 76 61 72 20 69 3d 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 22 74 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 4d 6f 7a 54 72 61 6e 73 69 Data Ascii: ar a=navigator.userAgent.toLowerCase().indexOf("chrome")>-1;q.transition=b("transition");q.transitionDelay=b("transitionDelay");q.transform=b("transform");q.transformOrigin=b("transformOrigin");q.transform3d=e();var i={transition:"transitionEnd",MozTransi
2024-04-16 15:05:28 UTC	1369	IN	Data Raw: 2e 38 36 2c 30 2c 2e 30 37 2c 31 29 22 2c 65 61 73 65 49 6e 53 69 6e 65 3a 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 34 37 2c 30 2c 2e 37 34 35 2c 2e 37 31 35 29 22 2c 65 61 73 65 4f 75 74 53 69 6e 65 3a 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 33 39 2c 2e 35 37 35 2c 2e 35 36 35 2c 31 29 22 2c 65 61 73 65 49 6e 4f 75 74 53 69 6e 65 3a 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 34 34 35 2c 2e 30 35 2c 2e 35 35 2c 2e 39 35 29 22 2c 65 61 73 65 49 6e 42 61 63 6b 3a 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 2c 2d 2e 32 38 2c 2e 37 33 35 2c 2e 30 34 35 29 22 2c 65 61 73 65 4f 75 74 42 61 63 6b 3a 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 31 37 35 2c 20 2e 38 38 35 2c 2e 33 32 2c 31 2e 32 37 35 29 22 2c 65 61 73 65 49 6e 4f 75 74 42 61 63 6b Data Ascii: .86,0,.07,1)",easeInSine:"cubic-bezier(.47,0,.745,.715)",easeOutSine:"cubic-bezier(.39,.575,.565,1)",easeInOutSine:"cubic-bezier(.445,.05,.55,.95)",easeInBack:"cubic-bezier(.6,-.28,.735,.045)",easeOutBack:"cubic-bezier(.175, .885,.32,1.275)",easeInOutBack
2024-04-16 15:05:28 UTC	1369	IN	Data Raw: 2e 61 70 70 6c 79 28 74 68 69 73 2c 72 29 7d 65 6c 73 65 7b 74 68 69 73 5b 73 5d 3d 72 2e 6a 6f 69 6e 28 22 2c 22 29 7d 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 72 29 7b 69 66 28 74 68 69 73 2e 67 65 74 74 65 72 5b 72 5d 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 74 74 65 72 5b 72 5d 2e 61 70 70 6c 79 28 74 68 69 73 29 7d 65 6c 73 65 7b 72 65 74 75 72 6e 20 74 68 69 73 5b 72 5d 7c 7c 30 7d 7d 2c 73 65 74 74 65 72 3a 7b 72 6f 74 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 72 29 7b 74 68 69 73 2e 72 6f 74 61 74 65 3d 6f 28 72 2c 22 64 65 67 22 29 7d 2c 72 6f 74 61 74 65 58 3a 66 75 6e 63 74 69 6f 6e 28 72 29 7b 74 68 69 73 2e 72 6f 74 61 74 65 58 3d 6f 28 72 2c 22 64 65 67 22 29 7d 2c 72 6f 74 61 74 65 59 3a 66 75 6e 63 74 69 6f 6e 28 72 29 7b 74 68 69 Data Ascii: .apply(this,r)}else{this[s]=r.join(",")}},get:function(r){if(this.getter[r]){return this.getter[r].apply(this)}else{return this[r]\|\|0}},setter:{rotate:function(r){this.rotate=o(r,"deg")},rotateX:function(r){this.rotateX=o(r,"deg")},rotateY:function(r){thi
2024-04-16 15:05:28 UTC	1369	IN	Data Raw: 6f 6e 28 74 29 7b 76 61 72 20 73 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 68 69 73 29 7b 69 66 28 74 68 69 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 72 29 29 7b 69 66 28 28 21 71 2e 74 72 61 6e 73 66 6f 72 6d 33 64 29 26 26 28 28 72 3d 3d 3d 22 72 6f 74 61 74 65 58 22 29 7c 7c 28 72 3d 3d 3d 22 72 6f 74 61 74 65 59 22 29 7c 7c 28 72 3d 3d 3d 22 70 65 72 73 70 65 63 74 69 76 65 22 29 7c 7c 28 72 3d 3d 3d 22 74 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 22 29 29 29 7b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 72 5b 30 5d 21 3d 3d 22 5f 22 29 7b 69 66 28 74 26 26 28 72 3d 3d 3d 22 73 63 61 6c 65 22 29 29 7b 73 2e 70 75 73 68 28 72 2b 22 33 64 28 22 2b 74 68 69 73 5b 72 5d 2b 22 2c 31 29 22 29 7d 65 6c 73 65 7b 69 66 28 74 26 26 28 72 3d 3d 3d Data Ascii: on(t){var s=[];for(var r in this){if(this.hasOwnProperty(r)){if((!q.transform3d)&&((r==="rotateX")\|\|(r==="rotateY")\|\|(r==="perspective")\|\|(r==="transformOrigin"))){continue}if(r[0]!=="_"){if(t&&(r==="scale")){s.push(r+"3d("+this[r]+",1)")}else{if(t&&(r===
2024-04-16 15:05:28 UTC	1185	IN	Data Raw: 29 3b 76 61 72 20 42 3d 6b 2e 74 72 61 6e 73 69 74 2e 65 6e 61 62 6c 65 64 26 26 71 2e 74 72 61 6e 73 69 74 69 6f 6e 3b 76 61 72 20 74 3d 42 3f 28 70 61 72 73 65 49 6e 74 28 73 2c 31 30 29 2b 70 61 72 73 65 49 6e 74 28 75 2c 31 30 29 29 3a 30 3b 69 66 28 74 3d 3d 3d 30 29 7b 76 61 72 20 41 3d 66 75 6e 63 74 69 6f 6e 28 46 29 7b 44 2e 63 73 73 28 7a 29 3b 69 66 28 43 29 7b 43 2e 61 70 70 6c 79 28 44 29 7d 69 66 28 46 29 7b 46 28 29 7d 7d 3b 6d 28 44 2c 77 2c 41 29 3b 72 65 74 75 72 6e 20 44 7d 76 61 72 20 78 3d 7b 7d 3b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 48 29 7b 76 61 72 20 47 3d 66 61 6c 73 65 3b 76 61 72 20 46 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 47 29 7b 44 2e 75 6e 62 69 6e 64 28 66 2c 46 29 7d 69 66 28 74 3e 30 29 7b 44 2e 65 61 63 Data Ascii: );var B=k.transit.enabled&&q.transition;var t=B?(parseInt(s,10)+parseInt(u,10)):0;if(t===0){var A=function(F){D.css(z);if(C){C.apply(D)}if(F){F()}};m(D,w,A);return D}var x={};var r=function(H){var G=false;var F=function(){if(G){D.unbind(f,F)}if(t>0){D.eac

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.11	49785	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:27 UTC	592	OUT	GET /wp-content/themes/salient/js/build/third-party/waypoints.js?ver=4.0.2 HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:28 UTC	601	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:28 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: public, max-age=604800 expires: Tue, 23 Apr 2024 15:05:28 GMT last-modified: Wed, 03 Jan 2024 11:40:52 GMT etag: W/"2327-659547c4-2bb2b0a9eb27a4ad;gz" platform: hostinger content-security-policy: upgrade-insecure-requests x-turbo-charged-by: LiteSpeed alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 73bfd1b92ccf2ca0519bcd739438ddbc-asc-edge5 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 1.062
2024-04-16 15:05:28 UTC	768	IN	Data Raw: 32 33 32 37 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 30 2c 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 28 6f 29 7b 69 66 28 21 6f 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 4e 6f 20 6f 70 74 69 6f 6e 73 20 70 61 73 73 65 64 20 74 6f 20 57 61 79 70 6f 69 6e 74 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 3b 69 66 28 21 6f 2e 65 6c 65 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 4e 6f 20 65 6c 65 6d 65 6e 74 20 6f 70 74 69 6f 6e 20 70 61 73 73 65 64 20 74 6f 20 57 61 79 70 6f 69 6e 74 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 3b 69 66 28 21 6f 2e 68 61 6e 64 6c 65 72 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 4e 6f 20 68 61 6e 64 6c 65 72 20 6f 70 74 69 6f 6e Data Ascii: 2327!function(){"use strict";var t=0,e={};function i(o){if(!o)throw new Error("No options passed to Waypoint constructor");if(!o.element)throw new Error("No element option passed to Waypoint constructor");if(!o.handler)throw new Error("No handler option
2024-04-16 15:05:28 UTC	1369	IN	Data Raw: 66 73 65 74 3d 69 2e 6f 66 66 73 65 74 41 6c 69 61 73 65 73 5b 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6f 66 66 73 65 74 5d 29 2c 74 68 69 73 2e 67 72 6f 75 70 2e 61 64 64 28 74 68 69 73 29 2c 74 68 69 73 2e 63 6f 6e 74 65 78 74 2e 61 64 64 28 74 68 69 73 29 2c 65 5b 74 68 69 73 2e 6b 65 79 5d 3d 74 68 69 73 2c 74 2b 3d 31 7d 69 2e 70 72 6f 74 6f 74 79 70 65 2e 71 75 65 75 65 54 72 69 67 67 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 67 72 6f 75 70 2e 71 75 65 75 65 54 72 69 67 67 65 72 28 74 68 69 73 2c 74 29 7d 2c 69 2e 70 72 6f 74 6f 74 79 70 65 2e 74 72 69 67 67 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 65 6e 61 62 6c 65 64 26 26 74 68 69 73 2e 63 61 6c 6c 62 61 63 6b 26 26 74 68 69 73 2e 63 61 6c 6c 62 61 63 6b 2e 61 Data Ascii: fset=i.offsetAliases[this.options.offset]),this.group.add(this),this.context.add(this),e[this.key]=this,t+=1}i.prototype.queueTrigger=function(t){this.group.queueTrigger(this,t)},i.prototype.trigger=function(t){this.enabled&&this.callback&&this.callback.a
2024-04-16 15:05:28 UTC	1369	IN	Data Raw: 68 6f 72 69 7a 6f 6e 74 61 6c 3a 21 31 2c 6f 66 66 73 65 74 3a 30 7d 2c 69 2e 6f 66 66 73 65 74 41 6c 69 61 73 65 73 3d 7b 22 62 6f 74 74 6f 6d 2d 69 6e 2d 76 69 65 77 22 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6f 6e 74 65 78 74 2e 69 6e 6e 65 72 48 65 69 67 68 74 28 29 2d 74 68 69 73 2e 61 64 61 70 74 65 72 2e 6f 75 74 65 72 48 65 69 67 68 74 28 29 7d 2c 22 72 69 67 68 74 2d 69 6e 2d 76 69 65 77 22 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6f 6e 74 65 78 74 2e 69 6e 6e 65 72 57 69 64 74 68 28 29 2d 74 68 69 73 2e 61 64 61 70 74 65 72 2e 6f 75 74 65 72 57 69 64 74 68 28 29 7d 7d 2c 77 69 6e 64 6f 77 2e 57 61 79 70 6f 69 6e 74 3d 69 7d 28 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 Data Ascii: horizontal:!1,offset:0},i.offsetAliases={"bottom-in-view":function(){return this.context.innerHeight()-this.adapter.outerHeight()},"right-in-view":function(){return this.context.innerWidth()-this.adapter.outerWidth()}},window.Waypoint=i}(),function(){"use
2024-04-16 15:05:28 UTC	1369	IN	Data Raw: 69 7a 65 3d 21 30 2c 6f 2e 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 28 65 29 29 7d 29 7d 2c 72 2e 70 72 6f 74 6f 74 79 70 65 2e 63 72 65 61 74 65 54 68 72 6f 74 74 6c 65 64 53 63 72 6f 6c 6c 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 74 2e 68 61 6e 64 6c 65 53 63 72 6f 6c 6c 28 29 2c 74 2e 64 69 64 53 63 72 6f 6c 6c 3d 21 31 7d 74 68 69 73 2e 61 64 61 70 74 65 72 2e 6f 6e 28 22 73 63 72 6f 6c 6c 2e 77 61 79 70 6f 69 6e 74 73 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 64 69 64 53 63 72 6f 6c 6c 26 26 21 6f 2e 69 73 54 6f 75 63 68 7c 7c 28 74 2e 64 69 64 53 63 72 6f 6c 6c 3d 21 30 2c 6f 2e 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d Data Ascii: ize=!0,o.requestAnimationFrame(e))})},r.prototype.createThrottledScrollHandler=function(){var t=this;function e(){t.handleScroll(),t.didScroll=!1}this.adapter.on("scroll.waypoints",function(){t.didScroll&&!o.isTouch\|\|(t.didScroll=!0,o.requestAnimationFram
2024-04-16 15:05:28 UTC	1369	IN	Data Raw: 68 69 73 2e 77 61 79 70 6f 69 6e 74 73 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 68 69 73 2e 77 61 79 70 6f 69 6e 74 73 5b 65 5d 29 74 2e 70 75 73 68 28 74 68 69 73 2e 77 61 79 70 6f 69 6e 74 73 5b 65 5d 5b 69 5d 29 3b 66 6f 72 28 76 61 72 20 6f 3d 30 2c 6e 3d 74 2e 6c 65 6e 67 74 68 3b 6f 3c 6e 3b 6f 2b 2b 29 74 5b 6f 5d 2e 64 65 73 74 72 6f 79 28 29 7d 2c 72 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 66 72 65 73 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 65 3d 74 68 69 73 2e 65 6c 65 6d 65 6e 74 3d 3d 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 77 69 6e 64 6f 77 2c 69 3d 65 3f 76 6f 69 64 20 30 3a 74 68 69 73 2e 61 64 61 70 74 65 72 2e 6f 66 66 73 65 74 28 29 2c 6e 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 68 69 73 2e 68 61 6e 64 6c Data Ascii: his.waypoints)for(var i in this.waypoints[e])t.push(this.waypoints[e][i]);for(var o=0,n=t.length;o<n;o++)t[o].destroy()},r.prototype.refresh=function(){var t,e=this.element==this.element.window,i=e?void 0:this.adapter.offset(),n={};for(var r in this.handl
2024-04-16 15:05:28 UTC	1369	IN	Data Raw: 67 65 72 73 28 29 7d 29 2c 74 68 69 73 7d 2c 72 2e 66 69 6e 64 4f 72 43 72 65 61 74 65 42 79 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 72 2e 66 69 6e 64 42 79 45 6c 65 6d 65 6e 74 28 74 29 7c 7c 6e 65 77 20 72 28 74 29 7d 2c 72 2e 72 65 66 72 65 73 68 41 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 20 69 6e 20 69 29 69 5b 74 5d 2e 72 65 66 72 65 73 68 28 29 7d 2c 72 2e 66 69 6e 64 42 79 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 69 5b 74 2e 77 61 79 70 6f 69 6e 74 43 6f 6e 74 65 78 74 4b 65 79 5d 7d 2c 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 26 26 6e 28 29 2c 72 2e 72 65 66 72 65 73 68 41 6c 6c 28 29 7d 2c 6f 2e 72 65 Data Ascii: gers()}),this},r.findOrCreateByElement=function(t){return r.findByElement(t)\|\|new r(t)},r.refreshAll=function(){for(var t in i)i[t].refresh()},r.findByElement=function(t){return i[t.waypointContextKey]},window.onload=function(){n&&n(),r.refreshAll()},o.re
2024-04-16 15:05:28 UTC	1369	IN	Data Raw: 6f 72 74 28 74 29 3b 76 61 72 20 69 3d 6f 2e 41 64 61 70 74 65 72 2e 69 6e 41 72 72 61 79 28 65 2c 74 68 69 73 2e 77 61 79 70 6f 69 6e 74 73 29 3b 72 65 74 75 72 6e 20 69 3f 74 68 69 73 2e 77 61 79 70 6f 69 6e 74 73 5b 69 2d 31 5d 3a 6e 75 6c 6c 7d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 71 75 65 75 65 54 72 69 67 67 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 68 69 73 2e 74 72 69 67 67 65 72 51 75 65 75 65 73 5b 65 5d 2e 70 75 73 68 28 74 29 7d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6d 6f 76 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6f 2e 41 64 61 70 74 65 72 2e 69 6e 41 72 72 61 79 28 74 2c 74 68 69 73 2e 77 61 79 70 6f 69 6e 74 73 29 3b 65 3e 2d 31 26 26 74 68 69 73 2e 77 61 79 70 6f 69 6e 74 73 2e 73 70 6c 69 63 65 28 Data Ascii: ort(t);var i=o.Adapter.inArray(e,this.waypoints);return i?this.waypoints[i-1]:null},n.prototype.queueTrigger=function(t,e){this.triggerQueues[e].push(t)},n.prototype.remove=function(t){var e=o.Adapter.inArray(t,this.waypoints);e>-1&&this.waypoints.splice(
2024-04-16 15:05:28 UTC	30	IN	Data Raw: 6e 74 3d 65 28 77 69 6e 64 6f 77 2e 5a 65 70 74 6f 29 29 7d 28 29 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: nt=e(window.Zepto))}();0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.11	49786	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:27 UTC	599	OUT	GET /wp-content/themes/salient/js/build/third-party/imagesLoaded.min.js?ver=4.1.4 HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:29 UTC	601	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:29 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: public, max-age=604800 expires: Tue, 23 Apr 2024 15:05:29 GMT last-modified: Tue, 11 Jan 2022 15:21:50 GMT etag: W/"15da-61dda08e-5dc5b2d42c57efca;gz" platform: hostinger content-security-policy: upgrade-insecure-requests x-turbo-charged-by: LiteSpeed alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: d2e692f7b952e930df607a2382849e5f-asc-edge4 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 2.259
2024-04-16 15:05:29 UTC	768	IN	Data Raw: 31 35 64 61 0d 0a 2f 2a 21 0a 20 2a 20 69 6d 61 67 65 73 4c 6f 61 64 65 64 20 50 41 43 4b 41 47 45 44 20 76 34 2e 31 2e 34 0a 20 2a 20 4a 61 76 61 53 63 72 69 70 74 20 69 73 20 61 6c 6c 20 6c 69 6b 65 20 22 59 6f 75 20 69 6d 61 67 65 73 20 61 72 65 20 64 6f 6e 65 20 79 65 74 20 6f 72 20 77 68 61 74 3f 22 0a 20 2a 20 4d 49 54 20 4c 69 63 65 6e 73 65 0a 20 2a 2f 0a 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 65 76 2d 65 6d 69 74 74 65 72 2f 65 76 2d 65 6d 69 74 74 65 72 22 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c Data Ascii: 15da/! imagesLoaded PACKAGED v4.1.4 * JavaScript is all like "You images are done yet or what?" * MIT License */!function(e,t){"function"==typeof define&&define.amd?define("ev-emitter/ev-emitter",t):"object"==typeof module&&module.exports?modul
2024-04-16 15:05:29 UTC	1369	IN	Data Raw: 28 65 2c 74 29 7b 76 61 72 20 69 3d 74 68 69 73 2e 5f 65 76 65 6e 74 73 26 26 74 68 69 73 2e 5f 65 76 65 6e 74 73 5b 65 5d 3b 69 66 28 69 26 26 69 2e 6c 65 6e 67 74 68 29 7b 69 3d 69 2e 73 6c 69 63 65 28 30 29 2c 74 3d 74 7c 7c 5b 5d 3b 66 6f 72 28 76 61 72 20 6e 3d 74 68 69 73 2e 5f 6f 6e 63 65 45 76 65 6e 74 73 26 26 74 68 69 73 2e 5f 6f 6e 63 65 45 76 65 6e 74 73 5b 65 5d 2c 6f 3d 30 3b 6f 3c 69 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 7b 76 61 72 20 72 3d 69 5b 6f 5d 2c 73 3d 6e 26 26 6e 5b 72 5d 3b 73 26 26 28 74 68 69 73 2e 6f 66 66 28 65 2c 72 29 2c 64 65 6c 65 74 65 20 6e 5b 72 5d 29 2c 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 74 29 7d 72 65 74 75 72 6e 20 74 68 69 73 7d 7d 2c 74 2e 61 6c 6c 4f 66 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 65 6c 65 74 65 Data Ascii: (e,t){var i=this._events&&this._events[e];if(i&&i.length){i=i.slice(0),t=t\|\|[];for(var n=this._onceEvents&&this._onceEvents[e],o=0;o<i.length;o++){var r=i[o],s=n&&n[r];s&&(this.off(e,r),delete n[r]),r.apply(this,t)}return this}},t.allOff=function(){delete
2024-04-16 15:05:29 UTC	1369	IN	Data Raw: 49 6d 61 67 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 69 6d 61 67 65 73 3d 5b 5d 2c 74 68 69 73 2e 65 6c 65 6d 65 6e 74 73 2e 66 6f 72 45 61 63 68 28 74 68 69 73 2e 61 64 64 45 6c 65 6d 65 6e 74 49 6d 61 67 65 73 2c 74 68 69 73 29 7d 2c 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 45 6c 65 6d 65 6e 74 49 6d 61 67 65 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 49 4d 47 22 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 26 26 74 68 69 73 2e 61 64 64 49 6d 61 67 65 28 65 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 3d 3d 21 30 26 26 74 68 69 73 2e 61 64 64 45 6c 65 6d 65 6e 74 42 61 63 6b 67 72 6f 75 6e 64 49 6d 61 67 65 73 28 65 29 3b 76 61 72 20 74 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 74 26 26 75 5b 74 5d 29 7b Data Ascii: Images=function(){this.images=[],this.elements.forEach(this.addElementImages,this)},o.prototype.addElementImages=function(e){"IMG"==e.nodeName&&this.addImage(e),this.options.background===!0&&this.addElementBackgroundImages(e);var t=e.nodeType;if(t&&u[t]){
2024-04-16 15:05:29 UTC	1369	IN	Data Raw: 6a 71 44 65 66 65 72 72 65 64 2e 6e 6f 74 69 66 79 28 74 68 69 73 2c 65 29 2c 74 68 69 73 2e 70 72 6f 67 72 65 73 73 65 64 43 6f 75 6e 74 3d 3d 74 68 69 73 2e 69 6d 61 67 65 73 2e 6c 65 6e 67 74 68 26 26 74 68 69 73 2e 63 6f 6d 70 6c 65 74 65 28 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 64 65 62 75 67 26 26 61 26 26 61 2e 6c 6f 67 28 22 70 72 6f 67 72 65 73 73 3a 20 22 2b 69 2c 65 2c 74 29 7d 2c 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6d 70 6c 65 74 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 68 61 73 41 6e 79 42 72 6f 6b 65 6e 3f 22 66 61 69 6c 22 3a 22 64 6f 6e 65 22 3b 69 66 28 74 68 69 73 2e 69 73 43 6f 6d 70 6c 65 74 65 3d 21 30 2c 74 68 69 73 2e 65 6d 69 74 45 76 65 6e 74 28 65 2c 5b 74 68 69 73 5d 29 2c 74 68 69 73 Data Ascii: jqDeferred.notify(this,e),this.progressedCount==this.images.length&&this.complete(),this.options.debug&&a&&a.log("progress: "+i,e,t)},o.prototype.complete=function(){var e=this.hasAnyBroken?"fail":"done";if(this.isComplete=!0,this.emitEvent(e,[this]),this
2024-04-16 15:05:29 UTC	732	IN	Data Raw: 68 69 73 29 2c 74 68 69 73 2e 69 6d 67 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 65 72 72 6f 72 22 2c 74 68 69 73 29 7d 2c 73 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 72 2e 70 72 6f 74 6f 74 79 70 65 29 2c 73 2e 70 72 6f 74 6f 74 79 70 65 2e 63 68 65 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 69 6d 67 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 74 68 69 73 29 2c 74 68 69 73 2e 69 6d 67 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 65 72 72 6f 72 22 2c 74 68 69 73 29 2c 74 68 69 73 2e 69 6d 67 2e 73 72 63 3d 74 68 69 73 2e 75 72 6c 3b 76 61 72 20 65 3d 74 68 69 73 2e 67 65 74 49 73 49 6d 61 67 65 43 6f 6d 70 6c 65 74 65 28 29 3b 65 26 26 28 74 Data Ascii: his),this.img.removeEventListener("error",this)},s.prototype=Object.create(r.prototype),s.prototype.check=function(){this.img.addEventListener("load",this),this.img.addEventListener("error",this),this.img.src=this.url;var e=this.getIsImageComplete();e&&(t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.11	49787	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:27 UTC	596	OUT	GET /wp-content/themes/salient/js/build/third-party/hoverintent.min.js?ver=1.9 HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:28 UTC	600	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:28 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: public, max-age=604800 expires: Tue, 23 Apr 2024 15:05:28 GMT last-modified: Tue, 11 Jan 2022 15:21:50 GMT etag: W/"8c5-61dda08e-858699d4452702d8;gz" platform: hostinger content-security-policy: upgrade-insecure-requests x-turbo-charged-by: LiteSpeed alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 2a15199a1c78d6d39e3cb9c8b4328d13-asc-edge5 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 1.065
2024-04-16 15:05:28 UTC	769	IN	Data Raw: 38 63 35 0d 0a 2f 2a 21 0a 20 2a 20 68 6f 76 65 72 49 6e 74 65 6e 74 20 76 31 2e 39 2e 30 20 2f 2f 20 32 30 31 37 2e 30 39 2e 30 31 20 2f 2f 20 6a 51 75 65 72 79 20 76 31 2e 37 2e 30 2b 0a 20 2a 20 68 74 74 70 3a 2f 2f 62 72 69 61 6e 63 68 65 72 6e 65 2e 67 69 74 68 75 62 2e 69 6f 2f 6a 71 75 65 72 79 2d 68 6f 76 65 72 49 6e 74 65 6e 74 2f 0a 20 2a 0a 20 2a 20 59 6f 75 20 6d 61 79 20 75 73 65 20 68 6f 76 65 72 49 6e 74 65 6e 74 20 75 6e 64 65 72 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 20 42 61 73 69 63 61 6c 6c 79 20 74 68 61 74 0a 20 2a 20 6d 65 61 6e 73 20 79 6f 75 20 61 72 65 20 66 72 65 65 20 74 6f 20 75 73 65 20 68 6f 76 65 72 49 6e 74 65 6e 74 20 61 73 20 6c 6f 6e 67 20 61 73 20 74 68 69 73 20 68 65 Data Ascii: 8c5/! hoverIntent v1.9.0 // 2017.09.01 // jQuery v1.7.0+ * http://briancherne.github.io/jquery-hoverIntent/ * * You may use hoverIntent under the terms of the MIT license. Basically that * means you are free to use hoverIntent as long as this he
2024-04-16 15:05:28 UTC	1369	IN	Data Raw: 70 61 67 65 58 3d 63 58 2c 65 76 2e 70 61 67 65 59 3d 63 59 2c 64 65 6c 65 74 65 20 73 2e 70 58 2c 64 65 6c 65 74 65 20 73 2e 70 59 2c 63 66 67 2e 6f 76 65 72 2e 61 70 70 6c 79 28 24 65 6c 5b 30 5d 2c 5b 65 76 5d 29 3b 73 2e 70 58 3d 63 58 2c 73 2e 70 59 3d 63 59 2c 73 2e 74 69 6d 65 6f 75 74 49 64 3d 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6d 70 61 72 65 28 65 76 2c 24 65 6c 2c 73 2c 63 66 67 29 7d 2c 63 66 67 2e 69 6e 74 65 72 76 61 6c 29 7d 2c 64 65 6c 61 79 3d 66 75 6e 63 74 69 6f 6e 28 65 76 2c 24 65 6c 2c 73 2c 6f 75 74 29 7b 72 65 74 75 72 6e 20 64 65 6c 65 74 65 20 24 65 6c 2e 64 61 74 61 28 22 68 6f 76 65 72 49 6e 74 65 6e 74 22 29 5b 73 2e 69 64 5d 2c 6f 75 74 2e 61 70 70 6c 79 28 24 65 6c 5b 30 5d 2c 5b 65 76 5d Data Ascii: pageX=cX,ev.pageY=cY,delete s.pX,delete s.pY,cfg.over.apply($el[0],[ev]);s.pX=cX,s.pY=cY,s.timeoutId=setTimeout(function(){compare(ev,$el,s,cfg)},cfg.interval)},delay=function(ev,$el,s,out){return delete $el.data("hoverIntent")[s.id],out.apply($el[0],[ev]
2024-04-16 15:05:28 UTC	119	IN	Data Raw: 7d 7d 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 6e 28 7b 22 6d 6f 75 73 65 65 6e 74 65 72 2e 68 6f 76 65 72 49 6e 74 65 6e 74 22 3a 68 61 6e 64 6c 65 48 6f 76 65 72 2c 22 6d 6f 75 73 65 6c 65 61 76 65 2e 68 6f 76 65 72 49 6e 74 65 6e 74 22 3a 68 61 6e 64 6c 65 48 6f 76 65 72 7d 2c 63 66 67 2e 73 65 6c 65 63 74 6f 72 29 7d 7d 29 3b 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: }};return this.on({"mouseenter.hoverIntent":handleHover,"mouseleave.hoverIntent":handleHover},cfg.selector)}});0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.11	49788	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:28 UTC	591	OUT	GET /wp-content/themes/salient/js/build/third-party/magnific.js?ver=7.0.1 HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:30 UTC	601	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:30 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: public, max-age=604800 expires: Tue, 23 Apr 2024 15:05:30 GMT last-modified: Wed, 03 Jan 2024 11:40:52 GMT etag: W/"52d5-659547c4-f0dd89b3483c20cb;gz" platform: hostinger content-security-policy: upgrade-insecure-requests x-turbo-charged-by: LiteSpeed alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 3a1860e87605b9f7b78cfb6f36b40fef-asc-edge3 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 2.108
2024-04-16 15:05:30 UTC	768	IN	Data Raw: 35 32 64 35 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 65 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 28 72 65 71 75 69 72 65 28 22 6a 71 75 65 72 79 22 29 29 3a 65 28 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 7c 7c 77 69 6e 64 6f 77 2e 5a 65 70 74 6f 29 7d 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 2c 69 2c 6f 2c 61 2c 72 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 6c 3d 21 21 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 2c 63 3d 65 28 77 69 6e 64 6f 77 29 2c 70 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 74 2e 65 76 2e 6f 6e 28 22 6d Data Ascii: 52d5!function(e){"function"==typeof define&&define.amd?define(["jquery"],e):"object"==typeof exports?e(require("jquery")):e(window.jQuery\|\|window.Zepto)}(function(e){var t,n,i,o,a,r,s=function(){},l=!!window.jQuery,c=e(window),p=function(e,n){t.ev.on("m
2024-04-16 15:05:30 UTC	1369	IN	Data Raw: 65 2e 6d 61 67 6e 69 66 69 63 50 6f 70 75 70 2e 69 6e 73 74 61 6e 63 65 7c 7c 28 28 74 3d 6e 65 77 20 73 29 2e 69 6e 69 74 28 29 2c 65 2e 6d 61 67 6e 69 66 69 63 50 6f 70 75 70 2e 69 6e 73 74 61 6e 63 65 3d 74 29 7d 3b 73 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 73 2c 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 6e 61 76 69 67 61 74 6f 72 2e 61 70 70 56 65 72 73 69 6f 6e 3b 74 2e 69 73 49 45 37 3d 2d 31 21 3d 3d 6e 2e 69 6e 64 65 78 4f 66 28 22 4d 53 49 45 20 37 2e 22 29 2c 74 2e 69 73 49 45 38 3d 2d 31 21 3d 3d 6e 2e 69 6e 64 65 78 4f 66 28 22 4d 53 49 45 20 38 2e 22 29 2c 74 2e 69 73 4c 6f 77 49 45 3d 74 2e 69 73 49 45 37 7c 7c 74 2e 69 73 49 45 38 2c 74 2e 69 73 41 6e 64 72 6f 69 64 3d 2f 61 6e 64 72 Data Ascii: e.magnificPopup.instance\|\|((t=new s).init(),e.magnificPopup.instance=t)};s.prototype={constructor:s,init:function(){var n=navigator.appVersion;t.isIE7=-1!==n.indexOf("MSIE 7."),t.isIE8=-1!==n.indexOf("MSIE 8."),t.isLowIE=t.isIE7\|\|t.isIE8,t.isAndroid=/andr
2024-04-16 15:05:30 UTC	1369	IN	Data Raw: 76 65 72 6c 61 79 7c 7c 28 74 2e 62 67 4f 76 65 72 6c 61 79 3d 64 28 22 62 67 22 29 2e 6f 6e 28 22 63 6c 69 63 6b 2e 6d 66 70 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 63 6c 6f 73 65 28 29 7d 29 2c 74 2e 77 72 61 70 3d 64 28 22 77 72 61 70 22 29 2e 61 74 74 72 28 22 74 61 62 69 6e 64 65 78 22 2c 2d 31 29 2e 6f 6e 28 22 63 6c 69 63 6b 2e 6d 66 70 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 2e 5f 63 68 65 63 6b 49 66 43 6c 6f 73 65 28 65 2e 74 61 72 67 65 74 29 26 26 74 2e 63 6c 6f 73 65 28 29 7d 29 2c 74 2e 63 6f 6e 74 61 69 6e 65 72 3d 64 28 22 63 6f 6e 74 61 69 6e 65 72 22 2c 74 2e 77 72 61 70 29 29 2c 74 2e 63 6f 6e 74 65 6e 74 43 6f 6e 74 61 69 6e 65 72 3d 64 28 22 63 6f 6e 74 65 6e 74 22 29 2c 74 2e 73 74 2e 70 72 65 6c 6f 61 64 65 72 26 26 28 74 Data Ascii: verlay\|\|(t.bgOverlay=d("bg").on("click.mfp",function(){t.close()}),t.wrap=d("wrap").attr("tabindex",-1).on("click.mfp",function(e){t._checkIfClose(e.target)&&t.close()}),t.container=d("container",t.wrap)),t.contentContainer=d("content"),t.st.preloader&&(t
2024-04-16 15:05:30 UTC	1369	IN	Data Raw: 6d 61 69 6e 43 6c 61 73 73 3b 72 65 74 75 72 6e 20 74 2e 69 73 49 45 37 26 26 28 43 2b 3d 22 20 6d 66 70 2d 69 65 37 22 29 2c 43 26 26 74 2e 5f 61 64 64 43 6c 61 73 73 54 6f 4d 46 50 28 43 29 2c 74 2e 75 70 64 61 74 65 49 74 65 6d 48 54 4d 4c 28 29 2c 75 28 22 42 75 69 6c 64 43 6f 6e 74 72 6f 6c 73 22 29 2c 65 28 22 68 74 6d 6c 22 29 2e 63 73 73 28 68 29 2c 74 2e 62 67 4f 76 65 72 6c 61 79 2e 61 64 64 28 74 2e 77 72 61 70 29 2e 70 72 65 70 65 6e 64 54 6f 28 74 2e 73 74 2e 70 72 65 70 65 6e 64 54 6f 7c 7c 65 28 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 29 2c 74 2e 5f 6c 61 73 74 46 6f 63 75 73 65 64 45 6c 3d 64 6f 63 75 6d 65 6e 74 2e 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 63 6f 6e Data Ascii: mainClass;return t.isIE7&&(C+=" mfp-ie7"),C&&t._addClassToMFP(C),t.updateItemHTML(),u("BuildControls"),e("html").css(h),t.bgOverlay.add(t.wrap).prependTo(t.st.prependTo\|\|e(document.body)),t._lastFocusedEl=document.activeElement,setTimeout(function(){t.con
2024-04-16 15:05:30 UTC	1369	IN	Data Raw: 65 53 69 7a 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 74 2e 69 73 49 4f 53 29 7b 76 61 72 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 57 69 64 74 68 2f 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 2c 69 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 69 67 68 74 2a 6e 3b 74 2e 77 72 61 70 2e 63 73 73 28 22 68 65 69 67 68 74 22 2c 69 29 2c 74 2e 77 48 3d 69 7d 65 6c 73 65 20 74 2e 77 48 3d 65 7c 7c 63 2e 68 65 69 67 68 74 28 29 3b 74 2e 66 69 78 65 64 43 6f 6e 74 65 6e 74 50 6f 73 7c 7c 74 2e 77 72 61 70 2e 63 73 73 28 22 68 65 69 67 68 74 22 2c 74 2e 77 48 29 2c 75 28 22 52 65 73 69 7a 65 22 29 7d 2c 75 70 64 61 74 65 49 74 65 6d 48 54 4d 4c 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 Data Ascii: eSize:function(e){if(t.isIOS){var n=document.documentElement.clientWidth/window.innerWidth,i=window.innerHeight*n;t.wrap.css("height",i),t.wH=i}else t.wH=e\|\|c.height();t.fixedContentPos\|\|t.wrap.css("height",t.wH),u("Resize")},updateItemHTML:function(){var
2024-04-16 15:05:30 UTC	1369	IN	Data Raw: 2c 6f 2e 69 6e 64 65 78 3d 6e 2c 6f 2e 70 61 72 73 65 64 3d 21 30 2c 74 2e 69 74 65 6d 73 5b 6e 5d 3d 6f 2c 75 28 22 45 6c 65 6d 65 6e 74 50 61 72 73 65 22 2c 6f 29 2c 74 2e 69 74 65 6d 73 5b 6e 5d 7d 2c 61 64 64 47 72 6f 75 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 69 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 69 2e 6d 66 70 45 6c 3d 74 68 69 73 2c 74 2e 5f 6f 70 65 6e 43 6c 69 63 6b 28 69 2c 65 2c 6e 29 7d 3b 6e 7c 7c 28 6e 3d 7b 7d 29 3b 76 61 72 20 6f 3d 22 63 6c 69 63 6b 2e 6d 61 67 6e 69 66 69 63 50 6f 70 75 70 22 3b 6e 2e 6d 61 69 6e 45 6c 3d 65 2c 6e 2e 69 74 65 6d 73 3f 28 6e 2e 69 73 4f 62 6a 3d 21 30 2c 65 2e 6f 66 66 28 6f 29 2e 6f 6e 28 6f 2c 69 29 29 3a 28 6e 2e 69 73 4f 62 6a 3d 21 31 2c 6e 2e 64 65 6c 65 67 61 74 65 3f 65 2e Data Ascii: ,o.index=n,o.parsed=!0,t.items[n]=o,u("ElementParse",o),t.items[n]},addGroup:function(e,n){var i=function(i){i.mfpEl=this,t._openClick(i,e,n)};n\|\|(n={});var o="click.magnificPopup";n.mainEl=e,n.items?(n.isObj=!0,e.off(o).on(o,i)):(n.isObj=!1,n.delegate?e.
2024-04-16 15:05:30 UTC	1369	IN	Data Raw: 74 61 69 6e 73 28 64 6f 63 75 6d 65 6e 74 2c 6e 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 7d 2c 5f 61 64 64 43 6c 61 73 73 54 6f 4d 46 50 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 2e 62 67 4f 76 65 72 6c 61 79 2e 61 64 64 43 6c 61 73 73 28 65 29 2c 74 2e 77 72 61 70 2e 61 64 64 43 6c 61 73 73 28 65 29 7d 2c 5f 72 65 6d 6f 76 65 43 6c 61 73 73 46 72 6f 6d 4d 46 50 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 62 67 4f 76 65 72 6c 61 79 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 65 29 2c 74 2e 77 72 61 70 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 65 29 7d 2c 5f 68 61 73 53 63 72 6f 6c 6c 42 61 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 28 74 2e 69 73 49 45 37 3f 69 2e 68 65 69 67 68 74 28 29 3a 64 6f 63 75 6d 65 6e 74 2e Data Ascii: tains(document,n))return!0;return!1}},_addClassToMFP:function(e){t.bgOverlay.addClass(e),t.wrap.addClass(e)},_removeClassFromMFP:function(e){this.bgOverlay.removeClass(e),t.wrap.removeClass(e)},_hasScrollBar:function(e){return(t.isIE7?i.height():document.
2024-04-16 15:05:30 UTC	1369	IN	Data Raw: 2e 69 6e 73 74 61 6e 63 65 2e 6f 70 65 6e 28 74 29 7d 2c 63 6c 6f 73 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 6d 61 67 6e 69 66 69 63 50 6f 70 75 70 2e 69 6e 73 74 61 6e 63 65 26 26 65 2e 6d 61 67 6e 69 66 69 63 50 6f 70 75 70 2e 69 6e 73 74 61 6e 63 65 2e 63 6c 6f 73 65 28 29 7d 2c 72 65 67 69 73 74 65 72 4d 6f 64 75 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 6e 2e 6f 70 74 69 6f 6e 73 26 26 28 65 2e 6d 61 67 6e 69 66 69 63 50 6f 70 75 70 2e 64 65 66 61 75 6c 74 73 5b 74 5d 3d 6e 2e 6f 70 74 69 6f 6e 73 29 2c 65 2e 65 78 74 65 6e 64 28 74 68 69 73 2e 70 72 6f 74 6f 2c 6e 2e 70 72 6f 74 6f 29 2c 74 68 69 73 2e 6d 6f 64 75 6c 65 73 2e 70 75 73 68 28 74 29 7d 2c 64 65 66 61 75 6c 74 73 3a 7b 64 69 73 61 62 6c 65 4f 6e 3a 30 Data Ascii: .instance.open(t)},close:function(){return e.magnificPopup.instance&&e.magnificPopup.instance.close()},registerModule:function(t,n){n.options&&(e.magnificPopup.defaults[t]=n.options),e.extend(this.proto,n.proto),this.modules.push(t)},defaults:{disableOn:0
2024-04-16 15:05:30 UTC	1369	IN	Data Raw: 66 28 43 28 29 2c 6e 2e 73 72 63 29 7b 76 61 72 20 6f 3d 74 2e 73 74 2e 69 6e 6c 69 6e 65 2c 61 3d 65 28 6e 2e 73 72 63 29 3b 69 66 28 61 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 72 3d 61 5b 30 5d 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 26 26 72 2e 74 61 67 4e 61 6d 65 26 26 28 68 7c 7c 28 67 3d 6f 2e 68 69 64 64 65 6e 43 6c 61 73 73 2c 68 3d 64 28 67 29 2c 67 3d 22 6d 66 70 2d 22 2b 67 29 2c 76 3d 61 2e 61 66 74 65 72 28 68 29 2e 64 65 74 61 63 68 28 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 67 29 29 2c 74 2e 75 70 64 61 74 65 53 74 61 74 75 73 28 22 72 65 61 64 79 22 29 7d 65 6c 73 65 20 74 2e 75 70 64 61 74 65 53 74 61 74 75 73 28 22 65 72 72 6f 72 22 2c 6f 2e 74 4e 6f 74 46 6f 75 6e 64 29 2c 61 3d 65 28 22 3c 64 69 76 3e 22 29 3b 72 65 74 75 72 6e 20 6e Data Ascii: f(C(),n.src){var o=t.st.inline,a=e(n.src);if(a.length){var r=a[0].parentNode;r&&r.tagName&&(h\|\|(g=o.hiddenClass,h=d(g),g="mfp-"+g),v=a.after(h).detach().removeClass(g)),t.updateStatus("ready")}else t.updateStatus("error",o.tNotFound),a=e("<div>");return n
2024-04-16 15:05:30 UTC	1369	IN	Data Raw: 65 2e 6d 61 67 6e 69 66 69 63 50 6f 70 75 70 2e 72 65 67 69 73 74 65 72 4d 6f 64 75 6c 65 28 22 69 6d 61 67 65 22 2c 7b 6f 70 74 69 6f 6e 73 3a 7b 6d 61 72 6b 75 70 3a 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 66 70 2d 66 69 67 75 72 65 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 66 70 2d 63 6c 6f 73 65 22 3e 3c 2f 64 69 76 3e 3c 66 69 67 75 72 65 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 66 70 2d 69 6d 67 22 3e 3c 2f 64 69 76 3e 3c 66 69 67 63 61 70 74 69 6f 6e 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 66 70 2d 62 6f 74 74 6f 6d 2d 62 61 72 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 66 70 2d 74 69 74 6c 65 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 66 70 2d 63 6f 75 6e 74 65 72 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 66 69 Data Ascii: e.magnificPopup.registerModule("image",{options:{markup:'<div class="mfp-figure"><div class="mfp-close"></div><figure><div class="mfp-img"></div><figcaption><div class="mfp-bottom-bar"><div class="mfp-title"></div><div class="mfp-counter"></div></div></fi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.11	49789	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:28 UTC	595	OUT	GET /wp-content/plugins/salient-core/js/third-party/touchswipe.min.js?ver=1.0 HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:31 UTC	601	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:31 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: public, max-age=604800 expires: Tue, 23 Apr 2024 15:05:31 GMT last-modified: Thu, 15 Feb 2024 10:36:09 GMT etag: W/"249f-65cde919-784f2c8d1d331b8d;gz" platform: hostinger content-security-policy: upgrade-insecure-requests x-turbo-charged-by: LiteSpeed alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: e02e4d1e6cdb1820235e2f698d325736-asc-edge5 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 2.130
2024-04-16 15:05:31 UTC	768	IN	Data Raw: 32 34 39 66 0d 0a 2f 2a 20 54 6f 75 63 68 20 73 77 69 70 65 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 64 29 7b 76 61 72 20 6d 3d 22 6c 65 66 74 22 2c 6c 3d 22 72 69 67 68 74 22 2c 63 3d 22 75 70 22 2c 73 3d 22 64 6f 77 6e 22 2c 62 3d 22 69 6e 22 2c 74 3d 22 6f 75 74 22 2c 6a 3d 22 6e 6f 6e 65 22 2c 6f 3d 22 61 75 74 6f 22 2c 69 3d 22 73 77 69 70 65 22 2c 70 3d 22 70 69 6e 63 68 22 2c 75 3d 22 74 61 70 22 2c 78 3d 22 68 6f 72 69 7a 6f 6e 74 61 6c 22 2c 71 3d 22 76 65 72 74 69 63 61 6c 22 2c 67 3d 22 61 6c 6c 22 2c 65 3d 22 73 74 61 72 74 22 2c 68 3d 22 6d 6f 76 65 22 2c 66 3d 22 65 6e 64 22 2c 6e 3d 22 63 61 6e 63 65 6c 22 2c 61 3d 22 6f 6e 74 6f 75 63 68 73 74 61 72 74 22 20 69 6e 20 77 69 6e 64 6f 77 2c 76 3d 22 54 6f 75 63 68 53 77 69 70 65 22 3b 76 61 Data Ascii: 249f/* Touch swipe */(function(d){var m="left",l="right",c="up",s="down",b="in",t="out",j="none",o="auto",i="swipe",p="pinch",u="tap",x="horizontal",q="vertical",g="all",e="start",h="move",f="end",n="cancel",a="ontouchstart" in window,v="TouchSwipe";va
2024-04-16 15:05:31 UTC	1369	IN	Data Raw: 7b 72 65 74 75 72 6e 20 79 5b 41 5d 2e 61 70 70 6c 79 28 74 68 69 73 2c 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 29 7d 65 6c 73 65 7b 64 2e 65 72 72 6f 72 28 22 4d 65 74 68 6f 64 20 22 2b 41 2b 22 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 20 6f 6e 20 6a 51 75 65 72 79 2e 73 77 69 70 65 22 29 7d 7d 65 6c 73 65 7b 69 66 28 21 79 26 26 28 74 79 70 65 6f 66 20 41 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 21 41 29 29 7b 72 65 74 75 72 6e 20 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 72 65 74 75 72 6e 20 7a 7d 3b 64 2e 66 6e 2e 73 77 69 70 65 2e 64 65 66 61 75 6c 74 73 3d 6b 3b 64 2e 66 6e 2e 73 77 69 70 65 2e 70 68 61 73 65 73 3d 7b 50 48 41 53 45 5f 53 Data Ascii: {return y[A].apply(this,Array.prototype.slice.call(arguments,1))}else{d.error("Method "+A+" does not exist on jQuery.swipe")}}else{if(!y&&(typeof A==="object"\|\|!A)){return r.apply(this,arguments)}}return z};d.fn.swipe.defaults=k;d.fn.swipe.phases={PHASE_S
2024-04-16 15:05:31 UTC	1369	IN	Data Raw: 6f 6e 28 61 52 2c 61 51 29 7b 69 66 28 61 67 5b 61 52 5d 21 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 69 66 28 61 51 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 72 65 74 75 72 6e 20 61 67 5b 61 52 5d 7d 65 6c 73 65 7b 61 67 5b 61 52 5d 3d 61 51 7d 7d 65 6c 73 65 7b 64 2e 65 72 72 6f 72 28 22 4f 70 74 69 6f 6e 20 22 2b 61 52 2b 22 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 20 6f 6e 20 6a 51 75 65 72 79 2e 73 77 69 70 65 2e 6f 70 74 69 6f 6e 73 22 29 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 61 74 28 61 53 29 7b 69 66 28 58 28 29 29 7b 72 65 74 75 72 6e 7d 69 66 28 64 28 61 53 2e 74 61 72 67 65 74 29 2e 63 6c 6f 73 65 73 74 28 61 67 2e 65 78 63 6c 75 64 65 64 45 6c 65 6d 65 6e 74 73 2c 48 29 2e 6c 65 6e 67 74 68 3e 30 29 7b 72 65 74 75 72 6e 7d 76 61 72 20 61 54 3d Data Ascii: on(aR,aQ){if(ag[aR]!==undefined){if(aQ===undefined){return ag[aR]}else{ag[aR]=aQ}}else{d.error("Option "+aR+" does not exist on jQuery.swipe.options")}};function at(aS){if(X()){return}if(d(aS.target).closest(ag.excludedElements,H).length>0){return}var aT=
2024-04-16 15:05:31 UTC	1369	IN	Data Raw: 6f 75 63 68 4c 65 61 76 65 26 26 21 61 51 29 7b 4f 3d 61 4d 28 66 29 7d 7d 69 66 28 4f 3d 3d 6e 7c 7c 4f 3d 3d 66 29 7b 61 48 28 61 57 2c 4f 29 7d 7d 7d 65 6c 73 65 7b 4f 3d 6e 3b 61 48 28 61 57 2c 4f 29 7d 69 66 28 61 53 3d 3d 3d 66 61 6c 73 65 29 7b 4f 3d 6e 3b 61 48 28 61 57 2c 4f 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 61 62 28 61 53 29 7b 76 61 72 20 61 55 3d 61 53 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 3b 69 66 28 61 29 7b 69 66 28 61 55 2e 74 6f 75 63 68 65 73 2e 6c 65 6e 67 74 68 3e 30 29 7b 61 77 28 29 3b 72 65 74 75 72 6e 20 74 72 75 65 7d 7d 69 66 28 61 66 28 29 29 7b 61 49 3d 61 50 7d 61 53 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 59 3d 42 28 29 3b 69 66 28 61 67 2e 74 72 69 67 67 65 72 4f 6e 54 6f 75 63 68 45 6e 64 7c 7c 28 61 67 Data Ascii: ouchLeave&&!aQ){O=aM(f)}}if(O==n\|\|O==f){aH(aW,O)}}}else{O=n;aH(aW,O)}if(aS===false){O=n;aH(aW,O)}}function ab(aS){var aU=aS.originalEvent;if(a){if(aU.touches.length>0){aw();return true}}if(af()){aI=aP}aS.preventDefault();Y=B();if(ag.triggerOnTouchEnd\|\|(ag
2024-04-16 15:05:31 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 66 61 6c 73 65 7d 7d 69 66 28 61 51 3d 3d 66 26 26 61 42 28 29 29 7b 48 2e 74 72 69 67 67 65 72 28 22 73 77 69 70 65 22 2c 5b 4e 2c 61 64 2c 61 68 2c 61 49 5d 29 3b 69 66 28 61 67 2e 73 77 69 70 65 29 7b 61 52 3d 61 67 2e 73 77 69 70 65 2e 63 61 6c 6c 28 48 2c 61 54 2c 4e 2c 61 64 2c 61 68 2c 61 49 29 3b 69 66 28 61 52 3d 3d 3d 66 61 6c 73 65 29 7b 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 7d 73 77 69 74 63 68 28 4e 29 7b 63 61 73 65 20 6d 3a 48 2e 74 72 69 67 67 65 72 28 22 73 77 69 70 65 4c 65 66 74 22 2c 5b 4e 2c 61 64 2c 61 68 2c 61 49 5d 29 3b 69 66 28 61 67 2e 73 77 69 70 65 4c 65 66 74 29 7b 61 52 3d 61 67 2e 73 77 69 70 65 4c 65 66 74 2e 63 61 6c 6c 28 48 2c 61 54 2c 4e 2c 61 64 2c 61 68 2c 61 49 29 7d 62 72 65 61 6b 3b 63 61 73 65 Data Ascii: eturn false}}if(aQ==f&&aB()){H.trigger("swipe",[N,ad,ah,aI]);if(ag.swipe){aR=ag.swipe.call(H,aT,N,ad,ah,aI);if(aR===false){return false}}switch(N){case m:H.trigger("swipeLeft",[N,ad,ah,aI]);if(ag.swipeLeft){aR=ag.swipeLeft.call(H,aT,N,ad,ah,aI)}break;case
2024-04-16 15:05:31 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 61 41 3e 3d 61 67 2e 70 69 6e 63 68 54 68 72 65 73 68 6f 6c 64 7d 72 65 74 75 72 6e 20 74 72 75 65 7d 66 75 6e 63 74 69 6f 6e 20 61 71 28 29 7b 76 61 72 20 61 51 3b 69 66 28 61 67 2e 6d 61 78 54 69 6d 65 54 68 72 65 73 68 6f 6c 64 29 7b 69 66 28 61 68 3e 3d 61 67 2e 6d 61 78 54 69 6d 65 54 68 72 65 73 68 6f 6c 64 29 7b 61 51 3d 66 61 6c 73 65 7d 65 6c 73 65 7b 61 51 3d 74 72 75 65 7d 7d 65 6c 73 65 7b 61 51 3d 74 72 75 65 7d 72 65 74 75 72 6e 20 61 51 7d 66 75 6e 63 74 69 6f 6e 20 43 28 61 51 2c 61 52 29 7b 69 66 28 61 67 2e 61 6c 6c 6f 77 50 61 67 65 53 63 72 6f 6c 6c 3d 3d 3d 6a 7c 7c 61 70 28 29 29 7b 61 51 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 7d 65 6c 73 65 7b 76 61 72 20 61 53 3d 61 67 2e 61 6c 6c 6f 77 50 61 67 65 53 Data Ascii: eturn aA>=ag.pinchThreshold}return true}function aq(){var aQ;if(ag.maxTimeThreshold){if(ah>=ag.maxTimeThreshold){aQ=false}else{aQ=true}}else{aQ=true}return aQ}function C(aQ,aR){if(ag.allowPageScroll===j\|\|ap()){aQ.preventDefault()}else{var aS=ag.allowPageS
2024-04-16 15:05:31 UTC	1369	IN	Data Raw: 75 63 68 22 2c 61 51 3d 3d 3d 74 72 75 65 29 7d 66 75 6e 63 74 69 6f 6e 20 61 4f 28 61 52 2c 61 51 29 7b 76 61 72 20 61 53 3d 61 51 2e 69 64 65 6e 74 69 66 69 65 72 21 3d 3d 75 6e 64 65 66 69 6e 65 64 3f 61 51 2e 69 64 65 6e 74 69 66 69 65 72 3a 30 3b 61 69 5b 61 52 5d 2e 69 64 65 6e 74 69 66 69 65 72 3d 61 53 3b 61 69 5b 61 52 5d 2e 73 74 61 72 74 2e 78 3d 61 69 5b 61 52 5d 2e 65 6e 64 2e 78 3d 61 51 2e 70 61 67 65 58 7c 7c 61 51 2e 63 6c 69 65 6e 74 58 3b 61 69 5b 61 52 5d 2e 73 74 61 72 74 2e 79 3d 61 69 5b 61 52 5d 2e 65 6e 64 2e 79 3d 61 51 2e 70 61 67 65 59 7c 7c 61 51 2e 63 6c 69 65 6e 74 59 3b 72 65 74 75 72 6e 20 61 69 5b 61 52 5d 7d 66 75 6e 63 74 69 6f 6e 20 56 28 61 51 29 7b 76 61 72 20 61 53 3d 61 51 2e 69 64 65 6e 74 69 66 69 65 72 21 3d 3d Data Ascii: uch",aQ===true)}function aO(aR,aQ){var aS=aQ.identifier!==undefined?aQ.identifier:0;ai[aR].identifier=aS;ai[aR].start.x=ai[aR].end.x=aQ.pageX\|\|aQ.clientX;ai[aR].start.y=ai[aR].end.y=aQ.pageY\|\|aQ.clientY;return ai[aR]}function V(aQ){var aS=aQ.identifier!==
2024-04-16 15:05:31 UTC	406	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 6d 7d 65 6c 73 65 7b 69 66 28 28 61 53 3e 3d 31 33 35 29 26 26 28 61 53 3c 3d 32 32 35 29 29 7b 72 65 74 75 72 6e 20 6c 7d 65 6c 73 65 7b 69 66 28 28 61 53 3e 34 35 29 26 26 28 61 53 3c 31 33 35 29 29 7b 72 65 74 75 72 6e 20 73 7d 65 6c 73 65 7b 72 65 74 75 72 6e 20 63 7d 7d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 42 28 29 7b 76 61 72 20 61 51 3d 6e 65 77 20 44 61 74 65 28 29 3b 72 65 74 75 72 6e 20 61 51 2e 67 65 74 54 69 6d 65 28 29 7d 66 75 6e 63 74 69 6f 6e 20 61 75 28 61 51 29 7b 61 51 3d 64 28 61 51 29 3b 76 61 72 20 61 53 3d 61 51 2e 6f 66 66 73 65 74 28 29 3b 76 61 72 20 61 52 3d 7b 6c 65 66 74 3a 61 53 2e 6c 65 66 74 2c 72 69 67 68 74 3a 61 53 2e 6c 65 66 74 2b 61 51 2e 6f 75 74 65 72 57 69 64 74 68 28 29 2c 74 6f 70 3a 61 Data Ascii: ){return m}else{if((aS>=135)&&(aS<=225)){return l}else{if((aS>45)&&(aS<135)){return s}else{return c}}}}}function B(){var aQ=new Date();return aQ.getTime()}function au(aQ){aQ=d(aQ);var aS=aQ.offset();var aR={left:aS.left,right:aS.left+aQ.outerWidth(),top:a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.11	49790	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:28 UTC	606	OUT	GET /wp-content/themes/salient/js/build/elements/nectar-testimonial-slider.js?ver=16.1.3 HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:30 UTC	601	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:30 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: public, max-age=604800 expires: Tue, 23 Apr 2024 15:05:30 GMT last-modified: Wed, 03 Jan 2024 11:40:52 GMT etag: W/"2734-659547c4-7fdcbae1848d3531;gz" platform: hostinger content-security-policy: upgrade-insecure-requests x-turbo-charged-by: LiteSpeed alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 3d89e41bf89da0152e5566e11589cb03-asc-edge6 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 1.029
2024-04-16 15:05:30 UTC	768	IN	Data Raw: 32 37 33 34 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 69 2c 65 2c 73 29 7b 74 68 69 73 2e 65 6c 3d 74 2c 74 68 69 73 2e 74 79 70 65 3d 69 2c 74 68 69 73 2e 72 65 73 69 7a 65 56 69 64 65 6f 54 6f 43 6f 76 65 72 3d 65 2c 74 68 69 73 2e 66 75 6c 6c 57 69 64 74 68 43 6f 6e 74 65 6e 74 43 6f 6c 75 6d 6e 73 3d 73 2c 74 68 69 73 2e 66 6c 69 63 6b 69 74 79 45 6c 3d 6e 75 6c 6c 2c 74 68 69 73 2e 63 72 65 61 74 65 54 65 73 74 69 6d 6f 6e 69 61 6c 43 6f 6e 74 72 6f 6c 73 28 29 7d 69 2e 70 72 6f 74 6f 74 79 70 65 2e 63 72 65 61 74 65 54 65 73 74 69 6d 6f 6e 69 61 6c 43 6f 6e 74 72 6f 6c 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 2c 65 2c 73 2c 6c 3d 74 28 22 62 6f 64 79 2e 76 Data Ascii: 2734!function(t){"use strict";function i(t,i,e,s){this.el=t,this.type=i,this.resizeVideoToCover=e,this.fullWidthContentColumns=s,this.flickityEl=null,this.createTestimonialControls()}i.prototype.createTestimonialControls=function(){var i,e,s,l=t("body.v
2024-04-16 15:05:30 UTC	1369	IN	Data Raw: 69 6e 61 74 69 6f 6e 2d 73 77 69 74 63 68 22 3e 3c 2f 73 70 61 6e 3e 3c 2f 6c 69 3e 27 29 3b 69 66 28 74 68 69 73 2e 65 6c 2e 69 73 28 27 5b 64 61 74 61 2d 73 74 79 6c 65 3d 22 6d 69 6e 69 6d 61 6c 22 5d 27 29 29 7b 69 66 28 74 68 69 73 2e 65 6c 2e 61 70 70 65 6e 64 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 65 73 74 69 6d 6f 6e 69 61 6c 2d 6e 65 78 74 2d 70 72 65 76 22 3e 3c 61 20 68 72 65 66 3d 22 23 22 20 63 6c 61 73 73 3d 22 70 72 65 76 20 66 61 20 66 61 2d 61 6e 67 6c 65 2d 6c 65 66 74 22 3e 3c 2f 61 3e 3c 61 20 68 72 65 66 3d 22 23 22 20 63 6c 61 73 73 3d 22 6e 65 78 74 20 66 61 20 66 61 2d 61 6e 67 6c 65 2d 72 69 67 68 74 22 3e 3c 2f 61 3e 3c 2f 64 69 76 3e 27 29 2c 74 68 69 73 2e 65 6c 2e 66 69 6e 64 28 22 2e 74 65 73 74 69 6d 6f 6e 69 61 6c 2d Data Ascii: ination-switch"></span></li>');if(this.el.is('[data-style="minimal"]')){if(this.el.append('<div class="testimonial-next-prev"><a href="#" class="prev fa fa-angle-left"></a><a href="#" class="next fa fa-angle-right"></a></div>'),this.el.find(".testimonial-
2024-04-16 15:05:30 UTC	1369	IN	Data Raw: 65 52 69 67 68 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 69 2e 66 69 6e 64 28 22 2e 74 65 73 74 69 6d 6f 6e 69 61 6c 2d 6e 65 78 74 2d 70 72 65 76 20 2e 70 72 65 76 22 29 2e 74 72 69 67 67 65 72 28 22 63 6c 69 63 6b 22 29 2c 74 2e 73 74 6f 70 49 6d 6d 65 64 69 61 74 65 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 2c 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 6f 29 2c 21 31 7d 7d 29 7d 69 66 28 21 74 68 69 73 2e 65 6c 2e 69 73 28 27 5b 64 61 74 61 2d 73 74 79 6c 65 3d 22 6d 69 6e 69 6d 61 6c 22 5d 27 29 29 7b 69 66 28 74 68 69 73 2e 65 6c 2e 66 69 6e 64 28 22 2e 63 6f 6e 74 72 6f 6c 73 20 75 6c 20 6c 69 22 29 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 74 68 69 73 2e 64 65 66 61 75 6c 74 50 61 67 69 6e 61 74 69 6f 6e 53 65 6c 65 63 74 29 2c 74 68 69 Data Ascii: eRight:function(t){return i.find(".testimonial-next-prev .prev").trigger("click"),t.stopImmediatePropagation(),clearInterval(o),!1}})}if(!this.el.is('[data-style="minimal"]')){if(this.el.find(".controls ul li").on("click",this.defaultPaginationSelect),thi
2024-04-16 15:05:30 UTC	1369	IN	Data Raw: 7c 22 6d 75 6c 74 69 70 6c 65 5f 76 69 73 69 62 6c 65 5f 6d 69 6e 69 6d 61 6c 22 3d 3d 74 68 69 73 2e 74 79 70 65 29 7b 76 61 72 20 64 3d 74 28 22 23 6e 65 63 74 61 72 5f 66 75 6c 6c 73 63 72 65 65 6e 5f 72 6f 77 73 22 29 2e 6c 65 6e 67 74 68 3e 30 3b 21 77 69 6e 64 6f 77 2e 6e 65 63 74 61 72 44 4f 4d 49 6e 66 6f 2e 75 73 69 6e 67 46 72 6f 6e 74 45 6e 64 45 64 69 74 6f 72 26 26 22 49 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 22 69 6e 20 77 69 6e 64 6f 77 26 26 21 31 3d 3d 3d 64 3f 74 68 69 73 2e 6c 61 7a 79 46 6c 69 63 6b 69 74 79 49 6e 69 74 28 29 3a 74 68 69 73 2e 66 6c 69 63 6b 69 74 79 49 6e 69 74 28 29 7d 76 61 72 20 63 3d 74 68 69 73 3b 74 28 22 62 6f 64 79 22 29 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 27 2e 74 65 73 74 69 6d 6f 6e 69 61 Data Ascii: \|"multiple_visible_minimal"==this.type){var d=t("#nectar_fullscreen_rows").length>0;!window.nectarDOMInfo.usingFrontEndEditor&&"IntersectionObserver"in window&&!1===d?this.lazyFlickityInit():this.flickityInit()}var c=this;t("body").on("click",'.testimonia
2024-04-16 15:05:30 UTC	1369	IN	Data Raw: 2c 77 72 61 70 41 72 6f 75 6e 64 3a 21 30 2c 61 75 74 6f 50 6c 61 79 3a 73 2c 70 61 75 73 65 41 75 74 6f 50 6c 61 79 4f 6e 48 6f 76 65 72 3a 61 2c 61 63 63 65 73 73 69 62 69 6c 69 74 79 3a 21 31 7d 29 2c 74 68 69 73 2e 66 6c 69 63 6b 69 74 79 45 6c 2e 66 69 6e 64 28 22 2e 76 63 5f 65 6c 65 6d 65 6e 74 2e 69 73 2d 73 65 6c 65 63 74 65 64 20 3e 20 62 6c 6f 63 6b 71 75 6f 74 65 22 29 2e 6c 65 6e 67 74 68 3e 30 26 26 28 74 68 69 73 2e 66 6c 69 63 6b 69 74 79 45 6c 2e 66 69 6e 64 28 22 2e 76 63 5f 65 6c 65 6d 65 6e 74 2e 69 73 2d 73 65 6c 65 63 74 65 64 20 3e 20 62 6c 6f 63 6b 71 75 6f 74 65 22 29 2e 61 64 64 43 6c 61 73 73 28 22 69 73 2d 73 65 6c 65 63 74 65 64 22 29 2c 74 68 69 73 2e 66 6c 69 63 6b 69 74 79 45 6c 2e 6f 6e 28 22 73 65 6c 65 63 74 2e 66 6c 69 Data Ascii: ,wrapAround:!0,autoPlay:s,pauseAutoPlayOnHover:a,accessibility:!1}),this.flickityEl.find(".vc_element.is-selected > blockquote").length>0&&(this.flickityEl.find(".vc_element.is-selected > blockquote").addClass("is-selected"),this.flickityEl.on("select.fli
2024-04-16 15:05:30 UTC	1369	IN	Data Raw: 22 3a 22 62 6c 6f 63 6b 71 75 6f 74 65 22 2c 6c 3d 65 2e 69 6e 64 65 78 28 29 2c 6e 3d 65 2e 70 61 72 65 6e 74 73 28 22 2e 74 65 73 74 69 6d 6f 6e 69 61 6c 5f 73 6c 69 64 65 72 22 29 2e 66 69 6e 64 28 22 2e 73 6c 69 64 65 73 20 62 6c 6f 63 6b 71 75 6f 74 65 22 29 2e 65 71 28 6c 29 2e 68 65 69 67 68 74 28 29 3b 65 2e 70 61 72 65 6e 74 73 28 22 2e 74 65 73 74 69 6d 6f 6e 69 61 6c 5f 73 6c 69 64 65 72 22 29 2e 66 69 6e 64 28 22 6c 69 20 73 70 61 6e 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 61 63 74 69 76 65 22 29 2c 65 2e 66 69 6e 64 28 22 73 70 61 6e 22 29 2e 61 64 64 43 6c 61 73 73 28 22 61 63 74 69 76 65 22 29 2c 65 2e 70 61 72 65 6e 74 73 28 22 2e 74 65 73 74 69 6d 6f 6e 69 61 6c 5f 73 6c 69 64 65 72 22 29 2e 66 69 6e 64 28 22 2e 73 6c 69 64 65 73 Data Ascii: ":"blockquote",l=e.index(),n=e.parents(".testimonial_slider").find(".slides blockquote").eq(l).height();e.parents(".testimonial_slider").find("li span").removeClass("active"),e.find("span").addClass("active"),e.parents(".testimonial_slider").find(".slides
2024-04-16 15:05:30 UTC	1369	IN	Data Raw: 20 22 2b 6c 29 2e 65 71 28 61 29 2e 61 64 64 43 6c 61 73 73 28 22 61 63 74 69 76 65 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 6e 6f 2d 74 72 61 6e 73 22 29 2e 63 73 73 28 7b 6f 70 61 63 69 74 79 3a 22 31 22 2c 74 72 61 6e 73 66 6f 72 6d 3a 22 74 72 61 6e 73 6c 61 74 65 58 28 30 70 78 29 22 7d 29 2e 63 73 73 28 22 7a 2d 69 6e 64 65 78 22 2c 22 32 30 22 29 2c 73 2e 70 61 72 65 6e 74 73 28 22 2e 74 65 73 74 69 6d 6f 6e 69 61 6c 5f 73 6c 69 64 65 72 22 29 2e 66 69 6e 64 28 22 2e 63 6f 6e 74 72 6f 6c 2d 77 72 61 70 20 75 6c 22 29 2e 63 73 73 28 7b 74 72 61 6e 73 66 6f 72 6d 3a 22 74 72 61 6e 73 6c 61 74 65 58 28 2d 22 2b 32 30 2a 61 2b 22 70 78 29 22 7d 29 29 3a 28 61 3d 6e 2d 31 3d 3d 2d 31 3f 73 2e 70 61 72 65 6e 74 73 28 22 2e 74 65 73 74 69 6d 6f 6e Data Ascii: "+l).eq(a).addClass("active").removeClass("no-trans").css({opacity:"1",transform:"translateX(0px)"}).css("z-index","20"),s.parents(".testimonial_slider").find(".control-wrap ul").css({transform:"translateX(-"+20*a+"px)"})):(a=n-1==-1?s.parents(".testimon
2024-04-16 15:05:30 UTC	1067	IN	Data Raw: 69 62 6c 65 22 5d 27 29 29 7b 76 61 72 20 69 2c 65 3d 74 28 22 62 6f 64 79 2e 76 63 5f 65 64 69 74 6f 72 22 29 2e 6c 65 6e 67 74 68 3e 30 3f 22 2e 73 6c 69 64 65 73 20 3e 20 64 69 76 22 3a 22 2e 73 6c 69 64 65 73 20 62 6c 6f 63 6b 71 75 6f 74 65 22 3b 69 3d 74 68 69 73 2e 65 6c 2e 69 73 28 27 5b 64 61 74 61 2d 73 74 79 6c 65 3d 22 6d 69 6e 69 6d 61 6c 22 5d 27 29 3f 74 68 69 73 2e 65 6c 2e 66 69 6e 64 28 65 2b 22 2e 61 63 74 69 76 65 22 29 2e 69 6e 64 65 78 28 29 3a 74 68 69 73 2e 65 6c 2e 66 69 6e 64 28 22 2e 63 6f 6e 74 72 6f 6c 73 20 75 6c 20 6c 69 20 73 70 61 6e 2e 61 63 74 69 76 65 22 29 2e 70 61 72 65 6e 74 28 29 2e 69 6e 64 65 78 28 29 3b 76 61 72 20 73 3d 74 68 69 73 2e 65 6c 2e 66 69 6e 64 28 65 29 2e 65 71 28 69 29 2e 68 65 69 67 68 74 28 29 3b Data Ascii: ible"]')){var i,e=t("body.vc_editor").length>0?".slides > div":".slides blockquote";i=this.el.is('[data-style="minimal"]')?this.el.find(e+".active").index():this.el.find(".controls ul li span.active").parent().index();var s=this.el.find(e).eq(i).height();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.11	49791	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:28 UTC	592	OUT	GET /wp-content/themes/salient/js/build/third-party/anime.min.js?ver=4.5.1 HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:30 UTC	601	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:30 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: public, max-age=604800 expires: Tue, 23 Apr 2024 15:05:30 GMT last-modified: Tue, 11 Jan 2022 15:21:50 GMT etag: W/"454d-61dda08e-6f6eff409b2fee36;gz" platform: hostinger content-security-policy: upgrade-insecure-requests x-turbo-charged-by: LiteSpeed alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: c1af9e0ddec104b0cc2e0ddf2b0cb59a-asc-edge4 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 1.022
2024-04-16 15:05:30 UTC	768	IN	Data Raw: 34 35 34 64 0d 0a 2f 2a 0a 20 2a 20 61 6e 69 6d 65 2e 6a 73 20 76 33 2e 32 2e 31 0a 20 2a 20 28 63 29 20 32 30 32 30 20 4a 75 6c 69 61 6e 20 47 61 72 6e 69 65 72 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 61 6e 69 6d 65 6a 73 2e 63 6f 6d 0a 20 2a 2f 0a 0a 21 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 65 29 3a 6e 2e 61 6e 69 6d 65 3d 65 28 29 Data Ascii: 454d/* * anime.js v3.2.1 * (c) 2020 Julian Garnier * Released under the MIT license * animejs.com */!function(n,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define(e):n.anime=e()
2024-04-16 15:05:30 UTC	1369	IN	Data Raw: 2e 6d 69 6e 28 4d 61 74 68 2e 6d 61 78 28 6e 2c 65 29 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 2c 65 29 7b 72 65 74 75 72 6e 20 6e 2e 69 6e 64 65 78 4f 66 28 65 29 3e 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 75 28 6e 2c 65 29 7b 72 65 74 75 72 6e 20 6e 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 65 29 7d 76 61 72 20 69 3d 7b 61 72 72 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 6e 29 7d 2c 6f 62 6a 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6f 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 6e 29 2c 22 4f 62 6a 65 63 74 22 29 7d 2c 70 74 68 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 69 2e 6f 62 6a 28 6e 29 26 26 6e 2e 68 61 Data Ascii: .min(Math.max(n,e),t)}function o(n,e){return n.indexOf(e)>-1}function u(n,e){return n.apply(null,e)}var i={arr:function(n){return Array.isArray(n)},obj:function(n){return o(Object.prototype.toString.call(n),"Object")},pth:function(n){return i.obj(n)&&n.ha
2024-04-16 15:05:30 UTC	1369	IN	Data Raw: 6e 7c 7c 31 3d 3d 3d 6e 3f 6e 3a 31 2d 74 7d 72 65 74 75 72 6e 20 65 3f 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 72 2e 73 70 72 69 6e 67 73 5b 6e 5d 3b 69 66 28 65 29 72 65 74 75 72 6e 20 65 3b 66 6f 72 28 76 61 72 20 74 3d 30 2c 61 3d 30 3b 3b 29 69 66 28 31 3d 3d 3d 67 28 74 2b 3d 31 2f 36 29 29 7b 69 66 28 2b 2b 61 3e 3d 31 36 29 62 72 65 61 6b 7d 65 6c 73 65 20 61 3d 30 3b 76 61 72 20 6f 3d 74 2a 28 31 2f 36 29 2a 31 65 33 3b 72 65 74 75 72 6e 20 72 2e 73 70 72 69 6e 67 73 5b 6e 5d 3d 6f 2c 6f 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6e 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 31 30 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4d 61 74 68 2e 63 65 69 6c 28 61 28 65 2c 31 65 2d 36 2c 31 29 Data Ascii: n\|\|1===n?n:1-t}return e?g:function(){var e=r.springs[n];if(e)return e;for(var t=0,a=0;;)if(1===g(t+=1/6)){if(++a>=16)break}else a=0;var o=t(1/6)1e3;return r.springs[n]=o,o}}function f(n){return void 0===n&&(n=10),function(e){return Math.ceil(a(e,1e-6,1)
2024-04-16 15:05:30 UTC	1369	IN	Data Raw: 74 68 2e 70 6f 77 28 32 2c 2d 2d 74 29 29 2d 31 29 2f 31 31 3b 29 3b 72 65 74 75 72 6e 20 31 2f 4d 61 74 68 2e 70 6f 77 28 34 2c 33 2d 74 29 2d 37 2e 35 36 32 35 2a 4d 61 74 68 2e 70 6f 77 28 28 33 2a 65 2d 32 29 2f 32 32 2d 6e 2c 32 29 7d 7d 2c 45 6c 61 73 74 69 63 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 29 7b 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 31 29 2c 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 2e 35 29 3b 76 61 72 20 74 3d 61 28 6e 2c 31 2c 31 30 29 2c 72 3d 61 28 65 2c 2e 31 2c 32 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 30 3d 3d 3d 6e 7c 7c 31 3d 3d 3d 6e 3f 6e 3a 2d 74 2a 4d 61 74 68 2e 70 6f 77 28 32 2c 31 30 2a 28 6e 2d 31 29 29 2a 4d 61 74 68 2e 73 69 6e 28 28 6e 2d 31 2d 72 2f 28 32 2a 4d 61 Data Ascii: th.pow(2,--t))-1)/11;);return 1/Math.pow(4,3-t)-7.5625Math.pow((3e-2)/22-n,2)}},Elastic:function(n,e){void 0===n&&(n=1),void 0===e&&(e=.5);var t=a(n,1,10),r=a(e,.1,2);return function(n){return 0===n\|\|1===n?n:-tMath.pow(2,10(n-1))Math.sin((n-1-r/(2Ma
2024-04-16 15:05:30 UTC	1369	IN	Data Raw: 2e 63 61 6c 6c 28 6e 29 3a 5b 6e 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 4d 28 6e 2c 65 29 7b 72 65 74 75 72 6e 20 6e 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 3d 3d 3d 65 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 78 28 6e 29 7b 76 61 72 20 65 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 74 20 69 6e 20 6e 29 65 5b 74 5d 3d 6e 5b 74 5d 3b 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 77 28 6e 2c 65 29 7b 76 61 72 20 74 3d 78 28 6e 29 3b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 6e 29 74 5b 72 5d 3d 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 72 29 3f 65 5b 72 5d 3a 6e 5b 72 5d 3b 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 6e 2c 65 29 7b 76 61 72 20 74 3d 78 28 6e 29 3b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 65 Data Ascii: .call(n):[n])}function M(n,e){return n.some(function(n){return n===e})}function x(n){var e={};for(var t in n)e[t]=n[t];return e}function w(n,e){var t=x(n);for(var r in n)t[r]=e.hasOwnProperty(r)?e[r]:n[r];return t}function k(n,e){var t=x(n);for(var r in e
2024-04-16 15:05:30 UTC	1369	IN	Data Raw: 29 7d 66 75 6e 63 74 69 6f 6e 20 44 28 6e 2c 65 2c 74 29 7b 69 66 28 4d 28 5b 74 2c 22 64 65 67 22 2c 22 72 61 64 22 2c 22 74 75 72 6e 22 5d 2c 43 28 65 29 29 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 61 3d 72 2e 43 53 53 5b 65 2b 74 5d 3b 69 66 28 21 69 2e 75 6e 64 28 61 29 29 72 65 74 75 72 6e 20 61 3b 76 61 72 20 6f 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 6e 2e 74 61 67 4e 61 6d 65 29 2c 75 3d 6e 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 6e 2e 70 61 72 65 6e 74 4e 6f 64 65 21 3d 3d 64 6f 63 75 6d 65 6e 74 3f 6e 2e 70 61 72 65 6e 74 4e 6f 64 65 3a 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 75 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6f 29 2c 6f 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 61 62 73 6f 6c 75 74 65 22 2c 6f Data Ascii: )}function D(n,e,t){if(M([t,"deg","rad","turn"],C(e)))return e;var a=r.CSS[e+t];if(!i.und(a))return a;var o=document.createElement(n.tagName),u=n.parentNode&&n.parentNode!==document?n.parentNode:document.body;u.appendChild(o),o.style.position="absolute",o
2024-04-16 15:05:30 UTC	1369	IN	Data Raw: 72 6e 20 61 2b 6f 2b 72 3b 63 61 73 65 22 2d 22 3a 72 65 74 75 72 6e 20 61 2d 6f 2b 72 3b 63 61 73 65 22 2a 22 3a 72 65 74 75 72 6e 20 61 2a 6f 2b 72 7d 7d 66 75 6e 63 74 69 6f 6e 20 53 28 6e 2c 65 29 7b 69 66 28 69 2e 63 6f 6c 28 6e 29 29 72 65 74 75 72 6e 20 4f 28 6e 29 3b 69 66 28 2f 5c 73 2f 67 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 6e 3b 76 61 72 20 74 3d 43 28 6e 29 2c 72 3d 74 3f 6e 2e 73 75 62 73 74 72 28 30 2c 6e 2e 6c 65 6e 67 74 68 2d 74 2e 6c 65 6e 67 74 68 29 3a 6e 3b 72 65 74 75 72 6e 20 65 3f 72 2b 65 3a 72 7d 66 75 6e 63 74 69 6f 6e 20 4c 28 6e 2c 65 29 7b 72 65 74 75 72 6e 20 4d 61 74 68 2e 73 71 72 74 28 4d 61 74 68 2e 70 6f 77 28 65 2e 78 2d 6e 2e 78 2c 32 29 2b 4d 61 74 68 2e 70 6f 77 28 65 2e 79 2d 6e 2e 79 2c 32 29 29 7d 66 Data Ascii: rn a+o+r;case"-":return a-o+r;case"":return ao+r}}function S(n,e){if(i.col(n))return O(n);if(/\s/g.test(n))return n;var t=C(n),r=t?n.substr(0,n.length-t.length):n;return e?r+e:r}function L(n,e){return Math.sqrt(Math.pow(e.x-n.x,2)+Math.pow(e.y-n.y,2))}f
2024-04-16 15:05:30 UTC	1369	IN	Data Raw: 20 24 28 6e 2c 65 29 7b 76 61 72 20 74 3d 2f 5b 2b 2d 5d 3f 5c 64 2a 5c 2e 3f 5c 64 2b 28 3f 3a 5c 2e 5c 64 2b 29 3f 28 3f 3a 5b 65 45 5d 5b 2b 2d 5d 3f 5c 64 2b 29 3f 2f 67 2c 72 3d 53 28 69 2e 70 74 68 28 6e 29 3f 6e 2e 74 6f 74 61 6c 4c 65 6e 67 74 68 3a 6e 2c 65 29 2b 22 22 3b 72 65 74 75 72 6e 7b 6f 72 69 67 69 6e 61 6c 3a 72 2c 6e 75 6d 62 65 72 73 3a 72 2e 6d 61 74 63 68 28 74 29 3f 72 2e 6d 61 74 63 68 28 74 29 2e 6d 61 70 28 4e 75 6d 62 65 72 29 3a 5b 30 5d 2c 73 74 72 69 6e 67 73 3a 69 2e 73 74 72 28 6e 29 7c 7c 65 3f 72 2e 73 70 6c 69 74 28 74 29 3a 5b 5d 7d 7d 66 75 6e 63 74 69 6f 6e 20 57 28 6e 29 7b 72 65 74 75 72 6e 20 6d 28 6e 3f 79 28 69 2e 61 72 72 28 6e 29 3f 6e 2e 6d 61 70 28 62 29 3a 62 28 6e 29 29 3a 5b 5d 2c 66 75 6e 63 74 69 6f 6e Data Ascii: $(n,e){var t=/[+-]?\d*\.?\d+(?:\.\d+)?(?:[eE][+-]?\d+)?/g,r=S(i.pth(n)?n.totalLength:n,e)+"";return{original:r,numbers:r.match(t)?r.match(t).map(Number):[0],strings:i.str(n)\|\|e?r.split(t):[]}}function W(n){return m(n?y(i.arr(n)?n.map(b):b(n)):[],function
2024-04-16 15:05:30 UTC	1369	IN	Data Raw: 2c 65 29 3b 69 2e 61 72 72 28 61 29 26 26 31 3d 3d 3d 28 61 3d 61 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 50 28 6e 2c 65 29 7d 29 29 2e 6c 65 6e 67 74 68 26 26 28 61 3d 61 5b 30 5d 29 2c 74 5b 72 5d 3d 61 7d 72 65 74 75 72 6e 20 74 2e 64 75 72 61 74 69 6f 6e 3d 70 61 72 73 65 46 6c 6f 61 74 28 74 2e 64 75 72 61 74 69 6f 6e 29 2c 74 2e 64 65 6c 61 79 3d 70 61 72 73 65 46 6c 6f 61 74 28 74 2e 64 65 6c 61 79 29 2c 74 7d 28 72 2c 65 29 2c 6f 3d 61 2e 76 61 6c 75 65 2c 75 3d 69 2e 61 72 72 28 6f 29 3f 6f 5b 31 5d 3a 6f 2c 63 3d 43 28 75 29 2c 73 3d 41 28 65 2e 74 61 72 67 65 74 2c 6e 2e 6e 61 6d 65 2c 63 2c 65 29 2c 66 3d 74 3f 74 2e 74 6f 2e 6f 72 69 67 69 6e 61 6c 3a 73 2c 6c 3d 69 2e 61 72 72 28 6f 29 3f 6f 5b 30 5d 3a 66 2c Data Ascii: ,e);i.arr(a)&&1===(a=a.map(function(n){return P(n,e)})).length&&(a=a[0]),t[r]=a}return t.duration=parseFloat(t.duration),t.delay=parseFloat(t.delay),t}(r,e),o=a.value,u=i.arr(o)?o[1]:o,c=C(u),s=A(e.target,n.name,c,e),f=t?t.to.original:s,l=i.arr(o)?o[0]:f,
2024-04-16 15:05:30 UTC	1369	IN	Data Raw: 6e 2e 74 69 6d 65 6c 69 6e 65 4f 66 66 73 65 74 3a 30 7d 2c 61 3d 7b 7d 3b 72 65 74 75 72 6e 20 61 2e 64 75 72 61 74 69 6f 6e 3d 74 3f 4d 61 74 68 2e 6d 61 78 2e 61 70 70 6c 79 28 4d 61 74 68 2c 6e 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 72 28 6e 29 2b 6e 2e 64 75 72 61 74 69 6f 6e 7d 29 29 3a 65 2e 64 75 72 61 74 69 6f 6e 2c 61 2e 64 65 6c 61 79 3d 74 3f 4d 61 74 68 2e 6d 69 6e 2e 61 70 70 6c 79 28 4d 61 74 68 2c 6e 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 72 28 6e 29 2b 6e 2e 64 65 6c 61 79 7d 29 29 3a 65 2e 64 65 6c 61 79 2c 61 2e 65 6e 64 44 65 6c 61 79 3d 74 3f 61 2e 64 75 72 61 74 69 6f 6e 2d 4d 61 74 68 2e 6d 61 78 2e 61 70 70 6c 79 28 4d 61 74 68 2c 6e 2e 6d 61 70 28 66 75 6e 63 74 69 Data Ascii: n.timelineOffset:0},a={};return a.duration=t?Math.max.apply(Math,n.map(function(n){return r(n)+n.duration})):e.duration,a.delay=t?Math.min.apply(Math,n.map(function(n){return r(n)+n.delay})):e.delay,a.endDelay=t?a.duration-Math.max.apply(Math,n.map(functi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.11	49792	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:29 UTC	592	OUT	GET /wp-content/themes/salient/js/build/third-party/superfish.js?ver=1.5.8 HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:31 UTC	601	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:31 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: public, max-age=604800 expires: Tue, 23 Apr 2024 15:05:31 GMT last-modified: Wed, 03 Jan 2024 11:40:52 GMT etag: W/"163c-659547c4-bd3da51ee2d7d284;gz" platform: hostinger content-security-policy: upgrade-insecure-requests x-turbo-charged-by: LiteSpeed alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 101efc8f3d2b94dc3bb1a505d6a4e830-asc-edge4 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 2.063
2024-04-16 15:05:31 UTC	768	IN	Data Raw: 31 36 33 63 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 28 77 69 6e 64 6f 77 29 2e 6f 6e 28 22 72 65 73 69 7a 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 65 28 22 2e 73 66 2d 6d 65 6e 75 20 75 6c 2e 74 72 61 63 6b 65 64 2d 70 6f 73 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 74 72 61 63 6b 65 64 2d 70 6f 73 22 29 7d 29 3b 76 61 72 20 74 2c 73 2c 6e 2c 61 2c 72 2c 6f 2c 69 2c 68 2c 6c 2c 64 2c 70 2c 75 2c 66 2c 63 2c 6d 2c 76 2c 67 3d 28 73 3d 22 73 66 2d 62 72 65 61 64 63 72 75 6d 62 22 2c 6e 3d 22 73 66 2d 6a 73 2d 65 6e 61 62 6c 65 64 22 2c 61 3d 22 73 66 2d 77 69 74 68 2d 75 6c 22 2c 72 3d 22 73 66 2d 61 72 72 6f 77 73 22 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 2f 69 50 68 6f 6e 65 7c 69 Data Ascii: 163c!function(e){"use strict";e(window).on("resize",function(){e(".sf-menu ul.tracked-pos").removeClass("tracked-pos")});var t,s,n,a,r,o,i,h,l,d,p,u,f,c,m,v,g=(s="sf-breadcrumb",n="sf-js-enabled",a="sf-with-ul",r="sf-arrows",o=function(){var t=/iPhone\|i
2024-04-16 15:05:31 UTC	1369	IN	Data Raw: 2e 6f 6e 65 28 22 63 6c 69 63 6b 2e 73 75 70 65 72 66 69 73 68 22 2c 21 31 29 2c 22 4d 53 50 6f 69 6e 74 65 72 44 6f 77 6e 22 3d 3d 3d 74 2e 74 79 70 65 3f 73 2e 74 72 69 67 67 65 72 28 22 66 6f 63 75 73 22 29 3a 65 2e 70 72 6f 78 79 28 75 2c 73 2e 70 61 72 65 6e 74 28 22 6c 69 22 29 29 28 29 29 7d 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 65 28 74 68 69 73 29 2c 73 3d 76 28 74 29 3b 65 28 74 68 69 73 29 2e 70 61 72 65 6e 74 73 28 22 2e 6d 65 67 61 6d 65 6e 75 22 29 2e 6c 65 6e 67 74 68 3e 30 7c 7c 28 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 73 2e 73 66 54 69 6d 65 72 29 2c 74 2e 73 69 62 6c 69 6e 67 73 28 29 2e 73 75 70 65 72 66 69 73 68 28 22 68 69 64 65 22 29 2e 65 6e 64 28 29 2e 73 75 70 65 72 66 69 73 68 28 22 73 68 6f 77 22 29 29 7d Data Ascii: .one("click.superfish",!1),"MSPointerDown"===t.type?s.trigger("focus"):e.proxy(u,s.parent("li"))())},u=function(){var t=e(this),s=v(t);e(this).parents(".megamenu").length>0\|\|(clearTimeout(s.sfTimer),t.siblings().superfish("hide").end().superfish("show"))}
2024-04-16 15:05:31 UTC	1369	IN	Data Raw: 72 2e 73 6d 61 6c 6c 2d 6e 61 76 22 29 2e 6c 65 6e 67 74 68 26 26 30 3d 3d 65 28 22 23 68 65 61 64 65 72 2d 6f 75 74 65 72 2e 64 65 74 61 63 68 65 64 22 29 2e 6c 65 6e 67 74 68 26 26 30 3d 3d 65 28 22 23 68 65 61 64 65 72 2d 6f 75 74 65 72 2e 66 69 78 65 64 2d 6d 65 6e 75 22 29 2e 6c 65 6e 67 74 68 26 26 65 28 22 23 68 65 61 64 65 72 2d 6f 75 74 65 72 22 29 2e 61 64 64 43 6c 61 73 73 28 22 74 72 61 6e 73 70 61 72 65 6e 74 22 29 2c 65 28 27 23 68 65 61 64 65 72 2d 6f 75 74 65 72 5b 64 61 74 61 2d 70 65 72 6d 61 6e 65 6e 74 2d 74 72 61 6e 73 70 61 72 65 6e 74 3d 22 31 22 5d 5b 64 61 74 61 2d 74 72 61 6e 73 70 61 72 65 6e 74 2d 68 65 61 64 65 72 3d 22 74 72 75 65 22 5d 27 29 2e 6c 65 6e 67 74 68 3e 30 26 26 65 28 22 23 68 65 61 64 65 72 2d 6f 75 74 65 72 22 Data Ascii: r.small-nav").length&&0==e("#header-outer.detached").length&&0==e("#header-outer.fixed-menu").length&&e("#header-outer").addClass("transparent"),e('#header-outer[data-permanent-transparent="1"][data-transparent-header="true"]').length>0&&e("#header-outer"
2024-04-16 15:05:31 UTC	1369	IN	Data Raw: 30 26 26 73 2e 6f 66 66 73 65 74 28 29 2e 6c 65 66 74 2b 73 2e 6f 75 74 65 72 57 69 64 74 68 28 29 3e 65 28 77 69 6e 64 6f 77 29 2e 77 69 64 74 68 28 29 26 26 28 73 2e 61 64 64 43 6c 61 73 73 28 22 6f 6e 2d 6c 65 66 74 2d 73 69 64 65 22 29 2c 73 2e 66 69 6e 64 28 22 75 6c 22 29 2e 61 64 64 43 6c 61 73 73 28 22 6f 6e 2d 6c 65 66 74 2d 73 69 64 65 22 29 29 2c 73 2e 61 64 64 43 6c 61 73 73 28 22 74 72 61 63 6b 65 64 2d 70 6f 73 22 29 2c 74 68 69 73 7d 7d 2c 64 65 73 74 72 6f 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 6e 3d 65 28 74 68 69 73 29 2c 61 3d 6e 2e 64 61 74 61 28 22 73 66 2d 6f 70 74 69 6f 6e 73 22 29 3b 69 66 28 21 61 29 72 65 74 75 72 6e 21 31 3b 74 Data Ascii: 0&&s.offset().left+s.outerWidth()>e(window).width()&&(s.addClass("on-left-side"),s.find("ul").addClass("on-left-side")),s.addClass("tracked-pos"),this}},destroy:function(){return this.each(function(){var t,n=e(this),a=n.data("sf-options");if(!a)return!1;t
2024-04-16 15:05:31 UTC	830	IN	Data Raw: 6f 75 74 2e 73 75 70 65 72 66 69 73 68 22 2c 22 6c 69 22 2c 66 29 2e 6f 6e 28 61 2c 22 61 22 2c 73 2c 70 29 7d 28 6e 2c 61 29 2c 72 2e 6e 6f 74 28 22 2e 22 2b 73 29 2e 73 75 70 65 72 66 69 73 68 28 22 68 69 64 65 22 2c 21 30 29 2c 61 2e 6f 6e 49 6e 69 74 2e 63 61 6c 6c 28 74 68 69 73 29 7d 29 7d 7d 29 3b 65 2e 66 6e 2e 73 75 70 65 72 66 69 73 68 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 73 29 7b 72 65 74 75 72 6e 20 67 5b 74 5d 3f 67 5b 74 5d 2e 61 70 70 6c 79 28 74 68 69 73 2c 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 29 3a 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 74 26 26 74 3f 65 2e 65 72 72 6f 72 28 22 4d 65 74 68 6f 64 20 22 2b 74 2b 22 20 64 6f 65 73 20 6e 6f 74 20 65 78 Data Ascii: out.superfish","li",f).on(a,"a",s,p)}(n,a),r.not("."+s).superfish("hide",!0),a.onInit.call(this)})}});e.fn.superfish=function(t,s){return g[t]?g[t].apply(this,Array.prototype.slice.call(arguments,1)):"object"!=typeof t&&t?e.error("Method "+t+" does not ex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.11	49793	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:30 UTC	576	OUT	GET /wp-content/themes/salient/js/build/init.js?ver=16.1.3 HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:34 UTC	602	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:32 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: public, max-age=604800 expires: Tue, 23 Apr 2024 15:05:32 GMT last-modified: Wed, 03 Jan 2024 11:40:52 GMT etag: W/"5ba87-659547c4-57e7dc5c184e1f25;gz" platform: hostinger content-security-policy: upgrade-insecure-requests x-turbo-charged-by: LiteSpeed alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: e954d5b3bf0897ac39d7f8d268c3b75b-asc-edge5 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 2.255
2024-04-16 15:05:34 UTC	767	IN	Data Raw: 32 30 30 30 30 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 2c 69 2c 73 3d 74 28 65 29 2c 72 3d 74 28 22 62 6f 64 79 22 29 2c 6f 3d 74 28 22 23 73 6c 69 64 65 2d 6f 75 74 2d 77 69 64 67 65 74 2d 61 72 65 61 22 29 2c 6c 3d 74 28 22 23 73 6c 69 64 65 2d 6f 75 74 2d 77 69 64 67 65 74 2d 61 72 65 61 2d 62 67 22 29 2c 64 3d 74 28 22 23 68 65 61 64 65 72 2d 6f 75 74 65 72 22 29 2c 63 3d 74 28 22 23 68 65 61 64 65 72 2d 73 65 63 6f 6e 64 61 72 79 2d 6f 75 74 65 72 22 29 2c 68 3d 74 28 22 23 68 65 61 64 65 72 2d 6f 75 74 65 72 20 23 73 65 61 72 63 68 2d 62 74 6e 20 61 22 29 2c 75 3d 74 28 22 23 77 70 61 64 6d 69 6e 62 61 72 22 29 2c 70 3d 74 28 22 23 61 6a 61 78 2d 6c 6f 61 64 69 6e 67 2d 73 63 72 Data Ascii: 20000!function(t,e,a){"use strict";var n,i,s=t(e),r=t("body"),o=t("#slide-out-widget-area"),l=t("#slide-out-widget-area-bg"),d=t("#header-outer"),c=t("#header-secondary-outer"),h=t("#header-outer #search-btn a"),u=t("#wpadminbar"),p=t("#ajax-loading-scr
2024-04-16 15:05:34 UTC	1369	IN	Data Raw: 5d 27 29 2c 24 3d 21 21 64 2e 69 73 28 27 5b 64 61 74 61 2d 74 72 61 6e 73 70 61 72 65 6e 74 2d 68 65 61 64 65 72 3d 22 74 72 75 65 22 5d 27 29 2c 54 3d 28 64 2e 69 73 28 27 5b 64 61 74 61 2d 6d 6f 62 69 6c 65 2d 66 69 78 65 64 3d 22 31 22 5d 27 29 2c 72 2e 69 73 28 22 5b 64 61 74 61 2d 68 65 61 64 65 72 2d 66 6f 72 6d 61 74 5d 22 29 3f 72 2e 61 74 74 72 28 22 64 61 74 61 2d 68 65 61 64 65 72 2d 66 6f 72 6d 61 74 22 29 3a 22 64 65 66 61 75 6c 74 22 29 2c 49 3d 72 2e 69 73 28 22 5b 64 61 74 61 2d 68 68 75 6e 5d 22 29 3f 72 2e 61 74 74 72 28 22 64 61 74 61 2d 68 68 75 6e 22 29 3a 22 22 2c 45 3d 21 21 72 2e 69 73 28 27 5b 64 61 74 61 2d 63 6f 6e 74 61 69 6e 65 64 2d 68 65 61 64 65 72 3d 22 74 72 75 65 22 5d 27 29 2c 4f 3d 72 2e 69 73 28 22 5b 64 61 74 61 2d Data Ascii: ]'),$=!!d.is('[data-transparent-header="true"]'),T=(d.is('[data-mobile-fixed="1"]'),r.is("[data-header-format]")?r.attr("data-header-format"):"default"),I=r.is("[data-hhun]")?r.attr("data-hhun"):"",E=!!r.is('[data-contained-header="true"]'),O=r.is("[data-
2024-04-16 15:05:34 UTC	1369	IN	Data Raw: 61 78 54 6f 75 63 68 50 6f 69 6e 74 73 26 26 6e 61 76 69 67 61 74 6f 72 2e 6d 61 78 54 6f 75 63 68 50 6f 69 6e 74 73 3e 32 29 2c 75 73 69 6e 67 46 72 6f 6e 74 45 6e 64 45 64 69 74 6f 72 3a 76 6f 69 64 20 30 21 3d 3d 65 2e 76 63 5f 69 66 72 61 6d 65 2c 67 65 74 57 69 6e 64 6f 77 53 69 7a 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 70 74 2e 77 69 6e 48 3d 65 2e 69 6e 6e 65 72 48 65 69 67 68 74 2c 70 74 2e 77 69 6e 57 3d 65 2e 69 6e 6e 65 72 57 69 64 74 68 2c 70 74 2e 61 64 6d 69 6e 42 61 72 48 65 69 67 68 74 3d 75 2e 6c 65 6e 67 74 68 3e 30 3f 75 2e 68 65 69 67 68 74 28 29 3a 30 2c 70 74 2e 73 65 63 6f 6e 64 61 72 79 48 65 61 64 65 72 48 65 69 67 68 74 3d 63 2e 6c 65 6e 67 74 68 3e 30 26 26 22 6e 6f 6e 65 22 21 3d 63 2e 63 73 73 28 22 64 69 73 70 6c 61 79 22 29 Data Ascii: axTouchPoints&&navigator.maxTouchPoints>2),usingFrontEndEditor:void 0!==e.vc_iframe,getWindowSize:function(){pt.winH=e.innerHeight,pt.winW=e.innerWidth,pt.adminBarHeight=u.length>0?u.height():0,pt.secondaryHeaderHeight=c.length>0&&"none"!=c.css("display")
2024-04-16 15:05:34 UTC	1369	IN	Data Raw: 20 3e 20 75 6c 20 3e 20 6c 69 20 3e 20 75 6c 22 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 74 68 69 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 6f 6e 2d 6c 65 66 74 2d 73 69 64 65 22 29 2c 74 28 74 68 69 73 29 2e 6f 66 66 73 65 74 28 29 2e 6c 65 66 74 2b 74 28 74 68 69 73 29 2e 6f 75 74 65 72 57 69 64 74 68 28 29 3e 73 2e 77 69 64 74 68 28 29 3f 28 74 28 74 68 69 73 29 2e 61 64 64 43 6c 61 73 73 28 22 6f 6e 2d 6c 65 66 74 2d 73 69 64 65 22 29 2c 74 28 74 68 69 73 29 2e 66 69 6e 64 28 22 75 6c 22 29 2e 61 64 64 43 6c 61 73 73 28 22 6f 6e 2d 6c 65 66 74 2d 73 69 64 65 22 29 29 3a 28 74 28 74 68 69 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 6f 6e 2d 6c 65 66 74 2d 73 69 64 65 22 29 2c 74 28 74 68 69 73 29 2e 66 69 6e 64 28 22 75 6c Data Ascii: > ul > li > ul").each(function(){t(this).removeClass("on-left-side"),t(this).offset().left+t(this).outerWidth()>s.width()?(t(this).addClass("on-left-side"),t(this).find("ul").addClass("on-left-side")):(t(this).removeClass("on-left-side"),t(this).find("ul
2024-04-16 15:05:34 UTC	1369	IN	Data Raw: 65 74 75 70 28 29 2c 74 68 69 73 2e 6d 6f 75 73 65 42 69 6e 64 28 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 74 28 29 7b 74 28 27 2e 77 70 62 5f 67 61 6c 6c 65 72 79 5f 73 6c 69 64 65 73 66 6c 69 63 6b 69 74 79 5f 73 74 61 74 69 63 5f 68 65 69 67 68 74 5f 73 74 79 6c 65 20 2e 63 65 6c 6c 5b 64 61 74 61 2d 6c 61 7a 79 3d 22 74 72 75 65 22 5d 27 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 74 68 69 73 29 2e 63 73 73 28 7b 68 65 69 67 68 74 3a 22 22 2c 77 69 64 74 68 3a 22 22 7d 29 3b 76 61 72 20 65 3d 70 61 72 73 65 49 6e 74 28 74 28 74 68 69 73 29 2e 66 69 6e 64 28 22 69 6d 67 22 29 2e 61 74 74 72 28 22 68 65 69 67 68 74 22 29 29 2c 61 3d 52 74 28 70 61 72 73 65 49 6e 74 28 74 28 74 68 69 73 29 2e 66 69 6e 64 28 22 69 6d 67 22 29 2e 61 74 74 72 28 Data Ascii: etup(),this.mouseBind()}function _t(){t('.wpb_gallery_slidesflickity_static_height_style .cell[data-lazy="true"]').each(function(){t(this).css({height:"",width:""});var e=parseInt(t(this).find("img").attr("height")),a=Rt(parseInt(t(this).find("img").attr(
2024-04-16 15:05:34 UTC	1369	IN	Data Raw: 75 73 65 6c 2e 6e 65 63 74 61 72 2d 66 6c 69 63 6b 69 74 79 3a 6e 6f 74 28 2e 6d 61 73 6f 6e 72 79 29 3a 6e 6f 74 28 5b 64 61 74 61 2d 61 64 61 70 74 69 76 65 2d 68 65 69 67 68 74 3d 22 74 72 75 65 22 5d 29 27 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 54 74 28 74 28 74 68 69 73 29 29 3b 76 61 72 20 65 3d 46 6c 69 63 6b 69 74 79 2e 64 61 74 61 28 74 28 74 68 69 73 29 5b 30 5d 29 3b 65 26 26 65 2e 72 65 73 69 7a 65 28 29 7d 29 7d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 54 74 28 65 29 7b 76 61 72 20 61 3d 30 3b 65 2e 66 69 6e 64 28 22 2e 66 6c 69 63 6b 69 74 79 2d 73 6c 69 64 65 72 20 3e 20 2e 63 65 6c 6c 22 29 2e 63 73 73 28 22 68 65 69 67 68 74 22 2c 22 61 75 74 6f 22 29 2c 65 2e 66 69 6e 64 28 22 2e 66 6c 69 63 6b 69 74 79 2d 73 6c 69 64 65 72 Data Ascii: usel.nectar-flickity:not(.masonry):not([data-adaptive-height="true"])').each(function(){Tt(t(this));var e=Flickity.data(t(this)[0]);e&&e.resize()})},e)}function Tt(e){var a=0;e.find(".flickity-slider > .cell").css("height","auto"),e.find(".flickity-slider
2024-04-16 15:05:34 UTC	1369	IN	Data Raw: 74 68 69 73 29 2e 66 69 6e 64 28 22 3e 20 75 6c 2e 73 75 62 2d 6d 65 6e 75 22 29 2e 63 73 73 28 7b 72 69 67 68 74 3a 61 2e 77 69 64 74 68 28 29 2d 28 65 2e 6f 66 66 73 65 74 28 29 2e 6c 65 66 74 2b 65 2e 77 69 64 74 68 28 29 2d 61 2e 6f 66 66 73 65 74 28 29 2e 6c 65 66 74 29 2c 6c 65 66 74 3a 22 61 75 74 6f 22 7d 29 2c 74 28 74 68 69 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 61 6c 69 67 6e 2d 6d 69 64 64 6c 65 22 29 7d 7d 29 2c 74 28 22 6e 61 76 3a 6e 6f 74 28 2e 6c 65 66 74 2d 73 69 64 65 29 3a 6e 6f 74 28 2e 72 69 67 68 74 2d 73 69 64 65 29 20 2e 73 66 2d 6d 65 6e 75 20 3e 20 2e 6e 65 63 74 61 72 2d 6d 65 67 61 6d 65 6e 75 2d 6d 65 6e 75 2d 69 74 65 6d 2e 61 6c 69 67 6e 2d 6d 69 64 64 6c 65 3a 6e 6f 74 28 2e 77 69 64 74 68 2d 31 30 30 29 22 29 2e Data Ascii: this).find("> ul.sub-menu").css({right:a.width()-(e.offset().left+e.width()-a.offset().left),left:"auto"}),t(this).removeClass("align-middle")}}),t("nav:not(.left-side):not(.right-side) .sf-menu > .nectar-megamenu-menu-item.align-middle:not(.width-100)").
2024-04-16 15:05:34 UTC	1369	IN	Data Raw: 63 6c 69 65 6e 74 73 22 29 3a 6e 6f 74 28 2e 70 6f 72 74 66 6f 6c 69 6f 2d 69 74 65 6d 73 29 27 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 6e 2c 69 3d 74 28 74 68 69 73 29 2c 73 3d 22 74 72 75 65 22 3d 3d 74 28 74 68 69 73 29 2e 70 61 72 65 6e 74 73 28 22 2e 63 61 72 6f 75 73 65 6c 2d 77 72 61 70 22 29 2e 61 74 74 72 28 22 64 61 74 61 2d 66 75 6c 6c 2d 77 69 64 74 68 22 29 3f 22 61 75 74 6f 22 3a 33 2c 6f 3d 22 74 72 75 65 22 3d 3d 74 28 74 68 69 73 29 2e 70 61 72 65 6e 74 73 28 22 2e 63 61 72 6f 75 73 65 6c 2d 77 72 61 70 22 29 2e 61 74 74 72 28 22 64 61 74 61 2d 66 75 6c 6c 2d 77 69 64 74 68 22 29 3f 22 61 75 74 6f 22 3a 22 22 2c 6c 3d 22 74 72 75 65 22 3d 3d 74 28 74 68 69 73 29 2e 70 61 72 65 6e 74 73 28 22 2e 63 61 72 6f Data Ascii: clients"):not(.portfolio-items)').each(function(){var a,n,i=t(this),s="true"==t(this).parents(".carousel-wrap").attr("data-full-width")?"auto":3,o="true"==t(this).parents(".carousel-wrap").attr("data-full-width")?"auto":"",l="true"==t(this).parents(".caro
2024-04-16 15:05:34 UTC	1369	IN	Data Raw: 61 74 69 6f 6e 3a 61 2c 6f 6e 42 65 66 6f 72 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 28 74 28 22 62 6f 64 79 2e 61 73 63 65 6e 64 22 29 2e 6c 65 6e 67 74 68 3e 30 26 26 22 74 72 75 65 22 21 3d 69 2e 70 61 72 65 6e 74 73 28 22 2e 63 61 72 6f 75 73 65 6c 2d 77 72 61 70 22 29 2e 61 74 74 72 28 22 64 61 74 61 2d 66 75 6c 6c 2d 77 69 64 74 68 22 29 7c 7c 74 28 22 62 6f 64 79 2e 6d 61 74 65 72 69 61 6c 22 29 2e 6c 65 6e 67 74 68 3e 30 26 26 22 74 72 75 65 22 21 3d 69 2e 70 61 72 65 6e 74 73 28 22 2e 63 61 72 6f 75 73 65 6c 2d 77 72 61 70 22 29 2e 61 74 74 72 28 22 64 61 74 61 2d 66 75 6c 6c 2d 77 69 64 74 68 22 29 29 26 26 69 2e 70 61 72 65 6e 74 73 28 22 2e 63 61 72 6f 75 73 65 6c 2d 77 72 61 70 22 29 2e 66 69 6e 64 28 22 2e 69 74 65 6d 2d 63 6f 75 6e 74 20 2e Data Ascii: ation:a,onBefore:function(){(t("body.ascend").length>0&&"true"!=i.parents(".carousel-wrap").attr("data-full-width")\|\|t("body.material").length>0&&"true"!=i.parents(".carousel-wrap").attr("data-full-width"))&&i.parents(".carousel-wrap").find(".item-count .
2024-04-16 15:05:34 UTC	1369	IN	Data Raw: 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 74 65 6d 2d 63 6f 75 6e 74 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 75 72 72 65 6e 74 22 3e 31 3c 2f 73 70 61 6e 3e 2f 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 74 6f 74 61 6c 22 3e 27 2b 69 2e 66 69 6e 64 28 22 3e 20 6c 69 22 29 2e 6c 65 6e 67 74 68 2f 69 2e 74 72 69 67 67 65 72 48 61 6e 64 6c 65 72 28 22 63 75 72 72 65 6e 74 56 69 73 69 62 6c 65 22 29 2e 6c 65 6e 67 74 68 2b 22 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 22 29 2e 69 6e 73 65 72 74 41 66 74 65 72 28 69 2e 70 61 72 65 6e 74 73 28 22 2e 63 61 72 6f 75 73 65 6c 2d 77 72 61 70 22 29 2e 66 69 6e 64 28 22 2e 63 61 72 6f 75 73 65 6c 2d 70 72 65 76 22 29 29 2c 69 2e 61 64 64 43 6c 61 73 73 28 22 66 69 6e 69 73 68 65 64 2d 6c 6f 61 64 69 6e 67 22 29 2c Data Ascii: ('<div class="item-count"><span class="current">1</span>/<span class="total">'+i.find("> li").length/i.triggerHandler("currentVisible").length+"</span></div>").insertAfter(i.parents(".carousel-wrap").find(".carousel-prev")),i.addClass("finished-loading"),

