{"report_id":"1457be77-6c6c-41fc-95cd-259072584d36","version":0,"status":"done","tags":[],"date":"2026-06-20T17:28:33Z","url":{"schema":"http","addr":"tui.de","fqdn":"tui.de","domain":"tui.de","tld":"de"},"ip":{"addr":"82.98.80.196","port":0,"asn":12306,"as":"Plus.line AG","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"www.tui.com/","fqdn":"www.tui.com","domain":"tui.com","tld":"com"},"title":"Urlaub buchen » sicher und günstig reisen | TUI","dom":{"size":475783,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8367)","md5":"2405b42ea73e256ace3831516b02b3ca","sha1":"0b3153302997a7a933411b5f74002abfb40265a8","sha256":"d39b832e57e1d883d5431db703a80d4c19e277c8fda147d75d004f544816d476","sha512":"2c5f37396afe82530126283e8aab4422f80b6cf2cf759e470e206014973b3bc1be4f7b89b05b111e20b1738e7dfd8ed025f34d97ec5acf16e64349c13e556b9c","ssdeep":"3072:GNace5ahaCRBM5OCRBKce5ahaCRBM5OCRBQce5ahaCRBM5OCRBqce5ahaCRBM5OX:mtGcq","tlshash":"22a42260f421b0ba7d3f4a3f730bda69327974419f15aa98becd40c50f9a3f72582646","dom_hash":"domhash0c92683d83d745497c3a326c4e126182","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"tui.de","fqdn":"tui.de","domain":"tui.de","tld":"de"},"ip":{"addr":"82.98.80.196","port":0,"asn":12306,"as":"Plus.line AG","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-25T17:28:33Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"mwa.tui.com","ip":{"addr":"95.101.10.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"1996-12-05","domain_rank":514287,"first_seen":"2023-09-15T02:23:02Z","last_seen":"2026-06-14T18:40:26.022171Z","alert_count":0,"request_count":71,"received_data":1261577,"sent_data":48913,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"tags.tiqcdn.com","ip":{"addr":"65.9.46.57","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2012-07-11","domain_rank":6802,"first_seen":"2013-01-15T05:04:26Z","last_seen":"2026-06-18T14:42:12.084018Z","alert_count":0,"request_count":4,"received_data":661030,"sent_data":1975,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"cdns.gigya.com","ip":{"addr":"143.204.238.2","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2006-06-11","domain_rank":83830,"first_seen":"2012-12-12T16:25:08Z","last_seen":"2026-06-12T17:03:32.340751Z","alert_count":0,"request_count":2,"received_data":567210,"sent_data":1018,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"www.tui.com","ip":{"addr":"95.101.10.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"1996-12-05","domain_rank":92875,"first_seen":"2017-01-30T10:27:21Z","last_seen":"2026-03-28T02:59:29.847862Z","alert_count":0,"request_count":2,"received_data":625707,"sent_data":2088,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Contentful","description":"Contentful is an API-first content management platform to create, manage and publish content on any digital channel.","website":"https://www.contentful.com","common_platform_enumeration":"","icon":"Contentful.svg","categories":["CMS"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"C3.js","description":"D3 based reusable chart library","website":"https://c3js.org/","common_platform_enumeration":"","icon":"C3.js.png","categories":["JavaScript libraries"]},{"name":"TYPO3 CMS","description":"TYPO3 is a free and open-source Web content management system written in PHP.","website":"https://typo3.org/","common_platform_enumeration":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","icon":"TYPO3.svg","categories":["CMS"]}]},{"fqdn":"cdns.eu1.gigya.com","ip":{"addr":"143.204.238.2","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2006-06-11","domain_rank":172808,"first_seen":"2017-02-28T07:37:59Z","last_seen":"2026-06-14T12:34:36.577382Z","alert_count":0,"request_count":8,"received_data":385813,"sent_data":5841,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"api.cloud.tui.com","ip":{"addr":"63.184.79.191","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"1996-12-05","domain_rank":1926251,"first_seen":"2020-08-04T10:24:59Z","last_seen":"2026-06-06T12:22:04.959958Z","alert_count":0,"request_count":8,"received_data":52397,"sent_data":4179,"comment":"","tags":null,"fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}]},{"fqdn":"tags.pw.adn.cloud","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2022-04-21","domain_rank":69431,"first_seen":"2022-05-30T15:53:07Z","last_seen":"2026-06-13T00:01:15.337877Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":464,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.tui.co.uk","ip":{"addr":"95.101.10.208","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"1996-08-01","domain_rank":12656,"first_seen":"2014-12-07T20:08:35Z","last_seen":"2026-06-06T12:22:06.195034Z","alert_count":0,"request_count":1,"received_data":342,"sent_data":574,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"login.tui.com","ip":{"addr":"3.164.240.108","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"1996-12-05","domain_rank":0,"first_seen":"2026-02-12T02:16:51.968424Z","last_seen":"2026-03-28T02:59:28.082189Z","alert_count":0,"request_count":1,"received_data":1527,"sent_data":1593,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"static.tui.com","ip":{"addr":"13.249.8.122","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"1996-12-05","domain_rank":543198,"first_seen":"2022-04-25T20:39:14Z","last_seen":"2026-06-02T11:32:03.629369Z","alert_count":0,"request_count":27,"received_data":374922,"sent_data":17353,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"cdn.content.tuigroup.com","ip":{"addr":"95.101.10.105","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"1999-05-07","domain_rank":969651,"first_seen":"2017-01-29T19:41:16Z","last_seen":"2026-06-06T12:22:05.252632Z","alert_count":0,"request_count":8,"received_data":862330,"sent_data":5518,"comment":"","tags":null,"fingerprints":null},{"fqdn":"chat-loader.smartagent.app","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2019-01-09","domain_rank":601020,"first_seen":"2023-01-15T17:45:22Z","last_seen":"2026-05-09T13:49:44.576901Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":999,"comment":"","tags":null,"fingerprints":null},{"fqdn":"images.ctfassets.net","ip":{"addr":"108.157.229.8","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2017-03-28","domain_rank":23334,"first_seen":"2017-09-20T16:27:05Z","last_seen":"2026-06-18T16:11:01.526338Z","alert_count":0,"request_count":16,"received_data":228505,"sent_data":9864,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"tui.de","ip":{"addr":"82.98.80.196","port":443,"asn":12306,"as":"Plus.line AG","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":388217,"first_seen":"2017-01-30T14:48:52Z","last_seen":"2026-02-12T02:16:54.837812Z","alert_count":0,"request_count":1,"received_data":455,"sent_data":475,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"d17coilm9czo3b.cloudfront.net","ip":{"addr":"65.9.60.73","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2024-04-13T14:00:13Z","last_seen":"2026-06-06T12:22:05.676541Z","alert_count":0,"request_count":1,"received_data":541,"sent_data":510,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"api.tx4.pw.adn.cloud","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2022-04-21","domain_rank":223181,"first_seen":"2024-03-21T11:25:45Z","last_seen":"2026-06-13T00:01:16.117371Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":583,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cloud.tui.com","ip":{"addr":"95.101.10.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"1996-12-05","domain_rank":618782,"first_seen":"2019-07-26T09:09:41Z","last_seen":"2026-05-02T08:48:30.903163Z","alert_count":0,"request_count":27,"received_data":1565227,"sent_data":18463,"comment":"","tags":null,"fingerprints":[{"name":"Akamai Bot Manager","description":"Akamai Bot Manager detect bots using device fingerprinting bot signatures.","website":"https://www.akamai.com/us/en/products/security/bot-manager.jsp","common_platform_enumeration":"","icon":"Akamai.svg","categories":["Security"]},{"name":"Akamai","description":"Akamai is global content delivery network (CDN) services provider for media and software delivery, and cloud security solutions.","website":"https://akamai.com","common_platform_enumeration":"","icon":"Akamai.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.tui.com/","fqdn":"www.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"3670541774cb20f9e4a5199928eccd7d","sha1":"146b69e50facb9e310335bd0f7d76182f5e6b77e","sha256":"0b4912209faec01e89b579d8b82ee6cae4d13428032181a0d1147f5b94f2a2f5","sha512":"a0600dda5c28555262c5b9fcba08a76a24f374622063f0e4510596b70c3413c6ac2bb78ffe6e2cb87eb76da9ba12b16e7ed498ac8edafd30a4b6f178e74a18a4","ssdeep":"","tlshash":"9b80008bb8aab2000202303008ab0088a83a0800200c2228800000a0283200ab0e2a88","size":26,"data":"","first_seen":"2023-03-07T01:29:51Z","last_seen":"2026-06-20T17:28:48.113591Z","times_seen":2697,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/browse/mwa/workflow-ssg-prod/workflow-pages-home/assets/workflow-pages-home_26.25.1/home/index.js","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b518f331ed7716234a5f8eef1135fba","sha1":"d66cb36103470a29028fa84df139675ad9861e76","sha256":"f5abaf9bed69e3970cc74eab95b9f32e21ba3aa301e30ccd49fd258d5a87ee27","sha512":"6b9a29b5daccad6bfc5d75c92ee0bd7d05e6ce053e9fceb6833fab54c9f9996bfff64d20b1d0a6db8b3523bb1dae5e3583ec41b2500c01b7595ee59db6f98d55","ssdeep":"1536:vwkwrsnKGmkngap4wCGDkWfdp2lBbaF7rW5TMG6jz0Q39OMxiI6c1a0IswY:vwUngap4wCGjfdp2lBbaF74TMGSwQ39t","tlshash":"6ea319953094b53202eb68f7a16f6644b3752598b00d8554b43cccca3fb9dc392b7afa","size":98218,"data":"","first_seen":"2026-06-20T17:28:47.982587Z","last_seen":"2026-06-20T17:28:47.982587Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tui.com/","fqdn":"www.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"ac1e21415998b120fdec0c5caa0685a1","sha1":"567e2d7d6f76bddf625e39bb4075755e4763f23f","sha256":"f418800a10beb54e09139c04ddd8844b42e7c30fecff2d5a1488da103df4eca8","sha512":"e335dcb23900615532aa6606e72912fb2c465c6a881348c2b7e67d00fbdc03981e2f8cf129db5b4cced0792721adba126a107771fa71dd594d65d4cc80955db3","ssdeep":"","tlshash":"0c41babb719007344ae9aafe6f1bdb3638a0d00b7e21985748685c71cb64b0590f2ad4","size":1877,"data":"","first_seen":"2025-06-29T08:41:34.936034Z","last_seen":"2026-06-20T17:28:48.117362Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tui.com/","fqdn":"www.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"853ae3da503110b42e901766cd84cd0f","sha1":"c87a2002e882dc39d0f4c4899b8c85b4159658a6","sha256":"a80eff9949fc4fe06183d793553c5aff526dc048bf3b23c8f7e789ccacb3f2a7","sha512":"844d237e3bb835a78dfd3089cb9f4325e847960e6a468a4293029057f16e9bd2c85dad83be266ad12e8f24e3f79d48ad637772ef4879d4a2f71edc9df39978ce","ssdeep":"","tlshash":"4980008bb0ceb0080202303008ab0288b83a2800200c0208e000a0b0283200c8022888","size":27,"data":"","first_seen":"2023-03-07T01:29:51Z","last_seen":"2026-06-20T17:28:48.118476Z","times_seen":2597,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tui.com/","fqdn":"www.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"3670541774cb20f9e4a5199928eccd7d","sha1":"146b69e50facb9e310335bd0f7d76182f5e6b77e","sha256":"0b4912209faec01e89b579d8b82ee6cae4d13428032181a0d1147f5b94f2a2f5","sha512":"a0600dda5c28555262c5b9fcba08a76a24f374622063f0e4510596b70c3413c6ac2bb78ffe6e2cb87eb76da9ba12b16e7ed498ac8edafd30a4b6f178e74a18a4","ssdeep":"","tlshash":"9b80008bb8aab2000202303008ab0088a83a0800200c2228800000a0283200ab0e2a88","size":26,"data":"","first_seen":"2023-03-07T01:29:51Z","last_seen":"2026-06-20T17:28:48.113591Z","times_seen":2697,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tui.com/","fqdn":"www.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"aeee36204cc99bf6b2a55f9e8c0da01f","sha1":"e22b617851604533b7aad169a2f38120eec85c00","sha256":"62b9af1c719e3077bb88faceb02def28febc28b86649085d8817f792854a5226","sha512":"64e09fa5c0e7b179ee9976770c8b0241fb3e3c5f04a94a84f8f16fe1b61abe7a083285a3b3ea0c4281218538642312f405c1b2362492a6b1a7695e915ab2a56d","ssdeep":"","tlshash":"e501104d11dd3221024ea57c576e395b60365483011ce614b81d0f282f8491e97f13ee","size":822,"data":"","first_seen":"2024-08-20T22:13:43.080005Z","last_seen":"2026-06-20T17:28:48.119115Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tui.com/","fqdn":"www.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"3670541774cb20f9e4a5199928eccd7d","sha1":"146b69e50facb9e310335bd0f7d76182f5e6b77e","sha256":"0b4912209faec01e89b579d8b82ee6cae4d13428032181a0d1147f5b94f2a2f5","sha512":"a0600dda5c28555262c5b9fcba08a76a24f374622063f0e4510596b70c3413c6ac2bb78ffe6e2cb87eb76da9ba12b16e7ed498ac8edafd30a4b6f178e74a18a4","ssdeep":"","tlshash":"9b80008bb8aab2000202303008ab0088a83a0800200c2228800000a0283200ab0e2a88","size":26,"data":"","first_seen":"2023-03-07T01:29:51Z","last_seen":"2026-06-20T17:28:48.113591Z","times_seen":2697,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tui.com/","fqdn":"www.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"3670541774cb20f9e4a5199928eccd7d","sha1":"146b69e50facb9e310335bd0f7d76182f5e6b77e","sha256":"0b4912209faec01e89b579d8b82ee6cae4d13428032181a0d1147f5b94f2a2f5","sha512":"a0600dda5c28555262c5b9fcba08a76a24f374622063f0e4510596b70c3413c6ac2bb78ffe6e2cb87eb76da9ba12b16e7ed498ac8edafd30a4b6f178e74a18a4","ssdeep":"","tlshash":"9b80008bb8aab2000202303008ab0088a83a0800200c2228800000a0283200ab0e2a88","size":26,"data":"","first_seen":"2023-03-07T01:29:51Z","last_seen":"2026-06-20T17:28:48.113591Z","times_seen":2697,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tui.com/","fqdn":"www.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"f9811fb8e30601dbc69a3834e623e274","sha1":"459ea469ecaa87de49b6e2f49ce5d734e0654b65","sha256":"9e91cd03a9066cd030575d032ef8a0f9dd4a6e8623c7f89a9f188b4ba2315f0f","sha512":"313f41cbf65489812d783619052affe960db0bf54565527f3c20fed7097ed7e5485aeb55f6fc55161ed695e5c5fecb013405509f052ba48a6a04e5334c8961de","ssdeep":"","tlshash":"a0017d09babd20b600167b794acb6a5a32e7b2572008d9d83e4c42d4bf33e7404f22dc","size":706,"data":"","first_seen":"2026-06-10T08:01:22.210218Z","last_seen":"2026-06-20T17:28:48.119715Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tui.com/","fqdn":"www.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"ee67a802ee13f9738fc81e1ff89f3f84","sha1":"e0a713e6ddab48bffa00fbfadf75ad4e4e17f5a7","sha256":"2b32c4dc6e81970132d4ce0cc689e7f3613c1a26508f5cd307a74e8c4f330b64","sha512":"df3933916483652af352201e0ed9242de3c5773fccda67e51b56e7f45bdc8ab7ac51dd05f0a7f2b8e51e84c9305dbd2241806a440b600965578fcddecf8ef51e","ssdeep":"","tlshash":"92d0971c3450313c800bc3bcdc29c247376c1a8f661b581372021780bbc8eca30e18ca","size":248,"data":"","first_seen":"2026-06-10T08:01:22.212303Z","last_seen":"2026-06-20T17:28:48.121053Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tui.com/","fqdn":"www.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"6c998b702ed9a2ab419ff8c985b354b5","sha1":"3ba91fd3e38385e971c494ce0f2ab97245e60f5b","sha256":"3cd10edfd0ed694af43183da04578fd2d3574a713551fe8d1edd396c73c3cc45","sha512":"5cfd53057d33fae39a77ea32fb99f006f56c2057d72429005b5b0e612b11cef7293c098b276397f440897fc931e4cfc45e0b3bbf7a9e19edfcc6cbfb94700458","ssdeep":"","tlshash":"06e0925f0a38ed9ecbcb851db1ca7f0e74a931c205c9e98044b56d5d4192257e105576","size":407,"data":"","first_seen":"2026-06-20T17:28:48.122211Z","last_seen":"2026-06-20T17:28:48.122211Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tui.com/","fqdn":"www.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"db51ec0d3958d52871a5ca7e7cb527a8","sha1":"3aa2dac381fa88a004cffa264c5d3ac50f9e72b4","sha256":"c8252055d770807344e8507269d871db5b704d3401174078fe7973cce5ab523b","sha512":"0ffd5b614d121b2e381dbca19c06b9e79ded4204cb7593266d9585e82fe83e4a1c7c90a622430c6bc2576b7caed25b12db1d193c2fc4b5c3dc676dde21c055b2","ssdeep":"","tlshash":"0de02e6f42b70838902360ae4bab5a09b940022b0225c722390c4ce8afd4f71c832f18","size":305,"data":"","first_seen":"2026-06-20T17:28:48.123469Z","last_seen":"2026-06-20T17:28:48.123469Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tui.com/","fqdn":"www.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"bc3223b2ebdd119fd47da41e7271f0ea","sha1":"f02d0dd68fdffb4139433b17d002a5ad048cd855","sha256":"f9274026bf11d5136ae0138d2a55dfdb3d3965dcb9479796084e1b2a1f9ef83f","sha512":"9edf0ed84f93ab093496969aa5f582f2eb06b500af1e945c73cc90e89d7aa3cd62dc81266274cbbc54d16535db99af474756029d3f500f8fa0308999b01348ac","ssdeep":"","tlshash":"85a022322f002c300320f038020ef3800a3a800300ca880b080ccc880ce0b0c02b088e","size":68,"data":"","first_seen":"2026-04-17T05:28:36.472048Z","last_seen":"2026-06-20T17:28:48.124623Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tui.com/","fqdn":"www.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"bc3223b2ebdd119fd47da41e7271f0ea","sha1":"f02d0dd68fdffb4139433b17d002a5ad048cd855","sha256":"f9274026bf11d5136ae0138d2a55dfdb3d3965dcb9479796084e1b2a1f9ef83f","sha512":"9edf0ed84f93ab093496969aa5f582f2eb06b500af1e945c73cc90e89d7aa3cd62dc81266274cbbc54d16535db99af474756029d3f500f8fa0308999b01348ac","ssdeep":"","tlshash":"85a022322f002c300320f038020ef3800a3a800300ca880b080ccc880ce0b0c02b088e","size":68,"data":"","first_seen":"2026-04-17T05:28:36.472048Z","last_seen":"2026-06-20T17:28:48.124623Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloud.tui.com/cdn/travel-explorer/v1/index.js","fqdn":"cloud.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"3912ba87d70816d48256ca4d8ba52c58","sha1":"f05d75f617802186919a998bda34fc306190f254","sha256":"59acbd9ad421c7eba2afe229b4f1980278b69cfd7f15360a29aa721d3c1a7b2c","sha512":"53b6b4cc99680e81aff3684bac1cea13eaab82b1b1ee63228213d47b0f8a969fb395e8c3b7b83b6db86fc607d974b946f2fabc2f215088335705f10ed9f98467","ssdeep":"384:ySDDZFDf2McHkznsnBzYz6zGNChKen5+Et8Ji8zA+FdjKVUacvnNuhkQJD:ySDDZFDf2McHkznsnBzYz6zGNChp5J8C","tlshash":"cd82d87132ad93791cb78052b955060d6414c81fe85ac499f73e2db32f9bf4602bab3e","size":19307,"data":"","first_seen":"2025-09-28T22:43:58.401423Z","last_seen":"2026-06-20T17:28:48.112308Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tui.com/","fqdn":"www.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"3670541774cb20f9e4a5199928eccd7d","sha1":"146b69e50facb9e310335bd0f7d76182f5e6b77e","sha256":"0b4912209faec01e89b579d8b82ee6cae4d13428032181a0d1147f5b94f2a2f5","sha512":"a0600dda5c28555262c5b9fcba08a76a24f374622063f0e4510596b70c3413c6ac2bb78ffe6e2cb87eb76da9ba12b16e7ed498ac8edafd30a4b6f178e74a18a4","ssdeep":"","tlshash":"9b80008bb8aab2000202303008ab0088a83a0800200c2228800000a0283200ab0e2a88","size":26,"data":"","first_seen":"2023-03-07T01:29:51Z","last_seen":"2026-06-20T17:28:48.113591Z","times_seen":2697,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/customer/mwa/login-mfe/main.js","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"f03ccc85334b69ebbe5e3c6b6c81d0b2","sha1":"76985d452c666d7d7851a156d18f848bcc084d05","sha256":"c9b120c3c4d02aff3ad2a1985cfefc91fcd305f8d5bf778330e7d417c5e2888f","sha512":"f91ff7b7d2efae1c01f3a396f418477b40a6528be1ae33bd031d81f70cf58e59c416721599ca45e0d467e34debc45ce3e159e07fd231ee4ddc07b5698ff58137","ssdeep":"6144:wYAhmUeaDD18aBDqKDk1DbSmJmZDzmZDL8DgZDFVDAGDzuDciDhsD5FD8hDyLDFN:GhmUeaDD18aBDqKDk1DbSmJmZDzmZDL/","tlshash":"89643b48f29070361b9302a1742f1906f366782c650dc82ce4b5d9fd3afaa8da77776d","size":308321,"data":"","first_seen":"2026-06-06T12:22:17.965727Z","last_seen":"2026-06-20T17:28:48.083155Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tags.tiqcdn.com/utag/tui/main/prod/utag.v.js?a=tui/main/202606171456\u0026cb=1781976487390","fqdn":"tags.tiqcdn.com","domain":"tiqcdn.com","tld":"com"},"ip":{"addr":"65.9.46.57","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7bc0ee636b3b83484fc3b9348863bd22","sha1":"ebbffb7d7ea5362a22bfa1bab0bfdeb1617cd610","sha256":"a2c2339691fc48fbd14fb307292dff3e21222712d9240810742d7df0c6d74dfb","sha512":"4d094b64124366530e7e327b1ad5d06c0fd1ceb96387d6a143e9f561c2f9ff7ca9d68e7c23b8b14aab5309c202a8dced9a38d950662a50984d2841577293cd64","ssdeep":"","tlshash":"c71000000000000000000000000000c000000000000000000030000000000000000000","size":2,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-06-20T19:43:44.020188Z","times_seen":32731,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tui.com/","fqdn":"www.