{"report_id":"04d85bef-88e8-4f1e-8a14-eed4894dd9e5","version":6,"status":"done","tags":["hotel","travel","phishing"],"date":"2026-04-21T09:32:37Z","url":{"schema":"https","addr":"booking-com-clone-kappa.vercel.app/","fqdn":"booking-com-clone-kappa.vercel.app","domain":"booking-com-clone-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"booking-com-clone-kappa.vercel.app/","fqdn":"booking-com-clone-kappa.vercel.app","domain":"booking-com-clone-kappa.vercel.app","tld":"vercel.app"},"title":"Booking.com","dom":{"size":20673,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (20671), with no line terminators","md5":"2c2f02f5d047f1813e394a1050e50b82","sha1":"1372b42d775c87220314bcde0d32d63ba050a8b1","sha256":"976bfaa59ab00029a229484ae8bf3381dfeba46ec02cb7178a447f7a68f31fbc","sha512":"477706b388e2f1074e43e4ac4298e2dc6203bff2c351328189ac132d8043cebc5fa2086b485ce136d79a34c9c05377e8fa0168432f3682961d4a309cd57e7f2c","ssdeep":"384:28OWuw7vwnboQqQIUxxYUkUiMUNUKYTw1TqLi8On0lTZJRhdC:28OWuaGyUTY7UlUNUKYQTqLi8O0lrRhc","tlshash":"a592d8317404ee5fac5b5e6c34bdbe39618dd22ec566c9a8c6ecc91103c28b4cf22ad4","dom_hash":"domhasha95a83757c847b3daa003c4c566ee591","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"booking-com-clone-kappa.vercel.app/","fqdn":"booking-com-clone-kappa.vercel.app","domain":"booking-com-clone-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-26T09:32:37Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"booking-com-clone-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"booking-com-clone-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"booking-com-clone-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Booking.com","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Booking.com phishing","tags":["hotel","travel","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Booking.com","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Booking.com phishing","tags":["hotel","travel","phishing"],"meta":null}]},"summary":[{"fqdn":"booking-com-clone-kappa.vercel.app","ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2020-01-28","domain_rank":0,"first_seen":"2025-11-14T21:15:37.612072Z","last_seen":"2026-03-31T05:20:25.932679Z","alert_count":60,"request_count":15,"received_data":727822,"sent_data":7498,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"cf.bstatic.com","ip":{"addr":"3.167.2.74","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2009-04-24","domain_rank":109157,"first_seen":"2020-10-08T14:09:51Z","last_seen":"2026-04-19T16:04:32.42052Z","alert_count":0,"request_count":4,"received_data":172132,"sent_data":2220,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"r-xx.bstatic.com","ip":{"addr":"3.167.2.74","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2009-04-24","domain_rank":154726,"first_seen":"2018-03-08T11:21:52Z","last_seen":"2026-04-16T14:47:37.261986Z","alert_count":0,"request_count":1,"received_data":516,"sent_data":551,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"1000logos.net","ip":{"addr":"172.67.71.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-09-07","domain_rank":51487,"first_seen":"2017-01-24T12:12:42Z","last_seen":"2026-04-19T14:38:33.435631Z","alert_count":0,"request_count":1,"received_data":28764,"sent_data":489,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Booking.com","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Booking.com phishing","tags":["hotel","travel","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"booking-com-clone-kappa.vercel.app/_next/static/chunks/250-afd6b4cd8558c12d.js","fqdn":"booking-com-clone-kappa.vercel.app","domain":"booking-com-clone-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2346b413d7104161a772fee3573bcee5","sha1":"ae7ddf0b47a2dd183288fd84bd7d7dd41fc80858","sha256":"0eebabf809037f593f6088496f269d24eac295cdff663b50af7df3bd639d987e","sha512":"518bb246946b28a7db8f0094ea962082b7bd2bdf07bcd3c0595c3f7563f8acac5c2cc0c7520d4a7d62fe4f1839091ea2ec5c24c08d06fbbe7b4b80812c890f5b","ssdeep":"384:mnFdat13aGB/zyASD6nqxEMIy9U7QuH7bDwwcGXx:m7at1vBbyuaHI24QuHj1cs","tlshash":"b892c7ba71d2f8a243eb41a0443b1006f2ba5c7e245e6248f7b5ddd6f57046d60a3f2a","size":20510,"data":"","first_seen":"2023-12-17T02:56:30Z","last_seen":"2026-04-21T09:32:42.789133Z","times_seen":101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking-com-clone-kappa.vercel.app/_next/static/chunks/app/layout-59aa79147f7970cb.js","fqdn":"booking-com-clone-kappa.vercel.app","domain":"booking-com-clone-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d17f72526ba1d9ec694dcacf41265509","sha1":"cf2efcef2485c51259846b75b835248aa3ed3829","sha256":"fc7e4cba521e136208a0344a7529d0106ab8e21e1a2bd253d3a204680698200c","sha512":"2cfe909c997e5063bf2010909c591ef9c99193fad76964287aff0372b17859b1e5cfb0173df9042124c7a911d4249e443aeaa273b6bbd51adb4e4b7468ec09c5","ssdeep":"96:99XENOWr62PfSaJxTrme0/Hlp2f2xzIltHqNpJnXMB8BugJPZpTCwIMOB2SX6:9VWrlsP1ZxY6","tlshash":"43d1f208e145aface96b08d8786ef41cb11f2b5ccf1f8ca5a978f8511d851e436477ca","size":6441,"data":"","first_seen":"2025-11-14T21:15:42.802881Z","last_seen":"2026-04-21T09:32:42.807754Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking-com-clone-kappa.vercel.app/","fqdn":"booking-com-clone-kappa.vercel.app","domain":"booking-com-clone-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b40cdc025a72d0b516bd11d9ef0a1776","sha1":"9cd34b30af473b8071638d82dcacef0373194aaf","sha256":"43ef2d3ec8d5b620ec8c5fc2bfc14c3a9836620f75a0a14a0c025ab753cf6f68","sha512":"ffad498a0fda3194476aee567df0b821e3c4886662a0dc72a53e8289c98fc3187b991df3da95f0bc2fe1b238d3478ccfac9d39a23fa2e7928ff3be8461110af9","ssdeep":"","tlshash":"3aa001f190d29c69e43741ab687511161bac490d0109014123a198e91162a098f48e8e","size":72,"data":"","first_seen":"2023-10-09T10:35:22Z","last_seen":"2026-04-21T11:35:57.848859Z","times_seen":82648,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking-com-clone-kappa.vercel.app/","fqdn":"booking-com-clone-kappa.vercel.app","domain":"booking-com-clone-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"2f3de7cc218dd8aecc385851cdfcea99","sha1":"01704473fed466f82d7f3f413b9a26561cbcb720","sha256":"0b524109e0622b99b026d7de9adea4bcc0511448516ebb6368a05ab37a3fa72c","sha512":"63734f49ca8c1766863243829c377ae6452e73dd7cba110d9adcc4a287297671b710b327d54667983f08e6a17e4a4ef45f8a5a5bb8e430a1dd83bc1566ba5de0","ssdeep":"","tlshash":"65d0a758f24adce6ac21a91e11365d789058abfc525189c427dfd68300a14f80b89e4f","size":234,"data":"","first_seen":"2025-11-14T21:15:42.808957Z","last_seen":"2026-04-21T09:32:42.82304Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking-com-clone-kappa.vercel.app/_next/static/chunks/fd9d1056-01f37d259b35c60a.js","fqdn":"booking-com-clone-kappa.vercel.app","domain":"booking-com-clone-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"341bc12f15b80870bf037598311f6815","sha1":"a123c2f2c2a415d7e2746d053ee6179136ea083b","sha256":"5f0f5ae2b4ee1c48ab9be4af79fa77d891930bdc375b74a7f77909edc05d0d43","sha512":"3d21200760ed2fc1932172b42c332de1e9c26f86397d826755ec7e4a692fa78abf8b35356108248bcda316e502d5a1948c3ca18509d00d82fa6c604fbdc1174e","ssdeep":"1536:jOjfUgTQBsC4dxpzcNdT+T0d2tslQ3qWnVImZsArX9WERiAQHOK9b3gxTCBq/GzB:zCQBzjkYwxaQbIERQ73YCBl","tlshash":"6bf3e8e83955f6626eb2127700af1803737c262b280d4d60a211fd9eb5b845eb17bfdd","size":171902,"data":"","first_seen":"2023-12-17T02:56:30Z","last_seen":"2026-04-21T09:32:42.803085Z","times_seen":500,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking-com-clone-kappa.vercel.app/_next/static/chunks/938-7d28535add4d60fd.js","fqdn":"booking-com-clone-kappa.vercel.app","domain":"booking-com-clone-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"febb37e52c76446c319f4174bfee7472","sha1":"6b5f598b530370a849b3197be11a354d5ab2d764","sha256":"6f9e2a2f2011cd201ede6582cdd1993d7fdd6c355f3d9246a55ec62bb04d62ce","sha512":"dd5507bdbcde171c0d4219b71ee47e013b228edb73ebbfc8ea2b76b1443d53b0fddcd8f4d97638f91e48283167c0e17acbada1b0d5ed248472b9955294764daa","ssdeep":"768:KJ+QvVw2ErwbKLdXXiJLMw+pCzTbPu6wVqv6I6dQ0vaDNZIu8O4Nfwy/Xcz1Q8Hq:ENw2ElSLoCzTbP5w+/6zu83UK8IpdNL","tlshash":"c2a3d7b672d0f8e1079780a5843f400af3751d3e146f7090a3e6cdd9baa14de91a3f6a","size":104463,"data":"","first_seen":"2023-12-17T02:56:30Z","last_seen":"2026-04-21T09:32:42.804269Z","times_seen":404,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking-com-clone-kappa.vercel.app/_next/static/chunks/653-ecb78cb12e44b076.js","fqdn":"booking-com-clone-kappa.vercel.app","domain":"booking-com-clone-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"305437c954776447dff868ac2158e9ab","sha1":"4ad125810b5e2fb7878ff554f5de22ae847aeacd","sha256":"cde83e7bab933637ea4f10f44445ad53032d9522aecbfcff0ab8e0435d275043","sha512":"5bbbe612cc8ac0d9c8a57586a1c17428f3fa04b58ea83d4661ec107902b88875eb5fb4f41037abae7e832bb7275a5f06afe33aef812d34748fd6128eabe7ca8f","ssdeep":"768:p9OGB9fMjLQoxnZ7jI1EExX5px/5V7n3umArZWGibX30snkLv4eegDTI:p9Om/K8HxJPPCmArZRibX30skseego","tlshash":"ac430aba3551b4b5d7eb01ae503b0419f33e7a5d200d0420f169ac9d31da98df1b2f6b","size":60035,"data":"","first_seen":"2025-11-14T21:15:42.795844Z","last_seen":"2026-04-21T09:32:42.790177Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking-com-clone-kappa.vercel.app/_next/static/chunks/webpack-58781223deb89112.js","fqdn":"booking-com-clone-kappa.vercel.app","domain":"booking-com-clone-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d299e075a5a0823b6fc4a8a3e9e8b85a","sha1":"94c96a18ce6d0e2aee8d43af58c01c170e2b2363","sha256":"0b9105c4a5873930dfe6d27326212ad55d921f1506e86f6da15c18675fed1c9b","sha512":"71cab78e78ba789d1c64803a6d151cad020efddc47f05aaf1e27ac2af9edb21b8f644591e68424ce7660c00756622a725d9f681fc8026bee9fa3528c0ff2b367","ssdeep":"","tlshash":"ae7186dd71a1f8ba1782a4a1043fe556f13f28f2291ed4a0cb19d4f5fc755498113fa8","size":3587,"data":"","first_seen":"2025-11-14T21:15:42.797853Z","last_seen":"2026-04-21T09:32:42.762318Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking-com-clone-kappa.vercel.app/_next/static/chunks/main-app-01dcb8892b176af1.js","fqdn":"booking-com-clone-kappa.vercel.app","domain":"booking-com-clone-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"247c20feb4ca1ae3b82d47a7377e05cf","sha1":"2b24d01d3835f21443beda267165e4bf9a113765","sha256":"d7161ee4345128aaf9e8f22c073b94fa8c6d1d8d6f26845749e76966b1088373","sha512":"97ca8d2462b96eeaeb426d417dd37efae7b1f10d0c254a6691a1c766e429ad29a027020b30d6539becb07eb69f38a21a5e57bbeb9a9c585d0b9abe1d2d2475a4","ssdeep":"","tlshash":"f2f082992b0d702f29136d30fed79c2e245e416428a75d502605dda12c3366893f1c2c","size":463,"data":"","first_seen":"2023-12-20T18:15:29Z","last_seen":"2026-04-21T09:32:42.779242Z","times_seen":283,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking-com-clone-kappa.vercel.app/","fqdn":"booking-com-clone-kappa.vercel.app","domain":"booking-com-clone-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"132fb70ee67fc28b76982d8f8a8931eb","sha1":"70508b92206d87c19da6487963f9f185eb710d8b","sha256":"ef10d7e792610fe4bb080a7ee953dcfa3e3c99b0f14d894b2a09492ccee1d2e6","sha512":"a95056867bbe1bf1202667327081cf114e58dbb856c22143ac441986863e26c6bee69941d237618a288960a6417a40d7f52f102360fee4f43fc33f12d8020358","ssdeep":"","tlshash":"40f0275ef140d8946bb3cd0b81bb2d3248ccdd7a0134e708a93cd82f807893e6364a0b","size":496,"data":"","first_seen":"2025-11-14T21:15:42.809798Z","last_seen":"2026-04-21T09:32:42.824703Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking-com-clone-kappa.vercel.app/_next/static/chunks/app/page-9ca086e0d066ba88.js","fqdn":"booking-com-clone-kappa.vercel.app","domain":"booking-com-clone-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"318dbc29873d8118065e4b195de95a83","sha1":"92217e9ab36a893e46420fb46dce013bc65c9d21","sha256":"a6bb23b225fc71bb1fe0c2e96c2bf31c2ccfec6742fe652c029e54705e084221","sha512":"41ddb560175d802cf7fbd66b8f27431af6d7382b6f6c1d2da73a4b70bf15008f3aa290972e39bd79aa2db9c44d061d6448fe038b6a1970b71ad9e912a3a0b21b","ssdeep":"96:URjcYgLHzoo2EqopUNHt2zlRwndtuQ8IAkAy597WSnl4XDpDDBSw3ZynhGCquic5:URAYNF0QHIZEWyT3ad8qZyA1qI0Atp6","tlshash":"1632b7c8e2807fec6a6f48d9b5aee00c724eef14cb7e48d9f5bd585121855e19213bc8","size":10972,"data":"","first_seen":"2025-11-14T21:15:42.799481Z","last_seen":"2026-04-21T09:32:42.786541Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking-com-clone-kappa.vercel.app/","fqdn":"booking-com-clone-kappa.vercel.app","domain":"booking-com-clone-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8c58f975aec1d9098208ab2752d296e3","sha1":"c54a55652c2adb688ab1011845b5f923a194fa98","sha256":"ab50dbfb9789024c8cc0de0b086a4f0d10335fb9c61ed1e7302fb77c8cac3e0e","sha512":"c717d53e2dcd599bacab00ec9c2a0ab8a3c4abece11dae9be4e378d8253148573a3f68eddcc9c8a83e22119655f237739dd1ab87f38dbcb57f4e84c7ea2ac4a6","ssdeep":"96:LSKbnH7EIcnNWN8aIXgEUQ8UchmjT7cg1xqzcfxmxZWxtK:2K/yBrwh6AgnqzcJmqxY","tlshash":"f9c1cd397006ed8fec9e3d19203fac3961cd926f4ad5ceb5c6d4de104586479aba3ac0","size":6085,"data":"","first_seen":"2025-11-14T21:15:42.810505Z","last_seen":"2026-04-21T09:32:42.826538Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking-com-clone-kappa.vercel.app/_next/static/chunks/278-025742df90329364.js","fqdn":"booking-com-clone-kappa.vercel.app","domain":"booking-com-clone-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d7959db14c0cb91f44b94c13b0faa2f6","sha1":"9703a22311c3bb4ba0993efee292d5528a96d57e","sha256":"4f1cc2c320ebb2dd963a2db38783d6ce2d1ebc6aea2036e411cda1dd14907723","sha512":"4619c903756cc6c717123252d8c7a02cc3f9caf3e710cbcfa496a7d504c3c28ee6df4d38758c6dcfe33a9c604fc886cef04db510075752ec00e7584d446466ff","ssdeep":"3072:arC3zW7u0j3Athy8+vqX0JChSMJ8W2CQStDs:pa7u0j3AtU8+vqEJChSMJ8W2CQSe","tlshash":"fd143ac676c2f02557bb41a6007f4107f33e7b68240e4824f1aa99c9796dd4ae277f78","size":190972,"data":"","first_seen":"2025-11-14T21:15:42.794956Z","last_seen":"2026-04-21T09:32:42.80548Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking-com-clone-kappa.vercel.app/","fqdn":"booking-com-clone-kappa.vercel.app","domain":"booking-com-clone-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"bf8ff897a25ecac1e52be5bde5bcdc27","sha1":"114d9226cbed96f777d9b787e3ff50ecc201c033","sha256":"9bb4000d28e2c76b4e696f88c8e65b98b8227fce718a54f47976637fe16ac943","sha512":"3f20449a3398a0ce1db535a026301b1a48ba49052efca948c61b314f1b3b48b70ce224889bb8457767d3e2004284254d0569a8c5857da7414ce71c89f2552eb1","ssdeep":"","tlshash":"c4f09e90ec02dd0ddb5b5f26187e0c3410ccc3684385d45790c9cd144567e314de1fc4","size":504,"data":"","first_seen":"2025-11-14T21:15:42.811378Z","last_seen":"2026-04-21T09:32:42.827964Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking-com-clone-kappa.vercel.app/","fqdn":"booking-com-clone-kappa.vercel.app","domain":"booking-com-clone-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