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.11	49794	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:30 UTC	609	OUT	GET /wp-content/plugins/js_composer_salient/assets/js/dist/js_composer_front.min.js?ver=7.1 HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:32 UTC	601	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:32 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: public, max-age=604800 expires: Tue, 23 Apr 2024 15:05:32 GMT last-modified: Thu, 15 Feb 2024 10:36:12 GMT etag: W/"67d7-65cde91c-11441488946785c6;gz" platform: hostinger content-security-policy: upgrade-insecure-requests x-turbo-charged-by: LiteSpeed alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 9cb17f83307a2586bda47fe8168c7a09-asc-edge4 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 1.056
2024-04-16 15:05:32 UTC	768	IN	Data Raw: 36 37 64 37 0d 0a 2f 2a 21 0a 20 2a 20 57 50 42 61 6b 65 72 79 20 50 61 67 65 20 42 75 69 6c 64 65 72 20 76 36 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 77 70 62 61 6b 65 72 79 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 31 20 4d 69 63 68 61 65 6c 20 4d 2c 20 57 50 42 61 6b 65 72 79 0a 20 2a 20 4c 69 63 65 6e 73 65 3a 20 43 6f 6d 6d 65 72 63 69 61 6c 2e 20 4d 6f 72 65 20 64 65 74 61 69 6c 73 3a 20 68 74 74 70 3a 2f 2f 67 6f 2e 77 70 62 61 6b 65 72 79 2e 63 6f 6d 2f 6c 69 63 65 6e 73 69 6e 67 0a 20 2a 2f 0a 0a 2f 2f 20 6a 73 63 73 3a 64 69 73 61 62 6c 65 0a 2f 2f 20 6a 73 68 69 6e 74 20 69 67 6e 6f 72 65 3a 20 73 74 61 72 74 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 24 29 20 7b 0a 20 20 20 20 22 66 75 6e 63 74 69 6f 6e 22 20 Data Ascii: 67d7/! WPBakery Page Builder v6.0.0 (https://wpbakery.com) * Copyright 2011-2021 Michael M, WPBakery * License: Commercial. More details: http://go.wpbakery.com/licensing */// jscs:disable// jshint ignore: start(function($) { "function"
2024-04-16 15:05:32 UTC	1369	IN	Data Raw: 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 6c 69 64 65 73 68 6f 77 20 3d 20 30 20 3d 3d 20 73 6c 69 64 65 72 54 69 6d 65 6f 75 74 20 3f 20 21 31 20 3a 20 21 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 5f 65 6c 65 6d 65 6e 74 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 20 26 26 20 74 68 69 73 5f 65 6c 65 6d 65 6e 74 2e 66 6c 65 78 73 6c 69 64 65 72 28 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 6c 69 64 65 72 46 78 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 6c 69 64 65 73 68 6f 77 3a 20 73 6c 69 64 65 73 68 6f 77 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 6c 69 64 65 73 68 6f 77 53 70 65 65 64 3a 20 73 6c 69 64 65 72 54 69 6d 65 6f 75 74 2c 0a 20 20 20 Data Ascii: ), slideshow = 0 == sliderTimeout ? !1 : !0; this_element.is(":visible") && this_element.flexslider({ animation: sliderFx, slideshow: slideshow, slideshowSpeed: sliderTimeout,
2024-04-16 15:05:32 UTC	1369	IN	Data Raw: 62 61 72 22 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 24 65 6c 20 3d 20 6a 51 75 65 72 79 28 74 68 69 73 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 65 6c 2e 76 63 77 61 79 70 6f 69 6e 74 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 65 6c 2e 66 69 6e 64 28 22 2e 76 63 5f 73 69 6e 67 6c 65 5f 62 61 72 22 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 69 6e 64 65 78 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 62 61 72 20 3d 20 6a 51 75 65 72 79 28 74 68 69 73 29 2e 66 69 6e 64 28 22 2e 76 63 5f 62 61 72 22 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 6c 20 3d Data Ascii: bar").each(function() { var $el = jQuery(this); $el.vcwaypoint(function() { $el.find(".vc_single_bar").each(function(index) { var bar = jQuery(this).find(".vc_bar"), val =
2024-04-16 15:05:32 UTC	1369	IN	Data Raw: 63 74 69 76 65 22 29 20 3f 20 63 6f 6e 74 65 6e 74 2e 73 6c 69 64 65 55 70 28 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 75 72 61 74 69 6f 6e 3a 20 33 30 30 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6d 70 6c 65 74 65 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 76 63 5f 74 6f 67 67 6c 65 5f 61 63 74 69 76 65 22 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 20 3a 20 63 6f 6e 74 65 6e 74 2e 73 6c 69 64 65 44 6f 77 6e 28 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 75 72 61 74 69 6f 6e 3a 20 33 30 30 2c 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ctive") ? content.slideUp({ duration: 300, complete: function() { element.removeClass("vc_toggle_active") } }) : content.slideDown({ duration: 300,
2024-04-16 15:05:32 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 69 6e 74 65 72 76 61 6c 20 26 26 20 30 20 3c 20 69 6e 74 65 72 76 61 6c 29 20 74 72 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 74 61 62 73 2e 74 61 62 73 28 22 72 6f 74 61 74 65 22 2c 20 31 65 33 20 2a 20 69 6e 74 65 72 76 61 6c 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 63 61 74 63 68 20 28 65 72 72 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 20 26 26 20 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 20 26 26 20 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 74 61 62 73 20 62 65 68 61 76 69 6f 75 72 73 20 65 72 72 6f 72 22 2c 20 65 72 72 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 Data Ascii: }); if (interval && 0 < interval) try { $tabs.tabs("rotate", 1e3 * interval) } catch (err) { window.console && window.console.warn && console.warn("tabs behaviours error", err) }
2024-04-16 15:05:32 UTC	1369	IN	Data Raw: 29 29 0a 20 20 20 20 7d 29 2c 20 22 66 75 6e 63 74 69 6f 6e 22 20 21 3d 20 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 76 63 5f 61 63 63 6f 72 64 69 6f 6e 42 65 68 61 76 69 6f 75 72 20 26 26 20 28 77 69 6e 64 6f 77 2e 76 63 5f 61 63 63 6f 72 64 69 6f 6e 42 65 68 61 76 69 6f 75 72 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 6a 51 75 65 72 79 28 22 2e 77 70 62 5f 61 63 63 6f 72 64 69 6f 6e 22 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 69 6e 64 65 78 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 24 74 68 69 73 20 3d 20 6a 51 75 65 72 79 28 74 68 69 73 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 63 74 69 76 65 5f 74 61 62 20 3d 20 28 24 74 68 69 73 2e 61 74 74 72 28 22 64 61 74 61 2d 69 6e 74 65 72 Data Ascii: )) }), "function" != typeof window.vc_accordionBehaviour && (window.vc_accordionBehaviour = function() { jQuery(".wpb_accordion").each(function(index) { var $this = jQuery(this), active_tab = ($this.attr("data-inter
2024-04-16 15:05:32 UTC	1369	IN	Data Raw: 79 22 0a 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 6a 51 75 65 72 79 28 22 2e 77 70 62 5f 67 72 69 64 20 2e 74 65 61 73 65 72 5f 67 72 69 64 5f 63 6f 6e 74 61 69 6e 65 72 3a 6e 6f 74 28 2e 77 70 62 5f 63 61 72 6f 75 73 65 6c 29 2c 20 2e 77 70 62 5f 66 69 6c 74 65 72 65 64 5f 67 72 69 64 20 2e 74 65 61 73 65 72 5f 67 72 69 64 5f 63 6f 6e 74 61 69 6e 65 72 3a 6e 6f 74 28 2e 77 70 62 5f 63 61 72 6f 75 73 65 6c 29 22 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 24 63 6f 6e 74 61 69 6e 65 72 20 3d 20 6a 51 75 65 72 79 28 74 68 69 73 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 74 68 75 6d 62 73 20 3d 20 24 63 6f 6e 74 61 69 6e 65 72 2e 66 69 6e 64 28 22 2e 77 70 62 5f Data Ascii: y" }; jQuery(".wpb_grid .teaser_grid_container:not(.wpb_carousel), .wpb_filtered_grid .teaser_grid_container:not(.wpb_carousel)").each(function() { var $container = jQuery(this), $thumbs = $container.find(".wpb_
2024-04-16 15:05:32 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 21 30 20 21 3d 3d 20 66 6c 75 69 64 5f 75 6c 2e 64 61 74 61 28 22 63 61 72 6f 75 73 65 6c 5f 65 6e 61 62 6c 65 64 22 29 20 26 26 20 66 6c 75 69 64 5f 75 6c 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 20 26 26 20 28 66 6c 75 69 64 5f 75 6c 2e 64 61 74 61 28 22 63 61 72 6f 75 73 65 6c 5f 65 6e 61 62 6c 65 64 22 2c 20 21 30 29 2c 20 67 65 74 43 6f 6c 75 6d 6e 73 43 6f 75 6e 74 28 6a 51 75 65 72 79 28 74 68 69 73 29 29 2c 20 6a 51 75 65 72 79 28 74 68 69 73 29 2e 68 61 73 43 6c 61 73 73 28 22 63 6f 6c 75 6d 6e 73 5f 63 6f 75 6e 74 5f 31 22 29 2c 20 28 66 6c 75 69 64 5f 75 6c 20 3d 20 6a 51 75 65 72 79 28 74 68 69 73 29 2e 66 69 6e 64 28 22 2e 77 70 62 5f 74 68 75 6d 62 6e 61 69 6c 73 2d 66 6c 75 69 64 20 6c 69 22 29 29 2e 63 73 73 28 Data Ascii: !0 !== fluid_ul.data("carousel_enabled") && fluid_ul.is(":visible") && (fluid_ul.data("carousel_enabled", !0), getColumnsCount(jQuery(this)), jQuery(this).hasClass("columns_count_1"), (fluid_ul = jQuery(this).find(".wpb_thumbnails-fluid li")).css(
2024-04-16 15:05:32 UTC	1369	IN	Data Raw: 20 20 73 74 61 72 74 53 6c 69 64 65 3a 20 30 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 69 72 65 63 74 69 6f 6e 4e 61 76 3a 20 21 30 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 69 72 65 63 74 69 6f 6e 4e 61 76 48 69 64 65 3a 20 21 30 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 74 72 6f 6c 4e 61 76 3a 20 21 30 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6b 65 79 62 6f 61 72 64 4e 61 76 3a 20 21 31 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 75 73 65 4f 6e 48 6f 76 65 72 3a 20 21 30 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 6e 75 61 6c 41 64 76 61 6e 63 65 3a 20 21 31 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 72 65 76 54 65 78 74 3a 20 22 50 72 65 76 22 Data Ascii: startSlide: 0, directionNav: !0, directionNavHide: !0, controlNav: !0, keyboardNav: !1, pauseOnHover: !0, manualAdvance: !1, prevText: "Prev"
2024-04-16 15:05:32 UTC	1369	IN	Data Raw: 20 20 20 63 61 6c 6c 62 61 63 6b 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2d 31 20 3c 20 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 22 23 21 70 72 65 74 74 79 50 68 6f 74 6f 22 29 20 26 26 20 28 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 20 3d 20 22 22 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 6f 63 69 61 6c 5f 74 6f 6f 6c 73 3a 20 22 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 0a 20 20 20 20 20 20 20 20 7d 20 63 61 74 63 68 20 28 65 72 72 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 20 26 26 20 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 20 Data Ascii: callback: function() { -1 < location.href.indexOf("#!prettyPhoto") && (location.hash = "") }, social_tools: "" }) } catch (err) { window.console && window.console.warn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.11	49795	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:31 UTC	601	OUT	GET /wp-content/plugins/revslider6620n-1/public/assets/js/rbtools.min.js?ver=6.6.20 HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:34 UTC	602	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:33 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: public, max-age=604800 expires: Tue, 23 Apr 2024 15:05:33 GMT last-modified: Wed, 20 Dec 2023 12:52:54 GMT etag: W/"285db-6582e3a6-f60a82aa31415ff2;gz" platform: hostinger content-security-policy: upgrade-insecure-requests x-turbo-charged-by: LiteSpeed alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: f6e05f5991e29b2e9f26856215c6504f-asc-edge4 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 2.195
2024-04-16 15:05:34 UTC	767	IN	Data Raw: 39 38 37 64 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 65 5b 72 5d 29 72 65 74 75 72 6e 20 65 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 65 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 72 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 69 2e 6c 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 74 2c 6e 2e 63 3d 65 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 6e 2e 6f 28 74 2c 65 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 72 7d 29 7d 2c 6e Data Ascii: 987d!function(t){var e={};function n(r){if(e[r])return e[r].exports;var i=e[r]={i:r,l:!1,exports:{}};return t[r].call(i.exports,i,i.exports,n),i.l=!0,i.exports}n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:r})},n
2024-04-16 15:05:34 UTC	1369	IN	Data Raw: 28 29 7b 72 65 74 75 72 6e 20 74 2e 64 65 66 61 75 6c 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 7d 3b 72 65 74 75 72 6e 20 6e 2e 64 28 65 2c 22 61 22 2c 65 29 2c 65 7d 2c 6e 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 65 29 7d 2c 6e 2e 70 3d 22 22 2c 6e 28 6e 2e 73 3d 31 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 2e 65 78 70 6f 72 74 73 3d 6a 51 75 65 72 79 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 6e 28 32 29 2c 6e 28 36 29 2c 74 2e 65 78 70 6f 72 74 73 3d 6e 28 34 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 2c 73 3b 0a 2f Data Ascii: (){return t.default}:function(){return t};return n.d(e,"a",e),e},n.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},n.p="",n(n.s=1)}([function(t,e){t.exports=jQuery},function(t,e,n){n(2),n(6),t.exports=n(4)},function(t,e,n){var r,i,o,s;/
2024-04-16 15:05:34 UTC	1369	IN	Data Raw: 4d 3d 6e 75 6c 6c 2c 41 3d 30 2c 50 3d 30 2c 53 3d 30 2c 4f 3d 31 2c 6b 3d 30 2c 42 3d 30 2c 4c 3d 6e 75 6c 6c 2c 4e 3d 74 28 76 29 2c 52 3d 22 73 74 61 72 74 22 2c 58 3d 30 2c 59 3d 7b 7d 2c 49 3d 30 2c 7a 3d 30 2c 48 3d 30 2c 57 3d 30 2c 56 3d 30 2c 6a 3d 6e 75 6c 6c 2c 55 3d 6e 75 6c 6c 3b 74 72 79 7b 4e 2e 6f 6e 28 78 2c 71 29 2c 4e 2e 6f 6e 28 45 2c 51 29 7d 63 61 74 63 68 28 76 29 7b 74 2e 65 72 72 6f 72 28 22 65 76 65 6e 74 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 22 2b 78 2b 22 2c 22 2b 45 2b 22 20 6f 6e 20 6a 51 75 65 72 79 2e 73 77 69 70 65 22 29 7d 66 75 6e 63 74 69 6f 6e 20 71 28 6f 29 7b 69 66 28 21 30 21 3d 3d 4e 2e 64 61 74 61 28 6d 2b 22 5f 69 6e 74 6f 75 63 68 22 29 26 26 21 28 30 3c 74 28 6f 2e 74 61 72 67 65 74 29 2e 63 6c 6f 73 Data Ascii: M=null,A=0,P=0,S=0,O=1,k=0,B=0,L=null,N=t(v),R="start",X=0,Y={},I=0,z=0,H=0,W=0,V=0,j=null,U=null;try{N.on(x,q),N.on(E,Q)}catch(v){t.error("events not supported "+x+","+E+" on jQuery.swipe")}function q(o){if(!0!==N.data(m+"_intouch")&&!(0<t(o.target).clos
2024-04-16 15:05:34 UTC	1369	IN	Data Raw: 74 73 29 69 66 28 5f 2e 61 6c 6c 6f 77 50 61 67 65 53 63 72 6f 6c 6c 3d 3d 3d 6f 29 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 65 6c 73 65 7b 76 61 72 20 61 3d 22 61 75 74 6f 22 3d 3d 3d 5f 2e 61 6c 6c 6f 77 50 61 67 65 53 63 72 6f 6c 6c 3b 73 77 69 74 63 68 28 73 29 7b 63 61 73 65 20 65 3a 28 5f 2e 73 77 69 70 65 4c 65 66 74 26 26 61 7c 7c 21 61 26 26 5f 2e 61 6c 6c 6f 77 50 61 67 65 53 63 72 6f 6c 6c 21 3d 75 29 26 26 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 6e 3a 28 5f 2e 73 77 69 70 65 52 69 67 68 74 26 26 61 7c 7c 21 61 26 26 5f 2e 61 6c 6c 6f 77 50 61 67 65 53 63 72 6f 6c 6c 21 3d 75 29 26 26 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 72 3a Data Ascii: ts)if(_.allowPageScroll===o)t.preventDefault();else{var a="auto"===_.allowPageScroll;switch(s){case e:(_.swipeLeft&&a\|\|!a&&_.allowPageScroll!=u)&&t.preventDefault();break;case n:(_.swipeRight&&a\|\|!a&&_.allowPageScroll!=u)&&t.preventDefault();break;case r:
2024-04-16 15:05:34 UTC	1369	IN	Data Raw: 7d 66 75 6e 63 74 69 6f 6e 20 51 28 29 7b 53 3d 50 3d 49 3d 7a 3d 58 3d 30 2c 4f 3d 31 2c 64 74 28 29 2c 44 74 28 21 31 29 7d 66 75 6e 63 74 69 6f 6e 20 5a 28 74 29 7b 76 61 72 20 65 3d 74 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 3f 74 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 3a 74 3b 5f 2e 74 72 69 67 67 65 72 4f 6e 54 6f 75 63 68 4c 65 61 76 65 26 26 74 74 28 65 2c 52 3d 4a 28 66 29 29 7d 66 75 6e 63 74 69 6f 6e 20 24 28 29 7b 4e 2e 6f 66 66 28 78 2c 71 29 2c 4e 2e 6f 66 66 28 45 2c 51 29 2c 4e 2e 6f 66 66 28 77 2c 47 29 2c 4e 2e 6f 66 66 28 43 2c 4b 29 2c 46 26 26 4e 2e 6f 66 66 28 46 2c 5a 29 2c 44 74 28 21 31 29 7d 66 75 6e 63 74 69 6f 6e 20 4a 28 74 29 7b 76 61 72 20 65 3d 74 2c 6e 3d 69 74 28 29 2c 72 3d 6e 74 28 29 2c 69 3d 72 74 28 29 3b 72 65 Data Ascii: }function Q(){S=P=I=z=X=0,O=1,dt(),Dt(!1)}function Z(t){var e=t.originalEvent?t.originalEvent:t;_.triggerOnTouchLeave&&tt(e,R=J(f))}function $(){N.off(x,q),N.off(E,Q),N.off(w,G),N.off(C,K),F&&N.off(F,Z),Dt(!1)}function J(t){var e=t,n=it(),r=nt(),i=rt();re
2024-04-16 15:05:34 UTC	1369	IN	Data Raw: 5f 2e 73 77 69 70 65 44 6f 77 6e 26 26 28 68 3d 5f 2e 73 77 69 70 65 44 6f 77 6e 2e 63 61 6c 6c 28 4e 2c 6f 2c 54 2c 62 2c 41 2c 58 2c 59 2c 4d 29 29 7d 7d 7d 69 66 28 22 70 69 6e 63 68 22 3d 3d 6c 29 7b 69 66 28 4e 2e 74 72 69 67 67 65 72 28 22 70 69 6e 63 68 53 74 61 74 75 73 22 2c 5b 75 2c 42 7c 7c 6e 75 6c 6c 2c 6b 7c 7c 30 2c 41 7c 7c 30 2c 58 2c 4f 2c 59 5d 29 2c 5f 2e 70 69 6e 63 68 53 74 61 74 75 73 26 26 21 31 3d 3d 3d 28 68 3d 5f 2e 70 69 6e 63 68 53 74 61 74 75 73 2e 63 61 6c 6c 28 4e 2c 6f 2c 75 2c 42 7c 7c 6e 75 6c 6c 2c 6b 7c 7c 30 2c 41 7c 7c 30 2c 58 2c 4f 2c 59 29 29 29 72 65 74 75 72 6e 21 31 3b 69 66 28 75 3d 3d 66 26 26 6f 74 28 29 29 73 77 69 74 63 68 28 42 29 7b 63 61 73 65 22 69 6e 22 3a 4e 2e 74 72 69 67 67 65 72 28 22 70 69 6e 63 Data Ascii: _.swipeDown&&(h=_.swipeDown.call(N,o,T,b,A,X,Y,M))}}}if("pinch"==l){if(N.trigger("pinchStatus",[u,B\|\|null,k\|\|0,A\|\|0,X,O,Y]),_.pinchStatus&&!1===(h=_.pinchStatus.call(N,o,u,B\|\|null,k\|\|0,A\|\|0,X,O,Y)))return!1;if(u==f&&ot())switch(B){case"in":N.trigger("pinc
2024-04-16 15:05:34 UTC	1369	IN	Data Raw: 74 28 29 7b 72 65 74 75 72 6e 20 5f 2e 70 69 6e 63 68 53 74 61 74 75 73 7c 7c 5f 2e 70 69 6e 63 68 49 6e 7c 7c 5f 2e 70 69 6e 63 68 4f 75 74 7d 66 75 6e 63 74 69 6f 6e 20 61 74 28 29 7b 76 61 72 20 74 3d 69 74 28 29 2c 65 3d 6e 74 28 29 2c 6e 3d 6c 74 28 29 2c 72 3d 68 74 28 29 3b 72 65 74 75 72 6e 21 72 74 28 29 26 26 72 26 26 6e 26 26 65 26 26 74 7d 66 75 6e 63 74 69 6f 6e 20 75 74 28 29 7b 72 65 74 75 72 6e 20 5f 2e 73 77 69 70 65 7c 7c 5f 2e 73 77 69 70 65 53 74 61 74 75 73 7c 7c 5f 2e 73 77 69 70 65 4c 65 66 74 7c 7c 5f 2e 73 77 69 70 65 52 69 67 68 74 7c 7c 5f 2e 73 77 69 70 65 55 70 7c 7c 5f 2e 73 77 69 70 65 44 6f 77 6e 7d 66 75 6e 63 74 69 6f 6e 20 6c 74 28 29 7b 72 65 74 75 72 6e 20 58 3d 3d 3d 5f 2e 66 69 6e 67 65 72 73 7c 7c 5f 2e 66 69 6e 67 Data Ascii: t(){return _.pinchStatus\|\|_.pinchIn\|\|_.pinchOut}function at(){var t=it(),e=nt(),n=lt(),r=ht();return!rt()&&r&&n&&e&&t}function ut(){return _.swipe\|\|_.swipeStatus\|\|_.swipeLeft\|\|_.swipeRight\|\|_.swipeUp\|\|_.swipeDown}function lt(){return X===_.fingers\|\|_.fing
2024-04-16 15:05:34 UTC	1369	IN	Data Raw: 3d 4d 61 74 68 2e 61 74 61 6e 32 28 66 2c 63 29 2c 28 64 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 31 38 30 2a 70 2f 4d 61 74 68 2e 50 49 29 29 3c 30 26 26 28 64 3d 33 36 30 2d 4d 61 74 68 2e 61 62 73 28 64 29 29 2c 64 29 3b 72 65 74 75 72 6e 20 67 3c 3d 34 35 26 26 30 3c 3d 67 7c 7c 67 3c 3d 33 36 30 26 26 33 31 35 3c 3d 67 3f 65 3a 31 33 35 3c 3d 67 26 26 67 3c 3d 32 32 35 3f 6e 3a 34 35 3c 67 26 26 67 3c 31 33 35 3f 69 3a 72 7d 66 75 6e 63 74 69 6f 6e 20 46 74 28 29 7b 72 65 74 75 72 6e 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 7d 74 68 69 73 2e 65 6e 61 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 64 69 73 61 62 6c 65 28 29 2c 4e 2e 6f 6e 28 78 2c 71 29 2c 4e 2e 6f 6e 28 45 2c 51 29 2c 4e 7d 2c 74 68 69 Data Ascii: =Math.atan2(f,c),(d=Math.round(180*p/Math.PI))<0&&(d=360-Math.abs(d)),d);return g<=45&&0<=g\|\|g<=360&&315<=g?e:135<=g&&g<=225?n:45<g&&g<135?i:r}function Ft(){return(new Date).getTime()}this.enable=function(){return this.disable(),N.on(x,q),N.on(E,Q),N},thi
2024-04-16 15:05:34 UTC	1369	IN	Data Raw: 3a 35 30 30 2c 64 6f 75 62 6c 65 54 61 70 54 68 72 65 73 68 6f 6c 64 3a 32 30 30 2c 73 77 69 70 65 3a 6e 75 6c 6c 2c 73 77 69 70 65 4c 65 66 74 3a 6e 75 6c 6c 2c 73 77 69 70 65 52 69 67 68 74 3a 6e 75 6c 6c 2c 73 77 69 70 65 55 70 3a 6e 75 6c 6c 2c 73 77 69 70 65 44 6f 77 6e 3a 6e 75 6c 6c 2c 73 77 69 70 65 53 74 61 74 75 73 3a 6e 75 6c 6c 2c 70 69 6e 63 68 49 6e 3a 6e 75 6c 6c 2c 70 69 6e 63 68 4f 75 74 3a 6e 75 6c 6c 2c 70 69 6e 63 68 53 74 61 74 75 73 3a 6e 75 6c 6c 2c 63 6c 69 63 6b 3a 6e 75 6c 6c 2c 74 61 70 3a 6e 75 6c 6c 2c 64 6f 75 62 6c 65 54 61 70 3a 6e 75 6c 6c 2c 6c 6f 6e 67 54 61 70 3a 6e 75 6c 6c 2c 68 6f 6c 64 3a 6e 75 6c 6c 2c 74 72 69 67 67 65 72 4f 6e 54 6f 75 63 68 45 6e 64 3a 21 30 2c 74 72 69 67 67 65 72 4f 6e 54 6f 75 63 68 4c 65 61 Data Ascii: :500,doubleTapThreshold:200,swipe:null,swipeLeft:null,swipeRight:null,swipeUp:null,swipeDown:null,swipeStatus:null,pinchIn:null,pinchOut:null,pinchStatus:null,click:null,tap:null,doubleTap:null,longTap:null,hold:null,triggerOnTouchEnd:!0,triggerOnTouchLea
2024-04-16 15:05:34 UTC	1369	IN	Data Raw: 2e 77 61 69 74 46 6f 72 49 6d 61 67 65 73 2e 68 61 73 49 6d 61 67 65 50 72 6f 70 65 72 74 69 65 73 7c 7c 5b 5d 2c 61 3d 2f 75 72 6c 5c 28 28 5b 27 22 5d 3f 29 28 2e 2a 3f 29 5c 31 5c 29 2f 67 3b 69 2e 66 69 6e 64 28 22 2a 22 29 2e 65 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 6e 28 74 68 69 73 29 3b 74 2e 69 73 28 22 69 6d 67 3a 75 6e 63 61 63 68 65 64 22 29 26 26 6f 2e 70 75 73 68 28 7b 73 72 63 3a 74 2e 61 74 74 72 28 22 73 72 63 22 29 2c 65 6c 65 6d 65 6e 74 3a 74 5b 30 5d 7d 29 2c 6e 2e 65 61 63 68 28 73 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 72 2c 69 3d 74 2e 63 73 73 28 6e 29 3b 69 66 28 21 69 29 72 65 74 75 72 6e 21 30 3b 66 6f 72 28 3b 72 3d 61 2e 65 78 65 63 28 69 29 3b 29 6f 2e 70 75 73 68 28 7b 73 72 Data Ascii: .waitForImages.hasImageProperties\|\|[],a=/url$(['"]?)(.?)\1$/g;i.find("").each((function(){var t=n(this);t.is("img:uncached")&&o.push({src:t.attr("src"),element:t[0]}),n.each(s,(function(e,n){var r,i=t.css(n);if(!i)return!0;for(;r=a.exec(i);)o.push({sr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.11	49796	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:31 UTC	597	OUT	GET /wp-content/plugins/revslider6620n-1/public/assets/js/rs6.min.js?ver=6.6.20 HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:33 UTC	602	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:32 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: public, max-age=604800 expires: Tue, 23 Apr 2024 15:05:32 GMT last-modified: Wed, 20 Dec 2023 12:52:54 GMT etag: W/"642f9-6582e3a6-b2a5c02beadc9db2;gz" platform: hostinger content-security-policy: upgrade-insecure-requests x-turbo-charged-by: LiteSpeed alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: c433f89d9b75609165a1346a9d8269a2-asc-edge4 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 1.050
2024-04-16 15:05:33 UTC	767	IN	Data Raw: 31 63 36 33 34 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 54 2c 43 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 41 28 29 7b 54 28 22 62 6f 64 79 22 29 2e 64 61 74 61 28 22 72 73 2d 66 75 6c 6c 53 63 72 65 65 6e 4d 6f 64 65 22 2c 21 54 28 22 62 6f 64 79 22 29 2e 64 61 74 61 28 22 72 73 2d 66 75 6c 6c 53 63 72 65 65 6e 4d 6f 64 65 22 29 29 2c 54 28 22 62 6f 64 79 22 29 2e 64 61 74 61 28 22 72 73 2d 66 75 6c 6c 53 63 72 65 65 6e 4d 6f 64 65 22 29 26 26 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 44 2e 77 69 6e 64 6f 77 2e 74 72 69 67 67 65 72 28 22 72 65 73 69 7a 65 22 29 7d 2c 32 30 30 29 7d 66 75 6e 63 74 69 6f 6e 20 50 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 54 28 30 3d 3d 74 3f 65 3a 28 31 3d 3d 74 3f 65 3a 28 32 Data Ascii: 1c634!function(T,C){"use strict";function A(){T("body").data("rs-fullScreenMode",!T("body").data("rs-fullScreenMode")),T("body").data("rs-fullScreenMode")&&setTimeout(function(){D.window.trigger("resize")},200)}function P(e,t){return T(0==t?e:(1==t?e:(2
2024-04-16 15:05:33 UTC	1369	IN	Data Raw: 6c 3d 3d 3d 44 5b 65 5d 7c 7c 6e 75 6c 6c 3d 3d 3d 44 5b 65 5d 2e 63 7c 7c 44 5b 65 5d 2e 63 3d 3d 3d 43 7c 7c 30 3d 3d 3d 44 5b 65 5d 2e 6c 65 6e 67 74 68 3f 28 45 28 65 29 2c 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 44 5b 65 5d 2e 63 64 69 6e 74 29 29 3a 28 44 5b 65 5d 2e 63 2e 74 72 69 67 67 65 72 28 22 72 65 76 6f 6c 75 74 69 6f 6e 2e 73 6c 69 64 65 2e 73 6c 69 64 65 61 74 65 6e 64 22 29 2c 31 3d 3d 44 5b 65 5d 2e 63 2e 64 61 74 61 28 22 63 6f 6e 74 68 6f 76 65 72 63 68 61 6e 67 65 64 22 29 26 26 28 44 5b 65 5d 2e 63 6f 6e 74 68 6f 76 65 72 3d 44 5b 65 5d 2e 63 2e 64 61 74 61 28 22 63 6f 6e 74 68 6f 76 65 72 22 29 2c 44 5b 65 5d 2e 63 2e 64 61 74 61 28 22 63 6f 6e 74 68 6f 76 65 72 63 68 61 6e 67 65 64 22 2c 30 29 29 2c 44 2e 63 61 6c 6c 69 6e 67 4e Data Ascii: l===D[e]\|\|null===D[e].c\|\|D[e].c===C\|\|0===D[e].length?(E(e),clearInterval(D[e].cdint)):(D[e].c.trigger("revolution.slide.slideatend"),1==D[e].c.data("conthoverchanged")&&(D[e].conthover=D[e].c.data("conthover"),D[e].c.data("conthoverchanged",0)),D.callingN
2024-04-16 15:05:33 UTC	1369	IN	Data Raw: 70 2e 74 6f 28 44 5b 65 5d 2e 70 72 6f 67 72 65 73 73 43 42 61 72 49 6e 6e 65 72 5b 72 5d 2c 44 5b 65 5d 2e 64 75 72 61 74 69 6f 6e 2f 31 65 33 2c 7b 74 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 3a 22 62 6f 74 74 6f 6d 22 3d 3d 3d 44 5b 65 5d 2e 70 72 6f 67 72 65 73 73 42 61 72 2e 76 65 72 74 69 63 61 6c 3f 22 35 30 25 20 31 30 30 25 22 3a 22 35 30 25 20 30 25 22 2c 66 6f 72 63 65 33 44 3a 22 61 75 74 6f 22 2c 73 63 61 6c 65 59 3a 31 2c 6f 6e 43 6f 6d 70 6c 65 74 65 3a 74 2c 64 65 6c 61 79 3a 2e 35 2c 65 61 73 65 3a 44 5b 65 5d 2e 70 72 6f 67 72 65 73 73 42 61 72 2e 65 61 73 65 7d 29 29 2c 22 6d 6f 64 75 6c 65 22 3d 3d 3d 44 5b 65 5d 2e 70 72 6f 67 72 65 73 73 42 61 72 2e 62 61 73 65 64 6f 6e 29 66 6f 72 28 6f 3d 30 3b 6f 3c 44 5b 65 5d 2e 73 6c 69 64 65 Data Ascii: p.to(D[e].progressCBarInner[r],D[e].duration/1e3,{transformOrigin:"bottom"===D[e].progressBar.vertical?"50% 100%":"50% 0%",force3D:"auto",scaleY:1,onComplete:t,delay:.5,ease:D[e].progressBar.ease})),"module"===D[e].progressBar.basedon)for(o=0;o<D[e].slide
2024-04-16 15:05:33 UTC	1369	IN	Data Raw: 22 72 65 76 6f 6c 75 74 69 6f 6e 2e 73 6c 69 64 65 2e 74 61 62 66 6f 63 75 73 65 64 22 29 7d 29 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 64 6f 63 75 6d 65 6e 74 2e 68 61 73 46 6f 63 75 73 28 29 7c 7c 54 28 22 2e 72 65 76 5f 72 65 64 72 61 77 5f 6f 6e 5f 62 6c 75 72 66 6f 63 75 73 22 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 69 64 3b 44 5b 74 5d 2e 77 69 6e 64 6f 77 66 6f 63 75 73 65 64 3d 21 31 2c 44 5b 74 5d 2e 6c 61 73 74 73 6c 69 64 65 72 73 74 61 74 75 73 3d 44 5b 74 5d 2e 73 6c 69 64 65 72 73 74 61 74 75 73 2c 44 5b 74 5d 2e 63 2e 72 65 76 70 61 75 73 65 28 29 2c 44 5b 74 5d 2e 63 2e 74 72 69 67 67 65 72 28 22 72 65 76 6f 6c 75 74 69 6f 6e 2e 73 6c 69 64 65 2e 74 61 62 62 6c 75 72 65 64 22 29 Data Ascii: "revolution.slide.tabfocused")}))})}function a(){document.hasFocus()\|\|T(".rev_redraw_on_blurfocus").each(function(e){var t=this.id;D[t].windowfocused=!1,D[t].lastsliderstatus=D[t].sliderstatus,D[t].c.revpause(),D[t].c.trigger("revolution.slide.tabblured")
2024-04-16 15:05:33 UTC	1369	IN	Data Raw: 77 2e 52 53 42 72 6f 77 73 65 72 2c 44 2e 67 65 74 42 79 54 61 67 3d 73 28 29 2c 44 5b 74 5d 2e 69 6e 64 65 78 68 65 6c 70 65 72 3d 30 2c 44 5b 74 5d 2e 66 75 6c 6c 53 63 72 65 65 6e 4f 66 66 73 65 74 52 65 73 75 6c 74 3d 30 2c 44 5b 74 5d 2e 6c 65 76 65 6c 3d 30 2c 44 5b 74 5d 2e 72 74 6c 3d 54 28 22 62 6f 64 79 22 29 2e 68 61 73 43 6c 61 73 73 28 22 72 74 6c 22 29 7c 7c 22 72 74 6c 22 3d 3d 64 6f 63 75 6d 65 6e 74 2e 64 69 72 2c 44 5b 74 5d 2e 5f 4c 3d 44 5b 74 5d 2e 5f 4c 3d 3d 3d 43 3f 7b 7d 3a 44 5b 74 5d 2e 5f 4c 2c 44 5b 74 5d 2e 65 6d 70 74 79 4f 62 6a 65 63 74 3d 22 7b 7d 22 2c 44 5b 74 5d 2e 64 69 6d 65 6e 73 69 6f 6e 52 65 43 68 65 63 6b 3d 7b 7d 2c 44 2e 67 6c 6f 62 61 6c 4c 69 73 74 65 6e 65 72 3d 3d 3d 43 26 26 44 2e 70 61 67 65 48 61 6e 64 Data Ascii: w.RSBrowser,D.getByTag=s(),D[t].indexhelper=0,D[t].fullScreenOffsetResult=0,D[t].level=0,D[t].rtl=T("body").hasClass("rtl")\|\|"rtl"==document.dir,D[t]._L=D[t]._L===C?{}:D[t]._L,D[t].emptyObject="{}",D[t].dimensionReCheck={},D.globalListener===C&&D.pageHand
2024-04-16 15:05:33 UTC	1369	IN	Data Raw: 76 69 67 61 74 69 6f 6e 2e 74 68 75 6d 62 6e 61 69 6c 73 2e 65 6e 61 62 6c 65 7c 7c 44 5b 74 5d 2e 6e 61 76 69 67 61 74 69 6f 6e 2e 74 61 62 73 2e 65 6e 61 62 6c 65 29 2c 44 5b 74 5d 2e 63 2e 66 69 6e 64 28 22 72 73 2d 62 67 76 69 64 65 6f 22 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 52 53 2d 42 47 56 49 44 45 4f 22 21 3d 3d 74 68 69 73 2e 74 61 67 4e 61 6d 65 7c 7c 74 68 69 73 2e 69 64 21 3d 3d 43 26 26 22 22 21 3d 3d 74 68 69 73 2e 69 64 7c 7c 28 74 68 69 73 2e 69 64 3d 22 72 73 2d 62 67 2d 76 69 64 65 6f 2d 22 2b 4d 61 74 68 2e 72 6f 75 6e 64 28 31 65 36 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 29 7d 29 2c 74 70 47 53 2e 66 6f 72 63 65 33 44 3d 22 61 75 74 6f 22 2c 21 30 3d 3d 3d 44 5b 74 5d 2e 6d 6f 64 61 6c 2e 75 73 65 41 73 4d 6f Data Ascii: vigation.thumbnails.enable\|\|D[t].navigation.tabs.enable),D[t].c.find("rs-bgvideo").each(function(){"RS-BGVIDEO"!==this.tagName\|\|this.id!==C&&""!==this.id\|\|(this.id="rs-bg-video-"+Math.round(1e6*Math.random()))}),tpGS.force3D="auto",!0===D[t].modal.useAsMo
2024-04-16 15:05:33 UTC	1369	IN	Data Raw: 49 6e 64 65 78 65 73 26 26 44 2e 75 70 64 61 74 65 4e 61 76 49 6e 64 65 78 65 73 28 74 29 2c 69 3c 3d 44 5b 74 5d 2e 70 72 5f 61 63 74 69 76 65 5f 6b 65 79 29 26 26 28 44 5b 74 5d 2e 70 72 5f 61 63 74 69 76 65 5f 6b 65 79 3d 44 5b 74 5d 2e 70 72 5f 61 63 74 69 76 65 5f 6b 65 79 2d 31 29 7d 29 7d 2c 72 65 76 61 64 64 63 61 6c 6c 62 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 44 5b 74 68 69 73 2e 69 64 5d 26 26 28 44 5b 74 68 69 73 2e 69 64 5d 2e 63 61 6c 6c 42 61 63 6b 41 72 72 61 79 3d 3d 3d 43 26 26 28 44 5b 74 68 69 73 2e 69 64 5d 2e 63 61 6c 6c 42 61 63 6b 41 72 72 61 79 3d 5b 5d 29 2c 44 5b 74 68 69 73 2e 69 64 5d 2e 63 61 6c 6c 42 61 63 6b 41 72 72 61 79 2e 70 75 Data Ascii: Indexes&&D.updateNavIndexes(t),i<=D[t].pr_active_key)&&(D[t].pr_active_key=D[t].pr_active_key-1)})},revaddcallback:function(e){return this.each(function(){D[this.id]&&(D[this.id].callBackArray===C&&(D[this.id].callBackArray=[]),D[this.id].callBackArray.pu
2024-04-16 15:05:33 UTC	1369	IN	Data Raw: 20 6d 6f 75 73 65 65 6e 74 65 72 2c 6d 6f 75 73 65 6c 65 61 76 65 2c 20 72 65 73 69 7a 65 22 29 2c 44 5b 65 5d 2e 63 2e 66 69 6e 64 28 22 2a 22 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 54 28 74 68 69 73 29 3b 65 2e 6f 66 66 28 22 6f 6e 2c 20 68 6f 76 65 72 2c 20 6d 6f 75 73 65 65 6e 74 65 72 2c 6d 6f 75 73 65 6c 65 61 76 65 2c 6d 6f 75 73 65 6f 76 65 72 2c 20 72 65 73 69 7a 65 2c 72 65 73 74 61 72 74 74 69 6d 65 72 2c 20 73 74 6f 70 74 69 6d 65 72 22 29 2c 65 2e 64 61 74 61 28 22 6d 79 53 70 6c 69 74 54 65 78 74 22 2c 6e 75 6c 6c 29 2c 65 2e 64 61 74 61 28 22 63 74 6c 22 2c 6e 75 6c 6c 29 2c 65 2e 64 61 74 61 28 22 74 77 65 65 6e 22 29 21 3d 43 26 26 65 2e 64 61 74 61 28 22 74 77 65 65 6e 22 29 2e 6b 69 6c 6c 28 29 2c 65 2e Data Ascii: mouseenter,mouseleave, resize"),D[e].c.find("*").each(function(){var e=T(this);e.off("on, hover, mouseenter,mouseleave,mouseover, resize,restarttimer, stoptimer"),e.data("mySplitText",null),e.data("ctl",null),e.data("tween")!=C&&e.data("tween").kill(),e.
2024-04-16 15:05:33 UTC	1369	IN	Data Raw: 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3b 44 5b 74 68 69 73 2e 69 64 5d 21 3d 3d 43 26 26 28 28 65 3d 54 28 74 68 69 73 29 29 2e 64 61 74 61 28 22 63 6f 6e 74 68 6f 76 65 72 22 2c 30 29 2c 65 2e 64 61 74 61 28 22 63 6f 6e 74 68 6f 76 65 72 63 68 61 6e 67 65 64 22 2c 31 29 2c 65 2e 74 72 69 67 67 65 72 28 22 72 65 76 6f 6c 75 74 69 6f 6e 2e 73 6c 69 64 65 2e 6f 6e 72 65 73 75 6d 65 22 29 2c 44 5b 74 68 69 73 2e 69 64 5d 2e 74 6f 6e 70 61 75 73 65 3d 21 31 2c 65 2e 74 72 69 67 67 65 72 28 22 73 74 61 72 74 74 69 6d 65 72 22 29 29 7d 29 7d 2c 72 65 76 6d 6f 64 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 54 3f 74 68 69 73 5b Data Ascii: (){return this.each(function(){var e;D[this.id]!==C&&((e=T(this)).data("conthover",0),e.data("conthoverchanged",1),e.trigger("revolution.slide.onresume"),D[this.id].tonpause=!1,e.trigger("starttimer"))})},revmodal:function(e){var t=this instanceof T?this[
2024-04-16 15:05:33 UTC	1369	IN	Data Raw: 2c 7b 69 73 4e 75 6d 65 72 69 63 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 69 73 4e 61 4e 28 70 61 72 73 65 46 6c 6f 61 74 28 65 29 29 26 26 69 73 46 69 6e 69 74 65 28 65 29 7d 2c 74 72 69 6d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 21 3d 3d 43 26 26 6e 75 6c 6c 21 3d 3d 65 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 2e 74 72 69 6d 28 29 3a 65 7d 2c 73 65 74 43 6f 6f 6b 69 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 76 61 72 20 61 3d 6e 65 77 20 44 61 74 65 2c 69 3d 28 61 2e 73 65 74 54 69 6d 65 28 61 2e 67 65 74 54 69 6d 65 28 29 2b 36 30 2a 69 2a 36 30 2a 31 65 33 29 2c 22 65 78 70 69 72 65 73 3d 22 2b 61 2e 74 6f 55 54 43 53 74 72 69 6e 67 28 29 29 3b 64 6f 63 75 6d 65 6e 74 2e 63 Data Ascii: ,{isNumeric:function(e){return!isNaN(parseFloat(e))&&isFinite(e)},trim:function(e){return e!==C&&null!==e&&"string"==typeof e?e.trim():e},setCookie:function(e,t,i){var a=new Date,i=(a.setTime(a.getTime()+60i60*1e3),"expires="+a.toUTCString());document.c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.11	49797	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:31 UTC	619	OUT	GET /wp-content/uploads/2018/10/ganga.jpg HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:38 UTC	392	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:38 GMT Content-Type: image/webp Content-Length: 34352 Connection: close Cache-Control: public, max-age=31536000 X-Hcdn-Image-Optimizer: f:webp q:85 w:1600 alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 1a8f7deb37e52fd55b305818653d4057-asc-edge5 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 6.039 Accept-Ranges: bytes
2024-04-16 15:05:38 UTC	977	IN	Data Raw: 52 49 46 46 28 86 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 57 02 00 8f 01 00 56 50 38 20 84 85 00 00 d0 04 02 9d 01 2a 58 02 90 01 3e 51 26 8e 45 a3 a2 21 24 26 19 99 40 80 0a 09 4d 2c 97 8b 73 ec d9 60 7e 07 7c 25 c0 39 92 5d dd 3c 8b c8 f1 d7 90 8b 02 f0 d3 36 5f 21 10 4c e5 25 dd f4 75 76 88 db 46 e6 50 8d 7f ee 37 f0 23 e0 7f 85 fb 87 f7 8b e6 2f 5e f9 a2 74 57 fe 6f f1 be d1 3f e3 7f db f6 a9 fa af ff 57 b8 17 f4 7f ef 9e a4 ff e8 fe ec 7b dc ff 11 ff 2b d4 3f ed 2f ee 47 bc 1f fc 6f db 9f 73 1f df 7f dc fb 01 7f 52 ff 53 ff bb db 03 ff 57 b0 cf f9 df fc 3e c0 9f b9 5f ff fd 78 bf 78 bf fb 7c 9a 7f 76 ff 9f fb bb f0 2d fb 89 ff ff d8 03 ff 8f a8 07 fe de 96 ff 53 f2 99 f5 ef f5 3c 0b fc f7 db 97 dc cf f0 9f 40 1f c5 67 1f e2 ff cb ff d9 Data Ascii: RIFF(WEBPVP8XWVP8 *X>Q&E!$&@M,s`~\|%9]<6_!L%uvFP7#/^tWo?W{+?/GosRSW>_xx\|v-S<@g
2024-04-16 15:05:38 UTC	1369	IN	Data Raw: 60 d9 7d 29 f0 f8 d5 59 df 65 d0 01 ac 8d 5f e3 35 6c cf 28 e9 06 4b 72 fe 41 1c 67 85 d9 03 e5 77 de 62 63 10 22 e4 4a 8d f4 31 2a e0 08 90 b2 a9 a5 ff c8 d9 f7 72 bb e6 26 67 10 8a b0 de 6b 9a 55 63 36 4d 28 3a 93 04 ed a3 21 4e b8 2f bd 9a 45 78 e7 02 34 bc b3 37 4f e0 e3 cc 50 4e 86 40 bc dc 9d 00 98 3a 7e 67 9d 5c 3d 92 d5 7a 14 24 25 d0 59 2a 89 37 7b 31 f2 96 11 b6 90 f6 4a 1b 44 81 c0 5d 05 df 5f be 28 87 28 93 83 d0 7f 4e 0b 4c e3 65 bd af 7b 21 37 fb 11 cd 85 64 60 12 9b 06 9a 79 d8 e8 2d fd c6 01 61 c1 e2 29 01 1d 67 2a a5 7e 03 c1 c8 9e 38 0b a5 71 27 71 38 c5 73 c7 22 f3 b6 89 3d b3 48 8a e0 d5 85 bb 15 33 ff 71 ea 8c a2 28 13 44 bd 18 7d ae 84 f9 8c 97 13 c9 cd 6f 5b 85 73 2c 84 df 8d 1f 6c ec 53 b8 ca 18 df b3 69 4d b9 17 47 99 9f a0 9c 8a Data Ascii: `})Ye_5l(KrAgwbc"J1r&gkUc6M(:!N/Ex47OPN@:~g\=z$%Y7{1JD]_((NLe{!7d`y-a)g*~8q'q8s"=H3q(D}o[s,lSiMG
2024-04-16 15:05:38 UTC	1369	IN	Data Raw: 2d 59 02 dd 6d 7e 17 d6 6c d2 6b 92 b0 22 01 46 7a 0a 6b 94 27 1b 06 c5 b2 49 d4 a9 b1 98 68 f1 6a 86 13 ce fe d8 bf 5b 4b bc ac f2 e0 8f c1 c5 04 3c 0b 90 c1 44 ec aa 85 d0 3b a7 5b 91 f0 39 38 68 71 f9 59 2a 13 b6 9b dc 2f e1 b7 30 3e 49 6c ef 35 d3 a4 b5 db 9a 6e 5e 45 61 00 80 18 a6 40 50 ce 9b 0f a7 94 bb 18 70 41 46 20 bd 7d c3 0f 5f c2 22 71 e5 ac 14 ce 4b 11 e6 0d 4b cc d9 46 c1 c7 cc 9c c6 04 bd 31 8a 6e f8 2a 78 cc 4b dc 7d c3 3d 9b d1 f4 08 dc 44 0a 09 6e 69 57 03 fc 5f 1a 18 60 03 83 23 91 9e 7f 3a 7c f0 9b 50 86 60 be 0e 81 3c 1d b3 88 0e 12 87 8e ef 36 59 9a dc c1 bc 63 16 8c 80 6d 0b ae 4e 7b f5 8d e5 21 ea b3 21 6f 07 88 b5 8b 40 d1 55 6b 3d 78 a7 0a 6c 72 93 0d 5a 05 e5 d1 da 93 fd b7 e6 53 c0 ce 58 af 9b e7 e2 9e 36 69 83 da c2 40 b5 09 Data Ascii: -Ym~lk"Fzk'Ihj[K<D;[98hqY/0>Il5n^Ea@PpAF }_"qKKF1nxK}=DniW_`#:\|P`<6YcmN{!!o@Uk=xlrZSX6i@
2024-04-16 15:05:38 UTC	1369	IN	Data Raw: 8d 7b 8f aa 4c 33 8e ea 0c bc ac 7c 28 6a 9f 85 ba 8a b3 9f 71 3d 22 90 8b 69 09 bf 43 63 53 c3 49 23 40 80 c5 3e bc c6 13 77 ff 20 c3 e6 7e 08 6f d3 44 1e 0b 3d 4f 86 7d ab 16 61 a7 32 e6 43 0b 6b 97 6a f2 2d 40 b4 e5 c3 90 77 37 1c 45 89 a4 b2 e7 6a c4 fe 9e 9c e8 62 61 c7 03 ef 89 d0 c8 4d ad 31 b5 18 e7 ca c8 19 f4 48 02 cc d4 48 2d 15 46 71 40 ef b0 b6 5a 04 e1 a2 19 dd d5 d8 3d 3c 4d 1a a1 bc d7 eb f2 ff 3e 5c ca 08 6b 6a 40 3f 10 39 dd 0c 7a 82 03 2e 12 30 04 3f b3 ee 7f 66 65 c3 cb 6d 19 a0 d7 da a9 10 74 f8 ce 8b 5d 58 2b ed 82 a3 ef fa 98 3b 03 c1 9d 7b c0 ea 3c 96 07 ad a2 6f 04 1b fc f1 04 72 d4 c5 5d 04 31 94 3a 53 ca 3e 0d 6d 2a db 43 2f 80 e7 b0 05 91 22 57 a1 cb 5d 97 a2 39 05 1e 18 77 1a ca c1 de 38 82 8d d5 c6 1c 16 87 b5 42 02 96 67 53 Data Ascii: {L3\|(jq="iCcSI#@>w ~oD=O}a2Ckj-@w7EjbaM1HH-Fq@Z=<M>\kj@?9z.0?femt]X+;{<or]1:S>m*C/"W]9w8BgS
2024-04-16 15:05:38 UTC	1369	IN	Data Raw: e1 1f fc e9 c8 c5 fa 69 37 b5 0b 1e 9a 15 b3 17 ac 50 73 f9 02 84 12 f7 97 59 2a ca 52 db 7d d4 bc 87 31 71 a2 11 75 49 78 f5 35 2a 17 c4 ea 20 10 40 6f a9 d0 03 65 19 93 e2 05 70 12 f2 45 22 cf 71 f9 fd 15 fb 5e bb 8f 3a dc 9d cb 59 48 eb 43 b4 b6 08 b6 b7 42 d8 d1 73 71 7c 38 69 19 8f a1 ba 82 b6 1f 36 e3 9e b2 2a 5e fc e0 04 85 99 8b 3d 87 a4 0c 49 b6 81 90 46 75 29 a9 67 41 88 b1 8c c9 c6 71 bd 7b 46 ee 3c b6 b1 b7 5f 81 bd a6 37 3f 47 f4 d7 20 4a ba 95 1b 97 dc e2 fd bb 86 a5 b7 da 00 6f b5 f5 f9 b1 81 74 b1 cb 2d 6c a3 b1 1c a1 e6 78 da 6c 55 39 72 ce 6d ab 19 ef 4d d3 a7 58 98 66 28 ce 0f d9 a6 e7 fd be bc f9 23 c0 77 3b 0d e1 a0 f3 80 31 02 c3 0a 1d 01 61 f1 d7 13 ad 05 6e e7 b6 ce 8b 64 14 db d7 9c cb c9 42 e7 29 bf de 12 22 be 5d 8e 08 f2 a1 f5 Data Ascii: i7PsYR}1quIx5 @oepE"q^:YHCBsq\|8i6*^=IFu)gAq{F<_7?G Jot-lxlU9rmMXf(#w;1andB)"]
2024-04-16 15:05:38 UTC	1369	IN	Data Raw: a7 c0 98 13 f2 ac 8d 55 93 9e 0c 31 e1 e7 9e 8f 18 f9 35 37 e5 f3 e5 db 23 58 8d 34 a5 2f 8d b1 15 16 20 12 c4 18 1c 0c ed 1a b2 4f 00 8c 46 52 7b 00 28 09 91 bf df 47 12 3c 2c 68 a6 70 df b3 aa 73 60 91 d1 80 df 76 ac 11 14 ec 3b 77 61 92 e9 86 27 98 94 4d 51 62 e1 01 f3 91 b0 e0 87 48 a7 2c ce c1 68 fe 84 b1 2f 2e 0f 2d ea a6 fe bf 80 8e b0 33 2f ec 42 93 11 0a 01 8e 90 06 0c 87 0e 13 b0 4b 8e a8 43 69 fb f4 96 18 70 6b ef ad c5 72 a7 30 db 1c 0a f0 cf 79 aa 87 dd 12 58 07 5a 6b fd 7d fb 2b c5 17 ee 80 44 96 70 5e c5 46 68 45 4e dd 09 89 27 53 72 5d 93 7c 9d bc 11 d8 02 9f 77 01 ee 0b 9c d2 b9 f9 85 4b c0 80 3f ce 86 f8 e6 08 75 7a 2f ce 82 1e e8 15 40 94 a5 29 ec 4f 38 03 ad 02 82 55 55 38 d2 f5 2d 6a 6c ae de 7f 1e 48 64 77 ee fd b8 bc e3 2b 1a ff d4 Data Ascii: U157#X4/ OFR{(G<,hps`v;wa'MQbH,h/.-3/BKCipkr0yXZk}+Dp^FhEN'Sr]\|wK?uz/@)O8UU8-jlHdw+
2024-04-16 15:05:38 UTC	1369	IN	Data Raw: e5 f8 c1 fd 89 02 7f bc 5c cf 88 99 37 b7 66 b7 e7 34 cd 79 11 6d 97 9a 73 dc 39 1b e0 3a b2 85 48 64 1a 58 b1 13 0c aa 90 34 b6 16 70 11 c0 98 83 5f f0 99 ae 06 34 e2 f8 11 8c ae ab 0d ac 81 40 a5 7b 25 bb 48 d6 cf a9 d0 18 79 20 8d 9e bb b5 6a 20 e8 95 39 fd b4 6d 64 f9 d3 e4 e3 38 ab 0c be c7 cd ac 34 5f 39 40 ce 0c 31 db c8 77 89 02 37 d9 7d f3 e2 dc 1e b2 ad 41 44 9f 2d 62 df 27 a9 ee 9a 98 3e 36 aa 00 90 05 a7 74 3e 29 52 c9 3b e1 9f 95 0f 89 7b a3 0e 58 80 62 09 14 40 c2 8a a6 7f 57 e1 df cd 56 98 39 88 85 4e 08 bf 07 45 92 d8 21 d1 2f f8 af 79 86 47 e7 f5 0e fb 20 f8 bb 64 38 2e 15 30 c9 79 52 53 7a a5 91 a6 51 f4 ad d9 4f 15 31 2a 05 36 64 00 9d d7 36 b5 54 89 67 94 90 ed ce cc 37 58 f1 76 6f 97 c4 a8 cd 42 b5 dd 47 62 e5 75 71 d8 08 cd 15 6a 55 Data Ascii: \7f4yms9:HdX4p_4@{%Hy j 9md84_9@1w7}AD-b'>6t>)R;{Xb@WV9NE!/yG d8.0yRSzQO1*6d6Tg7XvoBGbuqjU
2024-04-16 15:05:38 UTC	1369	IN	Data Raw: 89 80 30 71 bb 12 7c a2 ea a0 59 e1 ca 2e e8 6c c0 cd 32 16 51 04 e6 51 a7 12 c7 d6 74 96 0c fa c7 1a 1d e4 e1 9d 9b 48 d8 24 dd 4e 7d 3d 9d a4 63 f6 c2 5f 5d 8f 0d 33 49 05 23 d0 52 d1 0a cc 23 60 ff 53 02 3b 71 85 54 3e d0 ed 20 8e a9 6b a7 b6 ea 62 a7 d1 36 25 0c db 2a 10 27 ac 8f 30 0a 33 c6 f8 16 b0 6c b5 20 b6 94 48 f7 ab 2c 6a 50 ec f1 86 b1 38 b9 67 c0 40 29 12 78 d6 dd 95 9d 8a 2f 7c 42 a5 c2 e1 37 93 be e1 14 c9 10 50 4d 99 18 59 c9 56 ed ac a8 99 01 d1 26 dc ba ae 01 45 56 25 c0 e5 4d d1 3d a7 6f 53 89 2c 2d b0 d5 12 e8 f1 94 dc 01 be 68 c8 2e 4f a7 c9 88 c0 bc 54 31 a4 f9 c9 4b 37 af 10 0a 33 93 1c b9 e8 1e 9c 52 7c da 44 f5 60 3f 08 18 34 d5 6f f9 c6 de bb be 13 9b ff a2 26 66 35 54 0a a3 41 89 c6 c9 5b be 1d a8 98 18 69 f1 68 ae f2 50 12 2c Data Ascii: 0q\|Y.l2QQtH$N}=c_]3I#R#`S;qT> kb6%*'03l H,jP8g@)x/\|B7PMYV&EV%M=oS,-h.OT1K73R\|D`?4o&f5TA[ihP,
2024-04-16 15:05:38 UTC	1369	IN	Data Raw: 3a 94 e8 c0 6d 4f 73 d2 99 db 5e b4 bc c1 b9 c9 dd 6b c0 6e 5d b4 76 03 e7 6f c0 b7 bb 4a 9f 62 f3 a4 93 61 98 ca 31 20 f4 d6 1e fb 69 33 94 7e 27 1e 1a d2 2f 43 8e 4b da f2 35 03 22 18 ea 3f 7a 76 71 6f f0 94 57 c2 7d a1 15 36 53 df 8c 7b 96 0a cf 79 8e 9b d9 0d 17 38 83 10 89 20 bf 71 a1 bd fd a6 9d c4 f2 2f c5 2b 15 3d 47 b1 eb a5 ea e6 e4 42 59 d2 72 17 d5 23 b8 e9 25 d2 95 b7 75 cb 9a e5 37 d2 01 40 82 70 9a 47 e8 c3 fe 72 f0 ad 59 b8 5d dc de 7b fc f4 3d ea c0 3b 56 ee fd 0a 00 82 56 6c 83 30 5e b6 d9 da e5 e7 3a 2e 8f 59 2a ef 96 98 66 8a 26 cb 1a b8 03 48 a8 6e 94 24 a3 8f 21 5d 10 55 66 a9 89 92 a5 e2 89 32 dd a2 c3 07 2c 29 54 c7 83 38 70 2f 18 aa e9 19 df 2b 81 46 6d 2f 29 f4 e1 52 7c c8 87 97 d4 06 2c 09 a0 5f cf f8 dd 49 37 45 66 45 49 d5 43 Data Ascii: :mOs^kn]voJba1 i3~'/CK5"?zvqoW}6S{y8 q/+=GBYr#%u7@pGrY]{=;VVl0^:.Y*f&Hn$!]Uf2,)T8p/+Fm/)R\|,_I7EfEIC
2024-04-16 15:05:38 UTC	1369	IN	Data Raw: fc d4 bd 6b 34 e2 5c 86 7d 70 5a c6 6e b5 32 4a a5 ff 77 5f aa 79 b7 3e a8 f7 bb d4 f4 00 52 f6 0c e3 90 8e be e3 32 5a e2 f8 46 e7 55 fa 99 4c b6 72 34 94 01 37 30 09 ea ad 49 59 0a c7 8b bf d0 e8 35 a7 c7 d4 05 c7 80 66 3b 29 e5 6b 35 20 2d 73 f9 d4 ff b9 c5 ae 79 dc a7 e9 66 07 e7 76 cc fe 29 b3 ca ab f4 70 ba 36 47 10 f0 e9 85 90 52 49 b7 c6 38 34 90 69 4e 4e 20 96 80 a8 62 71 85 86 89 e3 7b e6 37 89 aa 14 cf 75 a4 5f 82 ac 6f 2f 0c e8 18 af 8f 81 97 f4 ab 82 9c 67 39 78 ce 6d a5 86 9a 1b 28 ef 96 ce 05 7f 6d bf 8c 08 0d 13 0a 27 a3 9e 81 67 51 7e 6b 88 a8 d3 ca ff ee 67 90 3c 10 c1 47 b4 ac c2 e0 01 15 53 51 18 46 e9 e0 78 09 b2 97 3e 17 2c 76 5e 94 42 3d a8 10 6f 48 e4 8b dd 47 5d e0 66 4d 51 b9 91 be c3 d0 44 7f 34 e7 c7 05 09 ea 5a 1f c5 d0 a8 25 Data Ascii: k4\}pZn2Jw_y>R2ZFULr470IY5f;)k5 -syfv)p6GRI84iNN bq{7u_o/g9xm(m'gQ~kg<GSQFx>,v^B=oHG]fMQD4Z%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.11	49798	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:32 UTC	620	OUT	GET /wp-content/uploads/2018/10/nepal1.jpg HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:37 UTC	392	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:37 GMT Content-Type: image/webp Content-Length: 57344 Connection: close Cache-Control: public, max-age=31536000 X-Hcdn-Image-Optimizer: f:webp q:85 w:1600 alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: e693c1fe3097fa58d08ec39fe54889f0-asc-edge4 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 5.062 Accept-Ranges: bytes
2024-04-16 15:05:37 UTC	977	IN	Data Raw: 52 49 46 46 f8 df 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 57 02 00 8f 01 00 56 50 38 20 54 df 00 00 b0 4f 02 9d 01 2a 58 02 90 01 3e 51 20 8c 44 23 a2 21 24 ae 39 fa f8 90 0a 09 67 6e 0a bf 3b cc 0a b8 0d 42 bd 6c 1a 09 ee 37 ae 6a 91 ef 91 7f c9 c2 3e c9 4d af 20 ae 46 1d cb 9c 1f bc f7 be f4 c5 ce 57 d5 b7 9a 9f 3a 7f 3b 8f 49 9e ab 2d ea bf ec b9 1c fe f3 f3 b7 f4 8f b7 7e 08 fe 65 f4 7f ea 3f c0 7f 9a ff ab fe 4f dc c3 1c 7e f5 fd df fe 7f 40 ff 9e fe 46 fe 37 f8 6f 6a 9f cf 7f d9 ff 31 f9 69 e8 9f c7 6f f4 bf c9 7e 5c fc 82 fe 4f fd 03 fd 6f f7 cf 56 1f b1 ff cf fe 67 fe 8f 7f e6 d3 fe 6f ff 17 fa cf 60 5f 66 fe c1 ff 37 fc 5f fa 3f da ef 8b bf b7 ff d5 e8 77 ee 7f eb 7f f3 7b 80 ff 49 fe ef ff 67 fc 97 b7 3f f5 fc 14 ff 37 ff 23 f6 e7 Data Ascii: RIFFWEBPVP8XWVP8 TO*X>Q D#!$9gn;Bl7j>M FW:;I-~e?O~@F7oj1io~\OoVgo`_f7_?w{Ig?7#
2024-04-16 15:05:37 UTC	1369	IN	Data Raw: dc d7 81 8f 9a b4 84 ef 7f ac 18 8f 64 d2 d5 12 99 5b f1 91 03 f6 3a ef be d6 4f 2f 94 1e 26 65 64 d5 1d 69 88 e8 a6 f4 3d 1f 28 3f 18 72 f3 ba b4 f4 68 1c fe dd 4a bb ab 63 ff 93 35 df 66 ec 7f 4a 58 b3 73 37 56 df fe 97 65 7c ce 69 16 54 24 1a 2a 7c 96 93 f6 6c 27 a5 a8 1c d6 d1 de b1 1b 61 23 65 e2 0c b5 63 58 cf a1 33 1b c9 f0 78 c0 35 87 1a cf 38 99 73 2d 49 b2 ca ed 4d ad cb e9 ab fd 75 b2 89 a1 4b 84 df ee fa e0 81 8c 4f 28 4d 1a ea 8f f6 6c 09 d5 7b 23 ac 5c 9f a4 d2 77 e5 dc 4a d6 c6 19 c8 c5 e9 73 59 2e 9d 9a aa ca 1e dd c9 48 6d bc 0f 7d 09 32 45 ab fe 4e e2 98 96 2d 02 1c ae fb b2 d9 91 7c 6b a4 5d 3d 34 08 62 63 52 d3 5c 61 9e 81 22 e5 64 91 6d 23 b8 4f 7a ef fd 52 03 d9 63 fa 7e 87 a5 2f e3 d0 ef dd 6b d1 fc c5 88 70 b5 dc b5 f9 8c 3b d4 c0 Data Ascii: d[:O/&edi=(?rhJc5fJXs7Ve\|iT$*\|l'a#ecX3x58s-IMuKO(Ml{#\wJsY.Hm}2EN-\|k]=4bcR\a"dm#OzRc~/kp;
2024-04-16 15:05:37 UTC	1369	IN	Data Raw: 2d 0e a7 f5 35 54 cd c4 35 55 f8 08 3b 4a 5f be 9d 0d 5b d6 fa 7a 24 da da cc 52 0e 41 8a 4c 93 0f c7 d5 74 b9 68 f9 34 b0 cb 5d 58 fa c4 00 c7 9a 3f e2 ec ce 93 56 85 90 db ab 8b da b8 8f 50 d7 7e 2c 11 06 0f 71 f0 9b c1 37 80 70 6f d3 3f 9e 59 58 90 39 70 43 db 2f 86 67 97 99 76 5e ec d8 c8 1b d5 da 69 d5 66 25 a8 53 26 6d 58 5e 98 f0 e7 61 03 d8 2b 00 b9 da cf 74 6f 2d 2c a5 7e 96 f9 6e 30 a9 f8 b4 f0 e9 f1 93 a5 5e fb 90 e0 7a 7c 11 75 4e 1b b5 54 35 77 b3 dd 3b 7d 6b a2 7b 05 32 e1 27 7f ec 76 11 7e 6c 32 10 10 e9 af 5d ea cd 7d 0e 98 56 d4 5b dc 53 30 51 1b 4d a9 c6 8d 81 a1 6e 0b 68 05 bc 8f 92 bd e4 da 9e 26 48 5c d3 3a 25 b3 08 c6 a6 d2 72 fd 78 e4 45 f7 05 69 88 ec f0 d3 07 f3 b7 fa 57 20 af 7b 47 a6 50 b0 b7 d4 a9 13 86 8b 16 33 a8 4b 53 68 4e Data Ascii: -5T5U;J_[z$RALth4]X?VP~,q7po?YX9pC/gv^if%S&mX^a+to-,~n0^z\|uNT5w;}k{2'v~l2]}V[S0QMnh&H\:%rxEiW {GP3KShN
2024-04-16 15:05:37 UTC	1369	IN	Data Raw: 20 0c 44 0d 59 c6 ce 08 bd 9a fb 79 cd a4 aa 5d 61 7c d0 c7 c0 6b 46 30 cb 2e 6d cb a8 32 57 fb 1d cd 96 a5 db 3b 92 fd fd 92 ee 2f e1 eb d8 bd ce 3e 3d e8 96 c0 70 3c 98 69 4f ee 4f fc 85 f9 7c 29 92 fe 49 15 30 3f bf fe c4 01 fd 95 fd 66 1f 16 d5 a7 91 6c 87 28 30 30 d9 2d ae e6 eb 4b c0 2a f9 2f d7 e9 fb bf e0 d6 34 f4 a2 e9 08 a3 7c b6 5c fa 55 ae 3a 83 bf 0e 72 44 a3 2b 04 0d 3e 9e 9a d1 0b 4e 1a a5 e2 d9 bf 32 a3 91 94 96 ad 3a 29 eb 58 a6 a4 5c 9b 61 c8 52 1a 8a d5 10 42 5f 77 04 ab c5 9f cf de 57 d8 de ee ec 28 a8 12 a9 40 e9 f0 bf 1d 0f 06 6a ad 4c 6c be 78 ca f9 03 f1 33 d8 4a 0c 60 06 e2 74 9c 70 f6 ca 99 8f 1a cc 77 2d 29 2e fc f6 90 ea 09 01 dc be ad b7 76 02 e9 9d ff 95 eb 50 d6 2c 6e 61 27 ae 52 2b af b7 de b3 55 7a 98 a8 83 b2 31 eb e5 48 Data Ascii: DYy]a\|kF0.m2W;/>=p<iOO\|)I0?fl(00-K*/4\|\U:rD+>N2:)X\aRB_wW(@jLlx3J`tpw-).vP,na'R+Uz1H
2024-04-16 15:05:37 UTC	1369	IN	Data Raw: 1e dc 83 c1 b7 f0 46 18 07 97 ba 13 fe 73 e2 b6 26 b0 b7 85 b2 32 28 ac 62 91 1d d5 0d 3d 08 99 f4 d8 5d 3a 55 2e 5b 8e 40 fe d9 cf 4a da 34 00 20 63 ca 56 14 b1 57 7d 00 5c 91 ea 14 d6 4f 23 1c 31 dc ef f8 aa 2a 22 fc 62 56 bd 67 01 01 1b c1 e8 02 dd 6e 55 05 bb 02 92 03 fa 2e 76 86 d1 fc 59 0d 6a 7a 05 8e 8e 86 04 c1 09 ab 0c 83 47 96 28 60 03 79 ee 85 95 e5 67 cd 8f 70 ef 88 30 d5 73 42 7b ce 6e 2f d6 72 06 0c bc d6 f0 ba 9f 2d 48 43 21 e4 00 5e 78 9f 0e 75 39 79 e2 d6 96 cf 91 8c e0 d8 39 d3 63 e4 76 e9 e4 aa 5a 6d d6 ea 24 bf 80 b1 15 ce 68 f9 8a 44 f5 fa d5 14 27 19 1a 17 f2 ae 4e 5c 6a 67 10 89 2a 85 ad 8f b7 b6 9e 56 9b cd 18 ff 5a 6d 23 5f f1 2f 15 f5 8e e7 0c ec 0c 20 26 2e 86 cc 94 8a a1 4d 4b 14 58 3d 1e 96 1c 0e d9 78 d7 49 ce 11 4c 9d 18 73 Data Ascii: Fs&2(b=]:U.[@J4 cVW}\O#1"bVgnU.vYjzG(`ygp0sB{n/r-HC!^xu9y9cvZm$hD'N\jgVZm#_/ &.MKX=xILs
2024-04-16 15:05:37 UTC	1369	IN	Data Raw: 0d 8b ad 16 72 90 20 27 2a bf b4 09 1c 86 d7 5e 00 82 24 2e ae 2e 76 46 1a d7 3b 2f 00 69 a3 93 a4 6b 28 7f 0f 64 84 2f c0 56 eb a8 c4 4b 8f f6 29 2b 49 39 f2 5c 14 52 e3 56 90 43 c1 fa ac 87 1c 6b 11 52 77 9b f1 e0 5c 89 fb 86 2c b8 76 09 b7 64 31 b5 af 15 06 a1 6c c2 2a 05 a7 a3 a0 08 dd 46 de ca 81 60 cc fb 02 d8 97 9a 79 9b 60 27 19 09 bb 41 b8 97 3e 74 c1 72 d4 d7 64 b3 57 cb 71 92 a3 be dc 75 4a 39 97 38 70 56 f2 ad 4e ba 91 ea 57 3a 76 78 2d 94 19 73 30 ff 8c e6 80 2f 11 f8 86 a0 01 83 25 58 b8 a2 58 bc 41 7f 62 04 66 e1 27 27 ff 0e ea 3c be be 51 d4 f0 a4 d2 b5 3f 5e e4 f5 77 8f cd ea 58 d2 15 cb de 25 f4 8f da 09 59 2b 44 ab a4 36 02 c5 7d b9 18 15 ea 07 18 81 fc ee eb f5 cb 40 b0 b2 a6 8e 04 7f b1 2c a4 69 b3 48 77 02 1c 17 7c 8c ea f0 57 42 b0 Data Ascii: r '^$..vF;/ik(d/VK)+I9\RVCkRw\,vd1lF`y`'A>trdWquJ98pVNW:vx-s0/%XXAbf''<Q?^wX%Y+D6}@,iHw\|WB
2024-04-16 15:05:37 UTC	1369	IN	Data Raw: 5c e0 98 8d 8b 5d f4 07 b9 de ce a1 20 5d 85 ef 79 cd 30 f5 66 d3 a3 ea 7a 55 b0 2b 74 7d 62 be e4 ba 4b 2e 32 e4 76 03 49 be d0 6d 29 3c 9c b9 29 fa fd 9b d6 0b 31 64 c0 4c 8a d0 be 30 c0 ca 85 44 38 ba a4 de bd d6 66 f1 8a e5 3a d0 3d 93 66 e8 90 b4 36 f7 e9 31 f1 d9 bc 6f 5c ee 01 62 38 1f c9 cb 46 e8 30 ee d5 1e 20 c0 5f 18 01 5f af aa b1 3b 18 0d 17 73 eb 16 d9 df 55 b9 50 ce c7 3a 4e 54 a7 d1 4d 6f b2 8f 37 2f e0 f9 e9 a0 fc 0d e6 c3 b4 d5 12 4e 4f a5 2f 06 94 c4 ca 66 37 df 7c ae b2 70 ee ee e6 69 df 2a 56 cd 2d ff 8c 75 62 94 68 c7 83 a7 74 af 25 1e 12 2b 64 13 56 2b ac d9 64 59 72 dd 42 3a 97 d2 16 51 6a 33 bf 24 b8 7f 8c c6 0b ea 3b 4f fe 4c 29 6c 45 9c 81 99 fd 49 2e 90 65 d8 83 a6 27 8c f6 bd 77 4b ff ec cc 82 5e 5d 29 c4 38 6f 3c f0 14 86 ce Data Ascii: \] ]y0fzU+t}bK.2vIm)<)1dL0D8f:=f61o\b8F0 __;sUP:NTMo7/NO/f7\|pi*V-ubht%+dV+dYrB:Qj3$;OL)lEI.e'wK^])8o<
2024-04-16 15:05:38 UTC	1369	IN	Data Raw: 6d 8c bd 95 87 e5 5f 7c 89 fe 39 c2 5b cf af b5 e0 ed b0 1e f9 b9 5c 4f de 9e b3 2c b6 4b c7 5e 09 41 67 ce b4 96 5d 6a e7 c9 8e 8a 53 17 c4 a5 7b a4 62 b5 ef bb 19 c1 5a e2 a9 d7 19 bc 6b 88 bd 82 1d 56 a1 6a 11 3b 76 2c fc 16 3c 61 83 92 60 7d 2c 0a a4 05 dc f4 4b 2a b1 ad 07 e3 b8 83 45 7e 0f f2 58 5e 08 1f 5d 62 9c 56 d0 a6 9a 30 59 4d e4 fe e2 cc 9b e0 6a 43 07 10 26 f6 f8 43 8b 86 72 4d e6 3f fb 4a da 83 87 af 11 14 82 f6 6e 46 37 2e 49 ec 2b 18 d7 e8 b2 37 88 40 ef 36 ca e5 d4 5e 76 5a 59 3a 05 79 c1 69 5b e0 b9 8b be 18 c3 b7 b3 a0 6d 11 3c fe 42 07 5c 75 da 43 5f 88 11 1c d4 5f 50 03 68 53 65 0c d8 d6 f6 95 69 7d 3c 95 42 82 ce c5 b2 fe e8 37 01 94 6b 27 28 76 6f 14 bf 74 61 34 7a d0 42 2a 05 b5 b1 3e ed 7d 3d 72 4f aa d2 b1 9a 2d b9 8d ad f6 44 Data Ascii: m_\|9[\O,K^Ag]jS{bZkVj;v,<a`},KE~X^]bV0YMjC&CrM?JnF7.I+7@6^vZY:yi[m<B\uC__PhSei}<B7k'(vota4zB>}=rO-D
2024-04-16 15:05:38 UTC	1369	IN	Data Raw: ac 69 41 78 b1 3b fb 6f c1 92 18 0a e3 5c 39 e9 86 19 71 8d 22 0f 35 89 b5 bc f5 c9 80 9b 76 d2 d4 44 8a df 5c 88 4c fa bd b6 4b 0c 0f cd d7 b3 13 33 fc dd 89 98 5e 85 7a a3 fa 7c 21 04 20 6a 88 4e 13 b3 d7 93 5f 21 9c bd 45 d4 02 b9 73 79 94 6c 90 d0 60 67 7a 9c ef c4 4b f1 b0 bf fa d4 21 98 0a 19 4f 04 3a a8 aa 5e 0d 4d b8 bb 65 59 e4 06 17 18 68 10 43 4a 61 d0 2d fc 95 a9 99 93 dc 7c 70 6a 76 40 a7 f9 e5 08 2d 32 c9 e5 68 d7 05 86 ab ca a1 26 a9 bf e9 09 c8 f4 c1 8f 07 0f 5e 67 88 48 c3 6e 13 33 84 e4 be a7 1e bf ac 62 be 9e fe a7 da 4d 83 57 9c 52 7a c3 a0 19 ae 6a 24 6b f2 09 00 3e e9 fc c8 57 7a b4 f5 cd 1d 6c 1c 41 28 ac 4c 29 e4 40 f3 a2 71 00 1a 26 87 ff 7f 2e 5a 1c 01 80 9b e5 63 d5 4b 53 ca 86 d0 4c 8e 22 21 5a d2 0b 12 f5 78 ca fd b3 76 95 01 Data Ascii: iAx;o\9q"5vD\LK3^z\|! jN_!Esyl`gzK!O:^MeYhCJa-\|pjv@-2h&^gHn3bMWRzj$k>WzlA(L)@q&.ZcKSL"!Zxv
2024-04-16 15:05:38 UTC	1369	IN	Data Raw: 54 33 0b 99 81 fb 32 90 df 8d 81 ea 0d a1 80 36 44 ed 48 de eb 1c 89 99 62 e1 77 5a b6 68 1c 9a 43 cc 99 de e5 27 d1 16 40 7a 24 35 cb a2 c3 67 8d cf cb 60 f7 1d 8b 7f c5 38 76 37 ab 5a 70 19 20 49 eb 46 cb 6c 73 86 4b bb 98 5a fe 6d 5e 9e 5b c3 a3 9b 6a 55 cc ba 99 a5 cf 90 29 74 0a 91 3d 3d 9e a6 73 59 a0 94 13 2f 38 40 31 74 9a a3 66 5b d9 53 00 ba d6 d8 ea 45 fc 9c b8 ed f1 1b ae 09 3c 17 47 03 f1 6a 91 ef 16 d9 7e 6c 8c 42 89 d4 16 df e3 68 c6 9d 4a 3b b9 6d 86 a2 77 18 ee 36 54 a9 94 ae 6d c7 68 08 2c 27 1d 0b f9 cd f7 f9 bf e2 e2 6c 68 65 b0 73 d1 80 75 ca 73 9b 14 45 52 13 aa 8d 86 65 3b e1 e0 7f 64 10 5a 24 50 be e2 0e f3 6f f2 0c ce 3d 43 b7 44 aa 71 5e fd ad 10 e9 4f 3a 31 34 f9 70 c1 33 cf 3c 0e 8c 2d 0f 66 b1 d3 c5 bb 14 2b 0e 34 2d b9 c5 9a Data Ascii: T326DHbwZhC'@z$5g`8v7Zp IFlsKZm^[jU)t==sY/8@1tf[SE<Gj~lBhJ;mw6Tmh,'lhesusERe;dZ$Po=CDq^O:14p3<-f+4-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.11	49799	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:32 UTC	619	OUT	GET /wp-content/uploads/2018/10/lank1.jpg HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:35 UTC	392	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:35 GMT Content-Type: image/webp Content-Length: 87006 Connection: close Cache-Control: public, max-age=31536000 X-Hcdn-Image-Optimizer: f:webp q:85 w:1600 alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 292e626691e77e946b862bb505480a78-asc-edge3 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 2.432 Accept-Ranges: bytes
2024-04-16 15:05:35 UTC	977	IN	Data Raw: 52 49 46 46 d6 53 01 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 57 02 00 8f 01 00 56 50 38 20 32 53 01 00 d0 dc 02 9d 01 2a 58 02 90 01 3e 49 1c 8a 44 22 a1 a1 1b 0d 95 a8 28 04 84 b1 31 33 65 a0 81 81 f0 51 f5 7f f5 f7 8e 5f a7 69 ff 5f cd 7b 9a 7c 08 fb 1f e2 3d 7c 7f b9 d4 37 cf ff e9 f2 b3 f8 1e fc df f2 7f f6 ff bf f7 49 fd 7f fd 6f ff 2f 70 4f e9 7f e2 7d 4b ff e1 fd d5 f7 83 fe 07 fe df a8 ef eb 7f ea 7f 6d 3d ee fd 18 7f a3 f5 04 ff 13 ff 5f d7 47 d4 d3 d0 63 ce 77 ff 97 ef 4f c2 b7 f8 bf fd 9f bc 3e ef 3f f4 bf ff ff cb f7 00 ff ff ed 9b fc 03 ff df 42 bc 4c f4 df c0 df ca 3e 7d fc ef f7 1f f3 3f f4 7f c3 7c 94 7d fb 8b ff 61 fe 93 f6 6b d4 2f e6 9f 8a ff 8b fe 0f cf ff fb 9f e2 3c 5b fc d7 f6 4f f9 7f e1 7f d2 fe dd 7c 82 fe 47 fc db fd Data Ascii: RIFFSWEBPVP8XWVP8 2S*X>ID"(13eQ_i_{\|=\|7Io/pO}Km=_GcwO>?BL>}?\|}ak/<[O\|G
2024-04-16 15:05:35 UTC	1369	IN	Data Raw: ca 32 7a 5d b5 fd 10 54 82 c7 bc a6 bf 9b c0 e5 28 97 ca 2e 31 73 ff 97 b5 a6 29 0f 20 90 c9 e9 7c 78 24 ad 02 d5 c1 1e 50 b4 b7 77 f3 57 76 d9 a9 23 e9 5d c0 6d 77 e5 b2 7a ac 6e 85 c3 c8 4b 65 2b 06 d2 e8 cc e7 9d ef d8 01 09 77 32 50 b5 57 07 9b 23 01 8e 07 b1 3c 89 85 96 91 76 af 47 a9 b9 49 2c 8c d8 7d 38 80 2a 56 23 24 ed f8 74 74 e6 cb 27 0a 0d 3e 90 7f eb da 6a 49 30 d8 ea 4c ee 0d 3b 9a c6 99 5c 27 b5 4e bf 00 aa 45 34 dd da df 83 5a f6 84 bf d5 43 1f dc 75 dc de 20 21 b1 6b a1 89 90 78 eb 0a db ed 19 e2 2c d5 b3 ca d4 01 c7 56 e6 df 94 58 37 40 7b d7 10 10 47 d0 6b 1c 77 48 96 a3 8a bd 9d dd c5 65 d9 2b 74 8b a4 03 16 6f c7 c1 b5 54 13 7a 1d 75 0d bf 53 15 ce c6 58 13 a7 21 9a bc c0 63 88 4b e4 47 45 89 7b c8 28 2d ab 55 4b 7b 18 72 c6 5a 91 c8 Data Ascii: 2z]T(.1s) \|x$PwWv#]mwznKe+w2PW#<vGI,}8*V#$tt'>jI0L;\'NE4ZCu !kx,VX7@{GkwHe+toTzuSX!cKGE{(-UK{rZ
2024-04-16 15:05:35 UTC	1369	IN	Data Raw: 8f 99 8e 4b 86 23 9a 08 30 98 a1 3a 34 a8 4c 1f 6f 7c 6f 3a 57 0a 45 07 b7 ec 32 7c 4e 26 3d f4 47 80 bc ad 46 9a 7d 32 ce 12 fb a2 46 46 07 c9 c3 e4 b5 df 5c 07 3f 2f af 4c b8 f4 61 e3 58 ec 7c 7d 75 24 21 01 7b 6c 80 47 5c e0 2d 0c 71 d5 ce 51 74 f7 3d d8 d5 de 39 7c e5 30 76 c8 89 a1 8f 90 97 9d 33 8d 4e b3 98 06 75 85 3d 7d 8f f4 b0 cc be 53 7c ea 7d ed 68 53 9a cc 6e 6a 7d 5e ff 1d 88 85 00 83 5c 1b 12 5b 1f 07 f1 32 c2 cc cd b5 64 eb 7a f2 1a 14 16 42 76 6b 34 9e 5f 5d 49 dd 70 73 7c 0c 74 c4 d4 60 7c f7 27 9a 8d d0 8a 3a f4 a8 35 5d 30 e4 84 a1 d4 15 2a 89 1b 47 1f de ec b5 b2 66 ac e1 db 64 6b 63 3a e5 1a f5 48 5f 4b 5c 94 60 59 93 b3 d7 5c e7 d8 6e 0b 34 7a ae 9b dd 1b a6 34 fc d2 63 3f 2e f4 2e 69 6b 3a 16 16 bf 6d a2 6d 75 de 29 48 12 62 05 18 Data Ascii: K#0:4Lo\|o:WE2\|N&=GF}2FF\?/LaX\|}u$!{lG\-qQt=9\|0v3Nu=}S\|}hSnj}^\[2dzBvk4_]Ips\|t`\|':5]0*Gfdkc:H_K\`Y\n4z4c?..ik:mmu)Hb
2024-04-16 15:05:35 UTC	1369	IN	Data Raw: b9 d7 77 ef 0f 0f 0a 62 2f 98 07 08 4d 01 a8 55 30 c2 d8 8e 44 6c d7 6c 28 62 80 c5 90 d6 87 b1 f6 14 3f 78 d8 01 78 b2 37 e9 7d bf 03 fa 69 b8 bb 83 2d e0 29 16 a6 42 b4 64 6c 36 1a 58 a7 ab b7 2f c3 7b 4e 40 d9 17 48 1a 9b 43 70 02 f9 66 da cd c6 cb f3 68 77 5e e9 7a 64 e8 1a 7f d3 1c 56 89 69 00 0e 4f 4c 8a a7 31 cf ea 4c 39 82 1f c0 f8 31 da e0 9d e1 2a af ee be 78 2b 4f 19 29 af 56 d2 76 50 c4 8e 6f 97 e8 37 08 d2 3f 2b 30 41 2b 8e 8f c3 11 ec 3b 6a ac 92 91 7b a3 20 1f 39 00 1a dd 91 02 f7 a0 77 c9 1d f6 9a 19 8b f3 c1 e0 2b d0 87 a6 1d b7 58 8e ce 95 c2 88 c1 7a 32 c0 f7 fe ba 5a 31 06 31 a6 fb 6f 0e 5b 45 ff 6d 26 47 24 3b 2a c6 2c aa 96 ee 2b 82 5c 0c 12 f6 6f 7c ec 35 52 89 9b db 3e 65 08 d9 b9 a3 06 e2 a7 c9 27 f3 55 ad f5 24 ec c0 d3 ff bf 24 Data Ascii: wb/MU0Dll(b?xx7}i-)Bdl6X/{N@HCpfhw^zdViOL1L91x+O)VvPo7?+0A+;j{ 9w+Xz2Z11o[Em&G$;,+\o\|5R>e'U$$
2024-04-16 15:05:35 UTC	1369	IN	Data Raw: 41 c6 14 81 76 56 74 72 ac ca 8c 01 23 99 34 ad ef e4 fc 6e 02 dc 55 91 eb 45 5f 98 b6 47 84 f4 8f 9e ec 86 e0 55 34 5c ae 7c 72 1a 9c 68 b1 b1 02 00 56 bc 92 31 db 9f a8 b9 61 f1 92 65 7f 2a 5d 08 ce 61 ba 62 65 8e d4 71 6e fb ae 62 2d 48 5a c8 51 36 d9 64 67 59 2f 94 2b 6f 56 d6 ca 5d ce 5c 2a bf 25 8d 2c cd 08 a6 14 15 db 83 0f a7 ff fa c7 36 fd 3d b6 88 ad 0e 0b 0d ec 71 a7 cb 4a 4e 6c 5c b5 20 0d 78 87 59 87 78 f5 30 88 26 ca 8c 2a df 97 91 28 6d d4 9a f9 d3 2a 56 5a e1 c3 53 c0 49 53 01 8f 15 b8 0e 78 9b 9e b7 8c e0 86 7d 3b b2 2a 98 d1 f7 db 80 29 14 81 b1 cd 51 5d 08 34 4e c3 7a ba f7 c5 93 0f 6c a1 7f df ff cf 2b 72 b7 54 e7 9b ac a9 ad ee f0 89 49 fb 2f 68 a7 ba 48 46 8e 35 63 53 ce 10 5f c4 d5 bd 81 cf 2a a8 77 7d da 53 b7 8e 88 1a 20 25 c3 f6 Data Ascii: AvVtr#4nUE_GU4\\|rhV1ae]abeqnb-HZQ6dgY/+oV]\%,6=qJNl\ xYx0&(mVZSISx};)Q]4Nzl+rTI/hHF5cS_w}S %
2024-04-16 15:05:35 UTC	1369	IN	Data Raw: 01 ea 61 45 a6 24 9d 55 79 f7 d0 a7 00 77 df 56 a4 04 c1 1a 15 9d 2a b8 13 d2 c4 36 b3 13 df 3e 85 00 9e 3e f4 fd c6 05 d0 66 4e aa 3b 30 f0 49 44 23 39 e8 63 a6 20 12 dc a6 df b6 87 b8 73 c1 ad 38 1c 14 bc b3 2c e8 87 18 60 d2 75 41 bd 58 3b 48 48 af 00 d2 a2 e5 e9 3a 49 85 f7 b2 32 ff 05 62 23 6f 00 23 02 78 01 73 c2 05 a3 2e 65 bc d9 51 87 5c 8c 6c ad 1b 81 93 82 fb 09 39 e7 e3 f9 6c 1f 0f b0 dc 0e 9f 68 36 db 05 10 a7 1a bd 3f 51 34 83 e6 ce 56 ea 1e c4 54 0d 7b e5 39 cd 66 1e c2 6f 91 a7 55 41 89 ad 82 8e 80 e7 69 c0 18 18 b8 34 21 50 a0 02 6a 51 d9 d6 47 e8 45 80 2c b0 69 db 24 9e c9 f4 22 a0 96 37 20 d3 6c 32 b9 ac c3 33 17 c4 fa a1 2d 27 52 c1 67 06 25 90 c1 4a 71 0d 5b 74 7e 00 ec 26 67 5e 1d a7 f2 fd c4 b1 3b b5 76 5f 5e 42 5c ec ca 7f 3f 1c 60 Data Ascii: aE$UywV*6>>fN;0ID#9c s8,`uAX;HH:I2b#o#xs.eQ\l9lh6?Q4VT{9foUAi4!PjQGE,i$"7 l23-'Rg%Jq[t~&g^;v_^B\?`
2024-04-16 15:05:35 UTC	1369	IN	Data Raw: c0 26 16 fa a6 c6 93 c5 70 74 4a 6c 6b cf 80 cd 1f 09 f0 00 3d 25 ba 9a 29 0b 33 1d 3e 53 ea 88 05 3c 44 14 74 90 93 92 85 28 a9 24 a1 16 31 d1 1c 50 d3 82 80 2e db 02 25 46 00 70 54 69 26 0e 84 cb 97 ce e4 2e 13 2c 0b 1d 32 80 6f 32 9c b7 ce 8e 11 0d 54 81 52 79 de cd a0 1c d7 f7 69 e0 d3 bf 2a ff 1c 3b c6 5d 2a d8 51 7f d6 02 03 b2 eb 19 b6 c2 00 16 8f 10 50 a8 7f 5f 40 1b 00 37 38 0c a0 17 33 74 c5 31 bc 19 82 da 6e 67 a4 88 4b fa 1d 79 bb b8 0c ae 3a 48 5d 1a 07 39 5b b0 99 ec 0b 6b 15 4e 73 c7 d1 17 da 41 a8 fa 3f 8a 92 1e 41 c0 1b 1b 85 95 20 d1 56 f8 21 64 35 af 75 7f 8d b2 7c b8 d5 b0 99 81 c7 83 99 bd cd 45 6f 8a 90 21 13 0b 8d 00 d6 5a d7 62 49 08 6f db 44 f2 03 ac c9 0b 12 34 eb 3f 01 10 da 40 71 ce 5b 22 4a 32 32 8e 7a 85 b2 9e c5 01 9b bc 25 Data Ascii: &ptJlk=%)3>S<Dt($1P.%FpTi&.,2o2TRyi;]QP_@783t1ngKy:H]9[kNsA?A V!d5u\|Eo!ZbIoD4?@q["J22z%
2024-04-16 15:05:35 UTC	1369	IN	Data Raw: 19 ea 70 34 40 69 00 71 74 20 06 a0 bc 46 56 b2 ac 6c 02 d7 79 b9 e9 04 00 f9 7d cf e8 f7 f0 a9 52 10 7a 04 79 c3 75 26 5e f9 47 f8 97 57 89 69 d3 2f 2a ad cd 7f 82 c8 1f 36 d1 d3 bc d7 1f 52 cc 0a 05 c5 0f 8e 6d cb dc c7 6e 9d 90 0a 06 29 72 ff f0 40 ff 68 83 2b 78 f4 be 83 8a 15 b6 0c 22 c7 1b bb 4c 01 10 9d 52 1a 37 44 45 97 e1 4b ef f5 7e d8 f4 c6 fa d2 6e e4 88 8a 89 45 b1 0d e9 14 bd cd e9 68 99 a2 05 2f c1 2e ca 25 22 c5 e9 14 c1 c3 71 72 f2 42 e6 e9 54 50 9b fb 08 20 69 f7 cb 84 29 c1 2a 7a e9 87 63 6a 2d dc 58 4c dc db fe 19 69 7e f5 f3 6e 26 1e de 72 a9 f1 f4 b4 cd 61 31 cc 51 c5 33 0e d4 eb 11 84 3c 44 d6 c4 79 d6 dc 2e 40 b7 43 59 33 97 ea cb 99 5c 07 ee 50 30 4d e6 e4 4f c4 a0 40 3e fc 2b 12 fb 8f 4f 68 90 1f 93 6c 43 a7 63 69 e7 02 66 f0 5f Data Ascii: p4@iqt FVly}Rzyu&^GWi/6Rmn)r@h+x"LR7DEK~nEh/.%"qrBTP i)zcj-XLi~n&ra1Q3<Dy.@CY3\P0MO@>+OhlCcif_
2024-04-16 15:05:36 UTC	1369	IN	Data Raw: 46 c1 6f 75 06 ba 06 38 6d 17 82 e2 a8 25 c9 af fd 05 8a 93 72 fd b2 ff 3c 06 7b 30 cb e3 ce 87 70 46 ea 0b 93 65 86 52 5d d2 d8 a7 34 0a 68 a8 d8 c6 fa e2 ee 82 8e ec f1 dc 46 14 b1 12 8a f3 2a 3c 5f aa 7b ad d6 b7 be 62 af af 23 35 3e c5 04 2e 65 22 c5 27 8d 3f 24 bc 1d a2 9e 23 26 53 d8 df b8 18 f0 e1 46 0e 8d 06 ad 11 2f b4 be c2 05 8d 29 42 48 52 43 35 c5 da 6b f5 7e a8 94 01 a9 68 fe a2 09 d1 c0 7e ee 0e 68 f1 11 94 23 19 85 cd aa 68 bf 2f 8e fd f0 7a 4f 61 c4 64 3b 58 ac 3d ea 6e c7 75 b3 36 f8 79 c8 1d e1 c3 73 f7 83 81 9b 7d 88 9b 38 b2 bd fb 13 6c 7e b3 4e ab a5 81 e0 92 49 b1 5f bf 4b cb 88 c2 7e de 85 e7 01 3b fd 56 36 66 68 e6 a6 15 3e 1d cd 30 ce c1 6b de 5a a6 bd 0a 86 f5 0a 25 43 c2 b3 74 5a 23 22 69 c1 43 cf d7 0f 26 bd 4c 8a 66 23 53 40 Data Ascii: Fou8m%r<{0pFeR]4hF*<_{b#5>.e"'?$#&SF/)BHRC5k~h~h#h/zOad;X=nu6ys}8l~NI_K~;V6fh>0kZ%CtZ#"iC&Lf#S@
2024-04-16 15:05:36 UTC	1369	IN	Data Raw: e8 91 af a6 24 48 80 e3 22 45 39 1c 11 3b 01 d1 15 e9 12 16 29 bf 1c 46 2d 35 42 8b a3 db b5 55 63 5b de 42 19 d3 e3 79 a0 f9 13 bd 46 44 c0 d0 21 f0 c5 6e ee 44 79 50 b3 b2 54 94 a4 cd 8f 31 fb ac c6 4e 5b 06 a3 7f 91 9e cf e0 e8 8a 72 ee 15 00 b9 cd ef 67 c4 e1 dd a8 9b 32 9f e4 12 78 af 3c 82 63 b0 cf bd 9f b5 95 7a 80 7a db df 10 96 6e 36 3f 96 24 f7 0c a4 e4 23 13 f1 8f bf 0a 11 0a d3 db ed c1 42 07 da 8c fd c9 8f b4 b8 07 a8 06 1f 47 3f 6f 65 c1 f0 33 82 87 43 14 bb 19 f3 a0 be 58 ff 89 1e b6 3a 98 4e f7 2f fb 48 61 d7 1b a2 42 39 4b 5c 3a a0 1e 8e 6d be 11 fc 39 be c2 93 81 45 06 71 8e f0 8e 2a d0 d1 4d 6c 01 9e c4 3e 42 60 74 6a f4 7d 9a 8c fe 66 c5 51 b9 b4 f2 6c 33 88 43 29 79 94 83 ff 53 a4 85 d8 61 e5 1c 87 7e 11 01 dc 0d 06 f3 26 6b 89 44 eb Data Ascii: $H"E9;)F-5BUc[ByFD!nDyPT1N[rg2x<czzn6?$#BG?oe3CX:N/HaB9K\:m9Eq*Ml>B`tj}fQl3C)ySa~&kD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.11	49800	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:35 UTC	620	OUT	GET /wp-content/uploads/2018/10/bhtan1.jpg HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:40 UTC	393	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:40 GMT Content-Type: image/webp Content-Length: 106480 Connection: close Cache-Control: public, max-age=31536000 X-Hcdn-Image-Optimizer: f:webp q:85 w:1600 alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: b9440aa26ada64d30e12bc7ac6bdd751-asc-edge5 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 4.919 Accept-Ranges: bytes
2024-04-16 15:05:40 UTC	976	IN	Data Raw: 52 49 46 46 e8 9f 01 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 57 02 00 8f 01 00 56 50 38 20 44 9f 01 00 30 21 03 9d 01 2a 58 02 90 01 3e 41 1a 89 44 22 a1 a1 22 39 7c 3d a8 50 08 09 40 17 2b 5c aa ca 6f 83 b7 f2 77 e5 5f 00 7e c7 f8 af 58 ef f0 75 fd f1 5f f6 3c bd 3d cb fb 2f 3a df ef ff f5 ff a7 ff 63 f0 f7 fb 27 fa df fc df e4 bf 7f fe 83 ff b3 ff 8b fd 9a f7 55 ff 5f f7 57 de 67 f8 5f fa 3e a2 7f a8 ff 96 ff d9 fe a3 f7 ff e6 47 ff 07 ee ff bb ff f2 df 96 5f 00 ff dd 7f dd 7f f4 f6 c2 ff dd ff ff ff ff c2 6f f9 6f fc 5f ff ff f9 7c 0c 7e db 7f f8 f6 98 ff df fb c1 f0 c3 fe 2b ff 0f ee bf bb e7 fc 4f ff be c0 1f fe fd af 7f 80 7f f9 d5 79 de a7 d9 3f a9 7e c6 ff 5e f4 17 f2 0f 97 ff 09 fd b7 fc a7 fc cf ef 3f 19 df 2c 7f 8d fe 3b bd b7 a1 7e Data Ascii: RIFFWEBPVP8XWVP8 D0!*X>AD""9\|=P@+\ow_~Xu_<=/:c'U_Wg_>G_oo_\|~+Oy?~^?,;~
2024-04-16 15:05:40 UTC	1369	IN	Data Raw: 88 54 55 a7 94 83 03 e6 62 ed f3 88 f0 29 43 c1 63 6f 5f 0b e2 15 21 51 b6 86 97 a8 78 26 61 d1 f3 20 24 5b 07 41 9d 55 aa b1 b1 43 8b a5 5c 58 cb c4 76 5b 14 ca 19 05 cf d5 f5 71 4f 21 5b ec cc b2 b8 ee 3b f5 f8 bf ff af 30 7a 6b 0a dc 3e 27 80 8d 46 cd 5f bf 59 6b b0 8e 9a 1f 69 1d 37 2c 2a c5 d9 33 94 9b e1 6b f5 5a cf c7 a3 11 e4 65 1f 12 fa ff f7 c1 9f 3f 52 2d d3 af 7d d3 57 22 ad 9e 59 66 66 bc aa 5a 70 9d 30 b0 1b 90 4d 71 e5 55 08 bc 61 3d 42 71 ac 2c b3 d0 70 fe 1c 58 05 0b 21 7d 32 d6 46 27 43 a2 f9 d8 f9 cf 77 5c dd 29 98 5f 1b 8e 26 9c 84 c5 c6 15 5d f9 78 c3 cb d8 1e 5a 74 0a 8b 94 eb f8 38 a3 aa 9e 26 da 09 ea c2 25 4d 49 5f 9b 06 f0 7c 69 2d b1 4b a3 b2 93 02 0c e1 c1 18 ae aa d8 c1 38 02 98 45 fc 51 07 e0 54 34 5a 4a b5 1d 05 d2 31 7c bd Data Ascii: TUb)Cco_!Qx&a $[AUC\Xv[qO![;0zk>'F_Yki7,*3kZe?R-}W"YffZp0MqUa=Bq,pX!}2F'Cw\)_&]xZt8&%MI_\|i-K8EQT4ZJ1\|
2024-04-16 15:05:40 UTC	1369	IN	Data Raw: 9f ba cc d8 24 26 8a 0d e6 99 53 fa fb b2 a2 ed f4 c8 ae f8 27 d1 7c 4d 78 9f 23 5a 18 c7 07 33 a5 99 d8 fc df 01 e6 49 de aa d2 a9 80 f6 7c c3 fb 18 a8 83 d3 9f 0b fa 4b e6 56 c8 1a 14 ec 70 ed 81 66 df 58 01 c5 60 b4 28 b9 96 b9 96 d1 12 47 9f ba f4 6a f5 8c 88 e3 f0 82 59 4c b1 ae 2b 32 2b 30 87 12 7b fe 5e ac 2b 51 4d 08 e8 cc cb e0 9b 5d 1b 47 ab e9 fa 39 ef 91 c3 25 00 69 c1 b5 f4 36 5b bb 28 c6 31 6b d6 4e af 63 c9 41 64 4e ae 5e 70 f9 c1 f6 e5 3e 56 90 fe 33 f0 be fe ef 31 a0 13 50 8e ec db 33 73 6b b1 56 8b fc c2 f1 c0 79 1f 23 87 88 f7 01 d0 c6 34 46 f4 3c fe 91 af e9 c9 a2 09 15 61 d0 51 c0 9e 0d d9 a7 91 82 42 9d 72 12 e1 48 1c dd fe 8e e6 a7 3d eb b8 54 47 c1 71 7f 71 b2 b1 98 21 52 30 2f da 0d 90 75 93 76 2b 8e b1 89 16 63 a7 0a 1b d3 00 c9 Data Ascii: $&S'\|Mx#Z3I\|KVpfX`(GjYL+2+0{^+QM]G9%i6[(1kNcAdN^p>V31P3skVy#4F<aQBrH=TGqq!R0/uv+c
2024-04-16 15:05:40 UTC	1369	IN	Data Raw: 7b 45 81 06 a9 85 e0 9b 2d 05 25 a8 94 a4 58 31 6c ea 21 9d 14 b1 30 94 f4 f2 76 e6 3b a7 02 b7 76 67 97 a5 94 9b 89 3d 5c 92 a6 22 12 8f 97 3f fd aa b6 4c 6e 6f 40 d9 43 3f ff 01 9e 63 ae df a1 19 df 02 2e 58 7a bd 9e 6c bf 94 d8 6a b4 75 2c e4 16 08 2e 0f 8c b3 f5 76 33 c0 a6 a6 6d 67 e3 05 8c 78 68 ab 5a f9 a3 45 e6 1b a2 14 2c 02 7c e1 9f e0 72 0b 72 aa a7 26 cb 6a 55 04 93 8c 30 8b a7 56 7b 41 26 84 e0 5d 9b 6f 54 09 f9 7a e7 fd 25 81 63 00 c7 fa 1a 13 5b 59 cb c7 31 91 7e 2c 07 1a fc fe d8 17 ba 62 e5 6a 5e 3c 8c f8 4a 7f 2f b2 d6 f6 80 79 1a a4 45 f6 6e d5 c1 9b 58 3f 67 f4 32 61 ba 47 c5 ba 3f f0 e8 5b fc eb 66 91 fc f2 a8 57 27 38 aa 3c 74 ef 16 84 c7 44 fd aa f1 b3 fb 87 6f 1e 18 ed ca d5 65 0c f3 c1 c6 e9 1b 90 10 d7 08 c0 ce e1 db 14 71 d7 0a Data Ascii: {E-%X1l!0v;vg=\"?Lno@C?c.Xzlju,.v3mgxhZE,\|rr&jU0V{A&]oTz%c[Y1~,bj^<J/yEnX?g2aG?[fW'8<tDoeq
2024-04-16 15:05:40 UTC	1369	IN	Data Raw: 1b 12 3b 5b e1 04 5d c4 d4 6d 00 43 69 6a 86 16 7e 9b 24 d9 db 5f 61 46 4a fa 08 0a 5c 58 1e 66 70 3d b5 ec a3 61 84 fe c3 d3 96 fe 39 4e 05 c9 2d 84 1d e9 98 25 99 a7 a6 fd 17 ce b3 0f 36 f6 9f a0 f2 b0 58 35 c3 51 51 6c d0 29 a8 99 8c 7c b7 80 1b a9 78 2b 4f ca a4 00 a1 88 d8 bd 5e e4 08 20 17 73 bd 19 8b 37 aa 1f 4b bb a5 47 4c 49 32 2b a9 cc e1 d1 93 f0 42 60 c9 ce ad 59 96 d2 2e 66 08 07 e2 8f 83 f2 e3 8f c4 74 01 de 8b 1a 9e 18 d0 b1 30 f4 4a d0 bf f6 c7 ed c0 9c cf d2 bc ff 04 be ce 69 cb 64 b4 b2 7f 31 4f d0 c6 d0 fd 89 67 ae 0b 76 96 f5 f2 50 81 f4 67 e2 67 05 30 39 33 17 28 ed d6 f5 6a de 7a 78 a4 94 89 cf f6 e7 66 c8 2b 13 d3 b0 18 a2 fe 98 c0 04 ae 42 ea 91 3a bb 5a f7 68 0a 95 43 0d cd c8 18 b5 c7 eb 10 10 46 9d e0 23 c9 96 a7 d4 f9 86 ad cc Data Ascii: ;[]mCij~$_aFJ\Xfp=a9N-%6X5QQl)\|x+O^ s7KGLI2+B`Y.ft0Jid1OgvPgg093(jzxf+B:ZhCF#
2024-04-16 15:05:40 UTC	1369	IN	Data Raw: 9f 9c 42 00 00 fe e9 1b 19 c6 b6 e1 ba 7e a0 42 8f 08 f9 fc 44 58 f4 f5 3a 48 ce ea c7 e1 d2 53 60 ad 3b 54 95 49 a9 af ea 6d c2 48 b8 64 e5 04 6b 4c 70 2d e5 cc 88 30 e3 80 47 81 c2 46 91 00 2f cf 4d 01 cc dc 74 ac f6 65 70 a2 56 96 67 bb 91 f4 44 f5 3c 05 7f 82 b0 6a 35 fc 44 37 bf ff 48 7f ca 6a e3 39 07 e1 66 78 a0 14 6e 87 fa cc 83 81 88 03 62 62 2c 1a 20 08 99 d1 38 07 c1 10 3f 29 30 0d 72 f5 3f 5f 71 e5 a8 83 71 77 e9 7e 2f 80 de 0a ee 37 aa 0e 5b 28 18 9d 22 00 46 c9 2f 79 d3 f0 42 76 0f 7f b5 9d d6 08 35 76 ed ec fc 0c 08 8d f5 03 0b b3 e4 fb 50 14 64 48 82 48 55 e9 a2 ba 7c 36 4d c7 4c 3c 31 c9 e8 e7 21 1d 37 71 56 03 2f f5 25 8c ad dc f3 66 35 dd 79 2e d7 48 68 de 3e 7a cd fa 4a 60 e1 0a 82 0f 67 39 0f 74 6f d2 b2 cc 42 16 40 f8 c6 47 5f 9e 72 Data Ascii: B~BDX:HS`;TImHdkLp-0GF/MtepVgD<j5D7Hj9fxnbb, 8?)0r?_qqw~/7[("F/yBv5vPdHHU\|6ML<1!7qV/%f5y.Hh>zJ`g9toB@G_r
2024-04-16 15:05:40 UTC	1369	IN	Data Raw: 9c 78 d9 6c 74 7a fe 17 17 5c ff 13 0a 75 a5 34 1a a6 4b 32 f8 e8 1e c8 28 5c a9 4a 41 94 07 fa 8a 33 76 00 32 94 ea eb c0 54 ec 2e dd fd 28 b2 cc 88 18 35 8b 45 03 e1 b8 bb d7 92 5d 42 f2 10 87 20 c6 b4 5b 40 e3 af e2 30 90 88 aa 05 d5 65 77 b4 dd 12 8b 1c 7d 81 56 1d 77 cf 60 c2 21 6d 14 4c da f0 61 0f 2f 60 f3 dd ae ca 96 c4 38 5d 0a 20 6f d7 97 67 3a 21 73 fd c5 ed 32 f5 c1 5a 98 b1 0e c3 42 bb bc dc 77 10 32 5d d3 33 3b ee 16 ef c9 88 3e 53 c0 cd 05 06 4e d1 d0 ab 95 f3 eb 2c e6 78 97 86 3e 23 34 e1 8e ef 10 30 2c ab 8c 92 66 e8 95 40 be 0a 89 6a 44 36 31 50 58 d2 cb 22 87 f1 51 7a 71 75 71 8d fc 3f 4c 1e 82 1f 55 fe 3e 95 aa 58 83 ac 41 ac 5f a9 b2 d1 75 ec 60 e7 22 d2 6f 43 cd b1 18 09 b2 30 0e 32 0e c0 e9 af cb 68 99 00 86 d1 4f 1d 3f 6a ce 58 d2 Data Ascii: xltz\u4K2(\JA3v2T.(5E]B [@0ew}Vw`!mLa/`8] og:!s2ZBw2]3;>SN,x>#40,f@jD61PX"Qzquq?LU>XA_u`"oC02hO?jX
2024-04-16 15:05:40 UTC	1369	IN	Data Raw: 12 42 c8 67 58 e1 a4 2a 6d b3 b2 ed 59 6b 31 42 a7 25 c1 ab 66 4c 0f 8f 7d c8 0c 2d 19 47 10 6e 75 ba 5c 56 1e de 56 f4 7f 2b 78 cb 0e c3 15 1b 29 f7 a4 a8 c5 da 61 87 65 bc 48 6e 1f a9 5a a5 4b 5a 9d 29 29 56 1c f2 4b 15 64 d5 31 f0 62 5f fe c4 9f 1e 98 6c 90 73 fa 4b 0d c3 cf 18 52 c5 d2 fd 61 18 1b a9 76 01 89 22 b3 b0 ba 65 01 76 0a 38 5b 14 99 54 f8 ef d6 1a 7a 8c ef 20 23 55 2f 42 e0 35 6c 38 72 0a f4 c8 e5 ed a8 78 75 b6 0f 6e f5 fd 22 9f 2e 67 ba 94 ae 11 02 74 cd 05 fd c2 3c 9b 2d 0f 0e b8 e2 4a b7 69 06 c4 41 1f d2 2d ae 33 59 76 d4 74 0f 8e 16 c7 8c 9e f1 ae 0d f9 e4 20 33 c4 b8 1e d1 97 db f3 55 8c 8e 76 9f e1 cc ab 6d a9 c8 33 89 4c 68 4e 9d ca 57 73 17 ed 37 d5 5b ad 94 c0 2a 00 80 df aa 11 89 99 93 b5 ca 31 53 83 d1 83 ed 6b 9d 5f bb 0a aa Data Ascii: BgXmYk1B%fL}-Gnu\VV+x)aeHnZKZ))VKd1b_lsKRav"ev8[Tz #U/B5l8rxun".gt<-JiA-3Yvt 3Uvm3LhNWs7[1Sk_
2024-04-16 15:05:40 UTC	1369	IN	Data Raw: 83 6a 67 82 41 89 79 f1 df bb b6 9b a8 ca 72 ab 9d 75 d9 ab 81 31 68 47 2e 26 0e 72 99 af a5 35 05 54 ba 64 f1 43 c5 32 7b 0e 10 a2 f7 01 dc ed 97 28 68 60 cb 03 2f 40 a5 7d f7 98 ca 56 a0 e3 56 ed 28 50 41 60 b6 81 7a 44 3e 04 10 76 8b ab b7 a1 8d a5 9f fe aa bb cc 9b b7 13 e0 a9 9b a5 f2 ad 08 74 87 90 da 9f 99 10 da 7c b8 6d f1 91 ec 9f 1f c7 b4 4a 16 ca 99 1a 04 25 e4 73 38 c2 66 bc 1a 8f 08 08 ab 8b 82 ef 57 f3 7c b6 9a 60 51 24 04 ac 2e a2 64 bf 29 68 d7 f7 eb 47 ca 0c 13 9e 7c d6 1e 0e 3a 2e 10 ad f6 0b 13 39 ae a9 f9 32 b3 32 7d 93 aa 76 d1 7b a9 c3 6d d7 f0 77 7e fc 3c d1 92 5e d7 58 d7 ac f8 f1 31 87 e0 ff f4 30 4c f5 3e fa 64 ad 2a e3 da f0 38 cc 6c b8 85 12 70 f0 33 0b 3a 63 82 ce 0e 5d f3 fa 71 d5 6c 2d d1 6f 00 27 18 c3 dc c1 6b 5f 98 ed 2e Data Ascii: jgAyru1hG.&r5TdC2{(h`/@}VV(PA`zD>vt\|mJ%s8fW\|`Q$.d)hG\|:.922}v{mw~<^X10L>d*8lp3:c]ql-o'k_.
2024-04-16 15:05:40 UTC	1369	IN	Data Raw: 4e 64 d9 18 29 aa f6 3c 3e 66 8f 21 9e 8f b7 3e 87 de d6 a8 03 6f 5e 1f 1a 8b 69 e0 80 5c 6b da 21 ee 20 b4 ad 32 51 1e 5a 38 b7 ca 4e 6d a7 7a e9 f9 78 f5 41 32 5e db 5d 4c 40 6b cc 3a 8c 26 1e 31 a0 9a 84 64 c5 b6 19 93 7e cf ce 9e 34 2a a7 fb ae 53 07 ab b0 9b 28 fd ef 6e 0d 51 77 9a 01 d1 c5 33 41 0e 5e d6 74 96 4a 0b 46 8a 4a 50 5b 0f bb 01 f9 7c 0d 61 1b a7 f6 cb 6d 0e a3 61 79 4b 2c b8 bb 21 8b 11 14 88 0b 2a 59 3e 9b 46 9e aa ed 26 a2 08 c6 a7 3b 04 ec a9 20 37 7d 1e 71 cd ac 10 66 97 74 b9 e7 13 6d 37 a2 7b 5b 98 f2 9a f2 9d 72 39 02 3a 1c 37 18 fc 01 3c 6f 26 b0 98 e2 f9 6b b7 29 3a 19 57 86 61 e2 c2 12 15 67 60 d6 37 74 17 9d 23 a9 8d 55 4a 41 70 ba dd 6e 53 7e d0 9e 9c c1 a7 36 f9 31 c3 ce 67 49 5f 24 95 6d e6 00 61 91 b9 09 a2 23 e9 5e 5d f7 Data Ascii: Nd)<>f!>o^i\k! 2QZ8NmzxA2^]L@k:&1d~4S(nQw3A^tJFJP[\|amayK,!Y>F&; 7}qftm7{[r9:7<o&k):Wag`7t#UJApnS~61gI_$ma#^]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.11	49802	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:36 UTC	618	OUT	GET /wp-content/uploads/2018/10/mald.jpg HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:39 UTC	392	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:39 GMT Content-Type: image/webp Content-Length: 93462 Connection: close Cache-Control: public, max-age=31536000 X-Hcdn-Image-Optimizer: f:webp q:85 w:1600 alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 413409e9cbe54f97b5efc5f39acbdb15-asc-edge3 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 2.511 Accept-Ranges: bytes
2024-04-16 15:05:39 UTC	977	IN	Data Raw: 52 49 46 46 0e 6d 01 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 57 02 00 8f 01 00 56 50 38 20 6a 6c 01 00 50 ed 02 9d 01 2a 58 02 90 01 3e 49 1c 8a 44 22 a1 a1 1a 1d 4d f4 28 04 84 b6 36 53 ca 89 7d c7 5f 48 54 00 53 d6 55 92 d9 fe 20 6d a0 a2 af d1 9c e7 7a dc 5f fb df f3 ff b5 df 97 9f 2b 3c 8b da 5f bb bf 05 fe 6f fe 3f f8 6f 9e 5f e7 ff e4 ec 1f e3 7f e3 fe ce 7a 6b 7b 37 f1 ff f5 bf c4 fe 4d 7c e9 ff 95 ff af d8 df f5 bf f5 9f fb 3f 3f fe 80 bf a2 7f 6a ff bb fd e3 fd 37 c2 9f fc 1f b9 be ed ff c7 7f d4 fc ba f8 15 fd 7f fd 6f ee 6f bc af fd 0f db af 74 5f de ff da fe dd ff b6 f9 00 fe 97 fd 97 fe 97 e7 ff fd 4f ac 1f fc 9f fd bf f0 fc 17 7f 8c ff 93 ff f7 fe 9f c0 37 f5 df f6 1f ff 7f dc 7b ca ff df ff e7 ff 0b fd 7f ff ff fb 3f 68 7f dd 3f Data Ascii: RIFFmWEBPVP8XWVP8 jlP*X>ID"M(6S}_HTSU mz_+<_o?o_zk{7M\|??j7oot_O7{?h?
2024-04-16 15:05:39 UTC	1369	IN	Data Raw: ee 24 2e 09 72 4f cb c4 bb 2b ec 5c b4 25 7c 95 f0 b7 fb 2e 1e c1 66 32 61 95 8a ee 9e 15 41 85 84 ab ba f8 d4 8c e1 7e 6d c9 60 54 3f f8 23 1b 36 66 0a a2 43 47 4e 39 0b 3e 8b 90 2c 20 48 f7 ac 04 08 d6 db a5 5b 50 8f 04 56 0b f5 ee 06 ab 3f 7f ff 8f 4c 47 8b c7 f2 e0 b2 41 7e f9 f9 e5 33 f9 1e 32 df 60 59 8b b5 cc fa 2d 54 b6 6e d3 e0 19 96 a0 9e 81 a3 7d 41 14 ad 83 59 b6 79 dc ba 89 ea 6e f2 46 70 26 0f fc a7 77 c2 d6 c9 ee 66 40 2a ef 66 fc e8 36 96 a5 7b 01 62 7b a6 d7 2f e6 99 c5 ac bf f2 8b eb f4 00 71 b4 aa 7e ed 8a 47 af 29 c1 c0 a5 ad 96 0c 99 df f8 87 16 8b 39 c8 41 84 3d 95 6b 16 a6 e0 a2 29 60 a7 64 3d 75 0e c8 0b 13 d8 79 07 21 3b 99 ae a2 c5 08 d1 22 97 69 cd b9 d9 7f e7 41 03 d3 e2 e0 04 de b4 6a f7 0c a2 6d 1a 35 6c 26 1b 6a 1f 1b b5 50 Data Ascii: $.rO+\%\|.f2aA~m`T?#6fCGN9>, H[PV?LGA~32`Y-Tn}AYynFp&wf@*f6{b{/q~G)9A=k)`d=uy!;"iAjm5l&jP
2024-04-16 15:05:39 UTC	1369	IN	Data Raw: fd 5d ae 74 48 14 d4 8e 84 30 b0 b4 65 83 fd cc 96 f9 cc 34 fd ab 95 bf e8 dc c5 59 34 a5 38 d2 33 18 7b 05 6d c9 28 09 d0 2d 34 21 50 1a 63 65 6b 09 b8 47 44 30 07 f6 22 11 ef 0d fc bf bd b3 90 d2 ed 7e 6d 7a b7 ef 5e c8 14 f6 97 1b cb 6c 4a 1c e8 d3 b6 2f e3 7c fc e7 00 9c bd 3d b8 5a 61 88 25 a2 46 83 d6 ab 78 a5 19 0b 9d a8 28 ae ac 8d 20 e3 51 ba 66 4c ab 5b a2 b0 a0 ff 61 c9 7c 8b 36 5a 3a 54 47 69 0a a6 3a 4f 92 77 27 f1 45 79 f4 14 70 ef 63 ff 52 18 d2 fe 22 a7 50 2a 0e cf 03 a5 51 f8 27 31 fb 0b a3 19 4a 33 ca b0 17 ed 3a 0f 91 3e ce f5 f2 5f 10 1e 78 7f 07 c0 e9 e1 6a 8b 87 16 a9 ec 26 c6 ea 58 b7 0f 61 03 26 37 27 65 62 55 a2 4a c7 fe ce 1c 4c 25 f9 c7 8c 5a 30 34 23 22 e4 87 1b e0 3c 23 ff 51 56 08 ff aa 34 ae 92 c7 c2 4b 95 d9 f7 8e 1f ab 42 Data Ascii: ]tH0e4Y483{m(-4!PcekGD0"~mz^lJ/\|=Za%Fx( QfL[a\|6Z:TGi:Ow'EypcR"P*Q'1J3:>_xj&Xa&7'ebUJL%Z04#"<#QV4KB
2024-04-16 15:05:39 UTC	1369	IN	Data Raw: fc 99 9a b0 35 82 7f c5 ab bd 08 a0 09 f0 08 9a a2 bf 07 7f ad 54 ad e9 0d 04 34 07 d0 1f b1 23 3e fb 6c 6b 6c ab cf 45 a8 59 7a 46 16 0e 9b fd 32 0c c3 23 15 7a 65 48 38 d0 6a b4 30 4c 03 4f f2 91 12 27 72 f0 88 7b f6 b2 ff 55 51 62 55 22 04 5e f2 72 6a 9d 7a 81 be b6 58 ce 8a a2 c5 2f 0f 76 7f 6c f7 f7 b0 03 b0 e1 15 1d 8a 1f 1e 5b 60 d4 45 d6 46 45 8b 8c b3 d9 d2 8e 35 8f 30 7d 7f af 46 69 46 20 b9 b9 c6 7d e5 c3 b7 5a 98 c0 9d 42 82 98 5c 69 d1 5e 21 97 fa d6 65 d4 03 4c ed c6 72 ad b1 be 76 42 c0 33 78 cc ea 1d d1 51 54 38 75 74 ec bb 0c 23 e5 62 65 a8 d4 db 63 35 3e 6b 42 f3 a7 d5 85 d7 26 ce 5e 8e d2 10 4e 39 35 46 e9 b5 cd 6e 1c fe fe 53 a5 f6 3a c3 e6 30 8c a7 b7 79 26 1d 4a 33 f4 8d a7 97 9d 2a 72 b0 ba c0 06 ea 92 78 28 3a 8a b8 7a bf 62 9a 2d Data Ascii: 5T4#>lklEYzF2#zeH8j0LO'r{UQbU"^rjzX/vl[`EFE50}FiF }ZB\i^!eLrvB3xQT8ut#bec5>kB&^N95FnS:0y&J3*rx(:zb-
2024-04-16 15:05:39 UTC	1369	IN	Data Raw: 4a 60 b0 ff 45 f2 f8 56 6f 8e ea 04 ad 53 bb a6 69 66 de dc c1 5d 7d 28 5e 26 51 d6 db ed ea fa fa c0 88 bb 0c 68 ad 0f 71 4f 22 0a b0 a3 2f d6 51 df 33 22 eb c2 7e 3c 37 b5 fb a5 73 70 48 d1 ac 09 da 9a 3e e9 5d a8 94 e3 24 db 44 58 b5 02 e8 fe 6b 97 00 53 5c 94 b0 06 7d d2 e1 1f 60 20 77 44 d5 fa d5 4a 9b ea a6 27 d2 df e0 7f 3d 8a 6b 38 0a 90 4b d7 94 bd 98 14 04 30 8f 2f 36 69 ad 37 23 2a bd 72 ea 15 65 4c 9d ef 02 35 fc 6a 49 db 87 b8 cd ef 07 22 b3 cf e0 73 64 45 78 17 df fc 12 5b 5b 37 c8 d6 ce 9f e4 ad 7a 05 98 49 50 27 91 cc d9 61 02 03 86 6b 3a 77 ff 57 55 11 c4 9d 73 18 a0 7e 9f 39 34 b3 26 d9 90 db 41 73 29 02 99 92 15 c0 0a 88 f3 25 69 88 e7 e4 ee d0 e6 41 ed 7a 73 4a f9 06 df d0 d6 ca 96 72 4e 7d 9b e7 fe d7 89 8b 7b 6f 34 8b b4 a0 e6 00 5f Data Ascii: J`EVoSif]}(^&QhqO"/Q3"~<7spH>]$DXkS\}` wDJ'=k8K0/6i7#*reL5jI"sdEx[[7zIP'ak:wWUs~94&As)%iAzsJrN}{o4_
2024-04-16 15:05:39 UTC	1369	IN	Data Raw: 55 72 07 aa e0 93 b2 87 2c 76 0e 15 01 ae f9 a7 4e 3c 68 c4 d4 85 67 ea 97 85 58 22 18 08 3a 49 b6 b0 bc a7 d9 5b 04 37 bc c1 8f 29 0f 1b 4b 35 8b 85 15 51 09 c0 e7 d0 05 4d b1 10 30 95 96 15 77 0e f7 d4 35 c5 dd f5 19 37 fd 25 20 c1 cf 91 0b f0 57 80 4e a1 01 49 54 f1 e3 c4 63 b1 c2 64 4d 6a c0 23 82 fa 32 27 dc c7 3b 0c 11 73 e0 79 09 11 32 65 71 08 0b 2f 43 a5 4d 94 2f 83 ac 8d 20 eb 7a 69 6e 10 13 26 37 90 eb f3 3e 79 bd e2 4c e8 5b f6 87 94 96 0a 08 0d 96 50 f4 65 44 4d 6f 9e fe e0 b4 d3 6a f6 40 0b 7a 6d e9 31 f1 95 5b b3 ab 01 a4 31 02 10 2b 9f 0b 5c 8c 5e 20 05 ed f1 6e 1c 4c 53 5b 0a 85 ad ec 45 b0 83 54 a2 b1 da 23 b3 e5 62 50 ee b0 fc 88 e6 e7 43 96 a5 f6 8b cb c0 05 b3 fc 8f 6c 70 57 3d 42 db 7e d7 6f bc ed d7 0e 59 9d b4 b8 e0 a2 ed 3b 2f 2d Data Ascii: Ur,vN<hgX":I[7)K5QM0w57% WNITcdMj#2';sy2eq/CM/ zin&7>yL[PeDMoj@zm1[1+\^ nLS[ET#bPClpW=B~oY;/-
2024-04-16 15:05:39 UTC	1369	IN	Data Raw: 14 d4 07 80 65 a0 8d 57 c3 6a c0 55 14 ad d9 73 ac a4 54 e0 46 ea e4 f9 54 4e 85 95 6c 99 cd 56 f4 ae 86 13 0d aa 33 b6 1b 36 c2 66 e4 47 b2 c3 fd 06 76 fc f9 d2 12 e1 1d e6 2d a9 1a 51 db 4f 3a ab b2 be f5 8a 98 6e 7a 02 de 4f f8 dc 57 44 ce a0 53 1e e4 f7 2a 31 b2 cf c3 3c f5 12 2a 7d 8f e6 e1 cf b7 1d 8c 3e 60 22 3b ea 00 33 77 34 41 bc 8f ea 5b ad 22 b9 5d 60 f5 6c 00 7f 4e af 34 f1 07 b3 3d 83 44 5a 53 0b 6e bb 31 68 37 dc e3 28 58 e4 58 5d 8e 18 63 f4 3a 7c 8b a4 03 5b e0 12 6a 6f ca f5 da 25 71 ef 26 33 3a 99 1f 57 eb 8c 4d a6 56 21 1d 65 72 ff e5 7c fd a5 4f 67 c8 83 8e 54 d1 cc c6 7a 4c 11 10 af 8e 42 2e 81 1c 57 79 4b 9e 3b 69 86 6b 36 34 73 dd 7b 2a db 7a b5 c7 3d 0b b4 dc 13 34 fa c4 21 21 a0 7d 47 31 ec e5 d6 28 e0 87 7d 4e 9f 59 62 5f c4 d5 Data Ascii: eWjUsTFTNlV36fGv-QO:nzOWDS1<}>`";3w4A["]`lN4=DZSn1h7(XX]c:\|[jo%q&3:WMV!er\|OgTzLB.WyK;ik64s{*z=4!!}G1(}NYb_
2024-04-16 15:05:39 UTC	1369	IN	Data Raw: 00 d3 ad 82 a5 b8 8e 5b 95 1d c3 c0 bc 46 4b ab 9b 51 9c 93 51 b5 e9 4d a3 14 5f 82 e2 f9 49 ba 04 32 01 9b 77 f0 ae ed b9 da ce f0 5c 76 eb a4 58 42 db 3d 36 58 77 9b 27 a5 3f e6 9a 5b 17 57 e7 01 d5 84 48 af bc f9 d5 21 f5 63 70 d0 d2 8f 8a dd b9 b3 e7 54 ab 6b d1 8d 05 15 38 58 21 24 5a e8 ec 29 9d ea 5d c2 75 b9 93 f5 f5 3e 45 99 7d 8d ae eb 77 fd 2a b9 93 f7 e3 85 d1 e9 a4 e6 19 94 d1 4c 3d 50 a1 9d ad b5 d1 1e 7d bf 1b 34 71 86 bb 18 6c 37 2f 26 4b 77 ff b3 c6 34 87 ea cb 93 fe 0a a6 a6 2c e5 63 2a d0 d4 ed 89 8f b5 82 7c e2 85 16 a1 22 32 8d 51 fd b4 87 4c 3d 98 d4 f6 c8 c3 9e 28 ad 8f 83 93 02 c3 15 e4 2e 7f 8c 4f 98 07 9d 06 a8 9a 7c 98 e2 72 e6 fe 0d 42 4c 24 a8 8b 74 e4 03 4d 89 c0 73 52 be 73 32 99 4f 60 b4 d9 8a d1 79 81 b6 fa 2d 55 52 f4 ca Data Ascii: [FKQQM_I2w\vXB=6Xw'?[WH!cpTk8X!$Z)]u>E}wL=P}4ql7/&Kw4,c\|"2QL=(.O\|rBL$tMsRs2O`y-UR
2024-04-16 15:05:39 UTC	1369	IN	Data Raw: 66 05 3d d6 53 6d 05 70 50 16 a0 03 f0 0a 25 39 e1 1d 10 92 e4 2e b6 74 44 08 80 f5 8a ae 3f 14 b9 e8 bb 97 f4 0e 90 f3 9c 0e f9 2c 07 29 d1 ed 28 33 db b0 52 06 9f bd 8c 1f a3 66 88 d1 0f 9b f0 19 0f 3c 98 4f bd 08 09 43 cc 7b c7 4d 55 33 84 12 fa 78 a3 96 57 28 0d 43 7f d5 40 1c 43 95 d2 2d 7a d6 e5 79 69 b0 bf 87 f3 9e 93 2a e6 f6 30 14 f0 1e a5 bc 6a d1 66 4a 14 3f b3 5a e5 8b cf 59 e1 9b 5d 05 e3 74 6f ef b6 27 54 29 9a ec 75 3c 75 b0 e5 01 8b 66 1d ca 7f 8e b9 fc 12 d8 b7 5b 02 f1 8f c0 ea e8 2f 02 c2 c7 dc c9 4c 67 da 03 7f 6d 75 ea c5 d1 c9 e6 6d db 99 91 6d af 22 ea 28 08 53 63 8c 55 b3 0e ee 75 be ab 11 6a 4d 79 19 1c e0 8e 23 b9 44 e3 5a a4 2c f2 e6 7e 11 1d eb 20 73 2d fc 8c 55 a0 a8 ce f4 ab 33 43 1f 71 57 be 8c d1 84 44 47 8b 8e c8 ba c3 aa Data Ascii: f=SmpP%9.tD?,)(3Rf<OC{MU3xW(C@C-zyi*0jfJ?ZY]to'T)u<uf[/Lgmumm"(ScUujMy#DZ,~ s-U3CqWDG
2024-04-16 15:05:39 UTC	1369	IN	Data Raw: 14 60 b7 b9 61 f6 7a 03 bc 08 29 0a 18 41 c9 e2 b7 37 02 68 08 41 d2 4b 4f 60 6b 26 46 22 0e 88 73 b3 a7 bb 8f 26 4b 02 21 5e 85 94 65 ca 41 1c 3f 34 8b 29 0d 27 e9 5f 5f 82 59 0d 60 7d 87 e7 e6 5e 29 9b cb 00 8b e6 df 1c 9e 38 d4 b4 e6 01 87 28 b9 97 6f ce 32 b8 e6 6e 1f 3d 18 22 ed 03 27 3e 78 31 27 14 89 65 99 3c e2 a1 b9 20 bf 79 c9 b6 62 f4 7f 8c 37 b5 e0 73 62 d4 40 50 c3 7d e3 c2 f0 a7 2b e6 fb 6a bb e9 f3 61 9c 37 41 c3 fd 76 57 fe 84 07 bb 8b 63 d5 45 c6 a6 f0 46 b8 32 32 21 6c 4a 78 7c 54 1b 8d 2b c2 2b 09 a7 eb c0 ac 06 e3 2b ca 7e a5 a8 98 80 1a aa d2 93 85 60 9c b3 f8 05 d8 3d 06 59 b0 a5 65 47 9f 82 f0 64 7d 85 9d ab fc 75 7b c0 e4 a9 af 65 de 1b a2 26 9e e0 16 13 29 f2 3d a9 cb 9a 0a 57 73 31 39 2c 79 b7 d0 cf c1 29 ea e0 84 ae c2 1d 48 22 Data Ascii: `az)A7hAKO`k&F"s&K!^eA?4)'__Y`}^)8(o2n="'>x1'e< yb7sb@P}+ja7AvWcEF22!lJx\|T+++~`=YeGd}u{e&)=Ws19,y)H"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.11	49801	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:36 UTC	615	OUT	GET /wp-content/uploads/2018/11/2.jpg HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:41 UTC	392	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:41 GMT Content-Type: image/webp Content-Length: 81966 Connection: close Cache-Control: public, max-age=31536000 X-Hcdn-Image-Optimizer: f:webp q:85 w:1600 alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 21abc8d90566ae0f49faf9eb8cd02918-asc-edge3 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 5.308 Accept-Ranges: bytes
2024-04-16 15:05:41 UTC	977	IN	Data Raw: 52 49 46 46 26 40 01 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 57 02 00 8f 01 00 56 50 38 20 82 3f 01 00 30 d0 02 9d 01 2a 58 02 90 01 3e 49 1c 8b 44 22 a1 a1 1a eb cd d8 28 04 84 a6 e0 ed 8c e0 27 17 c8 bf c9 d9 3f 62 7d 14 fa 3e 6d bc cb e1 5f d5 3f 1f eb ad fd 6e aa 7e 53 fe af 97 a7 ba 7f 5d f3 91 f3 6b fe 9f ed f7 ba ff ea df ee 3f f9 fb 85 7f 4b ff 05 f9 33 f0 87 ff 5f ad 8f f1 9f fb 7d 4a fe df 7e e4 fb d0 ff e9 fd bb f7 93 fe 33 d4 17 fb 4f fa 3f fe 5d 8a be 81 ff b8 be b3 9f fc ff 77 fe 1b 3f c6 ff e8 fd d9 f6 c0 ff ff ec 01 ff eb db 43 f8 07 ff 2d 65 7f 34 fe 3f fd 3f e5 07 99 be 23 bd 71 fb bf f9 bf f8 df e0 fd b7 31 4f d7 2f fb 7f e4 fd 42 fe 65 f8 13 f6 df de ff cd ff ea ff 31 ee 9f fc df f3 be 29 fe 7d fb 6f fd 4f f1 3e c0 bf 94 ff Data Ascii: RIFF&@WEBPVP8XWVP8 ?0*X>ID"('?b}>m_?n~S]k?K3_}J~3O?]w?C-e4??#q1O/Be1)}oO>
2024-04-16 15:05:41 UTC	1369	IN	Data Raw: c9 ac 62 39 da a0 db 3e 95 57 96 8b df a3 80 21 0c 1c 65 7f 9d 25 9c f9 1b 2b 4e c0 bd c3 71 4b 75 02 9a 30 c5 52 75 59 b8 a9 13 d3 e4 60 31 31 e9 32 42 9d 47 c3 48 d6 a8 e6 2b b7 ab 83 d6 b9 92 fe 18 1f 7b af 6e c4 d5 3f be 6d 9a 9a 55 c2 f8 a1 19 81 1f a1 1f c1 f8 7c 42 c4 17 a5 6c 05 ce 23 be e0 75 00 64 54 02 24 b0 3e 90 84 65 c0 c8 17 7d 99 ff 9e cc 17 c8 80 81 b1 d1 3e 3b 86 b5 dc 60 38 c3 a3 59 20 24 4e 4b 82 04 d5 ab 19 98 8e 66 74 0d 5f a9 7a ac 11 81 50 30 89 7c 0b 77 5d e7 e3 3a d7 64 24 ce ff bb 4b 48 c5 e3 05 05 97 e1 25 40 dc 3d 44 c9 54 10 07 2a 8f 2c 86 e8 4c 2d 14 3a f3 90 92 ed 3e a8 07 c7 f4 ba 00 dd f2 13 89 a8 66 d7 b7 ed 38 4e 8e 62 c0 e3 f9 89 8f cc 15 f7 e6 e8 88 98 7e b2 63 6d fa f0 dc ed 55 47 b6 07 de f9 16 34 a9 4c 51 a1 f2 e1 Data Ascii: b9>W!e%+NqKu0RuY`112BGH+{n?mU\|Bl#udT$>e}>;`8Y $NKft_zP0\|w]:d$KH%@=DT*,L-:>f8Nb~cmUG4LQ
2024-04-16 15:05:41 UTC	1369	IN	Data Raw: 1c f3 2b 6d e2 12 b5 f3 3c a5 f4 cf ff ca 2e f4 cc 79 64 c2 5d 7b f5 c8 29 a9 1a 26 77 a8 41 00 66 c0 73 d8 c7 56 ca 5c f3 2a 47 35 7e b7 cc ee a2 25 62 6d df 19 a1 11 24 77 5e 78 a6 45 8d f8 76 6c 3d 7d 71 9e 3b a1 9d a0 5e 40 30 b2 de ba e4 56 a0 aa 08 51 99 72 7c 8d 65 23 b3 9f ba 6a 4c 55 46 58 9f 9b 01 08 72 8c 67 c0 c5 41 5b 92 a4 6a c8 40 fa e1 b9 fd 93 f3 17 27 cc 54 94 62 b7 fc e6 63 95 16 f2 47 74 e6 e6 99 d3 17 20 ae b5 fa 0f 58 3d 34 0f 0d 7b 61 77 77 d0 ea 78 2a ac 40 90 ff c9 9a 42 c3 c2 65 3b 41 f4 ca 6c c9 49 33 60 46 4e a1 9e 28 84 b0 67 04 a1 a1 0c b8 b4 8b ab f4 95 25 f3 9f 18 1a bc e9 69 0a bb 14 8a 6f d6 f6 2b 50 2e c5 dd 20 3f f7 42 f9 a7 5f b4 25 24 21 e0 15 65 eb ac b2 8b df 2f 7b 53 25 23 ad de 04 86 14 8a 72 52 12 07 97 c5 a0 c8 Data Ascii: +m<.yd]{)&wAfsV\G5~%bm$w^xEvl=}q;^@0VQr\|e#jLUFXrgA[j@'TbcGt X=4{awwx@Be;AlI3`FN(g%io+P. ?B_%$!e/{S%#rR
2024-04-16 15:05:41 UTC	1369	IN	Data Raw: f7 ef 6e f6 45 e7 97 3d 58 b4 12 e3 03 5b 84 8b d6 df fa 93 3b 6b 72 0f 3d 87 e7 c7 85 9d c6 7f 91 07 1c bf 97 d5 37 e3 0a 63 36 6a 5b d3 e2 db 1f fc bb c4 16 b2 84 8d 95 87 01 c7 ec 0f c5 b9 a8 4d 10 e3 a4 99 bd 71 78 ca 4d a0 9e 87 b9 d8 d9 9f 4f 98 c4 3d 9c 2a ab c1 26 b4 a3 f5 d6 17 40 03 5b f5 e8 5a b5 0d 4d 06 05 5a e0 dd 64 02 97 3f 71 86 03 a9 5b 61 7c 79 b2 08 1c 6c 68 eb 3d 30 d1 d1 28 72 c4 fa 54 d7 c7 19 93 e8 99 35 ab 05 9d bf 0d 0e f0 13 60 19 5c ae 8d e8 12 76 cf 8a 6a ea a2 5a ac 80 62 50 2b d5 37 34 fa ff 54 d2 6b 67 33 f6 3a b1 aa be 18 4c da 56 c5 ad 0d 40 84 6a f4 bf 2f 30 52 60 80 a9 31 fc 0e 84 b1 3f 6b 74 01 04 e7 d9 61 45 fc eb 39 48 12 b4 2e d2 d0 b2 18 a0 7e 4b 2f 3d c1 d5 00 cd 60 6e 58 20 71 6f 83 59 de 52 17 59 f8 96 98 3b a5 Data Ascii: nE=X[;kr=7c6j[MqxMO=*&@[ZMZd?q[a\|ylh=0(rT5`\vjZbP+74Tkg3:LV@j/0R`1?ktaE9H.~K/=`nX qoYRY;
2024-04-16 15:05:41 UTC	1369	IN	Data Raw: 86 59 87 62 74 a2 69 8e 71 5a 6d 91 2a bc e0 08 d9 b8 99 e5 97 e1 4a f7 fb 5b ae ac dd 1c b4 5d b2 8f 3d ce 3b 47 b0 b0 9d 14 48 54 d3 3b c6 bc ec 75 11 a7 cf 59 6e 74 54 fb 9f 06 40 15 d9 10 65 11 71 83 e9 a7 83 ff 31 53 20 70 c5 e2 c2 e8 64 1e 6c 0e 3a 21 8c fc 6c 5b 65 eb de fc c7 da 2a ef 46 5d 94 21 91 5d 22 40 93 d9 98 1d 5e e1 3e e6 32 1d 1d f8 33 77 2f 3e 02 1a 65 fa a1 ed 6c 61 db 5f fd 9c e5 8b a6 09 3c ad 4c 2e a0 d4 79 3a b7 8f c4 fd 7f 85 00 48 7b 6c 7d 64 a9 bb 45 f8 1e 91 1d fd 22 e4 5f d3 97 84 10 07 7f 97 96 93 c1 77 ed c0 d1 1b ac 79 98 78 f8 5e 78 2e 7d cb b1 a1 36 72 75 71 61 51 2d d2 91 83 c6 69 5d c5 7b 25 b6 c2 89 33 40 1c 19 61 db 1c df 33 0f 14 ae bc 29 2b 19 3d e4 90 7b 77 05 c2 ea db a3 18 77 50 06 5e 4b 85 a1 ec 58 1b 4a c9 98 Data Ascii: YbtiqZmJ[]=;GHT;uYntT@eq1S pdl:!l[eF]!]"@^>23w/>ela_<L.y:H{l}dE"_wyx^x.}6ruqaQ-i]{%3@a3)+={wwP^KXJ
2024-04-16 15:05:41 UTC	1369	IN	Data Raw: 10 30 e9 04 30 b3 80 f4 f4 f1 d6 63 e9 2c 67 9c 16 7e 3f 7b c3 b3 6c e0 4b 28 c2 17 02 cd 89 93 10 9e f1 f0 cc e6 bb 43 f2 99 a7 8f 34 22 dd 98 68 aa 70 9f db 46 5f 12 8b 1d cd 79 b9 62 9f b3 ae 45 3d 22 d3 5c 35 75 2e 23 cd 03 7f ff 12 e2 b2 ff 37 8c 09 e3 52 52 b0 97 f2 0c e4 9c f8 03 95 9b e1 70 a7 72 a1 ce 76 ee c2 64 4a e2 be d8 36 ef d1 34 58 fe 97 4b 74 4f bb c8 06 e3 d4 01 30 67 57 73 49 63 4c 5c f5 a2 a1 4a 87 74 bf df e5 65 e4 a0 c9 94 24 10 59 24 ba f9 82 a9 96 26 63 d9 1f 57 a0 e4 5d 92 22 5e 81 f3 58 52 c7 96 6b 1a 17 42 98 7b 96 35 42 0d 56 de 02 f0 01 22 a0 a7 79 3d b8 ce 9e fe 3b a5 1e 07 83 8a d5 df 9b 14 f9 e5 7d b4 b8 23 54 e9 41 fc c7 fc 54 b6 0a db 54 af a4 3e 24 57 c6 59 f1 c4 83 1f 90 e5 4d 7b 2a fb ce cd 51 f2 c4 ca 78 bc d1 72 d0 Data Ascii: 00c,g~?{lK(C4"hpF_ybE="\5u.#7RRprvdJ64XKtO0gWsIcL\Jte$Y$&cW]"^XRkB{5BV"y=;}#TATT>$WYM{*Qxr
2024-04-16 15:05:41 UTC	1369	IN	Data Raw: 6d 20 07 82 31 07 7c a9 26 c4 19 87 ad 2e 47 40 1d f7 c1 92 79 41 c3 67 97 28 96 91 89 13 31 f9 80 35 ce a6 71 ec ec 09 4e 28 19 1a 28 e4 02 1b 79 59 ed 2e 03 4b a6 e1 83 4b a7 f6 34 e4 6c 16 5a e4 97 a6 09 5a f5 47 2e d9 9f 67 bf 3c 49 98 8e 81 fb ec ce 24 d9 46 04 93 3a 84 05 73 25 69 9d d8 b0 50 93 13 ce a6 09 14 e5 a8 10 89 0c f5 5d de 09 00 59 43 e3 cc f0 ea 93 d9 a9 d0 24 01 0c ff 01 ce 26 69 ed fb ee 48 c6 17 52 07 31 0c 74 6b d9 81 a2 53 f0 1c 2d 8d 9c 36 6f 83 a4 6c dd 61 0b bc 7a 19 b1 a4 7b 41 bb 83 d0 46 10 41 ea 06 3b 32 3e 3c 2b 48 ff d8 b6 69 c1 08 02 7d 32 de 93 71 7a 00 7d b2 3a 00 c7 51 d1 cb d4 05 eb a1 43 cc d9 c8 0b ae 84 0b e7 9c 27 f9 e1 74 91 52 b1 82 9e bf 29 a1 99 10 fb b6 40 96 09 42 15 6e 37 de f9 12 f5 68 0c ba 9c 72 70 ad 04 Data Ascii: m 1\|&.G@yAg(15qN((yY.KK4lZZG.g<I$F:s%iP]YC$&iHR1tkS-6olaz{AFA;2><+Hi}2qz}:QC'tR)@Bn7hrp
2024-04-16 15:05:42 UTC	1369	IN	Data Raw: 13 45 b3 33 98 3d 24 ff 05 a6 58 82 35 40 27 17 7f 67 81 7a 13 32 1d 46 c9 f6 9a bf 08 1b a2 86 74 bb ed a3 50 73 49 9d 34 7c d0 61 58 3c 3f bb cc f0 fe 6e 80 e5 35 bd f0 ad 12 a9 7b bb 35 a0 a2 7f 59 ab cc 2c f0 21 f0 40 2f ea 73 02 6f 05 76 c4 a1 5c 18 e4 2b 69 f4 67 e9 37 12 71 96 cd 83 4b e0 dd 4a 4a c3 bb 7f fc b0 00 a1 55 31 72 fd c5 9c e0 37 b0 40 fe b2 4d 1a f6 34 0b 57 a5 fa 19 39 da 8a 99 46 8d a0 73 ac 83 74 12 fc 12 76 e0 37 53 d5 6e dc 32 bb 33 67 ab df 8e dd a7 6f da 64 90 50 d5 8b 3b 7f 5c f6 cd f5 d4 1c d7 78 22 8f 2b 38 69 95 69 38 b3 2b 9f ae ea 4b 8b 2f 30 ba 4a 43 06 3a 9f 5a 6b 3b 49 dc 13 8c 0b c6 1f 51 9d a9 ff 17 91 48 87 35 fd b5 67 c9 df 6d 73 17 c3 2b 8f e5 94 80 67 41 dc d7 f3 d2 8a 8d 04 24 af 0d 96 ac c6 18 8a 62 fc 8b 91 c6 Data Ascii: E3=$X5@'gz2FtPsI4\|aX<?n5{5Y,!@/sov\+ig7qKJJU1r7@M4W9Fstv7Sn23godP;\x"+8ii8+K/0JC:Zk;IQH5gms+gA$b
2024-04-16 15:05:42 UTC	1369	IN	Data Raw: b9 50 d9 c5 8a ec cf 5a cd 71 a0 09 67 e9 ac bb f7 d6 46 92 f3 86 b7 fd 68 ec 13 bb 91 b6 a7 26 eb 13 26 7e ac 06 28 6c 80 22 f6 61 dd 17 28 e8 dc 4c 2b 63 29 76 9a 47 5b d7 88 6a ee d8 3d e0 e1 8a 15 2f b1 a8 3e 02 58 de b1 6f c6 e0 c9 a3 21 ef 09 d4 aa 72 b6 ea cc 58 ee 3b dc 09 90 47 84 1f f7 15 b6 de ce 26 98 5f 23 79 71 c3 fd 31 94 e8 e2 64 9d a4 77 18 1e 91 21 e6 e7 ef f3 64 4c 00 0a fc 8d 19 32 27 e6 0f e5 e1 e6 b2 97 01 a5 99 38 de a5 b5 fb 25 e7 3c 57 e9 e0 ed 1b 8b 59 09 59 24 0c 29 7c d7 ef cc 8e d0 58 16 7c ce 9d b6 2a ca b7 54 df 9a 7c 2f c4 e3 5a 5f 49 39 6d eb 34 bc 25 ec 7a bf af 77 fe 3c dd 90 12 4d d2 38 4e 62 03 8d 47 0f ec 12 9c f2 62 21 c7 e4 87 e8 ba ce 55 bd c9 65 7f c8 01 89 94 74 36 9b af 98 d6 4a 5f 73 18 d5 1f 28 40 64 2d c0 52 Data Ascii: PZqgFh&&~(l"a(L+c)vG[j=/>Xo!rX;G&_#yq1dw!dL2'8%<WYY$)\|X\|*T\|/Z_I9m4%zw<M8NbGb!Uet6J_s(@d-R
2024-04-16 15:05:42 UTC	1369	IN	Data Raw: f5 bb c3 b0 f7 a9 68 8f fa 1a 12 c4 df 2e ce 10 5f 3c 1e 71 a1 62 f2 d9 7f 44 9f e2 2f 1f 67 ca a5 d6 76 75 c7 fd 39 24 40 32 d6 28 96 0b 51 e0 ab 72 ad 4c cd e3 dc dc e9 75 21 73 83 a1 31 b7 3b e9 70 7f 10 f3 9e 7f b1 85 ce 0f 1a 1e bb b1 f3 ad 9d a7 05 8a 7e 86 e9 11 6f 18 d5 5a 76 e7 98 4f 5c f0 da 9e ed 45 ce 81 ee ff 39 90 4c e3 e6 07 52 d6 9c ce 26 48 c9 ed 89 3e 5b 86 20 48 b9 5a 40 4e f2 18 3a 6d b0 1b 70 72 c1 0a cd 87 47 39 86 87 f9 99 96 7f 6c 05 99 fa 18 12 bc 43 37 86 06 98 14 6c 80 3d a0 38 77 1f 99 da 8f 0e 0f 81 3d f2 fb 55 e1 7c 62 4d 3c da 2f 11 45 dd 32 c7 e6 03 23 bd 0d d3 e6 65 b0 8e b7 78 01 b1 21 ea a2 af d8 53 90 e6 64 9c c1 03 86 a2 6d bc 4f 2e 88 a1 33 b4 56 de b4 f1 09 63 f5 e4 1e 70 dc 57 ff 66 f2 9c d0 20 5a aa db e2 42 9f d4 Data Ascii: h._<qbD/gvu9$@2(QrLu!s1;p~oZvO\E9LR&H>[ HZ@N:mprG9lC7l=8w=U\|bM</E2#ex!SdmO.3VcpWf ZB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.11	49805	154.62.106.12	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:36 UTC	379	OUT	GET /wp-content/uploads/2018/10/lank1.jpg HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:38 UTC	392	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:38 GMT Content-Type: image/jpeg Content-Length: 87629 Connection: close Cache-Control: public, max-age=31536000 X-Hcdn-Image-Optimizer: f:jpeg q:85 w:1600 alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: b0e073e35ba78b86b153508ef159f031-bos-edge1 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 1.748 Accept-Ranges: bytes
2024-04-16 15:05:38 UTC	977	IN	Data Raw: ff d8 ff e1 00 80 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 05 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 4a 00 00 00 1b 01 05 00 01 00 00 00 52 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 69 87 04 00 01 00 00 00 5a 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 02 00 02 a0 04 00 01 00 00 00 58 02 00 00 03 a0 04 00 01 00 00 00 90 01 00 00 00 00 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e Data Ascii: ExifII*JR(iZHHXC!"$"$C
2024-04-16 15:05:38 UTC	1369	IN	Data Raw: c4 72 08 e2 f8 72 35 be d8 23 45 08 d1 4d a6 2d 7e 6f 82 70 12 17 9c 0e a7 42 05 f1 36 3e 31 92 53 65 3d 83 45 2d 5a e3 08 69 2f b0 36 c7 23 22 d6 b6 3c 00 f4 c2 11 10 9b 95 88 04 9e 30 3a 57 1a b7 18 2c e8 0a 9e 2e 70 1e a9 4a 93 87 c3 44 a5 49 b2 f3 49 19 00 5a e7 08 98 a1 70 4f 97 6e 30 cc 7a db 6d 87 a6 3a a8 5c 83 d8 63 5e 5a 59 73 26 a4 66 57 b8 e3 d7 13 92 a3 58 20 b5 97 6b ef 88 4c 9a b9 04 82 7b 9c 74 db c3 24 29 d8 db 16 5a 0a 96 9e ad 01 ec a4 5c 1e 2d 80 f5 31 d9 b7 18 2f 4c 59 d8 bc 8c 4e d8 85 5d 1a 16 16 06 f8 38 cd 1a 54 54 18 d0 12 4a e1 56 25 ad be 1c 44 d2 4e db 1e d8 70 47 e6 be f8 a7 9a 29 cd d9 34 23 b1 27 6c 2c 20 0a 09 1f 7c 3c cb 7b 6c 46 d8 ee 9d ad 63 6c 2a d3 29 45 61 61 8e f8 87 4d ad 85 48 87 57 b6 3c 91 ea fe f8 81 42 b8 18 Data Ascii: rr5#EM-~opB6>1Se=E-Zi/6#"<0:W,.pJDIIZpOn0zm:\c^ZYs&fWX kL{t$)Z\-1/LYN]8TTJV%DNpG)4#'l, \|<{lFcl*)EaaMHW<B
2024-04-16 15:05:38 UTC	1369	IN	Data Raw: c2 1c 53 02 7e 2b 5b 0b 00 13 6c 7a 35 36 e3 0e c6 96 7b 73 85 93 4a d3 6c a4 f6 c4 79 68 9a 53 70 30 50 d3 11 b9 df 0b 58 8a 73 72 00 ed df 02 25 cb b2 9d 56 6d d5 76 5a 51 19 be 90 4f 16 c3 42 25 0c 6c 34 ed df 07 2b a9 91 8e b6 f2 fb 7a e2 0c b4 8e 10 68 6b 83 ce 35 c7 30 23 55 92 48 48 3a 21 2e 2c db ad ce 1b 95 0e 9d b8 bd f6 c1 27 a4 ba 85 bf 6b e2 24 b1 ca 80 80 a4 81 cf b6 34 b5 e0 a4 96 e5 50 fc f7 b1 d8 e1 0e a2 c2 db 9c 49 28 1c 01 63 bf ae 12 22 28 7c c0 9f 7c 32 d4 05 36 b1 05 17 3c e3 de 19 d5 61 89 01 40 6b da f6 c7 48 bb 5c 8e 3f ae 12 e2 b4 36 93 0b 18 18 eb 46 00 d8 5b db 12 4a fb 5b 0a 11 82 2c 6d ab 0a cc 99 48 69 40 2e 48 be 38 12 db ec 0e 27 bc 3b dc 61 93 16 f7 c5 e7 54 5a 90 0e 94 dc 82 4e f8 eb be c0 ed e9 89 11 40 1c 12 40 1e b7 Data Ascii: S~+[lz56{sJlyhSp0PXsr%VmvZQOB%l4+zhk50#UHH:!.,'k$4PI(c"(\|\|26<a@kH\?6F[J[,mHi@.H8';aTZN@@
2024-04-16 15:05:38 UTC	1369	IN	Data Raw: a6 60 b8 de a9 d8 21 b1 42 33 ba 5e 94 ae af 8d ba 4b 2f af cb b2 e8 15 5d 60 cd 0e 86 f1 83 6c 1c 80 cb 22 a2 96 02 ed 73 7b df 0b e8 3a 4f 0b ab b2 1c de 4a fc 9a 8e 93 24 ac 15 d3 c9 5d 54 15 fc 2b 80 23 16 52 59 cd c9 d3 63 63 60 0e 23 66 d9 45 55 35 3b 56 23 4d 0c 51 45 2b 16 60 5c 90 b6 b2 92 3b ef cf df 0c d3 64 91 d7 53 d0 3d 45 4d 2c df b4 e3 2f 1a 99 37 f2 9d cb 00 7c bb 8b 6f 8d 71 f4 8c f9 33 39 ad af 5e 78 2c ed e8 e7 38 d5 ae fc 41 ea 1c d7 a9 7a b2 be aa b7 3a 7a f1 ae 48 62 58 11 bc 1f 04 3d e3 11 ad c2 a8 b5 b9 04 93 b9 37 c4 2e 93 eb 1a ce 8b ea 28 33 9c b2 91 e3 64 1a 5b c5 90 2c 13 a1 b8 b4 96 36 36 e3 d6 e3 df 11 73 1f 86 cd 98 b3 d7 65 d9 ed 34 4e 07 9e 9c 46 eb e1 b0 bf 04 5c 10 76 c0 dc ab e1 df 56 53 57 c3 05 45 75 15 2c 44 eb 60 Data Ascii: `!B3^K/]`l"s{:OJ$]T+#RYcc`#fEU5;V#MQE+`\;dS=EM,/7\|oq39^x,8Az:zHbX=7.(3d[,66se4NF\vVSWEu,D`
2024-04-16 15:05:38 UTC	1369	IN	Data Raw: b6 c7 74 7f 4c 29 78 27 fa e2 28 bc a2 c3 8c 3a a0 da de 98 f2 8d b0 b5 04 0b 62 5a 24 e2 2f 73 87 51 00 c3 6b b9 1b f6 c3 a8 40 b0 c4 b5 69 6a 96 e0 61 e5 88 61 28 c3 9e 70 fa 35 c8 b8 c5 66 44 02 ec 31 ef 6e f8 99 4f 1d b7 b6 1b 84 2d c1 c4 97 96 9a 92 96 6a aa b9 92 9e 9a 08 da 59 a5 73 65 8d 14 5d 98 fd 80 c0 39 d4 35 44 02 c5 fa 9c bd 77 c5 4e a4 cd e9 e9 be 66 8b 2b 82 4a 5a c5 79 56 35 2e 90 a8 52 09 ee 18 de c2 e6 c0 e3 3d ea 2e 9a a9 a1 a0 a6 7d 26 24 aa 97 43 11 25 bc 29 41 36 45 23 b5 ad bf 7b d8 f1 8d 36 aa 99 33 cf da 55 67 5d 14 59 a4 ff 00 30 19 54 16 56 99 ac a1 87 b4 6b 7f b9 c0 fe ac e8 bc be 9f 2a 4c d6 3c ee aa a1 69 a5 8a 37 a2 49 ed 24 40 0b b3 69 6e 01 0c 1a fe b6 c7 8b 96 40 e9 9c f1 c4 f3 f5 5e b2 06 65 85 ad 3c 07 f6 8a 7c 4b 8d Data Ascii: tL)x'(:bZ$/sQk@ijaa(p5fD1nO-jYse]95DwNf+JZyV5.R=.}&$C%)A6E#{63Ug]Y0TVk*L<i7I$@in@^e<\|K
2024-04-16 15:05:38 UTC	1369	IN	Data Raw: 07 95 2b e6 07 16 05 e9 89 e4 12 9a 1a 08 9d a6 d4 95 28 2a 8d 85 d4 a7 95 49 3c 9b 1b df b0 c4 1c b7 28 ae 4a c8 60 12 e6 94 55 74 72 79 1a a0 47 2a 30 fe 42 54 83 63 d8 7a 13 8d 21 ed a2 d6 9a 1d c5 03 63 6b 48 b6 ea 8c f4 ff 00 55 fc 46 e9 ae 97 4c ab 21 ea 0a ba 5c ba 28 1e 78 c4 94 91 b7 86 1d cd ec 48 26 d7 3f 8b 9d b1 ee 89 ea 4e be cb 33 5c c6 78 7a c6 36 ac aa 8e 25 aa 96 b2 96 35 76 6e da 4f d0 36 3f 56 fb 1f 7b e2 67 ed 8a 70 6b 60 7f 98 85 96 8e 51 f2 4d 4a cb 14 61 85 88 56 d4 d7 17 17 bd f8 38 66 8f a0 7a 83 32 a8 a3 cd 3a 6e 96 9a bb 2a 4a 53 4f 33 4f 32 2c 8e d6 3a 8e 8d 89 00 69 dc d8 d8 61 c2 77 86 96 dd 25 bf 0b 13 8e 6c b6 b4 5c 87 e2 cf 5c d4 78 70 3d 2f 4c e6 a5 aa 5a 94 d4 45 e2 42 16 50 6c 10 8d 47 9e c7 82 76 c0 df 88 7d 7b d7 53 Data Ascii: +(I<(J`UtryG0BTcz!ckHUFL!\(xH&?N3\xz6%5vnO6?V{gpk`QMJaV8fz2:n*JSO3O2,:iaw%l\\xp=/LZEBPlGv}{S
2024-04-16 15:05:38 UTC	1369	IN	Data Raw: c2 0c 61 cd 80 24 6e 2c 16 ff 00 7b 0c 7a bb 2d 8e 9e 46 ac cb aa 0c 99 7b 4a 5b 44 50 99 23 88 82 2e da 4e eb ce a0 37 c6 9f d7 ce 47 56 f7 1d 7c fb fb fb fe a8 04 6d dc 05 a2 e4 df 1a eb ab 2b 20 84 d1 d2 b2 19 6f 31 31 96 6f 04 0b 93 e5 e2 c0 12 4d bf b6 35 be 89 cf 21 ea 7c 82 3c d6 05 88 16 76 46 48 5c c8 a0 a9 ec 6c 2f 71 63 8f 99 aa 96 7c ab 37 cd a9 a8 72 aa aa 4a 9a 33 2b d4 08 58 bf 87 09 00 1d 6d 61 b1 06 e7 81 e6 18 b1 52 fc 57 ea 4a 8e 95 8b 26 ca e8 3c 29 a1 0b 01 92 8e 98 aa e9 37 50 0e 91 f5 b5 d6 c7 6b 1f 5b e3 a7 86 c6 cb 13 ce 72 5c 3e ff 00 65 4f 85 a4 53 46 ab e8 2a 0c de 86 bb 38 a9 ca e8 5d aa 27 a6 89 65 99 d1 6f 1a ea 36 0b 7f e6 ef 6c 12 2a 2d 6c 7c aa 73 2e a8 a4 ae a9 cd 25 9e a2 2a 93 56 63 9e 53 26 82 92 aa dd 81 dc 5d 82 f6 Data Ascii: a$n,{z-F{J[DP#.N7GV\|m+ o11oM5!\|<vFH\l/qc\|7rJ3+XmaRWJ&<)7Pk[r\>eOSF8]'eo6l-l\|s.%*VcS&]
2024-04-16 15:05:38 UTC	1369	IN	Data Raw: a5 a5 cc 29 b3 5a c8 6a 23 b2 eb 8e 3f f1 06 a0 40 3b 6d c7 38 c7 7a 33 ab b3 ac a7 ab 25 59 33 39 25 96 45 91 5a 9e a2 3d 06 50 db 80 0f 7d f9 be c3 6b 62 9b 65 16 5b 5f 44 57 c5 1c 73 13 1c 5a 74 e8 42 ca 02 dd 4a 92 76 f5 03 81 df 09 a8 cb a3 9e 91 04 a5 a4 a7 95 d6 e0 a0 60 d7 63 e5 bf 36 f7 c6 4f 9b fc 4d eb 3a 8c c2 5a 34 c9 e8 29 23 98 a8 84 c8 09 91 16 c4 12 08 24 13 73 a8 13 c6 21 8f 89 3f 11 f2 9a 8a 78 65 c9 a9 6b a3 a5 90 a3 c4 cc 0b 54 00 2c 2f 6d ee 6d 7d 5e b8 68 df 64 9c a6 ad 69 9f 10 68 21 a5 c8 92 ae 0a 38 d7 4b f8 46 27 37 5d 37 bd 88 fe de 98 03 98 78 b4 59 44 55 71 53 86 86 58 51 c2 19 18 aa 96 d3 c0 f6 24 1c 05 8b e3 17 4c 8c 95 b2 8c df 2c ac a3 40 9a d1 1a 5d 46 1b 5e eb 76 b1 3b ec 07 a6 0c 64 3f 11 3a 0b 36 19 66 4b 4f 9f 34 33 Data Ascii: )Zj#?@;m8z3%Y39%EZ=P}kbe[_DWsZtBJv`c6OM:Z4)#$s!?xekT,/mm}^hdih!8KF'7]7xYDUqSXQ$L,@]F^v;d?:6fKO43
2024-04-16 15:05:38 UTC	1369	IN	Data Raw: ae e6 f7 c3 c4 02 6d 61 ef 87 69 a1 50 43 1e 70 76 86 92 e9 68 55 90 b3 6c 39 17 c7 b0 46 34 72 a1 76 db 9c 7b 03 99 58 14 be 23 ea 0c f6 0c bf 35 90 65 8d 04 d4 ef 29 66 0c e4 f9 41 24 03 6f a4 8f ce 23 56 f5 2d 4d 45 61 d5 0c b0 f8 c8 06 88 ee 4a 82 37 da d7 df 6f c6 36 1c c3 a1 3e 10 67 f9 be 61 51 1e 61 25 15 74 60 b5 45 34 75 25 17 53 2d f5 59 87 37 e4 02 05 c9 c0 28 be 12 2d 2d 64 15 9d 3b 9d 7e d7 a6 82 03 50 91 20 63 33 01 22 a9 03 4d ae 06 f7 5e 6d 8f 0e 70 98 7b 19 48 73 bc 08 fa 7f 0b a4 ce d8 a2 55 7f a5 7a cf 39 c9 15 25 cb e9 24 a9 92 be 5f 97 92 15 4b 33 10 2c 02 f7 d5 63 6b 8e 0e f8 27 f1 23 a4 aa 73 1a 3c b7 3e 86 4a fa da 2a 8c a8 34 65 29 d5 aa 44 8a 80 b4 b3 69 1f 4d 8d cb 01 73 6f be 22 c7 9e cc bf 3d 5b 5f 95 51 cb 9f 4a 5a a6 8a 19 Data Ascii: maiPCpvhUl9F4rv{X#5e)fA$o#V-MEaJ7o6>gaQa%t`E4u%S-Y7(--d;~P c3"M^mp{HsUz9%$_K3,ck'#s<>J*4e)DiMso"=[_QJZ
2024-04-16 15:05:38 UTC	1369	IN	Data Raw: 09 20 85 04 de db dc e0 a3 69 8c 5e ea dc f0 e3 95 6c 79 66 5d 16 43 97 25 14 19 50 a7 85 0e a4 74 b6 8d 40 12 40 50 43 10 38 b9 e6 f8 a4 fc 51 95 6a 32 fe 9f 8a b6 ae 2a 14 f9 d4 9a aa a2 50 59 29 cb 00 10 90 37 b1 25 8f e0 fa 62 bb 0e 69 41 57 d2 f9 a5 fa 88 c7 9e 4a 8d e0 de 69 54 85 6d cd 95 85 b7 e2 e3 7f ed 80 dd 15 9e f5 be 77 9b cf d3 f9 98 a7 cc 68 33 08 52 09 9e 48 52 59 93 4a 32 20 00 d8 95 1c 5b df f3 82 7c 85 8d 2f ee 55 d5 e6 21 bd ea 47 5f 9a 6a c5 4c 9a 09 ea e4 6a 14 20 f8 15 67 ce e1 9b 49 36 f2 9f 51 b7 07 19 cf c0 ac db 22 c8 3e 39 e5 79 d6 6d 31 92 92 9a 39 2a 24 7b 96 61 29 1b 5c 9d d8 86 b6 35 5e 9c ca 33 48 b3 38 e3 cd e8 da 1a aa 6a 28 84 88 f1 e8 66 31 86 b9 b1 3d fb 6f be 31 1a ea 56 cd 3e 2c 54 53 d2 4f 14 2e e1 16 37 66 d0 a1 Data Ascii: i^lyf]C%Pt@@PC8Qj2PY)7%biAWJiTmwh3RHRYJ2 [\|/U!G_jLj gI6Q">9ym19${a)\5^3H8j(f1=o1V>,TSO.7f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.11	49803	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:36 UTC	713	OUT	GET /wp-content/plugins/revslider6620n-1/public/assets/fonts/revicons/revicons.woff?5510888 HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://niceindiatravel.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://niceindiatravel.com/wp-content/plugins/revslider6620n-1/public/assets/css/rs6.css?ver=6.6.20 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:39 UTC	612	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:39 GMT Content-Type: application/font-woff Content-Length: 7536 Connection: close Vary: Accept-Encoding cache-control: public, max-age=604800 expires: Tue, 23 Apr 2024 15:05:38 GMT last-modified: Wed, 20 Dec 2023 12:52:54 GMT etag: "1d70-6582e3a6-bba29c8b63d74698;;;" platform: hostinger content-security-policy: upgrade-insecure-requests x-turbo-charged-by: LiteSpeed alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: e7631a605029babbc7470928cfdd8c28-asc-edge5 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 1.969 Accept-Ranges: bytes
2024-04-16 15:05:39 UTC	757	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 1d 70 00 0e 00 00 00 00 2e c0 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4f 53 2f 32 00 00 01 44 00 00 00 44 00 00 00 56 3e 28 48 9e 63 6d 61 70 00 00 01 88 00 00 00 66 00 00 01 82 a1 1e a3 26 63 76 74 20 00 00 01 f0 00 00 00 14 00 00 00 1c 06 d7 ff 06 66 70 67 6d 00 00 02 04 00 00 04 f9 00 00 09 91 8a 0a 78 3b 67 61 73 70 00 00 07 00 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 07 08 00 00 12 1c 00 00 1b 6a 9a 21 54 81 68 65 61 64 00 00 19 24 00 00 00 36 00 00 00 36 00 6a 3d e5 68 68 65 61 00 00 19 5c 00 00 00 20 00 00 00 24 07 df 03 ad 68 6d 74 78 00 00 19 7c 00 00 00 5f 00 00 00 b0 7c 63 00 00 6c 6f 63 61 00 00 19 dc 00 00 00 5a 00 00 00 5a a5 ef a0 1e 6d 61 78 70 00 00 1a 38 00 00 00 Data Ascii: wOFFp.OS/2DDV>(Hcmapf&cvt fpgmx;gaspglyfj!Thead$66j=hhea\ $hmtx\|_\|clocaZZmaxp8
2024-04-16 15:05:39 UTC	1369	IN	Data Raw: 81 54 71 d4 a1 56 e2 e8 30 93 5f f7 91 4c 2a cd 40 a6 8c 62 45 a5 ee 81 b8 dd fd 74 db 16 31 3d 74 3a be 2e 4a 95 46 aa ba b9 ce 28 9a ed d1 f1 a8 83 28 0f d9 c6 e9 a4 dc d0 d9 f6 f0 e5 19 53 54 ab 5d 71 b3 ed 40 66 0d 5c 4a c9 6c 74 9f 44 00 1d 26 52 e3 e9 01 4e 35 9c 02 a9 19 f5 47 c5 d9 e7 cf 01 12 c9 5c 94 aa 3c 55 32 87 7a 03 99 33 3b 7b 71 31 ed 6e 27 ab b2 70 a4 9f 07 32 6f 76 76 e3 9d 87 43 a7 57 87 7f d1 fa 17 4c e1 cc 47 8f e2 62 7e 3e 42 fa 50 6a 7e 22 4e 24 a5 46 58 cc f2 a7 86 1f 71 57 20 42 b9 31 88 0b 17 ca e0 53 84 39 74 45 da d9 66 5d e3 b5 31 f6 86 cf f9 4a a9 61 3d 09 da e8 a3 f8 7e 0a fd 4e 24 2b 1c 67 51 a3 f5 48 9c cd 63 d7 75 ad dc 67 50 4b b5 bb 17 3b 32 af 43 95 22 ee ef 0b 0b ae 33 e7 84 61 9e 16 0b 55 5f 9e f9 de 05 34 ff 06 88 Data Ascii: TqV0_L*@bEt1=t:.JF((ST]q@f\JltD&RN5G\<U2z3;{q1n'p2ovvCWLGb~>BPj~"N$FXqW B1S9tEf]1Ja=~N$+gQHcugPK;2C"3aU_4
2024-04-16 15:05:39 UTC	1369	IN	Data Raw: c0 51 e0 29 25 12 90 51 22 d5 d4 48 fd 44 92 6a 06 49 8d 54 d3 73 e7 f8 1d 63 a3 23 43 03 fd 7d b7 f4 74 17 bd 19 6f 96 7d da 55 7f 1b e0 0d da a0 72 83 25 90 36 7c 5f 32 f6 ba c3 6e cd 84 f6 70 ba 00 d0 1e 8f c5 9b 44 49 d0 d9 9a 2a 2b e2 ee a6 48 ec 46 60 ab f3 05 c8 b7 a7 8d 20 60 03 a6 ec 68 76 c8 76 f3 f0 dc e3 01 59 aa 3c 4a 72 af 55 eb 70 50 78 9d 3a 1c d6 83 97 17 f0 c2 73 22 0f ff 2d 3b 72 99 a8 b5 38 9a 81 2c 5b 77 3c ee 4c 1a 27 8c a4 23 fe 63 87 0c 7f 6b 9d 66 93 d0 cd da 2f 78 b6 c6 a9 bb fc 61 ad 26 cb 1a 5d df 2d 00 08 83 78 62 f9 c3 d4 b2 52 8a 7a 6d 22 be a6 07 c0 d4 be 26 13 3a 33 33 33 c1 3d c9 d5 11 07 09 93 44 31 1e 44 1d 71 01 07 b4 44 78 42 80 47 ce 02 41 3e 73 a3 84 d2 1a ba cc d7 a4 79 3d 82 d6 06 99 14 88 26 20 4b 34 31 b2 08 c4 Data Ascii: Q)%Q"HDjITsc#C}to}Ur%6\|_2npDI*+HF` `hvvY<JrUpPx:s"-;r8,[w<L'#ckf/xa&]-xbRzm"&:333=D1DqDxBGA>sy=& K41
2024-04-16 15:05:39 UTC	1369	IN	Data Raw: 74 2e cb e2 75 3e 3b eb 30 b8 b4 ba a6 58 fe b4 fb 76 58 53 84 27 0d 65 dd 77 53 a1 05 ba b9 32 bb 12 ac bf d4 43 60 1a 74 50 d5 ca 9f 75 af 59 d3 4d ef c6 65 ca 6f f7 76 84 52 e5 33 21 1d 7e d9 97 5b 69 1a e5 87 f5 50 95 af 1f d2 73 74 2f 6a 15 6a 7c a4 5e 95 30 2a 41 09 83 29 1a 44 3f 76 94 0c da 29 58 8f 16 d0 34 de db 16 45 43 67 fa 22 55 94 66 29 c4 59 c3 34 27 6f ab 0f 82 31 98 9e 53 fa d4 a4 3a 35 85 4d 9f ca 7a 75 6e ac 28 53 53 ca 36 83 3d fc f0 87 ca ef 2f 54 52 6c 01 1e 8f b4 fd 9a 7b 8f be 4b 74 a4 ee a6 62 a9 09 03 67 73 3d e6 4f 28 ee 52 04 ed 11 c9 a7 3c d0 11 0c 42 3c 27 f0 c8 70 c6 67 cc 0f af f2 99 90 70 c8 67 20 02 5d 8b 66 25 4f 5b 34 9b d7 e7 25 83 61 17 2a 79 93 9b f9 d1 4c 41 68 cf 62 9a 79 69 dc d4 ca 1e cd 0c 18 10 0a e5 6a e5 5d Data Ascii: t.u>;0XvXS'ewS2C`tPuYMeovR3!~[iPst/jj\|^0A)D?v)X4ECg"Uf)Y4'o1S:5Mzun(SS6=/TRl{Ktbgs=O(R<B<'pgpg ]f%O[4%ayLAhbyij]
2024-04-16 15:05:39 UTC	1369	IN	Data Raw: 18 03 35 54 ea d9 15 ac 9e 1d 62 f5 6c af a6 a9 2a 10 4c 26 02 f5 3e 43 57 bd aa d7 e3 76 8a 04 6d 5e b6 63 d9 b5 2f 6b dc 61 77 dc 1d d6 ed 31 3d 95 e8 ec 4c 58 db 5a ba 3a 13 70 d0 da f6 0a 24 ad 73 2d 5d f4 52 65 b2 ab 05 1e 69 e9 b4 6a 19 68 dc 3a 37 8e e3 24 e6 f4 9f cd bc c3 9d e7 3c 18 85 43 8c 73 68 c3 74 02 2f cb 34 17 bb 59 d5 ad f7 37 06 fc a1 fa d0 22 1e 3d b0 09 a2 24 c6 f0 67 82 e4 a2 2c f1 2a 40 be 99 4b e7 32 98 29 6a 68 45 bd 9d 9e 06 b5 6f 28 66 7a d2 94 2e 7b 71 e7 f4 1b b2 e3 e5 1d 10 e9 35 93 c9 42 32 49 b7 2c de 39 24 f2 01 47 22 d5 d9 eb 6a 58 be fc e7 07 ef 7d 3f 32 54 7e 28 59 4c 24 8a 49 72 d5 a7 6d a0 bb 30 77 44 7b 12 af eb b7 fd 4c 0c 5e 74 22 06 33 a9 6a c2 95 cf fd 8f 2b ad c6 62 d3 d3 b1 98 ba 58 7d 47 55 5f a3 f7 a8 6a 73 Data Ascii: 5TblL&>CWvm^c/kaw1=LXZ:p$s-]Reijh:7$<Csht/4Y7"=$g,@K2)jhEo(fz.{q5B2I,9$G"jX}?2T~(YL$Irm0wD{L^t"3j+bX}GU_js
2024-04-16 15:05:39 UTC	1303	IN	Data Raw: 2e 68 c0 5a 5f 23 5a 93 db eb 75 eb 5a 5b 54 6f 42 de 30 15 6a 42 66 65 72 f9 b4 21 b9 b1 98 64 25 1a b2 0b 27 b3 58 65 19 92 2e 54 e7 e2 6e 7b 61 81 bd 89 a1 c5 7c 24 19 e9 e8 88 e8 7e e4 c1 de 7c 68 71 a8 a3 23 94 6a a6 e5 bf ca 87 16 85 00 07 8b 43 1f 6e fb 91 2f 12 f1 fd 68 1b 7c e6 37 21 e4 b3 9c d0 bf cd 92 d9 1c 7c ba ed 19 bf 49 23 c6 33 db b6 5a 7f 6a cf 7c 77 2b f8 ed 29 eb bd 59 3e 73 bb 69 27 e6 d4 98 85 29 76 8c a6 30 eb 4e 35 9f c6 79 aa c5 45 7c b6 82 72 56 d2 69 6e 37 ab 8d b0 34 c3 92 a9 15 6b 0b 2c 99 14 4c e9 13 3a fc ac 11 21 06 ab 2c ba b0 b6 d2 58 49 87 c5 85 41 fe 1f fb 49 d0 1d 00 01 00 00 00 01 00 00 f3 06 e8 07 5f 0f 3c f5 00 0b 03 e8 00 00 00 00 ce 97 19 42 00 00 00 00 ce 96 e1 02 ff ee ff 6a 04 2f 03 52 00 00 00 08 00 02 00 00 Data Ascii: .hZ_#ZuZ[ToB0jBfer!d%'Xe.Tn{a\|$~\|hq#jCn/h\|7!\|I#3Zj\|w+)Y>si')v0N5yE\|rVin74k,L:!,XIAI_<Bj/R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.11	49807	154.62.106.12	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:38 UTC	380	OUT	GET /wp-content/uploads/2018/10/nepal1.jpg HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:40 UTC	392	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:40 GMT Content-Type: image/jpeg Content-Length: 65215 Connection: close Cache-Control: public, max-age=31536000 X-Hcdn-Image-Optimizer: f:jpeg q:85 w:1600 alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 7900a528d24e2b2b96451a0db340e521-bos-edge3 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 1.740 Accept-Ranges: bytes
2024-04-16 15:05:40 UTC	977	IN	Data Raw: ff d8 ff e1 00 80 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 05 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 4a 00 00 00 1b 01 05 00 01 00 00 00 52 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 69 87 04 00 01 00 00 00 5a 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 02 00 02 a0 04 00 01 00 00 00 58 02 00 00 03 a0 04 00 01 00 00 00 90 01 00 00 00 00 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e Data Ascii: ExifII*JR(iZHHXC!"$"$C
2024-04-16 15:05:40 UTC	1369	IN	Data Raw: 00 23 14 58 ef 4b 22 86 28 01 18 a2 22 97 8f 8a 04 7c 50 03 64 71 45 8e 29 cc 51 62 80 1b c5 16 29 c2 a6 8b 1d a9 00 8c 1a 22 29 64 1e f4 30 79 a0 04 62 88 ad 2c 8a 18 ed 8a 90 1b c5 02 39 e2 96 47 e9 44 41 a6 02 31 45 4b c5 0c 1a 40 20 8c d1 63 8a 59 14 44 50 31 38 a1 8a 56 28 b1 40 84 91 ef 45 8e fd e9 78 a2 c7 c5 30 11 8a 2c 52 f1 43 14 00 8c 7b 51 60 d2 c8 34 58 e2 8a 01 18 f6 a1 8a 5e 28 b1 f7 a0 62 31 c5 11 14 bc 50 c5 20 11 8e f4 44 52 f1 da 8b 1e d4 00 9c 51 62 95 8f 8a 2c 50 30 a8 a9 64 51 52 a0 11 8a 04 52 8d 0c 67 b5 14 02 31 44 57 34 e1 1d e9 24 7c 71 40 0c 91 42 9c 61 42 a8 0b fd bc 51 81 4a c5 2b 1d 2b 42 04 8e 3b 51 e3 bd 28 0a 56 3d e9 02 11 8a 1d 69 78 a1 8a 43 b1 38 e2 86 29 58 cf 5a 3c 50 02 31 43 14 bc 7c 50 c6 68 01 18 a1 8a 58 14 31 Data Ascii: #XK"("\|PdqE)Qb)")d0yb,9GDA1EK@ cYDP18V(@Ex0,RC{Q`4X^(b1P DRQb,P0dQRRg1DW4$\|q@BaBQJ++B;Q(V=ixC8)XZ<P1C\|PhX1
2024-04-16 15:05:40 UTC	1369	IN	Data Raw: 3c 52 80 14 a0 3e 6b 42 44 62 8f 14 b0 b4 31 48 04 11 c5 1e de 33 8a 58 14 36 f6 a6 02 31 91 f1 46 05 2f 14 00 f6 14 80 46 28 6d cf 7a 5e 28 f1 cd 03 11 b6 8f 1c 7c 52 b1 43 14 84 27 14 0a d2 f6 d0 03 da 8b 1d 8d e2 8f 6f 73 4e 01 44 47 34 58 84 63 34 0a d2 c0 a3 c5 16 03 61 78 a2 2b f6 a7 71 da 86 dc 1e 29 58 0d 6d a1 b3 f6 a7 71 cd 00 28 b0 1a db 8a d8 78 03 c4 b0 68 88 d6 97 29 fc 29 24 2e 5c 93 81 f1 8e de f5 94 c5 1a e0 10 48 c8 f6 ac f2 e3 59 23 c6 45 c2 6e 0e d1 db f4 ff 00 17 68 d7 0c c4 5f c7 1a ae 47 f1 3d 27 34 cd e7 8d b4 7d b2 1b 7b a1 37 96 70 c5 7a 1f b7 bd 71 b3 29 31 aa 2c 51 2e dc 9c 84 f5 1f d6 80 05 63 c7 bd 71 7f e3 e1 7d 9d 3f 97 2f 46 fb 54 f1 f2 49 26 db 5b 69 31 dd 9c e2 99 d0 2c b4 8f 10 ea a5 25 80 dd 4c c8 64 93 cc 25 51 47 7e Data Ascii: <R>kBDb1H3X61F/F(mz^(\|RC'osNDG4Xc4ax+q)Xmq(xh))$.\HY#Enh_G='4}{7pzq)1,Q.cq}?/FTI&[i1,%Ld%QG~
2024-04-16 15:05:40 UTC	1369	IN	Data Raw: 59 e7 91 d1 03 77 3b 54 81 9f 60 33 58 4f e5 e3 8a be cd 23 f1 e6 d9 cd 02 ff 00 5a 0c 02 8d c4 80 07 52 4e 2b ae 5c 78 67 c3 96 c8 00 f0 cb dd b3 77 f3 1d 51 7e 59 f7 1c 7d 80 26 a1 b6 9d a6 45 ab ac d1 e9 fa 5d 84 aa c3 cb 75 65 21 7d f0 9c f4 ed c7 1c 92 6b 3f ce 8b e9 33 4f c5 92 f2 73 48 60 9e 46 02 38 26 90 9c 60 24 4c d9 fd 85 58 59 e8 7a cd e4 de 55 b6 91 7d 23 e3 71 1e 49 50 07 b9 2d 80 05 74 98 f5 1b 48 91 8d 94 93 4f 11 63 24 b3 44 ae 43 b1 ea 7d 23 03 23 14 50 eb 62 e8 88 4d fc 16 e3 24 aa 33 36 46 07 2c d9 1f 7e 78 15 93 f9 b2 7d 44 b5 f1 97 96 67 f4 bf 01 dc 45 32 3e b5 7d 04 30 75 78 6d 73 24 a4 63 b3 10 15 79 ee 73 5a dd 3f 4e d1 6d 76 2e 9b 67 7d 13 86 39 78 4a ab 38 f6 2c 41 38 1f 18 a8 22 7b 02 77 3e b9 66 22 53 eb 91 a4 0d cf 61 d0 9f Data Ascii: Yw;T`3XO#ZRN+\xgwQ~Y}&E]ue!}k?3OsH`F8&`$LXYzU}#qIP-tHOc$DC}##PbM$36F,~x}DgE2>}0uxms$cysZ?Nmv.g}9xJ8,A8"{w>f"Sa
2024-04-16 15:05:40 UTC	1369	IN	Data Raw: 2c 53 84 51 62 98 0d 91 f1 42 96 45 0a 10 1a 60 a7 14 7b 69 40 71 46 07 ed 54 21 21 68 f6 d2 b1 47 8a 00 46 da 30 a3 1c 52 c0 a1 8c 52 01 18 a3 c7 7a 56 28 f1 f3 40 09 c5 0c 52 b1 47 8a 40 27 6f c5 0d b4 a0 28 f6 9a 00 4e 28 6d a5 81 c6 68 6d e7 19 a0 04 e2 86 29 e8 20 9a 79 3c a8 22 79 5f 69 6d a8 32 70 39 27 ec 2a 5d be 8f a8 4b 1f 9c d0 f9 16 ea 32 f3 cc 42 c6 83 e7 bf e9 8c fc 54 b9 c6 3d b2 94 5b e9 15 e1 4b 30 55 04 b1 20 00 06 49 27 b0 1e f5 75 a6 f8 5f 58 bc b7 37 72 5b 9b 2b 25 e1 ae 6e 41 55 fc c1 70 ab f9 98 e4 e3 00 55 9e 81 f4 b6 1a 8d 92 4f 66 c2 49 55 04 52 08 4a b6 f6 fc ae 83 24 e4 8d ad 8c f2 48 18 15 73 75 af 4d a2 78 d4 aa ef b9 86 cd 45 ab 2c a3 06 50 0f 2e 4f 42 f9 c9 c8 e3 3e d5 c5 93 e5 49 eb 1a 3a 21 81 2d c9 8b b7 d3 ec 7c 2b 7d Data Ascii: ,SQbBE`{i@qFT!!hGF0RRzV(@RG@'o(N(mhm) y<"y_im2p9'*]K2BT=[K0U I'u_X7r[+%nAUpUOfIURJ$HsuMxE,P.OB>I:!-\|+}
2024-04-16 15:05:40 UTC	1369	IN	Data Raw: 3c d2 ea 77 72 e1 63 52 49 01 13 fb d2 15 20 82 7a 0c 0e 07 5b bb ed 23 c2 fa 8c b3 e9 76 b7 7e 4c 36 bb 27 b8 b8 79 4b 37 00 a2 a8 c8 c6 54 12 7e 33 9a cd f8 6f 52 bf f0 b7 88 ef f4 43 6f 35 d5 b4 fb b6 59 39 05 66 97 18 85 98 9e 08 3c 12 3a 11 db 8a 1b e5 0a 8f 80 4a a5 b2 6f 8b a1 82 5b 7b ad ed 39 71 06 02 a4 0c cf b5 46 46 72 4b 1c 8c 65 b3 90 07 40 2b 3a a9 27 d3 c1 30 1e 89 22 57 cb 60 ee c8 f5 61 73 c2 83 c7 5c f1 9c 54 bd 7a ff 00 55 9a ee e9 2e 6f ae ee 6e 00 78 da 20 e1 82 15 38 65 6d bf 94 1c 1e 99 e3 83 c0 a7 54 d8 5e c9 64 91 6e 8e 18 2c 91 65 9c 0c bc 81 10 12 14 01 b7 39 38 cf ea 7b d5 c5 38 a2 65 b6 57 3c cc 90 65 d9 97 72 f0 c3 bf 1d 6b 49 0c f7 ba 96 95 a4 c9 a6 c0 26 ba d8 ce 60 62 36 b4 81 f8 c8 1c fa 70 30 72 3a fb 1a 89 a5 69 17 1a Data Ascii: <wrcRI z[#v~L6'yK7T~3oRCo5Y9f<:Jo[{9qFFrKe@+:'0"W`as\TzU.onx 8emT^dn,e98{8eW<erkI&`b6p0r:i
2024-04-16 15:05:40 UTC	1369	IN	Data Raw: ea 8b 18 3b 54 ee 51 f1 c7 fa 54 3e 12 76 ca fd 97 45 c5 9e b5 69 74 5e 08 a7 8a 69 63 19 21 01 c0 f9 c7 61 9f de a2 cb aa c7 a7 4b 23 dd dd 20 88 74 42 00 27 9e 36 8f 73 f3 53 bc 3b e1 67 d2 a2 6c 5d cd 72 64 ec e0 00 0f 73 c7 5f 6e 4d 3b ab 69 73 2e fb eb 68 cc 93 04 0a ca 63 0e 76 8e a0 03 51 fa dd 2e 87 fb 51 5f 79 aa 5a 4d 6d 6f 72 49 d8 cc 08 77 98 26 07 bf 61 f1 8c d4 4b a7 be bf 92 ce 0b 38 ee e2 86 19 fc c7 75 95 1b 70 3c 73 ce 48 5e 4e 33 fb d1 6a 5a 9d f5 90 8a 18 b4 5b 7b bb 66 8d 4c bb 48 f4 1f 94 1d 71 ec 07 63 56 ea 75 29 54 24 4b 6c 46 06 15 07 a4 f3 d8 fb 63 fa d3 e9 58 5d e8 a7 f1 01 d6 1b 50 8a ce 0b 65 6b 66 84 29 b9 90 96 72 71 96 c2 2f 0a 40 c0 c7 23 be 69 43 4f b6 b6 d1 13 ce 92 0b 26 58 ca 09 e6 3b 0a 02 dc 2a e7 a0 ff 00 5a b7 bc Data Ascii: ;TQT>vEit^ic!aK# tB'6sS;gl]rds_nM;is.hcvQ.Q_yZMmorIw&aK8up<sH^N3jZ[{fLHqcVu)T$KlFcX]Pekf)rq/@#iCO&X;*Z
2024-04-16 15:05:40 UTC	1369	IN	Data Raw: 09 6c b3 30 69 58 15 0a 32 4a e7 80 33 cf 27 b0 e6 b8 a3 40 97 02 0f a4 8d bc d9 23 0c e9 9e ad dc ae 7e 7b 7d ab d6 f8 bf 27 9c 6a 5d 9c 19 b0 f0 76 8a f0 39 a1 8f 7a 74 af 50 47 23 a8 a2 da 7d ab b4 e7 1a 22 86 29 cd b8 3d 28 6d 39 e9 40 86 b1 f1 45 8a 74 af c5 11 5e 7a 50 03 58 f8 a0 46 7b 53 9b 4f b5 0d bc f1 4c 06 f1 44 40 a7 0a fb 03 44 57 8e 82 90 08 22 8b 6d 39 b4 d1 60 f5 c5 00 37 8a 22 29 dd b4 45 4f b5 00 34 05 02 3e 29 dd a7 3d 28 b6 d0 03 58 1d c5 16 3e 32 69 ed bc d0 d8 7b 0a 06 33 b6 8b 6d 3f b2 80 8c 93 f9 73 40 0c 63 9c 51 10 7d aa 4f 96 dc 9d b4 04 47 a6 d2 4f da 8b 02 36 38 e9 45 b7 e2 a5 f9 0d 8e 50 fe d4 04 39 ec 68 b1 d1 10 a9 ed 42 a4 b4 20 77 c5 0a 2c 0b e0 b4 60 63 af 14 a0 3e 28 c0 ef 4c 81 21 68 f6 d2 c0 cd 1e 05 03 13 81 f3 47 Data Ascii: l0iX2J3'@#~{}'j]v9ztPG#}")=(m9@Et^zPXF{SOLD@DW"m9`7")EO4>)=(X>2i{3m?s@cQ}OGO68EP9hB w,`c>(L!hG
2024-04-16 15:05:40 UTC	1369	IN	Data Raw: b7 69 2b 92 4e 33 d2 b9 a4 88 24 1e 60 46 8c 1e 19 71 ca 1a f4 30 3b 85 33 97 22 a9 5a 35 d0 f8 ea e6 f6 16 8a fa c6 51 70 50 85 48 14 16 c0 6e 5d 86 ec 81 df 0b 9c 55 df 87 e5 bd d4 55 37 df 79 5b d4 b4 69 1a 86 94 2f 3f 99 8f 4f db d8 75 ae 61 62 f3 5b 6b 16 da 9c c2 31 75 6f 30 7b 40 0e f0 1b 07 81 dc 82 0f a8 71 d6 ba b7 83 f5 cd 2b 5b 91 2d 4b 26 9f 7b 26 f2 2c a3 5d aa c7 a9 21 ba b1 ea c4 1e 7e f5 9e 58 71 5a 45 c2 5c 9e d9 74 96 e2 d5 42 44 14 a8 8f 66 e9 37 3c 8c df e1 8e 7f 7a 9f 66 be b2 e5 99 88 5c 01 d1 7a e7 3e f9 a1 1c 08 8a bb 41 eb dc f3 52 23 8f 6f 72 78 e7 9c 57 23 66 c3 53 47 97 dd df 00 fe b4 a8 fa a9 07 95 39 14 f1 5c 82 3f 6a 22 80 1c e3 b5 21 85 61 63 69 1f 99 22 da db 2b c8 c5 a4 65 85 54 b1 f9 38 c9 a9 ce 49 66 20 92 d9 ce 7e 69 Data Ascii: i+N3$`Fq0;3"Z5QpPHn]UU7y[i/?Ouab[k1uo0{@q+[-K&{&,]!~XqZE\tBDf7<zf\z>AR#orxW#fSG9\?j"!aci"+eT8If ~i
2024-04-16 15:05:40 UTC	1369	IN	Data Raw: 3f 10 74 8d 1f 58 3e 1e 49 d9 75 09 63 c4 73 60 18 e3 91 f8 41 9e ec 33 b8 e7 00 01 93 5c 53 51 bb d5 35 2b 99 65 d4 2f ee 6f 67 0e 59 e4 f3 b7 03 83 8c 81 d3 8e 3a 0c 56 b8 f0 b9 77 a2 27 35 13 5f e3 cf c5 d7 1a 8c ba 4f 85 d6 35 54 25 5a fd b2 d2 39 ee 22 40 3d 3c 82 32 dc e3 24 00 39 ac b4 9e 34 d7 6f 74 fb c3 a9 ce 6f ee 25 da 76 18 4a c6 a2 36 ca 0e 3a 8d fe b6 20 64 85 eb c6 2b 3b 77 05 85 f3 b4 b6 64 47 78 ac 3f 8a 83 0c ac 31 c1 3f d3 ed 5b bf 09 78 63 51 8a cf e9 85 a4 70 5e 6b 0e 8c f7 73 ee 4f 2a d9 25 c3 a0 3f ca 49 05 f1 dc 0f 63 5b ca 11 82 32 53 94 99 92 6b 6b fd 63 c2 d6 32 c8 44 49 0d f1 fa b7 68 dc 35 fc 9f de 0e 0e d6 19 3b 8b 1c 7a 98 00 38 15 d2 bf 06 b4 f4 7f 14 4c bb 7c d1 0d b9 70 4f 2c 72 40 07 3f bf 4a a1 f1 a6 bc 75 0d 4c da 58 Data Ascii: ?tX>Iucs`A3\SQ5+e/ogY:Vw'5_O5T%Z9"@=<2$94oto%vJ6: d+;wdGx?1?[xcQp^ksO*%?Ic[2Skkc2DIh5;z8L\|pO,r@?JuLX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.11	49806	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:38 UTC	619	OUT	GET /wp-content/uploads/2018/10/bg1-1.jpg HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:42 UTC	393	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:42 GMT Content-Type: image/webp Content-Length: 304652 Connection: close Cache-Control: public, max-age=31536000 X-Hcdn-Image-Optimizer: f:webp q:85 w:1600 alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: c094547cea6a5ea27ff44ccc017a4b0a-asc-edge4 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 3.416 Accept-Ranges: bytes
2024-04-16 15:05:42 UTC	976	IN	Data Raw: 52 49 46 46 04 a6 04 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 3f 06 00 67 03 00 56 50 38 20 60 a5 04 00 70 f0 0c 9d 01 2a 40 06 68 03 3e 51 22 8e 44 a3 a2 21 21 2b b6 6b 50 70 0a 09 63 6e d1 af d6 8a 28 27 c3 3f 7d e8 f9 57 60 7f e0 cf 4f 84 79 f1 79 b2 5d f8 f2 3c d6 7c a8 e9 b5 17 d9 8f 74 7f 57 9b 1f 37 f8 c7 c1 ff ea ff fd 7f b8 f9 73 fe cf 54 9e f3 ff 5b ca e3 d8 ff bb f3 ef ff 73 d5 b7 f7 1f f9 3e c1 9f d7 bf 7f 3d 9d 7f f3 f5 89 fb e1 ea 4b f7 73 d6 07 ff 7f ef 8f bc 6f ef 7e a1 9f da ff e8 7f ff ff b3 ef 7f fb ff ff cb e1 a3 fd 6f ff 5f ff ff fb 3e 08 7f 78 bf ff ff f8 f7 9b fc f1 ff db f2 f3 fe 3b ff 7f ef 67 bb f7 fe 3f ff 3f f9 7d c0 3f ff fb 73 ff 00 ff ff d6 5f cc 0f 49 3f 3a fe 7b fe 3f 81 7e 3f be 19 fb cf f9 8f d9 7f df 2f b0 4f Data Ascii: RIFFWEBPVP8X?gVP8 `p*@h>Q"D!!+kPpcn('?}W`Oyy]<\|tW7sT[s>=Kso~o_>x;g??}?s_I?:{?~?/O
2024-04-16 15:05:42 UTC	1369	IN	Data Raw: 88 ab 00 a7 00 19 9d d3 bc a3 53 d2 f3 e9 4a c4 1d 8a 7f 6a f1 06 ac e5 62 25 8b bf a9 e0 d7 5b 91 c4 f6 f9 08 3b bd c5 37 02 58 d8 0f 3f 00 1c c0 17 8e fb ac 6f 3e 78 a6 5e 2a 10 cb 37 0d ae ca f0 a9 91 0b 67 af 86 bc 81 21 b0 71 ad 0a 4a 6e 28 bc 7f 11 b5 f7 77 73 06 5d 0d be b7 be d9 6d e5 bf a0 1d ad 32 c8 63 0a 8c a5 7a 9c 45 e1 35 db 4f 72 92 62 00 ab 00 f6 ed 14 f3 41 b9 33 1c c7 f1 68 3d fd 9f 87 b2 a0 8f 58 02 f3 6f 8a 35 dc 03 f2 b8 f1 9f f7 31 02 c2 59 84 a9 ef 14 1b 0b a3 f4 be 89 7d 97 3f 42 9c a8 9e ae 6a dc 67 bd 9c 50 ff d2 61 11 66 9b ec e1 3b bf 42 5d 2b 90 ae 4f 71 85 77 89 70 3e bd f6 07 a2 da d6 a0 4f a0 d7 82 d6 06 f7 85 8a a7 8e 0c 8a 4d bd 6d fc a4 ca c2 57 96 6c d8 b1 e3 b0 36 d3 dc 55 e0 e9 3b c8 57 12 79 50 e8 1d f6 bc bc cb 20 Data Ascii: SJjb%[;7X?o>x^*7g!qJn(ws]m2czE5OrbA3h=Xo51Y}?BjgPaf;B]+Oqwp>OMmWl6U;WyP
2024-04-16 15:05:42 UTC	1369	IN	Data Raw: 9b 71 97 d7 b2 15 d4 dd 07 eb 52 89 aa 9c 21 c0 a3 3d e1 d5 9b 86 93 dd f9 f5 75 51 9a e3 06 35 7d 20 be 16 84 a4 ff 44 6b b0 b5 56 e5 f1 19 fa 0e f2 33 80 35 30 ec a5 de ef 67 b2 27 9a c0 e3 7b 7d bb 56 77 42 d6 99 8f 77 3d 47 e7 4e b0 59 21 65 1d a8 a5 eb bf 89 36 0c 5c ab f5 6e 5e c9 7a ee 58 9d cc 3e 0c fb 31 7e e9 9f 9b 84 98 ec 14 b3 6a ec ca 3a 26 88 98 85 c9 9b 7b 88 53 d5 4c 60 f9 48 57 c1 d4 26 23 ad 23 0e 7c 1c a5 0b 1c ad c2 d7 84 06 b0 85 67 e4 e8 76 30 22 85 53 32 4b 5b 1e 14 55 fa 76 3d aa 94 41 a1 3b de b6 7c 33 d2 48 71 30 02 70 9b 68 e5 b1 0f cb 2a 6c c0 a9 2e b9 e1 64 02 2e 9e ea e5 5c 03 70 98 91 26 c2 3a 28 94 52 b4 04 7d fb 44 3f 4c 28 87 2c 42 06 36 01 d3 f0 8b 17 5a 15 38 06 ef 96 2d 24 47 32 65 17 4f 0f b7 d0 02 b5 a2 96 a9 46 83 Data Ascii: qR!=uQ5} DkV350g'{}VwBw=GNY!e6\n^zX>1~j:&{SL`HW&##\|gv0"S2K[Uv=A;\|3Hq0ph*l.d.\p&:(R}D?L(,B6Z8-$G2eOF
2024-04-16 15:05:42 UTC	1369	IN	Data Raw: 7b e1 37 16 4a 07 87 ed 91 14 fd bd 9c 9e 3b 0e 2e 45 a1 86 0e 8e 1b 11 a6 1c b2 36 3c 3b b6 15 f7 1e 26 ca 57 a5 ab 70 f2 a7 c0 d6 12 a6 30 bf ef 77 b9 7d de ef 79 27 40 48 eb f8 a3 cc 92 2d d6 e9 fd 33 20 bd ea 4e 71 63 d2 7b 29 09 6d 04 1f f5 86 7a 1e db 22 c0 67 08 6f 6f 5c 0e f5 00 7a 3b d3 c6 98 0e ea db 5c 88 38 0b b6 8c 6e cd 9b 33 67 60 0a ed ca 4b fc e8 76 e0 57 5b 44 8c 60 f5 79 e9 ff 8f 1f c2 f2 04 e8 5f e0 9e 0a 22 81 7d 1e 64 b1 8c 25 62 63 b7 df f1 13 29 94 40 19 d8 6b dc bf 57 aa 2c 56 60 e3 8a f2 b6 91 cf 37 9b 33 7b 6c 5c 07 e1 13 84 2b 48 e1 b9 3c 32 52 b4 1e 00 49 8a 2a b7 a1 75 a1 bc a5 5f df 57 5f 6c 47 f5 38 85 f8 99 23 90 28 05 04 8e 0a 59 1f 61 6a 9c ed c6 94 75 5b 40 44 16 6a 3d 2b 9b fc ee 9b 82 a5 00 25 ff 56 8a 4e ed 11 8e 7f Data Ascii: {7J;.E6<;&Wp0w}y'@H-3 Nqc{)mz"goo\z;\8n3g`KvW[D`y_"}d%bc)@kW,V`73{l\+H<2RI*u_W_lG8#(Yaju[@Dj=+%VN
2024-04-16 15:05:42 UTC	1369	IN	Data Raw: 89 57 60 af 85 f9 44 ce ab a4 f1 07 28 17 95 58 5b b3 66 74 34 eb 80 ed 31 54 cf 5e 3d 94 df 78 1f 9e 98 38 8a 6a 70 1e b1 cb 9b e1 f3 04 6a ea 4b c0 68 88 c3 72 ee 6d e9 04 c0 99 fe 0d 79 a1 7d f2 65 72 7e 62 5f 8d f9 43 fe 0a 91 6f 7f b5 98 1b 5c 08 ea c9 ff dd 59 65 de f5 d7 76 f6 32 e4 bd e0 7f 49 c8 18 13 fe 90 9f f7 26 69 fb 84 07 4f 17 d3 64 f2 0f 11 2e 72 0b 09 38 61 8b 58 7a 6e f1 f9 1e 02 1e ab 3a af e0 90 9f 5f b3 7e 7d d4 39 3e 36 5a 88 fe 87 4a 0b 0d eb 98 72 57 ef 92 26 98 87 95 0a ea 79 99 75 ae ee a3 b5 c9 36 62 24 6a 47 2f 34 9e ec 9e ed b9 26 82 43 51 b3 cf 2c 77 cf 78 bf 21 fc 2e 04 81 3c 23 71 86 ce 39 f3 a8 a1 78 c6 f9 cd ad 6c 49 d5 8e 62 4b 1e 56 c5 2d 6f 19 f7 a3 db a5 70 03 97 82 e8 24 b0 96 d8 92 49 1c 6a bb bc 23 1b 63 62 d3 3a Data Ascii: W`D(X[ft41T^=x8jpjKhrmy}er~b_Co\Yev2I&iOd.r8aXzn:_~}9>6ZJrW&yu6b$jG/4&CQ,wx!.<#q9xlIbKV-op$Ij#cb:
2024-04-16 15:05:42 UTC	1369	IN	Data Raw: 66 fc 53 69 7d ee ba be d4 fd 70 3e eb 2c 51 82 d5 0f af cc 93 e8 5c 70 d6 58 a0 bd a8 46 ad 33 28 4e 98 a3 81 de aa 72 8a 98 67 a9 b7 76 dc fe 0f fb 89 02 67 b0 45 40 32 be a9 eb d4 52 b7 9e 4b de 0d e7 12 8e 13 c2 29 9e b5 18 c6 e0 0d a1 4e 35 0c e7 f9 5c b8 c3 19 4b 16 c4 2b 04 fa 57 4b f9 fa 47 0a d9 89 2b 9d 5b e9 2d f1 53 18 8e c8 57 9f f4 44 73 58 45 71 f7 50 f3 7f 42 42 a8 d0 e1 b4 d3 b7 a6 32 54 52 7c 23 f7 7d f5 f5 e7 48 d1 a2 d3 0d ba d0 be a2 61 68 69 c6 aa 10 2a 2f 26 39 99 f6 5e 73 0f 80 ea 39 38 48 3f cf 84 03 ca e6 44 15 cf d1 5b b6 d6 31 a6 38 ad 74 a0 0a 0e e4 b6 2e cc 41 8a d5 ca f7 c7 b6 40 2e 18 e0 df 62 b8 49 aa 6e 7c 7c 05 af 37 2c c5 90 cc 38 6d a1 5a a2 2f fd 6e a3 7b e8 2e 92 a8 9b 87 e9 75 57 bd 9a 10 47 48 26 52 e9 ac d7 b2 5a Data Ascii: fSi}p>,Q\pXF3(NrgvgE@2RK)N5\K+WKG+[-SWDsXEqPBB2TR\|#}Hahi*/&9^s98H?D[18t.A@.bIn\|\|7,8mZ/n{.uWGH&RZ
2024-04-16 15:05:42 UTC	1369	IN	Data Raw: f8 b9 b0 6f 87 4c f7 35 e5 aa 15 3f c4 32 ed e8 df 8b 90 61 55 20 c7 eb 11 97 ee 1b 9e ae 7d 6e 0f a9 59 99 ec 00 8e fd c2 08 30 f2 4f 1d 1c b4 73 85 44 26 5d 3e 7a ae df da 47 c3 42 36 92 65 c0 fe 98 9e 69 69 46 8e 38 d1 4e b7 53 69 95 ff 19 1f a1 98 61 e0 7c 61 2e 91 84 92 81 36 8b e9 40 cc 4c fb bb dc 02 a7 00 79 d8 80 21 29 f4 54 4a 59 00 bc d5 ba 27 cc 33 ce f4 ed 13 b8 85 03 a9 ce 0f b9 10 1a 46 8a 03 fb cf d9 38 15 45 e5 fa d2 b4 72 ca 7b 24 99 73 35 65 13 9e 07 f6 c6 a9 86 58 4f fc 9b a2 e2 32 db 60 d3 c3 13 33 48 3f ef df 27 ed c4 4d eb c1 5a 00 6f 05 6d 97 4c 41 c5 b6 91 58 66 5e 8c a0 bd 02 56 ed 82 d4 78 bf 62 b2 5d b6 fb 7f 0c 91 97 ab ae f1 4c 86 ba 3e 29 8a 29 d9 c1 d2 e7 50 55 64 e3 09 9d 79 3b 5b 26 fb 86 57 5f 68 84 98 57 de 65 f6 d1 42 Data Ascii: oL5?2aU }nY0OsD&]>zGB6eiiF8NSia\|a.6@Ly!)TJY'3F8Er{$s5eXO2`3H?'MZomLAXf^Vxb]L>))PUdy;[&W_hWeB
2024-04-16 15:05:42 UTC	1369	IN	Data Raw: 7a 66 38 b8 ad e7 d0 23 f6 64 34 c5 52 11 90 99 53 d9 3a a3 61 ac b3 08 52 36 52 b5 1f 80 83 b2 7f 76 fc 57 16 ab 6c a8 49 47 94 e3 3c d4 73 51 f6 29 19 d7 20 f6 a4 86 03 29 41 da 23 18 29 31 36 23 32 c2 99 fc 52 38 42 2e ad 16 bd a9 5c c6 a5 9f 0c a2 cc fd c2 90 7a 0a 8d 5d 70 12 6d 06 b9 c5 0b 27 cb 9c db 99 05 8c 2a 45 85 36 f0 39 f9 12 42 e1 a7 93 73 ad fe e3 cb 55 25 c2 b9 e3 43 fc 51 f4 c7 54 fe 6e e5 11 cd 52 26 52 ac 4d 21 4c 82 f4 e8 3c 1b 4f ae 8c 69 f3 34 33 e4 c1 84 9e bc 0e a7 49 f2 90 a3 1d 38 a2 b8 8d 91 8c 6e 78 3e 0e e3 f4 f7 73 4f cc 8e 81 d5 ce aa fb d8 4c 5c 5a 45 5a de 9d f2 55 4f 03 8e 1f 2a ed 81 b5 e3 6a c1 a4 f7 b4 41 38 be 9e 44 b5 61 49 59 0c 8e 08 06 a2 19 2f 9b 26 5a 4a 22 5a 0f 31 1e 3a a6 7a ad ec 53 81 9e 67 bc 40 08 80 20 Data Ascii: zf8#d4RS:aR6RvWlIG<sQ) )A#)16#2R8B.\z]pm'E69BsU%CQTnR&RM!L<Oi43I8nx>sOL\ZEZUOjA8DaIY/&ZJ"Z1:zSg@
2024-04-16 15:05:42 UTC	1369	IN	Data Raw: a3 3a f1 d4 92 97 bd 83 2f d4 18 fb 5e 93 72 64 15 7b bb 65 43 2a ab f7 2d 6d e3 bf 73 4d 45 9a 07 6d 69 98 50 6f de 89 0d ec 4c 4c c0 37 2b af 74 3c cd fb 09 58 fd c0 83 25 ae e3 33 d0 4e 9c 2f e5 a2 fe 83 d5 71 f6 63 0c 77 88 0c c4 02 67 da de 92 26 e9 9b de 7d 24 8d 58 2b bb 26 6b 96 d7 a7 ec f6 78 fc 20 3f 5a 0b 6b 66 13 26 f1 17 f2 c9 46 ff 61 4f 13 a7 d0 76 12 62 57 4f b5 65 50 8d 80 a6 5e 41 b4 0b 59 04 3e 32 56 30 5c 88 ed 64 2d a2 70 9c a9 ac dc 3a d0 dd ab 1e 57 3c 4b d8 77 b3 6a 05 4d 4d 21 a1 30 32 cc 7c 08 b2 56 a2 a5 da cc 7e 28 2b 60 c1 0c 13 0e fc 9b 01 47 94 9c 8f 26 97 e6 c9 b3 1f 0b 6d 77 e5 0f 65 f0 2e 6c 15 9b e7 39 84 23 40 ab 00 32 4c ae aa 3a f3 8a 64 b7 cd a0 a6 ea 79 b8 50 44 93 1b 3d 03 03 b7 f4 b5 06 93 f1 74 de 33 fc 7a 9a b4 Data Ascii: :/^rd{eC*-msMEmiPoLL7+t<X%3N/qcwg&}$X+&kx ?Zkf&FaOvbWOeP^AY>2V0\d-p:W<KwjMM!02\|V~(+`G&mwe.l9#@2L:dyPD=t3z
2024-04-16 15:05:42 UTC	1369	IN	Data Raw: 2b b1 d1 7e ed 22 00 6a a7 1a a3 71 c4 6d b7 3a 7a 82 ba 5e 42 19 b3 da ff e4 6b 8d 79 e7 1e 65 12 f2 f5 53 3c 78 2b 0c 29 7b 27 ef 6e 96 6d 2e 07 38 ab ed 9d ad 7a 69 c5 2a 29 8e 3b 99 1d a5 01 b3 c6 91 db 89 15 cd b4 6c 03 41 dd 6d ca 90 eb 09 34 df c4 62 5b f8 17 9b 04 bc d1 01 be 0b 79 76 c4 27 8c 22 10 37 ea e9 db 8b 46 3d 9a 71 dd 28 29 37 4f bc f2 8c 47 32 7a ab 79 bb a4 32 20 50 da 6c a5 d4 b3 85 ea 22 e2 56 59 c2 6e 8f 84 34 57 56 41 ba 18 20 ec 50 00 21 f6 f8 ff 59 66 c6 5d f7 58 91 eb 9f 8c 41 4b 2f 09 28 50 01 66 2b 52 70 ca 0a c3 27 01 d6 af 57 dd 30 f3 66 7b 73 83 77 4c d4 ca 04 c8 de 70 6b 5b f8 6e 65 4e 7f 00 7c 4a ac 30 3d 40 98 d1 ae 93 df 00 12 69 e3 dd fd ad b5 2e 3c 8c 91 93 ee c0 aa 33 ad a5 07 4f 61 86 52 11 2e 98 c4 ad b7 b5 66 ae Data Ascii: +~"jqm:z^BkyeS<x+){'nm.8zi*);lAm4b[yv'"7F=q()7OG2zy2 Pl"VYn4WVA P!Yf]XAK/(Pf+Rp'W0f{swLpk[neN\|J0=@i.<3OaR.f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.11	49809	154.62.106.12	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:38 UTC	379	OUT	GET /wp-content/uploads/2018/10/ganga.jpg HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:40 UTC	392	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:40 GMT Content-Type: image/jpeg Content-Length: 42842 Connection: close Cache-Control: public, max-age=31536000 X-Hcdn-Image-Optimizer: f:jpeg q:85 w:1600 alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 957bebcc3996a23885eea709e4df8466-bos-edge2 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 1.569 Accept-Ranges: bytes
2024-04-16 15:05:40 UTC	977	IN	Data Raw: ff d8 ff e1 00 80 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 05 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 4a 00 00 00 1b 01 05 00 01 00 00 00 52 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 69 87 04 00 01 00 00 00 5a 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 02 00 02 a0 04 00 01 00 00 00 58 02 00 00 03 a0 04 00 01 00 00 00 90 01 00 00 00 00 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e Data Ascii: ExifII*JR(iZHHXC!"$"$C
2024-04-16 15:05:40 UTC	1369	IN	Data Raw: df 7a 8c f4 c9 ed da 9c 9f a8 a0 05 30 36 c8 e9 48 13 dc 1c 53 48 c7 4f 53 4d bf 6a 00 94 83 d7 a5 34 90 3f bd 32 67 18 9a 92 12 4c 49 26 80 1b 7c 49 ed 4c 76 9c 0a 22 9b eb 06 77 14 33 1d e6 68 0b 09 53 b6 d4 c3 25 24 4f bd 31 9c 19 a4 32 46 71 4c 07 32 4e 3f 6a 92 39 66 97 26 32 3d e9 c0 3b fe f4 36 34 27 0f 5c 01 ed 42 3b e4 67 bd 4d 67 02 31 1f a5 42 20 41 f7 a1 09 8c 77 fd 7d 2a 38 c7 7f 5a 90 cd 44 8c 18 cd 3b 12 34 4f 73 eb 4b a0 04 e2 9c 81 38 a8 fa ee 68 b0 0b eb 48 89 fc df 7a 63 dc ed 4b 6e 93 da 69 a0 11 32 9d e6 a2 ac 8c 53 cc 98 ec 33 51 24 e2 64 f7 a0 07 c4 e7 da 95 44 c1 eb 03 da 95 00 50 73 2b 51 9a 61 91 33 4b 7d e9 85 5a 10 f2 22 29 4c 52 9f fc 52 18 34 c0 7c c5 21 33 fb 52 1f bd 2f ef 40 0f b7 5d a9 7d 62 9a 3a 7d a9 e9 00 e6 46 37 a7 Data Ascii: z06HSHOSMj4?2gLI&\|ILv"w3hS%$O12FqL2N?j9f&2=;64'\B;gMg1B Aw}*8ZD;4OsK8hHzcKni2S3Q$dDPs+Qa3K}Z")LRR4\|!3R/@]}b:}F7
2024-04-16 15:05:40 UTC	1369	IN	Data Raw: 11 19 9e 9f ef 7a 60 32 b3 8d ea 22 47 ad 4b 70 33 8e 95 13 8c ed f4 a6 2b 0f 02 63 ee 6a 0b 07 a8 f7 f6 a7 99 13 8f a5 23 91 11 1d 68 42 22 3a 98 e9 d2 9c 6f 3d 47 e9 48 f4 eb f5 a5 be e3 7a 07 60 80 9e 4e be 9e 95 02 54 4e 4f eb 49 1f 5c 0a 65 08 56 4c fd 69 0c 20 2b 3b 28 8a 75 15 88 c6 fe 94 ed 01 10 4f 5d e8 e4 02 de 77 1b 62 93 76 1a 57 00 a8 2d 13 91 fd a8 29 27 9a 0f bd 15 67 94 44 fd ea ba 4e 7b 99 da 9a 10 40 06 0c 60 d4 b1 cb 33 50 4c 99 27 14 eb fc 58 e9 4e e0 22 12 07 6e d4 39 00 e7 bc 83 d6 9c fa 09 f7 34 23 bc 6c 7f 5a 68 4c b4 cf 21 30 7b fb 55 84 a5 b1 13 bd 67 02 42 a4 09 fa d3 97 57 1d c7 4a 96 9b 1a 76 2f 29 68 46 13 9c 45 54 b8 79 64 11 ce 79 4f 41 42 2a 51 1e 95 03 d6 85 1b 03 95 c4 77 f7 de 2a 38 cf ad 3f d6 3b d3 11 eb 8a d1 11 61 Data Ascii: z`2"GKp3+cj#hB":o=GHz`NTNOI\eVLi +;(uO]wbvW-)'gDN{@`3PL'XN"n94#lZhL!0{UgBWJv/)hFETydyOABQw8?;a
2024-04-16 15:05:40 UTC	1369	IN	Data Raw: 29 22 3b 54 40 23 ca 00 8f 5a 97 2b 97 6b 09 46 30 07 db ad 15 a9 4a 44 90 3a d3 16 dc 56 c9 8e c4 66 8c db 06 20 cf fb da 95 c6 44 2b 98 67 6a 1a c9 93 03 ef 56 fe 54 8c 93 1e 94 c5 84 a5 30 64 93 de 8b 92 c0 37 b6 73 34 56 5b 52 95 05 38 ea 4d 1e dd 82 a3 91 ef da ae 06 21 00 27 06 28 6c 69 14 94 23 27 ad 41 64 46 e2 3f 7a b4 e2 4c 19 81 1e b5 4d 44 10 41 26 46 c6 95 c6 29 07 03 07 71 43 5c 93 32 2a 41 51 88 9c 7d aa 0e ab cd 8d 87 6a ab 89 a0 25 44 1e 58 22 a3 24 c1 c1 3d a9 12 0e 0e fd a9 ba f2 83 bd 51 03 95 08 20 c6 06 68 6a 31 b0 a4 ad e0 67 ad 44 9c 19 a2 e0 38 56 e6 69 e7 cd 8c f6 1d 6a 39 ed 8a 73 99 f5 1d a8 15 89 18 29 89 8a 76 c2 42 81 c4 03 51 06 40 4c 53 91 e6 cd 03 2e 79 52 d8 e9 ef 55 48 1c f2 22 7b d4 82 e1 13 22 47 ae d4 34 af cf 98 f5 Data Ascii: )";T@#Z+kF0JD:Vf D+gjVT0d7s4V[R8M!'(li#'AdF?zLMDA&F)qC\2*AQ}j%DX"$=Q hj1gD8Vij9s)vBQ@LS.yRUH"{"G4
2024-04-16 15:05:40 UTC	1369	IN	Data Raw: 4e 64 52 a0 56 29 83 b8 a6 50 3d 76 a2 a1 32 7a 1a 67 51 cb 81 54 26 81 8f 43 4e 06 69 00 67 68 a9 24 19 a0 44 db 6e 68 81 a8 a8 b6 63 13 53 e7 c6 f4 84 4d 32 0e 4d 14 10 4f 7f ef 40 f1 24 9a 72 ae c7 14 b2 94 98 57 5c 29 4c 05 74 a0 36 d2 dd 54 99 8a 22 07 88 a0 30 7e 95 ab 6d 6e 94 b7 cd 89 e8 4d 4b 76 2e 2a e6 6b d6 a5 0d f3 45 55 85 4e 2b 71 e8 28 20 e2 6a 9b 6c 25 4a 24 8c 52 52 1b 44 2c de 21 20 1c 7d 28 c5 70 64 1a ad 72 82 d2 a9 da 72 72 4e 29 d8 10 75 34 97 04 e6 aa be d8 41 8e 82 ad 25 c0 13 93 15 59 c5 05 ab 7c d0 98 d8 24 20 93 9f ad 15 a0 50 a1 92 47 a7 4a 9a 39 53 51 59 92 22 93 62 b1 6d 4d f3 b7 38 c6 f5 41 c0 12 e4 4c d5 d4 2f 95 aa a4 65 6a 24 0f b5 11 1c 86 18 cf eb 44 41 ee 26 9d 0c 92 04 e0 f6 a7 5a 42 0f 61 b5 3b 92 11 27 1f de a6 07 Data Ascii: NdRV)P=v2zgQT&CNigh$DnhcSM2MO@$rW\)Lt6T"0~mnMKv.*kEUN+q( jl%J$RRD,! }(pdrrrN)u4A%Y\|$ PGJ9SQY"bmM8AL/ej$DA&ZBa;'
2024-04-16 15:05:40 UTC	1369	IN	Data Raw: b5 01 32 7d 6b 45 b1 9b 61 51 cc a3 93 46 0d 28 19 23 14 26 08 0b 1f 7a bc b2 92 88 f4 a9 6c a5 a8 15 00 52 04 67 a5 44 34 66 62 98 e0 ee 68 c0 f9 31 f7 a4 31 28 73 20 f5 a8 36 a4 83 06 ac 32 9e 74 75 8f 4a ab 70 8e 55 e2 63 6a 48 18 4f 19 20 46 04 50 9c 5f 39 c8 3f 5e 94 33 3d a0 55 9b 56 3c 41 bd 37 a0 2b b0 63 23 af a8 a9 a4 63 6d fa d4 de 68 22 23 ff 00 14 92 20 63 34 ae 36 ac 32 52 3b 41 a9 1c 40 a7 c8 1b c8 a6 2a 8c 13 40 5c b7 66 b0 98 19 fb ef 56 8a 80 32 0c 8e f5 90 87 0a 72 33 e9 56 d9 7a 49 9c f7 15 2d 0d 32 e1 3f 63 50 71 c0 10 60 11 da a0 a7 db e4 24 4e 7d aa b3 af 05 13 93 eb 53 61 dc 13 a1 45 c2 60 89 eb 46 64 19 1b 4c 6f 14 c8 85 a8 fa d5 86 5a 4c 09 fb 8a bb 93 60 a8 48 52 b2 36 19 ab 6c 24 75 de 62 86 db 49 89 00 4d 5b b4 4a 16 62 0e 37 Data Ascii: 2}kEaQF(#&zlRgD4fbh11(s 62tuJpUcjHO FP_9?^3=UV<A7+c#cmh"# c462R;A@*@\fV2r3VzI-2?cPq`$N}SaE`FdLoZL`HR6l$ubIM[Jb7
2024-04-16 15:05:40 UTC	1369	IN	Data Raw: ca 48 20 4e db 54 56 65 04 cf bd 6d 63 26 cc e5 48 91 52 0a c6 fe f9 de 99 e2 79 fa 53 01 8e d5 2c 68 20 2a 23 07 3b d1 59 68 2d 51 27 d8 8a 12 00 1b fb 55 fb 64 89 06 33 d6 4d 67 2d 0b 8a b8 8b 01 bc 83 9d e9 9a 59 9d f6 da 8e f1 1e 1a 53 da 28 4d 21 3c d8 de 71 50 99 4d 58 b5 6c a2 ac 1f fc 1a d1 62 13 18 93 b9 f5 ac f4 20 20 98 06 47 61 57 98 4e 04 9e 99 a1 b0 48 be 95 66 44 8a 38 4a d2 90 4a 4e 73 3d aa 3a 6b 1e 21 93 b0 d8 d5 eb a0 84 b6 50 9c f7 c4 09 f4 ac a5 2d 6c 6b 18 f1 2c 69 17 0c 36 ae 77 08 29 f4 fd e8 7a 95 cb 0f 3c 56 8d b0 04 f6 ac d8 03 98 98 ed ed 43 71 69 42 e4 52 cb c4 ac d6 56 2c bc 92 23 97 af 51 d0 d4 ed c7 2f e2 eb 91 38 a2 58 38 97 14 39 bb 6f 56 c5 ba 08 90 3b 52 63 b5 ca e1 40 98 2a 1e a6 aa 5e a4 f3 6f ea 6b 41 76 c1 bf c3 02 Data Ascii: H NTVemc&HRyS,h #;Yh-Q'Ud3Mg-YS(M!<qPMXlb GaWNHfD8JJNs=:k!P-lk,i6w)z<VCqiBRV,#Q/8X89oV;Rc@^okAv
2024-04-16 15:05:40 UTC	1369	IN	Data Raw: 7a 01 18 ac e5 76 6b 07 61 9d 48 83 03 1b 54 1b 51 4b c0 e2 3d 3a d3 3e bc ef 42 6c 90 be 53 1b d1 15 a0 33 45 a7 0e 01 26 3a cd 6d da 30 1d 6c 40 1b 66 6b 9d 0e 88 90 40 57 5a da d1 ee 02 42 7c d2 7d 3f 6a ce a5 d2 b9 70 dc da b5 48 69 07 f6 a1 5d 28 95 c0 3e 5d f6 a8 2e e2 0f 30 39 a7 65 b5 bc b4 82 4f 72 6b 1b dc dd ad 0a f7 09 79 40 72 a7 7e 86 88 dd b8 0c cb 83 3f 5a d1 b8 b5 21 a2 7d 62 80 86 96 00 91 80 6a e2 cc da 27 60 94 c7 90 72 91 93 fe 75 75 a7 94 0f 27 29 33 f4 a9 69 ec 82 e1 50 1e 51 83 3d 68 f7 4d b6 01 5a 7f 10 3b 54 b7 a9 69 15 ae 15 22 52 02 54 37 06 a9 92 b2 04 1d 8d 12 e1 c1 ca 79 95 07 00 7a 66 82 97 40 24 95 41 34 d1 2c 1b a8 39 48 89 ef d2 a9 ad 09 01 58 26 77 9a 35 c3 b8 33 b6 6b 3d 6b 50 59 05 52 36 13 d6 ad 10 c3 48 08 24 10 67 Data Ascii: zvkaHTQK=:>BlS3E&:m0l@fk@WZB\|}?jpHi](>].09eOrky@r~?Z!}bj'`ruu')3iPQ=hMZ;Ti"RT7yzf@$A4,9HX&w53k=kPYR6H$g
2024-04-16 15:05:40 UTC	1369	IN	Data Raw: f4 25 02 0e 07 a6 6a f5 b5 aa 9c 40 eb 43 bb 64 25 5e db 13 50 a6 af 62 f2 69 72 b2 41 d8 fd cd 6a e8 9c c1 c3 cc 39 53 b8 9c 55 6b 16 82 dd 4c 8d b2 66 b6 5a 60 72 02 a0 47 b7 5a 8a 93 e0 5d 38 71 0e 17 cc 4f 2e f5 b9 a4 db 8f 0d 33 f8 ab 0a dd 32 ec 0f a1 ed 5d 66 8b 6f e1 b5 cc e1 09 93 81 da b0 66 e9 07 f0 42 47 30 39 18 22 85 e0 27 9c 10 91 3f d4 44 d6 9f 86 04 aa 24 cf 5a 81 c2 20 a3 6c cc 50 98 f2 99 a8 6d 68 24 c9 c6 d4 07 94 54 3f 2e 3f b5 6b ad 94 a9 13 25 3b 6d b5 54 b8 67 95 3d 08 c9 9a 77 25 c4 c1 bf 4a 9e ca 0c 19 c4 1a a0 54 e2 54 42 c6 06 24 57 40 ed ba 52 24 00 12 ae c7 6a cd 7e dc 09 58 32 ae 89 ad 13 33 68 a0 b5 e4 8e 50 0e 0d 08 a1 2a 3c dc 9e 63 de 8c 1a 02 42 c7 9a 33 d6 a0 b4 14 f3 65 4a 50 e9 15 57 33 b0 c0 01 23 94 54 19 41 53 b8 Data Ascii: %j@Cd%^PbirAj9SUkLfZ`rGZ]8qO.32]fofBG09"'?D$Z lPmh$T?.?k%;mTg=w%JTTB$W@R$j~X23hP*<cB3eJPW3#TAS
2024-04-16 15:05:40 UTC	1369	IN	Data Raw: b8 d3 e2 48 13 f4 ae 01 37 8e 11 f8 88 ed 9c d1 91 74 be ab 3e 95 1f a7 ed 29 62 7b 0e f5 b7 74 d2 4f 95 38 3b c5 63 6a 4a b3 f9 e0 50 07 29 3d 6b 9d 17 6e ef ce ae f5 17 2e 0a b3 cc 49 03 19 a9 ea 2d c4 1d 7c da 58 ef d8 1a 61 69 24 84 83 12 41 da 8b 1a 67 30 93 ed 5e 6e 35 47 92 4a 43 8a 11 8a 22 35 47 d5 f9 c9 a4 f0 af 99 4b 10 b9 1e 94 06 8e 53 e6 09 db d2 a4 94 68 e4 c9 28 3d a6 bc c9 77 b7 1c d2 97 15 52 17 b7 7d 1d 51 f7 a9 fd 2b e6 57 ea 7b 0f 4a 2c e9 0a 50 82 88 9e 95 9f ab 35 64 94 1f 05 c4 cf 6a e2 51 7f 75 32 5c 3e f4 76 ae 5f 5a 79 54 e6 23 35 50 a0 e0 ef 70 78 85 25 b1 b2 39 54 93 e6 4f a9 f5 a9 21 d1 f8 42 bf 0f 5a cc 43 a6 22 46 7a d3 97 39 12 57 ce 77 ad c4 a4 5f 52 d3 cc 0a 95 f5 34 ce 3c da 13 85 08 23 15 8b 73 78 4a b0 af b5 56 72 f1 Data Ascii: H7t>)b{tO8;cjJP)=kn.I-\|Xai$Ag0^n5GJC"5GKSh(=wR}Q+W{J,P5djQu2\>v_ZyT#5Ppx%9TO!BZC"Fz9Ww_R4<#sxJVr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.11	49808	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:39 UTC	617	OUT	GET /wp-content/uploads/2018/10/t10.jpg HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:44 UTC	392	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:44 GMT Content-Type: image/webp Content-Length: 30704 Connection: close Cache-Control: public, max-age=31536000 X-Hcdn-Image-Optimizer: f:webp q:85 w:1600 alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 65ba060a83ee089b162dbbc775fe4df3-asc-edge3 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 4.904 Accept-Ranges: bytes
2024-04-16 15:05:44 UTC	977	IN	Data Raw: 52 49 46 46 e8 77 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 1f 03 00 14 02 00 56 50 38 20 44 77 00 00 30 1c 02 9d 01 2a 20 03 15 02 3e 51 26 8f 46 23 a8 a1 a6 24 52 19 d1 10 0a 09 67 6e ff cb 38 81 ec 55 28 b8 6c fa b5 db 63 15 10 cb e8 7d fc 3f 60 62 bc d1 e7 2d e5 d3 cb e7 de 8c ee ed bc a1 7f 99 78 a3 c8 39 da f5 a6 e9 e4 d9 de 33 b7 e3 b7 e7 79 c4 fc af 7f 6f 4d 7f dc ba 48 7a 93 ff 0f e8 a3 f6 f7 d7 77 d3 df fc ae 9f 5f 5a 6f 40 0f 3b 1f 5b 8f f3 5b ff 3a 8a fe 8b d7 4f e8 fe f9 3b 80 5e 4f e8 fc 13 fe fd fd 2f 3b 1f e4 f7 df f3 66 5b bf e6 f7 23 6b df f2 7d 05 3d e6 fc 6f a6 24 ec ff 30 ff 7f a9 0f 4e 3c 1a ff d9 d1 0d e1 63 f6 ef fb fe ae 1f f0 82 78 cc dd 04 33 33 72 19 99 99 99 ba 08 6e 84 20 88 87 08 42 10 84 21 08 05 4d 5f f1 7f 87 Data Ascii: RIFFwWEBPVP8XVP8 Dw0* >Q&F#$Rgn8U(lc}?`b-x93yoMHzw_Zo@;[[:O;^O/;f[#k}=o$0N<cx33rn B!M_
2024-04-16 15:05:44 UTC	1369	IN	Data Raw: 0c 01 e3 e7 59 9c 0a df fd 78 05 56 89 da bd c6 2f 55 62 3e b8 71 45 b2 b7 e6 15 0f d7 d2 97 86 04 18 45 50 a2 37 6f 7b 96 e5 f5 a0 a9 e9 aa 31 58 07 49 e3 18 c6 31 8b 2b 02 e1 e0 61 a9 e7 94 8f 4b 77 04 37 92 61 c1 03 93 9d cd ea aa 17 42 97 53 b1 79 c9 69 37 28 63 cd 16 7f cb 0b 85 ef 9d e6 d1 1c dc 2e e3 5c 4a d5 45 46 2e cc 54 cf 3e f0 5a 15 63 fc 4a 1b 00 a3 58 dc d2 f2 03 5a 41 e6 cf 16 6e ab d4 be 32 4e dc 76 8a 90 69 fe c3 8c c4 27 90 44 1b 0a 6e 16 ef c3 bd 5e a6 69 88 83 2a 34 5a 76 e8 d5 e2 0f 34 f4 54 05 51 3b 69 33 85 e3 80 45 49 b3 ff 8e 73 9c d4 38 af 76 64 93 aa 92 1d fe 58 a3 73 e2 37 d1 0b 4a ec 32 da 51 3f 18 bc c7 ed cc 31 70 86 cb 5d 61 81 ab 58 0a a9 f0 e0 ba f4 75 6e 77 0a f2 1b 94 b2 e7 a0 85 a6 2f cc 56 89 e6 be ee 31 37 c8 d6 3c Data Ascii: YxV/Ub>qEEP7o{1XI1+aKw7aBSyi7(c.\JEF.T>ZcJXZAn2Nvi'Dn^i*4Zv4TQ;i3EIs8vdXs7J2Q?1p]aXunw/V17<
2024-04-16 15:05:44 UTC	1369	IN	Data Raw: 91 33 8a 34 d7 21 83 ac 0a 15 b5 8f 52 dd be b4 e1 2c 4a f4 97 07 05 65 40 65 5c 97 c3 ae eb 32 0b 03 9a ef d7 33 e2 8f 57 a0 b0 02 28 ca ce 51 df 7a b2 d4 94 a9 83 49 ca 74 a4 5a 0f 0f 87 cc 9b 24 b2 08 de b2 17 63 52 51 76 92 83 8f b6 64 32 16 e7 f7 df 1b f4 41 62 6f f2 24 0b 0a 27 a5 fd b6 38 ae a1 19 69 ce 4a 91 c9 d9 f3 81 01 f0 21 54 a9 95 a8 e7 93 a0 7c 0f a6 34 c0 81 56 23 bb a7 3f 47 93 b6 be a1 99 0c e2 0a 23 9e 0e a8 8d f7 0d a4 e3 2c 53 5d 48 16 44 1d b9 9a 3f a0 e2 0d 86 c9 be 45 3e 0d 22 a1 6a 7b a2 d3 12 1a 81 3e 08 24 e2 e0 f5 ea 58 db b4 37 68 8a ec 84 fa 19 a0 ab 36 a5 16 f6 34 39 46 e5 9c 3e 0a 8e c1 83 d7 95 49 cf ed 88 fb 7d 20 96 e3 73 de 9a f8 15 93 a3 06 61 fc 3f eb 61 16 11 42 29 ad 68 df a2 c9 0a b3 2f ad 03 d7 2d ef dc 83 b4 dd Data Ascii: 34!R,Je@e\23W(QzItZ$cRQvd2Abo$'8iJ!T\|4V#?G#,S]HD?E>"j{>$X7h649F>I} sa?aB)h/-
2024-04-16 15:05:44 UTC	1369	IN	Data Raw: 46 98 b7 52 76 d1 1d c4 9b be e8 8e 87 5e 37 30 0e e1 f0 06 d9 0f 0b 19 da c9 a5 fe f6 a0 d1 5d f4 04 a4 19 ec 5d af d1 20 93 7b 29 4f 1f 4a 76 0c af 8f dc eb 0c bf 46 6d 19 41 d2 25 78 40 53 a1 56 e5 ff 3f 6e 40 38 28 6f 08 d1 10 a6 2d 52 b4 3d 0f 24 61 8d eb 87 5d a5 a9 8f 3d c7 d3 94 ef 2a 09 e6 ae a6 8e 61 07 38 b8 d2 d1 0f 93 fa d2 06 79 79 ac 16 6d 35 59 7a df b0 eb c2 92 73 14 c5 18 0b b1 0d 11 e1 b7 51 24 07 4c 05 8c 24 e5 b7 21 d4 cb 31 6b ae 3a 23 0c d7 81 18 ab bc c4 9c 0e ea f5 54 f5 3c e1 09 8f f9 7f fe bd 6f 42 21 a0 44 13 d3 29 ee d0 64 5b 55 26 bd 18 a7 a8 34 93 5e b5 e6 3b 26 95 e4 a0 49 96 af a3 27 9b 6b e1 f6 b0 6c 6c f2 ad 30 ec 40 3d 16 84 df 62 62 2d cb ea c9 0d e1 38 be 57 17 f5 dd 62 26 7a 33 d2 bf 6e 47 df 61 d5 e4 63 b7 b5 41 7d Data Ascii: FRv^70]] {)OJvFmA%x@SV?n@8(o-R=$a]=*a8yym5YzsQ$L$!1k:#T<oB!D)d[U&4^;&I'kll0@=bb-8Wb&z3nGacA}
2024-04-16 15:05:44 UTC	1369	IN	Data Raw: 87 0e 22 8c a2 a6 ca 11 bd 90 70 5b e3 09 1f c5 e9 90 5d 55 50 76 08 20 13 89 c0 3e 4e 36 87 8b bb 9c f6 1a 03 d1 41 10 23 25 14 85 2d 15 27 69 6b 97 ae 7e de c2 b5 12 2e c8 2f 6e 72 73 06 65 d9 f0 98 2c 22 12 78 59 d6 43 ea 70 44 4c 50 fe 2a 05 de a0 9c fc c9 07 02 58 d4 b4 9f 8c 9b d7 d9 0b 66 43 b9 8a 92 27 b7 36 fa 08 e8 04 4f 14 31 34 34 85 f7 1e de cd 64 72 36 9b 18 ce 21 29 90 da 0e e0 e2 f4 81 f0 51 63 81 4f 95 14 bf 9d a9 54 67 77 31 3b f6 6e a2 5b e2 2b 9c ea b0 31 08 b5 68 6f 2c bc e5 b3 8d 45 d6 0d bd 03 51 fb bd 3a 18 7d 7c ef 53 78 94 05 7c 4b d5 9e 2c 5f 0a c7 da fc 27 5b 3f 8d 00 01 b2 72 78 47 62 5e 7c 2c 68 e5 31 5b 8f 90 b8 27 e3 51 2b 3e 2f 68 ff 82 b6 b9 0a 0b 95 26 64 e2 1c 01 bf 03 71 df 5d a4 36 65 b0 5b 1e 6a c9 39 2f 83 c8 8a 3a Data Ascii: "p[]UPv >N6A#%-'ik~./nrse,"xYCpDLP*XfC'6O144dr6!)QcOTgw1;n[+1ho,EQ:}\|Sx\|K,_'[?rxGb^\|,h1['Q+>/h&dq]6e[j9/:
2024-04-16 15:05:44 UTC	1369	IN	Data Raw: 00 82 b4 09 15 2c f2 db 6d b6 d9 c1 c8 4f ab c4 7a c0 d0 6c 86 79 11 87 43 7f db d2 89 54 63 ea 09 de 27 b7 fc 11 32 2e 32 83 5f ae 73 4a fd bd 7f 0c a0 36 e4 90 a7 14 aa 7d 4a 38 98 74 eb a9 99 19 46 a6 7c 11 c6 28 c0 a9 d0 e5 5c aa 63 5f 60 82 31 55 54 2e 80 68 a1 b7 1c b1 1e 9a 0a 1f 4a 02 c6 30 82 81 b9 fd 88 de 29 3d 8a 3e 61 46 bc 8d df 7e f9 99 b2 73 17 29 49 1c e4 2a 53 d7 f5 8e b4 74 f8 62 a7 24 6f 2b 5d 70 85 79 f3 1d d7 1b 33 d4 97 65 2c 62 54 39 72 e6 a2 9c 9e af 5e ab 12 6c 47 ba 49 8a f1 3c 51 ec 00 cf 43 4c ea 5c ce ec 78 f4 5d 94 6e ae f4 56 bb 53 56 87 c3 c4 96 fa 9a 81 70 f7 74 bb 84 1a 4f 15 89 9e d4 33 2f 57 8b 8d 82 b7 dd 57 dd 81 2f 06 e1 f6 94 4f 0f 76 7a 79 8e fa b6 e2 a5 89 c9 7c 52 e8 45 6d d3 d7 d6 42 8f ec 91 ce fa 5d e5 e8 1e Data Ascii: ,mOzlyCTc'2.2_sJ6}J8tF\|(\c_`1UT.hJ0)=>aF~s)I*Stb$o+]py3e,bT9r^lGI<QCL\x]nVSVptO3/WW/Ovzy\|REmB]
2024-04-16 15:05:44 UTC	1369	IN	Data Raw: 01 dd 98 bd 75 d9 6d 95 07 5e e5 b6 f9 71 c4 3d 51 c1 66 db f3 70 59 ed 98 47 d9 ef 44 a2 8a f2 b8 3f f8 80 be 28 11 7e c2 da 64 a1 4e dd f4 81 9e 0e 90 af 98 6c 35 9c 3d 46 ed b5 d6 4f 4e 63 ad 3e b1 9f d5 d4 44 46 ed aa 49 22 0f fc cd 1a 16 86 a2 f9 9d 6a 39 ff 01 8b 55 a1 0a fa f3 80 d0 ce 2f d8 57 d3 59 cf ef b3 4a 8e 6f 52 5e 2d 8a 8e f3 d1 a4 86 5d 9c af 9d c7 65 21 6c d2 f7 ef 70 f1 b0 57 02 5b 9c bb ca 84 42 56 36 b3 0a 10 a2 f2 49 bd 1a f1 76 2c 36 c7 53 53 06 95 e0 8d 22 15 0f 8f ce ff b8 17 f4 2b 30 b6 f3 9f b0 98 f6 bf e1 13 69 b9 b8 bc c9 ea a4 d7 17 9d de d1 73 0e 6e f7 a1 bc e6 a4 65 d6 8f 16 fe c3 66 4e c2 b3 94 a3 19 ba 48 c8 a6 dc 79 ca 40 70 81 dc fb 7d cd af 95 a3 f3 95 ab 0b eb 0a 7c 11 eb eb 3b 89 a9 c7 3a 89 7c b9 c2 d8 75 bb 5c ba Data Ascii: um^q=QfpYGD?(~dNl5=FONc>DFI"j9U/WYJoR^-]e!lpW[BV6Iv,6SS"+0isnefNHy@p}\|;:\|u\
2024-04-16 15:05:44 UTC	1369	IN	Data Raw: 4b 01 b6 68 82 40 4b 37 00 80 9e 94 40 13 da af 7e 65 e2 e7 73 c2 4b e5 ac d8 f2 fd 3a 93 12 da 32 9a ff 13 e1 3a fb 46 dd 51 6c dd a4 72 aa 3f 6d 7b 75 63 66 eb 95 70 2e cc 39 49 d0 b0 69 db 37 1c 29 01 99 f8 fb f7 8f 5d 84 1c c6 11 a9 a5 74 1f 34 42 6d da 6c 96 5e 49 27 8a ee 6f 65 9f 0b 34 79 f6 9f c5 fa 7a 2c e4 5b bd 37 71 ce 2a 3b 95 76 a3 ab 1d 18 b2 10 49 51 63 51 8a 3c 6a 9b 09 56 46 b5 2e d4 c3 34 6d 46 e0 55 ab 8e 08 e0 9d 4c dc b5 ca 5d 82 7e 70 50 21 43 aa 96 30 6f 2e d3 3a 7b 5b 6d 5a 8a 69 d4 6c f9 7a 27 63 3e 75 d1 41 b3 7a 76 a5 8d 50 0d b9 bb 30 4d 16 43 04 82 40 80 cc 7c cc f8 b4 85 b0 5b d6 ad 2f 6e d8 63 08 5e c6 1c 78 76 e1 7d d2 33 8c 8c 6e fc 00 f0 50 02 79 d2 dd 27 df 3b 5a ed ca 42 55 53 3b 7c 4b 13 9f 9f c8 b9 ef 66 a0 c7 94 e1 Data Ascii: Kh@K7@~esK:2:FQlr?m{ucfp.9Ii7)]t4Bml^I'oe4yz,[7q*;vIQcQ<jVF.4mFUL]~pP!C0o.:{[mZilz'c>uAzvP0MC@\|[/nc^xv}3nPy';ZBUS;\|Kf
2024-04-16 15:05:44 UTC	1369	IN	Data Raw: 0e 88 a3 8d 7b 9b 3e 5c a9 f6 33 c3 bc b2 a1 8c 81 12 b6 6e 17 23 e6 74 d0 b9 44 01 cf 8b bd e2 00 65 c5 fa 77 24 81 40 e8 f7 fb d8 1d 85 de dd 95 01 d1 b6 bd 6e 34 1b 57 0b 97 0d e5 ec e5 49 8b f5 3c 08 3f cb 12 2e d0 33 63 1a a2 90 2b d9 00 a9 71 f8 3b d9 78 91 e9 14 09 30 c6 1f 3c 4a 66 01 3a ec b7 a3 f8 63 b9 12 26 a0 88 50 84 ae e2 c2 5f 12 26 6e 00 fb 9a bc 1b 07 ed 30 df d0 45 9c 98 de 11 da ad 1f b9 ba 7a e7 d3 98 f2 61 e6 4e 55 33 83 65 ce 0c 8b a6 13 7f 47 93 70 0f 6b ab 7e 42 ed ef 74 00 d6 bb 6a 64 f3 10 59 62 13 2d 8d b2 84 92 0a 8a af 48 ac fd 9e 84 50 89 20 f0 b5 19 27 6b 95 28 41 59 66 ad 57 66 4e d9 0c b4 98 b6 52 56 4b 70 ad 7b 11 db 27 b1 59 d3 64 ae ff 34 4b 26 01 ea 3a 9e 14 2a 25 47 e3 31 15 9c 0e a2 bc 00 47 d0 16 6c 74 b5 90 c3 e8 Data Ascii: {>\3n#tDew$@n4WI<?.3c+q;x0<Jf:c&P_&n0EzaNU3eGpk~BtjdYb-HP 'k(AYfWfNRVKp{'Yd4K&:*%G1Glt
2024-04-16 15:05:44 UTC	1369	IN	Data Raw: 75 de d2 b6 49 7c d5 0e 01 a8 67 29 33 7c a3 7e 75 be 51 1b dd c6 bf c7 d5 66 f6 d2 de d5 2b 9a 62 c1 85 16 fc c6 33 82 09 a7 5d 19 45 0e c6 6a 62 56 95 b6 d9 41 e0 2f 73 05 6c 03 fd 15 52 25 19 62 1b 3c eb a0 d4 fe 37 57 e1 a6 f7 62 25 b0 70 46 e5 45 8e e4 57 75 50 7f cb 3e 9f e5 10 92 54 a6 3d 6c 96 62 5c 5b e4 d3 87 83 f5 84 b6 3a 0a 31 30 81 44 1c 95 de 39 c2 c0 11 01 08 08 03 ea 93 06 aa f3 30 cb 5d a4 5d 36 f4 3a f8 ad 3f 19 96 ab 48 1a 7b 54 09 5e c8 0a 96 62 5f 63 c0 7d d8 36 a1 9a a3 3a 31 a5 36 72 59 c4 c4 59 fb fd e6 dd ac 82 ae df a1 11 6d 2a e3 1f f7 82 82 a8 17 78 5d 36 4c d4 19 d9 e0 71 00 ba e5 c4 bd 8a 08 17 85 2c de 5d c6 76 50 ff 4f ac 7e 83 5e eb 84 2e 11 c7 73 2a 96 bb b0 1f cf 8f 32 0e 69 91 aa d6 88 bb 28 b7 24 cc 27 89 46 6c cf ec Data Ascii: uI\|g)3\|~uQf+b3]EjbVA/slR%b<7Wb%pFEWuP>T=lb\[:10D90]]6:?H{T^b_c}6:16rYYmx]6Lq,]vPO~^.s2i($'Fl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.11	49812	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:39 UTC	615	OUT	GET /wp-content/uploads/2018/10/7.jpg HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:46 UTC	392	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:46 GMT Content-Type: image/webp Content-Length: 57010 Connection: close Cache-Control: public, max-age=31536000 X-Hcdn-Image-Optimizer: f:webp q:85 w:1600 alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: c267e5a1563ae124733535e9675880b3-asc-edge3 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 6.686 Accept-Ranges: bytes
2024-04-16 15:05:46 UTC	977	IN	Data Raw: 52 49 46 46 aa de 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 57 02 00 8f 01 00 56 50 38 20 06 de 00 00 70 f0 01 9d 01 2a 58 02 90 01 3e 51 20 8d 44 23 a2 21 21 2f da 09 90 70 0a 09 63 6e d9 36 43 eb f5 6c 34 63 d5 49 97 f3 85 3f 64 8c b3 f3 6f e1 f9 c0 f3 4f 8f ff 63 d3 5b fb bd a7 7c c7 fe 1f 2e af 72 fe a7 cf 1f fd 8f 56 df d9 7d 41 bf ad 7f 88 f5 2d ff ab d6 df f8 4f fd be a3 3f 70 7f 78 3d e6 ff f3 7e e0 7b bf ff 03 ea 01 fd 3b fd 17 ae 97 ab 27 a0 b7 ee c7 ad 07 ff 3f 68 5f f1 5f fb fd 69 3d 00 3f ff fb 6a f4 a7 f7 cb d3 17 91 7f 81 f0 17 f2 3f 94 ff 13 fd ab fc 7f fd 4f ef df 24 5f 65 7d 39 e2 23 a8 3f f3 7f ac f5 07 f9 b7 e0 4f df 7f 88 f3 c7 fe c7 f8 9f 11 ff 37 fd 8f fe 87 f7 ff 60 2f c9 bf a3 ff ac fe f5 fb d1 fe 5f df 43 e0 7f ec 7f Data Ascii: RIFFWEBPVP8XWVP8 p*X>Q D#!!/pcn6Cl4cI?doOc[\|.rV}A-O?px=~{;'?h__i=?j?O$_e}9#?O7`/_C
2024-04-16 15:05:46 UTC	1369	IN	Data Raw: 98 3a 37 24 b2 7c a6 2a 80 0f d9 c1 94 3e d1 34 5c ec 10 fd 81 ea 3f a0 a3 52 8c a0 ae 74 81 4e fd b8 9a 99 25 e3 12 aa e0 66 b8 8b c2 15 84 2f de 3b eb d2 5b 96 b0 55 a2 68 ad 34 63 9b fa 00 bf 1f f6 4e c4 b9 d4 43 f8 cb f1 35 10 a9 d7 87 26 94 8b 43 52 1b c8 8f 15 9b dd 9f 7a 48 a8 dc 7d b1 af 8d f4 1b 1f 36 93 d4 74 33 13 52 35 54 5d cc c9 79 db ca 05 65 ed 0c ce 4e 47 0c 33 01 11 b3 b6 12 9a 7d 5f 2b 5c 72 da b5 23 3d 53 c1 70 3e eb 6e 32 53 a6 19 fd 93 fc 70 3b 0a 7a 8e b0 f9 d1 da b4 d6 a4 4a 7c 08 aa ae 14 40 d6 65 1f 8f f9 11 a1 2a 82 01 ff 5e e1 62 1d 19 c6 d5 70 df d3 ad 85 04 6f 88 ca 38 d0 09 6f 01 59 54 83 2a ea 2b e5 85 a7 a4 40 43 09 1b 9c af 69 1e 1e a3 a9 f9 4c d7 86 74 c2 71 78 77 9e 47 ad a2 c8 51 c2 db 7f 57 8c 94 a7 cd 3b 84 f0 23 23 Data Ascii: :7$\|>4\?RtN%f/;[Uh4cNC5&CRzH}6t3R5T]yeNG3}_+\r#=Sp>n2Sp;zJ\|@e^bpo8oYT*+@CiLtqxwGQW;##
2024-04-16 15:05:46 UTC	1369	IN	Data Raw: d0 0a 8b 6f 51 9a a1 b2 e1 43 42 ef 99 75 9a fd e4 db ad 07 d0 65 08 ea 50 43 7e 48 a3 ff cb ee 4a 9a 49 d7 53 9a 90 9a 47 87 33 ab f0 ef 50 88 e6 ce 73 8b 8b 06 3b 98 13 43 70 5b b1 be ba 76 95 00 3d fb 5a 68 fe bb d0 a4 bf a8 eb 22 35 5a f9 c5 e8 cb 4f d4 59 5b 80 97 2d d5 17 fa 58 15 e5 16 4f 9a 71 1f a7 f5 35 b9 43 78 2f 29 1e bf f7 6f 7f b6 43 93 a4 86 22 cd 56 0a 37 c4 dd fd 79 bf d7 d9 58 d9 48 4f b1 3c 47 36 7a 04 98 55 9d 0b f7 d0 e6 89 ea af 12 96 cf 21 cb 2d e2 5f 2e b8 6f a0 f3 35 6e 59 d2 81 83 37 cd 63 8a 2e 9a e8 55 44 37 86 a8 d6 c0 47 e6 4e 9f 2f 6b ec 05 10 df 9b 56 e5 0c 47 c5 18 2a 2d 56 a7 be 83 e1 4e 43 14 41 54 44 f9 f3 1a c9 1a b1 9c 23 f9 ac 4a ba c9 a8 8c bd e7 b1 30 46 b1 df b4 fd ca 76 36 ac 0a 36 a2 fc ea 1c 46 23 71 5f 9d 89 Data Ascii: oQCBuePC~HJISG3Ps;Cp[v=Zh"5ZOY[-XOq5Cx/)oC"V7yXHO<G6zU!-_.o5nY7c.UD7GN/kVG*-VNCATD#J0Fv66F#q_
2024-04-16 15:05:46 UTC	1369	IN	Data Raw: 6e f7 95 53 b4 bd 88 b4 5d 1f c5 e6 cf 4d 29 28 da 1c 74 22 21 0f 1a c6 b8 8e ba c0 9f df e6 43 e0 2c ea 1e c7 5d ec b4 5d 81 a8 c9 6d 52 3f 7f c4 fc 1e 63 80 92 b0 2b 90 07 83 30 91 e4 f4 1b bc 33 46 86 3d c1 6c 4b cc a7 94 8c 72 3d 1f 36 88 23 57 8e 67 91 85 48 f6 82 04 cb e8 d2 d3 68 26 93 6f c4 e9 20 79 c5 00 b2 6a 92 5d 31 1f 49 4f ef ef 47 f2 04 e9 54 c9 e7 cc 48 e9 a1 7b 59 e3 05 c1 f5 31 60 41 c1 0b 81 83 4b 13 01 ec bb 98 08 9c 63 21 06 2c d6 11 db 2a 80 c8 76 75 fe fc 62 12 a4 85 49 9c d8 e3 86 4d 20 9a bd 9b cd 48 ed 3b 2c da 11 4f 8e ab 24 26 05 c8 2a 56 ed 73 20 9c a9 66 c6 01 cc 62 56 2c 6c 33 9b 23 a8 7f 1a 22 65 c4 81 fc af 7d 68 89 26 72 77 05 f0 e2 e3 d4 f3 53 a6 40 0f 34 01 cb 2b 48 33 30 75 32 a5 66 f2 bd 19 e9 e0 bc de e2 e2 84 79 6c Data Ascii: nS]M)(t"!C,]]mR?c+03F=lKr=6#WgHh&o yj]1IOGTH{Y1`AKc!,vubIM H;,O$&Vs fbV,l3#"e}h&rwS@4+H30u2fyl
2024-04-16 15:05:46 UTC	1369	IN	Data Raw: 5e 7d 00 01 21 bb ab 50 0f 68 2a a9 fb 3f 62 3f f0 fd 5e 16 8d 83 92 c6 42 83 80 bd 30 0d 36 89 17 f7 ff 20 01 c1 29 df d6 c2 3b 84 12 aa 4d 93 15 b5 5f 32 2e a8 05 34 59 57 5a 01 59 1e d3 b7 11 44 86 67 52 bd fe c9 df 7f 17 ed ca f0 87 5c 6f 84 fb f0 d5 23 9c 2e 85 2f 0c 02 17 68 90 0a 6a 9b 18 74 0d 9f 3d 76 a1 0e b9 cd a1 ca 00 ce 77 1f cf 2c a2 01 73 0c 6c 4a ee 9a 88 f1 51 47 38 44 d9 d3 44 fb 93 37 f1 49 c6 f5 96 44 ec 0d a4 0d 08 50 db 12 3d a6 29 82 ba 4d fb 06 a7 6d d7 de 0c a0 cd 49 40 11 8f 01 5d 9d 48 98 34 ca 54 69 89 e5 25 ac 3c 2a ac 6c 39 7c 13 b9 f0 da 0d 58 96 39 fa 9d 6b b1 4c b6 b6 47 0b cb cb 44 e8 6e 32 17 bc 15 e2 7d c7 34 ba 6c 60 aa 44 61 04 75 a5 c7 ff e6 54 ee 77 7a ec 16 0b ba 02 97 29 bc c5 62 87 10 92 ea 4b 4e 24 bb 34 04 3f Data Ascii: ^}!Ph?b?^B06 );M_2.4YWZYDgR\o#./hjt=vw,slJQG8DD7IDP=)MmI@]H4Ti%<l9\|X9kLGDn2}4l`DauTwz)bKN$4?
2024-04-16 15:05:46 UTC	1369	IN	Data Raw: c3 9f 04 e0 a4 64 f7 a1 0d ce 66 e2 da ce d8 7d 97 00 b6 dd 9d 6e 9a c0 58 20 04 68 23 aa a7 90 eb f8 00 00 7a 20 38 71 43 a8 dc 5d 16 37 b9 95 34 b6 6f ac d2 a0 4f f2 40 29 20 40 4c a0 9f 36 3f ef fb bc 69 db 35 90 0f 91 97 5a 83 77 f9 3d 00 9c 73 4f e4 34 35 0b 5a c3 92 87 2e b3 94 20 cb bf 98 99 02 ec 4e 00 1f 59 fa 6f ca 30 5d 2e 6e 6a 68 25 8c ef b8 b6 99 e9 7e db 4e 3e be 48 8d 91 7d 87 21 c9 b7 8d 62 20 5c d0 4e 96 2d 4d 84 5a 71 c2 05 d1 ac b0 a2 71 fd fc 23 7b 3f ff 10 0f b5 24 6d ce 79 21 1e 31 a8 24 ba d8 6b b2 da d5 02 03 66 22 29 c1 84 e9 51 68 d8 c3 e9 f9 a0 da 7b 72 57 71 0d 49 dd 9b df 17 94 a8 5b f6 c1 c9 f1 a7 79 f9 2a 8c 86 77 5d dc 08 80 55 88 83 31 57 72 09 15 c9 39 36 e2 2e 5f a6 17 d9 d5 9f 9b 24 7d e2 65 01 17 eb 7e b7 54 d5 19 86 Data Ascii: df}nX h#z 8qC]74oO@) @L6?i5Zw=sO45Z. NYo0].njh%~N>H}!b \N-MZqq#{?$my!1$kf")Qh{rWqI[y*w]U1Wr96._$}e~T
2024-04-16 15:05:46 UTC	1369	IN	Data Raw: 59 89 72 9e fa aa 56 b0 a3 8e ff cc 7d 0c 7a 75 32 66 65 92 43 7b e1 a1 77 00 ab cc 4e 2e f2 34 3e 81 49 51 a8 fe 7d 4d 7d 26 11 8a f9 6c 8e 14 84 7f 82 14 e3 5b 57 b7 53 62 e8 ba 14 74 ce da a5 30 f4 af bc 51 84 41 dd aa 23 02 3b 5b bc a9 e5 a3 4f 09 51 67 51 61 fd 0c e5 40 9e d9 31 e8 ee 18 16 ea 0b e8 96 cf 77 55 a2 0e 6c 1b 84 ec 21 d2 b2 95 2c 47 db bf 78 61 d3 0b af 1a 70 4a 45 e0 93 66 5a d3 14 68 f2 99 c1 65 18 df 54 85 af 9f 7b d0 b9 52 d4 71 c9 30 aa cd 16 cc ba c9 1d c2 4e a0 03 e5 aa 7b 6c ea fd 29 58 cc 63 b9 3f d0 5e d0 d8 c4 e9 cb 7a 54 64 b4 ff ee b5 12 dd ab f5 5e d3 48 9d ba a9 6e 7a 65 cc 3d 04 30 c0 76 bd ef 72 37 42 85 65 38 48 10 c7 3b dc de 54 df fd 70 ec cc 4d 65 77 ec 81 39 65 1b ad 9e 3a e0 55 13 0c 52 ba 43 f5 dd 73 52 63 b5 f1 Data Ascii: YrV}zu2feC{wN.4>IQ}M}&l[WSbt0QA#;[OQgQa@1wUl!,GxapJEfZheT{Rq0N{l)Xc?^zTd^Hnze=0vr7Be8H;TpMew9e:URCsRc
2024-04-16 15:05:46 UTC	1369	IN	Data Raw: 8f 43 f9 cf 33 90 67 49 16 a8 78 e6 8c ba 8b bd 23 f9 4a c8 4f e1 bc d5 0b af 7c 77 08 41 fc 86 ed a6 38 cd 8b d3 c8 98 02 47 56 3f ac e4 a9 2a 2b b7 ae 8a 2c 3f 42 6e 56 27 d6 7c 7b ef 1d 63 7f 23 15 b9 d4 80 25 96 f6 11 fa e5 a2 5a 45 03 7c b1 a8 62 97 7a 4e f3 ad 8f bb 1b 0f 3e b4 0c d8 04 9b 70 ad f1 6c c9 5a 47 70 1f 35 da 1a 0e 15 66 db 3a 6c cb 93 36 0d 78 33 2a 94 29 c8 60 a9 4c 09 be 61 2b 79 31 3f fd 3d a2 80 e7 91 8a dc 4d b9 b2 6e ed 98 b8 82 de 8c 8e d4 72 af e1 a3 f1 f9 bc e7 2d aa 80 60 41 47 34 80 8e ec 45 31 8f 3a 5a 02 16 09 74 3f 41 56 61 a8 c2 05 82 23 14 4b 8f 55 d1 8e a0 1f 32 8d 01 71 db ac 0f 51 c0 06 7a 02 ed cf 0e 9f 3d 07 26 a0 29 3d 7c 14 e1 71 b8 dc 86 24 98 58 93 cd 98 0d 59 ec a0 39 cb ec a4 f0 6e d0 bc 66 35 07 27 87 0d ad Data Ascii: C3gIx#JO\|wA8GV?+,?BnV'\|{c#%ZE\|bzN>plZGp5f:l6x3)`La+y1?=Mnr-`AG4E1:Zt?AVa#KU2qQz=&)=\|q$XY9nf5'
2024-04-16 15:05:47 UTC	1369	IN	Data Raw: c8 62 83 52 1e 99 28 70 1e 71 c5 7a bd 62 0d 40 a4 d0 0f bc 68 73 ff 01 74 d1 c0 e1 ab be 94 17 03 a9 89 c6 e4 3c 53 76 a2 59 50 24 68 e5 81 32 ba 55 30 93 a8 ca 7a cc 76 14 2a e0 53 fe 45 cf 7e 42 4b 2f 1f 09 ea b2 8d f8 59 b9 35 09 87 b8 8c 28 73 a4 a5 ac 15 54 c3 76 9e 64 cd a7 de 4c a2 5e df 85 63 93 8a 54 7f ef 72 86 c3 0c b6 cf af b4 bb be 7c c6 68 e8 49 c5 3d 28 b6 dc 09 5c 38 fd 87 7f 75 8b a0 63 03 39 33 6b 1f 60 1f 29 b3 8f 74 64 41 d9 5e 23 a9 ec 68 04 32 c5 8e be da 71 d8 0b 60 67 ba 0a c1 62 6c 6b cc 3c a9 0f 58 97 70 7a 71 9c f9 f9 7d 4c d0 e0 57 99 01 55 aa 34 0b 57 a2 2f 75 90 f6 d8 1b 84 07 05 80 e9 2d 48 a8 b1 66 46 2b 47 3f 2d c7 25 77 16 1e ff 2c c0 49 43 4c 48 1a 02 d4 66 5d df 14 4b 8e 0c 4c 07 7e 42 f7 28 c5 63 8d 9c 17 c6 80 1f 99 Data Ascii: bR(pqzb@hst<SvYP$h2U0zv*SE~BK/Y5(sTvdL^cTr\|hI=(\8uc93k`)tdA^#h2q`gblk<Xpzq}LWU4W/u-HfF+G?-%w,ICLHf]KL~B(c
2024-04-16 15:05:47 UTC	1369	IN	Data Raw: 2c c6 ce f1 8c 44 e2 d8 45 a6 dc bc e3 26 b3 ed 41 fc c3 a9 d6 b1 e3 57 1b 5b ee cf 6b 4f 0a 60 ec 0f ef b2 21 26 1f 83 c3 bd ac 8a a0 17 1e 9c 9b 47 d9 d9 b5 19 d7 c5 74 d5 a7 e3 08 ab 69 fb 98 47 63 22 37 89 09 44 ca 54 71 90 ed e9 64 f8 4d 1a 8f 61 25 19 f5 ba 6c aa bf 64 ac 1d 58 f7 33 94 71 e7 0b 08 52 87 cd 39 9d 53 44 3e ec ec 82 1a ee 44 fc 25 d5 b9 31 a8 dc ef 13 17 55 02 b7 da cd e6 06 87 96 30 4b 25 f2 07 92 7c 32 bf bd 52 6a d8 b9 9e 54 d7 44 bc 9a ef ed 24 94 ee dd 70 e9 52 24 f2 f9 df 21 b2 44 6a 21 7c 6b f0 c5 b9 37 a0 60 6b 82 27 7d e2 d1 fe 9c be f7 cd 5d 0a 3c 75 75 b5 f5 59 84 d5 72 5b af ab a0 5f 72 6d b5 4c f0 e3 ba b6 58 b5 87 00 cc d0 4b d9 36 36 10 5a 84 16 90 7e 76 95 9c b2 63 76 68 e6 1b 85 e1 09 f4 a6 05 b4 cc 2e d2 cb 9e 1b 69 Data Ascii: ,DE&AW[kO`!&GtiGc"7DTqdMa%ldX3qR9SD>D%1U0K%\|2RjTD$pR$!Dj!\|k7`k'}]<uuYr[_rmLXK66Z~vcvh.i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.11	49814	154.62.106.12	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:40 UTC	378	OUT	GET /wp-content/uploads/2018/10/mald.jpg HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:42 UTC	392	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:42 GMT Content-Type: image/jpeg Content-Length: 97578 Connection: close Cache-Control: public, max-age=31536000 X-Hcdn-Image-Optimizer: f:jpeg q:85 w:1600 alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 3afee1e953cd71d206d6a0ee9a103bcc-bos-edge1 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 1.823 Accept-Ranges: bytes
2024-04-16 15:05:42 UTC	977	IN	Data Raw: ff d8 ff e1 00 80 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 05 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 4a 00 00 00 1b 01 05 00 01 00 00 00 52 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 69 87 04 00 01 00 00 00 5a 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 02 00 02 a0 04 00 01 00 00 00 58 02 00 00 03 a0 04 00 01 00 00 00 90 01 00 00 00 00 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e Data Ascii: ExifII*JR(iZHHXC!"$"$C
2024-04-16 15:05:42 UTC	1369	IN	Data Raw: 04 0c fd 79 23 57 cf 83 b0 d2 4b d2 b3 d7 d7 05 a8 a6 a9 a8 4a 4d 8e 3c 93 40 0e 18 83 ea a7 7a e0 f7 0c bf 4d 4c aa e9 bb 5d b7 e0 c5 65 ce e9 47 24 e6 be 8b c7 ab 09 c4 9f 2e 58 15 8d 73 db b0 39 d1 28 6d b0 d9 be 17 a5 0d 0d 32 c2 b4 f6 e1 22 2a b6 e0 a7 fb 42 73 ea 72 7b eb 3f 1d 8d 43 ac 16 92 08 39 f2 cf 74 4f 5d 7d 2a fe 1b 0e 59 70 a8 ec 99 f3 fe a8 17 42 5a 45 9f ab fa 8a cc 6a 26 0d 49 3a 78 52 83 86 75 c9 2a 4f e4 46 81 f5 dd b2 a2 83 aa ee f6 fa 37 f9 7f da f4 e6 aa 8b ca 08 f1 f1 92 00 3e ec a4 63 d7 3a 31 5b 57 51 51 f1 5f e7 a8 e2 73 1d 65 14 67 70 38 46 90 20 62 a4 fd b4 f7 c5 4b 7d ca eb d3 74 f7 c3 4d 24 33 5b a4 dc d8 1c ac 44 8c 38 23 d1 58 03 f6 ce a1 97 56 8c 63 6b 70 ff 00 d4 48 9e f8 11 6e f1 eb 54 9f 6c 14 a9 20 7e 92 7c aa 97 d0 Data Ascii: y#WKJM<@zML]eG$.Xs9(m2"Bsr{?C9tO]}YpBZEj&I:xRu*OF7>c:1[WQQ_segp8F bK}tM$3[D8#XVckpHnTl ~\|
2024-04-16 15:05:42 UTC	1369	IN	Data Raw: 24 19 f4 22 3a 10 47 84 d6 b0 c4 17 0a 81 10 52 48 fb 1f 10 41 f1 e7 34 5d 25 dd 4c bf bc 07 0a 03 03 ef a8 75 50 99 5a 32 a0 06 19 1d f5 0a 9e 67 0c 0e 78 3c 68 c5 ab c0 aa ad 86 9a 6c 01 29 c2 b6 e0 bb 7e bc f7 fb 6a a1 49 6b e2 a3 04 2a c6 a7 da ee 30 ad 8a 48 2a c4 88 d6 e6 f0 25 da b9 25 c7 9a 3d a7 b6 5b 3f 90 0d f4 d1 db e0 ad e9 9a 4a 49 ef 22 9e 59 6b 10 89 ed b2 3f 3e 03 0c 9d c3 1d c9 c7 1c 11 df 39 e3 55 26 bc 54 ad 6b 5a e6 aa 8a ae d3 41 72 12 c0 b1 a8 0a c4 63 7b 06 c6 5b 24 11 ce 71 a9 3d 7b 7d 8b a8 ba a6 5b 84 4f 27 cb 90 ab 18 71 ce 00 e7 fa ea ef 11 c7 3f c4 f1 0d af 14 90 42 50 13 69 16 02 07 23 9a 49 27 ad b4 15 5f 09 86 6f 00 d2 d2 c1 32 a5 15 5e f7 26 4f 86 de ba d5 97 a1 62 b3 32 57 5c 28 b3 0c b0 21 96 9e 6a b5 56 22 25 53 e2 41 Data Ascii: $":GRHA4]%LuPZ2gx<hl)~jIk0H%%=[?JI"Yk?>9U&TkZArc{[$q={}[O'q?BPi#I'_o2^&Ob2W\(!jV"%SA
2024-04-16 15:05:42 UTC	1369	IN	Data Raw: 92 42 62 51 e8 40 c9 ff 00 1d 66 62 54 03 29 c3 22 61 02 27 73 a6 fe 17 ad 1c 33 5f 19 75 5a 9f 7e b4 4e b2 ba 61 61 9e 08 68 28 e0 49 ad ef 00 2e 14 bb 46 25 ca 86 63 dd a3 24 9d dc 36 06 39 d5 55 6e 09 59 59 5b 6e 14 eb 25 1c 54 ff 00 ee d1 6f 6d b9 6d aa 65 07 8f 31 3c 83 f4 e7 5d bb dc 9f 2f 04 3b 19 16 9c 8a 82 dc e3 2c 4f 1f 5e 35 17 a6 76 c7 6e 6b 99 20 ca 96 f1 08 c7 ab e5 8f e6 72 47 e9 a6 e1 30 c1 b6 ca 94 2e 4d bc 7f 8a 6b ee 92 42 12 74 d7 df 8d 26 b6 f9 73 7e ad 5e a2 f9 f6 4a e8 dc 94 a8 89 f1 22 94 5d 80 f1 ce 76 81 cf af 3a 81 d3 97 0a 9a 48 6d 95 f4 af 34 55 36 db 84 93 46 49 18 dd b5 4c 41 46 33 e5 c9 3c e7 50 6b e9 9e df 48 c6 76 54 ad 92 31 88 d8 f9 a3 52 38 cf b1 3e de 83 ef a6 ec a4 96 f0 24 2c 52 33 e2 39 cf 24 91 83 f9 e3 fc b5 ac Data Ascii: BbQ@fbT)"a's3_uZ~Naah(I.F%c$69UnYY[n%Tomme1<]/;,O^5vnk rG0.MkBt&s~^J"]v:Hm4U6FILAF3<PkHvT1R8>$,R39$
2024-04-16 15:05:42 UTC	1369	IN	Data Raw: 60 01 9f 41 f5 d4 50 52 a8 c6 b1 aa 3d 1c 4c 40 8d 5b 96 65 3c 03 ec 3f d0 ea 4d 3c f4 f5 4d 5a 25 a8 91 6a e3 0b 2d 3c c0 03 1f 8a ae a4 a3 03 fc 05 77 00 7e 9f 5d 3d 0d 15 2f 2e 9e fe bf 6a 49 50 02 75 f7 f4 fe 69 89 63 37 39 25 9e 59 6b 16 55 98 ca 63 58 d4 a5 48 21 9a 56 2c 0e 43 83 8e 31 8c 13 c8 d3 b5 f5 d0 5b 69 85 40 8c 7c c2 c5 b6 05 60 09 dd e9 90 38 ef d8 7b 0f 5d 2a 90 bc 8f f2 f4 30 89 7e 65 80 a5 a6 89 32 d2 b6 77 0d b9 e7 b9 c6 3d 86 97 65 e9 fa db df 50 91 51 01 a6 9a 1c 34 8d 53 98 e2 81 40 19 96 42 47 08 32 00 f7 e3 19 c8 d3 00 ce ac b1 6d 3b ef a7 8e fe 54 25 59 06 62 7a f7 50 09 5a a2 db 6f 92 6d cd 25 6c 81 43 b2 a6 76 2b 1c f2 3b 0e 7b 67 be ba 94 b7 4a 79 12 38 2e 92 d4 f8 af fb 87 58 ca c5 2f 00 b2 06 90 0c 3a e7 05 48 fc f9 19 d8 Data Ascii: `APR=L@[e<?M<MZ%j-<w~]=/.jIPuic79%YkUcXH!V,C1[i@\|`8{]*0~e2w=ePQ4S@BG2m;T%YbzPZom%lCv+;{gJy8.X/:H
2024-04-16 15:05:42 UTC	1369	IN	Data Raw: 22 c6 1a 26 cb 64 ae c3 90 54 e7 f0 9e 08 d5 72 5a 89 28 af 02 6a 29 1d 29 64 9f c7 80 ec 31 ae dd fd c2 64 ed ec 06 32 7b 6b ac 6b 2b 98 05 32 00 04 db cb 43 ce 60 9f 4a ce 2b c8 e5 cd 5b 2b ae 15 7d 21 d4 6d 15 be 67 5a 19 53 c4 9a 97 f1 0c 13 82 54 7f 30 ee 0f a8 3f 4d 69 f6 29 60 bb 7c 35 bd d9 e1 a8 f9 fa 4a 2a 4a 9f 02 70 32 ef 1f 84 64 18 1e a4 64 8c 7b 8d 64 7f 15 e6 d9 7b 82 70 71 e2 40 bb 0f fc c7 27 51 fe 1a 75 bd 57 4d dd ae 96 c5 9a 2a 78 ea a8 ea 1e 86 49 18 04 8a a0 c0 db 01 27 8d a5 b1 df 8c ea be 05 9e d5 b4 3b 17 30 4f 50 2c 7e 7e 95 09 c4 04 2d 49 3b cd 73 a8 e4 94 fc 10 fd 99 24 a6 46 b6 dc e8 ab a1 93 05 58 45 3a b6 18 a9 fc 2d c8 c8 3d 8e aa a3 a8 1d a8 96 3b bd 2c 54 b5 f9 06 37 0a 02 55 02 c4 31 2a 0f 91 87 1d bc a7 9c 01 db 56 1a Data Ascii: "&dTrZ(j))d1d2{kk+2C`J+[+}!mgZST0?Mi)`\|5JJp2dd{d{pq@'QuWMxI';0OP,~~-I;s$FXE:-=;,T7U1*V
2024-04-16 15:05:42 UTC	1369	IN	Data Raw: 38 f2 5d cd 84 c5 aa 48 cc a4 93 73 cd 69 f1 8c c0 73 1c e8 6d 44 55 17 8e 94 2c e1 85 c6 da fe 2c 0c 47 2c a0 64 1f ae 54 1f cd 34 4e 9e b0 56 8a 0b c5 30 5c 56 45 f2 f3 2e 78 12 03 be 3f d1 83 af da 41 a5 51 5c 16 3b c2 51 d6 81 0d c1 d0 a8 11 90 62 90 82 58 37 a7 27 cd fa f6 d4 1b 75 32 d1 dd ee 36 0c f8 70 55 af ce 50 1c fe 06 ce 48 1f f0 b0 07 f2 d2 f0 28 77 1b c3 50 16 32 39 ff 00 4d 53 fb 5d 6c cb 4a f9 02 7a 81 56 8b a8 c1 e3 94 0f c4 84 cb 82 3f 73 2e d9 d0 3b bf 50 ee 26 8a 5d e8 96 e5 6b 96 9a 32 04 8c 04 94 ec 7f 85 c7 2a 7f cb f3 d0 eb 85 43 5e 3a 42 9a ef 02 18 ee 1d 3f 38 59 90 72 c2 13 cf f4 21 87 fc ba 2b 6f a8 35 34 fe 21 da 24 47 64 90 28 c6 d6 ce 71 8f 4c 67 1f 96 97 42 69 ad f7 89 16 a7 62 51 5d c1 8e 62 dc 05 6c 79 be c3 21 58 fd df Data Ascii: 8]HsismDU,,G,dT4NV0\VE.x?AQ\;QbX7'u26pUPH(wP29MS]lJzV?s.;P&]k2*C^:B?8Yr!+o54!$Gd(qLgBibQ]bly!X
2024-04-16 15:05:42 UTC	1369	IN	Data Raw: 02 f9 80 71 c3 e1 b2 33 df b6 40 d4 4b ad 7c b5 b4 54 b5 1b 4a cd 1d 14 34 8b b9 b3 93 1a ed dc 3e 84 63 f4 d5 d3 a8 ae 51 5d 7e 01 d9 ed e5 b7 56 da 3a 96 6a 35 07 d2 29 61 f1 06 3e 9c 11 f9 6a 83 5e ca 2a 05 3a 1f 2c 0a 07 e7 eb aa d8 55 ad 48 85 8b 82 47 80 30 0f 88 89 a9 70 65 b8 de a3 74 b5 e2 ba 82 f3 05 6c 13 b8 ab 8a 75 96 19 98 e4 ac 80 83 9e 7b e7 1a 8b 75 77 5b 83 55 c7 b0 16 24 26 06 00 1e ab f6 e7 5d ae a6 68 ab e4 48 b2 40 21 94 7d fb 8f c8 e9 dd 8b 34 04 1c 72 b9 07 d8 e7 83 ad 09 48 56 7e 74 a0 76 a9 51 53 d1 5a e8 e2 bc d6 43 24 b5 13 05 6a 0a 4e 36 77 f3 3c de a1 4f f0 81 f8 bb f6 ee 56 d3 25 75 e2 68 eb 2a b6 d5 d7 56 4b ba 99 25 ec ce a3 06 42 3d 11 47 a7 61 b7 e9 aa 93 78 a9 ba 2a a6 63 19 c2 36 e6 27 69 1c 2e 3e 80 7f 4d 19 0d 5f 41 Data Ascii: q3@K\|TJ4>cQ]~V:j5)a>j^:,UHG0petlu{uw[U$&]hH@!}4rHV~tvQSZC$jN6w<OV%uhVK%B=Gax*c6'i.>M_A
2024-04-16 15:05:42 UTC	1369	IN	Data Raw: ac 8c 9a d6 b7 d5 36 ea ae 94 85 d2 7a da 1e a0 a2 f0 83 b5 c2 80 c2 9e 01 63 80 8d 17 8a 59 cf fc 23 8f ae a8 77 4a ba d9 26 89 a9 99 a5 29 21 0c c5 bc 8b df 24 e7 d7 fa e8 5d 3d 2d 2c be 14 4d 6b a2 35 63 8f f7 48 59 15 8f d4 67 0d fa 0d 16 b8 d2 a5 be 36 7b d4 f3 53 cf 8d cb 4b 1c 24 c9 f9 e7 01 41 d5 86 b0 a8 65 42 f2 ae e8 9e b0 3e 90 28 5b 4b 83 e3 51 8f 7e fa d3 2b 58 d2 d2 cb 04 d4 94 b5 32 4d 11 8a 47 31 64 77 04 3a 03 f8 24 18 c6 f1 83 82 75 7b f8 73 d5 7d 49 64 73 49 05 45 ae 64 98 13 15 35 5c 81 1a 77 18 01 55 f3 c3 1e 00 0d aa 77 4c 75 08 82 fb 4b 51 4d 47 15 3d 15 3b 2c cc 14 b1 94 80 71 9d e3 18 60 d8 e7 81 ad 1b a9 ed 93 f4 df 51 d1 f5 19 7a 2a db d4 d2 fc cd 55 04 d1 07 f3 91 85 72 40 00 c8 47 24 e0 1c e3 bf ad 6e 21 d8 1f f0 3c 8c d9 b4 Data Ascii: 6zcY#wJ&)!$]=-,Mk5cHYg6{SK$AeB>([KQ~+X2MG1dw:$u{s}IdsIEd5\wUwLuKQMG=;,q`Qz*Ur@G$n!<
2024-04-16 15:05:42 UTC	1369	IN	Data Raw: 87 c2 ef 31 06 12 e8 ea 93 04 c6 dd 28 05 1d 15 4b 4f 55 d2 b7 10 90 d7 09 f3 4e c7 85 5a 9c 79 48 3f fd b9 93 8f be df 6d 5b fa 0e ec f5 d4 5f b3 6a 49 5a 9a 78 fc aa ff 00 88 a2 9d ac a7 fb c8 c3 07 e8 41 d4 3e a8 a7 87 aa 7a 76 3e a4 a4 82 58 6b a8 43 45 5b 08 1e 73 18 39 65 ff 00 8d 0e 58 7a fe 21 ed a1 75 d5 13 a3 d3 75 6d 21 53 50 93 24 77 20 bf 84 cc 57 c9 30 fe e4 c9 80 7e ba 1e 1f 8c 1c 3f 10 97 d9 24 a0 09 ea 5b 9f 88 1f f9 34 ad b5 8e 95 38 ec 21 e2 38 75 30 f5 96 4f 82 5d 8b 11 ff 00 17 46 fa 4f 53 44 ba ea df 3d b6 e1 4f d4 f6 ec 47 22 ca 86 73 8e 16 41 c2 48 7e 8d f8 1b f2 d3 bd 6b 4a 9d 45 d3 f0 75 35 0a b9 aa 81 59 e6 55 3e 77 8f 39 91 7f e2 46 cb 0f cf df 56 88 5e 8a f1 6a 59 f6 89 a8 aa a1 20 a3 7a a9 e1 94 fd 41 c8 fb 8d 55 7a 62 69 7a Data Ascii: 1(KOUNZyH?m[_jIZxA>zv>XkCE[s9eXz!uum!SP$w W0~?$[48!8u0O]FOSD=OG"sAH~kJEu5YU>w9FV^jY zAUzbiz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.11	49813	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:42 UTC	617	OUT	GET /wp-content/uploads/2018/10/4-1.jpg HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:49 UTC	392	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:49 GMT Content-Type: image/webp Content-Length: 80594 Connection: close Cache-Control: public, max-age=31536000 X-Hcdn-Image-Optimizer: f:webp q:85 w:1600 alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: f1ad445601da8c04b0b5405f263c90f4-asc-edge4 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 6.717 Accept-Ranges: bytes
2024-04-16 15:05:49 UTC	977	IN	Data Raw: 52 49 46 46 ca 3a 01 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 57 02 00 8f 01 00 56 50 38 20 26 3a 01 00 b0 55 02 9d 01 2a 58 02 90 01 3e 49 1e 8c 44 22 a1 a1 a4 b3 7d 89 20 90 09 09 66 6e d9 2e 01 b2 e2 d4 b8 22 24 23 8f e7 76 c4 3c 3e 73 98 3f a5 75 95 a5 b3 8f b9 fc 99 fc a7 f9 68 e4 9e d8 3d e3 f7 cf f3 7f ee 7f 2a 3e f0 7f 9b dc cf c9 ff c3 f2 bd f7 7f e7 7f f3 fd e9 7c d3 ff 4f fb 59 ee 57 fa c7 f9 bf fb 3f 9d 3f 40 7f ac ff e5 ff c6 fe e2 7f 6f ff ff ff ff f0 87 fd 3f de 3f 75 3f dd bf df fe 64 fc 06 fe 7f fe 27 fe c7 fa 6f df bf 9a 6f fa 7f b6 fe e7 ff c9 ff cf fd a7 ff a5 f2 03 fd ef fd 67 ff bf 6c 7f fe 3f ff fd c7 7f cd ff dd ff f5 ff a7 e0 2f fa 6f f9 9f fe 9e d2 bf fa 3f 73 3f ed fc a1 7f 80 ff b5 fb 95 ff 27 e4 7f f6 87 ff 9f fa 3f Data Ascii: RIFF:WEBPVP8XWVP8 &:UX>ID"} fn."$#v<>s?uh=>\|OYW??@o??u?d'oogl?/o?s?'?
2024-04-16 15:05:49 UTC	1369	IN	Data Raw: e7 fc 4d 51 1f 70 c7 67 d7 6f 8d 47 e2 3b 6b c1 6c fe 08 52 74 8d 69 fe 45 5d 0f ff fe 80 ab 89 99 c3 f6 f8 f2 34 ff f3 a0 b6 b5 a9 4c 27 b0 38 75 d9 f2 66 d4 8d 97 8e 50 31 fd 94 71 dd b2 77 5a d8 a2 e5 9f c4 44 75 dc f7 d8 b4 40 e2 27 37 a6 b9 3e 56 d2 82 44 9c 2a 33 15 2f e0 a7 77 86 ae 5c 98 b0 3a e8 66 50 7f d5 3f f9 3d 72 6c d6 1f c5 64 52 a2 b3 ad 26 e6 53 91 28 23 43 e9 90 65 55 78 94 8b 02 8e 73 1c d0 5f 48 d3 cb 39 83 65 e7 ed cd 09 ff bc 32 1d d2 b4 82 f7 de 7a 6c 68 06 46 81 a6 94 e2 bd 86 50 5d db 9c ce 47 82 3f 82 47 79 da 42 40 08 19 03 09 cb af 71 16 91 75 a5 09 ec 7c af cf 88 55 a2 d4 0e e4 2b 62 5f ee dc b3 28 1e 35 d5 ec 96 55 a5 24 50 bf aa bd 5b c7 34 17 2d dc e6 7b 83 e8 a9 02 a7 b5 c8 be 20 bf 3a 02 29 a9 75 a2 98 86 33 a5 52 03 03 Data Ascii: MQpgoG;klRtiE]4L'8ufP1qwZDu@'7>VD*3/w\:fP?=rldR&S(#CeUxs_H9e2zlhFP]G?GyB@qu\|U+b_(5U$P[4-{ :)u3R
2024-04-16 15:05:49 UTC	1369	IN	Data Raw: 50 b3 bb a4 c9 4d 35 65 b3 b4 39 f1 4c dd 9c a9 de b2 9b b1 cb e8 41 b2 ba 38 47 c8 41 36 67 6b 3c 4c 7b af 3c 5d 5e 96 96 1c ea 43 4f 72 b3 65 2c 86 5d a8 2b d8 34 79 a8 fc 6b 84 fd e5 38 53 0f 48 96 3b ed 0c df a1 82 0e 18 a6 fc ab 7b 3b 9a 8c 6e dc 1d 37 c6 f9 c3 e7 c3 ff b8 49 b3 b4 31 c1 43 dd 4b 8a 2d b4 06 af 71 31 4d 5d 1f ad 11 cc 16 1b 63 0a a4 92 a9 36 d9 c0 22 b2 26 5e 23 38 40 21 5f 27 5f e9 17 91 5c 22 90 8a ce ff 2c 72 39 65 c8 92 04 9d c4 fa 19 24 16 06 c9 6d 9b cf 83 f1 15 ae bc df f2 9b 95 66 be ef ec d9 5a 63 81 c8 af 4e 4d b2 ff d6 70 da 62 7c ce 30 33 4c 65 72 5d c6 0f d8 f4 2d ed 42 9a b6 ad ba 26 f5 57 5d d4 2c d0 93 0a b6 7b 37 ef d7 7a 23 e7 03 78 6b ea 0b 76 6e 24 2c 4f 66 be 12 b3 64 36 4e 35 4c ef de 85 fc 4b 8c a5 be 6b d6 9b Data Ascii: PM5e9LA8GA6gk<L{<]^COre,]+4yk8SH;{;n7I1CK-q1M]c6"&^#8@!_'_\",r9e$mfZcNMpb\|03Ler]-B&W],{7z#xkvn$,Ofd6N5LKk
2024-04-16 15:05:49 UTC	1369	IN	Data Raw: 20 60 b6 a3 d1 bb fc f9 cd c0 0b fe b2 c9 f5 53 44 29 b9 3f f1 5b c8 7e f8 9b 05 cc 10 10 92 a7 fe 10 62 63 af 26 8a e0 29 5b f2 a1 d1 bd 7c 28 6b cd 39 f0 de 0d c6 56 76 2e 6c d4 d1 20 7e ca 7e e7 dc aa e2 5c 83 d5 d6 ff e6 3d 1c 86 7a a2 d3 ca e8 b2 15 96 f7 c1 02 03 51 73 3f d9 32 59 e8 76 35 f8 9c e7 a9 af 32 2b 92 94 71 aa af 43 6c 88 26 8a d2 15 28 f9 b1 1a 61 3e 17 f9 b7 bf 15 f3 00 e8 4f 24 e3 20 fa 8d b8 9c ff b7 6f 33 db e6 50 4b 8c e9 78 c7 52 12 b9 24 11 ae 64 47 c5 af 7d fd 10 d3 af fb 2d 31 9e 40 93 bf f2 06 53 02 63 40 51 9b 86 34 5c b0 65 9b 8c df 2b 11 30 aa 25 4f f8 e5 eb 91 33 3b 33 19 c7 d7 c0 44 3e fb 22 c4 ce a3 a5 89 75 26 2d af cd 3a 03 f4 8b b1 d1 ed 99 75 9b 86 a9 54 ae 9a ec 56 b3 33 aa 09 1e ad 62 e3 6f c1 1a 95 ff ed b6 15 4c Data Ascii: `SD)?[~bc&)[\|(k9Vv.l ~~\=zQs?2Yv52+qCl&(a>O$ o3PKxR$dG}-1@Sc@Q4\e+0%O3;3D>"u&-:uTV3boL
2024-04-16 15:05:49 UTC	1369	IN	Data Raw: 6c 21 0b ff 40 44 55 19 d2 af 8e 71 00 18 a9 68 aa 10 40 a7 f6 0b fa 7b 2a 84 ce 11 c1 71 19 8a a5 16 b1 01 3d 72 76 0c 21 a7 ea 3e 7f a6 7e 20 6a e3 39 df 75 f7 37 32 8b 13 fe 45 f7 43 0c ba e1 82 ef 63 83 e2 40 d5 17 8f 37 99 b0 04 ae e3 a8 8e 0a 6f 71 9f ef 96 e9 05 a0 90 f3 8d f2 71 33 63 31 fc 4b 4b cc d8 d9 f6 94 42 9f 5c 06 2d a2 b0 23 be 02 7e cf b1 90 31 c1 e2 9c 97 98 41 47 39 e7 6f 6b 78 e6 35 3b c2 cd 81 a3 a1 da d3 c4 c5 29 52 e8 a4 be 57 44 51 04 c3 ee 55 f2 a0 da b8 48 9d b2 8f 87 9b b1 cd 68 6d 7e 0d 14 eb 5b a0 ef 4c 79 fa 7b 42 db 14 6b 65 f2 ee f5 78 fe 18 07 71 1b f8 dc e4 7a 73 17 1c f0 3f 65 b0 01 9c 12 0e c5 66 06 1a 94 c9 b4 07 30 c9 e9 50 52 9f 70 97 d2 2c c8 cc 17 23 8c 1c 8f 90 60 3e 83 20 50 3d 7c 9b ac ec 72 3a 17 d8 fd 3e 70 Data Ascii: l!@DUqh@{*q=rv!>~ j9u72ECc@7oqq3c1KKB\-#~1AG9okx5;)RWDQUHhm~[Ly{Bkexqzs?ef0PRp,#`> P=\|r:>p
2024-04-16 15:05:49 UTC	1369	IN	Data Raw: 6e 53 af 7b a5 11 2f 19 95 6f 5d c0 60 60 a9 ba 32 2c b2 14 4d cb 43 ee ec 8a 6b 9e 98 e8 26 3a d0 77 a8 b6 79 e7 49 43 83 08 e4 e2 3c 76 81 b7 d8 91 b5 e1 ba 77 43 a3 1e 91 89 fc 89 a6 0c 94 53 15 15 e8 b4 4e 2d c3 e6 4e df 50 d3 aa 15 36 70 2c 4f e2 20 df a9 62 f0 dd 57 88 c7 64 c5 3d 03 07 c6 42 5a 39 4c 5f 56 c9 6f 24 a4 af c4 86 d2 84 af f5 1d 88 a7 66 43 67 61 0d 3d 42 dd f9 d1 be ae f8 64 b2 0b c7 51 23 21 d2 70 d3 48 53 3c 79 3d 51 71 4e 9e d0 81 35 ee c3 d2 83 1d 3c 3d 79 12 65 16 ef 74 f7 63 ac bb d0 b7 af fb d3 9f d1 dd 91 23 a2 3e ab d6 7a 59 e8 02 b3 3f 84 d7 25 86 e3 ec 07 f6 06 53 8f 86 f6 bc 0f 90 39 45 0a 01 87 c6 b9 28 70 a6 5a 68 e6 11 bc 8b 0b 44 cc 57 12 20 93 4b 6f b2 aa 3f 00 94 10 df 62 25 f4 59 b3 1c b3 35 45 e4 45 00 eb 99 bf 70 Data Ascii: nS{/o]``2,MCk&:wyIC<vwCSN-NP6p,O bWd=BZ9L_Vo$fCga=BdQ#!pHS<y=QqN5<=yetc#>zY?%S9E(pZhDW Ko?b%Y5EEp
2024-04-16 15:05:49 UTC	1369	IN	Data Raw: 46 b0 de 8a 05 b3 d7 f1 8a 34 f4 46 a0 58 33 8d ea c7 e4 f1 41 b6 31 27 2e 20 bd 85 b8 62 75 fc 59 33 d5 e7 e2 0b c3 35 2f 39 c7 3f bd 80 bf 22 c4 a3 bb b3 da 10 1b 0f cb ea 95 42 25 08 79 fc 24 60 3f de e8 67 8b 22 cc ab 24 93 bb d7 93 8d 57 b5 eb fc 48 de 08 ed 8e 45 79 1c 84 17 37 7d a8 e6 33 d1 78 65 d8 8b b3 25 4a 5a 38 c4 7e a1 f4 b9 30 8d a2 da 9e f7 c7 02 38 c4 bb bc fd 2a 24 88 6b 9a 84 ca b8 ff 45 6c 82 c7 3b 8e 74 cd 5e a2 69 20 df f4 ec c2 45 ce ba a9 f9 2a ac 01 d2 28 b2 08 79 a7 76 fb 64 17 61 b2 f3 f4 54 ae 39 66 63 67 5e 69 0d 05 1e af bc ab da 2b 1d b1 11 8f 50 ac bd bd 02 3b 68 9b d6 80 ec d1 92 73 6f d4 15 e1 9c 19 3b 6f 1c de 7a 19 14 bc bf 43 7d 0d ac 2b b9 77 07 9e 49 bc de 9f 02 4d 57 d8 59 8d 7b a6 5a 6f 90 19 84 8e b5 e9 8f cc 7a Data Ascii: F4FX3A1'. buY35/9?"B%y$`?g"$WHEy7}3xe%JZ8~08$kEl;t^i E(yvdaT9fcg^i+P;hso;ozC}+wIMWY{Zoz
2024-04-16 15:05:49 UTC	1369	IN	Data Raw: ec 34 cd 8d 15 61 df 6b 1b 1e 97 30 fb 1b 05 89 5f c1 83 55 40 ff 39 47 d5 50 75 fb a2 06 43 58 60 6c 6b 05 da 59 70 fd e9 1b cf 1b 87 d5 22 ad 92 e2 47 66 b1 d5 54 d3 98 78 de 6c 2b ec de 97 70 5d 95 27 bb 98 9b 0e 06 66 4c 40 d4 21 01 ad 18 23 b9 88 c6 0c f5 09 0b 1f 5d b5 f8 8b 00 6b f9 30 8c 6d b8 65 81 f2 18 82 1d 35 3d 9b f6 1d 9f 3f 8c ef 16 3a 19 a4 27 76 c3 52 34 08 28 e7 63 6b 80 0d 45 12 cb 28 ea d9 b4 c7 67 46 91 5c 18 f1 8b 72 17 1c 40 6b 9d 7f 97 5e da d6 5a f8 46 aa 17 b8 33 7b f8 b1 52 60 a3 95 44 ea 33 de 59 15 99 76 17 09 40 a6 cf 4c ee 75 66 c7 86 a3 06 67 4b 24 9c 40 7b 4b e8 65 44 6b 22 3e 06 4e 4d 20 67 bf 95 5c 32 bc ac 3c cc 02 1a e5 1d 34 40 54 12 3e e3 b9 78 34 f5 ff 60 1f fa f3 a8 9d 5a 4f 00 38 1d 54 c3 de 9b fa b4 0b e9 d7 d8 Data Ascii: 4ak0_U@9GPuCX`lkYp"GfTxl+p]'fL@!#]k0me5=?:'vR4(ckE(gF\r@k^ZF3{R`D3Yv@LufgK$@{KeDk">NM g\2<4@T>x4`ZO8T
2024-04-16 15:05:50 UTC	1369	IN	Data Raw: 7a 8c 7c 89 5a 0d dd 8e d3 c8 3a 09 16 6b 73 78 4a cb 25 aa 44 23 10 ab 4b 7e 1c 87 7e dc 67 f3 b3 38 62 d9 92 8e a4 f4 47 80 1e 58 de b1 b6 27 59 0e bb 86 67 05 6c a4 a9 49 b3 be 74 f8 8f 8a 6b 90 ef cc 09 ff 84 1e db f6 43 81 87 fb 97 a4 14 3d 13 60 43 23 f3 9b 31 39 0b 06 38 73 4a 9e 8d 13 cf ea 1a 76 56 85 4d 6a eb 50 1f e6 52 4f d1 a7 6b 5c 50 3e 0e 5c 57 27 0a 81 4d 81 64 71 f1 66 ce 55 9d 18 bf 71 b1 2b 4a 56 7a 02 16 9c ea 6c fa cf b4 3f 32 f0 fb ba a8 77 b8 48 fa 0d ce 09 9d 5a b0 1b b2 b4 0b 69 60 a7 ad 3b 22 3e 12 3a 46 09 bc e2 8a 52 f7 03 e3 3a 81 4c 65 19 05 ad 03 1a f4 68 50 9f 13 52 3b f7 b6 8f 0c 05 d2 1b 5f a1 b1 b4 de cf 96 8f 0f 67 c6 0a ce fd 4e fe 1d 6e d6 42 8a e0 b6 46 57 f9 b7 24 24 05 7a c3 d2 ca 32 8f 32 6c 70 b1 44 a7 30 0c 00 Data Ascii: z\|Z:ksxJ%D#K~~g8bGX'YglItkC=`C#198sJvVMjPROk\P>\W'MdqfUq+JVzl?2wHZi`;">:FR:LehPR;_gNnBFW$$z22lpD0
2024-04-16 15:05:50 UTC	1369	IN	Data Raw: 55 13 55 9a 63 8a 38 75 7e 5d c7 6c ca a2 f8 aa b6 f8 e6 e8 40 71 38 8e 2f a2 f9 29 a5 51 cc 4a 60 fa 0e 15 4a aa af 94 65 f8 22 e1 6d b4 a9 36 25 8d 09 9b 56 08 ba 89 f9 15 36 86 5c 44 e8 ab 43 ed e7 f9 e6 fe 50 0b 1e d8 dd 7b b3 f1 e1 89 75 84 ed 4f 27 e0 9d db da 3a a4 6d c8 15 91 3c 9b 24 32 b1 59 98 04 40 21 4e 2a b5 a2 dd d9 b2 e6 56 5c ca cb 9d 7d f4 82 8a b2 60 37 18 63 9d 76 b4 7c 47 e8 20 22 e7 11 ef 1c 28 d6 b1 dd 5b df 23 c3 fe 41 b7 b2 b5 e5 4e 7c 64 43 e5 72 89 8b c1 23 e5 b4 e0 74 73 1c 6c 40 d2 29 51 ef b1 f0 77 37 c0 3f 44 18 08 eb 2f 40 0d b7 6f 31 47 d8 5d a1 e0 c3 c5 94 c0 f7 b1 50 df 26 8c 4b 37 b4 2a 38 00 07 c7 42 20 0b 95 ea b7 89 c0 30 81 0b 88 cd 8a 14 e4 a8 9a e5 5e a4 04 e6 05 cb 0a 13 43 56 08 d1 c9 1d 5d 72 c4 9e 09 45 c7 e4 Data Ascii: UUc8u~]l@q8/)QJ`Je"m6%V6\DCP{uO':m<$2Y@!NV\}`7cv\|G "([#AN\|dCr#tsl@)Qw7?D/@o1G]P&K78B 0^CV]rE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.11	49817	108.177.122.190	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:43 UTC	770	OUT	GET /s/player/7ebf4817/www-widgetapi.vflset/www-widgetapi.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
2024-04-16 15:05:43 UTC	688	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 221027 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 16 Apr 2024 05:35:47 GMT Expires: Wed, 16 Apr 2025 05:35:47 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 10 Apr 2024 04:18:25 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 34196 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 15:05:43 UTC	567	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 72 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 0a 76 61 72 20 62 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 Data Ascii: (function(){'use strict';var r;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype
2024-04-16 15:05:43 UTC	1255	IN	Data Raw: 3b 66 75 6e 63 74 69 6f 6e 20 76 28 61 2c 62 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 63 3d 64 61 3b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 2d 31 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 28 65 20 69 6e 20 63 29 29 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 6e 75 6c 6c 21 3d 62 26 26 62 61 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 0a 76 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 66 29 7b 69 66 28 74 68 69 73 Data Ascii: ;function v(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}}v("Symbol",function(a){function b(f){if(this
2024-04-16 15:05:43 UTC	1255	IN	Data Raw: 20 41 72 72 61 79 4c 69 6b 65 22 29 3b 7d 0a 66 75 6e 63 74 69 6f 6e 20 78 28 61 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 29 7b 61 3d 77 28 61 29 3b 66 6f 72 28 76 61 72 20 62 2c 63 3d 5b 5d 3b 21 28 62 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 63 2e 70 75 73 68 28 62 2e 76 61 6c 75 65 29 3b 61 3d 63 7d 72 65 74 75 72 6e 20 61 7d 0a 66 75 6e 63 74 69 6f 6e 20 66 61 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 62 29 7d 0a 76 61 72 20 6a 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3a 66 75 6e 63 74 69 6f Data Ascii: ArrayLike");}function x(a){if(!(a instanceof Array)){a=w(a);for(var b,c=[];!(b=a.next()).done;)c.push(b.value);a=c}return a}function fa(a,b){return Object.prototype.hasOwnProperty.call(a,b)}var ja="function"==typeof Object.assign?Object.assign:functio
2024-04-16 15:05:43 UTC	1255	IN	Data Raw: 4b 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 68 3d 61 7d 3b 0a 66 75 6e 63 74 69 6f 6e 20 75 61 28 61 2c 62 29 7b 61 2e 69 3d 7b 6a 63 3a 62 2c 75 63 3a 21 30 7d 3b 61 2e 67 3d 61 2e 6f 7c 7c 61 2e 75 7d 0a 73 61 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 74 75 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 69 3d 7b 72 65 74 75 72 6e 3a 61 7d 3b 74 68 69 73 2e 67 3d 74 68 69 73 2e 75 7d 3b 0a 66 75 6e 63 74 69 6f 6e 20 41 28 61 2c 62 2c 63 29 7b 61 2e 67 3d 63 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 62 7d 7d 0a 73 61 2e 70 72 6f 74 6f 74 79 70 65 2e 42 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 67 3d 61 7d 3b 0a 66 75 6e 63 74 69 6f 6e 20 76 61 28 61 2c 62 2c 63 29 7b 61 2e 6f 3d 62 3b 76 6f 69 64 20 30 21 3d 63 26 26 28 Data Ascii: K=function(a){this.h=a};function ua(a,b){a.i={jc:b,uc:!0};a.g=a.o\|\|a.u}sa.prototype.return=function(a){this.i={return:a};this.g=this.u};function A(a,b,c){a.g=c;return{value:b}}sa.prototype.B=function(a){this.g=a};function va(a,b,c){a.o=b;void 0!=c&&(
2024-04-16 15:05:43 UTC	1255	IN	Data Raw: 68 72 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 74 61 28 61 2e 67 29 3b 61 2e 67 2e 6c 3f 62 3d 41 61 28 61 2c 61 2e 67 2e 6c 5b 22 74 68 72 6f 77 22 5d 2c 62 2c 61 2e 67 2e 4b 29 3a 28 75 61 28 61 2e 67 2c 62 29 2c 62 3d 42 61 28 61 29 29 3b 72 65 74 75 72 6e 20 62 7d 3b 0a 74 68 69 73 2e 72 65 74 75 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 7a 61 28 61 2c 62 29 7d 3b 0a 74 68 69 73 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 45 61 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 64 29 7b 72 65 74 75 72 6e 20 61 2e 6e 65 78 74 28 64 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 63 28 64 29 7b 72 65 74 75 72 6e 20 61 2e 74 68 72 6f Data Ascii: hrow=function(b){ta(a.g);a.g.l?b=Aa(a,a.g.l["throw"],b,a.g.K):(ua(a.g,b),b=Ba(a));return b};this.return=function(b){return za(a,b)};this[Symbol.iterator]=function(){return this}}function Ea(a){function b(d){return a.next(d)}function c(d){return a.thro
2024-04-16 15:05:43 UTC	1255	IN	Data Raw: 69 73 2e 69 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 67 3b 7d 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 67 28 6b 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 6c 7c 7c 28 6c 3d 21 30 2c 6b 2e 63 61 6c 6c 28 68 2c 6d 29 29 7d 7d 0a 76 61 72 20 68 3d 74 68 69 73 2c 6c 3d 21 31 3b 72 65 74 75 72 6e 7b 72 65 73 6f 6c 76 65 3a 67 28 74 68 69 73 2e 62 62 29 2c 72 65 6a 65 63 74 3a 67 28 74 68 69 73 2e 6f 29 7d 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 62 62 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 69 66 28 67 3d 3d 3d 74 68 69 73 29 74 68 69 73 2e 6f 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 20 50 72 6f 6d 69 73 65 20 63 61 6e 6e 6f 74 20 72 65 73 6f Data Ascii: is.i(function(){throw g;})};b.prototype.l=function(){function g(k){return function(m){l\|\|(l=!0,k.call(h,m))}}var h=this,l=!1;return{resolve:g(this.bb),reject:g(this.o)}};b.prototype.bb=function(g){if(g===this)this.o(new TypeError("A Promise cannot reso
2024-04-16 15:05:43 UTC	1255	IN	Data Raw: 74 6f 6d 45 76 65 6e 74 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 21 31 2c 21 30 2c 67 29 29 3b 67 2e 70 72 6f 6d 69 73 65 3d 74 68 69 73 3b 67 2e 72 65 61 73 6f 6e 3d 74 68 69 73 2e 69 3b 72 65 74 75 72 6e 20 6c 28 67 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 4f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6e 75 6c 6c 21 3d 74 68 69 73 2e 68 29 7b 66 6f 72 28 76 61 72 20 67 3d 30 3b 67 3c 74 68 69 73 2e 68 2e 6c 65 6e 67 74 68 3b 2b 2b 67 29 66 2e 68 28 74 68 69 73 2e 68 5b 67 5d 29 3b 74 68 69 73 2e 68 3d 6e 75 6c 6c 7d 7d 3b 0a 76 61 72 20 66 3d 6e 65 77 20 63 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 65 62 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 74 68 69 73 2e 6c 28 29 3b 67 2e 76 62 28 68 2e 72 65 73 6f 6c Data Ascii: tomEvent("unhandledrejection",!1,!0,g));g.promise=this;g.reason=this.i;return l(g)};b.prototype.O=function(){if(null!=this.h){for(var g=0;g<this.h.length;++g)f.h(this.h[g]);this.h=null}};var f=new c;b.prototype.eb=function(g){var h=this.l();g.vb(h.resol
2024-04-16 15:05:43 UTC	1255	IN	Data Raw: 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7c 7c 70 61 7d 29 3b 0a 76 28 22 57 65 61 6b 4d 61 70 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 6c 29 7b 74 68 69 73 2e 67 3d 28 68 2b 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2b 31 29 2e 74 6f 53 74 72 69 6e 67 28 29 3b 69 66 28 6c 29 7b 6c 3d 77 28 6c 29 3b 66 6f 72 28 76 61 72 20 6b 3b 21 28 6b 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6b 3d 6b 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6b 5b 30 5d 2c 6b 5b 31 5d 29 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 7d 0a 66 75 6e 63 74 69 6f 6e 20 64 28 6c 29 7b 76 61 72 20 6b 3d 74 79 70 65 6f 66 20 6c 3b 72 65 74 75 72 6e 22 6f 62 Data Ascii: bject.setPrototypeOf",function(a){return a\|\|pa});v("WeakMap",function(a){function b(l){this.g=(h+=Math.random()+1).toString();if(l){l=w(l);for(var k;!(k=l.next()).done;)k=k.value,this.set(k[0],k[1])}}function c(){}function d(l){var k=typeof l;return"ob
2024-04-16 15:05:43 UTC	1255	IN	Data Raw: 76 69 6f 75 73 3d 68 2e 6e 65 78 74 3d 68 2e 68 65 61 64 3d 68 7d 0a 66 75 6e 63 74 69 6f 6e 20 63 28 68 2c 6c 29 7b 76 61 72 20 6b 3d 68 5b 31 5d 3b 72 65 74 75 72 6e 20 65 61 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6b 29 7b 66 6f 72 28 3b 6b 2e 68 65 61 64 21 3d 68 5b 31 5d 3b 29 6b 3d 6b 2e 70 72 65 76 69 6f 75 73 3b 66 6f 72 28 3b 6b 2e 6e 65 78 74 21 3d 6b 2e 68 65 61 64 3b 29 72 65 74 75 72 6e 20 6b 3d 6b 2e 6e 65 78 74 2c 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 6c 28 6b 29 7d 3b 6b 3d 6e 75 6c 6c 7d 72 65 74 75 72 6e 7b 64 6f 6e 65 3a 21 30 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 7d 7d 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 64 28 68 2c 6c 29 7b 76 61 72 20 6b 3d 6c 26 26 74 79 70 65 6f 66 20 6c 3b 22 6f 62 6a 65 63 74 22 3d 3d 6b 7c 7c 22 66 Data Ascii: vious=h.next=h.head=h}function c(h,l){var k=h[1];return ea(function(){if(k){for(;k.head!=h[1];)k=k.previous;for(;k.next!=k.head;)return k=k.next,{done:!1,value:l(k)};k=null}return{done:!0,value:void 0}})}function d(h,l){var k=l&&typeof l;"object"==k\|\|"f
2024-04-16 15:05:43 UTC	1255	IN	Data Raw: 68 2c 76 61 6c 75 65 3a 6c 7d 2c 6b 2e 6c 69 73 74 2e 70 75 73 68 28 6b 2e 65 6e 74 72 79 29 2c 74 68 69 73 5b 31 5d 2e 70 72 65 76 69 6f 75 73 2e 6e 65 78 74 3d 6b 2e 65 6e 74 72 79 2c 74 68 69 73 5b 31 5d 2e 70 72 65 76 69 6f 75 73 3d 6b 2e 65 6e 74 72 79 2c 74 68 69 73 2e 73 69 7a 65 2b 2b 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 0a 65 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c 65 74 65 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 68 3d 64 28 74 68 69 73 2c 68 29 3b 72 65 74 75 72 6e 20 68 2e 65 6e 74 72 79 26 26 68 2e 6c 69 73 74 3f 28 68 2e 6c 69 73 74 2e 73 70 6c 69 63 65 28 68 2e 69 6e 64 65 78 2c 31 29 2c 68 2e 6c 69 73 74 2e 6c 65 6e 67 74 68 7c 7c 64 65 6c 65 74 65 20 74 68 69 73 5b 30 5d 5b 68 2e 69 64 5d 2c 68 2e 65 6e 74 72 79 2e 70 72 65 76 69 Data Ascii: h,value:l},k.list.push(k.entry),this[1].previous.next=k.entry,this[1].previous=k.entry,this.size++);return this};e.prototype.delete=function(h){h=d(this,h);return h.entry&&h.list?(h.list.splice(h.index,1),h.list.length\|\|delete this[0][h.id],h.entry.previ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.11	49816	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:43 UTC	617	OUT	GET /wp-content/uploads/2018/10/3-1.jpg HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:49 UTC	392	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:49 GMT Content-Type: image/webp Content-Length: 60346 Connection: close Cache-Control: public, max-age=31536000 X-Hcdn-Image-Optimizer: f:webp q:85 w:1600 alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: fdbed4c790090bea3bde2d5b9feec67c-asc-edge4 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 5.294 Accept-Ranges: bytes
2024-04-16 15:05:49 UTC	977	IN	Data Raw: 52 49 46 46 b2 eb 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 57 02 00 8f 01 00 56 50 38 20 0e eb 00 00 50 56 02 9d 01 2a 58 02 90 01 3e 51 20 8d 44 23 a2 21 22 2d 98 eb 50 70 0a 09 4d 88 77 bc e1 ed 2f 42 2f c3 af f2 ad 8a 83 d7 94 70 54 26 81 30 68 06 6c bb 95 f1 7f ea f9 de f2 bf 8e 3f 42 d4 1b 05 fe cd ff 1f 98 e7 b9 7f 4d ff 93 ee bb e6 cf fc 8f fd 7e ce ff ac ff b8 ff cd ee 1b fb 27 ea 93 ff 1f ee 67 be 8f f1 7f f8 7d 4c 7f 5b ff 5f fb 37 ef 45 ff 67 d6 6f f9 4f 50 3f ed 9f f1 bd 3a 3d 93 ff 77 7d 84 ff 64 ff fa fb 4f ff f3 f6 6f ff 07 ff 9f f7 67 db 17 ff ff b0 07 ff 7f 6c ef e0 1f fa ba 81 fb e5 de d3 ed d7 82 be 2c 7d 8f fb f7 fa 2f f9 5f e2 7d c0 f2 5f d8 4f fd 9e 82 7f 38 fc 21 fb af f0 9f 93 3f 35 3f 90 ff ad fe 6b c6 1f cf bf 79 ff Data Ascii: RIFFWEBPVP8XWVP8 PV*X>Q D#!"-PpMw/B/pT&0hl?BM~'g}L[_7EgoOP?:=w}dOogl,}/_}_O8!?5?ky
2024-04-16 15:05:49 UTC	1369	IN	Data Raw: 8c 66 31 ae 47 07 47 d1 bd 1a 69 8a 61 22 e4 e4 84 b9 78 b9 c4 23 81 4f a5 b3 4f 4b 4c 80 91 ce 38 c2 bf 84 7c 00 3e 09 3d 12 49 5f fd 82 f3 14 fc aa 04 89 05 b3 87 2b 1b 9d 91 13 e8 d7 f0 0b 5b 11 65 e8 ef 49 b8 0f af 47 9a 35 17 99 c8 f9 4a 26 28 6b a4 76 c0 9b 42 df ff f3 85 f4 01 bc 04 7b 25 25 a2 da ca 8b ae a8 c7 eb 43 9f 84 1a ab a0 fa 06 d1 27 6c 20 b9 95 75 af 48 41 0e f6 49 c5 84 1f 9f 47 1c 28 4a 83 9d a6 3e 65 61 2e 64 d2 d4 fe bc 16 2d c2 43 f7 8e ca c8 c6 c6 d8 d0 39 1f 4a 14 da 0d 32 20 0e 3d 9e cd 9f a3 da bf ae 95 54 52 e9 39 a0 d1 ae 1d ae 6e 7f c6 bf bd af d4 7e 15 6f a3 dd f8 30 0b cc 65 de 00 ae 05 d2 f1 49 a1 2a bb 41 e6 c1 d0 ad 92 71 c7 93 9c 87 c5 43 02 12 f0 b2 65 91 ed ad 66 47 48 7b 67 b1 86 4a f4 48 63 35 5b 03 04 48 d8 10 54 Data Ascii: f1GGia"x#OOKL8\|>=I_+[eIG5J&(kvB{%%C'l uHAIG(J>ea.d-C9J2 =TR9n~o0eI*AqCefGH{gJHc5[HT
2024-04-16 15:05:49 UTC	1369	IN	Data Raw: 12 6b bc ec 49 20 d6 06 73 13 c8 a8 8a 78 5e 4f 4a 47 37 14 cb 53 45 83 99 e4 11 d0 54 2f fa f4 bb 00 1e 96 ef 28 f7 76 33 71 6f 66 55 4d 1b 80 94 f8 08 2f a0 a8 e9 79 a2 69 e6 d7 dc 77 b8 d0 5a 1a 16 bd 26 d0 77 3f dd c4 f1 36 16 77 b8 f3 79 7d 0c db 6e 87 00 f2 5c 81 84 40 8d 33 af 6a 18 e3 de ec 58 ec 7a a1 7c fd 0c 22 f9 64 a1 59 2c f7 3f 74 c5 9a d2 cb e1 30 e5 26 47 ec 19 b4 60 9e 13 9e 1e d2 8b de 66 55 27 42 58 bc 75 33 de d8 45 e5 b0 4c fc 4b 30 25 c9 42 93 d0 fe d3 0f 66 6b e2 4c 47 f6 e4 1e b1 23 2c 0b e9 4d 6c a7 be e1 8e 74 84 41 d7 04 9e 8c 8f 2b 09 4e af d9 4e ea f3 0b 9c 6d 14 bd 93 93 20 ae 53 81 02 23 f2 05 06 a0 68 74 91 97 02 bc ac 7c a8 8c 3f 36 48 8a 3d c5 f5 79 41 25 e0 22 94 35 54 83 81 b9 ba 3e 91 f0 47 a4 22 23 34 cf 12 73 c5 8c Data Ascii: kI sx^OJG7SET/(v3qofUM/yiwZ&w?6wy}n\@3jXz\|"dY,?t0&G`fU'BXu3ELK0%BfkLG#,MltA+NNm S#ht\|?6H=yA%"5T>G"#4s
2024-04-16 15:05:49 UTC	1369	IN	Data Raw: 2f e8 ed 60 b8 e3 cc 92 8d 83 c7 29 76 ce ee b8 9d b4 f9 80 fd 57 64 db 2d 8f 05 d4 11 88 e1 1c c3 c2 aa ce 2b 1f 2e 67 ac bd 20 61 03 b8 67 74 3f 56 00 da e3 43 46 bd d5 f2 fc 4e f4 86 b5 08 d8 0c 8e 1f f5 36 62 05 c8 f2 46 11 68 bf 7a 50 b3 2d 14 2f 69 7a f3 83 d8 9f 61 07 49 c7 45 9f 70 de ff ef c8 25 d9 7e e7 f9 f5 56 63 d8 d8 5b 0b 28 ff 2f b5 6c 19 9b 6c 43 49 ac 22 0c 13 c8 58 9e 37 89 f6 65 cc 1b b6 b6 7f 43 86 fc 1a 8f ed 1d 6d e7 a6 f9 84 ea ab bb 6d ee fe 27 0a 1f 8c df 22 77 4a 6c 61 6a 08 cb ee 19 ae 31 c0 0f fd f7 b2 04 59 a1 e7 26 fb bf a9 a8 65 e6 94 40 92 7b 6d 91 7c cb db 3b 20 d9 5c 51 c4 68 a2 eb a2 5f 26 3a 44 2d db 40 24 c1 e9 d7 3c dd 9a 1e 0e f3 3e 70 a6 7a 57 5b 3b 38 cd 5a b0 f0 3b 3e c7 86 03 85 c7 88 89 cb cc 4f 10 7b 04 26 a6 Data Ascii: /`)vWd-+.g agt?VCFN6bFhzP-/izaIEp%~Vc[(/llCI"X7eCmm'"wJlaj1Y&e@{m\|; \Qh_&:D-@$<>pzW[;8Z;>O{&
2024-04-16 15:05:49 UTC	1369	IN	Data Raw: 65 f0 ee 54 fd 8c 65 62 cf 5d a8 db 2f 1d 66 4c 81 56 7a a1 c9 4b e5 48 43 75 87 bf 61 53 18 d0 37 57 ac 46 80 cc c9 11 84 3f 24 9e 95 94 86 2e 99 b4 e2 88 22 79 f9 61 d4 66 da 05 50 00 3e 3a 00 e3 7a 05 1c ad 21 14 23 91 3d 02 f0 ba a5 39 a7 29 67 b4 13 e0 91 08 f4 72 b1 23 0f 87 d4 08 ef ae 7b 4d bf d1 4f 87 f8 01 4a 70 37 81 95 b0 72 28 8b 83 dd 4f ff 2e 84 cd 5a 3a 82 88 af 3a 3f 5e 41 73 94 ec 5b 10 98 1e 62 93 f5 bd 05 cc a1 10 0f 14 1d ae 05 48 1b 88 13 77 e3 aa f5 e7 6a bf 17 85 b1 6d ab 0f b6 e1 2f 39 c7 bd 14 f3 c8 1b 5b 03 d9 a5 e6 2f dc 94 90 59 3f f6 fd 8b 23 3b 88 e7 ee 55 ae 57 d5 bd 65 0d 0e 6c b2 b8 76 88 7e 0e 10 cb ba bb 66 d4 02 92 b7 b1 af fc bb 30 00 e5 0f 57 cc 01 0e 58 33 70 40 01 3d f3 b1 4c 2a 21 7f b1 34 d8 64 35 88 50 35 4b 82 Data Ascii: eTeb]/fLVzKHCuaS7WF?$."yafP>:z!#=9)gr#{MOJp7r(O.Z::?^As[bHwjm/9[/Y?#;UWelv~f0WX3p@=L*!4d5P5K
2024-04-16 15:05:49 UTC	1369	IN	Data Raw: 70 e9 de aa e5 85 95 f0 62 e1 9a 49 8b 0d a9 c8 1f 60 76 19 1f a6 81 68 2c d8 43 26 97 56 d0 ab c5 41 09 88 bc 17 5d a2 8d ae b1 50 3a e8 52 c1 fb 6c 05 6f f5 6b 9f 4f 24 2e 80 95 4a d5 5a 0a 6e 3c 13 02 5d 63 80 d9 8b 0f 37 f1 a0 b5 e3 11 02 26 e7 01 ec 9e 51 53 e8 d4 23 27 76 1b b3 d8 1a f5 99 a0 68 a7 f8 3a a5 2f 2f f2 28 86 09 43 51 c5 62 fc 9c 69 7d de 31 ed 73 94 da f7 2e 2a 49 72 a4 e4 8a b8 44 01 81 27 91 c1 20 ba 31 d4 5e b5 97 72 5f f0 80 e6 00 4f ed c6 9f fa fa 7a 88 69 1a 2f 43 35 cf 3d f7 5a ba b2 90 55 b5 5c d5 a0 1d ed 0c 38 e3 2c 0d b2 7b 1e 5d 15 d5 3e ca fb c6 2a 5a 16 bd 8e 82 e1 12 58 a2 3c 88 f1 3d d4 50 c0 fa 61 b3 5c 4e 7e 20 9f f7 a4 88 73 fc 61 32 09 67 d0 53 ad 2e 29 78 b3 72 11 71 03 fc c2 63 50 a5 17 8f 6e d1 12 cb 51 c1 c9 02 Data Ascii: pbI`vh,C&VA]P:RlokO$.JZn<]c7&QS#'vh://(CQbi}1s.IrD' 1^r_Ozi/C5=ZU\8,{]>ZX<=Pa\N~ sa2gS.)xrqcPnQ
2024-04-16 15:05:49 UTC	1369	IN	Data Raw: 42 d0 d1 8d 62 bd d3 b6 87 02 cc 83 6b 98 c0 5e 2f e4 35 7d 4f 6b 92 4e d1 8f d9 b5 e3 77 76 90 4b 92 39 f7 6a 93 44 e2 42 66 07 81 12 5d 34 bb 35 2b 4d e1 c0 49 31 2f d1 f3 41 0f bf 27 8e 10 0c b6 56 3f a0 36 88 19 7b cd fc 7d 68 67 12 ee f0 05 dc ca 31 50 8a 5c 36 24 34 4a 36 1a 53 2b c1 36 f4 23 0f 8a 00 0d c3 29 9c 4f 7d 05 27 c7 4f 39 38 9f 1d cb 84 53 56 72 a9 47 66 f9 57 e4 0d 16 a2 2f be c1 47 53 5e cd 05 e5 b9 0c c5 6e 21 e7 71 98 4d ef 59 a8 35 26 af 1d 56 d0 d8 57 fc b5 a4 d8 bc b4 80 28 47 05 68 d9 cf 64 75 0b 74 84 a4 27 bc 34 b5 dc f5 09 d9 c6 c0 61 e7 6c c3 59 38 c9 54 d8 3b 6e 72 d6 c2 12 04 d1 79 d0 ad b9 c6 99 36 b4 47 1f f6 af 5a d7 c1 1f eb 59 22 54 57 16 40 0d 60 fe 30 9a 50 6b cd eb b6 1b ba 49 27 0c 72 45 68 98 f0 49 a3 57 b4 78 b9 Data Ascii: Bbk^/5}OkNwvK9jDBf]45+MI1/A'V?6{}hg1P\6$4J6S+6#)O}'O98SVrGfW/GS^n!qMY5&VW(Ghdut'4alY8T;nry6GZY"TW@`0PkI'rEhIWx
2024-04-16 15:05:49 UTC	1369	IN	Data Raw: 7f 41 87 90 a9 d9 fa 4a 5c b2 a0 63 e2 28 69 6f 9d 91 c1 d5 ce 33 7e 1f 62 0b a0 51 31 36 21 73 3e 6e dd cb bd 86 de 3a f4 86 08 73 63 b0 f8 cf 08 9c 1e ab 1e 0c 85 4b 41 d7 43 e7 5a 3b c6 80 e7 fb e6 e3 ee 8e 37 45 e4 46 b4 8c d2 7b 5f b8 d7 a3 14 0b 17 dd 00 1b 1e ae 55 11 0a 71 9c 2f 58 7e 9f 4e 1f 9c bb 16 5a ce 9e 56 6e d7 0b 29 31 3a 6e a3 73 49 0f c5 cf f7 7a 22 cc fa f6 5d 04 54 8a 10 42 f8 7e 0a 7c 85 16 57 b5 e0 e5 30 ef 7d aa 58 4e 5e 5c 2e df 57 98 a1 9f 5d 64 3e 8d 6e 26 d2 64 f2 01 07 b7 65 69 c7 ab e7 f4 79 be 36 b3 bc 23 bf 9c cc fb be 9b 0a 20 89 60 bf 63 35 1b 92 f4 09 70 44 60 73 6d 20 39 6c 50 13 05 ba f3 aa 21 b8 50 c3 2c 93 16 a1 90 20 e3 f5 80 34 49 0c e3 5f de b0 fc 39 39 cb 82 60 74 bb 1d 23 cb bc 4c 3e 3e 69 ae 2a da 9a 3a b3 dd Data Ascii: AJ\c(io3~bQ16!s>n:scKACZ;7EF{_Uq/X~NZVn)1:nsIz"]TB~\|W0}XN^\.W]d>n&deiy6# `c5pD`sm 9lP!P, 4I_99`t#L>>i*:
2024-04-16 15:05:49 UTC	1369	IN	Data Raw: ad e2 b9 2c 8f da 56 b7 51 cb 05 66 fe 08 53 ab 24 3a 2d 90 1d bc a7 66 67 17 ae 7e 02 2c 24 d7 76 12 e0 45 0e 27 0b bb ab c0 79 9e 20 fd 02 34 44 1e fe 4a 37 e2 a7 63 c3 0d fa 08 c8 a1 7f b8 d4 72 4f b6 9d b9 f6 02 c1 c2 c2 e1 44 ca ed d4 c4 db 21 85 98 88 e3 6f 57 bf e4 fb 90 30 c0 c1 ee 1c 2e 6e 62 39 47 f9 3c 19 23 9b 29 b1 95 ae 8e 4d ba a1 55 14 9a a8 88 6a d3 29 2f 83 c8 6e d5 90 18 5c 92 3f c1 54 73 af 51 d6 37 aa 6d 88 ad 79 c2 b7 62 d6 1a 6d 65 0c 78 b5 6d b3 77 d4 50 da 2f 8b d1 de 5d d3 b4 4b 85 f7 ff 9d 1e 71 ab b2 68 5c 4c 28 9a 69 85 23 76 98 72 ca 1c 79 f4 2b 6c 41 ba a7 0d df b2 c3 dd 8a bb 20 77 93 60 af 67 13 8b bf a2 30 4e 58 cb 21 ae 26 e3 85 03 fc cf 70 90 72 d2 42 22 72 fa df 73 20 73 bc a9 96 7c 43 21 68 d8 20 2e 4b d1 cd fc 35 a6 Data Ascii: ,VQfS$:-fg~,$vE'y 4DJ7crOD!oW0.nb9G<#)MUj)/n\?TsQ7mybmexmwP/]Kqh\L(i#vry+lA w`g0NX!&prB"rs s\|C!h .K5
2024-04-16 15:05:49 UTC	1369	IN	Data Raw: 1d ed 75 f5 db ac e7 d2 19 46 64 ba 8c 92 ee 62 de f4 6d 59 4e 00 3f 6d 39 f1 e6 46 a3 c1 ac ca c7 97 b6 d9 f9 a8 fc c2 c8 c4 a2 e5 af 6f 0f 4d 28 c4 0b be bb f6 a5 03 f1 49 c4 0c 03 af b6 7e 4a 73 64 38 76 f6 9b fe 2a 60 05 b5 78 43 6d 42 49 6e 23 eb 12 04 e5 55 8b 35 12 c4 96 0b 80 c0 7d ab 02 63 f9 a4 ba b0 61 62 8b c9 62 c0 2f 2e 7b 11 58 95 85 12 a3 17 f6 86 0e fc 45 cd cc fa ad 1b 3f dc 4a e8 51 fe 45 6d c3 c7 e6 47 03 18 f3 0a 58 52 b9 cf a1 4a fe 26 15 18 a5 52 8f 25 34 df 96 98 54 75 ad c4 82 a4 82 de 84 42 41 4a 19 1a 79 5c f2 50 e7 7c 82 41 73 42 53 2d 65 7a b6 72 75 57 50 f3 10 e9 10 4f e5 78 43 a2 df a5 e3 97 bf b7 c3 67 e0 cf 97 cd ad 66 46 df e1 0f fe f9 88 9f 27 3a 0a 27 21 06 27 8b 3b 89 a7 e0 ae 46 ba e5 24 ed 83 ad c7 71 5d 21 45 41 aa Data Ascii: uFdbmYN?m9FoM(I~Jsd8v*`xCmBIn#U5}cabb/.{XE?JQEmGXRJ&R%4TuBAJy\P\|AsBS-ezruWPOxCgfF':'!';F$q]!EA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.11	49815	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:43 UTC	615	OUT	GET /wp-content/uploads/2018/10/5.jpg HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:46 UTC	392	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:46 GMT Content-Type: image/webp Content-Length: 73576 Connection: close Cache-Control: public, max-age=31536000 X-Hcdn-Image-Optimizer: f:webp q:85 w:1600 alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 113cfac67646951fb6f9e3b995b13306-asc-edge5 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 2.560 Accept-Ranges: bytes
2024-04-16 15:05:46 UTC	977	IN	Data Raw: 52 49 46 46 60 1f 01 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 57 02 00 8f 01 00 56 50 38 20 bc 1e 01 00 b0 93 02 9d 01 2a 58 02 90 01 3e 4d 1e 8b 44 22 a1 a1 22 30 bb 8b a0 50 09 89 66 6d 7e c8 0d 7e 53 d3 80 8b 12 6b d3 fb b1 6c 44 b9 7e 13 36 81 fc 0f 20 07 73 f0 05 c8 fa 34 64 3f 75 ff 67 fc af a3 6f 22 f7 31 f0 cf c2 7f 9a ff bb f1 7d fc ce d1 3e 1f fe 17 97 f7 b4 7f 4b e7 67 fd df ff 2f f5 fe e8 3f ad ff a1 ff dd f9 ff f4 0d fd 3b fb d7 ec 97 e3 37 d2 8f fc 7f bb de f3 bf c4 ff d6 fc a5 f8 19 fd 63 fd 47 ee 0f bc 97 fe 4f de 4f 75 5f e2 3d 40 7f b7 ff c3 ff ff ed 93 ea 73 fe 7b ff 67 ff ff 71 6f de 5f 59 1f fd df bb ff fb 3e 53 bf bc ff df fd d1 ff bf f2 35 fb 71 ff f7 fd c7 b8 07 ff 4f 6b cf e0 1f fd 38 68 bd 23 7c bf f9 9f f5 5f 93 7e 6c Data Ascii: RIFF`WEBPVP8XWVP8 *X>MD""0Pfm~~SklD~6 s4d?ugo"1}>Kg/?;7cGOOu_=@s{gqo_Y>S5qOk8h#\|_~l
2024-04-16 15:05:46 UTC	1369	IN	Data Raw: 6f c4 82 ea 21 d5 19 e1 93 01 13 93 22 b4 66 19 da 4d 9f 5f 3c 55 d6 a8 b7 94 62 10 4e 83 8d a8 0a a5 c0 fd 36 a9 70 f9 4d 34 74 15 e5 74 45 07 10 cd df 9c bc 64 5a f9 bb 04 a4 55 a3 f5 a8 bd e1 97 7a 0c a1 a8 94 1e 15 c5 71 a0 07 69 1f 2b 39 47 3d 18 cf 3f bb 0e 40 11 4c 0a c3 b7 72 fe 6f f2 c1 6f 3e e9 2c d9 6f 47 94 37 1f e2 7f ce 8a 3e fa 55 f2 93 61 96 3f 62 80 dc 58 e9 42 61 63 3c 6d 77 aa c2 b8 23 c5 0e cb 68 c2 59 e0 47 20 7c 5d 7d ec c8 f8 2e 55 41 21 85 bf fa 7a 0a 32 47 eb d4 02 b0 33 5b f8 33 de 9f 2c 45 f6 78 a3 90 88 75 58 b8 b8 0f 70 9a 54 52 05 26 5e 35 05 a3 ff fa c2 f8 1d c9 c8 a3 2c 68 f5 6e b6 73 47 36 b3 a3 5e 3d a4 2c 99 99 50 3c e7 fb 5b 0e 77 8b d9 65 96 11 df 9b ce 38 6c 95 c7 a9 38 47 71 37 11 b8 c1 e7 ab 1f c0 86 35 77 a0 7e 3c Data Ascii: o!"fM_<UbN6pM4ttEdZUzqi+9G=?@Lroo>,oG7>Ua?bXBac<mw#hYG \|]}.UA!z2G3[3,ExuXpTR&^5,hnsG6^=,P<[we8l8Gq75w~<
2024-04-16 15:05:46 UTC	1369	IN	Data Raw: 1d cf 2e 83 34 b4 ec 65 15 5b e1 22 9f 46 49 5d 5a f1 d9 38 98 88 5e 88 d0 05 4f 8c cc f5 01 53 27 ef 97 88 45 c5 28 20 b7 a1 24 76 e4 2c dc df f2 c4 b7 b7 cc ac 85 e2 1b c7 cf 71 d6 cf 0d ec 24 2f 80 fc 29 12 19 b8 f9 b9 b9 37 76 cf 33 a0 34 dc 9f dd 86 18 e9 6b fe 07 73 56 ed 95 e5 bd 1f 48 42 49 83 30 eb b1 c5 7f ec 4a cc 84 eb ef 3a 11 60 a0 c9 38 21 0e 1b 87 d2 d0 73 dd 0b a3 2e 02 2b f5 84 dd ee 06 e3 67 f0 80 c4 12 c0 27 9f 88 cc 04 9a 8e 25 c8 3e f2 3f 0e 63 c7 1e 1d 78 09 e0 4b c0 b1 e0 75 da 9a dc 82 6f 80 5b a9 50 4b 17 91 20 22 20 4f 5e 74 96 6a e1 7e c6 c3 89 23 87 51 63 e3 b0 30 65 a1 fc ce 06 06 60 34 fa 19 7b d3 4e 97 ba 81 e1 b2 ab 24 f7 42 a6 fb 82 f3 93 43 ea 1f 96 2c 48 a6 c4 63 60 ad f1 e5 dc 88 50 1e 0f 57 72 d2 2e 42 67 b2 ef 80 7d Data Ascii: .4e["FI]Z8^OS'E( $v,q$/)7v34ksVHBI0J:`8!s.+g'%>?cxKuo[PK " O^tj~#Qc0e`4{N$BC,Hc`PWr.Bg}
2024-04-16 15:05:46 UTC	1369	IN	Data Raw: c6 f0 de d9 0c 06 df 33 39 59 14 10 57 93 3a 1c af 70 af 03 eb 32 82 a6 f7 c4 74 19 b7 da 54 58 79 a4 23 7e a6 fd 2d 63 dc 98 4a be 1a 3c 80 d8 36 db bd 04 9a 2f 77 63 30 71 5e 52 4b 4f e7 d3 ce cb 3d 8e b1 26 0d ee b5 b1 c6 eb 13 3b 51 a8 00 aa f0 4d b2 bc 69 b6 c9 ea a1 36 ae f3 1f eb 71 83 27 12 34 46 c7 43 51 15 8e 42 f7 1f 3f 51 17 20 c2 b4 91 67 29 75 4c e3 72 57 4e 61 4d 66 74 be 81 7b bf ef f8 d8 0a 93 e6 d9 02 c9 5d c8 45 db 94 23 11 58 fe 40 75 f8 3b 96 5a 49 50 86 44 c7 f3 9b cd da 6a 89 6e 97 a3 32 61 32 bd 7e a8 91 31 70 e1 ed 7c 29 9b f1 93 fd 14 33 db b4 1b c8 95 29 8e 21 a4 86 da f0 c7 25 73 a4 be 40 02 39 c4 1b 42 53 9d 14 ce f6 66 f4 ab 2b 66 6c 22 e0 a8 10 a9 59 7a 12 f0 28 e7 f1 23 1a 45 2b 53 ca 5e 33 b0 b0 90 fd d4 90 5b d4 3b 62 91 Data Ascii: 39YW:p2tTXy#~-cJ<6/wc0q^RKO=&;QMi6q'4FCQB?Q g)uLrWNaMft{]E#X@u;ZIPDjn2a2~1p\|)3)!%s@9BSf+fl"Yz(#E+S^3[;b
2024-04-16 15:05:46 UTC	1369	IN	Data Raw: d2 c6 80 e6 89 4b c4 00 e3 fe 6d bb c0 95 15 95 db 7a 71 7a 99 e9 01 0b 2c 9e f1 95 ba 72 d3 01 cf e9 7a 5f 41 b4 1b 68 1f 04 ed 69 e6 49 93 d0 99 2e 1b 79 57 96 78 76 12 6e b9 4a 2a c1 17 56 40 20 fb 29 89 c2 1d 49 35 67 fa 8c 53 ff 49 c3 50 93 73 c5 23 b5 f2 e7 99 ba ac 42 51 56 4a b9 38 bf cc 56 ea 10 9f fb 33 e7 52 0e ac 28 1b 6e 8f 7a 78 8a c1 27 ae b5 45 5d 0b 07 24 6f e8 4a 53 10 88 42 de bf 9f fc 4d 62 fd 7a 7c 9a 23 e8 e8 d8 94 c2 4f 9f f4 31 2f 4d 15 4d 52 13 14 b3 04 f4 07 9d 9d 7a b5 0d 4b 10 36 1f e4 e4 09 50 c5 45 75 92 0c 56 e8 b6 fe 2d 42 d4 16 c5 34 86 e5 b6 b5 3b b0 c8 a8 a1 ce af 36 14 c0 b6 a5 bb 9a aa 7b ac cb 14 02 54 a2 4a c9 f9 80 ff 45 f1 90 61 77 01 03 ab ce 39 ad 0b 57 3f d8 37 45 40 00 fe ff 2c 21 cc 2f e7 fd 50 62 db c3 7e 65 Data Ascii: Kmzqz,rz_AhiI.yWxvnJ*V@ )I5gSIPs#BQVJ8V3R(nzx'E]$oJSBMbz\|#O1/MMRzK6PEuV-B4;6{TJEaw9W?7E@,!/Pb~e
2024-04-16 15:05:46 UTC	1369	IN	Data Raw: 4f c5 ca 4e 78 4a 23 b3 dc f9 78 45 d6 e6 a4 7d db 05 9b a0 4e c4 3f ca b5 b7 02 39 15 a9 00 5a 48 2b 5c 25 95 81 ca 73 a7 0e c1 e7 e0 d6 dc af ac 27 8f 31 74 9c 44 a0 66 7e a9 7d c0 04 81 0e 01 2c 80 a9 62 1c 49 f1 1a c6 ab 2a 7c 2a 7e 41 d1 05 57 1c 8a c2 36 a4 c7 77 f9 46 ea 93 90 38 60 22 06 4f b8 5d 24 00 bd e3 b8 4c 72 83 88 74 16 ba 44 43 59 0a 9d 25 4d f5 90 94 e5 7a dd 62 16 ef 58 be b9 60 dc 97 fa c2 83 4d 27 d6 f4 5a 56 6a 9c bb a1 04 11 56 a0 05 68 7c 63 c5 f4 76 06 92 49 6f 04 31 0c 20 ca 5d 8e b1 db 91 cb 55 5e ae 39 23 a6 bf 70 88 4c 9f 62 19 40 73 9e d3 5f ac 80 3f 2d 8a 76 26 04 57 0f 4d 80 9e 75 47 28 c3 f5 2c cc 86 7b 2f 30 77 1e 77 94 50 e6 6d 56 fc 98 26 29 41 a8 03 3d d9 35 e8 b7 79 e8 67 93 d5 ab ee 03 71 e7 18 c0 99 cd 34 68 08 b4 Data Ascii: ONxJ#xE}N?9ZH+\%s'1tDf~},bI\|~AW6wF8`"O]$LrtDCY%MzbX`M'ZVjVh\|cvIo1 ]U^9#pLb@s_?-v&WMuG(,{/0wwPmV&)A=5ygq4h
2024-04-16 15:05:46 UTC	1369	IN	Data Raw: f1 16 9e 61 2f 54 b6 4f e6 35 6d f0 e3 ff e5 7b 6d df 31 a7 0d e0 64 d5 f5 07 6f f4 5f bc 01 4d e9 e4 50 cb 73 03 e4 e4 d7 7a e4 2e 81 63 b2 59 4f c4 0a 18 82 47 7d cf f6 29 45 dd 87 f0 59 6a 04 53 98 c4 ed 90 01 d0 46 77 d9 6a db c9 78 07 28 f4 7e 7a 4d a4 f0 5e 88 81 e5 bd 09 5b 1c 31 74 f9 29 55 19 8a 1a 62 0b 57 84 06 b6 a4 ca b2 fe bd 98 14 64 b7 de 84 11 a5 17 b2 91 73 80 e8 f5 8f 0a 12 27 e5 e4 bb 70 63 23 1d 3f cd 47 09 47 1b 2f c8 58 67 3b d8 53 da 23 00 a9 ab 2a 03 f9 82 90 d6 aa 96 33 57 dd 8f 92 58 5b fd e7 b9 de 4d 4e e7 bf b8 9a 6d 60 6b 14 84 5e 1f ce ff 0e 8f f8 a9 74 07 7e e7 7c 58 c1 d2 29 f3 1b 20 7c e8 22 a1 41 b8 d0 0a 8e 06 1e 88 51 2c 5d 91 b0 17 0a cd a4 a9 4e 38 7c 40 69 03 ef 94 87 67 9d d9 6f 44 a1 8a ef d8 4d 68 8d 77 79 1c 8e Data Ascii: a/TO5m{m1do_MPsz.cYOG})EYjSFwjx(~zM^[1t)UbWds'pc#?GG/Xg;S#*3WX[MNm`k^t~\|X) \|"AQ,]N8\|@igoDMhwy
2024-04-16 15:05:46 UTC	1369	IN	Data Raw: 45 22 7b 1f 70 04 9f 5f ce fa 09 7f bf e7 b3 e9 a8 5f 67 71 cb 12 8b 41 e8 dc dc cc 4a b4 f1 ea e5 72 68 ff e3 8c 28 fc ba 9e 53 50 6c 84 d9 81 13 5c 32 2c d1 c2 79 3f 6c a0 32 e3 90 7b a4 64 a2 59 8f 01 a1 90 cf 2f 38 a5 7c ef db 51 7e f1 e1 c1 fe 99 c8 88 1b 80 1a 76 91 cc c6 89 ad 33 96 f7 3e da 7c ec ef 0e 67 a9 03 90 d1 3b e1 a1 85 97 2f df 58 9b 97 96 a1 24 45 ac 05 2a 86 68 b0 23 45 5d f0 95 eb f0 fc 70 ec 0e 90 02 75 85 0f 4a 02 15 17 37 10 71 12 f3 40 db 3c 20 2c 4c 55 44 2a b7 f7 6f 7d bf 5f 3a 6a 8b 61 aa 7a 26 74 bc 8c 13 93 10 76 f4 87 55 43 fc f9 81 99 ec a5 8d 33 4c 4d e0 e7 99 7e 39 95 22 de 9c bb 8b 52 0f 71 78 7e 07 f5 5c 07 23 c6 33 50 bd 50 6c fb 0e 24 21 bd 11 b9 ff 3b 0b af de 0e 2f 6f af 52 92 bc b3 61 93 7a c7 cb a6 cc 8e 4a 75 46 Data Ascii: E"{p__gqAJrh(SPl\2,y?l2{dY/8\|Q~v3>\|g;/X$Eh#E]puJ7q@< ,LUDo}_:jaz&tvUC3LM~9"Rqx~\#3PPl$!;/oRazJuF
2024-04-16 15:05:46 UTC	1369	IN	Data Raw: 3a 16 bd b7 f2 da d3 4b ff ec 24 2d e4 d1 54 34 57 4f 24 df 0e 32 67 f4 d3 56 30 48 d7 ef 29 61 85 c9 d3 a7 9c fb c2 c6 f0 3e 4e 85 99 23 56 ed aa 5c cc 73 c9 d0 bf a2 4e 56 d5 84 25 38 0f 1a 19 02 95 be 54 26 f0 6b 08 65 41 38 f4 05 34 3d 75 c6 fe 9b 8e ea 66 f3 78 f9 48 ab 44 34 97 c2 7a 68 18 5b b3 93 d0 5b 9e c8 ce 90 e5 cb 2e 46 84 dc 8e a0 9d 91 be fb eb b4 34 b1 98 af 1d cf d8 cb 59 b6 1e aa ca 49 89 f3 d7 b9 31 ef fc a0 a4 63 59 7c 39 32 86 34 e6 26 06 41 88 08 23 06 28 2f 05 fb fe a7 f3 d4 25 4e 04 90 fe b8 00 f6 6d 6b ec be fe ff dd 88 4f 84 88 1d 10 63 c1 d5 eb 92 a5 3d c8 38 8c f7 80 44 6e 34 ed 45 27 56 6d f9 d1 e5 d3 e6 82 2b 32 e0 80 d7 01 d4 5f 96 4b a3 23 ba 57 6d f1 8f b1 e5 f9 7b 72 c2 74 76 79 00 92 5a 06 d6 69 e9 29 a9 22 02 4e 89 a9 Data Ascii: :K$-T4WO$2gV0H)a>N#V\sNV%8T&keA84=ufxHD4zh[[.F4YI1cY\|924&A#(/%NmkOc=8Dn4E'Vm+2_K#Wm{rtvyZi)"N
2024-04-16 15:05:46 UTC	1369	IN	Data Raw: 75 a1 a2 b7 ec 43 cf f7 62 75 14 cc 7e 83 f6 11 d1 08 57 4b 14 78 68 e8 1c 18 f4 75 ef 25 c4 55 49 55 7a 0c 8e 85 ce ea 82 2c bf 3b f2 f1 d1 33 14 7e 10 0d 99 15 25 a3 d6 b5 b3 3b 75 19 e4 19 c3 88 ec b2 d3 16 ec cd a1 d4 54 29 05 c7 63 a0 f3 d8 54 78 46 c2 8c 77 72 6f 6e c6 b7 5c e4 c8 82 48 b6 97 00 ff 24 b3 1c 06 36 e8 17 60 5d a4 03 57 89 49 c1 c7 21 39 86 e5 7e 53 f8 b4 b5 30 38 1c ce ae f8 4e 29 dd f3 35 11 e1 4a 5a 7f 40 35 13 d6 08 11 63 46 ee 89 23 35 c8 1f c8 5f 22 de e2 52 3c 17 5d f1 04 3e c5 08 01 51 7d d3 67 93 9e dd b1 0a 6a c8 48 b4 be 80 3b 5b df ef af ab bc fb fd 8d 58 dc 7a 39 14 05 c1 60 dc a3 ba d1 e3 69 ae 15 b3 f8 eb 55 bc 9c 30 60 8f b1 25 c7 27 2d 36 62 c8 b4 5f d8 73 61 02 fe 17 6b 74 4a 41 97 d5 07 70 36 bf bf 27 69 63 1a d6 64 Data Ascii: uCbu~WKxhu%UIUz,;3~%;uT)cTxFwron\H$6`]WI!9~S08N)5JZ@5cF#5_"R<]>Q}gjH;[Xz9`iU0`%'-6b_saktJAp6'icd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.11	49819	154.62.106.12	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:43 UTC	380	OUT	GET /wp-content/uploads/2018/10/bhtan1.jpg HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:45 UTC	393	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:45 GMT Content-Type: image/jpeg Content-Length: 106419 Connection: close Cache-Control: public, max-age=31536000 X-Hcdn-Image-Optimizer: f:jpeg q:85 w:1600 alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 04eec3ad3931355601c5e5a430660d4b-bos-edge2 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 1.779 Accept-Ranges: bytes
2024-04-16 15:05:45 UTC	976	IN	Data Raw: ff d8 ff e1 00 80 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 05 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 4a 00 00 00 1b 01 05 00 01 00 00 00 52 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 69 87 04 00 01 00 00 00 5a 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 02 00 02 a0 04 00 01 00 00 00 58 02 00 00 03 a0 04 00 01 00 00 00 90 01 00 00 00 00 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e Data Ascii: ExifII*JR(iZHHXC!"$"$C
2024-04-16 15:05:45 UTC	1369	IN	Data Raw: a8 8a a2 52 cc 41 2c a0 c4 e4 e5 47 3b 70 c3 27 d3 1d f4 5c 20 81 cb 19 ae 75 84 b4 d1 5a 2e 35 25 4b 41 4d 40 99 ec 77 2f 2d 81 db ea 24 72 35 8c 4f 57 53 4d 77 a5 b6 7f 1b a5 a7 82 dd 6f 8e 21 2c a9 bc 2c 93 79 e6 8d 48 ec db 49 1b b9 c1 ce b4 af e2 b4 b7 eb 5d 6d 2d 25 64 53 33 35 14 31 fe a0 e0 11 82 08 3d fc aa 79 23 19 38 ce 71 ac ae c5 d3 3f c7 af 37 19 e5 a1 69 28 bc 60 91 b3 f9 46 e3 27 d2 0f a3 60 67 9f 41 ac a1 6b 12 67 aa 0c cd 73 a7 2f 14 17 99 aa a5 b6 49 35 34 76 ab 48 65 9c a1 02 46 99 0b 70 a7 82 85 41 04 1c 1c fe 01 d4 b6 c9 64 9f e1 06 c1 46 f4 92 d5 d1 8d 91 34 e0 e1 64 7d bb 77 83 ce 7c df 7c 1e 75 5f a0 69 a8 e8 ba 4a e4 94 b5 7b e1 6a 5d a9 3c 8d 9d c1 4b 45 90 7b 60 12 40 ce 7b e8 87 56 6c a6 e9 c3 4b 04 af 14 87 c3 da ea bc b6 3d Data Ascii: RA,G;p'\ uZ.5%KAM@w/-$r5OWSMwo!,,yHI]m-%dS351=y#8q?7i(`F'`gAkgs/I54vHeFpAdF4d}w\|\|u_iJ{j]<KE{`@{VlK=
2024-04-16 15:05:45 UTC	1369	IN	Data Raw: 0e 46 27 82 2d b0 73 2c 43 65 68 e9 99 e7 99 a5 cc 2a 56 18 93 cc 07 bf db 1d bb fb fa 68 0d a2 d0 23 92 7b 83 0d 8b 4f 56 aa 60 74 27 2c 46 70 4f 1c fa f7 e7 4e 94 02 e5 2c 32 ad 3d a9 ea 69 91 0a 4e 44 19 73 db cc 4e 7b 01 fe 5a e2 82 c7 43 2f 43 d5 d0 4b 71 b8 8a d2 fb 92 9f c2 0d 1b b8 6f 21 2e 47 00 76 20 73 81 8d 0a 3b 18 6e ab 61 15 6f b5 ab 73 01 a2 62 a8 e4 10 59 c9 0a 7d 4e 0f 20 6a 8d 45 ba df 1a ed 7f 06 62 8a 07 8d 4d 3e 43 73 eb 91 8f e9 f6 d3 4c 70 db a8 28 95 67 85 aa ae 43 11 4b bf 0a 15 71 ca ae 3d bf d3 54 2e 71 a4 91 ac 91 d3 98 0a e4 b1 db bb 76 3d 7f a7 f5 d3 c7 b2 2a 51 b6 55 43 6e 5a 81 4f 41 e0 54 4d 01 f0 a4 9d 0c db c7 a0 c3 60 01 8c f3 83 d8 63 4c d6 2b 03 d6 fc 16 be cf 05 3a 2c 74 92 c3 57 23 f9 b7 48 04 9e 1e e2 71 81 b7 77 Data Ascii: F'-s,CehVh#{OV`t',FpON,2=iNDsN{ZC/CKqo!.Gv s;naosbY}N jEbM>CsLp(gCKq=T.qv=QUCnZOATM`cL+:,tW#Hqw
2024-04-16 15:05:45 UTC	1369	IN	Data Raw: 9c 80 48 23 4d fd 75 40 fd 49 d3 d6 99 ed 97 7b 75 bb 0c d0 d7 53 c8 4a 44 b3 70 0b c2 00 c8 52 83 e9 1c 90 ad 8d 60 fd 39 4f 4b 70 ad 15 17 3a 7b 85 54 4a 31 be 00 a5 94 28 ce 55 9c e3 cb 8f a7 d4 0c 0c 6b 60 e8 da 88 ee 3d 1d 63 a8 aa 82 d1 55 3a d7 3d 26 e7 a8 28 ae 78 30 cc 0a e4 e4 7f 84 fa e3 b7 7d 7a ba 6c b1 1d 20 21 bc 62 eb 8e 99 a9 a2 e8 ea 78 6b 8d 17 51 d6 da 65 96 a6 09 5a 76 54 19 85 54 a6 00 00 b1 61 9f 0c f1 b5 86 82 50 f5 2f fb 3b d3 16 bb 84 30 5d 65 57 64 8e b9 0c 41 0c 2c 46 ec 6c 45 fd 41 c8 f3 e0 03 81 9e 46 89 7c 4d b8 d3 f4 ad c2 3a 69 67 ab 96 44 89 3e 6a a2 48 c4 24 17 1e 56 3c 95 24 e0 6f 3f 51 c0 3b b1 d9 47 e2 5d e2 1e ab 6a 3a 8b 4d 3d 4d 1d de 8e 94 53 95 8e 53 4e ce 1c 1e 39 3c b0 c7 7e 72 ad f7 d4 bd 81 ab 6b 9b 7b 41 b7 Data Ascii: H#Mu@I{uSJDpR`9OKp:{TJ1(Uk`=cU:=&(x0}zl !bxkQeZvTTaP/;0]eWdA,FlEAF\|M:igD>jH$V<$o?Q;G]j:M=MSSN9<~rk{A
2024-04-16 15:05:45 UTC	1369	IN	Data Raw: c0 da 8a a7 d9 8f 70 7b f3 ed a5 4e 91 a7 5a 3b b7 c9 b0 55 79 63 48 42 26 5a 32 cc c5 d8 83 c1 c7 df 4d 66 5a 8a a9 e4 a9 82 68 62 8e 27 f9 7f 0a 54 c3 e1 72 42 8f 71 bb 91 9e fa 53 01 18 31 0e d9 2a e5 ac a7 53 52 50 4d 4d 1b 43 3b a9 2a a2 4c f2 87 bf 07 83 8f be 74 be b7 19 2b 6e f5 71 2c 19 8d e2 74 c0 90 61 54 37 7c 77 c9 dd 9f c7 e3 45 7a 5d d4 d9 ee 95 52 42 4a 1a b6 96 68 d8 02 1d ca 00 78 f5 1c 7f 9e 80 d9 2d d0 d2 5e fe 6a 18 62 a4 a6 9e 60 ab 1a 26 c2 0f 0d 86 6f 50 31 cf a6 0e 87 8c 4f 73 99 97 fc 7a 9d ad 3d 57 4d 22 93 13 18 64 8a 45 03 2a d0 87 00 00 31 8c 00 c4 7e da a9 d3 51 d3 df 28 e7 92 c8 b5 b1 cf 1c 25 99 2a 4a 19 19 d7 68 dc 85 40 da bc f2 33 cf db 57 7e 36 dd 5a 1e bc 85 6b 68 59 b7 0f 98 a7 3c 2b 20 2b e6 2b f9 fb fb e8 35 8e a2 Data Ascii: p{NZ;UycHB&Z2MfZhb'TrBqS1SRPMMC;Lt+nq,taT7\|wEz]RBJhx-^jb`&oP1Osz=WM"dE1~Q(%Jh@3W~6ZkhY<+ ++5
2024-04-16 15:05:45 UTC	1369	IN	Data Raw: 59 e6 02 4c b0 e4 01 ee 09 c8 ff 00 97 ef ae 55 61 55 9a ee f7 3e e9 75 3d 35 32 30 b1 ae d3 4f 4b d4 b3 de ee 5d 62 6e 03 e7 29 c5 04 d5 34 b0 84 67 2a 72 7c 57 4f 31 55 e0 03 83 8e 7b e8 2d cb e0 fb bc 12 9e 90 be d1 5e 29 c1 27 c1 91 c2 b8 00 67 ea 1c 7d b0 c1 4e 9a 6c b6 6a fe 9e e9 b8 16 91 eb a7 38 26 62 ae 5f 32 67 cc c4 63 3b 49 c9 52 7d 87 b6 ba 2f 0c 92 89 a5 86 33 32 30 55 9e 09 3c 19 c1 c6 41 0d 90 0e 3e e4 72 7f 3a ca 3a da ba 63 61 90 7d 7b 7e 7f 18 ba ba 50 78 c4 c4 2f 5d 3b 73 b4 42 69 2f 76 79 29 08 1e 59 25 8c aa e0 f6 60 c3 ca 7f ae bb b6 d9 2e d6 4b cc 31 4d be dd 56 f4 ad 20 8e a1 03 6e 27 0c 14 af dd 4e ee 08 3a d0 fa a7 e2 85 6a d2 b5 9a 82 a6 0b dc 0e 80 ad 65 4c 58 78 dd 58 87 88 e0 01 28 23 be 7d 08 23 49 57 fe a0 a8 ad b8 c3 76 Data Ascii: YLUaU>u=520OK]bn)4g*r\|WO1U{-^)'g}Nlj8&b_2gc;IR}/320U<A>r::ca}{~Px/];sBi/vy)Y%`.K1MV n'N:jeLXxX(#}#IWv
2024-04-16 15:05:45 UTC	1369	IN	Data Raw: 8e dd c2 ec 37 0a cb 91 34 77 1b 83 32 c3 2f 86 f1 08 bc 46 87 2c 36 94 66 24 e0 1e 00 3c 00 78 ce a8 a6 be 1d 22 db 99 3d bb a9 ea eb ae 34 f5 70 4d 25 be a3 c5 45 9e 68 3c b3 6f ce 15 cb 67 ce 3d 31 c6 3e fd b4 f1 f0 d6 f5 52 fd 63 2d 35 5d 75 a6 ae 4a b8 59 09 a3 27 20 ae 5b 0c 48 5c e0 8c 0e 38 ce 35 96 54 50 4f 6d 35 30 12 e4 b4 a5 15 b1 8d ea 0f 0e 06 3f a6 3b 67 4e 7f 0b 27 90 f5 75 9e 8c c6 82 33 31 21 8f 2c 58 23 0c 8f 6e 38 3e 9a ba 9a 28 60 c2 47 ac 5d fa 77 53 e0 7e 93 6b 6e 4e a3 74 d5 85 8c 0e 58 85 1e e7 b6 bd 31 1f 0a 29 b1 fa 73 29 68 db fc 40 31 53 fd 0a 91 fb 6b ac 2a a8 36 bc fc f7 b2 62 bb ad 88 26 e4 4c 54 53 c8 a8 ee 56 26 21 53 1b 8f 07 b6 48 19 fd c6 aa 74 f4 ef 5d 63 a0 ab 93 c4 2d 35 34 6f be 48 ca 78 a3 68 1b c0 3c e1 b1 91 9d Data Ascii: 74w2/F,6f$<x"=4pM%Eh<og=1>Rc-5]uJY' [H\85TPOm50?;gN'u31!,X#n8>(`G]wS~knNtX1)s)h@1Sk*6b&LTSV&!SHt]c-54oHxh<
2024-04-16 15:05:46 UTC	1369	IN	Data Raw: 63 30 ae 63 57 46 d2 54 5b ec f4 92 4f 3f 8a cd 09 99 d0 8c 61 64 00 a0 1e d8 c1 27 92 7d 35 5e 4f 97 a1 ba 4f 5b 38 06 24 8f f5 98 b8 0b e2 16 27 79 23 03 1b 01 1f b1 1c 6a cd 14 77 0a 7b 44 71 5c e7 49 ea 77 78 04 07 52 4c 41 40 0a a5 78 c8 3d cf 24 f7 d2 c7 59 75 64 54 56 cb c5 07 81 2f cd d2 d4 2c 61 84 42 58 a3 dd e6 43 27 b9 27 80 be f8 cf 1a c2 07 33 2f 33 3f 8c 73 53 8a 5a 5a c9 81 ab 2e 44 c9 33 13 bf c1 77 1b 54 0e ea 46 d2 c0 7f 84 fe 34 47 a3 ba 77 c7 a6 82 be a6 d8 62 a2 24 a4 71 46 ac d2 ce fc 1d cc 3f c2 a3 3d c7 71 aa dd 7d 2c b7 4f f6 66 e1 5b 6e 8d 6b 2b 26 12 54 c8 a1 41 a9 58 d4 39 52 3b 0c 32 a8 00 1c 64 91 a7 7b 15 db f8 47 4e c3 43 1f 82 63 85 19 a7 a8 7c ac b1 ca 49 2c 40 cf 71 fe 9a d2 6e 82 d3 40 21 8c b7 0c 15 74 53 45 40 20 f0 Data Ascii: c0cWFT[O?ad'}5^OO[8$'y#jw{Dq\IwxRLA@x=$YudTV/,aBXC''3/3?sSZZ.D3wTF4Gwb$qF?=q},Of[nk+&TAX9R;2d{GNCc\|I,@qn@!tSE@
2024-04-16 15:05:46 UTC	1369	IN	Data Raw: 57 58 a7 f4 8e be 03 89 d2 4d 2b a9 ef 0f 89 eb 34 8b 62 5d ed 30 d0 d0 59 ea a8 3c 31 1a bf cb 54 46 56 08 ce c0 ec b1 cc 09 6c 36 4e 19 86 41 3c e9 22 fb 59 5b d4 3d 58 6d 57 44 97 f8 15 b4 9f 9a a5 f1 d6 9e 09 d8 16 df 39 72 4b 10 84 ae 0e 30 c5 0e 38 3c c3 57 d4 55 52 05 8e 4e a3 25 16 30 91 a7 cd c4 9b b8 c0 52 88 09 3c 00 02 8f 41 ce 98 ba 16 82 76 a1 aa b8 0a 37 ac a4 ab 41 12 97 c1 9e 42 3e a6 2a e0 65 33 85 1c fa 76 d4 8b 51 90 ef b6 7c 4f 9f d6 d8 8d ab 48 3a ed 56 f7 02 3d 0c cc 41 66 95 27 90 9d d2 45 e3 1f 0e 44 1c 30 19 19 ce 30 38 ff 00 b1 a8 fa b6 9d ab ed 32 cd 03 e1 60 91 19 94 1c 0f 66 20 7a 9c 6b 6a bd f4 4f 49 5d 27 f9 54 32 5a ea c8 e6 1a 79 0d 33 0c e7 93 1b 79 18 93 db f7 3a 4e ea 1f 85 17 58 08 92 82 b8 57 86 01 5d 2a 1b c1 76 5f Data Ascii: WXM+4b]0Y<1TFVl6NA<"Y[=XmWD9rK08<WURN%0R<Av7AB>e3vQ\|OH:V=Af'ED0082`f zkjOI]'T2Zy3y:NXW]v_
2024-04-16 15:05:46 UTC	1369	IN	Data Raw: 32 aa 03 1e f8 c9 c6 38 ce 91 3a 3a ff 00 6d b2 5a e1 86 ae 8e a2 ba 47 93 c4 ac 8a 3a 85 86 96 75 47 df 1c 6d c1 69 46 79 3c 60 f0 06 46 99 ba 9b e3 25 7c 55 53 47 50 d4 16 c9 c9 cb 45 e0 99 9c 64 64 72 c7 be 08 f4 d1 50 60 8e 6e 7c 84 9b 59 a3 d5 d6 a7 b6 92 80 0f 24 9b 0f 9c 74 f8 81 01 ad b4 c3 63 a7 90 c7 5b 70 9d 4d 39 24 aa 62 26 59 1f 2f d9 4e d1 91 9e e4 63 4a 97 cf 88 69 43 7f ac b5 50 55 49 4b 67 a7 9d a3 86 4e 37 1a 86 19 64 05 91 dc 82 72 fb 47 0a 5b dc e9 52 3e a7 ea 2e a8 91 aa 9c d7 cb 6c a2 47 aa 79 a6 90 79 42 82 77 22 0c 26 78 ed 82 78 d2 e0 a5 6b dd be 6e a0 e9 ea 8a ba 88 ed c4 2c a7 69 8e 48 1d c9 7d f1 f7 3b 98 8c 97 27 23 fa 6a 6d 43 76 ba 82 cc d6 16 03 1c 83 e7 d2 e4 fb e3 74 3f 85 2e 93 4d d9 b5 99 b2 6d 9b 1e 32 01 e4 00 07 cc Data Ascii: 28::mZG:uGmiFy<`F%\|USGPEddrP`n\|Y$tc[pM9$b&Y/NcJiCPUIKgN7drG[R>.lGyyBw"&xxkn,iH};'#jmCvt?.Mm2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.11	49820	154.62.106.12	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:43 UTC	375	OUT	GET /wp-content/uploads/2018/11/2.jpg HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:45 UTC	392	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:45 GMT Content-Type: image/jpeg Content-Length: 84259 Connection: close Cache-Control: public, max-age=31536000 X-Hcdn-Image-Optimizer: f:jpeg q:85 w:1600 alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: a8c9900716234e2cd367fcb1cdea9a04-bos-edge3 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 1.698 Accept-Ranges: bytes
2024-04-16 15:05:45 UTC	977	IN	Data Raw: ff d8 ff e1 00 80 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 05 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 4a 00 00 00 1b 01 05 00 01 00 00 00 52 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 69 87 04 00 01 00 00 00 5a 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 02 00 02 a0 04 00 01 00 00 00 58 02 00 00 03 a0 04 00 01 00 00 00 90 01 00 00 00 00 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e Data Ascii: ExifII*JR(iZHHXC!"$"$C
2024-04-16 15:05:45 UTC	1369	IN	Data Raw: 81 9f 00 0d 69 51 bb fa 44 9f be b5 71 53 37 37 14 3f 2d 2a 10 46 1f fb e9 a3 26 d3 c8 3a 5d 60 91 89 ec b8 fb eb 6c a8 50 06 62 1b fb 6a c1 ae 92 1e 7a c6 98 d6 b1 a7 df 29 f4 6e 19 3e da 45 a2 74 e3 69 cf be 34 61 c1 82 54 88 81 50 38 c1 ce b3 04 0d 76 c1 bc 9d 62 af bf 3a bb 83 13 24 93 dc eb 61 41 fe 63 fd 35 d8 45 f2 75 a3 90 31 9e 35 77 24 e0 ae 0f 1c eb 30 46 ba c9 ce 75 87 27 be a5 ca 9c 9c f9 d6 b1 ae f1 ac c6 ae e4 9c 63 5b c6 ba c6 b3 1a 97 24 e3 1a cc 6b bc 6b 58 d4 b9 27 38 d6 63 5d e3 5a c6 a5 c9 39 c6 b5 8d 77 8d 66 35 2e 49 c6 35 98 d7 58 d6 63 57 72 4e 31 ad 63 5d 91 ad 63 57 72 4e 71 ad 63 5d e3 23 59 8d 4b 92 71 8d 66 35 de 35 ac 6a 5c b9 c6 35 84 6b bc 6b 31 a9 72 4e 31 ad 81 ae b1 ad e3 52 e4 95 f7 c7 9a b9 20 e8 29 e9 62 64 49 aa 5d Data Ascii: iQDqS77?-*F&:]`lPbjz)n>Eti4aTP8vb:$aAc5Eu15w$0Fu'c[$kkX'8c]Z9wf5.I5XcWrN1c]cWrNqc]#YKqf55j\5kk1rN1R )bdI]
2024-04-16 15:05:45 UTC	1369	IN	Data Raw: 1f 58 19 a9 d9 46 48 e7 48 b2 63 b8 c6 8c 4b 18 6e e1 49 fc 69 8c d1 63 c0 d3 53 2d c5 be 3a 8d 31 ac c6 bb 2b 8e fa cc 69 b7 13 38 c6 b3 1a d4 f2 c7 02 2b c8 db 43 3a c6 bf 76 63 80 34 ae 35 2e 48 9e 35 98 d2 98 d6 b1 a9 72 4e 31 ac c6 bb c6 b3 1a 97 24 e3 1a cc 6b bc 6b 58 d5 dc 93 8c 6b 31 ae f1 ac c6 a5 c9 38 db ad 63 4a 63 5a c6 a5 c9 13 c6 b5 b7 4a e3 5a c6 ae e4 89 ed d6 6d 1a 53 1a d6 35 2e 49 c6 35 98 d7 78 d2 72 cb 1a 3a c6 58 89 1f f4 28 52 c5 8f d8 0e ff 00 8e fa 97 24 de 35 98 d4 2f aa 3a fa 1b 05 7d 3d 1d ce df 51 48 64 62 0c e4 86 82 5c 77 58 a4 ce 3d 4c 0c fa 6f b4 91 a8 d5 83 e2 e5 3b 75 04 96 7b 85 75 ae ae 9a ba 46 36 6b a5 2c a4 c4 78 dc 90 54 02 01 8d 88 e3 76 38 3c 1e c4 eb 3b 6a f1 29 a2 79 8e 18 1c 8b 02 5b 3b 75 bd ba 8d 58 fa ae Data Ascii: XFHHcKnIicS-:1+i8+C:vc45.H5rN1$kkXk18cJcZJZmS5.I5xr:X(R$5/:}=QHdb\wX=Lo;u{uF6k,xTv8<;j)y[;uX
2024-04-16 15:05:45 UTC	1369	IN	Data Raw: 10 39 23 3e da 71 f0 fb e2 45 7c 96 98 1a f3 38 b8 b4 89 e8 91 12 e6 a0 32 29 de 70 71 b8 03 9c 93 8c 01 ce b3 8c e1 72 14 7f bf bf 74 b2 2d 6c 4b a1 4f dc 1d 2c 92 15 e3 3c 6a 33 d2 9d 45 45 d4 54 6d 55 6f 63 e9 03 84 dc 08 2e 3f cc 01 ee 3e e3 8d 1d 04 63 ea 27 5a e8 30 b0 6e 2b 79 06 3f f5 17 1e 35 c3 4b 11 3c 8e da 62 64 db fc c7 1a 4d a6 27 c9 d5 0c 32 ce 68 f6 46 8c 8d 32 a8 31 29 1f 5a 8d cd b5 72 7f 9b c0 fc eb 93 2b 9e 33 a8 3f c4 ee 90 97 ab 21 8a 14 ab a9 a7 8d 79 90 53 95 46 24 1f a4 ee 3e 41 ed 9e 06 34 7b 59 45 af 26 2f 78 63 46 36 f8 b5 d6 cd d2 56 f4 a8 a2 85 ab 26 8a 5c 54 40 00 da 53 04 90 5b 39 53 db b6 a6 71 b9 f4 69 bd 56 41 34 a8 8e 54 71 9c a8 27 03 db 54 1f 5a 47 79 a2 b7 5c 29 ef c2 6a 8a fb 58 26 0a bf a7 35 31 48 00 2c c0 13 b9 Data Ascii: 9#>qE\|82)pqrt-lKO,<j3EETmUoc.?>c'Z0n+y?5K<bdM'2hF21)Zr+3?!ySF$>A4{YE&/xcF6V&\T@S[9SqiVA4Tq'TZGy\)jX&51H,
2024-04-16 15:05:45 UTC	1369	IN	Data Raw: 96 45 91 19 9c 16 21 89 20 f8 24 03 f7 ce ac 7e 8c ea ae 87 ea ab ad b0 75 1b bf cc d2 c4 60 a5 b7 52 d3 14 88 92 c0 87 69 0b 72 ff 00 47 d5 9c 29 ce 00 38 d5 4b 51 d2 97 09 2d 93 5c e4 54 a3 8e 23 be 20 d3 16 77 5d a4 a8 4c e4 b2 e0 01 9f c0 e3 c6 ab ba 52 e5 15 b2 d5 75 b7 22 d4 0a b4 76 31 89 07 ab 1e d6 00 b7 60 3b 95 fd ce b2 60 6c b8 da d4 58 f4 3e 90 dd 31 b8 eb 46 7b 76 c3 77 b1 de 69 a4 7b 0d c2 92 b6 18 1b d3 93 e5 db 22 36 ff 00 29 f6 3c 68 81 5d 78 cb a3 7a fb ab 3a 32 ba 96 8a b6 e1 20 b7 c6 ee 0d 04 32 aa 28 93 79 57 f5 59 46 e2 d9 53 90 5b 24 63 9c 6a f8 e8 1f 8c b6 9b d2 49 4f 5c 4b d7 0d c6 28 60 00 b3 80 33 cb 70 83 d8 63 f7 3a ed 61 f1 0c 6d c3 9a 33 97 97 48 e9 c8 e4 4b 2e aa b6 86 94 aa d4 d6 d3 c2 cc 42 a8 79 00 2c 4f 00 0f bf db 49 Data Ascii: E! $~u`RirG)8KQ-\T# w]LRu"v1`;`lX>1F{vwi{"6)<h]xz:2 2(yWYFS[$cjIO\K(`3pc:am3HK.By,OI
2024-04-16 15:05:46 UTC	1369	IN	Data Raw: 3a 9d 39 c6 64 a8 0d 68 a0 60 55 94 10 7b 82 35 0a ea 4f 8a 3d 29 61 a4 82 aa a6 e1 4f 32 cc 0e 61 8a 50 65 89 84 65 8a 38 fe 56 dc 02 e0 f9 c8 f1 a1 9f 06 fe 25 55 75 d5 4d c2 29 ed 53 52 ba 54 3c 91 64 62 38 a9 f8 08 a5 ce 37 31 e4 e0 73 cf 8d 69 fc 42 6f 09 7c c4 79 2f b4 b5 71 03 7f c4 15 a2 e4 3a 75 ea 68 e1 78 ad 70 7f d6 8d 19 09 60 7b b7 f9 82 e7 19 39 e3 23 3a f3 6a 5c de a4 47 4d 3f aa 65 42 e8 a5 5b f4 7e 3c f8 07 f6 d7 b5 3e 24 50 4b 5f d3 13 d3 ab 46 b0 10 44 db c6 72 be db 72 03 13 d8 29 e3 38 3e 35 e1 f4 49 60 b8 d6 d3 65 92 5a 79 86 dc f2 43 e4 ae 33 fb 60 eb 89 e3 18 fd a0 fe b3 af e1 af 68 56 4f 3e 19 75 5a da ee b0 99 ea 56 2a 5f 5f f8 b8 84 32 c8 e1 72 03 76 20 11 90 4e 78 ce 74 fa 8a 86 96 eb d4 92 75 d5 ee a4 4b 4b 57 59 f2 ef 0c 48 Data Ascii: :9dh`U{5O=)aO2aPee8V%UuM)SRT<db871siBo\|y/q:uhxp`{9#:j\GM?eB[~<>$PK_FDrr)8>5I`eZyC3`hVO>uZV*__2rv NxtuKKWYH
2024-04-16 15:05:46 UTC	1369	IN	Data Raw: c4 b2 05 8a 96 12 d2 b5 5c a6 25 73 17 a4 a0 c7 b4 02 d9 24 78 3c eb 35 d6 6f 12 38 7d 96 c6 7f 4e 66 21 a6 ca dc a3 f1 f2 86 3a 02 9a 9e ef 75 15 b2 d5 d1 ad bd 9c c1 4d 46 d9 68 87 86 13 05 c7 a4 1f 9d a4 77 ef 81 91 af 40 dd 3a 6d 7f e5 5a a5 a4 e9 3a 48 6b c4 06 28 21 8d c4 91 62 40 15 cc 2f df 04 01 c3 79 00 ea af f8 43 55 4d 4d 61 b6 53 5c e6 2f 45 4e 3e 46 ad a3 39 86 3d e0 18 89 e3 29 22 93 9e 7e 96 c9 c1 04 60 db 1d 43 f1 0b a5 3a 0e c7 4a d7 8b aa cb bd dd 17 d1 5c c8 e5 4e 1b 2b dd 4f 20 fb 73 ac 78 4a 22 6e 26 68 c9 64 d4 f2 9f c4 ba 3a aa 2b d5 d6 c9 74 8e 28 a9 9e 58 aa 99 62 62 00 20 b9 57 50 47 ea 3b 98 13 d8 f3 a8 3d ba aa 91 0c d4 c5 52 51 22 6d 69 59 40 3f 80 4f 8f ef ab 93 af 3e 25 74 1f 57 75 35 35 d6 1e 9d 9a 2a bd 91 44 4c ee a6 36 Data Ascii: \%s$x<5o8}Nf!:uMFhw@:mZ:Hk(!b@/yCUMMaS\/EN>F9=)"~`C:J\N+O sxJ"n&hd:+t(Xbb WPG;=RQ"miY@?O>%tWu55*DL6
2024-04-16 15:05:46 UTC	1369	IN	Data Raw: 73 82 71 a8 d3 b4 b5 52 a4 3b da 49 0e 76 b0 3c bb 0e 71 ff 00 df 6d 4b 6c af 53 75 b8 d3 52 55 45 14 7f 30 05 34 51 45 1a c6 19 f0 53 b7 6c f3 f8 3f 9d 6b c0 48 00 77 82 e8 00 b8 62 23 59 53 72 14 f6 78 44 49 51 3c 71 fc d8 52 d1 c4 87 b2 f3 f5 3f 04 63 c9 03 9e 75 64 f4 c7 c2 6b a5 fe f7 70 3d 4b 74 75 8e 48 29 2a 33 6f cc 1b c8 67 5c 95 65 c0 75 0a 58 64 7f 38 3d c6 a5 9f 04 3e 1c 1e 9d 92 e8 97 b8 4d 6b 48 d4 ef 4d 29 39 58 1e 16 27 67 fe fc e1 b3 d8 af 1a 99 7c 46 eb 8b 6f 47 41 1b d6 41 55 51 53 50 de 94 42 95 52 46 0d 8c 80 c0 b0 20 7e 75 db d3 e9 31 e0 42 f9 7a f7 f4 9c bc da 96 77 d9 8e 45 ac 9f 04 7a 5e 8e a5 27 bb b0 bd 46 82 40 d1 d4 42 33 28 75 c6 59 87 3b c1 fa 83 73 c9 27 44 be 1f 7c 3c b0 74 cd d6 5a ab 0d c2 79 68 9e 11 14 f4 72 c9 ea 62 Data Ascii: sqR;Iv<qmKlSuRUE04QESl?kHwb#YSrxDIQ<qR?cudkp=KtuH)*3og\euXd8=>MkHM)9X'g\|FoGAAUQSPBRF ~u1BzwEz^'F@B3(uY;s'D\|<tZyhrb
2024-04-16 15:05:46 UTC	1369	IN	Data Raw: ff 00 1a 84 5b 64 7a 59 63 9e 37 6c b9 3b 5f 76 1c 01 c6 fe 3b 0c f9 d7 a5 7e 01 5a ed 9d 5b 66 82 5b 94 6d 70 5b 6a 8a 79 57 d6 00 c6 80 ee 5f a0 7d 44 72 7f 23 3a cf 83 48 33 bd 03 46 33 3e 6f 24 6e 23 89 4b c5 69 51 d4 f6 ab 14 cf 34 b3 39 78 9d 13 b8 fe 19 3c 7e 31 9c 79 ef e3 4c b6 c3 1d 53 2a c8 2a 69 65 dd f5 a9 21 65 5f 7e 7c f6 fb e7 3a b0 7a ce 96 dd 1f fc 51 bd 35 44 48 2d a6 f2 69 de 35 38 05 1a 10 a1 06 39 19 38 1f be a2 ff 00 13 a9 65 b6 f5 7d 55 b1 23 a7 2f 6c 97 e5 62 58 d0 22 63 86 55 c1 3d d7 38 c9 e4 f2 4e 35 33 69 d5 31 31 07 a3 11 29 32 16 61 ef 17 07 5a ef d7 8b 15 67 a5 4f 74 91 29 91 64 f4 c3 82 e8 43 ae d2 54 77 0c 54 91 e3 b7 8d 66 b2 e7 4b 4c 9b c4 fb a2 9e 97 ea 15 21 73 8c 1c 30 3e ea 78 cf 1c 67 3a cd 67 c3 ab cc 8b 48 c4 0f Data Ascii: [dzYc7l;_v;~Z[f[mp[jyW_}Dr#:H3F3>o$n#KiQ49x<~1yLS**ie!e_~\|:zQ5DH-i5898e}U#/lbX"cU=8N53i11)2aZgOt)dCTwTfKL!s0>xg:gH
2024-04-16 15:05:46 UTC	1369	IN	Data Raw: f3 93 db 38 ef ae 5e 32 da 6d 4e c6 3e cb 5d 7b 8f f3 35 b0 19 31 ee 03 91 23 9d 41 d5 37 39 3a 8e e1 32 89 0d c2 8a 91 ad f1 26 77 6d 64 9b 70 38 1d cf 61 9f 6c 6a f4 e8 6a 06 e9 3e 80 13 20 4a da a5 4f 55 dc a8 5f 52 57 e4 82 73 df 3c 71 af 36 74 63 2d e3 ad a8 e3 61 f2 fe a5 44 92 3a c9 2e 70 8d c0 5d c3 93 8d a0 03 dc f9 d7 b1 a9 ed d4 c6 cb 05 01 8e 27 85 21 08 bc 65 71 8e fc e8 7c 37 76 47 7c ad df 81 f7 f2 97 ab 01 02 a8 94 55 df ae ae 92 dd a6 aa aa a2 b8 50 5d e9 41 f4 a1 86 60 f0 39 2b f5 7a 6b d9 b1 83 f5 9e 0f 6d 55 17 1b dd c2 fd 32 8f 46 99 2b 19 92 78 12 9e 11 10 77 63 87 20 2e 07 a9 b7 b9 c0 0c 01 19 e0 6a fe f8 83 d1 55 9f f3 14 95 f6 c8 d2 1a 63 6e 91 72 0a a9 33 15 64 5f a8 fe 9c 65 7e dc e3 54 d7 52 3d 27 4d dd 92 0b 6b 4b 57 71 a3 a4 Data Ascii: 8^2mN>]{51#A79:2&wmdp8aljj> JOU_RWs<q6tc-aD:.p]'!eq\|7vG\|UP]A`9+zkmU2F+xwc .jUcnr3d_e~TR='MkKWq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.11	49821	154.62.106.12	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:43 UTC	379	OUT	GET /wp-content/uploads/2018/10/bg1-1.jpg HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:46 UTC	396	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:46 GMT Content-Type: image/jpeg Content-Length: 332679 Connection: close Cache-Control: public, max-age=31536000 X-Hcdn-Image-Optimizer: f:jpeg q:85 w:1600 alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: e8cb25615f12d0f09d94bce54c22f08f-bos-edge2 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: -, 2.267 Accept-Ranges: bytes
2024-04-16 15:05:46 UTC	973	IN	Data Raw: ff d8 ff e1 00 80 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 05 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 4a 00 00 00 1b 01 05 00 01 00 00 00 52 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 69 87 04 00 01 00 00 00 5a 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 02 00 02 a0 04 00 01 00 00 00 40 06 00 00 03 a0 04 00 01 00 00 00 68 03 00 00 00 00 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e Data Ascii: ExifII*JR(iZHH@hC!"$"$C
2024-04-16 15:05:46 UTC	1369	IN	Data Raw: 6c 7c 57 46 95 3b 03 9a 54 f8 a5 8a 04 2a 63 4f 8a 54 00 d4 f4 b1 4a 80 a1 a9 e9 52 c5 01 43 52 c5 3d 2a 05 43 62 95 3e 29 0a 00 6c 53 d2 f5 a5 8a 07 42 a5 4a 95 02 a1 a9 e9 f1 4d 40 0b 14 b1 4f 4a 80 1b 14 a9 e9 50 02 fd 29 62 95 2a 00 58 a5 8a 7a 5f 6a 02 86 ef 4a 9f d6 96 28 1d 0b 14 80 a5 48 50 14 2c 52 c5 3d 21 df 14 05 0d 4f 4f 8e 69 52 01 a9 62 9f 14 f4 58 0d 8a 54 f4 b1 40 c4 29 62 9e 95 01 42 14 a9 f1 cd 2c 50 14 35 2a 7f 4a 7a 07 43 62 95 3d 2a 00 54 a9 c0 a5 8a 00 6a 71 4a 95 00 2a 54 f4 a8 1d 0d 4f 8a 5f a5 38 a0 28 6c 52 14 f4 a9 0c 54 a9 f1 4a 8b 01 a9 53 e2 95 16 03 62 9c 52 a7 a4 07 34 f8 a7 a5 40 0d 4f 4a 95 00 2a 54 80 a0 5d 61 ae a6 8d 6b 03 29 dc f2 ca 13 03 9e 28 13 74 ac 23 ac 4b e0 e9 b3 48 4a a8 0a 72 c7 b0 af 19 bb d4 4c f7 d1 c4 Data Ascii: l\|WF;TcOTJRCR=Cb>)lSBJM@OJP)bXz_jJ(HP,R=!OOiRbXT@)bB,P5JzCb=TjqJTO_8(lRTJSbR4@OJ*T]ak)(t#KHJrL
2024-04-16 15:05:46 UTC	1369	IN	Data Raw: 74 45 35 02 a1 a9 53 9a 58 a0 06 a5 4f 4d 40 0d 4a 9e 9a 81 0d 4a 9e 96 29 85 0d 4a 9c d2 a2 c4 73 4a 9e 95 30 1a 95 3e 29 a8 01 b1 4b 14 f4 a8 11 cd 2a ea 98 d0 21 a9 53 e2 91 14 00 c2 9a 9e 95 01 43 11 4a 9e 95 16 23 9a 55 d5 36 29 d8 0d 83 4d 5d 1a 6a 60 35 23 4e 69 50 2a 1a 95 3d 2c 50 23 9c 52 c5 74 45 35 00 36 29 62 9e 95 00 36 29 62 9e 95 01 43 53 63 35 d5 2a 05 47 34 b1 5d 62 91 14 01 ce 29 57 54 d8 e6 8b 01 a9 bd 6b ac 52 c5 16 03 0a 55 d6 29 62 8b 03 9c 52 ae a9 63 9a 2c 0e 71 c5 2c 57 54 bd 68 b0 1b 14 df a5 75 4a 8b 01 b1 4b 14 f4 b1 45 80 d8 a5 8a 7c 52 a2 c0 6c 52 c5 75 8a 58 a2 c0 e7 14 f8 c5 3e 29 50 03 52 a7 c5 2a 00 6c 53 d2 a7 c5 00 36 29 e9 0a 54 00 a9 53 e2 95 00 21 8a 54 a9 f1 40 e8 6a 7a 42 9e 80 1b 14 85 3d 20 28 01 52 a7 c5 20 28 Data Ascii: tE5SXOM@JJ)JsJ0>)K!SCJ#U6)M]j`5#NiP=,P#RtE56)b6)bCSc5G4]b)WTkRU)bRc,q,WThuJKE\|RlRuX>)PRlS6)TS!T@jzB= (R (
2024-04-16 15:05:46 UTC	1369	IN	Data Raw: 68 e6 18 ad 6f da 6b 78 bb 43 37 98 6d f6 cf 7c 56 6c 9d 35 bb 89 d4 e9 7e d3 d0 b4 e5 df dc fa 57 14 ab ce ba 43 f1 4e c3 54 b8 4b 3d 5e d8 e9 f7 0e c1 51 f3 98 d8 fa 64 fa 57 a2 fd 88 23 dc 56 39 41 c5 d3 3b 58 b3 43 2c 75 41 d8 c6 96 29 f1 4a a2 5a 35 2a 7f 5a 6f 4a 00 6a 54 f4 d4 00 d8 34 bd 69 e9 1a 04 31 a6 a7 a4 68 10 d4 d8 a7 34 a8 03 9a 54 e6 9a 98 0c 69 53 d2 c5 30 1b d6 98 f1 4f 4a 81 0c 69 a9 f1 4a 81 1c 91 4a ba ae 4d 00 22 2b 93 5d 53 1a 00 e4 d2 ae 8d 35 02 1a 9a ba a6 a6 03 53 1a 7a 58 a6 03 52 f5 a7 a6 a0 54 35 2a 7a 54 08 e4 d2 f5 a7 c5 35 00 2c 66 9a 9e 96 28 03 9a 46 9c d3 50 21 a9 53 d2 a6 03 53 62 9e 95 02 39 a5 4f eb 4d e9 40 86 c5 23 4f 4a 80 1a 9a ba a6 a0 0e 71 4a 9e 95 3b 15 0c 69 52 a5 40 86 a5 4f 4d 4c 06 a4 69 cd 35 00 31 a5 Data Ascii: hokxC7m\|Vl5~WCNTK=^QdW#V9A;XC,uA)JZ5ZoJjT4i1h4TiS0OJiJJM"+]S5SzXRT5zT5,f(FP!SSb9OM@#OJqJ;iR@OMLi51
2024-04-16 15:05:46 UTC	1369	IN	Data Raw: 7f 87 ee 39 a8 f4 ed 12 c7 4b 85 6d b4 f8 63 8e 34 5c 10 39 03 ee 7d 49 ad 2e d2 a4 56 aa ed 9f 2e 5f b4 73 ed 9f 72 89 4f e7 1e 8d f3 5c 45 24 f6 92 0f 22 c8 87 ba b7 35 a2 d6 b4 db 49 ec f1 6c 3c 39 14 f0 d8 ef f7 a1 f6 56 4a d6 c2 3b 86 65 95 4f e8 45 7a e4 d5 1f 30 94 24 a7 68 27 d3 b7 3a 74 0f e2 9d d0 ca 54 82 8d d8 fd ab 94 92 d8 b9 92 d0 ae fc f9 d1 8f f5 14 a5 b2 b7 92 dd 70 e8 c5 47 20 f0 6a ab 69 a8 ab e2 5b cd b5 87 3c 9a ab 42 b6 ec d4 b2 49 25 1a e0 27 a8 d9 cd a9 4b 24 b1 9d b2 47 10 60 0f ae 28 2d 92 3c d2 14 ce 70 39 06 ae c1 75 73 6b 6b f5 0f 3e 43 02 84 50 88 2e 64 8e 62 d1 91 92 4d 3c 6a 54 d1 1c f2 86 a5 2f 5e 4b d2 5c 44 6d 3e 94 c2 7c 45 6c ab fb 7c 55 5d e5 79 e7 34 5f 47 b5 4b c8 fe a5 8e d7 8d b2 c0 fa d3 c5 a5 25 ec f7 2c 8e 11 Data Ascii: 9Kmc4\9}I.V._srO\E$"5Il<9VJ;eOEz0$h':tTpG ji[<BI%'K$G`(-<p9uskk>CP.dbM<jT/^K\Dm>\|El\|U]y4_GK%,
2024-04-16 15:05:46 UTC	1369	IN	Data Raw: ec 00 af 7e e9 0e 96 d3 7a 66 c0 59 43 23 dd 5e 4f e6 b9 b9 3f 9a 56 f6 1e ca 2b cb ff 00 07 7a 5f 51 93 a8 e5 d4 a3 b1 6f a6 85 36 a5 db 9c 2b 36 79 55 f5 6f ed 5e df 6b 6f f4 a5 de e3 2f 33 7a 7b 0f 9f 61 f1 49 a4 da 49 7c cd 78 22 d2 72 97 3d 8e da 1d b1 13 95 45 1d f1 c9 fb 57 17 36 8c 63 56 90 08 e3 41 b8 82 72 c6 ad 3c f1 3d c4 51 46 55 99 46 7c 35 f4 fb d5 89 e2 88 02 b2 e2 59 5f b8 f4 ab 5e 24 d5 22 dd 6d 3d c1 7a 6d c9 95 7c 53 19 58 17 84 00 70 c7 fd 6a 69 e6 0e ca 16 16 27 b9 1e 82 bb be b9 31 44 42 f8 65 86 15 40 1c 0a 6b 60 f2 0f aa f1 54 85 18 48 d4 70 4f b9 3e b4 25 fe 36 3f ff 00 a1 2b 3b c8 09 50 48 e4 e6 a5 76 0e b8 d9 92 7d 48 e3 f4 a8 5d d9 65 0a c4 92 c3 24 e3 bf fb 0a 6d c6 50 63 91 f6 ff 00 a0 f7 a9 a2 34 07 d6 96 d6 d4 1b a4 91 55 Data Ascii: ~zfYC#^O?V+z_Qo6+6yUo^ko/3z{aII\|x"r=EW6cVAr<=QFUF\|5Y_^$"m=zm\|SXpji'1DBe@k`THpO>%6?+;PHv}H]e$mPc4U
2024-04-16 15:05:46 UTC	1369	IN	Data Raw: 2a 4d 7e fb e4 73 8e dc 67 d8 54 1a c5 f6 b1 a9 5a 14 00 c8 40 cb 04 ec 3f 4a 82 de da 14 96 d0 4e 5f c4 8d 4b 6d f4 1f 7a e2 75 5d 4a cb c7 07 5b a6 c0 f1 7c 4b b1 5b 69 d1 14 91 c3 2b bb 64 1c d7 43 4e 64 ea 38 ae 81 25 12 32 48 27 92 68 6e 82 e2 eb 57 fa 8b d5 54 86 02 7c 08 cb 72 c7 dc d5 ed 77 56 b6 87 69 b6 b8 ff 00 99 9c ed ca fa 0a e7 35 35 2e 4d 9a a2 e3 c1 62 e3 56 1a 6a c9 25 f2 83 e2 9d b0 a8 f7 35 91 d4 9c bc 52 cd 78 1a 44 49 43 08 d4 77 39 e3 8f 5a bf ac a2 6a d7 16 b0 ac c4 4f 17 23 cd c0 f7 63 4c 89 14 b7 77 56 4e 37 79 57 05 4f 27 e7 35 6e 38 a4 ec ae 7a 9b a7 c1 3f 52 da 3c f3 c2 c2 16 8c 3a 28 38 e4 81 f2 7d 3e d5 6e 68 ad 74 d8 3c 48 0c d1 6d 5c b0 07 05 b8 f5 34 5f 52 bc 85 2c 2d e3 52 89 c0 c9 41 96 c0 f4 1f 27 de 80 eb 77 4b b2 42 Data Ascii: *M~sgTZ@?JN_Kmzu]J[\|K[i+dCNd8%2H'hnWT\|rwVi55.MbVj%5RxDICw9ZjO#cLwVN7yWO'5n8z?R<:(8}>nht<Hm\4_R,-RA'wKB
2024-04-16 15:05:46 UTC	1369	IN	Data Raw: 12 dd da 3e 98 23 14 c4 57 90 68 bf 89 1a e5 bd 9c 6b 7f 0c 57 07 78 41 26 31 9a 37 ff 00 e3 36 03 73 1d bc 96 4f 13 37 e6 7c 82 a3 e6 a9 d0 ee 8d b1 cf 06 ac f4 4c 53 36 00 c9 c0 a1 5a 65 d5 ce a4 c9 24 73 c6 21 65 dc 36 9c e6 96 ad 78 ca 0c 0a db 48 ee 4f b5 47 bd 1a 2b 6b 0a 23 23 0f 2b 03 f6 34 fd ab 2f a1 43 71 e1 dc ca b2 b6 ed e4 a9 27 83 f6 aa 96 dd 4f 71 6b 78 52 ec 09 22 32 6d 6f 42 9f 35 35 1b 74 8a a5 35 14 9c bb 9b 2a 6c 53 82 19 43 29 c8 23 20 d2 a8 96 0d 4a 91 e2 95 21 0d 4a 9e 98 d0 21 a9 1a 7a 6c 50 03 52 34 f8 a6 a6 80 6a 54 f4 de 94 c4 35 31 ae a9 88 a0 43 52 a7 c5 35 00 31 1c d3 57 54 8f 14 01 ce 29 8d 75 8a 6c 0a 05 43 52 a7 c5 35 00 2a 6a 7a 54 c0 e6 95 3f 14 8d 30 18 d3 57 44 53 50 2a 1a 98 f7 ae 8d 35 02 1b 14 d4 f8 a5 e9 40 0d 4c Data Ascii: >#WhkWxA&176sO7\|LS6Ze$s!e6xHOG+k##+4/Cq'OqkxR"2moB55t5lSC)# J!J!zlPR4jT51CR51WT)ulCR5jzT?0WDSP*5@L
2024-04-16 15:05:46 UTC	1369	IN	Data Raw: 1f d1 7d ea 04 9f 31 ba b0 00 93 8e 4f 1f 61 ee 6a f6 a7 1d ac 44 40 a7 f7 a5 38 55 1f 91 7d fe 2a 3b 0b 14 b7 53 74 c5 84 8f d9 dc 79 80 ff 00 28 f4 ac cf 5e aa 6c bd 69 d3 b1 05 9a dd a5 ca 11 08 8d 7b 6e 71 e6 03 d8 0f 4a 24 2d d6 6b 80 f2 33 33 2f 6f 6f d2 a2 b7 bb 46 76 01 38 5e 01 3c 92 6a 59 d0 ac a0 87 c6 41 24 b1 f4 ff 00 4a 9c 12 4b d4 52 6d bf 40 55 fd ad b4 b7 2e 40 52 ca 71 ef 57 34 b9 27 10 34 8d 22 b0 1e 55 0b e9 54 c2 28 59 1d 5b 71 e7 6e 3d 73 4b 42 49 e3 49 e3 90 95 5d d9 27 3f eb 54 c5 d6 4d 97 25 b2 57 03 c0 65 ba 5b eb 16 f1 ce e5 73 8c 37 35 d8 b6 b4 9b 4a 68 80 42 e9 ef 42 75 01 e0 db 84 b2 26 58 51 f0 fe eb f3 54 91 a7 74 9e 75 91 e3 0a 3d fb d7 a3 51 b5 b1 e1 67 92 a5 ba bd 8d 46 83 f4 d6 3a 3d d0 81 02 97 27 3e d9 ac fe a5 a9 5c Data Ascii: }1OajD@8U}*;Sty(^li{nqJ$-k33/ooFv8^<jYA$JKRm@U.@RqW4'4"UT(Y[qn=sKBII]'?TM%We[s75JhBBu&XQTtu=QgF:='>\
2024-04-16 15:05:46 UTC	1369	IN	Data Raw: 7c 52 c5 03 a1 a9 53 d2 a2 c0 6a 7c 53 81 4b 14 ac 04 29 62 9e 95 00 36 29 c5 2a 7a 41 43 53 d2 a5 8a 07 42 a5 4a 9e 80 1a 95 3d 2a 00 6a 7a 54 a8 01 1a 6a 7a 42 81 8a 95 2a 54 00 a9 52 a5 40 85 4a 95 2c 66 80 10 ac f7 58 6a 4f 64 96 e2 32 df f5 54 b0 5e 49 e7 b5 1e 8e 68 a4 57 74 91 59 50 90 c4 1e c4 57 93 75 6f 53 c3 71 d4 49 1a 4b bd 12 5d a1 03 60 36 3e 7d ea bc b9 a3 89 5c 89 c3 13 cb 69 1a ce b0 d7 13 4d b8 82 ed d8 a2 24 45 88 f5 cf a0 15 e6 3d 75 aa bd ed a4 7a 94 dc 5c 4e be 41 9f c8 be 95 7f a8 7e ab 57 ea 48 de f2 6d d6 69 1e 4c 0b c0 e3 b0 ff 00 bd 2d 58 46 f1 c3 6e b1 29 2f 95 c2 a6 76 8a e0 f5 7d 63 c9 3d 31 7e 5b 3b 1d 3f 4a a1 0b 6b cd 46 43 a3 94 c9 a9 ef 59 99 c0 c0 60 7d 49 f8 af 43 ea 2b 26 bd b7 68 14 04 2a aa 23 24 fa 8a cd e8 3a 65 Data Ascii: \|RSj\|SK)b6)zACSBJ=jzTjzBTR@J,fXjOd2T^IhWtYPWuoSqIK]`6>}\iM$E=uz\NA~WHmiL-XFn)/v}c=1~[;?JkFCY`}IC+&h#$:e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.11	49818	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:44 UTC	617	OUT	GET /wp-content/uploads/2018/10/1-2.jpg HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:46 UTC	392	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:46 GMT Content-Type: image/webp Content-Length: 74236 Connection: close Cache-Control: public, max-age=31536000 X-Hcdn-Image-Optimizer: f:webp q:85 w:1600 alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 3f099b83ee446e05af33b24002298a53-asc-edge4 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 2.548 Accept-Ranges: bytes
2024-04-16 15:05:46 UTC	977	IN	Data Raw: 52 49 46 46 f4 21 01 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 57 02 00 8f 01 00 56 50 38 20 50 21 01 00 50 74 02 9d 01 2a 58 02 90 01 3e 4d 1e 8c 44 22 a1 a1 23 31 fc 19 e8 60 09 89 6c 68 fb c2 3b a5 f4 bb ef 9b 33 9f 62 9d 8a 83 ec f4 10 31 24 23 93 f3 c9 e0 46 bc e3 79 77 1f d6 20 72 3f 88 fc 92 f0 15 10 9e 7b fc 6f ed 37 f7 7f dd 6f 94 fe 3f eb 53 da df 74 ff 35 ff 3b fc 87 cb 3f ee 7b 67 ec 8f 28 be 93 ff d3 fe 8b f3 47 e6 c7 fa bf fd df ed 3d ce ff 4f ff 45 ff d7 f3 ff ff ff d8 37 f3 ff f0 5f b3 1f e8 3e 0d ff d3 fd c8 f7 49 fe 0f fe 67 e5 ef c0 7f ea 9f eb ff 70 fd e0 ff e6 7e d1 fb a5 fe e5 ff 27 d8 13 fa af fa 8f fe df be df 19 bf fb bf ff fb 94 ff a7 ff df ff ff dc 1f f7 17 ff df fd af 6e 8f dd ef fb bf 28 7f dc bf ec fe eb ff d1 f9 16 Data Ascii: RIFF!WEBPVP8XWVP8 P!Pt*X>MD"#1`lh;3b1$#Fyw r?{o7o?St5;?{g(G=OE7_>Igp~'n(
2024-04-16 15:05:46 UTC	1369	IN	Data Raw: 49 34 b6 4d 97 64 90 9e e5 4d 73 63 99 7f 37 6b 08 42 36 1a 7d eb ae 5d 7b 5c 8f b5 49 6b c4 c9 ac e0 fd 4e 88 fd c6 73 bd fc 6a 99 ec dd 9c 33 d0 6d 62 aa 7d 7c c0 dc 37 2e 47 db 89 ce 87 0e 65 61 ea 54 0e 8d 27 15 b6 2d 4a ca 30 85 04 f6 dd 0c b0 de b3 c0 52 c8 7e 91 b3 d4 46 e3 b3 81 9b 31 75 40 8f 9c 8a 3c f6 65 a1 1b 2b 95 c3 46 38 34 f1 78 6e 33 2b a6 2d 10 35 b4 c6 49 a6 e2 34 a5 04 ea 65 6a c0 5f d7 4a 1d e2 50 1d 0c 05 e3 72 7b a2 76 e7 d2 eb 67 fe c3 ba 4b 6a 5a 3c 45 36 1e bc d1 ed a9 99 b1 e2 bb 1d 60 bb a4 25 05 d8 53 d2 84 72 97 e9 b0 d3 7a 82 25 26 cd 45 f6 b8 e1 2d 43 9a cc 67 99 82 0e d1 98 30 91 30 f5 90 6f ce b9 49 c1 cd ed 1f 78 6d 3d db 8c 60 b8 af 84 52 68 94 c8 a1 97 36 f6 97 dd 86 d7 78 20 97 10 6a 33 9e 29 b3 f5 e9 da 14 22 25 73 Data Ascii: I4MdMsc7kB6}]{\IkNsj3mb}\|7.GeaT'-J0R~F1u@<e+F84xn3+-5I4ej_JPr{vgKjZ<E6`%Srz%&E-Cg00oIxm=`Rh6x j3)"%s
2024-04-16 15:05:46 UTC	1369	IN	Data Raw: 0c 24 49 38 5e eb c9 d4 87 79 54 7f 44 81 9b dd de d4 10 dd ea 9f 61 60 ce 24 85 d2 7b ca 0c 99 fa ba 72 1e 95 72 a7 c1 c4 78 25 c1 ef 5f 49 f8 ae a9 88 43 d1 eb cf 78 f0 2c 3e 90 0c 1d 29 9c c8 04 77 a7 82 f2 93 11 d0 e4 06 06 43 01 bb fc ad ae 53 5d 7b 56 c6 46 77 c9 29 6c fe a7 69 f7 ab 93 27 5f 72 25 9c 76 3e c1 f4 d5 19 e4 d9 f9 5c 42 58 0f b6 58 9a 39 15 6b f1 7c dc e0 c8 24 2a 40 05 c2 a8 4a 7f 45 f7 39 18 cf 54 55 34 0b cd 7f 15 3a a6 23 4d e3 61 e3 df 17 6d 3d 3b fd e1 f6 63 dc fb fd 84 76 e4 f2 1f fc 8a aa 8d e1 4f fa 91 b9 5e ac bb 17 9d bb ee 53 f1 c2 8c 16 44 0f b9 b4 5c bc 42 8b 28 e2 1a 1e 50 aa 3e 66 4e 4c f6 f3 a2 f7 32 a5 d9 ea 72 ac 18 b7 5e ef 49 a9 e1 26 93 42 f2 82 b5 48 04 d4 5b 08 b4 05 95 d2 67 84 1d e5 31 85 9b ec 6a 1f 41 ed f9 Data Ascii: $I8^yTDa`${rrx%_ICx,>)wCS]{VFw)li'_r%v>\BXX9k\|$*@JE9TU4:#Mam=;cvO^SD\B(P>fNL2r^I&BH[g1jA
2024-04-16 15:05:46 UTC	1369	IN	Data Raw: d0 51 e9 46 13 4b 34 a9 c2 01 7d 0a 4f af 74 f4 5b da ec 41 c9 12 0c c5 39 55 15 34 d7 47 07 d2 28 59 0c 12 8b ac 99 d1 8f 8c 87 a1 fc 23 c2 66 66 fc 7b 15 c8 74 73 0a 73 ce 12 6b cd 3b 27 6e e0 8f 15 61 83 39 2d ca 3b 8d 9b 21 ee d7 8c da 22 78 1a 92 06 2f 16 43 f5 76 df 05 ab 36 66 df ff aa 0c 10 a5 be 43 55 57 70 b6 6c 50 55 1e 7e 7f b5 f1 79 e7 6d d0 8d 7e b1 bf df c5 f9 94 e3 40 8d 61 af 17 04 b3 96 63 ea e6 1c 2f 0c 87 5a 28 d1 cd 70 e6 ed fe dd 24 d0 17 40 2e bc 08 fd 2c d8 45 55 5b a6 46 d4 a2 69 c9 e1 e0 5b 49 bf 6d 7a dd 4c 40 ad 8e 56 09 7c b4 ea 5b c5 59 32 64 e9 37 7d f5 dd cd 44 5e 37 6b 42 9e 12 12 ca 86 2e 67 b1 9c a4 d8 47 ee 21 9d 0e 0a 80 6f 16 bb 37 0b 87 49 e7 c8 e6 3c df c0 a6 d9 27 40 ab 76 b9 23 c1 b7 c0 eb 15 ac 43 5f 1c 5a 7e 40 Data Ascii: QFK4}Ot[A9U4G(Y#ff{tssk;'na9-;!"x/Cv6fCUWplPU~ym~@ac/Z(p$@.,EU[Fi[ImzL@V\|[Y2d7}D^7kB.gG!o7I<'@v#C_Z~@
2024-04-16 15:05:46 UTC	1369	IN	Data Raw: 81 8d 4f 8c 85 34 5c ac ce 29 92 3b 1b 74 87 bb 8f 93 0f 48 1f 1a f3 86 dc bb ea 3d a6 62 e0 6b 9d cb d6 0b a1 cc b4 03 1f 3b af 26 aa d4 23 ab 53 85 e3 bc 7c fc 49 2c 91 a2 f5 3b 4e 4a 1d 68 49 d6 02 cc cb 02 8d fd 57 7a 4a 97 0f db 2b 2c 71 8a c4 ba 31 86 80 1c e4 4f b1 95 f4 fa 6f 3c 2f 48 60 00 bc c6 41 e8 ae d6 7a 83 85 73 05 9e 17 0a 44 38 e4 09 40 0a 9c 00 a7 40 6f 80 de 02 ea 5d e5 00 7e 86 5a 54 41 5b a5 8a 61 00 2f 18 08 00 2e 4f b5 cd 16 e2 8d aa e4 98 70 4a 0f c3 9c 43 ff 41 39 1c 1e 14 d7 eb fd 77 61 d0 3a e7 a3 f7 a8 8b 56 50 c4 fd 4d 37 43 ba 21 e2 ca cd fa 09 5c 6e 81 ba 87 f2 dd 42 99 4e 38 af cf 16 b7 09 52 0d c2 ec 98 54 9a a6 d8 11 40 93 2d ae 62 c5 58 63 a8 72 b4 77 df 03 c2 2c 12 57 18 03 a5 80 92 f5 a1 2b 8b 21 be 68 63 36 42 00 3d Data Ascii: O4\);tH=bk;&#S\|I,;NJhIWzJ+,q1Oo</H`AzsD8@@o]~ZTA[a/.OpJCA9wa:VPM7C!\nBN8RT@-bXcrw,W+!hc6B=
2024-04-16 15:05:46 UTC	1369	IN	Data Raw: 60 cf d1 f0 df 8e c9 9d 72 92 84 80 b8 97 ce 9c 66 b9 78 7b 72 be 5a 1a 66 6c dd 7f 72 6f 8e 9a 6c a4 96 c0 49 3a 65 c7 5f c7 c8 d2 ad 0f 08 c3 3b c9 cd 33 78 8a 26 27 6c fe 96 94 07 3c d9 ad 7e 53 05 f9 e3 fd 42 f6 ea b7 27 e2 ab 27 06 1d 61 16 79 78 09 ff 16 d0 e4 3a 93 fc 12 33 1e de d5 ac ba 16 c2 22 11 cf 3a 3c c7 35 06 d5 86 92 7a 49 72 f1 61 92 b6 5e 0b 58 97 3d f8 e0 36 51 ea 48 c8 0c 01 dd fb fc 28 6a 80 78 b8 71 28 00 10 32 88 10 1f 35 9b 6c da 7f 04 4a d5 b8 d9 4b 08 05 7b 96 a8 c6 1d f2 38 7a 3b 77 54 c2 44 1d b9 98 3a db a5 6a 9f eb d2 2b 52 e7 5a 6d b0 df de 48 d4 0e c6 98 74 2b 9c 7e 71 32 55 8f 6a 16 24 6c f2 84 27 db 2f 46 cd ef 35 77 51 27 7a 45 51 dc 65 fa 74 82 18 53 d1 fc 1a 99 df 77 47 20 d6 85 55 f5 8c 3d e3 a5 53 64 24 6b 9d 78 6d Data Ascii: `rfx{rZflrolI:e_;3x&'l<~SB''ayx:3":<5zIra^X=6QH(jxq(25lJK{8z;wTD:j+RZmHt+~q2Uj$l'/F5wQ'zEQetSwG U=Sd$kxm
2024-04-16 15:05:46 UTC	1369	IN	Data Raw: 13 14 a4 d5 30 a7 0b d9 5e 51 10 43 7c 4a 04 d0 14 f4 db e9 4e e5 79 24 c5 bd 3b ee 90 ae d7 f4 c7 0b d3 3e 7f b1 b2 14 e0 cf 8b af 3a 7b 5a d8 b2 8a 2a 17 2e 4c b1 1d 4c fb be 9f 14 d5 f5 3d fa 74 2a 9d c9 0a 4b 19 2f 5e f7 56 e5 a1 e1 9a db d1 09 06 ba c2 94 b7 df 5d d3 e7 65 f6 a1 0a 7f 35 7e ff 1b be 4f 66 66 43 9c 8f dc f0 ad 3c 8e d0 eb f5 05 3e 87 81 bb 1b 3c e9 61 f8 30 b1 4f 96 62 2f cf 1f 09 f6 f8 aa 38 c6 56 a8 0a d3 44 71 58 e8 37 04 9b 4e 4c 61 cd b2 32 ff 2d 54 bf 47 b2 e3 20 40 60 6a 14 5c 46 c0 68 1f c4 9b be 3b 84 68 ba 83 f2 ed ac 66 93 e7 b7 2d c2 75 9d 92 3f 00 b4 19 0d 78 62 c7 67 99 1f f1 0b 8b 44 42 31 ec 1b 8a 19 25 98 cd 30 af 91 f4 94 0f a7 7d b1 fa 57 d9 86 d4 6a bb c7 24 28 71 57 f6 7e e0 6f 94 82 96 21 fb 21 69 ec be 92 9d df Data Ascii: 0^QC\|JNy$;>:{Z.LL=tK/^V]e5~OffC<><a0Ob/8VDqX7NLa2-TG @`j\Fh;hf-u?xbgDB1%0}Wj$(qW~o!!i
2024-04-16 15:05:46 UTC	1369	IN	Data Raw: 50 ba e8 ec 6e a5 69 be f5 e7 9e 40 96 7a 42 f1 ed 03 1b 0b 08 0e 7f e8 fb 5f 6d b8 51 a7 81 93 00 86 47 69 25 7f 64 6b 07 68 f7 ff 1b cc ee 79 7f 8f b5 2b 5e d8 77 5e 87 c7 83 84 91 19 13 0e be 6a 0e 5d 73 0d cc fd 83 b1 4b dd 1c 93 aa f4 4c e3 fc 27 67 ea e7 04 5f 82 50 2c 26 cb b3 33 43 98 28 15 2b d3 60 f4 90 b6 eb c7 72 e5 55 5a e0 6a d4 b3 57 bf a3 6b 1e 04 02 43 89 8e bb 1d 01 b2 f6 5e f2 87 ca e1 c4 dd a3 76 ca f1 93 3a 4e bf 75 29 48 b2 8a 40 9b 59 62 5a a2 b2 a7 6d 51 b4 c2 e3 82 c6 1b b0 d0 6c ab f5 a9 33 1c ef 3c 73 24 5a 60 18 a5 a1 ce 7a 48 31 d9 4b 8b 66 3d c4 14 cc a7 8c 76 ea 1d 79 d2 7d 41 16 17 70 02 7c ee 4f d6 ae d5 74 f0 2f 89 10 98 de 01 f5 5c 6a b8 a3 74 3a 07 6b 61 53 f5 07 d4 62 c5 7e 34 35 8d f4 78 2e ab d6 e9 7b fa 46 d2 b6 53 Data Ascii: Pni@zB_mQGi%dkhy+^w^j]sKL'g_P,&3C(+`rUZjWkC^v:Nu)H@YbZmQl3<s$Z`zH1Kf=vy}Ap\|Ot/\jt:kaSb~45x.{FS
2024-04-16 15:05:47 UTC	1369	IN	Data Raw: b9 af 74 a3 68 3b fe c1 65 cd e5 61 4d 86 20 aa 8b 95 48 97 23 60 26 f7 02 a3 d0 61 86 84 f5 c8 cc c3 6b ea 93 4e 15 9e e3 b0 04 cb b4 11 3f cb 1e f4 a3 e0 d0 59 b3 ae e3 53 fe c8 29 12 b5 c1 75 1c 2e b6 6a 96 8e f5 b3 9c c0 0c f9 6e 51 67 47 74 07 df 9f 88 ac 7f 28 6f e5 46 c4 6f 0e d3 d3 fa 94 94 32 6f 3f 63 9f 44 8a 80 1d 34 0c 46 a3 d4 f6 8a d4 f5 10 9c 1b e3 1e 7b 38 26 55 ba b0 b2 a9 ab 0d 90 de 4a e2 7e 88 b5 80 e8 18 b7 3e d3 5e e3 0c e5 c8 3d 2d e8 35 78 94 66 01 79 af a1 f3 8e 82 45 e1 24 9f 33 dc 8e 7e ce b4 72 77 0e f9 b8 d8 5c 6d 21 95 e9 b2 23 70 ed 3d ee 99 6f 5f d2 2a d1 a9 4e dd 5d c1 5b 21 5c de 26 9b dc 8a a0 5c c9 03 18 5a 72 3b 05 c8 ca 46 e4 22 ce 66 55 37 c5 22 77 e9 b8 7e f9 70 45 ad 6a 6f 21 3e e2 cc 22 9b 14 5d 1b 88 ac 4d 67 74 Data Ascii: th;eaM H#`&akN?YS)u.jnQgGt(oFo2o?cD4F{8&UJ~>^=-5xfyE$3~rw\m!#p=o_*N][!\&\Zr;F"fU7"w~pEjo!>"]Mgt
2024-04-16 15:05:47 UTC	1369	IN	Data Raw: f6 0a bf 26 45 0e 6c 2f 14 c1 33 57 cb 0f 2f a2 19 79 e8 dc 32 c4 81 35 8c 07 b9 54 4e 20 52 70 1a a9 8a c1 63 bb 6a 2c 85 6d f9 ab ad 2c bf d6 84 d0 18 e5 45 26 4d f4 ee 0e 8a 45 1a 7e 9a fe 32 b3 b3 b6 69 1b 6c 9e 99 26 7d 18 ba c9 18 4c f7 ec 72 7e 32 d4 f8 7a 9e 87 c5 91 05 d7 27 6b 4e a4 99 ab 25 e8 a3 9d 7e 77 4e 16 fd 57 83 85 c2 fc 94 50 56 7d 90 d1 d4 30 2b 3c 3d 88 23 6f 10 07 1b 63 7f 71 7b 2a 65 d8 56 a5 d2 2e 09 b4 ee f7 ef 0f eb b1 f8 86 6e 34 8f e3 f6 be 03 53 cd 24 f4 aa f9 a3 e9 e3 92 6f e8 61 b9 77 de ab e0 1b cc 8c b6 20 01 ca 05 78 26 ad 87 9c 0f ec 0c 5a aa 1b cc 27 ab 05 c6 e9 52 a2 3d 26 ad 3f 03 b1 79 f6 2b 96 fd 2a 17 cd 87 f3 c7 c3 8c 60 ff 48 85 c8 53 10 5f aa 0f a3 b8 3d 63 23 87 2f cc 86 c9 3e ab 04 0e 3b c6 90 85 a7 bc 70 11 Data Ascii: &El/3W/y25TN Rpcj,m,E&ME~2il&}Lr~2z'kN%~wNWPV}0+<=#ocq{eV.n4S$oaw x&Z'R=&?y+`HS_=c#/>;p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.11	49822	142.251.15.91	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:44 UTC	1057	OUT	GET /embed/wAD9uO9YAQw?playlist=wAD9uO9YAQw&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&origin=https%3A%2F%2Fniceindiatravel.com&widgetid=1 HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
2024-04-16 15:05:44 UTC	1592	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 16 Apr 2024 15:05:44 GMT Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Resource-Policy: cross-origin Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9 Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube_main" Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-16 15:05:44 UTC	1592	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 20 64 61 74 61 2d 63 61 73 74 2d 61 70 69 2d 65 6e 61 62 6c 65 64 3d 22 74 72 75 65 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 51 30 39 6d 55 34 7a 4e 42 77 47 7a 43 73 5f 45 68 5a 30 74 44 77 22 3e 69 66 20 28 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 20 7c 7c 20 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 Data Ascii: 8000<!DOCTYPE html><html lang="en" dir="ltr" data-cast-api-enabled="true"><head><meta name="viewport" content="width=device-width, initial-scale=1"><script nonce="Q09mU4zNBwGzCs_EhZ0tDw">if ('undefined' == typeof Symbol \|\| 'undefined' == typeof Symbol.i
2024-04-16 15:05:44 UTC	1592	IN	Data Raw: 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 30 2d 30 32 41 46 2c 55 2b 30 33 30 34 2c 55 2b 30 33 30 38 2c 55 2b 30 33 32 39 2c 55 2b 31 45 30 30 2d 31 45 39 46 2c 55 2b 31 45 46 32 2d 31 45 46 46 2c 55 2b 32 30 32 30 2c 55 2b 32 30 41 30 2d 32 30 41 42 2c 55 2b 32 30 41 44 2d 32 30 43 30 2c 55 2b 32 31 31 33 2c 55 2b 32 43 36 30 2d 32 43 37 46 2c 55 2b 41 37 32 30 2d 41 37 46 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c Data Ascii: t-weight:400;src:url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)format('woff2');unicode-range:U+0100-02AF,U+0304,U+0308,U+0329,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720-A7FF;}@font-face{font-famil
2024-04-16 15:05:44 UTC	1592	IN	Data Raw: 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 32 2d 30 31 30 33 2c 55 2b 30 31 31 30 2d 30 31 31 31 2c 55 2b 30 31 32 38 2d 30 31 32 39 2c 55 2b 30 31 36 38 2d 30 31 36 39 2c 55 2b 30 31 41 30 2d 30 31 41 31 2c 55 2b 30 31 41 46 2d 30 31 42 30 2c 55 2b 30 33 30 30 2d 30 33 30 31 2c 55 2b 30 33 30 33 2d 30 33 30 34 2c 55 2b 30 33 30 38 2d 30 33 30 39 2c 55 2b 30 33 32 33 2c 55 2b 30 33 32 39 2c 55 2b 31 45 41 30 2d 31 45 46 39 2c 55 2b 32 30 41 42 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 Data Ascii: woff2');unicode-range:U+0102-0103,U+0110-0111,U+0128-0129,U+0168-0169,U+01A0-01A1,U+01AF-01B0,U+0300-0301,U+0303-0304,U+0308-0309,U+0323,U+0329,U+1EA0-1EF9,U+20AB;}@font-face{font-family:'Roboto';font-style:normal;font-weight:500;src:url(//fonts.gstatic.c
2024-04-16 15:05:44 UTC	1592	IN	Data Raw: 35 30 25 20 36 35 25 20 6e 6f 2d 72 65 70 65 61 74 3b 7d 2e 70 6c 61 79 65 72 2d 75 6e 61 76 61 69 6c 61 62 6c 65 20 2e 6d 65 73 73 61 67 65 20 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 20 6d 61 72 67 69 6e 3a 20 30 20 2d 35 70 78 20 31 35 70 78 3b 20 70 61 64 64 69 6e 67 3a 20 30 20 35 70 78 20 31 34 70 78 3b 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 38 38 38 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 39 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 7d 2e 70 6c 61 79 65 72 2d 75 6e 61 76 61 69 6c 61 62 6c 65 20 61 20 7b 63 6f 6c 6f 72 3a 20 23 31 36 37 61 63 36 3b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 73 63 72 69 70 74 Data Ascii: 50% 65% no-repeat;}.player-unavailable .message {text-align: left; margin: 0 -5px 15px; padding: 0 5px 14px; border-bottom: 1px solid #888; font-size: 19px; font-weight: normal;}.player-unavailable a {color: #167ac6; text-decoration: none;}</style><script
2024-04-16 15:05:44 UTC	1592	IN	Data Raw: 6c 29 3b 76 61 72 20 69 73 50 72 65 72 65 6e 64 65 72 3d 28 64 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 7c 7c 64 2e 77 65 62 6b 69 74 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 29 3d 3d 22 70 72 65 72 65 6e 64 65 72 22 3b 76 61 72 20 76 4e 61 6d 65 3d 21 64 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 26 26 64 2e 77 65 62 6b 69 74 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 22 77 65 62 6b 69 74 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 3a 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 3b 69 66 28 69 73 50 72 65 72 65 6e 64 65 72 29 7b 76 61 72 20 73 74 61 72 74 54 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 79 74 63 73 69 2e 73 65 74 53 74 61 72 74 28 29 3b 64 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 Data Ascii: l);var isPrerender=(d.visibilityState\|\|d.webkitVisibilityState)=="prerender";var vName=!d.visibilityState&&d.webkitVisibilityState?"webkitvisibilitychange":"visibilitychange";if(isPrerender){var startTick=function(){ytcsi.setStart();d.removeEventListener(
2024-04-16 15:05:44 UTC	1592	IN	Data Raw: 6f 70 79 5f 6c 6f 67 69 6e 5f 69 6e 66 6f 5f 74 6f 5f 73 74 5f 63 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 63 73 69 5f 63 6f 6e 66 69 67 5f 68 61 6e 64 6c 69 6e 67 5f 69 6e 66 72 61 22 3a 74 72 75 65 2c 22 63 73 69 5f 6f 6e 5f 67 65 6c 22 3a 74 72 75 65 2c 22 64 65 70 72 65 63 61 74 65 5f 63 73 69 5f 68 61 73 5f 69 6e 66 6f 22 3a 74 72 75 65 2c 22 64 65 70 72 65 63 61 74 65 5f 70 61 69 72 5f 73 65 72 76 6c 65 74 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 6f 70 5f 63 6c 69 65 6e 74 5f 72 65 6c 65 61 73 65 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 6f 70 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 68 69 67 68 5f 70 72 69 6f 72 69 74 79 5f 69 67 6e 6f 72 65 5f 70 75 73 68 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 6f 70 5f 6e 6f 74 69 66 69 63 61 74 Data Ascii: opy_login_info_to_st_cookie":true,"csi_config_handling_infra":true,"csi_on_gel":true,"deprecate_csi_has_info":true,"deprecate_pair_servlet_enabled":true,"desktop_client_release":true,"desktop_notification_high_priority_ignore_push":true,"desktop_notificat
2024-04-16 15:05:44 UTC	1592	IN	Data Raw: 75 65 2c 22 65 6e 61 62 6c 65 5f 70 6f 70 75 6c 61 74 65 5f 61 74 74 5f 70 73 64 5f 69 6e 5f 61 62 65 5f 66 65 65 64 62 61 63 6b 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 70 6f 70 75 6c 61 74 65 5f 70 73 64 5f 69 6e 5f 61 62 65 5f 66 65 65 64 62 61 63 6b 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 72 65 73 70 65 63 74 5f 6c 61 6e 67 5f 64 69 72 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 64 66 5f 6d 69 64 72 6f 6c 6c 5f 70 6f 73 74 72 6f 6c 6c 5f 70 6c 61 79 65 72 5f 62 79 74 65 73 5f 76 69 64 65 6f 5f 68 35 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 64 66 5f 70 72 65 72 6f 6c 6c 5f 70 6c 61 79 65 72 5f 62 79 74 65 73 5f 76 69 64 65 6f 5f 68 35 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 64 66 5f 70 72 65 72 6f 6c 6c 5f 70 6c 61 79 65 72 Data Ascii: ue,"enable_populate_att_psd_in_abe_feedback":true,"enable_populate_psd_in_abe_feedback":true,"enable_respect_lang_dir":true,"enable_sdf_midroll_postroll_player_bytes_video_h5":true,"enable_sdf_preroll_player_bytes_video_h5":true,"enable_sdf_preroll_player
2024-04-16 15:05:44 UTC	1592	IN	Data Raw: 65 61 73 65 64 5f 6d 69 6e 5f 68 65 69 67 68 74 22 3a 74 72 75 65 2c 22 6c 6f 67 5f 65 72 72 6f 72 73 5f 74 68 72 6f 75 67 68 5f 6e 77 6c 5f 6f 6e 5f 72 65 74 72 79 22 3a 74 72 75 65 2c 22 6c 6f 67 5f 76 69 73 5f 6f 6e 5f 74 61 62 5f 63 68 61 6e 67 65 22 3a 74 72 75 65 2c 22 6c 6f 67 5f 77 65 62 5f 65 6e 64 70 6f 69 6e 74 5f 74 6f 5f 6c 61 79 65 72 22 3a 74 72 75 65 2c 22 6d 64 78 5f 65 6e 61 62 6c 65 5f 70 72 69 76 61 63 79 5f 64 69 73 63 6c 6f 73 75 72 65 5f 75 69 22 3a 74 72 75 65 2c 22 6d 64 78 5f 6c 6f 61 64 5f 63 61 73 74 5f 61 70 69 5f 62 6f 6f 74 73 74 72 61 70 5f 73 63 72 69 70 74 22 3a 74 72 75 65 2c 22 6d 69 67 72 61 74 65 5f 65 76 65 6e 74 73 5f 74 6f 5f 74 73 22 3a 74 72 75 65 2c 22 6d 69 67 72 61 74 65 5f 72 65 6d 61 69 6e 69 6e 67 5f 77 65 Data Ascii: eased_min_height":true,"log_errors_through_nwl_on_retry":true,"log_vis_on_tab_change":true,"log_web_endpoint_to_layer":true,"mdx_enable_privacy_disclosure_ui":true,"mdx_load_cast_api_bootstrap_script":true,"migrate_events_to_ts":true,"migrate_remaining_we
2024-04-16 15:05:44 UTC	1592	IN	Data Raw: 69 6d 65 5f 6d 73 5f 68 65 61 64 65 72 22 3a 74 72 75 65 2c 22 75 73 65 5f 73 65 73 73 69 6f 6e 5f 62 61 73 65 64 5f 73 61 6d 70 6c 69 6e 67 22 3a 74 72 75 65 2c 22 75 73 65 5f 74 73 5f 76 69 73 69 62 69 6c 69 74 79 6c 6f 67 67 65 72 22 3a 74 72 75 65 2c 22 75 73 65 5f 77 61 74 63 68 5f 66 72 61 67 6d 65 6e 74 73 32 22 3a 74 72 75 65 2c 22 76 73 73 5f 66 69 6e 61 6c 5f 70 69 6e 67 5f 73 65 6e 64 5f 61 6e 64 5f 77 72 69 74 65 22 3a 74 72 75 65 2c 22 76 73 73 5f 70 6c 61 79 62 61 63 6b 5f 75 73 65 5f 73 65 6e 64 5f 61 6e 64 5f 77 72 69 74 65 22 3a 74 72 75 65 2c 22 77 61 72 6d 5f 6c 6f 61 64 5f 6e 61 76 5f 73 74 61 72 74 5f 77 65 62 22 3a 74 72 75 65 2c 22 77 65 62 5f 61 6c 77 61 79 73 5f 6c 6f 61 64 5f 63 68 61 74 5f 73 75 70 70 6f 72 74 22 3a 74 72 75 65 Data Ascii: ime_ms_header":true,"use_session_based_sampling":true,"use_ts_visibilitylogger":true,"use_watch_fragments2":true,"vss_final_ping_send_and_write":true,"vss_playback_use_send_and_write":true,"warm_load_nav_start_web":true,"web_always_load_chat_support":true
2024-04-16 15:05:44 UTC	1592	IN	Data Raw: 72 65 66 65 74 63 68 5f 77 69 6e 64 6f 77 5f 73 65 63 5f 66 6f 72 5f 6c 69 76 65 73 74 72 65 61 6d 5f 6f 70 74 69 6d 69 7a 61 74 69 6f 6e 22 3a 31 30 2c 22 6d 69 6e 5f 70 72 65 66 65 74 63 68 5f 6f 66 66 73 65 74 5f 73 65 63 5f 66 6f 72 5f 6c 69 76 65 73 74 72 65 61 6d 5f 6f 70 74 69 6d 69 7a 61 74 69 6f 6e 22 3a 32 30 2c 22 6e 65 74 77 6f 72 6b 5f 70 6f 6c 6c 69 6e 67 5f 69 6e 74 65 72 76 61 6c 22 3a 33 30 30 30 30 2c 22 70 72 65 66 65 74 63 68 5f 63 6f 6d 6d 65 6e 74 73 5f 6d 73 5f 61 66 74 65 72 5f 76 69 64 65 6f 22 3a 30 2c 22 73 65 6e 64 5f 63 6f 6e 66 69 67 5f 68 61 73 68 5f 74 69 6d 65 72 22 3a 30 2c 22 73 65 72 76 69 63 65 5f 77 6f 72 6b 65 72 5f 70 75 73 68 5f 6c 6f 67 67 65 64 5f 6f 75 74 5f 70 72 6f 6d 70 74 5f 77 61 74 63 68 65 73 22 3a 2d 31 Data Ascii: refetch_window_sec_for_livestream_optimization":10,"min_prefetch_offset_sec_for_livestream_optimization":20,"network_polling_interval":30000,"prefetch_comments_ms_after_video":0,"send_config_hash_timer":0,"service_worker_push_logged_out_prompt_watches":-1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.11	49823	142.251.15.91	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:44 UTC	937	OUT	GET /s/player/7ebf4817/www-player.css HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.youtube.com/embed/wAD9uO9YAQw?playlist=wAD9uO9YAQw&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&origin=https%3A%2F%2Fniceindiatravel.com&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
2024-04-16 15:05:44 UTC	682	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 381266 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 10 Apr 2024 18:19:34 GMT Expires: Thu, 10 Apr 2025 18:19:34 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 10 Apr 2024 04:18:25 GMT Content-Type: text/css Vary: Accept-Encoding, Origin Age: 506770 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 15:05:44 UTC	573	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7a 2d 69 6e 64 65 78 3a 30 3b 6f 75 74 6c 69 6e 65 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 59 6f 75 54 75 62 65 20 4e 6f 74 6f 22 2c 52 6f 62 6f 74 6f 2c 41 72 69 61 6c 2c 48 65 6c 76 65 74 69 63 61 2c 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 65 65 65 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 3b 2d 77 65 62 6b 69 74 2d Data Ascii: @charset "UTF-8";.html5-video-player{position:relative;width:100%;height:100%;overflow:hidden;z-index:0;outline:0;font-family:"YouTube Noto",Roboto,Arial,Helvetica,sans-serif;color:#eee;text-align:left;direction:ltr;font-size:11px;line-height:1.3;-webkit-
2024-04-16 15:05:44 UTC	1255	IN	Data Raw: 64 65 6f 2d 6d 61 73 74 68 65 61 64 2d 61 64 2d 70 72 69 6d 61 72 79 2d 76 69 64 65 6f 2d 72 65 6e 64 65 72 65 72 20 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 3a 6e 6f 74 28 2e 79 74 70 2d 74 72 61 6e 73 70 61 72 65 6e 74 29 2c 2e 79 74 64 2d 76 69 64 65 6f 2d 6d 61 73 74 68 65 61 64 2d 61 64 2d 70 72 69 6d 61 72 79 2d 76 69 64 65 6f 2d 72 65 6e 64 65 72 65 72 20 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 2e 75 6e 73 74 61 72 74 65 64 2d 6d 6f 64 65 2c 2e 79 74 64 2d 76 69 64 65 6f 2d 6d 61 73 74 68 65 61 64 2d 61 64 2d 70 72 69 6d 61 72 79 2d 76 69 64 65 6f 2d 72 65 6e 64 65 72 65 72 20 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 2e 61 64 2d 73 68 6f 77 69 6e 67 2c 2e 79 74 64 2d 76 69 64 65 6f 2d 6d 61 73 74 68 Data Ascii: deo-masthead-ad-primary-video-renderer .html5-video-player:not(.ytp-transparent),.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.unstarted-mode,.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.ad-showing,.ytd-video-masth
2024-04-16 15:05:44 UTC	1255	IN	Data Raw: 6d 62 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 38 65 38 65 38 65 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 34 32 34 32 34 32 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 7d 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 65 3a 6e 6f 74 28 2e 79 74 70 2d 74 6f 75 63 68 2d 6d 6f 64 65 29 20 3a 3a 2d 77 65 62 6b 69 74 2d 73 63 72 6f 6c 6c 62 61 72 2d 74 68 75 6d 62 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 38 70 78 7d 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 63 6f 6e 74 61 69 6e 65 72 7b 7a 2d 69 6e 64 65 78 3a 31 30 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 79 74 70 2d 65 6d 62 65 64 2d 65 72 72 6f 72 20 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 63 6f 6e 74 61 69 6e 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d Data Ascii: mb{background-color:#8e8e8e;border:1px solid #424242;border-radius:5px}.ytp-big-mode:not(.ytp-touch-mode) ::-webkit-scrollbar-thumb{border-radius:8px}.html5-video-container{z-index:10;position:relative}.ytp-embed-error .html5-video-container{display:none}
2024-04-16 15:05:44 UTC	1255	IN	Data Raw: 72 61 6e 73 69 74 69 6f 6e 3a 62 6f 74 74 6f 6d 20 2e 32 35 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2c 30 2c 2e 32 2c 31 29 2c 74 6f 70 20 2e 32 35 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2c 30 2c 2e 32 2c 31 29 7d 2e 79 74 70 2d 73 6d 61 6c 6c 2d 6d 6f 64 65 20 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 7b 62 6f 74 74 6f 6d 3a 34 39 70 78 7d 2e 79 74 70 2d 65 6d 62 65 64 20 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 7b 62 6f 74 74 6f 6d 3a 35 33 70 78 7d 2e 79 74 70 2d 65 6d 62 65 64 3a 6e 6f 74 28 2e 61 64 2d 73 68 6f 77 69 6e 67 29 20 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 3a 6e 6f 74 28 2e 79 74 70 2d 75 70 6e 65 78 74 29 7b 74 6f 70 3a 36 30 70 78 7d 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 65 Data Ascii: ransition:bottom .25s cubic-bezier(0,0,.2,1),top .25s cubic-bezier(0,0,.2,1)}.ytp-small-mode .ytp-player-content{bottom:49px}.ytp-embed .ytp-player-content{bottom:53px}.ytp-embed:not(.ad-showing) .ytp-player-content:not(.ytp-upnext){top:60px}.ytp-big-mode
2024-04-16 15:05:44 UTC	1255	IN	Data Raw: 74 28 2e 79 74 70 2d 61 64 2d 6f 76 65 72 6c 61 79 2d 6f 70 65 6e 29 20 2e 79 74 70 2d 69 76 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 2c 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 65 2e 79 74 70 2d 68 69 64 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 69 76 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 7b 62 6f 74 74 6f 6d 3a 32 34 70 78 7d 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 65 2e 79 74 70 2d 61 64 2d 6f 76 65 72 6c 61 79 2d 6f 70 65 6e 20 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 7b 62 6f 74 74 6f 6d 3a 31 36 30 70 78 7d 2e 79 74 70 2d 62 75 74 74 6f 6e 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 70 61 64 64 69 6e 67 3a 30 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 Data Ascii: t(.ytp-ad-overlay-open) .ytp-iv-player-content,.ytp-big-mode.ytp-hide-controls .ytp-iv-player-content{bottom:24px}.ytp-big-mode.ytp-ad-overlay-open .ytp-player-content{bottom:160px}.ytp-button{border:none;background-color:transparent;padding:0;color:inher
2024-04-16 15:05:44 UTC	1255	IN	Data Raw: 6f 6e 3a 63 6f 6c 75 6d 6e 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 72 69 67 68 74 3a 30 7d 2e 79 74 70 2d 67 76 6e 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 74 6f 70 2c 2e 79 74 70 2d 67 76 6e 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 65 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 74 6f 70 7b 74 6f 70 3a 32 30 70 78 7d 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 62 6f 74 74 6f 6d 7b 62 6f 74 74 6f 6d 3a 30 3b 68 65 69 67 68 74 3a 34 38 70 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 7a 2d 69 6e 64 65 78 3a 35 39 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 33 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 7d 2e 79 74 70 2d 73 6d 61 6c 6c 2d 6d 6f 64 65 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 62 6f 74 74 6f 6d 7b Data Ascii: on:column;flex-direction:column;right:0}.ytp-gvn .ytp-chrome-top,.ytp-gvn.ytp-big-mode .ytp-chrome-top{top:20px}.ytp-chrome-bottom{bottom:0;height:48px;width:100%;z-index:59;padding-top:3px;text-align:left;direction:ltr}.ytp-small-mode .ytp-chrome-bottom{
2024-04-16 15:05:44 UTC	1255	IN	Data Raw: 3a 30 7d 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 2e 79 74 70 2d 6d 69 6e 69 70 6c 61 79 65 72 2d 62 75 74 74 6f 6e 2c 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 2e 79 74 70 2d 72 65 6d 6f 74 65 2d 62 75 74 74 6f 6e 7b 70 61 64 64 69 6e 67 3a 30 20 34 70 78 7d 2e 79 74 70 2d 65 6d 62 65 64 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 2c 2e 79 74 70 2d 65 6d 62 65 64 20 2e 79 74 70 2d 72 65 70 6c 61 79 2d 62 75 74 74 6f 6e 7b 77 69 64 74 68 3a 34 30 70 78 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 79 74 70 2d 65 6d 62 65 64 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d Data Ascii: :0}.ytp-chrome-controls .ytp-button.ytp-miniplayer-button,.ytp-chrome-controls .ytp-button.ytp-remote-button{padding:0 4px}.ytp-embed .ytp-chrome-controls .ytp-button,.ytp-embed .ytp-replay-button{width:40px;padding:0}.ytp-embed .ytp-chrome-controls .ytp-
2024-04-16 15:05:44 UTC	1255	IN	Data Raw: 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 35 70 78 3b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 2d 31 32 70 78 7d 2e 79 74 70 2d 66 75 6c 6c 73 63 72 65 65 6e 2d 62 75 74 74 6f 6e 3a 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 32 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 35 70 78 3b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 31 30 30 25 7d 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 65 20 2e 79 74 70 2d 70 72 65 76 2d 62 75 74 74 6f 6e 3a 3a 62 65 66 6f 72 65 2c 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 65 20 2e 79 74 70 2d 70 6c 61 79 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 79 74 70 2d 70 6c 61 79 2d 62 75 74 74 6f 6e 2d 70 6c 61 79 6c 69 73 74 29 3a 3a 62 65 66 6f 72 Data Ascii: absolute;top:5px;bottom:0;left:-12px}.ytp-fullscreen-button::after{content:"";display:block;width:12px;position:absolute;top:5px;bottom:0;left:100%}.ytp-big-mode .ytp-prev-button::before,.ytp-big-mode .ytp-play-button:not(.ytp-play-button-playlist)::befor
2024-04-16 15:05:44 UTC	1255	IN	Data Raw: 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 70 72 65 73 73 65 64 5d 3a 61 66 74 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 79 74 2d 73 70 65 63 2d 72 65 64 2d 69 6e 64 69 63 61 74 6f 72 2c 23 66 66 61 35 30 30 29 7d 2e 79 74 70 2d 73 6d 61 6c 6c 2d 6d 6f 64 65 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 70 72 65 73 73 65 64 5d 3a 61 66 74 65 72 7b 6c 65 66 74 3a 31 38 70 78 3b 62 6f 74 74 6f 6d 3a 36 70 78 7d 2e 79 74 70 2d 65 6d 62 65 64 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 70 72 65 73 73 65 64 5d 3a 61 66 74 65 72 Data Ascii: chrome-controls .ytp-button[aria-pressed]:after{background-color:var(--yt-spec-red-indicator,#ffa500)}.ytp-small-mode .ytp-chrome-controls .ytp-button[aria-pressed]:after{left:18px;bottom:6px}.ytp-embed .ytp-chrome-controls .ytp-button[aria-pressed]:after
2024-04-16 15:05:44 UTC	1255	IN	Data Raw: 61 72 69 61 2d 70 72 65 73 73 65 64 5d 3a 61 66 74 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 64 64 7d 2e 79 74 70 2d 63 6f 6c 6f 72 2d 70 61 72 74 79 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 70 72 65 73 73 65 64 5d 3a 61 66 74 65 72 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 79 74 70 2d 70 61 72 74 79 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 2e 31 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 61 6e 69 6d 61 74 69 6f 6e 3a 79 74 70 2d 70 61 72 74 79 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 2e 31 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 7d 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 74 6f 70 2d 62 75 74 74 6f Data Ascii: aria-pressed]:after{background-color:#ddd}.ytp-color-party .ytp-chrome-controls .ytp-button[aria-pressed]:after{-webkit-animation:ytp-party-background-color .1s linear infinite;animation:ytp-party-background-color .1s linear infinite}.ytp-chrome-top-butto