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"3670541774cb20f9e4a5199928eccd7d","sha1":"146b69e50facb9e310335bd0f7d76182f5e6b77e","sha256":"0b4912209faec01e89b579d8b82ee6cae4d13428032181a0d1147f5b94f2a2f5","sha512":"a0600dda5c28555262c5b9fcba08a76a24f374622063f0e4510596b70c3413c6ac2bb78ffe6e2cb87eb76da9ba12b16e7ed498ac8edafd30a4b6f178e74a18a4","ssdeep":"","tlshash":"9b80008bb8aab2000202303008ab0088a83a0800200c2228800000a0283200ab0e2a88","size":26,"data":"","first_seen":"2023-03-07T01:29:51Z","last_seen":"2026-06-20T17:28:48.113591Z","times_seen":2697,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tui.com/","fqdn":"www.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"e4708fa978aedb552334762accc74add","sha1":"ebde14d225a47b2a46b5e2697db31882d5d06965","sha256":"2bcda23030e50325aeea6964ac1f38a79e930da12ac7183f73b4e5da6f88dcf6","sha512":"76a2c453d0e930d60d17873c9bfe0b4a6b7cfefdd077e578efc0465db0a429358c5876c4da72233b850285b12c3537c34644f65ab15959b9ce08a529ae696c72","ssdeep":"","tlshash":"7480008bb08ab0383202323008ab0088ba3a8800a028020ce08000a038b200c8022e88","size":30,"data":"","first_seen":"2023-03-07T01:29:51Z","last_seen":"2026-06-20T17:28:48.125926Z","times_seen":2654,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tui.com/","fqdn":"www.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"3670541774cb20f9e4a5199928eccd7d","sha1":"146b69e50facb9e310335bd0f7d76182f5e6b77e","sha256":"0b4912209faec01e89b579d8b82ee6cae4d13428032181a0d1147f5b94f2a2f5","sha512":"a0600dda5c28555262c5b9fcba08a76a24f374622063f0e4510596b70c3413c6ac2bb78ffe6e2cb87eb76da9ba12b16e7ed498ac8edafd30a4b6f178e74a18a4","ssdeep":"","tlshash":"9b80008bb8aab2000202303008ab0088a83a0800200c2228800000a0283200ab0e2a88","size":26,"data":"","first_seen":"2023-03-07T01:29:51Z","last_seen":"2026-06-20T17:28:48.113591Z","times_seen":2697,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloud.tui.com/cdn/search-duration/v2/search-duration.js","fqdn":"cloud.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"571649ea6ef8e7fa8ccdc5597217056c","sha1":"4e6eb8e04035596dcd972f2f4ab1f883b53b825e","sha256":"04761533831639f6a465b60fd698eee470b90e6bc18ef429dbc99e0a6e92b61f","sha512":"23b37d983c3f78a2f0cd304efaf21a30982aae887df591eac37236232c789863e86caaff5868fa3f1a72873637291dc4f4e5736ad8b86c29bd99fc29a31c7391","ssdeep":"768:H8WpEzGzoeBVK2WgOkYJ8yUO4v4skwiiFsLCATuujmFCQ:cWEzOXnUU3kfiYCA6ujmFCQ","tlshash":"6e73a6397400c3737dab8ffdd3ed0b29219a360099215c79bf2e648b03ce9aa5155b79","size":75573,"data":"","first_seen":"2026-03-29T05:54:31.415603Z","last_seen":"2026-06-20T17:28:47.927961Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloud.tui.com/osp/ao/ui/nordic-search-panel/current/nordic-search-panel.esm.js","fqdn":"cloud.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"67e2d35785fc9ec1a929d36bf0db4003","sha1":"08204b590acdd1a3ffa3f2ddc262f6509d515946","sha256":"56f34038cf9a1be4acdc23faf0aae7f7d7cc7d72edef999892478ee47823a868","sha512":"cf02824af1c82b39914504445f9dcce4ea1e6d701eb1941265a044b27c0a8d446c58a657b23f250f8737d648b8ab028e062205e8dfab57bc8dc7b0b4bf5c9696","ssdeep":"96:Q5uyrFUxIpYNN124qEi96kKanE/waaTIjjpF+AWZ5qzGSz9ILIDuQgfq5Ht4tNrz:Q5uCKxIEvbiYkKantaa8jjeAaqdz9eFv","tlshash":"bab154e7d8be04f377ff40ffa9b4bed48d06462066019541aae0d19628e9f8f3166235","size":5138,"data":"","first_seen":"2026-06-06T12:22:18.125143Z","last_seen":"2026-06-20T17:28:47.941932Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tui.com/","fqdn":"www.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"853ae3da503110b42e901766cd84cd0f","sha1":"c87a2002e882dc39d0f4c4899b8c85b4159658a6","sha256":"a80eff9949fc4fe06183d793553c5aff526dc048bf3b23c8f7e789ccacb3f2a7","sha512":"844d237e3bb835a78dfd3089cb9f4325e847960e6a468a4293029057f16e9bd2c85dad83be266ad12e8f24e3f79d48ad637772ef4879d4a2f71edc9df39978ce","ssdeep":"","tlshash":"4980008bb0ceb0080202303008ab0288b83a2800200c0208e000a0b0283200c8022888","size":27,"data":"","first_seen":"2023-03-07T01:29:51Z","last_seen":"2026-06-20T17:28:48.118476Z","times_seen":2597,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tui.com/","fqdn":"www.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"3670541774cb20f9e4a5199928eccd7d","sha1":"146b69e50facb9e310335bd0f7d76182f5e6b77e","sha256":"0b4912209faec01e89b579d8b82ee6cae4d13428032181a0d1147f5b94f2a2f5","sha512":"a0600dda5c28555262c5b9fcba08a76a24f374622063f0e4510596b70c3413c6ac2bb78ffe6e2cb87eb76da9ba12b16e7ed498ac8edafd30a4b6f178e74a18a4","ssdeep":"","tlshash":"9b80008bb8aab2000202303008ab0088a83a0800200c2228800000a0283200ab0e2a88","size":26,"data":"","first_seen":"2023-03-07T01:29:51Z","last_seen":"2026-06-20T17:28:48.113591Z","times_seen":2697,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tui.com/","fqdn":"www.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"3670541774cb20f9e4a5199928eccd7d","sha1":"146b69e50facb9e310335bd0f7d76182f5e6b77e","sha256":"0b4912209faec01e89b579d8b82ee6cae4d13428032181a0d1147f5b94f2a2f5","sha512":"a0600dda5c28555262c5b9fcba08a76a24f374622063f0e4510596b70c3413c6ac2bb78ffe6e2cb87eb76da9ba12b16e7ed498ac8edafd30a4b6f178e74a18a4","ssdeep":"","tlshash":"9b80008bb8aab2000202303008ab0088a83a0800200c2228800000a0283200ab0e2a88","size":26,"data":"","first_seen":"2023-03-07T01:29:51Z","last_seen":"2026-06-20T17:28:48.113591Z","times_seen":2697,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tui.com/","fqdn":"www.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"f9811fb8e30601dbc69a3834e623e274","sha1":"459ea469ecaa87de49b6e2f49ce5d734e0654b65","sha256":"9e91cd03a9066cd030575d032ef8a0f9dd4a6e8623c7f89a9f188b4ba2315f0f","sha512":"313f41cbf65489812d783619052affe960db0bf54565527f3c20fed7097ed7e5485aeb55f6fc55161ed695e5c5fecb013405509f052ba48a6a04e5334c8961de","ssdeep":"","tlshash":"a0017d09babd20b600167b794acb6a5a32e7b2572008d9d83e4c42d4bf33e7404f22dc","size":706,"data":"","first_seen":"2026-06-10T08:01:22.210218Z","last_seen":"2026-06-20T17:28:48.119715Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tui.com/","fqdn":"www.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"ee67a802ee13f9738fc81e1ff89f3f84","sha1":"e0a713e6ddab48bffa00fbfadf75ad4e4e17f5a7","sha256":"2b32c4dc6e81970132d4ce0cc689e7f3613c1a26508f5cd307a74e8c4f330b64","sha512":"df3933916483652af352201e0ed9242de3c5773fccda67e51b56e7f45bdc8ab7ac51dd05f0a7f2b8e51e84c9305dbd2241806a440b600965578fcddecf8ef51e","ssdeep":"","tlshash":"92d0971c3450313c800bc3bcdc29c247376c1a8f661b581372021780bbc8eca30e18ca","size":248,"data":"","first_seen":"2026-06-10T08:01:22.212303Z","last_seen":"2026-06-20T17:28:48.121053Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tui.com/","fqdn":"www.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"6c998b702ed9a2ab419ff8c985b354b5","sha1":"3ba91fd3e38385e971c494ce0f2ab97245e60f5b","sha256":"3cd10edfd0ed694af43183da04578fd2d3574a713551fe8d1edd396c73c3cc45","sha512":"5cfd53057d33fae39a77ea32fb99f006f56c2057d72429005b5b0e612b11cef7293c098b276397f440897fc931e4cfc45e0b3bbf7a9e19edfcc6cbfb94700458","ssdeep":"","tlshash":"06e0925f0a38ed9ecbcb851db1ca7f0e74a931c205c9e98044b56d5d4192257e105576","size":407,"data":"","first_seen":"2026-06-20T17:28:48.122211Z","last_seen":"2026-06-20T17:28:48.122211Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tui.com/","fqdn":"www.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"db51ec0d3958d52871a5ca7e7cb527a8","sha1":"3aa2dac381fa88a004cffa264c5d3ac50f9e72b4","sha256":"c8252055d770807344e8507269d871db5b704d3401174078fe7973cce5ab523b","sha512":"0ffd5b614d121b2e381dbca19c06b9e79ded4204cb7593266d9585e82fe83e4a1c7c90a622430c6bc2576b7caed25b12db1d193c2fc4b5c3dc676dde21c055b2","ssdeep":"","tlshash":"0de02e6f42b70838902360ae4bab5a09b940022b0225c722390c4ce8afd4f71c832f18","size":305,"data":"","first_seen":"2026-06-20T17:28:48.123469Z","last_seen":"2026-06-20T17:28:48.123469Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tui.com/","fqdn":"www.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"bc3223b2ebdd119fd47da41e7271f0ea","sha1":"f02d0dd68fdffb4139433b17d002a5ad048cd855","sha256":"f9274026bf11d5136ae0138d2a55dfdb3d3965dcb9479796084e1b2a1f9ef83f","sha512":"9edf0ed84f93ab093496969aa5f582f2eb06b500af1e945c73cc90e89d7aa3cd62dc81266274cbbc54d16535db99af474756029d3f500f8fa0308999b01348ac","ssdeep":"","tlshash":"85a022322f002c300320f038020ef3800a3a800300ca880b080ccc880ce0b0c02b088e","size":68,"data":"","first_seen":"2026-04-17T05:28:36.472048Z","last_seen":"2026-06-20T17:28:48.124623Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tui.com/","fqdn":"www.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"bc3223b2ebdd119fd47da41e7271f0ea","sha1":"f02d0dd68fdffb4139433b17d002a5ad048cd855","sha256":"f9274026bf11d5136ae0138d2a55dfdb3d3965dcb9479796084e1b2a1f9ef83f","sha512":"9edf0ed84f93ab093496969aa5f582f2eb06b500af1e945c73cc90e89d7aa3cd62dc81266274cbbc54d16535db99af474756029d3f500f8fa0308999b01348ac","ssdeep":"","tlshash":"85a022322f002c300320f038020ef3800a3a800300ca880b080ccc880ce0b0c02b088e","size":68,"data":"","first_seen":"2026-04-17T05:28:36.472048Z","last_seen":"2026-06-20T17:28:48.124623Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloud.tui.com/cdn/header/current/index.js","fqdn":"cloud.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"8104b084a5d5c61df603a5c41d9c5f96","sha1":"908b6c394d70de3f827e2496f18e5be36847128a","sha256":"bee3043d080a81d6d7c1dda6bdca82ab128003bbbf9516043683c53a4cde30cf","sha512":"08c2c9ba1490fcb93aed4fdbc798febac173a19f07b0a8517a873af449e2145734906cd407f756127a313a5b958e72e36bd5f0e1e4dc0cb70fadd76ce15c6728","ssdeep":"3072:djdRdeRX4p9sTvZRXZsQZGVmlEVtH54/ZG+5By:d8RBGVvW/Zry","tlshash":"a6341985a1c421367cbfc665b2da9e4467951c41d847d85cfabc98cb0fc3ee260a3a3d","size":252049,"data":"","first_seen":"2026-03-28T02:59:34.616471Z","last_seen":"2026-06-20T17:28:47.980834Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/customer/mwa/auth-i11n-layer/de.js","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"1e75bf3b39132c1cd1fabb31c54dd3c0","sha1":"0b23de10aa8160bf5db49015c71b2c25799efc7d","sha256":"b2fb4780a139e8497d0e50dd15cd6a935232d60996dab93c9677fea76aa8adf5","sha512":"63cdbaa854ffaa81cca926f8ca6a8b550e3def3c76da7cb98c203808f3e7663960b2a2bd539cee29a1b929676c653350e6001efa086f749ef9bcf5727bcbaffe","ssdeep":"384:o024jbvATLS3LyTHEiqZumxFDpvRLNNGl7unLzOQaO7YMr7hMo/f0L7SBBZFxX8c:o024jbvAT2bukiqV5LPmuLiyFMo/ML7O","tlshash":"fb82c699b38ab9700991c5b668bf331057397904381ec81cfb3d5cd27d91a4a533ea7a","size":19302,"data":"","first_seen":"2026-03-28T02:59:34.583929Z","last_seen":"2026-06-20T17:28:47.970023Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tags.tiqcdn.com/utag/tui/main/prod/utag.25209.js?utv=ut4.52.202505130522","fqdn":"tags.tiqcdn.com","domain":"tiqcdn.com","tld":"com"},"ip":{"addr":"65.9.46.57","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0627dd3d9da9fa933f93a6d314bf33ec","sha1":"dd3d0315b16e204b31e3e231de69671d00072698","sha256":"323a0797099c768bbb0ed65616312b39f32df9e1eba3e15017f1b20f8b62e7aa","sha512":"86faaa914e651a6c5b364375579fc197dbee53945fbb719ed0e033406680b0c023ec0b8018089318ec19b10eb0983620df6a6373f20fdf2e1740ca6ea34512b8","ssdeep":"","tlshash":"2d61b7043a64123a8480816bbd5f3f549072a2a75ea19c37d4d88c68ef58ddd847af4d","size":3332,"data":"","first_seen":"2026-06-20T17:28:47.90954Z","last_seen":"2026-06-20T17:28:47.90954Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tui.com/","fqdn":"www.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"3670541774cb20f9e4a5199928eccd7d","sha1":"146b69e50facb9e310335bd0f7d76182f5e6b77e","sha256":"0b4912209faec01e89b579d8b82ee6cae4d13428032181a0d1147f5b94f2a2f5","sha512":"a0600dda5c28555262c5b9fcba08a76a24f374622063f0e4510596b70c3413c6ac2bb78ffe6e2cb87eb76da9ba12b16e7ed498ac8edafd30a4b6f178e74a18a4","ssdeep":"","tlshash":"9b80008bb8aab2000202303008ab0088a83a0800200c2228800000a0283200ab0e2a88","size":26,"data":"","first_seen":"2023-03-07T01:29:51Z","last_seen":"2026-06-20T17:28:48.113591Z","times_seen":2697,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tui.com/","fqdn":"www.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"e5313c1a14be0d6de5605cc2db00743b","sha1":"8e3b90ab5471d955f4a54943a6c71e440cdb6f3a","sha256":"056f92015f230e9bc34a5eb07ae99e4bb7e85e163c2207260256a9b7977528ee","sha512":"9143916d5958d4060bea4071fbd39bd15c10aace29293771d031d8934fd916fdb4cce6897f1f7d258cc2c61e287f112d8ff30680e7f2bc1eeba551f9fbc2e885","ssdeep":"","tlshash":"2e800447f0d57544d14330340577004454375d1034440134400440515731004c13d444","size":35,"data":"","first_seen":"2023-03-07T01:29:51Z","last_seen":"2026-06-20T17:28:48.126507Z","times_seen":2383,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tui.com/","fqdn":"www.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"3670541774cb20f9e4a5199928eccd7d","sha1":"146b69e50facb9e310335bd0f7d76182f5e6b77e","sha256":"0b4912209faec01e89b579d8b82ee6cae4d13428032181a0d1147f5b94f2a2f5","sha512":"a0600dda5c28555262c5b9fcba08a76a24f374622063f0e4510596b70c3413c6ac2bb78ffe6e2cb87eb76da9ba12b16e7ed498ac8edafd30a4b6f178e74a18a4","ssdeep":"","tlshash":"9b80008bb8aab2000202303008ab0088a83a0800200c2228800000a0283200ab0e2a88","size":26,"data":"","first_seen":"2023-03-07T01:29:51Z","last_seen":"2026-06-20T17:28:48.113591Z","times_seen":2697,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tags.tiqcdn.com/utag/tui/main/prod/utag.js","fqdn":"tags.tiqcdn.com","domain":"tiqcdn.com","tld":"com"},"ip":{"addr":"65.9.46.57","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a283cbf333c013101e335be8d48d9087","sha1":"8b77bf1e850bd174d12e52b74764041d6f5e57ed","sha256":"52d9623fe41818aa40a09fdef4edf144ebc67926193160af46eccc0202bf936c","sha512":"5106e0db00e3ed58cba57112ca19221e9d4d04d9a41360309c203af9d2f7d737b8cf1728232a148c58e6f8b55aa45f496c63e4b83614b57d3fab8c6aba7a01f1","ssdeep":"12288:wto0IThjMJGZpLgKm+/NILZY4HkwuyUuZWuJxufKuk9ujKuXbueNZ0zliQiQhKj:wt1ShjMJaLgwILZAwuyUuZWuJxufKukW","tlshash":"5bd46c48b2e4b13643e62479616f1b06f13a640378978858f168dc946f78c8ed2b7f7e","size":651467,"data":"","first_seen":"2026-06-20T17:28:47.971181Z","last_seen":"2026-06-20T17:28:47.971181Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloud.tui.com/cdn/search-traveller/v2/search-traveller.js","fqdn":"cloud.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"9350ae11fbeae475f5b8b5fbd066b778","sha1":"eb30b93a79fa2e35a41278e564a365ebcf53ea9e","sha256":"c5e52b5fc847a1574215d6664a855c832a03c3bec8bebf194dcbb43122184442","sha512":"d334c928070214dd7787ce8db13e4b2bf5415a24cfa4d9fc9e1a881393c780f437ac485530c2460b47cf3ef94be7166fb1c70fc5e116db520a45fb6ba866c2b9","ssdeep":"768:CIV/lNGNyiuyhNwGsr2LhlFZE5xr1dR0ulsKbS7DxMF8ZCH:TiT/mvR6xNCH","tlshash":"03634509b431a7ba682b0fbea7eff1197d25d410c91305d93e6d808a0b8f4b9571397b","size":67108,"data":"","first_seen":"2026-03-29T05:54:31.388551Z","last_seen":"2026-06-20T17:28:47.901262Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloud.tui.com/cdn/favorites/current/enums-DhJnbe0z.js","fqdn":"cloud.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"3aeee928a6eabc53c7106d9dc5592a8f","sha1":"29a947439c49e4190a7f79d05fa34e879c4bd3bf","sha256":"89061e02ae749eeda4dfe560079a97296fb03a2ebbe728b929b98dd10b765b6a","sha512":"5cc9b171f111468c24d2242f26114a611eeaff9ee5aba9bb43f7844be91b7b22a7f3edb00eb3752fb8d19d319108f74d0664bdf663011874bb9749b09b7b667e","ssdeep":"1536:fY8xMzrwW661MKyUcGchTSBxob1VOgUl32dsaTx:fxMzr8hTSBx+fO3l3Sb","tlshash":"4a537475f412b1bb29032f7f73ebca19736dbc00d6302664fe8a94d6099e1fb019a615","size":63723,"data":"","first_seen":"2026-03-28T02:59:34.64095Z","last_seen":"2026-06-20T17:28:47.928823Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloud.tui.com/osp/ao/ui/nordic-search-panel/current/p-hl2OCUe7.js","fqdn":"cloud.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"25c64290a8b21ed52ad211e72ec6fc81","sha1":"da51355cadeb4954521a05460522da1796fd5f25","sha256":"5de65ce488c0d821bea5521e1365ce9b333220305c109a6d989dfec0a3a1d1de","sha512":"1a7bc14aa38c0817e788aaa715c4d31b62f7e5ce41311dd3dd9b85343fbd9dc599e240e1ce2b2fdad416c980a37dba597b2764227347e52756bab3a2e346b681","ssdeep":"1536:rczhE5pYzMV46c2ZZHTQwuqnhwqz/vy7z46c2ZZkTQwuqVSa2YcXG2UIG+mPI1aq:r0hE5pwMV46c2ZZPhwqz/vyH46c2ZZMK","tlshash":"8c6386b8f821a0bb3d1b597f43aad979b349b800bf052a60fb05a8c974d75e301d7b15","size":69679,"data":"","first_seen":"2026-06-06T12:22:18.157007Z","last_seen":"2026-06-20T17:28:47.979917Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tui.com/","fqdn":"www.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"3670541774cb20f9e4a5199928eccd7d","sha1":"146b69e50facb9e310335bd0f7d76182f5e6b77e","sha256":"0b4912209faec01e89b579d8b82ee6cae4d13428032181a0d1147f5b94f2a2f5","sha512":"a0600dda5c28555262c5b9fcba08a76a24f374622063f0e4510596b70c3413c6ac2bb78ffe6e2cb87eb76da9ba12b16e7ed498ac8edafd30a4b6f178e74a18a4","ssdeep":"","tlshash":"9b80008bb8aab2000202303008ab0088a83a0800200c2228800000a0283200ab0e2a88","size":26,"data":"","first_seen":"2023-03-07T01:29:51Z","last_seen":"2026-06-20T17:28:48.113591Z","times_seen":2697,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat-loader.smartagent.app/loader/main.js","fqdn":"chat-loader.smartagent.app","domain":"smartagent.app","tld":"app"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0f773dda18da58a635238d9f9f713329","sha1":"7cab8276e1018aeb32d8a408e8484ecc625f29d0","sha256":"5237ef85e66f18bf3f28d6ec25109edcdf663bd8cbba0e45940784fb56fe56f8","sha512":"5a348cddab442e2fe9b04f07097dc22fca246cc0fe0dc64f00baf3723c6d6c2e424fada0e8c93604a811a91b9076b3843cdc506c2f4e5bb5d15382ff55082552","ssdeep":"3072:qPjjPseu30G8lnXbKiL75Flbol/1KZ54jb0u:APseukGhwu","tlshash":"2c1452c8f690b06593d3f1b5823f440fb23e6869640a417cf168e4e96dbc85d9627fb8","size":196999,"data":"","first_seen":"2025-05-22T17:08:24.589291Z","last_seen":"2026-06-20T17:28:48.127139Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tui.com/","fqdn":"www.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"Function","is_inline":false,"md5":"32ae3d89889a8df68e3e66c8f0616ebc","sha1":"8870488f69770a915a013d06fd28a511f262cc05","sha256":"11eb3e83bbd928803f6b4e6d50d970cc37c32b89fe89bc1b1bd45e2bd134b34a","sha512":"39290d59412d00e5b5ef61bfdc87166059dffb713feb29a6c935a56b79b02cd84fea7607081b7eb3d800ee45833b20de58ce41bdf765c9305b63fe68bc9dec43","ssdeep":"","tlshash":"f2d0ebb4e8c751128fbf6f263cb29f0c20b9c2650800f88820fd80020b30fa095de0fa","size":285,"data":"","first_seen":"2026-01-10T03:40:53.012083Z","last_seen":"2026-06-20T17:28:48.128858Z","times_seen":1226,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tui.com/","fqdn":"www.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"e4708fa978aedb552334762accc74add","sha1":"ebde14d225a47b2a46b5e2697db31882d5d06965","sha256":"2bcda23030e50325aeea6964ac1f38a79e930da12ac7183f73b4e5da6f88dcf6","sha512":"76a2c453d0e930d60d17873c9bfe0b4a6b7cfefdd077e578efc0465db0a429358c5876c4da72233b850285b12c3537c34644f65ab15959b9ce08a529ae696c72","ssdeep":"","tlshash":"7480008bb08ab0383202323008ab0088ba3a8800a028020ce08000a038b200c8022e88","size":30,"data":"","first_seen":"2023-03-07T01:29:51Z","last_seen":"2026-06-20T17:28:48.125926Z","times_seen":2654,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tui.com/","fqdn":"www.