e4ce6b7bead5829b06478c15e7cb358e","sha1":"e23ce537f9242f99c93d0df75e355d143453662f","sha256":"62889365b3f7e5fb494aea9c5c7210291d0690e82fc2e4ab2044aaef7a8487ee","sha512":"5514a2b6d189af140a6839725862561e690a1a896dfd5000fc025b1d0ee91c3cadafcbeffa6ee00a368be5a9e951964f146e1584692e6e1b65555edebd4445ac","ssdeep":"","tlshash":"688000b0c0800c2a8032022b2838200202ac80080008800023a0a08a202220a8a0ae8a","size":26,"data":"","first_seen":"2023-10-24T19:54:03Z","last_seen":"2026-04-21T11:53:08.704415Z","times_seen":7886,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking-com-clone-kappa.vercel.app/_next/static/chunks/61-2c7d12522f892052.js","fqdn":"booking-com-clone-kappa.vercel.app","domain":"booking-com-clone-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"265f42e196560f951a81324a6db4f4b9","sha1":"206da4c0d6849d8f7276279da45281940d345f46","sha256":"69a8e2691f15749ff7d0cc76f50788e3bb881d423a95f0f52bd128831137e471","sha512":"288c55b027c67e765d32ff2bc4fd4feaec79b91652e0dedc8967d20f04034c475e3ece099e3094e6760fd21dedd159b39f53766c65ec3c4a7d2fcf1ce4e8597f","ssdeep":"384:ROaRRpTI5VMP4xOFPgJEBFf8ICdMtvNyPCLUbuaEGvULMXdjz0i/Z:RPRXFMdKguaEGvdcUZ","tlshash":"eda2c71a755b587d5affa3a1e06dfb99963d1503c01d077ce2934b319b04ba8829db0c","size":21652,"data":"","first_seen":"2025-11-14T21:15:42.798665Z","last_seen":"2026-04-21T09:32:42.764233Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"booking-com-clone-kappa.vercel.app/_next/static/chunks/webpack-58781223deb89112.js","fqdn":"booking-com-clone-kappa.vercel.app","domain":"booking-com-clone-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking-com-clone-kappa.vercel.app/","date":"2026-04-21T09:32:14.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /_next/static/chunks/webpack-58781223deb89112.js HTTP/1.1\r\nHost: booking-com-clone-kappa.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking-com-clone-kappa.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 438073\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"webpack-58781223deb89112.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Tue, 21 Apr 2026 09:32:14 GMT\r\netag: W/\"d299e075a5a0823b6fc4a8a3e9e8b85a\"\r\nlast-modified: Thu, 16 Apr 2026 07:51:00 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/webpack-58781223deb89112.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::cngnd-1776763934556-35bad2eb1ae9\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":3587,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3587), with no line terminators","md5":"d299e075a5a0823b6fc4a8a3e9e8b85a","sha1":"94c96a18ce6d0e2aee8d43af58c01c170e2b2363","sha256":"0b9105c4a5873930dfe6d27326212ad55d921f1506e86f6da15c18675fed1c9b","sha512":"71cab78e78ba789d1c64803a6d151cad020efddc47f05aaf1e27ac2af9edb21b8f644591e68424ce7660c00756622a725d9f681fc8026bee9fa3528c0ff2b367","ssdeep":"","tlshash":"ae7186dd71a1f8ba1782a4a1043fe556f13f28f2291ed4a0cb19d4f5fc755498113fa8","first_seen":"2025-11-14T21:15:42.797853Z","last_seen":"2026-04-21T09:32:42.762318Z","times_seen":20,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"booking-com-clone-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"booking-com-clone-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"booking-com-clone-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Booking.com","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Booking.com phishing","tags":["hotel","travel","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"booking-com-clone-kappa.vercel.app/_next/static/chunks/61-2c7d12522f892052.js","fqdn":"booking-com-clone-kappa.vercel.app","domain":"booking-com-clone-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking-com-clone-kappa.vercel.app/","date":"2026-04-21T09:32:14.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /_next/static/chunks/61-2c7d12522f892052.js HTTP/1.1\r\nHost: booking-com-clone-kappa.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking-com-clone-kappa.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 494298\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"61-2c7d12522f892052.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Tue, 21 Apr 2026 09:32:14 GMT\r\netag: W/\"265f42e196560f951a81324a6db4f4b9\"\r\nlast-modified: Wed, 15 Apr 2026 16:13:56 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/61-2c7d12522f892052.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::bdwfc-1776763934563-c6be374b2365\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":21652,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (21170)","md5":"265f42e196560f951a81324a6db4f4b9","sha1":"206da4c0d6849d8f7276279da45281940d345f46","sha256":"69a8e2691f15749ff7d0cc76f50788e3bb881d423a95f0f52bd128831137e471","sha512":"288c55b027c67e765d32ff2bc4fd4feaec79b91652e0dedc8967d20f04034c475e3ece099e3094e6760fd21dedd159b39f53766c65ec3c4a7d2fcf1ce4e8597f","ssdeep":"384:ROaRRpTI5VMP4xOFPgJEBFf8ICdMtvNyPCLUbuaEGvULMXdjz0i/Z:RPRXFMdKguaEGvdcUZ","tlshash":"eda2c71a755b587d5affa3a1e06dfb99963d1503c01d077ce2934b319b04ba8829db0c","first_seen":"2025-11-14T21:15:42.798665Z","last_seen":"2026-04-21T09:32:42.764233Z","times_seen":20,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"booking-com-clone-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"booking-com-clone-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"booking-com-clone-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Booking.com","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Booking.com phishing","tags":["hotel","travel","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"cf.bstatic.com/xdata/images/xphoto/540x405/288594543.webp?k=7a96a2b4190146f63068bd0604a916c0c885c4899a527e24a9b39487d4ae50b8\u0026o=","fqdn":"cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"3.167.2.74","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking-com-clone-kappa.vercel.app/","date":"2026-04-21T09:32:14.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":"Booking.com BV"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /xdata/images/xphoto/540x405/288594543.webp?k=7a96a2b4190146f63068bd0604a916c0c885c4899a527e24a9b39487d4ae50b8\u0026o= HTTP/1.1\r\nHost: cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking-com-clone-kappa.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\nserver: nginx\r\ndate: Thu, 26 Mar 2026 05:50:35 GMT\r\netag: \"51ccc4e1aa8aa2a1948feb3e5a4cda74ea2aed65\"\r\ncontent-language: 24824\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload;\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 be3750c9aa69fd9d53a35aea8d9dab16.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: vAflJOdOHU3xnxN2yqwfmOdDYH3HqPzamCjPz0w3hO4oVFLP7VMC5Q==\r\nage: 2259699\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24824,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 540x405, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"535239e80ed4813530ad7e4df854bbc5","sha1":"a4e986b0ddf7b11929711bc2ffe67bab6834c004","sha256":"1b66c0c03eaab43507ae3c227bccd8781e0dbde9e3aaeba3269426526a6f3337","sha512":"ec9082d70da77515cbe00488009985e69ffc5d32fa3cfe480bde3dbd931c31e3bef1bc4eccd539fe9d9111b643aab0532afbbca12ac859ccfde588491d1395b1","ssdeep":"384:IC6mgGg7h/TJbGm8zYysBFmVvWhDeKaO0VoKxeyXgvF1VTN6YzxnBzHiJr8ZEzC6:OmoFJb4zYfB8Wf50PxwdkYrz+rEXe/3","tlshash":"34b2e17c29e63dd455254b13e5aeca0a70f0895bf4588a2c64360f948aeecc92347b7b","first_seen":"2025-08-27T19:49:28.06847Z","last_seen":"2026-04-21T09:32:42.769197Z","times_seen":60,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":60,"dns":18,"connect":1,"send":0,"wait":3,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking-com-clone-kappa.vercel.app/_next/static/chunks/main-app-01dcb8892b176af1.js","fqdn":"booking-com-clone-kappa.vercel.app","domain":"booking-com-clone-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking-com-clone-kappa.vercel.app/","date":"2026-04-21T09:32:14.