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.11	49824	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:45 UTC	625	OUT	GET /wp-content/uploads/2018/10/testimonial.jpg HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:48 UTC	393	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:48 GMT Content-Type: image/webp Content-Length: 124806 Connection: close Cache-Control: public, max-age=31536000 X-Hcdn-Image-Optimizer: f:webp q:85 w:1600 alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 42e3b3a3bf988b2aee4091a448f6314c-asc-edge6 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 3.385 Accept-Ranges: bytes
2024-04-16 15:05:48 UTC	976	IN	Data Raw: 52 49 46 46 7e e7 01 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 3f 06 00 2a 04 00 56 50 38 20 da e6 01 00 70 81 08 9d 01 2a 40 06 2b 04 3e 51 28 90 46 23 a2 a1 a7 a3 72 99 a0 f0 0a 09 67 6e 6e ff cc b7 b4 15 bb 57 11 f0 2d fd 46 f8 3b ff 47 88 ff b1 fd c6 e1 f7 df 0f 0e 9e cc 6e 17 f7 47 d8 17 cb bb f9 be 6a fe d3 74 58 f4 50 fa 9f a8 8f fd 7e 57 7e db f5 29 96 51 af 3b 46 ef 7d 6f fc de 89 3c b3 ea c6 7f ff cb f9 97 ff 77 95 9e f9 ff 97 ce f3 d9 fb e9 ff e4 f5 c1 fd 67 fe 2f b0 c7 f5 8e 90 bf be 1e ab 7c e0 7d 3c ff 8a f5 12 ff 27 d5 2b fe 8f d5 0f ce 5f d6 43 fc 3f 48 07 ff bf 6d af e0 1f ff fa df fd 37 c9 2f cf ff c0 ff b7 e2 0f e8 3e 93 be d0 5f d2 e5 ef de 7f dc f3 4b f0 06 77 bf d0 f1 0f f6 2f ee 7d 05 3d dd ff 2b f3 47 e1 be 25 1d d4 fd 6f Data Ascii: RIFF~WEBPVP8X?VP8 p@+>Q(F#rgnnW-F;GnGjtXP~W~)Q;F}o<wg/\|}<'+_C?Hm7/>_Kw/}=+G%o
2024-04-16 15:05:48 UTC	1369	IN	Data Raw: f7 79 c5 a3 a7 7a bb f2 60 d1 60 20 0f 68 25 56 ad 0b d1 66 58 d8 b6 88 d1 66 e8 aa 9d e4 14 61 93 07 88 6b 06 63 8a cc 2d 60 ca a2 62 18 6f 98 eb 6f 24 81 d8 52 52 fb 96 e1 07 4a ee 88 7f 5e e0 c0 12 46 02 04 27 a3 0e 1f 9a 43 a9 be c3 ff 55 77 03 d3 07 dc ef 23 54 55 f6 12 55 1e 0f c3 ab ec 9b 0b c9 d3 ce a0 fc 26 c2 87 4f 80 61 8a 01 a1 8a 15 25 2e fa c4 a9 fb 7f 77 c4 8c 0c d2 83 09 b2 c5 68 75 4c 53 a8 f8 9b 9f 0d 0a 2f 34 a3 b6 14 8c 67 d2 f7 6d ed 77 d2 d8 ac 3e c9 f5 bd 81 8d a5 18 2b d1 24 9c 11 1f 6d 25 17 89 a0 21 3b 29 d4 2e 14 21 b7 01 56 c6 92 6f 51 f4 4e e6 de 43 07 43 ec c8 8d b6 ce 8e 54 9e 2f 9f f7 54 b1 38 4a e5 41 8c d6 85 18 26 92 53 58 b2 c5 80 77 7f a7 e8 32 ae 1d 19 1f cc 38 8c 70 6b 06 c0 3d 39 f6 18 56 5a 04 b3 4d 77 d8 48 08 fd Data Ascii: yz`` h%VfXfakc-`boo$RRJ^F'CUw#TUU&Oa%.whuLS/4gmw>+$m%!;).!VoQNCCT/T8JA&SXw28pk=9VZMwH
2024-04-16 15:05:48 UTC	1369	IN	Data Raw: dd 62 0a 54 9b cd 29 05 a0 91 bb 69 38 a1 19 7e c1 70 0b 7f 84 ee da 5e 75 52 d0 b5 7e a8 12 5e 33 3c 11 95 a1 66 ca 06 81 d2 31 36 ae 4a de c4 71 9c e8 20 31 c3 a0 8f e7 83 96 17 96 0c 0c 4d 67 4e 23 c6 5f 76 58 e9 4b 76 8d cb 3c 42 3e 6a 2e d1 1e 61 b9 bc 7e 70 b2 19 02 ad 53 cd b5 54 5e 93 b4 04 b4 68 f5 ec a2 83 e9 95 b6 d3 dc de 20 32 29 38 ce 4b fa 62 2a 9c b6 f7 67 e6 70 9f 0b 0c 3e f8 60 2c 5c 33 c5 41 92 68 3d 07 97 97 8a 04 98 9c 30 72 ee b3 90 51 fe de 2b 9c 4e 5b 4c 5d f7 41 15 dc 05 91 49 65 1a 0b 4b 98 fc 5f c6 58 d0 86 0f af 5e 98 62 02 cb a4 b9 9f bc 39 c3 2e a8 58 ca 65 7e ac 81 a1 4f 04 32 04 5d 10 4f d8 44 53 0d 16 86 7b 91 4c bc 43 2f ac 5d cc 0e 31 08 fa 1c 73 04 2b fe d2 9b 02 b3 3d 5e ad 9e 8b 0c b5 67 bd 09 10 c9 05 c1 1e 4d c6 52 Data Ascii: bT)i8~p^uR~^3<f16Jq 1MgN#_vXKv<B>j.a~pST^h 2)8Kb*gp>`,\3Ah=0rQ+N[L]AIeK_X^b9.Xe~O2]ODS{LC/]1s+=^gMR
2024-04-16 15:05:48 UTC	1369	IN	Data Raw: 03 56 97 34 3a 80 e4 3f 6c fc ad 88 d4 1a 14 3f 42 30 66 60 c9 d4 bb 26 b3 9c 77 31 4c 90 19 81 c0 6b 2b ae ae e2 1f 3b 0b f2 dc 18 15 03 20 2a 6b 91 3a b7 be 21 87 c1 95 fb 39 cd 2e 4f e0 48 f6 aa b7 fb c7 96 a7 9c 62 07 df 90 a6 3d 6a 26 b5 85 33 ef 9f 8f 29 39 66 6a 4f ca fe b8 6e 1e fc ad 04 68 b8 18 4a 74 37 09 b0 cf 3b 46 8a 9e c4 f8 b5 38 7d 65 51 b9 f8 4f 14 e6 12 26 b1 9b 37 2a f8 e7 2a 08 35 fe b4 f1 a1 10 b4 ce 14 f9 a5 22 5a ef 80 f4 be 4e 77 ae d0 4e 7c 9e 6c 48 92 35 f5 2b ab 4f f8 73 fc ce 7b 8a 61 9e ac 83 4a 3e 9b 12 76 cf 89 e2 e6 79 80 1d 58 ee 52 a2 9d e2 3e cc 4d 9d 18 29 8d 30 9d 5a bd 7a 2b 9e 55 62 ae e5 a8 11 87 4f a6 96 6b be 4d 8e d0 83 f1 a5 9d 55 7a 53 2d 4b b4 89 1d d1 6a f7 b4 c7 1c cb 7f fe a5 54 56 b8 26 ce 8c 81 da 7d 8a Data Ascii: V4:?l?B0f`&w1Lk+; k:!9.OHb=j&3)9fjOnhJt7;F8}eQO&7*5"ZNwN\|lH5+Os{aJ>vyXR>M)0Zz+UbOkMUzS-KjTV&}
2024-04-16 15:05:48 UTC	1369	IN	Data Raw: de 96 18 01 04 b5 d2 f2 88 de a3 34 2b 83 21 72 51 9e 45 f4 4c d5 4f 82 78 f6 f5 ce 3f a2 b0 8f c7 bf 3b 5d 78 fa 91 b5 20 46 2c d0 1f 3b 96 1c ff b0 8a 2e 26 e2 0e c4 61 79 24 8f 2f 0d 31 c3 f7 93 01 15 2f 6e e0 44 aa 86 d6 8b 1a 10 f9 6f f4 52 d6 dc 80 42 25 aa fe 11 ca 47 db a9 51 20 6e 3c e5 09 19 1d 10 e8 2c 37 ea cd f0 f6 2f 67 b2 13 5f bb b6 ff 5b e4 e4 77 93 77 bb 88 af 0f 2c be c5 aa 09 b0 7d 8c d0 d8 48 34 eb a6 75 7c 17 5d 0c 7d b3 9f 11 92 49 c8 4b 88 4c 84 0d 24 d8 5e 26 d8 58 fb 80 da bd 28 f8 d4 d5 9f 2d 89 e7 95 64 9a ee 9b 79 d5 97 cf da bc b6 58 91 66 dd f8 1d 18 b9 55 7f a2 75 4c 9a 84 e9 61 d6 08 c2 0e a6 55 d0 02 e0 37 62 a9 c9 a4 75 85 26 2f 51 61 f3 cf 66 67 21 18 f4 1a d1 7e 4f 97 29 3f 9d 25 03 2b cd e7 11 39 bd e3 fb f9 06 c3 b9 Data Ascii: 4+!rQELOx?;]x F,;.&ay$/1/nDoRB%GQ n<,7/g_[ww,}H4u\|]}IKL$^&X(-dyXfUuLaU7bu&/Qafg!~O)?%+9
2024-04-16 15:05:48 UTC	1369	IN	Data Raw: 42 44 46 7b 92 26 a6 e2 36 af 18 46 48 05 0b 21 b4 02 cc 59 e1 99 1e 0c 8a f7 e7 20 c3 03 fd 66 f5 ad 06 3e 5c 11 93 f3 55 af d8 95 b5 a8 e3 ec 1d 1b 79 95 6c 66 e5 3c 86 7e f8 21 87 2a a1 7d f4 10 48 55 31 40 08 e4 5d f6 95 ea a2 6b e2 5b 6b ae 50 a6 b3 ad 96 ad 53 2b 5f 0b bf ae 39 db 48 55 9d e3 bb 3a 98 e1 c4 11 b2 e8 9e 54 97 04 06 c5 39 e8 7b c6 f7 9e c4 b0 4c 84 f9 24 58 46 5a ef 96 f1 94 f1 13 64 79 0f 94 36 7b 23 69 84 af 0b 17 02 06 bb af e1 5f 35 e0 cc 67 ac 5b 0e 82 d6 72 ec 88 26 94 ad 0b b1 27 18 3b b1 42 fb 3a c4 18 e2 20 88 9f 52 c3 17 11 5d b3 28 b3 ac 09 82 e4 d0 51 80 18 3f eb 4d 2d a9 b1 c2 2d 2d 0b a2 5c 05 bd f1 43 3a 87 89 93 5f 54 f5 88 c9 b6 26 1c df cf 83 59 10 7d 98 22 e5 ed 44 fb 5b c5 28 d4 7d 2c 3b 6a f6 4a 90 2f c1 4b c4 ba Data Ascii: BDF{&6FH!Y f>\Uylf<~!*}HU1@]k[kPS+_9HU:T9{L$XFZdy6{#i_5g[r&';B: R](Q?M---\C:_T&Y}"D[(},;jJ/K
2024-04-16 15:05:48 UTC	1369	IN	Data Raw: ba 84 57 8c 64 af 59 62 b5 93 a1 31 81 2d 4a 05 52 18 64 98 85 f2 f3 8a f4 f6 43 60 69 66 0d d4 fd e0 34 32 3e ab 93 33 3c 4d cf 22 1f ae 20 83 e8 6e 9e af f8 58 63 03 bc 84 2d 83 63 ef c4 a1 c3 92 4a b8 c3 cc 62 ad d8 56 60 27 55 59 75 9f 38 c0 33 9b e2 4d 5e 33 23 42 21 2b 7a 2c 3d 06 85 27 e7 f4 7b b6 9b 2e 0f 63 c3 03 e1 fe 3c 3b 12 3b cf 33 d8 90 fb 61 4a 23 76 c7 b5 59 ff f7 58 0d 14 7d d7 3c 25 d6 b7 70 30 f4 3c d2 d8 2b fa 61 1f f5 b4 59 0e 50 64 0e e3 e1 69 e8 b6 77 d1 29 89 24 43 b9 0f 05 c4 05 6e 60 fb c5 7e 41 05 6a 1e 55 6c 15 03 bb 69 f7 f6 3f d9 f9 8a 79 0d fd 90 5f b4 39 23 4c 17 95 99 35 8d 87 85 e9 f0 7d 1d 5e 2f d6 41 f7 b4 03 ac a0 4d c5 58 7d 02 e1 f1 48 7a 55 d3 6e 0c 76 a1 14 ce 98 70 2a 69 28 7e 12 54 c7 7f e6 9d ca cc 55 b7 3d ee Data Ascii: WdYb1-JRdC`if42>3<M" nXc-cJbV`'UYu83M^3#B!+z,='{.c<;;3aJ#vYX}<%p0<+aYPdiw)$Cn`~AjUli?y_9#L5}^/AMX}HzUnvp*i(~TU=
2024-04-16 15:05:49 UTC	1369	IN	Data Raw: 2b 02 93 39 4f af 34 a4 1a b5 75 27 6a e4 23 fe ef 30 be 0d f3 c8 11 ee f9 3c 18 52 4e 5f d4 1a ba 53 d1 64 19 f3 92 68 ca 0a 06 e3 dc 26 c7 4d 5b 31 01 12 cb 3b df 80 81 8f c0 30 6e 6c 32 90 ac 39 59 99 cb 86 2e 6d 20 ee a0 b9 08 16 2c 24 de 22 60 eb 31 d1 cc 98 33 af 38 a4 68 3a 60 39 d1 40 74 b4 df 7a 25 2b 32 df 4a 7d a7 f3 33 46 5f c3 27 b8 48 1a 11 fc 09 24 7c 11 d3 02 d4 ba c8 86 84 27 9b 6e 9c 3b 58 aa 87 8a 98 29 3b b2 b2 06 ef 7d 01 5b 06 15 95 22 07 63 c4 b9 f2 2a 04 b1 df 87 4c de 9e 8d 5e bb b9 b5 5a 55 ec c2 12 ba 63 63 25 ac 41 2e 62 e4 60 2f 02 65 5f 94 85 0d b9 9a fe 2f bf e9 79 c1 05 37 5d 44 f5 29 1f e4 7b 63 36 71 33 5e b5 c5 cf 1f d1 28 09 94 da e1 c0 da 9d dc ef 5b 78 da f5 ea 12 3a b7 37 07 46 86 9a db bc 65 aa f7 5c 41 a6 4e c6 f3 Data Ascii: +9O4u'j#0<RN_Sdh&M[1;0nl29Y.m ,$"`138h:`9@tz%+2J}3F_'H$\|'n;X);}["c*L^ZUcc%A.b`/e_/y7]D){c6q3^([x:7Fe\AN
2024-04-16 15:05:49 UTC	1369	IN	Data Raw: a5 3e f3 2e f2 0b a4 e5 f1 8d c8 25 1e da ae f0 9c 8f d2 b7 52 6b 86 c2 44 68 53 f8 fc c9 06 1a 67 a7 99 80 cd 09 fe 5f f3 d1 44 ad 55 0a 32 f2 41 bd 27 28 62 88 0a ae ec c3 ef b9 d1 b8 31 bc 01 79 d7 59 8f 67 64 f5 15 f4 cc 8e 07 d4 31 e5 60 39 58 ef e0 f9 33 59 30 85 3e 68 3c 9c 53 38 87 14 3c ff d6 3d ac ab dc ea 70 b6 bd e9 69 96 af 97 d9 93 6a 2d 63 3d dc 2a ec 4d 8a 14 e8 2a 04 4e f5 eb 36 d1 93 3c a1 89 58 26 61 45 a8 32 e5 73 b5 23 5f b7 21 ef 1d 3e 5c 79 b9 20 c5 db c4 41 0d 01 1f 4c f8 57 15 fe 20 bb 41 fd 2b 5c 43 3f 86 b7 34 54 e9 38 77 0c 7a a6 97 34 95 38 e9 95 fb 78 d7 10 14 ad ba af 84 1f eb 08 55 4f dc 80 58 f8 27 2e 47 a8 d2 c3 82 76 5c 31 47 62 c2 ef 99 3e db 6c 68 08 8c 92 c8 6c 17 25 28 80 7c d1 b6 d3 1b 37 5a 78 93 bf 6d 57 2d 36 14 Data Ascii: >.%RkDhSg_DU2A'(b1yYgd1`9X3Y0>h<S8<=pij-c=MN6<X&aE2s#_!>\y ALW A+\C?4T8wz48xUOX'.Gv\1Gb>lhl%(\|7ZxmW-6
2024-04-16 15:05:49 UTC	1369	IN	Data Raw: 1b a3 65 dd 4f ba 59 c7 9b af 31 5d 30 0a 49 3e 0c 01 ea 28 9d 64 8c 87 e6 43 86 35 f2 d5 48 54 d9 f2 cd a1 1c 34 32 66 9a c2 e1 78 e5 78 13 5d db f0 0b 77 99 8a bb 58 32 75 b6 fc cb c4 a3 d6 41 2a 9f 7c b5 d9 0b db e5 3a 44 de a4 a4 96 ff 23 9b 3c ce 72 a3 e8 3e 7a b2 d4 75 a1 de 0c 1e 78 12 ef 56 bf 7b 76 f0 01 9f 95 27 aa 5c e3 a0 0f 3c 0b e8 55 a5 5d 0b 91 32 04 17 1c c3 93 22 3a 73 2c fb 25 55 c4 51 ed f3 ac ca 44 c7 85 9f 44 9f 5e ec 4a 15 e8 65 b8 87 1b a3 7a d6 85 6d 80 7b 6c 72 09 29 d3 17 c0 a0 ac f0 a5 4a a4 d8 7a d0 f7 0e e4 7e 0b aa c8 61 cf 5f b4 12 26 e7 9e 9d 24 57 d9 f2 6a 04 05 2e 7d e7 0e ba a5 16 3e 67 ae f8 e1 f6 60 03 27 47 cb a5 77 66 e9 5c b5 27 1b fa f8 3a 05 60 30 0b c6 bb f8 9e 68 19 1c 1f 47 e6 a0 2e ab f0 17 c2 f5 a7 ea b0 a7 Data Ascii: eOY1]0I>(dC5HT42fxx]wX2uA*\|:D#<r>zuxV{v'\<U]2":s,%UQDD^Jezm{lr)Jz~a_&$Wj.}>g`'Gwf\':`0hG.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.11	49827	142.251.15.91	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:45 UTC	952	OUT	GET /s/player/7ebf4817/www-embed-player.vflset/www-embed-player.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/embed/wAD9uO9YAQw?playlist=wAD9uO9YAQw&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&origin=https%3A%2F%2Fniceindiatravel.com&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
2024-04-16 15:05:45 UTC	689	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 327958 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 10 Apr 2024 19:11:19 GMT Expires: Thu, 10 Apr 2025 19:11:19 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 10 Apr 2024 04:18:25 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 503666 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 15:05:45 UTC	566	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 6d 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 0a 76 61 72 20 62 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 Data Ascii: (function(){'use strict';var m;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype
2024-04-16 15:05:45 UTC	1255	IN	Data Raw: 29 3b 66 75 6e 63 74 69 6f 6e 20 75 28 61 2c 62 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 63 3d 66 61 3b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 2d 31 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 28 65 20 69 6e 20 63 29 29 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 6e 75 6c 6c 21 3d 62 26 26 62 61 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 0a 75 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 66 29 7b 69 66 28 74 68 69 Data Ascii: );function u(a,b){if(b)a:{var c=fa;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}}u("Symbol",function(a){function b(f){if(thi
2024-04-16 15:05:45 UTC	1255	IN	Data Raw: 74 68 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 61 61 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 53 74 72 69 6e 67 28 61 29 2b 22 20 69 73 20 6e 6f 74 20 61 6e 20 69 74 65 72 61 62 6c 65 20 6f 72 20 41 72 72 61 79 4c 69 6b 65 22 29 3b 7d 0a 66 75 6e 63 74 69 6f 6e 20 6d 61 28 61 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 29 7b 61 3d 76 28 61 29 3b 66 6f 72 28 76 61 72 20 62 2c 63 3d 5b 5d 3b 21 28 62 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 63 2e 70 75 73 68 28 62 2e 76 61 6c 75 65 29 3b 61 3d 63 7d 72 65 74 75 72 6e 20 61 7d 0a 66 75 6e 63 74 69 6f 6e 20 6e 61 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c Data Ascii: th)return{next:aa(a)};throw Error(String(a)+" is not an iterable or ArrayLike");}function ma(a){if(!(a instanceof Array)){a=v(a);for(var b,c=[];!(b=a.next()).done;)c.push(b.value);a=c}return a}function na(a,b){return Object.prototype.hasOwnProperty.call
2024-04-16 15:05:45 UTC	1255	IN	Data Raw: 72 28 61 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 77 61 3d 73 61 3b 0a 66 75 6e 63 74 69 6f 6e 20 77 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 71 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 77 61 29 77 61 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 22 70 72 6f 74 6f 74 79 70 65 22 21 3d 63 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 62 2c 63 29 3b 64 26 26 4f 62 6a 65 63 74 2e Data Ascii: r(a+" is not extensible");return a}:null}var wa=sa;function w(a,b){a.prototype=qa(b.prototype);a.prototype.constructor=a;if(wa)wa(a,b);else for(var c in b)if("prototype"!=c)if(Object.defineProperties){var d=Object.getOwnPropertyDescriptor(b,c);d&&Object.
2024-04-16 15:05:45 UTC	1255	IN	Data Raw: 20 54 79 70 65 45 72 72 6f 72 28 22 49 74 65 72 61 74 6f 72 20 72 65 73 75 6c 74 20 22 2b 65 2b 22 20 69 73 20 6e 6f 74 20 61 6e 20 6f 62 6a 65 63 74 22 29 3b 69 66 28 21 65 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 61 2e 68 2e 75 3d 21 31 2c 65 3b 76 61 72 20 66 3d 65 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 67 29 7b 72 65 74 75 72 6e 20 61 2e 68 2e 6d 3d 6e 75 6c 6c 2c 7a 61 28 61 2e 68 2c 67 29 2c 49 61 28 61 29 7d 61 2e 68 2e 6d 3d 6e 75 6c 6c 3b 64 2e 63 61 6c 6c 28 61 2e 68 2c 66 29 3b 72 65 74 75 72 6e 20 49 61 28 61 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 49 61 28 61 29 7b 66 6f 72 28 3b 61 2e 68 2e 68 3b 29 74 72 79 7b 76 61 72 20 62 3d 61 2e 69 28 61 2e 68 29 3b 69 66 28 62 29 72 65 74 75 72 6e 20 61 2e 68 2e 75 3d 21 31 2c 7b 76 61 6c 75 65 3a 62 2e 76 Data Ascii: TypeError("Iterator result "+e+" is not an object");if(!e.done)return a.h.u=!1,e;var f=e.value}catch(g){return a.h.m=null,za(a.h,g),Ia(a)}a.h.m=null;d.call(a.h,f);return Ia(a)}function Ia(a){for(;a.h.h;)try{var b=a.i(a.h);if(b)return a.h.u=!1,{value:b.v
2024-04-16 15:05:45 UTC	1255	IN	Data Raw: 65 74 75 72 6e 21 31 7d 7d 3a 6e 75 6c 6c 7d 29 3b 0a 75 28 22 50 72 6f 6d 69 73 65 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 67 29 7b 74 68 69 73 2e 68 3d 30 3b 74 68 69 73 2e 6a 3d 76 6f 69 64 20 30 3b 74 68 69 73 2e 69 3d 5b 5d 3b 74 68 69 73 2e 75 3d 21 31 3b 76 61 72 20 68 3d 74 68 69 73 2e 6c 28 29 3b 74 72 79 7b 67 28 68 2e 72 65 73 6f 6c 76 65 2c 68 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6b 29 7b 68 2e 72 65 6a 65 63 74 28 6b 29 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 74 68 69 73 2e 68 3d 6e 75 6c 6c 7d 0a 66 75 6e 63 74 69 6f 6e 20 64 28 67 29 7b 72 65 74 75 72 6e 20 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 3f 67 3a 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 68 29 7b 68 28 67 29 7d 29 7d 0a 69 66 Data Ascii: eturn!1}}:null});u("Promise",function(a){function b(g){this.h=0;this.j=void 0;this.i=[];this.u=!1;var h=this.l();try{g(h.resolve,h.reject)}catch(k){h.reject(k)}}function c(){this.h=null}function d(g){return g instanceof b?g:new b(function(h){h(g)})}if
2024-04-16 15:05:45 UTC	1255	IN	Data Raw: 28 31 2c 67 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 44 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 69 66 28 30 21 3d 74 68 69 73 2e 68 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 73 65 74 74 6c 65 28 22 2b 67 2b 22 2c 20 22 2b 68 2b 22 29 3a 20 50 72 6f 6d 69 73 65 20 61 6c 72 65 61 64 79 20 73 65 74 74 6c 65 64 20 69 6e 20 73 74 61 74 65 22 2b 74 68 69 73 2e 68 29 3b 74 68 69 73 2e 68 3d 67 3b 74 68 69 73 2e 6a 3d 68 3b 32 3d 3d 3d 74 68 69 73 2e 68 26 26 74 68 69 73 2e 66 61 28 29 3b 74 68 69 73 2e 49 28 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 66 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 67 3d 74 68 69 73 3b 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 67 2e 55 28 29 29 7b 76 61 72 20 68 3d 66 61 2e 63 6f Data Ascii: (1,g)};b.prototype.D=function(g,h){if(0!=this.h)throw Error("Cannot settle("+g+", "+h+"): Promise already settled in state"+this.h);this.h=g;this.j=h;2===this.h&&this.fa();this.I()};b.prototype.fa=function(){var g=this;e(function(){if(g.U()){var h=fa.co
2024-04-16 15:05:45 UTC	1255	IN	Data Raw: 2e 57 62 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c 2e 68 29 7b 63 61 73 65 20 31 3a 67 28 6c 2e 6a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6c 2e 6a 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 55 6e 65 78 70 65 63 74 65 64 20 73 74 61 74 65 3a 20 22 2b 6c 2e 68 29 3b 7d 7d 0a 76 61 72 20 6c 3d 74 68 69 73 3b 6e 75 6c 6c 3d 3d 74 68 69 73 2e 69 3f 66 2e 69 28 6b 29 3a 74 68 69 73 2e 69 2e 70 75 73 68 28 6b 29 3b 74 68 69 73 2e 75 3d 21 30 7d 3b 0a 62 2e 72 65 73 6f 6c 76 65 3d 64 3b 62 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 6b 28 67 29 7d Data Ascii: .Wb=function(g,h){function k(){switch(l.h){case 1:g(l.j);break;case 2:h(l.j);break;default:throw Error("Unexpected state: "+l.h);}}var l=this;null==this.i?f.i(k):this.i.push(k);this.u=!0};b.resolve=d;b.reject=function(g){return new b(function(h,k){k(g)}
2024-04-16 15:05:45 UTC	1255	IN	Data Raw: 28 6b 29 3b 6e 2e 73 65 74 28 6c 2c 34 29 3b 72 65 74 75 72 6e 21 6e 2e 68 61 73 28 6b 29 26 26 34 3d 3d 6e 2e 67 65 74 28 6c 29 7d 63 61 74 63 68 28 70 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 0a 76 61 72 20 67 3d 22 24 6a 73 63 6f 6d 70 5f 68 69 64 64 65 6e 5f 22 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 66 28 22 66 72 65 65 7a 65 22 29 3b 66 28 22 70 72 65 76 65 6e 74 45 78 74 65 6e 73 69 6f 6e 73 22 29 3b 66 28 22 73 65 61 6c 22 29 3b 76 61 72 20 68 3d 30 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 69 66 28 21 64 28 6b 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 57 65 61 6b 4d 61 70 20 6b 65 79 22 29 3b 65 28 6b 29 3b 69 66 28 21 6e 61 28 6b 2c Data Ascii: (k);n.set(l,4);return!n.has(k)&&4==n.get(l)}catch(p){return!1}}())return a;var g="$jscomp_hidden_"+Math.random();f("freeze");f("preventExtensions");f("seal");var h=0;b.prototype.set=function(k,l){if(!d(k))throw Error("Invalid WeakMap key");e(k);if(!na(k,
2024-04-16 15:05:45 UTC	1255	IN	Data Raw: 6e 28 29 7b 69 66 28 21 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 61 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 68 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 6b 3d 6e 65 77 20 61 28 76 28 5b 5b 68 2c 22 73 22 5d 5d 29 29 3b 69 66 28 22 73 22 21 3d 6b 2e 67 65 74 28 68 29 7c 7c 31 21 3d 6b 2e 73 69 7a 65 7c 7c 6b 2e 67 65 74 28 7b 78 3a 34 7d 29 7c 7c 6b 2e 73 65 74 28 7b 78 3a 34 7d 2c 22 74 22 29 21 3d 6b 7c 7c 32 21 3d 6b 2e 73 69 7a 65 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 6c 3d 6b 2e 65 6e 74 72 69 65 73 28 29 2c 6e 3d 6c 2e 6e 65 78 74 Data Ascii: n(){if(!a\|\|"function"!=typeof a\|\|!a.prototype.entries\|\|"function"!=typeof Object.seal)return!1;try{var h=Object.seal({x:4}),k=new a(v([[h,"s"]]));if("s"!=k.get(h)\|\|1!=k.size\|\|k.get({x:4})\|\|k.set({x:4},"t")!=k\|\|2!=k.size)return!1;var l=k.entries(),n=l.next