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"e4708fa978aedb552334762accc74add","sha1":"ebde14d225a47b2a46b5e2697db31882d5d06965","sha256":"2bcda23030e50325aeea6964ac1f38a79e930da12ac7183f73b4e5da6f88dcf6","sha512":"76a2c453d0e930d60d17873c9bfe0b4a6b7cfefdd077e578efc0465db0a429358c5876c4da72233b850285b12c3537c34644f65ab15959b9ce08a529ae696c72","ssdeep":"","tlshash":"7480008bb08ab0383202323008ab0088ba3a8800a028020ce08000a038b200c8022e88","size":30,"data":"","first_seen":"2023-03-07T01:29:51Z","last_seen":"2026-06-20T17:28:48.125926Z","times_seen":2654,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tui.com/","fqdn":"www.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"dc6171c04a7f9122a64ad06c1a97610a","sha1":"392c052854eab50a32d7987235035b28ef839ad2","sha256":"70375fd926b79eec7f799c3389b7a5fe5700a672029d22f85b29c656e2494fff","sha512":"e5f87306ec745e82141284a5eab4181d0601d97800251a0210357573d1b6c9c4f8a8d5c69e6adb189d555160601e75ffd85ded0ecee5b157a88fd1d9ec930b4e","ssdeep":"","tlshash":"9e80008bb08eb0000202303008ab0cc8e83a880230380208800000b0283200c88a2888","size":27,"data":"","first_seen":"2023-03-07T01:29:51Z","last_seen":"2026-06-20T17:28:48.129456Z","times_seen":2590,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tui.com/","fqdn":"www.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"3670541774cb20f9e4a5199928eccd7d","sha1":"146b69e50facb9e310335bd0f7d76182f5e6b77e","sha256":"0b4912209faec01e89b579d8b82ee6cae4d13428032181a0d1147f5b94f2a2f5","sha512":"a0600dda5c28555262c5b9fcba08a76a24f374622063f0e4510596b70c3413c6ac2bb78ffe6e2cb87eb76da9ba12b16e7ed498ac8edafd30a4b6f178e74a18a4","ssdeep":"","tlshash":"9b80008bb8aab2000202303008ab0088a83a0800200c2228800000a0283200ab0e2a88","size":26,"data":"","first_seen":"2023-03-07T01:29:51Z","last_seen":"2026-06-20T17:28:48.113591Z","times_seen":2697,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/browse/mwa/workflow-ssg-prod/workflow-pages-home/assets/workflow-pages-home_26.25.1/datalayer/index.js","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"e04a6b7433637ff9b444f9b7e0a8c62d","sha1":"cf571833cbfa93d57412bec71e625a8a9e42902d","sha256":"56c29323e0338bb04d9147e94c09f9690fe272fda5a2f8c79ed2145f3ec0adb8","sha512":"bbdf9860eb3430e2b965ea2db667f2ee462dc190c5fbce755d32e6b3c632089da19a744d8067c5141f4db4cc8f3856f45a700329181128185b889e7ebc7b2ff2","ssdeep":"192:qUsgYUHgYHcoEdAuYYEsIUwI6zl7BYmY3mJlMxfdBY3kQRVlpjHiIK1QGgRk31cM:qUxPgUcoEdAuYYEsIUwI6zl7B98mJlMJ","tlshash":"4302a4bb93a556a08581a49cf87abbbe7013752220d6c854ff2d9e6f340ac85c01eddd","size":8383,"data":"","first_seen":"2026-06-06T12:22:18.079678Z","last_seen":"2026-06-20T17:28:48.046717Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloud.tui.com/cdn/favorites/current/render-DnQyu38p.js","fqdn":"cloud.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"e5860483abde56c62ad773e19f7480f1","sha1":"8465daadd246441fd094b5c132d402fa72376885","sha256":"512e73e4ddc756a222bcbae5aaf1494ad6d427bdebb0b69c42f2b9283a9668ad","sha512":"42469e3f3962e783ca400b4f522dd210074d40e98cd42595e4adf8e529035a0cbb5ba8326973ccb1bd8a1a872232a9c064bd650c28d4bbb4006fd838f3275c3a","ssdeep":"","tlshash":"6051746261b868fbad15d521c1ca31b6792b55d1b100a868fa4e0c611f19ed1ec37c7f","size":2702,"data":"","first_seen":"2025-09-28T22:43:58.361671Z","last_seen":"2026-06-20T17:28:47.986317Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloud.tui.com/cdn/search-form/v2/search-form.js","fqdn":"cloud.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"68268d900435be4b484ab62fc5361115","sha1":"44b16ef24baa4c213921155935297724d0256555","sha256":"f40605987c5e6ce5d3326b966671271f863a004ac40c36248097ac88773ab661","sha512":"fd4dc78673dcddf386bd3eddcb0f6b480de36769805bafedbdae657c4670a4c729accbe0b71e98f4b84961523120d75d512ce19004bd2b1ecc122c7e8c60c558","ssdeep":"1536:V2lVDMqUTgwrPlPZLmAZC6oEPhWwtgbYedWsO9+U/DpRJIczpW661MKyUcGBhAS2:y+vXIcz8hASBxczCSBxr","tlshash":"b4b34474f461a2ba6c275f7f73ef9a68336874019e3026a8bf8d50c7038e1fa0199755","size":115537,"data":"","first_seen":"2026-03-29T05:54:31.390126Z","last_seen":"2026-06-20T17:28:47.985208Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloud.tui.com/cdn/search-scope/v2/search-scope.js","fqdn":"cloud.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"caa84cdfbcda7b15deab03ddeb3a54a4","sha1":"7ab792e79b9f9e68e5d8e9ca6d596b689797efcd","sha256":"5ea7af30a3dd2bc6c3ca2fe36a0a6cae6f989a19823dbc355129144bfb602e1d","sha512":"e74d1a9db2d7d10774e4fa7b0f48e392f98c902cd0115b1d9f91b0c997e7556bd4480f985bc25d73d1d0158b05cbc94e84a855e4f718973b6cbdb5a16a43cab8","ssdeep":"192:62wETFfuA2wjFfuH3k1jXMkEz8MeTslQTDqjAJS8o9CTbCw:PtTm0GhkEwMetfq1C3Cw","tlshash":"122293227a22a1354a220fd773fb1754734ab600d6b249b93f6e0082479debc2062b79","size":10138,"data":"","first_seen":"2026-06-06T12:22:18.033267Z","last_seen":"2026-06-20T17:28:48.047774Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tui.com/","fqdn":"www.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"dc6171c04a7f9122a64ad06c1a97610a","sha1":"392c052854eab50a32d7987235035b28ef839ad2","sha256":"70375fd926b79eec7f799c3389b7a5fe5700a672029d22f85b29c656e2494fff","sha512":"e5f87306ec745e82141284a5eab4181d0601d97800251a0210357573d1b6c9c4f8a8d5c69e6adb189d555160601e75ffd85ded0ecee5b157a88fd1d9ec930b4e","ssdeep":"","tlshash":"9e80008bb08eb0000202303008ab0cc8e83a880230380208800000b0283200c88a2888","size":27,"data":"","first_seen":"2023-03-07T01:29:51Z","last_seen":"2026-06-20T17:28:48.129456Z","times_seen":2590,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tui.com/","fqdn":"www.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"e4708fa978aedb552334762accc74add","sha1":"ebde14d225a47b2a46b5e2697db31882d5d06965","sha256":"2bcda23030e50325aeea6964ac1f38a79e930da12ac7183f73b4e5da6f88dcf6","sha512":"76a2c453d0e930d60d17873c9bfe0b4a6b7cfefdd077e578efc0465db0a429358c5876c4da72233b850285b12c3537c34644f65ab15959b9ce08a529ae696c72","ssdeep":"","tlshash":"7480008bb08ab0383202323008ab0088ba3a8800a028020ce08000a038b200c8022e88","size":30,"data":"","first_seen":"2023-03-07T01:29:51Z","last_seen":"2026-06-20T17:28:48.125926Z","times_seen":2654,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tui.com/","fqdn":"www.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"dc6171c04a7f9122a64ad06c1a97610a","sha1":"392c052854eab50a32d7987235035b28ef839ad2","sha256":"70375fd926b79eec7f799c3389b7a5fe5700a672029d22f85b29c656e2494fff","sha512":"e5f87306ec745e82141284a5eab4181d0601d97800251a0210357573d1b6c9c4f8a8d5c69e6adb189d555160601e75ffd85ded0ecee5b157a88fd1d9ec930b4e","ssdeep":"","tlshash":"9e80008bb08eb0000202303008ab0cc8e83a880230380208800000b0283200c88a2888","size":27,"data":"","first_seen":"2023-03-07T01:29:51Z","last_seen":"2026-06-20T17:28:48.129456Z","times_seen":2590,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloud.tui.com/cdn/search-departure-airport/v2/search-departure-airport.js","fqdn":"cloud.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"84d180ef04308e944bba495c0f8442f7","sha1":"b8b9d02ed28222582cbb3c15a8bad2348e108a30","sha256":"af47ea0eab8207b6f094728c0de291ed5b20abe7f5c3afc9f59ac44a0e692d32","sha512":"b4eda9692cbec08268a912da15acf9d4818af9ae2dbb2a4d2d7641d9fdc1a3ab5be427cf8575661b0eb76b7db0a72af75a94a6ecd63ed0666f9efc76a9436101","ssdeep":"768:HezNMWFwHqYfvve8OYaYKpkRGbxR2grCW:+8DfvZxlc1rCW","tlshash":"1733d71770a6a0719d338ff263ee477d765572009c214a69bf1d00868fcddeea22b639","size":53515,"data":"","first_seen":"2026-03-29T05:54:31.399002Z","last_seen":"2026-06-20T17:28:47.955835Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tui.com/","fqdn":"www.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"853ae3da503110b42e901766cd84cd0f","sha1":"c87a2002e882dc39d0f4c4899b8c85b4159658a6","sha256":"a80eff9949fc4fe06183d793553c5aff526dc048bf3b23c8f7e789ccacb3f2a7","sha512":"844d237e3bb835a78dfd3089cb9f4325e847960e6a468a4293029057f16e9bd2c85dad83be266ad12e8f24e3f79d48ad637772ef4879d4a2f71edc9df39978ce","ssdeep":"","tlshash":"4980008bb0ceb0080202303008ab0288b83a2800200c0208e000a0b0283200c8022888","size":27,"data":"","first_seen":"2023-03-07T01:29:51Z","last_seen":"2026-06-20T17:28:48.118476Z","times_seen":2597,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tui.com/","fqdn":"www.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"3670541774cb20f9e4a5199928eccd7d","sha1":"146b69e50facb9e310335bd0f7d76182f5e6b77e","sha256":"0b4912209faec01e89b579d8b82ee6cae4d13428032181a0d1147f5b94f2a2f5","sha512":"a0600dda5c28555262c5b9fcba08a76a24f374622063f0e4510596b70c3413c6ac2bb78ffe6e2cb87eb76da9ba12b16e7ed498ac8edafd30a4b6f178e74a18a4","ssdeep":"","tlshash":"9b80008bb8aab2000202303008ab0088a83a0800200c2228800000a0283200ab0e2a88","size":26,"data":"","first_seen":"2023-03-07T01:29:51Z","last_seen":"2026-06-20T17:28:48.113591Z","times_seen":2697,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloud.tui.com/cdn/search-button/v2/search-button.js","fqdn":"cloud.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"5dd8b85d83fc20c97f48bfeb66f3bd3c","sha1":"3421d0e3f7720fd61240e58517be4001a38f7230","sha256":"c07c642abd7fe535f6b699ff6dd910224621ed1b647162bd382e36119ca9770e","sha512":"7f7dbd17608e4d3560d43aea33d75f8ffa221f7577366dfe297a56b085b87d0e9b4a38249ebb4c8557f244efdf27172ad36690cbbcb4154f0a67a3dd60ccd0ce","ssdeep":"192:5yhEaDNmt3yHuo1fDcZD3wh53/uafr4ySLIC7IChJwTC0RSUI3G5K0ajxglxQvr4:Qkw4kQITTC0SVGM0aFEsFXE","tlshash":"a16273927173a27a19231f7e27ef56043322b40269314e69bf1e21d20fdd2fd0569ba7","size":14919,"data":"","first_seen":"2026-03-29T05:54:31.375386Z","last_seen":"2026-06-20T17:28:48.023705Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tui.com/","fqdn":"www.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"Function","is_inline":false,"md5":"32ae3d89889a8df68e3e66c8f0616ebc","sha1":"8870488f69770a915a013d06fd28a511f262cc05","sha256":"11eb3e83bbd928803f6b4e6d50d970cc37c32b89fe89bc1b1bd45e2bd134b34a","sha512":"39290d59412d00e5b5ef61bfdc87166059dffb713feb29a6c935a56b79b02cd84fea7607081b7eb3d800ee45833b20de58ce41bdf765c9305b63fe68bc9dec43","ssdeep":"","tlshash":"f2d0ebb4e8c751128fbf6f263cb29f0c20b9c2650800f88820fd80020b30fa095de0fa","size":285,"data":"","first_seen":"2026-01-10T03:40:53.012083Z","last_seen":"2026-06-20T17:28:48.128858Z","times_seen":1226,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tui.com/","fqdn":"www.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"Function","is_inline":false,"md5":"32ae3d89889a8df68e3e66c8f0616ebc","sha1":"8870488f69770a915a013d06fd28a511f262cc05","sha256":"11eb3e83bbd928803f6b4e6d50d970cc37c32b89fe89bc1b1bd45e2bd134b34a","sha512":"39290d59412d00e5b5ef61bfdc87166059dffb713feb29a6c935a56b79b02cd84fea7607081b7eb3d800ee45833b20de58ce41bdf765c9305b63fe68bc9dec43","ssdeep":"","tlshash":"f2d0ebb4e8c751128fbf6f263cb29f0c20b9c2650800f88820fd80020b30fa095de0fa","size":285,"data":"","first_seen":"2026-01-10T03:40:53.012083Z","last_seen":"2026-06-20T17:28:48.128858Z","times_seen":1226,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tui.com/","fqdn":"www.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"3670541774cb20f9e4a5199928eccd7d","sha1":"146b69e50facb9e310335bd0f7d76182f5e6b77e","sha256":"0b4912209faec01e89b579d8b82ee6cae4d13428032181a0d1147f5b94f2a2f5","sha512":"a0600dda5c28555262c5b9fcba08a76a24f374622063f0e4510596b70c3413c6ac2bb78ffe6e2cb87eb76da9ba12b16e7ed498ac8edafd30a4b6f178e74a18a4","ssdeep":"","tlshash":"9b80008bb8aab2000202303008ab0088a83a0800200c2228800000a0283200ab0e2a88","size":26,"data":"","first_seen":"2023-03-07T01:29:51Z","last_seen":"2026-06-20T17:28:48.113591Z","times_seen":2697,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tui.com/","fqdn":"www.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"e4708fa978aedb552334762accc74add","sha1":"ebde14d225a47b2a46b5e2697db31882d5d06965","sha256":"2bcda23030e50325aeea6964ac1f38a79e930da12ac7183f73b4e5da6f88dcf6","sha512":"76a2c453d0e930d60d17873c9bfe0b4a6b7cfefdd077e578efc0465db0a429358c5876c4da72233b850285b12c3537c34644f65ab15959b9ce08a529ae696c72","ssdeep":"","tlshash":"7480008bb08ab0383202323008ab0088ba3a8800a028020ce08000a038b200c8022e88","size":30,"data":"","first_seen":"2023-03-07T01:29:51Z","last_seen":"2026-06-20T17:28:48.125926Z","times_seen":2654,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tui.com/","fqdn":"www.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"3670541774cb20f9e4a5199928eccd7d","sha1":"146b69e50facb9e310335bd0f7d76182f5e6b77e","sha256":"0b4912209faec01e89b579d8b82ee6cae4d13428032181a0d1147f5b94f2a2f5","sha512":"a0600dda5c28555262c5b9fcba08a76a24f374622063f0e4510596b70c3413c6ac2bb78ffe6e2cb87eb76da9ba12b16e7ed498ac8edafd30a4b6f178e74a18a4","ssdeep":"","tlshash":"9b80008bb8aab2000202303008ab0088a83a0800200c2228800000a0283200ab0e2a88","size":26,"data":"","first_seen":"2023-03-07T01:29:51Z","last_seen":"2026-06-20T17:28:48.113591Z","times_seen":2697,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tui.com/","fqdn":"www.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"3670541774cb20f9e4a5199928eccd7d","sha1":"146b69e50facb9e310335bd0f7d76182f5e6b77e","sha256":"0b4912209faec01e89b579d8b82ee6cae4d13428032181a0d1147f5b94f2a2f5","sha512":"a0600dda5c28555262c5b9fcba08a76a24f374622063f0e4510596b70c3413c6ac2bb78ffe6e2cb87eb76da9ba12b16e7ed498ac8edafd30a4b6f178e74a18a4","ssdeep":"","tlshash":"9b80008bb8aab2000202303008ab0088a83a0800200c2228800000a0283200ab0e2a88","size":26,"data":"","first_seen":"2023-03-07T01:29:51Z","last_seen":"2026-06-20T17:28:48.113591Z","times_seen":2697,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tui.com/","fqdn":"www.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"3670541774cb20f9e4a5199928eccd7d","sha1":"146b69e50facb9e310335bd0f7d76182f5e6b77e","sha256":"0b4912209faec01e89b579d8b82ee6cae4d13428032181a0d1147f5b94f2a2f5","sha512":"a0600dda5c28555262c5b9fcba08a76a24f374622063f0e4510596b70c3413c6ac2bb78ffe6e2cb87eb76da9ba12b16e7ed498ac8edafd30a4b6f178e74a18a4","ssdeep":"","tlshash":"9b80008bb8aab2000202303008ab0088a83a0800200c2228800000a0283200ab0e2a88","size":26,"data":"","first_seen":"2023-03-07T01:29:51Z","last_seen":"2026-06-20T17:28:48.113591Z","times_seen":2697,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tui.com/","fqdn":"www.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"3670541774cb20f9e4a5199928eccd7d","sha1":"146b69e50facb9e310335bd0f7d76182f5e6b77e","sha256":"0b4912209faec01e89b579d8b82ee6cae4d13428032181a0d1147f5b94f2a2f5","sha512":"a0600dda5c28555262c5b9fcba08a76a24f374622063f0e4510596b70c3413c6ac2bb78ffe6e2cb87eb76da9ba12b16e7ed498ac8edafd30a4b6f178e74a18a4","ssdeep":"","tlshash":"9b80008bb8aab2000202303008ab0088a83a0800200c2228800000a0283200ab0e2a88","size":26,"data":"","first_seen":"2023-03-07T01:29:51Z","last_seen":"2026-06-20T17:28:48.113591Z","times_seen":2697,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tui.com/","fqdn":"www.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"e4708fa978aedb552334762accc74add","sha1":"ebde14d225a47b2a46b5e2697db31882d5d06965","sha256":"2bcda23030e50325aeea6964ac1f38a79e930da12ac7183f73b4e5da6f88dcf6","sha512":"76a2c453d0e930d60d17873c9bfe0b4a6b7cfefdd077e578efc0465db0a429358c5876c4da72233b850285b12c3537c34644f65ab15959b9ce08a529ae696c72","ssdeep":"","tlshash":"7480008bb08ab0383202323008ab0088ba3a8800a028020ce08000a038b200c8022e88","size":30,"data":"","first_seen":"2023-03-07T01:29:51Z","last_seen":"2026-06-20T17:28:48.125926Z","times_seen":2654,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tui.com/","fqdn":"www.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"dc6171c04a7f9122a64ad06c1a97610a","sha1":"392c052854eab50a32d7987235035b28ef839ad2","sha256":"70375fd926b79eec7f799c3389b7a5fe5700a672029d22f85b29c656e2494fff","sha512":"e5f87306ec745e82141284a5eab4181d0601d97800251a0210357573d1b6c9c4f8a8d5c69e6adb189d555160601e75ffd85ded0ecee5b157a88fd1d9ec930b4e","ssdeep":"","tlshash":"9e80008bb08eb0000202303008ab0cc8e83a880230380208800000b0283200c88a2888","size":27,"data":"","first_seen":"2023-03-07T01:29:51Z","last_seen":"2026-06-20T17:28:48.129456Z","times_seen":2590,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloud.tui.com/cdn/search-form-wrapper/v1/index.js","fqdn":"cloud.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"bfb748c97f06228f05e0c0f34673dd2b","sha1":"6488646a12d04e3cf5c7e8b67541e986f98c4007","sha256":"79a9924b231c8d0b96e26c61d768a781e2bc1d4492cd33d919698e03dc170ddf","sha512":"b23c404e178323c84d0b7977bbc5a8a8ff3b9152e1b1084a4ebc3f091178493e78fee206f27f7200fd22b4b85e61dcf07d901968273188bc7001a0d58d25db74","ssdeep":"768:o9rhZSIMv5KoIPjibgE3UApobWe1AZowRTy9tYhIoTlWaNdW21azeKkaGmNh/pEW:o9rhZNMv5KoIPjibgE3UApobWe1AZow8","tlshash":"97c20a9672b75e3a5db9c09b8b8d7c403211f065ec0245dcb75cacc48b9be2913a2739","size":25734,"data":"","first_seen":"2026-03-29T05:54:31.413654Z","last_seen":"2026-06-20T17:28:47.897391Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tui.com/","fqdn":"www.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"f9811fb8e30601dbc69a3834e623e274","sha1":"459ea469ecaa87de49b6e2f49ce5d734e0654b65","sha256":"9e91cd03a9066cd030575d032ef8a0f9dd4a6e8623c7f89a9f188b4ba2315f0f","sha512":"313f41cbf65489812d783619052affe960db0bf54565527f3c20fed7097ed7e5485aeb55f6fc55161ed695e5c5fecb013405509f052ba48a6a04e5334c8961de","ssdeep":"","tlshash":"a0017d09babd20b600167b794acb6a5a32e7b2572008d9d83e4c42d4bf33e7404f22dc","size":706,"data":"","first_seen":"2026-06-10T08:01:22.210218Z","last_seen":"2026-06-20T17:28:48.119715Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tui.com/","fqdn":"www.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"ee67a802ee13f9738fc81e1ff89f3f84","sha1":"e0a713e6ddab48bffa00fbfadf75ad4e4e17f5a7","sha256":"2b32c4dc6e81970132d4ce0cc689e7f3613c1a26508f5cd307a74e8c4f330b64","sha512":"df3933916483652af352201e0ed9242de3c5773fccda67e51b56e7f45bdc8ab7ac51dd05f0a7f2b8e51e84c9305dbd2241806a440b600965578fcddecf8ef51e","ssdeep":"","tlshash":"92d0971c3450313c800bc3bcdc29c247376c1a8f661b581372021780bbc8eca30e18ca","size":248,"data":"","first_seen":"2026-06-10T08:01:22.212303Z","last_seen":"2026-06-20T17:28:48.121053Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tui.com/","fqdn":"www.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"6c998b702ed9a2ab419ff8c985b354b5","sha1":"3ba91fd3e38385e971c494ce0f2ab97245e60f5b","sha256":"3cd10edfd0ed694af43183da04578fd2d3574a713551fe8d1edd396c73c3cc45","sha512":"5cfd53057d33fae39a77ea32fb99f006f56c2057d72429005b5b0e612b11cef7293c098b276397f440897fc931e4cfc45e0b3bbf7a9e19edfcc6cbfb94700458","ssdeep":"","tlshash":"06e0925f0a38ed9ecbcb851db1ca7f0e74a931c205c9e98044b56d5d4192257e105576","size":407,"data":"","first_seen":"2026-06-20T17:28:48.122211Z","last_seen":"2026-06-20T17:28:48.122211Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tui.com/","fqdn":"www.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"db51ec0d3958d52871a5ca7e7cb527a8","sha1":"3aa2dac381fa88a004cffa264c5d3ac50f9e72b4","sha256":"c8252055d770807344e8507269d871db5b704d3401174078fe7973cce5ab523b","sha512":"0ffd5b614d121b2e381dbca19c06b9e79ded4204cb7593266d9585e82fe83e4a1c7c90a622430c6bc2576b7caed25b12db1d193c2fc4b5c3dc676dde21c055b2","ssdeep":"","tlshash":"0de02e6f42b70838902360ae4bab5a09b940022b0225c722390c4ce8afd4f71c832f18","size":305,"data":"","first_seen":"2026-06-20T17:28:48.123469Z","last_seen":"2026-06-20T17:28:48.123469Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tui.com/","fqdn":"www.