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /_next/static/chunks/main-app-01dcb8892b176af1.js HTTP/1.1\r\nHost: booking-com-clone-kappa.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking-com-clone-kappa.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 438073\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"main-app-01dcb8892b176af1.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Tue, 21 Apr 2026 09:32:14 GMT\r\netag: \"247c20feb4ca1ae3b82d47a7377e05cf\"\r\nlast-modified: Thu, 16 Apr 2026 07:51:00 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/main-app-01dcb8892b176af1.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::l9zhp-1776763934562-0665be643235\r\ncontent-length: 463\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":463,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (463), with no line terminators","md5":"247c20feb4ca1ae3b82d47a7377e05cf","sha1":"2b24d01d3835f21443beda267165e4bf9a113765","sha256":"d7161ee4345128aaf9e8f22c073b94fa8c6d1d8d6f26845749e76966b1088373","sha512":"97ca8d2462b96eeaeb426d417dd37efae7b1f10d0c254a6691a1c766e429ad29a027020b30d6539becb07eb69f38a21a5e57bbeb9a9c585d0b9abe1d2d2475a4","ssdeep":"","tlshash":"f2f082992b0d702f29136d30fed79c2e245e416428a75d502605dda12c3366893f1c2c","first_seen":"2023-12-20T18:15:29Z","last_seen":"2026-04-21T09:32:42.779242Z","times_seen":283,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"booking-com-clone-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"booking-com-clone-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"booking-com-clone-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Booking.com","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Booking.com phishing","tags":["hotel","travel","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"booking-com-clone-kappa.vercel.app/favicon.ico","fqdn":"booking-com-clone-kappa.vercel.app","domain":"booking-com-clone-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking-com-clone-kappa.vercel.app/","date":"2026-04-21T09:32:14.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: booking-com-clone-kappa.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking-com-clone-kappa.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 1244646\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: image/x-icon\r\ndate: Tue, 21 Apr 2026 09:32:15 GMT\r\netag: W/\"c30c7d42707a47a3f4591831641e50dc\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Url\r\nx-matched-path: /favicon.ico\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::wb928-1776763934923-9204b2451f12\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25931,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"c30c7d42707a47a3f4591831641e50dc","sha1":"9ecfcc8f0ead0bf3d2d7c39e084b88f41cc89a2e","sha256":"2b8ad2d33455a8f736fc3a8ebf8f0bdea8848ad4c0db48a2833bd0f9cd775932","sha512":"7053e0f76e92179fb5154e2665d81897736bdcc22b002b0a3f8e212f27ef80f56224adaa09972848a20c66b064d16eafa732140461071ad70b6193c33dd517e0","ssdeep":"384:ryveIpvjGAUdJ/RN0d2q3OTirIDpXofYPj68Xg5RNy7yyTLb4v0:bIAJdhwYqZ8pYYPjSy7j3j","tlshash":"11c28e9b2b7e2015c908257641aeddfb011b5d4b28b4a20025fa3eb7b4b3735091fa7f","first_seen":"2023-04-30T22:57:19Z","last_seen":"2026-04-21T11:38:41.72572Z","times_seen":15968,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"booking-com-clone-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"booking-com-clone-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"booking-com-clone-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Booking.com","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Booking.com phishing","tags":["hotel","travel","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"booking-com-clone-kappa.vercel.app/_next/static/media/c9a5bc6a7c948fb0-s.p.woff2","fqdn":"booking-com-clone-kappa.vercel.app","domain":"booking-com-clone-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://booking-com-clone-kappa.vercel.app/","date":"2026-04-21T09:32:14.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /_next/static/media/c9a5bc6a7c948fb0-s.p.woff2 HTTP/1.1\r\nHost: booking-com-clone-kappa.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://booking-com-clone-kappa.vercel.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 494301\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"c9a5bc6a7c948fb0-s.p.woff2\"\r\ncontent-type: font/woff2\r\ndate: Tue, 21 Apr 2026 09:32:14 GMT\r\netag: \"74c3556b9dad12fb76f84af53ba69410\"\r\nlast-modified: Wed, 15 Apr 2026 16:13:53 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/media/c9a5bc6a7c948fb0-s.p.woff2\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::6x7fw-1776763934538-0c64f9613b0e\r\ncontent-length: 46552\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":46552,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 46552, version 1.0","md5":"74c3556b9dad12fb76f84af53ba69410","sha1":"342edef074482299f72f8f7a8862e6f908bd4137","sha256":"3bcf04ca301e44f13f404c8a04aa4ae707f67a950e12ef30c238f96e784266a1","sha512":"78ae2a421e6aa394f78200187a13f9b8bb313a85dac223d2863c46e4f53393033cbc400b40d2044390f3b79105da41d1a59f81d796561b8dc1c2a7b763bbb9dc","ssdeep":"768:hhTRJqooGnba8+OgF5kjearV36czFCgWWfSkLaLOJc+IfZmmmSn+VoMzQAhX/LS:jT2kuzOgFmjearV3UWfSkQsVEAjdCUdM","tlshash":"f02302f9ca6e8095b3d73fdc14a581185b4e02aa1097fc1beb152eb1cb39d0715eb852","first_seen":"2023-09-16T20:29:46Z","last_seen":"2026-04-21T09:32:42.781661Z","times_seen":6545,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"booking-com-clone-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"booking-com-clone-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"booking-com-clone-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Booking.com","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Booking.com phishing","tags":["hotel","travel","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"r-xx.bstatic.com/xdata/images/city/526x420/977220.jpg?k=ee4b7b42c35b8cbf09c8ddb7630092b40cd706fec153c41904ed6e252a883938\u0026o=","fqdn":"r-xx.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"3.167.2.74","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking-com-clone-kappa.vercel.app/","date":"2026-04-21T09:32:14.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":"Booking.com BV"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /xdata/images/city/526x420/977220.jpg?k=ee4b7b42c35b8cbf09c8ddb7630092b40cd706fec153c41904ed6e252a883938\u0026o= HTTP/1.1\r\nHost: r-xx.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking-com-clone-kappa.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-type: text/html;charset=iso-8859-1\r\ncontent-length: 398\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 09:32:14 GMT\r\ncache-control: must-revalidate,no-cache,no-store\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload;\r\nx-cache: Error from cloudfront\r\nvia: 1.1 be3750c9aa69fd9d53a35aea8d9dab16.