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.11	49828	142.251.15.91	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:45 UTC	940	OUT	GET /s/player/7ebf4817/player_ias.vflset/en_US/base.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/embed/wAD9uO9YAQw?playlist=wAD9uO9YAQw&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&origin=https%3A%2F%2Fniceindiatravel.com&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
2024-04-16 15:05:45 UTC	690	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 2541942 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 10 Apr 2024 10:44:53 GMT Expires: Thu, 10 Apr 2025 10:44:53 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 10 Apr 2024 04:18:25 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 534052 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 15:05:45 UTC	565	IN	Data Raw: 76 61 72 20 5f 79 74 5f 70 6c 61 79 65 72 3d 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 28 54 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 32 30 31 34 20 62 79 20 56 69 74 61 6c 79 20 50 75 7a 72 69 6e 0a 0a 20 50 65 72 6d 69 73 73 69 6f 6e 20 69 73 20 68 65 72 Data Ascii: var _yt_player={};(function(g){var window=this;/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0// SPDX-License-Identifier: Apache-2.0// (The MIT License) Copyright (C) 2014 by Vitaly Puzrin Permission is her
2024-04-16 15:05:45 UTC	1255	IN	Data Raw: 74 77 61 72 65 2c 20 61 6e 64 20 74 6f 20 70 65 72 6d 69 74 20 70 65 72 73 6f 6e 73 20 74 6f 20 77 68 6f 6d 20 74 68 65 20 53 6f 66 74 77 61 72 65 20 69 73 0a 20 66 75 72 6e 69 73 68 65 64 20 74 6f 20 64 6f 20 73 6f 2c 20 73 75 62 6a 65 63 74 20 74 6f 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 64 69 74 69 6f 6e 73 3a 0a 0a 20 54 68 65 20 61 62 6f 76 65 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 6e 64 20 74 68 69 73 20 70 65 72 6d 69 73 73 69 6f 6e 20 6e 6f 74 69 63 65 20 73 68 61 6c 6c 20 62 65 20 69 6e 63 6c 75 64 65 64 20 69 6e 0a 20 61 6c 6c 20 63 6f 70 69 65 73 20 6f 72 20 73 75 62 73 74 61 6e 74 69 61 6c 20 70 6f 72 74 69 6f 6e 73 20 6f 66 20 74 68 65 20 53 6f 66 74 77 61 72 65 2e 0a 0a 20 54 48 45 20 53 4f 46 54 57 41 52 45 Data Ascii: tware, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE
2024-04-16 15:05:45 UTC	1255	IN	Data Raw: 69 73 73 69 6f 6e 20 69 73 20 67 72 61 6e 74 65 64 20 74 6f 20 61 6e 79 6f 6e 65 20 74 6f 20 75 73 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 66 6f 72 20 61 6e 79 20 70 75 72 70 6f 73 65 2c 0a 20 20 20 69 6e 63 6c 75 64 69 6e 67 20 63 6f 6d 6d 65 72 63 69 61 6c 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 2c 20 61 6e 64 20 74 6f 20 61 6c 74 65 72 20 69 74 20 61 6e 64 20 72 65 64 69 73 74 72 69 62 75 74 65 20 69 74 0a 20 20 20 66 72 65 65 6c 79 2c 20 73 75 62 6a 65 63 74 20 74 6f 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 72 65 73 74 72 69 63 74 69 6f 6e 73 3a 0a 20 20 20 31 2e 20 54 68 65 20 6f 72 69 67 69 6e 20 6f 66 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 6d 69 73 72 65 70 72 65 73 65 6e 74 65 64 3b 20 79 6f 75 Data Ascii: ission is granted to anyone to use this software for any purpose, including commercial applications, and to alter it and redistribute it freely, subject to the following restrictions: 1. The origin of this software must not be misrepresented; you
2024-04-16 15:05:45 UTC	1255	IN	Data Raw: 77 69 74 68 6f 75 74 20 6c 69 6d 69 74 61 74 69 6f 6e 20 74 68 65 20 72 69 67 68 74 73 0a 20 74 6f 20 75 73 65 2c 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 6d 65 72 67 65 2c 20 70 75 62 6c 69 73 68 2c 20 64 69 73 74 72 69 62 75 74 65 2c 20 73 75 62 6c 69 63 65 6e 73 65 2c 20 61 6e 64 2f 6f 72 20 73 65 6c 6c 0a 20 63 6f 70 69 65 73 20 6f 66 20 74 68 65 20 53 6f 66 74 77 61 72 65 2c 20 61 6e 64 20 74 6f 20 70 65 72 6d 69 74 20 70 65 72 73 6f 6e 73 20 74 6f 20 77 68 6f 6d 20 74 68 65 20 53 6f 66 74 77 61 72 65 20 69 73 0a 20 66 75 72 6e 69 73 68 65 64 20 74 6f 20 64 6f 20 73 6f 2c 20 73 75 62 6a 65 63 74 20 74 6f 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 64 69 74 69 6f 6e 73 3a 0a 0a 20 54 68 65 20 61 62 6f 76 65 20 63 6f 70 79 72 69 67 68 74 Data Ascii: without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright
2024-04-16 15:05:45 UTC	1255	IN	Data Raw: 65 2c 75 62 61 2c 70 65 2c 76 65 2c 43 62 61 2c 41 62 61 2c 42 62 61 2c 45 62 61 2c 46 62 61 2c 48 62 61 2c 41 65 2c 42 65 2c 49 62 61 2c 48 65 2c 4a 62 61 2c 4b 62 61 2c 4c 62 61 2c 50 62 61 2c 4f 62 61 2c 4c 65 2c 4e 65 2c 51 62 61 2c 53 65 2c 0a 58 65 2c 59 65 2c 52 62 61 2c 64 66 2c 6f 66 2c 70 66 2c 53 62 61 2c 54 62 61 2c 55 62 61 2c 56 62 61 2c 77 66 2c 78 66 2c 43 66 2c 59 62 61 2c 24 62 61 2c 5a 62 61 2c 45 66 2c 49 66 2c 61 63 61 2c 48 66 2c 53 66 2c 72 66 2c 63 67 2c 63 63 61 2c 65 67 2c 64 67 2c 71 66 2c 67 67 2c 64 63 61 2c 68 67 2c 69 67 2c 6b 67 2c 65 63 61 2c 67 63 61 2c 69 63 61 2c 78 67 2c 79 67 2c 7a 67 2c 6d 63 61 2c 6f 63 61 2c 42 67 2c 70 63 61 2c 41 67 2c 74 63 61 2c 6f 67 2c 6b 63 61 2c 76 63 61 2c 73 63 61 2c 71 63 61 2c 72 63 61 Data Ascii: e,uba,pe,ve,Cba,Aba,Bba,Eba,Fba,Hba,Ae,Be,Iba,He,Jba,Kba,Lba,Pba,Oba,Le,Ne,Qba,Se,Xe,Ye,Rba,df,of,pf,Sba,Tba,Uba,Vba,wf,xf,Cf,Yba,$ba,Zba,Ef,If,aca,Hf,Sf,rf,cg,cca,eg,dg,qf,gg,dca,hg,ig,kg,eca,gca,ica,xg,yg,zg,mca,oca,Bg,pca,Ag,tca,og,kca,vca,sca,qca,rca
2024-04-16 15:05:45 UTC	1255	IN	Data Raw: 6d 2c 53 6d 2c 54 6d 2c 7a 66 61 2c 55 6d 2c 41 66 61 2c 57 6d 2c 42 66 61 2c 45 66 61 2c 58 6d 2c 59 6d 2c 5a 6d 2c 24 6d 2c 47 66 61 2c 64 6e 2c 48 66 61 2c 65 6e 2c 66 6e 2c 67 6e 2c 49 66 61 2c 4a 66 61 2c 4c 6e 2c 4b 66 61 2c 4d 6e 2c 4e 6e 2c 4e 66 61 2c 50 66 61 2c 51 66 61 2c 53 66 61 2c 52 66 61 2c 54 66 61 2c 50 6e 2c 55 66 61 2c 53 6e 2c 57 6e 2c 58 6e 2c 59 6e 2c 58 66 61 2c 59 66 61 2c 5a 66 61 2c 5a 6e 2c 61 67 61 2c 24 6e 2c 63 67 61 2c 64 67 61 2c 67 67 61 2c 66 67 61 2c 65 67 61 2c 6a 67 61 2c 68 67 61 2c 62 6f 2c 65 6f 2c 6b 67 61 2c 66 6f 2c 67 6f 2c 63 6f 2c 68 6f 2c 69 6f 2c 6a 6f 2c 6c 6f 2c 6c 67 61 2c 6d 6f 2c 6e 6f 2c 6e 67 61 2c 6d 67 61 2c 6f 67 61 2c 70 67 61 2c 71 67 61 2c 73 67 61 2c 6f 6f 2c 70 6f 2c 71 6f 2c 72 6f 2c 73 6f Data Ascii: m,Sm,Tm,zfa,Um,Afa,Wm,Bfa,Efa,Xm,Ym,Zm,$m,Gfa,dn,Hfa,en,fn,gn,Ifa,Jfa,Ln,Kfa,Mn,Nn,Nfa,Pfa,Qfa,Sfa,Rfa,Tfa,Pn,Ufa,Sn,Wn,Xn,Yn,Xfa,Yfa,Zfa,Zn,aga,$n,cga,dga,gga,fga,ega,jga,hga,bo,eo,kga,fo,go,co,ho,io,jo,lo,lga,mo,no,nga,mga,oga,pga,qga,sga,oo,po,qo,ro,so
2024-04-16 15:05:45 UTC	1255	IN	Data Raw: 58 74 2c 76 6a 61 2c 75 6a 61 2c 79 6a 61 2c 42 6a 61 2c 41 6a 61 2c 59 74 2c 43 6a 61 2c 44 6a 61 2c 45 6a 61 2c 47 6a 61 2c 46 6a 61 2c 48 6a 61 2c 5a 74 2c 49 6a 61 2c 4a 6a 61 2c 61 75 2c 4b 6a 61 2c 4c 6a 61 2c 4d 6a 61 2c 4e 6a 61 2c 62 75 2c 4f 6a 61 2c 63 75 2c 0a 50 6a 61 2c 64 75 2c 65 75 2c 52 6a 61 2c 66 75 2c 53 6a 61 2c 67 75 2c 68 75 2c 54 6a 61 2c 55 6a 61 2c 69 75 2c 6b 75 2c 57 6a 61 2c 6c 75 2c 56 6a 61 2c 58 6a 61 2c 59 6a 61 2c 5a 6a 61 2c 61 6b 61 2c 6d 75 2c 62 6b 61 2c 70 75 2c 71 75 2c 64 6b 61 2c 65 6b 61 2c 68 6b 61 2c 69 6b 61 2c 72 75 2c 74 75 2c 75 75 2c 76 75 2c 77 75 2c 78 75 2c 79 75 2c 7a 75 2c 41 75 2c 42 75 2c 43 75 2c 44 75 2c 45 75 2c 6d 6b 61 2c 6c 6b 61 2c 6e 6b 61 2c 70 6b 61 2c 6f 6b 61 2c 72 6b 61 2c 6b 6b 61 2c Data Ascii: Xt,vja,uja,yja,Bja,Aja,Yt,Cja,Dja,Eja,Gja,Fja,Hja,Zt,Ija,Jja,au,Kja,Lja,Mja,Nja,bu,Oja,cu,Pja,du,eu,Rja,fu,Sja,gu,hu,Tja,Uja,iu,ku,Wja,lu,Vja,Xja,Yja,Zja,aka,mu,bka,pu,qu,dka,eka,hka,ika,ru,tu,uu,vu,wu,xu,yu,zu,Au,Bu,Cu,Du,Eu,mka,lka,nka,pka,oka,rka,kka,
2024-04-16 15:05:45 UTC	1255	IN	Data Raw: 6e 61 2c 68 7a 2c 64 6e 61 2c 69 7a 2c 6a 7a 2c 65 6e 61 2c 6b 7a 2c 66 6e 61 2c 6c 7a 2c 67 6e 61 2c 68 6e 61 2c 69 6e 61 2c 6d 7a 2c 6a 6e 61 2c 6e 7a 2c 6f 7a 2c 70 7a 2c 6b 6e 61 2c 71 7a 2c 6c 6e 61 2c 72 7a 2c 73 7a 2c 74 7a 2c 75 7a 2c 78 7a 2c 79 7a 2c 7a 7a 2c 6d 6e 61 2c 41 7a 2c 42 7a 2c 43 7a 2c 6e 6e 61 2c 44 7a 2c 45 7a 2c 46 7a 2c 47 7a 2c 6f 6e 61 2c 48 7a 2c 49 7a 2c 4a 7a 2c 4b 7a 2c 4c 7a 2c 70 6e 61 2c 4d 7a 2c 71 6e 61 2c 4e 7a 2c 72 6e 61 2c 73 6e 61 2c 4f 7a 2c 50 7a 2c 74 6e 61 2c 51 7a 2c 52 7a 2c 53 7a 2c 75 6e 61 2c 76 6e 61 2c 77 6e 61 2c 78 6e 61 2c 54 7a 2c 55 7a 2c 79 6e 61 2c 56 7a 2c 7a 6e 61 2c 41 6e 61 2c 42 6e 61 2c 43 6e 61 2c 44 6e 61 2c 57 7a 2c 58 7a 2c 45 6e 61 2c 46 6e 61 2c 59 7a 2c 5a 7a 2c 47 6e 61 2c 24 7a 2c Data Ascii: na,hz,dna,iz,jz,ena,kz,fna,lz,gna,hna,ina,mz,jna,nz,oz,pz,kna,qz,lna,rz,sz,tz,uz,xz,yz,zz,mna,Az,Bz,Cz,nna,Dz,Ez,Fz,Gz,ona,Hz,Iz,Jz,Kz,Lz,pna,Mz,qna,Nz,rna,sna,Oz,Pz,tna,Qz,Rz,Sz,una,vna,wna,xna,Tz,Uz,yna,Vz,zna,Ana,Bna,Cna,Dna,Wz,Xz,Ena,Fna,Yz,Zz,Gna,$z,
2024-04-16 15:05:45 UTC	1255	IN	Data Raw: 72 61 2c 48 72 61 2c 49 72 61 2c 4b 72 61 2c 4a 72 61 2c 65 44 2c 45 72 61 2c 4e 72 61 2c 4f 72 61 2c 6a 44 2c 4d 72 61 2c 50 72 61 2c 51 72 61 2c 6b 44 2c 6c 44 2c 52 72 61 2c 54 72 61 2c 6e 44 2c 55 72 61 2c 56 72 61 2c 58 72 61 2c 5a 72 61 2c 71 44 2c 24 72 61 2c 61 73 61 2c 62 73 61 2c 0a 63 73 61 2c 64 73 61 2c 65 73 61 2c 66 73 61 2c 67 73 61 2c 73 44 2c 68 73 61 2c 75 44 2c 6a 73 61 2c 6b 73 61 2c 6c 73 61 2c 6d 73 61 2c 6e 73 61 2c 6f 73 61 2c 7a 44 2c 72 73 61 2c 75 73 61 2c 41 44 2c 76 73 61 2c 78 73 61 2c 71 73 61 2c 79 73 61 2c 7a 73 61 2c 41 73 61 2c 73 73 61 2c 74 73 61 2c 76 44 2c 70 73 61 2c 79 44 2c 77 73 61 2c 78 44 2c 77 44 2c 42 73 61 2c 43 73 61 2c 44 73 61 2c 45 73 61 2c 46 73 61 2c 47 73 61 2c 4d 73 61 2c 48 73 61 2c 44 44 2c 45 44 Data Ascii: ra,Hra,Ira,Kra,Jra,eD,Era,Nra,Ora,jD,Mra,Pra,Qra,kD,lD,Rra,Tra,nD,Ura,Vra,Xra,Zra,qD,$ra,asa,bsa,csa,dsa,esa,fsa,gsa,sD,hsa,uD,jsa,ksa,lsa,msa,nsa,osa,zD,rsa,usa,AD,vsa,xsa,qsa,ysa,zsa,Asa,ssa,tsa,vD,psa,yD,wsa,xD,wD,Bsa,Csa,Dsa,Esa,Fsa,Gsa,Msa,Hsa,DD,ED
2024-04-16 15:05:45 UTC	1255	IN	Data Raw: 61 2c 54 78 61 2c 55 78 61 2c 53 78 61 2c 56 78 61 2c 6a 47 2c 6d 47 2c 6f 47 2c 58 78 61 2c 57 78 61 2c 71 47 2c 59 78 61 2c 5a 78 61 2c 78 47 2c 79 47 2c 7a 47 2c 41 47 2c 44 47 2c 61 79 61 2c 45 47 2c 46 47 2c 47 47 2c 48 47 2c 62 79 61 2c 63 79 61 2c 4b 47 2c 64 79 61 2c 4c 47 2c 67 79 61 2c 69 79 61 2c 6b 79 61 2c 6d 79 61 2c 6f 79 61 2c 71 79 61 2c 4e 47 2c 72 79 61 2c 4f 47 2c 73 79 61 2c 76 79 61 2c 77 79 61 2c 78 79 61 2c 51 47 2c 52 47 2c 7a 79 61 2c 41 79 61 2c 54 47 2c 55 47 2c 56 47 2c 43 79 61 2c 57 47 2c 58 47 2c 59 47 2c 44 79 61 2c 5a 47 2c 42 79 61 2c 45 79 61 2c 24 47 2c 47 79 61 2c 46 79 61 2c 61 48 2c 49 79 61 2c 62 48 2c 63 48 2c 65 48 2c 4a 79 61 2c 4b 79 61 2c 67 48 2c 68 48 2c 6a 48 2c 76 48 2c 75 48 2c 4d 79 61 2c 69 48 2c 50 79 Data Ascii: a,Txa,Uxa,Sxa,Vxa,jG,mG,oG,Xxa,Wxa,qG,Yxa,Zxa,xG,yG,zG,AG,DG,aya,EG,FG,GG,HG,bya,cya,KG,dya,LG,gya,iya,kya,mya,oya,qya,NG,rya,OG,sya,vya,wya,xya,QG,RG,zya,Aya,TG,UG,VG,Cya,WG,XG,YG,Dya,ZG,Bya,Eya,$G,Gya,Fya,aH,Iya,bH,cH,eH,Jya,Kya,gH,hH,jH,vH,uH,Mya,iH,Py

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.11	49829	154.62.106.12	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:45 UTC	377	OUT	GET /wp-content/uploads/2018/10/t10.jpg HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:47 UTC	392	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:47 GMT Content-Type: image/jpeg Content-Length: 44495 Connection: close Cache-Control: public, max-age=31536000 X-Hcdn-Image-Optimizer: f:jpeg q:85 w:1600 alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: ed292c5dc185f758209d6b3bcea8cdf6-bos-edge3 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 1.767 Accept-Ranges: bytes
2024-04-16 15:05:47 UTC	977	IN	Data Raw: ff d8 ff e1 00 80 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 05 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 4a 00 00 00 1b 01 05 00 01 00 00 00 52 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 69 87 04 00 01 00 00 00 5a 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 02 00 02 a0 04 00 01 00 00 00 20 03 00 00 03 a0 04 00 01 00 00 00 15 02 00 00 00 00 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e Data Ascii: ExifII*JR(iZHH C!"$"$C
2024-04-16 15:05:47 UTC	1369	IN	Data Raw: 98 2e 0b 9a 06 1b 82 0b 80 98 c3 2c 24 c1 70 5c 17 18 01 26 2d c0 4c 17 18 01 98 98 a4 c0 4c 60 30 98 b7 35 c5 26 20 12 60 26 02 60 31 00 93 14 98 09 82 e2 01 26 29 33 18 b7 10 09 80 98 09 8a 4c 4c 86 e0 26 0b 30 5c 40 c4 c5 26 62 60 b9 11 ae 62 60 82 e2 06 26 02 66 31 09 89 04 c5 26 62 62 93 10 31 82 e6 31 49 8c 03 eb 81 86 e2 08 67 e7 0f d3 41 e1 b8 b7 35 ca 04 1e e6 11 44 30 33 06 86 28 30 83 20 81 1d 63 08 90 c0 07 10 c4 06 35 c0 18 c3 ac d0 03 34 8c 8d 0d c5 86 41 06 06 18 a0 cc 24 10 69 a0 b9 ae 40 34 d0 5c d2 20 cd 04 d1 20 8e b3 08 26 91 06 e6 b8 26 89 41 a6 1d 22 c3 10 81 9a e0 9a 25 03 34 13 5c 8a 06 68 26 89 43 4d 70 4d 14 21 82 68 2e 24 19 ae 03 04 48 69 ae 2d cd 72 18 35 c1 70 5c d3 45 03 04 13 5c 48 37 35 c1 71 6e 24 35 c1 70 13 05 c4 02 4c Data Ascii: .,$p\&-LL`05& `&`1&)3LL&0\@&b`b`&f1&bb11IgA5D03(0 c54A$i@4\ &&A"%4\h&CMpM!h.$Hi-r5p\E\H75qn$5pL
2024-04-16 15:05:47 UTC	1369	IN	Data Raw: 47 b9 89 93 dd 01 69 a8 67 70 f6 26 dd 24 5a 6d d1 86 77 14 2d 14 9f 58 9b a0 26 30 28 e4 c0 4c 4d c2 02 d1 48 28 f7 01 31 2f de 02 7d e3 02 8d 70 5c 4b 80 99 a8 66 94 b8 2f de 4c 99 af de 50 28 fb a0 b8 97 35 c6 05 1f 74 17 10 98 2e 50 a8 f7 01 3c c4 2d 01 31 80 d8 f7 05 dc 4b 82 e5 02 8e 4c 5b 8a 4c d7 18 14 62 60 26 2d cc 4c 61 50 93 05 c5 26 02 65 02 86 e0 26 02 7d e2 96 8c 2a 31 30 5c 5b 82 e2 90 0c 4c 17 14 98 23 02 86 e0 30 5c 05 a5 00 26 29 30 5c 04 c6 15 09 3c 45 24 40 4c 04 c6 05 0d c5 b8 09 82 e4 14 fa 65 68 ea d3 9c 34 60 d3 e2 3c 4f d3 2c 8e 90 f1 83 4e 70 d1 83 4c ed 34 b2 3a 03 46 0d 39 c3 46 0d 30 f1 36 b2 3a 03 46 0d 20 1a 30 30 da 29 96 06 1b 92 0d c4 60 d3 3b 4d 70 52 e1 06 4c 18 c0 c2 04 1e e1 b9 3b 84 18 40 83 dc 37 10 19 81 94 08 52 Data Ascii: Gigp&$Zmw-X&0(LMH(1/}p\Kf/LP(5t.P<-1KL[Lb`&-LaP&e&}*10\[L#0\&)0\<E$@Leh4`<O,NpL4:F9F06:F 00)`;MpRL;@7R
2024-04-16 15:05:47 UTC	1369	IN	Data Raw: 5c 60 51 c9 80 98 97 35 c6 05 18 99 ae 25 cd 71 81 46 b9 ae 2d c1 71 81 47 b8 2e 21 33 5c a1 51 ae 6b 89 70 5c 61 9a 3d d1 82 e2 dc 17 28 14 6b 9a e2 dc 17 18 54 6b 98 98 97 01 68 c0 a3 93 05 c5 26 0b 94 0a 35 c0 4c 5b 82 e3 0a 8d 73 5c 5d d7 d0 83 06 e9 40 a3 13 01 68 a4 f1 05 ca 15 1a e0 26 a2 93 05 c6 05 1a e0 27 9e b1 6e 02 65 08 62 66 dd 16 e0 ba 8c 0a 35 c0 4c 4d d5 e5 73 16 94 0a 35 cc 4c 4d d1 6e 30 a8 e4 88 09 b8 b7 01 32 80 d8 db a0 dd 14 91 05 c6 15 18 9e 6e 29 3c 40 4c 52 63 02 8d 7c c1 71 49 80 99 40 a1 26 02 d5 14 99 8c 42 84 98 2e a2 dc d7 28 54 f5 c3 7b c7 06 73 86 8e 1b de 7c e7 89 f6 96 47 40 6f 78 ca d2 0a d1 83 71 73 2f 13 6b 23 a0 34 70 d3 9c 34 60 d3 2f 13 6b 23 a0 34 70 de f3 98 34 60 d3 3b 4d 2c 8e 90 61 0d 20 1b de 30 69 9d a7 45 Data Ascii: \`Q5%qF-qG.!3\Qkp\a=(kTkh&5L[s\]@h&'nebf5LMs5LMn02n)<@LRc\|qI@&B.(T{s\|G@oxqs/k#4p4`/k#4p4`;M,a 0iE
2024-04-16 15:05:47 UTC	1369	IN	Data Raw: 35 ca 05 1a e6 b8 b7 05 f1 18 14 7b 82 fe b1 2c 4d 71 85 46 b9 ae 2d f0 20 b9 40 a3 5c 24 c4 b8 2f d2 50 28 f7 01 31 6e 6b b8 c0 a3 5c c4 fb c4 ba 98 99 42 a3 5c 04 c5 27 89 ae 21 46 26 6b 89 7c f3 35 ca 15 1a e6 b8 a4 c1 72 81 46 b9 ae 25 cd 72 85 46 b8 2f ac 5b 9a e2 54 6b 82 e2 dc d7 20 a1 b9 89 f9 c5 b8 09 8c 0a 35 c0 4c 04 c1 72 85 46 27 de 02 62 dd cc 4c 82 84 9a 30 13 05 c1 71 0a 12 60 26 2d cd 72 85 43 70 18 2e 0b 94 0a 35 c0 4f bc 5b e3 99 8c 61 50 dc 17 01 80 99 10 6e 68 a4 c1 22 a1 24 4c 4f 11 49 82 e2 08 6b 80 98 b7 01 3c 4a 10 c4 dc 52 60 b8 0c 82 86 e0 24 54 04 f9 88 b7 10 a3 13 01 30 5c 17 22 3a c1 8c 1a 44 18 c1 a7 9e 1e e4 cb 03 18 34 8e e8 c1 a1 07 71 60 d1 83 48 06 f3 8c 1b da 1b 4d 2c 8b 06 8e 0c 80 31 83 08 34 6d 64 74 06 8c 1a 40 34 Data Ascii: 5{,MqF- @\$/P(1nk\B\'!F&k\|5rF%rF/[Tk 5LrF'bL0q`&-rCp.5O[aPnh"$LOIk<JR`$T0\":D4q`HM,14mdt@4
2024-04-16 15:05:47 UTC	1369	IN	Data Raw: 7a ff 00 e4 35 f6 cd c7 43 64 f7 88 cf 24 5e fc e2 ef 9d 96 27 93 2d 4a 54 b7 a4 1b a4 ae 0d d3 4b 13 9b cc ae e9 b7 49 5c db a3 0c ee 29 ba 1b 93 b9 ac d4 60 6e 29 70 6e 89 7e f3 5c a0 6e 1e fc e6 b8 b7 c4 d7 18 14 6b 9a e2 5c d6 6e 50 29 4b 9a e2 03 35 ca 05 1e e6 b8 97 0d dc 61 51 ae 6b f7 89 70 dd 70 65 0a 8d 73 5f bc 4b 9a e5 02 8f 70 5c 5b 9a e5 0a 8d 73 5c 5b 80 93 5c 44 28 d7 e9 31 31 6e 6b e3 ac 8a 8f 70 5f 31 6e 0b 91 51 c1 9a e2 5c d7 28 54 7b 82 e2 df bc 17 18 54 72 66 b8 97 35 ca 05 1e e0 b8 b7 35 ca 10 d7 35 c4 26 6b 94 2a 3d c0 4c 5b 9a e5 02 8c 4c 17 c4 59 ae 25 46 b8 2e 2d cd 72 2a 31 3e 73 5c 52 66 26 45 46 b8 2e 29 33 5c 82 8d 7e f0 5f b4 59 89 91 51 ae 02 7e 91 49 8b 93 22 63 c6 5d d8 2a 81 64 98 c2 a3 b3 85 52 cc c0 2a 8b 24 f9 09 c1 Data Ascii: z5Cd$^'-JTKI\)`n)pn~\nk\nP)K5aQkppes_Kp\[s\[\D(11nkp_1nQ\(T{Trf555&k=L[LY%F.-r1>s\Rf&EF.)3\~_YQ~I"c]dR$
2024-04-16 15:05:47 UTC	1369	IN	Data Raw: 4d 9c ca 6f 1e b2 9a 66 dd a8 c6 a0 d9 2e 00 fa ce 71 fe 59 d7 d9 15 fd a3 86 c7 99 a3 f2 83 ec 69 77 3e 9c 9e 7e 71 55 81 16 0d ce 2e d1 d7 0d 30 d8 b4 d9 48 b0 0f 40 3d 4c e5 ec ee d0 36 30 e7 22 89 f0 b7 a5 fa ce 0b 07 29 e8 79 a4 e1 e9 ea 73 e3 c1 8b bc c8 d4 3a 0f 8c 75 60 c0 32 9b 04 70 44 f3 3b 68 23 b6 25 7c fd dd 03 c4 bf 65 30 3d 9f 8f 6e 4d f5 62 fe 72 db c5 25 95 ca 1d b7 16 e0 b9 c7 da 1a d5 d3 27 84 6f ca 47 0b e9 ee 60 95 70 d3 69 2a 74 0c a1 b5 2f 8b 70 f0 a8 35 7c ca 5c f9 84 d4 67 4d 4f de 01 63 94 9b 24 f9 ff 00 a4 f7 74 3a a5 d5 62 de 06 d6 1c 32 9f 2f f4 9b cb 07 89 8c 35 16 47 2f 6e ea 9b 12 26 14 b1 bf 92 40 f4 9d 5d 9f 9d b5 3a 34 ca e0 ee 3c 13 eb 5e 73 83 b7 33 e6 c5 9b 19 55 42 a5 4d 5f e7 3a 7b 2f 2b b6 87 1b 66 0a a5 98 85 af Data Ascii: Mof.qYiw>~qU.0H@=L60")ys:u`2pD;h#%\|e0=nMbr%'oG`pi*t/p5\|\gMOc$t:b2/5G/n&@]:4<^s3UBM_:{/+f
2024-04-16 15:05:47 UTC	1369	IN	Data Raw: e6 6b 91 0d 70 dc 40 60 bf 39 10 f7 73 5c 4b 93 d4 66 4c 38 f7 b9 af 20 3d 4c a1 36 58 99 ae 4b 0e 64 cb 8c 3a 10 47 f0 8d 71 85 47 be 60 bf 78 b7 05 c0 8e 0c fd a1 93 1f 69 8c 03 13 32 02 14 80 39 37 3c fd 66 7c 9a 9c ac d9 50 8a 27 6d 8a e3 d2 1d 66 a7 3a eb f2 1e f2 82 bf 40 38 35 39 97 2e 47 27 7e 42 c3 ca fc a7 7c 71 3c f9 65 78 1d 19 50 9f 79 d9 a5 d5 e4 18 32 e2 56 e8 bb 97 ce b9 9e 76 43 d0 45 5c 9b 43 aa fe d0 af 84 5a a6 71 73 92 bd f7 26 ec f3 17 be e7 a1 92 51 77 cc 25 47 ef 09 a0 85 0b ee 5a 88 58 a8 e2 00 42 5d b0 e6 06 65 6e 01 90 0f be 80 60 3a c5 66 23 a4 1f ee 96 0c 9f 88 7c 20 43 2b 16 5b 27 98 8e e7 75 01 32 1f 01 e2 41 b5 2d 66 97 8f 84 40 e9 0d c5 c5 24 6d bb e9 27 87 29 c8 c4 11 c8 fc a1 73 e0 03 de 44 29 c8 49 e3 89 27 77 dd d0 42 Data Ascii: kp@`9s\KfL8 =L6XKd:GqG`xi297<f\|P'mf:@859.G'~B\|q<exPy2VvCE\CZqs&Qw%GZXB]en`:f#\| C+['u2A-f@$m')sD)I'wB
2024-04-16 15:05:47 UTC	1369	IN	Data Raw: c2 6b 9e 22 60 e1 4f 97 30 b9 f7 b9 01 45 6d aa 22 b3 10 38 eb 03 30 d8 9c d9 81 d8 5c 84 96 4d 4a ad 82 ad b8 7b 71 39 ce a3 25 9e 9c 9b e9 36 76 53 90 ee 04 71 52 07 83 34 8c 9d 29 a9 21 8e e0 28 f2 68 4a ab 8c 98 ed 41 a0 7c c4 e1 52 01 f1 02 44 e8 4c e8 b8 82 51 b1 02 2b 7e 5e 72 3a 91 c8 1e d0 0c ca 0c 4c d9 43 b7 1c 71 52 22 24 9e 90 5d 42 d5 e5 16 20 6f 28 62 dc d7 12 18 18 49 1e 71 2e 62 60 43 13 7c c1 7e 71 49 9a fe b1 21 c9 f3 80 f1 e9 10 b5 08 37 40 a8 c4 80 7a c0 5a 2b 18 a5 b8 a8 90 cd 92 8d 83 cf b4 91 62 4f 58 09 e6 02 60 03 e4 c8 ed b6 d8 9a e9 ed 02 e4 ac 65 0d fa c9 b1 00 41 7e 71 2a 39 20 dd df b4 01 a8 83 16 e0 be 64 47 66 0d 42 22 90 50 35 f9 c0 73 a2 db 21 22 72 1a e3 88 2f d2 10 a8 cf 91 99 8b 12 6c f5 26 2e ef 78 0d d4 11 01 af cf Data Ascii: k"`O0Em"80\MJ{q9%6vSqR4)!(hJA\|RDLQ+~^r:LCqR"$]B o(bIq.b`C\|~qI!7@zZ+bOX`eA~q*9 dGfB"P5s!"r/l&.x
2024-04-16 15:05:47 UTC	1369	IN	Data Raw: 39 ae 82 0d c4 0a f2 81 ad c7 d3 77 98 eb 9c 8a 3e 70 86 43 c0 75 fa cf 99 dd 5c 59 1f 38 55 ad ac b3 71 d3 98 42 dc 7d 42 9b 16 ac 08 8c 07 24 0a f7 9f 32 b9 48 fc 2e cb f0 30 a6 52 a6 c6 46 fa ca 0e e3 e9 b6 98 59 c2 d0 2c a0 f9 73 3e 6f ef 0f 46 f2 b0 07 de 29 76 3d 72 31 1e b7 28 5b 8f a7 ea 3a 88 af 91 71 ad b3 01 cf ac f9 c5 ca e1 68 3b 01 e9 71 49 2c 4d bb 9f 3a b9 42 dc 7d 32 b0 65 0c a6 c1 e9 0f 3d 2a 78 18 35 79 f1 a8 51 90 95 1e 44 4e 9c 3d a7 97 15 78 31 b8 1f b2 c2 02 b2 3d 7e 61 a3 3c e5 ed 91 fb 5a 3c 07 e0 48 fe 72 89 db 18 8b 73 a3 c7 55 d3 79 97 23 c7 b3 b4 0b f8 43 b4 f9 4e 41 da b8 4f fe 1b 10 f4 f1 99 5c 3a d3 96 ca 76 71 ca 3f c2 ae 6b e9 2e 47 87 e4 b8 06 6a bf 28 bf 79 ca 7f ff 00 13 90 7f c3 93 fa 4c b9 b5 14 6f b3 b2 37 c1 1f 8f Data Ascii: 9w>pCu\Y8UqB}B$2H.0RFY,s>oF)v=r1([:qh;qI,M:B}2e=*x5yQDN=x1=~a<Z<HrsUy#CNAO\:vq?k.Gj(yLo7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.11	49831	142.251.15.91	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:47 UTC	1189	OUT	POST /youtubei/v1/player?prettyPrint=false HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 3375 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Youtube-Bootstrap-Logged-In: false sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json X-Youtube-Client-Name: 56 X-Youtube-Client-Version: 1.20240409.01.00 X-Goog-Visitor-Id: CgtJMG1ONlpYUjdsOCjIp_qwBjIKCgJVUxIEGgAgKA%3D%3D sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/wAD9uO9YAQw?playlist=wAD9uO9YAQw&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&origin=https%3A%2F%2Fniceindiatravel.com&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
2024-04-16 15:05:47 UTC	3375	OUT	Data Raw: 7b 22 76 69 64 65 6f 49 64 22 3a 22 77 41 44 39 75 4f 39 59 41 51 77 22 2c 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 68 6c 22 3a 22 65 6e 22 2c 22 67 6c 22 3a 22 55 53 22 2c 22 72 65 6d 6f 74 65 48 6f 73 74 22 3a 22 38 31 2e 31 38 31 2e 35 37 2e 35 32 22 2c 22 64 65 76 69 63 65 4d 61 6b 65 22 3a 22 22 2c 22 64 65 76 69 63 65 4d 6f 64 65 6c 22 3a 22 22 2c 22 76 69 73 69 74 6f 72 44 61 74 61 22 3a 22 43 67 74 4a 4d 47 31 4f 4e 6c 70 59 55 6a 64 73 4f 43 6a 49 70 5f 71 77 42 6a 49 4b 43 67 4a 56 55 78 49 45 47 67 41 67 4b 41 25 33 44 25 33 44 22 2c 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 Data Ascii: {"videoId":"wAD9uO9YAQw","context":{"client":{"hl":"en","gl":"US","remoteHost":"81.181.57.52","deviceMake":"","deviceModel":"","visitorData":"CgtJMG1ONlpYUjdsOCjIp_qwBjIKCgJVUxIEGgAgKA%3D%3D","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWeb
2024-04-16 15:05:47 UTC	432	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Tue, 16 Apr 2024 15:05:47 GMT Server: scaffolding on HTTPServer2 Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-16 15:05:47 UTC	823	IN	Data Raw: 38 30 30 30 0d 0a 7b 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 7b 22 73 65 72 76 69 63 65 54 72 61 63 6b 69 6e 67 50 61 72 61 6d 73 22 3a 5b 7b 22 73 65 72 76 69 63 65 22 3a 22 47 46 45 45 44 42 41 43 4b 22 2c 22 70 61 72 61 6d 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 69 70 63 63 22 2c 22 76 61 6c 75 65 22 3a 22 30 22 7d 2c 7b 22 6b 65 79 22 3a 22 69 73 5f 61 6c 63 5f 73 75 72 66 61 63 65 22 2c 22 76 61 6c 75 65 22 3a 22 66 61 6c 73 65 22 7d 2c 7b 22 6b 65 79 22 3a 22 69 73 5f 76 69 65 77 65 64 5f 6c 69 76 65 22 2c 22 76 61 6c 75 65 22 3a 22 46 61 6c 73 65 22 7d 2c 7b 22 6b 65 79 22 3a 22 6c 6f 67 67 65 64 5f 69 6e 22 2c 22 76 61 6c 75 65 22 3a 22 30 22 7d 2c 7b 22 6b 65 79 22 3a 22 65 22 2c 22 76 61 6c 75 65 22 3a 22 32 33 38 30 34 32 38 31 2c 32 Data Ascii: 8000{"responseContext":{"serviceTrackingParams":[{"service":"GFEEDBACK","params":[{"key":"ipcc","value":"0"},{"key":"is_alc_surface","value":"false"},{"key":"is_viewed_live","value":"False"},{"key":"logged_in","value":"0"},{"key":"e","value":"23804281,2
2024-04-16 15:05:47 UTC	1255	IN	Data Raw: 30 38 39 31 37 35 2c 35 31 30 38 39 34 34 31 2c 35 31 30 39 31 30 35 38 2c 35 31 30 39 31 33 33 31 2c 35 31 30 39 32 32 39 31 2c 35 31 30 39 32 36 36 30 2c 35 31 30 39 34 31 37 35 2c 35 31 30 39 34 31 39 35 2c 35 31 30 39 34 32 30 32 2c 35 31 30 39 34 32 30 37 2c 35 31 30 39 38 32 39 37 2c 35 31 30 39 38 32 39 39 2c 35 31 31 30 30 34 30 31 2c 35 31 31 30 31 34 35 34 2c 35 31 31 30 33 38 35 38 2c 35 31 31 30 34 39 38 38 2c 35 31 31 30 36 39 39 35 2c 35 31 31 30 37 33 33 31 2c 35 31 31 30 37 33 34 30 2c 35 31 31 30 38 30 30 36 2c 35 31 31 31 31 37 33 38 2c 35 31 31 31 31 39 35 32 2c 35 31 31 31 32 34 30 31 2c 35 31 31 31 33 36 35 36 2c 35 31 31 31 33 36 36 31 2c 35 31 31 31 33 37 35 30 2c 35 31 31 31 35 31 38 34 2c 35 31 31 31 36 30 36 37 2c 35 31 31 31 37 Data Ascii: 089175,51089441,51091058,51091331,51092291,51092660,51094175,51094195,51094202,51094207,51098297,51098299,51100401,51101454,51103858,51104988,51106995,51107331,51107340,51108006,51111738,51111952,51112401,51113656,51113661,51113750,51115184,51116067,51117
2024-04-16 15:05:47 UTC	1255	IN	Data Raw: 72 65 61 6d 69 6e 67 44 61 74 61 22 3a 7b 22 65 78 70 69 72 65 73 49 6e 53 65 63 6f 6e 64 73 22 3a 22 32 31 35 34 30 22 2c 22 66 6f 72 6d 61 74 73 22 3a 5b 7b 22 69 74 61 67 22 3a 31 38 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 72 72 35 2d 2d 2d 73 6e 2d 70 35 71 6c 73 6e 37 36 2e 67 6f 6f 67 6c 65 76 69 64 65 6f 2e 63 6f 6d 2f 76 69 64 65 6f 70 6c 61 79 62 61 63 6b 3f 65 78 70 69 72 65 3d 31 37 31 33 33 30 31 35 34 37 26 65 69 3d 79 35 4d 65 5a 71 53 50 42 39 61 6f 79 5f 73 50 78 63 75 49 30 41 38 26 69 70 3d 38 31 2e 31 38 31 2e 35 37 2e 35 32 26 69 64 3d 6f 2d 41 47 54 45 7a 36 79 72 5a 4e 33 30 7a 57 52 48 65 74 55 30 31 7a 66 50 5a 50 49 42 6b 71 58 77 4e 5f 6a 78 53 71 70 4e 47 6b 2d 4d 26 69 74 61 67 3d 31 38 26 73 6f 75 72 63 65 3d 79 6f 75 Data Ascii: reamingData":{"expiresInSeconds":"21540","formats":[{"itag":18,"url":"https://rr5---sn-p5qlsn76.googlevideo.com/videoplayback?expire=1713301547&ei=y5MeZqSPB9aoy_sPxcuI0A8&ip=81.181.57.52&id=o-AGTEz6yrZN30zWRHetU01zfPZPIBkqXwN_jxSqpNGk-M&itag=18&source=you
2024-04-16 15:05:47 UTC	1255	IN	Data Raw: 69 66 69 65 64 22 3a 22 31 36 39 33 34 37 36 33 39 30 31 34 34 34 31 31 22 2c 22 71 75 61 6c 69 74 79 22 3a 22 6d 65 64 69 75 6d 22 2c 22 66 70 73 22 3a 32 35 2c 22 71 75 61 6c 69 74 79 4c 61 62 65 6c 22 3a 22 33 36 30 70 22 2c 22 70 72 6f 6a 65 63 74 69 6f 6e 54 79 70 65 22 3a 22 52 45 43 54 41 4e 47 55 4c 41 52 22 2c 22 61 75 64 69 6f 51 75 61 6c 69 74 79 22 3a 22 41 55 44 49 4f 5f 51 55 41 4c 49 54 59 5f 4c 4f 57 22 2c 22 61 70 70 72 6f 78 44 75 72 61 74 69 6f 6e 4d 73 22 3a 22 31 35 36 39 36 36 22 2c 22 61 75 64 69 6f 53 61 6d 70 6c 65 52 61 74 65 22 3a 22 34 34 31 30 30 22 2c 22 61 75 64 69 6f 43 68 61 6e 6e 65 6c 73 22 3a 32 7d 2c 7b 22 69 74 61 67 22 3a 32 32 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 72 72 35 2d 2d 2d 73 6e 2d 70 35 71 6c 73 Data Ascii: ified":"1693476390144411","quality":"medium","fps":25,"qualityLabel":"360p","projectionType":"RECTANGULAR","audioQuality":"AUDIO_QUALITY_LOW","approxDurationMs":"156966","audioSampleRate":"44100","audioChannels":2},{"itag":22,"url":"https://rr5---sn-p5qls
2024-04-16 15:05:47 UTC	1255	IN	Data Raw: 38 47 54 56 5f 47 43 41 69 41 58 45 6b 70 43 79 52 59 52 5f 73 37 68 31 61 42 31 4c 6c 53 61 38 73 56 32 66 38 53 56 6e 67 4f 69 43 4b 42 66 53 67 66 54 75 51 25 33 44 25 33 44 22 2c 22 6d 69 6d 65 54 79 70 65 22 3a 22 76 69 64 65 6f 2f 6d 70 34 3b 20 63 6f 64 65 63 73 3d 5c 22 61 76 63 31 2e 36 34 30 30 31 46 2c 20 6d 70 34 61 2e 34 30 2e 32 5c 22 22 2c 22 62 69 74 72 61 74 65 22 3a 31 30 34 36 39 30 34 2c 22 77 69 64 74 68 22 3a 31 32 38 30 2c 22 68 65 69 67 68 74 22 3a 37 32 30 2c 22 6c 61 73 74 4d 6f 64 69 66 69 65 64 22 3a 22 31 36 39 33 34 37 36 36 31 34 35 39 39 38 34 34 22 2c 22 71 75 61 6c 69 74 79 22 3a 22 68 64 37 32 30 22 2c 22 66 70 73 22 3a 32 35 2c 22 71 75 61 6c 69 74 79 4c 61 62 65 6c 22 3a 22 37 32 30 70 22 2c 22 70 72 6f 6a 65 63 74 69 Data Ascii: 8GTV_GCAiAXEkpCyRYR_s7h1aB1LlSa8sV2f8SVngOiCKBfSgfTuQ%3D%3D","mimeType":"video/mp4; codecs=\"avc1.64001F, mp4a.40.2\"","bitrate":1046904,"width":1280,"height":720,"lastModified":"1693476614599844","quality":"hd720","fps":25,"qualityLabel":"720p","projecti
2024-04-16 15:05:47 UTC	1255	IN	Data Raw: 61 67 73 25 32 43 73 6f 75 72 63 65 25 32 43 72 65 71 75 69 72 65 73 73 6c 25 32 43 78 70 63 25 32 43 62 75 69 25 32 43 73 70 63 25 32 43 76 70 72 76 25 32 43 73 76 70 75 63 25 32 43 6d 69 6d 65 25 32 43 6e 73 25 32 43 67 69 72 25 32 43 63 6c 65 6e 25 32 43 64 75 72 25 32 43 6c 6d 74 26 73 69 67 3d 41 4a 66 51 64 53 73 77 52 67 49 68 41 4d 50 70 42 67 37 61 30 6e 6c 6d 4d 38 42 4d 62 44 5a 76 30 51 65 4d 62 55 2d 4c 70 7a 51 43 32 30 61 38 4a 72 67 4c 5a 55 38 46 41 69 45 41 30 46 45 75 4b 5f 63 66 52 45 78 4d 6d 33 46 41 30 39 78 48 64 53 4d 37 58 42 38 55 50 46 69 39 45 58 54 50 49 67 30 5f 42 78 38 25 33 44 26 6c 73 70 61 72 61 6d 73 3d 6d 68 25 32 43 6d 6d 25 32 43 6d 6e 25 32 43 6d 73 25 32 43 6d 76 25 32 43 6d 76 69 25 32 43 70 6c 25 32 43 69 6e 69 Data Ascii: ags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRgIhAMPpBg7a0nlmM8BMbDZv0QeMbU-LpzQC20a8JrgLZU8FAiEA0FEuK_cfRExMm3FA09xHdSM7XB8UPFi9EXTPIg0_Bx8%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cini
2024-04-16 15:05:47 UTC	1255	IN	Data Raw: 4a 48 62 5a 50 49 44 61 76 37 73 47 68 35 65 4d 73 49 72 63 55 4d 53 67 4e 5a 6f 56 2d 65 4a 26 73 70 63 3d 55 57 46 39 66 5f 43 39 30 37 70 6a 45 32 69 39 51 6c 56 69 76 44 69 4f 33 62 46 6c 6f 71 46 72 42 6b 77 33 4d 53 31 6a 39 64 33 58 58 6a 51 55 47 2d 34 30 75 56 59 57 2d 51 26 76 70 72 76 3d 31 26 73 76 70 75 63 3d 31 26 6d 69 6d 65 3d 76 69 64 65 6f 25 32 46 77 65 62 6d 26 6e 73 3d 38 49 6f 33 6f 45 57 37 46 53 41 72 38 56 59 6a 34 43 52 71 35 79 63 51 26 67 69 72 3d 79 65 73 26 63 6c 65 6e 3d 33 31 33 31 30 36 37 37 26 64 75 72 3d 31 35 36 2e 39 32 30 26 6c 6d 74 3d 31 36 39 33 34 37 35 39 34 39 39 35 38 30 36 36 26 6d 74 3d 31 37 31 33 32 37 39 36 36 35 26 66 76 69 70 3d 35 26 6b 65 65 70 61 6c 69 76 65 3d 79 65 73 26 63 3d 57 45 42 5f 45 4d 42 Data Ascii: JHbZPIDav7sGh5eMsIrcUMSgNZoV-eJ&spc=UWF9f_C907pjE2i9QlVivDiO3bFloqFrBkw3MS1j9d3XXjQUG-40uVYW-Q&vprv=1&svpuc=1&mime=video%2Fwebm&ns=8Io3oEW7FSAr8VYj4CRq5ycQ&gir=yes&clen=31310677&dur=156.920&lmt=1693475949958066&mt=1713279665&fvip=5&keepalive=yes&c=WEB_EMB
2024-04-16 15:05:47 UTC	1255	IN	Data Raw: 69 74 61 67 22 3a 33 39 39 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 72 72 35 2d 2d 2d 73 6e 2d 70 35 71 6c 73 6e 37 36 2e 67 6f 6f 67 6c 65 76 69 64 65 6f 2e 63 6f 6d 2f 76 69 64 65 6f 70 6c 61 79 62 61 63 6b 3f 65 78 70 69 72 65 3d 31 37 31 33 33 30 31 35 34 37 26 65 69 3d 79 35 4d 65 5a 71 53 50 42 39 61 6f 79 5f 73 50 78 63 75 49 30 41 38 26 69 70 3d 38 31 2e 31 38 31 2e 35 37 2e 35 32 26 69 64 3d 6f 2d 41 47 54 45 7a 36 79 72 5a 4e 33 30 7a 57 52 48 65 74 55 30 31 7a 66 50 5a 50 49 42 6b 71 58 77 4e 5f 6a 78 53 71 70 4e 47 6b 2d 4d 26 69 74 61 67 3d 33 39 39 26 61 69 74 61 67 73 3d 31 33 33 25 32 43 31 33 34 25 32 43 31 33 35 25 32 43 31 33 36 25 32 43 31 33 37 25 32 43 31 36 30 25 32 43 32 34 32 25 32 43 32 34 33 25 32 43 32 34 34 25 32 43 32 Data Ascii: itag":399,"url":"https://rr5---sn-p5qlsn76.googlevideo.com/videoplayback?expire=1713301547&ei=y5MeZqSPB9aoy_sPxcuI0A8&ip=81.181.57.52&id=o-AGTEz6yrZN30zWRHetU01zfPZPIBkqXwN_jxSqpNGk-M&itag=399&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C2
2024-04-16 15:05:47 UTC	1255	IN	Data Raw: 3d 5c 22 61 76 30 31 2e 30 2e 30 38 4d 2e 30 38 5c 22 22 2c 22 62 69 74 72 61 74 65 22 3a 33 30 37 35 31 38 36 2c 22 77 69 64 74 68 22 3a 31 39 32 30 2c 22 68 65 69 67 68 74 22 3a 31 30 38 30 2c 22 69 6e 69 74 52 61 6e 67 65 22 3a 7b 22 73 74 61 72 74 22 3a 22 30 22 2c 22 65 6e 64 22 3a 22 36 39 39 22 7d 2c 22 69 6e 64 65 78 52 61 6e 67 65 22 3a 7b 22 73 74 61 72 74 22 3a 22 37 30 30 22 2c 22 65 6e 64 22 3a 22 31 31 30 33 22 7d 2c 22 6c 61 73 74 4d 6f 64 69 66 69 65 64 22 3a 22 31 36 39 33 34 37 36 39 34 39 36 37 35 38 37 39 22 2c 22 63 6f 6e 74 65 6e 74 4c 65 6e 67 74 68 22 3a 22 32 39 35 31 33 31 31 35 22 2c 22 71 75 61 6c 69 74 79 22 3a 22 68 64 31 30 38 30 22 2c 22 66 70 73 22 3a 32 35 2c 22 71 75 61 6c 69 74 79 4c 61 62 65 6c 22 3a 22 31 30 38 30 70 Data Ascii: =\"av01.0.08M.08\"","bitrate":3075186,"width":1920,"height":1080,"initRange":{"start":"0","end":"699"},"indexRange":{"start":"700","end":"1103"},"lastModified":"1693476949675879","contentLength":"29513115","quality":"hd1080","fps":25,"qualityLabel":"1080p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.11	49832	142.251.15.91	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:47 UTC	941	OUT	GET /s/player/7ebf4817/player_ias.vflset/en_US/embed.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/embed/wAD9uO9YAQw?playlist=wAD9uO9YAQw&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&origin=https%3A%2F%2Fniceindiatravel.com&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
2024-04-16 15:05:47 UTC	688	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 58747 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 10 Apr 2024 17:10:25 GMT Expires: Thu, 10 Apr 2025 17:10:25 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 10 Apr 2024 04:18:25 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 510922 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 15:05:47 UTC	567	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 2f 2a 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 47 6f 6f 67 6c 65 20 4c 4c 43 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 0a 20 55 73 65 20 6f 66 20 74 68 69 73 20 73 6f 75 72 63 65 20 63 6f 64 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 61 6e 20 4d 49 54 2d 73 74 79 6c 65 20 6c 69 63 65 6e 73 65 20 74 68 61 74 20 63 61 6e 20 62 65 0a 20 66 6f 75 6e 64 20 69 6e 20 74 68 65 20 4c 49 43 45 4e 53 45 20 66 69 6c 65 20 61 74 20 68 74 74 70 73 3a 2f 2f 61 6e 67 75 6c 61 72 2e 69 6f 2f 6c 69 63 65 6e 73 65 0a 2a 2f 0a 2f 2a Data Ascii: (function(g){var window=this;/* SPDX-License-Identifier: Apache-2.0// Copyright Google LLC All Rights Reserved. Use of this source code is governed by an MIT-style license that can be found in the LICENSE file at https://angular.io/license//
2024-04-16 15:05:47 UTC	1255	IN	Data Raw: 76 67 2d 66 69 6c 6c 22 2c 58 3a 7b 64 3a 22 4d 20 31 36 2e 36 38 2c 2e 39 39 20 43 20 31 33 2e 35 35 2c 31 2e 30 33 20 37 2e 30 32 2c 31 2e 31 36 20 34 2e 39 39 2c 31 2e 36 38 20 63 20 2d 31 2e 34 39 2c 2e 34 20 2d 32 2e 35 39 2c 31 2e 36 20 2d 32 2e 39 39 2c 33 20 2d 30 2e 36 39 2c 32 2e 37 20 2d 30 2e 36 38 2c 38 2e 33 31 20 2d 30 2e 36 38 2c 38 2e 33 31 20 30 2c 30 20 2d 30 2e 30 31 2c 35 2e 36 31 20 2e 36 38 2c 38 2e 33 31 20 2e 33 39 2c 31 2e 35 20 31 2e 35 39 2c 32 2e 36 20 32 2e 39 39 2c 33 20 32 2e 36 39 2c 2e 37 20 31 33 2e 34 30 2c 2e 36 38 20 31 33 2e 34 30 2c 2e 36 38 20 30 2c 30 20 31 30 2e 37 30 2c 2e 30 31 20 31 33 2e 34 30 2c 2d 30 2e 36 38 20 31 2e 35 2c 2d 30 2e 34 20 32 2e 35 39 2c 2d 31 2e 36 20 32 2e 39 39 2c 2d 33 20 2e 36 39 2c 2d Data Ascii: vg-fill",X:{d:"M 16.68,.99 C 13.55,1.03 7.02,1.16 4.99,1.68 c -1.49,.4 -2.59,1.6 -2.99,3 -0.69,2.7 -0.68,8.31 -0.68,8.31 0,0 -0.01,5.61 .68,8.31 .39,1.5 1.59,2.6 2.99,3 2.69,.7 13.40,.68 13.40,.68 0,0 10.70,.01 13.40,-0.68 1.5,-0.4 2.59,-1.6 2.99,-3 .69,-
2024-04-16 15:05:47 UTC	1255	IN	Data Raw: 2c 2d 30 2e 32 31 20 63 20 30 2c 31 20 2d 30 2e 30 38 2c 31 2e 36 20 2d 30 2e 32 38 2c 32 20 2d 30 2e 31 2c 2e 34 20 2d 30 2e 35 2c 2e 36 32 20 2d 31 2c 2e 36 32 20 2d 30 2e 33 2c 30 20 2d 30 2e 36 31 2c 2d 30 2e 31 31 20 2d 30 2e 38 31 2c 2d 30 2e 33 31 20 2d 30 2e 32 2c 2d 30 2e 33 20 2d 30 2e 33 30 2c 2d 30 2e 35 39 20 2d 30 2e 34 30 2c 2d 31 2e 30 39 20 2d 30 2e 31 2c 2d 30 2e 35 20 2d 30 2e 30 39 2c 2d 31 2e 32 31 20 2d 30 2e 30 39 2c 2d 32 2e 32 31 20 6c 20 30 2c 2d 30 2e 37 38 20 35 2e 37 31 2c 2d 30 2e 30 39 20 30 2c 2d 32 2e 36 32 20 63 20 30 2c 2d 31 2e 36 20 2d 30 2e 31 30 2c 2d 32 2e 37 38 20 2d 30 2e 34 30 2c 2d 33 2e 36 38 20 2d 30 2e 32 2c 2d 30 2e 38 39 20 2d 30 2e 37 31 2c 2d 31 2e 35 39 20 2d 31 2e 33 31 2c 2d 31 2e 39 39 20 2d 30 2e 37 Data Ascii: ,-0.21 c 0,1 -0.08,1.6 -0.28,2 -0.1,.4 -0.5,.62 -1,.62 -0.3,0 -0.61,-0.11 -0.81,-0.31 -0.2,-0.3 -0.30,-0.59 -0.40,-1.09 -0.1,-0.5 -0.09,-1.21 -0.09,-2.21 l 0,-0.78 5.71,-0.09 0,-2.62 c 0,-1.6 -0.10,-2.78 -0.40,-3.68 -0.2,-0.89 -0.71,-1.59 -1.31,-1.99 -0.7
2024-04-16 15:05:47 UTC	1255	IN	Data Raw: 20 30 2c 30 20 2d 33 2e 34 30 2c 2e 30 30 20 2d 33 2e 34 30 2c 2d 30 2e 30 39 20 7a 20 6d 20 32 30 2e 39 30 2c 32 2e 30 39 20 63 20 2e 34 2c 30 20 2e 35 38 2c 2e 31 31 20 2e 37 38 2c 2e 33 31 20 2e 32 2c 2e 33 20 2e 33 30 2c 2e 35 39 20 2e 34 30 2c 31 2e 30 39 20 2e 31 2c 2e 35 20 2e 30 39 2c 31 2e 32 31 20 2e 30 39 2c 32 2e 32 31 20 6c 20 30 2c 31 2e 30 39 20 2d 32 2e 35 2c 30 20 30 2c 2d 31 2e 30 39 20 63 20 30 2c 2d 31 20 2d 30 2e 30 30 2c 2d 31 2e 37 31 20 2e 30 39 2c 2d 32 2e 32 31 20 30 2c 2d 30 2e 34 20 2e 31 31 2c 2d 30 2e 38 20 2e 33 31 2c 2d 31 20 2e 32 2c 2d 30 2e 33 20 2e 35 31 2c 2d 30 2e 34 30 20 2e 38 31 2c 2d 30 2e 34 30 20 7a 20 6d 20 2d 35 30 2e 34 39 2c 2e 31 32 20 63 20 2e 35 2c 30 20 2e 38 2c 2e 31 38 20 31 2c 2e 36 38 20 2e 31 39 2c Data Ascii: 0,0 -3.40,.00 -3.40,-0.09 z m 20.90,2.09 c .4,0 .58,.11 .78,.31 .2,.3 .30,.59 .40,1.09 .1,.5 .09,1.21 .09,2.21 l 0,1.09 -2.5,0 0,-1.09 c 0,-1 -0.00,-1.71 .09,-2.21 0,-0.4 .11,-0.8 .31,-1 .2,-0.3 .51,-0.40 .81,-0.40 z m -50.49,.12 c .5,0 .8,.18 1,.68 .19,
2024-04-16 15:05:47 UTC	1255	IN	Data Raw: 29 7b 62 3d 61 3b 76 61 72 20 65 3d 64 2c 66 3d 63 5b 64 5d 3b 30 3c 3d 65 2e 69 6e 64 65 78 4f 66 28 22 2d 22 29 3f 62 2e 73 65 74 50 72 6f 70 65 72 74 79 28 65 2c 66 29 3a 62 5b 65 5d 3d 66 7d 7d 7d 2c 66 72 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 74 79 70 65 6f 66 20 63 3b 0a 22 6f 62 6a 65 63 74 22 3d 3d 3d 64 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 64 3f 61 5b 62 5d 3d 63 3a 63 72 62 28 61 2c 62 2c 63 29 7d 2c 67 72 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 6e 65 77 20 61 72 62 3b 0a 61 2e 5f 5f 64 65 66 61 75 6c 74 3d 66 72 62 3b 61 2e 73 74 79 6c 65 3d 65 72 62 3b 72 65 74 75 72 6e 20 61 7d 2c 68 72 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 28 64 5b 62 5d 7c 7c 64 2e 5f 5f 64 65 Data Ascii: ){b=a;var e=d,f=c[d];0<=e.indexOf("-")?b.setProperty(e,f):b[e]=f}}},frb=function(a,b,c){var d=typeof c;"object"===d\|\|"function"===d?a[b]=c:crb(a,b,c)},grb=function(){var a=new arb;a.__default=frb;a.style=erb;return a},hrb=function(a,b,c,d){(d[b]\|\|d.__de
2024-04-16 15:05:47 UTC	1255	IN	Data Raw: 3a 63 3d 28 64 3d 22 73 76 67 22 3d 3d 3d 61 3f 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3a 22 6d 61 74 68 22 3d 3d 3d 61 3f 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 38 2f 4d 61 74 68 2f 4d 61 74 68 4d 4c 22 3a 6e 75 6c 6c 3d 3d 64 7c 7c 22 66 6f 72 65 69 67 6e 4f 62 6a 65 63 74 22 3d 3d 3d 66 35 28 64 29 2e 42 3f 6e 75 6c 6c 3a 64 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 29 3f 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 4e 53 28 64 2c 61 29 3a 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 61 29 2c 6b 72 62 28 63 2c 61 2c 62 29 2c 61 3d 63 29 2c 69 35 2e 63 72 65 61 74 65 64 2e 70 75 73 68 28 61 29 2c 63 3d 61 29 3b 61 3d 63 3b 69 66 28 61 21 3d 3d 6b 35 29 7b 69 66 28 30 3c 3d 6e 35 2e Data Ascii: :c=(d="svg"===a?"http://www.w3.org/2000/svg":"math"===a?"http://www.w3.org/1998/Math/MathML":null==d\|\|"foreignObject"===f5(d).B?null:d.namespaceURI)?c.createElementNS(d,a):c.createElement(a),krb(c,a,b),a=c),i5.created.push(a),c=a);a=c;if(a!==k5){if(0<=n5.
2024-04-16 15:05:47 UTC	1255	IN	Data Raw: 65 63 74 2e 69 73 28 61 2c 62 29 7d 2c 74 35 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 72 62 3b 0a 74 72 62 3d 61 3b 72 65 74 75 72 6e 20 62 7d 2c 75 72 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 67 6d 3d 21 30 3b 0a 69 66 28 76 6f 69 64 20 30 21 3d 3d 61 2e 66 6b 29 7b 76 61 72 20 62 3d 75 35 3b 75 35 3d 21 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 63 3d 67 2e 75 28 61 2e 66 6b 29 2c 64 3d 63 2e 6e 65 78 74 28 29 3b 21 64 2e 64 6f 6e 65 3b 64 3d 63 2e 6e 65 78 74 28 29 29 7b 76 61 72 20 65 3d 64 2e 76 61 6c 75 65 3b 65 2e 67 6d 7c 7c 75 72 62 28 65 29 7d 7d 66 69 6e 61 6c 6c 79 7b 75 35 3d 62 7d 7d 76 61 72 20 66 3b 6e 75 6c 6c 3d 3d 28 66 3d 61 2e 73 57 29 7c 7c 66 2e 63 61 6c 6c 28 61 2c 61 29 7d 2c 76 72 62 3d 66 75 6e 63 74 69 Data Ascii: ect.is(a,b)},t5=function(a){var b=trb;trb=a;return b},urb=function(a){a.gm=!0;if(void 0!==a.fk){var b=u5;u5=!0;try{for(var c=g.u(a.fk),d=c.next();!d.done;d=c.next()){var e=d.value;e.gm\|\|urb(e)}}finally{u5=b}}var f;null==(f=a.sW)\|\|f.call(a,a)},vrb=functi
2024-04-16 15:05:47 UTC	1255	IN	Data Raw: 3d 7b 7d 3b 65 2e 6e 42 3d 28 61 2e 6e 6f 74 69 66 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 72 62 28 65 29 7d 2c 61 2e 55 46 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6e 75 6c 6c 21 3d 3d 65 2e 4e 73 29 7b 69 66 28 75 35 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 53 63 68 65 64 75 6c 65 72 73 20 63 61 6e 6e 6f 74 20 73 79 6e 63 68 72 6f 6e 6f 75 73 6c 79 20 65 78 65 63 75 74 65 20 77 61 74 63 68 65 73 20 77 68 69 6c 65 20 73 63 68 65 64 75 6c 69 6e 67 2e 22 29 3b 0a 65 2e 67 6d 3d 21 31 3b 69 66 28 21 65 2e 66 59 7c 7c 7a 72 62 28 65 29 29 7b 65 2e 66 59 3d 21 30 3b 76 61 72 20 66 3d 76 72 62 28 65 29 3b 74 72 79 7b 65 2e 57 79 28 29 2c 65 2e 57 79 3d 42 72 62 2c 65 2e 4e 73 28 64 29 7d 66 69 6e 61 6c 6c 79 7b 79 72 62 28 65 2c 66 Data Ascii: ={};e.nB=(a.notify=function(){return urb(e)},a.UF=function(){if(null!==e.Ns){if(u5)throw Error("Schedulers cannot synchronously execute watches while scheduling.");e.gm=!1;if(!e.fY\|\|zrb(e)){e.fY=!0;var f=vrb(e);try{e.Wy(),e.Wy=Brb,e.Ns(d)}finally{yrb(e,f
2024-04-16 15:05:47 UTC	1255	IN	Data Raw: 3d 3d 4b 72 62 26 26 28 62 2e 63 44 7c 7c 28 62 2e 63 44 3d 5b 5d 29 2c 62 2e 63 44 2e 70 75 73 68 28 61 29 29 7d 2c 7a 35 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 70 72 6f 70 73 3d 61 3b 0a 74 68 69 73 2e 43 3d 21 31 7d 2c 4d 72 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 41 35 26 26 41 35 2e 75 77 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 52 65 61 63 74 69 76 65 20 63 6f 6d 70 6f 6e 65 6e 74 73 20 61 72 65 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 20 74 6f 20 75 73 65 20 75 73 65 53 74 61 74 65 20 6f 72 20 6f 74 68 65 72 20 6d 65 6d 6f 69 7a 61 74 69 6f 6e 20 62 61 73 65 64 20 68 6f 6f 6b 73 2e 22 29 3b 0a 72 65 74 75 72 6e 20 42 35 7d 2c 4e 72 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 41 35 3d 28 6e 75 6c 6c 3d 3d 61 3f 76 6f 69 64 20 30 3a Data Ascii: ==Krb&&(b.cD\|\|(b.cD=[]),b.cD.push(a))},z5=function(a){this.props=a;this.C=!1},Mrb=function(){if(A5&&A5.uw)throw Error("Reactive components are not allowed to use useState or other memoization based hooks.");return B5},Nrb=function(a){A5=(null==a?void 0:
2024-04-16 15:05:47 UTC	1255	IN	Data Raw: 7d 2c 47 35 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 46 35 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 5b 61 2c 0a 62 5d 2e 63 6f 6e 63 61 74 28 67 2e 6f 61 28 67 2e 49 61 2e 61 70 70 6c 79 28 32 2c 61 72 67 75 6d 65 6e 74 73 29 29 29 29 7d 2c 48 35 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 46 35 3b 0a 46 35 3d 61 3b 74 72 79 7b 72 65 74 75 72 6e 20 62 28 29 7d 66 69 6e 61 6c 6c 79 7b 46 35 3d 63 7d 7d 2c 49 35 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 22 22 29 7d 2c 4a 35 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 53 74 72 69 6e 67 28 61 29 29 3b 0a 61 2e 5f Data Ascii: },G5=function(a,b){return F5.apply(null,[a,b].concat(g.oa(g.Ia.apply(2,arguments))))},H5=function(a,b){var c=F5;F5=a;try{return b()}finally{F5=c}},I5=function(){return document.createTextNode("")},J5=function(a){a=document.createTextNode(String(a));a._

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.11	49834	74.125.136.155	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:47 UTC	657	OUT	GET /pagead/id HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:47 UTC	766	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.youtube.com Date: Tue, 16 Apr 2024 15:05:47 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.11	49836	142.250.105.148	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:47 UTC	635	OUT	GET /instream/ad_status.js HTTP/1.1 Host: static.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:47 UTC	744	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 29 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 16 Apr 2024 14:52:03 GMT Expires: Tue, 16 Apr 2024 15:07:03 GMT Cache-Control: public, max-age=900 Age: 824 Last-Modified: Thu, 12 Dec 2013 23:40:16 GMT Content-Type: text/javascript Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 15:05:47 UTC	29	IN	Data Raw: 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 5f 61 64 5f 73 74 61 74 75 73 20 3d 20 31 3b 0a Data Ascii: window.google_ad_status = 1;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.11	49837	142.250.9.103	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:47 UTC	658	OUT	GET /js/th/3pcSFWJI7a5SNv89Az7bTi6V80M4jnn3bPXR3H-Ku18.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:47 UTC	811	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 53204 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 16 Apr 2024 10:46:50 GMT Expires: Wed, 16 Apr 2025 10:46:50 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 04 Apr 2024 18:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 15537 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 15:05:47 UTC	444	IN	Data Raw: 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 64 61 74 61 3a 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3b 62 61 73 65 36 34 2c 65 79 4a 32 5a 58 4a 7a 61 57 39 75 49 6a 6f 67 4d 79 77 69 63 32 39 31 63 6d 4e 6c 63 79 49 36 57 79 49 69 58 53 77 69 63 32 39 31 63 6d 4e 6c 63 30 4e 76 62 6e 52 6c 62 6e 51 69 4f 6c 73 69 49 43 4a 64 4c 43 4a 75 59 57 31 6c 63 79 49 36 57 79 4a 6a 62 47 39 7a 64 58 4a 6c 52 48 6c 75 59 57 31 70 59 30 4a 31 64 48 52 76 62 69 4a 64 4c 43 4a 74 59 58 42 77 61 57 35 6e 63 79 49 36 49 6b 46 42 51 55 45 37 51 55 46 42 51 54 74 42 51 55 46 42 4f 30 46 42 51 55 45 37 51 55 46 42 51 54 74 42 51 55 46 42 4f 30 46 42 51 55 45 69 66 51 3d 3d 0a 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: //# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==(function(
2024-04-16 15:05:47 UTC	1255	IN	Data Raw: 75 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 4f 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 72 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 72 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 72 7d 29 2c 7a 3d 47 3b 65 6c 73 65 7b 69 66 28 7a 3d 3d 47 29 72 65 74 75 72 6e 20 58 3d 34 34 2c 4a 3b 7a 3d 3d 48 3f 28 46 2e 63 6f 6e 73 6f 6c 65 5b 4e 5d 28 65 2e 6d 65 73 73 61 67 65 29 2c 7a 3d 47 29 3a 35 32 3d 3d 7a 3f 7a 3d 46 2e 63 6f 6e 73 6f 6c 65 3f 48 3a 47 3a 37 35 3d 3d 7a 3f 28 4a 3d 57 2c 75 3d 46 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 7a 3d 5a 29 3a 7a 3d 3d 5a 3f 7a 3d 75 26 26 75 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 3f 31 37 3a 35 3a 39 35 3d 3d 7a 26 26 28 58 3d 34 34 2c 7a 3d 35 32 29 7d 7d 7d 63 61 74 63 68 28 50 29 7b 69 66 28 34 34 3d 3d 58 Data Ascii: u.createPolicy(O,{createHTML:r,createScript:r,createScriptURL:r}),z=G;else{if(z==G)return X=44,J;z==H?(F.console[N](e.message),z=G):52==z?z=F.console?H:G:75==z?(J=W,u=F.trustedTypes,z=Z):z==Z?z=u&&u.createPolicy?17:5:95==z&&(X=44,z=52)}}}catch(P){if(44==X
2024-04-16 15:05:47 UTC	1255	IN	Data Raw: 44 2e 44 2e 6c 65 6e 67 74 68 29 7b 28 44 2e 61 65 26 26 30 28 29 2c 44 2e 4b 4f 3d 7a 2c 44 29 2e 61 65 3d 74 72 75 65 3b 74 72 79 7b 4a 3d 44 2e 58 28 29 2c 44 2e 50 6e 3d 30 2c 44 2e 6f 65 3d 4a 2c 44 2e 73 69 3d 4a 2c 46 3d 5a 46 28 31 39 2c 31 2c 6e 75 6c 6c 2c 66 61 6c 73 65 2c 34 39 31 2c 7a 2c 44 29 2c 58 3d 45 3f 30 3a 31 30 2c 75 3d 44 2e 58 28 29 2d 44 2e 73 69 2c 44 2e 75 70 2b 3d 75 2c 44 2e 79 72 26 26 44 2e 79 72 28 75 2c 44 2e 76 2c 44 2e 57 2c 44 2e 46 2c 44 2e 53 29 2c 44 2e 76 3d 5a 2c 44 2e 57 3d 5a 2c 44 2e 46 3d 5a 2c 44 2e 53 3d 5a 2c 75 3c 58 7c 7c 30 3e 3d 44 2e 46 55 2d 2d 7c 7c 28 75 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 75 29 2c 44 2e 62 70 2e 70 75 73 68 28 32 35 34 3e 3d 75 3f 75 3a 32 35 34 29 29 7d 66 69 6e 61 6c 6c 79 7b 44 Data Ascii: D.D.length){(D.ae&&0(),D.KO=z,D).ae=true;try{J=D.X(),D.Pn=0,D.oe=J,D.si=J,F=ZF(19,1,null,false,491,z,D),X=E?0:10,u=D.X()-D.si,D.up+=u,D.yr&&D.yr(u,D.v,D.W,D.F,D.S),D.v=Z,D.W=Z,D.F=Z,D.S=Z,u<X\|\|0>=D.FU--\|\|(u=Math.floor(u),D.bp.push(254>=u?u:254))}finally{D
2024-04-16 15:05:47 UTC	1255	IN	Data Raw: 3d 4f 29 47 2e 61 64 64 4c 69 73 74 65 6e 65 72 28 48 29 2c 4f 3d 36 34 3b 65 6c 73 65 20 69 66 28 33 34 3d 3d 4f 29 4f 3d 33 31 3b 65 6c 73 65 20 69 66 28 36 3d 3d 4f 29 24 37 7c 7c 28 45 3d 72 29 2c 76 6f 69 64 20 30 3d 3d 3d 45 26 26 28 45 3d 75 29 2c 47 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 58 2e 74 6f 53 74 72 69 6e 67 28 29 2c 48 2c 45 29 2c 4f 3d 36 34 3b 65 6c 73 65 20 69 66 28 36 32 3d 3d 4f 29 45 3d 72 62 28 38 2c 45 2c 36 29 2c 7a 26 26 7a 5b 48 56 5d 3f 7a 2e 5a 2e 61 64 64 28 53 74 72 69 6e 67 28 47 29 2c 45 2c 75 2c 44 46 28 35 2c 38 2c 5a 2c 46 29 3f 21 21 46 2e 63 61 70 74 75 72 65 3a 21 21 46 2c 44 29 3a 65 76 28 45 2c 7a 2c 22 6f 62 6a 65 63 74 22 2c 44 2c 46 2c 39 2c 66 61 6c 73 65 2c 75 2c 47 29 2c 4f 3d 34 33 3b 65 6c Data Ascii: =O)G.addListener(H),O=64;else if(34==O)O=31;else if(6==O)$7\|\|(E=r),void 0===E&&(E=u),G.addEventListener(X.toString(),H,E),O=64;else if(62==O)E=rb(8,E,6),z&&z[HV]?z.Z.add(String(G),E,u,DF(5,8,Z,F)?!!F.capture:!!F,D):ev(E,z,"object",D,F,9,false,u,G),O=43;el
2024-04-16 15:05:47 UTC	1255	IN	Data Raw: 29 3e 3e 34 3f 34 39 3a 35 32 3b 65 6c 73 65 20 69 66 28 39 38 3d 3d 58 29 58 3d 36 37 3b 65 6c 73 65 20 69 66 28 34 39 3d 3d 58 29 58 3d 28 7a 7c 37 32 29 3d 3d 7a 3f 35 38 3a 37 38 3b 65 6c 73 65 20 69 66 28 36 37 3d 3d 58 29 58 3d 7a 3e 3e 31 26 31 33 3f 33 38 3a 34 35 3b 65 6c 73 65 20 69 66 28 33 38 3d 3d 58 29 58 3d 28 7a 2b 36 5e 31 30 29 3c 7a 26 26 7a 2d 36 3c 3c 44 3e 3d 7a 3f 39 36 3a 36 31 3b 65 6c 73 65 20 69 66 28 35 32 3d 3d 58 29 45 2e 4a 4a 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 4a 3d 72 7d 2c 47 2c 5a 29 2c 46 3d 4a 2c 58 3d 34 39 3b 65 6c 73 65 7b 69 66 28 37 38 3d 3d 58 29 72 65 74 75 72 6e 20 46 3b 34 35 3d 3d 58 26 26 28 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 3d 47 2c 74 68 69 73 2e 70 72 6f 78 79 3d 6e 75 6c 6c 2c 74 68 69 73 2e 73 Data Ascii: )>>4?49:52;else if(98==X)X=67;else if(49==X)X=(z\|72)==z?58:78;else if(67==X)X=z>>1&13?38:45;else if(38==X)X=(z+6^10)<z&&z-6<<D>=z?96:61;else if(52==X)E.JJ(function(r){J=r},G,Z),F=J,X=49;else{if(78==X)return F;45==X&&(this.listener=G,this.proxy=null,this.s
2024-04-16 15:05:47 UTC	1255	IN	Data Raw: 28 36 33 3d 3d 48 29 48 3d 38 38 3b 65 6c 73 65 20 69 66 28 33 30 3d 3d 48 29 45 2e 73 3d 28 28 45 2e 73 3f 45 2e 73 2b 5a 3a 22 45 3a 22 29 2b 7a 2e 6d 65 73 73 61 67 65 2b 22 3a 22 2b 7a 2e 73 74 61 63 6b 29 2e 73 6c 69 63 65 28 30 2c 32 30 34 38 29 2c 48 3d 32 39 3b 65 6c 73 65 7b 69 66 28 32 34 3d 3d 48 29 72 65 74 75 72 6e 20 65 3b 32 39 3d 3d 48 3f 48 3d 28 47 7c 36 34 29 3d 3d 47 3f 31 33 3a 36 3a 37 3d 3d 48 3f 28 72 2b 3d 72 3c 3c 33 2c 72 5e 3d 72 3e 3e 31 31 2c 58 3d 72 2b 28 72 3c 3c 31 35 29 3e 3e 3e 30 2c 75 3d 6e 65 77 20 4e 75 6d 62 65 72 28 58 26 28 31 3c 3c 7a 29 2d 31 29 2c 75 5b 30 5d 3d 28 58 3e 3e 3e 7a 29 25 45 2c 65 3d 75 2c 48 3d 36 29 3a 35 39 3d 3d 48 3f 48 3d 31 3d 3d 28 47 2b 33 26 37 29 3f 38 3a 32 34 3a 33 38 3d 3d 48 3f 48 Data Ascii: (63==H)H=88;else if(30==H)E.s=((E.s?E.s+Z:"E:")+z.message+":"+z.stack).slice(0,2048),H=29;else{if(24==H)return e;29==H?H=(G\|64)==G?13:6:7==H?(r+=r<<3,r^=r>>11,X=r+(r<<15)>>>0,u=new Number(X&(1<<z)-1),u[0]=(X>>>z)%E,e=u,H=6):59==H?H=1==(G+3&7)?8:24:38==H?H
2024-04-16 15:05:47 UTC	1255	IN	Data Raw: 3c 3c 31 3e 3d 47 29 69 66 28 4a 3d 22 61 72 72 61 79 22 3d 3d 3d 76 56 28 22 6e 75 6d 62 65 72 22 2c 22 63 61 6c 6c 22 2c 7a 29 3f 7a 3a 5b 7a 5d 2c 74 68 69 73 2e 73 29 44 28 74 68 69 73 2e 73 29 3b 65 6c 73 65 20 74 72 79 7b 45 3d 21 74 68 69 73 2e 44 2e 6c 65 6e 67 74 68 2c 75 3d 5b 5d 2c 56 28 31 33 2c 30 2c 74 68 69 73 2c 5b 77 62 2c 75 2c 4a 5d 29 2c 56 28 31 32 2c 30 2c 74 68 69 73 2c 5b 73 53 2c 44 2c 75 5d 29 2c 5a 26 26 21 45 7c 7c 52 28 74 68 69 73 2c 33 32 2c 66 61 6c 73 65 2c 5a 2c 74 72 75 65 29 7d 63 61 74 63 68 28 4e 29 7b 59 37 28 39 31 2c 34 37 2c 22 7e 22 2c 4e 2c 74 68 69 73 29 2c 44 28 74 68 69 73 2e 73 29 7d 72 65 74 75 72 6e 28 47 2b 34 5e 32 29 3e 3d 47 26 26 28 47 2d 33 7c 33 34 29 3c 47 26 26 28 7a 3d 75 4a 28 36 2c 5a 2c 38 29 Data Ascii: <<1>=G)if(J="array"===vV("number","call",z)?z:[z],this.s)D(this.s);else try{E=!this.D.length,u=[],V(13,0,this,[wb,u,J]),V(12,0,this,[sS,D,u]),Z&&!E\|\|R(this,32,false,Z,true)}catch(N){Y7(91,47,"~",N,this),D(this.s)}return(G+4^2)>=G&&(G-3\|34)<G&&(z=uJ(6,Z,8)
2024-04-16 15:05:47 UTC	1255	IN	Data Raw: 20 6d 3d 75 28 59 29 2c 57 26 26 57 28 6d 29 2c 6d 3b 34 33 3d 3d 77 3f 28 6e 28 29 2c 77 3d 39 33 29 3a 33 36 3d 3d 77 3f 77 3d 43 3f 33 37 3a 35 37 3a 38 38 3d 3d 77 3f 28 53 3d 4e 2c 4e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 28 53 28 29 2c 54 71 29 28 6e 29 7d 2c 77 3d 39 33 29 3a 33 37 3d 3d 77 26 26 28 77 3d 7a 3f 34 33 3a 38 38 29 7d 7d 2c 70 65 3a 66 75 6e 63 74 69 6f 6e 28 57 29 7b 4a 26 26 4a 28 57 29 7d 7d 2c 50 3d 39 34 29 3a 33 32 3d 3d 50 3f 50 3d 44 2d 33 26 31 35 3f 31 31 3a 38 33 3a 38 33 3d 3d 50 3f 50 3d 31 35 3a 35 33 3d 3d 50 3f 28 4f 3d 4a 2c 50 3d 31 33 29 3a 39 30 3d 3d 50 3f 28 4f 3d 75 2c 50 3d 37 30 29 3a 31 36 3d 3d 50 3f 50 3d 36 3c 3d 28 44 3c 3c 31 26 31 35 29 26 26 32 32 3e 28 44 7c 38 29 3f 31 37 3a 31 33 3a 39 33 3d 3d 50 3f Data Ascii: m=u(Y),W&&W(m),m;43==w?(n(),w=93):36==w?w=C?37:57:88==w?(S=N,N=function(){(S(),Tq)(n)},w=93):37==w&&(w=z?43:88)}},pe:function(W){J&&J(W)}},P=94):32==P?P=D-3&15?11:83:83==P?P=15:53==P?(O=J,P=13):90==P?(O=u,P=70):16==P?P=6<=(D<<1&15)&&22>(D\|8)?17:13:93==P?
2024-04-16 15:05:47 UTC	1255	IN	Data Raw: 3d 3d 50 3f 50 3d 4a 3c 44 2e 6c 65 6e 67 74 68 3f 32 3a 35 35 3a 34 3d 3d 50 3f 50 3d 31 3a 34 33 3d 3d 50 3f 28 48 2b 2b 2c 50 3d 31 29 3a 33 38 3d 3d 50 3f 28 7a 3d 77 69 6e 64 6f 77 2e 62 74 6f 61 2c 50 3d 37 30 29 3a 36 3d 3d 50 3f 28 5a 3d 76 6f 69 64 20 30 2c 50 3d 31 33 29 3a 38 36 3d 3d 50 3f 28 75 2e 5a 2e 72 65 6d 6f 76 65 28 53 74 72 69 6e 67 28 4a 29 2c 45 2c 58 2c 46 29 2c 50 3d 33 29 3a 34 39 3d 3d 50 3f 50 3d 31 39 3a 37 33 3d 3d 50 3f 50 3d 65 3f 33 31 3a 33 3a 37 30 3d 3d 50 26 26 28 50 3d 7a 3f 38 3a 36 29 7d 7d 2c 61 5a 3d 66 75 6e 63 74 69 6f 6e 28 44 2c 47 2c 5a 2c 7a 2c 45 2c 4a 2c 75 2c 46 29 7b 66 6f 72 28 46 3d 36 33 3b 39 36 21 3d 46 3b 29 69 66 28 36 33 3d 3d 46 29 46 3d 39 34 3b 65 6c 73 65 20 69 66 28 31 30 3d 3d 46 29 46 3d Data Ascii: ==P?P=J<D.length?2:55:4==P?P=1:43==P?(H++,P=1):38==P?(z=window.btoa,P=70):6==P?(Z=void 0,P=13):86==P?(u.Z.remove(String(J),E,X,F),P=3):49==P?P=19:73==P?P=e?31:3:70==P&&(P=z?8:6)}},aZ=function(D,G,Z,z,E,J,u,F){for(F=63;96!=F;)if(63==F)F=94;else if(10==F)F=
2024-04-16 15:05:47 UTC	1255	IN	Data Raw: 6c 73 65 21 3d 3d 46 2e 63 61 6c 6c 28 48 2c 7a 29 26 26 75 29 3b 4e 3d 75 26 26 21 7a 2e 64 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 7d 65 6c 73 65 20 4e 3d 47 3b 50 3d 39 35 7d 65 6c 73 65 20 36 3d 3d 50 3f 28 75 3d 7a 2e 6c 65 6e 67 74 68 2c 4a 3d 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 7a 3f 7a 2e 73 70 6c 69 74 28 5a 29 3a 7a 2c 46 3d 47 2c 50 3d 38 36 29 3a 39 30 3d 3d 50 3f 50 3d 46 3c 75 3f 35 37 3a 39 31 3a 36 36 3d 3d 50 3f 50 3d 31 3d 3d 28 44 3e 3e 31 26 31 35 29 3f 38 34 3a 39 35 3a 37 3d 3d 50 3f 28 4a 2e 63 6c 61 73 73 4c 69 73 74 3f 4a 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 75 29 3a 5a 46 28 35 2c 7a 2c 30 2c 75 2c 4a 29 26 26 42 56 28 38 36 2c 31 31 2c 5a 2c 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e Data Ascii: lse!==F.call(H,z)&&u);N=u&&!z.defaultPrevented}else N=G;P=95}else 6==P?(u=z.length,J="string"===typeof z?z.split(Z):z,F=G,P=86):90==P?P=F<u?57:91:66==P?P=1==(D>>1&15)?84:95:7==P?(J.classList?J.classList.remove(u):ZF(5,z,0,u,J)&&BV(86,11,Z,Array.prototype.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.11	49839	142.250.105.132	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:47 UTC	766	OUT	GET /80u-Vp0LwT_GzPtXdBZwLam5D06IleML6OJ6fgd3yr_LnC9097d3fFdw1o3BZ8djM465KIoBYbA=s68-c-k-c0x00ffffff-no-rj HTTP/1.1 Host: yt3.ggpht.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:47 UTC	531	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Wed, 17 Apr 2024 15:05:47 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="channels4_profile.jpg" X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 15:05:47 GMT Server: fife Content-Length: 6036 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 15:05:47 UTC	724	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 02 02 03 02 02 03 03 03 03 04 03 0f 04 0f 12 0f 05 04 04 11 11 07 07 11 08 0d 0e 0e 0c 0e 10 10 11 0f 0e 10 10 12 0e 0d 0d 0f 11 0d 10 0f 10 10 0e 12 11 10 0d 12 0d 0f 12 0e 0f 0f 11 10 0a 01 03 04 04 06 05 06 0a 06 06 0a 12 0e 0c 0d 13 12 13 10 10 12 10 10 10 12 10 11 11 10 10 13 10 10 11 11 10 10 10 0f 10 13 11 0f 15 12 10 11 12 10 12 10 12 11 11 10 11 10 15 0f 0f 12 10 10 12 11 ff c0 00 11 08 00 44 00 44 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 06 03 01 00 00 00 00 00 00 00 00 00 00 00 04 05 06 07 08 09 00 02 03 01 ff c4 00 32 10 00 02 01 04 01 03 03 03 02 05 04 03 00 00 00 00 01 02 03 04 05 11 12 06 00 13 21 07 08 22 14 31 41 32 61 23 33 43 51 71 09 15 81 82 24 25 Data Ascii: JFIFDD2!"1A2a#3CQq$%
2024-04-16 15:05:47 UTC	1255	IN	Data Raw: ea 17 3f fd 29 f3 8f ec 46 41 fc 13 d3 4e c3 aa 6d f7 ca 4c 2d c8 f2 a7 86 5f ba 9e 47 fc 7e ba 57 df f4 bd c6 c4 81 32 f0 7c 30 21 95 be cc 38 3f 6f 23 e9 a5 37 45 74 2b 59 d4 d4 d7 39 e7 8e 96 09 26 9a 45 88 46 32 f2 3f 85 0a 3c 92 7f 60 3a f2 cc 14 16 63 40 6b d2 a9 62 15 45 93 e0 6a ba 3d ca 7f a8 4f 1e 7e 79 3f 17 a7 a3 b9 dc e0 a1 23 bc 28 0a c6 8f 28 3f d4 d8 82 54 0f e9 81 e3 3f 23 dc 05 62 aa 3f 80 ba ff 00 c5 9b 25 de ed 4a 47 b6 7b 28 ae ce 8d 28 f6 90 85 43 d8 df 91 58 ad 8e f3 c1 5d 35 a7 53 e9 fd 09 8c 0e e7 f1 3e 19 c2 07 58 af ca af 7a f7 8f cc c2 e8 da 8f 06 c9 eb fd f5 70 8a ce 1f 70 b9 50 b5 da a1 8e b1 c1 c6 1f 31 2e 9d b0 87 23 6d 3b 78 5d 99 b2 7e 4e ca 43 12 ab d6 5f fc 7d f1 66 fb 7e 76 2f b4 11 e7 cf ac 66 27 6f 12 0e 18 80 84 33 Data Ascii: ?)FANmL-_G~W2\|0!8?o#7Et+Y9&EF2?<`:c@kbEj=O~y?#((?T?#b?%JG{((CX]5S>XzppP1.#m;x]~NC_}f~v/f'o3
2024-04-16 15:05:47 UTC	1255	IN	Data Raw: 28 e8 7f 1e e3 b5 74 57 4e c4 b6 ea 28 82 01 dd 6a b0 25 25 7c be 77 0b 20 c6 a3 ce 4a 0c f8 f8 b2 86 8f d6 e3 ac ef b7 31 cb 37 e2 66 66 5e 48 2e c0 83 e0 8c 09 5f 7f 0a b4 6b dc d8 06 dd bc 63 6f 24 68 63 8f 16 f0 dc 90 de e0 87 19 57 6f 36 dc 71 e1 40 62 25 0f b6 6b b4 de 8b 73 6b 45 e7 8b d4 2d 7a 12 a2 e9 41 43 1b 40 9a ba fe a1 b6 5d bc 86 46 32 11 a1 c3 1f 0a 99 45 eb 7b cd ec 5b 91 3e e0 bb 4b 07 90 c4 92 63 3f 32 f2 79 04 72 3d b2 0a 40 14 da 7a e9 09 b4 de 6d 70 88 af a3 b8 f9 48 20 e3 20 f9 49 a0 28 83 e7 81 40 b2 9f 23 56 cd 41 5b 05 ca 86 9e ae 9a 41 2a d4 00 d1 48 bf 62 ac 32 0f fc 8e ba 04 72 2c 88 1d 0d 82 2c 1f a8 3e 35 cf 24 8d a3 62 8e 28 83 44 7d 08 f3 a8 11 ef 0b 94 bd 1f a8 97 9b c4 d7 1a 14 16 f2 b1 d0 5b aa d3 ea 19 e4 45 47 66 5d Data Ascii: (tWN(j%%\|w J17ff^H._kco$hcWo6q@b%kskE-zAC@]F2E{[>Kc?2yr=@zmpH I(@#VA[A*Hb2r,,>5$b(D}[EGf]
2024-04-16 15:05:47 UTC	1255	IN	Data Raw: 11 09 70 19 23 09 20 5c 08 2a 50 b3 00 6d 55 9c 4f 87 54 f2 46 8e 9a 8a 56 0b 12 86 2d fd 10 9f df c0 f9 33 8c 12 1b 39 c6 7c 7c b5 59 dc ee 58 b9 27 ea 79 39 12 7e 82 cf d2 a8 01 40 01 c7 d3 4c f0 c7 16 d6 21 e6 bc 85 14 3e b6 40 1e 6e f2 24 e4 49 3e 34 03 87 59 ee 5c 8e b3 90 41 04 95 35 a2 cd 98 e5 86 a7 08 dd c3 2c cd fc 1d 57 3a 34 0f 13 05 63 b7 75 9c 02 51 63 2c f1 d6 76 69 0e cb a7 34 70 88 cc 91 17 2c 19 9b d4 e1 41 67 b3 da 43 87 f0 02 e3 8a 94 34 6d 7a 2d fa fa b2 19 6e b2 00 7f 2d 93 5e 2b 82 08 f1 cf 93 63 5b 25 a9 67 ae 35 0d 0a bf e9 15 46 5c 79 42 0a 64 e1 4f 95 04 f9 38 1a af f7 23 0b fb 19 64 20 23 02 ca 4f ca a6 41 dd 79 0c 42 30 c4 66 01 7c 6c 83 81 54 bb bb 7a 86 de 20 ef 28 2a 0d 77 33 7a 75 89 18 96 72 e8 c0 90 85 82 e5 4a 54 b8 66 Data Ascii: p# \PmUOTFV-39\|\|YX'y9~@L!>@n$I>4Y\A5,W:4cuQc,vi4p,AgC4mz-n-^+c[%g5F\yBdO8#d #OAyB0f\|lTz (w3zurJTf
2024-04-16 15:05:47 UTC	1255	IN	Data Raw: 9b fe 7a 60 da 43 e8 c2 b1 fd 07 3f 7f 7f ef a3 1d 6f 7c 37 fb e9 b7 2a 29 59 bb 47 d1 07 08 bf d1 00 1f d3 40 7d 70 f4 9e 8f d6 5f 4f ab 6c 13 ba d3 30 f9 db eb 58 67 4a 95 ce ad fd f0 41 28 f8 c1 28 cc 01 04 e4 7c dd ed ff 00 11 1e 37 44 72 0f d0 8f 07 fe ff 00 4d 7b e8 dd 4c f4 ed cf aa cb 94 6c 0a c8 97 59 a3 7c cb f7 f7 53 ec c0 1f 6d 56 95 d6 cb 55 c7 2f 75 f6 4b e5 0d 55 bd e8 49 15 14 b1 12 51 6a 47 cb 62 01 40 36 f0 f1 ba f8 3b 89 41 c1 e9 6a 09 23 96 6f 4a 68 50 64 b8 4b 91 08 49 54 2a 84 38 8d 88 4a 20 15 0b ca 8b c8 e4 54 9b eb 5f 0f 4b b5 8f f1 3b 26 69 61 62 64 87 10 5a ee 40 cd 94 66 44 53 20 20 8c b2 05 5c fc a3 10 40 19 ea 12 ee 93 c4 b3 52 2b 04 1d c4 ac 63 22 13 e4 0f ca 10 ca 18 fe 72 a3 c8 04 92 dd 5b 14 71 c4 b1 b4 c4 3b 64 c5 1e 89 Data Ascii: z`C?o\|7)YG@}p_Ol0XgJA((\|7DrM{LlY\|SmVU/uKUIQjGb@6;Aj#oJhPdKIT8J T_K;&iabdZ@fDS \@R+c"r[q;d
2024-04-16 15:05:47 UTC	292	IN	Data Raw: b7 90 4d 39 fc f8 91 14 75 fc 01 bb a4 3f cc e0 28 22 c2 37 04 4b 3b 5d ae 8e c9 6d a5 b7 db e9 61 a1 4a 55 0b 05 35 38 09 1a c6 a3 00 00 3c 00 07 80 07 4f 0a a1 40 55 14 06 b9 4c b3 3c ce d2 ca c5 99 89 24 93 64 93 e4 92 79 24 e8 57 5e b5 56 b3 a9 a9 ac ea 6a 6b 57 45 91 4a b2 86 db ee 0f 91 8e a6 a6 9b db d7 b7 cf 4d ef b5 73 d5 54 70 db 54 4d 51 fc da aa 25 fa 59 8f f9 68 8a 31 3f be 7a 1f 26 c3 6f 25 e5 18 e7 cf 15 77 e7 c5 69 92 1f 89 3a 9c 2a a8 bb 87 2a be 15 8e 6a 3e ca d6 3f b6 89 ad de d4 3d 2b b5 48 cd 0f 17 32 ef fa a3 aa 96 6a 88 cf f9 57 95 97 cf f8 eb 2a 74 8d 9a 1b 11 fb 57 25 8f 03 c0 e4 9e 07 b0 d6 d9 7e 2e ea d2 0a 33 01 ef 6b 1c 6a 6f ee a8 0f f7 d3 83 c5 78 2f 1c e0 d4 66 97 8e d8 6d b6 25 3f 78 ed c8 b0 02 7f 7d 40 c9 fd cf 45 23 86 Data Ascii: M9u?("7K;]maJU58<O@UL<$dy$W^VjkWEJMsTpTMQ%Yh1?z&o%wi:*j>?=+H2jWtW%~.3kjox/fm%?x}@E#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.11	49838	154.62.106.12	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:47 UTC	375	OUT	GET /wp-content/uploads/2018/10/5.jpg HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:49 UTC	392	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:49 GMT Content-Type: image/jpeg Content-Length: 81275 Connection: close Cache-Control: public, max-age=31536000 X-Hcdn-Image-Optimizer: f:jpeg q:85 w:1600 alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 32ed4ec5ecddbaf934efdc6fb47bf05a-bos-edge3 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 1.775 Accept-Ranges: bytes
2024-04-16 15:05:49 UTC	977	IN	Data Raw: ff d8 ff e1 00 80 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 05 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 4a 00 00 00 1b 01 05 00 01 00 00 00 52 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 69 87 04 00 01 00 00 00 5a 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 02 00 02 a0 04 00 01 00 00 00 58 02 00 00 03 a0 04 00 01 00 00 00 90 01 00 00 00 00 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e Data Ascii: ExifII*JR(iZHHXC!"$"$C
2024-04-16 15:05:49 UTC	1369	IN	Data Raw: 6b 5a 75 1a 5a d6 1c 6b 7a ce 34 ea 34 b9 20 69 36 1a 57 1e ba d1 1a 40 a8 39 b6 91 23 f9 6b 0a 9f b6 95 2b ad 11 a9 5a 81 8d 24 06 b3 6f df 4a f7 d6 f1 c6 95 a6 11 a4 4a f3 db 59 8d 2b 8d 66 3d f4 ad 2c 89 22 3d f5 a0 34 ae dc eb 45 74 f6 a2 58 b8 1a 51 73 ed ad 01 ea 75 d0 d4 4a 93 05 2c 3d b5 c9 23 5b 62 47 6d 72 73 a7 09 dc 56 b2 3d f5 a2 75 b3 f4 d6 b1 ce 74 e8 65 72 73 8e 75 80 64 f3 ad e0 fa 0d 6c 0d 3a 8d 5a cc 63 9d 75 e9 ad 03 ac 20 e9 94 82 cc 6b 4c 06 33 c6 b0 83 ad 1e 78 f5 d2 4c 57 24 e9 36 fa 6b a7 5d 73 9e 30 46 a6 10 1c 52 64 8c 60 9d 24 40 ee 49 d2 cc 09 d7 18 c7 3d f5 30 82 52 0c d8 38 1c e9 27 0c 06 9c 3a e5 b8 18 d7 2c 07 6c 64 e8 80 85 12 98 cc 58 0f 4c e9 1f 14 9e d9 ce 9f 4c 9b bb 2f 6d 24 d1 29 18 3d f4 66 b8 52 19 05 35 75 de bd Data Ascii: kZuZkz44 i6W@9#k+Z$oJJY+f=,"=4EtXQsuJ,=#[bGmrsV=utersudl:Zcu kL3xLW$6k]s0FRd`$@I=0R8':,ldXLL/m$)=fR5u
2024-04-16 15:05:49 UTC	1369	IN	Data Raw: 7d 9e 87 38 d1 00 41 2e 4b 2b ab 02 31 a4 a4 dc 39 50 34 89 91 54 f0 71 a4 64 aa 8c 72 ce 78 ec 3d f4 46 c6 6f 44 32 e4 ab 33 67 9e 06 93 93 2f ca 8d 36 35 48 78 19 03 5b f1 d7 1c 13 a3 64 21 43 30 29 ca a3 63 9c 1f b9 d2 13 86 ee 00 23 e9 a6 f2 55 ed 1c 7f 32 74 dd ea a5 23 cb 82 0e a6 d8 9d 6a 25 e2 93 a6 7d a4 1d dc e3 9d 26 f3 29 e4 f2 74 c9 ea 1b 3b 48 23 5c bb 86 4f 5f b8 d1 84 54 87 9f 92 7b e3 c7 8d 72 d2 21 c0 1c 69 ac 71 4a 57 2c 0e d3 fc f5 8d 04 88 bb 94 e4 7d 7b ea 59 1a 0e e9 ac ae e7 72 0e 40 dd ac 59 b0 b9 60 35 c0 57 18 c8 e7 4a 2a 29 5e 71 a9 69 49 6b 69 41 31 60 36 f2 34 ba 4a 30 32 73 a6 f1 a7 b6 40 d2 cb 0b 1c e8 4e 0d 53 16 b5 29 c8 27 d3 4d 15 b1 2e 14 9e fc f1 c6 9f 08 31 df 27 5d 25 26 1b 76 34 83 da 12 ca 4a 69 3c 6a ff 00 85 39 Data Ascii: }8A.K+19P4Tqdrx=FoD23g/65Hx[d!C0)c#U2t#j%}&)t;H#\O_T{r!iqJW,}{Yr@Y`5WJ*)^qiIkiA1`64J02s@NS)'M.1']%&v4Ji<j9
2024-04-16 15:05:49 UTC	1369	IN	Data Raw: 93 d8 ea 19 6a c6 79 d2 f1 d7 2e 71 c6 91 84 84 c2 6e f5 25 bb 5a 79 07 be 34 c8 55 26 39 23 f9 e9 29 6a 14 9e e3 9d 44 44 49 4e 66 52 06 60 47 e2 d2 2d 31 f4 03 1a 8e 92 7e 72 ad bb 49 34 ec 78 cf f5 d1 5b 0a 1b a5 52 bf 31 8f c4 79 d6 be 61 7b ea 21 a5 6e c1 cf f3 d6 d2 42 38 dc 3f 3d 4b a8 0a 3d 6a 98 4a 84 3f 43 ae 8c c0 2f be a2 96 60 a3 83 9d 76 2a f0 3b 11 a8 98 54 c4 9a 29 25 9b 23 07 5a 25 09 fc 5c fb ea 31 aa 0b 76 07 5b 13 38 e4 67 4b a9 29 ba c4 bd 46 e2 e4 6e c8 d3 77 94 2e 46 e3 ae 8c 8c c3 1a e1 97 e9 c9 d1 1a 2b 75 12 52 12 ce c4 63 18 fa e9 ab bb 13 93 c8 fa e9 e3 c7 c6 3d f4 97 82 3d cf f2 d1 da 40 43 36 53 5c 91 d8 6b 44 b8 1c e7 4e b6 01 ce 33 8d 69 95 8f a6 35 3c ca 34 9a e3 77 0d ad 85 20 fb 8d 2e 10 7b 64 7d b4 b2 43 c6 78 c6 91 7d Data Ascii: jy.qn%Zy4U&9#)jDDINfR`G-1~rI4x[R1ya{!nB8?=K=jJ?C/`v*;T)%#Z%\1v[8gK)Fnw.F+uRc==@C6S\kDN3i5<4w .{d}Cx}
2024-04-16 15:05:49 UTC	1369	IN	Data Raw: 08 50 bc 92 39 c2 aa 81 92 49 f6 d7 9f aa af 34 ff 00 15 7a ba 6a ba aa eb 8d 0d 8a dd 1b 9b 55 1c 58 85 eb 40 e2 59 41 6f 37 89 82 0a a8 c6 17 9c f9 8e 85 a9 d0 22 cb 26 51 43 74 08 d6 6a c8 7a 86 a3 a8 fa a3 c6 b9 75 6d ce 6f 10 ad 3c 29 53 15 09 3f 85 50 6f c1 2a 30 a0 be 14 63 03 27 45 56 1f 81 92 f5 05 70 ba 5f e7 ea 73 51 20 dc cd 71 a8 8a 17 1c f6 c4 6a d8 fb 67 57 07 46 74 ed 92 8a 80 51 a5 05 13 17 88 29 91 22 02 3a b4 18 f3 b2 fa 31 fd e5 e7 9e 7d 74 45 6f b2 d0 db 97 16 d8 8d 08 ff 00 a3 8d 8f 87 f9 2f 61 f9 63 4f d5 b0 68 42 a8 dc 23 4f c5 aa 63 d0 3d 1d 67 e8 db 4f c8 5a a0 65 dc db a5 92 49 5a 47 73 f5 66 e7 44 44 eb 59 c0 e4 eb 92 e3 4a 95 cb 6b 45 05 84 9c eb 92 75 a2 e3 dc 69 36 91 7d f9 d4 80 41 73 c0 5b 76 f6 3a 45 9f 59 24 80 03 92 35 Data Ascii: P9I4zjUX@YAo7"&QCtjzumo<)S?Po*0c'EVp_sQ qjgWFtQ)":1}tEo/acOhB#Oc=gOZeIZGsfDDYJkEui6}As[v:EY$5
2024-04-16 15:05:49 UTC	1369	IN	Data Raw: 9d c3 e9 55 de eb e7 58 a2 b3 c9 58 2a e3 a0 f1 21 a5 74 1e 48 62 66 dc 55 0f 72 85 89 23 d8 1e 3b ea 96 3e 5b 14 3d fb f7 ba ce 9e dc ea 29 29 51 52 36 58 aa 0c de 1b ed 90 63 c9 bb 1e 87 b1 c7 6d 49 d9 01 8a c9 77 a8 59 11 cb 08 e9 d5 94 f1 97 6c b0 fe 4b a1 ef 12 4c 21 76 c8 41 b3 6f f0 91 eb 8f f1 d4 dc 2c 63 e9 2a 62 b1 e1 ab 2a e5 9d 82 ff 00 0c 60 20 3f 6e fa c8 94 9c a0 73 af ca 80 1a 12 b9 79 10 50 98 da 69 10 49 26 5d 63 50 55 88 1c 13 cf 71 fe 3a b7 7f 47 ce 9d 8a fb d3 37 59 2a 2a 6d c6 38 aa 95 25 a5 36 43 70 aa 9c 60 30 20 77 44 18 fd de 49 ce 7d 01 a6 63 a5 79 ea 36 2b 46 f2 00 18 47 1b 03 95 c6 72 5b 3b 47 e6 74 7f f0 bf ab ef b4 b4 10 f4 7d 8e 7b ad 62 56 54 99 64 b7 5a 15 60 9e 51 8c be fa 8c 6f 1b 47 38 04 28 1d c8 1a bf 83 70 64 96 e4 Data Ascii: UXX!tHbfUr#;>[=))QR6XcmIwYlKL!vAo,cb` ?nsyPiI&]cPUq:G7Y*m8%6Cp`0 wDI}cy6+FGr[;Gt}{bVTdZ`QoG8(pd
2024-04-16 15:05:49 UTC	1369	IN	Data Raw: 1f 5d 6b c4 3a 7e ad 21 22 90 35 58 ce 0e b9 6a d2 3d 75 1c 49 d7 39 3e fa 71 0b 53 75 c5 48 9a d7 ed b8 e3 ef ae 45 63 13 c1 c7 e7 a6 05 89 f5 e3 5c e7 1e ba 90 85 aa 3d 6b 93 cf 98 62 09 77 3c 6b 5f 37 b7 95 62 7d f4 cc 9e 7e 9a d6 46 a5 d5 85 03 29 4e 9a b5 cf a9 d2 46 76 fe 23 83 a4 79 f4 d6 63 d7 3c ea 61 8d 0a 3d 69 4a 99 9f b0 3f d7 59 ba 42 3f 19 1f 9e b9 03 e9 ae b1 f4 d3 10 13 87 2d 87 2b c8 62 7f 3d 72 ce 4f 7c eb 65 3d ce b9 65 d2 14 9e ca e7 bf ae b9 24 81 ae b6 e0 83 dc 6b 78 1e da 9a 89 29 26 24 8e fa e3 9d 2a 47 7e 0e b8 65 fa 6a 40 a8 5a 48 eb 35 d1 53 ac d4 c1 0a 2a 16 c7 f1 33 e1 2d d4 53 7e be b2 cd d3 b7 4a 2a a9 84 12 d2 07 0b 44 4b 12 a0 4b 16 32 59 79 c0 04 77 fc c6 2d 90 d1 75 6f c4 5b 8d e5 ae f1 54 d1 db 64 1f 25 5d 52 84 4c e8 Data Ascii: ]k:~!"5Xj=uI9>qSuHEc\=kbw<k_7b}~F)NFv#yc<a=iJ?YB?-+b=rO\|e=e$kx)&$G~ej@ZH5S3-S~J*DKK2Yyw-uo[Td%]RL
2024-04-16 15:05:49 UTC	1369	IN	Data Raw: 8c 95 db f4 3a 05 b3 7c 52 81 c8 a2 a8 b2 1a 5a 84 5f db 53 8f d9 aa 38 f5 55 00 06 56 ee a4 64 9f 5c 1d 19 d9 6f d6 7b c4 4a d0 54 c4 8e c7 1b 5d f0 41 fc c0 c6 b4 60 e9 18 a6 d8 ea b3 a5 c2 b9 bb 2e c8 3f 4d 72 c3 4f 6a 69 da 2e f8 e7 4d 99 78 d5 e6 b8 1d 42 a4 41 09 10 35 bc 1c 76 ce b6 54 83 ad 8c ea 69 97 3f 4c eb 30 35 b6 1e ba d6 dd 3d a6 5a e3 df 59 91 8d 6f 6f ae b3 6f 3c 0d 24 ad 6b 70 e4 eb 92 75 de 08 f6 d6 8e 7d b1 a7 4d 6b 91 9f b6 94 50 70 06 78 fa 6b 8c eb b0 7d b4 c5 35 a6 1d 43 75 8a d1 6f 6a 89 18 a8 c7 e2 03 38 ff 00 e3 aa d2 9f e2 fd 54 37 67 13 88 d6 85 58 11 15 52 01 26 d3 d8 ee 5e 54 9f f7 be 9c 68 f3 ad ba 76 a3 a9 2d cf 49 4f 71 fd 5f 21 89 95 26 11 ef da 49 19 e3 ec 08 cf a1 39 d5 4f d4 9f 0d ab a1 bc da ec d4 d0 32 43 22 4e e9 Data Ascii: :\|RZ_S8UVd\o{JT]A`.?MrOji.MxBA5vTi?L05=ZYooo<$kpu}MkPpxk}5Cuoj8T7gXR&^Thv-IOq_!&I9O2C"N
2024-04-16 15:05:49 UTC	1369	IN	Data Raw: 4f 04 6a 65 0a 73 e5 c6 0b 1f 7d 59 9d 63 7b 8e 4a 09 ba 71 ba 76 d3 62 bc da 67 1e 30 a5 82 40 24 00 0c 4e 15 d5 58 72 c5 b6 30 0c 0f a9 d2 fd 13 d6 bd 7c 69 6e 34 57 0b d5 55 0c 94 69 ba 52 b3 b5 2b dc 02 f9 76 89 11 73 bc 0e 44 80 ed c7 71 ce 74 39 76 a7 86 39 7c 5a 53 33 d6 d3 4c 64 b9 8a d9 96 5a 82 d3 0e 15 9f 3e 6e 3d fe ba db 9b 12 63 87 2b 05 12 ab b9 e3 2e 50 a2 ed 11 da c4 77 88 fa 80 dc fe 76 78 98 09 28 25 8a 68 cc d8 ca b1 0d f8 e2 3f 85 c0 39 5c 82 33 ac 14 ef d6 54 57 4b ac b5 15 53 55 d9 2d 02 66 91 94 ce 73 1b a4 6b 1c 8e e7 3e 16 d2 d8 3f ba 40 1a 97 a4 e9 ba 64 a7 aa 9a db 05 7d 1d 4c 75 5e 0d be 92 5d cc 95 0c 71 e2 24 72 ec 0b 33 00 ca c2 30 ca e0 77 0d df 52 3f 0c 6d 77 ca 3b 85 f2 85 fe 50 1b bd ac 53 1a 70 03 c7 72 91 65 57 7a 58 Data Ascii: Ojes}Yc{Jqvbg0@$NXr0\|in4WUiR+vsDqt9v9\|ZS3LdZ>n=c+.Pwvx(%h?9\3TWKSU-fsk>?@d}Lu^]q$r30wR?mw;PSpreWzX
2024-04-16 15:05:49 UTC	1369	IN	Data Raw: a4 eb 3e 8b e9 6b e2 d7 5d ab 7a 4e d3 73 bd 1a 73 e1 cd 51 ba 36 91 95 7c 81 9d 08 6c 70 07 1c e3 8d 79 67 a8 45 e2 82 be ae c5 75 a7 b9 59 62 bd d3 25 ce 9e 96 9a 82 41 2c 55 d0 b1 8f 20 67 72 28 05 c6 f0 7c e0 ab 36 33 c7 3d 8e c1 e7 2d eb 1b 60 15 d3 e0 26 64 ac 70 0b d1 3d 2d d0 16 fb 57 c4 04 ea 2a 0a 13 49 04 b4 af e4 92 3d 92 2b 32 f2 5d 4f e1 6c e0 63 d0 67 47 86 10 af e7 c3 7d 06 99 74 c4 8c fd 3b 40 0d 32 53 aa c0 a9 1a a3 36 d7 50 00 0f 86 01 97 3c 92 ad e6 07 39 cf 7d 48 83 ad f6 9d 34 14 b9 b9 05 ba 8f 04 88 89 64 3b 76 ed 1e fa 49 e9 26 0d 80 87 ef e9 a7 ca 50 29 dd f9 11 ac 32 61 36 f6 f5 3c ea 41 ee 1b 26 11 b4 8d 54 79 85 d1 b0 cb 82 35 b2 99 f6 d3 99 e6 67 50 18 0f be 91 cf d7 44 0e 24 6a a2 5a d1 a0 49 78 5c 6b 02 0c 69 42 7d f5 c9 fa Data Ascii: >k]zNssQ6\|lpygEuYb%A,U gr(\|63=-`&dp=-W*I=+2]OlcgG}t;@2S6P<9}H4d;vI&P)2a6<A&Ty5gPD$jZIx\kiB}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.11	49835	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:47 UTC	571	OUT	GET /wp-includes/js/wp-emoji-release.min.js?ver=6.5.2 HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:48 UTC	600	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:48 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: public, max-age=604800 expires: Tue, 23 Apr 2024 15:05:48 GMT last-modified: Mon, 15 Apr 2024 17:34:16 GMT etag: W/"4926-661d6518-70f4018d6d4c8d5;gz" platform: hostinger content-security-policy: upgrade-insecure-requests x-turbo-charged-by: LiteSpeed alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 747b8679608ad401ce166fa8ad091be1-asc-edge3 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 1.068
2024-04-16 15:05:48 UTC	769	IN	Data Raw: 34 39 32 36 0d 0a 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 2f 2f 20 53 6f 75 72 63 65 3a 20 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 74 77 65 6d 6f 6a 69 2e 6d 69 6e 2e 6a 73 0a 76 61 72 20 74 77 65 6d 6f 6a 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 3d 7b 62 61 73 65 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6a 73 64 65 6c 69 76 72 2e 6e 65 74 2f 67 68 2f 6a 64 65 63 6b 65 64 2f 74 77 65 6d 6f 6a 69 40 31 35 2e 30 2e 33 2f 61 73 73 65 74 73 2f 22 2c 65 78 74 3a 22 2e 70 6e 67 22 2c 73 69 7a 65 3a 22 37 32 78 37 32 22 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 65 6d 6f 6a 69 22 2c 63 6f 6e 76 65 72 74 3a 7b 66 72 6f 6d 43 6f 64 65 50 6f 69 6e 74 Data Ascii: 4926/! This file is auto-generated /// Source: wp-includes/js/twemoji.min.jsvar twemoji=function(){"use strict";var h={base:"https://cdn.jsdelivr.net/gh/jdecked/twemoji@15.0.3/assets/",ext:".png",size:"72x72",className:"emoji",convert:{fromCodePoint
2024-04-16 15:05:48 UTC	1369	IN	Data Raw: 72 63 3d 22 27 2c 62 2c 27 22 27 29 2c 75 3d 61 2e 61 74 74 72 69 62 75 74 65 73 28 64 2c 65 29 29 75 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 66 29 26 26 30 21 3d 3d 66 2e 69 6e 64 65 78 4f 66 28 22 6f 6e 22 29 26 26 2d 31 3d 3d 3d 63 2e 69 6e 64 65 78 4f 66 28 22 20 22 2b 66 2b 22 3d 22 29 26 26 28 63 3d 63 2e 63 6f 6e 63 61 74 28 22 20 22 2c 66 2c 27 3d 22 27 2c 75 5b 66 5d 2e 72 65 70 6c 61 63 65 28 74 2c 72 29 2c 27 22 27 29 29 3b 63 3d 63 2e 63 6f 6e 63 61 74 28 22 2f 3e 22 29 7d 72 65 74 75 72 6e 20 63 7d 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 64 2c 75 29 7b 76 61 72 20 66 2c 63 2c 65 2c 62 2c 61 2c 74 2c 72 2c 6e 2c 6f 2c 73 2c 69 2c 6c 3d 66 75 6e 63 74 69 6f 6e 20 64 28 75 2c 66 29 7b 76 61 72 20 63 2c 65 2c 62 3d 75 2e 63 68 69 6c 64 4e 6f Data Ascii: rc="',b,'"'),u=a.attributes(d,e))u.hasOwnProperty(f)&&0!==f.indexOf("on")&&-1===c.indexOf(" "+f+"=")&&(c=c.concat(" ",f,'="',u[f].replace(t,r),'"'));c=c.concat("/>")}return c})}:function(d,u){var f,c,e,b,a,t,r,n,o,s,i,l=function d(u,f){var c,e,b=u.childNo
2024-04-16 15:05:48 UTC	1369	IN	Data Raw: 78 3d 30 2c 64 7d 7d 2c 75 3d 7b 22 26 22 3a 22 26 61 6d 70 3b 22 2c 22 3c 22 3a 22 26 6c 74 3b 22 2c 22 3e 22 3a 22 26 67 74 3b 22 2c 22 27 22 3a 22 26 23 33 39 3b 22 2c 27 22 27 3a 22 26 71 75 6f 74 3b 22 7d 2c 67 3d 2f 28 3f 3a 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 64 38 33 63 5c 75 64 66 66 62 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 38 62 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 64 38 33 63 5c 75 64 66 66 63 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 38 62 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 38 Data Ascii: x=0,d}},u={"&":"&","<":"<",">":">","'":"'",'"':"""},g=/(?:\ud83d\udc68\ud83c\udffb\u200d\u2764\ufe0f\u200d\ud83d\udc8b\u200d\ud83d\udc68\ud83c[\udffb-\udfff]\|\ud83d\udc68\ud83c\udffc\u200d\u2764\ufe0f\u200d\ud83d\udc8b\u200d\ud83d\udc68
2024-04-16 15:05:48 UTC	1369	IN	Data Raw: 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 64 38 33 63 5c 75 64 66 66 66 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 38 62 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 64 38 33 63 5c 75 64 66 66 66 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 38 62 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 65 5c 75 64 64 64 31 5c 75 64 38 33 63 5c 75 64 66 66 62 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 Data Ascii: \udfff]\|\ud83d\udc69\ud83c\udfff\u200d\u2764\ufe0f\u200d\ud83d\udc8b\u200d\ud83d\udc68\ud83c[\udffb-\udfff]\|\ud83d\udc69\ud83c\udfff\u200d\u2764\ufe0f\u200d\ud83d\udc8b\u200d\ud83d\udc69\ud83c[\udffb-\udfff]\|\ud83e\uddd1\ud83c\udffb\u200d\u2764\ufe0f\u200
2024-04-16 15:05:48 UTC	1369	IN	Data Raw: 64 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 64 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 64 38 33 63 5c 75 64 66 66 66 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 64 38 33 63 5c 75 64 66 66 66 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 64 31 64 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 65 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 64 38 33 63 5c 75 64 66 66 62 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 Data Ascii: d\ud83d\udc68\ud83c[\udffb-\udffd\udfff]\|\ud83d\udc68\ud83c\udfff\u200d\u2764\ufe0f\u200d\ud83d\udc68\ud83c[\udffb-\udfff]\|\ud83d\udc68\ud83c\udfff\u200d\ud83e\udd1d\u200d\ud83d\udc68\ud83c[\udffb-\udffe]\|\ud83d\udc69\ud83c\udffb\u200d\u2764\ufe0f\u200d\u
2024-04-16 15:05:48 UTC	1369	IN	Data Raw: 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 64 38 33 63 5c 75 64 66 66 65 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 64 31 64 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 64 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 64 38 33 63 5c 75 64 66 66 65 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 64 31 64 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 64 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 64 38 33 63 5c 75 64 66 66 66 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 38 5c Data Ascii: 3c[\udffb-\udfff]\|\ud83d\udc69\ud83c\udffe\u200d\ud83e\udd1d\u200d\ud83d\udc68\ud83c[\udffb-\udffd\udfff]\|\ud83d\udc69\ud83c\udffe\u200d\ud83e\udd1d\u200d\ud83d\udc69\ud83c[\udffb-\udffd\udfff]\|\ud83d\udc69\ud83c\udfff\u200d\u2764\ufe0f\u200d\ud83d\udc68\
2024-04-16 15:05:48 UTC	1369	IN	Data Raw: 33 64 5c 75 64 63 36 38 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 38 62 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 38 7c 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 38 62 5c 75 32 30 30 64 5c 75 64 38 33 64 5b 5c 75 64 63 36 38 5c 75 64 63 36 39 5d 7c 5c 75 64 38 33 65 5c 75 64 65 66 31 5c 75 64 38 33 63 5c 75 64 66 66 62 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 65 66 32 5c 75 64 38 33 63 5b 5c 75 64 66 66 63 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 65 5c 75 64 65 66 31 5c 75 64 38 33 63 5c 75 64 66 66 63 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 65 66 32 5c 75 64 38 33 63 5b 5c 75 64 66 Data Ascii: 3d\udc68\u200d\u2764\ufe0f\u200d\ud83d\udc8b\u200d\ud83d\udc68\|\ud83d\udc69\u200d\u2764\ufe0f\u200d\ud83d\udc8b\u200d\ud83d[\udc68\udc69]\|\ud83e\udef1\ud83c\udffb\u200d\ud83e\udef2\ud83c[\udffc-\udfff]\|\ud83e\udef1\ud83c\udffc\u200d\ud83e\udef2\ud83c[\udf
2024-04-16 15:05:49 UTC	1369	IN	Data Raw: 34 64 5c 75 64 65 34 65 5c 75 64 65 61 33 5c 75 64 65 62 34 2d 5c 75 64 65 62 36 5d 7c 5c 75 64 38 33 65 5b 5c 75 64 64 32 36 5c 75 64 64 33 35 5c 75 64 64 33 37 2d 5c 75 64 64 33 39 5c 75 64 64 33 64 5c 75 64 64 33 65 5c 75 64 64 62 38 5c 75 64 64 62 39 5c 75 64 64 63 64 2d 5c 75 64 64 63 66 5c 75 64 64 64 34 5c 75 64 64 64 36 2d 5c 75 64 64 64 64 5d 29 28 3f 3a 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 66 5d 29 3f 5c 75 32 30 30 64 5b 5c 75 32 36 34 30 5c 75 32 36 34 32 5d 5c 75 66 65 30 66 7c 28 3f 3a 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 36 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 36 7c 5c 75 64 38 33 64 5c 75 64 63 36 38 5c Data Ascii: 4d\ude4e\udea3\udeb4-\udeb6]\|\ud83e[\udd26\udd35\udd37-\udd39\udd3d\udd3e\uddb8\uddb9\uddcd-\uddcf\uddd4\uddd6-\udddd])(?:\ud83c[\udffb-\udfff])?\u200d[\u2640\u2642]\ufe0f\|(?:\ud83d\udc68\u200d\ud83d\udc68\u200d\ud83d\udc66\u200d\ud83d\udc66\|\ud83d\udc68\
2024-04-16 15:05:49 UTC	1369	IN	Data Raw: 36 66 5c 75 32 30 30 64 5c 75 32 36 34 30 5c 75 66 65 30 66 7c 5c 75 64 38 33 64 5c 75 64 63 36 66 5c 75 32 30 30 64 5c 75 32 36 34 32 5c 75 66 65 30 66 7c 5c 75 64 38 33 64 5c 75 64 65 32 65 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 61 38 7c 5c 75 64 38 33 64 5c 75 64 65 33 35 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 61 62 7c 5c 75 64 38 33 65 5c 75 64 64 33 63 5c 75 32 30 30 64 5c 75 32 36 34 30 5c 75 66 65 30 66 7c 5c 75 64 38 33 65 5c 75 64 64 33 63 5c 75 32 30 30 64 5c 75 32 36 34 32 5c 75 66 65 30 66 7c 5c 75 64 38 33 65 5c 75 64 64 64 65 5c 75 32 30 30 64 5c 75 32 36 34 30 5c 75 66 65 30 66 7c 5c 75 64 38 33 65 5c 75 64 64 64 65 5c 75 32 30 30 64 5c 75 32 36 34 32 5c 75 66 65 30 66 7c 5c 75 64 38 33 65 5c 75 64 64 64 66 5c 75 32 30 30 Data Ascii: 6f\u200d\u2640\ufe0f\|\ud83d\udc6f\u200d\u2642\ufe0f\|\ud83d\ude2e\u200d\ud83d\udca8\|\ud83d\ude35\u200d\ud83d\udcab\|\ud83e\udd3c\u200d\u2640\ufe0f\|\ud83e\udd3c\u200d\u2642\ufe0f\|\ud83e\uddde\u200d\u2640\ufe0f\|\ud83e\uddde\u200d\u2642\ufe0f\|\ud83e\udddf\u200
2024-04-16 15:05:49 UTC	1369	IN	Data Raw: 33 5c 75 32 37 33 34 5c 75 32 37 34 34 5c 75 32 37 34 37 5c 75 32 37 35 37 5c 75 32 37 36 33 5c 75 32 37 36 34 5c 75 32 37 61 31 5c 75 32 39 33 34 5c 75 32 39 33 35 5c 75 32 62 30 35 2d 5c 75 32 62 30 37 5c 75 32 62 31 62 5c 75 32 62 31 63 5c 75 32 62 35 30 5c 75 32 62 35 35 5c 75 33 30 33 30 5c 75 33 30 33 64 5c 75 33 32 39 37 5c 75 33 32 39 39 5d 29 28 3f 3a 5c 75 66 65 30 66 7c 28 3f 21 5c 75 66 65 30 65 29 29 7c 28 3f 3a 28 3f 3a 5c 75 64 38 33 63 5b 5c 75 64 66 63 62 5c 75 64 66 63 63 5d 7c 5c 75 64 38 33 64 5b 5c 75 64 64 37 34 5c 75 64 64 37 35 5c 75 64 64 39 30 5d 7c 5c 75 64 38 33 65 5c 75 64 65 66 30 7c 5b 5c 75 32 36 31 64 5c 75 32 36 66 37 5c 75 32 36 66 39 5c 75 32 37 30 63 5c 75 32 37 30 64 5d 29 28 3f 3a 5c 75 66 65 30 66 7c 28 3f 21 5c 75 Data Ascii: 3\u2734\u2744\u2747\u2757\u2763\u2764\u27a1\u2934\u2935\u2b05-\u2b07\u2b1b\u2b1c\u2b50\u2b55\u3030\u303d\u3297\u3299])(?:\ufe0f\|(?!\ufe0e))\|(?:(?:\ud83c[\udfcb\udfcc]\|\ud83d[\udd74\udd75\udd90]\|\ud83e\udef0\|[\u261d\u26f7\u26f9\u270c\u270d])(?:\ufe0f\|(?!\u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.11	49841	74.125.136.155	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:47 UTC	666	OUT	GET /pagead/id?slf_rd=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:47 UTC	808	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.youtube.com Content-Type: application/json; charset=UTF-8 Date: Tue, 16 Apr 2024 15:05:47 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-16 15:05:47 UTC	106	IN	Data Raw: 36 34 0d 0a 29 5d 7d 27 0a 0a 7b 22 69 64 22 3a 22 41 4e 79 50 78 4b 70 53 59 6d 4a 6c 32 39 63 77 5a 4d 6e 76 72 56 51 53 52 64 57 50 49 4b 59 55 61 2d 6e 63 6b 43 48 54 7a 36 6e 72 45 65 58 54 70 74 6d 65 57 73 45 76 34 66 4b 30 6f 5a 2d 65 73 4c 5a 6d 4d 62 56 5a 37 2d 58 52 22 2c 22 74 79 70 65 22 3a 34 7d 0d 0a Data Ascii: 64)]}'{"id":"ANyPxKpSYmJl29cwZMnvrVQSRdWPIKYUa-nckCHTz6nrEeXTptmeWsEv4fK0oZ-esLZmMbVZ7-XR","type":4}
2024-04-16 15:05:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.11	49844	74.125.136.132	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:47 UTC	531	OUT	GET /80u-Vp0LwT_GzPtXdBZwLam5D06IleML6OJ6fgd3yr_LnC9097d3fFdw1o3BZ8djM465KIoBYbA=s68-c-k-c0x00ffffff-no-rj HTTP/1.1 Host: yt3.ggpht.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:47 UTC	541	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="channels4_profile.jpg" X-Content-Type-Options: nosniff Server: fife Content-Length: 6036 X-XSS-Protection: 0 Date: Tue, 16 Apr 2024 14:50:35 GMT Expires: Wed, 17 Apr 2024 14:50:35 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/jpeg Vary: Origin Age: 912 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 15:05:47 UTC	714	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 02 02 03 02 02 03 03 03 03 04 03 0f 04 0f 12 0f 05 04 04 11 11 07 07 11 08 0d 0e 0e 0c 0e 10 10 11 0f 0e 10 10 12 0e 0d 0d 0f 11 0d 10 0f 10 10 0e 12 11 10 0d 12 0d 0f 12 0e 0f 0f 11 10 0a 01 03 04 04 06 05 06 0a 06 06 0a 12 0e 0c 0d 13 12 13 10 10 12 10 10 10 12 10 11 11 10 10 13 10 10 11 11 10 10 10 0f 10 13 11 0f 15 12 10 11 12 10 12 10 12 11 11 10 11 10 15 0f 0f 12 10 10 12 11 ff c0 00 11 08 00 44 00 44 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 06 03 01 00 00 00 00 00 00 00 00 00 00 00 04 05 06 07 08 09 00 02 03 01 ff c4 00 32 10 00 02 01 04 01 03 03 03 02 05 04 03 00 00 00 00 01 02 03 04 05 11 12 06 00 13 21 07 08 22 14 31 41 32 61 23 33 43 51 71 09 15 81 82 24 25 Data Ascii: JFIFDD2!"1A2a#3CQq$%
2024-04-16 15:05:47 UTC	1255	IN	Data Raw: 69 2d 35 7b 18 f1 de a3 9c 76 ea 17 3f fd 29 f3 8f ec 46 41 fc 13 d3 4e c3 aa 6d f7 ca 4c 2d c8 f2 a7 86 5f ba 9e 47 fc 7e ba 57 df f4 bd c6 c4 81 32 f0 7c 30 21 95 be cc 38 3f 6f 23 e9 a5 37 45 74 2b 59 d4 d4 d7 39 e7 8e 96 09 26 9a 45 88 46 32 f2 3f 85 0a 3c 92 7f 60 3a f2 cc 14 16 63 40 6b d2 a9 62 15 45 93 e0 6a ba 3d ca 7f a8 4f 1e 7e 79 3f 17 a7 a3 b9 dc e0 a1 23 bc 28 0a c6 8f 28 3f d4 d8 82 54 0f e9 81 e3 3f 23 dc 05 62 aa 3f 80 ba ff 00 c5 9b 25 de ed 4a 47 b6 7b 28 ae ce 8d 28 f6 90 85 43 d8 df 91 58 ad 8e f3 c1 5d 35 a7 53 e9 fd 09 8c 0e e7 f1 3e 19 c2 07 58 af ca af 7a f7 8f cc c2 e8 da 8f 06 c9 eb fd f5 70 8a ce 1f 70 b9 50 b5 da a1 8e b1 c1 c6 1f 31 2e 9d b0 87 23 6d 3b 78 5d 99 b2 7e 4e ca 43 12 ab d6 5f fc 7d f1 66 fb 7e 76 2f b4 11 e7 cf Data Ascii: i-5{v?)FANmL-_G~W2\|0!8?o#7Et+Y9&EF2?<`:c@kbEj=O~y?#((?T?#b?%JG{((CX]5S>XzppP1.#m;x]~NC_}f~v/
2024-04-16 15:05:47 UTC	1255	IN	Data Raw: a2 e4 32 e5 ce 2d 46 c3 63 6c 28 e8 7f 1e e3 b5 74 57 4e c4 b6 ea 28 82 01 dd 6a b0 25 25 7c be 77 0b 20 c6 a3 ce 4a 0c f8 f8 b2 86 8f d6 e3 ac ef b7 31 cb 37 e2 66 66 5e 48 2e c0 83 e0 8c 09 5f 7f 0a b4 6b dc d8 06 dd bc 63 6f 24 68 63 8f 16 f0 dc 90 de e0 87 19 57 6f 36 dc 71 e1 40 62 25 0f b6 6b b4 de 8b 73 6b 45 e7 8b d4 2d 7a 12 a2 e9 41 43 1b 40 9a ba fe a1 b6 5d bc 86 46 32 11 a1 c3 1f 0a 99 45 eb 7b cd ec 5b 91 3e e0 bb 4b 07 90 c4 92 63 3f 32 f2 79 04 72 3d b2 0a 40 14 da 7a e9 09 b4 de 6d 70 88 af a3 b8 f9 48 20 e3 20 f9 49 a0 28 83 e7 81 40 b2 9f 23 56 cd 41 5b 05 ca 86 9e ae 9a 41 2a d4 00 d1 48 bf 62 ac 32 0f fc 8e ba 04 72 2c 88 1d 0d 82 2c 1f a8 3e 35 cf 24 8d a3 62 8e 28 83 44 7d 08 f3 a8 11 ef 0b 94 bd 1f a8 97 9b c4 d7 1a 14 16 f2 b1 d0 Data Ascii: 2-Fcl(tWN(j%%\|w J17ff^H._kco$hcWo6q@b%kskE-zAC@]F2E{[>Kc?2yr=@zmpH I(@#VA[A*Hb2r,,>5$b(D}
2024-04-16 15:05:47 UTC	1255	IN	Data Raw: 48 43 b3 8e e3 8a 85 60 32 2a 11 09 70 19 23 09 20 5c 08 2a 50 b3 00 6d 55 9c 4f 87 54 f2 46 8e 9a 8a 56 0b 12 86 2d fd 10 9f df c0 f9 33 8c 12 1b 39 c6 7c 7c b5 59 dc ee 58 b9 27 ea 79 39 12 7e 82 cf d2 a8 01 40 01 c7 d3 4c f0 c7 16 d6 21 e6 bc 85 14 3e b6 40 1e 6e f2 24 e4 49 3e 34 03 87 59 ee 5c 8e b3 90 41 04 95 35 a2 cd 98 e5 86 a7 08 dd c3 2c cd fc 1d 57 3a 34 0f 13 05 63 b7 75 9c 02 51 63 2c f1 d6 76 69 0e cb a7 34 70 88 cc 91 17 2c 19 9b d4 e1 41 67 b3 da 43 87 f0 02 e3 8a 94 34 6d 7a 2d fa fa b2 19 6e b2 00 7f 2d 93 5e 2b 82 08 f1 cf 93 63 5b 25 a9 67 ae 35 0d 0a bf e9 15 46 5c 79 42 0a 64 e1 4f 95 04 f9 38 1a af f7 23 0b fb 19 64 20 23 02 ca 4f ca a6 41 dd 79 0c 42 30 c4 66 01 7c 6c 83 81 54 bb bb 7a 86 de 20 ef 28 2a 0d 77 33 7a 75 89 18 96 72 Data Ascii: HC`2p# \PmUOTFV-39\|\|YX'y9~@L!>@n$I>4Y\A5,W:4cuQc,vi4p,AgC4mz-n-^+c[%g5F\yBdO8#d #OAyB0f\|lTz (*w3zur
2024-04-16 15:05:47 UTC	1255	IN	Data Raw: 78 06 a5 f3 24 ad ff 00 69 59 9b fe 7a 60 da 43 e8 c2 b1 fd 07 3f 7f 7f ef a3 1d 6f 7c 37 fb e9 b7 2a 29 59 bb 47 d1 07 08 bf d1 00 1f d3 40 7d 70 f4 9e 8f d6 5f 4f ab 6c 13 ba d3 30 f9 db eb 58 67 4a 95 ce ad fd f0 41 28 f8 c1 28 cc 01 04 e4 7c dd ed ff 00 11 1e 37 44 72 0f d0 8f 07 fe ff 00 4d 7b e8 dd 4c f4 ed cf aa cb 94 6c 0a c8 97 59 a3 7c cb f7 f7 53 ec c0 1f 6d 56 95 d6 cb 55 c7 2f 75 f6 4b e5 0d 55 bd e8 49 15 14 b1 12 51 6a 47 cb 62 01 40 36 f0 f1 ba f8 3b 89 41 c1 e9 6a 09 23 96 6f 4a 68 50 64 b8 4b 91 08 49 54 2a 84 38 8d 88 4a 20 15 0b ca 8b c8 e4 54 9b eb 5f 0f 4b b5 8f f1 3b 26 69 61 62 64 87 10 5a ee 40 cd 94 66 44 53 20 20 8c b2 05 5c fc a3 10 40 19 ea 12 ee 93 c4 b3 52 2b 04 1d c4 ac 63 22 13 e4 0f ca 10 ca 18 fe 72 a3 c8 04 92 dd 5b 14 Data Ascii: x$iYz`C?o\|7)YG@}p_Ol0XgJA((\|7DrM{LlY\|SmVU/uKUIQjGb@6;Aj#oJhPdKIT8J T_K;&iabdZ@fDS \@R+c"r[
2024-04-16 15:05:47 UTC	302	IN	Data Raw: 8f 24 d6 80 ef 3e 27 4d 88 61 b7 90 4d 39 fc f8 91 14 75 fc 01 bb a4 3f cc e0 28 22 c2 37 04 4b 3b 5d ae 8e c9 6d a5 b7 db e9 61 a1 4a 55 0b 05 35 38 09 1a c6 a3 00 00 3c 00 07 80 07 4f 0a a1 40 55 14 06 b9 4c b3 3c ce d2 ca c5 99 89 24 93 64 93 e4 92 79 24 e8 57 5e b5 56 b3 a9 a9 ac ea 6a 6b 57 45 91 4a b2 86 db ee 0f 91 8e a6 a6 9b db d7 b7 cf 4d ef b5 73 d5 54 70 db 54 4d 51 fc da aa 25 fa 59 8f f9 68 8a 31 3f be 7a 1f 26 c3 6f 25 e5 18 e7 cf 15 77 e7 c5 69 92 1f 89 3a 9c 2a a8 bb 87 2a be 15 8e 6a 3e ca d6 3f b6 89 ad de d4 3d 2b b5 48 cd 0f 17 32 ef fa a3 aa 96 6a 88 cf f9 57 95 97 cf f8 eb 2a 74 8d 9a 1b 11 fb 57 25 8f 03 c0 e4 9e 07 b0 d6 d9 7e 2e ea d2 0a 33 01 ef 6b 1c 6a 6f ee a8 0f f7 d3 83 c5 78 2f 1c e0 d4 66 97 8e d8 6d b6 25 3f 78 ed c8 b0 Data Ascii: $>'MaM9u?("7K;]maJU58<O@UL<$dy$W^VjkWEJMsTpTMQ%Yh1?z&o%wi:*j>?=+H2jWtW%~.3kjox/fm%?x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.11	49843	154.62.106.12	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:47 UTC	375	OUT	GET /wp-content/uploads/2018/10/7.jpg HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:49 UTC	392	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:49 GMT Content-Type: image/jpeg Content-Length: 64830 Connection: close Cache-Control: public, max-age=31536000 X-Hcdn-Image-Optimizer: f:jpeg q:85 w:1600 alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 012a8b42f6657468a42da442d8b625c2-bos-edge3 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 1.737 Accept-Ranges: bytes
2024-04-16 15:05:49 UTC	977	IN	Data Raw: ff d8 ff e1 00 80 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 05 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 4a 00 00 00 1b 01 05 00 01 00 00 00 52 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 69 87 04 00 01 00 00 00 5a 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 02 00 02 a0 04 00 01 00 00 00 58 02 00 00 03 a0 04 00 01 00 00 00 90 01 00 00 00 00 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e Data Ascii: ExifII*JR(iZHHXC!"$"$C
2024-04-16 15:05:49 UTC	1369	IN	Data Raw: 47 f7 d1 c6 87 f8 d3 01 63 40 0d 3b 4b 40 86 e3 40 8f 3a 76 96 98 0d 3a 87 77 b8 43 6d a5 f5 a6 c1 27 f4 a9 3f e4 fd b5 34 eb 87 ff 00 da 03 ab 9a df 70 a8 b4 46 fb 6a 82 96 d9 9f d2 b8 c0 3f e7 fc eb 9d e9 2d 4e 4c 38 d2 c5 fd 52 75 fc 7e e6 ff 00 47 69 a1 9f 23 79 3a 25 7f c9 6f d4 bf 10 aa 15 e6 80 56 88 20 c6 d6 58 d4 2e 57 78 56 e7 bf 63 fd b5 cf 6f 7d 43 63 a9 a0 ae 96 92 d7 1d 0a ad 25 58 8a 39 fd 39 24 56 89 95 4b ee 51 81 f4 9c af b7 e7 5c ae a6 e3 78 b8 c9 85 2f 29 db 82 49 c7 04 60 93 f9 c7 3a d6 d5 7c 2e ea 95 f8 44 7a ea 59 9b d6 2e 5c d0 ee 04 3d b9 97 6b 4d 9e fb cb 63 e8 ff 00 48 dc 75 c5 96 29 36 9e 5c 96 ff 00 93 b9 0c 91 82 6b 14 29 16 d7 59 ba 6a a3 ab e4 a4 9e d7 4a f4 ab 73 54 40 a4 a9 11 0a 3c 81 95 20 e3 7f d4 4f 93 ad 47 c1 9e a6 Data Ascii: Gc@;K@@:v:wCm'?4pFj?-NL8Ru~Gi#y:%oV X.WxVco}Cc%X99$VKQ\x/)I`:\|.DzY.\=kMcHu)6\k)YjJsT@< OG
2024-04-16 15:05:49 UTC	1369	IN	Data Raw: 96 3c e8 e9 63 8e 74 58 03 1f 6d 0d 1d 2d 16 02 d0 c6 8e 96 8b 00 79 d0 c6 89 d2 d1 63 06 96 8e 86 90 50 32 74 b1 a3 8f ce 96 34 00 34 34 74 80 3a 06 0d 2d 1c 7d b4 b4 01 63 db 43 47 ce 97 ed ac e6 80 7e da 5a 3e 34 b4 08 47 4b 1a 5a 5a 90 81 a5 a3 a5 8d 00 02 34 b4 74 b4 00 34 31 a7 69 68 10 dd 2d 1d 22 34 ec 40 e3 db 48 02 48 00 12 4f 61 a3 8d 47 b9 56 c7 6c b6 d5 5c e4 38 4a 58 9a 53 c7 91 db fc e3 49 c9 45 36 c6 93 6e 91 c0 3e 36 f5 83 4d d6 17 0a 37 a3 15 54 96 bc d3 53 04 99 40 62 30 59 ff 00 fd be 39 23 b6 3c 6b 7b d0 14 9f c0 7a 46 82 85 fe 89 44 0b 25 40 7e 18 ca e3 7b 9f f2 07 ed ae 65 d5 3d 2b 0c af 02 c7 68 54 aa a8 ab 25 a7 8e 67 12 90 14 c9 21 dd 9e 4e 3d f3 ed ad cd 24 d5 34 74 11 40 d5 32 4b 4f 0c 49 08 57 71 83 91 c9 24 f3 81 83 c7 7f c6 Data Ascii: <ctXm-ycP2t444t:-}cCG~Z>4GKZZ4t41ih-"4@HHOaGVl\8JXSIE6n>6M7TS@b0Y9#<k{zFD%@~{e=+hT%g!N=$4t@2KOIWq$
2024-04-16 15:05:49 UTC	1369	IN	Data Raw: 32 cc b1 5d 29 f2 84 70 c0 ee 53 e4 8c 73 db 9f db b6 a4 9a 93 4d f9 b1 34 d2 7f c1 0a f7 d4 77 1a a8 95 aa a2 a5 af 56 8a 44 a8 41 0c 71 95 56 db 93 19 49 59 b3 c0 c6 47 e7 59 6b 4b 45 2c 85 56 a3 61 95 0a 02 54 e5 4f 2b c8 f3 e3 3a ea d5 76 fa 75 8a 9a 8d aa 6d f9 0f 1a 98 0c 28 48 56 fa 70 07 e1 bc 0c ff 00 8d 73 7b 4b 53 c5 52 d0 05 74 14 f2 98 d9 58 fd 4d ce 41 e7 24 9e 18 73 ab 74 d3 52 8b 49 15 ea 62 e3 24 ec fa 8e 5e bb b5 5b 7e 18 59 7a b6 5a 6a aa 88 6a e0 86 08 a9 d6 45 12 19 42 95 60 ce dc 0c 7a 6c 49 39 27 8e 09 3a c4 5d be 2b 55 5e 63 aa a1 a7 a2 a7 b6 d1 cb 88 ce 6a 03 cb b7 19 6c b8 c6 0b 1c 0c 6d c6 de 73 9e 35 9c a2 ea 4a 3f fe 14 d4 74 2d 67 4e d5 5c 47 ad 51 53 4d 70 92 aa 38 c5 2d 43 48 d2 46 e1 4f 3f cb 27 03 9f a8 64 79 d5 2f 43 d1 Data Ascii: 2])pSsM4wVDAqVIYGYkKE,VaTO+:vum(HVps{KSRtXMA$stRIb$^[~YzZjjEB`zlI9':]+U^cjlms5J?t-gN\GQSMp8-CHFO?'dy/C
2024-04-16 15:05:49 UTC	1369	IN	Data Raw: fb 9e 5f 16 6f 32 ac 14 d4 27 a7 ee 36 9a a4 8d e5 80 54 28 db b5 58 76 64 63 b7 eb c0 25 b9 e4 0d 7d 57 68 ae 5b ad 96 dd 75 58 fd 31 5b 47 0d 4e cc e7 6e f4 56 23 3e 70 4e be 4b bd f5 5d ba fb 6e 96 9a 86 1a ba 49 ee 95 5b ea 2a 18 05 f5 21 85 42 98 b1 f6 ce 4e 7b 9c 7b 6b ea 2f 87 31 cd 1f c3 8e 97 8e a1 51 66 5b 4d 38 70 9f a7 f4 02 08 fc 8c 1f c9 3a eb fa 1d 38 e3 69 aa 39 7e 98 f5 a4 9d d9 77 a5 a7 63 4b 1a ec 59 c5 a1 b8 d2 c1 d3 b1 a1 f9 d0 14 37 1a 3a 76 09 d0 c6 74 05 0d c6 96 9d a5 8d 00 37 4b f1 a2 46 97 8d 3b 15 03 4b 47 1a 58 e7 45 80 dc 69 68 e9 68 b0 a1 68 63 47 1a 5a 61 43 74 b4 7f e9 a5 a0 40 3a 18 d3 b4 b4 00 d2 34 31 a7 63 4b 1e 34 05 0d d2 d3 b1 a1 8d 02 a1 ba 5a 71 1a 18 d0 14 0f be 74 0e 9c 46 96 34 ec 28 6e 34 8e 9d a1 a2 c2 80 7b Data Ascii: _o2'6T(Xvdc%}Wh[uX1[GNnV#>pNK]nI[*!BN{{k/1Qf[M8p:8i9~wcKY7:vt7KF;KGXEihhhcGZaCt@:41cK4ZqtF4(n4{
2024-04-16 15:05:49 UTC	1369	IN	Data Raw: a3 a5 8e 56 74 78 67 99 22 e5 46 d3 b9 32 10 e3 70 ef c6 ba b6 bd 4e 3c 91 9a b4 79 6c 98 a5 8d d4 81 8d 2f ce 8e 96 35 3b 21 40 00 92 00 19 24 e0 0f 7d 60 fe 21 f5 15 ea 86 ed 42 b6 23 48 f4 b4 32 2c f5 7f f7 f8 11 ea 5b 76 1a 10 8e c0 90 13 70 f1 f5 11 8e da df 2a 2c 99 89 98 a2 ba b2 33 03 8d a0 82 09 cf 8c 03 df 5f 38 75 b9 ac a6 f5 a9 20 b4 bc b1 d3 13 01 68 e2 f5 23 25 7f a9 5c 64 36 46 0f 04 f7 d7 27 d2 ba 9c b8 54 23 8d 75 7d 7f 83 af e8 ad 2e 2c d2 93 9b e8 be 67 d1 14 b5 14 b5 94 b1 d6 50 cc 93 52 cc 37 46 ea c0 f1 ec 71 d9 87 62 3c 11 af 42 39 ed ac 0f fd 9f ec 97 2b 3f c3 c3 53 72 86 7a 63 74 ac 6a b8 69 e5 e3 d2 8f 68 55 6c 7f 49 7c 16 23 bf 6c eb 7f 8d 74 f1 4d ce 0a 4c e6 66 c6 a1 37 14 fa 00 8d 0c 69 d8 f1 a5 ab 2c ae 86 e3 4b 1a 71 d2 d3 Data Ascii: Vtxg"F2pN<yl/5;!@$}`!B#H2,[vp*,3_8u h#%\d6F'T#u}.,gPR7Fqb<B9+?SrzctjihUlI\|#ltMLf7i,Kq
2024-04-16 15:05:49 UTC	1369	IN	Data Raw: e4 58 de d7 7f c9 b3 ff 00 b3 af 44 47 d4 dd 67 05 d2 6b a5 4d bf f8 02 47 5c 16 9a 35 df 24 a2 a0 80 8c 4e 76 8e 39 23 c1 23 5f 58 b9 0c ec db 42 e4 93 81 d8 6b e4 5f 80 1f 11 a8 ba 43 a9 aa 12 bc 99 ed 55 b4 ab 49 b0 61 6a 22 64 93 7f a9 82 06 e5 54 0c 48 27 24 76 19 18 3f 5c 44 f1 cb 14 73 41 2a cb 0c 88 b2 47 22 fe 97 46 00 ab 0f b1 04 1f df 5e 8f 45 25 b2 bb 9e 77 5d 17 e2 5f 60 e3 51 2f 37 0a 4b 45 aa a2 e9 5e d2 0a 7a 75 dc c2 34 df 23 9e c1 51 7f a9 89 f1 fb 9d 4f 81 55 e6 8d 1c e1 59 80 27 38 e0 9d 7c 95 d5 fd 4b f1 13 ad 3a a6 f9 69 ab a0 ba 55 db a8 ae 4d 4e d6 da 7a 79 04 74 ce 84 aa ae e4 19 42 57 bf 39 6c e7 b6 a7 aa d4 78 30 b5 d4 af 49 a6 f1 e7 4d f0 6f 7a cf e2 8d ca ef 05 45 b2 2b 65 05 9e cf 3c 66 29 96 be e1 18 aa 98 77 c7 d3 9d 83 ec Data Ascii: XDGgkMG\5$Nv9##_XBk_CUIaj"dTH'$v?\DsA*G"F^E%w]_`Q/7KE^zu4#QOUY'8\|K:iUMNzytBW9lx0IMozE+e<f)w
2024-04-16 15:05:49 UTC	1369	IN	Data Raw: a8 84 38 40 49 27 27 db ce 3e dc 6a 34 34 2b 51 5f 50 af 14 2c 24 8d 41 69 5f 67 8e d8 da 70 3e f9 e7 1a f1 a8 b5 53 5a eb 25 9b d0 a9 58 12 15 9a 61 06 c6 83 19 c0 2c c3 03 39 23 fa 73 cf b6 ba 3e af 06 0f 58 bc a3 71 0d 1b 43 35 23 b4 b2 cd 0b ef dc 1e 68 95 7b 05 c7 04 1d db b9 f0 35 d9 ba 02 db 21 8e 1a 0b 47 53 5b e9 4a 53 94 ab 49 e9 c4 f3 cc db d9 8b 6d ce 15 06 e2 30 30 4e 35 c8 e9 2a 69 ab 61 82 a1 25 a7 75 21 8b c9 2e e5 10 c6 9c 37 a8 c1 09 03 c7 fb 1d 5c 5e af 77 8e 9a b7 bc 98 90 ac 33 c5 1b bd be 76 8d 24 f5 54 bc 5e 9e c0 19 c0 0a 72 58 92 78 38 d7 3b 52 9e 46 a2 8e 86 04 a3 16 ce d9 d5 5d 35 47 35 8a 8c 5e 7a ae 86 82 9a 9a a0 bf ce 54 a9 8e 39 59 b8 23 d9 78 e0 0e d8 d6 69 2d 96 5b 1d be fb d3 76 cb dc 17 65 aa b3 4f 3c 2d 1b 23 07 28 e1 Data Ascii: 8@I''>j44+Q_P,$Ai_gp>SZ%Xa,9#s>XqC5#h{5!GS[JSIm00N5*ia%u!.7\^w3v$T^rXx8;RF]5G5^zT9Y#xi-[veO<-#(
2024-04-16 15:05:49 UTC	1369	IN	Data Raw: 9e de 7f df 4d af 6b 8d ea 57 b8 5e 56 71 52 ae e6 28 8a 21 58 15 9b 77 a7 b4 8e 70 49 ce 3e e7 43 a8 68 0d d6 48 b1 72 ab 8e 08 53 d1 30 42 17 63 c9 9c 86 de 7b 81 92 38 1f f5 d7 8a cb 9b c4 c8 e4 fb b3 da 61 c5 e1 63 8c 57 61 f5 34 37 79 e6 7a ba 6a f8 05 34 64 c5 b1 6a a0 83 d2 2a 39 cb bf 07 9c 01 fd b4 29 2d f1 4a f1 ba d6 47 55 2f d2 09 79 23 66 dc 73 c3 10 48 3e 70 57 81 ac 75 0a 5c 28 ef 1e 9c 75 35 15 96 ca 86 f4 e9 e8 a6 81 09 33 32 e5 19 cf 0b f4 8d c7 3f 8d 6c 28 ac 50 c5 3c b2 d7 d3 d2 c9 02 ba ca 50 c2 f2 cd 1c 60 e0 12 12 3e 70 7e fa ae 71 d9 dc ba 0f 71 e1 d6 93 5a a3 b1 5a a6 aa 95 e9 8b d4 44 cd e9 d3 99 1a 46 89 b2 c9 81 fa 4f 1d fc f7 39 d5 7d fb ab a8 2b a4 6a 88 ab aa a0 89 48 30 c7 51 63 69 84 61 73 b4 b3 93 92 46 4f 20 f9 d5 d3 d3 Data Ascii: MkW^VqR(!XwpI>ChHrS0Bc{8acWa47yzj4dj*9)-JGU/y#fsH>pWu\(u532?l(P<P`>p~qqZZDFO9}+jH0QciasFO
2024-04-16 15:05:49 UTC	1369	IN	Data Raw: 63 c9 24 12 3d f3 ae 3d 72 bb db 27 7b 6d 75 0c f4 18 8e 40 65 a5 49 65 49 55 f9 22 34 57 05 57 3c 93 fe 41 ef ae c3 f1 de f9 1f 57 f4 7f 42 5c a9 ed 97 5b 54 15 77 3a a5 f4 2e 0c 69 24 da 22 51 b8 b0 fd 48 7b ee 1c 1f db 58 1a 4b 2c f2 74 dd de 87 d5 bb d2 55 53 bb aa 18 de 09 e3 ff 00 50 65 23 f9 87 23 db 0d 8e de 35 a6 32 8e 34 9b ea 38 29 e4 8b 47 97 43 f4 fd b2 ae ef 45 70 b8 d9 69 27 25 e5 9a 43 2e 0a 97 ef b9 97 b6 d3 c7 3c 83 f6 ce a1 7c 53 a1 fe 1f f1 42 ed 52 b4 b2 a5 05 7a c6 63 f9 58 99 61 de b1 a8 21 02 03 ed 8e 01 f3 aa db 15 e2 e5 55 22 59 e6 9a 1b 65 23 48 17 9d a5 82 1c 29 57 2d d8 9d b9 f0 4f 19 e7 3a d5 75 dd 82 d5 4b 15 33 d8 ee cb 52 88 b9 fa a6 8a 53 11 18 39 e3 05 7c 8c 82 09 38 1a b1 b7 8f 2a dd dc 8a 8a c9 8f d5 ec 3b e0 d7 51 8e Data Ascii: c$==r'{mu@eIeIU"4WW<AWB\[Tw:.i$"QH{XK,tUSPe##5248)GCEpi'%C.<\|SBRzcXa!U"Ye#H)W-O:uK3RS9\|8*;Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.11	49845	154.62.106.12	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:47 UTC	377	OUT	GET /wp-content/uploads/2018/10/1-2.jpg HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:49 UTC	392	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:49 GMT Content-Type: image/jpeg Content-Length: 84720 Connection: close Cache-Control: public, max-age=31536000 X-Hcdn-Image-Optimizer: f:jpeg q:85 w:1600 alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 29db15be63d1a62b4a27f209dc4365f4-bos-edge1 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 1.734 Accept-Ranges: bytes
2024-04-16 15:05:49 UTC	977	IN	Data Raw: ff d8 ff e1 00 80 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 05 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 4a 00 00 00 1b 01 05 00 01 00 00 00 52 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 69 87 04 00 01 00 00 00 5a 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 02 00 02 a0 04 00 01 00 00 00 58 02 00 00 03 a0 04 00 01 00 00 00 90 01 00 00 00 00 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e Data Ascii: ExifII*JR(iZHHXC!"$"$C
2024-04-16 15:05:49 UTC	1369	IN	Data Raw: 04 f3 9c 7d e9 49 cf 40 29 23 a6 7d ba 52 a8 22 8f e0 d2 c0 f8 a4 81 de 94 33 d2 91 44 25 0e f9 a5 27 ef 45 d6 95 db e4 d0 45 18 27 da 94 05 10 e9 47 9e 94 11 4b c7 18 fd a9 5d fa 73 48 04 1e 94 b4 8c f3 41 1f 04 a1 d6 94 38 a4 a4 e3 02 97 f6 1f b5 04 e0 8c 0e 87 9a 30 79 a2 03 34 69 c0 e7 1c d2 49 2c 0a 52 47 38 cd 25 27 fb d2 80 e4 f7 a0 8a 30 3d e8 1e bc 9a 30 73 8e 73 44 71 d3 1c f5 e6 82 75 23 e3 8f 6a 00 7a bb 7d a8 75 39 c7 14 7c d2 48 d2 20 3a 9e b4 28 ff 00 5f d6 85 24 16 4b 80 90 3d cf 5a 50 24 f7 fb 51 7b 1c 9c 51 81 cf 38 ab ca b2 00 60 f0 07 b8 a0 31 d8 f5 ed 46 01 27 8e 83 ad 03 8e e3 bd 24 51 75 51 c1 1f b5 0e a3 1d a8 63 e7 1c d0 39 c7 23 3c fb d1 b4 d2 87 b5 17 bd 1f 3f db 8a 20 7b 10 40 a4 85 a2 c0 cf c5 0f bf 1e d4 31 9c 7b 50 ec 55 8e Data Ascii: }I@)#}R"3D%'EE'GK]sHA80y4iI,RG8%'0=0ssDqu#jz}u9\|H :(_$K=ZP$Q{Q8`1F'$QuQc9#<? {@1{PU
2024-04-16 15:05:49 UTC	1369	IN	Data Raw: a7 82 8c 67 18 18 e2 8c 63 ad 12 71 46 09 1c 1a 49 20 33 8e 28 50 cf 4f 7a 14 92 06 96 57 c8 e0 e0 51 64 80 7b 1a 3e 0a 72 31 8a 1f a0 26 af aa be 08 8f 41 cf 5f ef 44 7e dd 28 f8 f6 c1 a1 8e 32 31 cd 24 29 16 4e de d8 f9 a2 1c fd 8d 19 19 e7 8a 07 fb 63 9a 49 22 18 c8 c7 4f 8a 49 23 03 ef d6 94 4e 13 91 8e 3a d2 4f 4e 0f 3e f4 90 23 44 92 3e 0d 11 24 8c 1e 07 da 94 7f 7c d2 46 73 d8 8e f4 50 28 0e f8 a3 1c 9c 7e d4 3a 71 ed 45 db 9e 4f 5a 48 6c 8c fe c6 8b a9 c9 03 34 59 cf 72 06 28 1c 75 3c fd a9 26 a5 63 1f 6f 8a 04 71 d6 88 7b 02 05 2b 1c d2 4b 44 7c f1 43 23 24 7b d0 19 1c 50 e0 8c 64 e2 92 48 1f 60 73 46 09 cf f6 a4 f2 39 cf 14 af 70 0f ea 69 24 8f 3f e7 46 3a 75 34 43 9c 9c 74 a0 3a 67 34 91 4b 07 bf 6a 2f be 68 86 48 e4 d0 1c f7 eb 4a 90 26 d2 87 Data Ascii: gcqFI 3(POzWQd{>r1&A_D~(21$)NcI"OI#N:ON>#D>$\|FsP(~:qEOZHl4Yr(u<&coq{+KD\|C#${PdH`sF9pi$?F:u4Ct:g4Kj/hHJ&
2024-04-16 15:05:49 UTC	1369	IN	Data Raw: 4a 07 44 78 39 a8 a7 ed 6e 35 fe d6 c6 e4 81 bd c8 cb 4a f1 8d a3 94 ab 39 00 03 fb f4 cf 17 cd 4f a4 75 37 86 76 66 ee 17 39 31 ae 56 4f 35 29 90 fb 41 5f ee a0 92 94 e7 77 e1 04 60 a9 64 84 e5 58 c1 ce 6a 76 c0 e5 f6 16 b7 9f 65 b2 58 93 3b e8 9f 53 4b 53 d2 83 79 c7 b1 c6 3a 62 b5 29 d2 d1 7b b5 3b 62 bd da 1c 8a 5e 6b cb 95 12 46 d7 12 b6 d4 30 4a 54 32 95 8e 7a f5 07 a8 14 cc 27 1b c5 c7 9a 49 4e 6a aa f1 e8 54 78 ac 04 2e 2d 6b 46 87 dd ac 59 95 a1 d6 90 eb 6a ca 16 90 a4 9f 83 5d 3b f1 55 7f 0e c3 91 ad d3 ed 6b 0b 22 04 e7 19 42 8e ef 52 42 8a 47 52 41 e1 23 90 79 24 92 01 38 ab 40 f6 af 43 86 41 2c 6d 78 e6 17 1b 34 7d 94 85 9d 0a 50 f6 a3 e6 92 09 ef 47 9f da a4 51 25 0e 94 a1 cf 14 9c d1 8f d2 92 09 49 f7 a5 0e 94 91 93 4b 07 de 82 36 8c 73 da Data Ascii: JDx9n5J9Ou7vf91VO5)A_w`dXjveX;SKSy:b){;b^kF0JT2z'INjTx.-kFYj];Uk"BRBGRA#y$8@CA,mx4}PGQ%IK6s
2024-04-16 15:05:49 UTC	1369	IN	Data Raw: b4 43 8d 2c a4 0e 0e 46 3a 72 3e 6b 45 02 fb 15 4c b3 7a 7a 2c 86 da 40 c3 cd 2d 4a 3b 87 52 77 73 ea 1d 47 38 23 83 cd 30 7b 4f 3a da ed 3a 82 7d d2 34 a9 70 e3 96 9c 92 ca 42 57 29 07 a0 50 4f a4 e0 e7 90 07 53 c5 09 f2 8c b8 cb 61 97 c2 3c e0 51 bd 5c 84 64 7e 23 f6 eb fa 55 4c 54 cf 84 be 33 ce 8f df 6d 79 a8 63 60 94 87 0d 86 9e ce 9c bb 96 3d a6 6d d2 21 5b e6 19 92 e3 aa 5b b2 dd 94 e4 44 2c a9 4d 21 c7 54 52 bc e0 25 59 c8 c9 47 42 46 ee 4d 48 8e bf 15 22 e5 99 eb 65 bd 99 12 df f3 5e 44 74 46 38 59 29 25 2d a5 b2 51 9e 80 94 ee 1f 02 a3 f0 79 af 43 fd 37 8b 97 15 82 0e 90 6a 0d 7a 52 e4 38 e4 31 c5 8a 3d 99 dc 5a 00 f5 f6 14 62 88 67 18 a3 e7 a5 6f ac 64 af 6f f5 a3 1d 68 92 38 e2 95 49 2a b4 63 38 a5 0f 7a 48 18 e9 4a 1f de 92 54 94 39 e6 94 9f Data Ascii: C,F:r>kELzz,@-J;RwsG8#0{O::}4pBW)POSa<Q\d~#ULT3myc`=m![[D,M!TR%YGBFMH"e^DtF8Y)%-QyC7jzR81=Zbgodoh8I*c8zHJT9
2024-04-16 15:05:49 UTC	1369	IN	Data Raw: 36 49 05 12 ee 43 7e 9f e7 c1 49 86 75 34 f7 73 f9 a7 f0 66 c9 92 c2 db 5c e7 a6 46 6f 6a 50 5c 75 2e 6c 5e 55 b8 02 00 20 60 0e 08 e3 b6 6b a9 c7 5f da b8 c5 86 e4 66 f2 ea 48 71 5c ac e4 2b 1f 05 43 ae 3a 53 ab 73 d6 ff 00 2e e2 2f 28 93 0b e9 c2 57 11 f6 d4 95 37 29 25 40 28 60 8f 4a 93 9c 91 93 f1 5e 8f c2 43 78 66 01 bd b9 ab 3c b5 ab e5 a2 e3 b1 ec 7f 10 c5 b8 40 2f 28 e7 a5 f7 fc fe eb 91 ff 00 a7 9a 23 d3 38 19 ae 91 1e 66 5c 07 24 22 14 b8 c0 38 12 c2 df 58 3f 50 3f 31 da 07 a0 27 ee 73 9e 29 18 ef cf 35 b7 87 c4 33 10 cc f1 ec b2 31 78 59 30 b2 76 72 6f be f6 87 cd 17 3f 6c d1 9c 73 43 93 56 15 62 50 ee 00 34 5c e3 9a 33 d7 dc 8a 1d f9 a2 81 40 67 34 60 71 f1 45 4b ed ec 29 24 11 27 38 38 a3 ea 38 e6 86 73 d2 8c 71 49 10 11 8c 14 9c f6 a3 fd 38 Data Ascii: 6IC~Iu4sf\FojP\u.l^U `k_fHq\+C:Ss./(W7)%@(`J^Cxf<@/(#8f\$"8X?P?1's)531xY0vro?lsCVbP4\3@g4`qEK)$'888sqI8
2024-04-16 15:05:49 UTC	1369	IN	Data Raw: 3e bb 2b ba fe 11 b5 6a ab 42 4a 60 08 af 32 db 89 5b ce a3 70 29 09 03 20 e7 04 12 3a 0a ea ab 4c bf f6 6a 23 ee 46 2d 3b 08 2a 33 e3 39 4a 82 4f a5 c4 9e e0 8c 73 f3 f1 54 0d 4a 1d b6 5e ec f7 8b 5c 78 ed cb 8a 56 23 ff 00 21 25 29 5a 80 48 f4 8c 6e e3 80 01 fb 55 9a 02 66 c0 94 ec c6 91 22 d8 ec f6 ca e5 c6 6c a9 2c b8 a2 4f ab 62 b2 12 a3 93 9d 98 1d 2b 3b 0f 84 fd be 2a 99 56 3f 1e 6a cc b2 89 70 e1 ce db fb 5d 36 8e 98 e6 87 c1 cd 17 34 78 f7 ae 89 62 a3 fd 7a 71 42 86 70 33 42 92 06 96 5f d7 18 e9 46 0f 6e 94 3d fe dc d1 81 c8 15 79 53 48 1d b3 8c 74 06 81 a5 e3 03 e2 88 02 13 cf 22 92 15 49 20 0e c6 80 f9 a1 90 15 8c 8d c4 67 1d f1 47 80 13 fa 52 46 92 48 c9 e2 a2 6f 37 f8 36 b9 2c 31 21 59 0f 2b 66 e4 2c 1d 8a c8 00 11 d7 bd 3a b8 5d a1 5b c8 0f Data Ascii: >+jBJ`2[p) :Lj#F-;39JOsTJ^\xV#!%)ZHnUf"l,Ob+;V?jp]64xbzqBp3B_Fn=ySHt"I gGRFHo76,1!Y+f,:][
2024-04-16 15:05:49 UTC	1369	IN	Data Raw: 9f 82 32 38 35 99 28 c8 c1 1d d9 03 5f 3f 65 5b 8d d6 e2 56 91 67 43 68 69 0b 52 bd 60 f4 f6 a9 59 6e a1 08 dc 8c 80 40 e8 7a d5 6a e7 3d b8 05 b5 29 24 24 a0 10 47 b1 ae ac dd 13 2e 30 51 57 5f c1 8e 33 54 6d 3c ea a5 e1 cc 00 fa 54 7f 10 ca 4f 7a bc 5a 14 97 19 4a 80 c1 23 24 56 4b 74 98 e4 79 a8 0b 38 24 05 0e c3 15 77 d0 b7 d6 24 80 d3 8f 25 2a 04 27 d6 ac 64 93 84 8e 7b 9f 6a b9 80 78 66 21 97 b5 85 57 16 cc d1 d8 e4 ac 76 46 4b 0e 5c 50 7b cc 52 c7 d9 49 49 ff 00 5a 92 ae 0c 23 64 87 d5 9f f8 8a 0a ff 00 f8 40 ff 00 4a ef 5d db 45 0a 58 e7 55 03 7f d3 76 3b 90 53 92 60 37 e7 91 c2 db 3e 5a 89 f9 23 af eb 59 de a8 d1 32 2d 56 ef e2 51 24 7d 5c 64 f2 e8 db 85 b4 3d f8 e0 81 dc d6 8b a8 a5 fd 2e 36 94 97 89 1b 53 9c 7c 67 f4 ae 36 9b 3a 25 da 9d 4c d9 Data Ascii: 285(_?e[VgChiR`Yn@zj=)$$G.0QW_3Tm<TOzZJ#$VKty8$w$%*'d{jxf!WvFK\P{RIIZ#d@J]EXUv;S`7>Z#Y2-VQ$}\d=.6S\|g6:%L
2024-04-16 15:05:49 UTC	1369	IN	Data Raw: 2c fb 00 06 01 ac d7 c2 f8 96 65 de 1a b4 0b 8c c5 b4 c3 69 52 12 a8 fb 58 e1 19 92 b2 53 f8 54 10 1c 09 cf 27 3c 73 5a 38 72 2d f7 48 c2 66 52 4f d6 ea 4b f2 66 25 a1 ff 00 f4 cc e0 25 27 e1 23 68 1f 35 cd 63 b1 62 69 cb 9f a3 37 ad bb fd 4a d4 8e 23 1c 61 8d ee 5a 95 b6 d0 bb d7 87 8d 0b b2 95 19 e9 36 b8 ef 3a 22 00 d9 65 c4 a7 27 cb fe 9c 80 06 3e 2b 26 62 fd 29 09 97 6a 6a eb 32 53 72 d6 7c 95 29 48 5c 90 02 7d 28 0b 19 c7 19 c9 e3 07 07 39 af 41 5e 14 dc 4d 3e fa 23 b6 84 93 1c a1 a4 74 04 ed c0 15 82 a6 d2 98 90 99 79 b6 50 c9 27 0e a1 03 03 8e bd 2a af 19 e2 4c c3 3e 38 0b be 22 35 af 92 77 0f 8f b4 6b dc 46 96 ad 30 22 40 8f 64 fe 21 3d 06 71 43 09 8c da 65 ab 78 7f e1 69 39 07 9e 49 39 27 65 4b 47 d0 f6 5d 55 a4 a2 5a af b0 51 26 d9 2c 17 5b 63 Data Ascii: ,eiRXST'<sZ8r-HfROKf%%'#h5cbi7J#aZ6:"e'>+&b)jj2Sr\|)H\}(9A^M>#tyP'*L>8"5wkF0"@d!=qCexi9I9'eKG]UZQ&,[c
2024-04-16 15:05:49 UTC	1369	IN	Data Raw: 46 14 1e 27 00 1f b1 c9 3f f4 9a cc c5 61 71 18 53 92 46 d5 ab 11 4b 1c ba b0 ad c6 c9 3d c1 ab 24 cf 76 5c 7f a0 92 d2 63 30 ca 5f 0b 58 2d 81 eb c6 73 c9 2a 4e 31 9f 40 3d ea e6 0e 53 92 31 f7 aa 37 87 96 06 ac 16 d6 58 66 32 52 fa 5b 08 71 e5 0c b8 bf 72 4f 5e 4e 4e 3e 6a e8 97 12 58 f3 37 a7 60 19 24 9e 06 2b a3 e1 58 d3 24 65 a4 6a 35 f7 ef 45 97 89 8c 35 fa 2a a6 bc 9c ab 7b 2a 9c b3 13 ca 42 49 52 9c 52 86 d4 0e 4e 69 de 8f 7e e3 25 0d ad c2 d3 30 c8 52 99 6c 0c b8 b4 93 94 a9 44 fe 1e 0f 41 fa 9a a0 78 bb 70 76 64 09 8a 43 2e 08 cc b4 f8 08 52 32 14 a4 a0 7a cf b7 e2 e0 1f 6c d5 fb 47 bf be 34 44 f0 14 18 40 38 ff 00 a0 56 26 1f 10 4e 35 b2 75 72 b6 f8 ea 0a 54 6f 13 e3 3d 1f 53 2d c7 50 00 79 b4 a8 2c 0c 05 e3 8e 9d 88 e3 3f a1 aa a9 1c d6 9d e2 Data Ascii: F'?aqSFK=$v\c0_X-sN1@=S17Xf2R[qrO^NN>jX7`$+X$ej5E5{*BIRRNi~%0RlDAxpvdC.R2zlG4D@8V&N5urTo=S-Py,?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.11	49842	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:47 UTC	617	OUT	GET /wp-content/uploads/2018/10/4-5.jpg HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:55 UTC	393	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:55 GMT Content-Type: image/webp Content-Length: 234188 Connection: close Cache-Control: public, max-age=31536000 X-Hcdn-Image-Optimizer: f:webp q:85 w:1600 alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 3e40d1b76e7d4bbf154381e0502725d7-asc-edge6 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 6.979 Accept-Ranges: bytes
2024-04-16 15:05:55 UTC	976	IN	Data Raw: 52 49 46 46 c4 92 03 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 3f 06 00 3b 03 00 56 50 38 20 20 92 03 00 b0 fc 0a 9d 01 2a 40 06 3c 03 3e 51 24 8f 45 23 a2 23 a2 a7 b4 4a d8 70 0a 09 63 65 d6 ae dd 1f 4b cb 53 f0 ff fd f2 03 ff f9 d2 f3 00 ff fe 54 b9 a1 6a af 3f 6a bf fd 52 ff 63 59 f4 96 a4 01 68 54 fb e7 a6 8e 20 fa a7 07 bf d0 f0 4c f5 5f f4 da f1 f4 07 f3 60 cd a3 fb 5d b4 1a 58 f7 fb fe a6 ce e8 03 63 0e 29 fa de 5a 3d 07 e8 5c 83 3f d3 db 17 d1 7f e2 f3 21 f7 8f ed 7d 04 7f e1 fd c5 f7 8b fd f7 fe 5f b0 67 f5 0f f2 3f b2 9e f0 3f fb 7a df ff 2b ff b3 d4 b7 f6 6f f9 3f b9 de f5 5f fb ff 78 fd eb 7f 95 f5 0e fe e3 ff 23 ff bf b6 67 ef ff ff 8f 86 bf f3 df fc 7f ff ff eb f8 20 fd cb ff e5 ed 5d f9 d9 ff ff e6 23 fc b7 ff 0f de 4f 78 2f fa 9f Data Ascii: RIFFWEBPVP8X?;VP8 *@<>Q$E##JpceKSTj?jRcYhT L_`]Xc)Z=\?!}_g??z+o?_x#g ]#Ox/
2024-04-16 15:05:55 UTC	1369	IN	Data Raw: aa 4f 17 4b 3b c7 ef 50 d3 86 a1 f3 94 45 94 1e 3b dc ab d4 46 cc 75 40 e1 a0 6b da d7 26 27 78 c5 1d ea 91 50 13 a9 77 bc 18 55 4c 09 5a 32 29 06 26 99 31 17 9a 19 68 02 d4 85 cf f9 33 d5 06 81 95 be 8b b6 6b b0 05 39 68 3c 79 af ce 59 ed 99 7e 72 c9 d8 1b 74 dc f5 1a d2 8e ce 58 bc b3 96 f6 90 70 cf 10 01 e9 32 da c5 a5 b8 3c ce bf 0c a0 f7 49 1b 11 e0 5c cb 40 22 c6 76 7a cf 36 4b 2e e4 f5 b2 25 76 db 8a ef 78 97 b5 a6 52 22 5c 64 03 c1 44 cb d0 f6 2a 34 58 2b c9 c8 fc 4f 60 21 18 da c7 85 cf 94 e7 3b 07 4b f1 15 36 63 fe 97 eb bb 4c 57 6f 86 35 6c af fa 37 a8 04 6e 58 0d 33 8a e4 b4 45 52 50 d4 fb 45 4f 87 5e 0b c4 d3 c3 89 f3 c2 88 32 71 1b 05 47 d0 c5 aa 36 98 95 c4 e6 60 67 af 80 3b e5 b3 81 90 77 2d 18 5d fd 53 54 f7 d3 9b 77 a0 2c 2e 9c c5 e7 42 Data Ascii: OK;PE;Fu@k&'xPwULZ2)&1h3k9h<yY~rtXp2<I\@"vz6K.%vxR"\dD*4X+O`!;K6cLWo5l7nX3ERPEO^2qG6`g;w-]STw,.B
2024-04-16 15:05:55 UTC	1369	IN	Data Raw: 3a 61 40 28 e6 cc 51 de 54 4d cb c4 fc a3 b5 78 64 be 80 e9 1f 6f 5d 4b 74 be fe 6d 8b 8f c0 f2 fd 6e ff 01 17 5c e4 c0 f7 4b 80 7b b1 c5 aa b4 c9 cb f1 62 2a 42 dc 5e 16 73 3e 86 0a 82 c2 2a 54 7a 2c 23 82 60 9f 6f cb c4 1d ad d3 1a a8 cf b8 ce 2b c4 58 b6 f6 5f 93 31 42 2d 2e d8 37 a1 95 ea 7f 64 b8 40 c1 77 d9 91 41 7d 6c 82 1b e7 41 99 ed fc e9 6c 5a 95 73 bd 02 4b 01 b2 7a b1 25 10 57 d4 7c ab ce 96 a8 58 4b a5 06 84 dd 18 7f d2 31 c7 b4 fe 40 1f e2 b2 46 31 67 9d b8 7f ac ac ec 06 35 1b a5 aa 1a b0 6b ac 75 82 76 01 5e 53 be ee f3 9c e5 f5 ce b7 9d 85 d4 e1 2c 09 e8 fa be b9 95 83 eb e5 a4 e2 d9 bc 46 65 54 2b 2d 8d ce df 92 32 e6 13 86 38 b9 fc bf 5a 86 39 32 ba 61 d3 8f 30 a8 07 ce 13 0d a4 37 81 ce f0 0e 45 70 3f 56 65 01 ec d7 70 49 5d 41 ae 0f Data Ascii: :a@(QTMxdo]Ktmn\K{bB^s>Tz,#`o+X_1B-.7d@wA}lAlZsKz%W\|XK1@F1g5kuv^S,FeT+-28Z92a07Ep?VepI]A
2024-04-16 15:05:55 UTC	1369	IN	Data Raw: a4 1f d5 57 28 a7 38 93 00 d1 13 d0 af 52 72 e0 84 da e7 d3 e9 44 35 24 24 e9 4c 98 dc ca 18 a2 9a ae 78 da aa 3f d8 28 10 79 e1 77 a0 cf 02 d3 ad 8f b0 09 02 c6 ea cb 39 88 b6 15 dd 1d 0a 04 ba ed b3 df ab 4a 2a 95 d4 74 7e 6c 66 8b a5 22 7a 8a 76 ee c8 7d a8 8d c2 88 e5 f1 49 8c c9 cd 91 31 db e0 4c a6 8a 4d cf a2 84 c4 f7 b9 be 56 57 df 06 38 77 b6 20 3a bd 8c fc b3 bd 1d e9 fd 4e a4 c2 e1 4a f5 d2 69 09 92 f3 e1 24 e7 93 66 12 a0 19 ea 71 fc 8e 50 1c 11 dc fe 6f b0 3a 2f 19 87 26 ac e4 c7 13 71 4b ca 86 c6 c3 1d 50 98 ed e7 f0 50 5a 4a 49 cb 5f 89 10 11 68 9b 22 65 13 60 d6 35 b3 6d e0 d9 5c 32 76 5c 6c 8f cf 5f 76 9e 45 23 70 fb 68 ad 20 d3 2a 10 b5 c6 6d 5d d2 84 52 a9 36 81 74 d0 5e f4 b8 cf 0f 8e e7 cb 82 2f 0a 10 23 2a 74 df b3 31 e0 4d f2 59 55 Data Ascii: W(8RrD5$$Lx?(yw9Jt~lf"zv}I1LMVW8w :NJi$fqPo:/&qKPPZJI_h"e`5m\2v\l_vE#ph m]R6t^/#*t1MYU
2024-04-16 15:05:55 UTC	1369	IN	Data Raw: 6a 4d 7f f1 5d 14 83 1a 69 16 30 b8 98 6e eb e2 29 a7 39 88 22 cd 0f 1c 55 8e db aa 5e a0 ce 5d 21 d1 5d 91 5a 54 88 24 12 ea a4 ba ba c6 d0 dd 7a 79 49 dc f3 08 2b a7 ef 1d 23 63 c1 c4 bf ca e6 0d bd 3e b9 ad 51 69 80 51 d7 17 45 ba 47 ff 47 b9 a5 a9 3b af 95 71 05 ef 59 8f 55 c0 6d a9 d6 4a 50 07 7c 34 bb be c9 5d 9e 77 af 41 95 74 26 77 fa be 4c f3 76 c1 b9 7c f7 d0 0f f9 3d 22 26 62 a3 00 33 c1 98 b5 f0 a7 4f b6 6a 7e fa 8a 47 b0 c8 12 1e a7 54 32 bf 8e 80 67 5d 2e 57 6e cb 07 54 95 3a 18 24 9c 96 6a 67 25 ff 70 95 58 66 d7 e5 2b 95 50 f5 4f b4 2d 54 3f 0d b0 82 81 be 05 d1 34 b1 1e 15 1c 38 df 01 1c cf 85 25 a2 c7 8d ea 58 72 71 94 2b 5e 74 af 71 6e fb 78 54 03 35 d5 7b 04 e3 e9 d6 8e 76 f0 c7 2a 88 70 8a ae 81 8a f6 63 94 ef bc f2 58 b5 82 62 d4 92 Data Ascii: jM]i0n)9"U^]!]ZT$zyI+#c>QiQEGG;qYUmJP\|4]wAt&wLv\|="&b3Oj~GT2g].WnT:$jg%pXf+PO-T?48%Xrq+^tqnxT5{v*pcXb
2024-04-16 15:05:55 UTC	1369	IN	Data Raw: b8 8e fd 60 35 38 2a 8a c5 26 04 5b 8c 35 59 1c 07 9b ab 47 3e 72 d4 3d cc db e9 79 08 47 6e f6 31 d7 9b 55 1a 92 4a 06 57 16 26 53 4b c7 83 e5 1d 35 84 7a 11 49 d8 b1 f9 ba eb d3 7e 48 6d 8e dd 59 a0 c9 a6 0f 44 c4 b1 91 2e af fd 2e e3 a9 55 25 85 87 f6 ff 37 53 35 75 2e 45 ae 73 f4 1a 35 f6 9d fa 0c bf f0 30 fb 22 e9 ab 34 76 7a 5a 2f a4 75 6d 9a 39 ba ba 8a 1c 86 5a 49 d9 ed 35 03 cb 57 e1 09 19 56 70 61 45 3d dc 9c 49 dd 27 0f e5 3a e8 2a ee 00 b7 1c ae eb ae e8 e4 13 81 13 a8 b8 e6 f3 30 ef 6b a0 3f 41 c5 97 7c d5 7b 1c c2 7c f2 64 dc b0 eb d4 9c 4d f9 14 8f cf 5e 77 a4 32 d9 c1 d9 f4 be 7b e6 d8 2d cb e5 15 8f 9a c1 a1 e5 f8 8f 43 a4 af 42 1f 65 31 bf 32 51 eb 09 64 da 0a 9f e3 76 a5 53 1a 93 20 13 bc 48 da 72 16 1d cc 5e 82 d9 0a 7a 31 0f 71 01 44 Data Ascii: `58&[5YG>r=yGn1UJW&SK5zI~HmYD..U%7S5u.Es50"4vzZ/um9ZI5WVpaE=I':0k?A\|{\|dM^w2{-CBe12QdvS Hr^z1qD
2024-04-16 15:05:55 UTC	1369	IN	Data Raw: 82 7d f4 34 29 f7 55 b6 04 fd d0 b7 d0 c5 03 07 e3 2f 2e 24 ad 13 ba 81 96 93 06 1d 77 41 8e 7a 48 f6 5c d4 e5 d6 12 8a 1f 08 72 0e f7 14 90 12 40 99 ca 15 ba fa 90 c9 b4 41 90 66 e3 e7 8d b8 61 74 21 42 ec 4f 00 d3 ea 19 26 32 e6 25 b1 6e f8 05 c9 f7 e8 e7 ba d8 b1 ad a3 e3 7f 58 62 39 c2 e3 d0 d1 28 a8 7f f3 a8 98 54 45 85 51 86 ab 89 01 e9 6a 31 ad b5 6c 69 e3 ef 84 6d d5 b8 a3 30 f6 30 2c 20 bb 07 4a be 9c 0b 05 a0 1a 30 4d c3 3a bb 1c 97 2d c0 c9 d3 c2 be d6 f0 62 3a 95 ba ff c0 bd 8a d5 94 75 e7 8b e4 e8 a6 fd bd ca 34 c4 7a 93 fc 18 c6 9a e2 90 96 be ec b2 59 5e 9e 6f b7 be 1b 8a 1b 0a 1c 6f 6c ff d2 4e f7 6c 2f b3 72 2a 3c 82 ff 14 90 4e 1d c5 3f 85 7f ba 73 48 9a 75 78 83 3f ec 8b 07 22 97 fb 2c 96 e2 f6 88 c9 3a bd b6 77 22 d5 ad 5e a0 5c b9 39 Data Ascii: }4)U/.$wAzH\r@Afat!BO&2%nXb9(TEQj1lim00, J0M:-b:u4zY^oolNl/r*<N?sHux?",:w"^\9
2024-04-16 15:05:55 UTC	1369	IN	Data Raw: 10 89 9e e8 b6 f5 3d 76 bc e5 9f dc 34 7a 1c 34 dc e8 71 87 a6 cb d8 97 56 d9 e9 65 84 c1 69 e7 a5 2b fa c2 db 39 1b 99 7c ca 2f c6 d4 35 e2 be 1e 17 b5 51 ef d2 8a 49 29 73 46 aa ab c8 97 24 21 5b ab e4 20 2e c2 1b bd a4 06 1f f3 52 a9 05 67 6d 4b 9e 74 79 e4 9a d3 a5 05 de 22 db 1e cd 4b 73 6e 14 99 97 71 bf ca 58 0d f5 70 dd f3 c3 32 3c 73 4b eb 9c dc d3 82 10 86 a3 4d 89 2c 3a b1 a4 fc 9e b1 7d 41 0d 5e d1 c5 b3 3b b3 bf 8c fc e2 1b cd d0 79 69 79 4c 22 d9 81 2b 77 1c 69 b0 4e df 43 a2 a4 f5 0d 7c 1b 9f 62 00 ba 7d 02 b3 7c 8a d8 78 04 a4 07 dc a9 9a 11 f9 db 57 6b 3c 82 75 b3 d2 f4 b9 2b a8 b9 2f 4a 12 4a b5 7a 2f 11 82 61 25 5c d8 e1 ae 08 e6 26 01 38 79 c1 81 36 78 0e 98 3f 83 d2 9d 41 ed f3 61 01 6c bf 90 92 2c 63 db 5a 32 8e 5b ed 4d d7 9e f0 57 Data Ascii: =v4z4qVei+9\|/5QI)sF$![ .RgmKty"KsnqXp2<sKM,:}A^;yiyL"+wiNC\|b}\|xWk<u+/JJz/a%\&8y6x?Aal,cZ2[MW
2024-04-16 15:05:55 UTC	1369	IN	Data Raw: e7 3c 10 14 52 e0 54 79 0e 3f 91 fc 50 6f 1b 3d ff 20 0b 68 97 35 cd fa 08 29 d0 f3 dd 0a 54 c8 da 2b bc 1a c1 a8 09 c3 31 3c 58 a9 d4 8d a3 3f fa bf e4 5a 28 08 b8 29 52 51 a3 84 4f 19 d3 0c fa 83 8e c1 ef ba 5d 75 ab 47 5e c4 c0 3b 61 e3 52 f2 0f 3e 3e d6 0e 49 5f 34 6a 3f d7 44 58 e1 a6 1e e2 9c e7 6f 29 98 80 df ce b1 c2 49 d7 ca 0c 11 56 1e 66 18 ed bb b6 b7 2c fd 1b a6 89 f3 30 d4 aa 5b f8 6d 78 7b 08 9c 5e c7 be 96 72 e7 0b 68 53 6d 94 25 d6 6d 87 75 3c 7e df 8e 8e 8f 71 ed ad 04 bd 03 f1 e5 2f ad 7a aa e1 9b a9 cb e3 41 1a ed 59 6d 18 84 1e 18 5e 54 33 26 3e d5 91 3c 9c 81 2d 83 65 8d 46 5e f6 af 04 31 c9 07 aa af 94 cd fd 09 c2 77 e6 5e 1a 4a a4 a5 53 32 7a 2f 9f 14 a8 34 4b a6 35 9b 16 08 c4 24 73 23 b4 ed ca 91 f7 6f a9 8f e7 f7 e8 05 1c 1f 50 Data Ascii: <RTy?Po= h5)T+1<X?Z()RQO]uG^;aR>>I_4j?DXo)IVf,0[mx{^rhSm%mu<~q/zAYm^T3&><-eF^1w^JS2z/4K5$s#oP
2024-04-16 15:05:55 UTC	1369	IN	Data Raw: 2b 6e ed ff 56 5e 7e 22 ac 8c b0 01 e3 93 d8 68 f3 11 e5 6f 7b 03 80 52 9e 89 00 07 3b ff 77 aa b5 4c 73 ee f8 a4 f0 09 a6 9e e1 35 8a 0f a4 39 a7 cb 7c 38 10 04 c3 b1 30 43 cf 10 ed fb b9 90 ac 07 c9 9d 03 62 1c 1e 66 96 7d 5d 4e b5 00 77 d9 2b 75 48 3f bb 33 84 28 56 3e 0a 6c c9 6f 38 67 db b7 38 ce 99 64 86 92 d5 8e e4 cd a4 c6 42 56 76 44 c0 7b 78 10 22 ae 2b 5f 61 a8 1f 85 e1 f1 e0 03 c7 4d 2b 42 f0 34 32 a3 42 d9 ca 7d ed a7 7c 0e 1c 95 2c df bc 16 2b 96 0f 47 7d dd 23 90 0c 54 c4 23 dc 00 17 ee 2b 8b 57 ea 6b f7 17 df 53 50 f5 01 e5 7d 61 10 fe 7f f9 aa 9f 68 d7 07 39 b0 2e 16 6e fe 81 e8 14 1f 6e a1 d0 f4 d2 5f e9 c3 cf 64 17 7e 2a 1c ef 88 89 e5 21 cd 91 00 e7 a8 73 10 90 3c b9 5c 40 77 01 dc b5 cc f2 42 17 ee 77 6a a5 47 8f 2b e2 e3 3a bb 63 22 Data Ascii: +nV^~"ho{R;wLs59\|80Cbf}]Nw+uH?3(V>lo8g8dBVvD{x"+_aM+B42B}\|,+G}#T#+WkSP}ah9.nn_d~*!s<\@wBwjG+:c"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.11	49847	142.251.15.91	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:48 UTC	2522	OUT	POST /api/stats/qoe?fmt=397&cpn=F6GU1QEdhoMLD-Np&el=embedded&ns=yt&fexp=v1%2C23858057%2C125239%2C21348%2C76094%2C54572%2C73455%2C230596%2C84737%2C36318%2C6271%2C26443548%2C7111%2C31786%2C4557%2C9954%2C1192%2C10512%2C15711%2C273%2C6966%2C2%2C6689%2C2007%2C4957%2C4115%2C12518%2C1263%2C5498%2C796%2C643%2C5538%2C2893%2C2%2C531%2C819%2C531%2C4712%2C5599%2C1104%2C4465&cl=623129822&seq=1&docid=wAD9uO9YAQw&ei=y5MeZqSPB9aoy_sPxcuI0A8&event=streamingstats&plid=AAYWOBKoz4xd3wIM&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2FwAD9uO9YAQw%3Fplaylist%3DwAD9uO9YAQw%26iv_load_policy%3D3%26enablejsapi%3D1%26disablekb%3D1%26autoplay%3D1%26controls%3D0%26showinfo%3D0%26rel%3D0%26loop%3D1%26origin%3Dhttps%253A%252F%252Fniceindiatravel.com%26widgetid%3D1&qclc=ChBGNkdVMVFFZGhvTUxELU5wEAE&embargoed=0&cbr=Chrome&cbrver=117.0.0.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240409.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&vps=0.000:N,0.012:B,1.673:B,1.673:B&cat=streaming&cmt=0.012:0.000,1.673:0.000&vfs=1.673:397:398::r&view=1.673:1267:713&bwe=1.673:130000&bat=1.673:1:1&vis=1.673:0&bh=1.673:0.000 HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 226 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1713279945329&flash=0&frm=2&u_tz=120&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1267%2C713&vis=1&wgl=true&ca_type=image sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded X-YouTube-Utc-Offset: 120 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240409.01.00 X-YouTube-Time-Zone: Europe/Zurich X-Goog-Visitor-Id: CgtJMG1ONlpYUjdsOCjIp_qwBjIKCgJVUxIEGgAgKA%3D%3D sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/wAD9uO9YAQw?playlist=wAD9uO9YAQw&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&origin=https%3A%2F%2Fniceindiatravel.com&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
2024-04-16 15:05:48 UTC	226	OUT	Data Raw: 73 65 73 73 69 6f 6e 5f 74 6f 6b 65 6e 3d 51 55 46 46 4c 55 68 71 62 6d 64 6e 4e 47 74 6d 64 7a 59 77 52 47 46 33 5a 32 35 68 55 48 68 46 4d 57 6b 31 53 33 68 59 61 30 6c 6f 5a 33 78 42 51 33 4a 74 63 30 74 73 51 6e 56 6b 4e 55 39 32 59 30 4d 78 62 6c 4e 66 55 6d 6c 74 64 57 56 30 59 6d 78 48 4d 6d 67 77 64 6c 56 4f 4c 58 6c 6f 65 6e 46 78 54 44 4e 48 61 45 35 73 52 6d 34 31 4d 48 46 53 55 6a 4a 50 51 6b 64 54 4e 33 5a 36 62 6c 55 32 5a 57 35 56 53 6d 56 72 62 6b 68 6c 63 31 64 66 53 32 39 78 5a 33 4e 34 64 6a 52 56 61 6b 6c 72 53 46 70 34 63 54 4a 6a 55 48 4a 6a 4e 56 70 74 54 58 52 34 61 6b 39 55 4e 47 6f 34 56 46 68 76 4e 45 78 31 63 55 52 68 62 77 25 33 44 25 33 44 Data Ascii: session_token=QUFFLUhqbmdnNGtmdzYwRGF3Z25hUHhFMWk1S3hYa0loZ3xBQ3Jtc0tsQnVkNU92Y0MxblNfUmltdWV0YmxHMmgwdlVOLXloenFxTDNHaE5sRm41MHFSUjJPQkdTN3Z6blU2ZW5VSmVrbkhlc1dfS29xZ3N4djRVaklrSFp4cTJjUHJjNVptTXR4ak9UNGo4VFhvNEx1cURhbw%3D%3D
2024-04-16 15:05:48 UTC	504	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Date: Tue, 16 Apr 2024 15:05:48 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Server: Video Stats Server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.11	49846	142.251.15.91	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:48 UTC	1187	OUT	POST /youtubei/v1/next?prettyPrint=false HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 2887 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Youtube-Bootstrap-Logged-In: false sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json X-Youtube-Client-Name: 56 X-Youtube-Client-Version: 1.20240409.01.00 X-Goog-Visitor-Id: CgtJMG1ONlpYUjdsOCjIp_qwBjIKCgJVUxIEGgAgKA%3D%3D sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/wAD9uO9YAQw?playlist=wAD9uO9YAQw&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&origin=https%3A%2F%2Fniceindiatravel.com&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
2024-04-16 15:05:48 UTC	2887	OUT	Data Raw: 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 68 6c 22 3a 22 65 6e 22 2c 22 67 6c 22 3a 22 55 53 22 2c 22 72 65 6d 6f 74 65 48 6f 73 74 22 3a 22 38 31 2e 31 38 31 2e 35 37 2e 35 32 22 2c 22 64 65 76 69 63 65 4d 61 6b 65 22 3a 22 22 2c 22 64 65 76 69 63 65 4d 6f 64 65 6c 22 3a 22 22 2c 22 76 69 73 69 74 6f 72 44 61 74 61 22 3a 22 43 67 74 4a 4d 47 31 4f 4e 6c 70 59 55 6a 64 73 4f 43 6a 49 70 5f 71 77 42 6a 49 4b 43 67 4a 56 55 78 49 45 47 67 41 67 4b 41 25 33 44 25 33 44 22 2c 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 Data Ascii: {"context":{"client":{"hl":"en","gl":"US","remoteHost":"81.181.57.52","deviceMake":"","deviceModel":"","visitorData":"CgtJMG1ONlpYUjdsOCjIp_qwBjIKCgJVUxIEGgAgKA%3D%3D","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like
2024-04-16 15:05:49 UTC	432	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Tue, 16 Apr 2024 15:05:49 GMT Server: scaffolding on HTTPServer2 Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-16 15:05:49 UTC	823	IN	Data Raw: 31 34 36 32 0d 0a 7b 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 7b 22 73 65 72 76 69 63 65 54 72 61 63 6b 69 6e 67 50 61 72 61 6d 73 22 3a 5b 7b 22 73 65 72 76 69 63 65 22 3a 22 43 53 49 22 2c 22 70 61 72 61 6d 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 63 22 2c 22 76 61 6c 75 65 22 3a 22 57 45 42 5f 45 4d 42 45 44 44 45 44 5f 50 4c 41 59 45 52 22 7d 2c 7b 22 6b 65 79 22 3a 22 63 76 65 72 22 2c 22 76 61 6c 75 65 22 3a 22 31 2e 32 30 32 34 30 34 30 39 2e 30 31 2e 30 30 22 7d 2c 7b 22 6b 65 79 22 3a 22 79 74 5f 6c 69 22 2c 22 76 61 6c 75 65 22 3a 22 30 22 7d 2c 7b 22 6b 65 79 22 3a 22 47 65 74 57 61 74 63 68 4e 65 78 74 5f 72 69 64 22 2c 22 76 61 6c 75 65 22 3a 22 30 78 62 65 61 66 36 63 30 36 30 62 31 36 65 64 61 32 22 7d 5d 7d 2c 7b 22 73 65 72 76 69 Data Ascii: 1462{"responseContext":{"serviceTrackingParams":[{"service":"CSI","params":[{"key":"c","value":"WEB_EMBEDDED_PLAYER"},{"key":"cver","value":"1.20240409.01.00"},{"key":"yt_li","value":"0"},{"key":"GetWatchNext_rid","value":"0xbeaf6c060b16eda2"}]},{"servi
2024-04-16 15:05:49 UTC	1255	IN	Data Raw: 33 36 38 39 2c 35 31 30 35 34 37 36 34 2c 35 31 30 35 37 38 34 34 2c 35 31 30 35 37 38 35 35 2c 35 31 30 36 30 33 35 33 2c 35 31 30 36 33 36 34 33 2c 35 31 30 36 34 38 33 35 2c 35 31 30 36 39 32 36 39 2c 35 31 30 37 35 33 34 37 2c 35 31 30 37 39 32 33 39 2c 35 31 30 38 39 31 37 35 2c 35 31 30 38 39 34 34 31 2c 35 31 30 39 31 30 35 38 2c 35 31 30 39 31 33 33 31 2c 35 31 30 39 32 32 39 31 2c 35 31 30 39 32 36 36 30 2c 35 31 30 39 34 31 37 35 2c 35 31 30 39 34 31 39 35 2c 35 31 30 39 34 32 30 32 2c 35 31 30 39 34 32 30 37 2c 35 31 30 39 38 32 39 37 2c 35 31 30 39 38 32 39 39 2c 35 31 31 30 30 34 30 31 2c 35 31 31 30 31 34 35 34 2c 35 31 31 30 33 38 35 38 2c 35 31 31 30 34 39 38 38 2c 35 31 31 30 36 39 39 35 2c 35 31 31 30 37 33 33 31 2c 35 31 31 30 37 33 34 Data Ascii: 3689,51054764,51057844,51057855,51060353,51063643,51064835,51069269,51075347,51079239,51089175,51089441,51091058,51091331,51092291,51092660,51094175,51094195,51094202,51094207,51098297,51098299,51100401,51101454,51103858,51104988,51106995,51107331,5110734
2024-04-16 15:05:49 UTC	1255	IN	Data Raw: 72 4f 76 65 72 6c 61 79 52 65 6e 64 65 72 65 72 22 3a 7b 22 73 68 61 72 65 42 75 74 74 6f 6e 22 3a 7b 22 62 75 74 74 6f 6e 52 65 6e 64 65 72 65 72 22 3a 7b 22 73 74 79 6c 65 22 3a 22 53 54 59 4c 45 5f 4f 50 41 43 49 54 59 22 2c 22 73 69 7a 65 22 3a 22 53 49 5a 45 5f 44 45 46 41 55 4c 54 22 2c 22 69 73 44 69 73 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 74 65 78 74 22 3a 7b 22 72 75 6e 73 22 3a 5b 7b 22 74 65 78 74 22 3a 22 43 6f 70 79 20 6c 69 6e 6b 22 7d 5d 7d 2c 22 69 63 6f 6e 22 3a 7b 22 69 63 6f 6e 54 79 70 65 22 3a 22 4c 49 4e 4b 22 7d 2c 22 6e 61 76 69 67 61 74 69 6f 6e 45 6e 64 70 6f 69 6e 74 22 3a 7b 22 63 6c 69 63 6b 54 72 61 63 6b 69 6e 67 50 61 72 61 6d 73 22 3a 22 43 41 51 51 38 46 73 69 45 77 69 71 35 5f 36 56 67 63 65 46 41 78 56 74 7a 58 49 Data Ascii: rOverlayRenderer":{"shareButton":{"buttonRenderer":{"style":"STYLE_OPACITY","size":"SIZE_DEFAULT","isDisabled":false,"text":{"runs":[{"text":"Copy link"}]},"icon":{"iconType":"LINK"},"navigationEndpoint":{"clickTrackingParams":"CAQQ8FsiEwiq5_6VgceFAxVtzXI
2024-04-16 15:05:49 UTC	1255	IN	Data Raw: 74 2e 63 6f 6d 2f 38 30 75 2d 56 70 30 4c 77 54 5f 47 7a 50 74 58 64 42 5a 77 4c 61 6d 35 44 30 36 49 6c 65 4d 4c 36 4f 4a 36 66 67 64 33 79 72 5f 4c 6e 43 39 30 39 37 64 33 66 46 64 77 31 6f 33 42 5a 38 64 6a 4d 34 36 35 4b 49 6f 42 59 62 41 3d 73 38 38 2d 63 2d 6b 2d 63 30 78 30 30 66 66 66 66 66 66 2d 6e 6f 2d 72 6a 22 2c 22 77 69 64 74 68 22 3a 36 38 2c 22 68 65 69 67 68 74 22 3a 36 38 7d 5d 7d 2c 22 63 6f 6c 6c 61 70 73 65 64 52 65 6e 64 65 72 65 72 22 3a 7b 22 65 6d 62 65 64 64 65 64 50 6c 61 79 65 72 4f 76 65 72 6c 61 79 56 69 64 65 6f 44 65 74 61 69 6c 73 43 6f 6c 6c 61 70 73 65 64 52 65 6e 64 65 72 65 72 22 3a 7b 22 74 69 74 6c 65 22 3a 7b 22 72 75 6e 73 22 3a 5b 7b 22 74 65 78 74 22 3a 22 49 6e 63 72 65 64 69 62 6c 65 20 49 6e 64 69 61 20 2d 20 Data Ascii: t.com/80u-Vp0LwT_GzPtXdBZwLam5D06IleML6OJ6fgd3yr_LnC9097d3fFdw1o3BZ8djM465KIoBYbA=s88-c-k-c0x00ffffff-no-rj","width":68,"height":68}]},"collapsedRenderer":{"embeddedPlayerOverlayVideoDetailsCollapsedRenderer":{"title":{"runs":[{"text":"Incredible India -
2024-04-16 15:05:49 UTC	638	IN	Data Raw: 31 4d 4a 62 4a 79 2d 78 44 51 22 5d 2c 22 70 61 72 61 6d 73 22 3a 22 45 67 49 49 42 78 67 42 22 7d 7d 2c 7b 22 63 6c 69 63 6b 54 72 61 63 6b 69 6e 67 50 61 72 61 6d 73 22 3a 22 43 41 49 51 6d 79 73 69 45 77 69 71 35 5f 36 56 67 63 65 46 41 78 56 74 7a 58 49 4a 48 66 77 53 42 50 45 79 43 57 6c 32 4c 57 56 74 59 6d 56 6b 63 77 3d 3d 22 2c 22 75 6e 73 75 62 73 63 72 69 62 65 45 6e 64 70 6f 69 6e 74 22 3a 7b 22 63 68 61 6e 6e 65 6c 49 64 73 22 3a 5b 22 55 43 4d 78 4a 50 63 68 47 4c 45 5f 43 4a 31 4d 4a 62 4a 79 2d 78 44 51 22 5d 2c 22 70 61 72 61 6d 73 22 3a 22 43 67 49 49 42 78 67 42 22 7d 7d 5d 7d 7d 2c 22 73 75 62 74 69 74 6c 65 22 3a 7b 22 72 75 6e 73 22 3a 5b 7b 22 74 65 78 74 22 3a 22 31 37 35 4b 20 73 75 62 73 63 72 69 62 65 72 73 22 7d 5d 7d 2c 22 74 Data Ascii: 1MJbJy-xDQ"],"params":"EgIIBxgB"}},{"clickTrackingParams":"CAIQmysiEwiq5_6VgceFAxVtzXIJHfwSBPEyCWl2LWVtYmVkcw==","unsubscribeEndpoint":{"channelIds":["UCMxJPchGLE_CJ1MJbJy-xDQ"],"params":"CgIIBxgB"}}]}},"subtitle":{"runs":[{"text":"175K subscribers"}]},"t
2024-04-16 15:05:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.11	49848	142.251.15.91	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:48 UTC	970	OUT	GET /generate_204?sUKJnQ HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/embed/wAD9uO9YAQw?playlist=wAD9uO9YAQw&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&origin=https%3A%2F%2Fniceindiatravel.com&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
2024-04-16 15:05:49 UTC	203	IN	HTTP/1.1 204 No Content Content-Length: 0 Cross-Origin-Resource-Policy: cross-origin Date: Tue, 16 Apr 2024 15:05:48 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.11	49852	142.251.15.91	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:48 UTC	944	OUT	GET /s/player/7ebf4817/player_ias.vflset/en_US/captions.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/embed/wAD9uO9YAQw?playlist=wAD9uO9YAQw&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&origin=https%3A%2F%2Fniceindiatravel.com&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
2024-04-16 15:05:49 UTC	688	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 72968 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 10 Apr 2024 18:46:28 GMT Expires: Thu, 10 Apr 2025 18:46:28 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 10 Apr 2024 04:18:25 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 505161 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 15:05:49 UTC	567	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 71 70 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 62 3f 61 2e 63 61 70 74 69 6f 6e 73 49 6e 69 74 69 61 6c 53 74 61 74 65 3a 22 43 41 50 54 49 4f 4e 53 5f 49 4e 49 54 49 41 4c 5f 53 54 41 54 45 5f 55 4e 4b 4e 4f 57 4e 22 7d 2c 72 70 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 6e 65 77 20 67 2e 70 53 3b 0a 63 2e 6c 61 6e 67 75 61 67 65 43 6f 64 65 3d 61 2e 6c 61 6e 67 75 61 67 65 43 6f 64 65 3b 63 2e 6c 61 6e 67 75 61 67 65 4e 61 6d 65 3d 61 2e 6c 61 6e 67 75 61 67 65 4e 61 6d 65 3b 63 2e 6e 61 6d 65 3d 61 2e 6e 61 6d 65 3b 63 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 61 2e 64 Data Ascii: (function(g){var window=this;'use strict';var qpb=function(a,b){return b?a.captionsInitialState:"CAPTIONS_INITIAL_STATE_UNKNOWN"},rpb=function(a,b){var c=new g.pS;c.languageCode=a.languageCode;c.languageName=a.languageName;c.name=a.name;c.displayName=a.d
2024-04-16 15:05:49 UTC	1255	IN	Data Raw: 3d 66 2e 6a 29 7b 64 3d 66 2e 42 3b 69 66 28 21 64 29 74 68 72 6f 77 20 67 2e 56 43 28 22 67 63 74 22 29 3b 72 65 74 75 72 6e 20 67 2e 7a 28 66 2c 67 2e 45 53 28 64 29 2c 33 29 7d 65 3d 66 2e 42 3b 72 65 74 75 72 6e 20 66 2e 72 65 74 75 72 6e 28 65 2e 67 65 74 28 22 63 61 70 74 69 6f 6e 73 22 2c 63 29 29 7d 29 7d 2c 74 70 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 73 70 62 28 61 2c 62 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 64 29 7b 64 26 26 63 28 64 2e 74 72 61 63 6b 44 61 74 61 2c 6e 65 77 20 67 2e 70 53 28 64 2e 6d 65 74 61 64 61 74 61 29 29 7d 29 7d 2c 77 70 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 75 70 62 2e 74 65 73 74 28 61 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 27 22 2b 61 2b 22 27 20 69 73 20 6e 6f 74 20 61 Data Ascii: =f.j){d=f.B;if(!d)throw g.VC("gct");return g.z(f,g.ES(d),3)}e=f.B;return f.return(e.get("captions",c))})},tpb=function(a,b,c){spb(a,b).then(function(d){d&&c(d.trackData,new g.pS(d.metadata))})},wpb=function(a){if(!upb.test(a))throw Error("'"+a+"' is not a
2024-04-16 15:05:49 UTC	1255	IN	Data Raw: 62 29 7b 76 61 72 20 63 3d 67 2e 47 50 61 28 62 2c 61 2e 70 6f 6c 69 63 79 2c 7b 7d 29 2e 51 65 28 29 2c 64 3d 7b 66 6f 72 6d 61 74 3a 22 52 41 57 22 2c 0a 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 3a 21 30 7d 3b 69 66 28 61 2e 70 6f 6c 69 63 79 2e 42 61 29 7b 64 2e 6d 65 74 68 6f 64 3d 22 50 4f 53 54 22 3b 76 61 72 20 65 3d 62 2e 44 2c 66 3d 28 30 2c 67 2e 45 5a 29 28 5b 31 32 30 2c 30 5d 29 3b 65 26 26 67 2e 7a 4f 28 65 2c 67 2e 43 58 61 29 3b 64 2e 70 6f 73 74 42 6f 64 79 3d 66 7d 61 2e 47 26 26 28 64 2e 72 65 73 70 6f 6e 73 65 54 79 70 65 3d 22 61 72 72 61 79 62 75 66 66 65 72 22 29 3b 61 2e 43 3d 67 2e 44 42 28 63 2c 64 2c 33 2c 31 30 30 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 68 29 7b 61 3a 7b 68 3d 68 2e 78 68 72 3b 61 2e 69 73 44 69 73 Data Ascii: b){var c=g.GPa(b,a.policy,{}).Qe(),d={format:"RAW",withCredentials:!0};if(a.policy.Ba){d.method="POST";var e=b.D,f=(0,g.EZ)([120,0]);e&&g.zO(e,g.CXa);d.postBody=f}a.G&&(d.responseType="arraybuffer");a.C=g.DB(c,d,3,100).then(function(h){a:{h=h.xhr;a.isDis
2024-04-16 15:05:49 UTC	1255	IN	Data Raw: 28 71 3d 43 70 62 5b 65 5d 7c 7c 43 70 62 5b 65 2e 72 65 70 6c 61 63 65 28 2f 2d 2f 67 2c 22 5f 22 29 5d 2c 67 2e 6f 6e 62 2e 73 65 74 28 65 2c 71 29 29 3b 68 3d 71 7c 7c 68 7d 63 2e 70 75 73 68 28 6e 65 77 20 67 2e 70 53 28 7b 69 64 3a 64 2c 6c 61 6e 67 75 61 67 65 43 6f 64 65 3a 66 2c 6c 61 6e 67 75 61 67 65 4e 61 6d 65 3a 68 2c 69 73 5f 73 65 72 76 61 62 6c 65 3a 21 30 2c 69 73 5f 64 65 66 61 75 6c 74 3a 21 30 2c 69 73 5f 74 72 61 6e 73 6c 61 74 65 61 62 6c 65 3a 21 31 2c 76 73 73 5f 69 64 3a 6c 2c 6b 69 6e 64 3a 6d 2c 78 74 61 67 73 3a 6e 2c 63 61 70 74 69 6f 6e 49 64 3a 70 7d 29 29 7d 7d 72 65 74 75 72 6e 20 63 7d 2c 0a 45 70 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 62 26 26 62 20 69 6e 20 61 2e 6a 2e 6a Data Ascii: (q=Cpb[e]\|\|Cpb[e.replace(/-/g,"_")],g.onb.set(e,q));h=q\|\|h}c.push(new g.pS({id:d,languageCode:f,languageName:h,is_servable:!0,is_default:!0,is_translateable:!1,vss_id:l,kind:m,xtags:n,captionId:p}))}}return c},Epb=function(a,b){return null!=b&&b in a.j.j
2024-04-16 15:05:49 UTC	1255	IN	Data Raw: 72 52 65 73 70 6f 6e 73 65 28 29 29 3f 76 6f 69 64 20 30 3a 6e 75 6c 6c 3d 3d 28 41 3d 77 2e 63 61 70 74 69 6f 6e 73 29 3f 76 6f 69 64 20 30 3a 6e 75 6c 6c 3d 3d 28 44 3d 41 2e 70 6c 61 79 65 72 43 61 70 74 69 6f 6e 73 54 72 61 63 6b 6c 69 73 74 52 65 6e 64 65 72 65 72 29 3f 76 6f 69 64 20 30 3a 44 2e 6f 70 65 6e 54 72 61 6e 73 63 72 69 70 74 43 6f 6d 6d 61 6e 64 29 29 26 26 0a 76 2e 75 6e 73 68 69 66 74 28 7b 49 3a 22 62 75 74 74 6f 6e 22 2c 53 3a 22 63 61 70 74 69 6f 6e 2d 65 64 69 74 22 2c 58 3a 7b 74 61 62 69 6e 64 65 78 3a 22 30 22 2c 22 61 72 69 61 2d 6c 61 62 65 6c 22 3a 47 70 62 28 29 7d 2c 56 3a 5b 7b 49 3a 22 73 76 67 22 2c 58 3a 7b 66 69 6c 6c 3a 22 23 65 33 65 33 65 33 22 2c 68 65 69 67 68 74 3a 22 31 30 30 25 22 2c 76 69 65 77 42 6f 78 3a 22 Data Ascii: rResponse())?void 0:null==(A=w.captions)?void 0:null==(D=A.playerCaptionsTracklistRenderer)?void 0:D.openTranscriptCommand))&&v.unshift({I:"button",S:"caption-edit",X:{tabindex:"0","aria-label":Gpb()},V:[{I:"svg",X:{fill:"#e3e3e3",height:"100%",viewBox:"
2024-04-16 15:05:49 UTC	1255	IN	Data Raw: 65 28 22 64 72 61 67 65 6e 64 22 2c 74 68 69 73 2e 6a 33 2c 74 68 69 73 29 3b 74 68 69 73 2e 65 62 3d 74 68 69 73 2e 5a 61 3d 74 68 69 73 2e 77 62 3d 74 68 69 73 2e 72 62 3d 30 3b 61 3d 22 22 3b 74 68 69 73 2e 6a 2e 77 69 6e 64 6f 77 4f 70 61 63 69 74 79 26 26 28 61 3d 77 70 62 28 74 68 69 73 2e 6a 2e 77 69 6e 64 6f 77 43 6f 6c 6f 72 29 2c 61 3d 22 72 67 62 61 28 22 2b 61 5b 30 5d 2b 22 2c 22 2b 61 5b 31 5d 2b 22 2c 22 2b 61 5b 32 5d 2b 22 2c 22 2b 74 68 69 73 2e 6a 2e 77 69 6e 64 6f 77 4f 70 61 63 69 74 79 2b 22 29 22 29 3b 62 3d 7b 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 22 3a 61 2c 64 69 73 70 6c 61 79 3a 21 31 3d 3d 3d 74 68 69 73 2e 6a 2e 69 73 56 69 73 69 62 6c 65 3f 22 6e 6f 6e 65 22 3a 22 22 2c 22 74 65 78 74 2d 61 6c 69 67 6e 22 3a 4a Data Ascii: e("dragend",this.j3,this);this.eb=this.Za=this.wb=this.rb=0;a="";this.j.windowOpacity&&(a=wpb(this.j.windowColor),a="rgba("+a[0]+","+a[1]+","+a[2]+","+this.j.windowOpacity+")");b={"background-color":a,display:!1===this.j.isVisible?"none":"","text-align":J
2024-04-16 15:05:49 UTC	1255	IN	Data Raw: 7b 76 61 72 20 65 3d 6e 75 6c 6c 21 3d 62 2e 62 61 63 6b 67 72 6f 75 6e 64 4f 70 61 63 69 74 79 3f 62 2e 62 61 63 6b 67 72 6f 75 6e 64 4f 70 61 63 69 74 79 3a 61 2e 6a 2e 58 65 2e 62 61 63 6b 67 72 6f 75 6e 64 4f 70 61 63 69 74 79 3b 64 3d 77 70 62 28 64 29 3b 63 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 22 2b 64 5b 30 5d 2b 22 2c 22 2b 64 5b 31 5d 2b 22 2c 22 2b 64 5b 32 5d 2b 22 2c 22 2b 65 2b 22 29 22 3b 61 2e 51 62 26 26 28 63 5b 22 62 6f 78 2d 64 65 63 6f 72 61 74 69 6f 6e 2d 62 72 65 61 6b 22 5d 3d 22 63 6c 6f 6e 65 22 2c 63 5b 22 62 6f 72 64 65 72 2d 72 61 64 69 75 73 22 5d 3d 61 2e 59 61 2f 38 2b 22 70 78 22 29 7d 69 66 28 6e 75 6c 6c 21 3d 62 2e 66 6f 6e 74 53 69 7a 65 49 6e 63 72 65 6d 65 6e 74 7c 7c 6e 75 6c 6c 21 3d 62 2e 6f 66 66 Data Ascii: {var e=null!=b.backgroundOpacity?b.backgroundOpacity:a.j.Xe.backgroundOpacity;d=wpb(d);c.background="rgba("+d[0]+","+d[1]+","+d[2]+","+e+")";a.Qb&&(c["box-decoration-break"]="clone",c["border-radius"]=a.Ya/8+"px")}if(null!=b.fontSizeIncrement\|\|null!=b.off
2024-04-16 15:05:49 UTC	1255	IN	Data Raw: 61 63 6f 2c 20 43 6f 6e 73 6f 6c 61 73 2c 20 22 50 54 20 4d 6f 6e 6f 22 2c 20 6d 6f 6e 6f 73 70 61 63 65 27 3b 62 72 65 61 6b 3b 63 61 73 65 20 35 3a 65 3d 27 22 43 6f 6d 69 63 20 53 61 6e 73 20 4d 53 22 2c 20 49 6d 70 61 63 74 2c 20 48 61 6e 64 6c 65 65 2c 20 66 61 6e 74 61 73 79 27 3b 62 72 65 61 6b 3b 63 61 73 65 20 36 3a 65 3d 27 22 4d 6f 6e 6f 74 79 70 65 20 43 6f 72 73 69 76 61 22 2c 20 22 55 52 57 20 43 68 61 6e 63 65 72 79 20 4c 22 2c 20 22 41 70 70 6c 65 20 43 68 61 6e 63 65 72 79 22 2c 20 22 44 61 6e 63 69 6e 67 20 53 63 72 69 70 74 22 2c 20 63 75 72 73 69 76 65 27 3b 62 72 65 61 6b 3b 63 61 73 65 20 37 3a 65 3d 67 2e 4e 42 28 29 3f 0a 27 22 43 61 72 72 6f 69 73 20 47 6f 74 68 69 63 20 53 43 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 2d 73 6d 61 6c Data Ascii: aco, Consolas, "PT Mono", monospace';break;case 5:e='"Comic Sans MS", Impact, Handlee, fantasy';break;case 6:e='"Monotype Corsiva", "URW Chancery L", "Apple Chancery", "Dancing Script", cursive';break;case 7:e=g.NB()?'"Carrois Gothic SC", sans-serif-smal
2024-04-16 15:05:49 UTC	1255	IN	Data Raw: 73 2d 70 6f 73 69 74 69 6f 6e 22 5d 3d 0a 22 75 6e 64 65 72 20 6c 65 66 74 22 3b 63 5b 22 77 65 62 6b 69 74 2d 74 65 78 74 2d 65 6d 70 68 61 73 69 73 2d 70 6f 73 69 74 69 6f 6e 22 5d 3d 22 75 6e 64 65 72 20 6c 65 66 74 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 35 3a 63 61 73 65 20 32 3a 63 5b 22 74 65 78 74 2d 65 6d 70 68 61 73 69 73 2d 70 6f 73 69 74 69 6f 6e 22 5d 3d 22 6f 76 65 72 20 72 69 67 68 74 22 2c 63 5b 22 77 65 62 6b 69 74 2d 74 65 78 74 2d 65 6d 70 68 61 73 69 73 2d 70 6f 73 69 74 69 6f 6e 22 5d 3d 22 6f 76 65 72 20 72 69 67 68 74 22 7d 72 65 74 75 72 6e 20 63 7d 2c 74 34 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 61 2e 73 70 6c 69 74 28 22 70 78 22 29 3b 0a 72 65 74 75 72 6e 20 30 3c 61 2e 6c 65 6e 67 74 68 3f 28 61 3d 4e 75 6d 62 65 72 28 61 Data Ascii: s-position"]="under left";c["webkit-text-emphasis-position"]="under left";break;case 5:case 2:c["text-emphasis-position"]="over right",c["webkit-text-emphasis-position"]="over right"}return c},t4=function(a){a=a.split("px");return 0<a.length?(a=Number(a
2024-04-16 15:05:49 UTC	1255	IN	Data Raw: 6e 2e 63 68 69 6c 64 72 65 6e 5b 32 5d 2c 22 74 65 78 74 2d 65 6d 70 68 61 73 69 73 2d 70 6f 73 69 74 69 6f 6e 22 29 26 26 28 6d 3d 0a 61 2e 43 3f 22 70 61 64 64 69 6e 67 2d 6c 65 66 74 22 3a 22 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 22 29 2c 67 2e 56 63 3f 67 2e 79 73 28 65 2c 6d 2c 22 31 65 6d 22 29 3a 67 2e 79 73 28 65 2c 6d 2c 22 30 2e 35 65 6d 22 29 29 29 7d 61 2e 4d 61 3d 64 3b 61 2e 4c 61 3d 65 3b 61 2e 4b 2e 70 75 73 68 28 62 29 7d 2c 48 70 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 62 2f 33 36 30 2a 31 36 3b 0a 62 3e 3d 61 26 26 28 61 3d 36 34 30 2c 64 3e 31 2e 33 2a 63 26 26 28 61 3d 34 38 30 29 2c 65 3d 63 2f 61 2a 31 36 29 3b 72 65 74 75 72 6e 20 65 7d 2c 51 70 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 Data Ascii: n.children[2],"text-emphasis-position")&&(m=a.C?"padding-left":"padding-bottom"),g.Vc?g.ys(e,m,"1em"):g.ys(e,m,"0.5em")))}a.Ma=d;a.La=e;a.K.push(b)},Hpb=function(a,b,c,d){var e=b/36016;b>=a&&(a=640,d>1.3c&&(a=480),e=c/a*16);return e},Qpb=function(){th