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"bc3223b2ebdd119fd47da41e7271f0ea","sha1":"f02d0dd68fdffb4139433b17d002a5ad048cd855","sha256":"f9274026bf11d5136ae0138d2a55dfdb3d3965dcb9479796084e1b2a1f9ef83f","sha512":"9edf0ed84f93ab093496969aa5f582f2eb06b500af1e945c73cc90e89d7aa3cd62dc81266274cbbc54d16535db99af474756029d3f500f8fa0308999b01348ac","ssdeep":"","tlshash":"85a022322f002c300320f038020ef3800a3a800300ca880b080ccc880ce0b0c02b088e","size":68,"data":"","first_seen":"2026-04-17T05:28:36.472048Z","last_seen":"2026-06-20T17:28:48.124623Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tui.com/","fqdn":"www.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"bc3223b2ebdd119fd47da41e7271f0ea","sha1":"f02d0dd68fdffb4139433b17d002a5ad048cd855","sha256":"f9274026bf11d5136ae0138d2a55dfdb3d3965dcb9479796084e1b2a1f9ef83f","sha512":"9edf0ed84f93ab093496969aa5f582f2eb06b500af1e945c73cc90e89d7aa3cd62dc81266274cbbc54d16535db99af474756029d3f500f8fa0308999b01348ac","ssdeep":"","tlshash":"85a022322f002c300320f038020ef3800a3a800300ca880b080ccc880ce0b0c02b088e","size":68,"data":"","first_seen":"2026-04-17T05:28:36.472048Z","last_seen":"2026-06-20T17:28:48.124623Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloud.tui.com/cdn/search-destination/v2/search-destination.js","fqdn":"cloud.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ccb7f953f49f1c44aa434b05e95b89f","sha1":"a3ca4b73462a36ff28f60b498492a045cb7aa6ea","sha256":"12e3543ccbe2baa07bb2110f03106a6b1b02f411f25fadaefeabefb025a587d8","sha512":"aac086819915323b5890684ea9dcb27353b719e849f8dd2a09d0ca31d58adfdf652b845d0053e347e68854bd1c5f210bab1aacee6d989320f0964a44c47d0203","ssdeep":"768:bwNPuMAzCeuxpNo6FhisWssX37UfUgid/pEIjQWmm/piXrdIA6E1+MQwpCV:spUgZIjU4iXryTE1+uCV","tlshash":"4253c81ab11193b27c274ffab7de836c75a1e1009d22556c7f1d50cb0b4d9ac9273a3a","size":62554,"data":"","first_seen":"2026-03-29T05:54:31.414512Z","last_seen":"2026-06-20T17:28:48.020685Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloud.tui.com/cdn/favorites/current/user-CxAhDbHC.js","fqdn":"cloud.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"a5575e721b76504f2da53e6b0e43057b","sha1":"e9d5070d9beeacbe06c34f774ecc8e63ad16b79d","sha256":"5c9cb702ae7054642981b5c3532f2050359a53fb102f63e8d0467c73684a6210","sha512":"abe8ea45c7d00fefc707db3fbf2ac25acd0a6c9ba4c805320022d5ac80db292d5c0adc683e6a66b5d41618cbefabaea754293413cf5dc9eea9aa5ab0b942bd7f","ssdeep":"","tlshash":"fdf0dc8b38e721f5888128bc2197a26be33c5906690e8540d00235241c29de7a195e2e","size":455,"data":"","first_seen":"2026-03-28T02:59:34.601648Z","last_seen":"2026-06-20T17:28:47.945347Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tui.com/","fqdn":"www.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"e4708fa978aedb552334762accc74add","sha1":"ebde14d225a47b2a46b5e2697db31882d5d06965","sha256":"2bcda23030e50325aeea6964ac1f38a79e930da12ac7183f73b4e5da6f88dcf6","sha512":"76a2c453d0e930d60d17873c9bfe0b4a6b7cfefdd077e578efc0465db0a429358c5876c4da72233b850285b12c3537c34644f65ab15959b9ce08a529ae696c72","ssdeep":"","tlshash":"7480008bb08ab0383202323008ab0088ba3a8800a028020ce08000a038b200c8022e88","size":30,"data":"","first_seen":"2023-03-07T01:29:51Z","last_seen":"2026-06-20T17:28:48.125926Z","times_seen":2654,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tui.com/","fqdn":"www.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"3670541774cb20f9e4a5199928eccd7d","sha1":"146b69e50facb9e310335bd0f7d76182f5e6b77e","sha256":"0b4912209faec01e89b579d8b82ee6cae4d13428032181a0d1147f5b94f2a2f5","sha512":"a0600dda5c28555262c5b9fcba08a76a24f374622063f0e4510596b70c3413c6ac2bb78ffe6e2cb87eb76da9ba12b16e7ed498ac8edafd30a4b6f178e74a18a4","ssdeep":"","tlshash":"9b80008bb8aab2000202303008ab0088a83a0800200c2228800000a0283200ab0e2a88","size":26,"data":"","first_seen":"2023-03-07T01:29:51Z","last_seen":"2026-06-20T17:28:48.113591Z","times_seen":2697,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloud.tui.com/cdn/crisis-ticker/v1/index.js","fqdn":"cloud.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"9afbf55929de10a13429235f447626ec","sha1":"e87f459337cbc893be53fb155030582e4af94e6c","sha256":"7999a63755a49659b9de7af5401a3215fc3c66351b30c2fcc6c37baa77d215f9","sha512":"27172cb31a2e5921283e3f68aa6a0613d748a0708525e261f1b9e74b1b723781a8a4a31b3a535cccaa401fac6e4b43a7bae9a61cf4d43a98f2db64bd5a8ad9da","ssdeep":"768:EpDDZFDf2McHkznsnBzYz6zGNCCOBH7f0BTxGuHPe6BWoMVCUkhIseIaYpZctUGm:mDDZFDf2McHkznsnBzYz6zGNCrHQBli8","tlshash":"85c253d52750e23f5d3fe156e398a52ca418fd0add8688e6f51968124fcbffa089312c","size":28246,"data":"","first_seen":"2025-10-22T07:01:59.604576Z","last_seen":"2026-06-20T17:28:47.916263Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloud.tui.com/cdn/favorites/current/tui-favorites-heart.js","fqdn":"cloud.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0bf8e7b2a0272d7e6e15371e768fbae","sha1":"a8ef6ed78d8fc880e8f5115b96ba9a0315df74e0","sha256":"4bf21ad5fb16ca1d8db0c81e2f0162a15bc0032791068b7a432c8835243f76f8","sha512":"e8eeeeff46a1309ca07eb8b0a4a07bfa21c84521c702dec7e61fd48a052133aadb6864f9069c31883cb60e18cbe457f478924bb22906607665e9aa212721e8b4","ssdeep":"768:GHq8f4JuiT+l4gARiCann7t5HXAgcCtaHQWZsKE7:+ZfBZl3taHQW+KE7","tlshash":"daf2a5a9310275b8ac7b7faa27afc2553664b904803814957d8e90d30fafd7f8167738","size":35980,"data":"","first_seen":"2026-03-28T02:59:34.615239Z","last_seen":"2026-06-20T17:28:47.920184Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloud.tui.com/cdn/holiday-offer-filter/v3/holiday-offer-filter.iife.js","fqdn":"cloud.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9864a4af0afbb20b59353181e086441","sha1":"1a609adbf00b5c27751b143477beabe0c7aca0d6","sha256":"727b6cfcc803921fc4e84a3ff8b12c6532500ef7a55c089f7a976d905ee35c41","sha512":"0c5c4f81c5a004b1785f20354f064a3ac9b7a6ca1245f46e1059c1e317cce24f8ee3fc00668cc2d55ed149e8ac02d0e9a3c85edc34e97a15b776bcbfa59d6a85","ssdeep":"6144:rKcZfvWJ3idN05S8cweXqwtX5YaASUhwf+:ZZfvWJ3idi5S8cweRDiwf+","tlshash":"b0944b54f05160bb3d17967db38e8e2cb719a450eb0201b8bf4ed5c82bcb8fb5257a25","size":444009,"data":"","first_seen":"2026-06-20T17:28:47.950365Z","last_seen":"2026-06-20T17:28:47.950365Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tags.tiqcdn.com/utag/tui/main/prod/utag.25210.js?utv=ut4.52.202408081046","fqdn":"tags.tiqcdn.com","domain":"tiqcdn.com","tld":"com"},"ip":{"addr":"65.9.46.57","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"672ea263637c06c765d1b550dafb5f82","sha1":"a5e2b6403b183f512d8d237f0ffabfbaf94c8002","sha256":"b6258d44c3351df733705f62fac9b32269d4e14180230f4ebddc3846e27dd1b5","sha512":"cbe498c412c9cf812cb5bb3e316d70bdea5b557927f7fcab9e1ab3ac4f3b55cc2b0216b1bd33aaaed4dd95d586a9351a35e1dac27c3e07226ed7c0aa8c05ec4f","ssdeep":"","tlshash":"3081524d3885a03fc8b0d112896f0f6461517a1b18a38977b5c98c5eb328d9ef85af5f","size":3865,"data":"","first_seen":"2026-06-20T17:28:48.037278Z","last_seen":"2026-06-20T17:28:48.037278Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tui.com/","fqdn":"www.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"e4708fa978aedb552334762accc74add","sha1":"ebde14d225a47b2a46b5e2697db31882d5d06965","sha256":"2bcda23030e50325aeea6964ac1f38a79e930da12ac7183f73b4e5da6f88dcf6","sha512":"76a2c453d0e930d60d17873c9bfe0b4a6b7cfefdd077e578efc0465db0a429358c5876c4da72233b850285b12c3537c34644f65ab15959b9ce08a529ae696c72","ssdeep":"","tlshash":"7480008bb08ab0383202323008ab0088ba3a8800a028020ce08000a038b200c8022e88","size":30,"data":"","first_seen":"2023-03-07T01:29:51Z","last_seen":"2026-06-20T17:28:48.125926Z","times_seen":2654,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tui.com/","fqdn":"www.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"dc6171c04a7f9122a64ad06c1a97610a","sha1":"392c052854eab50a32d7987235035b28ef839ad2","sha256":"70375fd926b79eec7f799c3389b7a5fe5700a672029d22f85b29c656e2494fff","sha512":"e5f87306ec745e82141284a5eab4181d0601d97800251a0210357573d1b6c9c4f8a8d5c69e6adb189d555160601e75ffd85ded0ecee5b157a88fd1d9ec930b4e","ssdeep":"","tlshash":"9e80008bb08eb0000202303008ab0cc8e83a880230380208800000b0283200c88a2888","size":27,"data":"","first_seen":"2023-03-07T01:29:51Z","last_seen":"2026-06-20T17:28:48.129456Z","times_seen":2590,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloud.tui.com/cdn/footer/v2/index.js","fqdn":"cloud.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"ad93aded211a7556fe42cb7afb4289df","sha1":"42c17736ce9418707af184e7b805c9929811ddd4","sha256":"307d72521c8c2a410d1a4f80b9edd773740a3d2104bb76518f52aa6a8400e7c4","sha512":"bb895b7323690b0f4a2790b3a929a10346e4e37c7d2f653b2702e22cd3ba37ebebf19ce78041668646b2b9c77d818f935efdf1a7aa67bdfa1a2c398758f16e0d","ssdeep":"1536:zjkWxhTNiSG+Xja9OmDBtws/iWLwNw7Di7t9exaTq:0F9OABtgWnae","tlshash":"7163d8bbfa4052797c5bc86737ccd25ca620a801d94390daf65d4c860bd3afa9763b0d","size":67536,"data":"","first_seen":"2026-03-28T02:59:34.563036Z","last_seen":"2026-06-20T17:28:47.90734Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdns.gigya.com/js/gigya.js?apiKey=4_LWGzxVDlxnaTetL1EDjQ7w","fqdn":"cdns.gigya.com","domain":"gigya.com","tld":"com"},"ip":{"addr":"143.204.238.2","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"091b719b2b07d74a54f216a58e46891c","sha1":"c796d652e3f767540f31cf40dde22ba8d3690309","sha256":"df4c353c15d1c96d82fd7695ddbd46cab926bc837963e95b421a1e9a5411c121","sha512":"f276435463f58aeb0e64cb7db93822f1b208e929c9286e82038fb9371f5d7e4568f3765c8f69b3b6aa9cca7d09cebe532d12b925e6d135a6a09e1f72d30792b3","ssdeep":"6144:R+ghjNpfJSDTH1H82HqzFivna3PYf4Wkuu4s:7hjsCaqzFi/a3PEkJ7","tlshash":"d0c4a5d9b6d2b07643a765e8553f230ab23a6958640cc428f665c4d57cb8a4bc233ffc","size":557102,"data":"","first_seen":"2026-06-20T17:28:47.931911Z","last_seen":"2026-06-20T17:28:47.931911Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tui.com/","fqdn":"www.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"e4708fa978aedb552334762accc74add","sha1":"ebde14d225a47b2a46b5e2697db31882d5d06965","sha256":"2bcda23030e50325aeea6964ac1f38a79e930da12ac7183f73b4e5da6f88dcf6","sha512":"76a2c453d0e930d60d17873c9bfe0b4a6b7cfefdd077e578efc0465db0a429358c5876c4da72233b850285b12c3537c34644f65ab15959b9ce08a529ae696c72","ssdeep":"","tlshash":"7480008bb08ab0383202323008ab0088ba3a8800a028020ce08000a038b200c8022e88","size":30,"data":"","first_seen":"2023-03-07T01:29:51Z","last_seen":"2026-06-20T17:28:48.125926Z","times_seen":2654,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tui.com/","fqdn":"www.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"e4708fa978aedb552334762accc74add","sha1":"ebde14d225a47b2a46b5e2697db31882d5d06965","sha256":"2bcda23030e50325aeea6964ac1f38a79e930da12ac7183f73b4e5da6f88dcf6","sha512":"76a2c453d0e930d60d17873c9bfe0b4a6b7cfefdd077e578efc0465db0a429358c5876c4da72233b850285b12c3537c34644f65ab15959b9ce08a529ae696c72","ssdeep":"","tlshash":"7480008bb08ab0383202323008ab0088ba3a8800a028020ce08000a038b200c8022e88","size":30,"data":"","first_seen":"2023-03-07T01:29:51Z","last_seen":"2026-06-20T17:28:48.125926Z","times_seen":2654,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"noview=true: automatic page view blocked. preloader. dataEnvironment = crab","filename":"https://tags.tiqcdn.com/utag/tui/main/prod/utag.js","line_number":0,"column_number":0},{"level":"log","text":"utag version: ut4.52.202606171456","filename":"https://tags.tiqcdn.com/utag/tui/main/prod/utag.js","line_number":0,"column_number":0},{"level":"error","text":"map[actor:server1.conn0.watcher14.process7//obj186 class:Object extensible:true frozen:false isError:false ownPropertyLength:7 preview:map[kind:Object ownProperties:map[context:map[configurable:true enumerable:true value:map[type:undefined] writable:true] errorCode:map[configurable:true enumerable:true value:403005 writable:true] errorMessage:map[configurable:true enumerable:true value:Unauthorized user writable:true] operation:map[configurable:true enumerable:true value:/accounts.getJWT writable:true] requestParams:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj187 class:Object extensible:true frozen:false isError:false ownPropertyLength:14 sealed:false type:object] writable:true] status:map[configurable:true enumerable:true value:FAIL writable:true] statusMessage:map[configurable:true enumerable:true value:Unauthorized user writable:true]] ownPropertiesLength:7] sealed:false type:object]","filename":"https://cloud.tui.com/cdn/header/current/index.js","line_number":0,"column_number":0},{"level":"debug","text":"Auth service error:Auth service timeout","filename":"https://mwa.tui.com/browse/mwa/workflow-ssg-prod/workflow-pages-home/assets/workflow-pages-home_26.25.1/datalayer/index.js","line_number":0,"column_number":0},{"level":"log","text":"tui.ospcrab.pageDatamap[actor:server1.conn0.watcher14.process7//obj188 class:Object extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[kind:Object ownProperties:map[event:map[configurable:true enumerable:true value:pageData writable:true] page:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj189 class:Object extensible:true frozen:false isError:false ownPropertyLength:15 sealed:false type:object] writable:true] user:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj190 class:Object extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object] writable:true]] ownPropertiesLength:3] sealed:false type:object]","filename":"https://tags.tiqcdn.com/utag/tui/main/prod/utag.js","line_number":0,"column_number":0},{"level":"log","text":" DLEtrigger from view","filename":"https://tags.tiqcdn.com/utag/tui/main/prod/utag.js","line_number":0,"column_number":0},{"level":"log","text":"service chat script loaded","filename":"https://tags.tiqcdn.com/utag/tui/main/prod/utag.25209.js?utv=ut4.52.202505130522","line_number":0,"column_number":0},{"level":"error","text":"The phrase 'New Messages' has no translation for the 'de' language. Returning the original phrase.","filename":"https://chat-loader.smartagent.app/loader/main.js","line_number":0,"column_number":0}]},"http":[{"url":{"schema":"https","addr":"static.tui.com/assets/v2/fonts/tuitypelight-regular.woff2","fqdn":"static.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"13.249.8.122","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:07.128Z","timestamp":1781976487128,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Jul 2025 00:00:00 GMT","end":"Wed, 29 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B1:29:28:04:46:85:C0:F0:4D:6F:D6:B9:CC:AA:FF:BE:E9:8C:8E:D4","sha256":"F6:AE:7B:84:78:6D:24:4A:0F:93:96:0C:8B:78:F7:AF:26:0C:5C:AB:8E:7A:05:74:F4:C4:6C:E3:1E:20:86:4A"}}},"request":{"raw":"GET /assets/v2/fonts/tuitypelight-regular.woff2 HTTP/1.1\r\nHost: static.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: binary/octet-stream\r\ncontent-length: 29268\r\naccess-control-allow-origin: *\r\nlast-modified: Wed, 31 Jul 2024 14:37:19 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\naccess-control-expose-headers: Date\r\nvia: 1.1 d9636724d333576f23b5fcfb40d7830c.cloudfront.net (CloudFront), 1.1 118086882d9f17e10877e0653a055586.cloudfront.net (CloudFront)\r\ndate: Sat, 20 Jun 2026 16:43:55 GMT\r\ncache-control: max-age=7200\r\netag: \"02065caf3ad2fab71e6a6eb1b8a2a91e\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: FRA60-P9, ARN53-P3\r\nx-amz-cf-id: rdo9sTQKFI8TQpWN5y7ktmjh1-dYz-KGzu8v11BjClsrGBBw3BW-1w==\r\nage: 3185\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":29268,"size_decoded":29968,"mime_type":"binary/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 29268, version 2.6619","md5":"02065caf3ad2fab71e6a6eb1b8a2a91e","sha1":"b8706fb00b9406682b65e33fe9c7756521e71362","sha256":"6cce9af02d2022d17e1a3e8d5fbf1e13d2b303a411cffc8bbdb40e4c047ab594","sha512":"f93f9fb58c7e85bc437a35354efd52be74643e75f8d4e8efbc4a6dccba40b579ed5bc3464c687a682dfd5aba46cc0b9795da93329daa9bd1ce606368bf6def6d","ssdeep":"768:2aH2Q6BUTigx5b2gnJ5IKbauG26SNmipcCch4v/K576Iilb:2soBUeyJ51bJNXPv8IZ","tlshash":"aed2e1c0152a9ff27b3610311ded5b627b1f0d3a11d44a7a8fbc09b98794501927fee8","first_seen":"2023-05-08T13:26:09Z","last_seen":"2026-06-20T17:28:47.892829Z","times_seen":45,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloud.tui.com/cdn/product-tabs/v1/index.js","fqdn":"cloud.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.181Z","timestamp":1781976486181,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloud.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Tue, 16 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"7D:E5:28:0F:B6:E6:8A:A2:A4:FC:71:45:EB:89:19:59:DA:00:B6:3C","sha256":"31:B4:F1:6F:B9:43:CE:E2:95:A8:98:0A:8A:2C:53:14:B6:A1:C8:DB:55:EC:BD:2F:D1:88:82:44:35:BB:15:38"}}},"request":{"raw":"GET /cdn/product-tabs/v1/index.js HTTP/1.1\r\nHost: cloud.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncontent-type: text/html\r\ncontent-length: 11482\r\nlast-modified: Tue, 30 Jun 2020 19:37:27 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\netag: \"438a666e3258d4db92d338f0f442ddcb\"\r\nx-amz-cf-pop: FRA50-P2\r\nx-amz-cf-id: ALgx9b7aINgq9PnxkFg2ro0Z5bjiPhzPVvElOYb7jZJptGCSGHHYMg==\r\ncache-control: max-age=1\r\nexpires: Sat, 20 Jun 2026 17:28:07 GMT\r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\nage: 599\r\naccess-control-allow-origin: *\r\nset-cookie: ak_bmsc=4C4D99427E965766F3654A250B823206~000000000000000000000000000000~YAAQXAplX7ro59ueAQAAfFET5gAlJ4QrKJa3/ttav/EosHFp0ZTnIYa8UiQPhytA+mNy7ntbwJ7RP26YSfn37bK7D5r2Q1qIJzkO5ZJ7Mg3+VVIT9nk89tp5ql77WMo1k9HRZRPH0sn8oNoZBZ6va6wKgvuahr6NqLx9WAhMAFOZOPvyFsmppgtRhoCYXSBqYYc5+cENWxY/M1FGeLJDifn6TvnESzjHZEwOPytiIaSOj4eLF+SkTkRQLvKaAftvzPJhBgwi9xEx/M2fIMGmPgZX6U5NOvdsaD5nCPyfwkUr6zhKnKHvtkNbfYLiGR4+QKU+cbB5YjmhYD2UhP2p2O0H77eWxewK+9+nqGnYI90B5Arossgg2icXpX75ZzBUzXk1w9vWBcQo; Domain=.tui.com; Path=/; Expires=Sat, 20 Jun 2026 19:28:06 GMT; Max-Age=7200; HttpOnly\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Akamai Bot Manager","description":"Akamai Bot Manager detect bots using device fingerprinting bot signatures.","website":"https://www.akamai.com/us/en/products/security/bot-manager.jsp","common_platform_enumeration":"","icon":"Akamai.svg","categories":["Security"]},{"name":"Akamai","description":"Akamai is global content delivery network (CDN) services provider for media and software delivery, and cloud security solutions.","website":"https://akamai.com","common_platform_enumeration":"","icon":"Akamai.