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: EQA4W06an-hpbLq23exZNqlC6Qwr1-2RCCJEyWMmK9SGtgq5yHiqDg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-21T11:33:44.012568Z","times_seen":14013383,"resource_available":true,"data":null}},"time_used":213,"timings":{"blocked":74,"dns":42,"connect":2,"send":0,"wait":57,"receive":2,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cf.bstatic.com/xdata/images/xphoto/540x405/290483794.webp?k=916f7bac0ccdb08efcb269ad29cc10816ab66cd1671359066d23d32fb17b5c39\u0026o=","fqdn":"cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"3.167.2.74","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking-com-clone-kappa.vercel.app/","date":"2026-04-21T09:32:14.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":"Booking.com BV"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /xdata/images/xphoto/540x405/290483794.webp?k=916f7bac0ccdb08efcb269ad29cc10816ab66cd1671359066d23d32fb17b5c39\u0026o= HTTP/1.1\r\nHost: cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking-com-clone-kappa.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 00:15:39 GMT\r\netag: \"9659c3d24e95337642db341f21d7d098e0964743\"\r\ncontent-language: 73176\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload;\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 be3750c9aa69fd9d53a35aea8d9dab16.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: _46V18zljAREKj8HeywJ-cZ8M28qSuUoD3NdliJyQUURxDqf022xaA==\r\nage: 983795\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":73176,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 540x405, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"141bef679bf1ded3332c683181933d55","sha1":"a5dde05d3d7d57e13b7d0a3da8f14723bb976c11","sha256":"8a42ec7c8f324e676963e7846beaf3e83d323476deafa0b0bea184fa4dc13526","sha512":"3f15620454fe170a52c21397a9c5501fd94baa391e1e9b5a8539413b3e53e5d61e44311c4ac91ad282f65c2478e5aeedf760ad28ab97df9e7141514eea74eefd","ssdeep":"1536:cMFRDuvpiK4V8ogsw991rMpzI4l41KGFmGhQVBUAHMiHHhQ+gZG:FRDm4V45HtMa4ywGEGmVBPMWHhwZG","tlshash":"4a6302be93e1052a3c47df1041df87baf6f045511e18e7919aa7c515982bc78af0a3ec","first_seen":"2025-08-27T19:49:28.08487Z","last_seen":"2026-04-21T09:32:42.784226Z","times_seen":73,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":59,"dns":17,"connect":1,"send":0,"wait":3,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking-com-clone-kappa.vercel.app/_next/static/chunks/app/page-9ca086e0d066ba88.js","fqdn":"booking-com-clone-kappa.vercel.app","domain":"booking-com-clone-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking-com-clone-kappa.vercel.app/","date":"2026-04-21T09:32:14.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /_next/static/chunks/app/page-9ca086e0d066ba88.js HTTP/1.1\r\nHost: booking-com-clone-kappa.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking-com-clone-kappa.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 494298\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"page-9ca086e0d066ba88.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Tue, 21 Apr 2026 09:32:14 GMT\r\netag: W/\"318dbc29873d8118065e4b195de95a83\"\r\nlast-modified: Wed, 15 Apr 2026 16:13:56 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/app/page-9ca086e0d066ba88.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::l9zhp-1776763934584-2c4b5204c368\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":10972,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (10972), with no line terminators","md5":"318dbc29873d8118065e4b195de95a83","sha1":"92217e9ab36a893e46420fb46dce013bc65c9d21","sha256":"a6bb23b225fc71bb1fe0c2e96c2bf31c2ccfec6742fe652c029e54705e084221","sha512":"41ddb560175d802cf7fbd66b8f27431af6d7382b6f6c1d2da73a4b70bf15008f3aa290972e39bd79aa2db9c44d061d6448fe038b6a1970b71ad9e912a3a0b21b","ssdeep":"96:URjcYgLHzoo2EqopUNHt2zlRwndtuQ8IAkAy597WSnl4XDpDDBSw3ZynhGCquic5:URAYNF0QHIZEWyT3ad8qZyA1qI0Atp6","tlshash":"1632b7c8e2807fec6a6f48d9b5aee00c724eef14cb7e48d9f5bd585121855e19213bc8","first_seen":"2025-11-14T21:15:42.799481Z","last_seen":"2026-04-21T09:32:42.786541Z","times_seen":20,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"booking-com-clone-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"booking-com-clone-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"booking-com-clone-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Booking.com","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Booking.com phishing","tags":["hotel","travel","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"booking-com-clone-kappa.vercel.app/_next/static/chunks/250-afd6b4cd8558c12d.js","fqdn":"booking-com-clone-kappa.vercel.app","domain":"booking-com-clone-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking-com-clone-kappa.vercel.app/","date":"2026-04-21T09:32:14.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /_next/static/chunks/250-afd6b4cd8558c12d.js HTTP/1.1\r\nHost: booking-com-clone-kappa.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking-com-clone-kappa.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 494297\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"250-afd6b4cd8558c12d.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Tue, 21 Apr 2026 09:32:14 GMT\r\netag: W/\"2346b413d7104161a772fee3573bcee5\"\r\nlast-modified: Wed, 15 Apr 2026 16:13:56 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/250-afd6b4cd8558c12d.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::25qrl-1776763934584-91294283c15b\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":20510,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (20510), with no line terminators","md5":"2346b413d7104161a772fee3573bcee5","sha1":"ae7ddf0b47a2dd183288fd84bd7d7dd41fc80858","sha256":"0eebabf809037f593f6088496f269d24eac295cdff663b50af7df3bd639d987e","sha512":"518bb246946b28a7db8f0094ea962082b7bd2bdf07bcd3c0595c3f7563f8acac5c2cc0c7520d4a7d62fe4f1839091ea2ec5c24c08d06fbbe7b4b80812c890f5b","ssdeep":"384:mnFdat13aGB/zyASD6nqxEMIy9U7QuH7bDwwcGXx:m7at1vBbyuaHI24QuHj1cs","tlshash":"b892c7ba71d2f8a243eb41a0443b1006f2ba5c7e245e6248f7b5ddd6f57046d60a3f2a","first_seen":"2023-12-17T02:56:30Z","last_seen":"2026-04-21T09:32:42.789133Z","times_seen":101,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"booking-com-clone-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"booking-com-clone-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"booking-com-clone-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Booking.com","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Booking.com phishing","tags":["hotel","travel","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"booking-com-clone-kappa.vercel.app/_next/static/chunks/653-ecb78cb12e44b076.js","fqdn":"booking-com-clone-kappa.vercel.app","domain":"booking-com-clone-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking-com-clone-kappa.vercel.app/","date":"2026-04-21T09:32:14.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /_next/static/chunks/653-ecb78cb12e44b076.js HTTP/1.1\r\nHost: booking-com-clone-kappa.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking-com-clone-kappa.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 438073\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"653-ecb78cb12e44b076.