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.11	49853	142.251.15.91	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:48 UTC	945	OUT	GET /s/player/7ebf4817/player_ias.vflset/en_US/endscreen.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/embed/wAD9uO9YAQw?playlist=wAD9uO9YAQw&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&origin=https%3A%2F%2Fniceindiatravel.com&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
2024-04-16 15:05:49 UTC	688	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 34509 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 10 Apr 2024 12:27:31 GMT Expires: Thu, 10 Apr 2025 12:27:31 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 10 Apr 2024 04:18:25 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 527898 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 15:05:49 UTC	567	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 42 74 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 67 62 28 22 6f 6e 41 75 74 6f 6e 61 76 43 6f 75 6e 64 6f 77 6e 53 74 61 72 74 65 64 22 2c 62 29 7d 2c 69 36 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 67 2e 76 76 28 61 2e 65 6c 65 6d 65 6e 74 2c 22 79 74 70 2d 73 75 67 67 65 73 74 69 6f 6e 2d 73 65 74 22 2c 21 21 62 2e 76 69 64 65 6f 49 64 29 3b 0a 76 61 72 20 64 3d 62 2e 70 6c 61 79 6c 69 73 74 49 64 3b 63 3d 62 2e 66 68 28 63 3f 63 3a 22 6d 71 64 65 66 61 75 6c 74 2e 6a 70 67 22 29 3b 76 61 72 20 65 3d 6e 75 6c 6c 2c 66 3d 6e 75 6c 6c 3b 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 67 2e 7a 53 26 26 28 62 Data Ascii: (function(g){var window=this;'use strict';var Btb=function(a,b){a.gb("onAutonavCoundownStarted",b)},i6=function(a,b,c){g.vv(a.element,"ytp-suggestion-set",!!b.videoId);var d=b.playlistId;c=b.fh(c?c:"mqdefault.jpg");var e=null,f=null;b instanceof g.zS&&(b
2024-04-16 15:05:49 UTC	1255	IN	Data Raw: 29 3b 70 26 26 28 72 2e 70 75 73 68 28 70 29 2c 74 2e 70 75 73 68 28 70 29 29 3b 71 26 26 74 2e 70 75 73 68 28 71 29 3b 63 3d 7b 74 69 74 6c 65 3a 62 2e 74 69 74 6c 65 2c 61 75 74 68 6f 72 3a 6e 2c 61 75 74 68 6f 72 5f 61 6e 64 5f 76 69 65 77 73 3a 72 2e 6a 6f 69 6e 28 22 20 5c 75 32 30 32 32 20 22 29 2c 61 72 69 61 5f 6c 61 62 65 6c 3a 62 2e 61 72 69 61 4c 61 62 65 6c 7c 7c 0a 67 2e 4d 4a 28 22 57 61 74 63 68 20 24 54 49 54 4c 45 22 2c 7b 54 49 54 4c 45 3a 62 2e 74 69 74 6c 65 7d 29 2c 64 75 72 61 74 69 6f 6e 3a 65 2c 74 69 6d 65 73 74 61 6d 70 3a 66 2c 75 72 6c 3a 62 2e 50 6b 28 29 2c 69 73 5f 6c 69 76 65 3a 6c 2c 69 73 5f 75 70 63 6f 6d 69 6e 67 3a 6d 2c 69 73 5f 6c 69 73 74 3a 68 2c 69 73 5f 6d 69 78 3a 64 2c 62 61 63 6b 67 72 6f 75 6e 64 3a 63 3f 22 Data Ascii: );p&&(r.push(p),t.push(p));q&&t.push(q);c={title:b.title,author:n,author_and_views:r.join(" \u2022 "),aria_label:b.ariaLabel\|\|g.MJ("Watch $TITLE",{TITLE:b.title}),duration:e,timestamp:f,url:b.Pk(),is_live:l,is_upcoming:m,is_list:h,is_mix:d,background:c?"
2024-04-16 15:05:49 UTC	1255	IN	Data Raw: 2d 61 75 74 6f 6e 61 76 2d 65 6e 64 73 63 72 65 65 6e 2d 75 70 6e 65 78 74 2d 61 75 74 68 6f 72 22 2c 22 79 74 70 2d 61 75 74 6f 6e 61 76 2d 61 75 74 68 6f 72 2d 63 61 72 64 22 5d 2c 78 61 3a 22 7b 7b 61 75 74 68 6f 72 7d 7d 22 7d 2c 7b 49 3a 22 64 69 76 22 2c 4b 61 3a 5b 22 79 74 70 2d 61 75 74 6f 6e 61 76 2d 65 6e 64 73 63 72 65 65 6e 2d 75 70 6e 65 78 74 2d 61 75 74 68 6f 72 22 2c 22 79 74 70 2d 61 75 74 6f 6e 61 76 2d 76 69 65 77 2d 61 6e 64 2d 64 61 74 65 2d 63 61 72 64 22 5d 2c 78 61 3a 22 7b 7b 76 69 65 77 73 5f 61 6e 64 5f 70 75 62 6c 69 73 68 5f 74 69 6d 65 7d 7d 22 7d 5d 7d 29 3b 74 68 69 73 2e 4a 3d 61 3b 74 68 69 73 2e 73 75 67 67 65 73 74 69 6f 6e 3d 0a 6e 75 6c 6c 3b 74 68 69 73 2e 6a 3d 63 3b 74 68 69 73 2e 6c 69 73 74 65 6e 28 22 63 6c 69 Data Ascii: -autonav-endscreen-upnext-author","ytp-autonav-author-card"],xa:"{{author}}"},{I:"div",Ka:["ytp-autonav-endscreen-upnext-author","ytp-autonav-view-and-date-card"],xa:"{{views_and_publish_time}}"}]});this.J=a;this.suggestion=null;this.j=c;this.listen("cli
2024-04-16 15:05:49 UTC	1255	IN	Data Raw: 76 2d 65 6e 64 73 63 72 65 65 6e 2d 75 70 6e 65 78 74 2d 74 68 75 6d 62 6e 61 69 6c 22 2c 58 3a 7b 73 74 79 6c 65 3a 22 7b 7b 62 61 63 6b 67 72 6f 75 6e 64 7d 7d 22 7d 2c 56 3a 5b 7b 49 3a 22 64 69 76 22 2c 58 3a 7b 22 61 72 69 61 2d 6c 61 62 65 6c 22 3a 22 7b 7b 74 69 6d 65 73 74 61 6d 70 7d 7d 22 7d 2c 4b 61 3a 5b 22 79 74 70 2d 61 75 74 6f 6e 61 76 2d 74 69 6d 65 73 74 61 6d 70 22 5d 2c 0a 78 61 3a 22 7b 7b 64 75 72 61 74 69 6f 6e 7d 7d 22 7d 2c 7b 49 3a 22 64 69 76 22 2c 4b 61 3a 5b 22 79 74 70 2d 61 75 74 6f 6e 61 76 2d 6c 69 76 65 2d 73 74 61 6d 70 22 5d 2c 78 61 3a 22 4c 69 76 65 22 7d 2c 7b 49 3a 22 64 69 76 22 2c 4b 61 3a 5b 22 79 74 70 2d 61 75 74 6f 6e 61 76 2d 75 70 63 6f 6d 69 6e 67 2d 73 74 61 6d 70 22 5d 2c 78 61 3a 22 55 70 63 6f 6d 69 6e Data Ascii: v-endscreen-upnext-thumbnail",X:{style:"{{background}}"},V:[{I:"div",X:{"aria-label":"{{timestamp}}"},Ka:["ytp-autonav-timestamp"],xa:"{{duration}}"},{I:"div",Ka:["ytp-autonav-live-stamp"],xa:"Live"},{I:"div",Ka:["ytp-autonav-upcoming-stamp"],xa:"Upcomin
2024-04-16 15:05:49 UTC	1255	IN	Data Raw: 65 78 74 2d 63 61 6e 63 65 6c 2d 62 75 74 74 6f 6e 22 2c 62 2e 4c 28 22 77 65 62 5f 6d 6f 64 65 72 6e 5f 62 75 74 74 6f 6e 73 22 29 3f 22 79 74 70 2d 61 75 74 6f 6e 61 76 2d 65 6e 64 73 63 72 65 65 6e 2d 75 70 6e 65 78 74 2d 62 75 74 74 6f 6e 2d 72 6f 75 6e 64 65 64 22 3a 22 22 5d 2c 58 3a 7b 22 61 72 69 61 2d 6c 61 62 65 6c 22 3a 22 43 61 6e 63 65 6c 20 61 75 74 6f 70 6c 61 79 22 7d 2c 78 61 3a 22 43 61 6e 63 65 6c 22 7d 29 3b 67 2e 4f 28 74 68 69 73 2c 74 68 69 73 2e 63 61 6e 63 65 6c 42 75 74 74 6f 6e 29 3b 74 68 69 73 2e 63 61 6e 63 65 6c 42 75 74 74 6f 6e 2e 49 61 28 74 68 69 73 2e 42 2e 65 6c 65 6d 65 6e 74 29 3b 74 68 69 73 2e 63 61 6e 63 65 6c 42 75 74 74 6f 6e 2e 6c 69 73 74 65 6e 28 22 63 6c 69 63 6b 22 2c 74 68 69 73 2e 72 33 2c 74 68 69 73 29 Data Ascii: ext-cancel-button",b.L("web_modern_buttons")?"ytp-autonav-endscreen-upnext-button-rounded":""],X:{"aria-label":"Cancel autoplay"},xa:"Cancel"});g.O(this,this.cancelButton);this.cancelButton.Ia(this.B.element);this.cancelButton.listen("click",this.r3,this)
2024-04-16 15:05:49 UTC	1255	IN	Data Raw: 22 2c 61 2e 51 67 28 62 29 29 3b 67 2e 76 76 28 61 2e 63 6f 6e 74 61 69 6e 65 72 2e 65 6c 65 6d 65 6e 74 2c 22 79 74 70 2d 61 75 74 6f 6e 61 76 2d 65 6e 64 73 63 72 65 65 6e 2d 69 73 2d 70 72 65 6d 69 75 6d 22 2c 21 21 61 2e 73 75 67 67 65 73 74 69 6f 6e 26 26 21 21 61 2e 73 75 67 67 65 73 74 69 6f 6e 2e 66 4c 29 3b 67 2e 76 76 28 61 2e 4a 2e 67 65 74 52 6f 6f 74 4e 6f 64 65 28 29 2c 22 79 74 70 2d 61 75 74 6f 6e 61 76 2d 65 6e 64 73 63 72 65 65 6e 2d 63 61 6e 63 65 6c 6c 65 64 2d 73 74 61 74 65 22 2c 21 61 2e 4a 2e 4b 66 28 29 29 3b 67 2e 76 76 28 61 2e 4a 2e 67 65 74 52 6f 6f 74 4e 6f 64 65 28 29 2c 22 63 6f 75 6e 74 64 6f 77 6e 2d 72 75 6e 6e 69 6e 67 22 2c 61 2e 55 6b 28 29 29 3b 67 2e 76 76 28 61 2e 63 6f 6e 74 61 69 6e 65 72 2e 65 6c 65 6d 65 6e 74 Data Ascii: ",a.Qg(b));g.vv(a.container.element,"ytp-autonav-endscreen-is-premium",!!a.suggestion&&!!a.suggestion.fL);g.vv(a.J.getRootNode(),"ytp-autonav-endscreen-cancelled-state",!a.J.Kf());g.vv(a.J.getRootNode(),"countdown-running",a.Uk());g.vv(a.container.element
2024-04-16 15:05:49 UTC	1255	IN	Data Raw: 75 74 74 6f 6e 2e 65 6c 65 6d 65 6e 74 2c 62 29 7d 2c 47 74 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 0a 72 65 74 75 72 6e 21 28 6e 75 6c 6c 3d 3d 28 62 3d 61 2e 4a 2e 67 65 74 56 69 64 65 6f 44 61 74 61 28 29 29 7c 7c 21 62 2e 77 61 74 63 68 54 6f 57 61 74 63 68 54 72 61 6e 73 69 74 69 6f 6e 52 65 6e 64 65 72 65 72 29 7d 2c 45 74 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3d 76 6f 69 64 20 30 3d 3d 3d 62 3f 2d 31 3a 62 3b 0a 61 3d 61 2e 6a 2e 45 61 28 22 79 74 70 2d 61 75 74 6f 6e 61 76 2d 65 6e 64 73 63 72 65 65 6e 2d 75 70 6e 65 78 74 2d 68 65 61 64 65 72 22 29 3b 67 2e 52 66 28 61 29 3b 69 66 28 30 3c 3d 62 29 7b 62 3d 53 74 72 69 6e 67 28 62 29 3b 76 61 72 20 63 3d 22 55 70 20 6e 65 78 74 20 69 6e 20 24 53 45 43 4f 4e 44 53 Data Ascii: utton.element,b)},Gtb=function(a){var b;return!(null==(b=a.J.getVideoData())\|\|!b.watchToWatchTransitionRenderer)},Etb=function(a,b){b=void 0===b?-1:b;a=a.j.Ea("ytp-autonav-endscreen-upnext-header");g.Rf(a);if(0<=b){b=String(b);var c="Up next in $SECONDS
2024-04-16 15:05:49 UTC	1255	IN	Data Raw: 69 64 74 68 3a 22 31 30 30 25 22 7d 2c 0a 56 3a 5b 7b 49 3a 22 63 69 72 63 6c 65 22 2c 53 3a 22 79 74 70 2d 73 76 67 2d 61 75 74 6f 70 6c 61 79 2d 63 69 72 63 6c 65 22 2c 58 3a 7b 63 78 3a 22 33 36 22 2c 63 79 3a 22 33 36 22 2c 66 69 6c 6c 3a 22 23 66 66 66 22 2c 22 66 69 6c 6c 2d 6f 70 61 63 69 74 79 22 3a 22 30 2e 33 22 2c 72 3a 22 33 31 2e 35 22 7d 7d 2c 7b 49 3a 22 63 69 72 63 6c 65 22 2c 53 3a 22 79 74 70 2d 73 76 67 2d 61 75 74 6f 70 6c 61 79 2d 72 69 6e 67 22 2c 58 3a 7b 63 78 3a 22 2d 33 36 22 2c 63 79 3a 22 33 36 22 2c 22 66 69 6c 6c 2d 6f 70 61 63 69 74 79 22 3a 22 30 22 2c 72 3a 22 33 33 2e 35 22 2c 73 74 72 6f 6b 65 3a 22 23 46 46 46 46 46 46 22 2c 22 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 22 3a 22 32 31 31 22 2c 22 73 74 72 6f 6b 65 Data Ascii: idth:"100%"},V:[{I:"circle",S:"ytp-svg-autoplay-circle",X:{cx:"36",cy:"36",fill:"#fff","fill-opacity":"0.3",r:"31.5"}},{I:"circle",S:"ytp-svg-autoplay-ring",X:{cx:"-36",cy:"36","fill-opacity":"0",r:"33.5",stroke:"#FFFFFF","stroke-dasharray":"211","stroke
2024-04-16 15:05:49 UTC	1255	IN	Data Raw: 28 29 3b 74 68 69 73 2e 54 28 61 2c 22 61 75 74 6f 6e 61 76 76 69 73 69 62 69 6c 69 74 79 22 2c 74 68 69 73 2e 42 54 29 3b 74 68 69 73 2e 54 28 61 2c 22 6d 64 78 6e 6f 77 61 75 74 6f 70 6c 61 79 69 6e 67 22 2c 74 68 69 73 2e 51 24 29 3b 74 68 69 73 2e 54 28 61 2c 22 6d 64 78 61 75 74 6f 70 6c 61 79 63 61 6e 63 65 6c 65 64 22 2c 74 68 69 73 2e 52 24 29 3b 67 2e 76 76 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2c 22 79 74 70 2d 75 70 6e 65 78 74 2d 6d 6f 62 69 6c 65 22 2c 74 68 69 73 2e 61 70 69 2e 55 28 29 2e 42 29 7d 2c 48 74 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 62 29 72 65 74 75 72 6e 20 62 3b 0a 69 66 28 61 2e 61 70 69 2e 69 73 46 75 6c 6c 73 63 72 65 65 6e 28 29 29 7b 76 61 72 20 63 3b 61 3d 6e 75 6c 6c 3d 3d 28 63 3d 61 2e 61 70 69 2e Data Ascii: ();this.T(a,"autonavvisibility",this.BT);this.T(a,"mdxnowautoplaying",this.Q$);this.T(a,"mdxautoplaycanceled",this.R$);g.vv(this.element,"ytp-upnext-mobile",this.api.U().B)},Htb=function(a,b){if(b)return b;if(a.api.isFullscreen()){var c;a=null==(c=a.api.
2024-04-16 15:05:49 UTC	1255	IN	Data Raw: 76 65 72 6c 61 79 29 3b 74 68 69 73 2e 6f 76 65 72 6c 61 79 2e 49 61 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 29 3b 74 68 69 73 2e 44 3d 6e 65 77 20 67 2e 78 4b 28 74 68 69 73 29 3b 67 2e 4f 28 74 68 69 73 2c 74 68 69 73 2e 44 29 3b 67 2e 4f 28 74 68 69 73 2c 74 68 69 73 2e 74 61 62 6c 65 29 3b 74 68 69 73 2e 74 61 62 6c 65 2e 49 61 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 29 3b 74 68 69 73 2e 74 61 62 6c 65 2e 73 68 6f 77 28 29 3b 67 2e 4f 28 74 68 69 73 2c 74 68 69 73 2e 4e 29 3b 74 68 69 73 2e 4e 2e 49 61 28 74 68 69 73 2e 74 61 62 6c 65 2e 65 6c 65 6d 65 6e 74 29 3b 74 68 69 73 2e 68 69 64 65 28 29 7d 2c 70 36 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 4b 66 28 29 3b 0a 62 21 3d 3d 61 2e 47 26 26 28 61 2e 47 3d 62 2c 61 2e 70 6c 61 79 Data Ascii: verlay);this.overlay.Ia(this.element);this.D=new g.xK(this);g.O(this,this.D);g.O(this,this.table);this.table.Ia(this.element);this.table.show();g.O(this,this.N);this.N.Ia(this.table.element);this.hide()},p6=function(a){var b=a.Kf();b!==a.G&&(a.G=b,a.play

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.11	49850	172.217.135.202	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:48 UTC	2013	OUT	POST /videoplayback?expire=1713301547&ei=y5MeZqSPB9aoy_sPxcuI0A8&ip=81.181.57.52&id=o-AGTEz6yrZN30zWRHetU01zfPZPIBkqXwN_jxSqpNGk-M&itag=397&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=rv&mm=31%2C29&mn=sn-p5qlsn76%2Csn-p5qddn7r&ms=au%2Crdu&mv=m&mvi=5&pl=26&initcwndbps=1037500&bui=AaUN6a0X-vPuPWnoZdJnY8gcaw5_Rec69zGixzS_kVy6dh8yJJHbZPIDav7sGh5eMsIrcUMSgNZoV-eJ&spc=UWF9f_C907pjE2i9QlVivDiO3bFloqFrBkw3MS1j9d3XXjQUG-40uVYW-Q&vprv=1&svpuc=1&mime=video%2Fmp4&ns=8Io3oEW7FSAr8VYj4CRq5ycQ&gir=yes&clen=8585092&dur=156.920&lmt=1693475130863016&mt=1713279665&fvip=5&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=4437434&n=65_ILddd0oaXCA&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIhAIJD2XoyAZdDtZec9zoNpH93qOSJ9tDx0ji_zhe-crfHAiAiIRnPfFyfm5dlKv_4IedTtbt55HI_TuklC2DIglN3cQ%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ALClDIEwRQIhALaMd8X8P3LTQ-dzb36htdQmyx7RegKRkqR_w8GTV_GCAiAXEkpCyRYR_s7h1aB1LlSa8sV2f8SVngOiCKBfSgfTuQ%3D%3D&alr=yes&cpn=F6GU1QEdhoMLD-Np&cver=1.20240409.01.00&range=0-176547&rn=1&rbuf=0&pot=IjhWAlYBMBzFyRVlIkgbRWdNGG4mWwNoMnEZQTxLJl0ndRRoH0kVZRxUA3ofRxFlF2UdQ3MxEidlRg==&ump=1&srfvp=1 HTTP/1.1 Host: rr5---sn-p5qlsn76.googlevideo.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:48 UTC	2	OUT	Data Raw: 78 00 Data Ascii: x
2024-04-16 15:05:49 UTC	1030	IN	HTTP/1.1 200 OK Last-Modified: Thu, 31 Aug 2023 09:45:30 GMT Content-Type: application/vnd.yt-ump Date: Tue, 16 Apr 2024 15:05:49 GMT Expires: Tue, 16 Apr 2024 15:05:49 GMT Cache-Control: private, max-age=21298 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Restrict-Formats-Hint: None X-Content-Type-Options: nosniff Server: gvs 1.0
2024-04-16 15:05:49 UTC	3	IN	Data Raw: 34 0d 0a Data Ascii: 4
2024-04-16 15:05:49 UTC	4	IN	Data Raw: 3a 02 08 01 Data Ascii: :
2024-04-16 15:05:49 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-16 15:05:49 UTC	4	IN	Data Raw: 33 31 0d 0a Data Ascii: 31
2024-04-16 15:05:49 UTC	49	IN	Data Raw: 14 2f 08 00 12 0b 77 41 44 39 75 4f 39 59 41 51 77 18 8d 03 20 a8 db f1 bc ce 86 81 03 30 00 6a 0c 08 8d 03 10 a8 db f1 bc ce 86 81 03 70 a4 e3 0a Data Ascii: /wAD9uO9YAQw 0jp
2024-04-16 15:05:49 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-16 15:05:49 UTC	7	IN	Data Raw: 32 62 31 61 39 0d 0a Data Ascii: 2b1a9
2024-04-16 15:05:49 UTC	5	IN	Data Raw: 15 c5 8d 15 00 Data Ascii:
2024-04-16 15:05:49 UTC	16384	IN	Data Raw: 00 00 00 1c 66 74 79 70 64 61 73 68 00 00 00 00 69 73 6f 36 61 76 30 31 6d 70 34 31 00 00 02 a0 6d 6f 6f 76 00 00 00 6c 6d 76 68 64 00 00 00 00 e1 15 33 b3 e1 15 33 b3 00 00 32 00 00 1e a6 00 00 01 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 28 6d 76 65 78 00 00 00 20 74 72 65 78 00 00 00 00 00 00 00 01 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 04 74 72 61 6b 00 00 00 5c 74 6b 68 64 00 00 00 03 e1 15 33 b3 e1 15 33 b3 00 00 00 01 00 00 00 00 00 1e a6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ftypdashiso6av01mp41moovlmvhd332@(mvex trextrak\tkhd33

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.11	49849	172.217.135.202	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:48 UTC	1896	OUT	POST /videoplayback?expire=1713301547&ei=y5MeZqSPB9aoy_sPxcuI0A8&ip=81.181.57.52&id=o-AGTEz6yrZN30zWRHetU01zfPZPIBkqXwN_jxSqpNGk-M&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=rv&mm=31%2C29&mn=sn-p5qlsn76%2Csn-p5qddn7r&ms=au%2Crdu&mv=m&mvi=5&pl=26&initcwndbps=1037500&bui=AaUN6a0X-vPuPWnoZdJnY8gcaw5_Rec69zGixzS_kVy6dh8yJJHbZPIDav7sGh5eMsIrcUMSgNZoV-eJ&spc=UWF9f_C907pjE2i9QlVivDiO3bFloqFrBkw3MS1j9d3XXjQUG-40uVYW-Q&vprv=1&svpuc=1&mime=audio%2Fwebm&ns=8Io3oEW7FSAr8VYj4CRq5ycQ&gir=yes&clen=2888165&dur=156.941&lmt=1693419053011705&mt=1713279665&fvip=5&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=4432434&n=65_ILddd0oaXCA&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRgIhAIqn_cmzA9wxw9Qv3XmYLmzgIYuMyqkUCJ74E3gyfGPmAiEAyvaE7AH2ALtvgZL7TmmJy3gr_gksqFvhADtsOLFIvXM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ALClDIEwRQIhALaMd8X8P3LTQ-dzb36htdQmyx7RegKRkqR_w8GTV_GCAiAXEkpCyRYR_s7h1aB1LlSa8sV2f8SVngOiCKBfSgfTuQ%3D%3D&alr=yes&cpn=F6GU1QEdhoMLD-Np&cver=1.20240409.01.00&range=0-66070&rn=2&rbuf=0&pot=IjiLjYuO7ZMYRsjq_8fGyrrCxeH71N7n7_7EzuHE-9L6-snnwsbI6sHb3vXCyMzqyurAzK6-z6i4yQ==&ump=1&srfvp=1 HTTP/1.1 Host: rr5---sn-p5qlsn76.googlevideo.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:48 UTC	2	OUT	Data Raw: 78 00 Data Ascii: x
2024-04-16 15:05:49 UTC	999	IN	HTTP/1.1 200 OK Last-Modified: Wed, 30 Aug 2023 18:10:53 GMT Content-Type: application/vnd.yt-ump Date: Tue, 16 Apr 2024 15:05:49 GMT Expires: Tue, 16 Apr 2024 15:05:49 GMT Cache-Control: private, max-age=21298 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-04-16 15:05:49 UTC	3	IN	Data Raw: 34 0d 0a Data Ascii: 4
2024-04-16 15:05:49 UTC	4	IN	Data Raw: 3a 02 08 01 Data Ascii: :
2024-04-16 15:05:49 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-16 15:05:49 UTC	4	IN	Data Raw: 33 31 0d 0a Data Ascii: 31
2024-04-16 15:05:49 UTC	49	IN	Data Raw: 14 2f 08 00 12 0b 77 41 44 39 75 4f 39 59 41 51 77 18 fb 01 20 f9 a5 f1 c8 fd 84 81 03 30 00 6a 0c 08 fb 01 10 f9 a5 f1 c8 fd 84 81 03 70 97 84 04 Data Ascii: /wAD9uO9YAQw 0jp
2024-04-16 15:05:49 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-16 15:05:49 UTC	7	IN	Data Raw: 31 30 32 31 63 0d 0a Data Ascii: 1021c
2024-04-16 15:05:49 UTC	5	IN	Data Raw: 15 d8 10 08 00 Data Ascii:
2024-04-16 15:05:49 UTC	16384	IN	Data Raw: 1a 45 df a3 9f 42 86 81 01 42 f7 81 01 42 f2 81 04 42 f3 81 08 42 82 84 77 65 62 6d 42 87 81 04 42 85 81 02 18 53 80 67 01 00 00 00 00 2c 11 b5 11 4d 9b 74 bf 4d bb 92 53 ab 84 15 49 a9 66 53 ac 88 00 00 00 00 00 00 00 44 4d bb 92 53 ab 84 16 54 ae 6b 53 ac 88 00 00 00 00 00 00 00 7f 4d bb 92 53 ab 84 1c 53 bb 6b 53 ac 88 00 00 00 00 00 00 00 da 15 49 a9 66 b6 2a d7 b1 83 0f 42 40 44 89 84 48 19 43 40 4d 80 91 67 6f 6f 67 6c 65 2f 76 69 64 65 6f 2d 66 69 6c 65 57 41 91 67 6f 6f 67 6c 65 2f 76 69 64 65 6f 2d 66 69 6c 65 16 54 ae 6b d6 ae d4 d7 81 01 73 c5 87 2e 1f e3 63 9f a5 b7 83 81 02 9c 81 00 22 b5 9c 83 65 6e 67 86 86 41 5f 4f 50 55 53 63 a2 93 4f 70 75 73 48 65 61 64 01 02 38 01 80 bb 00 00 00 00 00 56 aa 83 63 2e a0 56 bb 84 04 c4 b4 00 e1 8d b5 84 Data Ascii: EBBBBBwebmBBSg,MtMSIfSDMSTkSMSSkSIf*B@DHC@Mgoogle/video-fileWAgoogle/video-fileTks.c"engA_OPUScOpusHead8Vc.V
2024-04-16 15:05:49 UTC	2012	OUT	POST /videoplayback?expire=1713301547&ei=y5MeZqSPB9aoy_sPxcuI0A8&ip=81.181.57.52&id=o-AGTEz6yrZN30zWRHetU01zfPZPIBkqXwN_jxSqpNGk-M&itag=398&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=rv&mm=31%2C29&mn=sn-p5qlsn76%2Csn-p5qddn7r&ms=au%2Crdu&mv=m&mvi=5&pl=26&initcwndbps=1037500&bui=AaUN6a0X-vPuPWnoZdJnY8gcaw5_Rec69zGixzS_kVy6dh8yJJHbZPIDav7sGh5eMsIrcUMSgNZoV-eJ&spc=UWF9f_C907pjE2i9QlVivDiO3bFloqFrBkw3MS1j9d3XXjQUG-40uVYW-Q&vprv=1&svpuc=1&mime=video%2Fmp4&ns=8Io3oEW7FSAr8VYj4CRq5ycQ&gir=yes&clen=15356387&dur=156.920&lmt=1693475295824447&mt=1713279665&fvip=5&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=4437434&n=65_ILddd0oaXCA&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIgDgSjMet05B9aDksP9m164a7Ii8bfIUCpyPIF0Iu1qVQCIQDAgJB0tAqjMUhsCFgApfB_yN2W-bhf-qss2eYwVMrOtg%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ALClDIEwRQIhALaMd8X8P3LTQ-dzb36htdQmyx7RegKRkqR_w8GTV_GCAiAXEkpCyRYR_s7h1aB1LlSa8sV2f8SVngOiCKBfSgfTuQ%3D%3D&alr=yes&cpn=F6GU1QEdhoMLD-Np&cver=1.20240409.01.00&range=0-1103&rn=3&rbuf=0&pot=IjiUaJRu8nYHpNcP4CLZL6Un2gTkMcEC8BvbK_4h5DflH9YC3SPXD94-wRDdLdMP1Q_fKbFb0E2nLA==&ump=1&srfvp=1 HTTP/1.1 Host: rr5---sn-p5qlsn76.googlevideo.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:49 UTC	1030	IN	HTTP/1.1 200 OK Last-Modified: Thu, 31 Aug 2023 09:48:15 GMT Content-Type: application/vnd.yt-ump Date: Tue, 16 Apr 2024 15:05:49 GMT Expires: Tue, 16 Apr 2024 15:05:49 GMT Cache-Control: private, max-age=21298 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Restrict-Formats-Hint: None X-Content-Type-Options: nosniff Server: gvs 1.0
2024-04-16 15:05:50 UTC	1904	OUT	POST /videoplayback?expire=1713301547&ei=y5MeZqSPB9aoy_sPxcuI0A8&ip=81.181.57.52&id=o-AGTEz6yrZN30zWRHetU01zfPZPIBkqXwN_jxSqpNGk-M&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=rv&mm=31%2C29&mn=sn-p5qlsn76%2Csn-p5qddn7r&ms=au%2Crdu&mv=m&mvi=5&pl=26&initcwndbps=1037500&bui=AaUN6a0X-vPuPWnoZdJnY8gcaw5_Rec69zGixzS_kVy6dh8yJJHbZPIDav7sGh5eMsIrcUMSgNZoV-eJ&spc=UWF9f_C907pjE2i9QlVivDiO3bFloqFrBkw3MS1j9d3XXjQUG-40uVYW-Q&vprv=1&svpuc=1&mime=audio%2Fwebm&ns=8Io3oEW7FSAr8VYj4CRq5ycQ&gir=yes&clen=2888165&dur=156.941&lmt=1693419053011705&mt=1713279665&fvip=5&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=4432434&n=65_ILddd0oaXCA&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRgIhAIqn_cmzA9wxw9Qv3XmYLmzgIYuMyqkUCJ74E3gyfGPmAiEAyvaE7AH2ALtvgZL7TmmJy3gr_gksqFvhADtsOLFIvXM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ALClDIEwRQIhALaMd8X8P3LTQ-dzb36htdQmyx7RegKRkqR_w8GTV_GCAiAXEkpCyRYR_s7h1aB1LlSa8sV2f8SVngOiCKBfSgfTuQ%3D%3D&alr=yes&cpn=F6GU1QEdhoMLD-Np&cver=1.20240409.01.00&range=66071-131606&rn=4&rbuf=3763&pot=IjgJ1gnQb8iaGkqxfZxEkTiZR7p5j1y8baVGlWOfeYl4oUu8QJ1KsUOAXK5Ak06xSLFClyzlTfM6kg==&ump=1&srfvp=1 HTTP/1.1 Host: rr5---sn-p5qlsn76.googlevideo.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:50 UTC	999	IN	HTTP/1.1 200 OK Last-Modified: Wed, 30 Aug 2023 18:10:53 GMT Content-Type: application/vnd.yt-ump Date: Tue, 16 Apr 2024 15:05:50 GMT Expires: Tue, 16 Apr 2024 15:05:50 GMT Cache-Control: private, max-age=21297 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-04-16 15:05:50 UTC	1985	OUT	POST /videoplayback?expire=1713301547&ei=y5MeZqSPB9aoy_sPxcuI0A8&ip=81.181.57.52&id=o-AGTEz6yrZN30zWRHetU01zfPZPIBkqXwN_jxSqpNGk-M&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=rv&mm=31%2C29&mn=sn-p5qlsn76%2Csn-p5qddn7r&ms=au%2Crdu&mv=m&mvi=5&pl=26&initcwndbps=1037500&bui=AaUN6a0X-vPuPWnoZdJnY8gcaw5_Rec69zGixzS_kVy6dh8yJJHbZPIDav7sGh5eMsIrcUMSgNZoV-eJ&spc=UWF9f_C907pjE2i9QlVivDiO3bFloqFrBkw3MS1j9d3XXjQUG-40uVYW-Q&vprv=1&svpuc=1&mime=audio%2Fwebm&ns=8Io3oEW7FSAr8VYj4CRq5ycQ&gir=yes&clen=2888165&dur=156.941&lmt=1693419053011705&mt=1713279665&fvip=5&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=4432434&n=65_ILddd0oaXCA&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRgIhAIqn_cmzA9wxw9Qv3XmYLmzgIYuMyqkUCJ74E3gyfGPmAiEAyvaE7AH2ALtvgZL7TmmJy3gr_gksqFvhADtsOLFIvXM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ALClDIEwRQIhALaMd8X8P3LTQ-dzb36htdQmyx7RegKRkqR_w8GTV_GCAiAXEkpCyRYR_s7h1aB1LlSa8sV2f8SVngOiCKBfSgfTuQ%3D%3D&alr=yes&cpn=F6GU1QEdhoMLD-Np&cver=1.20240409.01.00&range=131607-285234&rn=5&rbuf=7526&pot=MnRHeEeFuHFwnkdAG16jL-aDngYNrsZJj72wzzuSl1KI99-wPjwpBfmvgTdvejBBkb8hRejODoqY6-NrNRoYj5BeGx9EzDVgBwEAWR3SrWqoEDJk5EzPIQjvWotgBGd18NKfWwDX1mK17wp_gi85l7DQQ1Dbbw==&ump=1&srfvp=1 HTTP/1.1 Host: rr5---sn-p5qlsn76.googlevideo.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:50 UTC	999	IN	HTTP/1.1 200 OK Last-Modified: Wed, 30 Aug 2023 18:10:53 GMT Content-Type: application/vnd.yt-ump Date: Tue, 16 Apr 2024 15:05:50 GMT Expires: Tue, 16 Apr 2024 15:05:50 GMT Cache-Control: private, max-age=21297 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-04-16 15:05:50 UTC	2101	OUT	POST /videoplayback?expire=1713301547&ei=y5MeZqSPB9aoy_sPxcuI0A8&ip=81.181.57.52&id=o-AGTEz6yrZN30zWRHetU01zfPZPIBkqXwN_jxSqpNGk-M&itag=397&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=rv&mm=31%2C29&mn=sn-p5qlsn76%2Csn-p5qddn7r&ms=au%2Crdu&mv=m&mvi=5&pl=26&initcwndbps=1037500&bui=AaUN6a0X-vPuPWnoZdJnY8gcaw5_Rec69zGixzS_kVy6dh8yJJHbZPIDav7sGh5eMsIrcUMSgNZoV-eJ&spc=UWF9f_C907pjE2i9QlVivDiO3bFloqFrBkw3MS1j9d3XXjQUG-40uVYW-Q&vprv=1&svpuc=1&mime=video%2Fmp4&ns=8Io3oEW7FSAr8VYj4CRq5ycQ&gir=yes&clen=8585092&dur=156.920&lmt=1693475130863016&mt=1713279665&fvip=5&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=4437434&n=65_ILddd0oaXCA&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIhAIJD2XoyAZdDtZec9zoNpH93qOSJ9tDx0ji_zhe-crfHAiAiIRnPfFyfm5dlKv_4IedTtbt55HI_TuklC2DIglN3cQ%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ALClDIEwRQIhALaMd8X8P3LTQ-dzb36htdQmyx7RegKRkqR_w8GTV_GCAiAXEkpCyRYR_s7h1aB1LlSa8sV2f8SVngOiCKBfSgfTuQ%3D%3D&alr=yes&cpn=F6GU1QEdhoMLD-Np&cver=1.20240409.01.00&range=176548-398200&rn=6&rbuf=7502&pot=MnRHeEeFuHFwnkdAG16jL-aDngYNrsZJj72wzzuSl1KI99-wPjwpBfmvgTdvejBBkb8hRejODoqY6-NrNRoYj5BeGx9EzDVgBwEAWR3SrWqoEDJk5EzPIQjvWotgBGd18NKfWwDX1mK17wp_gi85l7DQQ1Dbbw==&ump=1&srfvp=1 HTTP/1.1 Host: rr5---sn-p5qlsn76.googlevideo.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:51 UTC	1030	IN	HTTP/1.1 200 OK Last-Modified: Thu, 31 Aug 2023 09:45:30 GMT Content-Type: application/vnd.yt-ump Date: Tue, 16 Apr 2024 15:05:51 GMT Expires: Tue, 16 Apr 2024 15:05:51 GMT Cache-Control: private, max-age=21296 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Restrict-Formats-Hint: None X-Content-Type-Options: nosniff Server: gvs 1.0
2024-04-16 15:05:51 UTC	2104	OUT	POST /videoplayback?expire=1713301547&ei=y5MeZqSPB9aoy_sPxcuI0A8&ip=81.181.57.52&id=o-AGTEz6yrZN30zWRHetU01zfPZPIBkqXwN_jxSqpNGk-M&itag=398&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=rv&mm=31%2C29&mn=sn-p5qlsn76%2Csn-p5qddn7r&ms=au%2Crdu&mv=m&mvi=5&pl=26&initcwndbps=1037500&bui=AaUN6a0X-vPuPWnoZdJnY8gcaw5_Rec69zGixzS_kVy6dh8yJJHbZPIDav7sGh5eMsIrcUMSgNZoV-eJ&spc=UWF9f_C907pjE2i9QlVivDiO3bFloqFrBkw3MS1j9d3XXjQUG-40uVYW-Q&vprv=1&svpuc=1&mime=video%2Fmp4&ns=8Io3oEW7FSAr8VYj4CRq5ycQ&gir=yes&clen=15356387&dur=156.920&lmt=1693475295824447&mt=1713279665&fvip=5&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=4437434&n=65_ILddd0oaXCA&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIgDgSjMet05B9aDksP9m164a7Ii8bfIUCpyPIF0Iu1qVQCIQDAgJB0tAqjMUhsCFgApfB_yN2W-bhf-qss2eYwVMrOtg%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ALClDIEwRQIhALaMd8X8P3LTQ-dzb36htdQmyx7RegKRkqR_w8GTV_GCAiAXEkpCyRYR_s7h1aB1LlSa8sV2f8SVngOiCKBfSgfTuQ%3D%3D&alr=yes&cpn=F6GU1QEdhoMLD-Np&cver=1.20240409.01.00&range=657413-2460933&rn=7&rbuf=11660&pot=MnRHeEeFuHFwnkdAG16jL-aDngYNrsZJj72wzzuSl1KI99-wPjwpBfmvgTdvejBBkb8hRejODoqY6-NrNRoYj5BeGx9EzDVgBwEAWR3SrWqoEDJk5EzPIQjvWotgBGd18NKfWwDX1mK17wp_gi85l7DQQ1Dbbw==&ump=1&srfvp=1 HTTP/1.1 Host: rr5---sn-p5qlsn76.googlevideo.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:51 UTC	1030	IN	HTTP/1.1 200 OK Last-Modified: Thu, 31 Aug 2023 09:48:15 GMT Content-Type: application/vnd.yt-ump Date: Tue, 16 Apr 2024 15:05:51 GMT Expires: Tue, 16 Apr 2024 15:05:51 GMT Cache-Control: private, max-age=21296 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Restrict-Formats-Hint: None X-Content-Type-Options: nosniff Server: gvs 1.0
2024-04-16 15:05:52 UTC	1986	OUT	POST /videoplayback?expire=1713301547&ei=y5MeZqSPB9aoy_sPxcuI0A8&ip=81.181.57.52&id=o-AGTEz6yrZN30zWRHetU01zfPZPIBkqXwN_jxSqpNGk-M&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=rv&mm=31%2C29&mn=sn-p5qlsn76%2Csn-p5qddn7r&ms=au%2Crdu&mv=m&mvi=5&pl=26&initcwndbps=1037500&bui=AaUN6a0X-vPuPWnoZdJnY8gcaw5_Rec69zGixzS_kVy6dh8yJJHbZPIDav7sGh5eMsIrcUMSgNZoV-eJ&spc=UWF9f_C907pjE2i9QlVivDiO3bFloqFrBkw3MS1j9d3XXjQUG-40uVYW-Q&vprv=1&svpuc=1&mime=audio%2Fwebm&ns=8Io3oEW7FSAr8VYj4CRq5ycQ&gir=yes&clen=2888165&dur=156.941&lmt=1693419053011705&mt=1713279665&fvip=5&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=4432434&n=65_ILddd0oaXCA&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRgIhAIqn_cmzA9wxw9Qv3XmYLmzgIYuMyqkUCJ74E3gyfGPmAiEAyvaE7AH2ALtvgZL7TmmJy3gr_gksqFvhADtsOLFIvXM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ALClDIEwRQIhALaMd8X8P3LTQ-dzb36htdQmyx7RegKRkqR_w8GTV_GCAiAXEkpCyRYR_s7h1aB1LlSa8sV2f8SVngOiCKBfSgfTuQ%3D%3D&alr=yes&cpn=F6GU1QEdhoMLD-Np&cver=1.20240409.01.00&range=285235-563147&rn=8&rbuf=14339&pot=MnRHeEeFuHFwnkdAG16jL-aDngYNrsZJj72wzzuSl1KI99-wPjwpBfmvgTdvejBBkb8hRejODoqY6-NrNRoYj5BeGx9EzDVgBwEAWR3SrWqoEDJk5EzPIQjvWotgBGd18NKfWwDX1mK17wp_gi85l7DQQ1Dbbw==&ump=1&srfvp=1 HTTP/1.1 Host: rr5---sn-p5qlsn76.googlevideo.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:53 UTC	999	IN	HTTP/1.1 200 OK Last-Modified: Wed, 30 Aug 2023 18:10:53 GMT Content-Type: application/vnd.yt-ump Date: Tue, 16 Apr 2024 15:05:53 GMT Expires: Tue, 16 Apr 2024 15:05:53 GMT Cache-Control: private, max-age=21294 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-04-16 15:06:09 UTC	1987	OUT	POST /videoplayback?expire=1713301547&ei=y5MeZqSPB9aoy_sPxcuI0A8&ip=81.181.57.52&id=o-AGTEz6yrZN30zWRHetU01zfPZPIBkqXwN_jxSqpNGk-M&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=rv&mm=31%2C29&mn=sn-p5qlsn76%2Csn-p5qddn7r&ms=au%2Crdu&mv=m&mvi=5&pl=26&initcwndbps=1037500&bui=AaUN6a0X-vPuPWnoZdJnY8gcaw5_Rec69zGixzS_kVy6dh8yJJHbZPIDav7sGh5eMsIrcUMSgNZoV-eJ&spc=UWF9f_C907pjE2i9QlVivDiO3bFloqFrBkw3MS1j9d3XXjQUG-40uVYW-Q&vprv=1&svpuc=1&mime=audio%2Fwebm&ns=8Io3oEW7FSAr8VYj4CRq5ycQ&gir=yes&clen=2888165&dur=156.941&lmt=1693419053011705&mt=1713279665&fvip=5&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=4432434&n=65_ILddd0oaXCA&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRgIhAIqn_cmzA9wxw9Qv3XmYLmzgIYuMyqkUCJ74E3gyfGPmAiEAyvaE7AH2ALtvgZL7TmmJy3gr_gksqFvhADtsOLFIvXM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ALClDIEwRQIhALaMd8X8P3LTQ-dzb36htdQmyx7RegKRkqR_w8GTV_GCAiAXEkpCyRYR_s7h1aB1LlSa8sV2f8SVngOiCKBfSgfTuQ%3D%3D&alr=yes&cpn=F6GU1QEdhoMLD-Np&cver=1.20240409.01.00&range=563148-1120503&rn=9&rbuf=27908&pot=MnRHeEeFuHFwnkdAG16jL-aDngYNrsZJj72wzzuSl1KI99-wPjwpBfmvgTdvejBBkb8hRejODoqY6-NrNRoYj5BeGx9EzDVgBwEAWR3SrWqoEDJk5EzPIQjvWotgBGd18NKfWwDX1mK17wp_gi85l7DQQ1Dbbw==&ump=1&srfvp=1 HTTP/1.1 Host: rr5---sn-p5qlsn76.googlevideo.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:06:10 UTC	999	IN	HTTP/1.1 200 OK Last-Modified: Wed, 30 Aug 2023 18:10:53 GMT Content-Type: application/vnd.yt-ump Date: Tue, 16 Apr 2024 15:06:10 GMT Expires: Tue, 16 Apr 2024 15:06:10 GMT Cache-Control: private, max-age=21277 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-04-16 15:06:10 UTC	2106	OUT	POST /videoplayback?expire=1713301547&ei=y5MeZqSPB9aoy_sPxcuI0A8&ip=81.181.57.52&id=o-AGTEz6yrZN30zWRHetU01zfPZPIBkqXwN_jxSqpNGk-M&itag=398&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=rv&mm=31%2C29&mn=sn-p5qlsn76%2Csn-p5qddn7r&ms=au%2Crdu&mv=m&mvi=5&pl=26&initcwndbps=1037500&bui=AaUN6a0X-vPuPWnoZdJnY8gcaw5_Rec69zGixzS_kVy6dh8yJJHbZPIDav7sGh5eMsIrcUMSgNZoV-eJ&spc=UWF9f_C907pjE2i9QlVivDiO3bFloqFrBkw3MS1j9d3XXjQUG-40uVYW-Q&vprv=1&svpuc=1&mime=video%2Fmp4&ns=8Io3oEW7FSAr8VYj4CRq5ycQ&gir=yes&clen=15356387&dur=156.920&lmt=1693475295824447&mt=1713279665&fvip=5&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=4437434&n=65_ILddd0oaXCA&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIgDgSjMet05B9aDksP9m164a7Ii8bfIUCpyPIF0Iu1qVQCIQDAgJB0tAqjMUhsCFgApfB_yN2W-bhf-qss2eYwVMrOtg%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ALClDIEwRQIhALaMd8X8P3LTQ-dzb36htdQmyx7RegKRkqR_w8GTV_GCAiAXEkpCyRYR_s7h1aB1LlSa8sV2f8SVngOiCKBfSgfTuQ%3D%3D&alr=yes&cpn=F6GU1QEdhoMLD-Np&cver=1.20240409.01.00&range=2460934-4325537&rn=10&rbuf=29027&pot=MnRHeEeFuHFwnkdAG16jL-aDngYNrsZJj72wzzuSl1KI99-wPjwpBfmvgTdvejBBkb8hRejODoqY6-NrNRoYj5BeGx9EzDVgBwEAWR3SrWqoEDJk5EzPIQjvWotgBGd18NKfWwDX1mK17wp_gi85l7DQQ1Dbbw==&ump=1&srfvp=1 HTTP/1.1 Host: rr5---sn-p5qlsn76.googlevideo.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:06:10 UTC	1030	IN	HTTP/1.1 200 OK Last-Modified: Thu, 31 Aug 2023 09:48:15 GMT Content-Type: application/vnd.yt-ump Date: Tue, 16 Apr 2024 15:06:10 GMT Expires: Tue, 16 Apr 2024 15:06:10 GMT Cache-Control: private, max-age=21277 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Restrict-Formats-Hint: None X-Content-Type-Options: nosniff Server: gvs 1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.11	49855	142.250.105.156	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:49 UTC	462	OUT	GET /pagead/id?slf_rd=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:49 UTC	754	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Content-Type: application/json; charset=UTF-8 Date: Tue, 16 Apr 2024 15:05:49 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-16 15:05:49 UTC	106	IN	Data Raw: 36 34 0d 0a 29 5d 7d 27 0a 0a 7b 22 69 64 22 3a 22 41 4e 79 50 78 4b 70 4c 65 74 6c 47 2d 62 49 7a 6a 59 53 4d 63 74 56 4f 4b 38 46 39 32 73 54 41 62 45 76 66 78 43 48 6f 47 6f 45 67 62 71 39 41 37 75 34 79 64 43 6d 65 43 4c 39 32 72 54 6a 41 4d 30 35 66 37 78 46 63 34 59 64 61 22 2c 22 74 79 70 65 22 3a 34 7d 0d 0a Data Ascii: 64)]}'{"id":"ANyPxKpLetlG-bIzjYSMctVOK8F92sTAbEvfxCHoGoEgbq9A7u4ydCmeCL92rTjAM05f7xFc4Yda","type":4}
2024-04-16 15:05:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.11	49854	173.194.219.136	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:49 UTC	572	OUT	GET /youtubei/v1/player?prettyPrint=false HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
2024-04-16 15:05:49 UTC	240	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1606 Date: Tue, 16 Apr 2024 15:05:49 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 15:05:49 UTC	1015	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 405 (Method Not Allowed)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px aria
2024-04-16 15:05:49 UTC	591	IN	Data Raw: 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d Data Ascii: .com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.11	49857	142.251.15.91	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:49 UTC	1559	OUT	POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 14106 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1713279944974&flash=0&frm=2&u_tz=120&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1267%2C713&vis=1&wgl=true&ca_type=image sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Goog-Request-Time: 1713279947910 Content-Type: application/json X-Goog-Event-Time: 1713279947910 X-YouTube-Utc-Offset: 120 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240409.01.00 X-YouTube-Time-Zone: Europe/Zurich X-Goog-Visitor-Id: CgtJMG1ONlpYUjdsOCjIp_qwBjIKCgJVUxIEGgAgKA%3D%3D sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/wAD9uO9YAQw?playlist=wAD9uO9YAQw&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&origin=https%3A%2F%2Fniceindiatravel.com&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
2024-04-16 15:05:49 UTC	14106	OUT	Data Raw: 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 68 6c 22 3a 22 65 6e 22 2c 22 67 6c 22 3a 22 55 53 22 2c 22 63 6c 69 65 6e 74 4e 61 6d 65 22 3a 35 36 2c 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 31 2e 32 30 32 34 30 34 30 39 2e 30 31 2e 30 30 22 2c 22 63 6f 6e 66 69 67 49 6e 66 6f 22 3a 7b 22 61 70 70 49 6e 73 74 61 6c 6c 44 61 74 61 22 3a 22 43 4d 69 6e 2d 72 41 47 45 4f 48 79 72 77 55 51 36 73 4f 76 42 52 43 33 71 37 41 46 45 4e 72 55 73 41 55 51 6f 70 4b 77 42 52 43 6c 77 76 34 53 45 4d 7a 66 72 67 55 51 6c 63 2d 77 42 52 44 50 71 4c 41 46 45 4a 62 63 73 41 55 51 76 6f 71 77 42 52 44 47 5f 62 63 69 45 50 79 46 73 41 55 51 36 35 4f 75 42 52 44 77 6e 4c 41 46 45 4d 6e 33 72 77 55 51 76 50 6d 76 42 52 44 6e 75 71 38 46 45 4b Data Ascii: {"context":{"client":{"hl":"en","gl":"US","clientName":56,"clientVersion":"1.20240409.01.00","configInfo":{"appInstallData":"CMin-rAGEOHyrwUQ6sOvBRC3q7AFENrUsAUQopKwBRClwv4SEMzfrgUQlc-wBRDPqLAFEJbcsAUQvoqwBRDG_bciEPyFsAUQ65OuBRDwnLAFEMn3rwUQvPmvBRDnuq8FEK
2024-04-16 15:05:49 UTC	432	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Tue, 16 Apr 2024 15:05:49 GMT Server: scaffolding on HTTPServer2 Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-16 15:05:49 UTC	34	IN	Data Raw: 31 63 0d 0a 7b 0a 20 20 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 20 7b 7d 0a 7d 0a 0d 0a Data Ascii: 1c{ "responseContext": {}}
2024-04-16 15:05:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.11	49860	173.194.219.136	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:49 UTC	610	OUT	GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
2024-04-16 15:05:49 UTC	240	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1609 Date: Tue, 16 Apr 2024 15:05:49 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 15:05:49 UTC	1015	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 405 (Method Not Allowed)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px aria
2024-04-16 15:05:49 UTC	594	IN	Data Raw: 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d Data Ascii: .com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.11	49861	172.217.135.202	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:49 UTC	1672	OUT	GET /videoplayback?expire=1713301547&ei=y5MeZqSPB9aoy_sPxcuI0A8&ip=81.181.57.52&id=o-AGTEz6yrZN30zWRHetU01zfPZPIBkqXwN_jxSqpNGk-M&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=rv&mm=31%2C29&mn=sn-p5qlsn76%2Csn-p5qddn7r&ms=au%2Crdu&mv=m&mvi=5&pl=26&initcwndbps=1037500&bui=AaUN6a0X-vPuPWnoZdJnY8gcaw5_Rec69zGixzS_kVy6dh8yJJHbZPIDav7sGh5eMsIrcUMSgNZoV-eJ&spc=UWF9f_C907pjE2i9QlVivDiO3bFloqFrBkw3MS1j9d3XXjQUG-40uVYW-Q&vprv=1&svpuc=1&mime=audio%2Fwebm&ns=8Io3oEW7FSAr8VYj4CRq5ycQ&gir=yes&clen=2888165&dur=156.941&lmt=1693419053011705&mt=1713279665&fvip=5&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=4432434&n=65_ILddd0oaXCA&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRgIhAIqn_cmzA9wxw9Qv3XmYLmzgIYuMyqkUCJ74E3gyfGPmAiEAyvaE7AH2ALtvgZL7TmmJy3gr_gksqFvhADtsOLFIvXM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ALClDIEwRQIhALaMd8X8P3LTQ-dzb36htdQmyx7RegKRkqR_w8GTV_GCAiAXEkpCyRYR_s7h1aB1LlSa8sV2f8SVngOiCKBfSgfTuQ%3D%3D&alr=yes&cpn=F6GU1QEdhoMLD-Np&cver=1.20240409.01.00&range=0-66070&rn=2&rbuf=0&pot=IjiLjYuO7ZMYRsjq_8fGyrrCxeH71N7n7_7EzuHE-9L6-snnwsbI6sHb3vXCyMzqyurAzK6-z6i4yQ==&ump=1&srfvp=1 HTTP/1.1 Host: rr5---sn-p5qlsn76.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:49 UTC	495	IN	HTTP/1.1 200 OK Last-Modified: Wed, 30 Aug 2023 18:10:53 GMT Content-Type: application/vnd.yt-ump Date: Tue, 16 Apr 2024 15:05:49 GMT Expires: Tue, 16 Apr 2024 15:05:49 GMT Cache-Control: private, max-age=21298 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-04-16 15:05:49 UTC	3	IN	Data Raw: 34 0d 0a Data Ascii: 4
2024-04-16 15:05:49 UTC	4	IN	Data Raw: 3a 02 08 01 Data Ascii: :
2024-04-16 15:05:49 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-16 15:05:49 UTC	4	IN	Data Raw: 33 31 0d 0a Data Ascii: 31
2024-04-16 15:05:49 UTC	49	IN	Data Raw: 14 2f 08 00 12 0b 77 41 44 39 75 4f 39 59 41 51 77 18 fb 01 20 f9 a5 f1 c8 fd 84 81 03 30 00 6a 0c 08 fb 01 10 f9 a5 f1 c8 fd 84 81 03 70 97 84 04 Data Ascii: /wAD9uO9YAQw 0jp
2024-04-16 15:05:49 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-16 15:05:49 UTC	7	IN	Data Raw: 31 30 32 31 63 0d 0a Data Ascii: 1021c
2024-04-16 15:05:49 UTC	5	IN	Data Raw: 15 d8 10 08 00 Data Ascii:
2024-04-16 15:05:49 UTC	16384	IN	Data Raw: 1a 45 df a3 9f 42 86 81 01 42 f7 81 01 42 f2 81 04 42 f3 81 08 42 82 84 77 65 62 6d 42 87 81 04 42 85 81 02 18 53 80 67 01 00 00 00 00 2c 11 b5 11 4d 9b 74 bf 4d bb 92 53 ab 84 15 49 a9 66 53 ac 88 00 00 00 00 00 00 00 44 4d bb 92 53 ab 84 16 54 ae 6b 53 ac 88 00 00 00 00 00 00 00 7f 4d bb 92 53 ab 84 1c 53 bb 6b 53 ac 88 00 00 00 00 00 00 00 da 15 49 a9 66 b6 2a d7 b1 83 0f 42 40 44 89 84 48 19 43 40 4d 80 91 67 6f 6f 67 6c 65 2f 76 69 64 65 6f 2d 66 69 6c 65 57 41 91 67 6f 6f 67 6c 65 2f 76 69 64 65 6f 2d 66 69 6c 65 16 54 ae 6b d6 ae d4 d7 81 01 73 c5 87 2e 1f e3 63 9f a5 b7 83 81 02 9c 81 00 22 b5 9c 83 65 6e 67 86 86 41 5f 4f 50 55 53 63 a2 93 4f 70 75 73 48 65 61 64 01 02 38 01 80 bb 00 00 00 00 00 56 aa 83 63 2e a0 56 bb 84 04 c4 b4 00 e1 8d b5 84 Data Ascii: EBBBBBwebmBBSg,MtMSIfSDMSTkSMSSkSIf*B@DHC@Mgoogle/video-fileWAgoogle/video-fileTks.c"engA_OPUScOpusHead8Vc.V
2024-04-16 15:05:50 UTC	16384	IN	Data Raw: 41 97 88 99 98 7f 2d 29 5f 2b bd ed 76 98 e9 cc a6 c8 f3 b6 4f a1 ad d8 b5 53 ed e4 bd b3 9a a2 36 d8 b9 0a 9e 1d a3 41 26 81 04 4d 80 fc 54 15 27 43 8a 5f 1b 43 62 98 f7 76 2c 2c 9e e8 5e 59 5c e3 61 98 be b9 92 b2 6e a3 b8 f6 22 22 6c 9b bc 45 e7 e1 18 b5 ab 5e 2e 25 75 09 65 93 f3 71 b0 90 62 86 d6 a3 62 9c d1 9d 26 7d 62 47 6f 6f dd 41 ce 79 3e 0b fe 69 49 3d 6e c9 fa 76 29 fc 99 68 8d 94 d9 90 31 97 16 73 05 9b f6 9a c6 98 d3 d5 09 1d be f6 02 34 59 bf 21 1f 46 0f 33 89 d6 8a 49 28 50 ff ff 2c 27 30 77 f0 b4 1f 09 1b bf be 04 5e 81 22 bc b3 96 6d e2 89 6c 53 d9 ce f8 f1 44 e7 c0 7c 7a e3 2e 1d 08 8c 0c d0 33 a6 d6 17 01 6d 1a c7 10 07 f2 40 bf b5 29 4b 2e af 89 05 fe 63 3a 5a 42 69 92 21 7d e6 4a c6 ed 3c bc f2 bc 39 cb 87 b5 77 4a 67 d1 e6 2d 63 74 Data Ascii: A-)_+vOS6A&MT'C_Cbv,,^Y\an""lE^.%ueqbb&}bGooAy>iI=nv)h1s4Y!F3I(P,'0w^"mlSD\|z.3m@)K.c:ZBi!}J<9wJg-ct
2024-04-16 15:05:50 UTC	1789	OUT	GET /videoplayback?expire=1713301547&ei=y5MeZqSPB9aoy_sPxcuI0A8&ip=81.181.57.52&id=o-AGTEz6yrZN30zWRHetU01zfPZPIBkqXwN_jxSqpNGk-M&itag=397&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=rv&mm=31%2C29&mn=sn-p5qlsn76%2Csn-p5qddn7r&ms=au%2Crdu&mv=m&mvi=5&pl=26&initcwndbps=1037500&bui=AaUN6a0X-vPuPWnoZdJnY8gcaw5_Rec69zGixzS_kVy6dh8yJJHbZPIDav7sGh5eMsIrcUMSgNZoV-eJ&spc=UWF9f_C907pjE2i9QlVivDiO3bFloqFrBkw3MS1j9d3XXjQUG-40uVYW-Q&vprv=1&svpuc=1&mime=video%2Fmp4&ns=8Io3oEW7FSAr8VYj4CRq5ycQ&gir=yes&clen=8585092&dur=156.920&lmt=1693475130863016&mt=1713279665&fvip=5&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=4437434&n=65_ILddd0oaXCA&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIhAIJD2XoyAZdDtZec9zoNpH93qOSJ9tDx0ji_zhe-crfHAiAiIRnPfFyfm5dlKv_4IedTtbt55HI_TuklC2DIglN3cQ%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ALClDIEwRQIhALaMd8X8P3LTQ-dzb36htdQmyx7RegKRkqR_w8GTV_GCAiAXEkpCyRYR_s7h1aB1LlSa8sV2f8SVngOiCKBfSgfTuQ%3D%3D&alr=yes&cpn=F6GU1QEdhoMLD-Np&cver=1.20240409.01.00&range=0-176547&rn=1&rbuf=0&pot=IjhWAlYBMBzFyRVlIkgbRWdNGG4mWwNoMnEZQTxLJl0ndRRoH0kVZRxUA3ofRxFlF2UdQ3MxEidlRg==&ump=1&srfvp=1 HTTP/1.1 Host: rr5---sn-p5qlsn76.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:50 UTC	526	IN	HTTP/1.1 200 OK Last-Modified: Thu, 31 Aug 2023 09:45:30 GMT Content-Type: application/vnd.yt-ump Date: Tue, 16 Apr 2024 15:05:50 GMT Expires: Tue, 16 Apr 2024 15:05:50 GMT Cache-Control: private, max-age=21297 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Restrict-Formats-Hint: None X-Content-Type-Options: nosniff Server: gvs 1.0
2024-04-16 15:05:50 UTC	1788	OUT	GET /videoplayback?expire=1713301547&ei=y5MeZqSPB9aoy_sPxcuI0A8&ip=81.181.57.52&id=o-AGTEz6yrZN30zWRHetU01zfPZPIBkqXwN_jxSqpNGk-M&itag=398&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=rv&mm=31%2C29&mn=sn-p5qlsn76%2Csn-p5qddn7r&ms=au%2Crdu&mv=m&mvi=5&pl=26&initcwndbps=1037500&bui=AaUN6a0X-vPuPWnoZdJnY8gcaw5_Rec69zGixzS_kVy6dh8yJJHbZPIDav7sGh5eMsIrcUMSgNZoV-eJ&spc=UWF9f_C907pjE2i9QlVivDiO3bFloqFrBkw3MS1j9d3XXjQUG-40uVYW-Q&vprv=1&svpuc=1&mime=video%2Fmp4&ns=8Io3oEW7FSAr8VYj4CRq5ycQ&gir=yes&clen=15356387&dur=156.920&lmt=1693475295824447&mt=1713279665&fvip=5&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=4437434&n=65_ILddd0oaXCA&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIgDgSjMet05B9aDksP9m164a7Ii8bfIUCpyPIF0Iu1qVQCIQDAgJB0tAqjMUhsCFgApfB_yN2W-bhf-qss2eYwVMrOtg%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ALClDIEwRQIhALaMd8X8P3LTQ-dzb36htdQmyx7RegKRkqR_w8GTV_GCAiAXEkpCyRYR_s7h1aB1LlSa8sV2f8SVngOiCKBfSgfTuQ%3D%3D&alr=yes&cpn=F6GU1QEdhoMLD-Np&cver=1.20240409.01.00&range=0-1103&rn=3&rbuf=0&pot=IjiUaJRu8nYHpNcP4CLZL6Un2gTkMcEC8BvbK_4h5DflH9YC3SPXD94-wRDdLdMP1Q_fKbFb0E2nLA==&ump=1&srfvp=1 HTTP/1.1 Host: rr5---sn-p5qlsn76.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:50 UTC	526	IN	HTTP/1.1 200 OK Last-Modified: Thu, 31 Aug 2023 09:48:15 GMT Content-Type: application/vnd.yt-ump Date: Tue, 16 Apr 2024 15:05:50 GMT Expires: Tue, 16 Apr 2024 15:05:50 GMT Cache-Control: private, max-age=21297 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Restrict-Formats-Hint: None X-Content-Type-Options: nosniff Server: gvs 1.0
2024-04-16 15:05:51 UTC	1877	OUT	GET /videoplayback?expire=1713301547&ei=y5MeZqSPB9aoy_sPxcuI0A8&ip=81.181.57.52&id=o-AGTEz6yrZN30zWRHetU01zfPZPIBkqXwN_jxSqpNGk-M&itag=397&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=rv&mm=31%2C29&mn=sn-p5qlsn76%2Csn-p5qddn7r&ms=au%2Crdu&mv=m&mvi=5&pl=26&initcwndbps=1037500&bui=AaUN6a0X-vPuPWnoZdJnY8gcaw5_Rec69zGixzS_kVy6dh8yJJHbZPIDav7sGh5eMsIrcUMSgNZoV-eJ&spc=UWF9f_C907pjE2i9QlVivDiO3bFloqFrBkw3MS1j9d3XXjQUG-40uVYW-Q&vprv=1&svpuc=1&mime=video%2Fmp4&ns=8Io3oEW7FSAr8VYj4CRq5ycQ&gir=yes&clen=8585092&dur=156.920&lmt=1693475130863016&mt=1713279665&fvip=5&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=4437434&n=65_ILddd0oaXCA&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIhAIJD2XoyAZdDtZec9zoNpH93qOSJ9tDx0ji_zhe-crfHAiAiIRnPfFyfm5dlKv_4IedTtbt55HI_TuklC2DIglN3cQ%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ALClDIEwRQIhALaMd8X8P3LTQ-dzb36htdQmyx7RegKRkqR_w8GTV_GCAiAXEkpCyRYR_s7h1aB1LlSa8sV2f8SVngOiCKBfSgfTuQ%3D%3D&alr=yes&cpn=F6GU1QEdhoMLD-Np&cver=1.20240409.01.00&range=176548-398200&rn=6&rbuf=7502&pot=MnRHeEeFuHFwnkdAG16jL-aDngYNrsZJj72wzzuSl1KI99-wPjwpBfmvgTdvejBBkb8hRejODoqY6-NrNRoYj5BeGx9EzDVgBwEAWR3SrWqoEDJk5EzPIQjvWotgBGd18NKfWwDX1mK17wp_gi85l7DQQ1Dbbw==&ump=1&srfvp=1 HTTP/1.1 Host: rr5---sn-p5qlsn76.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:51 UTC	526	IN	HTTP/1.1 200 OK Last-Modified: Thu, 31 Aug 2023 09:45:30 GMT Content-Type: application/vnd.yt-ump Date: Tue, 16 Apr 2024 15:05:51 GMT Expires: Tue, 16 Apr 2024 15:05:51 GMT Cache-Control: private, max-age=21296 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Restrict-Formats-Hint: None X-Content-Type-Options: nosniff Server: gvs 1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.11	49863	108.177.122.190	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:49 UTC	733	OUT	GET /iframe_api?ver=7.1 HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
2024-04-16 15:05:50 UTC	1581	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 X-Content-Type-Options: nosniff Expires: Tue, 16 Apr 2024 15:05:50 GMT Date: Tue, 16 Apr 2024 15:05:50 GMT Cache-Control: private, max-age=0 Strict-Transport-Security: max-age=31536000 X-Frame-Options: SAMEORIGIN Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube_main" Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9 Cross-Origin-Resource-Policy: cross-origin Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-16 15:05:50 UTC	1000	IN	Data Raw: 33 65 31 0d 0a 76 61 72 20 73 63 72 69 70 74 55 72 6c 20 3d 20 27 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 5c 2f 73 5c 2f 70 6c 61 79 65 72 5c 2f 37 65 62 66 34 38 31 37 5c 2f 77 77 77 2d 77 69 64 67 65 74 61 70 69 2e 76 66 6c 73 65 74 5c 2f 77 77 77 2d 77 69 64 67 65 74 61 70 69 2e 6a 73 27 3b 74 72 79 7b 76 61 72 20 74 74 50 6f 6c 69 63 79 3d 77 69 6e 64 6f 77 2e 74 72 75 73 74 65 64 54 79 70 65 73 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 79 6f 75 74 75 62 65 2d 77 69 64 67 65 74 2d 61 70 69 22 2c 7b 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 66 75 6e 63 74 69 6f 6e 28 78 29 7b 72 65 74 75 72 6e 20 78 7d 7d 29 3b 73 63 72 69 70 74 55 72 6c 3d 74 74 50 6f 6c 69 63 79 2e 63 72 65 61 74 65 53 63 72 69 70 74 55 52 Data Ascii: 3e1var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/7ebf4817\/www-widgetapi.vflset\/www-widgetapi.js';try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptUR
2024-04-16 15:05:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.11	49830	64.233.176.119	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:50 UTC	697	OUT	GET /vi_webp/wAD9uO9YAQw/sddefault.webp HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:50 UTC	623	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/webp Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 39240 Date: Tue, 16 Apr 2024 15:05:50 GMT Expires: Tue, 16 Apr 2024 17:05:50 GMT Cache-Control: public, max-age=7200 ETag: "1519883041" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 15:05:50 UTC	632	IN	Data Raw: 52 49 46 46 40 99 00 00 57 45 42 50 56 50 38 20 34 99 00 00 b0 d0 01 9d 01 2a 80 02 e0 01 3e 51 24 90 45 a3 a2 21 aa 25 f5 9a 29 40 0a 09 65 6e d8 e7 56 f4 e8 4e 4b d2 f1 3c b3 6a 12 7f 7e b7 c2 f3 ad bd 2a b7 66 e9 b9 eb 0f 3f 8c f0 29 ed f3 ed 6f f3 ff ca 7a 5e f2 5f 82 df 3c d3 8b fb 7e 01 7c af fc 5f 31 2f 60 fe 73 f4 27 b3 ff f8 9f b3 fe f0 bf 56 fe cb 7c 0f 7e bf 7e bd 7b 81 ff df ec 47 fb c7 a3 cf de 6f 56 4f 51 ff d8 7d 4d bf af 7f bc eb a7 f4 88 e9 9f fe e3 ff af 29 5f b1 7d c3 ff 9f f0 47 f1 ef 96 fe fd fd bb fc c7 fc 0f ef be db 3f 40 79 0a e9 7f d8 6f 51 7f 9b 7e 04 fd 2f f6 2f f2 7f f7 7f c9 7b 7d fe ff fb 1f e4 ef a3 3f 9c 7e cd fe ff fa cf e4 4f c8 2f e5 df d0 bf cf 7f 50 ff 21 ff 8f fb ff c3 0f cf 7f e8 ff 09 fe a7 c1 7f 62 ff 49 ff b7 fb Data Ascii: RIFF@WEBPVP8 4>Q$E!%)@enVNK<j~f?)oz^_<~\|_1/`s'V\|~~{GoVOQ}M)_}G?@yoQ~//{}?~O/P!bI
2024-04-16 15:05:50 UTC	1255	IN	Data Raw: de 74 a5 14 76 7c 19 58 08 34 9b fe 1d a7 c3 3f 80 da 05 32 44 83 17 8f d0 ad c1 cf 75 94 12 46 3e 29 4f 8f 00 52 4e de fc 9b 88 31 cd 2d c7 33 04 52 29 a4 5e fc 9a c9 7c d5 4f 7d c4 b8 76 5a 4c 1d b4 52 05 ee b8 9a 9e 9e a5 7b 32 97 f5 99 5a 02 e0 ed a9 a5 b2 46 01 33 c9 5e d7 ca 2e 91 11 9d 1f a0 d5 8b e9 86 b1 c9 ae b7 8e 52 09 b1 5c b8 f7 2e 68 54 54 3d 4e e9 b9 28 70 8a 07 9e 7a 3b f6 d4 3e 43 84 af a1 78 31 df b3 c3 2a 0e 9f 73 fb b0 19 c2 ad d1 4b 2e 08 3f f4 44 67 f9 4b 56 e6 88 de 97 3b 37 6f b7 31 41 5f 8d 46 31 f0 10 3e c1 e0 84 94 49 76 cf 3c 8d 4b 64 8f a6 7e 99 6e bd 47 5d a5 e6 9d e7 d5 f5 ce 79 56 77 3d d9 a3 af 8e e9 f0 ae b3 1c e9 d3 97 ff e5 b8 e6 56 44 e0 b6 66 8c 10 34 df 54 32 8b 57 21 6b f2 14 00 65 07 e1 67 ff 5c a3 a3 6b f0 f2 b3 Data Ascii: tv\|X4?2DuF>)ORN1-3R)^\|O}vZLR{2ZF3^.R\.hTT=N(pz;>Cx1*sK.?DgKV;7o1A_F1>Iv<Kd~nG]yVw=VDf4T2W!keg\k
2024-04-16 15:05:50 UTC	1255	IN	Data Raw: 3a 45 5a 8a 70 1a 3b ad 7d 29 25 51 05 4f f7 90 2d 7b 48 ec 17 dc 2a c6 eb bd 4f 16 45 76 d9 d3 48 36 84 fd 4e 76 1b b4 ae a4 f5 ec 2a 9b 7b 1b 07 ab f4 ce 7c 6f 65 8b dd cc 87 64 55 09 c1 58 da e7 86 3e 2d 6b 3c ff a3 ce b9 3a ef cf c7 36 bd ad ca 17 d6 94 7a 38 13 bd 3d 62 0b a3 b6 bb 23 77 e1 98 18 00 60 ea fa 14 54 fc 55 96 28 a9 cc 4a e0 6b 21 6d 6e 8b 03 13 c2 7f 22 36 dd 87 26 71 c0 bf 3d fd c3 33 86 d7 0e d4 93 a2 e3 6b d5 c7 6b f2 ca 09 f2 f9 2d 99 ee ea 9d 80 0f ee 07 8f 35 f7 16 f6 4d 66 54 b5 ce b9 ca 43 34 a8 9e 90 22 e1 11 d9 37 4e 2c 6f f0 07 c6 85 82 95 aa 14 71 66 b7 3b 94 89 e9 5a d6 22 96 f4 84 1f f6 d5 b8 c2 8a a0 77 2e e5 1f c0 ab c6 d4 0f 24 7c 8f ed cf 42 c8 aa bd 06 be e8 34 2a ba e9 aa 88 67 6f b1 a6 ab 63 22 fe c1 61 4b 7c da ec Data Ascii: :EZp;})%QO-{HOEvH6Nv{\|oedUX>-k<:6z8=b#w`TU(Jk!mn"6&q=3kk-5MfTC4"7N,oqf;Z"w.$\|B4*goc"aK\|
2024-04-16 15:05:50 UTC	1255	IN	Data Raw: 7f b0 35 8c 5b c6 6c 93 8b f6 e6 d7 b0 3c 01 fa 07 20 86 ac 0c 24 0c 75 c9 b9 67 87 17 26 a3 80 38 a9 48 53 2b bd 70 b7 71 00 17 75 d6 19 45 a6 bc 9e 48 17 67 3c ec 14 0a a7 55 64 42 76 72 63 4b da a5 db 3d 6f 93 7a 7c 19 9e b6 17 82 0f 7e 48 3f 73 b4 23 f9 51 2a 7c 3c 28 1a dc 63 8d f2 d3 77 7c 6e ae 6a 75 7b 9a e3 a4 43 46 99 2f de 1e 8e 0b 74 9a 13 5a 4d 8f 5a d6 c6 f7 dd ef 0d f4 1d da 65 56 f6 5b 97 d3 71 79 c0 5d 0d ff 8e 40 41 27 64 af 0a 6b ab 31 03 0d 62 93 67 e2 bb 3e ba 28 0f eb 2e 61 7f bc 9c 9a a6 eb 03 89 9a 94 1c d2 0f b0 d6 8a de c0 a6 16 09 79 21 9f 09 ee 10 ec ca 88 4c bc 06 8c e9 fe 58 f4 32 79 23 26 4a 4c 2c 6b 12 0d 3b be 3e e2 93 49 5c 00 ce e9 5a 33 ee c6 46 e7 79 16 66 64 8a 7b 7e 5e 49 c0 7e b6 61 23 e6 03 2e e0 42 3b e9 d7 b9 eb Data Ascii: 5[l< $ug&8HS+pquEHg<UdBvrcK=oz\|~H?s#Q*\|<(cw\|nju{CF/tZMZeV[qy]@A'dk1bg>(.ay!LX2y#&JL,k;>I\Z3Fyfd{~^I~a#.B;
2024-04-16 15:05:50 UTC	1255	IN	Data Raw: 58 72 15 8d 74 e8 ea f6 88 2b 0f e1 30 6b 09 e9 de 7a e6 40 35 04 da df e0 ee 5e e7 03 72 8c 5b cc 06 dd 77 00 03 a0 f0 10 6a 60 0c a5 87 ae c6 f4 50 d2 b0 ad 36 af 28 d3 35 93 ea 0a 82 fa 42 10 e5 8a 6b ee d4 04 a4 af 81 b1 59 b1 0f bf b4 04 57 fb 03 e5 b4 59 b5 db fd d8 9d be b1 47 8f 9e e3 7d ad 00 4e 00 ca dc d6 48 ae 18 33 2e 1c 03 0b fc 62 49 ac 91 b5 6b 53 99 ae 6e c5 61 98 b1 92 14 a4 19 51 b9 e2 30 f8 00 3e 4a d4 62 a8 b9 83 2d 16 9e 13 90 ca e2 a4 73 d3 1a 52 94 4d 1f 38 8d 41 05 6b 07 f6 09 66 e5 51 9a b5 b2 53 b8 72 da 39 69 55 4f 91 3b 31 5f ea 37 22 57 9e c5 1b 9e 40 35 f5 06 ba 51 03 15 54 aa 8a eb 2d da c4 11 b8 b9 69 f6 7c 62 f7 2c 10 8b 0b f4 9f fc e1 60 52 28 9b 5b 32 46 bd 24 9a 7c 98 0b 4b 74 39 fd 94 16 d5 2a 06 35 27 3b c2 2e 1d f5 Data Ascii: Xrt+0kz@5^r[wj`P6(5BkYWYG}NH3.bIkSnaQ0>Jb-sRM8AkfQSr9iUO;1_7"W@5QT-i\|b,`R([2F$\|Kt9*5';.
2024-04-16 15:05:50 UTC	1255	IN	Data Raw: 39 3e 1c 15 8a 02 09 d4 8d 7b 30 35 e1 ff 0b a1 70 cb 08 bd 12 86 7e 1e c0 e7 18 f0 ef e1 c3 54 10 70 c3 83 26 3f 10 b8 13 65 e1 24 bd bb b1 cf 9a 03 90 41 d1 80 9a 4a f8 10 b1 29 63 e9 c2 87 fd b5 d4 49 01 8e 0f 29 2c e1 1c c1 cb 25 46 a7 c5 ed ef 77 9d 78 f5 62 1e 0a 7a 4b 67 6c d6 d5 fc b9 ed 80 00 7b d8 d1 bc 45 ca c8 11 a8 94 b6 a0 6e c9 6d c2 1f af 92 92 f2 1e d4 7d 43 20 7c d0 d2 64 3e 85 9b eb c1 dd e9 31 ed 88 ef c4 7b f4 4b ec e7 43 af ab 95 68 02 e5 58 67 14 c7 b5 cd ac 68 3f 95 aa 45 47 6e cc 54 a4 78 ba fe f7 52 c1 00 05 5e d5 28 c2 82 c4 f6 ff c0 18 8e cc 0a 24 0a b0 db 51 85 d1 c8 50 e1 d0 d8 be 5b d5 16 f2 e9 2f d2 9d 49 a2 2b 80 06 78 e8 0c d0 18 1e 5c 34 2a 6b ee 8c 36 b1 fc e2 74 f0 c7 a0 99 7f 6a c4 82 25 0c fa b0 25 85 6d 34 85 9b 02 Data Ascii: 9>{05p~Tp&?e$AJ)cI),%FwxbzKgl{Enm}C \|d>1{KChXgh?EGnTxR^($QP[/I+x\4*k6tj%%m4
2024-04-16 15:05:50 UTC	1255	IN	Data Raw: 2b ae 85 4d 01 f8 fa 27 f4 e2 5f a8 8b 3f 54 81 df 1b f0 bd 87 5f 1d 7d 52 c1 15 69 9c c6 58 08 ba 39 ec e5 96 8b a2 34 28 63 3a c9 fc 69 b7 21 11 62 f6 95 2c 09 8b 72 d1 e2 b9 5f 5f 05 65 a9 3d 24 ae 4d 68 cb 52 4a 7c 56 1f 5e 8f 4e 25 76 c5 85 b5 60 29 f5 34 85 64 9d e6 ba 86 c7 9c b5 e1 f2 9f ef 58 fb 10 6d a1 7c 32 1e 25 f7 fe 1b 0a 30 bb 84 c6 64 2b 4a 68 7d d4 7e ad 0b 29 f4 be 42 27 cd bc 2a a2 f1 43 f9 ca 04 d2 bc a8 ad d7 ff b3 b1 4b 9d 15 84 e5 e5 a6 70 3c 28 97 83 eb 81 2f 32 7a b9 38 d8 72 43 8d 9a 04 22 bf 5b 38 fe 3f f0 42 ca ab c5 3a 39 1f 9b 35 59 9e 97 f5 3e f3 4a fb 98 93 e9 c3 e5 db e5 72 77 6f 60 c2 c6 49 ff 35 c9 7e 31 d2 fc 67 ff 74 b7 94 2c 71 53 0e ce f9 bf 14 af d8 f5 53 0e f3 92 39 69 d1 27 e4 40 ec 07 fe a6 ac 86 45 17 27 ba c8 Data Ascii: +M'_?T_}RiX94(c:i!b,r__e=$MhRJ\|V^N%v`)4dXm\|2%0d+Jh}~)B'*CKp<(/2z8rC"[8?B:95Y>Jrwo`I5~1gt,qSS9i'@E'
2024-04-16 15:05:50 UTC	1255	IN	Data Raw: e4 c9 13 6e 48 aa 83 fb 71 b9 45 55 01 5d 58 81 28 52 dc c5 c7 ce 51 ed ab d1 bf 96 29 45 09 cd d5 8e 96 ed dd fa 0b 11 a7 8f fa 36 8b 9c f3 10 8c 80 66 cd 4d 4a 05 1c da 5a 63 47 36 36 43 21 b3 a0 90 49 ce 1f 6d 8f e3 58 0c 86 c9 fb 0b ed 4d ed 9e b0 4d 1a 67 7f 3f 5a bc 65 44 4f 45 34 0c 8d 41 68 2e 75 d2 df e4 59 b3 b4 2f 10 1c 5d d7 a0 83 63 e6 cd e1 2c cd 16 71 d8 cf 1d 9d 4c 68 ce 58 81 00 fa 63 cc ee e3 3c c8 b0 dc 29 a0 e2 6b d3 1a fe 2e e1 1a 4e 06 e7 99 8e b8 b4 a6 ab 34 de 73 5c 7b 2c 9a 3f b2 43 4c 6b 2f 08 04 e9 f2 5e f9 ea 4a 34 ae 88 9a 3b 27 31 f4 d1 2f 16 49 cb ce dd 11 d3 e6 54 ea 76 28 b0 94 7b d1 3d 97 25 ac c1 f6 18 e4 b8 0e 48 0b d7 39 a4 bd e4 06 ee 38 49 b0 fe bf 0b 3c ca fb 3b 62 19 cc 91 6d 68 a0 4a ef 9f b5 bf 12 71 5f d7 25 e4 Data Ascii: nHqEU]X(RQ)E6fMJZcG66C!ImXMMg?ZeDOE4Ah.uY/]c,qLhXc<)k.N4s\{,?CLk/^J4;'1/ITv({=%H98I<;bmhJq_%
2024-04-16 15:05:50 UTC	1255	IN	Data Raw: 83 7e db 75 7b 4b 7a 4c 5d e9 74 99 d6 96 c2 a0 b7 2c 2f c2 21 8e 04 83 b9 cc 7a 30 64 1b 4c 92 41 47 3c 97 69 47 55 1f 7e 83 99 e8 5d e1 fb 0c 05 1a 63 e0 bf f3 7b 9d 8c 95 93 25 f7 d6 cd 67 87 b5 28 6e 65 0d fc 97 f4 d1 70 6a eb a3 ba c5 53 7b 73 e8 99 85 c8 12 32 d4 7e fb 5f 94 41 99 60 1f 08 8c 84 d5 42 3a a3 be 2b 25 4d d3 d3 15 4f 2d 3e 8c d9 8d 71 b1 8e d3 52 1c 9e d0 69 9d 65 ab 55 7a fb b7 2c 7a 10 db bd 29 0c 2b 25 40 50 13 f9 85 73 bf 0c 91 0b 25 98 8f d1 51 95 08 89 53 e8 fb ff 79 88 e9 cf 1e c7 af 0d 1f f4 5e 0f b5 88 dd 17 42 70 b1 39 be 97 96 a3 a6 14 7e c9 fb c5 98 47 1a 62 89 8f c1 a8 35 7c 8a 84 d9 eb 53 05 34 ce 9c 57 f1 45 06 7d 3b 46 43 d4 63 82 d3 2d 32 be ed f0 94 9b 3e 6b 4c 8b 4e 20 7b 11 68 72 f1 1e de 50 d4 b3 c7 e2 a9 91 04 b2 Data Ascii: ~u{KzL]t,/!z0dLAG<iGU~]c{%g(nepjS{s2~_A`B:+%MO->qRieUz,z)+%@Ps%QSy^Bp9~Gb5\|S4WE};FCc-2>kLN {hrP
2024-04-16 15:05:50 UTC	1255	IN	Data Raw: e0 56 a2 31 e3 6a 98 e0 1f 2e 86 d5 12 9d 6a 24 53 ff e3 cc 60 c2 0a d7 f7 d1 79 be 96 12 0b e4 fa 82 e5 1a 0f 89 a7 16 14 96 2e 34 71 02 bf d4 0f b9 ab ff f7 c3 65 0d 5f c5 8b b6 d6 9a fb 07 fb 39 9b 5c 74 0b 2b 03 4c f3 19 1f 7c 66 87 3c cc 61 5d 22 d8 ec d7 b2 eb a3 14 2d ee 09 80 6d c4 04 b9 b2 aa 31 a5 ac fc 80 be b8 e0 04 22 09 70 02 97 83 27 74 f6 ca 6b 5e 58 7b ae a4 cb ba fb fd b3 ad 05 e4 1c c6 12 5f cd 26 5a 6b 61 07 d0 be c1 48 b2 43 76 75 08 ad 7f 0b 71 6a b2 92 84 3d 05 6e 50 dd 4d 49 fd 64 4a d3 0b c7 45 70 89 79 3a a2 26 f4 f3 01 2c 94 cf ec 24 c2 33 de da 60 e1 e2 46 d1 51 7e 9f 7b 87 38 a3 ab 7a e0 c9 af 43 c4 d2 c3 5d 40 0a 21 6d 2d 0b 69 79 f7 0e ad f0 a7 fb 37 d0 db 35 10 c5 15 f3 cc d3 cd 87 a1 45 8b 0c 32 54 83 bd af df b8 b2 2f e5 Data Ascii: V1j.j$S`y.4qe_9\t+L\|f<a]"-m1"p'tk^X{_&ZkaHCvuqj=nPMIdJEpy:&,$3`FQ~{8zC]@!m-iy75E2T/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.11	49864	142.251.15.91	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:50 UTC	1057	OUT	GET /embed/wAD9uO9YAQw?playlist=wAD9uO9YAQw&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&origin=https%3A%2F%2Fniceindiatravel.com&widgetid=1 HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
2024-04-16 15:05:50 UTC	1592	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 16 Apr 2024 15:05:50 GMT Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube_main" Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9 Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Resource-Policy: cross-origin Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-16 15:05:50 UTC	1592	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 20 64 61 74 61 2d 63 61 73 74 2d 61 70 69 2d 65 6e 61 62 6c 65 64 3d 22 74 72 75 65 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 71 4b 64 6b 6b 48 5f 78 78 73 33 68 66 6e 36 43 61 63 62 4c 69 67 22 3e 69 66 20 28 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 20 7c 7c 20 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 Data Ascii: 8000<!DOCTYPE html><html lang="en" dir="ltr" data-cast-api-enabled="true"><head><meta name="viewport" content="width=device-width, initial-scale=1"><script nonce="qKdkkH_xxs3hfn6CacbLig">if ('undefined' == typeof Symbol \|\| 'undefined' == typeof Symbol.i
2024-04-16 15:05:50 UTC	1592	IN	Data Raw: 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 30 2d 30 32 41 46 2c 55 2b 30 33 30 34 2c 55 2b 30 33 30 38 2c 55 2b 30 33 32 39 2c 55 2b 31 45 30 30 2d 31 45 39 46 2c 55 2b 31 45 46 32 2d 31 45 46 46 2c 55 2b 32 30 32 30 2c 55 2b 32 30 41 30 2d 32 30 41 42 2c 55 2b 32 30 41 44 2d 32 30 43 30 2c 55 2b 32 31 31 33 2c 55 2b 32 43 36 30 2d 32 43 37 46 2c 55 2b 41 37 32 30 2d 41 37 46 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c Data Ascii: t-weight:400;src:url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)format('woff2');unicode-range:U+0100-02AF,U+0304,U+0308,U+0329,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720-A7FF;}@font-face{font-famil
2024-04-16 15:05:50 UTC	1592	IN	Data Raw: 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 32 2d 30 31 30 33 2c 55 2b 30 31 31 30 2d 30 31 31 31 2c 55 2b 30 31 32 38 2d 30 31 32 39 2c 55 2b 30 31 36 38 2d 30 31 36 39 2c 55 2b 30 31 41 30 2d 30 31 41 31 2c 55 2b 30 31 41 46 2d 30 31 42 30 2c 55 2b 30 33 30 30 2d 30 33 30 31 2c 55 2b 30 33 30 33 2d 30 33 30 34 2c 55 2b 30 33 30 38 2d 30 33 30 39 2c 55 2b 30 33 32 33 2c 55 2b 30 33 32 39 2c 55 2b 31 45 41 30 2d 31 45 46 39 2c 55 2b 32 30 41 42 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 Data Ascii: woff2');unicode-range:U+0102-0103,U+0110-0111,U+0128-0129,U+0168-0169,U+01A0-01A1,U+01AF-01B0,U+0300-0301,U+0303-0304,U+0308-0309,U+0323,U+0329,U+1EA0-1EF9,U+20AB;}@font-face{font-family:'Roboto';font-style:normal;font-weight:500;src:url(//fonts.gstatic.c
2024-04-16 15:05:50 UTC	1592	IN	Data Raw: 35 30 25 20 36 35 25 20 6e 6f 2d 72 65 70 65 61 74 3b 7d 2e 70 6c 61 79 65 72 2d 75 6e 61 76 61 69 6c 61 62 6c 65 20 2e 6d 65 73 73 61 67 65 20 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 20 6d 61 72 67 69 6e 3a 20 30 20 2d 35 70 78 20 31 35 70 78 3b 20 70 61 64 64 69 6e 67 3a 20 30 20 35 70 78 20 31 34 70 78 3b 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 38 38 38 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 39 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 7d 2e 70 6c 61 79 65 72 2d 75 6e 61 76 61 69 6c 61 62 6c 65 20 61 20 7b 63 6f 6c 6f 72 3a 20 23 31 36 37 61 63 36 3b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 73 63 72 69 70 74 Data Ascii: 50% 65% no-repeat;}.player-unavailable .message {text-align: left; margin: 0 -5px 15px; padding: 0 5px 14px; border-bottom: 1px solid #888; font-size: 19px; font-weight: normal;}.player-unavailable a {color: #167ac6; text-decoration: none;}</style><script
2024-04-16 15:05:50 UTC	1592	IN	Data Raw: 6c 29 3b 76 61 72 20 69 73 50 72 65 72 65 6e 64 65 72 3d 28 64 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 7c 7c 64 2e 77 65 62 6b 69 74 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 29 3d 3d 22 70 72 65 72 65 6e 64 65 72 22 3b 76 61 72 20 76 4e 61 6d 65 3d 21 64 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 26 26 64 2e 77 65 62 6b 69 74 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 22 77 65 62 6b 69 74 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 3a 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 3b 69 66 28 69 73 50 72 65 72 65 6e 64 65 72 29 7b 76 61 72 20 73 74 61 72 74 54 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 79 74 63 73 69 2e 73 65 74 53 74 61 72 74 28 29 3b 64 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 Data Ascii: l);var isPrerender=(d.visibilityState\|\|d.webkitVisibilityState)=="prerender";var vName=!d.visibilityState&&d.webkitVisibilityState?"webkitvisibilitychange":"visibilitychange";if(isPrerender){var startTick=function(){ytcsi.setStart();d.removeEventListener(
2024-04-16 15:05:50 UTC	1592	IN	Data Raw: 6f 70 79 5f 6c 6f 67 69 6e 5f 69 6e 66 6f 5f 74 6f 5f 73 74 5f 63 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 63 73 69 5f 63 6f 6e 66 69 67 5f 68 61 6e 64 6c 69 6e 67 5f 69 6e 66 72 61 22 3a 74 72 75 65 2c 22 63 73 69 5f 6f 6e 5f 67 65 6c 22 3a 74 72 75 65 2c 22 64 65 70 72 65 63 61 74 65 5f 63 73 69 5f 68 61 73 5f 69 6e 66 6f 22 3a 74 72 75 65 2c 22 64 65 70 72 65 63 61 74 65 5f 70 61 69 72 5f 73 65 72 76 6c 65 74 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 6f 70 5f 63 6c 69 65 6e 74 5f 72 65 6c 65 61 73 65 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 6f 70 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 68 69 67 68 5f 70 72 69 6f 72 69 74 79 5f 69 67 6e 6f 72 65 5f 70 75 73 68 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 6f 70 5f 6e 6f 74 69 66 69 63 61 74 Data Ascii: opy_login_info_to_st_cookie":true,"csi_config_handling_infra":true,"csi_on_gel":true,"deprecate_csi_has_info":true,"deprecate_pair_servlet_enabled":true,"desktop_client_release":true,"desktop_notification_high_priority_ignore_push":true,"desktop_notificat
2024-04-16 15:05:50 UTC	1592	IN	Data Raw: 75 65 2c 22 65 6e 61 62 6c 65 5f 70 6f 70 75 6c 61 74 65 5f 61 74 74 5f 70 73 64 5f 69 6e 5f 61 62 65 5f 66 65 65 64 62 61 63 6b 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 70 6f 70 75 6c 61 74 65 5f 70 73 64 5f 69 6e 5f 61 62 65 5f 66 65 65 64 62 61 63 6b 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 72 65 73 70 65 63 74 5f 6c 61 6e 67 5f 64 69 72 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 64 66 5f 6d 69 64 72 6f 6c 6c 5f 70 6f 73 74 72 6f 6c 6c 5f 70 6c 61 79 65 72 5f 62 79 74 65 73 5f 76 69 64 65 6f 5f 68 35 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 64 66 5f 70 72 65 72 6f 6c 6c 5f 70 6c 61 79 65 72 5f 62 79 74 65 73 5f 76 69 64 65 6f 5f 68 35 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 64 66 5f 70 72 65 72 6f 6c 6c 5f 70 6c 61 79 65 72 Data Ascii: ue,"enable_populate_att_psd_in_abe_feedback":true,"enable_populate_psd_in_abe_feedback":true,"enable_respect_lang_dir":true,"enable_sdf_midroll_postroll_player_bytes_video_h5":true,"enable_sdf_preroll_player_bytes_video_h5":true,"enable_sdf_preroll_player
2024-04-16 15:05:50 UTC	1592	IN	Data Raw: 65 61 73 65 64 5f 6d 69 6e 5f 68 65 69 67 68 74 22 3a 74 72 75 65 2c 22 6c 6f 67 5f 65 72 72 6f 72 73 5f 74 68 72 6f 75 67 68 5f 6e 77 6c 5f 6f 6e 5f 72 65 74 72 79 22 3a 74 72 75 65 2c 22 6c 6f 67 5f 76 69 73 5f 6f 6e 5f 74 61 62 5f 63 68 61 6e 67 65 22 3a 74 72 75 65 2c 22 6c 6f 67 5f 77 65 62 5f 65 6e 64 70 6f 69 6e 74 5f 74 6f 5f 6c 61 79 65 72 22 3a 74 72 75 65 2c 22 6d 64 78 5f 65 6e 61 62 6c 65 5f 70 72 69 76 61 63 79 5f 64 69 73 63 6c 6f 73 75 72 65 5f 75 69 22 3a 74 72 75 65 2c 22 6d 64 78 5f 6c 6f 61 64 5f 63 61 73 74 5f 61 70 69 5f 62 6f 6f 74 73 74 72 61 70 5f 73 63 72 69 70 74 22 3a 74 72 75 65 2c 22 6d 69 67 72 61 74 65 5f 65 76 65 6e 74 73 5f 74 6f 5f 74 73 22 3a 74 72 75 65 2c 22 6d 69 67 72 61 74 65 5f 72 65 6d 61 69 6e 69 6e 67 5f 77 65 Data Ascii: eased_min_height":true,"log_errors_through_nwl_on_retry":true,"log_vis_on_tab_change":true,"log_web_endpoint_to_layer":true,"mdx_enable_privacy_disclosure_ui":true,"mdx_load_cast_api_bootstrap_script":true,"migrate_events_to_ts":true,"migrate_remaining_we
2024-04-16 15:05:50 UTC	1592	IN	Data Raw: 69 6d 65 5f 6d 73 5f 68 65 61 64 65 72 22 3a 74 72 75 65 2c 22 75 73 65 5f 73 65 73 73 69 6f 6e 5f 62 61 73 65 64 5f 73 61 6d 70 6c 69 6e 67 22 3a 74 72 75 65 2c 22 75 73 65 5f 74 73 5f 76 69 73 69 62 69 6c 69 74 79 6c 6f 67 67 65 72 22 3a 74 72 75 65 2c 22 75 73 65 5f 77 61 74 63 68 5f 66 72 61 67 6d 65 6e 74 73 32 22 3a 74 72 75 65 2c 22 76 73 73 5f 66 69 6e 61 6c 5f 70 69 6e 67 5f 73 65 6e 64 5f 61 6e 64 5f 77 72 69 74 65 22 3a 74 72 75 65 2c 22 76 73 73 5f 70 6c 61 79 62 61 63 6b 5f 75 73 65 5f 73 65 6e 64 5f 61 6e 64 5f 77 72 69 74 65 22 3a 74 72 75 65 2c 22 77 61 72 6d 5f 6c 6f 61 64 5f 6e 61 76 5f 73 74 61 72 74 5f 77 65 62 22 3a 74 72 75 65 2c 22 77 65 62 5f 61 6c 77 61 79 73 5f 6c 6f 61 64 5f 63 68 61 74 5f 73 75 70 70 6f 72 74 22 3a 74 72 75 65 Data Ascii: ime_ms_header":true,"use_session_based_sampling":true,"use_ts_visibilitylogger":true,"use_watch_fragments2":true,"vss_final_ping_send_and_write":true,"vss_playback_use_send_and_write":true,"warm_load_nav_start_web":true,"web_always_load_chat_support":true
2024-04-16 15:05:50 UTC	1592	IN	Data Raw: 72 65 66 65 74 63 68 5f 77 69 6e 64 6f 77 5f 73 65 63 5f 66 6f 72 5f 6c 69 76 65 73 74 72 65 61 6d 5f 6f 70 74 69 6d 69 7a 61 74 69 6f 6e 22 3a 31 30 2c 22 6d 69 6e 5f 70 72 65 66 65 74 63 68 5f 6f 66 66 73 65 74 5f 73 65 63 5f 66 6f 72 5f 6c 69 76 65 73 74 72 65 61 6d 5f 6f 70 74 69 6d 69 7a 61 74 69 6f 6e 22 3a 32 30 2c 22 6e 65 74 77 6f 72 6b 5f 70 6f 6c 6c 69 6e 67 5f 69 6e 74 65 72 76 61 6c 22 3a 33 30 30 30 30 2c 22 70 72 65 66 65 74 63 68 5f 63 6f 6d 6d 65 6e 74 73 5f 6d 73 5f 61 66 74 65 72 5f 76 69 64 65 6f 22 3a 30 2c 22 73 65 6e 64 5f 63 6f 6e 66 69 67 5f 68 61 73 68 5f 74 69 6d 65 72 22 3a 30 2c 22 73 65 72 76 69 63 65 5f 77 6f 72 6b 65 72 5f 70 75 73 68 5f 6c 6f 67 67 65 64 5f 6f 75 74 5f 70 72 6f 6d 70 74 5f 77 61 74 63 68 65 73 22 3a 2d 31 Data Ascii: refetch_window_sec_for_livestream_optimization":10,"min_prefetch_offset_sec_for_livestream_optimization":20,"network_polling_interval":30000,"prefetch_comments_ms_after_video":0,"send_config_hash_timer":0,"service_worker_push_logged_out_prompt_watches":-1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.11	49866	173.194.219.136	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:50 UTC	570	OUT	GET /youtubei/v1/next?prettyPrint=false HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
2024-04-16 15:05:51 UTC	240	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1604 Date: Tue, 16 Apr 2024 15:05:51 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 15:05:51 UTC	1015	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 405 (Method Not Allowed)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px aria
2024-04-16 15:05:51 UTC	589	IN	Data Raw: 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d Data Ascii: .com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.11	49867	172.217.135.202	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:50 UTC	1680	OUT	GET /videoplayback?expire=1713301547&ei=y5MeZqSPB9aoy_sPxcuI0A8&ip=81.181.57.52&id=o-AGTEz6yrZN30zWRHetU01zfPZPIBkqXwN_jxSqpNGk-M&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=rv&mm=31%2C29&mn=sn-p5qlsn76%2Csn-p5qddn7r&ms=au%2Crdu&mv=m&mvi=5&pl=26&initcwndbps=1037500&bui=AaUN6a0X-vPuPWnoZdJnY8gcaw5_Rec69zGixzS_kVy6dh8yJJHbZPIDav7sGh5eMsIrcUMSgNZoV-eJ&spc=UWF9f_C907pjE2i9QlVivDiO3bFloqFrBkw3MS1j9d3XXjQUG-40uVYW-Q&vprv=1&svpuc=1&mime=audio%2Fwebm&ns=8Io3oEW7FSAr8VYj4CRq5ycQ&gir=yes&clen=2888165&dur=156.941&lmt=1693419053011705&mt=1713279665&fvip=5&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=4432434&n=65_ILddd0oaXCA&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRgIhAIqn_cmzA9wxw9Qv3XmYLmzgIYuMyqkUCJ74E3gyfGPmAiEAyvaE7AH2ALtvgZL7TmmJy3gr_gksqFvhADtsOLFIvXM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ALClDIEwRQIhALaMd8X8P3LTQ-dzb36htdQmyx7RegKRkqR_w8GTV_GCAiAXEkpCyRYR_s7h1aB1LlSa8sV2f8SVngOiCKBfSgfTuQ%3D%3D&alr=yes&cpn=F6GU1QEdhoMLD-Np&cver=1.20240409.01.00&range=66071-131606&rn=4&rbuf=3763&pot=IjgJ1gnQb8iaGkqxfZxEkTiZR7p5j1y8baVGlWOfeYl4oUu8QJ1KsUOAXK5Ak06xSLFClyzlTfM6kg==&ump=1&srfvp=1 HTTP/1.1 Host: rr5---sn-p5qlsn76.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:51 UTC	495	IN	HTTP/1.1 200 OK Last-Modified: Wed, 30 Aug 2023 18:10:53 GMT Content-Type: application/vnd.yt-ump Date: Tue, 16 Apr 2024 15:05:51 GMT Expires: Tue, 16 Apr 2024 15:05:51 GMT Cache-Control: private, max-age=21296 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-04-16 15:05:51 UTC	3	IN	Data Raw: 34 0d 0a Data Ascii: 4
2024-04-16 15:05:51 UTC	4	IN	Data Raw: 3a 02 08 01 Data Ascii: :
2024-04-16 15:05:51 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-16 15:05:51 UTC	4	IN	Data Raw: 33 33 0d 0a Data Ascii: 33
2024-04-16 15:05:51 UTC	51	IN	Data Raw: 14 31 08 00 12 0b 77 41 44 39 75 4f 39 59 41 51 77 18 fb 01 20 f9 a5 f1 c8 fd 84 81 03 30 97 84 04 6a 0c 08 fb 01 10 f9 a5 f1 c8 fd 84 81 03 70 80 80 04 Data Ascii: 1wAD9uO9YAQw 0jp
2024-04-16 15:05:51 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-16 15:05:51 UTC	7	IN	Data Raw: 31 30 30 30 35 0d 0a Data Ascii: 10005
2024-04-16 15:05:51 UTC	5	IN	Data Raw: 15 c1 00 08 00 Data Ascii:
2024-04-16 15:05:51 UTC	16384	IN	Data Raw: 33 69 17 48 94 ca 7f 83 e6 5e bf 83 52 90 15 e0 47 bb 9a 85 e4 4c 40 8e 49 b8 d5 9d 65 06 f3 03 e7 f4 89 dd 66 99 df 9a 62 66 58 a2 34 12 63 9d 62 48 49 ee 63 3f 82 9f 64 4f b6 ad b7 27 7c 1b 2f da e5 ca 4d 5d 5e 5a 14 bb a2 4f e6 27 5f 57 0c 87 24 c7 56 c3 5d 10 12 04 54 8e 2d f5 fc d5 c1 74 a4 f2 89 fc 23 96 5a a7 bd f8 15 14 43 44 aa b5 ff 44 fa 2e c7 a6 a0 79 b8 68 b8 c2 82 b1 d9 b2 8c 0a 86 7f 62 f4 a6 1f 24 dd f5 91 0f 64 da 3b f8 70 40 4d 5f 01 da 29 31 10 d1 24 f3 62 16 7a f1 f2 e0 25 99 b5 82 12 d8 ad bc 94 4b 4c 1f da 8f f6 dc bb 9a 9b 33 c4 e6 4b f0 16 d3 8c 78 62 26 9e 10 e9 aa 1e 94 f5 ef e4 9a a3 41 2c 81 10 b9 80 fc 53 bb f8 65 cb d0 bb 84 8c 6c 8a 71 0d 4b 80 c6 54 2f 2a 57 c0 14 20 c0 e4 3e 39 a5 ad 68 07 9e dc df 2f d2 4e f3 69 8d 75 40 Data Ascii: 3iH^RGL@IefbfX4cbHIc?dO'\|/M]^ZO'_W$V]T-t#ZCDD.yhb$d;p@M_)1$bz%KL3Kxb&A,SelqKT/*W >9h/Niu@
2024-04-16 15:05:51 UTC	16384	IN	Data Raw: d8 5c 5f a2 38 97 ea 31 ed af b3 03 82 f4 76 62 4a e6 85 a3 84 9b 8a 87 b1 49 40 52 14 30 39 85 f6 46 3a a3 66 e3 6a 2d e4 9a db d9 8f ae f2 43 af a5 2c e8 ce fa 10 8b 1f 9f cf 57 6f 8d 22 75 8c 59 ad 33 fb e5 d8 00 5f 4b 7f 2b 8d 10 bc 86 37 83 20 de ba c7 c3 b7 a7 80 cd ec ab 1f 44 48 13 72 80 1d 75 02 63 55 37 5f 12 60 8d 68 21 6b 30 b9 75 be f9 9e 2e 46 32 36 77 6a 82 8b 48 f2 a2 f3 48 0b de 53 73 58 0a ea 99 4d 43 1b a2 bf 70 d2 19 df e9 92 0b d2 b7 e9 5b 71 4c dd 0e b1 9b 73 2a 87 c7 27 7b 15 e1 d2 4f a8 f2 5e 0d c6 32 a5 ff 05 f7 4f 4d 31 9d 61 a6 cb 57 0d cc 24 ff bc a9 4a 8b 1b 82 3b b0 70 79 1b a0 1d fe be 08 eb 82 da ae f4 10 d9 bb 87 a8 13 c4 9d cf 9b ac a4 24 db b6 e4 44 63 1c d1 45 6d a0 65 b0 db d2 b8 c7 df 5e 44 66 0a c3 f9 eb eb 64 21 7a Data Ascii: \_81vbJI@R09F:fj-C,Wo"uY3_K+7 DHrucU7_`h!k0u.F26wjHHSsXMCp[qLs*'{O^2OM1aW$J;py$DcEme^Dfd!z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.11	49868	154.62.106.12	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:50 UTC	377	OUT	GET /wp-content/uploads/2018/10/3-1.jpg HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:53 UTC	392	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:52 GMT Content-Type: image/jpeg Content-Length: 68321 Connection: close Cache-Control: public, max-age=31536000 X-Hcdn-Image-Optimizer: f:jpeg q:85 w:1600 alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 53cbb8d79af39d7a8e2661991aaee20e-bos-edge1 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 1.851 Accept-Ranges: bytes
2024-04-16 15:05:53 UTC	977	IN	Data Raw: ff d8 ff e1 00 80 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 05 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 4a 00 00 00 1b 01 05 00 01 00 00 00 52 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 69 87 04 00 01 00 00 00 5a 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 02 00 02 a0 04 00 01 00 00 00 58 02 00 00 03 a0 04 00 01 00 00 00 90 01 00 00 00 00 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e Data Ascii: ExifII*JR(iZHHXC!"$"$C
2024-04-16 15:05:53 UTC	1369	IN	Data Raw: a4 9f af e9 a7 44 12 d9 3e fa 41 e7 3a 59 fd 34 93 82 3e ba 61 44 15 f5 ce 90 7b f1 a7 18 76 fa 7b 69 04 1c fa ea 00 49 19 e4 f1 a2 3c 0e df d3 4b f5 ef a4 11 fe fa 24 a0 89 fd 74 47 19 c1 fc b4 ae de da 4f fa e8 8a 16 01 18 e7 fd b4 47 8f f7 d2 8f 3a 2f 4c e3 44 82 4f bf e5 93 a0 7e 9c 68 cf a1 c6 8b f2 ce 4e a0 68 23 90 31 a4 e0 67 be 74 a2 32 74 78 ed 81 9d 42 53 1b 3c e8 bd be ba 53 63 39 d1 63 4e 88 27 b9 c7 1a 23 f6 d2 b8 f5 d1 01 df 9d 40 30 86 30 41 1a 22 38 e3 9f a6 8f d7 be 8f b7 6f cb 23 52 c5 11 c0 1e e7 ef a2 f4 d2 88 c7 a8 ce 92 70 4e 3d 74 40 d8 92 3b 71 9f 5f b6 86 8c 02 7b ff 00 4d 0d 4b 0a 3a 68 c6 33 a5 64 76 d2 71 8d 1f af 07 5c 83 a8 0c 9e d9 e7 43 f3 1a 2e df 5d 01 f6 d4 03 0c 8d 11 d1 e8 8f 6d 41 44 9c 7a 73 8f 4d 11 e7 be 94 7b f7 Data Ascii: D>A:Y4>aD{v{iI<K$tGOG:/LDO~hNh#1gt2txBS<Sc9cN'#@00A"8o#RpN=t@;q_{MK:h3dvq\C.]mADzsM{
2024-04-16 15:05:53 UTC	1369	IN	Data Raw: 1e ba 3d 16 09 ee 34 a3 f4 d0 63 05 dc f7 3a 52 8e fa 2f 4e 74 a1 ed dc 9f 6d 2b 19 1c cb e3 bd c2 e2 a9 68 b2 ad 7c 94 96 ca b3 23 ce 1a 5f 06 17 75 c7 32 3f f2 2a f3 83 91 92 4e 09 c0 d7 2f ba c9 d3 d4 97 1a cb 67 4b 5c 45 f2 4a 28 83 5c 45 3d 0c 90 47 1f 20 10 8d 26 1d 88 27 19 c0 cf a0 d7 a8 6d 2f d2 77 b8 2e 76 fb 94 54 77 aa 58 66 34 95 48 e9 b9 69 e7 40 18 a2 12 3f 10 ca 92 47 19 fb 6b 9b f5 67 c3 8e 96 b3 d6 dc ef f5 15 17 09 2d ab 19 a8 a8 11 00 67 96 34 1f 87 3d d9 87 61 9f be be 6f e2 be 4e 6d 4e 57 2e 6d f1 f9 1e d3 41 29 62 c3 05 d2 91 89 eb 0b 2d 0d 93 e0 9f 48 cf f2 e9 25 da f7 55 3d 64 b3 bf 2f f2 a1 88 8e 32 7d 8a ed 27 f3 d6 3a 1b a5 d6 cb 4b e2 5b ac 36 3b b7 cd d6 15 71 5a d2 6e a7 4e 30 c0 06 50 06 33 92 72 46 07 be b4 dd 6f f1 22 93 Data Ascii: =4c:R/Ntm+h\|#_u2?*N/gK\EJ(\E=G &'m/w.vTwXf4Hi@?Gkg-g4=aoNmNW.mA)b-H%U=d/2}':K[6;qZnN0P3rFo"
2024-04-16 15:05:53 UTC	1369	IN	Data Raw: c9 e7 5d 6b 30 50 d7 d8 f1 a2 fc b4 e1 1a 43 0c 0d 32 60 a1 3e bd f1 a2 c6 3e e3 4a 3c e8 b1 df 4d 64 12 73 db 1a 41 1e c4 e9 c2 34 47 3e c3 44 14 37 8f 7e df 4d 24 83 eb a7 31 c6 89 bd f1 a2 98 29 0d 91 8e fa 23 9c 69 64 67 d0 e3 be 93 8e c7 d3 3a 24 4d 09 ec be fa 2e 3d 34 60 1e 4e 88 fa ea 10 1c 83 f4 d2 4f df 4a 61 f9 9d 02 07 ae a0 a2 49 f5 ce 34 58 c8 f5 d2 be b8 ed a2 c6 7b f1 a2 06 84 f6 1c fe 7a 49 19 c6 38 d2 b9 e4 ff 00 e1 d0 c1 3c e8 82 84 e0 68 1f 5d 18 03 d3 be 80 07 b7 3a 84 08 00 39 07 be 81 1c e8 f1 82 31 ce 87 38 f5 d4 1a c4 11 c6 07 6d 0d 2c 2f 63 ed a1 a3 64 a3 a0 9c 67 43 82 7d b4 43 3e da 1f 71 ae 59 bc 07 df b6 8b 9e 38 d0 24 68 b3 c7 7d 42 06 34 34 59 e3 db 46 4e 34 c0 60 f4 ff 00 6d 16 8f e9 a2 27 ed c6 87 40 03 e8 7d 74 83 a5 1e Data Ascii: ]k0PC2`>>J<MdsA4G>D7~M$1)#idg:$M.=4`NOJaI4X{zI8<h]:918m,/cdgC}C>qY8$h}B44YFN4`m'@}t
2024-04-16 15:05:53 UTC	1369	IN	Data Raw: e9 5e da 23 f9 6a 20 50 58 18 ce 34 47 46 3b 68 88 e0 9d 38 02 ce 00 d2 4e 94 7b 76 e7 49 39 fb 6a 10 18 cf ae 92 46 74 ac f3 c6 88 e7 4c 80 c4 11 c8 d2 70 70 74 b3 e8 74 93 df 8e 46 88 a2 4f 7d 10 1c fd 34 be ff 00 5d 0f cf ef a9 61 a1 27 f3 d2 7d 34 a3 c6 92 73 ce 98 34 24 91 8c 63 f2 d1 67 3a 33 df 48 27 44 40 c9 c1 ed a2 c8 f5 ef a1 9f 4d 03 f6 d4 00 01 e7 9d 01 c7 63 9d 11 f5 d1 01 f7 d4 00 ac e8 13 a4 fe 9a 00 82 34 03 62 b3 f4 d0 fc b4 5f e5 a5 00 75 06 00 3c f2 34 a1 df 44 78 e3 db 4a 5c 9c 60 12 4f 03 03 9d 28 e8 50 ce 33 a3 45 dc d8 dc ab ee cc 70 00 f5 24 fb 0e e7 ed ad 55 bf a4 10 52 2d 45 d6 b7 e5 f7 0c 98 d3 1e 5f a1 27 d7 ed ac 47 c7 7a db 15 8f a1 64 b7 da 9e 46 ad ba 49 f2 c6 62 e4 98 e1 03 74 ac 3d b2 a3 6f fe ed 71 b5 9e 35 a6 d3 45 bb Data Ascii: ^#j PX4GF;h8N{vI9jFtLppttFO}4]a'}4s4$cg:3H'D@Mc4b_u<4DxJ\`O(P3Ep$UR-E_'GzdFIbt=oq5E
2024-04-16 15:05:53 UTC	1369	IN	Data Raw: 4f f4 d0 ec 73 ef a5 11 9f 4d 16 3f a6 a5 80 2c 1c 0e 34 3e e3 4a c6 88 f1 ed a9 64 12 71 eb a1 a3 ec 74 35 2c 86 e7 44 0f 3a 3d 02 07 b6 b9 e6 d0 1e fc 68 8e 87 eb a0 31 f5 d1 14 2d 0e e4 68 fb 68 6a 10 23 ef 9c 68 11 8d 03 df d3 44 75 00 11 ef ce 81 3f 4d 0f b6 8b 38 19 d4 14 1f d3 40 f7 f7 1a 07 be 8b 50 8c 1f 5d 17 d3 1a 31 a0 47 3d f5 03 42 4f bf 3a 04 7e 63 46 46 34 47 f2 d1 4c 14 24 f3 db 49 3f 9e 96 70 7d 74 c8 92 13 51 f2 eb 51 4e 67 21 8f 84 26 52 fe 5f c5 e5 07 3c 7a f1 c7 ae 8d 82 85 f6 e4 8d 10 c6 39 3a 3d 0c 0d 14 c5 12 7e ba 23 df 4a c1 27 44 79 fa 68 90 49 3c 7b 69 27 46 7d bd b4 92 0f 6c e8 a2 04 7b e9 27 b6 8c e9 27 db 4e 06 11 3e be fa 49 cf 3a 33 eb db 8d 11 d1 10 20 38 d1 f6 fb e8 1d 16 a1 02 27 40 9d 03 8f a6 8b eb ef a8 40 64 01 eb Data Ascii: OsM?,4>Jdqt5,D:=h1-hhj#hDu?M8@P]1G=BO:~cFF4GL$I?p}tQQNg!&R_<z9:=~#J'DyhI<{i'F}l{''N>I:3 8'@@d
2024-04-16 15:05:53 UTC	1369	IN	Data Raw: ba 8e df e2 48 07 a3 ce e6 52 a7 ea 17 c3 fd 75 47 7f b0 0b a7 c1 ee a4 a6 88 9f 1e d7 59 49 78 88 63 3f bb f3 53 ce 7f 25 74 27 ed a7 8d 2c 71 9a e9 be ff 00 26 dc 7f 83 5a bd f5 de bf 7a bf e4 e9 ff 00 0e 2f 63 a9 3a 06 cb 7a c8 f1 66 a5 54 9c 0f 49 53 c8 e3 f5 19 fc f5 7a 41 cf d7 5c 4f fe 18 2f 6f 4b 35 cb a3 6b 18 fe f4 9a fa 0c f6 24 0c 4c 83 eb 8d ad 8f a1 d7 6f fc f5 75 6c 6e 3e 86 1c 89 5d ae e3 44 7b 68 1e 3e ba 5b 76 d2 48 fd 34 53 2a a1 3e fa 4f ae 94 47 b6 8b f2 d3 58 18 9c 63 8e 7b e8 88 24 70 0e 96 47 7d 44 bb 5c 29 6d 56 d9 6e 15 ac eb 04 38 dd b1 77 31 c9 c0 00 7d 4f be 07 b9 1a 8d d0 28 91 8e c7 f5 d0 28 47 24 01 c6 7e b8 f7 fb 6b 25 7b f8 89 61 b4 25 1d 7a b4 57 3b 6c a7 6c ef 49 50 ad 34 2e 46 e5 53 17 b1 1d db 38 c9 18 ce b9 01 eb 1a Data Ascii: HRuGYIxc?S%t',q&Zz/c:zfTISzA\O/oK5k$Louln>]D{h>[vH4S*>OGXc{$pG}D\)mVn8w1}O((G$~k%{a%zW;llIP4.FS8
2024-04-16 15:05:53 UTC	1369	IN	Data Raw: d5 c0 7b 4f 38 e2 9e 3f f0 26 31 ce 06 a2 fc d7 89 2c 36 e4 a5 b6 d4 4f 44 7c 44 b6 c4 76 da 6d 00 77 96 76 cf ef a5 1e a5 8e 33 eb e9 ae 84 74 f8 e2 ab af bf 7e f9 58 e5 96 72 e7 df bf 7f 42 86 f5 68 6f d9 aa 1e 24 b9 58 ea a4 65 a5 8a be 2e 67 08 39 95 63 fc 71 a8 3d 9b 3c 71 d8 f6 af 41 6c 82 15 55 a1 a9 a2 74 1b 43 89 1a 40 47 a7 98 93 9f cf 5a bf 9c 84 d1 d6 dc 64 b9 55 0a 49 ff 00 71 5d 7a 68 ff 00 b4 d7 ff 00 fe 25 12 1c 04 8f 1d db 8e 39 e0 77 cc 5d 7c 4b 6d 54 6c 94 89 47 1d 61 32 53 da 56 46 9a 6a 58 31 95 2e 48 ec c0 12 01 e4 f2 40 db 8d 57 92 73 c7 14 e3 ca f4 f7 ef ee 59 8f 1c 72 3a 7c 3f 7e ff 00 a2 12 d6 2b c9 b9 e6 f1 3d 89 f6 d3 d5 31 0a 8a 6d d1 80 5d 4e e4 c8 c8 27 be 34 df 83 6d b8 0f 12 07 10 3b 0e 30 78 3a 64 c7 5d 6b 70 d2 af 8b 07 Data Ascii: {O8?&1,6OD\|Dvmwv3t~XrBho$Xe.g9cq=<qAlUtC@GZdUIq]zh%9w]\|KmTlGa2SVFjX1.H@WsYr:\|?~+=1m]N'4m;0x:d]kp
2024-04-16 15:05:53 UTC	1369	IN	Data Raw: d2 15 6d af 14 79 07 73 a7 a9 6c 70 58 13 8c 8f 4d 4d 8a cf 31 db 15 53 a4 e1 8e ee 64 28 d1 ae 33 f9 7d be 9a 2e 4a 1d 46 db 7c 07 1c cd 4b 5d 24 5f 22 f4 d2 53 9e 45 44 5e 23 3b 67 3d 98 02 41 e3 83 c6 a5 1a ea ca c8 eb 10 88 56 8e be 54 35 54 4b 27 cb c5 23 29 25 36 aa f0 a1 58 ee c7 dc 69 e3 4b 1a 31 65 a7 33 bb 6d 50 ac db 81 f7 24 93 9f af 7c e9 fa d7 de bf b9 9e 08 67 51 81 d8 00 3d c0 3d 8e 35 53 ce d7 31 0f 97 7d 4e b3 d3 df 14 ad db 8a 5f 68 7e 46 35 52 5d a9 15 59 0c 9e a4 28 c1 e7 18 c7 7c 9c 9d 53 cb f1 72 ea 27 97 c0 b2 52 4b 09 52 22 69 dc a1 53 9e e7 6e 43 1f a6 40 e3 be b9 94 ad 34 5b 23 9a ba 18 f1 92 54 02 48 cf 00 19 3b 71 ec 07 a9 d4 79 fc b5 0e a5 90 c8 aa 57 c2 54 2d 1a 01 c1 c1 ee c7 d8 8d 6a 5a ec cd 56 e2 a5 a7 82 67 4c a2 f8 c5 Data Ascii: myslpXMM1Sd(3}.JF\|K]$_"SED^#;g=AVT5TK'#)%6XiK1e3mP$\|gQ==5S1}N_h~F5R]Y(\|Sr'RKR"iSnC@4[#TH;qyWT-jZVgL
2024-04-16 15:05:53 UTC	1369	IN	Data Raw: 98 99 24 10 49 f4 dc a0 a3 7d b9 c6 a8 be 1b 54 78 97 8b 8d 0b 4a d2 b4 34 6a c2 47 4d 85 bf 78 06 4a fa 1c 6a fa e1 08 35 d2 a2 b0 02 aa 1f 08 9c f6 91 06 50 fe 87 1f 96 ba 78 a0 f1 47 6b 66 2d 45 3c 8e 89 f4 17 ca b8 a8 85 34 a2 2a 8a 79 43 23 d3 cf 0a ca 8d 8e 1d 4a b0 20 f1 f4 ce 8e db 43 d2 c0 3b db 68 63 e9 ea 86 8c ec 6a 38 96 58 77 0e cc 62 73 ed df 0c 33 f7 1a a0 b8 dd a8 2d 74 4d 71 b9 b4 ea 8d 24 53 44 90 e3 7b 49 c8 75 00 82 4f e1 ec 06 79 d5 4d 3d 07 55 75 7b 0f 95 a5 7e 9a b3 31 24 28 7d f5 2e 09 cf e2 3f 80 7d 07 23 e9 ae 9e 9f 45 2c 90 59 25 2d b1 7f 9b 75 e8 bf ba 46 1c 99 b6 3d b1 e5 fe df a9 61 d4 dd 55 25 aa b0 5a a9 ba 87 f6 e5 c8 81 8a 6a 3a 18 d5 54 13 dd d8 f0 83 ef fd 75 06 97 a4 3a 87 a9 9e 4a ae ad ad 7a 28 26 55 51 6d a4 91 a3 Data Ascii: $I}TxJ4jGMxJj5PxGkf-E<4*yC#J C;hcj8Xwbs3-tMq$SD{IuOyM=Uu{~1$(}.?}#E,Y%-uF=aU%Zj:Tu:Jz(&UQm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.11	49869	154.62.106.12	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:50 UTC	385	OUT	GET /wp-content/uploads/2018/10/testimonial.jpg HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:53 UTC	393	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:53 GMT Content-Type: image/jpeg Content-Length: 193476 Connection: close Cache-Control: public, max-age=31536000 X-Hcdn-Image-Optimizer: f:jpeg q:85 w:1600 alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 290e2bf612fe8d6f994466f7d5bfb37a-bos-edge1 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 2.261 Accept-Ranges: bytes
2024-04-16 15:05:53 UTC	976	IN	Data Raw: ff d8 ff e1 00 80 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 05 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 4a 00 00 00 1b 01 05 00 01 00 00 00 52 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 69 87 04 00 01 00 00 00 5a 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 02 00 02 a0 04 00 01 00 00 00 40 06 00 00 03 a0 04 00 01 00 00 00 2b 04 00 00 00 00 00 00 ff ed 00 24 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 08 1c 01 5a 00 03 1b 25 47 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e Data Ascii: ExifII*JR(iZHH@+$Photoshop 3.08BIMZ%GC!"$"$C
2024-04-16 15:05:53 UTC	1369	IN	Data Raw: 84 d0 a0 12 13 45 21 04 84 26 85 04 52 13 08 01 24 d0 a0 04 04 eb 74 20 04 04 26 85 04 21 35 2c 09 3a 42 10 02 68 42 80 f3 7a 42 68 5e c1 cb 21 52 7f 28 08 1e ea 59 88 26 98 16 80 a5 81 04 e8 f7 4e 91 d1 0b 42 a4 d1 48 50 0a b7 4d 34 21 28 49 84 d0 85 48 5d 53 42 7d 37 52 c0 90 40 ea 9a 10 08 00 9e c9 9e 69 75 e4 84 04 fe 88 4d 0a 2f 74 27 48 40 14 8a 4e 90 80 10 80 9a 01 22 bd d3 4f a2 58 a1 26 8e a8 d9 00 21 1c f9 a6 a5 81 57 b2 69 a1 0b 42 47 d1 34 56 ca 01 26 10 02 3e 10 50 7e 68 42 68 28 10 84 c2 84 04 04 04 d0 a0 8a 42 00 42 85 21 34 20 0d d0 80 98 40 24 d0 9f b2 14 5f 54 fd 90 84 20 20 21 0a 14 10 9a 10 09 34 27 c9 00 bf 24 d0 84 00 8a 4c 22 90 05 21 3e 48 08 02 ba 20 21 08 01 34 21 00 26 84 20 00 84 74 4c 20 12 68 4d 00 93 46 c8 40 08 4d 08 01 34 Data Ascii: E!&R$t &!5,:BhBzBh^!R(Y&NBHPM4!(IH]SB}7R@iuM/t'H@N"OX&!WiBG4V&>P~hBh(BB!4 @$_T !4'$L"!>H !4!& tL hMF@M4
2024-04-16 15:05:53 UTC	1369	IN	Data Raw: a1 44 9a 13 08 01 09 a2 94 02 45 26 9a a0 48 4d 34 04 53 4d 09 60 48 4d 3a 40 24 27 48 a5 00 90 9d 22 90 05 6e 84 52 68 04 98 42 6a 00 42 13 40 01 02 90 02 6a 14 02 69 7b 27 d1 00 93 40 4e 94 08 49 a1 08 50 45 26 50 a0 12 68 fc d0 84 04 21 34 02 fa 26 8a 3d 53 08 50 f8 42 11 cd 40 34 0f 94 01 ba 14 03 42 49 a1 41 08 4d 00 14 21 08 01 08 42 00 4e 92 4d 40 24 fd d0 84 02 b4 d0 81 cd 00 26 92 14 03 42 10 80 10 84 20 00 9a 10 85 04 74 41 42 03 ce 90 9a 17 a8 73 31 52 68 e4 9a 18 89 34 0f 74 05 00 04 d1 f5 42 58 04 26 85 0a 08 42 14 03 45 21 08 01 09 a0 21 41 01 09 d2 00 42 13 08 01 01 09 84 02 4d 08 50 07 ba 68 42 14 10 8e 89 aa 41 26 84 28 01 3a 28 20 21 0a 08 4f e8 8a 40 21 ee 9a 74 85 2c 82 4d 14 9a 58 12 13 a4 29 65 04 26 85 6c 09 34 26 a0 42 42 68 52 c5 Data Ascii: DE&HM4SM`HM:@$'H"nRhBjB@ji{'@NIPE&Ph!4&=SPB@4BIAM!BNM@$&B tABs1Rh4tBX&BE!!ABMPhBA&(:( !O@!t,MX)e&l4&BBhR
2024-04-16 15:05:53 UTC	1369	IN	Data Raw: 4b e4 a2 4d 08 4b 25 02 39 a6 10 8d 96 82 91 cd 3a 40 52 c0 ba a1 3a dd 1c 95 b1 40 8a 4d 09 62 85 49 a1 0a 0a 04 e9 08 4b 01 48 a4 d0 96 01 01 09 85 2c a2 f8 4d 08 54 80 9a 29 0a 00 42 68 54 a8 02 13 42 0a 04 21 34 00 84 26 80 10 13 a4 20 12 68 4d 00 82 68 4d 00 ab 64 f7 45 26 a0 15 26 84 d0 09 34 26 85 04 27 48 09 60 10 84 d4 4c 02 68 42 00 09 a0 21 0a 14 98 42 3a f5 40 1d 50 13 42 10 10 84 d0 a2 4d 08 e8 80 29 34 93 40 14 84 23 91 50 05 6e 84 d0 96 41 21 34 20 15 26 84 20 0a 42 13 40 08 fa 21 01 00 7d 10 9a 14 28 6e 84 21 00 26 84 28 01 08 42 00 40 42 68 01 08 47 44 00 84 26 80 49 a2 90 80 29 08 4d 4b 28 ba a6 84 20 04 21 0a 00 42 13 40 24 d0 84 00 84 52 3a 20 04 21 34 00 50 84 20 04 21 0a 00 4d 08 40 08 08 42 14 f3 c4 d1 d5 0b d2 39 9a 0e a9 d2 10 84 Data Ascii: KMK%9:@R:@MbIKH,MT)BhTB!4& hMhMdE&&4&'H`LhB!B:@PBM)4@#PnA!4 & B@!}(n!&(B@BhGD&I)MK( !B@$R: !4P !M@B9
2024-04-16 15:05:53 UTC	1369	IN	Data Raw: a1 2c a0 84 21 40 34 0d d0 84 b0 1d 50 84 28 01 34 04 0e 68 00 7b 94 7c 27 48 a4 b0 08 4f 64 28 01 00 26 84 02 4d 08 40 09 a1 08 00 21 34 28 00 21 09 a1 44 9a 68 40 2f 64 d0 9a 01 27 48 09 a0 12 68 4d 00 21 01 34 02 4c 23 dd 08 01 34 21 00 21 09 a5 80 42 00 4d 2c 09 34 22 bd 90 05 21 34 f7 4b 02 45 26 84 b0 24 52 7d 13 ae aa 58 15 22 93 42 58 15 22 93 e4 9a 58 a2 35 ba 63 92 7b 52 15 02 45 26 9a 58 a2 34 9d 27 ba 07 64 b1 42 08 52 a4 a9 05 09 34 c0 ee 9d 20 a2 29 a2 ba a6 10 50 90 a5 d1 08 28 54 84 fa 27 48 28 54 8a 4d 08 01 09 d2 29 05 09 34 e9 14 85 a1 26 9d 22 bd 92 c5 00 46 e8 a4 d0 94 24 e9 14 9d 21 52 12 68 a4 e9 05 09 34 52 68 04 9a 13 a4 b2 89 34 21 00 21 14 9a 00 08 4e 90 a0 04 52 68 42 85 22 90 84 01 48 a4 d1 f4 4b 02 a4 52 74 8a 4b 20 a9 09 a2 Data Ascii: ,!@4P(4h{\|'HOd(&M@!4(!Dh@/d'HhM!4L#4!!BM,4"!4KE&$R}X"BX"X5c{RE&X4'dBR4 )P(T'H(TM)4&"F$!Rh4Rh4!!NRhB"HKRtK
2024-04-16 15:05:53 UTC	1369	IN	Data Raw: 68 42 58 04 52 68 4b 02 4f e8 84 f6 4b 02 47 44 d0 a5 8a 17 20 98 45 27 c9 2c 50 93 45 26 a5 96 85 49 d2 13 a5 05 09 34 27 48 5a 12 68 42 00 42 68 0a 00 42 7b 21 00 a9 3a 47 d5 34 b0 24 21 34 b2 82 10 84 b0 08 4d 0a 58 04 d0 02 36 f7 4b 00 84 26 a5 80 42 7e e8 ae a9 65 04 21 34 b0 08 45 26 a5 90 49 a1 1e e8 50 4d 1d 50 a0 04 26 84 00 84 21 00 26 8a 42 00 42 13 a4 00 42 02 13 40 24 fa 20 84 d4 b2 d0 93 47 d1 09 60 28 21 34 25 80 45 27 48 52 c0 21 30 84 b0 2a 4e 90 9a 96 51 26 84 25 80 42 68 41 40 84 21 41 43 42 11 ba 58 a1 f3 42 11 49 62 81 08 ad d3 a5 0b 40 10 84 c2 58 a0 ad 91 48 4f aa 59 68 49 a1 34 b1 42 09 d2 13 0a 16 81 00 21 34 b1 40 9a 10 96 50 45 6e 9a 12 c0 26 92 6a 58 0a 45 26 84 01 49 a1 09 65 0a 46 e8 4d 2c 09 3e a8 4d 4b 02 01 30 84 25 80 01 Data Ascii: hBXRhKOKGD E',PE&I4'HZhBBhB{!:G4$!4MX6K&B~e!4E&IPMP&!&BBB@$ G`(!4%E'HR!0*NQ&%BhA@!ACBXBIb@XHOYhI4B!4@PEn&jXE&IeFM,>MK0%
2024-04-16 15:05:53 UTC	1369	IN	Data Raw: 52 42 14 00 84 26 85 a0 42 13 54 50 52 13 42 0a 04 21 34 14 2a 4d 34 28 28 49 a1 34 b0 24 d0 84 00 84 26 96 03 92 10 9a 59 41 08 42 58 0a 4d 08 4b 00 84 21 2c 02 13 40 4b 00 8a 4d 09 62 84 80 9a 12 c5 02 13 a4 52 58 a1 22 93 42 58 a1 52 74 9a 12 c5 0a 91 49 d2 29 2c 50 a9 14 a5 48 a4 b1 44 69 0a 48 a4 b2 51 1a 45 29 21 5b 14 46 93 a4 d1 49 62 88 a7 49 a2 95 b1 42 a4 d1 48 50 50 91 49 a1 5b 20 20 27 48 a4 b0 24 27 48 40 2a 28 4d 08 04 84 d0 a9 04 84 d1 48 4a 12 13 a4 52 01 21 34 d0 1e 76 84 d2 0b 7d 98 b4 08 42 69 64 a1 26 50 9d 26 e1 40 84 52 14 b2 d0 21 34 25 8a 04 26 10 96 4a 04 26 85 2c b4 2a 4d 09 ec ad 8a 12 68 4d 2c 50 21 01 35 2c 50 a9 14 9d 22 92 c5 02 13 ad 91 49 62 84 9a 10 a5 8a 04 52 68 4d c2 82 91 49 a1 2c 50 52 2b ba 13 a5 2c 50 21 08 4b 14 Data Ascii: RB&BTPRB!4M4((I4$&YABXMK!,@KMbRX"BXRtI),PHDiHQE)![FIbIBHPPI[ 'H$'H@(MHJR!4v}Bid&P&@R!4%&J&,*MhM,P!5,P"IbRhMI,PR+,P!K
2024-04-16 15:05:53 UTC	1369	IN	Data Raw: 01 a1 08 40 08 42 10 02 69 26 80 10 84 20 1a 10 80 80 13 42 10 0d 09 26 10 0d 34 93 08 01 34 93 1c d0 0d 08 42 01 84 d2 09 84 03 08 40 42 01 a6 80 85 0a 09 a4 9a 10 13 09 26 96 01 34 21 2c 02 61 24 c2 14 13 49 35 00 21 08 54 02 68 42 0a 04 d2 4d 40 08 42 10 02 68 42 a2 81 08 42 58 04 21 09 64 04 d0 85 40 23 aa 3a 21 00 21 34 28 01 09 a1 50 08 42 74 a5 94 49 84 04 d0 09 34 21 2c 80 84 00 9a 59 45 ba 68 42 58 04 27 49 a5 8a 22 9a 68 4b 14 24 d0 8a 4b 00 84 22 92 c5 02 29 30 10 a8 a1 52 29 34 e9 05 0a 91 49 d2 29 08 45 c1 56 42 ba 91 41 01 48 0a 6c 6a 90 68 52 a4 02 a4 52 68 40 2a 45 26 84 07 9b 21 08 5b 48 c6 84 21 2c 0d 24 21 00 d0 84 20 04 d2 4d 00 74 4d 24 d4 00 9a 48 40 3d a9 34 91 f0 80 69 a4 84 03 42 10 a0 1a 10 84 00 9a 10 85 04 21 08 06 84 21 40 30 Data Ascii: @Bi& B&44B@B&4!,a$I5!ThBM@BhBBX!d@#:!!4(PBtI4!,YEhBX'I"hK$K")0R)4I)EVBAHljhRRh@*E&![H!,$! MtM$H@=4iB!!@0
2024-04-16 15:05:53 UTC	1369	IN	Data Raw: a1 01 24 24 8b 40 4a d0 92 3a a8 09 21 24 04 14 49 09 20 20 24 80 52 42 01 a1 08 40 09 94 90 80 68 49 30 85 1a 69 21 00 ed 30 a2 98 40 34 ed 45 30 80 69 a4 84 03 4d 24 21 06 9a 8a 68 28 68 49 34 28 26 92 10 94 34 21 08 28 68 49 35 2c 50 d0 92 6a 8a 1a 02 10 a5 8a 18 42 49 a0 a1 a1 24 d2 ca 09 a4 9a 58 a0 42 10 96 06 84 93 4b 00 84 21 41 40 9a 49 a1 03 a2 69 21 0b 43 42 10 82 81 34 21 2c 50 26 92 68 28 13 4a d3 09 62 81 08 40 52 c5 0d 08 4d 2c b4 08 42 12 c9 40 13 40 42 59 68 10 84 d2 c5 00 42 13 4b 14 08 42 12 c9 43 42 10 96 28 68 42 12 cb 40 84 d0 a5 92 81 08 42 16 81 34 21 51 40 9a 10 a0 a0 42 10 80 10 84 25 8a 04 21 09 62 81 08 42 0a 04 d2 4d 05 02 10 9a 58 a0 42 10 3e 12 c5 02 68 42 58 a0 4d 08 1f 28 06 84 04 d2 c5 00 42 13 e8 96 28 02 69 04 d0 50 26 Data Ascii: $$@J:!$I $RB@hI0i!0@4E0iM$!h(hI4(&4!(hI5,PjBI$XBK!A@Ii!CB4!,P&h(Jb@RM,B@@BYhBKBCB(hB@B4!Q@B%!bBMXB>hBXM(B(iP&
2024-04-16 15:05:53 UTC	1369	IN	Data Raw: 00 27 48 42 80 13 49 30 84 04 d0 84 28 21 08 40 3a 42 10 a0 1a 10 84 00 84 d0 ad 80 42 10 a0 04 21 08 51 a4 9a 10 82 42 68 40 24 d0 84 02 42 68 41 42 4c 24 9a 10 13 49 34 00 9a 49 a0 04 d2 4c 20 1a 12 4d 00 d0 8e a8 40 30 9a 49 a1 46 9a 41 08 06 13 49 08 06 98 49 08 51 a6 90 4d 08 09 a4 9a 14 61 35 10 53 40 34 ed 24 c2 00 4d 24 20 1f 44 d2 4d 00 26 92 10 0d 34 82 10 0d 08 42 01 a1 24 d0 02 10 84 20 d0 92 10 12 42 48 40 34 21 08 01 3b 49 08 06 84 ba a6 80 68 49 08 07 7b a6 92 10 83 42 10 80 10 84 20 04 d2 42 01 a6 92 15 03 42 49 a0 02 9a 48 40 34 24 3b 26 a8 04 21 08 06 9a 8a 10 12 42 49 a0 04 d2 42 59 06 80 92 15 b1 43 42 2d 08 40 42 10 a8 1a 10 92 01 a1 24 ed 00 ed 09 14 20 3c d5 08 42 d8 64 f9 18 42 10 86 23 42 49 a0 04 c2 49 a1 41 08 4d 40 01 08 b4 20 Data Ascii: 'HBI0(!@:BB!QBh@$BhABL$I4IL M@0IFAIIQMa5S@4$M$ DM&4B$ BH@4!;IhI{B BBIH@4$;&!BIBYCB-@B$ <BdB#BIIAM@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.11	49872	142.251.15.91	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:50 UTC	1447	OUT	GET /ptracking?html5=1&video_id=wAD9uO9YAQw&cpn=F6GU1QEdhoMLD-Np&ei=y5MeZqSPB9aoy_sPxcuI0A8&ptk=youtube_none&pltype=contentugc HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1713279945329&flash=0&frm=2&u_tz=120&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1267%2C713&vis=2&wgl=true&ca_type=image sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-YouTube-Utc-Offset: 120 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240409.01.00 X-YouTube-Time-Zone: Europe/Zurich X-Goog-Visitor-Id: CgtJMG1ONlpYUjdsOCjIp_qwBjIKCgJVUxIEGgAgKA%3D%3D sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/wAD9uO9YAQw?playlist=wAD9uO9YAQw&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&origin=https%3A%2F%2Fniceindiatravel.com&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
2024-04-16 15:05:51 UTC	410	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Date: Tue, 16 Apr 2024 15:05:51 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate X-Content-Type-Options: nosniff Server: Video Stats Server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.11	49873	142.251.15.91	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:50 UTC	2669	OUT	GET /api/stats/playback?ns=yt&el=embedded&cpn=F6GU1QEdhoMLD-Np&ver=2&cmt=0.212&fmt=397&fs=0&rt=4.271&euri=https%3A%2F%2Fniceindiatravel.com%2F&lact=4311&cl=623129822&mos=1&volume=100&cbr=Chrome&cbrver=117.0.0.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240409.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&epm=1&delay=4&hl=en_US&cr=US&len=157&fexp=v1%2C23858057%2C125239%2C21348%2C76094%2C54572%2C73455%2C230596%2C84737%2C36318%2C6271%2C26443548%2C7111%2C31786%2C4557%2C9954%2C1192%2C10512%2C15711%2C273%2C6966%2C2%2C6689%2C2007%2C4957%2C4115%2C12518%2C1263%2C5498%2C796%2C643%2C5538%2C2893%2C2%2C531%2C819%2C531%2C4712%2C5599%2C1104%2C4465&rtn=14&afmt=251&size=1267%3A713&inview=0&muted=1&vis=3&docid=wAD9uO9YAQw&ei=y5MeZqSPB9aoy_sPxcuI0A8&plid=AAYWOBKoz4xd3wIM&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2FwAD9uO9YAQw%3Fplaylist%3DwAD9uO9YAQw%26iv_load_policy%3D3%26enablejsapi%3D1%26disablekb%3D1%26autoplay%3D1%26controls%3D0%26showinfo%3D0%26rel%3D0%26loop%3D1%26origin%3Dhttps%253A%252F%252Fniceindiatravel.com%26widgetid%3D1&list=TLGG0nOp5Ks1AkExNjA0MjAyNA&of=wbAUJoLFDaeeOSJrHXH1sg&vm=CAEQABgEOjJBSHFpSlRJaWlUV3AtaVVHU3dxLUpoNjVrV0taQVJBeTRCbVVLMmJUWXhKOURvQUVkd2J3QVBta0tES0l3V1JHa3UzUFV5akd4WUhVUEZvYWZzdmJ3VzNvV3ZjMWR6Q3ZYY3B0Wjd2aWh4NV9qdk9kR3NGMFRSLTdDcmRpYy1ydVI4bW1ZYi1oNjd3Tzc2cXd3bXBXcG1FMTliMUhRM0x4dW53SEV5RUFXNEFoAg HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1713279945329&flash=0&frm=2&u_tz=120&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1267%2C713&vis=2&wgl=true&ca_type=image sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-YouTube-Utc-Offset: 120 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240409.01.00 X-YouTube-Time-Zone: Europe/Zurich X-Goog-Visitor-Id: CgtJMG1ONlpYUjdsOCjIp_qwBjIKCgJVUxIEGgAgKA%3D%3D sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/wAD9uO9YAQw?playlist=wAD9uO9YAQw&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&origin=https%3A%2F%2Fniceindiatravel.com&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
2024-04-16 15:05:51 UTC	410	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Date: Tue, 16 Apr 2024 15:05:51 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate X-Content-Type-Options: nosniff Server: Video Stats Server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.11	49871	172.217.135.202	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:50 UTC	1761	OUT	GET /videoplayback?expire=1713301547&ei=y5MeZqSPB9aoy_sPxcuI0A8&ip=81.181.57.52&id=o-AGTEz6yrZN30zWRHetU01zfPZPIBkqXwN_jxSqpNGk-M&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=rv&mm=31%2C29&mn=sn-p5qlsn76%2Csn-p5qddn7r&ms=au%2Crdu&mv=m&mvi=5&pl=26&initcwndbps=1037500&bui=AaUN6a0X-vPuPWnoZdJnY8gcaw5_Rec69zGixzS_kVy6dh8yJJHbZPIDav7sGh5eMsIrcUMSgNZoV-eJ&spc=UWF9f_C907pjE2i9QlVivDiO3bFloqFrBkw3MS1j9d3XXjQUG-40uVYW-Q&vprv=1&svpuc=1&mime=audio%2Fwebm&ns=8Io3oEW7FSAr8VYj4CRq5ycQ&gir=yes&clen=2888165&dur=156.941&lmt=1693419053011705&mt=1713279665&fvip=5&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=4432434&n=65_ILddd0oaXCA&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRgIhAIqn_cmzA9wxw9Qv3XmYLmzgIYuMyqkUCJ74E3gyfGPmAiEAyvaE7AH2ALtvgZL7TmmJy3gr_gksqFvhADtsOLFIvXM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ALClDIEwRQIhALaMd8X8P3LTQ-dzb36htdQmyx7RegKRkqR_w8GTV_GCAiAXEkpCyRYR_s7h1aB1LlSa8sV2f8SVngOiCKBfSgfTuQ%3D%3D&alr=yes&cpn=F6GU1QEdhoMLD-Np&cver=1.20240409.01.00&range=131607-285234&rn=5&rbuf=7526&pot=MnRHeEeFuHFwnkdAG16jL-aDngYNrsZJj72wzzuSl1KI99-wPjwpBfmvgTdvejBBkb8hRejODoqY6-NrNRoYj5BeGx9EzDVgBwEAWR3SrWqoEDJk5EzPIQjvWotgBGd18NKfWwDX1mK17wp_gi85l7DQQ1Dbbw==&ump=1&srfvp=1 HTTP/1.1 Host: rr5---sn-p5qlsn76.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:51 UTC	495	IN	HTTP/1.1 200 OK Last-Modified: Wed, 30 Aug 2023 18:10:53 GMT Content-Type: application/vnd.yt-ump Date: Tue, 16 Apr 2024 15:05:51 GMT Expires: Tue, 16 Apr 2024 15:05:51 GMT Cache-Control: private, max-age=21296 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-04-16 15:05:51 UTC	3	IN	Data Raw: 34 0d 0a Data Ascii: 4
2024-04-16 15:05:51 UTC	4	IN	Data Raw: 3a 02 08 01 Data Ascii: :
2024-04-16 15:05:51 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-16 15:05:51 UTC	4	IN	Data Raw: 33 33 0d 0a Data Ascii: 33
2024-04-16 15:05:51 UTC	51	IN	Data Raw: 14 31 08 00 12 0b 77 41 44 39 75 4f 39 59 41 51 77 18 fb 01 20 f9 a5 f1 c8 fd 84 81 03 30 97 84 08 6a 0c 08 fb 01 10 f9 a5 f1 c8 fd 84 81 03 70 9c b0 09 Data Ascii: 1wAD9uO9YAQw 0jp
2024-04-16 15:05:51 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-16 15:05:51 UTC	7	IN	Data Raw: 32 35 38 32 31 0d 0a Data Ascii: 25821
2024-04-16 15:05:51 UTC	5	IN	Data Raw: 15 dd c0 12 00 Data Ascii:
2024-04-16 15:05:51 UTC	16384	IN	Data Raw: 76 20 2b e7 61 fb 81 6a 8e d0 49 a7 20 89 35 5d 03 5b 9c 80 f1 d9 60 b1 77 06 a1 0d 91 14 32 56 6b b9 5e 87 5e bf ee 88 43 98 89 6f ad 10 4f 99 74 15 c6 64 fa 8c 35 e8 ef c1 81 60 19 a7 bc fc 22 06 c5 79 7a 4e 4a bf 1c 0c 19 2a 38 69 6b 47 eb 8b a5 a6 7b 81 5f 2d 11 83 a9 a0 4f be 64 33 24 d6 f5 ef d2 d8 8c 23 a1 04 3a 43 8c 56 47 52 fe b8 94 46 30 87 32 f5 5f 0c 1e 59 91 b7 65 71 31 88 76 ef 76 79 53 d8 27 90 85 08 a7 fe 8d 4d a9 f7 31 26 5a 5c 39 71 c3 e1 41 ac c3 b0 18 b7 5d 00 d3 95 aa a7 99 54 46 56 35 59 b4 ec df e0 b7 87 8a 1e e6 68 f9 4d 6b 25 47 f9 54 30 69 56 d5 27 f6 8b e1 ac 58 1f 9b 6d e7 8b d9 4a b6 7f f4 76 16 ef 92 83 e5 1e ab 1c 76 62 38 16 33 9e 28 81 44 b1 1f 13 4a 14 b3 0e 64 5e c2 b9 5c b9 1d 64 9a 2b 4e 57 b8 86 2a 2e c6 40 ea 2d ae Data Ascii: v +ajI 5][`w2Vk^^CoOtd5`"yzNJ8ikG{_-Od3$#:CVGRF02_Yeq1vvyS'M1&Z\9qA]TFV5YhMk%GT0iV'XmJvvb83(DJd^\d+NW.@-
2024-04-16 15:05:51 UTC	16384	IN	Data Raw: 1a cb 16 eb 60 11 47 4e b6 00 5e 2d c6 70 5c 14 30 c6 8b 5b aa ea 38 f2 ce 2b 06 1c 07 eb de c4 8f ac 39 4e a6 83 7d dc 39 7a 26 79 67 a2 7c 47 e3 63 66 e8 c9 ca c4 f0 af 35 d0 de 81 a1 6d 9a 65 97 23 0f 19 ee d3 e0 ac 95 60 67 11 fb 0c a3 41 21 81 20 d1 80 fc 00 43 1c a8 78 07 a6 f8 ab 67 8a 11 c0 18 14 df f5 57 33 64 35 fa e0 fd 0c 37 af 92 9d 72 0a ec 58 d3 8f 85 e3 97 01 ed e9 f0 7c e0 1a e4 a4 38 6b 34 3a 85 e3 2c 10 50 01 eb 50 99 db f6 d6 3a 77 40 4b ab 38 d7 5f a0 76 5d a4 af 70 a2 fb 57 8e 1a a4 ab d1 ed e6 b1 22 2c 1a 3c bc de 48 9b 97 c5 e8 34 50 11 ff e9 37 17 07 ed 14 2a f0 89 43 f8 a0 b0 4f 5b d6 e3 75 ea 36 e6 8c 92 d5 20 66 db 7d 87 b8 1c ae 78 f3 16 87 54 ef 1d 84 d6 59 f3 41 1b b2 84 31 c6 e6 58 81 d2 0e ef 0b 3b c4 48 1a db d6 1b ab c2 Data Ascii: `GN^-p\0[8+9N}9z&yg\|Gcf5me#`gA! CxgW3d57rX\|8k4:,PP:w@K8_v]pW",<H4P7*CO[u6 f}xTYA1X;H
2024-04-16 15:05:53 UTC	1880	OUT	GET /videoplayback?expire=1713301547&ei=y5MeZqSPB9aoy_sPxcuI0A8&ip=81.181.57.52&id=o-AGTEz6yrZN30zWRHetU01zfPZPIBkqXwN_jxSqpNGk-M&itag=398&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=rv&mm=31%2C29&mn=sn-p5qlsn76%2Csn-p5qddn7r&ms=au%2Crdu&mv=m&mvi=5&pl=26&initcwndbps=1037500&bui=AaUN6a0X-vPuPWnoZdJnY8gcaw5_Rec69zGixzS_kVy6dh8yJJHbZPIDav7sGh5eMsIrcUMSgNZoV-eJ&spc=UWF9f_C907pjE2i9QlVivDiO3bFloqFrBkw3MS1j9d3XXjQUG-40uVYW-Q&vprv=1&svpuc=1&mime=video%2Fmp4&ns=8Io3oEW7FSAr8VYj4CRq5ycQ&gir=yes&clen=15356387&dur=156.920&lmt=1693475295824447&mt=1713279665&fvip=5&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=4437434&n=65_ILddd0oaXCA&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIgDgSjMet05B9aDksP9m164a7Ii8bfIUCpyPIF0Iu1qVQCIQDAgJB0tAqjMUhsCFgApfB_yN2W-bhf-qss2eYwVMrOtg%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ALClDIEwRQIhALaMd8X8P3LTQ-dzb36htdQmyx7RegKRkqR_w8GTV_GCAiAXEkpCyRYR_s7h1aB1LlSa8sV2f8SVngOiCKBfSgfTuQ%3D%3D&alr=yes&cpn=F6GU1QEdhoMLD-Np&cver=1.20240409.01.00&range=657413-2460933&rn=7&rbuf=11660&pot=MnRHeEeFuHFwnkdAG16jL-aDngYNrsZJj72wzzuSl1KI99-wPjwpBfmvgTdvejBBkb8hRejODoqY6-NrNRoYj5BeGx9EzDVgBwEAWR3SrWqoEDJk5EzPIQjvWotgBGd18NKfWwDX1mK17wp_gi85l7DQQ1Dbbw==&ump=1&srfvp=1 HTTP/1.1 Host: rr5---sn-p5qlsn76.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:53 UTC	526	IN	HTTP/1.1 200 OK Last-Modified: Thu, 31 Aug 2023 09:48:15 GMT Content-Type: application/vnd.yt-ump Date: Tue, 16 Apr 2024 15:05:53 GMT Expires: Tue, 16 Apr 2024 15:05:53 GMT Cache-Control: private, max-age=21294 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Restrict-Formats-Hint: None X-Content-Type-Options: nosniff Server: gvs 1.0
2024-04-16 15:05:54 UTC	1762	OUT	GET /videoplayback?expire=1713301547&ei=y5MeZqSPB9aoy_sPxcuI0A8&ip=81.181.57.52&id=o-AGTEz6yrZN30zWRHetU01zfPZPIBkqXwN_jxSqpNGk-M&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=rv&mm=31%2C29&mn=sn-p5qlsn76%2Csn-p5qddn7r&ms=au%2Crdu&mv=m&mvi=5&pl=26&initcwndbps=1037500&bui=AaUN6a0X-vPuPWnoZdJnY8gcaw5_Rec69zGixzS_kVy6dh8yJJHbZPIDav7sGh5eMsIrcUMSgNZoV-eJ&spc=UWF9f_C907pjE2i9QlVivDiO3bFloqFrBkw3MS1j9d3XXjQUG-40uVYW-Q&vprv=1&svpuc=1&mime=audio%2Fwebm&ns=8Io3oEW7FSAr8VYj4CRq5ycQ&gir=yes&clen=2888165&dur=156.941&lmt=1693419053011705&mt=1713279665&fvip=5&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=4432434&n=65_ILddd0oaXCA&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRgIhAIqn_cmzA9wxw9Qv3XmYLmzgIYuMyqkUCJ74E3gyfGPmAiEAyvaE7AH2ALtvgZL7TmmJy3gr_gksqFvhADtsOLFIvXM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ALClDIEwRQIhALaMd8X8P3LTQ-dzb36htdQmyx7RegKRkqR_w8GTV_GCAiAXEkpCyRYR_s7h1aB1LlSa8sV2f8SVngOiCKBfSgfTuQ%3D%3D&alr=yes&cpn=F6GU1QEdhoMLD-Np&cver=1.20240409.01.00&range=285235-563147&rn=8&rbuf=14339&pot=MnRHeEeFuHFwnkdAG16jL-aDngYNrsZJj72wzzuSl1KI99-wPjwpBfmvgTdvejBBkb8hRejODoqY6-NrNRoYj5BeGx9EzDVgBwEAWR3SrWqoEDJk5EzPIQjvWotgBGd18NKfWwDX1mK17wp_gi85l7DQQ1Dbbw==&ump=1&srfvp=1 HTTP/1.1 Host: rr5---sn-p5qlsn76.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:54 UTC	495	IN	HTTP/1.1 200 OK Last-Modified: Wed, 30 Aug 2023 18:10:53 GMT Content-Type: application/vnd.yt-ump Date: Tue, 16 Apr 2024 15:05:54 GMT Expires: Tue, 16 Apr 2024 15:05:54 GMT Cache-Control: private, max-age=21293 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-04-16 15:06:10 UTC	1763	OUT	GET /videoplayback?expire=1713301547&ei=y5MeZqSPB9aoy_sPxcuI0A8&ip=81.181.57.52&id=o-AGTEz6yrZN30zWRHetU01zfPZPIBkqXwN_jxSqpNGk-M&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=rv&mm=31%2C29&mn=sn-p5qlsn76%2Csn-p5qddn7r&ms=au%2Crdu&mv=m&mvi=5&pl=26&initcwndbps=1037500&bui=AaUN6a0X-vPuPWnoZdJnY8gcaw5_Rec69zGixzS_kVy6dh8yJJHbZPIDav7sGh5eMsIrcUMSgNZoV-eJ&spc=UWF9f_C907pjE2i9QlVivDiO3bFloqFrBkw3MS1j9d3XXjQUG-40uVYW-Q&vprv=1&svpuc=1&mime=audio%2Fwebm&ns=8Io3oEW7FSAr8VYj4CRq5ycQ&gir=yes&clen=2888165&dur=156.941&lmt=1693419053011705&mt=1713279665&fvip=5&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=4432434&n=65_ILddd0oaXCA&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRgIhAIqn_cmzA9wxw9Qv3XmYLmzgIYuMyqkUCJ74E3gyfGPmAiEAyvaE7AH2ALtvgZL7TmmJy3gr_gksqFvhADtsOLFIvXM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ALClDIEwRQIhALaMd8X8P3LTQ-dzb36htdQmyx7RegKRkqR_w8GTV_GCAiAXEkpCyRYR_s7h1aB1LlSa8sV2f8SVngOiCKBfSgfTuQ%3D%3D&alr=yes&cpn=F6GU1QEdhoMLD-Np&cver=1.20240409.01.00&range=563148-1120503&rn=9&rbuf=27908&pot=MnRHeEeFuHFwnkdAG16jL-aDngYNrsZJj72wzzuSl1KI99-wPjwpBfmvgTdvejBBkb8hRejODoqY6-NrNRoYj5BeGx9EzDVgBwEAWR3SrWqoEDJk5EzPIQjvWotgBGd18NKfWwDX1mK17wp_gi85l7DQQ1Dbbw==&ump=1&srfvp=1 HTTP/1.1 Host: rr5---sn-p5qlsn76.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:06:10 UTC	495	IN	HTTP/1.1 200 OK Last-Modified: Wed, 30 Aug 2023 18:10:53 GMT Content-Type: application/vnd.yt-ump Date: Tue, 16 Apr 2024 15:06:10 GMT Expires: Tue, 16 Apr 2024 15:06:10 GMT Cache-Control: private, max-age=21277 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-04-16 15:06:10 UTC	1882	OUT	GET /videoplayback?expire=1713301547&ei=y5MeZqSPB9aoy_sPxcuI0A8&ip=81.181.57.52&id=o-AGTEz6yrZN30zWRHetU01zfPZPIBkqXwN_jxSqpNGk-M&itag=398&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=rv&mm=31%2C29&mn=sn-p5qlsn76%2Csn-p5qddn7r&ms=au%2Crdu&mv=m&mvi=5&pl=26&initcwndbps=1037500&bui=AaUN6a0X-vPuPWnoZdJnY8gcaw5_Rec69zGixzS_kVy6dh8yJJHbZPIDav7sGh5eMsIrcUMSgNZoV-eJ&spc=UWF9f_C907pjE2i9QlVivDiO3bFloqFrBkw3MS1j9d3XXjQUG-40uVYW-Q&vprv=1&svpuc=1&mime=video%2Fmp4&ns=8Io3oEW7FSAr8VYj4CRq5ycQ&gir=yes&clen=15356387&dur=156.920&lmt=1693475295824447&mt=1713279665&fvip=5&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=4437434&n=65_ILddd0oaXCA&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIgDgSjMet05B9aDksP9m164a7Ii8bfIUCpyPIF0Iu1qVQCIQDAgJB0tAqjMUhsCFgApfB_yN2W-bhf-qss2eYwVMrOtg%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ALClDIEwRQIhALaMd8X8P3LTQ-dzb36htdQmyx7RegKRkqR_w8GTV_GCAiAXEkpCyRYR_s7h1aB1LlSa8sV2f8SVngOiCKBfSgfTuQ%3D%3D&alr=yes&cpn=F6GU1QEdhoMLD-Np&cver=1.20240409.01.00&range=2460934-4325537&rn=10&rbuf=29027&pot=MnRHeEeFuHFwnkdAG16jL-aDngYNrsZJj72wzzuSl1KI99-wPjwpBfmvgTdvejBBkb8hRejODoqY6-NrNRoYj5BeGx9EzDVgBwEAWR3SrWqoEDJk5EzPIQjvWotgBGd18NKfWwDX1mK17wp_gi85l7DQQ1Dbbw==&ump=1&srfvp=1 HTTP/1.1 Host: rr5---sn-p5qlsn76.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:06:10 UTC	526	IN	HTTP/1.1 200 OK Last-Modified: Thu, 31 Aug 2023 09:48:15 GMT Content-Type: application/vnd.yt-ump Date: Tue, 16 Apr 2024 15:06:10 GMT Expires: Tue, 16 Apr 2024 15:06:10 GMT Cache-Control: private, max-age=21277 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Restrict-Formats-Hint: None X-Content-Type-Options: nosniff Server: gvs 1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.11	49870	154.62.106.12	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:50 UTC	377	OUT	GET /wp-content/uploads/2018/10/4-1.jpg HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:52 UTC	392	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:52 GMT Content-Type: image/jpeg Content-Length: 87549 Connection: close Cache-Control: public, max-age=31536000 X-Hcdn-Image-Optimizer: f:jpeg q:85 w:1600 alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 83a94707becf1236166555871fbeb7ca-bos-edge2 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 1.727 Accept-Ranges: bytes
2024-04-16 15:05:52 UTC	977	IN	Data Raw: ff d8 ff e1 00 80 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 05 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 4a 00 00 00 1b 01 05 00 01 00 00 00 52 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 69 87 04 00 01 00 00 00 5a 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 02 00 02 a0 04 00 01 00 00 00 58 02 00 00 03 a0 04 00 01 00 00 00 90 01 00 00 00 00 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e Data Ascii: ExifII*JR(iZHHXC!"$"$C
2024-04-16 15:05:52 UTC	1369	IN	Data Raw: 4a 28 1a 1c 7e da 38 1a 1c 6a 21 94 40 34 6c 68 c0 68 42 ea c2 a9 44 c6 8c 14 e8 e1 74 60 ba 92 80 b9 26 13 42 17 ad 2b c7 5c 17 51 55 e4 40 ba 1e 3f b6 94 c7 ed a1 c6 a4 a1 bc 93 0a 74 3c 74 a0 5d 0f 1d 49 43 79 27 c7 f6 d0 85 fd b4 a0 5d 0f 1d 49 55 79 27 c7 43 c7 4a 63 5d 8d 49 55 79 27 c7 43 c7 4a 63 5d 8d 49 55 79 13 8e bb 8e 94 03 5d 8d 52 ab c8 9c 75 dc 74 a7 1d 77 1d 49 55 79 27 c4 6b b8 e9 4e 3a ee 3a 92 a5 e4 9f 1d 77 1d 29 c7 5d c7 52 54 bc 89 c7 41 c7 f6 d2 9c 75 dc 75 25 4b c9 3c 6b b1 a5 31 ae e3 a9 2a 4a 4f 88 d7 71 d2 9c 75 c4 6a 4a 97 92 5c 75 dc 06 94 e3 ae e3 a9 2a ef 24 b8 e8 0a e9 6c 68 31 a9 2a ef 24 b8 e3 41 c7 4b 71 d0 71 fd b5 25 4b c9 1c 6b 88 fd b4 af 1d 01 5d 44 57 92 5c 74 52 ba 54 8d 01 07 51 58 72 48 ae 8a 57 4b e3 45 23 51 Data Ascii: J(~8j!@4lhhBDt`&B+\QU@?t<t]ICy']IUy'CJc]IUy'CJc]IUy]RutwIUy'kN::w)]RTAuu%K<k1JOqujJ\u$lh1*$AKqq%Kk]DW\tRTQXrHWKE#Q
2024-04-16 15:05:52 UTC	1369	IN	Data Raw: 6d f2 cd 22 c7 23 47 21 68 4a a8 60 47 41 bc 37 9f 8f 8e f4 e8 8d 5c 36 6e d1 da 53 ed ba 6a 3b 1a 49 3c d1 d3 a8 95 a9 a6 0b 51 24 8b 9e cc 2e 78 b6 07 8e 27 a5 c7 9d 31 bc 6d 3b 95 1c 92 7a 0b f7 91 c7 9e 46 20 43 a8 1f 25 0f bb 1f bf 63 f7 d7 4f 40 7d 5f 63 b7 53 14 eb d5 0d aa 67 3c 01 c7 08 39 1f 39 3b 17 27 ea 2f a4 ad 56 2a ce 7d 9a 99 34 c4 6f 23 0c 64 67 ed e8 ab 98 d0 11 a3 e3 ae 8e 7e 3a d7 63 5e ce 57 8b 98 44 c6 bb 1a 36 35 d8 d5 a9 28 b8 d7 63 46 c6 bb 1f 1a 8a 4a 2e 34 18 d1 f1 ae c6 a2 92 89 8d 71 1a 3e 34 18 d4 57 28 98 d7 63 47 c6 83 1a 8a 4a 21 5d 01 1a 53 1a 02 35 11 4a 4c 8d 14 81 a5 71 a0 23 57 2a e5 25 8d 06 3a d2 84 68 08 d4 94 40 a4 88 d0 63 4a 91 a2 91 a8 88 14 99 1f b6 8a 57 4a e0 e8 08 d5 a2 05 22 46 80 8d 2a 46 8a 57 51 10 29 Data Ascii: m"#G!hJ`GA7\6nSj;I<Q$.x'1m;zF C%cO@}_cSg<99;'/V}4o#dg~:c^WD65(cFJ.4q>4W(cGJ!]S5JLq#W%:h@cJWJ"F*FWQ)
2024-04-16 15:05:52 UTC	1369	IN	Data Raw: d3 df ca 16 b1 53 74 da 1b fe 99 e5 86 2b 7c 57 42 a1 84 a5 96 96 46 ec e4 16 19 49 3a c0 04 81 92 71 d6 ab b7 ad 8f 5d 4f 3a 47 6c 69 2b 64 78 8c df 68 f1 18 ea 55 7f fc 3e 1c fc fb 09 eb e3 59 e5 ee bf 6c cd 5f 60 8e db 43 fc 2e 5a ba 00 2a 27 8e bc 3c 30 ce a5 99 95 fd a0 f3 23 c2 9f 80 3c 82 35 2f b4 37 86 f5 84 4e 29 6b 28 ae 16 a8 26 46 82 2a a2 78 14 2b 90 41 c1 c9 3d f6 84 63 03 bc eb d4 e8 4d 3b a7 2c 95 db 42 84 d4 1a 9b f7 02 37 63 87 81 1c 17 90 d3 df 4e 68 6b 45 07 5a 2b c5 38 cc fd a4 71 db e2 0f 14 54 92 98 dc e1 b6 cd 57 05 3d 54 c3 31 a4 ce 13 20 37 12 4e 7c 60 91 90 7b 19 d1 dd 00 00 ab ab a9 cf 6a 72 32 09 04 7f 82 08 ff 00 1a 2d ea 8e df 74 be d7 de 64 b7 ac 35 55 f3 bc f3 70 9d df 89 70 03 28 66 ec a9 c7 83 a1 82 08 60 8f d2 82 18 e2 Data Ascii: St+\|WBFI:q]O:Gli+dxhU>Yl_`C.Z'<0#<5/7N)k(&Fx+A=cM;,B7cNhkEZ+8qTW=T1 7N\|`{jr2-td5Upp(f`
2024-04-16 15:05:52 UTC	1369	IN	Data Raw: c3 51 6a da e4 98 21 e3 1c 94 d5 e6 3a a4 5e 18 e6 92 2a 85 56 5c e0 a9 04 16 6e c7 ce 8d 81 c7 20 7c 70 42 69 34 6f 8e b5 2b bd 06 f3 fa 67 ba 2b 84 fb 92 c1 2e d3 b9 fb 12 5a 9a 6c c9 4e c5 0f 25 56 50 03 84 1e 70 ca df 8c ea d7 51 b6 1e b2 d4 97 3b 15 da 8a eb 6f 2c 42 7d ab 87 08 3e 3f 4f 4b 9f c1 0b de a9 14 3b da c5 b9 63 4a 1a af e0 77 a3 26 29 a0 a4 dc 90 ad 2d 52 2e 48 1c 6a e3 c2 48 dc 83 0e 45 81 3c 47 c0 3a 24 bb 5a d7 43 5b 0d 66 d4 bc 5e 76 5d e6 67 1f 6b 4b 72 90 8a 79 4f 80 23 ad 4f 6b 0c 83 82 d9 18 c6 4f 7a dd a3 f4 9d b3 45 d4 2e b3 91 8e 60 81 8f 5b 8a e4 e9 4d 09 62 d2 d4 c3 2d 00 88 ca 09 c3 ad e0 85 2f 59 45 55 47 20 4a aa 79 22 63 e3 90 e8 ff 00 63 e0 e9 1e 20 68 ef bf 7e a0 d8 60 fb 7d f7 b5 7f 8a 5b 9c 70 5a c7 88 23 ba e7 b6 49 Data Ascii: Qj!:^*V\n \|pBi4o+g+.ZlN%VPpQ;o,B}>?OK;cJw&)-R.HjHE<G:$ZC[f^v]gkKryO#OkOzE.`[Mb-/YEUG Jy"cc h~`}[pZ#I
2024-04-16 15:05:52 UTC	1369	IN	Data Raw: 36 29 34 01 b8 7e de 8a d9 fe c1 6f 2b 9d 51 6b f6 e8 bb 54 51 88 73 14 b1 cc 69 e0 59 08 18 5c 0e 2a 17 04 82 71 f0 46 9a ae db fa 63 60 10 cd 7d dd 36 a3 59 4e 65 7a f4 a5 76 a8 79 d7 a2 a4 24 61 80 00 fe a0 75 9a 54 89 ef 7c 96 e7 b8 6b 2e af 27 f2 e5 26 49 6a 41 f7 72 ce 49 e2 0f 85 ce 7c 0d 3c 96 cf 04 11 4d 3c 54 66 48 63 6f 51 ea aa a6 10 42 0b 91 9f d0 a4 80 c4 78 24 67 1f b6 88 58 aa 9f b9 d1 c0 47 ac a7 76 8d 02 47 cf a2 bf d6 fd 44 d8 96 99 eb 63 b3 6d 8b 85 53 4e 5d 26 f5 f8 53 44 0a 80 c1 48 f7 30 18 c0 04 01 92 70 7b d4 64 ff 00 53 37 85 6d 2c 70 d8 6c 56 db 55 2c 4b 1a 2a 53 d3 b4 ce 10 8e 4c 15 e5 25 43 a9 c0 07 8e 09 24 fc 68 db 57 6a dd af 09 43 fc 36 82 d9 02 56 56 ad 0a 54 08 8c 9f cd 28 5c 92 5b 3e dc 02 73 8f 38 f9 d3 0d e7 b6 ea a8 Data Ascii: 6)4~o+QkTQsiY\qFc`}6YNezvy$auT\|k.'&IjArI\|<M<TfHcoQBx$gXGvGDcmSN]&SDH0p{dS7m,plVU,KSL%C$hWjC6VVT(\[>s8
2024-04-16 15:05:52 UTC	1369	IN	Data Raw: 40 35 eb ac 3f 55 e8 fb 54 02 fb a7 63 b0 e7 92 f9 e6 94 fa 07 4b d8 65 cd a7 7d a3 5b 71 3f f4 e0 ee 49 c1 5f db 45 c6 9c 98 f9 43 eb c6 52 48 4f 89 23 60 e8 7f f7 0c 8d 20 46 bd 23 1e d7 8b cd 32 17 8c 73 5d 4d c5 ae 10 42 26 35 d8 d1 ca 9d 07 1d 1c aa 94 4c 68 30 74 a1 1a 03 ab 05 5c a4 f1 ae 23 46 d7 68 a5 5c a2 63 5c 46 8d 8d 76 35 72 ae 51 34 04 68 e4 68 31 a9 2a e5 26 46 8a 46 95 23 45 23 57 28 81 49 11 a2 b0 fd b4 a9 1a 29 1a b9 46 0a 48 8d 10 8d 2c 47 c6 88 41 d5 ca 30 52 44 68 84 69 56 1a 29 1a 89 80 a4 48 d1 48 d2 a4 68 84 6a 26 02 92 23 45 23 4b 11 a4 d8 6a 93 01 49 9d 76 84 8d 76 a2 29 4e c0 d1 d5 74 70 ba 38 5d 14 ac 85 c8 81 74 60 34 70 ba 3a ae a9 2c b9 10 2e 8e ab a3 85 ef 42 06 a4 a0 2e 40 06 84 0d 18 0d 18 2e aa 52 c9 45 1a ec 68 e0 68 Data Ascii: @5?UTcKe}[q?I_ECRHO#` F#2s]MB&5Lh0t\#Fh\c\Fv5rQ4hh1*&FF#E#W(I)FH,GA0RDhiV)HHhj&#E#KjIvv)Ntp8]t`4p:,.B.@.REhh
2024-04-16 15:05:52 UTC	1369	IN	Data Raw: 32 40 25 8d a1 43 81 33 cc b1 29 fe c1 9b 38 cf 5f be 33 a4 23 b6 4b c9 51 ef 76 88 f2 40 ff 00 f8 ce 58 ff 00 f2 83 a6 f6 4c 89 58 ff 00 5e f9 c7 35 71 4b ba de 6e 6f 3d 6d 60 40 b9 09 24 8c 5b 8b 9f 07 27 39 03 ce 9c 47 b9 c4 0d e9 72 28 b1 b1 5f e5 a8 00 90 70 4f f9 ef 55 7a 39 2d d4 08 f4 d3 5e 69 ea e3 2d c6 5a 61 47 31 f5 17 96 59 43 8c 11 9c 63 23 bd 23 1d a6 9a 79 a4 78 05 f1 e9 f2 4a 9f b6 44 c0 fc 12 ed ff 00 3d 08 a6 2f 12 8c db 08 00 34 99 d7 c7 ae 1e ea cf 70 de b2 ac 25 44 85 88 07 18 38 20 7e 06 83 68 2c b7 ca b1 57 71 99 f8 42 cb 2d 4d 45 47 70 53 c2 32 42 f5 db 48 ed d0 51 df cf 8d 57 1a d3 6f 50 51 67 94 54 38 20 2c 95 51 c8 40 c7 7e d4 1f f7 d4 ad ce c3 7e ae b2 5b a9 6d 0e 92 42 8a d2 b5 1a ce 15 dd f2 40 93 89 fd 47 1d 67 f6 eb 1a 5b Data Ascii: 2@%C3)8_3#KQv@XLX^5qKno=m`@$['9Gr(_pOUz9-^i-ZaG1YCc##yxJD=/4p%D8 ~h,WqB-MEGpS2BHQWoPQgT8 ,Q@~~[mB@Gg[
2024-04-16 15:05:53 UTC	1369	IN	Data Raw: 87 41 e9 1b 70 9b 3d 07 38 6d 0d 31 e7 97 35 30 08 d1 c6 35 4b ae df 70 42 ce b4 94 11 64 74 3d 69 4b b6 7f b2 e0 63 fc ea 22 bb 79 df ea 5c 2d 35 4b 42 9d 7a 9f 6d 08 8c 1f c8 fc ff 00 73 9d 71 2b fd 5d 62 66 14 c1 77 84 0e 71 e8 bd 6d 8f f8 6b a6 2b e3 5a ed 31 bd d2 7c 9b 3c c8 5a 80 82 42 32 54 a0 3f 2f ed 1f ea 7a d3 1a ab 95 ae 91 8a 54 dd 68 d1 c7 65 04 9c db fc 05 ce b2 53 2d da e7 50 c4 49 3d 4c 8f fd 23 9c c4 7f 8f 76 0e 8b 5f 6a b8 d9 e7 86 1b a5 3c ed 1c b8 f4 71 88 ca 16 19 28 dc bc 1f 1e 7e 35 c8 af f5 85 63 85 3a 60 6c 92 4f c2 f4 96 4f e1 7d 91 b8 da 2d 25 d1 9d d0 07 fe de 8b 46 ac de d6 0a 3e 5e ea da a2 b8 ca c5 08 53 df e0 b1 ef fd 34 ca 4f a8 31 31 8c 50 da e2 60 e7 b3 2c 8e ce 83 f2 55 40 1f e3 3a a5 d3 41 6b f5 56 4a 8a 99 28 30 a5 Data Ascii: Ap=8m1505KpBdt=iKc"y\-5KBzmsq+]bfwqmk+Z1\|<ZB2T?/zTheS-PI=L#v_j<q(~5c:`lOO}-%F>^S4O11P`,U@:AkVJ(0
2024-04-16 15:05:53 UTC	1369	IN	Data Raw: a7 51 5b 17 18 d9 54 e4 30 65 c3 0c 92 3a c1 c6 7c 6b 5e b8 fd 49 d8 d4 68 90 d3 dd be f8 9c a4 6b 6f 46 9c 15 5e f3 9c 0f f3 9f df 48 6d 8f aa 5b 61 ec 53 c5 5f 0d c2 96 39 2a 66 75 9a 5a 53 e9 7a a5 41 c3 30 cf 12 70 0f 60 79 d1 12 d2 e0 49 c5 67 71 7b 69 dc 6c dd d8 bc e1 3c 57 ed aa 2f b6 7d c0 9c ee 91 c1 0c 90 c7 59 fc e8 ea d1 4e 07 02 7f 5a 10 4e 08 ef 55 aa 26 db 57 fa aa 7a 71 65 9e d3 54 f5 31 a4 cf 49 51 fc ae 24 9c fb 1b f4 b7 e3 5e cf dc 74 56 db ce db 87 70 58 2a 69 2a 64 a7 ab a6 ab 82 78 02 48 a5 95 b2 c9 ff 00 a4 95 67 cf c8 f3 f1 a8 ed cb f4 ef 6c de ee 75 8f 5d 66 a2 99 11 d7 d1 9e 25 09 2a 33 02 4b 87 5c 12 41 ff 00 8b 3f f5 d5 5c 2d bd 77 5f c4 7b 23 fd 4b 6a 3a 9f 68 24 37 0e 22 49 f7 5e 41 fe 09 74 0d 51 1e df b8 d2 54 c2 a5 83 c7 Data Ascii: Q[T0e:\|k^IhkoF^Hm[aS_9fuZSzA0p`yIgq{il<W/}YNZNU&WzqeT1IQ$^tVpXidxHglu]f%3K\A?\-w_{#Kj:h$7"I^AtQT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.11	49876	142.251.15.119	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:51 UTC	462	OUT	GET /vi_webp/wAD9uO9YAQw/sddefault.webp HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:51 UTC	623	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/webp Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 39240 Date: Tue, 16 Apr 2024 15:05:51 GMT Expires: Tue, 16 Apr 2024 17:05:51 GMT Cache-Control: public, max-age=7200 ETag: "1519883041" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 15:05:51 UTC	632	IN	Data Raw: 52 49 46 46 40 99 00 00 57 45 42 50 56 50 38 20 34 99 00 00 b0 d0 01 9d 01 2a 80 02 e0 01 3e 51 24 90 45 a3 a2 21 aa 25 f5 9a 29 40 0a 09 65 6e d8 e7 56 f4 e8 4e 4b d2 f1 3c b3 6a 12 7f 7e b7 c2 f3 ad bd 2a b7 66 e9 b9 eb 0f 3f 8c f0 29 ed f3 ed 6f f3 ff ca 7a 5e f2 5f 82 df 3c d3 8b fb 7e 01 7c af fc 5f 31 2f 60 fe 73 f4 27 b3 ff f8 9f b3 fe f0 bf 56 fe cb 7c 0f 7e bf 7e bd 7b 81 ff df ec 47 fb c7 a3 cf de 6f 56 4f 51 ff d8 7d 4d bf af 7f bc eb a7 f4 88 e9 9f fe e3 ff af 29 5f b1 7d c3 ff 9f f0 47 f1 ef 96 fe fd fd bb fc c7 fc 0f ef be db 3f 40 79 0a e9 7f d8 6f 51 7f 9b 7e 04 fd 2f f6 2f f2 7f f7 7f c9 7b 7d fe ff fb 1f e4 ef a3 3f 9c 7e cd fe ff fa cf e4 4f c8 2f e5 df d0 bf cf 7f 50 ff 21 ff 8f fb ff c3 0f cf 7f e8 ff 09 fe a7 c1 7f 62 ff 49 ff b7 fb Data Ascii: RIFF@WEBPVP8 4>Q$E!%)@enVNK<j~f?)oz^_<~\|_1/`s'V\|~~{GoVOQ}M)_}G?@yoQ~//{}?~O/P!bI
2024-04-16 15:05:51 UTC	1255	IN	Data Raw: de 74 a5 14 76 7c 19 58 08 34 9b fe 1d a7 c3 3f 80 da 05 32 44 83 17 8f d0 ad c1 cf 75 94 12 46 3e 29 4f 8f 00 52 4e de fc 9b 88 31 cd 2d c7 33 04 52 29 a4 5e fc 9a c9 7c d5 4f 7d c4 b8 76 5a 4c 1d b4 52 05 ee b8 9a 9e 9e a5 7b 32 97 f5 99 5a 02 e0 ed a9 a5 b2 46 01 33 c9 5e d7 ca 2e 91 11 9d 1f a0 d5 8b e9 86 b1 c9 ae b7 8e 52 09 b1 5c b8 f7 2e 68 54 54 3d 4e e9 b9 28 70 8a 07 9e 7a 3b f6 d4 3e 43 84 af a1 78 31 df b3 c3 2a 0e 9f 73 fb b0 19 c2 ad d1 4b 2e 08 3f f4 44 67 f9 4b 56 e6 88 de 97 3b 37 6f b7 31 41 5f 8d 46 31 f0 10 3e c1 e0 84 94 49 76 cf 3c 8d 4b 64 8f a6 7e 99 6e bd 47 5d a5 e6 9d e7 d5 f5 ce 79 56 77 3d d9 a3 af 8e e9 f0 ae b3 1c e9 d3 97 ff e5 b8 e6 56 44 e0 b6 66 8c 10 34 df 54 32 8b 57 21 6b f2 14 00 65 07 e1 67 ff 5c a3 a3 6b f0 f2 b3 Data Ascii: tv\|X4?2DuF>)ORN1-3R)^\|O}vZLR{2ZF3^.R\.hTT=N(pz;>Cx1*sK.?DgKV;7o1A_F1>Iv<Kd~nG]yVw=VDf4T2W!keg\k
2024-04-16 15:05:51 UTC	1255	IN	Data Raw: 3a 45 5a 8a 70 1a 3b ad 7d 29 25 51 05 4f f7 90 2d 7b 48 ec 17 dc 2a c6 eb bd 4f 16 45 76 d9 d3 48 36 84 fd 4e 76 1b b4 ae a4 f5 ec 2a 9b 7b 1b 07 ab f4 ce 7c 6f 65 8b dd cc 87 64 55 09 c1 58 da e7 86 3e 2d 6b 3c ff a3 ce b9 3a ef cf c7 36 bd ad ca 17 d6 94 7a 38 13 bd 3d 62 0b a3 b6 bb 23 77 e1 98 18 00 60 ea fa 14 54 fc 55 96 28 a9 cc 4a e0 6b 21 6d 6e 8b 03 13 c2 7f 22 36 dd 87 26 71 c0 bf 3d fd c3 33 86 d7 0e d4 93 a2 e3 6b d5 c7 6b f2 ca 09 f2 f9 2d 99 ee ea 9d 80 0f ee 07 8f 35 f7 16 f6 4d 66 54 b5 ce b9 ca 43 34 a8 9e 90 22 e1 11 d9 37 4e 2c 6f f0 07 c6 85 82 95 aa 14 71 66 b7 3b 94 89 e9 5a d6 22 96 f4 84 1f f6 d5 b8 c2 8a a0 77 2e e5 1f c0 ab c6 d4 0f 24 7c 8f ed cf 42 c8 aa bd 06 be e8 34 2a ba e9 aa 88 67 6f b1 a6 ab 63 22 fe c1 61 4b 7c da ec Data Ascii: :EZp;})%QO-{HOEvH6Nv{\|oedUX>-k<:6z8=b#w`TU(Jk!mn"6&q=3kk-5MfTC4"7N,oqf;Z"w.$\|B4*goc"aK\|
2024-04-16 15:05:51 UTC	1255	IN	Data Raw: 7f b0 35 8c 5b c6 6c 93 8b f6 e6 d7 b0 3c 01 fa 07 20 86 ac 0c 24 0c 75 c9 b9 67 87 17 26 a3 80 38 a9 48 53 2b bd 70 b7 71 00 17 75 d6 19 45 a6 bc 9e 48 17 67 3c ec 14 0a a7 55 64 42 76 72 63 4b da a5 db 3d 6f 93 7a 7c 19 9e b6 17 82 0f 7e 48 3f 73 b4 23 f9 51 2a 7c 3c 28 1a dc 63 8d f2 d3 77 7c 6e ae 6a 75 7b 9a e3 a4 43 46 99 2f de 1e 8e 0b 74 9a 13 5a 4d 8f 5a d6 c6 f7 dd ef 0d f4 1d da 65 56 f6 5b 97 d3 71 79 c0 5d 0d ff 8e 40 41 27 64 af 0a 6b ab 31 03 0d 62 93 67 e2 bb 3e ba 28 0f eb 2e 61 7f bc 9c 9a a6 eb 03 89 9a 94 1c d2 0f b0 d6 8a de c0 a6 16 09 79 21 9f 09 ee 10 ec ca 88 4c bc 06 8c e9 fe 58 f4 32 79 23 26 4a 4c 2c 6b 12 0d 3b be 3e e2 93 49 5c 00 ce e9 5a 33 ee c6 46 e7 79 16 66 64 8a 7b 7e 5e 49 c0 7e b6 61 23 e6 03 2e e0 42 3b e9 d7 b9 eb Data Ascii: 5[l< $ug&8HS+pquEHg<UdBvrcK=oz\|~H?s#Q*\|<(cw\|nju{CF/tZMZeV[qy]@A'dk1bg>(.ay!LX2y#&JL,k;>I\Z3Fyfd{~^I~a#.B;
2024-04-16 15:05:51 UTC	1255	IN	Data Raw: 58 72 15 8d 74 e8 ea f6 88 2b 0f e1 30 6b 09 e9 de 7a e6 40 35 04 da df e0 ee 5e e7 03 72 8c 5b cc 06 dd 77 00 03 a0 f0 10 6a 60 0c a5 87 ae c6 f4 50 d2 b0 ad 36 af 28 d3 35 93 ea 0a 82 fa 42 10 e5 8a 6b ee d4 04 a4 af 81 b1 59 b1 0f bf b4 04 57 fb 03 e5 b4 59 b5 db fd d8 9d be b1 47 8f 9e e3 7d ad 00 4e 00 ca dc d6 48 ae 18 33 2e 1c 03 0b fc 62 49 ac 91 b5 6b 53 99 ae 6e c5 61 98 b1 92 14 a4 19 51 b9 e2 30 f8 00 3e 4a d4 62 a8 b9 83 2d 16 9e 13 90 ca e2 a4 73 d3 1a 52 94 4d 1f 38 8d 41 05 6b 07 f6 09 66 e5 51 9a b5 b2 53 b8 72 da 39 69 55 4f 91 3b 31 5f ea 37 22 57 9e c5 1b 9e 40 35 f5 06 ba 51 03 15 54 aa 8a eb 2d da c4 11 b8 b9 69 f6 7c 62 f7 2c 10 8b 0b f4 9f fc e1 60 52 28 9b 5b 32 46 bd 24 9a 7c 98 0b 4b 74 39 fd 94 16 d5 2a 06 35 27 3b c2 2e 1d f5 Data Ascii: Xrt+0kz@5^r[wj`P6(5BkYWYG}NH3.bIkSnaQ0>Jb-sRM8AkfQSr9iUO;1_7"W@5QT-i\|b,`R([2F$\|Kt9*5';.
2024-04-16 15:05:51 UTC	1255	IN	Data Raw: 39 3e 1c 15 8a 02 09 d4 8d 7b 30 35 e1 ff 0b a1 70 cb 08 bd 12 86 7e 1e c0 e7 18 f0 ef e1 c3 54 10 70 c3 83 26 3f 10 b8 13 65 e1 24 bd bb b1 cf 9a 03 90 41 d1 80 9a 4a f8 10 b1 29 63 e9 c2 87 fd b5 d4 49 01 8e 0f 29 2c e1 1c c1 cb 25 46 a7 c5 ed ef 77 9d 78 f5 62 1e 0a 7a 4b 67 6c d6 d5 fc b9 ed 80 00 7b d8 d1 bc 45 ca c8 11 a8 94 b6 a0 6e c9 6d c2 1f af 92 92 f2 1e d4 7d 43 20 7c d0 d2 64 3e 85 9b eb c1 dd e9 31 ed 88 ef c4 7b f4 4b ec e7 43 af ab 95 68 02 e5 58 67 14 c7 b5 cd ac 68 3f 95 aa 45 47 6e cc 54 a4 78 ba fe f7 52 c1 00 05 5e d5 28 c2 82 c4 f6 ff c0 18 8e cc 0a 24 0a b0 db 51 85 d1 c8 50 e1 d0 d8 be 5b d5 16 f2 e9 2f d2 9d 49 a2 2b 80 06 78 e8 0c d0 18 1e 5c 34 2a 6b ee 8c 36 b1 fc e2 74 f0 c7 a0 99 7f 6a c4 82 25 0c fa b0 25 85 6d 34 85 9b 02 Data Ascii: 9>{05p~Tp&?e$AJ)cI),%FwxbzKgl{Enm}C \|d>1{KChXgh?EGnTxR^($QP[/I+x\4*k6tj%%m4
2024-04-16 15:05:51 UTC	1255	IN	Data Raw: 2b ae 85 4d 01 f8 fa 27 f4 e2 5f a8 8b 3f 54 81 df 1b f0 bd 87 5f 1d 7d 52 c1 15 69 9c c6 58 08 ba 39 ec e5 96 8b a2 34 28 63 3a c9 fc 69 b7 21 11 62 f6 95 2c 09 8b 72 d1 e2 b9 5f 5f 05 65 a9 3d 24 ae 4d 68 cb 52 4a 7c 56 1f 5e 8f 4e 25 76 c5 85 b5 60 29 f5 34 85 64 9d e6 ba 86 c7 9c b5 e1 f2 9f ef 58 fb 10 6d a1 7c 32 1e 25 f7 fe 1b 0a 30 bb 84 c6 64 2b 4a 68 7d d4 7e ad 0b 29 f4 be 42 27 cd bc 2a a2 f1 43 f9 ca 04 d2 bc a8 ad d7 ff b3 b1 4b 9d 15 84 e5 e5 a6 70 3c 28 97 83 eb 81 2f 32 7a b9 38 d8 72 43 8d 9a 04 22 bf 5b 38 fe 3f f0 42 ca ab c5 3a 39 1f 9b 35 59 9e 97 f5 3e f3 4a fb 98 93 e9 c3 e5 db e5 72 77 6f 60 c2 c6 49 ff 35 c9 7e 31 d2 fc 67 ff 74 b7 94 2c 71 53 0e ce f9 bf 14 af d8 f5 53 0e f3 92 39 69 d1 27 e4 40 ec 07 fe a6 ac 86 45 17 27 ba c8 Data Ascii: +M'_?T_}RiX94(c:i!b,r__e=$MhRJ\|V^N%v`)4dXm\|2%0d+Jh}~)B'*CKp<(/2z8rC"[8?B:95Y>Jrwo`I5~1gt,qSS9i'@E'
2024-04-16 15:05:51 UTC	1255	IN	Data Raw: e4 c9 13 6e 48 aa 83 fb 71 b9 45 55 01 5d 58 81 28 52 dc c5 c7 ce 51 ed ab d1 bf 96 29 45 09 cd d5 8e 96 ed dd fa 0b 11 a7 8f fa 36 8b 9c f3 10 8c 80 66 cd 4d 4a 05 1c da 5a 63 47 36 36 43 21 b3 a0 90 49 ce 1f 6d 8f e3 58 0c 86 c9 fb 0b ed 4d ed 9e b0 4d 1a 67 7f 3f 5a bc 65 44 4f 45 34 0c 8d 41 68 2e 75 d2 df e4 59 b3 b4 2f 10 1c 5d d7 a0 83 63 e6 cd e1 2c cd 16 71 d8 cf 1d 9d 4c 68 ce 58 81 00 fa 63 cc ee e3 3c c8 b0 dc 29 a0 e2 6b d3 1a fe 2e e1 1a 4e 06 e7 99 8e b8 b4 a6 ab 34 de 73 5c 7b 2c 9a 3f b2 43 4c 6b 2f 08 04 e9 f2 5e f9 ea 4a 34 ae 88 9a 3b 27 31 f4 d1 2f 16 49 cb ce dd 11 d3 e6 54 ea 76 28 b0 94 7b d1 3d 97 25 ac c1 f6 18 e4 b8 0e 48 0b d7 39 a4 bd e4 06 ee 38 49 b0 fe bf 0b 3c ca fb 3b 62 19 cc 91 6d 68 a0 4a ef 9f b5 bf 12 71 5f d7 25 e4 Data Ascii: nHqEU]X(RQ)E6fMJZcG66C!ImXMMg?ZeDOE4Ah.uY/]c,qLhXc<)k.N4s\{,?CLk/^J4;'1/ITv({=%H98I<;bmhJq_%
2024-04-16 15:05:51 UTC	1255	IN	Data Raw: 83 7e db 75 7b 4b 7a 4c 5d e9 74 99 d6 96 c2 a0 b7 2c 2f c2 21 8e 04 83 b9 cc 7a 30 64 1b 4c 92 41 47 3c 97 69 47 55 1f 7e 83 99 e8 5d e1 fb 0c 05 1a 63 e0 bf f3 7b 9d 8c 95 93 25 f7 d6 cd 67 87 b5 28 6e 65 0d fc 97 f4 d1 70 6a eb a3 ba c5 53 7b 73 e8 99 85 c8 12 32 d4 7e fb 5f 94 41 99 60 1f 08 8c 84 d5 42 3a a3 be 2b 25 4d d3 d3 15 4f 2d 3e 8c d9 8d 71 b1 8e d3 52 1c 9e d0 69 9d 65 ab 55 7a fb b7 2c 7a 10 db bd 29 0c 2b 25 40 50 13 f9 85 73 bf 0c 91 0b 25 98 8f d1 51 95 08 89 53 e8 fb ff 79 88 e9 cf 1e c7 af 0d 1f f4 5e 0f b5 88 dd 17 42 70 b1 39 be 97 96 a3 a6 14 7e c9 fb c5 98 47 1a 62 89 8f c1 a8 35 7c 8a 84 d9 eb 53 05 34 ce 9c 57 f1 45 06 7d 3b 46 43 d4 63 82 d3 2d 32 be ed f0 94 9b 3e 6b 4c 8b 4e 20 7b 11 68 72 f1 1e de 50 d4 b3 c7 e2 a9 91 04 b2 Data Ascii: ~u{KzL]t,/!z0dLAG<iGU~]c{%g(nepjS{s2~_A`B:+%MO->qRieUz,z)+%@Ps%QSy^Bp9~Gb5\|S4WE};FCc-2>kLN {hrP
2024-04-16 15:05:51 UTC	1255	IN	Data Raw: e0 56 a2 31 e3 6a 98 e0 1f 2e 86 d5 12 9d 6a 24 53 ff e3 cc 60 c2 0a d7 f7 d1 79 be 96 12 0b e4 fa 82 e5 1a 0f 89 a7 16 14 96 2e 34 71 02 bf d4 0f b9 ab ff f7 c3 65 0d 5f c5 8b b6 d6 9a fb 07 fb 39 9b 5c 74 0b 2b 03 4c f3 19 1f 7c 66 87 3c cc 61 5d 22 d8 ec d7 b2 eb a3 14 2d ee 09 80 6d c4 04 b9 b2 aa 31 a5 ac fc 80 be b8 e0 04 22 09 70 02 97 83 27 74 f6 ca 6b 5e 58 7b ae a4 cb ba fb fd b3 ad 05 e4 1c c6 12 5f cd 26 5a 6b 61 07 d0 be c1 48 b2 43 76 75 08 ad 7f 0b 71 6a b2 92 84 3d 05 6e 50 dd 4d 49 fd 64 4a d3 0b c7 45 70 89 79 3a a2 26 f4 f3 01 2c 94 cf ec 24 c2 33 de da 60 e1 e2 46 d1 51 7e 9f 7b 87 38 a3 ab 7a e0 c9 af 43 c4 d2 c3 5d 40 0a 21 6d 2d 0b 69 79 f7 0e ad f0 a7 fb 37 d0 db 35 10 c5 15 f3 cc d3 cd 87 a1 45 8b 0c 32 54 83 bd af df b8 b2 2f e5 Data Ascii: V1j.j$S`y.4qe_9\t+L\|f<a]"-m1"p'tk^X{_&ZkaHCvuqj=nPMIdJEpy:&,$3`FQ~{8zC]@!m-iy75E2T/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.11	49879	142.251.15.91	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:51 UTC	2777	OUT	POST /api/stats/qoe?fmt=398&afmt=251&cpn=F6GU1QEdhoMLD-Np&el=embedded&ns=yt&fexp=v1%2C23858057%2C125239%2C21348%2C76094%2C54572%2C73455%2C230596%2C84737%2C36318%2C6271%2C26443548%2C7111%2C31786%2C4557%2C9954%2C1192%2C10512%2C15711%2C273%2C6966%2C2%2C6689%2C2007%2C4957%2C4115%2C12518%2C1263%2C5498%2C796%2C643%2C5538%2C2893%2C2%2C531%2C819%2C531%2C4712%2C5599%2C1104%2C4465&cl=623129822&seq=2&docid=wAD9uO9YAQw&ei=y5MeZqSPB9aoy_sPxcuI0A8&event=streamingstats&plid=AAYWOBKoz4xd3wIM&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2FwAD9uO9YAQw%3Fplaylist%3DwAD9uO9YAQw%26iv_load_policy%3D3%26enablejsapi%3D1%26disablekb%3D1%26autoplay%3D1%26controls%3D0%26showinfo%3D0%26rel%3D0%26loop%3D1%26origin%3Dhttps%253A%252F%252Fniceindiatravel.com%26widgetid%3D1&qclc=ChBGNkdVMVFFZGhvTUxELU5wEAI&embargoed=0&cbr=Chrome&cbrver=117.0.0.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240409.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&afs=1.686:251::i&bwm=2.946:197262:2.341,4.784:487648:2.955&bwe=2.946:459456,2.947:459456,4.784:1004275&bat=2.946:1:1,2.947:1:1,4.784:1:1&vis=2.946:3&cmt=2.946:0.000,2.947:0.000,3.932:0.000,4.012:0.000,4.269:0.212,4.784:0.707&bh=2.946:4.261,2.947:4.261,4.269:7.278,4.784:7.020&vps=3.932:N,4.012:B,4.269:PL,4.784:PL,4.784:PL&ctmp=dompaused:t.3934;r.promise;m.AbortError&vfs=4.784:398:398:397:r&view=4.784:1267:713&df=4.784:0 HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 226 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1713279945329&flash=0&frm=2&u_tz=120&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1267%2C713&vis=2&wgl=true&ca_type=image sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded X-YouTube-Utc-Offset: 120 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240409.01.00 X-YouTube-Time-Zone: Europe/Zurich X-Goog-Visitor-Id: CgtJMG1ONlpYUjdsOCjIp_qwBjIKCgJVUxIEGgAgKA%3D%3D sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/wAD9uO9YAQw?playlist=wAD9uO9YAQw&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&origin=https%3A%2F%2Fniceindiatravel.com&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
2024-04-16 15:05:51 UTC	226	OUT	Data Raw: 73 65 73 73 69 6f 6e 5f 74 6f 6b 65 6e 3d 51 55 46 46 4c 55 68 71 62 6d 64 6e 4e 47 74 6d 64 7a 59 77 52 47 46 33 5a 32 35 68 55 48 68 46 4d 57 6b 31 53 33 68 59 61 30 6c 6f 5a 33 78 42 51 33 4a 74 63 30 74 73 51 6e 56 6b 4e 55 39 32 59 30 4d 78 62 6c 4e 66 55 6d 6c 74 64 57 56 30 59 6d 78 48 4d 6d 67 77 64 6c 56 4f 4c 58 6c 6f 65 6e 46 78 54 44 4e 48 61 45 35 73 52 6d 34 31 4d 48 46 53 55 6a 4a 50 51 6b 64 54 4e 33 5a 36 62 6c 55 32 5a 57 35 56 53 6d 56 72 62 6b 68 6c 63 31 64 66 53 32 39 78 5a 33 4e 34 64 6a 52 56 61 6b 6c 72 53 46 70 34 63 54 4a 6a 55 48 4a 6a 4e 56 70 74 54 58 52 34 61 6b 39 55 4e 47 6f 34 56 46 68 76 4e 45 78 31 63 55 52 68 62 77 25 33 44 25 33 44 Data Ascii: session_token=QUFFLUhqbmdnNGtmdzYwRGF3Z25hUHhFMWk1S3hYa0loZ3xBQ3Jtc0tsQnVkNU92Y0MxblNfUmltdWV0YmxHMmgwdlVOLXloenFxTDNHaE5sRm41MHFSUjJPQkdTN3Z6blU2ZW5VSmVrbkhlc1dfS29xZ3N4djRVaklrSFp4cTJjUHJjNVptTXR4ak9UNGo4VFhvNEx1cURhbw%3D%3D
2024-04-16 15:05:51 UTC	504	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Date: Tue, 16 Apr 2024 15:05:51 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Server: Video Stats Server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.11	49880	74.125.136.155	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:51 UTC	657	OUT	GET /pagead/id HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:51 UTC	766	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.youtube.com Date: Tue, 16 Apr 2024 15:05:51 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.11	49882	142.251.15.91	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:51 UTC	1189	OUT	POST /youtubei/v1/player?prettyPrint=false HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 3379 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Youtube-Bootstrap-Logged-In: false sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json X-Youtube-Client-Name: 56 X-Youtube-Client-Version: 1.20240409.01.00 X-Goog-Visitor-Id: CgtJMG1ONlpYUjdsOCjOp_qwBjIKCgJVUxIEGgAgKA%3D%3D sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/wAD9uO9YAQw?playlist=wAD9uO9YAQw&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&origin=https%3A%2F%2Fniceindiatravel.com&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
2024-04-16 15:05:51 UTC	3379	OUT	Data Raw: 7b 22 76 69 64 65 6f 49 64 22 3a 22 77 41 44 39 75 4f 39 59 41 51 77 22 2c 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 68 6c 22 3a 22 65 6e 22 2c 22 67 6c 22 3a 22 55 53 22 2c 22 72 65 6d 6f 74 65 48 6f 73 74 22 3a 22 38 31 2e 31 38 31 2e 35 37 2e 35 32 22 2c 22 64 65 76 69 63 65 4d 61 6b 65 22 3a 22 22 2c 22 64 65 76 69 63 65 4d 6f 64 65 6c 22 3a 22 22 2c 22 76 69 73 69 74 6f 72 44 61 74 61 22 3a 22 43 67 74 4a 4d 47 31 4f 4e 6c 70 59 55 6a 64 73 4f 43 6a 4f 70 5f 71 77 42 6a 49 4b 43 67 4a 56 55 78 49 45 47 67 41 67 4b 41 25 33 44 25 33 44 22 2c 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 Data Ascii: {"videoId":"wAD9uO9YAQw","context":{"client":{"hl":"en","gl":"US","remoteHost":"81.181.57.52","deviceMake":"","deviceModel":"","visitorData":"CgtJMG1ONlpYUjdsOCjOp_qwBjIKCgJVUxIEGgAgKA%3D%3D","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWeb
2024-04-16 15:05:51 UTC	432	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Tue, 16 Apr 2024 15:05:51 GMT Server: scaffolding on HTTPServer2 Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-16 15:05:51 UTC	823	IN	Data Raw: 38 30 30 30 0d 0a 7b 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 7b 22 73 65 72 76 69 63 65 54 72 61 63 6b 69 6e 67 50 61 72 61 6d 73 22 3a 5b 7b 22 73 65 72 76 69 63 65 22 3a 22 47 46 45 45 44 42 41 43 4b 22 2c 22 70 61 72 61 6d 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 69 73 5f 61 6c 63 5f 73 75 72 66 61 63 65 22 2c 22 76 61 6c 75 65 22 3a 22 66 61 6c 73 65 22 7d 2c 7b 22 6b 65 79 22 3a 22 69 73 5f 76 69 65 77 65 64 5f 6c 69 76 65 22 2c 22 76 61 6c 75 65 22 3a 22 46 61 6c 73 65 22 7d 2c 7b 22 6b 65 79 22 3a 22 69 70 63 63 22 2c 22 76 61 6c 75 65 22 3a 22 30 22 7d 2c 7b 22 6b 65 79 22 3a 22 6c 6f 67 67 65 64 5f 69 6e 22 2c 22 76 61 6c 75 65 22 3a 22 30 22 7d 2c 7b 22 6b 65 79 22 3a 22 65 22 2c 22 76 61 6c 75 65 22 3a 22 32 33 38 30 34 32 38 31 2c 32 Data Ascii: 8000{"responseContext":{"serviceTrackingParams":[{"service":"GFEEDBACK","params":[{"key":"is_alc_surface","value":"false"},{"key":"is_viewed_live","value":"False"},{"key":"ipcc","value":"0"},{"key":"logged_in","value":"0"},{"key":"e","value":"23804281,2
2024-04-16 15:05:51 UTC	1255	IN	Data Raw: 30 38 39 31 37 35 2c 35 31 30 38 39 34 34 31 2c 35 31 30 39 31 30 35 38 2c 35 31 30 39 31 33 33 31 2c 35 31 30 39 32 32 39 31 2c 35 31 30 39 32 36 36 30 2c 35 31 30 39 34 31 37 35 2c 35 31 30 39 34 31 39 35 2c 35 31 30 39 34 32 30 32 2c 35 31 30 39 34 32 30 37 2c 35 31 30 39 38 32 39 37 2c 35 31 30 39 38 32 39 39 2c 35 31 31 30 30 34 30 31 2c 35 31 31 30 31 34 35 34 2c 35 31 31 30 33 38 35 38 2c 35 31 31 30 34 39 38 38 2c 35 31 31 30 36 39 39 35 2c 35 31 31 30 37 33 33 31 2c 35 31 31 30 37 33 34 30 2c 35 31 31 30 38 30 30 36 2c 35 31 31 31 31 37 33 38 2c 35 31 31 31 31 39 35 32 2c 35 31 31 31 32 34 30 31 2c 35 31 31 31 33 36 35 36 2c 35 31 31 31 33 36 36 31 2c 35 31 31 31 33 37 35 30 2c 35 31 31 31 35 31 38 34 2c 35 31 31 31 36 30 36 37 2c 35 31 31 31 37 Data Ascii: 089175,51089441,51091058,51091331,51092291,51092660,51094175,51094195,51094202,51094207,51098297,51098299,51100401,51101454,51103858,51104988,51106995,51107331,51107340,51108006,51111738,51111952,51112401,51113656,51113661,51113750,51115184,51116067,51117
2024-04-16 15:05:51 UTC	1255	IN	Data Raw: 72 65 61 6d 69 6e 67 44 61 74 61 22 3a 7b 22 65 78 70 69 72 65 73 49 6e 53 65 63 6f 6e 64 73 22 3a 22 32 31 35 34 30 22 2c 22 66 6f 72 6d 61 74 73 22 3a 5b 7b 22 69 74 61 67 22 3a 31 38 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 72 72 35 2d 2d 2d 73 6e 2d 70 35 71 64 64 6e 37 72 2e 67 6f 6f 67 6c 65 76 69 64 65 6f 2e 63 6f 6d 2f 76 69 64 65 6f 70 6c 61 79 62 61 63 6b 3f 65 78 70 69 72 65 3d 31 37 31 33 33 30 31 35 35 31 26 65 69 3d 7a 35 4d 65 5a 71 61 49 4e 50 48 55 79 5f 73 50 30 65 57 64 6d 41 77 26 69 70 3d 38 31 2e 31 38 31 2e 35 37 2e 35 32 26 69 64 3d 6f 2d 41 4b 5f 56 51 5a 45 5f 43 46 36 72 69 36 54 70 50 6b 55 39 34 72 41 6c 74 7a 52 46 68 78 2d 7a 79 77 38 55 79 44 62 6d 39 32 61 6e 26 69 74 61 67 3d 31 38 26 73 6f 75 72 63 65 3d 79 6f 75 Data Ascii: reamingData":{"expiresInSeconds":"21540","formats":[{"itag":18,"url":"https://rr5---sn-p5qddn7r.googlevideo.com/videoplayback?expire=1713301551&ei=z5MeZqaINPHUy_sP0eWdmAw&ip=81.181.57.52&id=o-AK_VQZE_CF6ri6TpPkU94rAltzRFhx-zyw8UyDbm92an&itag=18&source=you
2024-04-16 15:05:51 UTC	1255	IN	Data Raw: 69 66 69 65 64 22 3a 22 31 36 39 33 34 37 36 33 39 30 31 34 34 34 31 31 22 2c 22 71 75 61 6c 69 74 79 22 3a 22 6d 65 64 69 75 6d 22 2c 22 66 70 73 22 3a 32 35 2c 22 71 75 61 6c 69 74 79 4c 61 62 65 6c 22 3a 22 33 36 30 70 22 2c 22 70 72 6f 6a 65 63 74 69 6f 6e 54 79 70 65 22 3a 22 52 45 43 54 41 4e 47 55 4c 41 52 22 2c 22 61 75 64 69 6f 51 75 61 6c 69 74 79 22 3a 22 41 55 44 49 4f 5f 51 55 41 4c 49 54 59 5f 4c 4f 57 22 2c 22 61 70 70 72 6f 78 44 75 72 61 74 69 6f 6e 4d 73 22 3a 22 31 35 36 39 36 36 22 2c 22 61 75 64 69 6f 53 61 6d 70 6c 65 52 61 74 65 22 3a 22 34 34 31 30 30 22 2c 22 61 75 64 69 6f 43 68 61 6e 6e 65 6c 73 22 3a 32 7d 2c 7b 22 69 74 61 67 22 3a 32 32 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 72 72 35 2d 2d 2d 73 6e 2d 70 35 71 64 64 Data Ascii: ified":"1693476390144411","quality":"medium","fps":25,"qualityLabel":"360p","projectionType":"RECTANGULAR","audioQuality":"AUDIO_QUALITY_LOW","approxDurationMs":"156966","audioSampleRate":"44100","audioChannels":2},{"itag":22,"url":"https://rr5---sn-p5qdd
2024-04-16 15:05:51 UTC	1255	IN	Data Raw: 75 79 4a 4e 4a 4c 30 38 43 49 47 70 34 65 36 30 56 4c 41 33 65 67 73 74 44 63 62 50 6a 4f 6d 67 63 77 75 31 46 6a 47 69 61 68 30 78 34 59 77 36 70 37 30 79 73 22 2c 22 6d 69 6d 65 54 79 70 65 22 3a 22 76 69 64 65 6f 2f 6d 70 34 3b 20 63 6f 64 65 63 73 3d 5c 22 61 76 63 31 2e 36 34 30 30 31 46 2c 20 6d 70 34 61 2e 34 30 2e 32 5c 22 22 2c 22 62 69 74 72 61 74 65 22 3a 31 30 34 36 39 30 34 2c 22 77 69 64 74 68 22 3a 31 32 38 30 2c 22 68 65 69 67 68 74 22 3a 37 32 30 2c 22 6c 61 73 74 4d 6f 64 69 66 69 65 64 22 3a 22 31 36 39 33 34 37 36 36 31 34 35 39 39 38 34 34 22 2c 22 71 75 61 6c 69 74 79 22 3a 22 68 64 37 32 30 22 2c 22 66 70 73 22 3a 32 35 2c 22 71 75 61 6c 69 74 79 4c 61 62 65 6c 22 3a 22 37 32 30 70 22 2c 22 70 72 6f 6a 65 63 74 69 6f 6e 54 79 70 65 Data Ascii: uyJNJL08CIGp4e60VLA3egstDcbPjOmgcwu1FjGiah0x4Yw6p70ys","mimeType":"video/mp4; codecs=\"avc1.64001F, mp4a.40.2\"","bitrate":1046904,"width":1280,"height":720,"lastModified":"1693476614599844","quality":"hd720","fps":25,"qualityLabel":"720p","projectionType
2024-04-16 15:05:51 UTC	1255	IN	Data Raw: 73 6f 75 72 63 65 25 32 43 72 65 71 75 69 72 65 73 73 6c 25 32 43 78 70 63 25 32 43 62 75 69 25 32 43 73 70 63 25 32 43 76 70 72 76 25 32 43 73 76 70 75 63 25 32 43 6d 69 6d 65 25 32 43 6e 73 25 32 43 67 69 72 25 32 43 63 6c 65 6e 25 32 43 64 75 72 25 32 43 6c 6d 74 26 73 69 67 3d 41 4a 66 51 64 53 73 77 52 67 49 68 41 50 72 59 79 70 59 6e 48 6e 57 55 58 56 31 30 6c 38 30 42 59 30 33 52 5f 4c 75 35 45 33 52 68 31 39 46 6c 70 42 71 6a 59 34 72 7a 41 69 45 41 72 44 64 58 6d 42 6c 36 31 5a 70 73 36 63 70 6e 7a 34 38 73 66 42 38 5f 36 55 49 4d 64 4c 37 50 68 44 31 35 63 32 56 79 74 32 77 25 33 44 26 6c 73 70 61 72 61 6d 73 3d 6d 68 25 32 43 6d 6d 25 32 43 6d 6e 25 32 43 6d 73 25 32 43 6d 76 25 32 43 6d 76 69 25 32 43 70 6c 25 32 43 69 6e 69 74 63 77 6e 64 62 Data Ascii: source%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRgIhAPrYypYnHnWUXV10l80BY03R_Lu5E3Rh19FlpBqjY4rzAiEArDdXmBl61Zps6cpnz48sfB8_6UIMdL7PhD15c2Vyt2w%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndb
2024-04-16 15:05:51 UTC	1255	IN	Data Raw: 6f 5f 6b 73 67 4e 33 35 46 66 75 47 44 45 7a 4d 30 26 73 70 63 3d 55 57 46 39 66 32 33 63 6d 33 45 30 53 79 61 46 4e 59 6a 39 63 37 73 69 74 65 5f 4a 38 73 5f 53 38 4c 73 63 53 78 33 77 46 31 68 4f 4b 42 74 79 57 59 50 30 47 6e 47 32 43 67 26 76 70 72 76 3d 31 26 73 76 70 75 63 3d 31 26 6d 69 6d 65 3d 76 69 64 65 6f 25 32 46 77 65 62 6d 26 6e 73 3d 33 4d 55 30 58 47 59 46 30 59 4c 68 77 4d 43 6f 44 73 6f 79 34 72 55 51 26 67 69 72 3d 79 65 73 26 63 6c 65 6e 3d 33 31 33 31 30 36 37 37 26 64 75 72 3d 31 35 36 2e 39 32 30 26 6c 6d 74 3d 31 36 39 33 34 37 35 39 34 39 39 35 38 30 36 36 26 6d 74 3d 31 37 31 33 32 37 39 36 36 35 26 66 76 69 70 3d 32 26 6b 65 65 70 61 6c 69 76 65 3d 79 65 73 26 63 3d 57 45 42 5f 45 4d 42 45 44 44 45 44 5f 50 4c 41 59 45 52 26 73 Data Ascii: o_ksgN35FfuGDEzM0&spc=UWF9f23cm3E0SyaFNYj9c7site_J8s_S8LscSx3wF1hOKBtyWYP0GnG2Cg&vprv=1&svpuc=1&mime=video%2Fwebm&ns=3MU0XGYF0YLhwMCoDsoy4rUQ&gir=yes&clen=31310677&dur=156.920&lmt=1693475949958066&mt=1713279665&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&s
2024-04-16 15:05:51 UTC	1255	IN	Data Raw: 3a 2f 2f 72 72 35 2d 2d 2d 73 6e 2d 70 35 71 64 64 6e 37 72 2e 67 6f 6f 67 6c 65 76 69 64 65 6f 2e 63 6f 6d 2f 76 69 64 65 6f 70 6c 61 79 62 61 63 6b 3f 65 78 70 69 72 65 3d 31 37 31 33 33 30 31 35 35 31 26 65 69 3d 7a 35 4d 65 5a 71 61 49 4e 50 48 55 79 5f 73 50 30 65 57 64 6d 41 77 26 69 70 3d 38 31 2e 31 38 31 2e 35 37 2e 35 32 26 69 64 3d 6f 2d 41 4b 5f 56 51 5a 45 5f 43 46 36 72 69 36 54 70 50 6b 55 39 34 72 41 6c 74 7a 52 46 68 78 2d 7a 79 77 38 55 79 44 62 6d 39 32 61 6e 26 69 74 61 67 3d 33 39 39 26 61 69 74 61 67 73 3d 31 33 33 25 32 43 31 33 34 25 32 43 31 33 35 25 32 43 31 33 36 25 32 43 31 33 37 25 32 43 31 36 30 25 32 43 32 34 32 25 32 43 32 34 33 25 32 43 32 34 34 25 32 43 32 34 37 25 32 43 32 34 38 25 32 43 32 37 38 25 32 43 33 39 34 25 32 Data Ascii: ://rr5---sn-p5qddn7r.googlevideo.com/videoplayback?expire=1713301551&ei=z5MeZqaINPHUy_sP0eWdmAw&ip=81.181.57.52&id=o-AK_VQZE_CF6ri6TpPkU94rAltzRFhx-zyw8UyDbm92an&itag=399&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2
2024-04-16 15:05:51 UTC	1255	IN	Data Raw: 33 30 37 35 31 38 36 2c 22 77 69 64 74 68 22 3a 31 39 32 30 2c 22 68 65 69 67 68 74 22 3a 31 30 38 30 2c 22 69 6e 69 74 52 61 6e 67 65 22 3a 7b 22 73 74 61 72 74 22 3a 22 30 22 2c 22 65 6e 64 22 3a 22 36 39 39 22 7d 2c 22 69 6e 64 65 78 52 61 6e 67 65 22 3a 7b 22 73 74 61 72 74 22 3a 22 37 30 30 22 2c 22 65 6e 64 22 3a 22 31 31 30 33 22 7d 2c 22 6c 61 73 74 4d 6f 64 69 66 69 65 64 22 3a 22 31 36 39 33 34 37 36 39 34 39 36 37 35 38 37 39 22 2c 22 63 6f 6e 74 65 6e 74 4c 65 6e 67 74 68 22 3a 22 32 39 35 31 33 31 31 35 22 2c 22 71 75 61 6c 69 74 79 22 3a 22 68 64 31 30 38 30 22 2c 22 66 70 73 22 3a 32 35 2c 22 71 75 61 6c 69 74 79 4c 61 62 65 6c 22 3a 22 31 30 38 30 70 22 2c 22 70 72 6f 6a 65 63 74 69 6f 6e 54 79 70 65 22 3a 22 52 45 43 54 41 4e 47 55 4c 41 Data Ascii: 3075186,"width":1920,"height":1080,"initRange":{"start":"0","end":"699"},"indexRange":{"start":"700","end":"1103"},"lastModified":"1693476949675879","contentLength":"29513115","quality":"hd1080","fps":25,"qualityLabel":"1080p","projectionType":"RECTANGULA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.11	49883	142.251.15.91	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:51 UTC	970	OUT	GET /generate_204?eIuGOg HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/embed/wAD9uO9YAQw?playlist=wAD9uO9YAQw&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&origin=https%3A%2F%2Fniceindiatravel.com&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
2024-04-16 15:05:52 UTC	203	IN	HTTP/1.1 204 No Content Content-Length: 0 Cross-Origin-Resource-Policy: cross-origin Date: Tue, 16 Apr 2024 15:05:52 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.11	49884	74.125.136.155	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:52 UTC	666	OUT	GET /pagead/id?slf_rd=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:52 UTC	808	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.youtube.com Content-Type: application/json; charset=UTF-8 Date: Tue, 16 Apr 2024 15:05:52 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-16 15:05:52 UTC	106	IN	Data Raw: 36 34 0d 0a 29 5d 7d 27 0a 0a 7b 22 69 64 22 3a 22 41 4e 79 50 78 4b 6f 6e 4e 39 69 76 39 48 69 47 55 45 44 4b 49 68 35 48 68 54 76 36 7a 63 4e 51 34 4d 79 74 38 6b 69 59 45 7a 74 79 58 61 73 4d 38 30 37 2d 45 52 30 4e 6a 65 41 6d 71 6f 4f 47 34 6b 76 57 69 30 44 78 47 39 4d 4e 22 2c 22 74 79 70 65 22 3a 34 7d 0d 0a Data Ascii: 64)]}'{"id":"ANyPxKonN9iv9HiGUEDKIh5HhTv6zcNQ4Myt8kiYEztyXasM807-ER0NjeAmqoOG4kvWi0DxG9MN","type":4}
2024-04-16 15:05:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.11	49886	142.251.15.91	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:53 UTC	2522	OUT	POST /api/stats/qoe?fmt=397&cpn=jRkNZCQf5oAkxA7P&el=embedded&ns=yt&fexp=v1%2C23858057%2C125239%2C21348%2C76094%2C54572%2C73455%2C230596%2C84737%2C36318%2C6271%2C26443548%2C7111%2C31786%2C4557%2C9954%2C1192%2C10512%2C15711%2C273%2C6966%2C2%2C6689%2C2007%2C4957%2C4115%2C12518%2C1263%2C5498%2C796%2C643%2C5538%2C2893%2C2%2C531%2C819%2C531%2C4712%2C5599%2C1104%2C4465&cl=623129822&seq=1&docid=wAD9uO9YAQw&ei=z5MeZqaINPHUy_sP0eWdmAw&event=streamingstats&plid=AAYWOBLu246nWADi&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2FwAD9uO9YAQw%3Fplaylist%3DwAD9uO9YAQw%26iv_load_policy%3D3%26enablejsapi%3D1%26disablekb%3D1%26autoplay%3D1%26controls%3D0%26showinfo%3D0%26rel%3D0%26loop%3D1%26origin%3Dhttps%253A%252F%252Fniceindiatravel.com%26widgetid%3D1&qclc=ChBqUmtOWkNRZjVvQWt4QTdQEAE&embargoed=0&cbr=Chrome&cbrver=117.0.0.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240409.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&vps=0.000:N,0.013:B,1.271:B,1.271:B&cat=streaming&cmt=0.013:0.000,1.271:0.000&vfs=1.271:397:398::r&view=1.271:1267:713&bwe=1.271:130000&bat=1.271:1:1&vis=1.271:0&bh=1.271:0.000 HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 226 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1713279950337&flash=0&frm=2&u_tz=120&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1267%2C713&vis=1&wgl=true&ca_type=image sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded X-YouTube-Utc-Offset: 120 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240409.01.00 X-YouTube-Time-Zone: Europe/Zurich X-Goog-Visitor-Id: CgtJMG1ONlpYUjdsOCjOp_qwBjIKCgJVUxIEGgAgKA%3D%3D sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/wAD9uO9YAQw?playlist=wAD9uO9YAQw&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&origin=https%3A%2F%2Fniceindiatravel.com&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
2024-04-16 15:05:53 UTC	226	OUT	Data Raw: 73 65 73 73 69 6f 6e 5f 74 6f 6b 65 6e 3d 51 55 46 46 4c 55 68 71 62 55 4a 47 56 47 56 72 4c 55 55 35 64 6a 4a 71 65 56 68 4e 64 57 56 74 4d 6d 78 79 61 58 70 51 54 6d 68 31 5a 33 78 42 51 33 4a 74 63 30 74 75 64 30 64 4e 56 6b 46 4f 4e 53 31 55 62 57 4e 6e 53 55 74 47 53 54 4e 59 65 6b 4e 77 4e 44 5a 74 4e 54 52 70 53 46 52 4e 4e 45 68 42 52 45 46 74 64 46 46 46 54 6b 4d 32 53 6c 59 30 61 32 55 35 64 6e 68 77 63 6b 5a 54 58 7a 51 78 52 6d 68 33 55 45 64 53 4e 45 31 6a 54 32 6c 6d 56 46 67 77 63 55 68 58 64 47 74 48 61 43 30 33 57 43 31 6e 62 6a 56 48 64 6e 68 36 63 47 70 5a 64 31 55 32 61 48 5a 30 63 6d 74 33 63 6e 4e 57 62 46 46 68 61 57 31 45 5a 77 25 33 44 25 33 44 Data Ascii: session_token=QUFFLUhqbUJGVGVrLUU5djJqeVhNdWVtMmxyaXpQTmh1Z3xBQ3Jtc0tud0dNVkFONS1UbWNnSUtGSTNYekNwNDZtNTRpSFRNNEhBREFtdFFFTkM2SlY0a2U5dnhwckZTXzQxRmh3UEdSNE1jT2lmVFgwcUhXdGtHaC03WC1nbjVHdnh6cGpZd1U2aHZ0cmt3cnNWbFFhaW1EZw%3D%3D
2024-04-16 15:05:53 UTC	504	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Date: Tue, 16 Apr 2024 15:05:53 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Server: Video Stats Server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.11	49887	142.251.15.91	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:53 UTC	1187	OUT	POST /youtubei/v1/next?prettyPrint=false HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 2891 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Youtube-Bootstrap-Logged-In: false sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json X-Youtube-Client-Name: 56 X-Youtube-Client-Version: 1.20240409.01.00 X-Goog-Visitor-Id: CgtJMG1ONlpYUjdsOCjOp_qwBjIKCgJVUxIEGgAgKA%3D%3D sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/wAD9uO9YAQw?playlist=wAD9uO9YAQw&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&origin=https%3A%2F%2Fniceindiatravel.com&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
2024-04-16 15:05:53 UTC	2891	OUT	Data Raw: 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 68 6c 22 3a 22 65 6e 22 2c 22 67 6c 22 3a 22 55 53 22 2c 22 72 65 6d 6f 74 65 48 6f 73 74 22 3a 22 38 31 2e 31 38 31 2e 35 37 2e 35 32 22 2c 22 64 65 76 69 63 65 4d 61 6b 65 22 3a 22 22 2c 22 64 65 76 69 63 65 4d 6f 64 65 6c 22 3a 22 22 2c 22 76 69 73 69 74 6f 72 44 61 74 61 22 3a 22 43 67 74 4a 4d 47 31 4f 4e 6c 70 59 55 6a 64 73 4f 43 6a 4f 70 5f 71 77 42 6a 49 4b 43 67 4a 56 55 78 49 45 47 67 41 67 4b 41 25 33 44 25 33 44 22 2c 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 Data Ascii: {"context":{"client":{"hl":"en","gl":"US","remoteHost":"81.181.57.52","deviceMake":"","deviceModel":"","visitorData":"CgtJMG1ONlpYUjdsOCjOp_qwBjIKCgJVUxIEGgAgKA%3D%3D","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like
2024-04-16 15:05:53 UTC	432	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Tue, 16 Apr 2024 15:05:53 GMT Server: scaffolding on HTTPServer2 Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-16 15:05:53 UTC	823	IN	Data Raw: 31 34 36 32 0d 0a 7b 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 7b 22 73 65 72 76 69 63 65 54 72 61 63 6b 69 6e 67 50 61 72 61 6d 73 22 3a 5b 7b 22 73 65 72 76 69 63 65 22 3a 22 43 53 49 22 2c 22 70 61 72 61 6d 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 63 22 2c 22 76 61 6c 75 65 22 3a 22 57 45 42 5f 45 4d 42 45 44 44 45 44 5f 50 4c 41 59 45 52 22 7d 2c 7b 22 6b 65 79 22 3a 22 63 76 65 72 22 2c 22 76 61 6c 75 65 22 3a 22 31 2e 32 30 32 34 30 34 30 39 2e 30 31 2e 30 30 22 7d 2c 7b 22 6b 65 79 22 3a 22 79 74 5f 6c 69 22 2c 22 76 61 6c 75 65 22 3a 22 30 22 7d 2c 7b 22 6b 65 79 22 3a 22 47 65 74 57 61 74 63 68 4e 65 78 74 5f 72 69 64 22 2c 22 76 61 6c 75 65 22 3a 22 30 78 34 38 64 64 36 61 61 64 37 39 37 39 39 62 33 35 22 7d 5d 7d 2c 7b 22 73 65 72 76 69 Data Ascii: 1462{"responseContext":{"serviceTrackingParams":[{"service":"CSI","params":[{"key":"c","value":"WEB_EMBEDDED_PLAYER"},{"key":"cver","value":"1.20240409.01.00"},{"key":"yt_li","value":"0"},{"key":"GetWatchNext_rid","value":"0x48dd6aad79799b35"}]},{"servi
2024-04-16 15:05:53 UTC	1255	IN	Data Raw: 33 36 38 39 2c 35 31 30 35 34 37 36 34 2c 35 31 30 35 37 38 34 34 2c 35 31 30 35 37 38 35 35 2c 35 31 30 36 30 33 35 33 2c 35 31 30 36 33 36 34 33 2c 35 31 30 36 34 38 33 35 2c 35 31 30 36 39 32 36 39 2c 35 31 30 37 35 33 34 37 2c 35 31 30 37 39 32 33 39 2c 35 31 30 38 39 31 37 35 2c 35 31 30 38 39 34 34 31 2c 35 31 30 39 31 30 35 38 2c 35 31 30 39 31 33 33 31 2c 35 31 30 39 32 32 39 31 2c 35 31 30 39 32 36 36 30 2c 35 31 30 39 34 31 37 35 2c 35 31 30 39 34 31 39 35 2c 35 31 30 39 34 32 30 32 2c 35 31 30 39 34 32 30 37 2c 35 31 30 39 38 32 39 37 2c 35 31 30 39 38 32 39 39 2c 35 31 31 30 30 34 30 31 2c 35 31 31 30 31 34 35 34 2c 35 31 31 30 33 38 35 38 2c 35 31 31 30 34 39 38 38 2c 35 31 31 30 36 39 39 35 2c 35 31 31 30 37 33 33 31 2c 35 31 31 30 37 33 34 Data Ascii: 3689,51054764,51057844,51057855,51060353,51063643,51064835,51069269,51075347,51079239,51089175,51089441,51091058,51091331,51092291,51092660,51094175,51094195,51094202,51094207,51098297,51098299,51100401,51101454,51103858,51104988,51106995,51107331,5110734
2024-04-16 15:05:53 UTC	1255	IN	Data Raw: 72 4f 76 65 72 6c 61 79 52 65 6e 64 65 72 65 72 22 3a 7b 22 73 68 61 72 65 42 75 74 74 6f 6e 22 3a 7b 22 62 75 74 74 6f 6e 52 65 6e 64 65 72 65 72 22 3a 7b 22 73 74 79 6c 65 22 3a 22 53 54 59 4c 45 5f 4f 50 41 43 49 54 59 22 2c 22 73 69 7a 65 22 3a 22 53 49 5a 45 5f 44 45 46 41 55 4c 54 22 2c 22 69 73 44 69 73 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 74 65 78 74 22 3a 7b 22 72 75 6e 73 22 3a 5b 7b 22 74 65 78 74 22 3a 22 43 6f 70 79 20 6c 69 6e 6b 22 7d 5d 7d 2c 22 69 63 6f 6e 22 3a 7b 22 69 63 6f 6e 54 79 70 65 22 3a 22 4c 49 4e 4b 22 7d 2c 22 6e 61 76 69 67 61 74 69 6f 6e 45 6e 64 70 6f 69 6e 74 22 3a 7b 22 63 6c 69 63 6b 54 72 61 63 6b 69 6e 67 50 61 72 61 6d 73 22 3a 22 43 41 51 51 38 46 73 69 45 77 6a 74 76 6f 32 59 67 63 65 46 41 78 56 6a 79 6e 49 Data Ascii: rOverlayRenderer":{"shareButton":{"buttonRenderer":{"style":"STYLE_OPACITY","size":"SIZE_DEFAULT","isDisabled":false,"text":{"runs":[{"text":"Copy link"}]},"icon":{"iconType":"LINK"},"navigationEndpoint":{"clickTrackingParams":"CAQQ8FsiEwjtvo2YgceFAxVjynI
2024-04-16 15:05:53 UTC	1255	IN	Data Raw: 74 2e 63 6f 6d 2f 38 30 75 2d 56 70 30 4c 77 54 5f 47 7a 50 74 58 64 42 5a 77 4c 61 6d 35 44 30 36 49 6c 65 4d 4c 36 4f 4a 36 66 67 64 33 79 72 5f 4c 6e 43 39 30 39 37 64 33 66 46 64 77 31 6f 33 42 5a 38 64 6a 4d 34 36 35 4b 49 6f 42 59 62 41 3d 73 38 38 2d 63 2d 6b 2d 63 30 78 30 30 66 66 66 66 66 66 2d 6e 6f 2d 72 6a 22 2c 22 77 69 64 74 68 22 3a 36 38 2c 22 68 65 69 67 68 74 22 3a 36 38 7d 5d 7d 2c 22 63 6f 6c 6c 61 70 73 65 64 52 65 6e 64 65 72 65 72 22 3a 7b 22 65 6d 62 65 64 64 65 64 50 6c 61 79 65 72 4f 76 65 72 6c 61 79 56 69 64 65 6f 44 65 74 61 69 6c 73 43 6f 6c 6c 61 70 73 65 64 52 65 6e 64 65 72 65 72 22 3a 7b 22 74 69 74 6c 65 22 3a 7b 22 72 75 6e 73 22 3a 5b 7b 22 74 65 78 74 22 3a 22 49 6e 63 72 65 64 69 62 6c 65 20 49 6e 64 69 61 20 2d 20 Data Ascii: t.com/80u-Vp0LwT_GzPtXdBZwLam5D06IleML6OJ6fgd3yr_LnC9097d3fFdw1o3BZ8djM465KIoBYbA=s88-c-k-c0x00ffffff-no-rj","width":68,"height":68}]},"collapsedRenderer":{"embeddedPlayerOverlayVideoDetailsCollapsedRenderer":{"title":{"runs":[{"text":"Incredible India -
2024-04-16 15:05:53 UTC	638	IN	Data Raw: 31 4d 4a 62 4a 79 2d 78 44 51 22 5d 2c 22 70 61 72 61 6d 73 22 3a 22 45 67 49 49 42 78 67 42 22 7d 7d 2c 7b 22 63 6c 69 63 6b 54 72 61 63 6b 69 6e 67 50 61 72 61 6d 73 22 3a 22 43 41 49 51 6d 79 73 69 45 77 6a 74 76 6f 32 59 67 63 65 46 41 78 56 6a 79 6e 49 4a 48 58 30 53 41 72 49 79 43 57 6c 32 4c 57 56 74 59 6d 56 6b 63 77 3d 3d 22 2c 22 75 6e 73 75 62 73 63 72 69 62 65 45 6e 64 70 6f 69 6e 74 22 3a 7b 22 63 68 61 6e 6e 65 6c 49 64 73 22 3a 5b 22 55 43 4d 78 4a 50 63 68 47 4c 45 5f 43 4a 31 4d 4a 62 4a 79 2d 78 44 51 22 5d 2c 22 70 61 72 61 6d 73 22 3a 22 43 67 49 49 42 78 67 42 22 7d 7d 5d 7d 7d 2c 22 73 75 62 74 69 74 6c 65 22 3a 7b 22 72 75 6e 73 22 3a 5b 7b 22 74 65 78 74 22 3a 22 31 37 35 4b 20 73 75 62 73 63 72 69 62 65 72 73 22 7d 5d 7d 2c 22 74 Data Ascii: 1MJbJy-xDQ"],"params":"EgIIBxgB"}},{"clickTrackingParams":"CAIQmysiEwjtvo2YgceFAxVjynIJHX0SArIyCWl2LWVtYmVkcw==","unsubscribeEndpoint":{"channelIds":["UCMxJPchGLE_CJ1MJbJy-xDQ"],"params":"CgIIBxgB"}}]}},"subtitle":{"runs":[{"text":"175K subscribers"}]},"t
2024-04-16 15:05:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.11	49890	142.251.15.91	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:53 UTC	1558	OUT	POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 7306 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1713279944974&flash=0&frm=2&u_tz=120&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1267%2C713&vis=2&wgl=true&ca_type=image sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Goog-Request-Time: 1713279951920 Content-Type: application/json X-Goog-Event-Time: 1713279951920 X-YouTube-Utc-Offset: 120 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240409.01.00 X-YouTube-Time-Zone: Europe/Zurich X-Goog-Visitor-Id: CgtJMG1ONlpYUjdsOCjIp_qwBjIKCgJVUxIEGgAgKA%3D%3D sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/wAD9uO9YAQw?playlist=wAD9uO9YAQw&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&origin=https%3A%2F%2Fniceindiatravel.com&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
2024-04-16 15:05:53 UTC	7306	OUT	Data Raw: 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 68 6c 22 3a 22 65 6e 22 2c 22 67 6c 22 3a 22 55 53 22 2c 22 63 6c 69 65 6e 74 4e 61 6d 65 22 3a 35 36 2c 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 31 2e 32 30 32 34 30 34 30 39 2e 30 31 2e 30 30 22 2c 22 63 6f 6e 66 69 67 49 6e 66 6f 22 3a 7b 22 61 70 70 49 6e 73 74 61 6c 6c 44 61 74 61 22 3a 22 43 4d 69 6e 2d 72 41 47 45 4f 48 79 72 77 55 51 36 73 4f 76 42 52 43 33 71 37 41 46 45 4e 72 55 73 41 55 51 6f 70 4b 77 42 52 43 6c 77 76 34 53 45 4d 7a 66 72 67 55 51 6c 63 2d 77 42 52 44 50 71 4c 41 46 45 4a 62 63 73 41 55 51 76 6f 71 77 42 52 44 47 5f 62 63 69 45 50 79 46 73 41 55 51 36 35 4f 75 42 52 44 77 6e 4c 41 46 45 4d 6e 33 72 77 55 51 76 50 6d 76 42 52 44 6e 75 71 38 46 45 4b Data Ascii: {"context":{"client":{"hl":"en","gl":"US","clientName":56,"clientVersion":"1.20240409.01.00","configInfo":{"appInstallData":"CMin-rAGEOHyrwUQ6sOvBRC3q7AFENrUsAUQopKwBRClwv4SEMzfrgUQlc-wBRDPqLAFEJbcsAUQvoqwBRDG_bciEPyFsAUQ65OuBRDwnLAFEMn3rwUQvPmvBRDnuq8FEK
2024-04-16 15:05:53 UTC	432	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Tue, 16 Apr 2024 15:05:53 GMT Server: scaffolding on HTTPServer2 Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-16 15:05:53 UTC	34	IN	Data Raw: 31 63 0d 0a 7b 0a 20 20 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 20 7b 7d 0a 7d 0a 0d 0a Data Ascii: 1c{ "responseContext": {}}
2024-04-16 15:05:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.11	49888	173.194.7.170	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:53 UTC	2024	OUT	POST /videoplayback?expire=1713301551&ei=z5MeZqaINPHUy_sP0eWdmAw&ip=81.181.57.52&id=o-AK_VQZE_CF6ri6TpPkU94rAltzRFhx-zyw8UyDbm92an&itag=397&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=rv&mm=31%2C26&mn=sn-p5qddn7r%2Csn-q4fzen7y&ms=au%2Conr&mv=m&mvi=5&pl=26&initcwndbps=1037500&bui=AaUN6a3s47I8DH5tfER8eoONooFMs4s3jVxna4ZF91C8A1Gza_IOqkYGPnQpPK-o_ksgN35FfuGDEzM0&spc=UWF9f23cm3E0SyaFNYj9c7site_J8s_S8LscSx3wF1hOKBtyWYP0GnG2Cg&vprv=1&svpuc=1&mime=video%2Fmp4&ns=3MU0XGYF0YLhwMCoDsoy4rUQ&gir=yes&clen=8585092&dur=156.920&lmt=1693475130863016&mt=1713279665&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=4437434&n=dE3EcJJbXrJoeg&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIhAIpZ5-V8TcXgSJcV3Ro_-49ScSFGgmouPJFlW7XWIxODAiAKoKNtQ9rOitIeyA9V0dKt5fDaKVlQr2vO1zTEv9tOvA%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ALClDIEwRAIgY7oNLxdHQ3y5ea4JM0eSAhzCz5EIZ0n4m6puyJNJL08CIGp4e60VLA3egstDcbPjOmgcwu1FjGiah0x4Yw6p70ys&alr=yes&cpn=jRkNZCQf5oAkxA7P&cver=1.20240409.01.00&range=0-176547&rn=1&rbuf=0&pot=Ijius661yK09fO3U2vnj9J_84N_e6vvZysDh8MT83uzfxOzZ5_jt1OTl-8vn9unU79Tl8ouA6pad9w==&ump=1&srfvp=1&altitags=396%2C395 HTTP/1.1 Host: rr5---sn-p5qddn7r.googlevideo.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:53 UTC	2	OUT	Data Raw: 78 00 Data Ascii: x
2024-04-16 15:05:53 UTC	1030	IN	HTTP/1.1 200 OK Last-Modified: Thu, 31 Aug 2023 09:45:30 GMT Content-Type: application/vnd.yt-ump Date: Tue, 16 Apr 2024 15:05:53 GMT Expires: Tue, 16 Apr 2024 15:05:53 GMT Cache-Control: private, max-age=21298 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Restrict-Formats-Hint: None X-Content-Type-Options: nosniff Server: gvs 1.0
2024-04-16 15:05:53 UTC	3	IN	Data Raw: 34 0d 0a Data Ascii: 4
2024-04-16 15:05:53 UTC	4	IN	Data Raw: 3a 02 08 01 Data Ascii: :
2024-04-16 15:05:53 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-16 15:05:53 UTC	4	IN	Data Raw: 33 31 0d 0a Data Ascii: 31
2024-04-16 15:05:53 UTC	49	IN	Data Raw: 14 2f 08 00 12 0b 77 41 44 39 75 4f 39 59 41 51 77 18 8d 03 20 a8 db f1 bc ce 86 81 03 30 00 6a 0c 08 8d 03 10 a8 db f1 bc ce 86 81 03 70 a4 e3 0a Data Ascii: /wAD9uO9YAQw 0jp
2024-04-16 15:05:53 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-16 15:05:53 UTC	7	IN	Data Raw: 32 62 31 61 39 0d 0a Data Ascii: 2b1a9
2024-04-16 15:05:53 UTC	5	IN	Data Raw: 15 c5 8d 15 00 Data Ascii:
2024-04-16 15:05:53 UTC	16384	IN	Data Raw: 00 00 00 1c 66 74 79 70 64 61 73 68 00 00 00 00 69 73 6f 36 61 76 30 31 6d 70 34 31 00 00 02 a0 6d 6f 6f 76 00 00 00 6c 6d 76 68 64 00 00 00 00 e1 15 33 b3 e1 15 33 b3 00 00 32 00 00 1e a6 00 00 01 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 28 6d 76 65 78 00 00 00 20 74 72 65 78 00 00 00 00 00 00 00 01 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 04 74 72 61 6b 00 00 00 5c 74 6b 68 64 00 00 00 03 e1 15 33 b3 e1 15 33 b3 00 00 00 01 00 00 00 00 00 1e a6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ftypdashiso6av01mp41moovlmvhd332@(mvex trextrak\tkhd33