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T20:29:48.587722Z","times_seen":16589263,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/shared/mwa/assets/v2/icons/tui/users.svg","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.697Z","timestamp":1781976486697,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /shared/mwa/assets/v2/icons/tui/users.svg HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\nx-amzn-requestid: 673f398d-9d7f-4851-b02c-957f2e57b7ac\r\nx-amzn-remapped-content-length: 786\r\nx-amz-apigw-id: fOyv4EGnliAFm2w=\r\ntimestamp: Fri, 19 Jun 2026 23:05:23 GMT\r\nx-amzn-trace-id: Root=1-6a35cb32-1eeffd7d3a9a91dd799b9869\r\ncontent-encoding: gzip\r\ncontent-length: 474\r\ncache-control: public, max-age=538636\r\nexpires: Fri, 26 Jun 2026 23:05:22 GMT\r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver: TUI Web\r\nvary: Accept-Encoding,Origin\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":786,"size_decoded":1107,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"45a6254602b6822524c30b610431e38a","sha1":"e5310d144b3b500527fbbb05ab2ab673edcc8f1e","sha256":"4574118f1f2936b1c0054457fb958ee5c0642ee12eb869b63fff4a6a8d932f0c","sha512":"b470cd97d10d3ce8e3a4be51937e0ca4a54c017ee4fd036a12ffdecf032abf2ade4d048a3bb58f0ffaa5257eccc815681d4b3df1047b6d9791afeeaa6791935a","ssdeep":"","tlshash":"3b01894eb32846b8aca647b9c6313829e82908a620d5c6b483790b743181ddd6777dd9","first_seen":"2026-03-29T05:54:31.31405Z","last_seen":"2026-06-20T17:28:47.893893Z","times_seen":5,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/shared/mwa/assets/v2/icons/tui-light/sign-hotel.svg","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.782Z","timestamp":1781976486782,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /shared/mwa/assets/v2/icons/tui-light/sign-hotel.svg HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\nx-amzn-requestid: 424b9959-da55-4d68-8cf6-807c72fc1422\r\nx-amzn-remapped-content-length: 588\r\nx-amz-apigw-id: fOyviHBcliAFhyQ=\r\ntimestamp: Fri, 19 Jun 2026 23:05:20 GMT\r\nx-amzn-trace-id: Root=1-6a35cb2f-57e7e60e78f34b7b320ee7d3\r\ncontent-encoding: gzip\r\ncontent-length: 252\r\ncache-control: public, max-age=538633\r\nexpires: Fri, 26 Jun 2026 23:05:19 GMT\r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver: TUI Web\r\nvary: Accept-Encoding,Origin\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":588,"size_decoded":885,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"914539d9c9e2f8b8b44c842e9a876c86","sha1":"f57edce87527192a79b517cc39fce04b91eeadb5","sha256":"0baeef4c6ef0ca1c5f1a530bb012c48d20e05a4b7790016f657f0f26927075ef","sha512":"1da8c2e4f6b75e5806515b70af9be3599967e7b874cc9bac20f3f4721da5bc6a1c3226cf7d61f720b1aad418c4b60b71ce8a77eb735716b09acbcbe1271cc8e9","ssdeep":"","tlshash":"71f0f49561acec1cea11c27d82073571602a1287078aa71870783531d2092df7c675b8","first_seen":"2026-03-29T05:54:31.399691Z","last_seen":"2026-06-20T17:28:47.894456Z","times_seen":5,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tui.com/assets/v2/fonts/ambit-regular.woff2","fqdn":"static.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"13.249.8.122","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.889Z","timestamp":1781976486889,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Jul 2025 00:00:00 GMT","end":"Wed, 29 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B1:29:28:04:46:85:C0:F0:4D:6F:D6:B9:CC:AA:FF:BE:E9:8C:8E:D4","sha256":"F6:AE:7B:84:78:6D:24:4A:0F:93:96:0C:8B:78:F7:AF:26:0C:5C:AB:8E:7A:05:74:F4:C4:6C:E3:1E:20:86:4A"}}},"request":{"raw":"GET /assets/v2/fonts/ambit-regular.woff2 HTTP/1.1\r\nHost: static.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: binary/octet-stream\r\ncontent-length: 31680\r\naccess-control-allow-origin: *\r\nlast-modified: Wed, 31 Jul 2024 14:37:18 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\naccess-control-expose-headers: Date\r\nvia: 1.1 6641a812839e5267ee0880e96b41efc4.cloudfront.net (CloudFront), 1.1 118086882d9f17e10877e0653a055586.cloudfront.net (CloudFront)\r\ndate: Sat, 20 Jun 2026 16:34:56 GMT\r\ncache-control: max-age=7200\r\netag: \"189126b4981a7938826b37f066b2df7b\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: FRA60-P9, ARN53-P3\r\nx-amz-cf-id: Njh14hz78ywxWFBM2XUhuVGMP9lKMSOLKUq9Ig6HWNyHzobEvYoRBw==\r\nage: 4639\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":31680,"size_decoded":32380,"mime_type":"binary/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 31680, version 1.1441","md5":"189126b4981a7938826b37f066b2df7b","sha1":"8375660fe9f574d39ac7dd31205f7cd36617b506","sha256":"3eef8b18fcc9bbd105bd6a7f4f7999f78b84756ca2e8503c3b4cdcff90458826","sha512":"4c7335aaf62b4d4241c5042632642ce7d291b7049dc2fbab4ebd7cc7d634f72bf5fc8604598594e868e68bf88fd8f343a59cab0d5f4677584bb0b2e8cfc7375e","ssdeep":"768:Li8XW7DUE0zYZM+SX7IMGxABewrkDt7Hw5G/6:WnZ0zYWExABhrCQT","tlshash":"7be2f1f1818be0de954841ed8729b97acd25c34b6819f104edbb096492f316d213daf7","first_seen":"2023-05-16T11:44:06Z","last_seen":"2026-06-20T17:28:47.895056Z","times_seen":84,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/shared/mwa/assets/v2/icons/tui-light/chevron-down.svg","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:07.058Z","timestamp":1781976487058,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /shared/mwa/assets/v2/icons/tui-light/chevron-down.svg HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\nx-amzn-requestid: f350d101-df37-45fe-957d-7b0294ecdad3\r\nx-amzn-remapped-content-length: 197\r\nx-amz-apigw-id: fOzLNF_dFiAFT6g=\r\ntimestamp: Fri, 19 Jun 2026 23:08:18 GMT\r\nx-amzn-trace-id: Root=1-6a35cbe0-1a0d09134b6d93b2112c797b\r\ncontent-encoding: gzip\r\ncontent-length: 160\r\ncache-control: public, max-age=538810\r\nexpires: Fri, 26 Jun 2026 23:08:17 GMT\r\ndate: Sat, 20 Jun 2026 17:28:07 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver: TUI Web\r\nvary: Accept-Encoding,Origin\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":197,"size_decoded":793,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e18853c764243ac68ad302037afc7eb9","sha1":"834cfa9191b4a4a9b2db9c0e9e8a618f8e9a9d2f","sha256":"dc731507a1daa80b663afadb4ffc0e99ffa284a8356bc015790e76a12dfab231","sha512":"2ee34a8a0ba73cf3da9cd421914bd528ad18f2fdf2a071be24c77e76a8d8acad96c899522f6a74895c00f6ff57deb014205fd7c83bee417b5dbe36c85822b625","ssdeep":"","tlshash":"e5d0125ea36c1c2cf5368660e7753b70516d1152594821bd84b615306259e8db4379f4","first_seen":"2025-09-28T22:43:58.522303Z","last_seen":"2026-06-20T17:28:47.895927Z","times_seen":21,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tui.com/assets/v2/icons/tui-light/exclamation-mark-circled-filled.svg","fqdn":"static.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"13.249.8.122","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:07.277Z","timestamp":1781976487277,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Jul 2025 00:00:00 GMT","end":"Wed, 29 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B1:29:28:04:46:85:C0:F0:4D:6F:D6:B9:CC:AA:FF:BE:E9:8C:8E:D4","sha256":"F6:AE:7B:84:78:6D:24:4A:0F:93:96:0C:8B:78:F7:AF:26:0C:5C:AB:8E:7A:05:74:F4:C4:6C:E3:1E:20:86:4A"}}},"request":{"raw":"GET /assets/v2/icons/tui-light/exclamation-mark-circled-filled.svg HTTP/1.1\r\nHost: static.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\ncontent-length: 320\r\naccess-control-allow-origin: *\r\nlast-modified: Wed, 31 Jul 2024 14:37:21 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\naccess-control-expose-headers: Date\r\nvia: 1.1 27cdec4bbea3c020f504b2062d4e122c.cloudfront.net (CloudFront), 1.1 118086882d9f17e10877e0653a055586.cloudfront.net (CloudFront)\r\ndate: Sat, 20 Jun 2026 15:46:09 GMT\r\ncache-control: max-age=7200\r\netag: \"a0b41d66066b71e240d8050ce9135970\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: FRA60-P9, ARN53-P3\r\nx-amz-cf-id: AxwFmBSrclPFw_IeJcdKBY-qtvqUuYc0i6tjm8UJDQvovCxGDdVxvg==\r\nage: 6120\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":320,"size_decoded":1012,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a0b41d66066b71e240d8050ce9135970","sha1":"c21d1b6a3bf5224dbb132e88bad3997fafc13d8e","sha256":"5ccb0f76649e0c92b976c2884892a182f6068469e9abc312f8a40cbb26f48d6c","sha512":"5e6d1b18da18f0c727c4f1b975a4500c5502d4542e70b15951eec96742f0b5eb0e6f5173e5f453d1f6a48382ed2cafe837497c92242b6d7c40ed40dfa1419358","ssdeep":"","tlshash":"65e0cdc78f28ad8e0628c9b4df18b555139da4b060d802bca79c46f825078a3fd0b69d","first_seen":"2026-03-28T02:59:34.566433Z","last_seen":"2026-06-20T17:28:47.896468Z","times_seen":5,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloud.tui.com/cdn/search-form-wrapper/v1/index.js","fqdn":"cloud.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:05.271Z","timestamp":1781976485271,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloud.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Tue, 16 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"7D:E5:28:0F:B6:E6:8A:A2:A4:FC:71:45:EB:89:19:59:DA:00:B6:3C","sha256":"31:B4:F1:6F:B9:43:CE:E2:95:A8:98:0A:8A:2C:53:14:B6:A1:C8:DB:55:EC:BD:2F:D1:88:82:44:35:BB:15:38"}}},"request":{"raw":"GET /cdn/search-form-wrapper/v1/index.js HTTP/1.1\r\nHost: cloud.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 19 Mar 2026 12:37:10 GMT\r\netag: \"bfb748c97f06228f05e0c0f34673dd2b\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-amz-cf-pop: FRA50-P2\r\nx-amz-cf-id: nc8iqFhf1QIANmaPjVJIF3TQz1xmFBkTnAH_yYbGRTNWJ-ajWl3Qmg==\r\ncontent-encoding: gzip\r\ncontent-length: 6347\r\ncache-control: max-age=1\r\nexpires: Sat, 20 Jun 2026 17:28:06 GMT\r\ndate: Sat, 20 Jun 2026 17:28:05 GMT\r\nvary: Accept-Encoding\r\nage: 599\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":25734,"size_decoded":6888,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9647)","md5":"bfb748c97f06228f05e0c0f34673dd2b","sha1":"6488646a12d04e3cf5c7e8b67541e986f98c4007","sha256":"79a9924b231c8d0b96e26c61d768a781e2bc1d4492cd33d919698e03dc170ddf","sha512":"b23c404e178323c84d0b7977bbc5a8a8ff3b9152e1b1084a4ebc3f091178493e78fee206f27f7200fd22b4b85e61dcf07d901968273188bc7001a0d58d25db74","ssdeep":"768:o9rhZSIMv5KoIPjibgE3UApobWe1AZowRTy9tYhIoTlWaNdW21azeKkaGmNh/pEW:o9rhZNMv5KoIPjibgE3UApobWe1AZow8","tlshash":"97c20a9672b75e3a5db9c09b8b8d7c403211f065ec0245dcb75cacc48b9be2913a2739","first_seen":"2026-03-29T05:54:31.413654Z","last_seen":"2026-06-20T17:28:47.897391Z","times_seen":5,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":3,"send":0,"wait":51,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tui.com/assets/v2/icons/bullet/lighthouse.svg","fqdn":"static.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"13.249.8.122","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.058Z","timestamp":1781976486058,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Jul 2025 00:00:00 GMT","end":"Wed, 29 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B1:29:28:04:46:85:C0:F0:4D:6F:D6:B9:CC:AA:FF:BE:E9:8C:8E:D4","sha256":"F6:AE:7B:84:78:6D:24:4A:0F:93:96:0C:8B:78:F7:AF:26:0C:5C:AB:8E:7A:05:74:F4:C4:6C:E3:1E:20:86:4A"}}},"request":{"raw":"GET /assets/v2/icons/bullet/lighthouse.svg HTTP/1.1\r\nHost: static.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\ncontent-length: 475\r\naccess-control-allow-origin: *\r\nlast-modified: Wed, 31 Jul 2024 14:37:19 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\naccess-control-expose-headers: Date\r\nvia: 1.1 de048058a16d8205bfbc06a8f2eefb34.cloudfront.net (CloudFront), 1.1 118086882d9f17e10877e0653a055586.cloudfront.net (CloudFront)\r\ndate: Sat, 20 Jun 2026 16:51:52 GMT\r\ncache-control: max-age=7200\r\netag: \"2f3d888f702d2942c66f6b8f4a6516d0\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: FRA60-P9, ARN53-P3\r\nx-amz-cf-id: J-e7ZtPBoCInD2hK7IeCsmxhHqFaYnCAXTVgkNQc2WJ7_j_Fn4jN5w==\r\nage: 2344\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":475,"size_decoded":1167,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2f3d888f702d2942c66f6b8f4a6516d0","sha1":"04d5d22f293600151dd143b8cbacd613da0b9c57","sha256":"ac9c011d830f983ecf454f96ca431fe3b3dbdf2ed4adaf70e53430979d9ada48","sha512":"5a33f842289adef1516d87e05b7138267d191685d6c14582dc19341017dabbf0323af5a7385ec5226b553883fdd114468d03e54035cc6198788d460e0e1d8ead","ssdeep":"","tlshash":"8ff0545504d85c1c5f02997c9e2f7630607733952b4d977c74710530260569f785fbf4","first_seen":"2025-09-28T22:43:58.505473Z","last_seen":"2026-06-20T17:28:47.898651Z","times_seen":14,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.content.tuigroup.com/adamtui/2026_4/27_11/1372eda1-427f-4fcb-9f3c-b43900bffd03/spanien-mallorca-port-de-soller-panoramablick.jpeg?i10c=img.resize(width:658);img.crop(width:658,height:370)","fqdn":"cdn.content.tuigroup.com","domain":"tuigroup.com","tld":"com"},"ip":{"addr":"95.101.10.105","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.189Z","timestamp":1781976486189,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.content.tuigroup.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 23 Feb 2026 00:00:00 GMT","end":"Mon, 22 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:A2:A9:E1:36:21:12:70:71:62:D8:9E:CC:C0:F9:EB:9C:0E:5A:B8","sha256":"B9:93:43:16:0C:4D:95:D2:95:92:C2:C7:38:98:8D:C1:23:69:E0:6E:91:8C:9E:98:6E:CB:44:F8:39:7E:96:14"}}},"request":{"raw":"GET /adamtui/2026_4/27_11/1372eda1-427f-4fcb-9f3c-b43900bffd03/spanien-mallorca-port-de-soller-panoramablick.jpeg?i10c=img.resize(width:658);img.crop(width:658,height:370) HTTP/1.1\r\nHost: cdn.content.tuigroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\netag: \"38ac7c784794712ebb6f79c25d391564\"\r\nlast-modified: Mon, 27 Apr 2026 11:45:04 GMT\r\nserver: Akamai Image Manager\r\ncontent-length: 81078\r\ncontent-type: image/webp\r\ncache-control: private, no-transform, max-age=2592000\r\nexpires: Mon, 20 Jul 2026 17:28:06 GMT\r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\nalt-svc: h3=\":443\"; ma=93600\r\nquic-version: 0x00000001\r\nage: 66232\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":81078,"size_decoded":81460,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 658x370, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fa6b5844e7b18bd3196c0f071ad2d215","sha1":"b74c9f83c8ad172fa23de132dac3517ab31c1c65","sha256":"837abca06af2c69af32c88273c426935efe52d0d559497a78b1c7406bdd698fc","sha512":"7195e963b97fecf67c4073420579a6e27148b4a1d9e716dd19ad86ed6064b0a2570d0a61fda0a2dc545f9f27afc27ecd08a0e87ade581e8ca83f85aa8b766ca0","ssdeep":"1536:ECAlp9JuP3j4Dackv1MNvfoDEWHwE8enrDfA3PaaIzl:ExJUj6WMVfo4qfXvzl","tlshash":"df8312b887945fde82f2f2b8060f147f72c44c0165b9b56b00c15283faf9d69bdb2a58","first_seen":"2026-06-20T17:28:47.899183Z","last_seen":"2026-06-20T17:28:47.899183Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tui.com/assets/v2/fonts/tuitypelight-bold.woff2","fqdn":"static.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"13.249.8.122","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.881Z","timestamp":1781976486881,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Jul 2025 00:00:00 GMT","end":"Wed, 29 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B1:29:28:04:46:85:C0:F0:4D:6F:D6:B9:CC:AA:FF:BE:E9:8C:8E:D4","sha256":"F6:AE:7B:84:78:6D:24:4A:0F:93:96:0C:8B:78:F7:AF:26:0C:5C:AB:8E:7A:05:74:F4:C4:6C:E3:1E:20:86:4A"}}},"request":{"raw":"GET /assets/v2/fonts/tuitypelight-bold.woff2 HTTP/1.1\r\nHost: static.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: binary/octet-stream\r\ncontent-length: 32884\r\naccess-control-allow-origin: *\r\nlast-modified: Wed, 31 Jul 2024 14:37:19 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\naccess-control-expose-headers: Date\r\nvia: 1.1 c8faaa7d637dd73af72e1355a476ffc2.cloudfront.net (CloudFront), 1.1 118086882d9f17e10877e0653a055586.cloudfront.net (CloudFront)\r\ndate: Sat, 20 Jun 2026 16:44:15 GMT\r\ncache-control: max-age=7200\r\netag: \"04e8b36eb6ce1f110923994f591deca9\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: FRA60-P9, ARN53-P3\r\nx-amz-cf-id: 9m2YATho3-xhXKm9u7MnHNqEDayfI0W7YJRWyb-PONfKO0_dFleaCA==\r\nage: 3808\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":32884,"size_decoded":33584,"mime_type":"binary/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 32884, version 2.6619","md5":"04e8b36eb6ce1f110923994f591deca9","sha1":"ae3e99ff690360d220aabc77ffb0eac08b2694d1","sha256":"6cd8a4fd92abdfdb4a81e7fdbb944754ccc9411d9c8ed52ad338c51bb0d999ac","sha512":"7dcece938e0defc887699d0e34e93d90bd410a863efcf099b9c984b5df16061d1cb98d6a2e021c2249f77d4fcb6b2ac736427bd0804dfbff773f4973a7a626bb","ssdeep":"768:RU1kJx0Gwdyo5r1sy2kQFUglqyrvKV5vvUn:GCbxwddrOfkwUBVg","tlshash":"4ae2f1cff694de3cc41524468fbebc24489eb4762b34f597beda280dc0c672a5ad6244","first_seen":"2023-05-08T13:26:09Z","last_seen":"2026-06-20T17:28:47.900173Z","times_seen":39,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/shared/mwa/assets/v2/icons/tui-light/oncoming-taxi.svg","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:07.306Z","timestamp":1781976487306,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /shared/mwa/assets/v2/icons/tui-light/oncoming-taxi.svg HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mwa.tui.com/browse/mwa/workflow-ssg-prod/workflow-pages-home/assets/workflow-pages-home_26.25.1/home/index.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T20:29:48.587722Z","times_seen":16589263,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloud.tui.com/cdn/search-traveller/v2/search-traveller.js","fqdn":"cloud.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.162Z","timestamp":1781976486162,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloud.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Tue, 16 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"7D:E5:28:0F:B6:E6:8A:A2:A4:FC:71:45:EB:89:19:59:DA:00:B6:3C","sha256":"31:B4:F1:6F:B9:43:CE:E2:95:A8:98:0A:8A:2C:53:14:B6:A1:C8:DB:55:EC:BD:2F:D1:88:82:44:35:BB:15:38"}}},"request":{"raw":"GET /cdn/search-traveller/v2/search-traveller.js HTTP/1.1\r\nHost: cloud.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 27 Jan 2026 12:41:46 GMT\r\netag: \"9350ae11fbeae475f5b8b5fbd066b778\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-amz-cf-pop: DUS51-P6\r\nx-amz-cf-id: XCZZA3fCy_lzLDPdoE21vqBqWYEIJjEWw7he43Gohxxnoh7eFZUpTg==\r\ncontent-encoding: gzip\r\ncontent-length: 10649\r\ncache-control: max-age=1\r\nexpires: Sat, 20 Jun 2026 17:28:07 GMT\r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\nvary: Accept-Encoding\r\nage: 599\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":67108,"size_decoded":11191,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text, with very long lines (65512), with no line terminators","md5":"9350ae11fbeae475f5b8b5fbd066b778","sha1":"eb30b93a79fa2e35a41278e564a365ebcf53ea9e","sha256":"c5e52b5fc847a1574215d6664a855c832a03c3bec8bebf194dcbb43122184442","sha512":"d334c928070214dd7787ce8db13e4b2bf5415a24cfa4d9fc9e1a881393c780f437ac485530c2460b47cf3ef94be7166fb1c70fc5e116db520a45fb6ba866c2b9","ssdeep":"768:CIV/lNGNyiuyhNwGsr2LhlFZE5xr1dR0ulsKbS7DxMF8ZCH:TiT/mvR6xNCH","tlshash":"03634509b431a7ba682b0fbea7eff1197d25d410c91305d93e6d808a0b8f4b9571397b","first_seen":"2026-03-29T05:54:31.388551Z","last_seen":"2026-06-20T17:28:47.901262Z","times_seen":5,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/shared/mwa/assets/v2/pictograms/piggy-bank.svg","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.167Z","timestamp":1781976486167,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /shared/mwa/assets/v2/pictograms/piggy-bank.svg HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nCookie: _vis_opt_exp_de24_combi=2; tui-coupon-wallet-enabled=true; _vis_opt_exp_P1973_combi=A; ecid=66966107634980792017217711389285007288; kndctr_41E27DA552A6473A0A490D4D_AdobeOrg_cluster=irl1; ak_bmsc=B67A7B246DD506FF96868E790DEC7588~000000000000000000000000000000~YAAQnQplX5EeC8yeAQAA/0oT5gDOPuTt/btrBxkEvsjZCv5iCpXn0dXIvmJwn7xqmMAnNIe0nO0FY39Vbl5SjyGMJEVaR4G9q1/l42ck/a/EQOacJ4igK59UwcumJR8QpmYiwT+CVeC/eOnPjNwPUHExTtozITtaYleYz3l9P1pItpV47INsmiRsPueOOgIFv4Y8oYKv34ceEccDtGFc3g6P6Mp+trxKpDZd6yc0HigFXe28HQYG7avaeFj+ik5m0MFEhAiuBqS6SvCL4vy3reXusZ6jxYvIWHdT6PwPnlhHpHp22JmnVdOr/CIQP/7fu/r0sRyFMPvi8dmL3H+VaoMn7Zyfl7wI1msqdFED3mRYtf6+m0f5fS2F1TrGMkXqOaIHTqRL2Aw2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\ncontent-length: 945\r\nx-amzn-requestid: 6f4811b3-f303-4426-a80d-6f0345d45168\r\ncontent-encoding: gzip\r\nx-amzn-remapped-content-length: 2260\r\nx-amz-apigw-id: fOzPxFAhFiAFaoA=\r\ntimestamp: Fri, 19 Jun 2026 23:08:47 GMT\r\nx-amzn-trace-id: Root=1-6a35cbfe-09b5353a3d9ee24a33750d8f\r\ncache-control: public, max-age=538840\r\nexpires: Fri, 26 Jun 2026 23:08:46 GMT\r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver: TUI Web\r\nvary: Accept-Encoding,Origin\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2260,"size_decoded":1547,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"59fcc49dc0124a5ae3f771d22e5cf0ad","sha1":"49b60b4b4fb2178caf81fc0ecaea38d9fdd74e38","sha256":"3cc89a447ccb8f148f9fbcf926f5cd885212cd3f6680cafdf8883fb1d0954347","sha512":"cbf1b0ddec69be40493a295c6c48467f93bbac18bd18848fa36dffaf9e0ede12d62d86ae53af15626f0b9258f54850187efa107edc7d36c21a2f33d63e115ff2","ssdeep":"","tlshash":"654100e4237a04e8a5d35dedfd0815e62e0cacbc76b856e8e11cf830a192acdc971604","first_seen":"2026-06-06T12:22:18.016158Z","last_seen":"2026-06-20T17:28:47.901955Z","times_seen":2,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/shared/mwa/assets/v2/icons/tui-light/percent-sign-circled.svg","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.641Z","timestamp":1781976486641,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /shared/mwa/assets/v2/icons/tui-light/percent-sign-circled.svg HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mwa.tui.com/browse/mwa/workflow-ssg-prod/workflow-pages-home/assets/workflow-pages-home_26.25.1/home/index.