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Tue, 21 Apr 2026 09:32:14 GMT\r\netag: W/\"305437c954776447dff868ac2158e9ab\"\r\nlast-modified: Thu, 16 Apr 2026 07:51:00 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/653-ecb78cb12e44b076.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::56tlh-1776763934584-3e009acd8a0d\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":60035,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (54639)","md5":"305437c954776447dff868ac2158e9ab","sha1":"4ad125810b5e2fb7878ff554f5de22ae847aeacd","sha256":"cde83e7bab933637ea4f10f44445ad53032d9522aecbfcff0ab8e0435d275043","sha512":"5bbbe612cc8ac0d9c8a57586a1c17428f3fa04b58ea83d4661ec107902b88875eb5fb4f41037abae7e832bb7275a5f06afe33aef812d34748fd6128eabe7ca8f","ssdeep":"768:p9OGB9fMjLQoxnZ7jI1EExX5px/5V7n3umArZWGibX30snkLv4eegDTI:p9Om/K8HxJPPCmArZRibX30skseego","tlshash":"ac430aba3551b4b5d7eb01ae503b0419f33e7a5d200d0420f169ac9d31da98df1b2f6b","first_seen":"2025-11-14T21:15:42.795844Z","last_seen":"2026-04-21T09:32:42.790177Z","times_seen":20,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"booking-com-clone-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"booking-com-clone-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"booking-com-clone-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Booking.com","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Booking.com phishing","tags":["hotel","travel","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"booking-com-clone-kappa.vercel.app/?_rsc=acgkz","fqdn":"booking-com-clone-kappa.vercel.app","domain":"booking-com-clone-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking-com-clone-kappa.vercel.app/","date":"2026-04-21T09:32:14.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /?_rsc=acgkz HTTP/1.1\r\nHost: booking-com-clone-kappa.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://booking-com-clone-kappa.vercel.app/\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Router-Prefetch: 1\r\nNext-Url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 2148214\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/x-component\r\ndate: Tue, 21 Apr 2026 09:32:14 GMT\r\netag: W/\"28a5224ae51e6b01997d6f97f8aee607\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Url\r\nx-matched-path: /index.rsc\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::l9zhp-1776763934932-d2a41ed3c582\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5969,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (5180)","md5":"28a5224ae51e6b01997d6f97f8aee607","sha1":"d7d226d616515839e9fd2718f01b257dbfa5d6d4","sha256":"f51f266eea8fab5ae282fb588aef45e63079e6e48a4c8344e3fdb770b1fd3b3c","sha512":"094067e324e4ef419e7c76078d62c5d845ced3017882075477a060f4b7317e796135b863b9ab7513c8ae521c3b5849f973e5a21914483ce5b7ddf84e136b459f","ssdeep":"96:9ILBmRFy+7OBqBSd2C7zPLoR8MDynoR8MKmdHR8MNTnBR8MjTitR8MDlAHkfUHDV:WLBmRFyyOBqBQ2C7zPLojDyojKmdHjNt","tlshash":"fac1bb3e2209ad7e7fbb4195642fd319a21d463b97a04ef6c6edae2403510713e17385","first_seen":"2025-11-14T21:15:42.80363Z","last_seen":"2026-04-21T09:32:42.792494Z","times_seen":20,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"booking-com-clone-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"booking-com-clone-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"booking-com-clone-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Booking.com","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Booking.com phishing","tags":["hotel","travel","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"booking-com-clone-kappa.vercel.app/","fqdn":"booking-com-clone-kappa.vercel.app","domain":"booking-com-clone-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-21T09:32:14.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: booking-com-clone-kappa.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 1260405\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Tue, 21 Apr 2026 09:32:14 GMT\r\netag: W/\"7539700de5e0d5b1489a5a85f81455eb\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Url\r\nx-matched-path: /\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::6x7fw-1776763934298-55be241b0f6e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20512,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (20510), with no line terminators","md5":"7539700de5e0d5b1489a5a85f81455eb","sha1":"fda355b220cf482cfc83b71cf0b06f00cd7380cd","sha256":"4e12191d3bfd9d9b1d6eaf53c6c1ef5e2ea2beca406ed1d0cd63b21716a6b045","sha512":"97256487c31679669f741d96efecbf9c1a69ec9a33d19929486fb7b5587ffe9f0f48548c2b9a62acc0d67e8cb1b0b91051fe2498ab2c28b68c8a0c8874d1df30","ssdeep":"384:ICfBOw7vxnboSqQIUkxYUkUi5UqUBYTwrYn0lTZJRhC:ICfBOOhIUIY7UyUqUBYiY0lrRhC","tlshash":"5692d8317404fe5fac5b5e6c34bdbe39618dd26ac566c9a8c6ecd91403c28b1cf22ad4","first_seen":"2025-11-14T21:15:42.80119Z","last_seen":"2026-04-21T09:32:42.79592Z","times_seen":20,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":26,"dns":4,"connect":1,"send":0,"wait":11,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"booking-com-clone-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"booking-com-clone-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"booking-com-clone-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Booking.com","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Booking.com phishing","tags":["hotel","travel","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"booking-com-clone-kappa.vercel.app/_next/static/css/9fb39b28c8a785fa.css","fqdn":"booking-com-clone-kappa.vercel.app","domain":"booking-com-clone-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://booking-com-clone-kappa.vercel.app/","date":"2026-04-21T09:32:14.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /_next/static/css/9fb39b28c8a785fa.css HTTP/1.1\r\nHost: booking-com-clone-kappa.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking-com-clone-kappa.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 438073\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"9fb39b28c8a785fa.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Tue, 21 Apr 2026 09:32:14 GMT\r\netag: W/\"a9da19c0963bb0adfa5c2df94f8c610b\"\r\nlast-modified: Thu, 16 Apr 2026 07:51:00 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/css/9fb39b28c8a785fa.css\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::6x7fw-1776763934553-026d9df97e1e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28671,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (26560)","md5":"a9da19c0963bb0adfa5c2df94f8c610b","sha1":"512db0fa0aa4d0a4d353a0516ee9908fb7aa1c84","sha256":"0fd7a0d2890494f96d8464f2574913ae179d5cf240f952c633745854abb93013","sha512":"f55dad4691acb303ed4daaebd800257906d94dcd5fdb237379328063b7e718948dffd65730a761999ad61850c0f3f821cec68dcad1c50eabdb707cf29ae97c5f","ssdeep":"384:4ow8S5crTnsyjK/HZNjrgmp6Qlrhovu4g6G:455croyjOZNjrn6Qlrh+s6G","tlshash":"7ad2c61da919513f6c2bc4f6c2d8fadd7019f0c4de3656f6be8a12219ec76b70a93204","first_seen":"2025-11-14T21:15:42.807561Z","last_seen":"2026-04-21T09:32:42.798899Z","times_seen":20,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"booking-com-clone-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"booking-com-clone-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"booking-com-clone-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Booking.com","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Booking.com phishing","tags":["hotel","travel","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"booking-com-clone-kappa.vercel.app/_next/static/chunks/fd9d1056-01f37d259b35c60a.js","fqdn":"booking-com-clone-kappa.vercel.app","domain":"booking-com-clone-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking-com-clone-kappa.vercel.app/","date":"2026-04-21T09:32:14.