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.11	49889	173.194.7.170	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:53 UTC	1888	OUT	POST /videoplayback?expire=1713301551&ei=z5MeZqaINPHUy_sP0eWdmAw&ip=81.181.57.52&id=o-AK_VQZE_CF6ri6TpPkU94rAltzRFhx-zyw8UyDbm92an&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=rv&mm=31%2C26&mn=sn-p5qddn7r%2Csn-q4fzen7y&ms=au%2Conr&mv=m&mvi=5&pl=26&initcwndbps=1037500&bui=AaUN6a3s47I8DH5tfER8eoONooFMs4s3jVxna4ZF91C8A1Gza_IOqkYGPnQpPK-o_ksgN35FfuGDEzM0&spc=UWF9f23cm3E0SyaFNYj9c7site_J8s_S8LscSx3wF1hOKBtyWYP0GnG2Cg&vprv=1&svpuc=1&mime=audio%2Fwebm&ns=3MU0XGYF0YLhwMCoDsoy4rUQ&gir=yes&clen=2888165&dur=156.941&lmt=1693419053011705&mt=1713279665&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=4432434&n=dE3EcJJbXrJoeg&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRgIhAO7O0riH-82oSBBVPyjd5Jxsi6zAO8WXqcCVaOGoDhzkAiEAhjrR__t-wBjgV8KW0_wFgo4NtgnzzCnYPIhVd-d0xXc%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ALClDIEwRAIgY7oNLxdHQ3y5ea4JM0eSAhzCz5EIZ0n4m6puyJNJL08CIGp4e60VLA3egstDcbPjOmgcwu1FjGiah0x4Yw6p70ys&alr=yes&cpn=jRkNZCQf5oAkxA7P&cver=1.20240409.01.00&range=0-66070&rn=2&rbuf=0&pot=IjgKlAqSbIqZW0nzft5H0zvbRPh6zV_-budF12Dbest740j-Q99J80DCX-xD0U3zS_NB1S-nTrE50A==&ump=1&srfvp=1 HTTP/1.1 Host: rr5---sn-p5qddn7r.googlevideo.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:53 UTC	2	OUT	Data Raw: 78 00 Data Ascii: x
2024-04-16 15:05:53 UTC	999	IN	HTTP/1.1 200 OK Last-Modified: Wed, 30 Aug 2023 18:10:53 GMT Content-Type: application/vnd.yt-ump Date: Tue, 16 Apr 2024 15:05:53 GMT Expires: Tue, 16 Apr 2024 15:05:53 GMT Cache-Control: private, max-age=21298 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-04-16 15:05:53 UTC	3	IN	Data Raw: 34 0d 0a Data Ascii: 4
2024-04-16 15:05:53 UTC	4	IN	Data Raw: 3a 02 08 01 Data Ascii: :
2024-04-16 15:05:53 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-16 15:05:53 UTC	4	IN	Data Raw: 33 31 0d 0a Data Ascii: 31
2024-04-16 15:05:53 UTC	49	IN	Data Raw: 14 2f 08 00 12 0b 77 41 44 39 75 4f 39 59 41 51 77 18 fb 01 20 f9 a5 f1 c8 fd 84 81 03 30 00 6a 0c 08 fb 01 10 f9 a5 f1 c8 fd 84 81 03 70 97 84 04 Data Ascii: /wAD9uO9YAQw 0jp
2024-04-16 15:05:53 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-16 15:05:53 UTC	7	IN	Data Raw: 31 30 32 31 63 0d 0a Data Ascii: 1021c
2024-04-16 15:05:53 UTC	5	IN	Data Raw: 15 d8 10 08 00 Data Ascii:
2024-04-16 15:05:53 UTC	16384	IN	Data Raw: 1a 45 df a3 9f 42 86 81 01 42 f7 81 01 42 f2 81 04 42 f3 81 08 42 82 84 77 65 62 6d 42 87 81 04 42 85 81 02 18 53 80 67 01 00 00 00 00 2c 11 b5 11 4d 9b 74 bf 4d bb 92 53 ab 84 15 49 a9 66 53 ac 88 00 00 00 00 00 00 00 44 4d bb 92 53 ab 84 16 54 ae 6b 53 ac 88 00 00 00 00 00 00 00 7f 4d bb 92 53 ab 84 1c 53 bb 6b 53 ac 88 00 00 00 00 00 00 00 da 15 49 a9 66 b6 2a d7 b1 83 0f 42 40 44 89 84 48 19 43 40 4d 80 91 67 6f 6f 67 6c 65 2f 76 69 64 65 6f 2d 66 69 6c 65 57 41 91 67 6f 6f 67 6c 65 2f 76 69 64 65 6f 2d 66 69 6c 65 16 54 ae 6b d6 ae d4 d7 81 01 73 c5 87 2e 1f e3 63 9f a5 b7 83 81 02 9c 81 00 22 b5 9c 83 65 6e 67 86 86 41 5f 4f 50 55 53 63 a2 93 4f 70 75 73 48 65 61 64 01 02 38 01 80 bb 00 00 00 00 00 56 aa 83 63 2e a0 56 bb 84 04 c4 b4 00 e1 8d b5 84 Data Ascii: EBBBBBwebmBBSg,MtMSIfSDMSTkSMSSkSIf*B@DHC@Mgoogle/video-fileWAgoogle/video-fileTks.c"engA_OPUScOpusHead8Vc.V
2024-04-16 15:05:54 UTC	2076	OUT	POST /videoplayback?expire=1713301551&ei=z5MeZqaINPHUy_sP0eWdmAw&ip=81.181.57.52&id=o-AK_VQZE_CF6ri6TpPkU94rAltzRFhx-zyw8UyDbm92an&itag=398&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=rv&mm=31%2C26&mn=sn-p5qddn7r%2Csn-q4fzen7y&ms=au%2Conr&mv=m&mvi=5&pl=26&initcwndbps=1037500&bui=AaUN6a3s47I8DH5tfER8eoONooFMs4s3jVxna4ZF91C8A1Gza_IOqkYGPnQpPK-o_ksgN35FfuGDEzM0&spc=UWF9f23cm3E0SyaFNYj9c7site_J8s_S8LscSx3wF1hOKBtyWYP0GnG2Cg&vprv=1&svpuc=1&mime=video%2Fmp4&ns=3MU0XGYF0YLhwMCoDsoy4rUQ&gir=yes&clen=15356387&dur=156.920&lmt=1693475295824447&mt=1713279665&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=4437434&n=dE3EcJJbXrJoeg&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRAIgUZTH4tUnOL9pbm5TsI-QSUN1NOPnlxyhCCtIoRPDzQQCIHjiPJh-Vx-Q-dVoHfFNuAvDp7638SgMVZfwowDlRL8y&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ALClDIEwRAIgY7oNLxdHQ3y5ea4JM0eSAhzCz5EIZ0n4m6puyJNJL08CIGp4e60VLA3egstDcbPjOmgcwu1FjGiah0x4Yw6p70ys&alr=yes&cpn=jRkNZCQf5oAkxA7P&cver=1.20240409.01.00&range=0-1103&rn=3&rbuf=0&pot=MnQOO1U1F0jKng4Dp2KSNN3y5y1bzjJ_A48XTu9WWa58lwemsUacv72qMXWZBCh6QHNGA2g-Xv1rlLyKc0KseW9DyEcqmFQyYx-p5jqaYxJ9cHrsLlEJc5aqrr1JtQj8jYdY1BLU61mhhQZT1FkQt74QnYDxdw==&ump=1&srfvp=1 HTTP/1.1 Host: rr5---sn-p5qddn7r.googlevideo.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:54 UTC	1030	IN	HTTP/1.1 200 OK Last-Modified: Thu, 31 Aug 2023 09:48:15 GMT Content-Type: application/vnd.yt-ump Date: Tue, 16 Apr 2024 15:05:54 GMT Expires: Tue, 16 Apr 2024 15:05:54 GMT Cache-Control: private, max-age=21297 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Restrict-Formats-Hint: None X-Content-Type-Options: nosniff Server: gvs 1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.11	49891	142.250.105.156	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:53 UTC	462	OUT	GET /pagead/id?slf_rd=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:53 UTC	754	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Content-Type: application/json; charset=UTF-8 Date: Tue, 16 Apr 2024 15:05:53 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-16 15:05:53 UTC	106	IN	Data Raw: 36 34 0d 0a 29 5d 7d 27 0a 0a 7b 22 69 64 22 3a 22 41 4e 79 50 78 4b 71 6e 4c 64 61 5f 36 64 62 64 36 64 36 77 79 53 4f 54 66 6e 73 64 4f 55 4d 59 38 62 51 6c 36 37 49 5f 4d 35 52 68 4e 50 75 6b 77 42 61 45 47 45 35 76 39 47 37 46 4f 50 68 39 67 66 59 46 75 63 4e 65 5f 6c 67 39 22 2c 22 74 79 70 65 22 3a 34 7d 0d 0a Data Ascii: 64)]}'{"id":"ANyPxKqnLda_6dbd6d6wySOTfnsdOUMY8bQl67I_M5RhNPukwBaEGE5v9G7FOPh9gfYFucNe_lg9","type":4}
2024-04-16 15:05:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.11	49893	173.194.219.136	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:53 UTC	572	OUT	GET /youtubei/v1/player?prettyPrint=false HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
2024-04-16 15:05:54 UTC	240	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1606 Date: Tue, 16 Apr 2024 15:05:54 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 15:05:54 UTC	1015	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 405 (Method Not Allowed)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px aria
2024-04-16 15:05:54 UTC	591	IN	Data Raw: 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d Data Ascii: .com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.11	49894	173.194.7.170	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:54 UTC	1976	OUT	POST /videoplayback?expire=1713301551&ei=z5MeZqaINPHUy_sP0eWdmAw&ip=81.181.57.52&id=o-AK_VQZE_CF6ri6TpPkU94rAltzRFhx-zyw8UyDbm92an&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=rv&mm=31%2C26&mn=sn-p5qddn7r%2Csn-q4fzen7y&ms=au%2Conr&mv=m&mvi=5&pl=26&initcwndbps=1037500&bui=AaUN6a3s47I8DH5tfER8eoONooFMs4s3jVxna4ZF91C8A1Gza_IOqkYGPnQpPK-o_ksgN35FfuGDEzM0&spc=UWF9f23cm3E0SyaFNYj9c7site_J8s_S8LscSx3wF1hOKBtyWYP0GnG2Cg&vprv=1&svpuc=1&mime=audio%2Fwebm&ns=3MU0XGYF0YLhwMCoDsoy4rUQ&gir=yes&clen=2888165&dur=156.941&lmt=1693419053011705&mt=1713279665&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=4432434&n=dE3EcJJbXrJoeg&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRgIhAO7O0riH-82oSBBVPyjd5Jxsi6zAO8WXqcCVaOGoDhzkAiEAhjrR__t-wBjgV8KW0_wFgo4NtgnzzCnYPIhVd-d0xXc%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ALClDIEwRAIgY7oNLxdHQ3y5ea4JM0eSAhzCz5EIZ0n4m6puyJNJL08CIGp4e60VLA3egstDcbPjOmgcwu1FjGiah0x4Yw6p70ys&alr=yes&cpn=jRkNZCQf5oAkxA7P&cver=1.20240409.01.00&range=66071-131606&rn=4&rbuf=3763&pot=MnQOO1U1F0jKng4Dp2KSNN3y5y1bzjJ_A48XTu9WWa58lwemsUacv72qMXWZBCh6QHNGA2g-Xv1rlLyKc0KseW9DyEcqmFQyYx-p5jqaYxJ9cHrsLlEJc5aqrr1JtQj8jYdY1BLU61mhhQZT1FkQt74QnYDxdw==&ump=1&srfvp=1 HTTP/1.1 Host: rr5---sn-p5qddn7r.googlevideo.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:54 UTC	2	OUT	Data Raw: 78 00 Data Ascii: x
2024-04-16 15:05:54 UTC	999	IN	HTTP/1.1 200 OK Last-Modified: Wed, 30 Aug 2023 18:10:53 GMT Content-Type: application/vnd.yt-ump Date: Tue, 16 Apr 2024 15:05:54 GMT Expires: Tue, 16 Apr 2024 15:05:54 GMT Cache-Control: private, max-age=21297 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-04-16 15:05:54 UTC	3	IN	Data Raw: 34 0d 0a Data Ascii: 4
2024-04-16 15:05:54 UTC	4	IN	Data Raw: 3a 02 08 01 Data Ascii: :
2024-04-16 15:05:54 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-16 15:05:54 UTC	4	IN	Data Raw: 33 33 0d 0a Data Ascii: 33
2024-04-16 15:05:54 UTC	51	IN	Data Raw: 14 31 08 00 12 0b 77 41 44 39 75 4f 39 59 41 51 77 18 fb 01 20 f9 a5 f1 c8 fd 84 81 03 30 97 84 04 6a 0c 08 fb 01 10 f9 a5 f1 c8 fd 84 81 03 70 80 80 04 Data Ascii: 1wAD9uO9YAQw 0jp
2024-04-16 15:05:54 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-16 15:05:54 UTC	7	IN	Data Raw: 31 30 30 30 35 0d 0a Data Ascii: 10005
2024-04-16 15:05:54 UTC	5	IN	Data Raw: 15 c1 00 08 00 Data Ascii:
2024-04-16 15:05:54 UTC	16384	IN	Data Raw: 33 69 17 48 94 ca 7f 83 e6 5e bf 83 52 90 15 e0 47 bb 9a 85 e4 4c 40 8e 49 b8 d5 9d 65 06 f3 03 e7 f4 89 dd 66 99 df 9a 62 66 58 a2 34 12 63 9d 62 48 49 ee 63 3f 82 9f 64 4f b6 ad b7 27 7c 1b 2f da e5 ca 4d 5d 5e 5a 14 bb a2 4f e6 27 5f 57 0c 87 24 c7 56 c3 5d 10 12 04 54 8e 2d f5 fc d5 c1 74 a4 f2 89 fc 23 96 5a a7 bd f8 15 14 43 44 aa b5 ff 44 fa 2e c7 a6 a0 79 b8 68 b8 c2 82 b1 d9 b2 8c 0a 86 7f 62 f4 a6 1f 24 dd f5 91 0f 64 da 3b f8 70 40 4d 5f 01 da 29 31 10 d1 24 f3 62 16 7a f1 f2 e0 25 99 b5 82 12 d8 ad bc 94 4b 4c 1f da 8f f6 dc bb 9a 9b 33 c4 e6 4b f0 16 d3 8c 78 62 26 9e 10 e9 aa 1e 94 f5 ef e4 9a a3 41 2c 81 10 b9 80 fc 53 bb f8 65 cb d0 bb 84 8c 6c 8a 71 0d 4b 80 c6 54 2f 2a 57 c0 14 20 c0 e4 3e 39 a5 ad 68 07 9e dc df 2f d2 4e f3 69 8d 75 40 Data Ascii: 3iH^RGL@IefbfX4cbHIc?dO'\|/M]^ZO'_W$V]T-t#ZCDD.yhb$d;p@M_)1$bz%KL3Kxb&A,SelqKT/*W >9h/Niu@
2024-04-16 15:05:54 UTC	1977	OUT	POST /videoplayback?expire=1713301551&ei=z5MeZqaINPHUy_sP0eWdmAw&ip=81.181.57.52&id=o-AK_VQZE_CF6ri6TpPkU94rAltzRFhx-zyw8UyDbm92an&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=rv&mm=31%2C26&mn=sn-p5qddn7r%2Csn-q4fzen7y&ms=au%2Conr&mv=m&mvi=5&pl=26&initcwndbps=1037500&bui=AaUN6a3s47I8DH5tfER8eoONooFMs4s3jVxna4ZF91C8A1Gza_IOqkYGPnQpPK-o_ksgN35FfuGDEzM0&spc=UWF9f23cm3E0SyaFNYj9c7site_J8s_S8LscSx3wF1hOKBtyWYP0GnG2Cg&vprv=1&svpuc=1&mime=audio%2Fwebm&ns=3MU0XGYF0YLhwMCoDsoy4rUQ&gir=yes&clen=2888165&dur=156.941&lmt=1693419053011705&mt=1713279665&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=4432434&n=dE3EcJJbXrJoeg&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRgIhAO7O0riH-82oSBBVPyjd5Jxsi6zAO8WXqcCVaOGoDhzkAiEAhjrR__t-wBjgV8KW0_wFgo4NtgnzzCnYPIhVd-d0xXc%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ALClDIEwRAIgY7oNLxdHQ3y5ea4JM0eSAhzCz5EIZ0n4m6puyJNJL08CIGp4e60VLA3egstDcbPjOmgcwu1FjGiah0x4Yw6p70ys&alr=yes&cpn=jRkNZCQf5oAkxA7P&cver=1.20240409.01.00&range=131607-174704&rn=5&rbuf=7525&pot=MnQOO1U1F0jKng4Dp2KSNN3y5y1bzjJ_A48XTu9WWa58lwemsUacv72qMXWZBCh6QHNGA2g-Xv1rlLyKc0KseW9DyEcqmFQyYx-p5jqaYxJ9cHrsLlEJc5aqrr1JtQj8jYdY1BLU61mhhQZT1FkQt74QnYDxdw==&ump=1&srfvp=1 HTTP/1.1 Host: rr5---sn-p5qddn7r.googlevideo.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:54 UTC	999	IN	HTTP/1.1 200 OK Last-Modified: Wed, 30 Aug 2023 18:10:53 GMT Content-Type: application/vnd.yt-ump Date: Tue, 16 Apr 2024 15:05:54 GMT Expires: Tue, 16 Apr 2024 15:05:54 GMT Cache-Control: private, max-age=21297 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-04-16 15:05:55 UTC	2093	OUT	POST /videoplayback?expire=1713301551&ei=z5MeZqaINPHUy_sP0eWdmAw&ip=81.181.57.52&id=o-AK_VQZE_CF6ri6TpPkU94rAltzRFhx-zyw8UyDbm92an&itag=397&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=rv&mm=31%2C26&mn=sn-p5qddn7r%2Csn-q4fzen7y&ms=au%2Conr&mv=m&mvi=5&pl=26&initcwndbps=1037500&bui=AaUN6a3s47I8DH5tfER8eoONooFMs4s3jVxna4ZF91C8A1Gza_IOqkYGPnQpPK-o_ksgN35FfuGDEzM0&spc=UWF9f23cm3E0SyaFNYj9c7site_J8s_S8LscSx3wF1hOKBtyWYP0GnG2Cg&vprv=1&svpuc=1&mime=video%2Fmp4&ns=3MU0XGYF0YLhwMCoDsoy4rUQ&gir=yes&clen=8585092&dur=156.920&lmt=1693475130863016&mt=1713279665&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=4437434&n=dE3EcJJbXrJoeg&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIhAIpZ5-V8TcXgSJcV3Ro_-49ScSFGgmouPJFlW7XWIxODAiAKoKNtQ9rOitIeyA9V0dKt5fDaKVlQr2vO1zTEv9tOvA%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ALClDIEwRAIgY7oNLxdHQ3y5ea4JM0eSAhzCz5EIZ0n4m6puyJNJL08CIGp4e60VLA3egstDcbPjOmgcwu1FjGiah0x4Yw6p70ys&alr=yes&cpn=jRkNZCQf5oAkxA7P&cver=1.20240409.01.00&range=176548-398200&rn=6&rbuf=7245&pot=MnQOO1U1F0jKng4Dp2KSNN3y5y1bzjJ_A48XTu9WWa58lwemsUacv72qMXWZBCh6QHNGA2g-Xv1rlLyKc0KseW9DyEcqmFQyYx-p5jqaYxJ9cHrsLlEJc5aqrr1JtQj8jYdY1BLU61mhhQZT1FkQt74QnYDxdw==&ump=1&srfvp=1 HTTP/1.1 Host: rr5---sn-p5qddn7r.googlevideo.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:55 UTC	1030	IN	HTTP/1.1 200 OK Last-Modified: Thu, 31 Aug 2023 09:45:30 GMT Content-Type: application/vnd.yt-ump Date: Tue, 16 Apr 2024 15:05:55 GMT Expires: Tue, 16 Apr 2024 15:05:55 GMT Cache-Control: private, max-age=21296 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Restrict-Formats-Hint: None X-Content-Type-Options: nosniff Server: gvs 1.0
2024-04-16 15:05:55 UTC	1977	OUT	POST /videoplayback?expire=1713301551&ei=z5MeZqaINPHUy_sP0eWdmAw&ip=81.181.57.52&id=o-AK_VQZE_CF6ri6TpPkU94rAltzRFhx-zyw8UyDbm92an&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=rv&mm=31%2C26&mn=sn-p5qddn7r%2Csn-q4fzen7y&ms=au%2Conr&mv=m&mvi=5&pl=26&initcwndbps=1037500&bui=AaUN6a3s47I8DH5tfER8eoONooFMs4s3jVxna4ZF91C8A1Gza_IOqkYGPnQpPK-o_ksgN35FfuGDEzM0&spc=UWF9f23cm3E0SyaFNYj9c7site_J8s_S8LscSx3wF1hOKBtyWYP0GnG2Cg&vprv=1&svpuc=1&mime=audio%2Fwebm&ns=3MU0XGYF0YLhwMCoDsoy4rUQ&gir=yes&clen=2888165&dur=156.941&lmt=1693419053011705&mt=1713279665&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=4432434&n=dE3EcJJbXrJoeg&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRgIhAO7O0riH-82oSBBVPyjd5Jxsi6zAO8WXqcCVaOGoDhzkAiEAhjrR__t-wBjgV8KW0_wFgo4NtgnzzCnYPIhVd-d0xXc%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ALClDIEwRAIgY7oNLxdHQ3y5ea4JM0eSAhzCz5EIZ0n4m6puyJNJL08CIGp4e60VLA3egstDcbPjOmgcwu1FjGiah0x4Yw6p70ys&alr=yes&cpn=jRkNZCQf5oAkxA7P&cver=1.20240409.01.00&range=174705-298327&rn=7&rbuf=9201&pot=MnQOO1U1F0jKng4Dp2KSNN3y5y1bzjJ_A48XTu9WWa58lwemsUacv72qMXWZBCh6QHNGA2g-Xv1rlLyKc0KseW9DyEcqmFQyYx-p5jqaYxJ9cHrsLlEJc5aqrr1JtQj8jYdY1BLU61mhhQZT1FkQt74QnYDxdw==&ump=1&srfvp=1 HTTP/1.1 Host: rr5---sn-p5qddn7r.googlevideo.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:56 UTC	999	IN	HTTP/1.1 200 OK Last-Modified: Wed, 30 Aug 2023 18:10:53 GMT Content-Type: application/vnd.yt-ump Date: Tue, 16 Apr 2024 15:05:55 GMT Expires: Tue, 16 Apr 2024 15:05:55 GMT Cache-Control: private, max-age=21296 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-04-16 15:05:56 UTC	2088	OUT	POST /videoplayback?expire=1713301551&ei=z5MeZqaINPHUy_sP0eWdmAw&ip=81.181.57.52&id=o-AK_VQZE_CF6ri6TpPkU94rAltzRFhx-zyw8UyDbm92an&itag=398&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=rv&mm=31%2C26&mn=sn-p5qddn7r%2Csn-q4fzen7y&ms=au%2Conr&mv=m&mvi=5&pl=26&initcwndbps=1037500&bui=AaUN6a3s47I8DH5tfER8eoONooFMs4s3jVxna4ZF91C8A1Gza_IOqkYGPnQpPK-o_ksgN35FfuGDEzM0&spc=UWF9f23cm3E0SyaFNYj9c7site_J8s_S8LscSx3wF1hOKBtyWYP0GnG2Cg&vprv=1&svpuc=1&mime=video%2Fmp4&ns=3MU0XGYF0YLhwMCoDsoy4rUQ&gir=yes&clen=15356387&dur=156.920&lmt=1693475295824447&mt=1713279665&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=4437434&n=dE3EcJJbXrJoeg&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRAIgUZTH4tUnOL9pbm5TsI-QSUN1NOPnlxyhCCtIoRPDzQQCIHjiPJh-Vx-Q-dVoHfFNuAvDp7638SgMVZfwowDlRL8y&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ALClDIEwRAIgY7oNLxdHQ3y5ea4JM0eSAhzCz5EIZ0n4m6puyJNJL08CIGp4e60VLA3egstDcbPjOmgcwu1FjGiah0x4Yw6p70ys&alr=yes&cpn=jRkNZCQf5oAkxA7P&cver=1.20240409.01.00&range=657413-1911423&rn=8&rbuf=11180&pot=MnQOO1U1F0jKng4Dp2KSNN3y5y1bzjJ_A48XTu9WWa58lwemsUacv72qMXWZBCh6QHNGA2g-Xv1rlLyKc0KseW9DyEcqmFQyYx-p5jqaYxJ9cHrsLlEJc5aqrr1JtQj8jYdY1BLU61mhhQZT1FkQt74QnYDxdw==&ump=1&srfvp=1 HTTP/1.1 Host: rr5---sn-p5qddn7r.googlevideo.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:56 UTC	1030	IN	HTTP/1.1 200 OK Last-Modified: Thu, 31 Aug 2023 09:48:15 GMT Content-Type: application/vnd.yt-ump Date: Tue, 16 Apr 2024 15:05:56 GMT Expires: Tue, 16 Apr 2024 15:05:56 GMT Cache-Control: private, max-age=21295 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Restrict-Formats-Hint: None X-Content-Type-Options: nosniff Server: gvs 1.0
2024-04-16 15:05:58 UTC	1978	OUT	POST /videoplayback?expire=1713301551&ei=z5MeZqaINPHUy_sP0eWdmAw&ip=81.181.57.52&id=o-AK_VQZE_CF6ri6TpPkU94rAltzRFhx-zyw8UyDbm92an&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=rv&mm=31%2C26&mn=sn-p5qddn7r%2Csn-q4fzen7y&ms=au%2Conr&mv=m&mvi=5&pl=26&initcwndbps=1037500&bui=AaUN6a3s47I8DH5tfER8eoONooFMs4s3jVxna4ZF91C8A1Gza_IOqkYGPnQpPK-o_ksgN35FfuGDEzM0&spc=UWF9f23cm3E0SyaFNYj9c7site_J8s_S8LscSx3wF1hOKBtyWYP0GnG2Cg&vprv=1&svpuc=1&mime=audio%2Fwebm&ns=3MU0XGYF0YLhwMCoDsoy4rUQ&gir=yes&clen=2888165&dur=156.941&lmt=1693419053011705&mt=1713279665&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=4432434&n=dE3EcJJbXrJoeg&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRgIhAO7O0riH-82oSBBVPyjd5Jxsi6zAO8WXqcCVaOGoDhzkAiEAhjrR__t-wBjgV8KW0_wFgo4NtgnzzCnYPIhVd-d0xXc%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ALClDIEwRAIgY7oNLxdHQ3y5ea4JM0eSAhzCz5EIZ0n4m6puyJNJL08CIGp4e60VLA3egstDcbPjOmgcwu1FjGiah0x4Yw6p70ys&alr=yes&cpn=jRkNZCQf5oAkxA7P&cver=1.20240409.01.00&range=298328-563147&rn=9&rbuf=14775&pot=MnQOO1U1F0jKng4Dp2KSNN3y5y1bzjJ_A48XTu9WWa58lwemsUacv72qMXWZBCh6QHNGA2g-Xv1rlLyKc0KseW9DyEcqmFQyYx-p5jqaYxJ9cHrsLlEJc5aqrr1JtQj8jYdY1BLU61mhhQZT1FkQt74QnYDxdw==&ump=1&srfvp=1 HTTP/1.1 Host: rr5---sn-p5qddn7r.googlevideo.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:58 UTC	999	IN	HTTP/1.1 200 OK Last-Modified: Wed, 30 Aug 2023 18:10:53 GMT Content-Type: application/vnd.yt-ump Date: Tue, 16 Apr 2024 15:05:58 GMT Expires: Tue, 16 Apr 2024 15:05:58 GMT Cache-Control: private, max-age=21293 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-04-16 15:06:03 UTC	2090	OUT	POST /videoplayback?expire=1713301551&ei=z5MeZqaINPHUy_sP0eWdmAw&ip=81.181.57.52&id=o-AK_VQZE_CF6ri6TpPkU94rAltzRFhx-zyw8UyDbm92an&itag=398&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=rv&mm=31%2C26&mn=sn-p5qddn7r%2Csn-q4fzen7y&ms=au%2Conr&mv=m&mvi=5&pl=26&initcwndbps=1037500&bui=AaUN6a3s47I8DH5tfER8eoONooFMs4s3jVxna4ZF91C8A1Gza_IOqkYGPnQpPK-o_ksgN35FfuGDEzM0&spc=UWF9f23cm3E0SyaFNYj9c7site_J8s_S8LscSx3wF1hOKBtyWYP0GnG2Cg&vprv=1&svpuc=1&mime=video%2Fmp4&ns=3MU0XGYF0YLhwMCoDsoy4rUQ&gir=yes&clen=15356387&dur=156.920&lmt=1693475295824447&mt=1713279665&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=4437434&n=dE3EcJJbXrJoeg&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRAIgUZTH4tUnOL9pbm5TsI-QSUN1NOPnlxyhCCtIoRPDzQQCIHjiPJh-Vx-Q-dVoHfFNuAvDp7638SgMVZfwowDlRL8y&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ALClDIEwRAIgY7oNLxdHQ3y5ea4JM0eSAhzCz5EIZ0n4m6puyJNJL08CIGp4e60VLA3egstDcbPjOmgcwu1FjGiah0x4Yw6p70ys&alr=yes&cpn=jRkNZCQf5oAkxA7P&cver=1.20240409.01.00&range=1911424-3548470&rn=10&rbuf=19797&pot=MnQOO1U1F0jKng4Dp2KSNN3y5y1bzjJ_A48XTu9WWa58lwemsUacv72qMXWZBCh6QHNGA2g-Xv1rlLyKc0KseW9DyEcqmFQyYx-p5jqaYxJ9cHrsLlEJc5aqrr1JtQj8jYdY1BLU61mhhQZT1FkQt74QnYDxdw==&ump=1&srfvp=1 HTTP/1.1 Host: rr5---sn-p5qddn7r.googlevideo.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:06:03 UTC	1030	IN	HTTP/1.1 200 OK Last-Modified: Thu, 31 Aug 2023 09:48:15 GMT Content-Type: application/vnd.yt-ump Date: Tue, 16 Apr 2024 15:06:03 GMT Expires: Tue, 16 Apr 2024 15:06:03 GMT Cache-Control: private, max-age=21288 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Restrict-Formats-Hint: None X-Content-Type-Options: nosniff Server: gvs 1.0
2024-04-16 15:06:13 UTC	1980	OUT	POST /videoplayback?expire=1713301551&ei=z5MeZqaINPHUy_sP0eWdmAw&ip=81.181.57.52&id=o-AK_VQZE_CF6ri6TpPkU94rAltzRFhx-zyw8UyDbm92an&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=rv&mm=31%2C26&mn=sn-p5qddn7r%2Csn-q4fzen7y&ms=au%2Conr&mv=m&mvi=5&pl=26&initcwndbps=1037500&bui=AaUN6a3s47I8DH5tfER8eoONooFMs4s3jVxna4ZF91C8A1Gza_IOqkYGPnQpPK-o_ksgN35FfuGDEzM0&spc=UWF9f23cm3E0SyaFNYj9c7site_J8s_S8LscSx3wF1hOKBtyWYP0GnG2Cg&vprv=1&svpuc=1&mime=audio%2Fwebm&ns=3MU0XGYF0YLhwMCoDsoy4rUQ&gir=yes&clen=2888165&dur=156.941&lmt=1693419053011705&mt=1713279665&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=4432434&n=dE3EcJJbXrJoeg&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRgIhAO7O0riH-82oSBBVPyjd5Jxsi6zAO8WXqcCVaOGoDhzkAiEAhjrR__t-wBjgV8KW0_wFgo4NtgnzzCnYPIhVd-d0xXc%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ALClDIEwRAIgY7oNLxdHQ3y5ea4JM0eSAhzCz5EIZ0n4m6puyJNJL08CIGp4e60VLA3egstDcbPjOmgcwu1FjGiah0x4Yw6p70ys&alr=yes&cpn=jRkNZCQf5oAkxA7P&cver=1.20240409.01.00&range=563148-1120503&rn=11&rbuf=27341&pot=MnQOO1U1F0jKng4Dp2KSNN3y5y1bzjJ_A48XTu9WWa58lwemsUacv72qMXWZBCh6QHNGA2g-Xv1rlLyKc0KseW9DyEcqmFQyYx-p5jqaYxJ9cHrsLlEJc5aqrr1JtQj8jYdY1BLU61mhhQZT1FkQt74QnYDxdw==&ump=1&srfvp=1 HTTP/1.1 Host: rr5---sn-p5qddn7r.googlevideo.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:06:14 UTC	999	IN	HTTP/1.1 200 OK Last-Modified: Wed, 30 Aug 2023 18:10:53 GMT Content-Type: application/vnd.yt-ump Date: Tue, 16 Apr 2024 15:06:14 GMT Expires: Tue, 16 Apr 2024 15:06:14 GMT Cache-Control: private, max-age=21277 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.11	49895	142.251.15.91	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:54 UTC	1559	OUT	POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 16119 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1713279950205&flash=0&frm=2&u_tz=120&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1267%2C713&vis=1&wgl=true&ca_type=image sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Goog-Request-Time: 1713279953027 Content-Type: application/json X-Goog-Event-Time: 1713279953027 X-YouTube-Utc-Offset: 120 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240409.01.00 X-YouTube-Time-Zone: Europe/Zurich X-Goog-Visitor-Id: CgtJMG1ONlpYUjdsOCjOp_qwBjIKCgJVUxIEGgAgKA%3D%3D sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/wAD9uO9YAQw?playlist=wAD9uO9YAQw&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&origin=https%3A%2F%2Fniceindiatravel.com&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
2024-04-16 15:05:54 UTC	16119	OUT	Data Raw: 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 68 6c 22 3a 22 65 6e 22 2c 22 67 6c 22 3a 22 55 53 22 2c 22 63 6c 69 65 6e 74 4e 61 6d 65 22 3a 35 36 2c 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 31 2e 32 30 32 34 30 34 30 39 2e 30 31 2e 30 30 22 2c 22 63 6f 6e 66 69 67 49 6e 66 6f 22 3a 7b 22 61 70 70 49 6e 73 74 61 6c 6c 44 61 74 61 22 3a 22 43 4d 36 6e 2d 72 41 47 45 4d 66 4f 73 41 55 51 36 2d 6a 2d 45 68 44 56 69 4c 41 46 45 4c 4c 54 73 41 55 51 74 2d 2d 76 42 52 44 50 71 4c 41 46 45 4c 7a 59 73 41 55 51 38 4a 79 77 42 52 43 68 77 37 41 46 45 4a 61 56 73 41 55 51 69 4f 4f 76 42 52 44 30 71 37 41 46 45 50 61 72 73 41 55 51 36 35 4f 75 42 52 43 71 32 4c 41 46 45 4f 36 7a 73 41 55 51 5f 49 57 77 42 52 43 44 76 37 41 46 45 4e Data Ascii: {"context":{"client":{"hl":"en","gl":"US","clientName":56,"clientVersion":"1.20240409.01.00","configInfo":{"appInstallData":"CM6n-rAGEMfOsAUQ6-j-EhDViLAFELLTsAUQt--vBRDPqLAFELzYsAUQ8JywBRChw7AFEJaVsAUQiOOvBRD0q7AFEParsAUQ65OuBRCq2LAFEO6zsAUQ_IWwBRCDv7AFEN
2024-04-16 15:05:54 UTC	432	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Tue, 16 Apr 2024 15:05:54 GMT Server: scaffolding on HTTPServer2 Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-16 15:05:54 UTC	34	IN	Data Raw: 31 63 0d 0a 7b 0a 20 20 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 20 7b 7d 0a 7d 0a 0d 0a Data Ascii: 1c{ "responseContext": {}}
2024-04-16 15:05:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.11	49897	142.250.105.132	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:54 UTC	766	OUT	GET /80u-Vp0LwT_GzPtXdBZwLam5D06IleML6OJ6fgd3yr_LnC9097d3fFdw1o3BZ8djM465KIoBYbA=s88-c-k-c0x00ffffff-no-rj HTTP/1.1 Host: yt3.ggpht.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:54 UTC	531	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Wed, 17 Apr 2024 15:05:54 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="channels4_profile.jpg" X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 15:05:54 GMT Server: fife Content-Length: 9101 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 15:05:54 UTC	724	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 02 02 0a 08 0e 0b 0e 0d 0f 08 0a 0f 0b 0e 0d 08 08 10 0d 0b 0b 0e 0a 0b 0e 09 09 09 0d 0a 0f 08 0d 0a 0b 0a 10 0d 0d 0b 0b 0b 0a 0b 0a 10 0b 08 08 0a 09 0d 0a 08 0b 0e 0e 0a 0d 0e 08 0b 0a 01 03 04 04 06 05 06 0a 06 06 0a 10 0e 0b 0e 10 12 10 10 11 10 10 10 13 13 11 10 10 12 10 15 0f 10 10 10 10 10 0f 10 10 10 12 12 0f 0e 12 13 13 10 0f 13 0f 0f 10 10 10 10 12 13 12 10 10 10 10 10 ff c0 00 11 08 00 58 00 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 07 04 05 06 08 00 03 09 02 01 ff c4 00 36 10 00 03 00 02 01 02 05 03 04 01 02 03 09 00 00 00 01 02 03 11 12 04 13 21 00 05 06 22 31 07 08 23 14 32 41 51 33 15 42 81 92 c1 18 24 34 43 Data Ascii: JFIFXX6!"1#2AQ3B$4C
2024-04-16 15:05:54 UTC	1255	IN	Data Raw: 27 e6 9c 12 87 cf cf 14 c9 bd 39 a8 c0 cb a4 65 99 07 9c 0f 70 fd 50 d3 0f ec 78 25 25 01 c1 18 20 f7 1f d1 cf f5 e2 d8 08 3b 8e 2a a4 51 a3 c7 af 1d e3 9c 67 85 c2 e3 3c 2e 17 0c be ae f5 74 78 33 6a d5 b5 55 ff 00 99 89 f8 54 1f cb 1f e0 7f f6 4e 00 24 0f d7 eb e1 d0 c2 67 9d a9 47 f9 3e c0 7c 93 c4 fd 0e 86 6d 74 c2 08 16 d8 ff 00 81 ee 49 f6 03 8a dd ea 1f 5d bf 9a 17 6e 43 3c 78 c8 af 55 8c dc 65 c2 48 ba 1a b8 db 76 63 80 17 18 0d a8 0b 9f 73 65 cd cc 47 36 77 6d 6b e3 00 52 c9 10 24 67 b8 ac 99 7e af 27 65 34 08 03 73 e7 40 85 21 e5 b2 a6 97 42 32 d4 31 0a d2 b2 9a 4b 34 71 0c 29 40 db b8 ee 41 fe c8 f9 97 9c a4 43 2c b8 f3 2c 8d 42 d8 64 23 8f c9 9b d5 54 86 50 01 a4 cc e8 5e 2b b7 bb 00 e3 1e 16 ae 78 b4 3a 54 40 23 8f a8 d6 89 9b 66 d8 b5 03 45 Data Ascii: '9epPx%% ;*Qg<.tx3jUTN$gG>\|mtI]nC<xUeHvcseG6wmkR$g~'e4s@!B21K4q)@AC,,Bd#TP^+x:T@#fE
2024-04-16 15:05:54 UTC	1255	IN	Data Raw: 0f 17 dd 07 ed 53 54 8c 53 57 0a 3d 51 a5 38 3d 7b 9c 58 b7 8b 1b 9a 5d f8 0f 3f 22 5a 56 46 ab 24 13 e5 47 c5 11 f3 be db 9d bf a7 04 0f 47 7d 66 e5 f9 64 df f4 f7 a4 05 40 46 50 41 51 dc 60 cd 5c 30 57 5d 74 ca 80 55 4b 7c 7b 48 93 cd b9 2f a1 3d 5e 17 99 73 48 15 5e 26 ef 06 e3 73 7e 15 f0 3f 98 a4 ee 28 9b 22 af c8 e1 cd 2f 3c e7 3c b8 2e 9d 24 ea 46 47 61 23 20 bf f0 2d 45 4f fb 48 ad ef 1f 07 86 76 bf 37 94 72 d4 e4 b9 66 2a 3a 9c af dc db 28 60 81 ed dd 86 e0 1c 2f c9 09 dd da 68 dd 8b 9b fe cf f4 4a 13 4f a1 88 8f 02 b4 cb e3 7f e7 50 4f 8f fd 17 c1 40 fe a0 d4 5b 1d 43 8f 9a 72 2b ed 4b b0 fd 3f c7 16 e3 ec 47 ee 47 95 e5 35 48 72 85 56 55 26 73 ea b0 dd f4 c9 75 98 66 2c ed 1f 73 4c aa b8 01 6b 02 57 f0 01 8c fa db 59 c9 74 fa c5 e6 fc 81 4a 46 Data Ascii: STSW=Q8={X]?"ZVF$GG}fd@FPAQ`\0W]tUK\|{H/=^sH^&s~?("/<<.$FGa# -EOHv7rf*:(`/hJOPO@[Cr+K?GG5HrVU&suf,sLkWYtJF
2024-04-16 15:05:54 UTC	1255	IN	Data Raw: b6 fb 8c 4f f5 3c 0b fe eb 39 56 bf 2d 82 56 5c 61 c6 9c d2 8d 5d 7a 19 a7 b8 25 83 83 da bd 65 07 00 37 b4 00 43 6b e0 27 33 76 9b 9a ca c0 ed 12 22 01 bf d4 e4 b6 de 3d aa c8 3e 68 51 df 82 fc b2 a0 e5 71 a1 8f 3e ab 3b 9b 35 da 83 1b ba 3b 83 b8 b1 5f 51 3c 73 f3 d5 5e ad fd 6d 40 c4 5d e8 c8 91 44 8a b8 e8 ca 41 1b 8e 80 50 95 09 ad 2a 45 5d a7 2f d4 59 88 66 ea b2 59 f4 3f 85 d2 c7 2e a3 5b 19 28 aa 15 0a be 21 18 13 6e 03 15 fa ad 40 21 4b 76 50 00 11 74 be 62 f2 bc d1 e9 f4 12 80 5d 89 60 54 39 20 85 18 16 0b 20 38 15 72 c2 d5 5b 3b cc 62 6e 31 c4 f4 60 22 30 12 96 e0 5a 8d f8 cb 58 03 47 e9 3c ec 32 93 61 b4 c3 96 b6 a1 84 91 77 34 1d 47 4c d1 c5 0c 8f a9 cf ae ce 81 7c 81 45 57 b0 c6 68 9b 21 cf d0 4b 29 b5 3b 10 3c 43 11 92 74 4d 3b 20 d3 aa c9 Data Ascii: O<9V-V\a]z%e7Ck'3v"=>hQq>;5;_Q<s^m@]DAP*E]/YfY?.[(!n@!KvPtb]`T9 8r[;bn1`"0ZXG<2aw4GL\|EWh!K);<CtM;
2024-04-16 15:05:54 UTC	1255	IN	Data Raw: d5 64 26 b4 a0 5e 39 0d 36 63 20 2a b4 57 46 45 0e 9e 02 09 d7 52 1f 55 2d 30 2c c0 92 33 22 dd 3b 8b b1 48 d5 dc 01 54 7b 45 a9 0d b9 06 1a 29 20 31 e9 81 c5 c0 52 00 6c 03 00 af 62 86 72 ba 29 62 4e 56 5d c0 6b 5e dc 9e 78 9e 48 54 e5 14 7c 7f 91 b4 6b 50 12 e1 94 7b 64 d8 47 9f 1f b3 16 8b 49 84 d7 3f 3e 05 ea 35 f9 9a 76 04 93 f4 81 d8 ac 42 8a 0a 59 d6 c8 67 ee 00 3e 67 2d bc 70 47 41 cb 5a 25 d8 1a a1 de c7 bd 82 b3 79 21 63 60 01 54 d8 b1 8f 00 17 7b 27 87 cb fa 8b 99 15 a2 61 8c cd b8 e2 b9 aa fe a7 7e 52 f3 9e 7d 39 60 bb ab 09 58 b6 23 89 2c dd 90 19 ad 04 4f 72 fe 51 a0 d5 72 99 f5 6f a8 51 2a 6c b1 60 69 82 60 3b 9e c2 ab 51 18 ef 47 12 18 d9 e3 ba 9d 53 c3 aa 48 d0 f6 9d cb 5d 90 49 62 68 51 bb 3e 68 7b ed f0 13 72 bc 95 09 0d 85 6c 2a 44 b8 Data Ascii: d&^96c WFERU-0,3";HT{E) 1Rlbr)bNV]k^xHT\|kP{dGI?>5vBYg>g-pGAZ%y!c`T{'a~R}9`X#,OrQroQl`i`;QGSH]IbhQ>h{rl*D
2024-04-16 15:05:54 UTC	1255	IN	Data Raw: 5d 48 59 89 5d db 7a d8 ee 45 00 05 0d 88 16 2e 82 b1 c9 b2 61 09 e2 3e 0a 06 c9 1a 91 fc a8 2d 32 8c 4b a9 f8 3d ea ee 47 b0 15 11 7f ca 26 7c 19 84 62 c6 65 93 a6 4a aa 89 17 f3 30 8c 97 56 18 85 cd d4 d4 6a aa c0 39 24 cc a7 a7 6a 07 6a e4 93 05 46 8c 4c 06 44 c6 e0 21 92 55 08 eb 4f 78 46 d9 66 cc eb 71 a8 a8 5c 65 4c 59 79 7e 4a 5b a9 db b3 e3 f2 61 02 4d dd c0 ea a6 14 39 aa b3 0e 99 0e 63 56 49 95 29 3a d1 4f 23 66 93 4b 12 c9 1f 4c ab 50 27 a9 dc a8 80 36 9c 5a 98 d8 10 0b b2 96 ea 8b 7b 52 c0 1e 22 b3 ac 7a 87 88 49 92 b0 36 c4 28 39 c9 27 66 a9 a9 c4 8a 54 f6 29 58 84 4c 71 a7 58 e8 2e 72 38 2c ba 39 6e 46 d5 21 59 5e 91 ea a8 9b b3 61 4c 41 4e 93 68 3f 52 be d2 45 a4 4b ab b5 02 19 83 0d 3f 36 fc 3e 9b f0 f3 a9 8c 9c 86 5d 20 64 1e 24 62 5f bd Data Ascii: ]HY]zE.a>-2K=G&\|beJ0Vj9$jjFLD!UOxFfq\eLYy~J[aM9cVI):O#fKLP'6Z{R"zI6(9'fT)XLqX.r8,9nF!Y^aLANh?REK?6>] d$b_
2024-04-16 15:05:54 UTC	1255	IN	Data Raw: c6 72 2c 6c 1c 53 a9 52 2f a7 d9 6f a1 4c b8 f4 e5 30 0a dc e3 3e 80 03 1a f1 b8 b3 e9 f1 7b 64 ff 00 93 f2 5b 39 cb 0a a1 3d fc 35 c8 b4 bd 18 03 9f 2c 00 f7 fa 54 50 f3 f3 b9 fe bc 6b 9e b0 9e 38 a5 8b 95 69 c0 09 a7 04 10 3c 75 5c e5 27 b0 f1 b2 7f d7 ef c5 85 e5 71 55 c1 56 01 83 02 ac 08 c8 21 86 08 20 fc 82 3b 1f ef c5 8c 8b 14 78 cf d5 8a 90 ca 68 8d c7 1c cd fb 85 fa 17 4f 25 b3 cd 33 d1 b8 7f f4 ea 36 49 5d 91 83 48 be 18 8a c1 58 b2 86 0c 79 0a b3 7d b6 17 0b 50 00 72 c9 bb 90 15 2c ad 1b 11 65 0a b0 3d bb d0 63 88 52 7d d4 2d de 34 35 9d 7e 8c 7a bb 42 fa ad 33 04 d5 08 da 39 d0 6c 24 0c a5 55 d8 0d ca 5b 13 43 65 62 c2 86 4a 78 1c 72 7c cd 13 57 51 a0 50 4b 2b a0 01 42 17 6c 4f 44 66 77 62 66 01 22 a1 ca 4c 24 d7 67 43 c5 d1 be bb 47 14 12 34 Data Ascii: r,lSR/oL0>{d[9=5,TPk8i<u\'qUV! ;xhO%36I]HXy}Pr,e=cR}-45~zB39l$U[CebJxr\|WQPK+BlODfwbf"L$gCG4
2024-04-16 15:05:54 UTC	847	IN	Data Raw: 24 93 ae 24 ed 08 aa 50 aa ae ec ee 3e a0 46 de 36 a0 2b e4 45 79 1f 4e f8 82 47 86 56 7d 0f fc 3a 26 ac 10 0d 89 de 6d d4 14 ea 96 04 1a 1b b8 62 da b2 85 59 2a 40 87 d6 1c d3 f7 df ef 16 74 2e 1a c1 2a 28 3d d0 6c 46 d9 1c 88 af b9 f2 36 31 db 96 e8 ce 90 40 b1 90 2b 7a 63 91 bf 2a 58 83 db b0 a5 aa 18 8d c1 df 89 b7 92 7d 2c 94 e7 04 94 cf 2e 5a 74 f8 dd 36 d6 90 30 c0 ac 6c cc 2b ec 4a 00 0b b2 56 b3 6f 78 ea 0a 3f 45 8e 73 ac d5 f3 1d 7b eb 75 19 4a d2 31 62 ca 10 6e 2f b1 ee 95 53 73 89 b1 e3 1f ab 77 7f 4f a9 fd dd 10 d2 64 60 c4 6c 28 b6 68 d4 43 2a f9 32 7b f9 c4 f9 34 40 e1 0f 9b fd 3f e3 c4 bf 5b 4e 0b c9 91 fd f5 cc 1e 75 03 ba 3b 2f 76 42 0e ea bf e4 46 f6 2e fd 69 18 0d 36 57 13 85 47 14 69 89 21 94 8f 62 3d fc fb 6e 54 ad d5 3a 92 87 5f aa Data Ascii: $$P>F6+EyNGV}:&mbY@t.(=lF61@+zcX},.Zt60l+JVox?Es{uJ1bn/SswOd`l(hC2{4@?[Nu;/vBF.i6WGi!b=nT:_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.11	49898	142.251.15.91	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:54 UTC	2686	OUT	GET /api/stats/playback?ns=yt&el=embedded&cpn=jRkNZCQf5oAkxA7P&ver=2&cmt=0.001&fmt=397&fs=0&rt=3.186&euri=https%3A%2F%2Fniceindiatravel.com%2F&lact=3242&cl=623129822&mos=1&volume=100&cbr=Chrome&cbrver=117.0.0.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240409.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&autoplay=1&epm=1&splay=1&delay=4&hl=en_US&cr=US&len=156.941&fexp=v1%2C23858057%2C125239%2C21348%2C76094%2C54572%2C73455%2C230596%2C84737%2C36318%2C6271%2C26443548%2C7111%2C31786%2C4557%2C9954%2C1192%2C10512%2C15711%2C273%2C6966%2C2%2C6689%2C2007%2C4957%2C4115%2C12518%2C1263%2C5498%2C796%2C643%2C5538%2C2893%2C2%2C531%2C819%2C531%2C4712%2C5599%2C1104%2C4465&rtn=14&afmt=251&size=1267%3A713&inview=0&muted=1&docid=wAD9uO9YAQw&ei=z5MeZqaINPHUy_sP0eWdmAw&plid=AAYWOBLu246nWADi&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2FwAD9uO9YAQw%3Fplaylist%3DwAD9uO9YAQw%26iv_load_policy%3D3%26enablejsapi%3D1%26disablekb%3D1%26autoplay%3D1%26controls%3D0%26showinfo%3D0%26rel%3D0%26loop%3D1%26origin%3Dhttps%253A%252F%252Fniceindiatravel.com%26widgetid%3D1&list=TLGG0nOp5Ks1AkExNjA0MjAyNA&of=wbAUJoLFDaeeOSJrHXH1sg&vm=CAEQABgEOjJBSHFpSlRKQ0o0WWhpVHlHMVJqeEhSbnJlNUk1alNPVXV4ZUw0cEQ5UlVzeXIxeUxnUWJ3QVBta0tETEtnc3NpZGtCNXlKTU5mRU1yZWRTR1dyMHo2ZGlNTmNSRlJPZVJzcVp1LXFOc2xfWU5ScHZjZm9GWThIWFhXOFllQnlGbzBzVDRmYzFkZHFzMUxoejRjdWpCb084Zkp3am82MmdhQ2w3cFVtUGVURmdoAg HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1713279950337&flash=0&frm=2&u_tz=120&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1267%2C713&vis=1&wgl=true&ca_type=image sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-YouTube-Utc-Offset: 120 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240409.01.00 X-YouTube-Time-Zone: Europe/Zurich X-Goog-Visitor-Id: CgtJMG1ONlpYUjdsOCjOp_qwBjIKCgJVUxIEGgAgKA%3D%3D sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/wAD9uO9YAQw?playlist=wAD9uO9YAQw&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&origin=https%3A%2F%2Fniceindiatravel.com&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
2024-04-16 15:05:55 UTC	410	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Date: Tue, 16 Apr 2024 15:05:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate X-Content-Type-Options: nosniff Server: Video Stats Server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.11	49899	142.251.15.91	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:54 UTC	1447	OUT	GET /ptracking?html5=1&video_id=wAD9uO9YAQw&cpn=jRkNZCQf5oAkxA7P&ei=z5MeZqaINPHUy_sP0eWdmAw&ptk=youtube_none&pltype=contentugc HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1713279950337&flash=0&frm=2&u_tz=120&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1267%2C713&vis=1&wgl=true&ca_type=image sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-YouTube-Utc-Offset: 120 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240409.01.00 X-YouTube-Time-Zone: Europe/Zurich X-Goog-Visitor-Id: CgtJMG1ONlpYUjdsOCjOp_qwBjIKCgJVUxIEGgAgKA%3D%3D sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/wAD9uO9YAQw?playlist=wAD9uO9YAQw&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&origin=https%3A%2F%2Fniceindiatravel.com&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
2024-04-16 15:05:55 UTC	410	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Date: Tue, 16 Apr 2024 15:05:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate X-Content-Type-Options: nosniff Server: Video Stats Server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.11	49902	173.194.219.136	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:55 UTC	610	OUT	GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
2024-04-16 15:05:55 UTC	240	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1609 Date: Tue, 16 Apr 2024 15:05:55 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 15:05:55 UTC	1015	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 405 (Method Not Allowed)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px aria
2024-04-16 15:05:55 UTC	594	IN	Data Raw: 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d Data Ascii: .com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.11	49901	173.194.219.136	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:55 UTC	570	OUT	GET /youtubei/v1/next?prettyPrint=false HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
2024-04-16 15:05:55 UTC	240	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1604 Date: Tue, 16 Apr 2024 15:05:55 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 15:05:55 UTC	1015	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 405 (Method Not Allowed)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px aria
2024-04-16 15:05:55 UTC	589	IN	Data Raw: 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d Data Ascii: .com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.11	49905	74.125.136.132	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:55 UTC	531	OUT	GET /80u-Vp0LwT_GzPtXdBZwLam5D06IleML6OJ6fgd3yr_LnC9097d3fFdw1o3BZ8djM465KIoBYbA=s88-c-k-c0x00ffffff-no-rj HTTP/1.1 Host: yt3.ggpht.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:55 UTC	531	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Wed, 17 Apr 2024 15:05:55 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="channels4_profile.jpg" X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 15:05:55 GMT Server: fife Content-Length: 9101 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 15:05:55 UTC	724	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 02 02 0a 08 0e 0b 0e 0d 0f 08 0a 0f 0b 0e 0d 08 08 10 0d 0b 0b 0e 0a 0b 0e 09 09 09 0d 0a 0f 08 0d 0a 0b 0a 10 0d 0d 0b 0b 0b 0a 0b 0a 10 0b 08 08 0a 09 0d 0a 08 0b 0e 0e 0a 0d 0e 08 0b 0a 01 03 04 04 06 05 06 0a 06 06 0a 10 0e 0b 0e 10 12 10 10 11 10 10 10 13 13 11 10 10 12 10 15 0f 10 10 10 10 10 0f 10 10 10 12 12 0f 0e 12 13 13 10 0f 13 0f 0f 10 10 10 10 12 13 12 10 10 10 10 10 ff c0 00 11 08 00 58 00 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 07 04 05 06 08 00 03 09 02 01 ff c4 00 36 10 00 03 00 02 01 02 05 03 04 01 02 03 09 00 00 00 01 02 03 11 12 04 13 21 00 05 06 22 31 07 08 23 14 32 41 51 33 15 42 81 92 c1 18 24 34 43 Data Ascii: JFIFXX6!"1#2AQ3B$4C
2024-04-16 15:05:55 UTC	1255	IN	Data Raw: 27 e6 9c 12 87 cf cf 14 c9 bd 39 a8 c0 cb a4 65 99 07 9c 0f 70 fd 50 d3 0f ec 78 25 25 01 c1 18 20 f7 1f d1 cf f5 e2 d8 08 3b 8e 2a a4 51 a3 c7 af 1d e3 9c 67 85 c2 e3 3c 2e 17 0c be ae f5 74 78 33 6a d5 b5 55 ff 00 99 89 f8 54 1f cb 1f e0 7f f6 4e 00 24 0f d7 eb e1 d0 c2 67 9d a9 47 f9 3e c0 7c 93 c4 fd 0e 86 6d 74 c2 08 16 d8 ff 00 81 ee 49 f6 03 8a dd ea 1f 5d bf 9a 17 6e 43 3c 78 c8 af 55 8c dc 65 c2 48 ba 1a b8 db 76 63 80 17 18 0d a8 0b 9f 73 65 cd cc 47 36 77 6d 6b e3 00 52 c9 10 24 67 b8 ac 99 7e af 27 65 34 08 03 73 e7 40 85 21 e5 b2 a6 97 42 32 d4 31 0a d2 b2 9a 4b 34 71 0c 29 40 db b8 ee 41 fe c8 f9 97 9c a4 43 2c b8 f3 2c 8d 42 d8 64 23 8f c9 9b d5 54 86 50 01 a4 cc e8 5e 2b b7 bb 00 e3 1e 16 ae 78 b4 3a 54 40 23 8f a8 d6 89 9b 66 d8 b5 03 45 Data Ascii: '9epPx%% ;*Qg<.tx3jUTN$gG>\|mtI]nC<xUeHvcseG6wmkR$g~'e4s@!B21K4q)@AC,,Bd#TP^+x:T@#fE
2024-04-16 15:05:55 UTC	1255	IN	Data Raw: 0f 17 dd 07 ed 53 54 8c 53 57 0a 3d 51 a5 38 3d 7b 9c 58 b7 8b 1b 9a 5d f8 0f 3f 22 5a 56 46 ab 24 13 e5 47 c5 11 f3 be db 9d bf a7 04 0f 47 7d 66 e5 f9 64 df f4 f7 a4 05 40 46 50 41 51 dc 60 cd 5c 30 57 5d 74 ca 80 55 4b 7c 7b 48 93 cd b9 2f a1 3d 5e 17 99 73 48 15 5e 26 ef 06 e3 73 7e 15 f0 3f 98 a4 ee 28 9b 22 af c8 e1 cd 2f 3c e7 3c b8 2e 9d 24 ea 46 47 61 23 20 bf f0 2d 45 4f fb 48 ad ef 1f 07 86 76 bf 37 94 72 d4 e4 b9 66 2a 3a 9c af dc db 28 60 81 ed dd 86 e0 1c 2f c9 09 dd da 68 dd 8b 9b fe cf f4 4a 13 4f a1 88 8f 02 b4 cb e3 7f e7 50 4f 8f fd 17 c1 40 fe a0 d4 5b 1d 43 8f 9a 72 2b ed 4b b0 fd 3f c7 16 e3 ec 47 ee 47 95 e5 35 48 72 85 56 55 26 73 ea b0 dd f4 c9 75 98 66 2c ed 1f 73 4c aa b8 01 6b 02 57 f0 01 8c fa db 59 c9 74 fa c5 e6 fc 81 4a 46 Data Ascii: STSW=Q8={X]?"ZVF$GG}fd@FPAQ`\0W]tUK\|{H/=^sH^&s~?("/<<.$FGa# -EOHv7rf*:(`/hJOPO@[Cr+K?GG5HrVU&suf,sLkWYtJF
2024-04-16 15:05:55 UTC	1255	IN	Data Raw: b6 fb 8c 4f f5 3c 0b fe eb 39 56 bf 2d 82 56 5c 61 c6 9c d2 8d 5d 7a 19 a7 b8 25 83 83 da bd 65 07 00 37 b4 00 43 6b e0 27 33 76 9b 9a ca c0 ed 12 22 01 bf d4 e4 b6 de 3d aa c8 3e 68 51 df 82 fc b2 a0 e5 71 a1 8f 3e ab 3b 9b 35 da 83 1b ba 3b 83 b8 b1 5f 51 3c 73 f3 d5 5e ad fd 6d 40 c4 5d e8 c8 91 44 8a b8 e8 ca 41 1b 8e 80 50 95 09 ad 2a 45 5d a7 2f d4 59 88 66 ea b2 59 f4 3f 85 d2 c7 2e a3 5b 19 28 aa 15 0a be 21 18 13 6e 03 15 fa ad 40 21 4b 76 50 00 11 74 be 62 f2 bc d1 e9 f4 12 80 5d 89 60 54 39 20 85 18 16 0b 20 38 15 72 c2 d5 5b 3b cc 62 6e 31 c4 f4 60 22 30 12 96 e0 5a 8d f8 cb 58 03 47 e9 3c ec 32 93 61 b4 c3 96 b6 a1 84 91 77 34 1d 47 4c d1 c5 0c 8f a9 cf ae ce 81 7c 81 45 57 b0 c6 68 9b 21 cf d0 4b 29 b5 3b 10 3c 43 11 92 74 4d 3b 20 d3 aa c9 Data Ascii: O<9V-V\a]z%e7Ck'3v"=>hQq>;5;_Q<s^m@]DAP*E]/YfY?.[(!n@!KvPtb]`T9 8r[;bn1`"0ZXG<2aw4GL\|EWh!K);<CtM;
2024-04-16 15:05:55 UTC	1255	IN	Data Raw: d5 64 26 b4 a0 5e 39 0d 36 63 20 2a b4 57 46 45 0e 9e 02 09 d7 52 1f 55 2d 30 2c c0 92 33 22 dd 3b 8b b1 48 d5 dc 01 54 7b 45 a9 0d b9 06 1a 29 20 31 e9 81 c5 c0 52 00 6c 03 00 af 62 86 72 ba 29 62 4e 56 5d c0 6b 5e dc 9e 78 9e 48 54 e5 14 7c 7f 91 b4 6b 50 12 e1 94 7b 64 d8 47 9f 1f b3 16 8b 49 84 d7 3f 3e 05 ea 35 f9 9a 76 04 93 f4 81 d8 ac 42 8a 0a 59 d6 c8 67 ee 00 3e 67 2d bc 70 47 41 cb 5a 25 d8 1a a1 de c7 bd 82 b3 79 21 63 60 01 54 d8 b1 8f 00 17 7b 27 87 cb fa 8b 99 15 a2 61 8c cd b8 e2 b9 aa fe a7 7e 52 f3 9e 7d 39 60 bb ab 09 58 b6 23 89 2c dd 90 19 ad 04 4f 72 fe 51 a0 d5 72 99 f5 6f a8 51 2a 6c b1 60 69 82 60 3b 9e c2 ab 51 18 ef 47 12 18 d9 e3 ba 9d 53 c3 aa 48 d0 f6 9d cb 5d 90 49 62 68 51 bb 3e 68 7b ed f0 13 72 bc 95 09 0d 85 6c 2a 44 b8 Data Ascii: d&^96c WFERU-0,3";HT{E) 1Rlbr)bNV]k^xHT\|kP{dGI?>5vBYg>g-pGAZ%y!c`T{'a~R}9`X#,OrQroQl`i`;QGSH]IbhQ>h{rl*D
2024-04-16 15:05:55 UTC	1255	IN	Data Raw: 5d 48 59 89 5d db 7a d8 ee 45 00 05 0d 88 16 2e 82 b1 c9 b2 61 09 e2 3e 0a 06 c9 1a 91 fc a8 2d 32 8c 4b a9 f8 3d ea ee 47 b0 15 11 7f ca 26 7c 19 84 62 c6 65 93 a6 4a aa 89 17 f3 30 8c 97 56 18 85 cd d4 d4 6a aa c0 39 24 cc a7 a7 6a 07 6a e4 93 05 46 8c 4c 06 44 c6 e0 21 92 55 08 eb 4f 78 46 d9 66 cc eb 71 a8 a8 5c 65 4c 59 79 7e 4a 5b a9 db b3 e3 f2 61 02 4d dd c0 ea a6 14 39 aa b3 0e 99 0e 63 56 49 95 29 3a d1 4f 23 66 93 4b 12 c9 1f 4c ab 50 27 a9 dc a8 80 36 9c 5a 98 d8 10 0b b2 96 ea 8b 7b 52 c0 1e 22 b3 ac 7a 87 88 49 92 b0 36 c4 28 39 c9 27 66 a9 a9 c4 8a 54 f6 29 58 84 4c 71 a7 58 e8 2e 72 38 2c ba 39 6e 46 d5 21 59 5e 91 ea a8 9b b3 61 4c 41 4e 93 68 3f 52 be d2 45 a4 4b ab b5 02 19 83 0d 3f 36 fc 3e 9b f0 f3 a9 8c 9c 86 5d 20 64 1e 24 62 5f bd Data Ascii: ]HY]zE.a>-2K=G&\|beJ0Vj9$jjFLD!UOxFfq\eLYy~J[aM9cVI):O#fKLP'6Z{R"zI6(9'fT)XLqX.r8,9nF!Y^aLANh?REK?6>] d$b_
2024-04-16 15:05:55 UTC	1255	IN	Data Raw: c6 72 2c 6c 1c 53 a9 52 2f a7 d9 6f a1 4c b8 f4 e5 30 0a dc e3 3e 80 03 1a f1 b8 b3 e9 f1 7b 64 ff 00 93 f2 5b 39 cb 0a a1 3d fc 35 c8 b4 bd 18 03 9f 2c 00 f7 fa 54 50 f3 f3 b9 fe bc 6b 9e b0 9e 38 a5 8b 95 69 c0 09 a7 04 10 3c 75 5c e5 27 b0 f1 b2 7f d7 ef c5 85 e5 71 55 c1 56 01 83 02 ac 08 c8 21 86 08 20 fc 82 3b 1f ef c5 8c 8b 14 78 cf d5 8a 90 ca 68 8d c7 1c cd fb 85 fa 17 4f 25 b3 cd 33 d1 b8 7f f4 ea 36 49 5d 91 83 48 be 18 8a c1 58 b2 86 0c 79 0a b3 7d b6 17 0b 50 00 72 c9 bb 90 15 2c ad 1b 11 65 0a b0 3d bb d0 63 88 52 7d d4 2d de 34 35 9d 7e 8c 7a bb 42 fa ad 33 04 d5 08 da 39 d0 6c 24 0c a5 55 d8 0d ca 5b 13 43 65 62 c2 86 4a 78 1c 72 7c cd 13 57 51 a0 50 4b 2b a0 01 42 17 6c 4f 44 66 77 62 66 01 22 a1 ca 4c 24 d7 67 43 c5 d1 be bb 47 14 12 34 Data Ascii: r,lSR/oL0>{d[9=5,TPk8i<u\'qUV! ;xhO%36I]HXy}Pr,e=cR}-45~zB39l$U[CebJxr\|WQPK+BlODfwbf"L$gCG4
2024-04-16 15:05:55 UTC	847	IN	Data Raw: 24 93 ae 24 ed 08 aa 50 aa ae ec ee 3e a0 46 de 36 a0 2b e4 45 79 1f 4e f8 82 47 86 56 7d 0f fc 3a 26 ac 10 0d 89 de 6d d4 14 ea 96 04 1a 1b b8 62 da b2 85 59 2a 40 87 d6 1c d3 f7 df ef 16 74 2e 1a c1 2a 28 3d d0 6c 46 d9 1c 88 af b9 f2 36 31 db 96 e8 ce 90 40 b1 90 2b 7a 63 91 bf 2a 58 83 db b0 a5 aa 18 8d c1 df 89 b7 92 7d 2c 94 e7 04 94 cf 2e 5a 74 f8 dd 36 d6 90 30 c0 ac 6c cc 2b ec 4a 00 0b b2 56 b3 6f 78 ea 0a 3f 45 8e 73 ac d5 f3 1d 7b eb 75 19 4a d2 31 62 ca 10 6e 2f b1 ee 95 53 73 89 b1 e3 1f ab 77 7f 4f a9 fd dd 10 d2 64 60 c4 6c 28 b6 68 d4 43 2a f9 32 7b f9 c4 f9 34 40 e1 0f 9b fd 3f e3 c4 bf 5b 4e 0b c9 91 fd f5 cc 1e 75 03 ba 3b 2f 76 42 0e ea bf e4 46 f6 2e fd 69 18 0d 36 57 13 85 47 14 69 89 21 94 8f 62 3d fc fb 6e 54 ad d5 3a 92 87 5f aa Data Ascii: $$P>F6+EyNGV}:&mbY@t.(=lF61@+zcX},.Zt60l+JVox?Es{uJ1bn/SswOd`l(hC2{4@?[Nu;/vBF.i6WGi!b=nT:_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.11	49908	173.194.7.170	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:55 UTC	1664	OUT	GET /videoplayback?expire=1713301551&ei=z5MeZqaINPHUy_sP0eWdmAw&ip=81.181.57.52&id=o-AK_VQZE_CF6ri6TpPkU94rAltzRFhx-zyw8UyDbm92an&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=rv&mm=31%2C26&mn=sn-p5qddn7r%2Csn-q4fzen7y&ms=au%2Conr&mv=m&mvi=5&pl=26&initcwndbps=1037500&bui=AaUN6a3s47I8DH5tfER8eoONooFMs4s3jVxna4ZF91C8A1Gza_IOqkYGPnQpPK-o_ksgN35FfuGDEzM0&spc=UWF9f23cm3E0SyaFNYj9c7site_J8s_S8LscSx3wF1hOKBtyWYP0GnG2Cg&vprv=1&svpuc=1&mime=audio%2Fwebm&ns=3MU0XGYF0YLhwMCoDsoy4rUQ&gir=yes&clen=2888165&dur=156.941&lmt=1693419053011705&mt=1713279665&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=4432434&n=dE3EcJJbXrJoeg&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRgIhAO7O0riH-82oSBBVPyjd5Jxsi6zAO8WXqcCVaOGoDhzkAiEAhjrR__t-wBjgV8KW0_wFgo4NtgnzzCnYPIhVd-d0xXc%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ALClDIEwRAIgY7oNLxdHQ3y5ea4JM0eSAhzCz5EIZ0n4m6puyJNJL08CIGp4e60VLA3egstDcbPjOmgcwu1FjGiah0x4Yw6p70ys&alr=yes&cpn=jRkNZCQf5oAkxA7P&cver=1.20240409.01.00&range=0-66070&rn=2&rbuf=0&pot=IjgKlAqSbIqZW0nzft5H0zvbRPh6zV_-budF12Dbest740j-Q99J80DCX-xD0U3zS_NB1S-nTrE50A==&ump=1&srfvp=1 HTTP/1.1 Host: rr5---sn-p5qddn7r.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:55 UTC	495	IN	HTTP/1.1 200 OK Last-Modified: Wed, 30 Aug 2023 18:10:53 GMT Content-Type: application/vnd.yt-ump Date: Tue, 16 Apr 2024 15:05:55 GMT Expires: Tue, 16 Apr 2024 15:05:55 GMT Cache-Control: private, max-age=21296 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-04-16 15:05:55 UTC	3	IN	Data Raw: 34 0d 0a Data Ascii: 4
2024-04-16 15:05:55 UTC	4	IN	Data Raw: 3a 02 08 01 Data Ascii: :
2024-04-16 15:05:55 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-16 15:05:55 UTC	4	IN	Data Raw: 33 31 0d 0a Data Ascii: 31
2024-04-16 15:05:55 UTC	49	IN	Data Raw: 14 2f 08 00 12 0b 77 41 44 39 75 4f 39 59 41 51 77 18 fb 01 20 f9 a5 f1 c8 fd 84 81 03 30 00 6a 0c 08 fb 01 10 f9 a5 f1 c8 fd 84 81 03 70 97 84 04 Data Ascii: /wAD9uO9YAQw 0jp
2024-04-16 15:05:55 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-16 15:05:55 UTC	7	IN	Data Raw: 31 30 32 31 63 0d 0a Data Ascii: 1021c
2024-04-16 15:05:55 UTC	5	IN	Data Raw: 15 d8 10 08 00 Data Ascii:
2024-04-16 15:05:55 UTC	16384	IN	Data Raw: 1a 45 df a3 9f 42 86 81 01 42 f7 81 01 42 f2 81 04 42 f3 81 08 42 82 84 77 65 62 6d 42 87 81 04 42 85 81 02 18 53 80 67 01 00 00 00 00 2c 11 b5 11 4d 9b 74 bf 4d bb 92 53 ab 84 15 49 a9 66 53 ac 88 00 00 00 00 00 00 00 44 4d bb 92 53 ab 84 16 54 ae 6b 53 ac 88 00 00 00 00 00 00 00 7f 4d bb 92 53 ab 84 1c 53 bb 6b 53 ac 88 00 00 00 00 00 00 00 da 15 49 a9 66 b6 2a d7 b1 83 0f 42 40 44 89 84 48 19 43 40 4d 80 91 67 6f 6f 67 6c 65 2f 76 69 64 65 6f 2d 66 69 6c 65 57 41 91 67 6f 6f 67 6c 65 2f 76 69 64 65 6f 2d 66 69 6c 65 16 54 ae 6b d6 ae d4 d7 81 01 73 c5 87 2e 1f e3 63 9f a5 b7 83 81 02 9c 81 00 22 b5 9c 83 65 6e 67 86 86 41 5f 4f 50 55 53 63 a2 93 4f 70 75 73 48 65 61 64 01 02 38 01 80 bb 00 00 00 00 00 56 aa 83 63 2e a0 56 bb 84 04 c4 b4 00 e1 8d b5 84 Data Ascii: EBBBBBwebmBBSg,MtMSIfSDMSTkSMSSkSIf*B@DHC@Mgoogle/video-fileWAgoogle/video-fileTks.c"engA_OPUScOpusHead8Vc.V
2024-04-16 15:05:55 UTC	16384	IN	Data Raw: 41 97 88 99 98 7f 2d 29 5f 2b bd ed 76 98 e9 cc a6 c8 f3 b6 4f a1 ad d8 b5 53 ed e4 bd b3 9a a2 36 d8 b9 0a 9e 1d a3 41 26 81 04 4d 80 fc 54 15 27 43 8a 5f 1b 43 62 98 f7 76 2c 2c 9e e8 5e 59 5c e3 61 98 be b9 92 b2 6e a3 b8 f6 22 22 6c 9b bc 45 e7 e1 18 b5 ab 5e 2e 25 75 09 65 93 f3 71 b0 90 62 86 d6 a3 62 9c d1 9d 26 7d 62 47 6f 6f dd 41 ce 79 3e 0b fe 69 49 3d 6e c9 fa 76 29 fc 99 68 8d 94 d9 90 31 97 16 73 05 9b f6 9a c6 98 d3 d5 09 1d be f6 02 34 59 bf 21 1f 46 0f 33 89 d6 8a 49 28 50 ff ff 2c 27 30 77 f0 b4 1f 09 1b bf be 04 5e 81 22 bc b3 96 6d e2 89 6c 53 d9 ce f8 f1 44 e7 c0 7c 7a e3 2e 1d 08 8c 0c d0 33 a6 d6 17 01 6d 1a c7 10 07 f2 40 bf b5 29 4b 2e af 89 05 fe 63 3a 5a 42 69 92 21 7d e6 4a c6 ed 3c bc f2 bc 39 cb 87 b5 77 4a 67 d1 e6 2d 63 74 Data Ascii: A-)_+vOS6A&MT'C_Cbv,,^Y\an""lE^.%ueqbb&}bGooAy>iI=nv)h1s4Y!F3I(P,'0w^"mlSD\|z.3m@)K.c:ZBi!}J<9wJg-ct
2024-04-16 15:05:57 UTC	1869	OUT	GET /videoplayback?expire=1713301551&ei=z5MeZqaINPHUy_sP0eWdmAw&ip=81.181.57.52&id=o-AK_VQZE_CF6ri6TpPkU94rAltzRFhx-zyw8UyDbm92an&itag=397&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=rv&mm=31%2C26&mn=sn-p5qddn7r%2Csn-q4fzen7y&ms=au%2Conr&mv=m&mvi=5&pl=26&initcwndbps=1037500&bui=AaUN6a3s47I8DH5tfER8eoONooFMs4s3jVxna4ZF91C8A1Gza_IOqkYGPnQpPK-o_ksgN35FfuGDEzM0&spc=UWF9f23cm3E0SyaFNYj9c7site_J8s_S8LscSx3wF1hOKBtyWYP0GnG2Cg&vprv=1&svpuc=1&mime=video%2Fmp4&ns=3MU0XGYF0YLhwMCoDsoy4rUQ&gir=yes&clen=8585092&dur=156.920&lmt=1693475130863016&mt=1713279665&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=4437434&n=dE3EcJJbXrJoeg&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIhAIpZ5-V8TcXgSJcV3Ro_-49ScSFGgmouPJFlW7XWIxODAiAKoKNtQ9rOitIeyA9V0dKt5fDaKVlQr2vO1zTEv9tOvA%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ALClDIEwRAIgY7oNLxdHQ3y5ea4JM0eSAhzCz5EIZ0n4m6puyJNJL08CIGp4e60VLA3egstDcbPjOmgcwu1FjGiah0x4Yw6p70ys&alr=yes&cpn=jRkNZCQf5oAkxA7P&cver=1.20240409.01.00&range=176548-398200&rn=6&rbuf=7245&pot=MnQOO1U1F0jKng4Dp2KSNN3y5y1bzjJ_A48XTu9WWa58lwemsUacv72qMXWZBCh6QHNGA2g-Xv1rlLyKc0KseW9DyEcqmFQyYx-p5jqaYxJ9cHrsLlEJc5aqrr1JtQj8jYdY1BLU61mhhQZT1FkQt74QnYDxdw==&ump=1&srfvp=1 HTTP/1.1 Host: rr5---sn-p5qddn7r.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:57 UTC	526	IN	HTTP/1.1 200 OK Last-Modified: Thu, 31 Aug 2023 09:45:30 GMT Content-Type: application/vnd.yt-ump Date: Tue, 16 Apr 2024 15:05:57 GMT Expires: Tue, 16 Apr 2024 15:05:57 GMT Cache-Control: private, max-age=21294 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Restrict-Formats-Hint: None X-Content-Type-Options: nosniff Server: gvs 1.0
2024-04-16 15:06:00 UTC	1864	OUT	GET /videoplayback?expire=1713301551&ei=z5MeZqaINPHUy_sP0eWdmAw&ip=81.181.57.52&id=o-AK_VQZE_CF6ri6TpPkU94rAltzRFhx-zyw8UyDbm92an&itag=398&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=rv&mm=31%2C26&mn=sn-p5qddn7r%2Csn-q4fzen7y&ms=au%2Conr&mv=m&mvi=5&pl=26&initcwndbps=1037500&bui=AaUN6a3s47I8DH5tfER8eoONooFMs4s3jVxna4ZF91C8A1Gza_IOqkYGPnQpPK-o_ksgN35FfuGDEzM0&spc=UWF9f23cm3E0SyaFNYj9c7site_J8s_S8LscSx3wF1hOKBtyWYP0GnG2Cg&vprv=1&svpuc=1&mime=video%2Fmp4&ns=3MU0XGYF0YLhwMCoDsoy4rUQ&gir=yes&clen=15356387&dur=156.920&lmt=1693475295824447&mt=1713279665&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=4437434&n=dE3EcJJbXrJoeg&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRAIgUZTH4tUnOL9pbm5TsI-QSUN1NOPnlxyhCCtIoRPDzQQCIHjiPJh-Vx-Q-dVoHfFNuAvDp7638SgMVZfwowDlRL8y&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ALClDIEwRAIgY7oNLxdHQ3y5ea4JM0eSAhzCz5EIZ0n4m6puyJNJL08CIGp4e60VLA3egstDcbPjOmgcwu1FjGiah0x4Yw6p70ys&alr=yes&cpn=jRkNZCQf5oAkxA7P&cver=1.20240409.01.00&range=657413-1911423&rn=8&rbuf=11180&pot=MnQOO1U1F0jKng4Dp2KSNN3y5y1bzjJ_A48XTu9WWa58lwemsUacv72qMXWZBCh6QHNGA2g-Xv1rlLyKc0KseW9DyEcqmFQyYx-p5jqaYxJ9cHrsLlEJc5aqrr1JtQj8jYdY1BLU61mhhQZT1FkQt74QnYDxdw==&ump=1&srfvp=1 HTTP/1.1 Host: rr5---sn-p5qddn7r.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:06:00 UTC	526	IN	HTTP/1.1 200 OK Last-Modified: Thu, 31 Aug 2023 09:48:15 GMT Content-Type: application/vnd.yt-ump Date: Tue, 16 Apr 2024 15:06:00 GMT Expires: Tue, 16 Apr 2024 15:06:00 GMT Cache-Control: private, max-age=21291 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Restrict-Formats-Hint: None X-Content-Type-Options: nosniff Server: gvs 1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.11	49909	173.194.7.170	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:55 UTC	1800	OUT	GET /videoplayback?expire=1713301551&ei=z5MeZqaINPHUy_sP0eWdmAw&ip=81.181.57.52&id=o-AK_VQZE_CF6ri6TpPkU94rAltzRFhx-zyw8UyDbm92an&itag=397&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=rv&mm=31%2C26&mn=sn-p5qddn7r%2Csn-q4fzen7y&ms=au%2Conr&mv=m&mvi=5&pl=26&initcwndbps=1037500&bui=AaUN6a3s47I8DH5tfER8eoONooFMs4s3jVxna4ZF91C8A1Gza_IOqkYGPnQpPK-o_ksgN35FfuGDEzM0&spc=UWF9f23cm3E0SyaFNYj9c7site_J8s_S8LscSx3wF1hOKBtyWYP0GnG2Cg&vprv=1&svpuc=1&mime=video%2Fmp4&ns=3MU0XGYF0YLhwMCoDsoy4rUQ&gir=yes&clen=8585092&dur=156.920&lmt=1693475130863016&mt=1713279665&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=4437434&n=dE3EcJJbXrJoeg&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIhAIpZ5-V8TcXgSJcV3Ro_-49ScSFGgmouPJFlW7XWIxODAiAKoKNtQ9rOitIeyA9V0dKt5fDaKVlQr2vO1zTEv9tOvA%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ALClDIEwRAIgY7oNLxdHQ3y5ea4JM0eSAhzCz5EIZ0n4m6puyJNJL08CIGp4e60VLA3egstDcbPjOmgcwu1FjGiah0x4Yw6p70ys&alr=yes&cpn=jRkNZCQf5oAkxA7P&cver=1.20240409.01.00&range=0-176547&rn=1&rbuf=0&pot=Ijius661yK09fO3U2vnj9J_84N_e6vvZysDh8MT83uzfxOzZ5_jt1OTl-8vn9unU79Tl8ouA6pad9w==&ump=1&srfvp=1&altitags=396%2C395 HTTP/1.1 Host: rr5---sn-p5qddn7r.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:55 UTC	526	IN	HTTP/1.1 200 OK Last-Modified: Thu, 31 Aug 2023 09:45:30 GMT Content-Type: application/vnd.yt-ump Date: Tue, 16 Apr 2024 15:05:55 GMT Expires: Tue, 16 Apr 2024 15:05:55 GMT Cache-Control: private, max-age=21296 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Restrict-Formats-Hint: None X-Content-Type-Options: nosniff Server: gvs 1.0
2024-04-16 15:05:55 UTC	3	IN	Data Raw: 34 0d 0a Data Ascii: 4
2024-04-16 15:05:55 UTC	4	IN	Data Raw: 3a 02 08 01 Data Ascii: :
2024-04-16 15:05:55 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-16 15:05:55 UTC	4	IN	Data Raw: 33 31 0d 0a Data Ascii: 31
2024-04-16 15:05:55 UTC	49	IN	Data Raw: 14 2f 08 00 12 0b 77 41 44 39 75 4f 39 59 41 51 77 18 8d 03 20 a8 db f1 bc ce 86 81 03 30 00 6a 0c 08 8d 03 10 a8 db f1 bc ce 86 81 03 70 a4 e3 0a Data Ascii: /wAD9uO9YAQw 0jp
2024-04-16 15:05:55 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-16 15:05:55 UTC	7	IN	Data Raw: 32 62 31 61 39 0d 0a Data Ascii: 2b1a9
2024-04-16 15:05:55 UTC	5	IN	Data Raw: 15 c5 8d 15 00 Data Ascii:
2024-04-16 15:05:55 UTC	16384	IN	Data Raw: 00 00 00 1c 66 74 79 70 64 61 73 68 00 00 00 00 69 73 6f 36 61 76 30 31 6d 70 34 31 00 00 02 a0 6d 6f 6f 76 00 00 00 6c 6d 76 68 64 00 00 00 00 e1 15 33 b3 e1 15 33 b3 00 00 32 00 00 1e a6 00 00 01 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 28 6d 76 65 78 00 00 00 20 74 72 65 78 00 00 00 00 00 00 00 01 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 04 74 72 61 6b 00 00 00 5c 74 6b 68 64 00 00 00 03 e1 15 33 b3 e1 15 33 b3 00 00 00 01 00 00 00 00 00 1e a6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ftypdashiso6av01mp41moovlmvhd332@(mvex trextrak\tkhd33
2024-04-16 15:05:55 UTC	16384	IN	Data Raw: bf ac 43 4b 96 07 77 f6 0c 4f 24 c4 18 16 72 15 7b 2f ba f1 3b 9d db f9 79 2b 68 dd cf 97 3b 38 db 6d c8 de ca f7 65 48 d1 59 10 fd af 7c fd ec 16 0b a5 05 16 07 19 5e ea 8d ce 13 80 7d 36 62 90 eb a3 d5 b3 c5 7e 5a fd 7f d8 ad 2a 20 df 7f b5 31 c8 81 3b 10 04 2b 06 3d 13 d0 c1 ed ee c9 e7 b2 44 28 ad 57 5c 03 3e 60 9f 20 86 95 78 2f 97 91 29 ec 07 ad 0e d7 e4 fa 6b 29 c3 b8 d9 02 34 08 bd 5a 63 dd 3a c2 03 bf 32 bb d4 b5 5d 68 43 89 c6 28 36 dc 24 b2 99 38 3b d7 94 82 98 23 62 24 b8 9c 5c 3d 4e 53 0b 3d d1 6f e8 e6 27 d2 13 7a 2e 60 aa 6e 05 72 50 a6 b6 bb eb 2d 7a 23 9a 39 a9 44 8b 01 7a bb 5c 5e 18 8b 92 aa 71 58 4e 04 ab d2 ff df dd 0c f5 4f fd 89 b5 f8 3f 08 98 d7 fa 30 2c cb 3f 06 bc 2d e2 5b a7 eb bb 3b 92 62 3d 41 25 da f0 35 87 4c 12 45 88 e7 20 Data Ascii: CKwO$r{/;y+h;8meHY\|^}6b~Z* 1;+=D(W\>` x/)k)4Zc:2]hC(6$8;#b$\=NS=o'z.`nrP-z#9Dz\^qXNO?0,?-[;b=A%5LE
2024-04-16 15:05:57 UTC	1753	OUT	GET /videoplayback?expire=1713301551&ei=z5MeZqaINPHUy_sP0eWdmAw&ip=81.181.57.52&id=o-AK_VQZE_CF6ri6TpPkU94rAltzRFhx-zyw8UyDbm92an&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=rv&mm=31%2C26&mn=sn-p5qddn7r%2Csn-q4fzen7y&ms=au%2Conr&mv=m&mvi=5&pl=26&initcwndbps=1037500&bui=AaUN6a3s47I8DH5tfER8eoONooFMs4s3jVxna4ZF91C8A1Gza_IOqkYGPnQpPK-o_ksgN35FfuGDEzM0&spc=UWF9f23cm3E0SyaFNYj9c7site_J8s_S8LscSx3wF1hOKBtyWYP0GnG2Cg&vprv=1&svpuc=1&mime=audio%2Fwebm&ns=3MU0XGYF0YLhwMCoDsoy4rUQ&gir=yes&clen=2888165&dur=156.941&lmt=1693419053011705&mt=1713279665&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=4432434&n=dE3EcJJbXrJoeg&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRgIhAO7O0riH-82oSBBVPyjd5Jxsi6zAO8WXqcCVaOGoDhzkAiEAhjrR__t-wBjgV8KW0_wFgo4NtgnzzCnYPIhVd-d0xXc%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ALClDIEwRAIgY7oNLxdHQ3y5ea4JM0eSAhzCz5EIZ0n4m6puyJNJL08CIGp4e60VLA3egstDcbPjOmgcwu1FjGiah0x4Yw6p70ys&alr=yes&cpn=jRkNZCQf5oAkxA7P&cver=1.20240409.01.00&range=131607-174704&rn=5&rbuf=7525&pot=MnQOO1U1F0jKng4Dp2KSNN3y5y1bzjJ_A48XTu9WWa58lwemsUacv72qMXWZBCh6QHNGA2g-Xv1rlLyKc0KseW9DyEcqmFQyYx-p5jqaYxJ9cHrsLlEJc5aqrr1JtQj8jYdY1BLU61mhhQZT1FkQt74QnYDxdw==&ump=1&srfvp=1 HTTP/1.1 Host: rr5---sn-p5qddn7r.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:57 UTC	495	IN	HTTP/1.1 200 OK Last-Modified: Wed, 30 Aug 2023 18:10:53 GMT Content-Type: application/vnd.yt-ump Date: Tue, 16 Apr 2024 15:05:57 GMT Expires: Tue, 16 Apr 2024 15:05:57 GMT Cache-Control: private, max-age=21294 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.11	49906	173.194.7.170	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:55 UTC	1852	OUT	GET /videoplayback?expire=1713301551&ei=z5MeZqaINPHUy_sP0eWdmAw&ip=81.181.57.52&id=o-AK_VQZE_CF6ri6TpPkU94rAltzRFhx-zyw8UyDbm92an&itag=398&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=rv&mm=31%2C26&mn=sn-p5qddn7r%2Csn-q4fzen7y&ms=au%2Conr&mv=m&mvi=5&pl=26&initcwndbps=1037500&bui=AaUN6a3s47I8DH5tfER8eoONooFMs4s3jVxna4ZF91C8A1Gza_IOqkYGPnQpPK-o_ksgN35FfuGDEzM0&spc=UWF9f23cm3E0SyaFNYj9c7site_J8s_S8LscSx3wF1hOKBtyWYP0GnG2Cg&vprv=1&svpuc=1&mime=video%2Fmp4&ns=3MU0XGYF0YLhwMCoDsoy4rUQ&gir=yes&clen=15356387&dur=156.920&lmt=1693475295824447&mt=1713279665&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=4437434&n=dE3EcJJbXrJoeg&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRAIgUZTH4tUnOL9pbm5TsI-QSUN1NOPnlxyhCCtIoRPDzQQCIHjiPJh-Vx-Q-dVoHfFNuAvDp7638SgMVZfwowDlRL8y&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ALClDIEwRAIgY7oNLxdHQ3y5ea4JM0eSAhzCz5EIZ0n4m6puyJNJL08CIGp4e60VLA3egstDcbPjOmgcwu1FjGiah0x4Yw6p70ys&alr=yes&cpn=jRkNZCQf5oAkxA7P&cver=1.20240409.01.00&range=0-1103&rn=3&rbuf=0&pot=MnQOO1U1F0jKng4Dp2KSNN3y5y1bzjJ_A48XTu9WWa58lwemsUacv72qMXWZBCh6QHNGA2g-Xv1rlLyKc0KseW9DyEcqmFQyYx-p5jqaYxJ9cHrsLlEJc5aqrr1JtQj8jYdY1BLU61mhhQZT1FkQt74QnYDxdw==&ump=1&srfvp=1 HTTP/1.1 Host: rr5---sn-p5qddn7r.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:55 UTC	526	IN	HTTP/1.1 200 OK Last-Modified: Thu, 31 Aug 2023 09:48:15 GMT Content-Type: application/vnd.yt-ump Date: Tue, 16 Apr 2024 15:05:55 GMT Expires: Tue, 16 Apr 2024 15:05:55 GMT Cache-Control: private, max-age=21296 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Restrict-Formats-Hint: None X-Content-Type-Options: nosniff Server: gvs 1.0
2024-04-16 15:05:55 UTC	3	IN	Data Raw: 34 0d 0a Data Ascii: 4
2024-04-16 15:05:55 UTC	4	IN	Data Raw: 3a 02 08 01 Data Ascii: :
2024-04-16 15:05:55 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-16 15:05:55 UTC	4	IN	Data Raw: 33 30 0d 0a Data Ascii: 30
2024-04-16 15:05:55 UTC	48	IN	Data Raw: 14 2e 08 00 12 0b 77 41 44 39 75 4f 39 59 41 51 77 18 8e 03 20 bf 94 c6 8b cf 86 81 03 30 00 6a 0c 08 8e 03 10 bf 94 c6 8b cf 86 81 03 70 d0 08 Data Ascii: .wAD9uO9YAQw 0jp
2024-04-16 15:05:55 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-16 15:05:55 UTC	5	IN	Data Raw: 34 35 34 0d 0a Data Ascii: 454
2024-04-16 15:05:55 UTC	4	IN	Data Raw: 15 91 11 00 Data Ascii:
2024-04-16 15:05:55 UTC	1104	IN	Data Raw: 00 00 00 1c 66 74 79 70 64 61 73 68 00 00 00 00 69 73 6f 36 61 76 30 31 6d 70 34 31 00 00 02 a0 6d 6f 6f 76 00 00 00 6c 6d 76 68 64 00 00 00 00 e1 15 35 a8 e1 15 35 a8 00 00 32 00 00 1e a6 00 00 01 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 28 6d 76 65 78 00 00 00 20 74 72 65 78 00 00 00 00 00 00 00 01 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 04 74 72 61 6b 00 00 00 5c 74 6b 68 64 00 00 00 03 e1 15 35 a8 e1 15 35 a8 00 00 00 01 00 00 00 00 00 1e a6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ftypdashiso6av01mp41moovlmvhd552@(mvex trextrak\tkhd55
2024-04-16 15:05:55 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.11	49907	173.194.7.170	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:55 UTC	1752	OUT	GET /videoplayback?expire=1713301551&ei=z5MeZqaINPHUy_sP0eWdmAw&ip=81.181.57.52&id=o-AK_VQZE_CF6ri6TpPkU94rAltzRFhx-zyw8UyDbm92an&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=rv&mm=31%2C26&mn=sn-p5qddn7r%2Csn-q4fzen7y&ms=au%2Conr&mv=m&mvi=5&pl=26&initcwndbps=1037500&bui=AaUN6a3s47I8DH5tfER8eoONooFMs4s3jVxna4ZF91C8A1Gza_IOqkYGPnQpPK-o_ksgN35FfuGDEzM0&spc=UWF9f23cm3E0SyaFNYj9c7site_J8s_S8LscSx3wF1hOKBtyWYP0GnG2Cg&vprv=1&svpuc=1&mime=audio%2Fwebm&ns=3MU0XGYF0YLhwMCoDsoy4rUQ&gir=yes&clen=2888165&dur=156.941&lmt=1693419053011705&mt=1713279665&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=4432434&n=dE3EcJJbXrJoeg&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRgIhAO7O0riH-82oSBBVPyjd5Jxsi6zAO8WXqcCVaOGoDhzkAiEAhjrR__t-wBjgV8KW0_wFgo4NtgnzzCnYPIhVd-d0xXc%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ALClDIEwRAIgY7oNLxdHQ3y5ea4JM0eSAhzCz5EIZ0n4m6puyJNJL08CIGp4e60VLA3egstDcbPjOmgcwu1FjGiah0x4Yw6p70ys&alr=yes&cpn=jRkNZCQf5oAkxA7P&cver=1.20240409.01.00&range=66071-131606&rn=4&rbuf=3763&pot=MnQOO1U1F0jKng4Dp2KSNN3y5y1bzjJ_A48XTu9WWa58lwemsUacv72qMXWZBCh6QHNGA2g-Xv1rlLyKc0KseW9DyEcqmFQyYx-p5jqaYxJ9cHrsLlEJc5aqrr1JtQj8jYdY1BLU61mhhQZT1FkQt74QnYDxdw==&ump=1&srfvp=1 HTTP/1.1 Host: rr5---sn-p5qddn7r.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:55 UTC	495	IN	HTTP/1.1 200 OK Last-Modified: Wed, 30 Aug 2023 18:10:53 GMT Content-Type: application/vnd.yt-ump Date: Tue, 16 Apr 2024 15:05:55 GMT Expires: Tue, 16 Apr 2024 15:05:55 GMT Cache-Control: private, max-age=21296 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-04-16 15:05:55 UTC	3	IN	Data Raw: 34 0d 0a Data Ascii: 4
2024-04-16 15:05:55 UTC	4	IN	Data Raw: 3a 02 08 01 Data Ascii: :
2024-04-16 15:05:55 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-16 15:05:55 UTC	4	IN	Data Raw: 33 33 0d 0a Data Ascii: 33
2024-04-16 15:05:55 UTC	51	IN	Data Raw: 14 31 08 00 12 0b 77 41 44 39 75 4f 39 59 41 51 77 18 fb 01 20 f9 a5 f1 c8 fd 84 81 03 30 97 84 04 6a 0c 08 fb 01 10 f9 a5 f1 c8 fd 84 81 03 70 80 80 04 Data Ascii: 1wAD9uO9YAQw 0jp
2024-04-16 15:05:55 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-16 15:05:55 UTC	7	IN	Data Raw: 31 30 30 30 35 0d 0a Data Ascii: 10005
2024-04-16 15:05:55 UTC	5	IN	Data Raw: 15 c1 00 08 00 Data Ascii:
2024-04-16 15:05:55 UTC	16384	IN	Data Raw: 33 69 17 48 94 ca 7f 83 e6 5e bf 83 52 90 15 e0 47 bb 9a 85 e4 4c 40 8e 49 b8 d5 9d 65 06 f3 03 e7 f4 89 dd 66 99 df 9a 62 66 58 a2 34 12 63 9d 62 48 49 ee 63 3f 82 9f 64 4f b6 ad b7 27 7c 1b 2f da e5 ca 4d 5d 5e 5a 14 bb a2 4f e6 27 5f 57 0c 87 24 c7 56 c3 5d 10 12 04 54 8e 2d f5 fc d5 c1 74 a4 f2 89 fc 23 96 5a a7 bd f8 15 14 43 44 aa b5 ff 44 fa 2e c7 a6 a0 79 b8 68 b8 c2 82 b1 d9 b2 8c 0a 86 7f 62 f4 a6 1f 24 dd f5 91 0f 64 da 3b f8 70 40 4d 5f 01 da 29 31 10 d1 24 f3 62 16 7a f1 f2 e0 25 99 b5 82 12 d8 ad bc 94 4b 4c 1f da 8f f6 dc bb 9a 9b 33 c4 e6 4b f0 16 d3 8c 78 62 26 9e 10 e9 aa 1e 94 f5 ef e4 9a a3 41 2c 81 10 b9 80 fc 53 bb f8 65 cb d0 bb 84 8c 6c 8a 71 0d 4b 80 c6 54 2f 2a 57 c0 14 20 c0 e4 3e 39 a5 ad 68 07 9e dc df 2f d2 4e f3 69 8d 75 40 Data Ascii: 3iH^RGL@IefbfX4cbHIc?dO'\|/M]^ZO'_W$V]T-t#ZCDD.yhb$d;p@M_)1$bz%KL3Kxb&A,SelqKT/*W >9h/Niu@
2024-04-16 15:05:55 UTC	16384	IN	Data Raw: d8 5c 5f a2 38 97 ea 31 ed af b3 03 82 f4 76 62 4a e6 85 a3 84 9b 8a 87 b1 49 40 52 14 30 39 85 f6 46 3a a3 66 e3 6a 2d e4 9a db d9 8f ae f2 43 af a5 2c e8 ce fa 10 8b 1f 9f cf 57 6f 8d 22 75 8c 59 ad 33 fb e5 d8 00 5f 4b 7f 2b 8d 10 bc 86 37 83 20 de ba c7 c3 b7 a7 80 cd ec ab 1f 44 48 13 72 80 1d 75 02 63 55 37 5f 12 60 8d 68 21 6b 30 b9 75 be f9 9e 2e 46 32 36 77 6a 82 8b 48 f2 a2 f3 48 0b de 53 73 58 0a ea 99 4d 43 1b a2 bf 70 d2 19 df e9 92 0b d2 b7 e9 5b 71 4c dd 0e b1 9b 73 2a 87 c7 27 7b 15 e1 d2 4f a8 f2 5e 0d c6 32 a5 ff 05 f7 4f 4d 31 9d 61 a6 cb 57 0d cc 24 ff bc a9 4a 8b 1b 82 3b b0 70 79 1b a0 1d fe be 08 eb 82 da ae f4 10 d9 bb 87 a8 13 c4 9d cf 9b ac a4 24 db b6 e4 44 63 1c d1 45 6d a0 65 b0 db d2 b8 c7 df 5e 44 66 0a c3 f9 eb eb 64 21 7a Data Ascii: \_81vbJI@R09F:fj-C,Wo"uY3_K+7 DHrucU7_`h!k0u.F26wjHHSsXMCp[qLs*'{O^2OM1aW$J;py$DcEme^Dfd!z
2024-04-16 15:05:57 UTC	1753	OUT	GET /videoplayback?expire=1713301551&ei=z5MeZqaINPHUy_sP0eWdmAw&ip=81.181.57.52&id=o-AK_VQZE_CF6ri6TpPkU94rAltzRFhx-zyw8UyDbm92an&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=rv&mm=31%2C26&mn=sn-p5qddn7r%2Csn-q4fzen7y&ms=au%2Conr&mv=m&mvi=5&pl=26&initcwndbps=1037500&bui=AaUN6a3s47I8DH5tfER8eoONooFMs4s3jVxna4ZF91C8A1Gza_IOqkYGPnQpPK-o_ksgN35FfuGDEzM0&spc=UWF9f23cm3E0SyaFNYj9c7site_J8s_S8LscSx3wF1hOKBtyWYP0GnG2Cg&vprv=1&svpuc=1&mime=audio%2Fwebm&ns=3MU0XGYF0YLhwMCoDsoy4rUQ&gir=yes&clen=2888165&dur=156.941&lmt=1693419053011705&mt=1713279665&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=4432434&n=dE3EcJJbXrJoeg&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRgIhAO7O0riH-82oSBBVPyjd5Jxsi6zAO8WXqcCVaOGoDhzkAiEAhjrR__t-wBjgV8KW0_wFgo4NtgnzzCnYPIhVd-d0xXc%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ALClDIEwRAIgY7oNLxdHQ3y5ea4JM0eSAhzCz5EIZ0n4m6puyJNJL08CIGp4e60VLA3egstDcbPjOmgcwu1FjGiah0x4Yw6p70ys&alr=yes&cpn=jRkNZCQf5oAkxA7P&cver=1.20240409.01.00&range=174705-298327&rn=7&rbuf=9201&pot=MnQOO1U1F0jKng4Dp2KSNN3y5y1bzjJ_A48XTu9WWa58lwemsUacv72qMXWZBCh6QHNGA2g-Xv1rlLyKc0KseW9DyEcqmFQyYx-p5jqaYxJ9cHrsLlEJc5aqrr1JtQj8jYdY1BLU61mhhQZT1FkQt74QnYDxdw==&ump=1&srfvp=1 HTTP/1.1 Host: rr5---sn-p5qddn7r.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:57 UTC	495	IN	HTTP/1.1 200 OK Last-Modified: Wed, 30 Aug 2023 18:10:53 GMT Content-Type: application/vnd.yt-ump Date: Tue, 16 Apr 2024 15:05:57 GMT Expires: Tue, 16 Apr 2024 15:05:57 GMT Cache-Control: private, max-age=21294 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-04-16 15:06:00 UTC	1754	OUT	GET /videoplayback?expire=1713301551&ei=z5MeZqaINPHUy_sP0eWdmAw&ip=81.181.57.52&id=o-AK_VQZE_CF6ri6TpPkU94rAltzRFhx-zyw8UyDbm92an&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=rv&mm=31%2C26&mn=sn-p5qddn7r%2Csn-q4fzen7y&ms=au%2Conr&mv=m&mvi=5&pl=26&initcwndbps=1037500&bui=AaUN6a3s47I8DH5tfER8eoONooFMs4s3jVxna4ZF91C8A1Gza_IOqkYGPnQpPK-o_ksgN35FfuGDEzM0&spc=UWF9f23cm3E0SyaFNYj9c7site_J8s_S8LscSx3wF1hOKBtyWYP0GnG2Cg&vprv=1&svpuc=1&mime=audio%2Fwebm&ns=3MU0XGYF0YLhwMCoDsoy4rUQ&gir=yes&clen=2888165&dur=156.941&lmt=1693419053011705&mt=1713279665&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=4432434&n=dE3EcJJbXrJoeg&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRgIhAO7O0riH-82oSBBVPyjd5Jxsi6zAO8WXqcCVaOGoDhzkAiEAhjrR__t-wBjgV8KW0_wFgo4NtgnzzCnYPIhVd-d0xXc%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ALClDIEwRAIgY7oNLxdHQ3y5ea4JM0eSAhzCz5EIZ0n4m6puyJNJL08CIGp4e60VLA3egstDcbPjOmgcwu1FjGiah0x4Yw6p70ys&alr=yes&cpn=jRkNZCQf5oAkxA7P&cver=1.20240409.01.00&range=298328-563147&rn=9&rbuf=14775&pot=MnQOO1U1F0jKng4Dp2KSNN3y5y1bzjJ_A48XTu9WWa58lwemsUacv72qMXWZBCh6QHNGA2g-Xv1rlLyKc0KseW9DyEcqmFQyYx-p5jqaYxJ9cHrsLlEJc5aqrr1JtQj8jYdY1BLU61mhhQZT1FkQt74QnYDxdw==&ump=1&srfvp=1 HTTP/1.1 Host: rr5---sn-p5qddn7r.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:06:00 UTC	495	IN	HTTP/1.1 200 OK Last-Modified: Wed, 30 Aug 2023 18:10:53 GMT Content-Type: application/vnd.yt-ump Date: Tue, 16 Apr 2024 15:06:00 GMT Expires: Tue, 16 Apr 2024 15:06:00 GMT Cache-Control: private, max-age=21291 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-04-16 15:06:05 UTC	1866	OUT	GET /videoplayback?expire=1713301551&ei=z5MeZqaINPHUy_sP0eWdmAw&ip=81.181.57.52&id=o-AK_VQZE_CF6ri6TpPkU94rAltzRFhx-zyw8UyDbm92an&itag=398&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278%2C394%2C395%2C396%2C397%2C398%2C399&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=rv&mm=31%2C26&mn=sn-p5qddn7r%2Csn-q4fzen7y&ms=au%2Conr&mv=m&mvi=5&pl=26&initcwndbps=1037500&bui=AaUN6a3s47I8DH5tfER8eoONooFMs4s3jVxna4ZF91C8A1Gza_IOqkYGPnQpPK-o_ksgN35FfuGDEzM0&spc=UWF9f23cm3E0SyaFNYj9c7site_J8s_S8LscSx3wF1hOKBtyWYP0GnG2Cg&vprv=1&svpuc=1&mime=video%2Fmp4&ns=3MU0XGYF0YLhwMCoDsoy4rUQ&gir=yes&clen=15356387&dur=156.920&lmt=1693475295824447&mt=1713279665&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=4437434&n=dE3EcJJbXrJoeg&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRAIgUZTH4tUnOL9pbm5TsI-QSUN1NOPnlxyhCCtIoRPDzQQCIHjiPJh-Vx-Q-dVoHfFNuAvDp7638SgMVZfwowDlRL8y&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ALClDIEwRAIgY7oNLxdHQ3y5ea4JM0eSAhzCz5EIZ0n4m6puyJNJL08CIGp4e60VLA3egstDcbPjOmgcwu1FjGiah0x4Yw6p70ys&alr=yes&cpn=jRkNZCQf5oAkxA7P&cver=1.20240409.01.00&range=1911424-3548470&rn=10&rbuf=19797&pot=MnQOO1U1F0jKng4Dp2KSNN3y5y1bzjJ_A48XTu9WWa58lwemsUacv72qMXWZBCh6QHNGA2g-Xv1rlLyKc0KseW9DyEcqmFQyYx-p5jqaYxJ9cHrsLlEJc5aqrr1JtQj8jYdY1BLU61mhhQZT1FkQt74QnYDxdw==&ump=1&srfvp=1 HTTP/1.1 Host: rr5---sn-p5qddn7r.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:06:05 UTC	526	IN	HTTP/1.1 200 OK Last-Modified: Thu, 31 Aug 2023 09:48:15 GMT Content-Type: application/vnd.yt-ump Date: Tue, 16 Apr 2024 15:06:05 GMT Expires: Tue, 16 Apr 2024 15:06:05 GMT Cache-Control: private, max-age=21286 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Restrict-Formats-Hint: None X-Content-Type-Options: nosniff Server: gvs 1.0
2024-04-16 15:06:14 UTC	1756	OUT	GET /videoplayback?expire=1713301551&ei=z5MeZqaINPHUy_sP0eWdmAw&ip=81.181.57.52&id=o-AK_VQZE_CF6ri6TpPkU94rAltzRFhx-zyw8UyDbm92an&itag=251&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=rv&mm=31%2C26&mn=sn-p5qddn7r%2Csn-q4fzen7y&ms=au%2Conr&mv=m&mvi=5&pl=26&initcwndbps=1037500&bui=AaUN6a3s47I8DH5tfER8eoONooFMs4s3jVxna4ZF91C8A1Gza_IOqkYGPnQpPK-o_ksgN35FfuGDEzM0&spc=UWF9f23cm3E0SyaFNYj9c7site_J8s_S8LscSx3wF1hOKBtyWYP0GnG2Cg&vprv=1&svpuc=1&mime=audio%2Fwebm&ns=3MU0XGYF0YLhwMCoDsoy4rUQ&gir=yes&clen=2888165&dur=156.941&lmt=1693419053011705&mt=1713279665&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=4432434&n=dE3EcJJbXrJoeg&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRgIhAO7O0riH-82oSBBVPyjd5Jxsi6zAO8WXqcCVaOGoDhzkAiEAhjrR__t-wBjgV8KW0_wFgo4NtgnzzCnYPIhVd-d0xXc%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=ALClDIEwRAIgY7oNLxdHQ3y5ea4JM0eSAhzCz5EIZ0n4m6puyJNJL08CIGp4e60VLA3egstDcbPjOmgcwu1FjGiah0x4Yw6p70ys&alr=yes&cpn=jRkNZCQf5oAkxA7P&cver=1.20240409.01.00&range=563148-1120503&rn=11&rbuf=27341&pot=MnQOO1U1F0jKng4Dp2KSNN3y5y1bzjJ_A48XTu9WWa58lwemsUacv72qMXWZBCh6QHNGA2g-Xv1rlLyKc0KseW9DyEcqmFQyYx-p5jqaYxJ9cHrsLlEJc5aqrr1JtQj8jYdY1BLU61mhhQZT1FkQt74QnYDxdw==&ump=1&srfvp=1 HTTP/1.1 Host: rr5---sn-p5qddn7r.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:06:14 UTC	495	IN	HTTP/1.1 200 OK Last-Modified: Wed, 30 Aug 2023 18:10:53 GMT Content-Type: application/vnd.yt-ump Date: Tue, 16 Apr 2024 15:06:14 GMT Expires: Tue, 16 Apr 2024 15:06:14 GMT Cache-Control: private, max-age=21277 Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.11	49910	173.194.219.136	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:55 UTC	610	OUT	GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
2024-04-16 15:05:56 UTC	240	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1609 Date: Tue, 16 Apr 2024 15:05:56 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 15:05:56 UTC	1015	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 405 (Method Not Allowed)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px aria
2024-04-16 15:05:56 UTC	594	IN	Data Raw: 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d Data Ascii: .com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.11	49911	142.251.15.91	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:56 UTC	2736	OUT	POST /api/stats/atr?ns=yt&el=embedded&cpn=F6GU1QEdhoMLD-Np&ver=2&cmt=1.94&fmt=398&fs=0&rt=9.574&euri=https%3A%2F%2Fniceindiatravel.com%2F&lact=9613&cl=623129822&mos=1&volume=100&cbr=Chrome&cbrver=117.0.0.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240409.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&epm=1&delay=4&hl=en_US&cr=US&len=157&fexp=v1%2C23858057%2C125239%2C21348%2C76094%2C54572%2C73455%2C230596%2C84737%2C36318%2C6271%2C26443548%2C7111%2C31786%2C4557%2C9954%2C1192%2C10512%2C15711%2C273%2C6966%2C2%2C6689%2C2007%2C4957%2C4115%2C12518%2C1263%2C5498%2C796%2C643%2C5538%2C2893%2C2%2C531%2C819%2C531%2C4712%2C5599%2C1104%2C4465&afmt=251&muted=1&vis=3&docid=wAD9uO9YAQw&ei=y5MeZqSPB9aoy_sPxcuI0A8&plid=AAYWOBKoz4xd3wIM&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2FwAD9uO9YAQw%3Fplaylist%3DwAD9uO9YAQw%26iv_load_policy%3D3%26enablejsapi%3D1%26disablekb%3D1%26autoplay%3D1%26controls%3D0%26showinfo%3D0%26rel%3D0%26loop%3D1%26origin%3Dhttps%253A%252F%252Fniceindiatravel.com%26widgetid%3D1&list=TLGG0nOp5Ks1AkExNjA0MjAyNA&of=wbAUJoLFDaeeOSJrHXH1sg&vm=CAEQABgEOjJBSHFpSlRJaWlUV3AtaVVHU3dxLUpoNjVrV0taQVJBeTRCbVVLMmJUWXhKOURvQUVkd2J3QVBta0tES0l3V1JHa3UzUFV5akd4WUhVUEZvYWZzdmJ3VzNvV3ZjMWR6Q3ZYY3B0Wjd2aWh4NV9qdk9kR3NGMFRSLTdDcmRpYy1ydVI4bW1ZYi1oNjd3Tzc2cXd3bXBXcG1FMTliMUhRM0x4dW53SEV5RUFXNEFoAg HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 2160 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1713279945329&flash=0&frm=2&u_tz=120&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1267%2C713&vis=2&wgl=true&ca_type=image sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded X-YouTube-Utc-Offset: 120 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240409.01.00 X-YouTube-Time-Zone: Europe/Zurich X-Goog-Visitor-Id: CgtJMG1ONlpYUjdsOCjIp_qwBjIKCgJVUxIEGgAgKA%3D%3D sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/wAD9uO9YAQw?playlist=wAD9uO9YAQw&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&origin=https%3A%2F%2Fniceindiatravel.com&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
2024-04-16 15:05:56 UTC	2160	OUT	Data Raw: 61 74 72 3d 61 25 33 44 36 25 32 36 61 32 25 33 44 31 25 32 36 63 25 33 44 31 37 31 33 32 37 39 39 34 34 25 32 36 64 25 33 44 35 36 25 32 36 65 25 33 44 77 41 44 39 75 4f 39 59 41 51 77 25 32 36 63 31 61 25 33 44 31 25 32 36 63 31 63 25 33 44 30 25 32 36 63 36 61 25 33 44 31 25 32 36 63 36 62 25 33 44 31 25 32 36 68 68 25 33 44 48 61 6c 7a 65 71 75 56 4e 5a 73 38 65 57 65 36 5a 54 4a 35 46 74 38 66 45 79 50 4c 37 44 59 4b 65 51 33 31 4c 73 5a 6b 79 32 38 25 32 36 72 31 61 25 33 44 25 32 34 75 69 55 35 4a 58 31 52 41 41 5a 61 39 46 76 57 65 76 54 65 30 7a 55 6b 46 4d 5a 49 64 78 2d 6e 41 44 51 42 45 41 72 5a 31 49 50 79 41 76 78 5a 45 64 49 2d 53 64 4b 36 5a 71 68 47 31 77 58 47 6c 38 39 69 47 58 66 72 68 6a 35 73 6d 64 41 46 30 77 30 30 4a 45 4a 30 47 54 Data Ascii: atr=a%3D6%26a2%3D1%26c%3D1713279944%26d%3D56%26e%3DwAD9uO9YAQw%26c1a%3D1%26c1c%3D0%26c6a%3D1%26c6b%3D1%26hh%3DHalzequVNZs8eWe6ZTJ5Ft8fEyPL7DYKeQ31LsZky28%26r1a%3D%24uiU5JX1RAAZa9FvWevTe0zUkFMZIdx-nADQBEArZ1IPyAvxZEdI-SdK6ZqhG1wXGl89iGXfrhj5smdAF0w00JEJ0GT
2024-04-16 15:05:56 UTC	504	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Date: Tue, 16 Apr 2024 15:05:56 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Server: Video Stats Server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.11	49912	142.251.15.91	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:56 UTC	2800	OUT	POST /api/stats/qoe?fmt=398&afmt=251&cpn=jRkNZCQf5oAkxA7P&el=embedded&ns=yt&fexp=v1%2C23858057%2C125239%2C21348%2C76094%2C54572%2C73455%2C230596%2C84737%2C36318%2C6271%2C26443548%2C7111%2C31786%2C4557%2C9954%2C1192%2C10512%2C15711%2C273%2C6966%2C2%2C6689%2C2007%2C4957%2C4115%2C12518%2C1263%2C5498%2C796%2C643%2C5538%2C2893%2C2%2C531%2C819%2C531%2C4712%2C5599%2C1104%2C4465&cl=623129822&seq=2&docid=wAD9uO9YAQw&ei=z5MeZqaINPHUy_sP0eWdmAw&event=streamingstats&plid=AAYWOBLu246nWADi&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2FwAD9uO9YAQw%3Fplaylist%3DwAD9uO9YAQw%26iv_load_policy%3D3%26enablejsapi%3D1%26disablekb%3D1%26autoplay%3D1%26controls%3D0%26showinfo%3D0%26rel%3D0%26loop%3D1%26origin%3Dhttps%253A%252F%252Fniceindiatravel.com%26widgetid%3D1&qclc=ChBqUmtOWkNRZjVvQWt4QTdQEAI&embargoed=0&cbr=Chrome&cbrver=117.0.0.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240409.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&afs=1.277:251::i&bwe=2.111:130000,2.112:130000,2.118:130000,2.119:130000,4.596:272036&bat=2.111:1:1,2.112:1:1,2.118:1:1,2.119:1:1,4.596:1:1&vis=2.111:3,2.118:0&cmt=2.111:0.000,2.112:0.000,2.118:0.000,2.119:0.000,3.183:0.001,4.551:0.940,4.596:0.940&bh=2.111:0.000,2.112:0.000,2.118:0.000,2.119:0.000,3.183:4.261,4.596:9.061&user_intent=0&vps=3.183:PL,4.596:PL,4.596:PL&vfs=4.596:398:398:397:r&view=4.596:1267:713&bwm=4.596:698066:5.211&df=4.596:0 HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 226 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1713279950337&flash=0&frm=2&u_tz=120&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1267%2C713&vis=1&wgl=true&ca_type=image sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded X-YouTube-Utc-Offset: 120 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240409.01.00 X-YouTube-Time-Zone: Europe/Zurich X-Goog-Visitor-Id: CgtJMG1ONlpYUjdsOCjOp_qwBjIKCgJVUxIEGgAgKA%3D%3D sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/wAD9uO9YAQw?playlist=wAD9uO9YAQw&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&origin=https%3A%2F%2Fniceindiatravel.com&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
2024-04-16 15:05:56 UTC	226	OUT	Data Raw: 73 65 73 73 69 6f 6e 5f 74 6f 6b 65 6e 3d 51 55 46 46 4c 55 68 71 62 55 4a 47 56 47 56 72 4c 55 55 35 64 6a 4a 71 65 56 68 4e 64 57 56 74 4d 6d 78 79 61 58 70 51 54 6d 68 31 5a 33 78 42 51 33 4a 74 63 30 74 75 64 30 64 4e 56 6b 46 4f 4e 53 31 55 62 57 4e 6e 53 55 74 47 53 54 4e 59 65 6b 4e 77 4e 44 5a 74 4e 54 52 70 53 46 52 4e 4e 45 68 42 52 45 46 74 64 46 46 46 54 6b 4d 32 53 6c 59 30 61 32 55 35 64 6e 68 77 63 6b 5a 54 58 7a 51 78 52 6d 68 33 55 45 64 53 4e 45 31 6a 54 32 6c 6d 56 46 67 77 63 55 68 58 64 47 74 48 61 43 30 33 57 43 31 6e 62 6a 56 48 64 6e 68 36 63 47 70 5a 64 31 55 32 61 48 5a 30 63 6d 74 33 63 6e 4e 57 62 46 46 68 61 57 31 45 5a 77 25 33 44 25 33 44 Data Ascii: session_token=QUFFLUhqbUJGVGVrLUU5djJqeVhNdWVtMmxyaXpQTmh1Z3xBQ3Jtc0tud0dNVkFONS1UbWNnSUtGSTNYekNwNDZtNTRpSFRNNEhBREFtdFFFTkM2SlY0a2U5dnhwckZTXzQxRmh3UEdSNE1jT2lmVFgwcUhXdGtHaC03WC1nbjVHdnh6cGpZd1U2aHZ0cmt3cnNWbFFhaW1EZw%3D%3D
2024-04-16 15:05:56 UTC	504	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Date: Tue, 16 Apr 2024 15:05:56 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Server: Video Stats Server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.11	49913	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:56 UTC	640	OUT	GET /wp-content/uploads/2021/02/cropped-nit-logo-only-2021.png HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:05:59 UTC	392	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:05:59 GMT Content-Type: image/webp Content-Length: 14424 Connection: close Cache-Control: public, max-age=31536000 X-Hcdn-Image-Optimizer: f:webp q:85 w:1600 alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 3b676930b1d3aae31f9be55cad08953b-asc-edge4 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 2.671 Accept-Ranges: bytes
2024-04-16 15:05:59 UTC	977	IN	Data Raw: 52 49 46 46 50 38 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 ff 01 00 ff 01 00 56 50 38 20 70 37 00 00 f0 f2 00 9d 01 2a 00 02 00 02 3e 51 26 91 45 23 a2 22 12 ea 15 10 38 05 04 a6 ef c3 54 ea 96 08 5a fc 64 e8 25 54 df eb f9 8f cc bf 08 2e 93 dc 3f c2 fe d4 7f 67 fd d1 fa 17 b5 7f 65 fc 07 fd cb dd d7 8a 5d a7 ff 03 ed 57 e3 1b c6 7f 40 ff 6d fd e7 f2 bf e7 af f9 df f6 bf d4 3f ad 7c 31 fd 75 ff 43 dc 0f f8 e7 f4 5f f8 9f de 7f d5 fc 6c f4 41 e6 0b f6 1b f6 6f dd ff fd f7 fc ff f7 7e ea bf ae ff b1 ff af fe 4f fd 77 c8 0f f4 bf f0 5f f9 fb 0b 3f 74 3f ff fb 81 7f 3b ff 4f e9 91 fb 55 f0 a7 fd 47 fd 9f ed 57 fc 2f 91 ef d7 df fe 5e c0 1f f9 7d 40 3f ef fa 80 7a 8f f6 23 fc c7 6e bf e7 79 77 31 86 f3 bd d5 df f6 7d 0e fe 45 f6 db f5 9f de ff 1d Data Ascii: RIFFP8WEBPVP8XVP8 p7*>Q&E#"8TZd%T.?ge]W@m?\|1uC_lAo~Ow_?t?;OUGW/^}@?z#nyw1}E
2024-04-16 15:05:59 UTC	1369	IN	Data Raw: 66 ae 59 f0 4c 26 f5 1c 34 65 51 2a fc af be d3 90 e1 1d 2d 17 00 dd f1 ff dd e8 e1 00 d9 15 0e 9c ff 04 12 22 1d ab 49 7d d4 96 8c 23 67 9f 90 b5 5b d2 0f 2a cd 3e ef f1 76 e3 50 9a c3 d8 5c 4e 99 c6 3e ec 89 8f 17 0a bf 61 8e 8b c7 74 04 21 46 c4 a2 33 91 a1 8c cc c4 a4 1b fa 48 bd b7 75 e5 63 b8 41 67 f8 f7 c0 60 56 c4 df 0f 3e 86 22 92 18 6f 53 b4 29 8c e7 24 99 4d 0e dc 0d 00 9b 35 33 ed 98 60 19 d5 ca a6 69 82 6f 4a 56 f0 b9 75 1d fe 9a 83 08 fe 25 79 1a 3e 08 96 31 d3 6b f0 bd a4 d8 79 c0 26 25 ee 51 ac e3 a5 3a ba 64 e7 a8 97 d7 c5 93 f9 10 d4 de 6a 4e 60 6b 90 f7 e0 49 f5 79 84 2b 0c ea 83 8a 1a bb ac 33 67 29 17 21 b5 0f 8f 3a 1e cb ab 91 c1 88 18 4f f2 a7 6a 60 d9 2b 16 0d 10 33 7a 7b 08 37 7b 19 e3 22 f7 de 6e 01 5b 65 ac 4d 5c d9 0a 5a 91 e2 Data Ascii: fYL&4eQ-"I}#g[>vP\N>at!F3HucAg`V>"oS)$M53`ioJVu%y>1ky&%Q:djN`kIy+3g)!:Oj`+3z{7{"n[eM\Z
2024-04-16 15:05:59 UTC	1369	IN	Data Raw: eb 87 05 12 5d 9a 31 c9 d7 61 a0 e8 a2 a4 5e 14 a7 a3 d1 1f 37 f4 6a fa 16 66 df 28 6c 91 86 52 12 df e8 69 9f 7e 71 49 47 e9 f2 bd 70 31 c1 c4 c1 c1 68 ca 29 44 03 e2 16 5f 32 58 af ca 37 e4 53 d3 ea 5a 20 47 d1 41 01 18 2e 5b 0c 7a 14 50 18 65 70 45 2e 52 f1 63 90 00 01 a8 f8 e5 ee 6b ea 16 eb fb c8 ae 61 75 95 bb e6 3f 4d 21 f6 e0 ec 1b bf fc 1a fc df 6e ff 57 30 ca 75 1e af f8 1a 7f 3d 8d b9 5a 70 ad a7 83 7e ad bf 86 80 ae ca 0e a6 d6 26 76 d8 9d ab d0 23 c1 8c f6 99 b6 c2 c7 0e 54 e5 1f df 6c ae ed 28 de 6a f1 4c d2 e3 75 28 e7 72 45 1d 4a 71 ec 85 6d 94 8c c4 6c c6 b0 59 e2 07 4e 0a 0f 26 6b f9 ba a6 2e 37 62 fd 51 9f 82 d9 72 58 f7 6e fd ea 0f 21 e3 c3 20 2e 38 e3 54 08 89 97 e2 22 f5 ee 4f 32 cb a9 b5 c0 5e ed 53 fa eb ea fc 02 b9 d8 bb 44 79 a3 Data Ascii: ]1a^7jf(lRi~qIGp1h)D_2X7SZ GA.[zPepE.Rckau?M!nW0u=Zp~&v#Tl(jLu(rEJqmlYN&k.7bQrXn! .8T"O2^SDy
2024-04-16 15:05:59 UTC	1369	IN	Data Raw: 4b f5 05 c8 cb 4c 2f 8b 1b bc d6 33 8d 94 20 d7 05 37 d1 16 e6 37 1b 90 fd ad 59 3a bf ff 67 d4 c1 e0 ff 21 48 bb 55 25 31 e2 8c 50 1d a4 44 ff 63 67 c0 95 a6 ea cf 2f 87 e7 a4 63 ee 24 e6 67 3f 89 1b 0a 99 92 d9 4f fc 86 02 dd 1e 60 09 2b bc a3 e4 3a 14 4f f2 ea 76 e7 60 7e f0 23 ac 41 c3 e5 98 d6 4b ef 9a 26 cb 4d a0 db 7e c8 6b 1d 69 e3 8b 58 80 3c f3 28 eb 73 7c 30 7f 18 b2 e1 3d a7 e8 25 45 47 cd c1 93 73 3b e9 a4 6d 4c 19 6e 16 d2 be 8e 1c c5 3f 0b c6 cc 1d 89 34 75 02 4f 8c 34 30 c4 98 37 cb 66 de ad d0 2f 16 a8 7e 46 ff 90 a6 b4 4a ea 02 07 de 99 56 4a f5 26 92 65 07 72 36 62 c5 6f e5 21 fb c4 2f 99 e0 7d 71 ef 39 e7 54 e0 d2 94 98 f4 30 0e 14 83 d2 7e 72 04 fd 0c 22 a7 05 79 19 87 ae 9d bb 7c dd 5f 9b b1 85 ac a7 d5 9e 21 f7 6d f4 cd ec e2 b5 78 Data Ascii: KL/3 77Y:g!HU%1PDcg/c$g?O`+:Ov`~#AK&M~kiX<(s\|0=%EGs;mLn?4uO407f/~FJVJ&er6bo!/}q9T0~r"y\|_!mx
2024-04-16 15:05:59 UTC	1369	IN	Data Raw: 21 1a 9c 18 f5 09 36 a6 a8 4a 57 6e 57 58 d4 82 d9 8e f0 33 e4 3d 69 ed 12 2b 4a fb 7c 03 77 6c a2 50 e8 3a 8c 09 6b 13 da f9 81 cf 76 e5 a3 2c 3f 6f c6 e7 11 5d 37 b2 51 a8 77 bc ce 41 f6 9f 2e 45 8d 1a b0 c9 20 20 d0 9f 60 07 f1 a6 27 0c 31 a6 cb eb e9 49 e8 72 31 e1 9f ca 1e 5c a3 b7 1d 97 a2 71 83 ad 7c 6b 6c 0c 40 c8 f2 36 f9 5f 5c f1 53 87 43 0f 4f 94 a9 d1 6f d4 9e 12 2b d5 33 33 e5 fb f2 5c 79 cc d2 e9 d0 71 5b d0 ad f3 af 35 70 fd 7d 47 60 d3 ec fb 58 32 bb 2d 13 7f 9f 8f e5 06 86 66 0d 4a e7 97 b4 00 df f4 79 72 61 c6 09 e0 47 7e 3d bd a8 03 7a bf 55 f7 6f 88 0e b8 09 7d 19 e9 eb 43 13 15 9e 6b 57 3d 42 c1 34 ef b1 96 bf c0 12 b0 6e 07 b0 68 ad 19 32 50 c6 9c af 4a 29 32 ca 67 76 96 8d fb 83 d3 3b 43 7d 21 24 63 39 6f d2 89 d1 d8 0d 7b 1e 15 ae Data Ascii: !6JWnWX3=i+J\|wlP:kv,?o]7QwA.E `'1Ir1\q\|kl@6_\SCOo+33\yq[5p}G`X2-fJyraG~=zUo}CkW=B4nh2PJ)2gv;C}!$c9o{
2024-04-16 15:05:59 UTC	1369	IN	Data Raw: 7f a4 38 b6 09 dd ec 99 f5 af 34 00 44 d5 9f 5a 89 c4 77 91 73 74 19 cc 22 f5 76 55 0b d5 ce 38 c9 3e dc c2 1f c0 3b 43 cd 0d 40 01 68 3e 09 bd 05 ff 8a b3 49 d8 1e 57 25 d4 6f 37 f5 61 56 6d 1e 80 a0 7b 15 28 bc 67 23 c3 82 9f ca 9c 0d d0 48 a1 b3 64 b1 5f 74 a0 c9 04 77 81 fa 44 7f fe 27 77 3f 0c 58 9d 18 20 8a 73 0e bc 6d d5 00 d7 24 c6 da 03 1d ff 03 80 2e 35 4f ad d6 f4 17 41 4f 2f 08 f2 b9 8a 8a 12 ba 8c 20 dc 31 00 85 f2 e7 94 b7 af e4 69 d6 d7 b7 41 c0 8e 46 01 f9 3c 2a 1d 00 16 cb fc 0f 4b fd c8 b2 d6 c6 82 3a b6 a4 58 62 57 fa ad c1 01 be 24 81 11 f7 2e 64 2b ec 2e 9e 60 5f 60 a3 60 23 0b 14 90 e0 03 b0 4d 33 0f 12 83 a9 5c ed de 86 fa 09 c1 f6 a1 39 9a 87 f9 39 b2 90 c6 7a 3c e3 02 87 f1 3d 82 0c a6 60 d2 37 5e 96 d1 cb bd 3d cc 67 45 1a 71 69 Data Ascii: 84DZwst"vU8>;C@h>IW%o7aVm{(g#Hd_twD'w?X sm$.5OAO/ 1iAF<*K:XbW$.d+.`_``#M3\99z<=`7^=gEqi
2024-04-16 15:05:59 UTC	1369	IN	Data Raw: 28 00 4c be db 08 53 c8 a6 f0 04 7b 74 da 30 76 e2 a3 6c f9 b5 09 d1 f6 24 03 e5 48 65 99 c8 67 6a 1a a2 15 d2 e6 01 71 7c 0e 95 c2 ed 8d 19 0a d3 f6 50 bc d5 51 e7 bc 46 b4 ac d8 50 b0 85 38 8f 11 de 9e dc eb d5 1c 67 44 cf b2 10 d0 18 ac f0 f9 1e c6 c3 0f 73 99 77 d1 fa 5e 85 78 52 ae 79 3e 69 92 8f 71 f9 39 50 64 09 15 ab 8e 28 6a b3 cd 65 fb 6b 86 1e 72 15 6b f4 1f 7c 09 b9 f8 0b 27 29 e0 81 42 7b d8 35 ed 43 3b 19 37 21 8c 0c b4 9f fa 7d e7 48 ea de ea b9 8a 11 00 5d 87 38 45 f4 17 48 89 b6 75 c3 f8 1c 49 f5 96 5e e8 c6 b3 74 18 c9 5d dc 33 96 6a 6a 9f 23 2f 1f cf 2d 6b 53 68 ce cd 26 76 53 1b 8e f1 44 84 f2 ce b9 85 cd e3 70 37 f3 65 27 d5 c1 ae a7 da 64 6b e1 61 11 4e dc 3c d4 58 e0 dc 4c 28 c1 66 25 67 56 f0 48 12 bf 31 51 6e 04 50 00 ca c9 85 af Data Ascii: (LS{t0vl$Hegjq\|PQFP8gDsw^xRy>iq9Pd(jekrk\|')B{5C;7!}H]8EHuI^t]3jj#/-kSh&vSDp7e'dkaN<XL(f%gVH1QnP
2024-04-16 15:05:59 UTC	1369	IN	Data Raw: cb 94 93 35 c9 02 06 4d 02 8c 8c 50 1e c6 68 4b e3 1c 18 e5 12 f7 82 6c 87 99 63 9b 07 ba 26 f2 3f a6 c1 cf 78 f2 fc 74 50 5d 4d 3d 26 22 43 61 b8 07 d2 39 d1 01 6d fe 18 37 bc 9d 98 26 59 35 dc 02 1e 3c e2 9b 8a ba 30 03 15 c1 e4 d9 94 85 15 17 c5 15 73 aa 43 a8 e1 1a 6a d7 63 2b a2 b6 17 84 52 3d 0c 78 4c ea 5a 62 88 38 4e a3 d5 7b ab 96 9f 77 1e 17 51 c6 c3 fa b9 1b 1c 8e 28 ac fc 8d ea 67 a9 6c b0 ec e5 3f 33 1d 4c 3b 37 a9 52 86 74 18 ba 9a 6e ac 8e 78 8d 58 b3 38 b0 26 59 95 77 40 bf fc 58 8e 4d cb c3 26 d0 5a b7 ac 63 cb c3 85 f0 33 f8 c5 c9 2e a3 34 76 be e8 62 3b 47 e2 60 48 9f 91 20 01 62 06 c9 5b 23 20 34 4c fa 9b 81 05 fd 51 79 2f 3a fc 74 37 d7 99 71 4d 49 9f 5d 01 f7 15 21 5d 0c bd c8 4f 3d e0 29 9e bc 42 21 a3 78 2b f5 e6 bf 78 2a 85 c6 3e Data Ascii: 5MPhKlc&?xtP]M=&"Ca9m7&Y5<0sCjc+R=xLZb8N{wQ(gl?3L;7RtnxX8&Yw@XM&Zc3.4vb;G`H b[# 4LQy/:t7qMI]!]O=)B!x+x*>
2024-04-16 15:05:59 UTC	1369	IN	Data Raw: de b3 70 b5 ee 60 2a ca 4f 30 fd 70 73 b7 48 2b db bf 2f 1d 31 c9 78 e2 26 89 4a 0b 8c 14 34 42 ee e5 81 a3 0e ea 77 d2 65 0d 3f aa cf 1c 3c 53 67 c7 69 6d 7c d5 87 ff f0 4e 5a 59 90 d9 c3 a0 00 1f 73 2e 72 51 f4 c7 34 9f 21 91 8b b3 f8 45 a6 c3 32 d0 a8 71 22 43 18 b4 a4 d0 7a 44 14 58 6f 43 7b c7 01 7f 3f 3b f0 5a 65 10 7c 8d 4d 3e 42 45 82 bc e9 6b c1 7d 49 1c ae ff bb 70 50 fd 24 b8 9f 5c ea 4e 0f e4 de 07 e6 9a e6 d6 bc b6 3e 69 05 9e a5 b1 ec a8 ca e8 57 ea 4c 8b 52 a3 ed 0e b4 9b 6e cb 95 8e 00 b3 3d 04 d3 16 ef ea aa 50 b5 a9 2f ed 5a 44 16 06 f4 62 5e 88 46 26 07 11 8b 4f a4 4b cd 3f f7 71 28 d4 1e 28 e1 79 c6 90 77 a5 91 9c b5 5a 9b 81 69 7a 1b 3b aa 7a ab dd 33 2a 4e 79 ba e9 d3 9c 05 f4 68 a8 9e 1d 30 f2 97 d2 2f b5 d3 83 5c 2f f6 4d 81 4d 93 Data Ascii: p`O0psH+/1x&J4Bwe?<Sgim\|NZYs.rQ4!E2q"CzDXoC{?;Ze\|M>BEk}IpP$\N>iWLRn=P/ZDb^F&OK?q((ywZiz;z3Nyh0/\/MM
2024-04-16 15:05:59 UTC	1369	IN	Data Raw: ea 3b e4 33 25 7b ba f7 1b 60 fa 3c 86 73 3a 29 63 a8 0b 3e ae 1a bb fe c8 49 7a a9 5d 7d d7 b9 29 48 ae 32 80 96 aa ce 79 0b 30 61 63 5a 6c 60 52 5f 52 c3 43 ce 98 a5 67 8f 76 73 09 4e fd 45 72 e3 0b 29 2b f4 fb 17 33 44 ac 7a 2a a0 4a 63 be 3b 67 fe f3 43 83 b8 34 e7 e8 8e 8d 79 ad a2 c8 e0 62 3d 99 8d 95 04 ab 6c 1b 78 f6 8c a3 19 43 f2 d1 a4 6c df f6 c2 08 92 8e 6f ea 81 c7 4f dd 18 4e 10 2a 40 08 3f 7e 3c 74 db c8 13 4f 2d 81 5d a3 09 6b db cf c9 35 3b 05 40 aa 08 9f c0 57 ff 83 54 79 6f 77 4e 68 d8 c2 25 44 aa c7 19 fc 20 e0 59 6e 63 cf a0 96 b1 6a 15 60 10 1f 0e 24 74 78 99 61 46 15 e7 0c ca 1f 31 e8 a9 6a ef b8 9a 19 49 13 a2 18 7b f4 ab 5e cd c6 e6 df fb 66 e2 85 f6 5a f9 64 46 c3 a1 20 37 d2 3d bb 8e e0 6f 77 1d 22 cc c2 4c 83 ca 7b 2e 51 e9 7d Data Ascii: ;3%{`<s:)c>Iz]})H2y0acZl`R_RCgvsNEr)+3DzJc;gC4yb=lxCloON@?~<tO-]k5;@WTyowNh%D Yncj`$txaF1jI{^fZdF 7=ow"L{.Q}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.11	49914	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:56 UTC	616	OUT	GET /wp-content/uploads/2018/10/ko.jpg HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:06:00 UTC	393	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:06:00 GMT Content-Type: image/webp Content-Length: 567778 Connection: close Cache-Control: public, max-age=31536000 X-Hcdn-Image-Optimizer: f:webp q:85 w:1600 alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 500bcddc85f770bf857a57e89932ac98-asc-edge3 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 3.744 Accept-Ranges: bytes
2024-04-16 15:06:00 UTC	976	IN	Data Raw: 52 49 46 46 da a9 08 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 3f 06 00 3b 03 00 56 50 38 20 36 a9 08 00 70 6f 10 9d 01 2a 40 06 3c 03 3e 45 18 88 44 22 a1 a1 1c ad 7f 24 28 04 44 b2 88 a0 01 ff a8 ff 93 2a 8d fb 96 6e fd d1 f0 87 f7 7e 7b ff 89 f3 cb fe ce ae 3e 63 ff 3f 97 7f bd 77 f8 ff cb ea f7 fb 97 fd 6f 60 ff ec bf ea bd 58 7f f4 fd e7 f7 b9 fe 73 ff 7f a9 7f ed 9f f1 ff 73 3d ea 7f f9 7e f0 fb dd ff 3b ea 1b fe 13 fe 5f ff 6f fe de bf fe eb ff 9f fe e4 df bb 1f ff fd a8 7f 3b be 1e bf c9 ff f4 fd de f7 7a ff 91 ff f7 fe 67 b8 07 ff ff 6e 0f e0 1f ff 75 1f 77 7f f7 bf ee 9f e2 3f cf 7f 64 f4 0f f1 cf 96 7e f9 fd ab fc 8f fc 5f ee 9f ba 3f 56 df 27 ff 97 fe 2f fd 5f 81 df 3e fd b7 fe 8f f8 df f3 fe c0 ff 27 fb af fa cf ee df e5 bf f1 7f 92 Data Ascii: RIFFWEBPVP8X?;VP8 6po@<>ED"$(Dn~{>c?wo`Xss=~;_o;zgnuw?d~_?V'/_>'
2024-04-16 15:06:00 UTC	1369	IN	Data Raw: 62 5d cf bd 7b e8 8b c7 46 e2 8b 88 d6 15 ff 0e 95 db d6 75 08 3f 46 eb 72 f9 1b 74 f8 a5 9b 7d b8 f4 53 22 95 ec b4 06 ec 45 96 63 de 75 5a 3a 8e 3a 45 f3 ae f0 68 c9 09 11 b8 36 97 9c 8e 9a 0e b7 20 e1 30 aa 7f 4f 5f e5 ea 57 8a 3b 83 6f 7b c7 4f b6 ed 7d 2f a0 f6 10 3c e3 50 77 cd 5f d6 91 84 70 c6 e2 df e9 47 fa 00 0e 74 5c c5 7b e3 d5 d6 6b 3c bc 45 f2 4d 88 3f cf d8 16 e3 eb 6f 62 f3 4b 73 3d 01 e9 7c 15 84 02 c1 93 31 9e 3b b9 21 e1 d9 a6 3c 2b 2c 4e ec e9 b6 b5 45 27 fa f8 81 20 af 1e 48 48 f7 68 37 5d b9 da 6d bd 6c 1b ae ac a0 56 a5 54 d4 54 ea c0 35 62 27 ae 62 59 3c ae 1c 46 2a f2 c1 fe be 54 f1 52 f5 c8 46 ca 9f 27 d2 45 15 ec 79 8a 43 7c 02 3a 9a f3 a8 f3 34 04 66 64 9e b6 5c b6 30 d7 81 27 0f 3c 69 f4 ed 70 4b e6 04 58 07 f0 1b 2a 13 7b 7c Data Ascii: b]{Fu?Frt}S"EcuZ::Eh6 0O_W;o{O}/<Pw_pGt\{k<EM?obKs=\|1;!<+,NE' HHh7]mlVTT5b'bY<FTRF'EyC\|:4fd\0'<ipKX{\|
2024-04-16 15:06:00 UTC	1369	IN	Data Raw: 7f 45 be e4 5c 93 28 fa 78 d0 7a 79 79 2e 3b 00 ee 4d 46 2c d3 55 55 11 65 6b 91 4b 5e 3a c7 08 07 f8 d3 df 6c 05 5f 5e df 7d 2a d2 ac a5 26 ab 0a ac 8a 07 6f 20 45 33 73 68 32 76 6c 1f 0e 7c a7 ca ff c1 9d 54 2c ac 61 f5 84 20 ff ef 2b ee 7a ff e0 04 80 6e 62 74 fc 64 f6 05 44 ee 12 0e 1f da b0 52 b7 ee 58 a0 a8 25 0d 13 36 10 b9 28 b1 10 ae b7 2d 0d e8 04 98 7b 4f df 87 d2 92 24 50 ac 53 ed a8 6f 20 f4 0e bb 62 2b 65 57 0e 9a 05 f7 2f ea 80 d5 c1 20 1c 03 9a 4a 53 71 eb a5 23 34 e2 68 10 79 10 db 0e c0 b8 21 23 7f 0e 17 27 80 2d bf 47 b6 91 f7 a8 09 da 71 f8 ba 98 d3 5a 99 16 53 9c 76 29 51 51 83 31 17 5c 8f dd 80 1f 09 5f 9a 1d 6b 5f 90 db d5 94 9a 67 83 f4 17 ec c9 2a 05 b0 46 47 2f 2a aa e6 86 0e 19 63 32 b1 23 f9 8d 58 dc e4 71 f3 57 bd ff ef d3 88 Data Ascii: E\(xzyy.;MF,UUekK^:l_^}&o E3sh2vl\|T,a +znbtdDRX%6(-{O$PSo b+eW/ JSq#4hy!#'-GqZSv)QQ1\_k_gFG/*c2#XqW
2024-04-16 15:06:00 UTC	1369	IN	Data Raw: 17 4a 1c 82 c7 4d 4b e9 6f 90 1f c2 80 e2 b5 bf 80 68 3f 92 c3 aa 78 ce e3 ae eb f1 4b 06 6a f9 10 74 4b 86 fd fd 47 a1 ea 93 6f bb 5b 2b 3e c9 8b 8f 66 fe bf c0 4c ca c6 88 3d 16 91 f7 ff 6f 06 ab 95 5e 58 7e d3 e2 56 64 e0 57 32 76 ad 1c 79 34 36 ef d5 52 01 e3 44 ed 0b 71 17 2e 58 6a 0d eb 6c 86 4f c7 f9 91 60 9a 63 12 0b f2 0a e2 ca f4 fc 6a 19 03 68 06 e3 f9 28 83 56 23 38 f7 89 6f 69 60 06 3c a4 31 69 99 75 b8 ce de 6f 74 19 64 81 48 ae b7 27 30 23 a9 22 91 b8 10 f6 c1 39 c1 ed 18 9e e6 e9 e7 a8 6a 80 a1 db f9 35 cd ae 98 db af 24 94 ed 79 b0 93 1a 19 0e 4a 56 3e 41 22 4d ad 5b d1 b6 9e dc d5 a0 18 7a 6a 3c d2 8a e3 cc 08 d3 95 3a 95 86 63 ce 8d 9d 33 01 b3 e4 b1 5d 36 ec 8b f3 fa c3 fd 16 f9 a1 c6 19 4e a2 16 8e 60 cd 4f d1 bb 4c a6 20 9f f5 06 42 Data Ascii: JMKoh?xKjtKGo[+>fL=o^X~VdW2vy46RDq.XjlO`cjh(V#8oi`<1iuotdH'0#"9j5$yJV>A"M[zj<:c3]6N`OL B
2024-04-16 15:06:00 UTC	1369	IN	Data Raw: ee 11 62 3e f1 d7 a7 eb be 9f 3b 76 26 25 07 79 28 c9 74 20 89 a0 05 23 9a 36 fd 0b f2 bf 6e be 8c 27 74 0f 93 6e 17 a2 0a 1c ad f6 6a 5c d0 fc 1d e3 90 97 7b b1 98 79 a7 df 4d 5d b3 ea e0 e0 88 74 66 c6 a2 00 64 0c fa 06 e8 18 67 45 1a 5e 9c 11 ed 94 b9 f7 c6 b9 37 24 dd d4 ec c0 8d 7a a5 d4 97 a4 44 c3 e1 ab df f1 e1 63 ba d7 b2 cf 80 44 d9 47 e7 17 b3 c5 48 70 92 eb c3 6f 5d 76 89 71 3d 60 16 84 3b b8 f8 0d 08 02 66 ed af b9 8b cc 14 de 25 3a 40 44 7e fa 11 aa 15 bc 2c 8e 51 27 9c 78 60 cf 68 cf f1 94 5c ad 23 a9 5d 07 72 45 ab fe c1 92 ca 56 76 a5 75 5e 70 df 18 d5 3b b9 b5 6c 5a cc 67 dd ce d1 fa 5d 91 f5 1d 3c ad 15 a0 ef ed 0d c7 45 74 e6 0b ab e2 58 b0 b8 f7 2e 61 1f bb 22 87 11 80 fa cb 5b 05 70 f0 2e 7c b3 49 d0 33 41 24 8d a4 22 ff 39 ec 44 32 Data Ascii: b>;v&%y(t #6n'tnj\{yM]tfdgE^7$zDcDGHpo]vq=`;f%:@D~,Q'x`h\#]rEVvu^p;lZg]<EtX.a"[p.\|I3A$"9D2
2024-04-16 15:06:00 UTC	1369	IN	Data Raw: a8 d2 42 91 67 cc 73 8d 48 0f e4 9f ab 44 05 ff d2 90 91 34 b2 72 21 19 16 65 4d 57 e3 f0 61 25 6e 10 7e 0d 35 1c 4a 94 a3 1f 93 ba 0c 71 b5 62 84 e1 1a 49 3d f6 3e 2e 51 f4 c4 94 f4 36 fb b2 a4 e4 b8 25 df ae 4d b8 43 15 25 b2 03 32 8d 3a 5d ed 17 d4 cb d0 47 f8 da d1 48 d7 5f f3 4b d7 f9 b6 21 76 91 2f 4b 5a 24 6a 90 a9 61 f8 b4 15 80 8f 1e 4d 2f a5 f5 b5 49 45 7e 9d ae dd 6c e9 17 03 dc 40 0c bc eb 9b 38 f8 7e a0 97 22 f5 d1 1f 34 e2 f3 26 6e c7 cf 20 2a e3 ec e3 5a a2 70 fb 5e ff e1 53 92 2f 38 3c d8 74 64 1b c9 b2 24 5b fd c0 36 14 8f 70 15 71 cd 5d cf b3 bb b6 a6 31 c5 7a bc 29 83 62 a6 9f cc 6b e7 70 84 04 ae df 65 19 1c 0b 7a f6 4c e7 f8 2b 23 20 39 af 92 91 38 e3 2d 8e c5 3d 6d 83 62 0e 1a ac 06 40 2f 97 e6 fa 03 47 ec 3b 41 12 99 c3 58 3a eb ff Data Ascii: BgsHD4r!eMWa%n~5JqbI=>.Q6%MC%2:]GH_K!v/KZ$jaM/IE~l@8~"4&n *Zp^S/8<td$[6pq]1z)bkpezL+# 98-=mb@/G;AX:
2024-04-16 15:06:00 UTC	1369	IN	Data Raw: 32 96 c6 93 15 88 5e e9 ff 2c 3f 9d 31 aa ce 97 78 9d 89 e7 c5 f9 0a 1f c0 3f 27 8f 70 bf 85 1e 5e 7c 29 f8 47 ff 75 b0 0a c9 ff af ce f6 63 96 05 8d cf b9 30 e6 d9 0c 43 9d 9f ab 83 71 ac 4d 57 a8 2f 9b 65 d1 98 01 ac 50 2c 36 1a e9 3c 5b 78 46 b5 ce a1 df 64 8e bc 6d cd 46 2b 9d 0e e0 ef e7 d3 b4 12 7a cb 2c da b5 ac a8 2c 75 11 82 0a 74 42 8d 21 62 68 0a b3 24 b8 fc 99 e5 90 ec fd 15 59 f2 b3 8c b0 1d 7b 59 6c cd 19 30 b5 62 c2 1f 11 56 99 a4 1a a0 90 8b 76 63 28 a0 c5 e6 bf 66 4f 72 1a db 72 4e 67 e8 9e d4 f3 54 64 19 0a 19 60 b7 1e 57 46 3a 30 1a e6 78 3a 58 1e 0d fd 01 fb 6b 5f ff 39 a5 aa 79 d2 98 2a 36 a0 d1 dc fa d5 c7 9e 59 d6 fb 67 21 8f 57 da 77 e4 6a 2f 35 1c 6f 1e 1e f1 87 c3 a9 72 f6 63 a6 e8 0d 4f 19 56 0b 56 d7 ec 6f 49 6f a1 a1 ac ef 7a Data Ascii: 2^,?1x?'p^\|)Guc0CqMW/eP,6<[xFdmF+z,,utB!bh$Y{Yl0bVvc(fOrrNgTd`WF:0x:Xk_9y*6Yg!Wwj/5orcOVVoIoz
2024-04-16 15:06:00 UTC	1369	IN	Data Raw: d4 f0 7f 6a dd e7 83 30 c4 4c 04 5c b2 85 4c 75 5b 0b ea f4 4e 8b 96 e7 58 5f d2 d6 55 cd c9 f9 c0 3f fa a9 70 7a e5 8b 49 de a1 08 e0 54 e5 13 15 c1 49 a2 12 c9 93 2c 93 03 7e 68 84 ef 9e c1 55 ca dd b9 2c 0c 3e eb 51 e4 05 f0 b5 f4 53 e3 02 76 6c bf fd e6 e1 f5 32 61 ff c2 4b 44 6c 95 a7 d8 3c 5e 5c 1d 15 a9 68 66 a7 22 df 7a aa f5 4b cb 52 8c 86 e2 9e 94 e8 ac 23 95 dd f9 0c 8f e3 c9 ec b2 17 9b 3d 77 99 d4 94 2c 62 71 9d 2f d9 35 b2 36 0e e0 1d 96 9c ea 49 33 2d d1 ad 85 be 22 a3 d9 bd bb 2f b4 8b db 5c ea 8b 1f b1 d6 31 34 1d 05 12 56 c8 40 6b fe f0 3d e7 da 4c 68 78 da 46 eb aa 3b b1 72 0d b0 36 d4 e3 be 41 f5 89 be 43 a8 f8 5f dc d5 df 9e 22 c0 c1 30 c9 d5 68 f7 9b be 2c 68 28 40 da 5d 7d 7c dc 46 93 88 9a a3 24 4c 8b a5 53 e1 ca 54 8c fa 89 a1 08 Data Ascii: j0L\Lu[NX_U?pzITI,~hU,>QSvl2aKDl<^\hf"zKR#=w,bq/56I3-"/\14V@k=LhxF;r6AC_"0h,h(@]}\|F$LST
2024-04-16 15:06:01 UTC	1369	IN	Data Raw: 5c 39 17 53 03 8c 75 4f 04 03 23 0f aa 17 22 46 c7 41 ff 10 40 3b 21 0f b6 37 33 4e c6 e0 c7 42 b7 e4 f0 f3 df 18 08 6e 43 64 c0 48 b1 e4 4f 01 67 5d 97 3a b2 ac 42 19 96 e6 4a e0 21 79 1c ef b8 c2 70 46 33 40 ff c0 1b 4d 77 1f 6d d5 cc 69 44 e0 33 8c a1 d6 0d c6 6f d1 af d9 02 89 c6 5a 60 ae 7a 94 3f 6b ce e7 61 11 df d0 6e 3c ac b7 09 51 a8 90 5c 2d ca 7a d4 df 0f 35 aa 7b b7 f5 05 8a 5c 26 ec 8f 0c 7d ca 5c 3c 65 82 7e cc 79 16 27 eb f8 06 3e bd b5 99 3c 79 95 eb 54 e8 84 42 c2 48 8c 25 f5 3b fe 23 46 02 da 5e f3 f7 00 bf 94 83 16 47 23 18 c5 9e 9b eb 80 62 f9 f8 d3 65 f4 df 30 e7 1d 26 2d 63 fe 2e 1b c1 3d 71 4b e6 e1 f9 47 ce b0 60 1d d6 80 b4 90 25 fd 4d 41 fa aa 55 2b d1 74 af f7 75 11 39 d6 8f 3c 2c ec fc 59 fe b9 3b fd 7b eb 4d bf 58 1d e4 45 8a Data Ascii: \9SuO#"FA@;!73NBnCdHOg]:BJ!ypF3@MwmiD3oZ`z?kan<Q\-z5{\&}\<e~y'><yTBH%;#F^G#be0&-c.=qKG`%MAU+tu9<,Y;{MXE
2024-04-16 15:06:01 UTC	1369	IN	Data Raw: 4a c1 a5 2b 54 31 59 a0 a8 56 fe fd f1 80 ec 81 56 70 0c a4 fc 60 a5 3f a8 32 67 98 fd ac 86 8f 75 b7 87 91 fe 1a 1d 8c 39 6c a9 14 1d ed a1 4f 2a 6b b4 d3 41 15 6a 61 23 8a a5 ee df f6 69 21 0f 57 6d 5a d3 cf eb 5e 1e c2 05 06 4b 43 04 de 2d 76 ef f7 7f 2d ca c9 ce 16 d3 a5 41 f1 02 56 d6 99 70 fa 3b a6 2c 12 1b 55 ff 43 9b 23 61 42 e8 2e 2b 95 01 fb 01 66 2e b7 de a2 f0 e9 3e e9 e4 70 76 e6 6b 0c a4 91 26 a2 13 bb dd 6e 15 fb 89 85 b5 6d 08 3c 14 f4 e0 00 73 67 8d 92 05 36 2a 25 69 d2 19 df 61 48 83 04 ba d1 a0 ab e9 f1 9f f1 cd 68 a6 37 6e 7c cc 17 7e 21 6e e7 a0 ff c7 73 fb ec b4 09 b9 e5 d1 10 f5 ed 9b 1b 47 e2 b3 21 f1 43 20 8f 8d 73 f7 76 f7 c7 9a 1e 1a 5b e2 84 a6 e7 d8 10 a7 77 23 b0 14 98 4a 6d 16 95 7f 96 83 ec 37 15 01 da d6 43 1b 62 1d a2 c3 Data Ascii: J+T1YVVp`?2gu9lOkAja#i!WmZ^KC-v-AVp;,UC#aB.+f.>pvk&nm<sg6%iaHh7n\|~!nsG!C sv[w#Jm7Cb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.11	49915	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:56 UTC	620	OUT	GET /wp-content/uploads/2018/10/slide5.jpg HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:06:00 UTC	393	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:06:00 GMT Content-Type: image/webp Content-Length: 368256 Connection: close Cache-Control: public, max-age=31536000 X-Hcdn-Image-Optimizer: f:webp q:85 w:1600 alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 5f2ed8e5726865d17daf8d4e00d01653-asc-edge3 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 3.699 Accept-Ranges: bytes
2024-04-16 15:06:00 UTC	976	IN	Data Raw: 52 49 46 46 78 9e 05 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 3f 06 00 2a 04 00 56 50 38 20 d4 9d 05 00 50 ae 12 9d 01 2a 40 06 2b 04 3e 51 22 8d 45 23 a2 21 22 a9 55 bb 70 70 0a 09 62 61 07 ba 6e fb 82 7e 0d 87 35 bd 26 5a ef bc b6 6a f9 a9 ff 1f a6 eb 36 7f f0 f3 ba ff ff cd 4f f6 b5 23 d8 df 64 70 6b f4 bd 01 db bd af b1 61 fd b3 5c 7e 78 e5 35 c9 ff a3 7f c6 fb 55 f1 89 ff 33 c4 1b cc bf 9a 7b 00 7f 28 fe 8f fe 73 d5 1b 02 9a 00 7f 3c fe e9 ff 93 fb e7 ae ef e8 7c c3 fd 80 f4 55 f3 77 e8 29 f9 ff fb 1e 9f 1f e3 7e df 79 f4 fd af fd c7 a8 ab ce 2e 93 f1 74 10 ca bf 03 ff 0f fa ff 47 2e 4f ee 7f e2 bf 83 ff 3f ff 53 fc 8f ce 3f f6 bf fa ff b9 ee 23 e3 3f ea ff f1 ff 7f f9 a5 ef e9 ec 7f d3 ff e9 ff 45 fe b7 f7 1b e6 77 fc bf fe 5f ef ff e2 7c Data Ascii: RIFFxWEBPVP8X?VP8 P@+>Q"E#!"Uppban~5&Zj6O#dpka\~x5U3{(s<\|Uw)~y.tG.O?S?#?Ew_\|
2024-04-16 15:06:00 UTC	1369	IN	Data Raw: 91 86 02 d7 93 1d f7 30 df 6f d6 e5 30 d1 ff 0b 16 dd 77 d1 eb 9b 28 7b 7f 71 4f a4 76 75 58 dd f2 1f 9d 9e e4 0d 6d 83 3c e9 3f 49 98 a5 cf 5c 26 93 ef 56 3c 7d 8a c2 cf e9 2f 95 45 e4 9c ff b7 d6 80 7b ad a2 c7 37 ad ad 7a f7 d9 31 ec c2 96 95 be 59 3e 21 c6 fe 60 d3 03 01 95 a2 9d 65 e9 20 84 75 ec d7 27 f5 56 6d 57 a0 fe 76 62 a6 38 63 86 39 6f 59 90 22 d3 fd 83 6c c2 74 a4 23 33 00 70 d5 0e 85 0e db 49 7e ac a7 82 55 a4 d9 2c 80 61 86 09 02 1a 9c 2f cc 49 ee 9c 84 b2 ea 54 48 e4 3f 24 b0 cc 43 61 33 99 fe aa fc 46 0c ba ea 03 81 19 dd a9 74 dc 84 71 ea 98 af 42 c8 16 97 34 07 87 84 29 66 b1 06 d6 8f 8d 52 fc e0 bb 9b 8d c0 0f 9b 6f 57 08 ac 67 83 50 fb 6c 58 d0 02 76 8f 6b d3 72 3f 33 84 85 e9 ea 48 53 34 ff f8 ac b6 6d 93 fc 43 3d 65 8d 6a 11 38 43 Data Ascii: 0o0w({qOvuXm<?I\&V<}/E{7z1Y>!`e u'VmWvb8c9oY"lt#3pI~U,a/ITH?$Ca3FtqB4)fRoWgPlXvkr?3HS4mC=ej8C
2024-04-16 15:06:00 UTC	1369	IN	Data Raw: 30 d5 f3 0b 02 5e 69 6e 1e ea 51 f0 12 bc c1 6d 9a d3 19 74 a3 c0 95 94 cb 82 bb 23 b8 49 4c 8d af 67 2b 24 d2 d0 d3 12 62 36 4e 0b 42 dd ac 3f b7 e9 09 92 98 1e 8d 92 69 98 4a 70 29 18 1c cf e7 0b b1 a7 10 f0 ec f0 42 4b c0 d5 b1 7f 33 63 07 59 21 95 e7 44 2b 0f b3 71 9d f4 28 e6 54 20 5b 0e f6 64 34 aa 14 17 c6 77 50 b2 12 0a 26 db ea 3c a0 ea 52 da 0b 96 6a 96 31 61 1d 7d ab bd ef 3c f1 e7 0f 09 92 a2 ff 3d be e1 46 25 89 03 49 fe c8 85 8e 21 e0 fc 91 93 3b ed 80 69 aa 6d 71 d8 ea 1b 3c 55 97 04 0b 20 48 58 2a 79 82 8e f9 6a df 8d 52 5e f3 43 27 4a f1 5d 65 db c9 e1 f2 e4 7d 77 e4 5b 70 75 b4 90 87 0c db 95 09 ac bc 5c 0f 6f 1d 3d 66 a4 fe f5 b9 95 29 12 7a d7 86 cb b1 ea ec 01 8a 71 23 1b e4 a9 a8 2e 57 88 ae 1e a6 e5 05 65 68 b1 ea 83 f8 e3 bd 84 6e Data Ascii: 0^inQmt#ILg+$b6NB?iJp)BK3cY!D+q(T [d4wP&<Rj1a}<=F%I!;imq<U HX*yjR^C'J]e}w[pu\o=f)zq#.Wehn
2024-04-16 15:06:00 UTC	1369	IN	Data Raw: b6 16 7d e8 83 1f ce 5b 1f 7b 20 37 1c 0e 2a b1 bc ef d6 1b 6b 7e 31 7a c2 d7 08 92 58 4f c1 85 9a 64 43 f0 f3 15 43 b3 a5 51 0b 9a e3 f3 ee 7d 9d 52 e6 b7 2e 8c a2 88 8b ab 73 37 17 20 d9 ae f3 cc c7 d2 be 9f b0 c4 70 3f 18 98 f2 4f 05 4d e9 a9 e1 30 2e f7 7d 75 f7 91 54 bf eb cd 14 52 5f 0f 31 7d a1 fb 6a b7 a9 51 01 f4 f0 eb b3 23 51 33 98 ac 35 b1 81 11 cf dc 55 46 ac d1 e4 9a 7f 81 85 90 b3 8e f3 c3 21 23 04 d3 ff be ad 20 57 ac 44 3e 2b 8c ac a5 dd 04 ea a9 27 36 cd 30 33 4f 82 09 aa 31 d5 e8 20 63 b0 34 21 cf b0 5f 1b f2 84 80 8c 12 fc dc 17 fe 79 e4 c2 3a 52 65 39 d9 60 3e 55 ed 53 ee 06 98 a9 18 b1 4f c3 38 10 21 9b c9 ed ae da 2f f5 29 be 40 6f b4 cb d9 f2 24 b2 7c 2e 54 bd 58 24 6d a0 76 08 7f d8 2d d5 f4 1b 42 28 e2 66 4f df 6b 58 bb 98 80 74 Data Ascii: }[{ 7*k~1zXOdCCQ}R.s7 p?OM0.}uTR_1}jQ#Q35UF!# WD>+'603O1 c4!_y:Re9`>USO8!/)@o$\|.TX$mv-B(fOkXt
2024-04-16 15:06:00 UTC	1369	IN	Data Raw: 4f 4e 3e 83 d3 72 d1 d8 f5 4a 17 e6 9d 84 6d ee 91 1c d9 17 fa f4 28 3f 3f e0 0a 06 6f ed b8 71 72 e1 42 9f c6 04 24 1b 32 8e a2 1c ae d1 48 d1 c8 4b 98 ad 75 2c 1a f8 e6 b1 61 e1 6c f5 5d be 40 f7 a3 16 d4 5f cc 22 ba 43 b0 8e 84 2a 54 76 e4 c1 5e 4c c0 46 e0 80 b1 f0 9f 74 a3 2f 9f c5 bc 94 b9 56 68 8f cd 30 a5 a1 7d df b0 9f 05 5a 79 8d 37 a4 51 ba ee 62 32 b3 cf 51 33 96 b0 73 4a 9c f4 14 ca a4 4a 65 a0 50 d3 a1 a3 36 27 ec a6 c8 b6 66 c9 d5 dc dd 15 dc 53 8f d0 5f 63 0a 0c a2 ba 46 91 33 82 01 0d 13 50 e6 2c 0d bb e3 2b 93 9f 58 d3 2b ed bc 06 9e d0 1a 46 9d d6 b7 db ca aa a6 74 56 08 3d d4 61 e2 fa d9 59 2b b7 56 40 0f 65 95 ab a4 ba 8a 96 f5 e1 dc c5 ff 34 26 b8 8f 61 09 f3 b8 54 fc c8 13 fc 2d 49 44 38 be 75 1c 2a 87 35 24 e7 24 84 33 97 98 15 89 Data Ascii: ON>rJm(??oqrB$2HKu,al]@_"CTv^LFt/Vh0}Zy7Qb2Q3sJJeP6'fS_cF3P,+X+FtV=aY+V@e4&aT-ID8u5$$3
2024-04-16 15:06:00 UTC	1369	IN	Data Raw: db b2 d9 af b1 16 3f 0e b7 c4 06 bf 40 2c 00 ca b6 03 b1 37 97 c9 af 35 f2 d9 1c 82 d1 de c2 62 1f 46 6f d1 95 bb 16 9d e8 3a 5b 3d c2 ab ae cb ed a2 c6 59 f7 20 12 e6 1d 7b f6 fc c1 6b 8e 55 b6 d6 e9 99 b0 e5 8a 66 1f 2c 4a 29 51 ba c3 77 21 5f 97 24 f3 2d 1c 56 0c ac 90 0e 6a 4f 9e fa 93 a1 3e 39 e7 77 74 12 78 86 d6 d2 db 98 32 89 ab e1 a5 26 82 f1 e6 60 4d a8 b5 aa 4d 5b b2 eb 5a e1 9d de 5a c9 ff b8 34 83 18 02 05 bb ed fd ed 23 98 4a 46 bc d9 9d dd b3 5e 7f cb 4f c7 b0 e2 fd 0e 57 8f 7f ff 34 9b f2 ec 30 a3 71 3a 60 3b 78 02 a8 12 a8 f5 1f 7e 05 b3 9d bd f8 93 08 d2 86 e5 2a b0 29 54 76 40 df 43 05 2d 39 ce d0 c9 c9 fb a9 80 6e 91 fa d7 88 ea 83 20 30 05 b3 8d 7d 07 f1 7a bd d0 69 32 bc ac 25 c4 77 ab 61 08 32 2e 8f a1 b6 ce 3d 13 58 ec d6 34 db 93 Data Ascii: ?@,75bFo:[=Y {kUf,J)Qw!_$-VjO>9wtx2&`MM[ZZ4#JF^OW40q:`;x~*)Tv@C-9n 0}zi2%wa2.=X4
2024-04-16 15:06:00 UTC	1369	IN	Data Raw: e3 ba cd e7 ab 58 78 2c e0 89 09 1a 9d 42 3c fe ca 13 3e 8f ee c5 98 e6 ad 8d f2 be f7 91 60 d5 a2 97 95 b0 35 56 06 0c f1 92 2f b9 1d 42 72 eb 9c b4 df f6 8f 67 e9 64 d1 10 a1 29 0e 72 46 f3 de 09 70 cd 23 6c 28 2e b0 90 c4 6e a6 ac a5 a8 48 2c bd 62 51 01 d9 e1 ea f4 82 21 b5 ca 3e 8f 84 49 17 27 f9 87 09 ee 09 51 f2 72 7c 1b 13 18 f7 59 50 aa c2 b6 53 84 b9 cc 8c e0 46 2b a3 58 43 77 b2 bc dd 53 09 f7 e7 39 38 dd ea cd 2c 29 f1 bf 97 15 57 6d 76 38 86 f4 a7 95 be d0 c7 66 e3 84 56 31 19 09 6f aa b3 52 e5 2f fe d6 de ce e4 38 7d ab cc 5d 30 bb 64 eb a7 dc b2 8f ff 92 b8 19 b5 87 e0 9e d4 af a3 76 6f ff 9c a0 45 55 76 36 9a f0 5b f7 de b6 f4 9e 07 ee 3d 35 de 8b 8d 54 3f 10 74 28 0e c5 d6 dd 69 02 40 3c b9 87 ac 87 21 6e b4 f8 a2 ee c8 95 25 2c 05 1f 52 Data Ascii: Xx,B<>`5V/Brgd)rFp#l(.nH,bQ!>I'Qr\|YPSF+XCwS98,)Wmv8fV1oR/8}]0dvoEUv6[=5T?t(i@<!n%,R
2024-04-16 15:06:01 UTC	1369	IN	Data Raw: fe 18 c6 31 a0 ba 35 10 47 62 c5 f8 10 30 70 38 39 5b 24 83 79 e8 5e 9b 87 d1 60 c4 35 7e 75 c4 4a 5e d3 f1 e8 38 56 e1 64 04 23 d7 4f a1 89 b4 97 2b 52 ac 09 e6 e3 6e a7 1a 27 36 56 54 6c 70 9d 11 eb e1 11 e1 3d 57 4f e1 78 9f 9c 41 15 91 1a 5e 3b 1d 03 47 54 43 41 45 2c 63 d4 4b b5 48 7d 1e 26 6e 6d 6c 21 dd ee 19 45 a0 ad c6 5a fb c0 4f f0 31 47 5d e2 e9 50 ac 3a d1 4f d1 f7 02 e1 f7 aa 9e ab e0 3c 13 54 e0 31 1e 33 e7 d2 33 07 93 af 99 09 e6 f3 d0 89 56 05 7e 94 03 07 f0 c3 a8 20 c3 a3 7b 18 2e e7 c7 2b 62 0a d2 cf 09 dd 29 6d 8e c1 eb 2f 46 08 ad b0 c1 5b 66 bf f7 a3 05 34 46 54 21 2c 16 bf 06 41 f2 17 d3 98 e5 98 b4 91 b9 0a 85 f3 dc 9a ac d4 c3 23 40 e5 b9 b4 8e ad 45 aa f6 68 1c ae 4f 4b 8a b8 56 06 1c f4 25 c4 56 05 64 87 35 16 b9 57 80 62 34 52 Data Ascii: 15Gb0p89[$y^`5~uJ^8Vd#O+Rn'6VTlp=WOxA^;GTCAE,cKH}&nml!EZO1G]P:O<T133V~ {.+b)m/F[f4FT!,A#@EhOKV%Vd5Wb4R
2024-04-16 15:06:01 UTC	1369	IN	Data Raw: d8 b2 e9 be 94 b2 d1 4e dd 1f 41 4a 49 66 be b4 84 a9 34 01 13 e3 5a 79 42 57 c1 34 b2 37 87 b7 2f a3 62 c8 21 90 18 f8 05 98 e4 ab e1 dd cd a5 e0 d1 7b 59 12 53 98 32 a2 82 11 97 12 2c b2 91 8f 5d 57 91 ad 63 09 37 b8 fd db 03 1c d5 48 ee 45 29 3d b8 cf 0a 85 f3 dd 26 15 80 9f 5b 07 10 82 ab 55 74 24 18 0c 08 b4 7a ba 61 41 aa 7f 4c 5b b8 4b 22 c2 fe c7 c6 6d 82 a0 b2 9a d8 68 92 0a 1f 59 1a da 02 26 c7 a0 c0 41 3f e8 05 ec 4a 80 3c 47 47 41 1a 45 68 7f 27 3b ae 3b 2e aa c6 e4 3c 19 a3 d1 54 70 ea d1 ec 38 18 f1 07 f8 91 1b 85 64 84 c4 03 0b a2 40 84 10 2d 36 3e f0 ba bc 86 e5 bf 0f cb 3a 62 b5 b8 02 1b 04 7f 01 6f cb 5e f7 4d 4b 9d c4 e6 71 e9 f0 64 4e 65 ea 2e 15 3a 84 7d b3 75 4c 9c df 67 c8 c4 25 fe 34 04 f8 22 cd 56 7f a7 24 f8 63 d6 96 c4 df 5d a5 Data Ascii: NAJIf4ZyBW47/b!{YS2,]Wc7HE)=&[Ut$zaAL[K"mhY&A?J<GGAEh';;.<Tp8d@-6>:bo^MKqdNe.:}uLg%4"V$c]
2024-04-16 15:06:01 UTC	1369	IN	Data Raw: 41 c9 cb 31 8e 2e 5e b8 ee 8f 5f b1 cb 5b a9 78 f4 ec ad c4 f2 fb 8b 81 09 f7 40 e4 6e ce 25 24 14 54 2e 4e 95 f8 70 1a 23 dd 33 e3 16 68 67 59 e5 8b f9 47 e0 3c 1d ec 76 81 ff c8 50 d5 ec 72 96 39 90 26 9e ca 3c d9 fc fa f7 50 cc f4 92 90 48 25 2e 72 1d 16 68 82 5a 78 da e2 ff 6b e6 fa 2a c7 4b f2 95 64 8f fd 49 3f 46 86 87 ba b2 49 a6 43 3f 07 48 31 9b f9 e8 1f a1 aa c2 84 48 ad 61 3a 68 18 6b c2 e7 42 b1 1e 47 5c 9a 70 95 f9 da 5f 2e 72 a2 7d 8e 54 b9 84 52 bd 2d ef 91 c5 2f e7 8a 66 f9 6e 3a ff 17 fd 1e 5c 8e 1d 99 ac f7 93 e4 41 9b 5d 43 d7 2e ee 12 ce 18 3e e2 55 05 da 4d dc 17 82 09 db 7b d1 71 8a df 29 d1 03 c2 8a 84 4d 30 65 b7 be 36 27 f1 ba db df ad 02 d6 92 12 83 72 8a dc 3b d1 3e 71 2e 06 ff 73 69 04 1a eb af fd 54 7a e9 dc c1 0e 76 f8 1e c9 Data Ascii: A1.^_[x@n%$T.Np#3hgYG<vPr9&<PH%.rhZxk*KdI?FIC?H1Ha:hkBG\p_.r}TR-/fn:\A]C.>UM{q)M0e6'r;>q.siTzv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.11	49918	142.251.15.91	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:57 UTC	2699	OUT	POST /api/stats/qoe?fmt=398&afmt=251&cpn=F6GU1QEdhoMLD-Np&el=embedded&ns=yt&fexp=v1%2C23858057%2C125239%2C21348%2C76094%2C54572%2C73455%2C230596%2C84737%2C36318%2C6271%2C26443548%2C7111%2C31786%2C4557%2C9954%2C1192%2C10512%2C15711%2C273%2C6966%2C2%2C6689%2C2007%2C4957%2C4115%2C12518%2C1263%2C5498%2C796%2C643%2C5538%2C2893%2C2%2C531%2C819%2C531%2C4712%2C5599%2C1104%2C4465&cl=623129822&seq=3&docid=wAD9uO9YAQw&ei=y5MeZqSPB9aoy_sPxcuI0A8&event=streamingstats&plid=AAYWOBKoz4xd3wIM&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2FwAD9uO9YAQw%3Fplaylist%3DwAD9uO9YAQw%26iv_load_policy%3D3%26enablejsapi%3D1%26disablekb%3D1%26autoplay%3D1%26controls%3D0%26showinfo%3D0%26rel%3D0%26loop%3D1%26origin%3Dhttps%253A%252F%252Fniceindiatravel.com%26widgetid%3D1&qclc=ChBGNkdVMVFFZGhvTUxELU5wEAM&embargoed=0&cbr=Chrome&cbrver=117.0.0.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240409.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&cmt=5.480:1.320,7.140:1.940,7.141:1.940,7.144:1.940,7.144:1.940,7.156:1.940,10.459:1.940&bwm=7.140:2081565:1.406&bwe=7.140:2070025,7.141:2070025,7.144:2070025,7.144:2070025,10.459:2070025&bat=7.140:1:1,7.141:1:1,7.144:1:1,7.144:1:1,10.459:1:1&vis=7.140:0,7.144:3&bh=7.140:18.270,7.141:18.270,7.144:18.270,7.144:18.270,10.459:28.061&vps=7.156:PA HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 226 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1713279945329&flash=0&frm=2&u_tz=120&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1267%2C713&vis=2&wgl=true&ca_type=image sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded X-YouTube-Utc-Offset: 120 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240409.01.00 X-YouTube-Time-Zone: Europe/Zurich X-Goog-Visitor-Id: CgtJMG1ONlpYUjdsOCjIp_qwBjIKCgJVUxIEGgAgKA%3D%3D sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/wAD9uO9YAQw?playlist=wAD9uO9YAQw&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&origin=https%3A%2F%2Fniceindiatravel.com&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
2024-04-16 15:05:57 UTC	226	OUT	Data Raw: 73 65 73 73 69 6f 6e 5f 74 6f 6b 65 6e 3d 51 55 46 46 4c 55 68 71 62 6d 64 6e 4e 47 74 6d 64 7a 59 77 52 47 46 33 5a 32 35 68 55 48 68 46 4d 57 6b 31 53 33 68 59 61 30 6c 6f 5a 33 78 42 51 33 4a 74 63 30 74 73 51 6e 56 6b 4e 55 39 32 59 30 4d 78 62 6c 4e 66 55 6d 6c 74 64 57 56 30 59 6d 78 48 4d 6d 67 77 64 6c 56 4f 4c 58 6c 6f 65 6e 46 78 54 44 4e 48 61 45 35 73 52 6d 34 31 4d 48 46 53 55 6a 4a 50 51 6b 64 54 4e 33 5a 36 62 6c 55 32 5a 57 35 56 53 6d 56 72 62 6b 68 6c 63 31 64 66 53 32 39 78 5a 33 4e 34 64 6a 52 56 61 6b 6c 72 53 46 70 34 63 54 4a 6a 55 48 4a 6a 4e 56 70 74 54 58 52 34 61 6b 39 55 4e 47 6f 34 56 46 68 76 4e 45 78 31 63 55 52 68 62 77 25 33 44 25 33 44 Data Ascii: session_token=QUFFLUhqbmdnNGtmdzYwRGF3Z25hUHhFMWk1S3hYa0loZ3xBQ3Jtc0tsQnVkNU92Y0MxblNfUmltdWV0YmxHMmgwdlVOLXloenFxTDNHaE5sRm41MHFSUjJPQkdTN3Z6blU2ZW5VSmVrbkhlc1dfS29xZ3N4djRVaklrSFp4cTJjUHJjNVptTXR4ak9UNGo4VFhvNEx1cURhbw%3D%3D
2024-04-16 15:05:57 UTC	504	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Date: Tue, 16 Apr 2024 15:05:57 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Server: Video Stats Server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.11	49917	142.251.15.91	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:57 UTC	1558	OUT	POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 3977 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1713279950205&flash=0&frm=2&u_tz=120&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1267%2C713&vis=1&wgl=true&ca_type=image sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Goog-Request-Time: 1713279955896 Content-Type: application/json X-Goog-Event-Time: 1713279955896 X-YouTube-Utc-Offset: 120 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240409.01.00 X-YouTube-Time-Zone: Europe/Zurich X-Goog-Visitor-Id: CgtJMG1ONlpYUjdsOCjOp_qwBjIKCgJVUxIEGgAgKA%3D%3D sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/wAD9uO9YAQw?playlist=wAD9uO9YAQw&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&origin=https%3A%2F%2Fniceindiatravel.com&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
2024-04-16 15:05:57 UTC	3977	OUT	Data Raw: 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 68 6c 22 3a 22 65 6e 22 2c 22 67 6c 22 3a 22 55 53 22 2c 22 63 6c 69 65 6e 74 4e 61 6d 65 22 3a 35 36 2c 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 31 2e 32 30 32 34 30 34 30 39 2e 30 31 2e 30 30 22 2c 22 63 6f 6e 66 69 67 49 6e 66 6f 22 3a 7b 22 61 70 70 49 6e 73 74 61 6c 6c 44 61 74 61 22 3a 22 43 4d 36 6e 2d 72 41 47 45 4d 66 4f 73 41 55 51 36 2d 6a 2d 45 68 44 56 69 4c 41 46 45 4c 4c 54 73 41 55 51 74 2d 2d 76 42 52 44 50 71 4c 41 46 45 4c 7a 59 73 41 55 51 38 4a 79 77 42 52 43 68 77 37 41 46 45 4a 61 56 73 41 55 51 69 4f 4f 76 42 52 44 30 71 37 41 46 45 50 61 72 73 41 55 51 36 35 4f 75 42 52 43 71 32 4c 41 46 45 4f 36 7a 73 41 55 51 5f 49 57 77 42 52 43 44 76 37 41 46 45 4e Data Ascii: {"context":{"client":{"hl":"en","gl":"US","clientName":56,"clientVersion":"1.20240409.01.00","configInfo":{"appInstallData":"CM6n-rAGEMfOsAUQ6-j-EhDViLAFELLTsAUQt--vBRDPqLAFELzYsAUQ8JywBRChw7AFEJaVsAUQiOOvBRD0q7AFEParsAUQ65OuBRCq2LAFEO6zsAUQ_IWwBRCDv7AFEN
2024-04-16 15:05:57 UTC	432	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Tue, 16 Apr 2024 15:05:57 GMT Server: scaffolding on HTTPServer2 Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-16 15:05:57 UTC	34	IN	Data Raw: 31 63 0d 0a 7b 0a 20 20 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 20 7b 7d 0a 7d 0a 0d 0a Data Ascii: 1c{ "responseContext": {}}
2024-04-16 15:05:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.11	49919	154.62.106.12	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:05:58 UTC	377	OUT	GET /wp-content/uploads/2018/10/4-5.jpg HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:06:01 UTC	393	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:06:00 GMT Content-Type: image/jpeg Content-Length: 280857 Connection: close Cache-Control: public, max-age=31536000 X-Hcdn-Image-Optimizer: f:jpeg q:85 w:1600 alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: a99a60119cac30e1bf48a114d7cea4a0-bos-edge1 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 2.265 Accept-Ranges: bytes
2024-04-16 15:06:01 UTC	976	IN	Data Raw: ff d8 ff e1 00 80 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 05 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 4a 00 00 00 1b 01 05 00 01 00 00 00 52 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 69 87 04 00 01 00 00 00 5a 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 02 00 02 a0 04 00 01 00 00 00 40 06 00 00 03 a0 04 00 01 00 00 00 3c 03 00 00 00 00 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e Data Ascii: ExifII*JR(iZHH@<C!"$"$C
2024-04-16 15:06:01 UTC	1369	IN	Data Raw: 00 ac d3 a8 da 04 c4 83 59 b4 91 ba 76 3a 95 19 84 92 45 3a 85 a9 5c 81 f7 a6 50 af e1 23 02 9d 6c 63 89 ac da 34 8e e3 a1 50 99 9c f6 cd 3c da b3 81 8a 8e 06 31 34 b4 c9 00 02 23 bd 67 24 6a ac 7f c6 83 89 8a 5a 5c 90 23 9a 8a a5 41 22 71 eb 41 0a 04 60 e2 a5 c4 7a a8 9a 54 14 07 bd 19 34 c2 08 89 38 a5 c9 98 8c c5 45 1a 27 63 a1 40 82 32 08 34 ad d9 24 54 72 a3 39 07 eb 44 14 60 9e de f4 b4 d8 6a a2 48 51 e3 34 a9 11 9f ce a3 05 40 e0 e6 94 16 00 ce 4f f4 a1 c4 6a 7e a4 89 c4 8f b4 51 cc 90 45 32 92 9c fb f6 a5 ee 27 da a2 86 98 e4 cf a6 78 a0 33 20 10 29 00 95 02 22 28 03 de 68 a2 90 e2 72 32 38 34 3b f6 03 de 8a 73 03 02 84 9f ad 2a 18 a8 02 31 40 fd 85 24 93 c1 3f 7f 5a 50 ff 00 11 a0 01 ef 8e 68 c4 73 39 a2 02 39 e2 80 e6 05 00 18 98 33 cd 18 07 9c Data Ascii: Yv:E:\P#lc4P<14#g$jZ\#A"qA`zT48E'c@24$Tr9D`jHQ4@Oj~QE2'x3 )"(hr284;s*1@$?ZPhs993
2024-04-16 15:06:01 UTC	1369	IN	Data Raw: ce 28 05 49 e6 8a 0b 14 49 c4 50 91 de 91 39 9c 51 66 64 66 9d 08 5e e1 11 c8 a0 08 c4 1a 29 ed 34 66 3e a2 80 4c 04 99 a1 ba 79 06 8a 00 32 40 a3 93 39 34 0c 52 49 03 23 bf 34 37 44 52 4e 73 fc e8 1c 03 db eb 4a 81 8b 9c e6 88 9c 48 a4 12 41 83 45 bf 33 fa 51 41 61 98 ce 4f 14 d9 39 f4 a3 dc 01 e4 53 65 42 66 a9 22 5b 1c 98 31 cd 2a 71 f4 a6 a7 cb c7 da 82 95 02 44 cd 3a 0b 1c 2b c4 52 54 b2 29 92 af 43 3e f3 46 9e 01 f5 f7 c5 3d 22 d5 63 e1 46 32 40 a3 07 d6 29 82 a9 f5 e6 80 56 64 8f a5 2d 22 d5 43 a5 53 e5 1f 6a 12 73 9e 29 bd f2 20 64 fb d1 ee 9c 0c 8f 7a 28 76 2a 4c 73 44 a5 49 9c 4d 26 44 c7 26 92 4f 9b f9 0a 75 62 6e 85 12 66 0e 3d 28 8a a4 c0 fe 79 a4 a8 81 19 22 89 46 72 05 09 08 59 51 ee 31 42 4c 49 c4 52 27 b5 27 78 ee 48 f6 a7 41 63 83 b9 06 Data Ascii: (IIP9Qfdf^)4f>Ly2@94RI#47DRNsJHAE3QAaO9SeBf"[1qD:+RT)C>F="cF2@)Vd-"CSjs) dz(vLsDIM&D&Oubnf=(y"FrYQ1BLIR''xHAc
2024-04-16 15:06:01 UTC	1369	IN	Data Raw: 4c 62 90 23 39 c5 29 2b 09 ed 9e 0d 4b 29 3f 51 f6 ce 08 18 8e 69 69 32 25 26 7e f4 ca 16 0e 0f 3f d6 9d 42 b0 22 31 59 b4 6d 17 e8 2e 77 28 76 14 a0 08 c4 d3 1e 31 48 c1 39 ef 4b 4b e0 62 47 f5 34 9a 63 d4 9b 16 16 40 32 79 a5 78 a4 28 03 9f f2 a6 cb a9 e2 30 68 ca d3 18 a5 45 6a f8 8f 78 9e a7 de 94 85 08 9e fe 94 c8 31 1c 52 81 13 cf d2 a6 8b 4c 7d 2e 08 8c 8a 31 ef 1f 5a 68 13 23 18 a5 28 88 9f 4a 9a 2a c7 41 90 13 cd 28 10 0f 20 e2 29 94 93 de 94 41 19 fc c5 4b 45 26 3f bd 20 cf 7a 5a 48 22 26 7d 2a 28 31 34 37 9c 19 8a 5a 6c 7a 89 80 81 19 14 09 48 3d aa 32 5c 51 f6 a1 24 13 ba 33 c1 15 3a 47 af 62 48 db b4 7a 7a d0 81 1e 61 cd 46 dd 04 02 71 14 b4 b8 60 0c 1f 59 a5 a5 86 a4 c7 76 83 83 c8 e6 81 48 19 03 eb 48 0b 81 82 06 68 d4 a8 fa 7a d2 dc bd 98 Data Ascii: Lb#9)+K)?Qii2%&~?B"1Ym.w(v1H9KKbG4c@2yx(0hEjx1RL}.1Zh#(JA( )AKE&? zZH"&}(147ZlzH=2\Q$3:GbHzzaFq`YvHHhz
2024-04-16 15:06:01 UTC	1369	IN	Data Raw: a4 1c 12 3d a9 d8 a0 50 39 e4 d3 52 15 0c a8 47 b0 a4 10 3d 20 d4 8f 0e 40 24 9c f3 47 e1 02 60 82 62 9e a1 38 d9 05 73 ec 08 a8 ae a0 c4 0e 4f 35 70 59 41 00 01 f4 14 87 18 42 81 c6 7d aa e3 95 22 25 89 94 4a 6b b9 c8 f6 a6 16 85 02 27 b7 7a b8 b9 63 68 90 09 f6 a8 a5 19 98 18 f5 ae 98 e4 b3 92 78 6b 62 b9 68 21 39 03 9a 6d 40 91 24 49 15 64 f3 60 02 40 e7 f4 a8 aa 47 f1 01 9a d6 33 31 94 29 d2 23 94 9e c0 71 49 98 c1 a7 f6 83 33 f5 a4 6d 92 0a b2 33 57 66 4e 2e b6 10 06 d8 3f ca 82 48 93 07 26 94 a4 08 e2 3e f4 3c 30 4c 83 4e d5 05 3e c1 88 3e b8 a3 48 01 23 71 fa 4d 29 09 20 40 81 9e 00 a7 02 0e d8 3d 8d 43 65 a8 bb dc 4b 66 3e dd a9 62 0e 0c d1 96 e7 82 01 fa 50 88 22 40 cd 4d d9 aa 4f b8 45 60 1c 71 4a 4a e7 00 9f b7 34 7b 3c d2 38 a5 21 19 04 27 f3 Data Ascii: =P9RG= @$G`b8sO5pYAB}"%Jk'zchxkbh!9m@$Id`@G31)#qI3m3WfN.?H&><0LN>>H#qM) @=CeKf>bP"@MOE`qJJ4{<8!'
2024-04-16 15:06:01 UTC	1369	IN	Data Raw: 98 c0 a0 17 07 27 34 d0 04 00 48 14 12 bd b9 19 a9 a4 56 aa e4 92 15 81 3d fd e9 51 f7 ef 34 c0 59 82 40 1c 77 a5 a5 6a 20 fa fd 6a 68 b5 21 c2 00 e7 8a 4a 88 1f e5 49 2a 8e f4 d2 dc cc fa 7e 74 24 0e 54 3d 32 70 7d 8f b5 2d 2a 4c 47 a5 47 0a c9 3c fa fa 8a 70 26 72 33 8f 5a 1a 14 58 e2 d4 82 36 ff 00 d1 a6 96 0a 53 20 9a 32 08 cf 7e fd e9 2a 51 1c 83 9e 22 85 b0 37 62 16 b3 8e 44 52 7c 4f bd 05 b8 38 22 33 8a 65 4b 48 12 13 3c d6 89 10 e5 43 c9 77 d4 9a 52 5d 92 40 22 2a 16 ed a3 22 01 a2 0b 20 cf 02 ab 41 1e 29 6a d2 c2 88 92 27 9c d3 c1 78 83 de aa 12 e9 0a 1d ea 42 1d 30 04 fb fd 2b 29 63 36 8e 5e c5 8f 88 00 00 98 a3 0e 63 d2 a0 b6 ef 94 e4 45 29 4f 80 08 24 11 59 b8 15 af b9 38 2c ce 24 90 28 6f 39 93 c5 57 a6 ec 05 47 14 4b b9 1d b2 3f 9d 1e 1b 1f Data Ascii: '4HV=Q4Y@wj jh!JI~t$T=2p}-LGG<p&r3ZX6S 2~Q"7bDR\|O8"3eKH<CwR]@"" A)j'xB0+)c6^cE)O$Y8,$(o9WGK?
2024-04-16 15:06:01 UTC	1369	IN	Data Raw: 06 85 ce 23 b5 04 c1 57 34 89 9a 59 3d a9 0d 30 e6 07 3f 7a 1c f7 14 99 c7 f5 a0 0c 7a 0a 28 76 28 44 f3 46 04 8f a5 26 44 cc 51 c8 f5 a4 c0 30 38 9f cf d2 8f 8c 8c 9e f4 42 67 db bd 1c 8c 9c 40 a0 01 1e d1 14 63 27 9a 24 98 19 32 4d 18 38 cd 21 f2 02 0f d6 87 d3 8a 06 7d 68 4e 33 40 34 0f 73 9f 7a 00 19 26 88 0f 6a 30 4c d3 10 61 5e c4 51 83 df 11 45 30 4d 10 c9 06 70 71 48 6c 51 27 d0 8a 2e f9 11 ed eb 46 01 31 45 da 7b d0 0c 11 19 18 a5 10 0c c4 66 87 bf a5 03 de 04 fb 52 b0 43 67 02 69 27 1d b0 69 c2 9f b1 14 92 30 04 66 aa c4 d0 98 e3 8a 23 ec 69 5e d4 44 47 f9 53 15 08 3e f1 49 3e d4 a3 03 31 8a 41 3c 9e 4d 51 2d 89 32 39 e4 7a 51 29 43 9e 29 4a 1f 51 4d a8 18 23 bd 50 98 02 c1 ff 00 3a 20 a1 cf eb 48 20 7e 10 3e b3 48 5a 4f b0 1e 95 54 8c ed 8e 95 Data Ascii: #W4Y=0?zz(v(DF&DQ08Bg@c'$2M8!}hN3@4sz&j0La^QE0MpqHlQ'.F1E{fRCgi'i0f#i^DGS>I>1A<MQ-29zQ)C)JQM#P: H ~>HZOT
2024-04-16 15:06:01 UTC	1369	IN	Data Raw: 50 52 8f 3f 95 25 11 ea ee 3e 5c 20 e0 7e b4 92 f1 26 3f ad 32 95 e7 20 09 a1 be 46 63 07 8a 7a 45 a8 78 38 66 0e 3b 51 17 33 9c fd 29 b9 cc 62 29 5b 41 f3 4c 51 48 2d 87 32 90 77 18 fe 74 44 18 f2 ce 47 7a 50 48 3d c7 bf bd 18 8f 42 3e fc 52 b0 1a 08 20 0e 68 b6 a8 0e 01 a7 84 0e 33 34 92 b1 26 30 3d 29 ea 6c 18 c2 92 77 13 32 68 c6 ec cf 14 b2 b0 4f 98 73 8a 05 41 49 02 3b d5 59 34 83 20 c6 14 3d a8 8a 0f 07 9e f4 0f 02 01 23 d2 8c 28 11 9a 5b 94 0d 8a da 7d 0f 71 41 1b 93 c9 cc 51 85 08 c4 c7 7a 0a 20 e4 1c d2 e4 36 a1 68 9f 51 27 34 ef a4 91 f6 ed 4c 09 03 1f 5a 58 57 94 01 99 a9 68 a4 c7 02 f6 e7 ff 00 7a 34 a8 49 03 24 fa d3 25 69 8c 88 a2 0b 11 88 cf ad 2d 25 39 0d 07 b8 cd 3a db c9 3c 9c 7a d4 14 ad 24 c6 68 c2 c2 54 63 77 a5 6a e1 67 3a c8 59 85 Data Ascii: PR?%>\ ~&?2 FczEx8f;Q3)b)[ALQH-2wtDGzPH=B>R h34&0=)lw2hOsAI;Y4 =#([}qAQz 6hQ'4LZXWhz4I$%i-%9:<z$hTcwjg:Y
2024-04-16 15:06:01 UTC	1369	IN	Data Raw: 63 8f 5a 0a 4c 47 61 4b ca a0 ee 81 49 4e 14 64 9e 30 07 7a 13 0a 0a 0f e2 cc 7b 50 e3 91 ee 28 c0 9c e4 7a e2 8c 11 39 c9 9e f4 58 2f 51 2b e3 fc a9 30 37 41 ef 4b e3 f1 6e e6 06 28 bc c3 38 33 4d 09 ee ec 20 21 5b 95 83 da 93 1d c0 e6 96 a3 89 e2 3d 68 8c 98 ce 22 81 34 82 88 e6 4f 73 46 4f a9 8a 34 c1 c0 1f 7f 4a 30 31 39 07 b5 0d 8d 27 d8 4f 94 98 e7 3d e8 1c 8c 08 fa d0 29 95 67 ee 68 70 49 20 cd 02 40 db 90 47 3e 94 58 e4 f1 ed 46 23 ea 07 7a 3c 0c 98 f6 14 0f 81 22 3d 39 a0 72 24 73 e9 4a 03 d1 27 9a 10 79 fe 54 58 57 60 63 ea 7b cd 0f 50 08 9f 5a 11 b6 71 f4 a0 40 9f ae 69 0c 2e 0f 7e 28 44 76 00 c5 19 51 24 0e 40 e3 34 5c f1 81 40 80 42 b6 93 03 06 82 40 19 3e 9c 51 8e 48 c1 1d 81 ed 47 92 37 13 27 d3 9a 07 5e a2 12 0a 4c 13 c7 14 a2 33 df 3c 81 Data Ascii: cZLGaKINd0z{P(z9X/Q+07AKn(83M ![=h"4OsFO4J019'O=)ghpI @G>XF#z<"=9r$sJ'yTXW`c{PZq@i.~(DvQ$@4\@B@>QHG7'^L3<
2024-04-16 15:06:01 UTC	1369	IN	Data Raw: 8d 63 97 d4 b7 43 a1 43 b1 a2 2a 1c f1 f4 a8 0d bd 26 07 da 9c 4b c0 f9 66 08 cd 66 f1 b4 6a b2 59 37 04 8c c5 14 73 26 98 4b b2 62 73 4e 03 20 73 f5 a8 69 96 9a 62 57 c1 20 7d 29 b3 eb 23 3f ad 3b b8 9e 3f 3a 6d 40 1c 8c 4e 6a d6 c4 b1 a5 c0 cc 66 99 71 32 92 54 33 52 16 44 64 64 f1 51 d5 39 04 13 eb 5a 44 ca 43 0a e4 47 1d cf bd 37 3f 5f a5 48 5a 62 60 53 45 19 c7 35 aa 68 c5 c7 71 95 4e 41 fc a9 13 1c 0c 53 cb 00 64 81 ef 4d ab 99 15 a2 66 4d 50 53 e6 27 b7 6a 21 1b 81 24 a8 77 a3 50 51 00 8f fd a8 87 04 c7 14 c4 3a 95 01 ec 29 41 40 1c 11 c5 30 62 4c c7 f3 a3 49 30 7d a9 34 56 b6 3c a5 03 c4 89 e6 81 48 30 41 a6 89 27 da 28 f7 81 30 4c 7a d2 a1 dd f2 3c 07 98 49 a5 6d 27 81 11 9a 6b 7c 92 49 18 a3 df 23 93 1e 95 34 ca b1 65 47 91 cd 1f 89 b8 e2 4c 1a Data Ascii: cCC*&KffjY7s&KbsN sibW })#?;?:m@Njfq2T3RDddQ9ZDCG7?_HZb`SE5hqNASdMfMPS'j!$wPQ:)A@0bLI0}4V<H0A'(0Lz<Im'k\|I#4eGL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.11	49920	142.251.15.91	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:06:00 UTC	2750	OUT	POST /api/stats/atr?ns=yt&el=embedded&cpn=jRkNZCQf5oAkxA7P&ver=2&cmt=2&fmt=398&fs=0&rt=8.484&euri=https%3A%2F%2Fniceindiatravel.com%2F&lact=8540&cl=623129822&mos=1&volume=100&cbr=Chrome&cbrver=117.0.0.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240409.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&autoplay=1&epm=1&splay=1&delay=4&hl=en_US&cr=US&len=156.941&fexp=v1%2C23858057%2C125239%2C21348%2C76094%2C54572%2C73455%2C230596%2C84737%2C36318%2C6271%2C26443548%2C7111%2C31786%2C4557%2C9954%2C1192%2C10512%2C15711%2C273%2C6966%2C2%2C6689%2C2007%2C4957%2C4115%2C12518%2C1263%2C5498%2C796%2C643%2C5538%2C2893%2C2%2C531%2C819%2C531%2C4712%2C5599%2C1104%2C4465&afmt=251&muted=1&docid=wAD9uO9YAQw&ei=z5MeZqaINPHUy_sP0eWdmAw&plid=AAYWOBLu246nWADi&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2FwAD9uO9YAQw%3Fplaylist%3DwAD9uO9YAQw%26iv_load_policy%3D3%26enablejsapi%3D1%26disablekb%3D1%26autoplay%3D1%26controls%3D0%26showinfo%3D0%26rel%3D0%26loop%3D1%26origin%3Dhttps%253A%252F%252Fniceindiatravel.com%26widgetid%3D1&list=TLGG0nOp5Ks1AkExNjA0MjAyNA&of=wbAUJoLFDaeeOSJrHXH1sg&vm=CAEQABgEOjJBSHFpSlRKQ0o0WWhpVHlHMVJqeEhSbnJlNUk1alNPVXV4ZUw0cEQ5UlVzeXIxeUxnUWJ3QVBta0tETEtnc3NpZGtCNXlKTU5mRU1yZWRTR1dyMHo2ZGlNTmNSRlJPZVJzcVp1LXFOc2xfWU5ScHZjZm9GWThIWFhXOFllQnlGbzBzVDRmYzFkZHFzMUxoejRjdWpCb084Zkp3am82MmdhQ2w3cFVtUGVURmdoAg HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 2175 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1713279950337&flash=0&frm=2&u_tz=120&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1267%2C713&vis=1&wgl=true&ca_type=image sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded X-YouTube-Utc-Offset: 120 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240409.01.00 X-YouTube-Time-Zone: Europe/Zurich X-Goog-Visitor-Id: CgtJMG1ONlpYUjdsOCjOp_qwBjIKCgJVUxIEGgAgKA%3D%3D sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/wAD9uO9YAQw?playlist=wAD9uO9YAQw&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&origin=https%3A%2F%2Fniceindiatravel.com&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
2024-04-16 15:06:00 UTC	2175	OUT	Data Raw: 61 74 72 3d 61 25 33 44 36 25 32 36 61 32 25 33 44 31 25 32 36 63 25 33 44 31 37 31 33 32 37 39 39 35 30 25 32 36 64 25 33 44 35 36 25 32 36 65 25 33 44 77 41 44 39 75 4f 39 59 41 51 77 25 32 36 63 31 61 25 33 44 31 25 32 36 63 31 63 25 33 44 30 25 32 36 63 36 61 25 33 44 31 25 32 36 63 36 62 25 33 44 31 25 32 36 68 68 25 33 44 44 66 4a 79 35 70 72 39 63 43 61 57 4c 70 73 49 66 62 47 31 62 34 6b 4f 72 39 74 56 76 76 4b 6d 35 64 65 53 4a 77 50 69 71 70 45 25 32 36 72 31 61 25 33 44 25 32 34 77 56 34 35 58 67 5a 52 41 41 5a 61 39 46 76 57 65 76 54 65 79 4e 43 41 57 74 6e 4a 61 73 6d 6e 41 44 51 42 45 41 72 5a 31 41 59 69 71 34 35 36 58 66 73 7a 50 78 4c 6e 6e 30 51 53 49 71 54 6d 33 47 49 6d 72 59 6e 31 75 74 77 43 6f 51 62 33 67 31 75 6a 5f 68 71 4d 61 7a Data Ascii: atr=a%3D6%26a2%3D1%26c%3D1713279950%26d%3D56%26e%3DwAD9uO9YAQw%26c1a%3D1%26c1c%3D0%26c6a%3D1%26c6b%3D1%26hh%3DDfJy5pr9cCaWLpsIfbG1b4kOr9tVvvKm5deSJwPiqpE%26r1a%3D%24wV45XgZRAAZa9FvWevTeyNCAWtnJasmnADQBEArZ1AYiq456XfszPxLnn0QSIqTm3GImrYn1utwCoQb3g1uj_hqMaz
2024-04-16 15:06:00 UTC	504	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Date: Tue, 16 Apr 2024 15:06:00 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Server: Video Stats Server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.11	49921	173.194.219.136	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:06:00 UTC	610	OUT	GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
2024-04-16 15:06:00 UTC	240	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1609 Date: Tue, 16 Apr 2024 15:06:00 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 15:06:00 UTC	1015	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 405 (Method Not Allowed)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px aria
2024-04-16 15:06:00 UTC	594	IN	Data Raw: 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d Data Ascii: .com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.11	49922	154.62.106.12	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:06:00 UTC	400	OUT	GET /wp-content/uploads/2021/02/cropped-nit-logo-only-2021.png HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:06:02 UTC	390	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:06:02 GMT Content-Type: image/png Content-Length: 70247 Connection: close Cache-Control: public, max-age=31536000 X-Hcdn-Image-Optimizer: f:png q:85 w:1600 alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 6088b8b06765c28dbdd11775594f5cc9-bos-edge1 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 1.248 Accept-Ranges: bytes
2024-04-16 15:06:02 UTC	979	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 00 00 00 02 00 08 06 00 00 00 f4 78 d4 fa 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 20 00 49 44 41 54 78 9c ec 9d 79 9c 5c 55 9d e8 bf b7 aa f7 a4 3b 9d 3d 24 21 ec 61 91 25 2c 02 82 82 20 8a e2 06 e3 32 22 a3 33 3e 05 97 71 99 19 77 df 38 6f c6 79 a3 6f f4 39 6e a8 28 3a 2e 4f 11 64 57 94 1d 84 40 12 08 21 24 6c 21 6b 27 e9 2c bd 77 d7 5e 77 39 e7 fd 71 ea 56 dd aa ae ea b5 aa ee ad aa f3 cd e7 a6 bb 6f dd e5 54 dd 53 e7 f7 3b bf ed 18 52 4a 89 46 a3 c9 22 04 f4 f6 c2 f3 cf c3 63 8f c1 c3 0f ab df 57 ac 80 33 ce 80 53 4f 85 37 bd 09 ce 3a 0b e6 ce f5 bb b5 1a 2f c3 c3 b0 76 2d 3c fa 28 6c db 06 4f 3d 05 a6 09 e7 9e 0b 97 5d 06 e7 9c a3 9e db e2 c5 7e b7 54 a3 f1 1f 43 2b Data Ascii: PNGIHDRxpHYs IDATxy\U;=$!a%, 2"3>qw8oyo9n(:.OdW@!$l!k',w^w9qVoTS;RJF"cW3SO7:/v-<(lO=]~TC+
2024-04-16 15:06:02 UTC	1369	IN	Data Raw: 01 d0 04 1e 29 95 99 ff f9 e7 e1 b6 db e0 2f 7f 51 fb 2e bd 14 ae bc 12 4e 3f 5d a5 ed e9 c1 76 9a 48 49 fa 50 84 c8 d3 7b b0 06 63 50 62 24 08 b5 35 33 e7 55 cb 99 7b da 72 8c 66 3d b5 2d 46 7f bf b2 42 dd 76 9b b2 4a 75 76 2a 8b c0 bb de a5 dc 03 da 05 a5 09 22 5a 01 d0 04 16 21 60 70 50 45 f2 df 7d b7 1a 58 97 2f 87 77 be 13 de fe 76 38 fa 68 68 6e f6 bb 95 35 8a 90 a4 0f 47 88 ac df 8d 35 12 2f 29 fc 5d 8c e6 30 73 4f 5b c1 dc d3 57 68 25 a0 04 52 aa a0 d3 17 5e c8 c5 a3 c4 e3 70 c1 05 f0 9e f7 a8 1a 03 ba a8 94 26 48 68 05 40 13 48 06 06 54 75 be 5f ff 1a 5e 7a 49 cd a2 de f7 3e 15 70 b5 6c 99 16 fc b3 42 82 d9 1f 21 f2 54 0f 66 7f 64 52 e1 ef 12 6a 6d a2 f3 ac 55 74 9c b4 54 07 06 4e 42 3a ad ea 4d dc 7d 77 ae f6 c4 25 97 a8 18 95 d7 be 56 59 08 34 Data Ascii: )/Q.N?]vHIP{cPb$53U{rf=-FBvJuv*"Z!`pPE}X/wv8hhn5G5/)]0sO[Wh%R^p&Hh@HTu_^zI>plB!TfdRjmUtTNB:M}w%VY4
2024-04-16 15:06:02 UTC	1369	IN	Data Raw: bd 4d 55 14 5c bd 1a c2 fa 63 d7 4c 80 56 00 34 53 a6 bf 5f 95 ef fd c9 4f 60 e1 c2 5c 10 92 36 f7 fb 8b 13 4f 33 b6 6e 37 e9 7d c3 c8 32 95 f9 2d 17 4d f3 da e9 3c f7 68 da 8f 5e e8 77 53 ea 1a 29 61 68 48 2d a6 75 c3 0d d0 d2 a2 ac 72 ef 7a 97 b6 06 68 4a a3 15 00 cd a4 24 93 2a f0 e8 1b df 80 dd bb e1 9a 6b 54 84 ff d2 a5 3a ad cf 6f a4 ed 10 d9 b8 97 c4 4b 87 02 27 fc 01 30 a0 79 fe 1c ba 2f 59 4d f3 02 2d 89 aa c1 b6 6d ca 35 f7 c7 3f c2 45 17 a9 b4 c1 33 cf d4 01 b9 9a f1 68 05 40 53 12 29 d5 d2 bc bf fa 15 fc fa d7 6a 1d f3 cf 7c 06 5e f3 1a 68 d7 05 df 7c 47 0a 49 6a df 30 63 4f ec ac 68 a5 bf 59 63 40 c7 89 cb e8 3a ef 18 42 2d da 26 5d 69 a4 54 81 81 f7 dd a7 5c 75 a9 14 7c fc e3 2a 46 67 de 3c ad b4 6b 72 68 05 40 53 14 c7 51 fe c4 af 7f 5d 95 Data Ascii: MU\cLV4S_O`\6O3n7}2-M<h^wS)ahH-urzhJ$kT:oK'0y/YM-m5?E3h@S)j\|^h\|GIj0cOhYc@:B-&]iT\u\|Fg<krh@SQ]
2024-04-16 15:06:02 UTC	1369	IN	Data Raw: 50 0a 00 40 78 4e 2b 5d e7 1e ad 03 02 03 4a 7f 3f 5c 7f bd b2 08 bc e7 3d 4a 19 98 3f df ef 56 69 66 8a 56 00 ea 00 c7 81 e7 9e 53 79 fd a6 09 9f fd ac 5a ed 4b 9b fc 6b 0f e9 08 62 cf f5 12 7b 6e 3f b2 46 96 f9 2d 2b d9 15 03 57 13 ee d4 01 81 41 c4 8d 2f fa d7 7f 55 71 45 9f ff bc 5e 55 b0 56 d1 8f ac c6 11 42 d5 f3 ff fc e7 d5 64 f1 7b df d3 c2 bf 66 91 60 0d 27 48 ee 19 6c 4c e1 0f 20 25 d6 60 94 d4 be a1 fa 2a 7a 54 47 b4 b4 c0 3b df a9 14 80 0d 1b e0 9f fe 49 55 17 d5 53 c9 da 43 2b 00 35 4c 3a 0d b7 df 0e 9f fc 24 74 77 c3 8f 7e 04 67 9e a9 85 7f ad 22 d2 16 89 57 fa b0 c7 92 7e 37 c5 57 a4 2d d4 e7 30 92 f0 bb 29 9a 12 34 37 ab 02 41 3f fe b1 fa fb ba eb e0 b1 c7 c0 b6 fd 6d 97 66 7a 68 05 a0 46 19 19 51 02 ff 2b 5f 51 33 fe eb af 57 01 3a 9a 1a Data Ascii: P@xN+]J?\=J?VifVSyZKkb{n?F-+WA/UqE^UVBd{f`'HlL %`*zTG;IUSC+5L:$tw~g"W~7W-0)47A?mfzhFQ+_Q3W:
2024-04-16 15:06:02 UTC	1369	IN	Data Raw: 4a cb c6 da be 0f 99 9c 5a df 76 dd 01 ff f5 5f ca f5 a9 8b 05 f9 83 56 00 7c 64 f7 6e 55 d6 f7 f0 61 95 e7 7f c6 19 65 14 fe 08 48 6e 01 27 56 fc 35 fb 30 0c fc 40 05 08 3a c3 68 97 40 e5 b1 87 13 a4 7a 06 fd 6e 46 5d e0 8c 25 49 ed 1d d2 b1 00 d5 c0 11 d8 7b 0f 12 ff ed 9f 49 6f d8 8a 4c 17 0f 5e 75 0e f4 e3 0c 4f 7d f5 c6 50 08 2e ba 48 ad 6f f2 fc f3 ca 0a da 3f b9 17 41 53 46 b4 02 e0 13 c3 c3 aa 30 c6 ae 5d ca 14 76 e6 99 b3 8c f6 2f 44 9a 90 de 31 f1 0c df 89 c0 f0 ef 60 f0 46 30 f7 a3 95 80 ca 21 85 24 b5 6f 58 cf fe cb 84 cc c4 02 08 1d 4b 51 51 a4 65 63 6e 79 85 f8 ef ee c5 7c ee 15 15 ad 5c 02 31 16 c3 39 34 30 ad eb 1b 06 bc f1 8d f0 d5 af c2 86 0d 2a f8 79 64 64 b6 ad d6 4c 15 5d 54 d6 07 fa fa 94 af ff b9 e7 54 30 cc 1b de 50 66 e1 0f 60 0d Data Ascii: JZv_V\|dnUaeHn'V50@:h@znF]%I{IoL^uO}P.Ho?ASF0]v/D1`F0!$oXKQQecny\|\1940*yddL]TT0Pf`
2024-04-16 15:06:02 UTC	1369	IN	Data Raw: 75 c8 78 31 c4 68 94 d4 43 1b 48 dc f6 60 45 85 3f 80 bd bf 0f 31 5a be 7b 34 37 2b 25 e0 ba eb 54 3a f5 3d f7 e8 cc 80 72 a0 15 80 32 62 db 70 e7 9d aa d8 cf 87 3e 04 ef 7a 57 a5 23 fe 0b 11 60 0f 83 ac 74 d0 59 a6 72 e0 c0 f5 10 7d 40 af 28 58 80 b0 04 a9 de 11 84 a9 83 ff aa 8a 94 98 87 22 ba e2 62 21 52 e2 0c 8c 90 b8 eb 51 92 f7 3d 89 88 c4 2b 7f cb 54 1a 19 29 af 92 d1 dc 0c 7f f7 77 6a c5 d4 6f 7e 53 05 58 6b 66 87 56 00 ca c8 86 0d 2a d2 ff b2 cb e0 93 9f 84 f6 f6 2a 37 c0 ea 57 55 fc aa 82 04 ab 17 06 7f 02 23 b7 82 33 56 a5 fb 06 1f 7b 38 8e 79 78 4c cf fe 7d c0 89 a5 48 1f 18 d5 75 17 5c 84 c0 de 7b 88 c4 cd f7 93 5e bf b5 ac c1 7e 13 21 4d 0b 6b 5b 4f d9 73 f7 16 2e 54 eb a8 9c 78 a2 ca ae da b1 43 a7 07 ce 06 ad 00 94 01 29 61 df 3e f8 8f ff Data Ascii: ux1hCH`E?1Z{47+%T:=r2bp>zW#`tYr}@(X"b!RQ=+T)wjo~SXkfV**7WU#3V{8yxL}Hu\{^~!Mk[Os.TxC)a>
2024-04-16 15:06:02 UTC	1369	IN	Data Raw: 12 47 56 31 38 b6 a9 09 de f3 1e 15 0f f0 dd ef aa 45 83 b4 12 50 1c ad 00 4c 81 bd 7b 55 b5 bf cb 2e 83 f7 bf 3f 20 7e 7f 2f e6 ce ca 2e 01 5c 6e ec 7e 18 fe 15 44 1f aa f9 c0 40 69 0b cc be 31 a4 1e 61 02 8b 35 12 af 8b f8 0c 31 1a 25 71 d7 a3 98 9b 5e aa aa 40 9d 2d 4e df 70 d5 16 21 72 69 6f 87 0f 7f 58 b9 6b bf f3 1d e5 12 d0 8c 47 2b 00 93 30 34 a4 fc fe a6 09 ff f8 8f 6a 35 aa c0 91 de 0d a2 96 8a 9e 48 b0 87 60 e8 46 88 de af ca 08 d7 28 4e 3c ad 4b ff 06 1c 91 b2 30 07 6b e9 fb 31 1e 67 60 84 c4 6d 0f 91 de f8 62 4d 09 7f 00 e7 60 3f 32 9e ac ea 3d 0d 43 b9 69 bf fc 65 e5 b6 bd f1 46 48 07 37 54 c2 37 b4 02 30 01 b6 0d bf fd 2d 3c f4 90 f2 fb af 5e 1d 24 bf bf 07 69 52 93 81 75 f6 10 0c de 08 91 3f d4 66 4c 80 94 58 83 71 9c 98 1e 59 02 8d 84 f4 Data Ascii: GV18EPL{U.? ~/.\n~D@i1a51%q^@-Np!rioXkG+04j5H`F(N<K0k1g`mbM`?2=CieFH7T70-<^$iRu?fLXqY
2024-04-16 15:06:02 UTC	1369	IN	Data Raw: 80 fd fb 95 f9 67 cd 1a b8 f4 52 08 87 fd 6e d1 34 71 c6 32 69 80 0d 82 4c 43 f4 41 18 bd 43 15 40 f2 01 91 b6 b1 47 83 e3 43 d6 4c 1f 61 da d8 63 29 df 4c d2 4e ff 30 89 db 1f c6 de 73 30 50 02 b1 d2 c8 68 22 70 ef 37 14 82 0f 7e 50 59 03 7e f9 cb c6 ab 0d d0 b0 0a 80 65 a9 07 7e f0 a0 ca f9 ef ea f2 bb 45 33 40 8c 29 25 a0 91 10 71 18 bd 15 c6 fc 51 02 ac 91 38 22 55 8f 59 17 0d 84 90 58 43 31 64 b5 17 d7 91 20 06 46 88 df 74 2f d6 f6 bd 0d 17 79 26 a2 f1 40 66 ce 1c 75 14 7c ea 53 b0 6e 1d fc f9 cf 8d 55 1b a0 21 15 00 77 a5 bf df ff 1e ae b9 06 4e 3f dd ef 16 cd 10 27 ae 04 62 a3 21 92 ca 0a 10 5f 9b 59 0a b9 4a 48 89 75 38 ea bf ff 58 33 6b d2 87 c6 aa 5e 0f 40 8c 46 48 fc 69 2d d6 b6 c6 4c 3e b7 f7 f7 21 03 28 5d 43 21 b8 fc 72 b8 e2 0a b5 58 50 23 Data Ascii: gRn4q2iLCAC@GCLac)LN0s0Ph"p7~PY~e~E3@)%qQ8"UYXC1d Ft/y&@fu\|SnU!wN?'b!_YJHu8X3k^@FHi-L>!(]C!rXP#
2024-04-16 15:06:02 UTC	1369	IN	Data Raw: 50 29 7a 7a e0 b7 bf 85 37 bd 09 ce 3c 53 a5 76 d4 15 52 68 0b c0 54 b1 07 60 e8 17 60 b4 43 fb a9 4c 57 ef b5 46 13 08 cb 41 ea cf ba fe 90 12 6b 2c 89 b4 05 4c 73 51 30 99 4a 93 5a fb 2c a9 b5 cf d6 dc cc d6 0f 54 10 60 6d 64 01 14 72 c5 15 2a 8d fc 87 3f 54 45 e4 3a 3b fd 6e 51 79 a8 4b 0b 80 10 aa e4 6f 34 0a ef 7f 7f 0d af f6 37 21 3a 08 70 ea 48 48 bf a2 d6 0c b0 fa a6 77 a6 90 88 84 85 14 42 cd 60 f4 56 77 9b 48 5a 48 73 9a b3 77 29 b1 5e d8 45 ea e1 a7 91 d1 f2 17 9e aa 4b 84 84 19 5a 5a fc 66 c1 02 f8 c0 07 54 3c d9 5f fe 42 dd 94 08 ae 4b 05 e0 c0 01 a5 00 bc f9 cd 2a 95 a3 6e d1 b2 7f ea 48 07 92 cf c1 e8 ef 99 4e a5 40 69 39 38 09 53 7f d6 75 8c 30 6d 9c e9 94 04 96 12 e7 e0 00 c9 fb d7 21 46 22 95 6b 98 26 30 18 86 2a 0f bc 66 0d fc e6 37 aa Data Ascii: P)zz7<SvRhT``CLWFAk,LsQ0JZ,T`mdr?TE:;nQyKo47!:pHHwB`VwHZHsw)^EKZZfT<_BKnHN@i98Su0m!F"k&0*f7
2024-04-16 15:06:02 UTC	1369	IN	Data Raw: 77 6b a6 47 cd 2a 00 c9 24 fc e9 4f b0 64 89 aa ca 14 aa d9 77 a2 09 1c 4e 04 86 6f c1 1e eb 41 0a 5d 03 a0 51 36 6b 34 41 6a e3 36 ac cd db 6a 76 d9 5a 4d f5 09 85 54 2c 80 65 d5 de 22 41 35 9b 93 b1 7b b7 32 b9 5c 77 1d 2c 5e ec 77 6b 34 75 47 fa 45 42 c9 16 a4 73 09 7a d1 a5 c6 c0 dc 7b 88 c4 a6 1e c2 b1 1a cd e9 d2 f8 c6 ea d5 70 ee b9 f0 87 3f a8 cc 80 a5 4b fd 6e d1 d4 a8 c9 79 b3 e3 c0 5d 77 41 73 33 5c 71 45 03 cf fe 43 6d 2a 1b 40 53 7e 84 89 33 ba 01 99 7a 16 b4 23 b8 ee 91 e9 14 e6 0b 2f 60 1f ee af ad 29 5c 0d d1 b4 7c 71 5d 54 02 2c 46 4b 8b 0a 44 df b7 4f 2d 12 54 2b d4 e4 d3 38 7c 18 1e 7e 58 a5 fd 1d 79 a4 df ad f1 91 d0 1c 08 b5 fb dd 8a ba 44 38 60 c7 92 90 d8 80 b4 87 7c f7 4f eb ad 82 9b 23 b0 0f 1e c2 3e 78 50 57 7e ac 20 a1 85 dd 75 Data Ascii: wkG$OdwNoA]Q6k4Aj6jvZMT,e"A5{2\w,^wk4uGEBsz{p?Kny]wAs3\qECm@S~3z#/`)\\|q]T,FKDO-T+8\|~XyD8`\|O#>xPW~ u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.11	49923	142.251.15.91	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:06:01 UTC	2531	OUT	GET /api/stats/watchtime?ns=yt&el=embedded&cpn=F6GU1QEdhoMLD-Np&ver=2&cmt=2.093&fmt=398&fs=0&rt=14.471&euri=https%3A%2F%2Fniceindiatravel.com%2F&lact=14512&cl=623129822&state=paused&volume=100%2C100%2C100%2C100%2C100&cbr=Chrome&cbrver=117.0.0.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240409.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&delay=4&hl=en_US&cr=US&len=157&rtn=24&afmt=251&idpj=-1&ldpj=-22&rti=14&size=1267%3A713&inview=0&st=0%2C0.402%2C1.731%2C1.94%2C2.058&et=0.212%2C1.731%2C1.94%2C2.058%2C2.093&muted=1%2C1%2C1%2C1%2C1&vis=3%2C3%2C3%2C3%2C3&docid=wAD9uO9YAQw&ei=y5MeZqSPB9aoy_sPxcuI0A8&plid=AAYWOBKoz4xd3wIM&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2FwAD9uO9YAQw%3Fplaylist%3DwAD9uO9YAQw%26iv_load_policy%3D3%26enablejsapi%3D1%26disablekb%3D1%26autoplay%3D1%26controls%3D0%26showinfo%3D0%26rel%3D0%26loop%3D1%26origin%3Dhttps%253A%252F%252Fniceindiatravel.com%26widgetid%3D1&list=TLGG0nOp5Ks1AkExNjA0MjAyNA&of=wbAUJoLFDaeeOSJrHXH1sg&vm=CAEQABgEOjJBSHFpSlRJaWlUV3AtaVVHU3dxLUpoNjVrV0taQVJBeTRCbVVLMmJUWXhKOURvQUVkd2J3QVBta0tES0l3V1JHa3UzUFV5akd4WUhVUEZvYWZzdmJ3VzNvV3ZjMWR6Q3ZYY3B0Wjd2aWh4NV9qdk9kR3NGMFRSLTdDcmRpYy1ydVI4bW1ZYi1oNjd3Tzc2cXd3bXBXcG1FMTliMUhRM0x4dW53SEV5RUFXNEFoAg HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1713279945329&flash=0&frm=2&u_tz=120&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1267%2C713&vis=2&wgl=true&ca_type=image sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-YouTube-Utc-Offset: 120 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240409.01.00 X-YouTube-Time-Zone: Europe/Zurich X-Goog-Visitor-Id: CgtJMG1ONlpYUjdsOCjIp_qwBjIKCgJVUxIEGgAgKA%3D%3D sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/wAD9uO9YAQw?playlist=wAD9uO9YAQw&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&origin=https%3A%2F%2Fniceindiatravel.com&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
2024-04-16 15:06:01 UTC	410	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Date: Tue, 16 Apr 2024 15:06:01 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate X-Content-Type-Options: nosniff Server: Video Stats Server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.11	49926	84.32.84.89	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:06:01 UTC	648	OUT	GET /about/ HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:06:03 UTC	740	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:06:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding x-powered-by: PHP/8.1.27 link: <https://niceindiatravel.com/wp-json/>; rel="https://api.w.org/" link: <https://niceindiatravel.com/wp-json/wp/v2/pages/19>; rel="alternate"; type="application/json" link: <https://niceindiatravel.com/?p=19>; rel=shortlink cache-control: public, max-age=604800 expires: Tue, 23 Apr 2024 15:06:02 GMT platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: fc07da8a7b03d94c45c311be00d94abe-asc-edge3 x-hcdn-cache-status: DYNAMIC x-hcdn-upstream-rt: 1.160
2024-04-16 15:06:03 UTC	629	IN	Data Raw: 35 61 35 65 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 30 22 20 2f 3e 3c 74 69 74 6c 65 3e 41 62 6f 75 74 20 26 23 38 32 31 31 3b 20 4e 69 63 65 20 49 6e 64 69 61 20 54 72 61 76 65 6c 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f Data Ascii: 5a5e<!doctype html><html lang="en-US" class="no-js"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=0" /><title>About – Nice India Travel</title><meta name='robo
2024-04-16 15:06:03 UTC	1369	IN	Data Raw: 64 2f 22 20 2f 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 2f 2a 20 3c 21 5b 43 44 41 54 41 5b 20 2a 2f 0a 77 69 6e 64 6f 77 2e 5f 77 70 65 6d 6f 6a 69 53 65 74 74 69 6e 67 73 20 3d 20 7b 22 62 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 2e 77 2e 6f 72 67 5c 2f 69 6d 61 67 65 73 5c 2f 63 6f 72 65 5c 2f 65 6d 6f 6a 69 5c 2f 31 35 2e 30 2e 33 5c 2f 37 32 78 37 32 5c 2f 22 2c 22 65 78 74 22 3a 22 2e 70 6e 67 22 2c 22 73 76 67 55 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 2e 77 2e 6f 72 67 5c 2f 69 6d 61 67 65 73 5c 2f 63 6f 72 65 5c 2f 65 6d 6f 6a 69 5c 2f 31 35 2e 30 2e 33 5c 2f 73 76 67 5c 2f 22 2c 22 73 76 67 45 78 74 22 3a 22 2e 73 76 67 22 2c 22 73 6f 75 72 63 65 22 3a 7b 22 Data Ascii: d/" /><script type="text/javascript">/* <![CDATA[ */window._wpemojiSettings = {"baseUrl":"https:\/\/s.w.org\/images\/core\/emoji\/15.0.3\/72x72\/","ext":".png","svgUrl":"https:\/\/s.w.org\/images\/core\/emoji\/15.0.3\/svg\/","svgExt":".svg","source":{"
2024-04-16 15:06:03 UTC	1369	IN	Data Raw: 64 63 32 36 5c 75 32 30 30 62 5c 75 32 62 31 62 22 29 7d 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 73 65 6c 66 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 3f 6e 65 77 20 4f 66 66 73 63 72 65 65 6e 43 61 6e 76 61 73 28 33 30 30 2c 31 35 30 29 3a 69 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 63 61 6e 76 61 73 22 29 2c 61 3d 72 2e 67 65 74 43 6f 6e 74 65 78 74 28 22 32 64 22 2c 7b 77 69 6c 6c 52 65 61 64 46 72 65 71 75 65 6e 74 6c 79 3a 21 30 7d 29 2c 6f 3d 28 61 2e 74 65 78 74 42 61 73 65 6c 69 6e 65 3d 22 74 6f 70 22 2c 61 2e 66 6f 6e 74 Data Ascii: dc26\u200b\u2b1b")}return!1}function f(e,t,n){var r="undefined"!=typeof WorkerGlobalScope&&self instanceof WorkerGlobalScope?new OffscreenCanvas(300,150):i.createElement("canvas"),a=r.getContext("2d",{willReadFrequently:!0}),o=(a.textBaseline="top",a.font
2024-04-16 15:06:03 UTC	1369	IN	Data Raw: 6e 2e 73 75 70 70 6f 72 74 73 5b 74 5d 3d 65 5b 74 5d 2c 6e 2e 73 75 70 70 6f 72 74 73 2e 65 76 65 72 79 74 68 69 6e 67 3d 6e 2e 73 75 70 70 6f 72 74 73 2e 65 76 65 72 79 74 68 69 6e 67 26 26 6e 2e 73 75 70 70 6f 72 74 73 5b 74 5d 2c 22 66 6c 61 67 22 21 3d 3d 74 26 26 28 6e 2e 73 75 70 70 6f 72 74 73 2e 65 76 65 72 79 74 68 69 6e 67 45 78 63 65 70 74 46 6c 61 67 3d 6e 2e 73 75 70 70 6f 72 74 73 2e 65 76 65 72 79 74 68 69 6e 67 45 78 63 65 70 74 46 6c 61 67 26 26 6e 2e 73 75 70 70 6f 72 74 73 5b 74 5d 29 3b 6e 2e 73 75 70 70 6f 72 74 73 2e 65 76 65 72 79 74 68 69 6e 67 45 78 63 65 70 74 46 6c 61 67 3d 6e 2e 73 75 70 70 6f 72 74 73 2e 65 76 65 72 79 74 68 69 6e 67 45 78 63 65 70 74 46 6c 61 67 26 26 21 6e 2e 73 75 70 70 6f 72 74 73 2e 66 6c 61 67 2c 6e 2e Data Ascii: n.supports[t]=e[t],n.supports.everything=n.supports.everything&&n.supports[t],"flag"!==t&&(n.supports.everythingExceptFlag=n.supports.everythingExceptFlag&&n.supports[t]);n.supports.everythingExceptFlag=n.supports.everythingExceptFlag&&!n.supports.flag,n.
2024-04-16 15:06:03 UTC	1369	IN	Data Raw: 65 3a 31 2e 31 32 35 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 66 69 6c 65 5f 5f 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 33 32 33 37 33 63 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 73 74 79 6c 65 20 69 64 3d 27 67 6c 6f 62 61 6c 2d 73 74 79 6c 65 73 2d 69 6e 6c 69 6e 65 2d 63 73 73 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 3e 0a 62 6f 64 79 7b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 62 6c 61 63 6b 3a 20 23 30 30 30 30 30 30 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 3a 20 23 61 62 62 38 63 33 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 Data Ascii: e:1.125em}.wp-block-file__button{background:#32373c;color:#fff;text-decoration:none}</style><style id='global-styles-inline-css' type='text/css'>body{--wp--preset--color--black: #000000;--wp--preset--color--cyan-bluish-gray: #abb8c3;--wp--preset--color
2024-04-16 15:06:03 UTC	1369	IN	Data Raw: 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 28 37 34 2c 32 33 34 2c 32 32 30 29 20 30 25 2c 72 67 62 28 31 35 31 2c 31 32 30 2c 32 30 39 29 20 32 30 25 2c 72 67 62 28 32 30 37 2c 34 32 2c 31 38 36 29 20 34 30 25 2c 72 67 62 28 32 33 38 2c 34 34 2c 31 33 30 29 20 36 30 25 2c 72 67 62 28 32 35 31 2c 31 30 35 2c 39 38 29 20 38 30 25 2c 72 67 62 28 32 35 34 2c 32 34 38 2c 37 36 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 62 6c 75 73 68 2d 6c 69 67 68 74 2d 70 75 72 70 6c 65 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 28 32 35 35 2c 32 30 36 2c 32 33 36 29 20 30 25 2c 72 67 62 28 31 35 32 2c 31 35 30 2c 32 34 30 29 20 31 30 30 25 29 Data Ascii: linear-gradient(135deg,rgb(74,234,220) 0%,rgb(151,120,209) 20%,rgb(207,42,186) 40%,rgb(238,44,130) 60%,rgb(251,105,98) 80%,rgb(254,248,76) 100%);--wp--preset--gradient--blush-light-purple: linear-gradient(135deg,rgb(255,206,236) 0%,rgb(152,150,240) 100%)
2024-04-16 15:06:03 UTC	1369	IN	Data Raw: 36 70 78 20 36 70 78 20 30 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 32 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 68 61 64 6f 77 2d 2d 6f 75 74 6c 69 6e 65 64 3a 20 36 70 78 20 36 70 78 20 30 70 78 20 2d 33 70 78 20 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 31 29 2c 20 36 70 78 20 36 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 31 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 68 61 64 6f 77 2d 2d 63 72 69 73 70 3a 20 36 70 78 20 36 70 78 20 30 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 31 29 3b 7d 3a 77 68 65 72 65 28 2e 69 73 2d 6c 61 79 6f 75 74 2d 66 6c 65 78 29 7b 67 61 70 3a 20 30 2e 35 65 6d 3b 7d 3a 77 68 65 72 65 28 2e 69 73 2d 6c 61 79 6f 75 74 2d 67 72 69 64 29 7b 67 61 70 3a 20 30 2e Data Ascii: 6px 6px 0px rgba(0, 0, 0, 0.2);--wp--preset--shadow--outlined: 6px 6px 0px -3px rgba(255, 255, 255, 1), 6px 6px rgba(0, 0, 0, 1);--wp--preset--shadow--crisp: 6px 6px 0px rgba(0, 0, 0, 1);}:where(.is-layout-flex){gap: 0.5em;}:where(.is-layout-grid){gap: 0.
2024-04-16 15:06:03 UTC	1369	IN	Data Raw: 6f 75 74 2d 66 6c 65 78 29 7b 67 61 70 3a 20 32 65 6d 3b 7d 3a 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 73 2e 69 73 2d 6c 61 79 6f 75 74 2d 67 72 69 64 29 7b 67 61 70 3a 20 32 65 6d 3b 7d 3a 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 74 65 6d 70 6c 61 74 65 2e 69 73 2d 6c 61 79 6f 75 74 2d 66 6c 65 78 29 7b 67 61 70 3a 20 31 2e 32 35 65 6d 3b 7d 3a 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 74 65 6d 70 6c 61 74 65 2e 69 73 2d 6c 61 79 6f 75 74 2d 67 72 69 64 29 7b 67 61 70 3a 20 31 2e 32 35 65 6d 3b 7d 2e 68 61 73 2d 62 6c 61 63 6b 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 62 6c 61 63 6b 29 20 21 69 6d 70 6f 72 74 61 Data Ascii: out-flex){gap: 2em;}:where(.wp-block-columns.is-layout-grid){gap: 2em;}:where(.wp-block-post-template.is-layout-flex){gap: 1.25em;}:where(.wp-block-post-template.is-layout-grid){gap: 1.25em;}.has-black-color{color: var(--wp--preset--color--black) !importa
2024-04-16 15:06:03 UTC	1369	IN	Data Raw: 6f 6c 6f 72 2d 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 77 68 69 74 65 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 77 68 69 74 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 70 61 6c 65 2d 70 69 6e 6b 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 70 61 6c 65 2d 70 69 6e 6b 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 72 65 64 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 Data Ascii: olor--cyan-bluish-gray) !important;}.has-white-background-color{background-color: var(--wp--preset--color--white) !important;}.has-pale-pink-background-color{background-color: var(--wp--preset--color--pale-pink) !important;}.has-vivid-red-background-color
2024-04-16 15:06:03 UTC	1369	IN	Data Raw: 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 70 61 6c 65 2d 70 69 6e 6b 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 70 61 6c 65 2d 70 69 6e 6b 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 72 65 64 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 72 65 64 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 Data Ascii: portant;}.has-pale-pink-border-color{border-color: var(--wp--preset--color--pale-pink) !important;}.has-vivid-red-border-color{border-color: var(--wp--preset--color--vivid-red) !important;}.has-luminous-vivid-orange-border-color{border-color: var(--wp--pr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.11	49928	142.251.15.91	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:06:02 UTC	2479	OUT	POST /api/stats/qoe?fmt=398&afmt=251&cpn=jRkNZCQf5oAkxA7P&el=embedded&ns=yt&fexp=v1%2C23858057%2C125239%2C21348%2C76094%2C54572%2C73455%2C230596%2C84737%2C36318%2C6271%2C26443548%2C7111%2C31786%2C4557%2C9954%2C1192%2C10512%2C15711%2C273%2C6966%2C2%2C6689%2C2007%2C4957%2C4115%2C12518%2C1263%2C5498%2C796%2C643%2C5538%2C2893%2C2%2C531%2C819%2C531%2C4712%2C5599%2C1104%2C4465&cl=623129822&seq=3&docid=wAD9uO9YAQw&ei=z5MeZqaINPHUy_sP0eWdmAw&event=streamingstats&plid=AAYWOBLu246nWADi&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2FwAD9uO9YAQw%3Fplaylist%3DwAD9uO9YAQw%26iv_load_policy%3D3%26enablejsapi%3D1%26disablekb%3D1%26autoplay%3D1%26controls%3D0%26showinfo%3D0%26rel%3D0%26loop%3D1%26origin%3Dhttps%253A%252F%252Fniceindiatravel.com%26widgetid%3D1&qclc=ChBqUmtOWkNRZjVvQWt4QTdQEAM&embargoed=0&cbr=Chrome&cbrver=117.0.0.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240409.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&bwm=8.883:1518957:2.152&vis=8.883:3,9.244:0,9.251:3,9.341:0,9.490:3&vps=8.886:PA,9.248:B,9.254:PB,9.344:B,9.493:PL,9.494:PA HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 1059 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1713279950337&flash=0&frm=2&u_tz=120&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1267%2C713&vis=2&wgl=true&ca_type=image sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded X-YouTube-Utc-Offset: 120 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240409.01.00 X-YouTube-Time-Zone: Europe/Zurich X-Goog-Visitor-Id: CgtJMG1ONlpYUjdsOCjOp_qwBjIKCgJVUxIEGgAgKA%3D%3D sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/wAD9uO9YAQw?playlist=wAD9uO9YAQw&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&origin=https%3A%2F%2Fniceindiatravel.com&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
2024-04-16 15:06:02 UTC	1059	OUT	Data Raw: 62 77 65 3d 38 2e 38 38 33 25 33 41 34 39 33 34 33 33 25 32 43 38 2e 38 38 33 25 33 41 34 39 33 34 33 33 25 32 43 39 2e 32 34 34 25 33 41 34 39 33 34 33 33 25 32 43 39 2e 32 34 35 25 33 41 34 39 33 34 33 33 25 32 43 39 2e 32 35 31 25 33 41 34 39 33 34 33 33 25 32 43 39 2e 32 35 31 25 33 41 34 39 33 34 33 33 25 32 43 39 2e 33 34 31 25 33 41 34 39 33 34 33 33 25 32 43 39 2e 33 34 31 25 33 41 34 39 33 34 33 33 25 32 43 39 2e 34 39 30 25 33 41 34 39 33 34 33 33 25 32 43 39 2e 34 39 31 25 33 41 34 39 33 34 33 33 25 32 43 31 30 2e 34 35 34 25 33 41 34 39 33 34 33 33 26 62 61 74 3d 38 2e 38 38 33 25 33 41 31 25 33 41 31 25 32 43 38 2e 38 38 33 25 33 41 31 25 33 41 31 25 32 43 39 2e 32 34 34 25 33 41 31 25 33 41 31 25 32 43 39 2e 32 34 35 25 33 41 31 25 33 41 31 Data Ascii: bwe=8.883%3A493433%2C8.883%3A493433%2C9.244%3A493433%2C9.245%3A493433%2C9.251%3A493433%2C9.251%3A493433%2C9.341%3A493433%2C9.341%3A493433%2C9.490%3A493433%2C9.491%3A493433%2C10.454%3A493433&bat=8.883%3A1%3A1%2C8.883%3A1%3A1%2C9.244%3A1%3A1%2C9.245%3A1%3A1
2024-04-16 15:06:02 UTC	504	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Date: Tue, 16 Apr 2024 15:06:02 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Server: Video Stats Server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.11	49929	154.62.106.12	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:06:02 UTC	380	OUT	GET /wp-content/uploads/2018/10/slide5.jpg HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:06:05 UTC	393	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:06:05 GMT Content-Type: image/jpeg Content-Length: 389296 Connection: close Cache-Control: public, max-age=31536000 X-Hcdn-Image-Optimizer: f:jpeg q:85 w:1600 alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 478bc632ccd65a570d13b9edf0a0d35c-bos-edge2 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 2.496 Accept-Ranges: bytes
2024-04-16 15:06:05 UTC	976	IN	Data Raw: ff d8 ff e1 00 80 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 05 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 4a 00 00 00 1b 01 05 00 01 00 00 00 52 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 69 87 04 00 01 00 00 00 5a 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 02 00 02 a0 04 00 01 00 00 00 40 06 00 00 03 a0 04 00 01 00 00 00 2b 04 00 00 00 00 00 00 ff ed 00 24 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 08 1c 01 5a 00 03 1b 25 47 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e Data Ascii: ExifII*JR(iZHH@+$Photoshop 3.08BIMZ%GC!"$"$C
2024-04-16 15:06:05 UTC	1369	IN	Data Raw: c0 c8 91 82 68 86 13 9c 4c 9a 5c 86 c2 81 ca 83 8b 52 41 24 fc fe 54 2b 8e 92 41 38 ef d2 8a b8 41 08 20 64 d2 e7 70 b0 9c 81 dc f4 aa e0 22 34 a4 a7 8e 06 00 ee 6a 0a 74 c1 13 ce 44 d7 c9 04 8e c7 83 51 53 53 99 3f d0 d1 0a 43 4a 2a 32 60 80 64 67 a5 7c f2 64 70 7f b8 a9 86 c1 19 35 d7 48 4a 40 8a 30 e4 28 05 09 57 a7 a5 44 b4 02 4e 55 98 89 15 32 4e e9 13 8a b0 19 41 c8 38 a7 5a eb 43 6c 56 e1 12 a3 f3 a2 2d 52 92 e0 0a 99 e9 ed 5d 4b 7b 80 24 67 e5 fa cd 13 6e 80 95 81 b4 01 c1 a9 d5 b2 8a dd 14 db 7b 40 50 81 8f d6 86 79 b5 6e f9 77 a2 db 56 e3 d3 b4 75 a8 38 30 55 34 b0 69 11 20 84 20 40 e6 33 c4 9a 99 c9 83 31 ef 56 05 00 98 26 7a e7 8a 8e d4 9e b9 35 c5 70 02 95 6b e7 d3 93 54 83 f9 1e d4 43 a0 89 81 88 c1 8a 18 01 bb 8c 46 4d 18 3b 21 2a f6 86 20 Data Ascii: hL\RA$T+A8A dp"4jtDQSS?CJ2`dg\|dp5HJ@0(WDNU2NA8ZClV-R]K{$gn{@PynwVu80U4i @31V&z5pkTCFM;!
2024-04-16 15:06:05 UTC	1369	IN	Data Raw: 70 f0 20 c1 06 63 a5 0c 14 0a ca 84 73 fe 7d 6a b2 64 60 fb d7 c6 48 26 20 fb d1 6c 14 d6 ea e0 fa 40 dc 4f cb ad 7c 93 bc 82 38 9e d4 1a a4 90 63 9a 21 ae 63 76 39 93 53 4b b8 47 31 09 40 89 cd 14 c3 28 54 ee 20 8a 08 05 04 03 98 e9 ed 56 db 3c 53 95 52 8f 2b ad 16 ea 10 83 c2 47 6a 10 ba 7a 44 f4 3d aa 57 6e 29 43 b8 38 f9 50 8c a8 07 02 89 03 f6 a9 68 5c e3 da 91 0a 4a f9 27 1f 95 52 e2 c0 02 72 7d fa d1 2e ba 84 a4 8e 3b 83 4b 6e 17 20 c7 5e 45 48 16 a6 d5 a9 7c 83 b4 98 ed 9a b1 4e 25 49 32 4e ef 6a 01 bd c5 7f 3a 20 24 84 92 07 4c 47 34 44 04 17 b2 fa 60 90 49 fc ea 2e 29 24 46 df ad 41 e5 19 cc 63 a7 4a 82 78 eb de 6b 80 5d ec 5f 02 41 24 cf d2 ac 52 94 53 1b b8 38 aa ce 27 b5 5c 95 0d a0 90 01 f9 f3 52 a6 e9 55 c1 c7 1d 27 ad 4d 28 07 ac 54 16 00 Data Ascii: p cs}jd`H& l@O\|8c!cv9SKG1@(T V<SR+GjzD=Wn)C8Ph\J'Rr}.;Kn ^EH\|N%I2Nj: $LG4D`I.)$FAcJxk]_A$RS8'\RU'M(T
2024-04-16 15:06:05 UTC	1369	IN	Data Raw: 66 4a 64 93 8c 73 42 e3 65 10 43 dc 36 99 05 44 08 ce 0c c5 52 92 12 a3 24 64 75 eb 56 df 18 4f 50 4f 6a 05 1b d5 d6 04 f4 a2 0b 8e e1 31 68 a5 49 30 0f bd 45 c2 12 72 a1 24 55 4c aa 53 1b b8 15 4d ca b7 f0 4f d2 a4 04 1b d2 21 77 08 48 fa e3 b0 a9 5b bf b9 70 44 0e c3 f4 a0 d8 65 d7 27 83 02 4c 74 9a b8 b2 b4 c9 0a 88 c2 68 f6 5d 47 62 98 85 27 68 e0 45 52 e3 c4 ab 0a 92 3a 8c 50 85 c5 20 46 e9 83 8c d4 37 95 10 7a fe a6 b8 05 c4 5e e8 e6 56 79 4c fd 7a 51 76 ea 51 48 20 f3 c5 2e 6d 60 01 98 eb 8a 29 a5 8e 84 8f 97 14 25 40 1e 69 92 36 c4 92 23 a5 07 78 e8 6d 47 d4 78 cc d7 14 e1 28 30 ae 3a d0 6f 82 4c 4f bd 40 0a 4b 91 4c 38 92 01 00 c9 e3 14 4f a5 47 b1 a5 f6 c0 6d 19 23 de 8e 6d 24 e0 7c f3 42 e1 4b b8 53 69 32 a0 90 24 73 45 21 07 9f cb de aa b7 4f Data Ascii: fJdsBeC6DR$duVOPOj1hI0Er$ULSMO!wH[pDe'Lth]Gb'hER:P F7z^VyLzQvQH .m`)%@i6#xmGx(0:oLO@KL8OGm#m$\|BKSi2$sE!O
2024-04-16 15:06:05 UTC	1369	IN	Data Raw: 44 f1 1d 6a dd 41 0b 61 04 e7 13 9a 4d e6 ad 6b 1b 89 dc 4f 15 cc 1a 85 a2 76 dc 26 4b 21 64 90 30 70 2a a5 db 7a 64 09 e8 2a d6 1a f4 6e 88 34 75 b3 61 45 33 d2 84 ba b8 53 cf 29 5b 0d b8 85 82 33 9e 29 8b 08 38 2a 49 02 8e 16 cd 95 49 03 f2 ab c0 4e de 39 e2 69 4e 7d a9 68 a2 80 3b 54 ac aa 23 a1 ae 29 a4 ac 10 07 49 aa af 90 f8 59 01 33 1d 7b 55 4d fc 4a 92 01 10 54 62 67 fc c5 48 e2 ed 73 8e fc 28 86 37 3e 10 40 04 c4 9e 94 d6 d2 d9 b4 a0 c1 dc 66 a3 67 6e 48 fb c0 26 72 68 b7 36 36 82 1b 00 ab a0 27 8a 07 bf 56 ca 03 2b 72 96 5f ed 02 07 3d a9 72 8e 7b 8e 99 e6 8f bb 56 e9 91 0a 3c e2 97 dc 05 ed 98 13 d6 9e c1 b2 03 b9 5c 41 85 e0 cc 08 91 d2 88 43 6a 20 00 24 73 34 0b 2e 82 48 50 22 4d 37 b3 0d ad 23 72 8e 38 9a 97 9a 0b 82 9b 01 49 49 24 49 3c 8a Data Ascii: DjAaMkOv&K!d0pzdn4uaE3S)[3)8*IIN9iN}h;T#)IY3{UMJTbgHs(7>@fgnH&rh66'V+r_=r{V<\ACj $s4.HP"M7#r8II$I<
2024-04-16 15:06:05 UTC	1369	IN	Data Raw: 66 92 05 aa 2c 9d 2d bb eb c9 9e 94 55 fb c1 4d 8c 62 33 43 3a 9d a7 92 3d a8 65 ad 40 11 bb 1c f1 5d 5a 8d a5 dd 29 85 6e 80 32 40 e2 ba 41 52 72 71 c7 ce bb 64 da 94 a4 c9 93 fa 7c a9 81 68 6d 1b b8 1c e3 f4 a1 73 a9 70 09 61 40 fe 5f 4f 51 44 23 2d c0 20 10 32 2a 4e 20 97 06 d0 55 3c 10 79 14 45 d5 a2 99 63 cc 1b c0 8f 54 f5 14 25 e3 60 51 68 24 17 00 95 ac 49 db c6 71 1c 54 5d 0b 85 00 39 13 c6 2b a8 20 a9 31 18 3d e8 95 b2 9f 2f 27 3d 08 c5 33 85 0d dc 25 cb 48 32 a0 44 41 e6 82 75 05 2a 81 d3 a4 74 eb 4d 13 f8 fa 09 fd 2a cb 6b 04 dc ac 9c c8 c4 0e be f5 26 40 cd ca e6 30 c8 69 bc a4 c8 8e 9f 9d 72 0e e2 4c fd 47 14 55 f5 b1 b7 74 a3 2a 9e 27 06 a8 39 9e 24 01 f4 a2 69 04 58 42 e0 5b 60 ae 00 54 a3 ef c4 9a b8 a3 d3 38 07 a5 56 08 0b 91 89 39 a9 2d Data Ascii: f,-UMb3C:=e@]Z)n2@ARrqd\|hmspa@_OQD#- 2N U<yEcT%`Qh$IqT]9+ 1=/'=3%H2DAutMk&@0irLGUt'9$iXB[`T8V9-
2024-04-16 15:06:05 UTC	1369	IN	Data Raw: 4f ed 4a 24 a9 25 06 e3 3e ad a9 24 e7 98 e6 a9 2d 28 ac c0 26 8d 51 05 45 29 18 07 9a 89 29 08 24 fd 29 81 c5 75 f6 40 bc 95 00 00 27 b4 f6 aa c1 95 14 9f 95 7d 7c f0 49 84 a4 93 1d 0e 05 04 cb ca dc 4f 24 1e f4 41 b6 2d 09 75 14 62 c8 00 99 c7 4a 5f 7a ad e4 e7 1d 2a f5 39 20 9f eb 42 15 85 ac a8 f1 31 9f da 99 18 ad d4 1d d7 6d db 09 44 24 4d 5a a4 81 85 0e 78 1d ab ac 10 07 fd c6 ac 74 7d d7 4f 97 f6 a6 13 ba 1e c8 27 a0 24 98 1e d4 13 a7 d3 c4 74 14 53 ea 83 07 9a 5e e9 04 f3 8e 60 d3 d8 14 12 aa 78 09 90 9e 45 7c de e9 e2 41 ef 5d 6d 2b 71 c8 48 82 72 23 a5 32 63 4d 73 cb 2a 54 67 81 da 98 e7 06 f2 a1 a0 94 b5 41 6e 42 40 e7 f4 a6 36 16 21 2b 05 42 4c 7c eb 82 cc b4 a4 ca b2 4e 28 d4 bc 9b 79 c9 24 8c 63 04 d0 38 ed 41 18 1e 6a db 96 d0 96 88 0a 03 Data Ascii: OJ$%>$-(&QE))$)u@'}\|IO$A-ubJ_z9 B1mD$MZxt}O'$tS^`xE\|A]m+qHr#2cMsTgAnB@6!+BL\|N(y$c8Aj
2024-04-16 15:06:05 UTC	1369	IN	Data Raw: 42 65 27 07 83 40 a6 42 e0 e4 e4 c1 e9 44 b4 37 27 19 81 8e d4 0e 00 29 b5 25 12 40 93 8e 38 9a a1 d5 7b 70 66 05 5f 02 00 82 3f 70 2b 8a 68 c0 23 bd 70 d9 77 b0 2a 02 b0 44 0d bd e7 83 5c c9 55 74 a3 6a b8 e0 cf 35 5c c2 f3 23 1d b8 a2 52 42 bc 02 01 32 41 eb ef 43 3e 72 76 71 13 3c 55 db 94 52 00 9a a1 73 81 38 f7 1c 54 01 4a 15 66 40 c8 cf 4a f8 24 03 06 70 20 75 ae 94 a9 33 8e bc 1a e2 40 49 06 31 ef cd 12 20 ad 6d 95 6d 49 05 71 1c 76 15 67 90 60 94 a7 31 91 cd 5f 66 b4 28 01 38 3c fb 53 2d 3d 82 5c 2a 8e 09 09 a4 b9 e4 28 ee 93 38 c8 08 24 08 89 91 18 ab 6c 9b 1b b3 09 f6 34 d3 55 60 06 f7 94 6d 52 86 63 ad 08 d8 4b 60 28 27 d4 0f 35 1a b5 35 4b b6 2a 4e b4 10 dc 1c 72 2a a2 91 3b 49 04 f6 e2 ba ed c7 e2 9c 47 4a 19 4e e6 37 67 a6 7a 57 35 a5 40 20 Data Ascii: Be'@BD7')%@8{pf_?p+h#pwD\Utj5\#RB2AC>rvq<URs8TJf@J$p u3@I1 mmIqvg`1_f(8<S-=\(8$l4U`mRcK`('55KNr;IGJN7gzW5@
2024-04-16 15:06:05 UTC	1369	IN	Data Raw: ac 7b 51 2d 85 00 09 4f d6 9d 1b 10 15 04 26 7b 0f de be 45 97 a4 88 06 3e 94 d2 d2 52 59 33 41 dd 29 ca 73 04 62 60 e6 ab 71 79 19 3c fd 69 da ec 77 10 40 1e df da 83 b8 b2 f4 91 10 4d 40 6a 63 a6 07 84 2a 16 24 09 c4 d5 92 26 04 d0 ea 42 d1 c9 20 f6 ed 57 34 70 64 80 22 78 a8 28 4e ca c0 b0 91 f8 b0 a2 64 7f 5a b9 b7 40 4e 48 db df 8a 15 f0 4e 78 35 16 a4 2a 41 80 4f 4a 80 10 91 bd a6 6c bb 2b 8d db 4f 51 f3 a6 68 dd b4 1e 71 49 ad 87 ac 4a 80 13 f9 53 96 14 12 de d2 3a 72 7b 50 16 02 51 b7 95 5b 8a 52 4c 1a 83 6e 6c 3b 81 35 73 8d ee 58 29 03 3c d0 d7 08 d8 64 08 3c 9f 9d 16 95 34 99 5b dd 09 88 f9 0a 28 3a 95 37 f3 e0 c5 67 6d dd 52 5c 9d d1 3c cf 5a 2d bb c5 24 46 e0 3e 94 a7 42 1c 6d 70 3e 68 eb 94 c8 1d e8 52 9d b0 47 ab 30 2a 3e 7e e8 5a 94 14 06 Data Ascii: {Q-O&{E>RY3A)sb`qy<iw@M@jc$&B W4pd"x(NdZ@NHNx5AOJl+OQhqIJS:r{PQ[RLnl;5sX)<d<4[(:7gmR\<Z-$F>Bmp>hRG0*>~Z
2024-04-16 15:06:05 UTC	1369	IN	Data Raw: 14 d0 04 9e d4 bd 8b 22 a2 61 a2 04 64 91 99 a6 56 d6 eb 6c 80 a1 98 aa d9 2e 0e 6d 28 2d ee ad 76 41 dd cd 0a a9 21 46 42 89 e0 53 24 32 95 7e 23 92 3a d5 cc da b6 07 f2 c7 3f 3a ac c7 86 8d d1 51 a4 9b 4f 61 46 ec 38 e0 81 38 fe e6 b4 ac 32 95 8e c9 02 83 75 90 17 e8 03 14 4b 0d b8 95 00 93 83 d2 6a 5e fd 65 4b 4d 5a 31 ab 06 ff 00 1f 49 e9 c5 54 fb 10 4c 0f a4 53 0b 7d fb 78 30 7b d5 57 09 c9 80 28 1a f3 7b a3 a4 2b 56 e3 68 3c a8 e3 88 a8 ae c4 ab 2b fc ce 68 c4 28 24 89 06 3a 9a b9 07 cd 8e 28 f5 15 d4 80 62 dd 2d 8f 40 26 8c 4a 36 a0 4d 12 dd aa 94 a9 c8 4f 7a ad e6 82 41 3d 3b 76 a5 39 d6 57 00 55 68 52 47 5c 91 5f 38 a6 67 07 20 50 9b ce ec 0a 83 8a 50 32 04 57 52 9e 11 a0 37 b7 f0 83 8a 89 db 10 12 32 68 46 5e 54 ed dc 7e 55 62 96 52 3a 7f 6a ed Data Ascii: "adVl.m(-vA!FBS$2~#:?:QOaF882uKj^eKMZ1ITLS}x0{W({+Vh<+h($:(b-@&J6MOzA=;v9WUhRG\_8g PP2WR72hF^T~UbR:j