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\nx-amzn-requestid: 9ca8eeef-b10f-46e0-8353-dfe61eb214f0\r\nx-amzn-remapped-content-length: 313\r\nx-amz-apigw-id: fOyvkFqFliAFS5A=\r\ntimestamp: Fri, 19 Jun 2026 23:05:21 GMT\r\nx-amzn-trace-id: Root=1-6a35cb30-205d03ba7265210e7deaf60c\r\ncontent-encoding: gzip\r\ncontent-length: 207\r\ncache-control: public, max-age=538634\r\nexpires: Fri, 26 Jun 2026 23:05:20 GMT\r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver: TUI Web\r\nvary: Accept-Encoding,Origin\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":313,"size_decoded":840,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"812d006dc76250ea19ef6fef0221e883","sha1":"7d9b9869c82c540f0615e31f3673713bd7cdd333","sha256":"50637dc9b8b9ee6a07f47c6bb5d5448c7cf5c8a3de77901354a2e36e57c8de1f","sha512":"915ee547cf80f15125192c8f4c77339574bfa520223ef3bdbc9f7bcf2d3e2b55c9f5da0ebb5db6252c9e79fc7dfa80f5918a92666cd6b79595b415722e732b52","ssdeep":"","tlshash":"9be0cd55510cdc1cf525c27cd3273570313b1006670d677cb0b11930e50569b792b6f8","first_seen":"2026-03-29T05:54:31.360663Z","last_seen":"2026-06-20T17:28:47.90416Z","times_seen":6,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tui.com/assets/v2/fonts/ambit-bold.woff2","fqdn":"static.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"13.249.8.122","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:07.131Z","timestamp":1781976487131,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Jul 2025 00:00:00 GMT","end":"Wed, 29 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B1:29:28:04:46:85:C0:F0:4D:6F:D6:B9:CC:AA:FF:BE:E9:8C:8E:D4","sha256":"F6:AE:7B:84:78:6D:24:4A:0F:93:96:0C:8B:78:F7:AF:26:0C:5C:AB:8E:7A:05:74:F4:C4:6C:E3:1E:20:86:4A"}}},"request":{"raw":"GET /assets/v2/fonts/ambit-bold.woff2 HTTP/1.1\r\nHost: static.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: binary/octet-stream\r\ncontent-length: 34312\r\naccess-control-allow-origin: *\r\nlast-modified: Wed, 31 Jul 2024 14:37:18 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\naccess-control-expose-headers: Date\r\nvia: 1.1 45e3ccd889272a7e8732f0eda13e87ca.cloudfront.net (CloudFront), 1.1 118086882d9f17e10877e0653a055586.cloudfront.net (CloudFront)\r\ndate: Sat, 20 Jun 2026 16:28:52 GMT\r\ncache-control: max-age=7200\r\netag: \"cf0e07dc831210edc78c0c3b81886099\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: FRA60-P9, ARN53-P3\r\nx-amz-cf-id: iLSObCxFYa7qquKslwPv5F7ejUxUe-E2X6rxKuxXNF9u1GpiJcSlBg==\r\nage: 3808\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":34312,"size_decoded":35012,"mime_type":"binary/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 34312, version 1.1441","md5":"cf0e07dc831210edc78c0c3b81886099","sha1":"35e3c399e41adfdb7d35a7e1d2943834312b2f5c","sha256":"2f7f582eb801b2b92441b7fa22efec39d97b5bd14688ef4811b1d2a84c7b52b3","sha512":"159c89b4b50f9e38cc3b770ef88c58163b11b0a66553f817dcfa1099f93d729bcc87f94766f3837749c1be9310a22758efedd8604882d59d34766d64935e25fb","ssdeep":"768:fua9p7Kcqjx7wRkLLt2Du4hPE7j4Bj5aTTG09hBFKmvcxzIS:fua9p77XWt2g7jy9a2uQUKIS","tlshash":"26f2f2f2579562474a5330fd7723bdc5c92ac5b631728e006a4d6f98070e7b90ceca57","first_seen":"2023-05-08T13:26:09Z","last_seen":"2026-06-20T17:28:47.904887Z","times_seen":50,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/shared/mwa/assets/v2/icons/tui-light/world.svg","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:07.749Z","timestamp":1781976487749,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /shared/mwa/assets/v2/icons/tui-light/world.svg HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mwa.tui.com/browse/mwa/workflow-ssg-prod/workflow-pages-home/assets/workflow-pages-home_26.25.1/home/index.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\nx-amzn-requestid: 5cd6151b-0ed8-477f-bb71-61b58371d20e\r\nx-amzn-remapped-content-length: 471\r\nx-amz-apigw-id: fO7XUHN1liAFm6g=\r\ntimestamp: Sat, 20 Jun 2026 00:04:12 GMT\r\nx-amzn-trace-id: Root=1-6a35d8fb-41a0294e638b8c977c21ade2\r\ncontent-encoding: gzip\r\ncontent-length: 310\r\ncache-control: public, max-age=542164\r\nexpires: Sat, 27 Jun 2026 00:04:11 GMT\r\ndate: Sat, 20 Jun 2026 17:28:07 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver: TUI Web\r\nvary: Accept-Encoding,Origin\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":471,"size_decoded":943,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dc51fea88f07f92b5f4c38b53e85c3ba","sha1":"49bebabef4348b01d603b7c30abf9c389405ea76","sha256":"a0e065e8231dde2872ea765522028189ec864931dcccb6c2cedc630b95ca07ee","sha512":"717d0469c1ffd19d274f81e2d5e5d97454e3824c49315f3c44e064eae44df78c1b3d8eb45f86a8a2ffe63d1ca60c89bff6ada483f87068008ccd499989b40357","ssdeep":"","tlshash":"e9f0d48b8e4c6c8ca325cd31db587670302d2417384d2598907b1f30520679a74674d8","first_seen":"2026-03-29T05:54:31.42504Z","last_seen":"2026-06-20T17:28:47.905434Z","times_seen":3,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdns.eu1.gigya.com/js/sso.htm?APIKey=3_gqHUXVI8IXKRF51nbhQXeEJZE_7wGeXchfGs7UyV3Y08FFnxj_fxkeBW0nagr8XZ\u0026ssoSegment=\u0026version=latest\u0026build=1930\u0026flavor=base\u0026sourceKey=4_LWGzxVDlxnaTetL1EDjQ7w#m=removeToken\u0026d=https%3A%2F%2Fwww.tui.com\u0026callbackID=gig_sso_cb1781976488986_1\u0026sAPIKey=4_LWGzxVDlxnaTetL1EDjQ7w\u0026gig_loggerConfig=%7B%22logLevel%22%3A0%2C%22clientMuteLevel%22%3A0%2C%22logTheme%22%3A1%7D","fqdn":"cdns.eu1.gigya.com","domain":"gigya.com","tld":"com"},"ip":{"addr":"143.204.238.2","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:09.002Z","timestamp":1781976489002,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn3.gigya.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Thu, 03 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1D:EE:07:E0:1D:28:1F:15:0F:8C:5F:AA:62:30:B2:53:9A:48:FF:C8","sha256":"81:CD:A6:69:9B:80:55:AC:77:D1:1B:73:FE:67:AC:9C:9E:47:39:EC:12:E1:68:B7:2A:57:19:F2:DD:F4:F4:D2"}}},"request":{"raw":"GET /js/sso.htm?APIKey=3_gqHUXVI8IXKRF51nbhQXeEJZE_7wGeXchfGs7UyV3Y08FFnxj_fxkeBW0nagr8XZ\u0026ssoSegment=\u0026version=latest\u0026build=1930\u0026flavor=base\u0026sourceKey=4_LWGzxVDlxnaTetL1EDjQ7w HTTP/1.1\r\nHost: cdns.eu1.gigya.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nCookie: gig_canary=latest\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: CloudFront\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 30738\r\nx-amz-cf-pop: ARN53-P4\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nedge-cache-tag: siteid_8011391,ver_latest\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-sdk-version: latest\r\np3p: CP=\"IDC COR PSA DEV ADM OUR IND ONL\"\r\nx-error-code: 0\r\nx-soa: true, Gator\r\nx-server: gator-us1d-prod-65d94b7f7d-q9dlk\r\nx-callid: 019edc68d5107a28b3240a62c1ca891b\r\nx-robots-tag: none\r\ndate: Sat, 20 Jun 2026 17:25:25 GMT\r\ncache-control: public, s-maxage=3600, max-age=900\r\netag: 57217fed22225baa1beb13d386755341\r\nvary: Accept-Encoding\r\nvia: 1.1 4d370877aaf92bbc7827e0db032dc51c.cloudfront.net (CloudFront)\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 165\r\nx-sdk-canary: Skipped canary rolling. version 'latest' is specified by gig_canary cookie\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-id: 1q3L6RsSssQuytQq-3DTf84BctMj9nu1jBIhMrIEZeW8mTigqh6uHQ==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":77271,"size_decoded":31696,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (63397)","md5":"57217fed22225baa1beb13d386755341","sha1":"29a274ed797892a3c5ff9fda7ee71272056ea8ea","sha256":"0c369c141794fdbefcb826ffb56c302affb8122e73061d807885648d1e4a5476","sha512":"2ca79963acea19b26b298fbd3e9d69b688698a9f93e9c76506ed6993a7a08aaf4cfd02309b8760e3520a34cee2650beb36f8ab98a2e6fe2c7b1040ec84d47a86","ssdeep":"768:EBvMAcAWmbIirmZtxrQUMx7+OU8N8M6TW18QXfk0wIUHdpv/v5XrbLzBSlHad/mp:EBkAcAWmFrKa7+L8kTT0wIUHdy","tlshash":"9373c6d9b6d2756203d390f8543f2107b23ea999240c8468f566c5e67cb8a4ec277fbc","first_seen":"2026-06-06T12:22:18.01488Z","last_seen":"2026-06-20T17:28:47.905993Z","times_seen":4,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloud.tui.com/cdn/footer/v2/index.js","fqdn":"cloud.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:05.282Z","timestamp":1781976485282,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloud.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Tue, 16 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"7D:E5:28:0F:B6:E6:8A:A2:A4:FC:71:45:EB:89:19:59:DA:00:B6:3C","sha256":"31:B4:F1:6F:B9:43:CE:E2:95:A8:98:0A:8A:2C:53:14:B6:A1:C8:DB:55:EC:BD:2F:D1:88:82:44:35:BB:15:38"}}},"request":{"raw":"GET /cdn/footer/v2/index.js HTTP/1.1\r\nHost: cloud.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 12 Feb 2026 10:19:59 GMT\r\netag: \"ad93aded211a7556fe42cb7afb4289df\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-amz-cf-pop: FRA50-P2\r\nx-amz-cf-id: 77i9aJ-P3IZGpEf7J3CrWr3eAwGkJLT2nYe21YQuRsSExxxJyDx5EQ==\r\ncontent-encoding: gzip\r\ncontent-length: 12583\r\ncache-control: max-age=1\r\nexpires: Sat, 20 Jun 2026 17:28:06 GMT\r\ndate: Sat, 20 Jun 2026 17:28:05 GMT\r\nvary: Accept-Encoding\r\nage: 599\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":67536,"size_decoded":13125,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (39586)","md5":"ad93aded211a7556fe42cb7afb4289df","sha1":"42c17736ce9418707af184e7b805c9929811ddd4","sha256":"307d72521c8c2a410d1a4f80b9edd773740a3d2104bb76518f52aa6a8400e7c4","sha512":"bb895b7323690b0f4a2790b3a929a10346e4e37c7d2f653b2702e22cd3ba37ebebf19ce78041668646b2b9c77d818f935efdf1a7aa67bdfa1a2c398758f16e0d","ssdeep":"1536:zjkWxhTNiSG+Xja9OmDBtws/iWLwNw7Di7t9exaTq:0F9OABtgWnae","tlshash":"7163d8bbfa4052797c5bc86737ccd25ca620a801d94390daf65d4c860bd3afa9763b0d","first_seen":"2026-03-28T02:59:34.563036Z","last_seen":"2026-06-20T17:28:47.90734Z","times_seen":7,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tui.com/assets/v2/icons/tui-light/telephone-receiver.svg","fqdn":"static.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"13.249.8.122","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:05.919Z","timestamp":1781976485919,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Jul 2025 00:00:00 GMT","end":"Wed, 29 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B1:29:28:04:46:85:C0:F0:4D:6F:D6:B9:CC:AA:FF:BE:E9:8C:8E:D4","sha256":"F6:AE:7B:84:78:6D:24:4A:0F:93:96:0C:8B:78:F7:AF:26:0C:5C:AB:8E:7A:05:74:F4:C4:6C:E3:1E:20:86:4A"}}},"request":{"raw":"GET /assets/v2/icons/tui-light/telephone-receiver.svg HTTP/1.1\r\nHost: static.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\ncontent-length: 368\r\naccess-control-allow-origin: *\r\nlast-modified: Wed, 31 Jul 2024 14:37:21 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\naccess-control-expose-headers: Date\r\nvia: 1.1 d818b372f81cbe23bb149df5877c444a.cloudfront.net (CloudFront), 1.1 118086882d9f17e10877e0653a055586.cloudfront.net (CloudFront)\r\ndate: Sat, 20 Jun 2026 17:22:43 GMT\r\ncache-control: max-age=7200\r\netag: \"3da13a3309bb4948e8ffb9fcdb72fa16\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: FRA60-P9, ARN53-P3\r\nx-amz-cf-id: bfF4h5XdzgQj4SPlyEnAC99KYgC7aLr3_iCsz5chTMJaohEOV2iiUw==\r\nage: 3808\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":368,"size_decoded":1060,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3da13a3309bb4948e8ffb9fcdb72fa16","sha1":"5d765c003f76102aa501562c21f3d75cb4bb5485","sha256":"36e9418d6e5d383285a6f1deca9db265923c92d45ba439619aaaacbc6c76fc27","sha512":"690e348b3372210c4d3f2403e3af0e8ea641b0f780bd59d3ca8fcbd7cc8fce2e6904dddb11471eeddb7fd29add97d7f34c16db863ffa9f3281e52d161cfee6bc","ssdeep":"","tlshash":"e9e06848c22c1c1c20329d9097297abb21a9b2534aac10aea02f0af0a221d4eb427894","first_seen":"2025-09-28T22:43:58.509887Z","last_seen":"2026-06-20T17:28:47.908403Z","times_seen":13,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tags.tiqcdn.com/utag/tui/main/prod/utag.25209.js?utv=ut4.52.202505130522","fqdn":"tags.tiqcdn.com","domain":"tiqcdn.com","tld":"com"},"ip":{"addr":"65.9.46.57","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:07.341Z","timestamp":1781976487341,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tags.tiqcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 09 Mar 2026 00:00:00 GMT","end":"Tue, 22 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D6:76:2F:BD:9C:CC:DC:5A:C2:A1:D3:60:C0:08:21:C9:62:EB:5E:69","sha256":"D1:5D:04:F4:35:9F:D3:9D:4B:7D:16:79:64:5C:FC:23:0C:52:77:2C:46:02:F2:D8:7D:8A:08:6D:1A:58:40:12"}}},"request":{"raw":"GET /utag/tui/main/prod/utag.25209.js?utv=ut4.52.202505130522 HTTP/1.1\r\nHost: tags.tiqcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nlast-modified: Wed, 17 Jun 2026 14:57:02 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: b.zkDSBzIleMI8SkPIkzXF9T3QVaF0x4\r\ncontent-encoding: br\r\ndate: Sat, 20 Jun 2026 17:28:07 GMT\r\netag: W/\"0627dd3d9da9fa933f93a6d314bf33ec\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 62fb1997c40a03e325a22b812f7b7e10.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: ZQI1lOXPT-SUrFNBOyuShH_JgtFMPzk_isHEW6-EGQvP8H2cfrBMRw==\r\nage: 158\r\ncache-control: max-age=300\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":3332,"size_decoded":1870,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1342)","md5":"0627dd3d9da9fa933f93a6d314bf33ec","sha1":"dd3d0315b16e204b31e3e231de69671d00072698","sha256":"323a0797099c768bbb0ed65616312b39f32df9e1eba3e15017f1b20f8b62e7aa","sha512":"86faaa914e651a6c5b364375579fc197dbee53945fbb719ed0e033406680b0c023ec0b8018089318ec19b10eb0983620df6a6373f20fdf2e1740ca6ea34512b8","ssdeep":"","tlshash":"2d61b7043a64123a8480816bbd5f3f549072a2a75ea19c37d4d88c68ef58ddd847af4d","first_seen":"2026-06-20T17:28:47.90954Z","last_seen":"2026-06-20T17:28:47.90954Z","times_seen":1,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdns.eu1.gigya.com/sdk.config.get?apiKey=4_LWGzxVDlxnaTetL1EDjQ7w\u0026httpStatusCodes=true\u0026ver=1781976480000","fqdn":"cdns.eu1.gigya.com","domain":"gigya.com","tld":"com"},"ip":{"addr":"143.204.238.2","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cdns.eu1.gigya.com/js/Api.htm?apiKey=4_LWGzxVDlxnaTetL1EDjQ7w\u0026version=latest\u0026build=1930\u0026flavor=base\u0026serviceName=apiService#origin=https://www.tui.com/\u0026gig_loggerConfig=%7B%22logLevel%22%3A0%2C%22clientMuteLevel%22%3A0%2C%22logTheme%22%3A1%7D","date":"2026-06-20T17:28:08.244Z","timestamp":1781976488244,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn3.gigya.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Thu, 03 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1D:EE:07:E0:1D:28:1F:15:0F:8C:5F:AA:62:30:B2:53:9A:48:FF:C8","sha256":"81:CD:A6:69:9B:80:55:AC:77:D1:1B:73:FE:67:AC:9C:9E:47:39:EC:12:E1:68:B7:2A:57:19:F2:DD:F4:F4:D2"}}},"request":{"raw":"GET /sdk.config.get?apiKey=4_LWGzxVDlxnaTetL1EDjQ7w\u0026httpStatusCodes=true\u0026ver=1781976480000 HTTP/1.1\r\nHost: cdns.eu1.gigya.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdns.eu1.gigya.com/js/Api.htm?apiKey=4_LWGzxVDlxnaTetL1EDjQ7w\u0026version=latest\u0026build=1930\u0026flavor=base\u0026serviceName=apiService\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: gig_canary=latest\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: CloudFront\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 3785\r\nx-amz-cf-pop: ARN53-P4\r\naccess-control-allow-origin: *\r\ncache-control: public, s-maxage=120, max-age=60\r\ncontent-encoding: gzip\r\nedge-cache-tag: siteid_206115723840\r\np3p: CP=\"IDC COR PSA DEV ADM OUR IND ONL\"\r\nx-error-code: 0\r\nx-soa: true, Gator\r\nx-server: gator-us1d-prod-65d94b7f7d-4grcb\r\nx-callid: 019ee611f00472bb82d6be74aaf4b600\r\nx-robots-tag: none, none\r\ndate: Sat, 20 Jun 2026 17:27:33 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nvia: 1.1 4d370877aaf92bbc7827e0db032dc51c.cloudfront.net (CloudFront)\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 35\r\nx-sdk-canary: Skipped canary rolling. version 'latest' is specified by gig_canary cookie\r\nx-sdk-version: latest\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-id: 3OvC2S-GGqKgNOD45s8opZBAe2iXUoEYonKSsWodxq5Dxf5tU4ErOA==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":8168,"size_decoded":4654,"mime_type":"text/javascript; charset=utf-8","magic":"JSON text data","md5":"575f4060d5ceff559d394ced18a94266","sha1":"ffbe38e93020832c798fa6694b8467c6f2cbe7f8","sha256":"41bbfc4219d815349a24ae2e266b96bd64f4b95d1f21dbccef9edeb7bc8e2e79","sha512":"1ea834590dabec476063684e762432b68ae275c4140a141f8de7b61c878fb075af2ee84ef5ee8a4838520dffc55971321936823d8e81f6361cc66e590ca373b3","ssdeep":"96:+m9qtu+uCDr4rF5FztLGsvlyAL/VUP3Fg+HXPc5tQBsuz02q/GFRFVbRzeATnRcy:+w+VD+5zPA2/ubrz1Tn0Y46U0","tlshash":"c1f1db37c5251cbe08f4116eaa14a983f634532f6241cdafb1bd020e2fb6532b191eec","first_seen":"2026-06-20T17:28:47.910544Z","last_seen":"2026-06-20T17:28:47.910544Z","times_seen":1,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdns.eu1.gigya.com/js/sso.htm?APIKey=3_gqHUXVI8IXKRF51nbhQXeEJZE_7wGeXchfGs7UyV3Y08FFnxj_fxkeBW0nagr8XZ\u0026ssoSegment=\u0026version=latest\u0026build=1930\u0026flavor=base\u0026sourceKey=4_LWGzxVDlxnaTetL1EDjQ7w#m=getToken\u0026d=https%3A%2F%2Fwww.tui.com\u0026callbackID=gig_sso_cb1781976489012_2\u0026sAPIKey=4_LWGzxVDlxnaTetL1EDjQ7w\u0026gig_loggerConfig=%7B%22logLevel%22%3A0%2C%22clientMuteLevel%22%3A0%2C%22logTheme%22%3A1%7D","fqdn":"cdns.eu1.gigya.com","domain":"gigya.com","tld":"com"},"ip":{"addr":"143.204.238.2","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:09.033Z","timestamp":1781976489033,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn3.gigya.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Thu, 03 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1D:EE:07:E0:1D:28:1F:15:0F:8C:5F:AA:62:30:B2:53:9A:48:FF:C8","sha256":"81:CD:A6:69:9B:80:55:AC:77:D1:1B:73:FE:67:AC:9C:9E:47:39:EC:12:E1:68:B7:2A:57:19:F2:DD:F4:F4:D2"}}},"request":{"raw":"GET /js/sso.htm?APIKey=3_gqHUXVI8IXKRF51nbhQXeEJZE_7wGeXchfGs7UyV3Y08FFnxj_fxkeBW0nagr8XZ\u0026ssoSegment=\u0026version=latest\u0026build=1930\u0026flavor=base\u0026sourceKey=4_LWGzxVDlxnaTetL1EDjQ7w HTTP/1.1\r\nHost: cdns.eu1.gigya.