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /_next/static/chunks/fd9d1056-01f37d259b35c60a.js HTTP/1.1\r\nHost: booking-com-clone-kappa.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking-com-clone-kappa.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 438073\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"fd9d1056-01f37d259b35c60a.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Tue, 21 Apr 2026 09:32:14 GMT\r\netag: W/\"341bc12f15b80870bf037598311f6815\"\r\nlast-modified: Thu, 16 Apr 2026 07:51:00 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/fd9d1056-01f37d259b35c60a.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::56tlh-1776763934556-9a2e60a96a1c\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":171902,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"341bc12f15b80870bf037598311f6815","sha1":"a123c2f2c2a415d7e2746d053ee6179136ea083b","sha256":"5f0f5ae2b4ee1c48ab9be4af79fa77d891930bdc375b74a7f77909edc05d0d43","sha512":"3d21200760ed2fc1932172b42c332de1e9c26f86397d826755ec7e4a692fa78abf8b35356108248bcda316e502d5a1948c3ca18509d00d82fa6c604fbdc1174e","ssdeep":"1536:jOjfUgTQBsC4dxpzcNdT+T0d2tslQ3qWnVImZsArX9WERiAQHOK9b3gxTCBq/GzB:zCQBzjkYwxaQbIERQ73YCBl","tlshash":"6bf3e8e83955f6626eb2127700af1803737c262b280d4d60a211fd9eb5b845eb17bfdd","first_seen":"2023-12-17T02:56:30Z","last_seen":"2026-04-21T09:32:42.803085Z","times_seen":500,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"booking-com-clone-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"booking-com-clone-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"booking-com-clone-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Booking.com","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Booking.com phishing","tags":["hotel","travel","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"booking-com-clone-kappa.vercel.app/_next/static/chunks/938-7d28535add4d60fd.js","fqdn":"booking-com-clone-kappa.vercel.app","domain":"booking-com-clone-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking-com-clone-kappa.vercel.app/","date":"2026-04-21T09:32:14.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /_next/static/chunks/938-7d28535add4d60fd.js HTTP/1.1\r\nHost: booking-com-clone-kappa.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking-com-clone-kappa.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 494298\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"938-7d28535add4d60fd.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Tue, 21 Apr 2026 09:32:14 GMT\r\netag: W/\"febb37e52c76446c319f4174bfee7472\"\r\nlast-modified: Wed, 15 Apr 2026 16:13:56 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/938-7d28535add4d60fd.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::25qvx-1776763934557-cd47e78487c7\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":104463,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"febb37e52c76446c319f4174bfee7472","sha1":"6b5f598b530370a849b3197be11a354d5ab2d764","sha256":"6f9e2a2f2011cd201ede6582cdd1993d7fdd6c355f3d9246a55ec62bb04d62ce","sha512":"dd5507bdbcde171c0d4219b71ee47e013b228edb73ebbfc8ea2b76b1443d53b0fddcd8f4d97638f91e48283167c0e17acbada1b0d5ed248472b9955294764daa","ssdeep":"768:KJ+QvVw2ErwbKLdXXiJLMw+pCzTbPu6wVqv6I6dQ0vaDNZIu8O4Nfwy/Xcz1Q8Hq:ENw2ElSLoCzTbP5w+/6zu83UK8IpdNL","tlshash":"c2a3d7b672d0f8e1079780a5843f400af3751d3e146f7090a3e6cdd9baa14de91a3f6a","first_seen":"2023-12-17T02:56:30Z","last_seen":"2026-04-21T09:32:42.804269Z","times_seen":404,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"booking-com-clone-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"booking-com-clone-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"booking-com-clone-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Booking.com","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Booking.com phishing","tags":["hotel","travel","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"booking-com-clone-kappa.vercel.app/_next/static/chunks/278-025742df90329364.js","fqdn":"booking-com-clone-kappa.vercel.app","domain":"booking-com-clone-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking-com-clone-kappa.vercel.app/","date":"2026-04-21T09:32:14.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /_next/static/chunks/278-025742df90329364.js HTTP/1.1\r\nHost: booking-com-clone-kappa.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking-com-clone-kappa.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 438073\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"278-025742df90329364.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Tue, 21 Apr 2026 09:32:14 GMT\r\netag: W/\"d7959db14c0cb91f44b94c13b0faa2f6\"\r\nlast-modified: Thu, 16 Apr 2026 07:51:00 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/278-025742df90329364.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::25qrl-1776763934563-f796a42dd768\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":190972,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (40279)","md5":"d7959db14c0cb91f44b94c13b0faa2f6","sha1":"9703a22311c3bb4ba0993efee292d5528a96d57e","sha256":"4f1cc2c320ebb2dd963a2db38783d6ce2d1ebc6aea2036e411cda1dd14907723","sha512":"4619c903756cc6c717123252d8c7a02cc3f9caf3e710cbcfa496a7d504c3c28ee6df4d38758c6dcfe33a9c604fc886cef04db510075752ec00e7584d446466ff","ssdeep":"3072:arC3zW7u0j3Athy8+vqX0JChSMJ8W2CQStDs:pa7u0j3AtU8+vqEJChSMJ8W2CQSe","tlshash":"fd143ac676c2f02557bb41a6007f4107f33e7b68240e4824f1aa99c9796dd4ae277f78","first_seen":"2025-11-14T21:15:42.794956Z","last_seen":"2026-04-21T09:32:42.80548Z","times_seen":20,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"booking-com-clone-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"booking-com-clone-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"booking-com-clone-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Booking.com","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Booking.com phishing","tags":["hotel","travel","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"booking-com-clone-kappa.vercel.app/_next/static/chunks/app/layout-59aa79147f7970cb.js","fqdn":"booking-com-clone-kappa.vercel.app","domain":"booking-com-clone-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking-com-clone-kappa.vercel.app/","date":"2026-04-21T09:32:14.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /_next/static/chunks/app/layout-59aa79147f7970cb.js HTTP/1.1\r\nHost: booking-com-clone-kappa.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking-com-clone-kappa.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 494297\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"layout-59aa79147f7970cb.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Tue, 21 Apr 2026 09:32:14 GMT\r\netag: W/\"d17f72526ba1d9ec694dcacf41265509\"\r\nlast-modified: Wed, 15 Apr 2026 16:13:56 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/app/layout-59aa79147f7970cb.