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.11	49930	154.62.106.12	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:06:02 UTC	376	OUT	GET /wp-content/uploads/2018/10/ko.jpg HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:06:05 UTC	393	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:06:05 GMT Content-Type: image/jpeg Content-Length: 563589 Connection: close Cache-Control: public, max-age=31536000 X-Hcdn-Image-Optimizer: f:jpeg q:85 w:1600 alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 53b313f91a85f7b5a98c4537a785b84c-bos-edge2 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 2.478 Accept-Ranges: bytes
2024-04-16 15:06:05 UTC	976	IN	Data Raw: ff d8 ff e1 00 80 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 05 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 4a 00 00 00 1b 01 05 00 01 00 00 00 52 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 69 87 04 00 01 00 00 00 5a 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 02 00 02 a0 04 00 01 00 00 00 40 06 00 00 03 a0 04 00 01 00 00 00 3c 03 00 00 00 00 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e Data Ascii: ExifII*JR(iZHH@<C!"$"$C
2024-04-16 15:06:05 UTC	1369	IN	Data Raw: b3 da dc 52 51 d1 4f fc 46 27 8a 75 2a 0c 92 48 83 2b b7 ee 3b ea 0e 8c ea ab 4b f4 cc 95 d7 36 ad 82 fe f5 5b 6e 50 f8 27 74 cb c9 49 97 ec 3b 11 dc 6b ed 1d 1d 25 d8 a5 a7 a8 9a 19 a4 72 25 a7 ab a7 72 a7 1f cb 20 1d c3 0c 60 e3 be a5 b6 d6 d3 bc b7 2a 77 62 6a e8 98 33 61 7c 43 2c 64 63 2a 7d 7b 72 35 94 2e 2e 2d 5b 34 9b b4 ee 97 f3 f0 4b 47 5b 3d ec cd 31 b7 98 69 e4 40 01 90 15 75 90 1e 1b 1f df 56 6d 94 bd 55 1c f1 cd 55 76 8e 5a 28 25 3b cf 86 06 e1 f6 3a b3 66 97 f8 8d 50 97 7b 3d 0b b7 84 ae 87 2c 87 1d 9d 0e 08 d7 da aa 5b 7d 7f 4f 54 59 12 eb 28 a9 a6 79 1e 08 53 2a b2 96 e3 3b bd c7 b6 97 8b 5d e8 6b 5f cd 15 e2 ba 29 b9 35 05 35 36 47 88 27 35 0a 41 08 3b 15 fc e7 45 2b a6 8d 64 64 9e 34 95 01 e6 3c 64 0d c0 79 b1 f7 d2 c7 47 74 e1 e9 88 66 Data Ascii: RQOF'uH+;K6[nP'tI;k%r%r `wbj3a\|C,dc}{r5..-[4KG[=1i@uVmUUvZ(%;:fP{=,[}OTY(yS;]k_)556G'5A;E+dd4<dyGtf
2024-04-16 15:06:05 UTC	1369	IN	Data Raw: b2 69 6c e9 52 f1 1a 8a af 14 cd 87 42 78 64 f6 19 d0 fe af 9e 9e d5 53 47 48 f4 f5 2f 32 c8 04 85 01 60 a9 c7 24 e8 9c b2 49 07 ea 24 c5 80 39 67 0b dc 81 c8 d0 3f e2 b6 9a 7a c8 a7 ab 49 68 a6 a9 43 99 4b 92 18 8f 42 0f 1c f7 d2 79 08 7c d4 51 24 0c 6a da 7a 78 22 50 3f 4d 77 33 1c f7 1f fc f4 d0 5b 7f 51 51 57 5e 2a 6d b4 d5 4b 23 42 4a a7 88 9b 4c 98 f5 1a ea 2b d5 23 d1 d2 d7 22 1a ba 63 29 a7 75 8b ea 40 73 e6 c7 e7 03 f1 a9 29 63 b3 54 56 35 4d 30 a7 96 a5 17 0d 30 4c 32 93 e8 7e fe 9a d4 8d 6c 2f 2c ec 43 53 46 91 06 65 05 46 71 e6 f7 fb eb e9 68 95 7c 59 22 12 46 5b 05 4f 00 9f 7f c6 a3 a7 50 92 00 13 0d b7 68 70 73 8e 75 f6 53 18 80 23 47 c8 62 48 c6 73 f7 d2 b5 f0 32 00 35 7c cd 75 f9 6b 6c 12 24 4a 44 9f a8 9c b2 9f a8 02 3d 8f f6 3a 3f 6b 32 Data Ascii: ilRBxdSGH/2`$I$9g?zIhCKBy\|Q$jzx"P?Mw3[QQW^*mK#BJL+#"c)u@s)cTV5M00L2~l/,CSFeFqh\|Y"F[OPhpsuS#GbHs25\|ukl$JD=:?k2
2024-04-16 15:06:05 UTC	1369	IN	Data Raw: f3 03 fe ba 86 ed d4 1d 43 59 4a f1 74 f4 36 ba 0a 30 9b 22 59 a5 2f 38 cf a8 41 dc e7 8e 74 cb 4a 90 8d 84 ae df 2d 6f a6 8a 0a 0a 67 a9 95 13 c3 91 22 21 40 63 d9 cf b8 ce 01 c7 6d 03 b8 c5 58 c5 23 aa 8e 29 ea 27 50 d2 24 4c 23 89 40 38 e4 f7 d4 d4 74 97 2a 1b 62 24 55 72 d3 ca c1 16 a2 ad a2 06 67 6f e6 0a 3f 90 63 b1 ee 73 9d 0d 82 ef 69 a1 78 c5 4d e9 e9 aa 12 46 09 4d 3a ef 94 9d c4 02 58 f6 ce 73 cf 6d 6e 91 96 cb d4 e5 64 29 2d 5c 34 d0 c6 ce b0 25 3c 8c cd 23 b7 21 55 47 a8 fe da 61 b4 59 d6 4c 7c ff 00 ca c6 e0 13 1c 4e ea 0a 27 60 46 3d 4f b6 ab f4 bc 09 e0 ff 00 cb 5d 2a ae d3 60 c6 d2 84 0c 94 c0 72 c5 78 c9 f6 ce 74 52 8a df 5e b4 12 2c 76 78 96 9a 23 b6 2a 9a ea 8f 09 a4 4f b2 8e 79 cf 73 a0 d3 ec c9 a2 ed 0d 3d ea 59 69 a3 7a 9a 44 a7 88 Data Ascii: CYJt60"Y/8AtJ-og"!@cmX#)'P$L#@8tb$Urgo?csixMFM:Xsmnd)-\4%<#!UGaYL\|N'`F=O]`rxtR^,vx#*Oys=YizD
2024-04-16 15:06:05 UTC	1369	IN	Data Raw: 44 d5 c5 47 6d 8e 6b 6d 14 35 28 b5 1b e9 96 23 b2 37 94 1f a8 13 cc 84 0c 73 cf 3a 56 e3 17 43 24 da 04 57 f4 68 82 19 2e 17 f9 63 b7 db 99 7c 55 b6 42 a1 aa 27 6e e1 58 e7 8c e3 18 d4 f4 35 d6 44 92 14 8a 8a 79 ab df 60 92 04 04 c5 4c 38 38 63 f4 80 01 1c 0f 6e 34 bd 79 eb 1b 74 f7 b9 67 15 62 77 49 5d e7 66 61 b6 1d a3 91 df 9f fc ea 5b 0f 59 8b dd 45 5c f6 aa 06 78 29 8a 86 91 9f 86 38 38 5c 7a 13 e9 8d 2b 6d ec 75 1a 43 48 86 a6 5a aa a9 ea 1c 89 ea 00 7c 16 c1 7e 3b 63 3c 28 ce a7 8a 9d 29 26 8a a9 5d 1e 98 11 1e cf 0c b1 91 8e 70 10 7d bd 7b fe 74 4b a7 ed 75 15 f5 91 55 d7 29 8a 44 8c 9f 09 5b 9f 30 ed f8 fc fb 68 9b d3 a5 bd 9d 2a 6a 23 5f 97 4f d1 c2 e4 96 60 33 b7 1d b1 8c 7e da 50 d0 1a d0 b7 39 d2 43 3d a6 7a 38 d6 4f 28 24 7e a2 96 3e 60 01 Data Ascii: DGmkm5(#7s:VC$Wh.c\|UB'nX5Dy`L88cn4ytgbwI]fa[YE\x)88\z+muCHZ\|~;c<()&]p}{tKuU)D[0h*j#_O`3~P9C=z8O($~>`
2024-04-16 15:06:05 UTC	1369	IN	Data Raw: b6 db 6a 7c 38 aa 84 c6 a2 61 81 80 06 70 3d 38 38 e7 b6 4e 82 74 00 b5 2d 8a 9e 28 2a bc 4a 86 8a 4d cb 0e cc ee 65 0b 90 b9 cf 73 8c 7a 70 4f a6 a4 b7 d2 54 3e e7 b4 4b 02 d3 8d bb 65 c0 2c c3 cd bb bf a9 1e 98 e7 5f 2c 96 c9 e9 d2 5f 98 66 a9 ae ac 6f 16 aa ad dc 95 56 60 72 a8 a3 ba 8e 3b f7 23 5d 49 4b 59 49 6b 5a 5b 5b 45 4c b2 95 69 e6 a8 65 8d 17 f9 42 8f be 30 a0 0d 2b a7 d0 c9 b4 12 a3 e9 ba 3a 8a b9 45 da f6 65 86 48 d5 e3 8d 9b 0a 64 39 f5 1c e0 7d bd 08 d0 8a fe 9f b2 f8 73 2c dd 2c 95 71 c4 c5 5a b0 cc db 0e 3b e0 67 24 9e c3 8e e3 3a 4f 16 db 9c d5 df 35 4f 73 04 4e d2 1c 0e 3c 47 c8 41 8c f6 19 f5 ec 30 74 d3 7a a1 2f 22 c3 1c b2 78 c1 4c d3 b1 97 70 8d 72 3b f3 85 1b bd 75 aa ba 66 ef b2 08 e8 d0 d5 47 04 b6 3a 74 78 d4 7c bf cc 79 d4 00 Data Ascii: j\|8ap=88Nt-(*JMeszpOT>Ke,_,_foV`r;#]IKYIkZ[[ELieB0+:EeHd9}s,,qZ;g$:O5OsN<GA0tz/"xLpr;ufG:tx\|y
2024-04-16 15:06:05 UTC	1369	IN	Data Raw: a0 76 ae b6 8e aa d5 1d a8 40 22 ba b5 70 21 f0 1e 44 3d dc 29 c7 21 88 1c fd 86 38 d1 5e 94 a4 56 79 2e b0 54 78 b0 c5 16 e2 cd 2a b9 58 b6 32 b3 3f ab 00 71 c1 f7 1a 59 5f 93 21 32 9d a5 83 a8 aa 2a 3e 64 55 47 33 b5 43 18 40 69 19 41 ce d0 c3 e9 c8 e3 d3 4a 4d 50 cd 74 ab 79 a3 30 6f 76 90 21 62 36 31 3c 7d f8 27 5a 0a d9 e2 a3 bf 53 4c 6a 9e df 41 02 33 56 55 88 c0 20 a8 0c a1 90 f0 c4 95 53 8f 52 da 8e ff 00 4f 68 ea 1a fa 5a 1f 90 aa f9 aa a5 1b 5a 96 9d 44 b2 48 54 31 3d ca e0 0e e3 8f db 54 4d 5d 8b 2b e8 5c 50 bf 24 92 ff 00 c3 cb 5b 34 34 e0 1d d3 48 cc 01 ed 21 00 f0 09 c9 18 d5 21 d4 2a 2f a0 54 d1 b5 3c 60 80 55 1d 83 46 00 c0 03 9f 4e ff 00 b9 d7 cb c5 8a f3 6a aa aa a7 34 f7 0d b4 ec 55 a5 68 99 0e 07 7d dd f1 ed df 5d db 1a 96 b6 18 e9 c4 Data Ascii: v@"p!D=)!8^Vy.TxX2?qY_!2>dUG3C@iAJMPty0ov!b61<}'ZSLjA3VU SROhZZDHT1=TM]+\P$[44H!!*/T<`UFNj4Uh}]
2024-04-16 15:06:05 UTC	1369	IN	Data Raw: 48 ef cf be 4f fb eb b4 a5 41 12 54 4f 4f 05 49 7c b3 cb 24 9b b2 3b 64 fa 1c f3 8f f4 e3 4b b1 8a 66 d1 49 0c d4 d5 1b 54 56 54 48 bb c0 60 c1 11 46 16 35 03 20 0c 7f ef ab 57 2a 9a 36 af 84 4f b1 8e 08 68 d9 f7 2c 28 a4 e3 23 be 48 d0 eb b5 52 54 3c 74 f4 35 22 94 46 54 f8 d1 c4 70 a5 41 c8 19 f6 ec 35 4e d7 04 e6 ff 00 4a d6 f9 22 68 17 78 8a 79 9c 16 95 82 77 2b df 39 cf 1e 98 27 5a ac dd 74 17 a9 ac b5 57 d7 52 c1 5b 22 ad 4b 6f 78 13 92 40 51 e6 62 bf 8f 28 cf be 97 16 88 ad 2b 5c 67 a3 87 31 4d e3 25 24 73 f9 4c 63 84 2e 06 07 af ff 00 39 d5 fa f9 e4 b4 52 9a 6a 2a 78 a5 ac b8 b0 86 39 d5 44 b2 37 3e 7c 03 ea 79 1f 6c ea e5 ba 86 9e 29 61 8e ba 82 b2 53 37 8a 44 22 a3 f4 86 3b 28 1f 51 0a 57 1e 62 15 46 4e 9a 4b 40 8b a7 61 03 56 b4 74 d0 bd 1c 2f Data Ascii: HOATOOI\|$;dKfITVTH`F5 W6Oh,(#HRT<t5"FTpA5NJ"hxyw+9'ZtWR["Kox@Qb(+\g1M%$sLc.9Rjx9D7>\|yl)aS7D";(QWbFNK@aVt/
2024-04-16 15:06:05 UTC	1369	IN	Data Raw: 11 70 b6 dc be 6a ae 92 09 62 a5 9d 57 cb 46 c4 60 ed 56 03 f5 08 ce 5b ba 8c e3 1d f4 16 e3 57 4b d0 bd 32 f7 da 78 67 bc db e5 94 9a 88 94 61 a4 a8 7e 72 33 c2 0e 39 6e 49 ce a8 f2 49 d2 82 a6 06 a2 f6 f6 81 d6 ce 94 e8 6e 9e ae 5a 14 a1 5b b9 f0 52 ae be e1 70 8b cf 1c 79 05 52 18 c7 11 ae 46 59 8f 61 ef db 56 2b ed 36 bb a5 4a cd 49 55 f3 93 a5 48 96 a9 ae 32 34 8f 55 4d f5 98 c4 64 f9 54 b0 0a 14 60 6d 19 27 dd 7f a7 2f 95 3d 53 3d 5d e7 ac 3a 72 b6 7f 9e b9 d3 ad b6 ca aa f1 c3 55 1a 23 15 40 00 cc a1 4f 98 96 3b 7b e7 56 3a bf ab 6e f2 5d 23 a2 b1 db ad 71 de 6a 66 31 a8 a7 80 bc 91 9c e0 22 b0 f2 83 9e fe 80 0d 33 52 b6 a5 20 41 47 b4 82 96 c4 22 8a 27 98 a3 d5 88 b0 f3 01 86 fb ae ad 52 c5 92 64 83 73 ab 46 7c c1 b2 aa 7d 1b 1f 9f ed a1 b5 b5 14 Data Ascii: pjbWF`V[WK2xga~r39nIInZ[RpyRFYaV+6JIUH24UMdT`m'/=S=]:rU#@O;{V:n]#qjf1"3R AG"'RdsF\|}
2024-04-16 15:06:05 UTC	1369	IN	Data Raw: 0f f4 d4 ba 76 55 57 4c 03 f0 de f7 9a 0a 9b 54 fb 94 b9 f1 21 93 9d a0 e3 cc 0f b7 1d b5 77 6a d3 dc 6a 2a 42 83 bd 54 b4 88 de 57 24 f7 c7 be 95 6c 49 57 43 74 10 50 89 0d 4b bf 84 63 c7 96 4c fe 74 d5 6f 9d 6a e9 84 60 47 e2 f9 a3 31 8e 32 73 c8 23 f6 d3 64 8d 3b 5e 45 83 d5 31 be d7 34 34 cf 14 b0 62 a1 17 b7 1d 87 ae 83 75 2d 6c 15 37 68 2b 05 12 2c 6a e4 96 55 01 88 1d f5 47 a4 e2 b8 5b 6e 53 64 95 85 9c 33 43 21 e5 46 7b a9 f5 d5 9a 89 ea 92 a6 a5 e5 8e 19 e1 59 f2 42 ae 19 50 fa ff 00 f3 db 5c ee 3e eb 2d 19 68 1d 1d 5d 55 7d c6 a6 d8 95 73 53 8f aa 99 65 19 0c cb 92 06 7d 38 3a b9 4d 67 a2 b9 49 24 57 3a 1f 0a a1 19 5a 40 98 3b f3 ef fd 34 a1 7e aa a8 a7 ba c9 35 34 ac ab 95 64 39 ce 48 f5 d3 35 8b a8 e7 ae 36 f9 a9 6d 73 b5 49 0d 1d 43 c2 db cf Data Ascii: vUWLT!wjj*BTW$lIWCtPKcLtoj`G12s#d;^E144bu-l7h+,jUG[nSd3C!F{YBP\>-h]U}sSe}8:MgI$W:Z@;4~54d9H56msIC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.11	49931	84.32.84.114	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:06:04 UTC	625	OUT	GET /wp-content/uploads/2018/10/about.jpg HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://niceindiatravel.com/about/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:06:09 UTC	393	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:06:09 GMT Content-Type: image/webp Content-Length: 298062 Connection: close Cache-Control: public, max-age=31536000 X-Hcdn-Image-Optimizer: f:webp q:85 w:1600 alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: e0916d400945fa45f5d7457f650a0419-asc-edge6 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 4.738 Accept-Ranges: bytes
2024-04-16 15:06:09 UTC	976	IN	Data Raw: 52 49 46 46 46 8c 04 00 57 45 42 50 56 50 38 58 0a 00 00 00 0c 00 00 00 3f 06 00 cd 02 00 56 50 38 20 40 8a 04 00 90 97 0a 9d 01 2a 40 06 ce 02 3e 4d 1e 8c 44 22 a1 a1 22 30 16 cc 48 50 09 89 64 69 db 96 78 eb ac 02 60 5e b5 6d 65 4b 34 0b 09 46 98 82 d1 ab 83 35 d0 7f 4a b8 d4 3f 71 7d 38 f9 5f e5 bf 24 7d db 79 e7 c5 cf b7 fe 3b fd 1f bf a7 f0 7f fc 7f bb ec a7 e3 bf db fe db fe 4e fb eb 7a d7 f0 ff f9 ff cd 7f ad fd b0 fa 5d ff a7 d4 df f7 2f fc bf bd 5f 00 5f ce 3f c1 7f fd f6 85 ff db d4 df fb 1f fe 5e a0 ff d2 7f e5 f5 bc ff c1 ff cb fe 67 ef ff ca 0f f0 bf f4 3f fa ff c7 ff 89 ff ff e8 07 f9 ef fb 5f fd ff e9 ff d8 ff ff f9 d3 ff e5 ff eb fe df c1 1f ef 47 ff ef fb 5f 00 ff d7 bf da 7f fb ff 61 ff 33 e2 7b ff 37 ef 07 fd ff 94 9f f0 5f f6 7f 71 bf Data Ascii: RIFFFWEBPVP8X?VP8 @*@>MD""0HPdix`^meK4F5J?q}8_$}y;Nz]/__?^g?_G_a3{7_q
2024-04-16 15:06:09 UTC	1369	IN	Data Raw: 1b c9 d6 68 6b f8 d8 e1 f0 67 4b f0 02 fe 5f a7 84 c4 f7 ac c7 98 31 00 69 12 45 ed 79 cc 27 a4 bb ee db fd 7f d2 89 4d 26 38 45 41 da 5b fe 79 7c fe 78 98 42 0b f7 a1 bc 85 86 23 0a 8a 97 9c 22 77 4e df 57 21 c8 ed d9 c1 81 ed 5d 25 64 05 93 04 f7 cd 22 53 be 0c 27 03 c6 31 7a 2f 64 22 44 48 49 91 6b b3 32 dc 6d 89 2d 24 ce 1e 2f 08 8d 48 23 1b 79 0b d1 10 54 c9 c9 88 9f 92 9a 44 b1 7d 08 f0 4c bf 3c 40 8c 3b 1b be 12 3c e8 df 48 52 26 18 26 e0 4d 58 11 eb 62 0d 93 27 68 b7 c8 89 91 de 90 51 e1 37 e6 8b 9e c6 fb d7 e8 63 41 80 ba 80 bc 71 02 87 96 c3 4a b9 43 af e4 6c fb 62 d0 49 92 6b cf 87 a3 7c ce e4 7a 6c a2 24 88 a2 fa 1a ae 4e 83 af 0d 6c 98 53 16 2c cc 0f 03 bf df 3c 91 69 5b c8 c9 7c e3 81 0c e6 a0 3e dd d4 bc 81 c0 d2 81 a5 4b e4 a4 03 57 cd c2 Data Ascii: hkgK_1iEy'M&8EA[y\|xB#"wNW!]%d"S'1z/d"DHIk2m-$/H#yTD}L<@;<HR&&MXb'hQ7cAqJClbIk\|zl$NlS,<i[\|>KW
2024-04-16 15:06:09 UTC	1369	IN	Data Raw: f6 59 68 81 a9 10 02 9b 9b 1e 54 f7 69 6c 40 2d 80 a1 e4 53 4f 28 13 ab e2 b2 13 a6 13 3f c1 44 37 46 c5 9f d8 8e 7b 7c 4e 7a a1 c9 4b 8a 5d b4 07 42 87 d7 e2 a0 1a 02 dd 40 b1 74 86 05 80 04 c4 46 65 c4 b3 fb 57 cc 86 e9 35 71 53 a7 5b 55 dd de 07 6f d0 52 0c 75 fb ae d9 e1 b4 80 5c f3 c8 76 d7 73 e1 e2 9e 43 5c 7a a2 89 01 2e ba 81 c2 bf 27 75 64 b4 c0 2f dd 54 93 dc 6b 3b 13 66 66 81 a5 b7 23 00 f6 88 fe dd d5 6b 83 73 3c 52 95 87 b5 67 37 6d 50 76 8e 2a 0d d8 33 fe bd c8 a3 04 cb 9d 5a 5f 98 0d 78 37 1d e7 16 19 c4 72 fc b2 d7 af 52 de 94 3e d9 83 4f 2b 73 c4 9f 56 fd b0 ca 29 f4 01 b1 44 f1 ca a3 0f 13 1b 37 5e 38 4b 90 cb 03 0f 6e 38 97 db e8 86 0e 44 ff 7b d3 67 b1 04 e9 66 97 2b 75 f6 c6 1a a0 96 fd 5e 27 4b 64 98 6a 7e 53 2f 3c 9e 61 f3 d1 b4 17 Data Ascii: YhTil@-SO(?D7F{\|NzK]B@tFeW5qS[UoRu\vsC\z.'ud/Tk;ff#ks<Rg7mPv*3Z_x7rR>O+sV)D7^8Kn8D{gf+u^'Kdj~S/<a
2024-04-16 15:06:09 UTC	1369	IN	Data Raw: 6f 44 27 4b 22 cd 62 1c 7e bc 39 c7 bd 34 4d 9e 98 63 f3 75 cc 16 8a ba 62 8b b1 ac a0 2e 2d 9e 4d f9 b1 79 7f 68 a1 32 a8 30 2c 2d c0 a0 52 f3 ff 79 88 e0 b2 d0 90 3f bd e7 4b 9d b2 47 89 aa 29 ec 2a 9d bb 8d 40 74 b2 b8 6c 77 2e 2c 60 6f 47 e1 ea d7 27 66 13 cf 0b 93 e2 79 99 69 d1 8f 6f f8 3b 12 b5 75 a1 70 5e 79 14 83 cd a2 b1 5e 7c 67 67 db 9c 03 07 b2 1a cd 08 63 55 a4 f6 0e f4 84 d6 3b 0c 8f 34 86 20 74 23 52 5c 08 43 3c d3 8d d8 2c ce f6 57 03 47 e0 ae 77 36 1e cb 10 6b 45 3e bd d5 4c 1e bf 31 5b 73 e5 e4 c2 3c 0e 0f 1a ef 7f de 56 38 fc 6f 84 6b d2 a1 eb 5a 5f 3a ac 49 d1 7e 2d a5 d2 c4 52 c9 d2 e2 ae b2 51 8a 65 e9 2c 98 a6 b3 d1 f2 1d 40 81 2b ba 44 7a c0 f9 34 e9 47 b0 93 38 f0 29 ec 1c ac fa b1 67 b3 59 95 38 1a 4c 9c 5a 9e 58 68 f0 c4 c0 a8 Data Ascii: oD'K"b~94Mcub.-Myh20,-Ry?KG)*@tlw.,`oG'fyio;up^y^\|ggcU;4 t#R\C<,WGw6kE>L1[s<V8okZ_:I~-RQe,@+Dz4G8)gY8LZXh
2024-04-16 15:06:09 UTC	1369	IN	Data Raw: ab eb fc bf 3c 33 44 06 20 69 57 12 22 49 f0 2d 85 d7 fe 11 86 04 24 de 99 dd c4 18 ba 5e 75 c6 07 23 ac 9c 2e ed e5 85 89 9f 24 6a 37 a6 d1 2b fe ba 06 61 de ae 8c 1e dd 78 53 0a 40 29 94 ed f2 31 02 99 3c df 37 55 36 aa ea bd fe 82 ed ba 55 ef 32 65 5a 8b d3 13 bb b1 5a 33 de 10 42 91 0e 60 60 10 84 b0 9b 01 6b 0b 63 8d 77 f3 fc b5 41 3f 90 66 a8 9f bd cd 0c 4e 1a db a5 b4 cb a9 ad 7f 1d 68 1c ec a5 36 46 bc 9d 4a 5b 9d f8 76 13 11 3e fd 10 a2 22 b5 0e 57 ca 11 0e 26 a8 54 b6 4e 7f cc 60 6c aa 44 f3 5d 7a 20 6f a2 1e d5 fb 5b 09 b3 88 e9 cd 91 19 68 53 77 df 4e e7 9c 44 41 39 ae 81 a1 58 e4 27 10 f4 d7 cb c9 fd 18 7c a1 3e 3e d4 c1 df 94 76 84 64 3c 40 97 11 07 bc 09 24 c9 d2 64 ef db e7 4b 58 0c f1 00 b9 a8 26 af f4 9e 6f ae b3 cd 55 0d 6a e6 7b ca f9 Data Ascii: <3D iW"I-$^u#.$j7+axS@)1<7U6U2eZZ3B``kcwA?fNh6FJ[v>"W&TN`lD]z o[hSwNDA9X'\|>>vd<@$dKX&oUj{
2024-04-16 15:06:09 UTC	1369	IN	Data Raw: 1b 7d 0e da 59 46 c8 df 48 22 d6 f7 c3 01 c1 ca 3e 64 88 43 fd 2b 17 33 b3 83 df 13 44 1a 90 29 db 22 8d 91 f6 0f ae 4c 7f 26 4a 51 8c b5 08 ae 8f dd fe bf 2e fd 92 03 c6 12 03 27 95 1d bb 17 66 ba 7f ae 15 4e 5a c7 ea 96 a5 2c e3 f7 b0 fe 7b f0 8c 62 df 36 49 a3 69 d8 cc f9 45 0c 5e e8 ea be 94 7b 80 af ea a4 2a 8e 2b 02 f8 1d ab 2a bc 03 90 f7 c5 ba 0c 23 78 53 c0 25 ba a4 db 82 87 3d 6d 33 91 7d 96 9d 38 f9 77 6e 76 9d 05 ba 13 93 21 64 18 04 d0 84 0d 43 ce 28 85 1b c7 1c 71 de 20 d8 fa 65 4c b7 8a fd 91 14 48 31 ea 22 cf 14 6b af 36 fe 54 cf cc ea 55 a5 ec 95 bd 5d 91 9d 8b eb 86 5a 0c 79 a4 5f 83 8e df ea 82 79 71 87 a8 2f 7d e2 d2 66 cf ed 40 f3 a3 b8 0e 45 15 42 05 23 78 c4 56 39 b2 4d c8 70 5f 66 c3 11 3b b0 de 29 6b ad 02 2a 42 46 71 93 a0 72 ff Data Ascii: }YFH">dC+3D)"L&JQ.'fNZ,{b6IiE^{+#xS%=m3}8wnv!dC(q eLH1"k6TU]Zy_yq/}f@EB#xV9Mp_f;)k*BFqr
2024-04-16 15:06:09 UTC	1369	IN	Data Raw: d4 2f 2c f0 04 30 9a 70 ef 60 cb cd 64 ca c2 4b 59 43 0d 80 72 bc 28 09 cf 02 82 b1 54 c8 5b 71 ad f3 a3 a5 ed 88 d9 5a be 1f e5 bb 0f 92 6c 4d 51 31 68 a2 2e 7c 86 77 55 e1 7e a4 aa 30 4d 2d 16 4e 54 c2 0a d0 92 7e 59 be b4 47 72 40 9b 95 5e 08 4d 8d a9 44 0d ef 07 bd c4 ef c1 5b e9 f6 9c 5f 4b 7b d0 19 43 99 07 28 e2 c8 11 24 eb 55 21 fa 72 a8 57 ea cf a3 7c 53 83 a9 19 1e a0 50 57 1a a6 ba 8a 5e 72 ec 6c 40 c2 44 ed fc 87 a2 2c 2b ab 11 11 05 48 dd fc ce 0e 7b 82 12 d1 49 2d bc 40 0b 97 6f 77 e2 14 98 13 b8 9d 0f 1c ae 5b 23 2c 70 2b 72 c1 0b e8 4b df 61 e4 a9 05 7f cf 22 eb cf 28 fc 99 11 8c 80 24 f9 1f 09 bb 9c 1d bd d7 ca 5c bf 07 88 61 07 5b bf 48 42 f0 e5 20 35 1d 38 f9 4c 23 74 57 02 89 ef 1b 30 68 44 13 b6 0e 98 8c 9e 4a 27 e1 2c 08 b5 71 93 2b Data Ascii: /,0p`dKYCr(T[qZlMQ1h.\|wU~0M-NT~YGr@^MD[_K{C($U!rW\|SPW^rl@D,+H{I-@ow[#,p+rKa"($\a[HB 58L#tW0hDJ',q+
2024-04-16 15:06:09 UTC	1369	IN	Data Raw: 4c c7 d6 ca 8c 90 7c dd 51 1c 25 26 4d b0 a3 c5 f6 91 97 79 18 5b 4b c9 30 ca 5c b6 ef 13 1b bd ca 8f bf e2 f4 3a db dc d4 ac b8 4b 9d ad 6d 0d 6e a0 a2 d1 05 b5 f4 01 72 3d 57 1d 7a 6e 47 70 ac 1e b2 54 21 f9 ac 8d 0a 0c 86 01 a1 9c 4b 37 17 a0 11 00 5a 90 56 6c 3c 63 1b 5c 06 80 2c 6f 2a 23 30 21 29 e4 26 3f 7f ff 86 6f 72 06 9e 75 48 60 68 aa 5a b2 74 b1 2b 07 08 1d 36 cd 79 35 03 eb 20 f0 64 4f 72 d6 f2 00 a1 3c f3 11 40 45 a4 d5 8b 3e 09 1f 9a 6d b6 52 17 dd aa 58 57 be 1c 02 ff 90 bf f7 09 2b 46 21 a8 bf 38 5a ed b1 68 3c 81 69 20 8a d1 fb e3 29 7d f8 c9 58 04 74 e3 6b ff d2 65 a6 1c a4 eb e2 43 0c 11 7a 06 a7 99 42 66 5f 4f e7 34 7f c4 cb dd dc 54 00 f7 69 21 79 3c 6b 20 85 0d d9 5e 4c 0f e1 b6 6a b6 5b eb 36 f7 44 70 52 71 72 03 4f b9 88 77 5e cf Data Ascii: L\|Q%&My[K0\:Kmnr=WznGpT!K7ZVl<c\,o*#0!)&?oruH`hZt+6y5 dOr<@E>mRXW+F!8Zh<i )}XtkeCzBf_O4Ti!y<k ^Lj[6DpRqrOw^
2024-04-16 15:06:09 UTC	1369	IN	Data Raw: 48 2f ed 14 e9 16 b4 9d c8 58 87 f3 2d 83 58 bb 36 2b 29 4f 37 4f e4 57 d8 b1 38 56 60 6a 48 ee 6f 6d 0a 34 d7 67 88 6f de 78 c3 d6 ba a7 2d c7 bd f4 53 8d 1b 7e 25 58 b8 47 e2 5d 2f d8 b8 ef ac 90 22 cd 58 e8 3b 1f b3 58 0d 9f 9f fd 9d b3 b4 f8 41 e0 6f 80 94 02 f1 65 f3 61 d6 33 5b c3 8c d1 2c 5c 2d 7c b9 b3 ad 76 ed 87 39 99 27 53 2e 3d 9f e2 da 5a df 73 d6 91 7f 4c 8d 88 6f 38 a6 c0 d8 5f 8f be 02 7e 75 b4 7b 4e 0e ba fe 89 bf c3 8d 7d 45 e7 87 fb 96 e8 a5 72 3f 4c b7 a5 5a e6 0f a1 e9 28 ed f3 b4 50 9a 8d 52 1a 17 d4 4e 6d 0f 0c d3 5a 6b 2a ed 22 36 75 52 d8 4a 61 27 20 22 3a 07 c6 32 20 31 aa 2f 74 cb e9 1d 92 00 d2 b7 8c 44 3a c7 0e c0 39 62 0e 94 10 21 10 d1 f8 23 7e e1 bf 1e 76 a0 3f 1b eb f1 06 57 4b a3 4d a0 6b 43 a1 85 fa 17 35 da 93 d9 83 d9 Data Ascii: H/X-X6+)O7OW8V`jHom4gox-S~%XG]/"X;XAoea3[,\-\|v9'S.=ZsLo8_~u{N}Er?LZ(PRNmZk*"6uRJa' ":2 1/tD:9b!#~v?WKMkC5
2024-04-16 15:06:09 UTC	1369	IN	Data Raw: ad 95 18 5d 96 40 65 6c e2 40 47 53 92 d3 f9 c4 d4 ec 79 1b 8d c9 92 05 c3 a4 16 3f f6 95 e2 db 0d 79 98 d5 b2 ae 56 be d4 fd 40 cc 47 42 35 d7 d0 c4 35 94 f0 34 ab 06 2b fc c1 c6 82 19 b2 8d 44 fb d0 35 26 10 08 7c 71 15 a2 10 a9 bb 39 25 97 9a d6 e0 ee 4c 42 e4 d0 de 43 ee 2e 7a 19 5e b3 47 aa 66 3d c0 69 ce 71 20 72 f8 31 52 de 25 8e 07 da 6e a7 98 ea ab 71 3e b7 2d 34 00 ad cd 91 ba 76 dd a8 8f 38 bb a7 24 b7 8a 41 fe 88 7a 16 9d 67 d2 81 86 44 6d 63 23 0d d8 c1 04 e6 c8 a3 0e 2e 2b bb b8 07 61 c8 2a 80 9c f3 b1 bb 17 f5 d8 cb 21 5b d5 7d be 54 e1 e9 f0 c9 a8 ac 55 22 87 7b 88 a0 bc 60 b9 ea d3 25 c0 46 c1 60 31 75 34 e6 43 5c 62 af a4 53 b6 75 eb 26 17 e2 fe cd 67 d5 3d c3 0f de 3d e9 db dc f8 12 21 d5 26 aa 0a 9e db 47 22 ee 0c 80 3c 8f b5 34 44 95 Data Ascii: ]@el@GSy?yV@GB554+D5&\|q9%LBC.z^Gf=iq r1R%nq>-4v8$AzgDmc#.+a*![}TU"{`%F`1u4C\bSu&g==!&G"<4D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.11	49933	84.32.84.114	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:06:04 UTC	627	OUT	GET /wp-content/uploads/2018/10/ganga-1.jpg HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://niceindiatravel.com/about/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:06:07 UTC	392	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:06:06 GMT Content-Type: image/webp Content-Length: 34352 Connection: close Cache-Control: public, max-age=31536000 X-Hcdn-Image-Optimizer: f:webp q:85 w:1600 alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: eebbdd9e41d16715cd8c0ceb098181d2-asc-edge5 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 2.194 Accept-Ranges: bytes
2024-04-16 15:06:07 UTC	977	IN	Data Raw: 52 49 46 46 28 86 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 57 02 00 8f 01 00 56 50 38 20 84 85 00 00 d0 04 02 9d 01 2a 58 02 90 01 3e 51 26 8e 45 a3 a2 21 24 26 19 99 40 80 0a 09 4d 2c 97 8b 73 ec d9 60 7e 07 7c 25 c0 39 92 5d dd 3c 8b c8 f1 d7 90 8b 02 f0 d3 36 5f 21 10 4c e5 25 dd f4 75 76 88 db 46 e6 50 8d 7f ee 37 f0 23 e0 7f 85 fb 87 f7 8b e6 2f 5e f9 a2 74 57 fe 6f f1 be d1 3f e3 7f db f6 a9 fa af ff 57 b8 17 f4 7f ef 9e a4 ff e8 fe ec 7b dc ff 11 ff 2b d4 3f ed 2f ee 47 bc 1f fc 6f db 9f 73 1f df 7f dc fb 01 7f 52 ff 53 ff bb db 03 ff 57 b0 cf f9 df fc 3e c0 9f b9 5f ff fd 78 bf 78 bf fb 7c 9a 7f 76 ff 9f fb bb f0 2d fb 89 ff ff d8 03 ff 8f a8 07 fe de 96 ff 53 f2 99 f5 ef f5 3c 0b fc f7 db 97 dc cf f0 9f 40 1f c5 67 1f e2 ff cb ff d9 Data Ascii: RIFF(WEBPVP8XWVP8 *X>Q&E!$&@M,s`~\|%9]<6_!L%uvFP7#/^tWo?W{+?/GosRSW>_xx\|v-S<@g
2024-04-16 15:06:07 UTC	1369	IN	Data Raw: 60 d9 7d 29 f0 f8 d5 59 df 65 d0 01 ac 8d 5f e3 35 6c cf 28 e9 06 4b 72 fe 41 1c 67 85 d9 03 e5 77 de 62 63 10 22 e4 4a 8d f4 31 2a e0 08 90 b2 a9 a5 ff c8 d9 f7 72 bb e6 26 67 10 8a b0 de 6b 9a 55 63 36 4d 28 3a 93 04 ed a3 21 4e b8 2f bd 9a 45 78 e7 02 34 bc b3 37 4f e0 e3 cc 50 4e 86 40 bc dc 9d 00 98 3a 7e 67 9d 5c 3d 92 d5 7a 14 24 25 d0 59 2a 89 37 7b 31 f2 96 11 b6 90 f6 4a 1b 44 81 c0 5d 05 df 5f be 28 87 28 93 83 d0 7f 4e 0b 4c e3 65 bd af 7b 21 37 fb 11 cd 85 64 60 12 9b 06 9a 79 d8 e8 2d fd c6 01 61 c1 e2 29 01 1d 67 2a a5 7e 03 c1 c8 9e 38 0b a5 71 27 71 38 c5 73 c7 22 f3 b6 89 3d b3 48 8a e0 d5 85 bb 15 33 ff 71 ea 8c a2 28 13 44 bd 18 7d ae 84 f9 8c 97 13 c9 cd 6f 5b 85 73 2c 84 df 8d 1f 6c ec 53 b8 ca 18 df b3 69 4d b9 17 47 99 9f a0 9c 8a Data Ascii: `})Ye_5l(KrAgwbc"J1r&gkUc6M(:!N/Ex47OPN@:~g\=z$%Y7{1JD]_((NLe{!7d`y-a)g*~8q'q8s"=H3q(D}o[s,lSiMG
2024-04-16 15:06:07 UTC	1369	IN	Data Raw: 2d 59 02 dd 6d 7e 17 d6 6c d2 6b 92 b0 22 01 46 7a 0a 6b 94 27 1b 06 c5 b2 49 d4 a9 b1 98 68 f1 6a 86 13 ce fe d8 bf 5b 4b bc ac f2 e0 8f c1 c5 04 3c 0b 90 c1 44 ec aa 85 d0 3b a7 5b 91 f0 39 38 68 71 f9 59 2a 13 b6 9b dc 2f e1 b7 30 3e 49 6c ef 35 d3 a4 b5 db 9a 6e 5e 45 61 00 80 18 a6 40 50 ce 9b 0f a7 94 bb 18 70 41 46 20 bd 7d c3 0f 5f c2 22 71 e5 ac 14 ce 4b 11 e6 0d 4b cc d9 46 c1 c7 cc 9c c6 04 bd 31 8a 6e f8 2a 78 cc 4b dc 7d c3 3d 9b d1 f4 08 dc 44 0a 09 6e 69 57 03 fc 5f 1a 18 60 03 83 23 91 9e 7f 3a 7c f0 9b 50 86 60 be 0e 81 3c 1d b3 88 0e 12 87 8e ef 36 59 9a dc c1 bc 63 16 8c 80 6d 0b ae 4e 7b f5 8d e5 21 ea b3 21 6f 07 88 b5 8b 40 d1 55 6b 3d 78 a7 0a 6c 72 93 0d 5a 05 e5 d1 da 93 fd b7 e6 53 c0 ce 58 af 9b e7 e2 9e 36 69 83 da c2 40 b5 09 Data Ascii: -Ym~lk"Fzk'Ihj[K<D;[98hqY/0>Il5n^Ea@PpAF }_"qKKF1nxK}=DniW_`#:\|P`<6YcmN{!!o@Uk=xlrZSX6i@
2024-04-16 15:06:07 UTC	1369	IN	Data Raw: 8d 7b 8f aa 4c 33 8e ea 0c bc ac 7c 28 6a 9f 85 ba 8a b3 9f 71 3d 22 90 8b 69 09 bf 43 63 53 c3 49 23 40 80 c5 3e bc c6 13 77 ff 20 c3 e6 7e 08 6f d3 44 1e 0b 3d 4f 86 7d ab 16 61 a7 32 e6 43 0b 6b 97 6a f2 2d 40 b4 e5 c3 90 77 37 1c 45 89 a4 b2 e7 6a c4 fe 9e 9c e8 62 61 c7 03 ef 89 d0 c8 4d ad 31 b5 18 e7 ca c8 19 f4 48 02 cc d4 48 2d 15 46 71 40 ef b0 b6 5a 04 e1 a2 19 dd d5 d8 3d 3c 4d 1a a1 bc d7 eb f2 ff 3e 5c ca 08 6b 6a 40 3f 10 39 dd 0c 7a 82 03 2e 12 30 04 3f b3 ee 7f 66 65 c3 cb 6d 19 a0 d7 da a9 10 74 f8 ce 8b 5d 58 2b ed 82 a3 ef fa 98 3b 03 c1 9d 7b c0 ea 3c 96 07 ad a2 6f 04 1b fc f1 04 72 d4 c5 5d 04 31 94 3a 53 ca 3e 0d 6d 2a db 43 2f 80 e7 b0 05 91 22 57 a1 cb 5d 97 a2 39 05 1e 18 77 1a ca c1 de 38 82 8d d5 c6 1c 16 87 b5 42 02 96 67 53 Data Ascii: {L3\|(jq="iCcSI#@>w ~oD=O}a2Ckj-@w7EjbaM1HH-Fq@Z=<M>\kj@?9z.0?femt]X+;{<or]1:S>m*C/"W]9w8BgS
2024-04-16 15:06:07 UTC	1369	IN	Data Raw: e1 1f fc e9 c8 c5 fa 69 37 b5 0b 1e 9a 15 b3 17 ac 50 73 f9 02 84 12 f7 97 59 2a ca 52 db 7d d4 bc 87 31 71 a2 11 75 49 78 f5 35 2a 17 c4 ea 20 10 40 6f a9 d0 03 65 19 93 e2 05 70 12 f2 45 22 cf 71 f9 fd 15 fb 5e bb 8f 3a dc 9d cb 59 48 eb 43 b4 b6 08 b6 b7 42 d8 d1 73 71 7c 38 69 19 8f a1 ba 82 b6 1f 36 e3 9e b2 2a 5e fc e0 04 85 99 8b 3d 87 a4 0c 49 b6 81 90 46 75 29 a9 67 41 88 b1 8c c9 c6 71 bd 7b 46 ee 3c b6 b1 b7 5f 81 bd a6 37 3f 47 f4 d7 20 4a ba 95 1b 97 dc e2 fd bb 86 a5 b7 da 00 6f b5 f5 f9 b1 81 74 b1 cb 2d 6c a3 b1 1c a1 e6 78 da 6c 55 39 72 ce 6d ab 19 ef 4d d3 a7 58 98 66 28 ce 0f d9 a6 e7 fd be bc f9 23 c0 77 3b 0d e1 a0 f3 80 31 02 c3 0a 1d 01 61 f1 d7 13 ad 05 6e e7 b6 ce 8b 64 14 db d7 9c cb c9 42 e7 29 bf de 12 22 be 5d 8e 08 f2 a1 f5 Data Ascii: i7PsYR}1quIx5 @oepE"q^:YHCBsq\|8i6*^=IFu)gAq{F<_7?G Jot-lxlU9rmMXf(#w;1andB)"]
2024-04-16 15:06:07 UTC	1369	IN	Data Raw: a7 c0 98 13 f2 ac 8d 55 93 9e 0c 31 e1 e7 9e 8f 18 f9 35 37 e5 f3 e5 db 23 58 8d 34 a5 2f 8d b1 15 16 20 12 c4 18 1c 0c ed 1a b2 4f 00 8c 46 52 7b 00 28 09 91 bf df 47 12 3c 2c 68 a6 70 df b3 aa 73 60 91 d1 80 df 76 ac 11 14 ec 3b 77 61 92 e9 86 27 98 94 4d 51 62 e1 01 f3 91 b0 e0 87 48 a7 2c ce c1 68 fe 84 b1 2f 2e 0f 2d ea a6 fe bf 80 8e b0 33 2f ec 42 93 11 0a 01 8e 90 06 0c 87 0e 13 b0 4b 8e a8 43 69 fb f4 96 18 70 6b ef ad c5 72 a7 30 db 1c 0a f0 cf 79 aa 87 dd 12 58 07 5a 6b fd 7d fb 2b c5 17 ee 80 44 96 70 5e c5 46 68 45 4e dd 09 89 27 53 72 5d 93 7c 9d bc 11 d8 02 9f 77 01 ee 0b 9c d2 b9 f9 85 4b c0 80 3f ce 86 f8 e6 08 75 7a 2f ce 82 1e e8 15 40 94 a5 29 ec 4f 38 03 ad 02 82 55 55 38 d2 f5 2d 6a 6c ae de 7f 1e 48 64 77 ee fd b8 bc e3 2b 1a ff d4 Data Ascii: U157#X4/ OFR{(G<,hps`v;wa'MQbH,h/.-3/BKCipkr0yXZk}+Dp^FhEN'Sr]\|wK?uz/@)O8UU8-jlHdw+
2024-04-16 15:06:07 UTC	1369	IN	Data Raw: e5 f8 c1 fd 89 02 7f bc 5c cf 88 99 37 b7 66 b7 e7 34 cd 79 11 6d 97 9a 73 dc 39 1b e0 3a b2 85 48 64 1a 58 b1 13 0c aa 90 34 b6 16 70 11 c0 98 83 5f f0 99 ae 06 34 e2 f8 11 8c ae ab 0d ac 81 40 a5 7b 25 bb 48 d6 cf a9 d0 18 79 20 8d 9e bb b5 6a 20 e8 95 39 fd b4 6d 64 f9 d3 e4 e3 38 ab 0c be c7 cd ac 34 5f 39 40 ce 0c 31 db c8 77 89 02 37 d9 7d f3 e2 dc 1e b2 ad 41 44 9f 2d 62 df 27 a9 ee 9a 98 3e 36 aa 00 90 05 a7 74 3e 29 52 c9 3b e1 9f 95 0f 89 7b a3 0e 58 80 62 09 14 40 c2 8a a6 7f 57 e1 df cd 56 98 39 88 85 4e 08 bf 07 45 92 d8 21 d1 2f f8 af 79 86 47 e7 f5 0e fb 20 f8 bb 64 38 2e 15 30 c9 79 52 53 7a a5 91 a6 51 f4 ad d9 4f 15 31 2a 05 36 64 00 9d d7 36 b5 54 89 67 94 90 ed ce cc 37 58 f1 76 6f 97 c4 a8 cd 42 b5 dd 47 62 e5 75 71 d8 08 cd 15 6a 55 Data Ascii: \7f4yms9:HdX4p_4@{%Hy j 9md84_9@1w7}AD-b'>6t>)R;{Xb@WV9NE!/yG d8.0yRSzQO1*6d6Tg7XvoBGbuqjU
2024-04-16 15:06:07 UTC	1369	IN	Data Raw: 89 80 30 71 bb 12 7c a2 ea a0 59 e1 ca 2e e8 6c c0 cd 32 16 51 04 e6 51 a7 12 c7 d6 74 96 0c fa c7 1a 1d e4 e1 9d 9b 48 d8 24 dd 4e 7d 3d 9d a4 63 f6 c2 5f 5d 8f 0d 33 49 05 23 d0 52 d1 0a cc 23 60 ff 53 02 3b 71 85 54 3e d0 ed 20 8e a9 6b a7 b6 ea 62 a7 d1 36 25 0c db 2a 10 27 ac 8f 30 0a 33 c6 f8 16 b0 6c b5 20 b6 94 48 f7 ab 2c 6a 50 ec f1 86 b1 38 b9 67 c0 40 29 12 78 d6 dd 95 9d 8a 2f 7c 42 a5 c2 e1 37 93 be e1 14 c9 10 50 4d 99 18 59 c9 56 ed ac a8 99 01 d1 26 dc ba ae 01 45 56 25 c0 e5 4d d1 3d a7 6f 53 89 2c 2d b0 d5 12 e8 f1 94 dc 01 be 68 c8 2e 4f a7 c9 88 c0 bc 54 31 a4 f9 c9 4b 37 af 10 0a 33 93 1c b9 e8 1e 9c 52 7c da 44 f5 60 3f 08 18 34 d5 6f f9 c6 de bb be 13 9b ff a2 26 66 35 54 0a a3 41 89 c6 c9 5b be 1d a8 98 18 69 f1 68 ae f2 50 12 2c Data Ascii: 0q\|Y.l2QQtH$N}=c_]3I#R#`S;qT> kb6%*'03l H,jP8g@)x/\|B7PMYV&EV%M=oS,-h.OT1K73R\|D`?4o&f5TA[ihP,
2024-04-16 15:06:07 UTC	1369	IN	Data Raw: 3a 94 e8 c0 6d 4f 73 d2 99 db 5e b4 bc c1 b9 c9 dd 6b c0 6e 5d b4 76 03 e7 6f c0 b7 bb 4a 9f 62 f3 a4 93 61 98 ca 31 20 f4 d6 1e fb 69 33 94 7e 27 1e 1a d2 2f 43 8e 4b da f2 35 03 22 18 ea 3f 7a 76 71 6f f0 94 57 c2 7d a1 15 36 53 df 8c 7b 96 0a cf 79 8e 9b d9 0d 17 38 83 10 89 20 bf 71 a1 bd fd a6 9d c4 f2 2f c5 2b 15 3d 47 b1 eb a5 ea e6 e4 42 59 d2 72 17 d5 23 b8 e9 25 d2 95 b7 75 cb 9a e5 37 d2 01 40 82 70 9a 47 e8 c3 fe 72 f0 ad 59 b8 5d dc de 7b fc f4 3d ea c0 3b 56 ee fd 0a 00 82 56 6c 83 30 5e b6 d9 da e5 e7 3a 2e 8f 59 2a ef 96 98 66 8a 26 cb 1a b8 03 48 a8 6e 94 24 a3 8f 21 5d 10 55 66 a9 89 92 a5 e2 89 32 dd a2 c3 07 2c 29 54 c7 83 38 70 2f 18 aa e9 19 df 2b 81 46 6d 2f 29 f4 e1 52 7c c8 87 97 d4 06 2c 09 a0 5f cf f8 dd 49 37 45 66 45 49 d5 43 Data Ascii: :mOs^kn]voJba1 i3~'/CK5"?zvqoW}6S{y8 q/+=GBYr#%u7@pGrY]{=;VVl0^:.Y*f&Hn$!]Uf2,)T8p/+Fm/)R\|,_I7EfEIC
2024-04-16 15:06:07 UTC	1369	IN	Data Raw: fc d4 bd 6b 34 e2 5c 86 7d 70 5a c6 6e b5 32 4a a5 ff 77 5f aa 79 b7 3e a8 f7 bb d4 f4 00 52 f6 0c e3 90 8e be e3 32 5a e2 f8 46 e7 55 fa 99 4c b6 72 34 94 01 37 30 09 ea ad 49 59 0a c7 8b bf d0 e8 35 a7 c7 d4 05 c7 80 66 3b 29 e5 6b 35 20 2d 73 f9 d4 ff b9 c5 ae 79 dc a7 e9 66 07 e7 76 cc fe 29 b3 ca ab f4 70 ba 36 47 10 f0 e9 85 90 52 49 b7 c6 38 34 90 69 4e 4e 20 96 80 a8 62 71 85 86 89 e3 7b e6 37 89 aa 14 cf 75 a4 5f 82 ac 6f 2f 0c e8 18 af 8f 81 97 f4 ab 82 9c 67 39 78 ce 6d a5 86 9a 1b 28 ef 96 ce 05 7f 6d bf 8c 08 0d 13 0a 27 a3 9e 81 67 51 7e 6b 88 a8 d3 ca ff ee 67 90 3c 10 c1 47 b4 ac c2 e0 01 15 53 51 18 46 e9 e0 78 09 b2 97 3e 17 2c 76 5e 94 42 3d a8 10 6f 48 e4 8b dd 47 5d e0 66 4d 51 b9 91 be c3 d0 44 7f 34 e7 c7 05 09 ea 5a 1f c5 d0 a8 25 Data Ascii: k4\}pZn2Jw_y>R2ZFULr470IY5f;)k5 -syfv)p6GRI84iNN bq{7u_o/g9xm(m'gQ~kg<GSQFx>,v^B=oHG]fMQD4Z%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.11	49932	84.32.84.114	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:06:04 UTC	623	OUT	GET /wp-content/uploads/2018/10/1-7.jpg HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://niceindiatravel.com/about/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:06:10 UTC	393	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:06:10 GMT Content-Type: image/webp Content-Length: 166132 Connection: close Cache-Control: public, max-age=31536000 X-Hcdn-Image-Optimizer: f:webp q:85 w:1600 alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 7d678f7915ee1f8101d5c2459a02748f-asc-edge4 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 5.629 Accept-Ranges: bytes
2024-04-16 15:06:10 UTC	976	IN	Data Raw: 52 49 46 46 ec 88 02 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 04 03 00 03 02 00 56 50 38 20 48 88 02 00 50 0c 05 9d 01 2a 05 03 04 02 3e 49 1a 89 44 22 a1 a1 1a dd ee 68 28 04 84 a1 c0 00 db 64 d5 52 1f 69 3d 92 fc 1e 70 dc d7 e3 fc 75 bf cb d6 17 c8 ff db f2 e5 f7 8f 00 1f f6 fd 59 7f 79 ff 9b ec 1b fd d3 d1 df ff 2f 58 7f bd be a4 3f 72 7f 71 3d ea 7f f7 fe f0 7b c4 ff 2b ea 07 fd bb ff 17 ae 77 aa 87 f9 ff df ff ff ff 04 1f ba 7e b5 5f fe 3f 7b 3e 1d bf cc ff f4 f5 83 ff c1 ff ff d8 03 ff f7 b6 bf f0 0f ff 9d 60 f1 21 e1 2f dd ff 2a fc c7 fc 97 e7 9f cb 7f 71 ff 2b ff 3b fc 27 ee 5f d7 af d2 3f ec ff 8e ef 6d ea 9f c8 7f da ff 2d ea 17 f3 3f c0 9f b2 fe fd fe 87 ff 07 f8 bf de df b8 3f bd ff d5 ff 21 f9 37 e8 5f e7 bf b9 ff d1 ff 1f f9 3f f2 Data Ascii: RIFFWEBPVP8XVP8 HP>ID"h(dRi=puYy/X?rq={+w~_?{>`!/q+;'_?m-??!7_?
2024-04-16 15:06:10 UTC	1369	IN	Data Raw: a3 39 1d a6 2f 85 b6 4c 31 95 e1 b7 47 8a df 50 d4 d3 30 c7 a9 02 72 a8 3c 6d 2a 48 4f 49 34 37 0e f1 26 b4 57 20 44 82 b6 6a 79 c3 28 05 ed 0f 4b 57 a4 4f 84 57 1c 6d ab 64 aa e5 07 fc 7d 0c 63 63 d9 1b 05 35 f4 35 ab 32 54 ae ad d1 17 2a 11 5c a7 b7 fb 60 db c4 70 25 c5 a9 a1 15 3e 05 5b 1c f8 8b ac 73 eb de de dd 17 f2 c3 f2 bc fb f8 49 6f 47 ca bb 83 8a db 20 bd 87 7f 83 d8 00 05 26 d6 d7 cf 02 97 73 e3 49 bd d5 a9 82 bb 21 98 38 e9 9d a0 6e aa 2f c1 97 b8 19 2e 2b 98 3f b6 ea f6 02 90 94 07 12 31 e2 d4 a8 e3 aa 55 f3 75 e5 15 09 13 56 4e d9 38 ed f8 b2 75 fe 86 d4 f5 8a 09 c0 d0 9e e4 65 79 80 6b ec b3 0b 7a 14 5b 42 44 4d 0b 99 ca ce 20 e9 6a 12 a4 78 b6 b5 d7 a7 0d 37 74 34 81 47 f0 fb 4a fd 5c 94 4c 07 27 3b 5a e1 44 12 b2 de fc 35 34 08 71 f4 db Data Ascii: 9/L1GP0r<mHOI47&W Djy(KWOWmd}cc552T\`p%>[sIoG &sI!8n/.+?1UuVN8ueykz[BDM jx7t4GJ\L';ZD54q
2024-04-16 15:06:10 UTC	1369	IN	Data Raw: 30 82 b1 62 7b 81 f7 04 8a 51 af 13 4f c8 cd fc 09 ec ad 60 50 7a 70 fa 1e 6f db 72 6a 09 14 1c b3 ee ef 54 5e 9b 47 44 a6 54 b4 43 4b de 9b b4 0d b3 e3 6a 09 e8 aa 99 d9 d5 49 27 99 e2 b4 72 df 18 80 83 72 fa aa 37 f9 54 90 4e b2 82 55 ab a6 19 c3 4d 39 bf e0 72 57 fc 83 4d 0b 5a ff 20 20 46 3c 5e f8 d1 53 14 2b ee f3 0c e8 a8 0d c8 bc 6c 55 20 7e ac c4 68 1b 3f 57 94 3b 71 c0 2c 81 40 f1 0b 08 d7 95 28 95 cf fd 2b 5e 1a 61 74 2a b1 e8 b0 e1 04 a8 bf e5 07 aa a7 69 09 76 a9 cc f2 ef 5e af bc f8 7b b3 d9 86 c2 d8 eb b7 40 7d 03 99 0e db 5e 75 a9 f5 62 e3 f0 c3 20 e7 d8 89 53 31 58 ab 2e 05 9d 0c 3c 01 5d e0 04 5e 56 ab 9f 2a a4 97 25 ce fe 67 85 aa fe ba 6e c9 82 b5 86 e0 d9 ec bf 1e e7 8f 8c 0d a9 c9 a0 0d 07 e5 fa b6 28 37 e4 0a a3 02 76 af 41 69 0c 81 Data Ascii: 0b{QO`PzporjT^GDTCKjI'rr7TNUM9rWMZ F<^S+lU ~h?W;q,@(+^ativ^{@}^ub S1X.<]^V%gn(7vAi
2024-04-16 15:06:10 UTC	1369	IN	Data Raw: bf d2 8a 13 bc ab 61 60 14 23 97 20 d5 66 21 ed a5 f0 b2 30 5f a3 52 da 20 ed d6 85 06 c8 61 5d 82 44 80 ff ab 5a 75 9c ad 1f c1 4e b2 20 73 61 d1 1e 33 38 e1 51 44 b3 07 87 f3 d4 1e 30 de bd b2 9e 82 84 71 9a 39 7a 6a eb f9 f7 19 21 8f 1c e1 22 3a b8 0d 00 b5 0f ac 69 a1 07 95 67 12 39 0f da f0 e4 bc ca c9 6a 88 7f 3c cf f1 ca e3 8e 2e 7b b5 60 68 46 74 af 7d 72 c0 96 ab 62 53 63 fa e1 f8 f0 43 05 99 20 35 e3 92 b8 c1 0e 28 0f bf b0 14 ad 03 9c 18 73 51 08 36 f9 9a be ee b4 b2 10 af 24 ef f5 a0 18 24 8f 50 47 6e a9 39 7d ce 5e a2 c0 c5 9b c1 f1 5c 6b 3d 3c 7f 5d ae f0 06 ef cd 08 a6 25 ca 61 f0 fc 9a 13 c2 2a 6a 30 26 3f 67 fc 04 3c a2 e6 c5 a4 70 d4 ce c0 fe 33 9c aa 28 7f eb 89 5a 53 a0 82 66 80 47 1c 34 16 fd 45 db f0 d7 31 2d 05 c9 fd b9 a9 fa d9 77 Data Ascii: a`# f!0_R a]DZuN sa38QD0q9zj!":ig9j<.{`hFt}rbScC 5(sQ6$$PGn9}^\k=<]%a*j0&?g<p3(ZSfG4E1-w
2024-04-16 15:06:10 UTC	1369	IN	Data Raw: cd 77 3f 8f 4f 12 99 4d 2d 19 71 1c d7 f3 af a6 34 52 35 7e 44 2b e1 ba 43 6b 0b f2 e1 25 78 56 60 b1 05 6e f9 87 49 8b 6f 67 a8 d1 1d 8f 8f 5d 1d 68 0c fd d8 c2 10 74 75 76 27 8a 1e c0 51 6d c4 46 56 ca 99 cb 70 41 38 82 cb e0 45 14 34 cf 8d 02 2b e1 d7 03 bb d4 c4 f0 34 61 bc ba 51 f5 2a 2d 8f eb 0b a9 af e6 90 60 88 ed 41 59 c5 cb 4f 5b 4b 44 b7 41 e4 59 83 f1 84 76 12 97 43 18 83 49 da 7f ba ca 08 4f fc 64 58 08 67 49 0c 9a b0 aa 30 ff a8 e1 40 73 c9 6e 95 fe d1 0b 6c 49 c1 94 53 60 74 0e 1b b3 eb 76 e0 3c c8 d3 a2 a0 82 74 a5 0c 94 9d 56 e8 6c 31 3c ca 6a 30 6b 55 bf a0 24 2b 14 e0 79 7e 7b f0 48 09 eb 18 03 71 c3 80 e0 6c af b1 1d af 5b 6e 58 83 e8 89 67 f6 a5 58 ec 80 c3 5d a3 29 5c c6 88 2e 9b 54 f2 3e b6 f8 bb 4e dc 74 25 de f4 9e 53 47 dc 60 50 Data Ascii: w?OM-q4R5~D+Ck%xV`nIog]htuv'QmFVpA8E4+4aQ*-`AYO[KDAYvCIOdXgI0@snlIS`tv<tVl1<j0kU$+y~{Hql[nXgX])\.T>Nt%SG`P
2024-04-16 15:06:10 UTC	1369	IN	Data Raw: 8d f0 14 08 7f 05 57 50 85 3f a4 21 ef bf 64 d0 48 21 c0 19 2f 83 b5 b4 02 ea 97 e7 f1 bd d8 9d b6 51 55 92 aa 13 17 28 ae 15 5a 75 a3 6d 25 1f 4e b1 93 fb 8e f8 94 d5 28 12 37 5d df 43 11 80 d9 e3 d4 fb 0d a5 d0 40 c7 43 34 68 37 1c 73 d3 e2 ed c4 be f6 a6 72 bf 68 f4 89 67 33 7e 79 e3 b7 6a d7 c8 45 51 7a 6b 77 1f 99 b0 a6 7d 6f 5f 0f e5 c9 62 f0 ab 13 30 00 f2 a5 ec cf 91 46 6f ea 97 49 0f e2 4c 24 8c ec 86 8c 1e f2 11 82 08 d0 aa 4c fd 69 92 d3 66 9e 3f ed bb 2e d3 df f2 6c ba 62 6e 8b e5 08 01 e2 c7 a2 04 4c 11 a0 bb 92 02 3d 6e 7e f7 97 5c 73 ae a0 a2 e7 a3 b2 32 11 87 9e dd 14 b2 94 1a 82 59 1e 1a ad 4d a1 5d c2 f8 f0 1e 3b 20 1b 12 a3 7f 59 d4 14 ad e1 2b 41 f4 33 f3 05 fa a4 e9 f9 99 63 c1 fb c8 9a e5 e0 ce 8f 8c 59 52 78 b6 8b 40 93 fd e7 5b ed Data Ascii: WP?!dH!/QU(Zum%N(7]C@C4h7srhg3~yjEQzkw}o_b0FoIL$Lif?.lbnL=n~\s2YM]; Y+A3cYRx@[
2024-04-16 15:06:10 UTC	1369	IN	Data Raw: bb f7 88 8a ea bd 94 06 8a 75 28 6d be 66 64 f9 67 35 c9 af fd 87 c6 3f d4 f2 7a ab b4 06 64 b4 00 0b 4c a5 0b 54 86 d1 8e 27 c7 71 b3 d9 c9 a8 c6 bd 10 04 c2 5b 87 24 e1 39 9b a7 e4 17 30 63 ce ca 5f 95 f1 91 7f 0d 3c d9 25 46 64 99 44 56 27 63 ce f4 09 5c 5a b7 c4 b7 6a ba db b7 8c fe eb 6c 5a ad 98 47 79 4f 46 e5 da 49 71 5b 9d 71 bb ce 15 d9 ae f3 91 ea 0b 79 61 21 48 ba 8a b9 9a 72 65 2d ea 67 ce 32 7f fc 89 44 9a 5d 88 0f 7f 22 8b f1 bd af 46 5f 09 41 9d 24 80 75 40 08 17 33 ee 56 05 36 77 4d c8 15 76 5c 3a 08 c3 0a df ae 8e b4 44 23 12 8c b2 a9 b4 68 ce 46 bc 7e 4c 5d de e8 73 67 76 dd 65 e2 db 09 bd 94 00 94 72 a4 a5 eb 12 f3 cd 5d 89 8e 36 67 ab d1 a2 9f 4c e2 2b e4 b1 13 7a fd 85 62 e7 ce b2 a8 6a 15 cb 94 44 5b 28 bd 64 43 27 3c 83 68 f9 6d 18 Data Ascii: u(mfdg5?zdLT'q[$90c_<%FdDV'c\ZjlZGyOFIq[qya!Hre-g2D]"F_A$u@3V6wMv\:D#hF~L]sgver]6gL+zbjD[(dC'<hm
2024-04-16 15:06:10 UTC	1369	IN	Data Raw: 29 f3 3c 92 82 44 8a 1f 15 0a 17 90 bd 56 1a d9 94 b3 75 7f e4 ab cb cc a5 7a b9 73 02 65 2a 0c b1 5d f1 96 e4 94 e1 1f 34 c7 1f e7 b3 37 32 c2 0b 17 80 e4 dd db 34 72 e4 56 fc fc 89 f0 37 e0 97 7b be ba 22 37 a5 55 7e f7 e9 ab fd 65 1f c0 ff 0c e8 b7 26 27 88 49 4d f7 b4 10 03 ca 1d 05 ea e4 53 70 7b 59 ae 02 29 f7 11 5e 15 15 f0 a0 ee e6 57 5b b8 48 dc 71 ee 4e c3 90 8e 24 93 02 d5 9e 0c 5e 9d 3d 0e de da fb 98 0f 53 6d f0 b0 c5 fe d0 60 a6 d7 e3 3e 11 53 d2 2e 77 01 96 c7 7a c1 61 28 7d 9b d7 fe 65 86 ee c0 80 5b 62 5d a0 cb d7 ec 6e fe a6 6f f0 f0 2c 87 33 58 e3 d5 00 de 7f 1c 8d 9f 07 7a 65 c1 ef cc 83 15 af e1 1e 05 96 13 a4 8f 95 3c b8 9e 42 4a a9 3c 09 2e 2f 7b ea 39 bb ca 95 be 83 da 50 a9 5d cb 22 e6 43 fd 42 08 a5 74 a7 6f 8a ca 56 77 8d 8a 98 Data Ascii: )<DVuzse*]4724rV7{"7U~e&'IMSp{Y)^W[HqN$^=Sm`>S.wza(}e[b]no,3Xze<BJ<./{9P]"CBtoVw
2024-04-16 15:06:10 UTC	1369	IN	Data Raw: 38 b8 e6 f6 48 26 f1 0a a5 84 9f 8a 8b b6 6c 5a 72 2e 1b 5f 1d 26 fc e8 0b 1e df 82 cf 1b 64 a6 71 e8 8b c0 c5 be 0b ca 9d 57 e6 9b d6 53 91 1b 67 05 ae 83 81 bf 21 76 a1 5f 75 89 6f e1 01 07 9d 03 89 0e 1d ad a7 e6 b8 59 14 f6 bc 17 79 18 3c 4b 9f 12 e4 1f 68 8e 20 7a e7 8a 63 ea 64 52 e0 35 36 99 c2 5a c3 22 69 d9 c3 00 92 f8 69 8e ec e2 aa eb 69 ad 61 d2 82 12 ae 94 ba e5 ec cb 9b 23 6e c4 d2 14 de 51 e0 ad 9d 53 a4 b0 8b c6 51 ab 23 bb 38 e3 2e 22 dc c0 aa a1 cb ee 16 dd b7 91 92 f3 40 34 a5 db f8 a9 50 45 88 cf b9 5b e6 0e 3d 2c 13 5a e3 43 55 e8 40 91 70 81 a0 94 6f 44 fc 35 02 ad b7 ef f9 78 d5 cd f1 36 45 97 ce af b2 68 fd 66 7a 19 6b 2c cd cc e8 f2 85 9e 75 d1 b1 34 24 a2 c8 59 de 31 49 29 2d ea 07 22 d3 28 28 a2 75 06 2d f4 f1 bd 73 e1 3f 27 98 Data Ascii: 8H&lZr._&dqWSg!v_uoYy<Kh zcdR56Z"iiia#nQSQ#8."@4PE[=,ZCU@poD5x6Ehfzk,u4$Y1I)-"((u-s?'
2024-04-16 15:06:10 UTC	1369	IN	Data Raw: e7 eb 6f ad a4 80 5a 94 a4 c6 23 fa 69 65 5f 90 df 10 e5 b4 4e fd b9 aa de 2d b5 79 4b 7f e9 3d b6 5a 99 62 f9 cf 5b 48 6c b3 48 ac 76 a8 f1 b0 db 02 83 a4 4a 44 fb da 9d fe e8 32 c8 04 ff da a4 84 b9 d7 22 60 4d 13 31 07 ce 68 bc a1 4d 89 ab 07 46 d2 00 61 3f b3 40 b5 62 b5 c0 27 88 7d 9f 75 8d 46 15 8b 14 d2 5c 6d b1 58 fb 52 ba cc d4 06 09 dc d1 9d 64 fd 64 a1 08 9d 6e 3e 2d fb 19 ef 39 4c 66 38 70 fb 14 7e af 1e 72 a7 48 ef a2 75 7b 8c 1a f8 d8 0e 94 be 59 8d 42 ab 99 ec a3 68 2f c2 b5 db b1 f2 87 93 00 b8 c4 b5 5f a0 15 bf bd 33 fc fc d0 75 1b 14 45 a3 72 f6 5e 54 b0 cd c8 4c a4 24 61 48 f3 fb f1 bd e6 c5 af 15 65 cb cd 70 dd a0 3e 6c c9 7a 96 35 85 19 2d 4e 85 38 41 a4 96 ec 01 be f1 88 e7 2c 0a 6f 53 9e 7f ef 28 af 5c d0 85 f4 c6 23 29 f2 a0 c4 82 Data Ascii: oZ#ie_N-yK=Zb[HlHvJD2"`M1hMFa?@b'}uF\mXRddn>-9Lf8p~rHu{YBh/_3uEr^TL$aHep>lz5-N8A,oS(\#)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.11	49934	84.32.84.114	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:06:04 UTC	623	OUT	GET /wp-content/uploads/2018/10/2-8.jpg HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://niceindiatravel.com/about/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:06:08 UTC	393	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:06:08 GMT Content-Type: image/webp Content-Length: 115492 Connection: close Cache-Control: public, max-age=31536000 X-Hcdn-Image-Optimizer: f:webp q:85 w:1600 alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 9351584a5cb5d5ee36d2b684b3c24b49-asc-edge5 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 3.785 Accept-Ranges: bytes
2024-04-16 15:06:08 UTC	976	IN	Data Raw: 52 49 46 46 1c c3 01 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 04 03 00 03 02 00 56 50 38 20 78 c2 01 00 30 0a 04 9d 01 2a 05 03 04 02 3e 51 1e 8c 44 23 a1 a1 17 db f6 08 38 05 04 b1 b7 68 d3 08 9d 60 f1 f7 c1 d3 53 1e 94 92 5f f0 ba ab 65 ff 89 7f 2b fd 17 a3 e7 36 f8 b9 20 3f ef f6 07 f4 9f f6 bc c4 be 0f fb 1f 9c bf 99 df f3 bd 5a ff 54 ff 71 ec 13 fd 63 d0 c7 ff 4f 5d 9f e1 3d 14 fe ef 7e f0 7b d0 ff e6 fd e4 f7 c9 fe 33 d4 67 fc 37 fa ee b6 ef f2 9f fc fd 87 ff a1 ff d4 ff ff ed 39 ff e3 f7 a7 e2 2f fc 27 ff 3f de 4f 6c af ff fe c0 1f ff 3d b4 bf 80 7f ff eb 6f e4 ef a3 4f 9d 7f 23 fe 33 f2 33 cc df 1a 9e b5 fd df fc b7 fc 8f ef de df bf ee ff ab f0 85 d4 ff f6 ff db fa 87 fc e3 f0 b7 ee bf c0 7f a4 ff ad fe 4f f7 97 ee 1f f1 7f f1 7f c7 7f Data Ascii: RIFFWEBPVP8XVP8 x0*>QD#8h`S_e+6 ?ZTqcO]=~{3g79/'?Ol=oO#33O
2024-04-16 15:06:08 UTC	1369	IN	Data Raw: 51 cb c6 69 65 09 f2 30 86 ca 96 a9 ce 13 bd 60 6d b2 e1 a1 7a b5 ce 55 08 18 c4 b6 0a 9d e2 07 71 fb 05 1d b3 dc d4 e0 3a bf 64 f0 2e c5 dc 61 af 2c 22 6f 12 6b 92 c3 12 bb da 81 3a 93 14 36 d7 91 e2 fa 21 bd fa 4c 0b 53 bd 71 fb bf 30 a6 1a 9a aa e9 5c d4 b9 1a 02 90 74 41 6c 4a 56 70 56 e2 9a 31 e5 eb 9c 1c ef ff f0 d5 5b 0f e1 fd 8d b3 dd 12 07 9a fa e3 ed 6d 4c 82 fa 7f 05 b3 71 ad c5 e4 7a a1 ad 36 ca 6b 11 ff ff 76 41 b3 98 be c7 bb ab b4 85 b0 46 c6 ca 93 be 6a ed 36 f9 83 f2 15 9d 1e 5f e3 00 5e 30 05 cf 3d c0 6c 9d 95 7a e1 2c b2 f1 f8 7d 37 77 74 bf 8f 63 d9 3d 0a b6 9e d3 6f de 05 49 f7 c0 49 16 e1 bf d4 2f 3f 47 fd e6 fa 99 e8 77 b5 48 72 f8 93 d6 6f 7b 38 19 06 2e 5e 9a 68 a9 d8 5b 5f dd df 58 92 a0 ec ed e3 b1 fc 0e 36 55 da fc 52 12 ba ed Data Ascii: Qie0`mzUq:d.a,"ok:6!LSq0\tAlJVpV1[mLqz6kvAFj6_^0=lz,}7wtc=oII/?GwHro{8.^h[_X6UR
2024-04-16 15:06:08 UTC	1369	IN	Data Raw: 27 d8 d8 79 c9 15 ff 4d d4 19 13 14 5e 92 01 ea 12 70 a2 28 17 b6 c4 b3 37 5e 31 fd ff 4b ea 78 66 d3 ed 03 9d 9d 6a 1e 1b 14 c5 89 df 43 81 6b 58 cb 58 05 41 4a 1f c3 68 95 c7 3f 45 65 cd 98 bb 15 5f d7 ff ac 6b 1b 03 b6 30 49 99 64 8e 70 f2 fa 14 89 d9 6c 1d d6 33 90 14 8c 76 0c 44 a9 e0 35 b6 5c 52 3c 45 c2 3f 2d 46 c6 b5 b2 4c b5 0a ff 45 23 bb cf c1 34 f9 0d 7f 6e fa 6e 9b 27 fb f5 0b 8b 5f 71 de 19 83 0f e5 a2 f8 fb 82 fa 90 e0 87 d4 52 dd 8e 8b 28 de 50 60 d3 97 c0 a5 61 9c 49 ca 05 59 ac cf c6 e9 5d 6e 6f 1a 7e 79 9a ac fe 16 02 84 f1 a8 50 5a b3 ec 5b 57 fe bd 81 c7 1b ff 64 20 d4 06 45 b1 ea 3e 6d 38 98 c3 c7 c6 4f ea 20 b2 d2 05 1f de f5 a9 0f 8e 5c 4d 8f b5 6b 3f 4e bb 93 69 df cf ab 89 19 27 e2 81 b0 4f 86 67 b4 2b 16 f6 6e 93 0c ad 5e fa c7 Data Ascii: 'yM^p(7^1KxfjCkXXAJh?Ee_k0Idpl3vD5\R<E?-FLE#4nn'_qR(P`aIY]no~yPZ[Wd E>m8O \Mk?Ni'Og+n^
2024-04-16 15:06:08 UTC	1369	IN	Data Raw: a4 ba 07 a4 25 da 8e f0 5a 0d 29 8f 6e fd 03 31 68 1b 36 f1 21 0b 31 5c 6f 68 4d bd 64 58 a5 28 37 21 f6 57 c0 2e 05 62 0b 82 d3 eb 27 d6 f2 98 6c bd 54 e2 9e 25 bf 8a fc 41 cf dd 02 e2 dc ad c5 ee de fe 9f d2 6c dc fb f1 ff 3a cf 4f 0f 39 87 76 0a 57 8e 27 f7 3d 04 92 23 f5 08 83 01 9b 9a 2e 1b 51 94 45 4b 87 57 88 ef 3a 73 39 10 df 86 95 ec e8 9a c9 9e 77 8f 30 23 31 54 05 8d 8c 10 02 1e 58 56 89 19 a7 02 8b 5f df 63 73 80 f8 96 eb b0 8e 37 4a 15 d6 8a 56 85 d8 cf f4 ec 7f d6 bf 98 9d bd 93 28 97 33 02 06 80 54 57 49 e2 a6 09 16 5f 3d 8c 2f e3 3d ee f2 a3 c0 de 22 d3 65 c9 bc 7f 2d e9 44 de b4 40 5b 0d f6 16 cd ea b9 40 ca cc 55 ae 55 ba 0a f0 34 91 07 de c0 7e 86 1c 1a 85 38 81 e9 ba 73 b3 11 97 7f 91 89 1c 25 fd 86 7a d4 ec f4 c9 72 65 9b 8c cb c0 df Data Ascii: %Z)n1h6!1\ohMdX(7!W.b'lT%Al:O9vW'=#.QEKW:s9w0#1TXV_cs7JV(3TWI_=/="e-D@[@UU4~8s%zre
2024-04-16 15:06:08 UTC	1369	IN	Data Raw: 41 a6 67 3c 74 8f 81 a5 06 e7 5b b1 3a 4f f9 ba d7 fa 90 42 4f 00 1a 0d 20 0c d3 96 03 a8 ce 4b 49 e5 63 70 1d 74 75 bb 1e dc e0 98 69 0d b3 41 16 e2 f6 d1 04 43 95 55 cd 0d 7a 48 10 cd 44 48 cb bf cc 93 04 5b 06 12 eb 65 fd 62 8b 1f 43 41 f4 01 95 57 c1 f3 68 b7 19 71 99 ca c2 58 50 84 8a fe c7 f5 ce a3 50 15 b8 b0 54 9b 7e 19 be c3 6a c4 4d 11 97 8b 79 81 9e 27 71 fa 84 4b cb 5d 79 26 df 0f b3 29 f4 f7 a5 97 b3 d7 b0 ac dd 1e b9 15 75 24 fd 94 e4 29 70 4c e1 99 7e 6a 10 84 26 03 76 12 bd 22 99 fa 5a 46 9c 35 78 d4 02 c0 17 ec 54 fa eb 86 20 03 30 6a 9b 2d c7 b7 a8 eb 66 f8 c2 5d e0 20 fa 22 f2 6b 06 04 31 98 53 c8 94 15 eb 89 7e 9f 06 1b 9a 67 08 0b f9 88 1c b0 a5 fd 0e aa 51 0a 4a 3b 4a a6 0f d6 87 e8 9f 05 74 70 9d bc fb a6 f4 b6 de e7 45 75 70 6e 22 Data Ascii: Ag<t[:OBO KIcptuiACUzHDH[ebCAWhqXPPT~jMy'qK]y&)u$)pL~j&v"ZF5xT 0j-f] "k1S~gQJ;JtpEupn"
2024-04-16 15:06:08 UTC	1369	IN	Data Raw: fb 5c 79 d0 96 bd 8c c0 bc 01 c4 ff c3 19 8f 86 f3 38 60 30 c8 8f c5 bb cd ff f3 ab 96 06 dd b4 52 d2 10 f5 95 ad e4 0d d7 e4 cb d1 5d d6 ed 7a 40 4e 01 92 14 f8 8a cf 97 92 f4 51 cd 88 51 38 d2 6f ff 50 8a 10 d2 08 66 8d 0b b1 d3 a3 dd f8 ba 33 16 cf 8b e1 a7 bd fe 42 05 a2 63 16 2c a5 5f 73 8d a5 90 b2 9d a8 4b 8f eb 32 67 3d 7a d5 98 7b 93 b5 30 39 d7 59 2b 1c 52 1c af ac ad ba 0a 59 17 ec 7e 3d 60 34 5b d1 7d 6e bb bd b2 a7 37 f1 36 8f 0a 39 7e 3c bf a8 8a 76 ac 28 17 84 56 8b 4a 69 8c 37 50 5e 4f 50 dc 50 30 d1 01 63 08 b9 a1 c2 ca a3 a0 17 c3 c8 cd 65 84 52 3c 2f a4 3a 4e fe 99 5a ae a5 a9 42 65 2f cb 77 7d d0 55 0b d4 b1 18 b4 5a 74 ce 1a da 5d 07 fe 9f d0 7d 27 43 d4 8e 29 3b 05 61 88 7b a4 e8 6a fe 40 d0 2d dc e6 a1 e9 ae 51 a8 a4 79 a3 ea ea 0b Data Ascii: \y8`0R]z@NQQ8oPf3Bc,_sK2g=z{09Y+RY~=`4[}n769~<v(VJi7P^OPP0ceR</:NZBe/w}UZt]}'C);a{j@-Qy
2024-04-16 15:06:08 UTC	1369	IN	Data Raw: cf 7e 34 2a fb c9 2b c5 78 fd c0 78 06 f7 0f f6 6b d8 77 80 33 05 84 40 57 80 0c 78 3b 09 02 c9 52 ff e1 04 ae 33 09 c5 1f 8e f6 0f 93 76 a1 74 11 da a8 9d 28 e7 21 4d a3 ee f1 26 30 66 68 15 5a 45 80 d2 6d f7 25 00 f2 68 cf 37 96 f8 70 f8 b4 25 ff da 07 91 70 0f 28 1e fd db ff 55 db 32 77 3f 6f 59 98 ea 8c 01 fc b9 b4 64 e3 52 d1 a0 fd d3 cf 88 30 0c 44 20 72 89 ff eb 53 cc 74 9f 5a b9 e2 d2 31 1e 7e f8 eb f5 33 a1 3b ae f6 a1 01 61 16 cc ad 06 eb 9c 08 3b c0 b9 84 ca a3 a1 af 68 66 a9 b9 8b 8c bd c2 c0 48 b9 e4 b3 13 22 35 9a 36 af fe 0f 53 53 14 b3 17 cd 79 f4 b4 f4 84 4e c8 71 36 8e 9a 99 4b 76 7c 8b 5e f9 21 ac 1a e2 4e c3 30 4c 7e 70 48 3f b7 8e 20 76 46 7c df d2 52 cf 8f 33 01 53 cb 0b 5d 3f 06 12 4d 50 b1 41 e7 af 2a d5 88 8f ec b8 11 a6 09 48 4f Data Ascii: ~4+xxkw3@Wx;R3vt(!M&0fhZEm%h7p%p(U2w?oYdR0D rStZ1~3;a;hfH"56SSyNq6Kv\|^!N0L~pH? vF\|R3S]?MPAHO
2024-04-16 15:06:08 UTC	1369	IN	Data Raw: 85 78 18 ae b1 ac f9 e0 cc d7 74 94 80 e1 5c 06 f9 ec e6 74 15 a5 24 66 e9 e6 b0 09 f2 d5 cf 54 6a 51 1e 57 5d be 2d 9b 49 eb a2 4f 5a d4 ec 99 23 57 6f 91 a5 07 0f f9 72 55 da 34 8b 84 59 08 b2 e4 69 54 4f dd ca 03 70 cd c0 61 d4 dd 5c 4c 3a 21 91 1c e4 19 f9 4f 66 fb 41 26 00 27 ca 0f 6f de 69 c0 9c c4 51 9e 5c 00 d3 35 34 4a 14 61 f0 d2 2a 17 b9 39 99 e6 65 a8 77 e2 e1 68 c4 e9 15 96 86 ca 08 c4 d1 fd 37 9d 3f 63 7e ad 8b 0c 59 39 aa a8 e4 dd 59 f9 3e fb 3a b3 57 75 27 5a b6 8c 41 fb 7c 6a f9 c1 50 93 db 20 62 aa 91 25 6e c5 66 c5 e6 92 bd 6b ab 33 4b 65 17 39 6b 98 a7 92 86 f5 3d 44 30 0d 25 7a 84 31 df 79 06 1c 59 1d 21 42 52 30 37 0e 19 4a 66 8c 7e 1d 03 53 76 21 71 23 c6 10 81 f8 e1 da 0a 15 1d f1 e0 1f c4 e9 04 9a d1 11 9e 8a 9c 24 07 78 88 c8 5e Data Ascii: xt\t$fTjQW]-IOZ#WorU4YiTOpa\L:!OfA&'oiQ\54Ja*9ewh7?c~Y9Y>:Wu'ZA\|jP b%nfk3Ke9k=D0%z1yY!BR07Jf~Sv!q#$x^
2024-04-16 15:06:08 UTC	1369	IN	Data Raw: 34 73 c4 2a 5e 7c e2 3e 4a d7 8b 1f 34 0f d8 93 ae 19 34 2a b5 a4 dd c7 86 f5 35 73 44 e6 80 3b ee cc 7b a4 c5 17 05 1e a6 cc 1d 34 7e fb 8e d5 19 72 0e 4b ab 91 a4 03 08 5a de 76 10 b6 61 8b d0 34 21 c3 83 7e 82 11 e1 fd ae 99 25 cf 00 32 b8 54 d9 0b 33 e7 72 d7 f8 ea f7 61 37 ff 92 0f 94 b6 44 3e bb 7c de fa 49 34 e5 d9 a5 46 44 df 1a 46 0e e6 61 0f 99 29 65 ce 99 30 20 ba 40 10 53 1d c6 2f a8 04 b7 b0 4c 11 f2 21 62 de 42 d2 8d 8e f0 22 c8 72 e4 94 29 4c 99 6d ac ee 09 e3 2e 3c 0c 78 50 61 6c 3f 75 70 ff cd 15 4e 0c 51 64 4c 29 f5 ef df f2 74 57 b4 af 70 0f 9b 12 5d ad bc e1 88 17 dc 10 e6 16 d3 55 84 7e d5 ae 2d 35 68 2c 93 59 03 92 76 6c 27 db 2c 79 7f 6f 1a 3d e8 74 d9 55 65 45 d9 38 c7 d6 d0 83 87 bc 96 c1 1e af 28 ce df 8b 1e f5 ee 19 ae b8 8c 58 Data Ascii: 4s^\|>J445sD;{4~rKZva4!~%2T3ra7D>\|I4FDFa)e0 @S/L!bB"r)Lm.<xPal?upNQdL)tWp]U~-5h,Yvl',yo=tUeE8(X
2024-04-16 15:06:08 UTC	1369	IN	Data Raw: 35 66 ba 4c 1d 7a 2c dd 77 1a 8c a8 6d 2f 5b 70 f5 ab b2 4d 3b 26 47 cc 21 e4 a4 dc 77 58 af 97 9e b8 61 ca 72 c2 44 9b 73 2c 97 66 69 ce 76 47 45 65 90 9f fc 63 53 97 0b 14 66 67 9f a3 68 41 92 9a 72 f1 1a fe e6 c2 7e 3c 22 f4 8c ce 7b dc f8 4d 52 6d f1 0c 93 f2 6d 3a 05 f2 5e 7d 4a 14 3c c4 32 c1 ae f9 89 cd 8d 00 59 9e 99 a4 ee b1 54 25 fd 44 3f ae 1e 9d b1 cf 7a a6 83 52 6a 31 a2 00 e0 73 26 3b 37 62 8d ca aa 23 f5 89 2d b3 b8 f4 77 59 cb 7b 7e 64 14 79 21 65 85 27 86 b1 ec 29 df c1 5e 0f 3f de 72 4a 54 17 26 c8 61 04 d5 8c 51 3e c8 61 3c ef 4e d7 1d a9 91 99 23 a7 af 35 b7 d7 eb b2 7a ff fc 38 ef ff 00 50 2e 32 30 3f c9 c0 ef 71 c6 4e d7 63 46 79 9b fe fb ec fc 29 f0 94 c0 38 a5 ae 4b fe 84 a3 59 ac a4 38 5a b9 e8 0d a3 f6 8c 74 b3 df 64 44 c1 52 1e Data Ascii: 5fLz,wm/[pM;&G!wXarDs,fivGEecSfghAr~<"{MRmm:^}J<2YT%D?zRj1s&;7b#-wY{~dy!e')^?rJT&aQ>a<N#5z8P.20?qNcFy)8KY8ZtdDR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.11	49935	142.251.15.91	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:06:06 UTC	2613	OUT	GET /api/stats/watchtime?ns=yt&el=embedded&cpn=jRkNZCQf5oAkxA7P&ver=2&cmt=2.323&fmt=398&fs=0&rt=14.442&euri=https%3A%2F%2Fniceindiatravel.com%2F&lact=14498&cl=623129822&state=paused&volume=100%2C100%2C100%2C100%2C100%2C100%2C100&cbr=Chrome&cbrver=117.0.0.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240409.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&autoplay=1&splay=1&delay=4&hl=en_US&cr=US&len=156.941&rtn=24&afmt=251&idpj=0&ldpj=-17&rti=14&size=1267%3A713&inview=0&st=0%2C0.155%2C2.06%2C2.244%2C2.244%2C2.295%2C2.323&et=0.001%2C2.06%2C2.244%2C2.244%2C2.295%2C2.323%2C2.323&muted=1%2C1%2C1%2C1%2C1%2C1%2C1&vis=0%2C0%2C3%2C3%2C0%2C3%2C3&docid=wAD9uO9YAQw&ei=z5MeZqaINPHUy_sP0eWdmAw&plid=AAYWOBLu246nWADi&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2FwAD9uO9YAQw%3Fplaylist%3DwAD9uO9YAQw%26iv_load_policy%3D3%26enablejsapi%3D1%26disablekb%3D1%26autoplay%3D1%26controls%3D0%26showinfo%3D0%26rel%3D0%26loop%3D1%26origin%3Dhttps%253A%252F%252Fniceindiatravel.com%26widgetid%3D1&list=TLGG0nOp5Ks1AkExNjA0MjAyNA&of=wbAUJoLFDaeeOSJrHXH1sg&vm=CAEQABgEOjJBSHFpSlRKQ0o0WWhpVHlHMVJqeEhSbnJlNUk1alNPVXV4ZUw0cEQ5UlVzeXIxeUxnUWJ3QVBta0tETEtnc3NpZGtCNXlKTU5mRU1yZWRTR1dyMHo2ZGlNTmNSRlJPZVJzcVp1LXFOc2xfWU5ScHZjZm9GWThIWFhXOFllQnlGbzBzVDRmYzFkZHFzMUxoejRjdWpCb084Zkp3am82MmdhQ2w3cFVtUGVURmdoAg HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1713279950337&flash=0&frm=2&u_tz=120&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1267%2C713&vis=2&wgl=true&ca_type=image sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-YouTube-Utc-Offset: 120 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240409.01.00 X-YouTube-Time-Zone: Europe/Zurich X-Goog-Visitor-Id: CgtJMG1ONlpYUjdsOCjOp_qwBjIKCgJVUxIEGgAgKA%3D%3D sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/wAD9uO9YAQw?playlist=wAD9uO9YAQw&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&origin=https%3A%2F%2Fniceindiatravel.com&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
2024-04-16 15:06:06 UTC	410	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Date: Tue, 16 Apr 2024 15:06:06 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate X-Content-Type-Options: nosniff Server: Video Stats Server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.11	49936	142.251.15.91	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:06:07 UTC	2516	OUT	POST /api/stats/qoe?fmt=398&afmt=251&cpn=F6GU1QEdhoMLD-Np&el=embedded&ns=yt&fexp=v1%2C23858057%2C125239%2C21348%2C76094%2C54572%2C73455%2C230596%2C84737%2C36318%2C6271%2C26443548%2C7111%2C31786%2C4557%2C9954%2C1192%2C10512%2C15711%2C273%2C6966%2C2%2C6689%2C2007%2C4957%2C4115%2C12518%2C1263%2C5498%2C796%2C643%2C5538%2C2893%2C2%2C531%2C819%2C531%2C4712%2C5599%2C1104%2C4465&cl=623129822&seq=4&docid=wAD9uO9YAQw&ei=y5MeZqSPB9aoy_sPxcuI0A8&event=streamingstats&plid=AAYWOBKoz4xd3wIM&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2FwAD9uO9YAQw%3Fplaylist%3DwAD9uO9YAQw%26iv_load_policy%3D3%26enablejsapi%3D1%26disablekb%3D1%26autoplay%3D1%26controls%3D0%26showinfo%3D0%26rel%3D0%26loop%3D1%26origin%3Dhttps%253A%252F%252Fniceindiatravel.com%26widgetid%3D1&qclc=ChBGNkdVMVFFZGhvTUxELU5wEAQ&embargoed=0&cbr=Chrome&cbrver=117.0.0.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240409.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&vis=13.911:0,14.165:3,14.278:0,14.367:3,16.149:0,16.155:3&vps=13.919:B,14.166:PL,14.167:PA,14.282:B,14.370:PL,14.370:PA,16.173:B,16.187:PB,18.239:PA&df=20.564:3 HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 1326 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1713279945329&flash=0&frm=2&u_tz=120&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1267%2C713&vis=2&wgl=true&ca_type=image sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded X-YouTube-Utc-Offset: 120 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240409.01.00 X-YouTube-Time-Zone: Europe/Zurich X-Goog-Visitor-Id: CgtJMG1ONlpYUjdsOCjIp_qwBjIKCgJVUxIEGgAgKA%3D%3D sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/wAD9uO9YAQw?playlist=wAD9uO9YAQw&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&origin=https%3A%2F%2Fniceindiatravel.com&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
2024-04-16 15:06:07 UTC	1326	OUT	Data Raw: 62 77 65 3d 31 33 2e 39 31 31 25 33 41 32 30 37 30 30 32 35 25 32 43 31 33 2e 39 31 32 25 33 41 32 30 37 30 30 32 35 25 32 43 31 34 2e 31 36 35 25 33 41 32 30 37 30 30 32 35 25 32 43 31 34 2e 31 36 35 25 33 41 32 30 37 30 30 32 35 25 32 43 31 34 2e 32 37 38 25 33 41 32 30 37 30 30 32 35 25 32 43 31 34 2e 32 37 39 25 33 41 32 30 37 30 30 32 35 25 32 43 31 34 2e 33 36 37 25 33 41 32 30 37 30 30 32 35 25 32 43 31 34 2e 33 36 38 25 33 41 32 30 37 30 30 32 35 25 32 43 31 36 2e 31 34 39 25 33 41 32 30 37 30 30 32 35 25 32 43 31 36 2e 31 35 30 25 33 41 32 30 37 30 30 32 35 25 32 43 31 36 2e 31 35 35 25 33 41 32 30 37 30 30 32 35 25 32 43 31 36 2e 31 35 36 25 33 41 32 30 37 30 30 32 35 25 32 43 32 30 2e 35 36 34 25 33 41 32 30 37 30 30 32 35 26 62 61 74 3d 31 33 Data Ascii: bwe=13.911%3A2070025%2C13.912%3A2070025%2C14.165%3A2070025%2C14.165%3A2070025%2C14.278%3A2070025%2C14.279%3A2070025%2C14.367%3A2070025%2C14.368%3A2070025%2C16.149%3A2070025%2C16.150%3A2070025%2C16.155%3A2070025%2C16.156%3A2070025%2C20.564%3A2070025&bat=13
2024-04-16 15:06:07 UTC	504	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Date: Tue, 16 Apr 2024 15:06:07 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Server: Video Stats Server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.11	49937	84.32.84.114	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:06:08 UTC	620	OUT	GET /wp-content/uploads/2018/10/slide1.jpg HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://niceindiatravel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:06:16 UTC	393	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:06:16 GMT Content-Type: image/webp Content-Length: 204724 Connection: close Cache-Control: public, max-age=31536000 X-Hcdn-Image-Optimizer: f:webp q:85 w:1600 alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 9dd194f1f8b10200406a399501c5479f-asc-edge5 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 8.109 Accept-Ranges: bytes
2024-04-16 15:06:16 UTC	976	IN	Data Raw: 52 49 46 46 ac 1f 03 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 3f 06 00 3b 03 00 56 50 38 20 08 1f 03 00 b0 15 0b 9d 01 2a 40 06 3c 03 3e 51 24 8e 45 a3 a2 21 24 27 15 0b 18 80 0a 09 65 6d 38 ab db cf 84 c5 13 f5 7a 9d fe 4f ec fe a6 3d 8b fd cf 1a af e6 f0 b0 d4 3f ef fa 1c 7f ae f4 ef 9d 3f f2 ba 7b 73 b3 ff 37 2e a5 22 58 af 6c 6a 32 15 4f 08 c2 e3 0d d0 7f c9 78 2b fd af 85 3f a6 7f a5 f6 00 fd 52 ff 7d eb 35 fe 07 7e e7 6c ff 6f ec 0d f9 af ec 61 9a cf f7 bb 6c 54 8f ff 87 f7 07 d3 37 da 3e a5 71 8b 36 d6 b9 5e 63 25 7c c3 e6 9c 8d bf d7 e1 7f d9 7f e6 f3 49 f8 2e f8 1f f7 3f 70 3d e6 7f 43 ff 51 ff b7 fd 2f ef ff fe 4f b0 af d7 4f d8 9f f5 be fa 7f f4 7e ec fc 1f fe bd ff 7b d5 57 f5 1f f5 df b7 de f6 fe 99 7f d0 7a 87 ff 83 ff af ff ff b1 Data Ascii: RIFFWEBPVP8X?;VP8 *@<>Q$E!$'em8zO=??{s7."Xlj2Ox+?R}5~loalT7>q6^c%\|I.?p=CQ/OO~{Wz
2024-04-16 15:06:16 UTC	1369	IN	Data Raw: 3a e1 7f f0 42 ec 46 2b a4 d4 6d 2c 5c b6 0c 1d b0 7e ce cc 7b 37 61 2f 88 60 40 74 c0 6b 2a 90 a5 b6 12 2e 8e 49 3b 1a fd 18 b1 ee 02 df ed d4 15 66 a2 ad 53 8a 3a ee 43 68 ab 89 01 8b fd 1c 4b f5 b1 b2 1a 4f c6 c1 50 c2 73 7e 93 cc 09 25 30 26 14 7f 28 30 ba 4d 17 4d 35 07 f9 3d f1 3a ac 1b db d6 a2 a0 46 3d c6 9e 89 42 ab 14 92 da 3a 9c 18 5b cf d8 02 2f d9 07 88 8e 9e b1 9d 88 bb ec 15 ba 7b 7f ef 90 19 c1 d2 b0 9d c7 e4 1d 8f 71 ae 6e d4 db ed 70 fb 03 82 7f ed ad 9a cb 44 04 a3 f3 f6 93 9e 75 23 c1 c8 09 35 87 79 0d a4 ab df e8 cb 1b 24 87 ae 16 ed 45 1c ad 37 99 e2 40 54 72 2a 66 85 52 7a 5d ba 0f 5e 64 9c 47 1f a0 22 e9 12 98 fd dc da 36 97 93 15 fb f7 fc 3f 8b dc 73 b5 ea 65 82 f5 bc 32 8b 81 ef 1a 02 5e 5e 5d 6f c9 88 fa 8d f2 77 d0 7b c5 e0 3b Data Ascii: :BF+m,\~{7a/`@tk.I;fS:ChKOPs~%0&(0MM5=:F=B:[/{qnpDu#5y$E7@TrfRz]^dG"6?se2^^]ow{;
2024-04-16 15:06:16 UTC	1369	IN	Data Raw: ee 39 de a7 9e 17 7f 43 22 26 c1 23 e0 f6 14 3d 09 b5 03 10 c8 93 9c f0 19 e2 b7 4c 69 cd a0 f0 e3 9c 7b 3b 1a 5c db 11 a2 9d 30 e4 51 0d f5 73 be 0d f7 27 24 f5 46 8d eb 00 0f 07 3b e5 4f 01 b6 fc ef e9 67 c8 7a c3 1a 5d 53 0a db 9b 55 d6 0e 05 50 d7 88 43 b9 c5 91 ae 97 96 94 bd 69 aa 19 9f 36 74 3e 47 14 8b 36 47 65 87 fb 05 ce 10 49 d6 5e 7d 45 47 1b af 08 5f 6f 19 09 6c 8f a8 6b 98 05 76 57 3c 74 a1 7e 25 56 ef be 32 88 a4 e2 8f b0 55 f4 51 d5 ce 74 bb 98 55 20 82 6c b4 63 9a d4 77 18 88 2b 3c 4d 83 9c 31 0d d3 89 2d f4 df e2 bd 48 69 9d 05 3c a4 36 7e fd 2f 83 df bc 85 bc 73 91 34 1b ef 5e a3 ff dd f5 73 75 13 ca ca c8 1b cf 1e 75 cd b3 a9 8c 8c a5 ab d7 20 79 af b1 03 fc 77 e2 fa 17 50 44 37 fa 2c 87 80 51 eb a5 25 ad 21 9e 81 af 7b da 98 cd 61 dd Data Ascii: 9C"&#=Li{;\0Qs'$F;Ogz]SUPCi6t>G6GeI^}EG_olkvW<t~%V2UQtU lcw+<M1-Hi<6~/s4^suu ywPD7,Q%!{a
2024-04-16 15:06:16 UTC	1369	IN	Data Raw: b4 a2 0b 37 fc 6a 5d 5a 94 86 7f 15 be f8 96 a3 ea 66 4c d0 df 50 64 9f 79 e6 bd b4 0e fd c8 00 ff 93 f0 1c 6d 2d 58 7d 90 dc 10 4e 0c 6f 47 f5 85 e8 26 92 ef b9 6b f3 58 d0 c5 72 48 5f ea 69 b6 c3 99 f5 76 54 26 9a b7 bf ee d1 ac de c6 72 15 7b b5 67 bd 86 2a 99 c1 99 39 b8 85 01 f1 f0 ec 44 3a c7 54 77 9c d6 b3 4b 9f 29 7c 2a ef 78 f6 c3 77 15 fb af 35 c8 e0 50 80 ff 97 5b 7d 44 d8 38 fd 27 46 cd d1 6a d0 8a 0a 62 03 dc c7 46 02 88 b8 9f 15 63 5d 1f 16 fe dd 41 16 08 c5 95 48 98 c0 c5 a7 42 ba ce ea 70 8c cd f0 ec 63 db ad 7f 53 6f 5c 43 ea 89 3a 2c aa 27 2c 33 c5 c3 6d 56 eb 20 c9 4a 70 a4 bc a6 5e f2 2c 33 4b d1 f0 57 19 8e 21 87 15 e3 24 2b da ab 46 d8 c8 16 1b a5 91 af 8a af 22 74 5f 15 4e ac 4d 81 3a b6 21 a3 22 4a 41 08 52 33 7f 3a 0d 99 e4 8f 3f Data Ascii: 7j]ZfLPdym-X}NoG&kXrH_ivT&r{g9D:TwK)\|xw5P[}D8'FjbFc]AHBpcSo\C:,',3mV Jp^,3KW!$+F"t_NM:!"JAR3:?
2024-04-16 15:06:16 UTC	1369	IN	Data Raw: b2 83 4c 53 e2 06 78 c3 35 aa ee 33 17 0b 8c 05 d8 6a ac 18 54 73 0c eb 77 83 f3 a9 d6 eb db f7 16 bf ce 4a 3b aa 0e b3 d2 e6 5f ac 0f 88 08 10 4b ee d4 e0 71 75 e1 72 e3 94 ce 1e a6 1c 4e 43 bd 60 c8 3f 0f 4c 48 b8 45 76 c9 7c f6 66 5d 1a 95 4e 9c 73 f4 39 77 66 7f 04 23 81 f5 e6 e7 78 bd 36 a3 b7 d0 4d 15 5a 04 99 18 77 4d 08 46 7e 35 a7 b5 5f 8a fd 8b 0e 26 9a e0 5f d5 2d b8 bf a8 58 30 ed 1a ed 95 5d a4 9b dd 67 15 99 2b f7 cc b9 f5 93 a5 06 20 d9 04 d9 bb f1 aa 7d d6 ff 59 71 35 42 01 14 a9 1b 21 26 95 14 dd 61 ad 0d a0 9e a6 a0 6c 22 dc a4 54 93 28 9a dc e3 70 c9 9c cd d0 40 e7 e0 20 7e 33 3c a1 a7 03 1b c6 2e ff 94 74 53 b3 9a 52 06 4f 89 07 ac c7 f2 f5 0b 32 11 30 de 8b 30 c0 6c 64 3e ca a6 bb b2 08 1b e0 98 ea 43 74 1c 3a f1 e0 2c e7 fb 01 dd 6e Data Ascii: LSx53jTswJ;_KqurNC`?LHEv\|f]Ns9wf#x6MZwMF~5_&_-X0]g+ }Yq5B!&al"T(p@ ~3<.tSRO200ld>Ct:,n
2024-04-16 15:06:16 UTC	1369	IN	Data Raw: e8 b0 0f 60 23 64 35 33 12 b4 0c a8 15 2a f9 66 48 e8 4f 13 05 92 e8 ac df 4a 31 6f 1d a6 cf 4c cb a4 e9 0c 63 a7 2f 12 14 b1 ce 62 f2 29 77 7a 0f 6b c0 3d 9a bc eb 78 c4 3d 74 c1 33 f0 67 3d 78 f2 cc 22 01 39 00 7a 11 33 e8 90 9e fe 5c f4 d4 06 b7 91 4b a2 24 31 03 e1 fe a6 9e f0 98 a8 2b c8 45 ed 72 63 27 f7 e8 b9 d2 fb 8f 1c 69 41 62 a9 9c f7 f4 10 0a ca d8 f8 01 6e 87 61 70 da 58 72 5e 63 86 e3 35 2f a7 66 af 8b 44 7b 8f 9b d0 bf ff 0f b7 39 b7 6d bc 55 d6 ce ae 61 7f 3f 68 d7 17 89 ff 1d 57 8b 8d 6b 11 1b 3a 34 9c e6 81 d5 04 ca 88 e1 b2 69 04 d0 aa de 1c 7e 73 3d fc 77 9d cc b3 06 01 76 1e 9f a6 fa 50 f1 3e 76 dd 81 4a 97 19 86 b6 f3 df 71 70 20 63 91 d8 7e 99 42 de f9 ed ee 93 ad 85 76 3c 9f e4 89 51 6e c4 73 7c c4 9e e7 94 a0 47 fe a0 b2 e0 c1 d4 Data Ascii: `#d53*fHOJ1oLc/b)wzk=x=t3g=x"9z3\K$1+Erc'iAbnapXr^c5/fD{9mUa?hWk:4i~s=wvP>vJqp c~Bv<Qns\|G
2024-04-16 15:06:16 UTC	1369	IN	Data Raw: 7c 79 f2 0d 79 00 dc c6 e2 0b 5b ac f0 48 af e6 5f 94 d9 2f 2a 91 37 11 12 c5 34 2d de 31 69 62 f9 60 82 0e 80 97 ed 04 fe 64 0c 37 65 10 f5 37 58 67 6d 7e 8f dc 57 80 73 13 66 80 39 a0 d2 43 bc 9c 8b 52 31 5d f5 49 39 0e 3d 5c ee ac 4f f7 01 95 b5 68 f4 54 66 cb 77 cd 0f 95 cb 37 8c 44 2c 84 d5 d1 c7 c7 c3 33 a3 b6 a1 b0 62 9a 25 7d b3 bd b1 a7 db ae 66 e4 07 c9 75 56 f1 86 dc 6c 58 13 6e 9f 59 1c 2e bc 2a cf 9a fc 5a fc ec ef 72 c9 9a 8a 1e 1e f2 ef e4 92 3b 18 9c 6e 4b de d4 84 a2 3e d6 87 80 f3 03 c0 db 6e 3d 87 20 c9 69 8c 3a 36 43 d0 ed 4b 4d f0 3e 73 19 9c 2a f4 19 79 91 e7 db d3 a9 bf dd a7 ba a0 07 e3 8d f5 55 c8 6c 24 6c 35 35 e8 3d 2f 94 5c 40 29 e4 a4 f3 f8 33 2a 73 34 5e 71 69 ae 4e 33 01 f4 2c d0 c7 32 a5 8c fa a3 0b 05 48 5c 23 5c 61 50 34 Data Ascii: \|yy[H_/74-1ib`d7e7Xgm~Wsf9CR1]I9=\OhTfw7D,3b%}fuVlXnY.Zr;nK>n= i:6CKM>syUl$l55=/\@)3s4^qiN3,2H\#\aP4
2024-04-16 15:06:16 UTC	1369	IN	Data Raw: e2 c9 17 b9 6a 2f bd 86 e1 68 65 76 32 7c f9 e4 e3 7f 42 67 70 fa 63 0e 08 35 b8 36 4f e4 99 2b fb 17 51 50 f1 3c 63 5c 15 4e 48 2b 54 9d 3e 81 bb 70 83 f3 03 20 1b a6 4c fb 00 8f b5 58 d9 a8 c7 ec b4 aa 22 db 70 9c 29 0b 5d e4 c6 ce da 53 e1 6c ac be 1a ab 9a 15 1d 21 b3 65 aa 87 37 90 ab 75 94 e5 5f 1c 45 b2 cc 60 d5 af b4 e4 2e e3 bb a8 3c 8e df 3a 71 86 e3 8e e2 97 ac 18 da 24 66 3c 77 04 ee 54 64 81 06 d1 70 7a 3f e4 7b 0b 5a a9 7d a1 f8 35 3c 50 10 55 ae 81 94 1d fb 58 bc 40 09 4d 98 09 61 f0 a6 76 01 43 d0 c9 76 3f 5f f3 af 5b 7e 0e e1 f6 0c 5d fb 7a 7c 2f 98 ce 2f 90 ad d3 7a 02 7f 25 67 da bd ee 4e 66 44 7d 5d 34 3f 23 24 c4 0a fc f7 a2 4f ff 85 20 30 d8 61 18 ac 27 72 01 79 68 f3 f3 00 18 b3 17 f1 2b 7f 87 bf e9 12 ae 32 a7 b4 a1 f3 75 b4 80 b3 Data Ascii: j/hev2\|Bgpc56O+QP<c\NH+T>p LX"p)]Sl!e7u_E`.<:q$f<wTdpz?{Z}5<PUX@MavCv?_[~]z\|//z%gNfD}]4?#$O 0a'ryh+2u
2024-04-16 15:06:16 UTC	1369	IN	Data Raw: 5d df 0b f1 10 72 77 e9 6f 56 06 97 c0 6a 4e d3 5c 5f 9c 82 b3 98 89 18 9e 69 51 ca 19 f5 a2 36 c6 da b5 bc df 71 b2 4f b5 2c 0e 84 4a 1f 64 cb 49 cc 5c f4 24 da 69 d1 3d 26 51 bd 47 bb 4b 5e 00 f3 e6 35 b5 b6 c8 76 57 f3 5d db cb 5c ac eb cb 4c fa 0d 1c d2 92 2d bd fd a9 1d f9 75 de 79 d3 cf 4b 5e 26 d4 ab 28 c8 f9 04 b0 db 89 52 5d fa 67 27 a8 c8 11 b6 e8 d5 a5 04 0a 4b 3c e5 ff b8 c5 5d a4 69 cf 98 35 87 f5 3f b8 e6 bf d8 c3 34 cf 78 da 94 81 bc 98 27 b8 28 b3 ce 24 3e cd d7 6c b3 73 2f e4 df ba 7f 46 dd 73 6a fb 61 a9 22 5b 23 39 ea aa 56 43 7a a2 ee 8b ee 1a b7 4a 79 d1 59 be a6 0b e2 6b 7e 67 90 54 ce 47 8a 59 6d 7e 6d bf f9 51 79 86 5e 08 1c 12 cc a7 26 ff 34 ff 33 6e a8 5a 26 53 27 16 cd c3 00 5e 5d d7 35 fe b8 56 d6 c2 6d 62 49 f8 9b 86 ea d0 67 Data Ascii: ]rwoVjN\_iQ6qO,JdI\$i=&QGK^5vW]\L-uyK^&(R]g'K<]i5?4x'($>ls/Fsja"[#9VCzJyYk~gTGYm~mQy^&43nZ&S'^]5VmbIg
2024-04-16 15:06:16 UTC	1369	IN	Data Raw: ec 22 5d 42 e4 f3 45 08 fc 34 1d d9 39 2f 72 92 50 f8 6b 56 28 b3 7f cb b9 03 ab 5b 0e 7f 30 59 7a 9b 18 19 8d bf 54 3f 28 6b 78 21 74 62 9d 8c cf f5 e7 fa a1 f4 12 22 5d 9e 61 d7 25 09 4e ed 6a 26 4a a0 28 aa 38 1e 53 de a8 df 3c 28 7b f3 52 9d b2 a9 69 83 83 19 fd 94 a3 29 bd 7e d9 54 75 e6 5b 5b 84 14 e6 af 68 14 b8 5b 55 93 d6 9f 48 61 fb 2f af e8 1e 74 9f bc f2 10 36 1e ba 92 fd ec d7 f9 a7 1e fe d2 09 fa 5e a4 08 fc 6d 8f 97 f6 1d d9 fd 56 36 b4 4c c1 db 2f 94 44 37 d0 65 3a ce 37 07 9b 0d 24 8e 27 32 f0 9e 4c a5 62 06 1f 7e ce 1a 9b 01 7f a0 e0 3a d9 f1 19 ff 86 39 e6 92 8c d9 7f 9e 79 33 c3 fc f7 4f c8 47 1f e4 6a e6 49 c5 57 19 5e bb 1b 5e 50 f5 c0 59 be be 1a 0c 7e 27 cd 82 f3 0b d2 37 81 3a 85 2e f5 47 7c 71 ca d6 8a da 82 ca 79 56 dc c4 b5 15 Data Ascii: "]BE49/rPkV([0YzT?(kx!tb"]a%Nj&J(8S<({Ri)~Tu[[h[UHa/t6^mV6L/D7e:7$'2Lb~:9y3OGjIW^^PY~'7:.G\|qyV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.11	49938	154.62.106.12	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:06:08 UTC	381	OUT	GET /wp-content/uploads/2018/10/ganga-1.jpg HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:06:10 UTC	392	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:06:10 GMT Content-Type: image/jpeg Content-Length: 42842 Connection: close Cache-Control: public, max-age=31536000 X-Hcdn-Image-Optimizer: f:jpeg q:85 w:1600 alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 70b61b9d24e8d9b9cf8bd7b6596765ec-bos-edge2 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 1.521 Accept-Ranges: bytes
2024-04-16 15:06:10 UTC	977	IN	Data Raw: ff d8 ff e1 00 80 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 05 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 4a 00 00 00 1b 01 05 00 01 00 00 00 52 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 69 87 04 00 01 00 00 00 5a 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 02 00 02 a0 04 00 01 00 00 00 58 02 00 00 03 a0 04 00 01 00 00 00 90 01 00 00 00 00 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e Data Ascii: ExifII*JR(iZHHXC!"$"$C
2024-04-16 15:06:10 UTC	1369	IN	Data Raw: df 7a 8c f4 c9 ed da 9c 9f a8 a0 05 30 36 c8 e9 48 13 dc 1c 53 48 c7 4f 53 4d bf 6a 00 94 83 d7 a5 34 90 3f bd 32 67 18 9a 92 12 4c 49 26 80 1b 7c 49 ed 4c 76 9c 0a 22 9b eb 06 77 14 33 1d e6 68 0b 09 53 b6 d4 c3 25 24 4f bd 31 9c 19 a4 32 46 71 4c 07 32 4e 3f 6a 92 39 66 97 26 32 3d e9 c0 3b fe f4 36 34 27 0f 5c 01 ed 42 3b e4 67 bd 4d 67 02 31 1f a5 42 20 41 f7 a1 09 8c 77 fd 7d 2a 38 c7 7f 5a 90 cd 44 8c 18 cd 3b 12 34 4f 73 eb 4b a0 04 e2 9c 81 38 a8 fa ee 68 b0 0b eb 48 89 fc df 7a 63 dc ed 4b 6e 93 da 69 a0 11 32 9d e6 a2 ac 8c 53 cc 98 ec 33 51 24 e2 64 f7 a0 07 c4 e7 da 95 44 c1 eb 03 da 95 00 50 73 2b 51 9a 61 91 33 4b 7d e9 85 5a 10 f2 22 29 4c 52 9f fc 52 18 34 c0 7c c5 21 33 fb 52 1f bd 2f ef 40 0f b7 5d a9 7d 62 9a 3a 7d a9 e9 00 e6 46 37 a7 Data Ascii: z06HSHOSMj4?2gLI&\|ILv"w3hS%$O12FqL2N?j9f&2=;64'\B;gMg1B Aw}*8ZD;4OsK8hHzcKni2S3Q$dDPs+Qa3K}Z")LRR4\|!3R/@]}b:}F7
2024-04-16 15:06:10 UTC	1369	IN	Data Raw: 11 19 9e 9f ef 7a 60 32 b3 8d ea 22 47 ad 4b 70 33 8e 95 13 8c ed f4 a6 2b 0f 02 63 ee 6a 0b 07 a8 f7 f6 a7 99 13 8f a5 23 91 11 1d 68 42 22 3a 98 e9 d2 9c 6f 3d 47 e9 48 f4 eb f5 a5 be e3 7a 07 60 80 9e 4e be 9e 95 02 54 4e 4f eb 49 1f 5c 0a 65 08 56 4c fd 69 0c 20 2b 3b 28 8a 75 15 88 c6 fe 94 ed 01 10 4f 5d e8 e4 02 de 77 1b 62 93 76 1a 57 00 a8 2d 13 91 fd a8 29 27 9a 0f bd 15 67 94 44 fd ea ba 4e 7b 99 da 9a 10 40 06 0c 60 d4 b1 cb 33 50 4c 99 27 14 eb fc 58 e9 4e e0 22 12 07 6e d4 39 00 e7 bc 83 d6 9c fa 09 f7 34 23 bc 6c 7f 5a 68 4c b4 cf 21 30 7b fb 55 84 a5 b1 13 bd 67 02 42 a4 09 fa d3 97 57 1d c7 4a 96 9b 1a 76 2f 29 68 46 13 9c 45 54 b8 79 64 11 ce 79 4f 41 42 2a 51 1e 95 03 d6 85 1b 03 95 c4 77 f7 de 2a 38 cf ad 3f d6 3b d3 11 eb 8a d1 11 61 Data Ascii: z`2"GKp3+cj#hB":o=GHz`NTNOI\eVLi +;(uO]wbvW-)'gDN{@`3PL'XN"n94#lZhL!0{UgBWJv/)hFETydyOABQw8?;a
2024-04-16 15:06:10 UTC	1369	IN	Data Raw: 29 22 3b 54 40 23 ca 00 8f 5a 97 2b 97 6b 09 46 30 07 db ad 15 a9 4a 44 90 3a d3 16 dc 56 c9 8e c4 66 8c db 06 20 cf fb da 95 c6 44 2b 98 67 6a 1a c9 93 03 ef 56 fe 54 8c 93 1e 94 c5 84 a5 30 64 93 de 8b 92 c0 37 b6 73 34 56 5b 52 95 05 38 ea 4d 1e dd 82 a3 91 ef da ae 06 21 00 27 06 28 6c 69 14 94 23 27 ad 41 64 46 e2 3f 7a b4 e2 4c 19 81 1e b5 4d 44 10 41 26 46 c6 95 c6 29 07 03 07 71 43 5c 93 32 2a 41 51 88 9c 7d aa 0e ab cd 8d 87 6a ab 89 a0 25 44 1e 58 22 a3 24 c1 c1 3d a9 12 0e 0e fd a9 ba f2 83 bd 51 03 95 08 20 c6 06 68 6a 31 b0 a4 ad e0 67 ad 44 9c 19 a2 e0 38 56 e6 69 e7 cd 8c f6 1d 6a 39 ed 8a 73 99 f5 1d a8 15 89 18 29 89 8a 76 c2 42 81 c4 03 51 06 40 4c 53 91 e6 cd 03 2e 79 52 d8 e9 ef 55 48 1c f2 22 7b d4 82 e1 13 22 47 ae d4 34 af cf 98 f5 Data Ascii: )";T@#Z+kF0JD:Vf D+gjVT0d7s4V[R8M!'(li#'AdF?zLMDA&F)qC\2*AQ}j%DX"$=Q hj1gD8Vij9s)vBQ@LS.yRUH"{"G4
2024-04-16 15:06:10 UTC	1369	IN	Data Raw: 4e 64 52 a0 56 29 83 b8 a6 50 3d 76 a2 a1 32 7a 1a 67 51 cb 81 54 26 81 8f 43 4e 06 69 00 67 68 a9 24 19 a0 44 db 6e 68 81 a8 a8 b6 63 13 53 e7 c6 f4 84 4d 32 0e 4d 14 10 4f 7f ef 40 f1 24 9a 72 ae c7 14 b2 94 98 57 5c 29 4c 05 74 a0 36 d2 dd 54 99 8a 22 07 88 a0 30 7e 95 ab 6d 6e 94 b7 cd 89 e8 4d 4b 76 2e 2a e6 6b d6 a5 0d f3 45 55 85 4e 2b 71 e8 28 20 e2 6a 9b 6c 25 4a 24 8c 52 52 1b 44 2c de 21 20 1c 7d 28 c5 70 64 1a ad 72 82 d2 a9 da 72 72 4e 29 d8 10 75 34 97 04 e6 aa be d8 41 8e 82 ad 25 c0 13 93 15 59 c5 05 ab 7c d0 98 d8 24 20 93 9f ad 15 a0 50 a1 92 47 a7 4a 9a 39 53 51 59 92 22 93 62 b1 6d 4d f3 b7 38 c6 f5 41 c0 12 e4 4c d5 d4 2f 95 aa a4 65 6a 24 0f b5 11 1c 86 18 cf eb 44 41 ee 26 9d 0c 92 04 e0 f6 a7 5a 42 0f 61 b5 3b 92 11 27 1f de a6 07 Data Ascii: NdRV)P=v2zgQT&CNigh$DnhcSM2MO@$rW\)Lt6T"0~mnMKv.*kEUN+q( jl%J$RRD,! }(pdrrrN)u4A%Y\|$ PGJ9SQY"bmM8AL/ej$DA&ZBa;'
2024-04-16 15:06:10 UTC	1369	IN	Data Raw: b5 01 32 7d 6b 45 b1 9b 61 51 cc a3 93 46 0d 28 19 23 14 26 08 0b 1f 7a bc b2 92 88 f4 a9 6c a5 a8 15 00 52 04 67 a5 44 34 66 62 98 e0 ee 68 c0 f9 31 f7 a4 31 28 73 20 f5 a8 36 a4 83 06 ac 32 9e 74 75 8f 4a ab 70 8e 55 e2 63 6a 48 18 4f 19 20 46 04 50 9c 5f 39 c8 3f 5e 94 33 3d a0 55 9b 56 3c 41 bd 37 a0 2b b0 63 23 af a8 a9 a4 63 6d fa d4 de 68 22 23 ff 00 14 92 20 63 34 ae 36 ac 32 52 3b 41 a9 1c 40 a7 c8 1b c8 a6 2a 8c 13 40 5c b7 66 b0 98 19 fb ef 56 8a 80 32 0c 8e f5 90 87 0a 72 33 e9 56 d9 7a 49 9c f7 15 2d 0d 32 e1 3f 63 50 71 c0 10 60 11 da a0 a7 db e4 24 4e 7d aa b3 af 05 13 93 eb 53 61 dc 13 a1 45 c2 60 89 eb 46 64 19 1b 4c 6f 14 c8 85 a8 fa d5 86 5a 4c 09 fb 8a bb 93 60 a8 48 52 b2 36 19 ab 6c 24 75 de 62 86 db 49 89 00 4d 5b b4 4a 16 62 0e 37 Data Ascii: 2}kEaQF(#&zlRgD4fbh11(s 62tuJpUcjHO FP_9?^3=UV<A7+c#cmh"# c462R;A@*@\fV2r3VzI-2?cPq`$N}SaE`FdLoZL`HR6l$ubIM[Jb7
2024-04-16 15:06:10 UTC	1369	IN	Data Raw: ca 48 20 4e db 54 56 65 04 cf bd 6d 63 26 cc e5 48 91 52 0a c6 fe f9 de 99 e2 79 fa 53 01 8e d5 2c 68 20 2a 23 07 3b d1 59 68 2d 51 27 d8 8a 12 00 1b fb 55 fb 64 89 06 33 d6 4d 67 2d 0b 8a b8 8b 01 bc 83 9d e9 9a 59 9d f6 da 8e f1 1e 1a 53 da 28 4d 21 3c d8 de 71 50 99 4d 58 b5 6c a2 ac 1f fc 1a d1 62 13 18 93 b9 f5 ac f4 20 20 98 06 47 61 57 98 4e 04 9e 99 a1 b0 48 be 95 66 44 8a 38 4a d2 90 4a 4e 73 3d aa 3a 6b 1e 21 93 b0 d8 d5 eb a0 84 b6 50 9c f7 c4 09 f4 ac a5 2d 6c 6b 18 f1 2c 69 17 0c 36 ae 77 08 29 f4 fd e8 7a 95 cb 0f 3c 56 8d b0 04 f6 ac d8 03 98 98 ed ed 43 71 69 42 e4 52 cb c4 ac d6 56 2c bc 92 23 97 af 51 d0 d4 ed c7 2f e2 eb 91 38 a2 58 38 97 14 39 bb 6f 56 c5 ba 08 90 3b 52 63 b5 ca e1 40 98 2a 1e a6 aa 5e a4 f3 6f ea 6b 41 76 c1 bf c3 02 Data Ascii: H NTVemc&HRyS,h #;Yh-Q'Ud3Mg-YS(M!<qPMXlb GaWNHfD8JJNs=:k!P-lk,i6w)z<VCqiBRV,#Q/8X89oV;Rc@^okAv
2024-04-16 15:06:10 UTC	1369	IN	Data Raw: 7a 01 18 ac e5 76 6b 07 61 9d 48 83 03 1b 54 1b 51 4b c0 e2 3d 3a d3 3e bc ef 42 6c 90 be 53 1b d1 15 a0 33 45 a7 0e 01 26 3a cd 6d da 30 1d 6c 40 1b 66 6b 9d 0e 88 90 40 57 5a da d1 ee 02 42 7c d2 7d 3f 6a ce a5 d2 b9 70 dc da b5 48 69 07 f6 a1 5d 28 95 c0 3e 5d f6 a8 2e e2 0f 30 39 a7 65 b5 bc b4 82 4f 72 6b 1b dc dd ad 0a f7 09 79 40 72 a7 7e 86 88 dd b8 0c cb 83 3f 5a d1 b8 b5 21 a2 7d 62 80 86 96 00 91 80 6a e2 cc da 27 60 94 c7 90 72 91 93 fe 75 75 a7 94 0f 27 29 33 f4 a9 69 ec 82 e1 50 1e 51 83 3d 68 f7 4d b6 01 5a 7f 10 3b 54 b7 a9 69 15 ae 15 22 52 02 54 37 06 a9 92 b2 04 1d 8d 12 e1 c1 ca 79 95 07 00 7a 66 82 97 40 24 95 41 34 d1 2c 1b a8 39 48 89 ef d2 a9 ad 09 01 58 26 77 9a 35 c3 b8 33 b6 6b 3d 6b 50 59 05 52 36 13 d6 ad 10 c3 48 08 24 10 67 Data Ascii: zvkaHTQK=:>BlS3E&:m0l@fk@WZB\|}?jpHi](>].09eOrky@r~?Z!}bj'`ruu')3iPQ=hMZ;Ti"RT7yzf@$A4,9HX&w53k=kPYR6H$g
2024-04-16 15:06:10 UTC	1369	IN	Data Raw: f4 25 02 0e 07 a6 6a f5 b5 aa 9c 40 eb 43 bb 64 25 5e db 13 50 a6 af 62 f2 69 72 b2 41 d8 fd cd 6a e8 9c c1 c3 cc 39 53 b8 9c 55 6b 16 82 dd 4c 8d b2 66 b6 5a 60 72 02 a0 47 b7 5a 8a 93 e0 5d 38 71 0e 17 cc 4f 2e f5 b9 a4 db 8f 0d 33 f8 ab 0a dd 32 ec 0f a1 ed 5d 66 8b 6f e1 b5 cc e1 09 93 81 da b0 66 e9 07 f0 42 47 30 39 18 22 85 e0 27 9c 10 91 3f d4 44 d6 9f 86 04 aa 24 cf 5a 81 c2 20 a3 6c cc 50 98 f2 99 a8 6d 68 24 c9 c6 d4 07 94 54 3f 2e 3f b5 6b ad 94 a9 13 25 3b 6d b5 54 b8 67 95 3d 08 c9 9a 77 25 c4 c1 bf 4a 9e ca 0c 19 c4 1a a0 54 e2 54 42 c6 06 24 57 40 ed ba 52 24 00 12 ae c7 6a cd 7e dc 09 58 32 ae 89 ad 13 33 68 a0 b5 e4 8e 50 0e 0d 08 a1 2a 3c dc 9e 63 de 8c 1a 02 42 c7 9a 33 d6 a0 b4 14 f3 65 4a 50 e9 15 57 33 b0 c0 01 23 94 54 19 41 53 b8 Data Ascii: %j@Cd%^PbirAj9SUkLfZ`rGZ]8qO.32]fofBG09"'?D$Z lPmh$T?.?k%;mTg=w%JTTB$W@R$j~X23hP*<cB3eJPW3#TAS
2024-04-16 15:06:10 UTC	1369	IN	Data Raw: b8 d3 e2 48 13 f4 ae 01 37 8e 11 f8 88 ed 9c d1 91 74 be ab 3e 95 1f a7 ed 29 62 7b 0e f5 b7 74 d2 4f 95 38 3b c5 63 6a 4a b3 f9 e0 50 07 29 3d 6b 9d 17 6e ef ce ae f5 17 2e 0a b3 cc 49 03 19 a9 ea 2d c4 1d 7c da 58 ef d8 1a 61 69 24 84 83 12 41 da 8b 1a 67 30 93 ed 5e 6e 35 47 92 4a 43 8a 11 8a 22 35 47 d5 f9 c9 a4 f0 af 99 4b 10 b9 1e 94 06 8e 53 e6 09 db d2 a4 94 68 e4 c9 28 3d a6 bc c9 77 b7 1c d2 97 15 52 17 b7 7d 1d 51 f7 a9 fd 2b e6 57 ea 7b 0f 4a 2c e9 0a 50 82 88 9e 95 9f ab 35 64 94 1f 05 c4 cf 6a e2 51 7f 75 32 5c 3e f4 76 ae 5f 5a 79 54 e6 23 35 50 a0 e0 ef 70 78 85 25 b1 b2 39 54 93 e6 4f a9 f5 a9 21 d1 f8 42 bf 0f 5a cc 43 a6 22 46 7a d3 97 39 12 57 ce 77 ad c4 a4 5f 52 d3 cc 0a 95 f5 34 ce 3c da 13 85 08 23 15 8b 73 78 4a b0 af b5 56 72 f1 Data Ascii: H7t>)b{tO8;cjJP)=kn.I-\|Xai$Ag0^n5GJC"5GKSh(=wR}Q+W{J,P5djQu2\>v_ZyT#5Ppx%9TO!BZC"Fz9Ww_R4<#sxJVr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.11	49939	154.62.106.12	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:06:09 UTC	377	OUT	GET /wp-content/uploads/2018/10/2-8.jpg HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:06:11 UTC	393	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:06:11 GMT Content-Type: image/jpeg Content-Length: 128403 Connection: close Cache-Control: public, max-age=31536000 X-Hcdn-Image-Optimizer: f:jpeg q:85 w:1600 alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 96d0b20f42a7d4fb7afa4fa16fb5c10a-bos-edge1 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 2.042 Accept-Ranges: bytes
2024-04-16 15:06:11 UTC	976	IN	Data Raw: ff d8 ff e1 00 80 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 05 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 4a 00 00 00 1b 01 05 00 01 00 00 00 52 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 69 87 04 00 01 00 00 00 5a 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 02 00 02 a0 04 00 01 00 00 00 05 03 00 00 03 a0 04 00 01 00 00 00 04 02 00 00 00 00 00 00 ff ed 00 24 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 08 1c 01 5a 00 03 1b 25 47 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e Data Ascii: ExifII*JR(iZHH$Photoshop 3.08BIMZ%GC!"$"$C
2024-04-16 15:06:11 UTC	1369	IN	Data Raw: 41 f2 df 04 80 32 71 9d 76 1b ef 67 76 6c 96 ee c7 ef eb ae 2c bf 58 ec 77 e1 28 92 a6 e1 49 24 e5 4c 86 9e 50 d1 b3 28 c2 93 13 7c b9 03 d7 83 df 52 8e 95 bb f5 cd 9a f7 d2 50 9e a9 66 e9 cb 4d 4c 30 f9 33 54 18 22 82 93 3b 58 cb 9e 65 01 49 ee 49 5f 97 03 03 8a e8 b3 2c 6b 64 86 6b 70 f5 a5 ba 3e 0e a9 d0 d4 5a a3 c4 3e 8e 5e aa a4 e9 9a 3b b8 b8 dc ea 9d 55 62 a1 8c cc b0 ab 1c 2b ca e3 e5 45 ed ea 4f d3 52 ac 6b a6 9a 67 1d c5 c7 ba 0b 43 47 8d 0c 6a 4a 85 a2 c6 b2 23 45 8d 00 0d 0d 1f e5 a1 a0 02 d0 d0 d0 c6 80 06 34 35 96 b1 d0 01 0d 1e 34 60 03 eb ac b6 a7 72 73 a8 b0 30 f5 d0 c6 b2 23 1e b9 d1 63 40 05 ac 80 04 73 a0 07 b0 d1 80 4f 18 ce 80 31 d0 23 4a a3 a6 ca e5 c9 07 db 59 08 e2 4c 96 e4 7b 1d 57 7a 2e a0 c4 7a 2c 69 54 89 19 5e 3e 53 ad 0c 85 Data Ascii: A2qvgvl,Xw(I$LP(\|RPfML03T";XeII_,kdkp>Z>^;Ub+EORkgCGjJ#E454`rs0#c@sO1#JYL{Wz.z,iT^>S
2024-04-16 15:06:11 UTC	1369	IN	Data Raw: e2 73 e3 92 a4 74 83 f4 ff 00 41 9b 45 58 96 ba cb 6b bb d4 52 08 ed b8 b9 79 90 fc 41 24 e3 cf f9 44 d9 dc 8a 4e 08 5e 07 27 55 64 37 33 4b 51 4c f1 d5 c1 e6 ef 5f 36 3d e5 82 37 67 89 88 e3 cc 5e cc be 9c 77 1a 87 c1 14 d3 bd 3d 2c 11 bc c8 5f 10 42 b2 65 b2 71 90 83 b2 b1 3f d4 6b 68 80 41 3c bf 10 d3 c7 2c 31 16 db 2a 7c d9 24 0c 82 3b 10 3f d7 4a 86 37 1e ee c6 ca 69 f8 27 96 5b fd 6d ba eb 4d 51 6b ae d9 51 4b 31 34 93 c5 e5 b6 c6 c1 19 5d d9 05 70 58 72 31 df 57 2f 44 78 d5 1c d5 22 9b ab e2 82 08 8a a8 4a ea 28 4e d4 6f 53 2a 64 90 0f 1c ae 40 e4 9c 0d 72 f3 d4 d2 2c b3 fc 2d 74 d9 0e 0c 4a d1 e4 9c 8e 7e 70 30 3b 9c f0 01 d3 82 5c a6 a7 85 5a 6a 77 92 22 db 22 a8 52 42 86 5c 12 aa e3 e5 63 82 32 0e 70 08 ed ad 58 b2 cb 1f 63 36 5c 70 c9 f5 23 bc Data Ascii: stAEXkRyA$DN^'Ud73KQL_6=7g^w=,_Beq?khA<,1\|$;?J7i'[mMQkQK14]pXr1W/Dx"J(NoSd@r,-tJ~p0;\Zjw""RB\c2pXc6\p#
2024-04-16 15:06:11 UTC	1369	IN	Data Raw: b6 d0 43 72 06 3b 5f 0d d7 49 a5 0c ae fe e7 33 5f a2 83 5b f1 aa 65 e9 a1 a3 23 07 19 07 ea 3b 1f ae 8b 5d e3 84 0d 0d 1e 86 80 14 68 01 a1 a3 d5 0b 05 a4 b7 69 9e 9e dd 33 c4 40 99 f1 14 59 6c 65 dc 84 5e 7d 0e 5b 3f 96 95 fe 7a 8c f8 89 3b 53 52 da 03 b2 c7 08 b8 89 ea 19 f0 02 c7 0c 32 cb 93 9e 00 ca af 27 54 9c b6 45 cb d9 37 fa 0c c7 0d f3 51 f7 67 2b b4 06 3b b5 7d 35 24 32 49 1c 55 13 24 51 44 bb 99 82 bb 28 23 1d fb 7a 77 ef eb a6 0e af e9 5e ab 92 d7 55 e5 bd b2 8f 7a 19 5e 86 a6 ac 25 65 57 6c 04 8c 64 85 ff 00 0b 6d 24 8e 73 c6 a4 76 e8 ea 66 b5 d2 57 52 43 73 a1 80 ed 45 a8 5d d1 bd 5d 41 19 00 38 c1 51 df e5 43 9c 72 e7 d3 4b 3a 6b a0 6b 6e 54 2f 53 6f b8 5a 97 2d e6 c8 af 37 96 ee 48 04 76 0d b9 b9 39 27 9e 0e bc dc b3 6d 76 d9 e9 23 8c 82 Data Ascii: Cr;_I3_[e#;]hi3@Yle^}[?z;SR2'TE7Qg+;}5$2IU$QD(#zw^Uz^%eWldm$svfWRCsE]]A8QCrK:kknT/SoZ-7Hv9'mv#
2024-04-16 15:06:11 UTC	1369	IN	Data Raw: 5d 0d 65 8d 00 34 59 34 16 3f 4d 16 b2 d0 d4 58 05 a1 a3 c6 8b 40 03 43 43 43 1a 00 1a 1a 3d 16 34 00 5a 3d 0d 0d 16 01 63 43 47 a1 a2 c2 82 d0 d1 34 91 ac 89 1b 3a 87 93 3e 5a 93 cb 60 64 e0 7a e0 77 d6 47 b6 a4 02 00 92 00 19 27 50 4e a6 ea d9 6b 26 7b 6f 4f ca 3c 91 94 96 b5 49 06 46 f5 58 b1 ce d1 ea e3 bf 61 8e fa c7 c4 fe a7 14 b2 0b 05 2c a5 0b e0 57 48 0e 30 b8 07 ca 07 d3 20 82 df 42 07 ae a2 f6 d8 9a a6 b9 28 aa 9d a9 00 5d c4 15 2a 02 e3 93 9f 6e c0 7d f9 f6 d7 27 5d ae d8 fa 70 fc ce ae 87 45 6b a9 35 f8 1a a4 b6 5c ef 4d 1f ee ca 78 e2 b6 52 4c 60 99 d9 81 3e 76 d2 c4 84 1c 9e 3b 77 ef f7 3a 96 f4 f7 4a d2 55 50 9a 05 a7 dd b4 13 3d 6c d0 f3 86 3d 93 d0 30 00 8c 11 c7 1d 87 7d 96 a8 2c f1 43 24 96 ca 79 25 8e 28 f6 ee 79 9d 7c b4 dc 0b 15 65 Data Ascii: ]e4Y4?MX@CCC=4Z=cCG4:>Z`dzwG'PNk&{oO<IFXa,WH0 B(]*n}']pEk5\MxRL`>v;w:JUP=l=0},C$y%(y\|e
2024-04-16 15:06:11 UTC	1369	IN	Data Raw: 45 63 b6 3c 66 9a aa b1 99 1a e9 52 0e 32 08 e4 28 c9 e7 b6 40 d4 07 ab 5f ab a9 60 9c 75 57 4b 79 8e 41 56 b9 24 3b a4 53 bf 21 92 44 e1 4e 79 c9 07 3e bd ce ad a9 3c 70 e8 69 23 3d 37 6f b6 cd 6e b6 51 4c 23 a6 98 60 c7 24 6b d8 aa 8f 99 07 be 73 9f 7c ea 61 d3 57 3b 55 fe 22 f6 da ca 7a e5 2b ca c6 d9 38 3e eb df f5 1a af 56 78 9d ca 1c 16 58 e3 95 52 97 25 01 47 d4 1d 39 72 e9 96 b5 49 3c b1 dd b0 16 1a aa cf ec 89 c1 f9 8b 20 25 4f 27 82 be 9a 96 75 fd d6 82 8f c0 5e 92 e9 ca 6b 84 15 11 5a d9 3c ea ca 69 03 47 2c 8c 64 72 a8 7d 58 67 04 1c 11 a9 e7 54 78 5f d2 37 78 64 66 b3 c7 05 49 07 13 53 ff 00 0d f3 f9 70 75 52 5d fc 24 bf d0 4d 29 e9 ab a2 d4 b9 20 b5 34 eb b1 b0 bd b9 fc 2c 7e a4 6a f0 cd 86 6f bd 79 e4 27 8b 2a 57 56 35 5b 6f 5d 3d 0d 5c 62 Data Ascii: Ec<fR2(@_`uWKyAV$;S!DNy><pi#=7onQL#`$ks\|aW;U"z+8>VxXR%G9rI< %O'u^kZ<iG,dr}XgTx_7xdfISpuR]$M) 4,~joy'*WV5[o]=\b
2024-04-16 15:06:11 UTC	1369	IN	Data Raw: 8d 14 c8 31 1e 48 c7 2c 48 c6 76 e3 53 cb b5 e6 86 8a c3 59 79 a7 9e 1a 98 69 e3 2e 9b 5c 36 e6 3f 81 4e 3b 64 91 df 55 45 3d 92 e9 7e 49 6e 57 26 95 16 a5 92 ae a6 44 d8 b2 4a 71 85 cb f0 80 e0 01 81 b8 81 80 38 e7 5a 7a f7 a6 e4 a3 a2 a7 bb db 36 45 2c 5b 12 48 0a 9d f5 29 fc ca f2 e7 e6 f9 77 10 18 11 9c 0d 70 df c6 3d 4e a3 c7 83 b6 be 18 9a 8a 6f 94 39 59 2c af 35 6d 2d ce e7 2a d4 c6 2a 0c 95 1e 74 98 7f 30 8d e4 95 ec 0e e2 30 3d 3f 2d 04 4a 8b 9d 74 d5 31 46 8f b2 a5 a6 65 a9 94 b0 11 a2 f2 5d 8f 24 0c e7 8e 3b 0c 68 fa 6a a2 3f de 74 d6 84 94 4d f1 71 cb 54 db e3 26 52 18 29 8d c9 3c 03 8f 97 27 d1 78 1a 66 a8 59 6b 2f b3 5a 69 a0 5b ad 40 90 33 3f 9a c8 b4 80 1f c7 95 e0 fd 41 e3 db 5c 89 cd c9 db 3a 71 8d 70 3c 54 5c 15 ad 11 cb 4a ef 0a b3 f9 Data Ascii: 1H,HvSYyi.\6?N;dUE=~InW&DJq8Zz6E,[H)wp=No9Y,5m-**t00=?-Jt1Fe]$;hj?tMqT&R)<'xfYk/Zi[@3?A\:qp<T\J
2024-04-16 15:06:11 UTC	1369	IN	Data Raw: b9 d7 ed e9 fb 6d a7 74 35 d1 40 cb e7 16 99 37 ac 70 3a 8c 17 91 48 1b f8 28 99 18 5e 32 cf 2d 5d 3f 55 88 2e dd 50 8b 6a e9 1b 54 62 3b 5d 82 8b e5 9e b0 0e 51 15 7b 85 cf 77 3d f2 49 39 23 1c 35 99 f2 d7 9f 3e 4e cb c3 d9 0a fa 5a dd d3 fd 67 76 a2 bd 75 65 65 07 4b 74 35 25 43 41 6b a3 9e 72 8b 56 e3 93 12 16 e5 94 71 b9 cf 2c 7b fb 06 8f 1f fa fa f5 d6 d5 b1 f4 b5 86 d1 57 68 e9 3b 62 ee 88 3c 26 25 a8 45 e3 ce 63 db cb 1e 9f f5 d3 27 53 dc 2a 7a 92 ea d5 b7 1b 6b d3 b2 22 c1 49 4f 10 09 4f 49 0f a4 71 a1 fc 23 d4 9f 5e e7 4c 72 75 27 52 74 8c b1 8b 55 de b2 de 99 2b e5 6f f3 69 e6 50 70 70 8c 0a b2 e7 d7 1a 66 24 9c ad 77 f0 46 48 34 b9 ec 48 68 fc 16 ba 5c ac 34 f7 28 6b 60 41 53 91 47 1d 44 4d 19 99 54 02 cc c4 ff 00 67 90 46 d0 47 23 9e 38 d4 3e Data Ascii: mt5@7p:H(^2-]?U.PjTb;]Q{w=I9#5>NZgvueeKt5%CAkrVq,{Wh;b<&%Ec'S*zk"IOOIq#^Lru'RtU+oiPppf$wFH4Hh\4(k`ASGDMTgFG#8>
2024-04-16 15:06:12 UTC	1369	IN	Data Raw: 43 24 68 f8 f9 95 5c 85 2c a0 e4 02 40 24 73 81 ae d6 95 ae 94 4e 16 b6 0d 65 66 5e 9a 19 3e 9a 32 06 8b 5a 4c 81 11 a2 c6 b2 3d b4 5a 00 2c 68 b1 ac 8e 8b 53 65 42 d0 e7 47 8d 0d 00 62 34 7a 3c 68 63 40 05 a2 d6 58 d0 c6 80 0b 43 47 8d 0c 68 00 b1 a1 a3 c6 8c 0d 16 06 38 d0 d6 58 d0 d1 60 63 a1 ac bd 34 58 d1 60 16 86 8f 45 8d 48 05 a1 a3 c7 1a 18 d0 01 68 68 f4 0e 80 a0 b4 31 a3 c6 86 80 a0 b4 31 a3 c6 86 80 0b 43 47 8d 0d 01 41 68 68 f4 0e 80 0b 43 47 a1 a0 02 d0 d1 e3 43 1a 00 2d 0d 1e 86 80 0b 43 47 a1 a0 01 a2 d1 e8 7a e8 00 b4 34 7c e8 68 00 b4 34 7a 18 d0 4d 05 a1 a3 d0 c6 80 0b 43 47 8d 0d 04 85 aa ef c6 ca c9 85 0d 25 9a 69 28 a3 b5 57 c6 d2 55 f9 cc 15 98 c6 ea 54 6e 27 e5 5c e0 92 06 78 ee 35 39 bd d7 ad aa cd 5b 74 7a 3a da d5 a4 85 a6 6a 7a Data Ascii: C$h\,@$sNef^>2ZL=Z,hSeBGb4z<hc@XCGh8X`c4X`EHhh11CGAhhCGC-CGz4\|h4zMCG%i(WUTn'\x59[tz:jz
2024-04-16 15:06:12 UTC	1369	IN	Data Raw: 31 05 be ff 00 07 58 34 7b 6d 77 59 23 b7 df 7c a5 cf 97 2f 68 2a b3 e9 9c 00 4f b8 5f 7d 3f 78 77 d5 31 50 5c 60 bd 5e 63 ab 92 6b 5d 5a 53 5d 59 55 8f 92 58 18 c5 44 9f dd 49 01 53 eb 82 0e 7d f4 cb d6 be 31 f4 68 a0 bb 58 ea e9 d2 ed 6e ac 53 0a a4 e7 0c 63 23 d5 17 2d 95 60 0a 93 8c 11 f6 d5 7b 5d d5 eb 76 a8 6a a8 e9 a3 2d 22 a2 4b 34 e7 6b 49 b4 70 5c 0e 0e ba 78 5e 48 ed 93 5d 8a 38 c6 49 c2 fb 9d bd 6c b8 5b ae 73 54 c3 6a b9 d0 dc 1e 95 82 54 2d 3d 4a 48 62 24 64 06 c1 e0 91 ce 34 35 c2 f5 f1 7e f1 8a 17 2e d4 b0 ae ef 2c 52 ed 86 32 4e 32 40 51 cf 61 df fd 74 35 d8 5f 13 8f 94 72 ff 00 f0 cf fd 7f b1 df 13 24 73 53 3d 35 44 51 4f 03 82 1e 19 50 3a 30 3d c1 53 c1 d7 33 f5 9f 4e 5a ba 2f c5 7b bf 59 d7 de 9a 1a 6e 9f 89 2a ed b4 2e ea ef 57 24 fe Data Ascii: 1X4{mwY#\|/hO_}?xw1P\`^ck]ZS]YUXDIS}1hXnSc#-`{]vj-"K4kIp\x^H]8Il[sTjT-=JHb$d45~.,R2N2@Qat5_r$sS=5DQOP:0=S3NZ/{Yn.W$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.11	49940	154.62.106.12	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:06:10 UTC	379	OUT	GET /wp-content/uploads/2018/10/about.jpg HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:06:13 UTC	393	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:06:13 GMT Content-Type: image/jpeg Content-Length: 335024 Connection: close Cache-Control: public, max-age=31536000 X-Hcdn-Image-Optimizer: f:jpeg q:85 w:1600 alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 238aa1a32c4dfe5ef69720760d3b90df-bos-edge2 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 2.445 Accept-Ranges: bytes
2024-04-16 15:06:13 UTC	976	IN	Data Raw: ff d8 ff e1 00 80 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 05 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 4a 00 00 00 1b 01 05 00 01 00 00 00 52 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 69 87 04 00 01 00 00 00 5a 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 02 00 02 a0 04 00 01 00 00 00 40 06 00 00 03 a0 04 00 01 00 00 00 ce 02 00 00 00 00 00 00 ff e1 01 79 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 Data Ascii: ExifII*JR(iZHH@yhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:x
2024-04-16 15:06:13 UTC	1369	IN	Data Raw: 70 41 c1 15 c0 1c f4 3f c2 84 20 f7 03 9a 1c e3 18 ea 2b 94 08 eb 9a e4 82 78 00 9a 10 bb 1d fd 28 3a 7d 0d 0a 92 52 70 47 4a e2 95 1c ab 07 f8 50 84 04 10 33 8e 3b 50 8c 9e c0 66 83 f8 e2 8d b4 e7 01 3f a5 08 45 e7 d7 af 5a 1e a3 83 df 9a ee 47 18 fe 35 c0 01 f8 b3 8f 6a 10 80 63 9c e2 87 1d f1 c5 0e 47 09 c9 da 3d 07 34 03 a9 ef ed 42 17 1c a4 f3 cd 4a e9 9b ec 9b 1c d4 3c c9 5f 95 bb 2e a1 3f 98 7a fd 6a 28 03 91 cf d4 7a 50 80 72 3b 03 eb 52 63 dc c7 07 34 c8 a4 e6 b5 c0 b5 d5 05 7a 83 47 de ed da a2 ca 86 56 a4 3a a5 a7 ee d4 78 e7 d3 fe d5 97 f8 b3 e1 db d6 b9 0e dc ed 4c a8 a0 1d cf 34 91 8d c3 f7 93 ef ec 2a 99 a3 b5 1c ed 33 73 4b ad 6e 54 75 1c 38 da 79 c7 ae 2b d3 7a 66 ed 68 d5 f6 34 b6 14 95 9f 2c 04 9c 9f 94 63 81 5e 85 91 61 7d 42 15 d8 94 Data Ascii: pA? +x(:}RpGJP3;Pf?EZG5jcG=4BJ<_.?zj(zPr;Rc4zGV:xL4*3sKnTu8y+zfh4,c^a}B
2024-04-16 15:06:13 UTC	1369	IN	Data Raw: 8e 94 e1 e4 86 5a 5b cd a5 c2 d6 01 e8 09 3c d7 a6 fe d0 de 0f 26 f2 ca af b6 26 d0 dd cd 80 54 30 38 79 3f ba 7f de bc c6 1c 75 95 98 92 db f2 5e 69 65 0a 6d 69 c1 6d 5e b5 cf 8d 04 c2 33 15 05 6f 87 10 44 13 1c c2 d2 3c 10 f1 09 fd 29 7d 44 59 6e ab e0 1e 50 0b 4e 73 e5 ab d6 bd 84 d9 b7 ea 5b 1e e5 6c 75 2e b7 c7 19 04 11 5f 3b 80 71 b7 52 b0 92 01 1b 95 c7 53 9e b5 e8 af b3 77 89 8b 6d 68 b0 5d 96 46 0e 19 59 57 51 e9 53 b3 c6 2d 37 4f 25 5d a2 0d f1 78 62 ab 1e 30 e8 cb cf 86 5a ad 3a c7 4d b6 b1 11 0e 6e 7d b4 8e 12 09 fe 95 e8 5f 05 b5 fd bb 59 e9 c8 f2 58 73 e7 28 01 68 27 94 28 75 15 6b d4 76 a8 3a 8e ce e3 0e b4 87 50 e3 78 20 8f c4 3d 2b c9 57 08 b7 5f 03 3c 48 44 d6 7c e5 69 99 ef 61 c0 9e 8c 92 7f b7 f4 ad c4 89 4f 2c f7 1d aa a0 4c 61 74 fe Data Ascii: Z[<&&T08y?u^iemim^3oD<)}DYnPNs[lu._;qRSwmh]FYWQS-7O%]xb0Z:Mn}_YXs(h'(ukv:Px =+W_<HD\|iaO,Lat
2024-04-16 15:06:13 UTC	1369	IN	Data Raw: 3c a5 43 3f da aa 3e 16 5f 11 69 fb 43 c0 df f1 04 5c 21 88 25 5d 50 46 49 4e 7f 51 56 7f 17 1d 0c 78 ff 00 68 48 21 0a fd a1 0b 61 cf cc 0e 48 3c 7b d4 cd a3 b6 82 d8 83 32 14 e1 b6 eb 5a 1d b3 d5 4f d9 5d 11 3e d6 37 86 1c 48 06 6d 99 b2 9e 70 49 1d 78 a8 3b ae 94 4d ef c7 cb fd d5 8b 94 88 13 a0 34 d8 de c9 20 ad 2a 1f d2 9f eb 42 ab 7f da e6 c1 35 28 ca 5f 86 63 95 0e c0 e7 fb d4 9a 64 88 7f 6a 17 20 ad b5 16 6e 96 be a3 a6 40 e8 7f 85 68 7d d7 82 d7 61 3d 79 a9 82 e6 90 5b 8d df 8f 44 8e ad b0 44 d6 f1 8e 99 d4 0a 6e 1e a1 65 1e 65 b6 7a 47 ca fa 7d 41 f4 ec 47 6a c6 a2 49 54 0b 93 da 0f 5b 32 b6 5f 65 78 69 d5 7e 26 94 7f 0a d2 af 4e e0 d6 ab 3b 57 69 cb d6 aa bb f8 79 74 94 e5 ba f3 6a 91 e6 5a e6 63 6e d2 79 1b 4f 7f 42 3b 8a 2e a0 b0 c0 f1 2e 03 Data Ascii: <C?>_iC\!%]PFINQVxhH!aH<{2ZO]>7HmpIx;M4 *B5(_cdj n@h}a=y[DDneezG}AGjIT[2_exi~&N;WiytjZcnyOB;..
2024-04-16 15:06:13 UTC	1369	IN	Data Raw: 7e 15 7f ab d0 9f a1 ac d7 c3 4d 50 98 d2 d7 a6 ef 0c aa 20 f3 36 00 e7 ca a8 cb 1c 14 90 47 52 7f 8d 46 d3 0c dd 11 e0 eb 6f 31 98 f8 59 9c 03 bf 91 94 23 a1 d7 4f 04 af d9 fa f8 ff 00 87 be 33 9b 1c d9 40 c5 98 e7 c3 a9 69 38 49 57 e4 57 f6 af 5c 7d a0 74 6a 3c 45 f0 a6 74 16 36 99 61 b0 fc 55 11 ca 5d 40 c8 c7 b1 e8 7e b5 e3 5f 1a ad 52 a2 ce 45 d8 23 c8 95 19 48 50 5a 52 01 73 9c 87 07 af 6a f5 b7 d9 7b c4 b8 fa fb 43 34 c4 b5 04 5c e3 7d d4 94 92 39 50 1f 88 7b 1e b5 d8 83 19 af 84 27 cb 81 c4 2b 0c ef 36 30 12 9e 3c 46 1e 2b c1 68 4a fe 2b cb 94 85 b6 e2 16 59 79 b5 23 94 28 70 47 af 51 5a 7f d9 ff 00 c5 07 bc 37 d4 e9 87 25 c7 15 a7 e6 b8 3c c4 93 fe 42 cf e6 1e de b5 64 fb 60 78 78 ee 93 d6 df e2 b8 2d 79 76 bb c2 f1 27 6a 70 19 91 eb ff 00 dc 39 Data Ascii: ~MP 6GRFo1Y#O3@i8IWW\}tj<Et6aU]@~_RE#HPZRsj{C4\}9P{'+60<F+hJ+Yy#(pGQZ7%<Bd`xx-yv'jp9
2024-04-16 15:06:13 UTC	1369	IN	Data Raw: 65 44 5a b7 a2 53 21 c0 42 b9 cf b5 63 9f 1b 22 6d d6 4c d9 b2 97 22 6c a5 f9 cf ac f0 56 b2 79 19 ee 2b 5b d1 2a 5a 0a ee ac a0 8f 81 86 5e 50 42 7b 0e 49 1d fa 0a 5f 58 60 89 01 cc 38 1a 7b 28 59 1a 5c f2 33 53 7f 69 04 84 5d 2d 2f 02 82 b7 18 5b 28 de 9c f2 08 27 f5 ac 06 ec 36 49 fc 68 04 83 82 3a 91 5e 95 f1 a8 db af de 17 5a ef f6 e5 a0 a5 a7 12 e7 98 72 77 05 8c 01 eb de bc db 71 0e 29 bc ab 68 c2 88 51 03 91 f4 ac 5f e9 a7 ce c6 18 44 8b 49 07 91 5a 6d e2 f4 9f 91 0a db e0 aa 5a 9b a8 64 5a 5d 3b c3 cc fc db b8 19 f4 15 2b 6d 8b 37 43 78 cb 6b 69 a5 25 2d 46 25 cc 79 87 21 a7 01 ca 3f be 2a 8f e1 fd d5 36 7d 6d 69 b8 a8 12 d3 72 52 85 6e eb 85 70 4f f7 af 43 eb cf 0d 5d bf 6a bb c5 dd d7 ca 5b b8 42 65 71 54 8e ad a9 23 8c e2 af b5 fd 43 ec 2d ad Data Ascii: eDZS!Bc"mL"lVy+[Z^PB{I_X`8{(Y\3Si]-/[('6Ih:^Zrwq)hQ_DIZmZdZ];+m7Cxki%-F%y!?6}mirRnpOC]j[BeqT#C-
2024-04-16 15:06:13 UTC	1369	IN	Data Raw: a3 7c 85 27 7a 88 56 38 03 a1 a2 9f ae 7d cf 6a 10 14 9e 9d be ce b1 3e e3 90 8a 14 1d 4e 1c 42 d3 9f d4 7b d6 d5 e1 3e a0 b7 5f 88 62 6b 4c 19 ad e0 a0 9e ab 47 b6 7a 90 7a 7a 56 02 72 47 7a 7f 6a 9f 2e cb 72 62 6b 45 49 5b 44 2c 61 58 50 1d 78 3d b3 58 6d 96 36 da 18 65 43 b5 30 6a bd 58 d2 9e b6 dc 8a 82 81 8a a3 94 92 06 31 51 de 24 69 08 da 96 d4 1e 88 d2 50 fa 79 4a 92 39 41 f7 fa d3 1d 23 ab 2d 7a b7 4f 25 2d af 63 bc 6f 4a bf 13 6a 1f d6 ac 1a 72 e3 22 1c c7 21 4d dc b4 a4 0f 2c ec 20 e3 b9 cf 7c 9a f1 af 6c 68 0f be da 3d bd 42 d2 c7 34 70 2b ce d2 e1 4e d3 97 43 0e e2 17 15 29 ff 00 2d c2 38 57 d0 d5 da c1 7b 4f 92 db ea 79 2b 1d 1c ca 73 c6 78 ad 57 5f 68 68 ba 96 ca f3 cd c7 57 98 13 9c 0f c4 3f d4 3d eb cf ef 46 9b a6 af 26 0c a8 af ab 24 21 Data Ascii: \|'zV8}j>NB{>_bkLGzzzVrGzj.rbkEI[D,aXPx=Xm6eC0jX1Q$iPyJ9A#-zO%-coJjr"!M, \|lh=B4p+NC)-8W{Oy+sxW_hhW?=F&$!
2024-04-16 15:06:13 UTC	1369	IN	Data Raw: 45 c1 5e 70 33 8e a6 8d e6 00 52 14 ca 48 4f a9 eb 5d 95 a5 64 06 f9 ea 79 e9 ff 00 6a 10 89 8c 1c 11 9f 51 5c 71 d7 27 8a 3e 4a 91 93 81 8e 4f 15 c5 6a 3c 25 09 39 ed eb f5 a1 15 49 a4 1c 13 93 ee 68 c1 24 a0 12 70 9c ff 00 3a 36 ec a5 49 f2 86 54 3b 76 a2 15 67 1c 03 8f 51 42 68 db d6 95 85 05 9c 8e 87 d2 ad 5e 1e 6b 09 3a 5e e9 e7 48 5c 93 09 d5 02 a0 95 74 3d d5 8e f5 54 0e 63 27 6a 79 18 a0 f3 32 84 a0 a4 10 91 84 93 d7 1e 95 38 71 1d 0d c1 cd 35 0a 0f 86 d8 8d 2d 70 98 2b da 16 39 f6 8d 67 61 0a 12 3c ed e9 e1 44 fe 23 e9 81 58 07 8d 1e 1f 4c b0 cf 76 f1 09 85 bd 0d 43 2f a1 23 fc a3 fb df 4f 5a 8e f0 b3 c4 03 a6 e5 b7 02 4a 1b 8d 0d 6a 18 79 a0 4f 96 73 d4 8f 7e e6 bd 51 18 db 35 6d 91 20 86 1c 52 91 9d a5 3c 13 fd eb bf 7a 15 b6 0d 4f c1 f6 5e 72 Data Ascii: E^p3RHO]dyjQ\q'>JOj<%9Ih$p:6IT;vgQBh^k:^H\t=Tc'jy28q5-p+9ga<D#XLvC/#OZJjyOs~Q5m R<zO^r
2024-04-16 15:06:13 UTC	1369	IN	Data Raw: 52 7a 9f 7a dd be d1 be 0d ae 69 73 52 e9 b6 52 8b 82 06 5d 6d 1c 07 d2 3b 1f f5 7a 56 05 6d b9 3f 1a 42 02 9a 58 90 d9 29 75 b5 9c 28 0e e0 8f 51 58 62 43 10 9f 27 55 a5 6d 11 2f b2 70 f1 de bd 4b e0 0f 89 49 bd 41 fd 93 73 51 6a e3 1b 08 71 2b 3d 7f d5 5a 17 88 da 3a db ab f4 f4 88 33 63 21 d4 bc 8c 28 11 df b1 1e f5 e4 c8 5e 7e f8 ba 9b 4e bd ff 00 1a c8 ca 42 7e 52 b1 dd b5 8f 5a f4 f7 84 1a ee 1e ac b0 34 ad c1 a9 49 f9 1f 65 47 e6 6d 7d c5 6e 69 2d a6 3e a3 58 ac 4f 00 f7 c5 36 ee 3a c1 62 3e 15 df ae fe 13 6b 9f f0 3e a2 75 c5 5b 1f 73 36 c9 2b 3f 2f 5f c0 6b d5 30 de 44 c8 c8 7d a2 36 ac 67 8e d5 9e 78 dd e1 bc 0d 6b a7 5d 61 60 37 29 1f 78 c4 84 7e 26 96 3a 11 55 6f b3 ee b4 ba 36 a9 1a 27 54 ee 6e f1 6d 21 1b 95 d2 43 7d 12 b4 ff 00 7a 64 09 09 Data Ascii: RzzisRR]m;zVm?BX)u(QXbC'Um/pKIAsQjq+=Z:3c!(^~NB~RZ4IeGm}ni->XO6:b>k>u[s6+?/_k0D}6gxk]a`7)x~&:Uo6'Tnm!C}zd
2024-04-16 15:06:13 UTC	1369	IN	Data Raw: 85 6c 4b 6e 23 2b c7 fa 81 35 73 dd 2b f3 c8 b4 f9 2b db 52 00 cc 1f 54 de 06 9e b3 5c fc 70 d5 d6 db 94 44 b9 2f ca 6e 4b 4b 57 07 61 03 38 3e b4 e3 54 c0 7e d9 3e 2c 29 d2 1c 8c f2 4e fb 15 e0 0e 8b 1d 59 59 f5 f6 3d 45 1e ee e1 b6 fd ad ad 2f a9 5f 77 77 b2 29 b4 a4 7e 62 9e 73 fc 85 56 2e ba d6 f0 2f fa 93 48 ea 9b 62 ee 1a 71 33 49 89 25 08 cb 91 4e 78 27 e8 79 04 74 ad 0f 2d 06 64 66 7d f4 54 1e d7 39 b2 6e c0 47 95 07 98 cd 4b 5f 6d 56 ff 00 17 2d 0f db 27 a1 36 7d 71 67 e1 0b 3c 29 5d c1 07 f3 36 ae be d5 9c 59 e6 bc e4 97 74 6e b7 8c b8 77 a8 a7 6b 0e af 85 7b 10 7b ff 00 7a b8 b6 ec 9b c4 88 ec 31 70 6d 9d 51 6c fb cb 6c fe 89 9a d7 fe 9a fe bd c7 63 cd 4f ea 3d 3f 6e f1 93 4b 25 d2 13 69 d6 56 a3 84 95 f0 a4 ac 75 42 bd 50 7b 1e d5 4d a2 0b 63 Data Ascii: lKn#+5s++RT\pD/nKKWa8>T~>,)NYY=E/_ww)~bsV./Hbq3I%Nx'yt-df}T9nGK_mV-'6}qg<)]6Ytnwk{{z1pmQllcO=?nK%iVuBP{Mc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.11	49941	142.251.15.91	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:06:11 UTC	2417	OUT	GET /api/stats/watchtime?ns=yt&el=embedded&cpn=F6GU1QEdhoMLD-Np&ver=2&cmt=2.093&fmt=398&fs=0&rt=24.459&euri=https%3A%2F%2Fniceindiatravel.com%2F&lact=24500&cl=623129822&state=paused&volume=100&cbr=Chrome&cbrver=117.0.0.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240409.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&delay=4&hl=en_US&cr=US&len=157&rtn=34&afmt=251&idpj=-1&ldpj=-22&rti=24&size=1267%3A713&inview=0&st=2.093&et=2.093&muted=1&vis=3&docid=wAD9uO9YAQw&ei=y5MeZqSPB9aoy_sPxcuI0A8&plid=AAYWOBKoz4xd3wIM&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2FwAD9uO9YAQw%3Fplaylist%3DwAD9uO9YAQw%26iv_load_policy%3D3%26enablejsapi%3D1%26disablekb%3D1%26autoplay%3D1%26controls%3D0%26showinfo%3D0%26rel%3D0%26loop%3D1%26origin%3Dhttps%253A%252F%252Fniceindiatravel.com%26widgetid%3D1&list=TLGG0nOp5Ks1AkExNjA0MjAyNA&of=wbAUJoLFDaeeOSJrHXH1sg&vm=CAEQABgEOjJBSHFpSlRJaWlUV3AtaVVHU3dxLUpoNjVrV0taQVJBeTRCbVVLMmJUWXhKOURvQUVkd2J3QVBta0tES0l3V1JHa3UzUFV5akd4WUhVUEZvYWZzdmJ3VzNvV3ZjMWR6Q3ZYY3B0Wjd2aWh4NV9qdk9kR3NGMFRSLTdDcmRpYy1ydVI4bW1ZYi1oNjd3Tzc2cXd3bXBXcG1FMTliMUhRM0x4dW53SEV5RUFXNEFoAg HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1713279945329&flash=0&frm=2&u_tz=120&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1267%2C713&vis=2&wgl=true&ca_type=image sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-YouTube-Utc-Offset: 120 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240409.01.00 X-YouTube-Time-Zone: Europe/Zurich X-Goog-Visitor-Id: CgtJMG1ONlpYUjdsOCjIp_qwBjIKCgJVUxIEGgAgKA%3D%3D sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/wAD9uO9YAQw?playlist=wAD9uO9YAQw&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&origin=https%3A%2F%2Fniceindiatravel.com&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
2024-04-16 15:06:11 UTC	410	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Date: Tue, 16 Apr 2024 15:06:11 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate X-Content-Type-Options: nosniff Server: Video Stats Server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.11	49942	142.251.15.91	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:06:11 UTC	1558	OUT	POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 1520 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1713279944974&flash=0&frm=2&u_tz=120&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1267%2C713&vis=2&wgl=true&ca_type=image sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Goog-Request-Time: 1713279969898 Content-Type: application/json X-Goog-Event-Time: 1713279969898 X-YouTube-Utc-Offset: 120 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240409.01.00 X-YouTube-Time-Zone: Europe/Zurich X-Goog-Visitor-Id: CgtJMG1ONlpYUjdsOCjIp_qwBjIKCgJVUxIEGgAgKA%3D%3D sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/wAD9uO9YAQw?playlist=wAD9uO9YAQw&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&origin=https%3A%2F%2Fniceindiatravel.com&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
2024-04-16 15:06:11 UTC	1520	OUT	Data Raw: 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 68 6c 22 3a 22 65 6e 22 2c 22 67 6c 22 3a 22 55 53 22 2c 22 63 6c 69 65 6e 74 4e 61 6d 65 22 3a 35 36 2c 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 31 2e 32 30 32 34 30 34 30 39 2e 30 31 2e 30 30 22 2c 22 63 6f 6e 66 69 67 49 6e 66 6f 22 3a 7b 22 61 70 70 49 6e 73 74 61 6c 6c 44 61 74 61 22 3a 22 43 4d 69 6e 2d 72 41 47 45 4f 48 79 72 77 55 51 36 73 4f 76 42 52 43 33 71 37 41 46 45 4e 72 55 73 41 55 51 6f 70 4b 77 42 52 43 6c 77 76 34 53 45 4d 7a 66 72 67 55 51 6c 63 2d 77 42 52 44 50 71 4c 41 46 45 4a 62 63 73 41 55 51 76 6f 71 77 42 52 44 47 5f 62 63 69 45 50 79 46 73 41 55 51 36 35 4f 75 42 52 44 77 6e 4c 41 46 45 4d 6e 33 72 77 55 51 76 50 6d 76 42 52 44 6e 75 71 38 46 45 4b Data Ascii: {"context":{"client":{"hl":"en","gl":"US","clientName":56,"clientVersion":"1.20240409.01.00","configInfo":{"appInstallData":"CMin-rAGEOHyrwUQ6sOvBRC3q7AFENrUsAUQopKwBRClwv4SEMzfrgUQlc-wBRDPqLAFEJbcsAUQvoqwBRDG_bciEPyFsAUQ65OuBRDwnLAFEMn3rwUQvPmvBRDnuq8FEK
2024-04-16 15:06:11 UTC	432	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Tue, 16 Apr 2024 15:06:11 GMT Server: scaffolding on HTTPServer2 Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-16 15:06:11 UTC	34	IN	Data Raw: 31 63 0d 0a 7b 0a 20 20 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 20 7b 7d 0a 7d 0a 0d 0a Data Ascii: 1c{ "responseContext": {}}
2024-04-16 15:06:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.11	49943	142.251.15.91	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:06:11 UTC	1558	OUT	POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 1373 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1713279950205&flash=0&frm=2&u_tz=120&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1267%2C713&vis=2&wgl=true&ca_type=image sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Goog-Request-Time: 1713279969946 Content-Type: application/json X-Goog-Event-Time: 1713279969946 X-YouTube-Utc-Offset: 120 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240409.01.00 X-YouTube-Time-Zone: Europe/Zurich X-Goog-Visitor-Id: CgtJMG1ONlpYUjdsOCjOp_qwBjIKCgJVUxIEGgAgKA%3D%3D sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/wAD9uO9YAQw?playlist=wAD9uO9YAQw&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&origin=https%3A%2F%2Fniceindiatravel.com&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
2024-04-16 15:06:11 UTC	1373	OUT	Data Raw: 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 68 6c 22 3a 22 65 6e 22 2c 22 67 6c 22 3a 22 55 53 22 2c 22 63 6c 69 65 6e 74 4e 61 6d 65 22 3a 35 36 2c 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 31 2e 32 30 32 34 30 34 30 39 2e 30 31 2e 30 30 22 2c 22 63 6f 6e 66 69 67 49 6e 66 6f 22 3a 7b 22 61 70 70 49 6e 73 74 61 6c 6c 44 61 74 61 22 3a 22 43 4d 36 6e 2d 72 41 47 45 4d 66 4f 73 41 55 51 36 2d 6a 2d 45 68 44 56 69 4c 41 46 45 4c 4c 54 73 41 55 51 74 2d 2d 76 42 52 44 50 71 4c 41 46 45 4c 7a 59 73 41 55 51 38 4a 79 77 42 52 43 68 77 37 41 46 45 4a 61 56 73 41 55 51 69 4f 4f 76 42 52 44 30 71 37 41 46 45 50 61 72 73 41 55 51 36 35 4f 75 42 52 43 71 32 4c 41 46 45 4f 36 7a 73 41 55 51 5f 49 57 77 42 52 43 44 76 37 41 46 45 4e Data Ascii: {"context":{"client":{"hl":"en","gl":"US","clientName":56,"clientVersion":"1.20240409.01.00","configInfo":{"appInstallData":"CM6n-rAGEMfOsAUQ6-j-EhDViLAFELLTsAUQt--vBRDPqLAFELzYsAUQ8JywBRChw7AFEJaVsAUQiOOvBRD0q7AFEParsAUQ65OuBRCq2LAFEO6zsAUQ_IWwBRCDv7AFEN
2024-04-16 15:06:11 UTC	432	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Tue, 16 Apr 2024 15:06:11 GMT Server: scaffolding on HTTPServer2 Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-16 15:06:11 UTC	34	IN	Data Raw: 31 63 0d 0a 7b 0a 20 20 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 20 7b 7d 0a 7d 0a 0d 0a Data Ascii: 1c{ "responseContext": {}}
2024-04-16 15:06:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.11	49945	173.194.219.136	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:06:11 UTC	610	OUT	GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
2024-04-16 15:06:11 UTC	240	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1609 Date: Tue, 16 Apr 2024 15:06:11 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 15:06:11 UTC	1015	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 405 (Method Not Allowed)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px aria
2024-04-16 15:06:11 UTC	594	IN	Data Raw: 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d Data Ascii: .com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.11	49944	154.62.106.12	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:06:11 UTC	377	OUT	GET /wp-content/uploads/2018/10/1-7.jpg HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:06:13 UTC	393	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:06:13 GMT Content-Type: image/jpeg Content-Length: 166466 Connection: close Cache-Control: public, max-age=31536000 X-Hcdn-Image-Optimizer: f:jpeg q:85 w:1600 alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: b48ae8340967922ab2d7d8c9800c9fa3-bos-edge1 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 2.020 Accept-Ranges: bytes
2024-04-16 15:06:13 UTC	976	IN	Data Raw: ff d8 ff e1 00 80 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 05 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 4a 00 00 00 1b 01 05 00 01 00 00 00 52 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 69 87 04 00 01 00 00 00 5a 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 02 00 02 a0 04 00 01 00 00 00 05 03 00 00 03 a0 04 00 01 00 00 00 04 02 00 00 00 00 00 00 ff ed 00 24 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 08 1c 01 5a 00 03 1b 25 47 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e Data Ascii: ExifII*JR(iZHH$Photoshop 3.08BIMZ%GC!"$"$C
2024-04-16 15:06:13 UTC	1369	IN	Data Raw: 51 c1 14 02 34 99 1d 47 ee fc 36 03 0b 95 8f 20 9e 0e 08 61 9f 50 f1 f4 ad 65 54 d3 bd 52 45 f2 16 fa 8f 0e 09 2d ac 0c 50 0c a2 b4 d1 a3 1f de 7e f0 aa 90 d9 24 b1 c9 e0 6a 4b 4d d4 6f 47 d2 52 51 53 5c 22 9d e9 ea 96 ba 39 60 89 55 a4 91 70 24 f0 17 3b 84 7c e0 ee 27 71 e7 00 6b 2c d7 3a 3a 8a ca 7f 05 67 15 62 9a ba 6a 48 22 88 cb 1c a6 62 4c 91 b2 e7 69 e4 82 09 01 4e 36 9e da b3 ed 19 19 d8 37 07 dd ca c2 a8 fb b2 21 72 86 7e 9c 31 c3 5b 04 09 71 dd e1 cf 51 54 0c b2 48 bb c9 67 45 6f e2 50 aa 00 1c 8d c3 3a 35 75 ba 4f f2 6c a6 ad ab 63 a2 8e 14 14 f5 92 89 96 37 74 07 e5 5c 91 fb d0 87 ce 7d 83 f0 70 0e 9b a5 b7 e6 ee 50 c9 7d a2 ae 93 e7 a4 8d 22 9b 7b ac 66 7c 05 67 8d 98 e3 71 c6 c2 32 14 72 06 07 3a 4f a8 3a 66 c3 53 69 77 b4 c5 5b 45 1f ce 3a Data Ascii: Q4G6 aPeTRE-P~$jKMoGRQS\"9`Up$;\|'qk,::gbjH"bLiN67!r~1[qQTHgEoP:5uOlc7t\}pP}"{f\|gq2r:O:fSiw[E:
2024-04-16 15:06:13 UTC	1369	IN	Data Raw: 28 d5 1a e3 59 8d 76 c9 b4 e3 5a c6 b6 dc a2 a7 38 e3 59 8f b6 bb c6 b3 ef 9d 4b 92 a7 18 d6 6b bc 6b 71 ae e9 02 80 4e 4e 30 0f 27 52 e4 22 0d ea 0b a5 2d 92 c9 57 77 ad df f2 d4 89 be 4d 83 27 19 c7 f7 3a ad fa 9b e2 ad 57 fc 27 5f 53 67 b2 fc b5 78 4f 12 9c 56 30 75 92 97 e9 92 4e 08 02 44 24 02 99 f5 e3 27 51 8e a6 f8 99 70 bd 8e ab e9 9a ab 74 6f 4e d2 34 34 c3 85 8e 1d a7 07 ce 79 77 05 77 01 f4 e4 b6 4e 35 58 59 2b a9 ea ed b2 d8 6e b5 73 4b 45 50 cb 26 04 21 cc 12 e3 02 5d c7 94 00 f2 71 c1 03 b6 b8 3d 7f 5e ea 41 c4 76 ee 3b cd b8 3a 70 c3 e2 10 9a 5f e0 5a 87 ea 29 ab ed d0 d5 4a 53 fe 52 3a 65 11 33 85 c3 80 a0 64 21 00 02 0f 07 9f 5e 75 63 7c 30 f8 85 7f a9 a7 5b 5b c7 48 90 3d 15 4a da a9 62 45 4c ed 56 09 10 61 db 69 04 ae 70 58 29 1c f1 aa Data Ascii: (YvZ8YKkkqNN0'R"-WwM':W'_SgxOV0uND$'QptoN44ywwN5XY+nsKEP&!]q=^Av;:p_Z)JSR:e3d!^uc\|0[[H=JbELVaipX)
2024-04-16 15:06:13 UTC	1369	IN	Data Raw: 51 0d 5c 72 49 4e ac 16 65 23 ca 79 df 9e 39 c7 97 e9 3d f5 0f b8 52 dc 2a 6a 5e 2a 98 6a 1e a1 5d fc 70 5c 79 59 40 24 13 f4 e5 40 fa 7b f6 d4 9f a3 7a 1a eb 24 51 5c 67 82 92 3b 6d c5 be 52 49 ea a5 c2 a0 2a 64 1d b9 50 db 48 07 be 46 38 e3 59 5f 2e 7c cc 4a 8d e6 b5 4c 78 d7 73 b4 35 4d 5b f3 6b 1d d6 f7 77 96 49 e6 c3 55 52 db dd 16 ba 14 76 c2 88 c9 3f f4 f6 8c 94 07 23 24 64 67 3a 23 4f 5f d0 36 4b ac c2 a2 cb 60 ae b6 54 51 b1 49 2a 62 95 ea 6a d9 40 dc 61 79 47 ee 89 3c 13 8c 97 3e a3 1a 1a bd 3b 66 b4 78 f7 44 b8 2f 52 c0 af 24 14 b4 d0 c4 d1 f8 d2 72 0e e2 bc 80 1b b1 62 33 cf 07 44 5e e7 44 b6 bf 05 ec 10 da 65 ab 80 05 b7 2c be 2b d5 09 18 8f 98 8c 63 24 aa a1 2c 64 6d a0 60 ed ed 8b b0 6b 53 6c 45 f9 dc fe bf 3f 12 b7 2a dc 71 f9 43 d5 7d 3b Data Ascii: Q\rINe#y9=Rj^j]p\yY@$@{z$Q\g;mRIdPHF8Y_.\|JLxs5M[kwIURv?#$dg:#O_6K`TQIbj@ayG<>;fxD/R$rb3D^De,+c$,dm`kSlE?*qC};
2024-04-16 15:06:13 UTC	1369	IN	Data Raw: f7 c6 00 50 39 ce 09 39 3a 33 64 9e c9 53 f2 15 95 b4 a0 55 ce ec 66 8e 60 0a c2 8a 4f 08 b9 f3 12 a0 36 f3 d8 7d ce 99 d0 c5 79 b8 d3 4e b1 b3 33 d3 53 89 80 81 71 fb 94 c8 49 18 93 9d 98 07 0b ed df b6 81 d4 53 d5 c3 4f 15 7c 92 0a b8 c4 52 45 4b 2e dd a1 59 48 0d e5 c6 e6 18 3d 8e 39 39 e7 5c 3c ac ea c5 9b cf 89 bc 05 61 b4 93 c5 74 b7 d2 dd 2e 56 cb 2a 21 b7 55 ae 5e 69 0e e9 11 37 64 1e 38 0c 18 64 67 d0 e0 e7 41 a6 8e 9a ae 99 e2 58 01 59 1d ca 46 ef 94 18 3c f9 cf 19 c9 e0 8c 8f 43 a6 f6 da 9a 59 ee 74 ed 57 4b 4f 54 8b 1e 7c 3a 84 f0 a3 71 dc 20 54 19 20 91 81 f7 3e da cb e5 ce 58 37 53 dc 0a 8a b8 0e fa 5b 74 bb 62 8a 99 5b 96 00 28 c6 7b 0c 1e 07 b6 a9 a2 e4 df d6 59 32 f3 74 4a 5a 98 6b e5 9a 23 1a 10 a9 1e 3c e0 aa 60 0d 9d b9 fb 9c 12 09 3a Data Ascii: P99:3dSUf`O6}yN3SqISO\|REK.YH=99\<at.V*!U^i7d8dgAXYF<CYtWKOT\|:q T >X7S[tb[({Y2tJZk#<`:
2024-04-16 15:06:13 UTC	1369	IN	Data Raw: db cf 84 5b 20 80 4e 71 b7 39 38 07 8e 75 2b 9b a9 2a 68 ee 8f 0d b9 e5 8a a6 96 3f 0e 55 47 87 c2 4c e3 0a 83 93 80 a4 2e 7e a3 c7 ae bc 0f 57 95 94 90 a2 7a be 9f 22 63 1f 10 b8 ce b7 e4 e0 b9 d4 9b d4 b3 d3 57 cb 12 34 8c 32 52 10 ae c3 05 94 61 dc 70 b9 38 3d 89 24 63 5b bf 5b 5e 18 43 d3 34 54 d5 50 c7 b2 78 10 97 85 10 c6 cd 26 e7 ce 70 3c a3 00 f9 b3 93 cf 77 d4 15 76 0b fb 51 5b 6e 10 d3 cd 0d 2c c7 65 4d 32 6c 91 37 73 fb c6 00 2b 0c 9d a5 71 9c 0c 0d 23 7b a8 ea 98 29 fc 7f 0d 6e 56 c8 96 28 15 45 22 95 a5 0a 98 dc 41 3c 92 d9 ee 0a 64 00 7b 63 59 55 c1 60 38 3f 3f 7e ff 00 7b 72 e7 d6 2c 0a 1f 29 1b ea f8 ad 97 2a 89 2e 17 48 ab ed f4 9f 2e b2 d3 d4 b1 69 5c 38 80 00 9c 8c 17 de 88 1b 04 f0 7b e4 69 a7 4e d2 5c 1b a5 82 cf 72 a9 4b 39 a5 f1 a6 Data Ascii: [ Nq98u+h?UGL.~Wz"cW42Rap8=$c[[^C4TPx&p<wvQ[n,eM2l7s+q#{)nV(E"A<d{cYU`8??~{r,).H.i\8{iN\rK9
2024-04-16 15:06:14 UTC	1369	IN	Data Raw: ec db 1a 91 e5 1b 41 dc b9 00 72 07 3a 83 5e 52 6a ca 4a f9 16 86 ae a0 bd 49 45 a0 65 1e 3c 72 10 50 32 a0 05 8c 78 ef c9 56 2b ce 33 a2 34 f6 aa d9 96 e5 4f 6a a9 85 61 af b7 c9 4f 39 58 0b 10 ec 04 a4 a6 7e a2 b8 0a db 48 23 27 39 e7 42 6e 70 57 bd 25 05 de 0a 8a ab 7d 5d ba 9b c3 b9 22 c3 e0 8a 34 62 76 90 c3 24 03 d8 92 33 c8 38 ed ac 68 7e 2d b9 8c 51 8a dc e2 ba 9d 67 8e 82 e5 5d 25 55 4d c2 aa 44 13 06 53 1f 87 22 28 44 72 5b ea 8d 86 06 06 02 90 7d 8e 8b 8a 8a d4 b8 7e cd aa 8a aa 95 36 16 12 4a 3c 35 da 77 63 23 b9 e0 81 ce 01 1c e8 25 c6 fb 5b 5d 5c 64 92 67 5b 94 e5 05 6d 64 8d 81 51 4e 8d cb 21 e3 0b ec 40 e4 13 9c 6a 63 59 5b 6d b8 c9 6f b8 52 24 f4 a0 34 b1 bd 04 d3 16 92 68 5b 04 45 e2 36 72 e1 c1 65 53 ce ce 06 30 33 61 72 3e fc 5e 05 09 Data Ascii: Ar:^RjJIEe<rP2xV+34OjaO9X~H#'9BnpW%}]"4bv$38h~-Qg]%UMDS"(Dr[}~6J<5wc#%[]\dg[mdQN!@jcY[moR$4h[E6reS03ar>^
2024-04-16 15:06:14 UTC	1369	IN	Data Raw: 05 0d 82 a6 ef 6e 92 8e c3 15 dd 26 86 9a 29 44 b2 ac 1e 07 8c 0e 72 50 8f 15 d0 b0 f3 fa 10 73 9c e9 bf 5a 52 d3 d7 51 8b 55 8a e2 89 69 a4 aa 92 a5 61 21 23 11 ed 0b 19 69 00 24 0d cc 85 81 4c a9 2e 72 06 75 5b e6 4c a4 5d fc ff 00 f7 fd 42 41 bb 10 97 47 75 9d d5 69 d2 e3 4b 11 82 18 22 60 2a 21 89 49 78 01 dc 01 93 00 ef c9 03 6e 4a e3 76 35 6f f4 37 5c d5 5d 7c 58 2e 11 44 5a 98 2c 4c fc 44 5e 42 32 14 82 78 e3 bb 76 f5 d7 9f 7a 4a f5 55 b4 43 fb 3e 4a 9a 22 1d 1a 98 b1 f0 90 b7 98 6d 5e c4 29 21 82 9e 09 c8 e3 4e 60 ad bc d7 cf 2c 76 ba 78 22 15 05 de 56 8d 8c 64 00 c0 34 68 0f f3 f7 e3 5b 7a 3e af 37 4e e5 85 d7 cc ed 52 a7 c4 b9 16 8c f5 1d b3 a8 ec 57 3a f6 a1 b7 dc a2 a8 a8 04 80 a8 09 2d 81 96 f4 e3 1e b9 d1 6c 6b ce d4 f7 0a fb 05 ca 96 be 8a Data Ascii: n&)DrPsZRQUia!#i$L.ru[L]BAGuiK"`*!IxnJv5o7\]\|X.DZ,LD^B2xvzJUC>J"m^)!N`,vx"Vd4h[z>7NRW:-lk
2024-04-16 15:06:14 UTC	1369	IN	Data Raw: dc 69 8c 72 c4 77 1f 10 7a 08 d7 20 79 81 38 c8 c0 ef a2 dd 53 d2 b5 f4 55 cd 6d b7 dc e1 96 4a 2f 2c e9 14 92 45 1c c0 9d c5 8a c9 ff 00 4d cf 66 45 50 a0 e0 8e fa 9d 5a ba 62 ed 47 3d ad ad 15 bd 39 d4 36 ea 79 a2 96 7a 77 80 89 d5 99 4a 32 4b 13 e5 65 31 80 48 50 41 c8 c1 39 c6 91 f1 7a af 44 55 47 57 18 d6 c1 e6 40 aa 68 ae 96 8b 93 d9 ea cc dd 2d 1b d1 89 28 d6 eb 39 92 23 01 c9 0a f2 28 19 52 0e 33 8e 37 76 1c 9d 3b b1 74 dd 65 04 54 d1 52 c5 35 2d d2 aa 31 25 35 a9 8e ca f2 87 0c b5 34 52 f0 95 09 80 7f 76 ad 92 48 c0 04 0c d8 f7 db 75 8a e7 d3 92 52 de ac 8b 6d 9a a6 9d 65 82 e1 6d 89 e7 98 aa fa bd 1c c1 5c c6 14 8c ae 18 a7 38 38 e7 55 f5 2f 55 c7 d3 a9 2d 81 1f a4 eb 6c 5f 41 b7 5e a3 9c 3c 35 08 9b c4 82 36 fd ed 32 30 03 01 4b 28 60 06 40 6d Data Ascii: irwz y8SUmJ/,EMfEPZbG=96yzwJ2Ke1HPA9zDUGW@h-(9#(R37v;teTR5-1%54RvHuRmem\88U/U-l_A^<5620K(`@m
2024-04-16 15:06:14 UTC	1369	IN	Data Raw: 2c 71 a5 2d bf b3 a6 aa aa a4 dc 7e 60 12 ab 39 9c 38 46 c8 5c b8 c7 38 07 83 f9 ef a7 53 c8 b4 32 47 6c 41 43 23 c7 10 f9 47 a6 94 9e 31 87 66 c6 77 13 ca 85 3e 9a b5 73 0f 12 2b 03 1c 42 f4 f1 2b 52 4e d9 4d ac 5a 06 1b 24 53 9c ee 04 fd 24 30 04 fa fa 69 7a 4a b9 2a 69 ea 3f 69 54 78 93 3c cc 23 78 c8 62 4e 00 66 60 7d 18 60 64 7f a6 98 55 56 2d 14 31 ac a0 52 94 85 87 88 b1 10 ea 79 0a a1 98 1c af db 93 f7 e3 5a b7 de 90 52 05 a6 92 0a 69 64 6c c8 c5 4b 76 00 12 01 07 2a 57 d3 23 93 9d 57 90 82 37 5e 7e 51 8e 40 39 8f e7 92 a6 4a 39 23 99 20 aa 81 cb 24 c9 22 f9 d4 0e d9 c7 25 31 d9 86 7b 68 1f 50 c7 47 49 6c 7a 9a 54 14 d2 1d 90 c6 65 9b cd 32 e7 b0 f5 3c 31 0a dd c0 3d f1 a9 34 83 e6 56 5f 96 a8 a7 32 54 37 ee a6 51 b4 b3 a2 7f 4c 8c 8e d8 fe 7a 18 Data Ascii: ,q-~`98F\8S2GlAC#G1fw>s+B+RNMZ$S$0izJi?iTx<#xbNf`}`dUV-1RyZRidlKvW#W7^~Q@9J9# $"%1{hPGIlzTe2<1=4V_2T7QLz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.11	49946	142.251.15.91	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:06:12 UTC	2538	OUT	POST /api/stats/qoe?fmt=398&afmt=251&cpn=jRkNZCQf5oAkxA7P&el=embedded&ns=yt&fexp=v1%2C23858057%2C125239%2C21348%2C76094%2C54572%2C73455%2C230596%2C84737%2C36318%2C6271%2C26443548%2C7111%2C31786%2C4557%2C9954%2C1192%2C10512%2C15711%2C273%2C6966%2C2%2C6689%2C2007%2C4957%2C4115%2C12518%2C1263%2C5498%2C796%2C643%2C5538%2C2893%2C2%2C531%2C819%2C531%2C4712%2C5599%2C1104%2C4465&cl=623129822&seq=4&docid=wAD9uO9YAQw&ei=z5MeZqaINPHUy_sP0eWdmAw&event=streamingstats&plid=AAYWOBLu246nWADi&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2FwAD9uO9YAQw%3Fplaylist%3DwAD9uO9YAQw%26iv_load_policy%3D3%26enablejsapi%3D1%26disablekb%3D1%26autoplay%3D1%26controls%3D0%26showinfo%3D0%26rel%3D0%26loop%3D1%26origin%3Dhttps%253A%252F%252Fniceindiatravel.com%26widgetid%3D1&qclc=ChBqUmtOWkNRZjVvQWt4QTdQEAQ&embargoed=0&cbr=Chrome&cbrver=117.0.0.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240409.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&vis=11.130:0,11.143:3,13.200:0,13.208:3,15.666:0,16.995:3&vps=11.161:B,11.162:PB,13.213:B,13.218:PB,14.456:PA,15.667:B,15.939:PL,16.999:PA&bwm=13.200:65596:0.570,13.208:1571519:1.202 HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 1313 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1713279950337&flash=0&frm=2&u_tz=120&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1267%2C713&vis=2&wgl=true&ca_type=image sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded X-YouTube-Utc-Offset: 120 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240409.01.00 X-YouTube-Time-Zone: Europe/Zurich X-Goog-Visitor-Id: CgtJMG1ONlpYUjdsOCjOp_qwBjIKCgJVUxIEGgAgKA%3D%3D sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/wAD9uO9YAQw?playlist=wAD9uO9YAQw&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&origin=https%3A%2F%2Fniceindiatravel.com&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
2024-04-16 15:06:12 UTC	1313	OUT	Data Raw: 63 6d 74 3d 31 30 2e 34 36 33 25 33 41 32 2e 33 32 33 25 32 43 31 31 2e 31 33 30 25 33 41 32 2e 33 32 33 25 32 43 31 31 2e 31 33 30 25 33 41 32 2e 33 32 33 25 32 43 31 31 2e 31 34 33 25 33 41 32 2e 33 32 33 25 32 43 31 31 2e 31 34 34 25 33 41 32 2e 33 32 33 25 32 43 31 31 2e 31 36 31 25 33 41 32 2e 33 32 33 25 32 43 31 31 2e 31 36 32 25 33 41 32 2e 33 32 33 25 32 43 31 33 2e 32 30 30 25 33 41 32 2e 33 32 33 25 32 43 31 33 2e 32 30 31 25 33 41 32 2e 33 32 33 25 32 43 31 33 2e 32 30 38 25 33 41 32 2e 33 32 33 25 32 43 31 33 2e 32 30 38 25 33 41 32 2e 33 32 33 25 32 43 31 33 2e 32 31 33 25 33 41 32 2e 33 32 33 25 32 43 31 33 2e 32 31 38 25 33 41 32 2e 33 32 33 25 32 43 31 34 2e 34 35 36 25 33 41 32 2e 33 32 33 25 32 43 31 35 2e 36 36 36 25 33 41 32 2e 33 32 Data Ascii: cmt=10.463%3A2.323%2C11.130%3A2.323%2C11.130%3A2.323%2C11.143%3A2.323%2C11.144%3A2.323%2C11.161%3A2.323%2C11.162%3A2.323%2C13.200%3A2.323%2C13.201%3A2.323%2C13.208%3A2.323%2C13.208%3A2.323%2C13.213%3A2.323%2C13.218%3A2.323%2C14.456%3A2.323%2C15.666%3A2.32
2024-04-16 15:06:12 UTC	504	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Date: Tue, 16 Apr 2024 15:06:12 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Server: Video Stats Server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.11	49947	173.194.219.136	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:06:12 UTC	610	OUT	GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
2024-04-16 15:06:12 UTC	240	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1609 Date: Tue, 16 Apr 2024 15:06:12 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 15:06:12 UTC	1015	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 405 (Method Not Allowed)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px aria
2024-04-16 15:06:12 UTC	594	IN	Data Raw: 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d Data Ascii: .com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.11	49949	142.251.15.91	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:06:16 UTC	2465	OUT	GET /api/stats/watchtime?ns=yt&el=embedded&cpn=jRkNZCQf5oAkxA7P&ver=2&cmt=2.66&fmt=398&fs=0&rt=24.431&euri=https%3A%2F%2Fniceindiatravel.com%2F&lact=24487&cl=623129822&state=paused&volume=100%2C100&cbr=Chrome&cbrver=117.0.0.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240409.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&autoplay=1&splay=1&delay=4&hl=en_US&cr=US&len=156.941&rtn=34&afmt=251&idpj=0&ldpj=-17&rti=24&size=1267%3A713&inview=0&st=2.323%2C2.56&et=2.56%2C2.66&muted=1%2C1&vis=0%2C3&docid=wAD9uO9YAQw&ei=z5MeZqaINPHUy_sP0eWdmAw&plid=AAYWOBLu246nWADi&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2FwAD9uO9YAQw%3Fplaylist%3DwAD9uO9YAQw%26iv_load_policy%3D3%26enablejsapi%3D1%26disablekb%3D1%26autoplay%3D1%26controls%3D0%26showinfo%3D0%26rel%3D0%26loop%3D1%26origin%3Dhttps%253A%252F%252Fniceindiatravel.com%26widgetid%3D1&list=TLGG0nOp5Ks1AkExNjA0MjAyNA&of=wbAUJoLFDaeeOSJrHXH1sg&vm=CAEQABgEOjJBSHFpSlRKQ0o0WWhpVHlHMVJqeEhSbnJlNUk1alNPVXV4ZUw0cEQ5UlVzeXIxeUxnUWJ3QVBta0tETEtnc3NpZGtCNXlKTU5mRU1yZWRTR1dyMHo2ZGlNTmNSRlJPZVJzcVp1LXFOc2xfWU5ScHZjZm9GWThIWFhXOFllQnlGbzBzVDRmYzFkZHFzMUxoejRjdWpCb084Zkp3am82MmdhQ2w3cFVtUGVURmdoAg HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1713279950337&flash=0&frm=2&u_tz=120&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1267%2C713&vis=2&wgl=true&ca_type=image sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-YouTube-Utc-Offset: 120 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240409.01.00 X-YouTube-Time-Zone: Europe/Zurich X-Goog-Visitor-Id: CgtJMG1ONlpYUjdsOCjOp_qwBjIKCgJVUxIEGgAgKA%3D%3D sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/wAD9uO9YAQw?playlist=wAD9uO9YAQw&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&origin=https%3A%2F%2Fniceindiatravel.com&widgetid=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=Te33N_oDJog; VISITOR_INFO1_LIVE=I0mN6ZXR7l8; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgKA%3D%3D
2024-04-16 15:06:16 UTC	410	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Date: Tue, 16 Apr 2024 15:06:16 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate X-Content-Type-Options: nosniff Server: Video Stats Server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.11	49950	142.250.9.113	443	3676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:06:17 UTC	542	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://www.youtube.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:06:17 UTC	516	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Tue, 16 Apr 2024 15:06:17 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
188	192.168.2.11	49951	142.250.9.113	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:06:17 UTC	781	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 2068 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:06:17 UTC	2068	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 31 39 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 34 39 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 36 35 34 2c 5b 5b 22 31 37 31 33 32 37 39 39 37 35 38 39 33 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"19",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.149"],[1,0,0,0,0]]],1654,[["1713279975893",null,null,null
2024-04-16 15:06:17 UTC	921	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=513=ljy_wqnS3hyaHxVqbiufgqC58LEy6fJPoNnlaB1r1r0R9J8m48-ju5_BuR9bZd7hp52cke_gQjSkLkXhiff08w1K3pJWHjRZjOvNMjjmCLSJFWh_tjGvoL_xseuO6ltrzu2iXTJZCB4YRJoT3TE54tBtO2gqB_Wyhrv_-iaQMPQ; expires=Wed, 16-Oct-2024 15:06:17 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Tue, 16 Apr 2024 15:06:17 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Tue, 16 Apr 2024 15:06:17 GMT Connection: close Transfer-Encoding: chunked
2024-04-16 15:06:17 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-16 15:06:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
189	192.168.2.11	49952	84.32.84.101	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:06:18 UTC	380	OUT	GET /wp-content/uploads/2018/10/slide1.jpg HTTP/1.1 Host: niceindiatravel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:06:21 UTC	393	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 16 Apr 2024 15:06:21 GMT Content-Type: image/jpeg Content-Length: 250521 Connection: close Cache-Control: public, max-age=31536000 X-Hcdn-Image-Optimizer: f:jpeg q:85 w:1600 alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 8037986da030648b8d52cd1be072f95b-asc-edge6 x-hcdn-cache-status: MISS x-hcdn-upstream-rt: 3.194 Accept-Ranges: bytes
2024-04-16 15:06:21 UTC	976	IN	Data Raw: ff d8 ff e1 00 80 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 05 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 4a 00 00 00 1b 01 05 00 01 00 00 00 52 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 69 87 04 00 01 00 00 00 5a 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 02 00 02 a0 04 00 01 00 00 00 40 06 00 00 03 a0 04 00 01 00 00 00 3c 03 00 00 00 00 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e Data Ascii: ExifII*JR(iZHH@<C!"$"$C
2024-04-16 15:06:21 UTC	1369	IN	Data Raw: 42 40 1d 73 4d c5 34 0a 4d 1a 0f c5 6e 03 6a 0c 37 a5 3f 14 99 f9 9f d6 a8 fe 75 04 52 58 a3 e8 37 39 0c 92 77 66 07 38 df a5 49 b9 99 86 19 b2 0d 24 8c 54 64 f6 ab d2 88 6d 8d f1 9f 1b b1 02 ae 70 fb 88 e2 90 3b 11 9e 79 ac ed ea 37 a4 e0 9e c3 53 68 f5 71 f1 18 b4 83 af 7a 7a f1 38 03 0c b5 78 e0 c4 0c 03 5d ad 87 22 6b 07 d2 c5 9a f7 d9 ec 85 f5 bc 8a 43 9d bb 1a a5 7c f0 78 4c 22 d2 72 36 c5 79 b1 3c 80 63 51 a8 33 ca 39 39 1f 7a 23 d3 53 d8 1e 6b 43 9c 80 de 61 9a 19 61 80 0d 5a b2 4f 31 55 59 99 8e 49 26 bb 56 3a 9a ea 51 30 d4 13 04 52 48 e4 7b d5 63 8c 93 a7 a6 29 ac fa 81 20 72 ef 4a 38 cd 5a 33 6e c8 fb 73 a1 23 1b 51 ef fd 2b 88 de aa c4 01 03 07 bd 43 12 58 e6 8b 03 3b 54 63 7c 73 34 c4 0e 48 38 ae fe 15 38 35 c4 1d b7 14 01 c0 90 36 a8 27 7f Data Ascii: B@sM4Mnj7?uRX79wf8I$Tdmp;y7Shqzz8x]"kC\|xL"r6y<cQ399z#SkCaaZO1UYI&V:Q0RH{c) rJ8Z3ns#Q+CX;Tc\|s4H8856'
2024-04-16 15:06:21 UTC	1369	IN	Data Raw: 98 ae b8 60 95 6e 73 4f a8 8a e0 d1 e2 06 3d 04 1c 1c 6f bf 2a f3 b7 88 be 21 0a 76 ce 71 56 2e af 0c 8d 9c 9f b9 aa 4e fa 89 ae cc 38 dc 4e 0c f9 54 80 f5 cf 5a 1d be d5 cd fe 94 27 b5 74 d1 c9 64 e7 a0 a8 dc 9e b5 1c 8d 10 7f 2e 28 0b 23 38 eb ce b8 11 b1 15 04 82 3d 68 75 63 6a 28 56 35 66 28 76 0b bf 7a 21 75 27 42 07 b5 57 ce 79 f2 a1 24 7f d7 5a 34 a0 d4 5b 37 32 9e 4f 9a 8f 1a 5c 8f 39 cd 55 0d ea 6b b5 51 a5 0f b8 59 33 ca 4e ee 7f 3a 5b 4e dd 49 a5 17 3d 36 f7 a1 cf 2c 9d fa d1 a5 09 e4 7e a3 7c 53 9c 9a 83 2a fe ee f4 bc 0c e4 54 63 7f e1 45 21 29 c8 63 4a 48 c7 2a 00 4f 73 9a 82 0e ad 85 41 04 63 7e 74 e8 4e 4c 2d 4d d4 d7 2e 4b 63 34 0b 9c e2 8f 91 1b 8f 6a 18 d3 1a 13 38 3a a9 8a aa 3f 17 de 92 18 8e d8 f5 a9 12 13 b6 f5 2d 1a a9 0d 6c e3 20 Data Ascii: `nsO=o!vqV.N8NTZ'td.(#8=hucj(V5f(vz!u'BWy$Z4[72O\9UkQY3N:[NI=6,~\|STcE!)cJH*OsAc~tNL-M.Kc4j8:?-l
2024-04-16 15:06:21 UTC	1369	IN	Data Raw: a9 38 e5 50 39 d0 21 b1 39 0e 0f 6a d6 b3 b8 2b 16 a1 b6 6b 18 1c 7a d3 3e 61 ca e1 76 15 94 e3 a8 db 1e 4d 26 d0 9c 1f 6a a9 79 3e 14 81 9c 93 54 56 79 33 9c fe 75 17 33 19 0f 4c 63 a5 44 71 53 34 79 ad 09 99 f2 c4 fe 74 bc ed 5c dc ea 2b a2 8e 56 ec e2 77 a8 c9 da a6 a0 e2 98 99 0c 4f 7c 66 80 fe 78 a2 3e d5 18 db 9d 32 58 1f 7d e9 88 99 8f c4 db 6a 02 37 e7 4c 57 2a 85 73 8a 18 d5 79 14 c4 80 74 92 33 42 a7 7a 93 eb 42 c3 b5 55 13 a8 3f 13 19 dc 52 d8 96 3e d5 d8 c7 3a 1c ef fd 28 48 97 32 41 21 85 34 5c 38 5c 29 c5 24 67 3c aa 76 03 95 14 bc 82 9b 5c 04 67 70 73 9a 3f 19 ca f3 c1 a5 01 eb 5c 06 28 a4 52 93 f2 17 88 ec 70 69 91 64 c8 b9 27 1d 6a 20 50 4e 18 f4 ab 31 47 12 92 49 db b9 a8 93 48 d6 2a c2 5b 69 24 05 81 e5 bd 32 38 9f 4e 3f 15 1f 8c 31 8d Data Ascii: 8P9!9j+kz>avM&jy>TVy3u3LcDqS4yt\+VwO\|fx>2X}j7LWsyt3BzBU?R>:(H2A!4\8\)$g<v\gps?\(Rpid'j PN1GIH[i$28N?1
2024-04-16 15:06:21 UTC	1369	IN	Data Raw: cf 41 50 eb a5 f4 9c 74 e5 47 83 92 73 51 8e 59 26 8b 01 64 6f ca a0 8a 69 1c aa 34 8e 42 9a 64 d0 a2 0e 33 51 8f 30 51 cc 9d b3 4c c7 4c 57 60 77 14 ec 05 63 b5 76 3f 2a 61 5d f9 50 e3 6c 50 98 80 c7 6a 1f 7a 66 2a 08 c9 a7 62 a0 0e 6b 80 db d2 8c 73 c5 46 33 45 85 00 c3 27 6a 1d 27 34 dc 0a 8c 77 14 ec 54 2f 48 f5 a9 0a 3a 51 e0 76 ae dc 74 e5 45 85 0a 2b 80 4f 4a 16 04 1a 69 de a1 b7 39 26 8b 01 58 ce f5 cc 30 29 85 71 5d a7 3d 0d 16 2a 6c 49 1b 50 e0 d3 8a fa 54 62 9d 8a 85 69 a8 2b 9e f4 dc 76 ae 20 f3 eb 4e c0 4e 8e f9 a9 2b b5 30 81 8c 54 74 ef 45 80 92 2a 0a 80 45 3f 49 c5 31 6c ae 1d 03 a4 45 94 d1 a9 2e 43 4b 65 4c 77 1f 7e d4 25 40 15 a7 17 0c bb 61 96 84 aa 8e 64 d5 39 62 d0 c5 4f 4a 4a 69 f0 39 41 a5 b8 86 5d b6 cd 09 5d b3 8a 61 5c 7a 54 55 Data Ascii: APtGsQY&doi4Bd3Q0QLLW`wcv?a]PlPjzfbksF3E'j'4wT/H:QvtE+OJi9&X0)q]=lIPTbi+v NN+0TtEE?I1lE.CKeLw~%@ad9bOJJi9A]]a\zTU
2024-04-16 15:06:21 UTC	1369	IN	Data Raw: 54 9d 72 8d bb 53 a1 b5 50 01 c0 e7 9a bb 18 54 07 90 aa c9 9a f8 14 71 d7 22 e6 89 40 e4 b8 ed 8a cc e2 16 cb e1 6a 8d 70 c0 ef 5a 17 13 a6 9c 17 15 4a 69 50 a1 01 b3 9a 9c 6d f2 39 51 90 e8 41 c7 fd 0a 1e 42 ac 38 ce 7a 9a 41 e7 f4 91 5d 89 d9 cc d0 1b 67 ad 4e 3a 7e 54 45 7a d0 92 36 aa 4c 9a 38 0c ef 5d 8a 12 0e 76 a9 de 9d 85 13 8f 6a 8c 57 66 bb 7e f4 58 51 da 45 46 3d 28 c0 18 e7 50 41 c6 f4 58 50 38 1d ab b4 fa 51 8f 6a 8c e4 64 d1 62 a0 4a ef 50 54 51 12 2b 8d 16 2a 04 ad 76 9d f1 45 5d 4e c2 80 c0 ae 2b bd 18 c8 df 6a ea 2c 28 0d 3d 45 4e 0e 28 87 6e 95 df 6a 2c 28 10 3d 6b b4 31 04 81 90 39 9e d4 55 c3 6e 5b 51 60 90 04 6f c8 d4 69 cd 33 6e 66 bb 1b 72 14 58 50 bd 35 c1 7f 3a 3c 57 63 a5 16 14 28 e7 f3 a8 c1 e7 4d c7 4c 54 62 9d 93 42 c8 f4 a1 Data Ascii: TrSPTq"@jpZJiPm9QAB8zA]gN:~TEz6L8]vjWf~XQEF=(PAXP8QjdbJPTQ+*vE]N+j,(=EN(nj,(=k19Un[Q`oi3nfrXP5:<Wc(MLTbB
2024-04-16 15:06:21 UTC	1369	IN	Data Raw: 7e 2f 33 79 43 67 b9 a6 ba 47 61 ef 48 ab c7 a4 33 dc 12 cc 49 04 9a cc 55 0c e0 33 05 a7 c8 d2 4d 2e 4e fa bb d2 ae 63 31 b6 c0 fa 9e f5 e9 e3 5a 55 1e 66 57 a9 ea 26 64 01 0a a1 04 74 c9 aa 4e 08 ed 8e 54 e7 72 36 e7 49 7d c9 cf e7 5a c6 d1 84 da 62 ca 9e 66 a3 4e 68 bd 46 48 a8 c6 79 ed 56 99 93 40 95 f4 a8 2b d4 66 8b 1b 91 5d 4e c5 40 69 ef fc 6a 0a e3 7a 3c 8d f2 01 3d 3d 2a 08 ff 00 ac d1 61 40 15 ce f8 a8 2b b1 34 78 fc ea 1b 7f 6a 76 2a 00 8d bd ea 34 9e f8 a3 60 3d aa 31 b7 2a 2c 40 fb ef 9a ec 73 1b 0a 2c 54 10 77 da 9d 85 02 41 a8 3c a8 f9 ed fc e8 70 72 37 1b d1 63 07 03 1b 57 54 f4 ae c6 47 3c 51 62 64 73 15 18 cf de a4 f2 a8 ce 05 21 10 06 31 ce a0 8c 9a 2f b5 47 b6 69 a6 14 06 2a 71 d4 ff 00 1a 9d ba 9a ec e1 73 d6 98 50 1c 8e 00 a8 1c b7 Data Ascii: ~/3yCgGaH3IU3M.Nc1ZUfW&dtNTr6I}ZbfNhFHyV@+f]N@ijz<==a@+4xjv4`=1,@s,TwA<pr7cWTG<Qbds!1/GiqsP
2024-04-16 15:06:21 UTC	1369	IN	Data Raw: a0 75 a8 23 a1 a3 50 a8 49 4f 7a 8d 1b 8a 76 92 2b b4 7a e6 9e a0 a1 25 06 6a 34 8c f2 de 9a 57 7a 82 bd 68 b0 68 49 50 0f 23 9a e3 4d d2 2a 0a 8e 74 ec 9a 17 81 8a 1d 2b da 99 8a 82 bc fa d1 60 c5 15 18 eb 50 57 f3 a6 63 27 f8 54 63 7a 76 2a 15 a7 6d 85 46 9a 76 33 ef 50 40 e7 4e c2 84 e9 ed b5 76 29 85 6a 0a e3 7a 76 2a 16 56 bb 4d 16 0d 46 92 7a d0 04 01 eb 50 40 ff 00 5a 32 b8 a1 23 d2 80 20 6d 51 cc d1 63 9d 41 a0 60 92 39 50 ec 47 3a 23 f9 57 11 40 85 9e 75 07 14 44 6f 50 79 d5 d9 2c 59 02 a3 03 a9 a2 38 15 18 a0 96 80 c6 3d bd aa 08 ff 00 b5 19 cd 0e 29 d8 a8 02 b9 a8 c0 e8 68 f4 9e 78 a8 d2 7b 7e 95 56 2a 03 48 ed bd 76 91 9c e2 8c 21 3d 2b 8c 67 3b 0d a8 b0 a1 7a 01 3c f7 ae 60 0f 6a 63 2e 39 d7 69 cf 3a 2c 74 20 2e 72 33 ce bb 4e d9 38 a6 90 07 Data Ascii: u#PIOzv+z%j4WzhhIP#Mt+`PWc'TczvmFv3P@Nv)jzvVMFzP@Z2# mQcA`9PG:#W@uDoPy,Y8=)hx{~VHv!=+g;z<`jc.9i:,t .r3N8
2024-04-16 15:06:21 UTC	1369	IN	Data Raw: d2 ad 24 4d 8d 33 b6 70 a4 81 50 67 7e e6 94 37 f6 ae 20 77 a7 a5 13 61 99 9c 8c 64 e2 89 24 66 e6 71 48 db 9d 4e 4d 3a 41 65 89 26 2d c8 9c 0a 4b 02 ed cc d0 83 83 ce 98 5c 74 34 2d 80 11 03 9d c7 2a 13 19 07 9d 1b 48 c7 62 76 a0 24 93 ce 9e e2 60 e9 c5 09 c6 68 c9 ea 7a 50 67 ae 6a 85 47 54 ef 9a ee 7d 2b b9 d0 22 30 6b b0 68 f1 bf 2a ec 51 61 40 62 b8 ef ed 4c d2 31 9c ef 9f ca bb 14 58 50 bc 0e d5 38 db 6c d1 e9 15 d8 a2 c2 80 d3 5c 56 8f 19 df 15 38 cf 4a 2c 28 56 9a ec 76 a6 95 f4 a8 d3 da 8d 41 40 69 15 d8 db 95 1e 9d ea 40 db 95 2b 0a 16 39 e6 bb d7 02 99 a7 b5 76 9a 76 14 2f 7a 8c 53 74 ed 8a 8d 23 95 16 14 2f 15 dc e9 81 46 31 50 56 8b 0d 22 b4 9a ec 62 9c 50 80 0e da 49 d8 e6 a0 af ad 3b 0a 15 8a 82 bb 8a 68 5a ed 34 58 50 a0 bd 73 53 a3 ad 37 Data Ascii: $M3pPg~7 wad$fqHNM:Ae&-K\t4-Hbv$`hzPgjGT}+"0khQa@bL1XP8l\V8J,(VvA@i@+9vv/zSt#/F1PV"bPI;hZ4XPsS7
2024-04-16 15:06:21 UTC	1369	IN	Data Raw: 1d 68 b6 03 1f c2 bb 1d 47 2e 94 ec 96 80 23 6d ea 46 2a 79 0c d4 7f 1a 44 b2 0f 2a 0d c0 cd 33 f5 a1 fd 69 d8 10 77 da 87 a7 2f d6 8c e0 d0 e3 f4 a1 08 1e 84 d0 e2 8c e3 90 35 03 03 6a 63 00 83 e8 6b ba 6f 45 b6 4d 09 1b 6d 4e c5 44 0f 5a ed 85 4d 75 00 01 ed 9c 57 67 6d 85 49 15 1d 36 34 c4 c8 c1 ef 5c 7a 1a ef e5 de b8 8a 43 44 66 8e 35 66 70 bc f3 41 56 2d e4 55 23 6d c7 2d a9 4b 83 58 a4 f9 35 20 e1 90 4d 18 67 71 95 1b 8c e0 d5 3b be 1e 12 6d 31 b8 3d 86 28 5e e8 ac 84 c4 c4 52 cd dc 81 b2 01 d5 dc d6 09 4e ce 9b c7 5c 15 ee 21 78 8e 1c 6f de ab 9c fb 6f 56 6e 26 92 5c 97 26 ab e0 e3 71 9c d6 f1 39 32 55 ec 01 ed 92 6a 37 14 7e 1b 75 18 1e f5 de 1b 63 90 f6 ab b2 54 59 fa 70 ab ea c6 6b 8c 72 63 34 3f 35 19 6c 6a 14 7f 33 11 18 0d 5f 1b b9 f5 76 4a Data Ascii: hG.#mFyD3iw/5jckoEMmNDZMuWgmI64\zCDf5fpAV-U#m-KX5 Mgq;m1=(^RN\!xooVn&\&q92Uj7~ucTYpkrc4?5lj3_vJ