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::56tlh-1776763934600-5963563598c0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6441,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6437), with no line terminators","md5":"d17f72526ba1d9ec694dcacf41265509","sha1":"cf2efcef2485c51259846b75b835248aa3ed3829","sha256":"fc7e4cba521e136208a0344a7529d0106ab8e21e1a2bd253d3a204680698200c","sha512":"2cfe909c997e5063bf2010909c591ef9c99193fad76964287aff0372b17859b1e5cfb0173df9042124c7a911d4249e443aeaa273b6bbd51adb4e4b7468ec09c5","ssdeep":"96:99XENOWr62PfSaJxTrme0/Hlp2f2xzIltHqNpJnXMB8BugJPZpTCwIMOB2SX6:9VWrlsP1ZxY6","tlshash":"43d1f208e145aface96b08d8786ef41cb11f2b5ccf1f8ca5a978f8511d851e436477ca","first_seen":"2025-11-14T21:15:42.802881Z","last_seen":"2026-04-21T09:32:42.807754Z","times_seen":20,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"booking-com-clone-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"booking-com-clone-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"booking-com-clone-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Booking.com","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Booking.com phishing","tags":["hotel","travel","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"1000logos.net/wp-content/uploads/2021/05/Booking.Com-logo.png","fqdn":"1000logos.net","domain":"1000logos.net","tld":"net"},"ip":{"addr":"172.67.71.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking-com-clone-kappa.vercel.app/","date":"2026-04-21T09:32:14.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1000logos.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Apr 2026 05:16:12 GMT","end":"Tue, 30 Jun 2026 06:16:09 GMT"},"fingerprint":{"sha1":"73:38:7C:5D:06:6E:49:43:EC:2B:76:9F:D7:C3:5F:E2:EE:72:62:21","sha256":"DD:8B:0D:4E:24:A9:6D:61:F7:9D:FC:8C:C6:C6:F4:6A:1E:46:44:B5:FE:49:1B:3D:8B:7A:B6:10:D0:6D:8E:2B"}}},"request":{"raw":"GET /wp-content/uploads/2021/05/Booking.Com-logo.png HTTP/1.1\r\nHost: 1000logos.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking-com-clone-kappa.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 09:32:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 28078\r\nserver: cloudflare\r\nlast-modified: Fri, 18 Feb 2022 09:20:36 GMT\r\netag: \"620f64e4-6dae\"\r\nexpires: Thu, 23 Apr 2026 08:15:34 GMT\r\ncache-control: max-age=172800\r\naccept-ranges: bytes\r\nage: 4599\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DyG6f0gvtlcmtu2qHEl38Swh%2BGWPR3jIf2EzeVG6K7bdqTR7AfCfJoEow7hpV9J5ekFNAK08zVPs%2BDejXVBLw8RzZOc4YhbvQalj4jhy95wS7Wd1DyFfYox7wGRR%2BJw%3D\"}]}\r\ncf-ray: 9efb615f3c2d56b5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28078,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3840 x 2160, 4-bit colormap, non-interlaced","md5":"7436916d9a9e23070246b7b4851b3d13","sha1":"b6fa3875e171ae2860f96ce6dc6a1f6f585a8db4","sha256":"6c27bc28981a6dba665ffd1b3ac37e3e0a97eb38967e4c9da3d791d1e7b24ed2","sha512":"9696b395f00f3f513506b5c10efb41e503eccebea6ebfbb5fd385d0457107ad26c20abb5718a46be6fb7c85b340b28e777574634e52a17e02c61548b40f175cd","ssdeep":"768:buzVUcF3rKVyvUmtESgy1c1icaSAHV3z5d0:buRFbKVAl0yy8Fj0","tlshash":"40c2e1d59fec8567e2285d78b9fc0b866309cc8cf3308cd0c6e93251b1e277a41e6681","first_seen":"2023-06-05T15:36:55Z","last_seen":"2026-04-21T09:32:42.81184Z","times_seen":21,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":41,"dns":7,"connect":1,"send":0,"wait":16,"receive":3,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cf.bstatic.com/xdata/images/xphoto/540x405/289320924.webp?k=99a00f2907495aaeb6396695c053e3d8b95fb05619b10e76c89fb1f7d1fec427\u0026o=","fqdn":"cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"3.167.2.74","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking-com-clone-kappa.vercel.app/","date":"2026-04-21T09:32:14.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":"Booking.com BV"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /xdata/images/xphoto/540x405/289320924.webp?k=99a00f2907495aaeb6396695c053e3d8b95fb05619b10e76c89fb1f7d1fec427\u0026o= HTTP/1.1\r\nHost: cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking-com-clone-kappa.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 15:13:43 GMT\r\netag: \"9a6ed95294100cd36d1c037cdd06c471b483fb61\"\r\ncontent-language: 30800\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload;\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 be3750c9aa69fd9d53a35aea8d9dab16.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: Bo8jzif0Jc4SJiZahfOwmPLSGmmqkawRvNBIZmaBthU-T2gsCVN-cQ==\r\nage: 1880311\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30800,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 540x405, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"32e417c2f991df0a5745349882976dc3","sha1":"628987536a8e3f87673e7f2fb2bb46cdc6d37e7f","sha256":"5fa0b86a5f5ba3b4463049255b50e7cd90d3f308a6a07ede57d29bdd82309b5f","sha512":"1d152a599c813b9bbd2c648f9da146e8fcdc4364702bc24893cddeb01e94d4737780158a19c32382f3f8e2aa8e8c22a60b9bffe65eeaabcd43376122c314c439","ssdeep":"768:JcOjOylYoA18ZgsWKYVW2LzGqM9RudXKRaPxGWnnwzw/:6f6QFzGqH59wzw/","tlshash":"50d2f1525f42c4a9e8a40432a41d3cacf9b9a36b14bd782cdd82b4fcc47527962c59ae","first_seen":"2025-08-27T19:49:28.055444Z","last_seen":"2026-04-21T09:32:42.815096Z","times_seen":73,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":53,"dns":14,"connect":1,"send":0,"wait":3,"receive":0,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cf.bstatic.com/xdata/images/xphoto/540x405/173724501.webp?k=5e8a2353c6cd4efef3c5f992ea36d65598c52f2662d45cedc460d1a6a759109f\u0026o=","fqdn":"cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"3.167.2.74","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking-com-clone-kappa.vercel.app/","date":"2026-04-21T09:32:14.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":"Booking.com BV"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /xdata/images/xphoto/540x405/173724501.webp?k=5e8a2353c6cd4efef3c5f992ea36d65598c52f2662d45cedc460d1a6a759109f\u0026o= HTTP/1.1\r\nHost: cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking-com-clone-kappa.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\nserver: nginx\r\ndate: Sat, 18 Apr 2026 04:50:00 GMT\r\netag: \"5e713916a39550d8a8efec0fcb2d4ae399c32e32\"\r\ncontent-language: 41050\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload;\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 be3750c9aa69fd9d53a35aea8d9dab16.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: zoQomIXlRYFQhGxZAmTfSPR0wQvzflnKSUFzebgAkpcCcP34x2Ee_A==\r\nage: 276134\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41050,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 540x405, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"757ca62216cae6435c92205d1c9fab47","sha1":"a1fe59caa720662b9aa40be9ada4bd360b589d6a","sha256":"906da9bd9a66a77bd105f5214cb4e36f8b2e19ff9cf907ffc0fc4f8b58c5ccf9","sha512":"c7da6a05b30908a0525cfe6d05cd34273332722ca407f7316df6f5a28a9765ea8de0f7cc301c9614263040475a365fb96bb23a1f3ed43274e59b509462e17886","ssdeep":"768:5xLLuAG8oEKCihg2pYjpgTcH6qDF8I+JuMfDiq396a6doMGaqa+qt23G:jLg8opGjpg4HLF8I+/ft/6drDjt22","tlshash":"9003f12bb68a2071b790617ed1e83371516d5dcb822e505fb6cced2bcd51c251fe6390","first_seen":"2026-04-21T09:32:42.818693Z","last_seen":"2026-04-21T09:32:42.818693Z","times_seen":1,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":51,"dns":15,"connect":1,"send":0,"wait":3,"receive":0,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}