Session ID	Source IP	Source Port	Destination IP	Destination Port
190	192.168.2.11	49953	142.250.9.113	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:06:18 UTC	780	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 718 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 15:06:18 UTC	718	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 34 39 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 31 33 32 37 39 39 37 36 39 30 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.149"],[1,0,0,0,0]]],1828,[["1713279976901",null,null,null
2024-04-16 15:06:18 UTC	921	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=513=FN9J7vk0Qw-UjHk49772n7JzLNcCT9U-cM9TjX94A0FnAyHn9ouNBwmmMYU71s0GAoxaOhgGEijCmm8ZR4J53huiRlKagAnDEldrRrf75iYOEELbrltQ5bL1xXZqhWyliHF_x1nWbOnwNj3EenNhVZSPCaaC6_xKn7Znsez-Of4; expires=Wed, 16-Oct-2024 15:06:18 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Tue, 16 Apr 2024 15:06:18 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Tue, 16 Apr 2024 15:06:18 GMT Connection: close Transfer-Encoding: chunked
2024-04-16 15:06:18 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-16 15:06:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
191	192.168.2.11	49954	64.233.177.113	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:06:18 UTC	660	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=ljy_wqnS3hyaHxVqbiufgqC58LEy6fJPoNnlaB1r1r0R9J8m48-ju5_BuR9bZd7hp52cke_gQjSkLkXhiff08w1K3pJWHjRZjOvNMjjmCLSJFWh_tjGvoL_xseuO6ltrzu2iXTJZCB4YRJoT3TE54tBtO2gqB_Wyhrv_-iaQMPQ
2024-04-16 15:06:18 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Tue, 16 Apr 2024 15:06:18 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 15:06:18 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-16 15:06:18 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port
192	192.168.2.11	49955	64.233.177.113	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:06:18 UTC	660	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=FN9J7vk0Qw-UjHk49772n7JzLNcCT9U-cM9TjX94A0FnAyHn9ouNBwmmMYU71s0GAoxaOhgGEijCmm8ZR4J53huiRlKagAnDEldrRrf75iYOEELbrltQ5bL1xXZqhWyliHF_x1nWbOnwNj3EenNhVZSPCaaC6_xKn7Znsez-Of4
2024-04-16 15:06:18 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Tue, 16 Apr 2024 15:06:18 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 15:06:18 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-16 15:06:18 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port
193	192.168.2.11	49956	142.250.9.113	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:06:19 UTC	969	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 704 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=FN9J7vk0Qw-UjHk49772n7JzLNcCT9U-cM9TjX94A0FnAyHn9ouNBwmmMYU71s0GAoxaOhgGEijCmm8ZR4J53huiRlKagAnDEldrRrf75iYOEELbrltQ5bL1xXZqhWyliHF_x1nWbOnwNj3EenNhVZSPCaaC6_xKn7Znsez-Of4
2024-04-16 15:06:19 UTC	704	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 34 39 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 31 33 32 37 39 39 37 37 38 38 39 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.149"],[1,0,0,0,0]]],1828,[["1713279977889",null,null,null
2024-04-16 15:06:19 UTC	921	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=513=iM8v3umza5Vel3FipZ_XdIKQzwWFjZOuZVMUemHytZ-z-9zSgc8ojLW3r5CnIkJFOR9deaNapE_-vgoD8UdlJjvmk0jF17qRnzHy_B4fVd7T4liHMSNl3a9l71ODH_bJsQ3EzqSBfSpfQWwE_hE3SxiocbzhfSG0QwS13OIxBG0; expires=Wed, 16-Oct-2024 15:06:19 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Tue, 16 Apr 2024 15:06:19 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Tue, 16 Apr 2024 15:06:19 GMT Connection: close Transfer-Encoding: chunked
2024-04-16 15:06:19 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-16 15:06:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
194	192.168.2.11	49957	64.233.177.113	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 15:06:19 UTC	660	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKS1yQEIl7bJAQijtskBCKmdygEIr4fLAQiTocsBCIWgzQEIjafNAQi5ys0BCIrTzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=iM8v3umza5Vel3FipZ_XdIKQzwWFjZOuZVMUemHytZ-z-9zSgc8ojLW3r5CnIkJFOR9deaNapE_-vgoD8UdlJjvmk0jF17qRnzHy_B4fVd7T4liHMSNl3a9l71ODH_bJsQ3EzqSBfSpfQWwE_hE3SxiocbzhfSG0QwS13OIxBG0
2024-04-16 15:06:19 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Tue, 16 Apr 2024 15:06:19 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 15:06:19 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-16 15:06:19 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Target ID:	0
Start time:	17:04:53
Start date:	16/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff6a3150000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	17:04:54
Start date:	16/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2320 --field-trial-handle=2276,i,15163067033320989908,4814463325388249182,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6a3150000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	17:04:56
Start date:	16/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.baidu.com/link?url=CvCuJHQ5mUiF8tzYwW4LExI5DJ7e8SA78W1tu_uckwU-RgMoIZevncSlciEmtvdq&wd=cmljaGFyZC5wZXBpQGdlcmZsb3J1c2EuY29t"
Imagebase:	0x7ff6a3150000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	17:05:47
Start date:	16/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4180 --field-trial-handle=2276,i,15163067033320989908,4814463325388249182,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6a3150000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	15
Start time:	17:05:47
Start date:	16/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4360 --field-trial-handle=2276,i,15163067033320989908,4814463325388249182,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6a3150000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://www.baidu.com/link?url=CvCuJHQ5mUiF8tzYwW4LExI5DJ7e8SA78W1tu_uckwU-RgMoIZevncSlciEmtvdq&wd=cmljaGFyZC5wZXBpQGdlcmZsb3J1c2EuY29t

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 190

Chrome Cache Entry: 191

Chrome Cache Entry: 192

Chrome Cache Entry: 193

Chrome Cache Entry: 194

Chrome Cache Entry: 195

Chrome Cache Entry: 196

Chrome Cache Entry: 197

Chrome Cache Entry: 198

Chrome Cache Entry: 199

Chrome Cache Entry: 200

Chrome Cache Entry: 201

Chrome Cache Entry: 202

Chrome Cache Entry: 203

Chrome Cache Entry: 204

Chrome Cache Entry: 205

Chrome Cache Entry: 206

Chrome Cache Entry: 207

Chrome Cache Entry: 208

Chrome Cache Entry: 209

Chrome Cache Entry: 210

Chrome Cache Entry: 211

Windows Analysis Report
https://www.baidu.com/link?url=CvCuJHQ5mUiF8tzYwW4LExI5DJ7e8SA78W1tu_uckwU-RgMoIZevncSlciEmtvdq&wd=cmljaGFyZC5wZXBpQGdlcmZsb3J1c2EuY29t