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nCookie: gig_canary=latest\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: CloudFront\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 30738\r\nx-amz-cf-pop: ARN53-P4\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nedge-cache-tag: siteid_8011391,ver_latest\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-sdk-version: latest\r\np3p: CP=\"IDC COR PSA DEV ADM OUR IND ONL\"\r\nx-error-code: 0\r\nx-soa: true, Gator\r\nx-server: gator-us1d-prod-65d94b7f7d-q9dlk\r\nx-callid: 019edc68d5107a28b3240a62c1ca891b\r\nx-robots-tag: none\r\ndate: Sat, 20 Jun 2026 17:25:25 GMT\r\ncache-control: public, s-maxage=3600, max-age=900\r\netag: 57217fed22225baa1beb13d386755341\r\nvary: Accept-Encoding\r\nvia: 1.1 4d370877aaf92bbc7827e0db032dc51c.cloudfront.net (CloudFront)\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 165\r\nx-sdk-canary: Skipped canary rolling. version 'latest' is specified by gig_canary cookie\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-id: _FrXCgfLiBNPWpge2Cq9wxwJM1k4jEyOCoRqdw7m-zG3hI_i-iWwYg==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":77271,"size_decoded":31696,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (63397)","md5":"57217fed22225baa1beb13d386755341","sha1":"29a274ed797892a3c5ff9fda7ee71272056ea8ea","sha256":"0c369c141794fdbefcb826ffb56c302affb8122e73061d807885648d1e4a5476","sha512":"2ca79963acea19b26b298fbd3e9d69b688698a9f93e9c76506ed6993a7a08aaf4cfd02309b8760e3520a34cee2650beb36f8ab98a2e6fe2c7b1040ec84d47a86","ssdeep":"768:EBvMAcAWmbIirmZtxrQUMx7+OU8N8M6TW18QXfk0wIUHdpv/v5XrbLzBSlHad/mp:EBkAcAWmFrKa7+L8kTT0wIUHdy","tlshash":"9373c6d9b6d2756203d390f8543f2107b23ea999240c8468f566c5e67cb8a4ec277fbc","first_seen":"2026-06-06T12:22:18.01488Z","last_seen":"2026-06-20T17:28:47.905993Z","times_seen":4,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.ctfassets.net/wft38qt3w1fi/22n8aNRPNWLThVmUlxcVnk/7a118d991012ccf70c35b187c6853833/sepa-tile.svg","fqdn":"images.ctfassets.net","domain":"ctfassets.net","tld":"net"},"ip":{"addr":"108.157.229.8","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:05.323Z","timestamp":1781976485323,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.ctfassets.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sat, 18 Oct 2025 00:00:00 GMT","end":"Sun, 15 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:39:C1:37:7A:6B:60:8A:D5:73:9E:D7:C4:F9:3A:11:9B:BD:94:2B","sha256":"AC:EA:37:10:54:C2:91:B5:04:B8:B4:CA:CD:35:48:4D:D0:92:78:F6:E2:8B:D9:57:78:20:D6:74:FE:14:16:A9"}}},"request":{"raw":"GET /wft38qt3w1fi/22n8aNRPNWLThVmUlxcVnk/7a118d991012ccf70c35b187c6853833/sepa-tile.svg HTTP/1.1\r\nHost: images.ctfassets.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 19 Jan 2024 09:08:03 GMT\r\nserver: Contentful Images API\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ndate: Sat, 20 Jun 2026 03:18:40 GMT\r\ncache-control: max-age=31536000\r\netag: W/\"595596b7dee057e28f9648b4337a96ba\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 3346055bb53a57ebf02828b88e1ee87c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: _dXwmnlStVfhqBoNE4p7TNoX6N2pm6LmWtu3FFbkYWt8c4VTksp9gw==\r\nage: 51564\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":8367,"size_decoded":3729,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"595596b7dee057e28f9648b4337a96ba","sha1":"d064d141f2c8a7026a5f6f57f704fc162d53752a","sha256":"693529483abc1f502cdeb5fd14baa976984e0990528f73316125b73af451e9a9","sha512":"7a38eacfa008240d86bac67e89d486d34ae87abaea092d0fba166c5444f16583752db429b9e27f6e2eff9f168d0d3545dc21b6ef534d22959f7c7a183fd996b3","ssdeep":"192:5FszXXt45zd3VdLo39POU9d29ZFlBEUVrwuljB96r:5Fzd3VdLoVX29bD9r1e","tlshash":"d202c6d913be8bff7d1437e99a0628423d0a20ea7e848164c5d3e65375054c4c8afce7","first_seen":"2025-09-30T04:45:21.622332Z","last_seen":"2026-06-20T17:28:47.91143Z","times_seen":7,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":8,"connect":10,"send":0,"wait":15,"receive":0,"ssl":253},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloud.tui.com/cdn/footer/v2/images/security-thawte.svg","fqdn":"cloud.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:05.349Z","timestamp":1781976485349,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloud.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Tue, 16 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"7D:E5:28:0F:B6:E6:8A:A2:A4:FC:71:45:EB:89:19:59:DA:00:B6:3C","sha256":"31:B4:F1:6F:B9:43:CE:E2:95:A8:98:0A:8A:2C:53:14:B6:A1:C8:DB:55:EC:BD:2F:D1:88:82:44:35:BB:15:38"}}},"request":{"raw":"GET /cdn/footer/v2/images/security-thawte.svg HTTP/1.1\r\nHost: cloud.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nCookie: _vis_opt_exp_de24_combi=2; tui-coupon-wallet-enabled=true; _vis_opt_exp_P1973_combi=A; ecid=66966107634980792017217711389285007288; kndctr_41E27DA552A6473A0A490D4D_AdobeOrg_cluster=irl1; ak_bmsc=B67A7B246DD506FF96868E790DEC7588~000000000000000000000000000000~YAAQnQplX5EeC8yeAQAA/0oT5gDOPuTt/btrBxkEvsjZCv5iCpXn0dXIvmJwn7xqmMAnNIe0nO0FY39Vbl5SjyGMJEVaR4G9q1/l42ck/a/EQOacJ4igK59UwcumJR8QpmYiwT+CVeC/eOnPjNwPUHExTtozITtaYleYz3l9P1pItpV47INsmiRsPueOOgIFv4Y8oYKv34ceEccDtGFc3g6P6Mp+trxKpDZd6yc0HigFXe28HQYG7avaeFj+ik5m0MFEhAiuBqS6SvCL4vy3reXusZ6jxYvIWHdT6PwPnlhHpHp22JmnVdOr/CIQP/7fu/r0sRyFMPvi8dmL3H+VaoMn7Zyfl7wI1msqdFED3mRYtf6+m0f5fS2F1TrGMkXqOaIHTqRL2Aw2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 12 Feb 2026 10:19:59 GMT\r\netag: \"217f9db26869bda3911f3b515bc279f0\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-amz-cf-pop: FRA50-P2\r\nx-amz-cf-id: 2Dlm5WNgNnAMGrk6-1lZAfLY4bsxuhbbQdFfLeQPWNMaUhFprOspSw==\r\ncontent-encoding: gzip\r\ncontent-length: 1481\r\ncache-control: max-age=1\r\nexpires: Sat, 20 Jun 2026 17:28:06 GMT\r\ndate: Sat, 20 Jun 2026 17:28:05 GMT\r\nvary: Accept-Encoding\r\nage: 599\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2900,"size_decoded":2020,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"217f9db26869bda3911f3b515bc279f0","sha1":"0f9aaa972edbd2427f0af93a8fb56617cf16cbd1","sha256":"ce58404430d298e5b3e292e295ff3307225094a105fb47bcdf836e83f50b852d","sha512":"3545ec9e1d80e18a1a0193e2f9c3973d338f5e97bfecd8e70e2df9de10272c131999d74c4059bfbd1beaf521f4b581fd6cb7c9a7521134f401a57793c0c8dbef","ssdeep":"","tlshash":"f251a4d72330938c55cacc5eef2aac18195ba0b2aeb340c9d5afc75858cb4c4f906d24","first_seen":"2025-09-28T22:43:58.432611Z","last_seen":"2026-06-20T17:28:47.912628Z","times_seen":14,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.ctfassets.net/wft38qt3w1fi/5oxCu4kd8PARsQGZEnnP2h/c0990dc1ed7326eff98fe4db079c86dc/youtube.svg","fqdn":"images.ctfassets.net","domain":"ctfassets.net","tld":"net"},"ip":{"addr":"108.157.229.8","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:05.366Z","timestamp":1781976485366,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.ctfassets.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sat, 18 Oct 2025 00:00:00 GMT","end":"Sun, 15 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:39:C1:37:7A:6B:60:8A:D5:73:9E:D7:C4:F9:3A:11:9B:BD:94:2B","sha256":"AC:EA:37:10:54:C2:91:B5:04:B8:B4:CA:CD:35:48:4D:D0:92:78:F6:E2:8B:D9:57:78:20:D6:74:FE:14:16:A9"}}},"request":{"raw":"GET /wft38qt3w1fi/5oxCu4kd8PARsQGZEnnP2h/c0990dc1ed7326eff98fe4db079c86dc/youtube.svg HTTP/1.1\r\nHost: images.ctfassets.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 06 Jul 2023 07:27:50 GMT\r\nserver: Contentful Images API\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ndate: Sat, 20 Jun 2026 03:00:01 GMT\r\ncache-control: max-age=31536000\r\netag: W/\"e0ff322368b83eb53919f5d1f7f4d666\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 3346055bb53a57ebf02828b88e1ee87c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: bVSQfDlG_4CAdbS-UaO117LVos4Xmcvy2llR5GkNDQe3B943nRd0IQ==\r\nage: 53244\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1158,"size_decoded":1208,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e0ff322368b83eb53919f5d1f7f4d666","sha1":"04a70923e6e5cca877d73ffb2132633206a11bfc","sha256":"ac149997c2d6d7da0e6eb00ad28724b08e74490e33ef26a279e71d70a8b34744","sha512":"e6674f87d808642c4d383435eb6501e5d6bd0c85e75e8cb060acfa61125104d42a58cc365bd2db1b9e496433f78e68cae33e846bca870d74b6792781bcfe9cde","ssdeep":"","tlshash":"2521fed652601ff888e5dfbce665a4c1112f30dc39754a14eba8366020b68dce0c6c54","first_seen":"2026-03-28T02:59:34.636261Z","last_seen":"2026-06-20T17:28:47.913356Z","times_seen":3,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/shared/mwa/assets/v2/fonts/ambit-bold.subset.woff2","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.267Z","timestamp":1781976486267,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /shared/mwa/assets/v2/fonts/ambit-bold.subset.woff2 HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: binary/octet-stream\r\ncontent-length: 16728\r\nx-amzn-requestid: 56374c18-574d-410f-b7a1-30bd9f5e068a\r\ncontent-encoding: gzip\r\nx-amzn-remapped-content-length: 16700\r\nx-amz-apigw-id: fOyvQF0zFiAFT6g=\r\ntimestamp: Fri, 19 Jun 2026 23:05:19 GMT\r\nx-amzn-trace-id: Root=1-6a35cb2e-673389aa1fc247f75879ee4a\r\ncache-control: public, max-age=538632\r\nexpires: Fri, 26 Jun 2026 23:05:18 GMT\r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver: TUI Web\r\nvary: Accept-Encoding,Origin\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16700,"size_decoded":17371,"mime_type":"binary/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 16700, version 1.1441","md5":"6d79f9f05327cc998229d9f08e64f6d4","sha1":"0b9e9c2cae3da7ed4deeb7f87933f9255a3fd87e","sha256":"8f60e4ba98fe0910ef396b161d01073c9ce5c2f26421aba95bc611c7ae16a417","sha512":"0c89183d873d15f3ea705faf86478eb7d34eac4c11583f45e6c86387f94f9897ff24a6742f03344606560eaa698d8ee1153e38b8e95d2d03eae98657575b5049","ssdeep":"384:gW8QMNoV4Tr//xOo610IWnCy11e6hyqGTdBtgVywW4n1r:f8Q8rr/p610IWCUevvtgVywNn1r","tlshash":"d372e12ccbd866adfd614e092ffb3945518a43b78c0655207805e7acca0afa4f910c2b","first_seen":"2025-09-28T22:43:58.346844Z","last_seen":"2026-06-20T17:28:47.914325Z","times_seen":28,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/shared/mwa/assets/v2/icons/tui-light/world.svg","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.656Z","timestamp":1781976486656,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /shared/mwa/assets/v2/icons/tui-light/world.svg HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mwa.tui.com/browse/mwa/workflow-ssg-prod/workflow-pages-home/assets/workflow-pages-home_26.25.1/home/index.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\nx-amzn-requestid: 5cd6151b-0ed8-477f-bb71-61b58371d20e\r\nx-amzn-remapped-content-length: 471\r\nx-amz-apigw-id: fO7XUHN1liAFm6g=\r\ntimestamp: Sat, 20 Jun 2026 00:04:12 GMT\r\nx-amzn-trace-id: Root=1-6a35d8fb-41a0294e638b8c977c21ade2\r\ncontent-encoding: gzip\r\ncontent-length: 310\r\ncache-control: public, max-age=542165\r\nexpires: Sat, 27 Jun 2026 00:04:11 GMT\r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver: TUI Web\r\nvary: Accept-Encoding,Origin\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":471,"size_decoded":943,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dc51fea88f07f92b5f4c38b53e85c3ba","sha1":"49bebabef4348b01d603b7c30abf9c389405ea76","sha256":"a0e065e8231dde2872ea765522028189ec864931dcccb6c2cedc630b95ca07ee","sha512":"717d0469c1ffd19d274f81e2d5e5d97454e3824c49315f3c44e064eae44df78c1b3d8eb45f86a8a2ffe63d1ca60c89bff6ada483f87068008ccd499989b40357","ssdeep":"","tlshash":"e9f0d48b8e4c6c8ca325cd31db587670302d2417384d2598907b1f30520679a74674d8","first_seen":"2026-03-29T05:54:31.42504Z","last_seen":"2026-06-20T17:28:47.905434Z","times_seen":3,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.cloud.tui.com/search-departure-airport/v2/departureAirportGroups/TUICOM/de-DE","fqdn":"api.cloud.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"63.184.79.191","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.694Z","timestamp":1781976486694,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.cloud.tui.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 31 Mar 2026 00:00:00 GMT","end":"Wed, 14 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4D:1B:CF:1F:A2:F7:54:75:66:1A:59:5D:5D:E3:9C:C5:4D:DA:A8:29","sha256":"19:24:EA:ED:3E:EF:31:9A:A1:7B:3D:65:EE:5D:75:06:99:FE:4F:3F:31:14:A9:3C:67:1F:22:BC:0B:DE:DA:0D"}}},"request":{"raw":"GET /search-departure-airport/v2/departureAirportGroups/TUICOM/de-DE HTTP/1.1\r\nHost: api.cloud.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.tui.com/\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 1354\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"11df-9AhewDyt7EdmclhI/DYY2VXqQRw\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\napigw-requestid: fRUSHj-nliAEJKw=\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":4575,"size_decoded":1674,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5b4e526ce2c042c229875685096980f2","sha1":"f4085ec03cadec4766725848fc3618d955ea411c","sha256":"1a74d68e5d8b7a771f649c4d11b0e6df7303f337333fbb81225a6da3f0e9d843","sha512":"4dfc37681d9a6f3cc8cf8a39217c0fdb4ccdee96724a296b4c35d4f748975fb21582415007d3113e63df1a9f236de621e38d19155725a8805cc78adf502bace4","ssdeep":"96:EldhSny/DO7UlZwBKS5+8Hy+qzE18GZnGzxr4fNGQdP0GbfVGj0RgjGPNS/7LR6j:orH2YbQR0KsXAoU","tlshash":"1691e9ff30a80d7e474746fa9d0173e79ea534762ba91c89a80b2a4994c732fe517807","first_seen":"2026-06-20T17:28:47.915334Z","last_seen":"2026-06-20T17:28:47.915334Z","times_seen":1,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":26,"send":0,"wait":32,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloud.tui.com/cdn/crisis-ticker/v1/index.js","fqdn":"cloud.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:05.261Z","timestamp":1781976485261,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloud.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Tue, 16 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"7D:E5:28:0F:B6:E6:8A:A2:A4:FC:71:45:EB:89:19:59:DA:00:B6:3C","sha256":"31:B4:F1:6F:B9:43:CE:E2:95:A8:98:0A:8A:2C:53:14:B6:A1:C8:DB:55:EC:BD:2F:D1:88:82:44:35:BB:15:38"}}},"request":{"raw":"GET /cdn/crisis-ticker/v1/index.js HTTP/1.1\r\nHost: cloud.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 01 Oct 2025 14:07:58 GMT\r\netag: \"9afbf55929de10a13429235f447626ec\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-amz-cf-pop: DUS51-P6\r\nx-amz-cf-id: 1MnwJvWvSiqBZ7__J065B2SEcvG_UbAIpjHi_ZwOFls2aHfw4aGASA==\r\ncontent-encoding: gzip\r\ncontent-length: 6546\r\ncache-control: max-age=1\r\nexpires: Sat, 20 Jun 2026 17:28:06 GMT\r\ndate: Sat, 20 Jun 2026 17:28:05 GMT\r\nvary: Accept-Encoding\r\nage: 599\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":28246,"size_decoded":7087,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19906)","md5":"9afbf55929de10a13429235f447626ec","sha1":"e87f459337cbc893be53fb155030582e4af94e6c","sha256":"7999a63755a49659b9de7af5401a3215fc3c66351b30c2fcc6c37baa77d215f9","sha512":"27172cb31a2e5921283e3f68aa6a0613d748a0708525e261f1b9e74b1b723781a8a4a31b3a535cccaa401fac6e4b43a7bae9a61cf4d43a98f2db64bd5a8ad9da","ssdeep":"768:EpDDZFDf2McHkznsnBzYz6zGNCCOBH7f0BTxGuHPe6BWoMVCUkhIseIaYpZctUGm:mDDZFDf2McHkznsnBzYz6zGNCrHQBli8","tlshash":"85c253d52750e23f5d3fe156e398a52ca418fd0add8688e6f51968124fcbffa089312c","first_seen":"2025-10-22T07:01:59.604576Z","last_seen":"2026-06-20T17:28:47.916263Z","times_seen":10,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":5,"connect":3,"send":0,"wait":50,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.ctfassets.net/wft38qt3w1fi/7zrtOegWkCBxv128q4siFE/6b0b7c5d97e2ab92e5f6e51beed935bd/onaccount-card.svg","fqdn":"images.ctfassets.net","domain":"ctfassets.net","tld":"net"},"ip":{"addr":"108.157.229.8","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:05.341Z","timestamp":1781976485341,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.ctfassets.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sat, 18 Oct 2025 00:00:00 GMT","end":"Sun, 15 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:39:C1:37:7A:6B:60:8A:D5:73:9E:D7:C4:F9:3A:11:9B:BD:94:2B","sha256":"AC:EA:37:10:54:C2:91:B5:04:B8:B4:CA:CD:35:48:4D:D0:92:78:F6:E2:8B:D9:57:78:20:D6:74:FE:14:16:A9"}}},"request":{"raw":"GET /wft38qt3w1fi/7zrtOegWkCBxv128q4siFE/6b0b7c5d97e2ab92e5f6e51beed935bd/onaccount-card.svg HTTP/1.1\r\nHost: images.ctfassets.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 06 Jul 2023 07:06:55 GMT\r\nserver: Contentful Images API\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ndate: Sat, 20 Jun 2026 03:18:40 GMT\r\ncache-control: max-age=31536000\r\netag: W/\"a946b1ad66fd3f1b0fa9f2caea52c549\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 3346055bb53a57ebf02828b88e1ee87c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: GAyT9JGNJntdQAsmZA3AcIE8RyBGdyO7imFXHXm2JsctDTqnlhhglg==\r\nage: 51564\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":16167,"size_decoded":6522,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a946b1ad66fd3f1b0fa9f2caea52c549","sha1":"b1a18f2ffd44187f8f76884226b39ae25178ce62","sha256":"a3bbf71971fcf1673c4e4d173808e90cdbf63f8ae83ebfca282926be911cdc85","sha512":"b94ccd53d4b8775fdeba805dc09f271082bf16410f067ad3c7042020c4e0e5952cd084ccbbf35c183d2032c26454c3f15868e367261464fd8ecfc53f91eb255d","ssdeep":"384:uZ2uR+bKwNQhZXddPl1V+MbNiYgZ/nlfUC/C1h6L12q0x8OJ167l9Nqnb1kVIBb4:2rR+oBdd06aZdfUC/CH6QqG8OW7l9NqM","tlshash":"d17262cd373186f5e18487baafa01497333509947a31cb58cf9e28699c929c97ce8c87","first_seen":"2025-09-28T22:43:58.519941Z","last_seen":"2026-06-20T17:28:47.91758Z","times_seen":14,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tui.com/assets/v2/icons/tui-light/chevron.svg","fqdn":"static.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"13.249.8.122","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.052Z","timestamp":1781976486052,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Jul 2025 00:00:00 GMT","end":"Wed, 29 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B1:29:28:04:46:85:C0:F0:4D:6F:D6:B9:CC:AA:FF:BE:E9:8C:8E:D4","sha256":"F6:AE:7B:84:78:6D:24:4A:0F:93:96:0C:8B:78:F7:AF:26:0C:5C:AB:8E:7A:05:74:F4:C4:6C:E3:1E:20:86:4A"}}},"request":{"raw":"GET /assets/v2/icons/tui-light/chevron.svg HTTP/1.1\r\nHost: static.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\ncontent-length: 197\r\naccess-control-allow-origin: *\r\nlast-modified: Wed, 31 Jul 2024 14:37:20 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\naccess-control-expose-headers: Date\r\nvia: 1.1 45e3ccd889272a7e8732f0eda13e87ca.cloudfront.net (CloudFront), 1.1 118086882d9f17e10877e0653a055586.cloudfront.net (CloudFront)\r\ndate: Sat, 20 Jun 2026 15:42:47 GMT\r\ncache-control: max-age=7200\r\netag: \"86fa6dcddb5b786f8bf9d2ebdbfc08fa\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: FRA60-P9, ARN53-P3\r\nx-amz-cf-id: g0P9e__YNAyExlGI7sXG8-FkQ0O3FeNjl1n31VLEajBlMpPjYK09cg==\r\nage: 6326\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":197,"size_decoded":889,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"86fa6dcddb5b786f8bf9d2ebdbfc08fa","sha1":"ad856ee18b645fd5be882d10d55686616a1f78aa","sha256":"4ee2c215b75942f53884566a2c5d1c2f5d8ce6fcddad41a7eef697eaaec49d93","sha512":"cf8675f56d7f446eaf5f1028033086d676b18c5b8fbb2bd4a6c5066bae5cc390866a4d7859829c0c01aa16e5e3fb925fef22be0c894f5d6a5aad72a61605adc3","ssdeep":"","tlshash":"37d0124e52180d3db6364a20e7743b7150a920526949356d84b204306295e4d743baf4","first_seen":"2025-06-28T16:10:42.716839Z","last_seen":"2026-06-20T17:28:47.918667Z","times_seen":16,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloud.tui.com/cdn/favorites/current/tui-favorites-heart.js","fqdn":"cloud.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.211Z","timestamp":1781976486211,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloud.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Tue, 16 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"7D:E5:28:0F:B6:E6:8A:A2:A4:FC:71:45:EB:89:19:59:DA:00:B6:3C","sha256":"31:B4:F1:6F:B9:43:CE:E2:95:A8:98:0A:8A:2C:53:14:B6:A1:C8:DB:55:EC:BD:2F:D1:88:82:44:35:BB:15:38"}}},"request":{"raw":"GET /cdn/favorites/current/tui-favorites-heart.js HTTP/1.1\r\nHost: cloud.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 11 Feb 2026 08:45:29 GMT\r\netag: \"f0bf8e7b2a0272d7e6e15371e768fbae\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-amz-cf-pop: FRA50-P2\r\nx-amz-cf-id: NAgzc-Yk3PFN_Fqq6b9M2RlwFf8ZwirB0aAewX2ulbyr_w5leLvm8A==\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=1\r\nexpires: Sat, 20 Jun 2026 17:28:07 GMT\r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\ncontent-length: 8458\r\nage: 599\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":35980,"size_decoded":8999,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (19107)","md5":"f0bf8e7b2a0272d7e6e15371e768fbae","sha1":"a8ef6ed78d8fc880e8f5115b96ba9a0315df74e0","sha256":"4bf21ad5fb16ca1d8db0c81e2f0162a15bc0032791068b7a432c8835243f76f8","sha512":"e8eeeeff46a1309ca07eb8b0a4a07bfa21c84521c702dec7e61fd48a052133aadb6864f9069c31883cb60e18cbe457f478924bb22906607665e9aa212721e8b4","ssdeep":"768:GHq8f4JuiT+l4gARiCann7t5HXAgcCtaHQWZsKE7:+ZfBZl3taHQW+KE7","tlshash":"daf2a5a9310275b8ac7b7faa27afc2553664b904803814957d8e90d30fafd7f8167738","first_seen":"2026-03-28T02:59:34.615239Z","last_seen":"2026-06-20T17:28:47.920184Z","times_seen":9,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.cloud.tui.com/search-departure-airport/v2/departureAirportGroups/TUICOM/de-DE","fqdn":"api.cloud.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"63.184.79.191","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.721Z","timestamp":1781976486721,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.cloud.tui.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 31 Mar 2026 00:00:00 GMT","end":"Wed, 14 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4D:1B:CF:1F:A2:F7:54:75:66:1A:59:5D:5D:E3:9C:C5:4D:DA:A8:29","sha256":"19:24:EA:ED:3E:EF:31:9A:A1:7B:3D:65:EE:5D:75:06:99:FE:4F:3F:31:14:A9:3C:67:1F:22:BC:0B:DE:DA:0D"}}},"request":{"raw":"GET /search-departure-airport/v2/departureAirportGroups/TUICOM/de-DE HTTP/1.1\r\nHost: api.cloud.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.tui.com/\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 1354\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"11df-9AhewDyt7EdmclhI/DYY2VXqQRw\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\napigw-requestid: fRUSHjF-liAEJlg=\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":4575,"size_decoded":1674,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5b4e526ce2c042c229875685096980f2","sha1":"f4085ec03cadec4766725848fc3618d955ea411c","sha256":"1a74d68e5d8b7a771f649c4d11b0e6df7303f337333fbb81225a6da3f0e9d843","sha512":"4dfc37681d9a6f3cc8cf8a39217c0fdb4ccdee96724a296b4c35d4f748975fb21582415007d3113e63df1a9f236de621e38d19155725a8805cc78adf502bace4","ssdeep":"96:EldhSny/DO7UlZwBKS5+8Hy+qzE18GZnGzxr4fNGQdP0GbfVGj0RgjGPNS/7LR6j:orH2YbQR0KsXAoU","tlshash":"1691e9ff30a80d7e474746fa9d0173e79ea534762ba91c89a80b2a4994c732fe517807","first_seen":"2026-06-20T17:28:47.915334Z","last_seen":"2026-06-20T17:28:47.915334Z","times_seen":1,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":0,"dns":1,"connect":22,"send":0,"wait":38,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.cloud.tui.com/search-departure-airport/v2/departureAirports/TUICOM/de-DE","fqdn":"api.cloud.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"63.184.79.191","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.831Z","timestamp":1781976486831,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.cloud.tui.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 31 Mar 2026 00:00:00 GMT","end":"Wed, 14 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4D:1B:CF:1F:A2:F7:54:75:66:1A:59:5D:5D:E3:9C:C5:4D:DA:A8:29","sha256":"19:24:EA:ED:3E:EF:31:9A:A1:7B:3D:65:EE:5D:75:06:99:FE:4F:3F:31:14:A9:3C:67:1F:22:BC:0B:DE:DA:0D"}}},"request":{"raw":"GET /search-departure-airport/v2/departureAirports/TUICOM/de-DE HTTP/1.1\r\nHost: api.cloud.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.tui.com/\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 1166\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"103a-ZzgTFSNChUZ8OGnGwcn6r5IqJ5E\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\napigw-requestid: fRUSIhctFiAEJdg=\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":4154,"size_decoded":1486,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"989f9f875406261a80bdd27380932db6","sha1":"67381315234285467c3869c6c1c9faaf922a2791","sha256":"7ffa0b6998e9123fc744337566ec3176a439b1864e40c24faadb69b464627b8f","sha512":"dae7654273d53d79a8f7ec3b6a9ec551db3b540fb1eb673c75aefb702af3fced538b1d647f49800b7d74060ab01f6e10fdfa9c110906a952e912f9f3e5e4c29e","ssdeep":"96:6NcHQB/xGj0O0ndhS/LRrQGZnGz32OzgCU+VuGQdtramIjyMitZwVysNyHsGbfej:406rM5YdQokPPJ+","tlshash":"1081a7ff30a4097e47474bfe9e0177e7d99634763b691c8ea40b2a49a4c632fe507806","first_seen":"2026-06-20T17:28:47.92138Z","last_seen":"2026-06-20T17:28:47.92138Z","times_seen":1,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tui.com/assets/v2/fonts/ambit-semibold.woff2","fqdn":"static.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"13.249.8.122","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.886Z","timestamp":1781976486886,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Jul 2025 00:00:00 GMT","end":"Wed, 29 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B1:29:28:04:46:85:C0:F0:4D:6F:D6:B9:CC:AA:FF:BE:E9:8C:8E:D4","sha256":"F6:AE:7B:84:78:6D:24:4A:0F:93:96:0C:8B:78:F7:AF:26:0C:5C:AB:8E:7A:05:74:F4:C4:6C:E3:1E:20:86:4A"}}},"request":{"raw":"GET /assets/v2/fonts/ambit-semibold.woff2 HTTP/1.1\r\nHost: static.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: binary/octet-stream\r\ncontent-length: 33700\r\naccess-control-allow-origin: *\r\nlast-modified: Wed, 31 Jul 2024 14:37:18 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\naccess-control-expose-headers: Date\r\nvia: 1.1 9b70adf7c49e859435e96eb0fc35c216.cloudfront.net (CloudFront), 1.1 118086882d9f17e10877e0653a055586.cloudfront.net (CloudFront)\r\ndate: Sat, 20 Jun 2026 16:34:56 GMT\r\ncache-control: max-age=7200\r\netag: \"f8b21c7784ff981fd148182f5b2efbf5\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: FRA60-P9, ARN53-P3\r\nx-amz-cf-id: 0xZ8f5uIZCvWqJ3CCWVBZ2NPJc94wRVjLqAxtwaT7Qz9l8II_MhCYw==\r\nage: 3206\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":33700,"size_decoded":34400,"mime_type":"binary/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 33700, version 1.1441","md5":"f8b21c7784ff981fd148182f5b2efbf5","sha1":"b3c0507a25ead3079fd60d20f288f6cfb5e9276a","sha256":"83c005d8582cda59e736347d8c34a95ed849ac449ebee68f208c98ccce51094c","sha512":"841dd1f20836c093d67b33e30dc62d76b3ae795cc9eb533c7c6977fb2961485f1f2028c462a32138af87e37b710b8b293311b11221754bea2e5c02e721d0efd9","ssdeep":"768:qwvJtQTLudCyrvAeen+hwhoUO/27IGrri/abRE/aDUio:qwvsfuMyrYKbXgri/abREvb","tlshash":"fbe2f1f7c9a05b2ac72964627f7fd5294109b8138a60e90ff8f2cdcf5d166ad4098e81","first_seen":"2023-05-08T13:26:09Z","last_seen":"2026-06-20T17:28:47.92238Z","times_seen":82,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.ctfassets.net/wft38qt3w1fi/5RJ4IGkPHG4uwR0PXNdhAk/3d35440f44bf41ff2dd48488071bbebd/TUI_Logo_Pride_Month.svg","fqdn":"images.ctfassets.net","domain":"ctfassets.net","tld":"net"},"ip":{"addr":"108.157.229.8","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:05.317Z","timestamp":1781976485317,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.ctfassets.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sat, 18 Oct 2025 00:00:00 GMT","end":"Sun, 15 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:39:C1:37:7A:6B:60:8A:D5:73:9E:D7:C4:F9:3A:11:9B:BD:94:2B","sha256":"AC:EA:37:10:54:C2:91:B5:04:B8:B4:CA:CD:35:48:4D:D0:92:78:F6:E2:8B:D9:57:78:20:D6:74:FE:14:16:A9"}}},"request":{"raw":"GET /wft38qt3w1fi/5RJ4IGkPHG4uwR0PXNdhAk/3d35440f44bf41ff2dd48488071bbebd/TUI_Logo_Pride_Month.svg HTTP/1.1\r\nHost: images.ctfassets.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\ndate: Sat, 20 Jun 2026 03:01:02 GMT\r\nlast-modified: Thu, 19 Jun 2025 15:32:23 GMT\r\netag: W/\"9515898c473ce4e453d2ad7d3293dec3\"\r\ncache-control: max-age=31536000\r\nserver: Contentful Images API\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 3346055bb53a57ebf02828b88e1ee87c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: JJH9mG1fI9G81tvt6n4qnHhfarZlWYi4O6syqdb88Ujrzo_qrSHyXA==\r\nage: 52024\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":6647,"size_decoded":3552,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9515898c473ce4e453d2ad7d3293dec3","sha1":"bc839a375da48efa318031f67596fabe43dc6b0b","sha256":"fd870edfa2228a675412c073813ad7501f66a5912bfa6a4c3cd1810d13d074a5","sha512":"bafd21c644371afa64689fc555e1de1165a1360d245698d9303b3763486e4db43de503f5ca1e9a65762b8e84aa89c53eb971aefa5f69a43508f1e665303d515c","ssdeep":"192:av7znjk17478EF+Rmz0iUjGhJbD3+BSdmS:aDLjk174I1cz0pjO6YdmS","tlshash":"a1d1e7dc3b6405981c8553ce6f0750fd6957d0de9a9a4931c108db09348d93fce6beca","first_seen":"2026-06-06T12:22:18.043496Z","last_seen":"2026-06-20T17:28:47.923051Z","times_seen":2,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":14,"connect":10,"send":0,"wait":10,"receive":0,"ssl":246},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.ctfassets.net/wft38qt3w1fi/1AOFrDQhEuTMsSJaG4l4AU/325dc81a72bc12e33fa604d0397f18f9/paypal-card.svg","fqdn":"images.ctfassets.net","domain":"ctfassets.net","tld":"net"},"ip":{"addr":"108.157.229.8","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:05.333Z","timestamp":1781976485333,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.ctfassets.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sat, 18 Oct 2025 00:00:00 GMT","end":"Sun, 15 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:39:C1:37:7A:6B:60:8A:D5:73:9E:D7:C4:F9:3A:11:9B:BD:94:2B","sha256":"AC:EA:37:10:54:C2:91:B5:04:B8:B4:CA:CD:35:48:4D:D0:92:78:F6:E2:8B:D9:57:78:20:D6:74:FE:14:16:A9"}}},"request":{"raw":"GET /wft38qt3w1fi/1AOFrDQhEuTMsSJaG4l4AU/325dc81a72bc12e33fa604d0397f18f9/paypal-card.svg HTTP/1.1\r\nHost: images.ctfassets.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 06 Jul 2023 06:57:19 GMT\r\nserver: Contentful Images API\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ndate: Sat, 20 Jun 2026 04:26:47 GMT\r\ncache-control: max-age=31536000\r\netag: W/\"a85e16af93aaae1f9c77f1f423ee58b9\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 3346055bb53a57ebf02828b88e1ee87c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: D2Kzk11rxGxOBrGPUNBgTIDYB6G3PdpZrx5pMIio-2vUtzFISUxxPA==\r\nage: 46957\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":8475,"size_decoded":4489,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a85e16af93aaae1f9c77f1f423ee58b9","sha1":"ac48ab6d7587ea623bf3e3df179c6168719b1a51","sha256":"0d92393d84984bfad064027ccfb518a3d955b996ce56f5279b10b7b9d5e9315f","sha512":"75ef36aa9247704d566608602d46dfb050c80325fe5a6575c9cfcc1ae4412d1ff7404ebe2d12afcf725cadbf14b95fe1185acd77a9d10008eef5da03fa2a48a2","ssdeep":"192:OtyqcnYE+Kkjl9UyNMRFKNoCnFf3GFujAoiB1blPISZrzGYZnFhvbpy:HnyPh9UyMFKNjZKpIgrBZnFhvbpy","tlshash":"3e02d7d523a473f5f506ebdcce1141b079e924b933b581a8c68b6e507d0a1adca9ccd2","first_seen":"2025-09-30T04:45:21.627667Z","last_seen":"2026-06-20T17:28:47.924347Z","times_seen":7,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":0,"connect":8,"send":0,"wait":10,"receive":0,"ssl":245},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.ctfassets.net/wft38qt3w1fi/6oXHIYnDUrnkw9gnQHE9g6/0bbdf897d5a26056d7c29235c75db429/tuicardgold-card.svg","fqdn":"images.ctfassets.net","domain":"ctfassets.net","tld":"net"},"ip":{"addr":"108.157.229.8","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:05.337Z","timestamp":1781976485337,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.ctfassets.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sat, 18 Oct 2025 00:00:00 GMT","end":"Sun, 15 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:39:C1:37:7A:6B:60:8A:D5:73:9E:D7:C4:F9:3A:11:9B:BD:94:2B","sha256":"AC:EA:37:10:54:C2:91:B5:04:B8:B4:CA:CD:35:48:4D:D0:92:78:F6:E2:8B:D9:57:78:20:D6:74:FE:14:16:A9"}}},"request":{"raw":"GET /wft38qt3w1fi/6oXHIYnDUrnkw9gnQHE9g6/0bbdf897d5a26056d7c29235c75db429/tuicardgold-card.svg HTTP/1.1\r\nHost: images.ctfassets.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 06 Jul 2023 06:59:35 GMT\r\nserver: Contentful Images API\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ndate: Sat, 20 Jun 2026 05:08:22 GMT\r\ncache-control: max-age=31536000\r\netag: W/\"28e7ec0cd5bf2e3f17c7632955ed8f3e\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 3346055bb53a57ebf02828b88e1ee87c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: KZgwy89Vt1RyfNgynLU_uVtJfufzaZXzuh_as4ILACy1nppqTQ36nA==\r\nage: 44414\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":16739,"size_decoded":7083,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"28e7ec0cd5bf2e3f17c7632955ed8f3e","sha1":"98f048840e324ac9fc21379ccdc06d3db937196e","sha256":"7d3fc3b5b7b0bae1f7ec474e98b4cf775eb1015377ce3abff42df49a2da3c172","sha512":"ac7769b7049e6d497f655817eae2beb6f0df80ef3192600ddb3a139b9c61149fff22abcd62ab6608ea0803909249045c355dd684d8d7754f5a8e5ef416cf79a3","ssdeep":"384:H72icS3RaJ4eoBWeHGfi7aE7YQvavpEpJm/VRUP:iicS3RaJ4mPfiGE7YZP/Vk","tlshash":"7972b5ca5b3523fdb3c8daac612112693d63bca27bb0469cd3475e146891df6583cc93","first_seen":"2026-03-28T02:59:34.550632Z","last_seen":"2026-06-20T17:28:47.925198Z","times_seen":3,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/shared/mwa/assets/v2/fonts/tuitypelight-bold.subset.woff2","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.263Z","timestamp":1781976486263,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /shared/mwa/assets/v2/fonts/tuitypelight-bold.subset.woff2 HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: binary/octet-stream\r\ncontent-length: 18388\r\nx-amzn-requestid: 3a15000f-f9fe-4b59-89e6-93e7a5f1d476\r\ncontent-encoding: gzip\r\nx-amzn-remapped-content-length: 18360\r\nx-amz-apigw-id: fOyvWEF7FiAFuXg=\r\ntimestamp: Fri, 19 Jun 2026 23:05:19 GMT\r\nx-amzn-trace-id: Root=1-6a35cb2e-359d1562128aa7302e10ac77\r\ncache-control: public, max-age=538632\r\nexpires: Fri, 26 Jun 2026 23:05:18 GMT\r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver: TUI Web\r\nvary: Accept-Encoding,Origin\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18360,"size_decoded":19031,"mime_type":"binary/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 18360, version 2.6619","md5":"84aa00ac3a3bc6a2d26b97ae743d5010","sha1":"683aa597662bf5040158669de588d7972f276d8c","sha256":"12a642318c3bf80afeba913f3510b17a0360882c78180316498e3faa2babc221","sha512":"ea5e6c1760473d2f75887d4db5665abf1c0231aa1f01d2e7a4918a27cf72a9694058ffc637322e8f6a5dfd257ba8830470da052ece8ef9be162156a3b921f46a","ssdeep":"384:q2dCUKfQrdnfP7DNP9wocR7arMzC9KGyxIm1ViFyXFtg1:BkQdPF9E2Tat18FyVm1","tlshash":"a982e101694a3542df4d92b8ba9b9cb529c7c05523ca25e2184ceb386c3991f0993f5e","first_seen":"2025-06-28T16:10:42.720413Z","last_seen":"2026-06-20T17:28:47.926264Z","times_seen":30,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/shared/mwa/assets/v2/icons/tui-light/oncoming-camper.svg","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:07.752Z","timestamp":1781976487752,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /shared/mwa/assets/v2/icons/tui-light/oncoming-camper.svg HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mwa.tui.com/browse/mwa/workflow-ssg-prod/workflow-pages-home/assets/workflow-pages-home_26.25.1/home/index.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\nx-amzn-requestid: db7b77d2-ccdd-49b6-ba49-164c6c2c0d15\r\nx-amzn-remapped-content-length: 519\r\nx-amz-apigw-id: fO7XUEIIliAFV5Q=\r\ntimestamp: Sat, 20 Jun 2026 00:04:12 GMT\r\nx-amzn-trace-id: Root=1-6a35d8fb-2fc17a8746fc5c9716e24184\r\ncontent-encoding: gzip\r\ncontent-length: 336\r\ncache-control: public, max-age=542164\r\nexpires: Sat, 27 Jun 2026 00:04:11 GMT\r\ndate: Sat, 20 Jun 2026 17:28:07 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver: TUI Web\r\nvary: Accept-Encoding,Origin\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/svg+xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T20:29:48.587722Z","times_seen":16589263,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tags.pw.adn.cloud/X2KLWK/activation.js","fqdn":"tags.pw.adn.cloud","domain":"adn.cloud","tld":"cloud"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:09.189Z","timestamp":1781976489189,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /X2KLWK/activation.js HTTP/1.1\r\nHost: tags.pw.adn.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T20:29:48.587722Z","times_seen":16589263,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.content.tuigroup.com/adamtui/2025_10/28_14/ec7b8583-3e01-40eb-9776-b38400eea25a/urlaub-infinity-pool-romantisches-paarWebOriginalCompressed.jpg","fqdn":"cdn.content.tuigroup.com","domain":"tuigroup.com","tld":"com"},"ip":{"addr":"95.101.10.105","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:05.273Z","timestamp":1781976485273,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.content.tuigroup.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 23 Feb 2026 00:00:00 GMT","end":"Mon, 22 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:A2:A9:E1:36:21:12:70:71:62:D8:9E:CC:C0:F9:EB:9C:0E:5A:B8","sha256":"B9:93:43:16:0C:4D:95:D2:95:92:C2:C7:38:98:8D:C1:23:69:E0:6E:91:8C:9E:98:6E:CB:44:F8:39:7E:96:14"}}},"request":{"raw":"GET /adamtui/2025_10/28_14/ec7b8583-3e01-40eb-9776-b38400eea25a/urlaub-infinity-pool-romantisches-paarWebOriginalCompressed.jpg HTTP/1.1\r\nHost: cdn.content.tuigroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\netag: \"6c1e908ebf6540dc4adea78d7e60c575\"\r\nlast-modified: Sat, 23 May 2026 04:29:40 GMT\r\nserver: Akamai Image Manager\r\ncontent-length: 409562\r\ncontent-type: image/avif\r\ncache-control: private, no-transform, max-age=2592000\r\nexpires: Mon, 20 Jul 2026 17:28:05 GMT\r\ndate: Sat, 20 Jun 2026 17:28:05 GMT\r\nalt-svc: h3=\":443\"; ma=93600\r\nage: 215821\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":409562,"size_decoded":409940,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"3b48864f6933163ea4903862364810f4","sha1":"ed8b5cf81de06bec1595ef805fa3fd510673f7bf","sha256":"d55263e02a6b72419d19f3c284ba44795b2f8a14f3ca10d49c31b77824b036b0","sha512":"042509201abc2956cceeb4a6b489369787d3db4ed66f73edf89d370c1c34450c5b340501a5329088c1aad2a5d2afe9d3fbe83e2277ccde3f9443804e0ecad55c","ssdeep":"12288:B6hUiX8qMU3GsAnhQNdf8tEEHU3n2SBUvu1v3ja:B6hO63GsAnhsdfuEkUmSBUAvW","tlshash":"469423c2fd2929cceacb5c2a4d13e065b10f48cd225bc3df8e76b9572996c913a3d058","first_seen":"2026-06-20T17:28:47.926966Z","last_seen":"2026-06-20T17:28:47.926966Z","times_seen":1,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":2,"send":0,"wait":12,"receive":15,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloud.tui.com/cdn/search-duration/v2/search-duration.js","fqdn":"cloud.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.170Z","timestamp":1781976486170,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloud.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Tue, 16 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"7D:E5:28:0F:B6:E6:8A:A2:A4:FC:71:45:EB:89:19:59:DA:00:B6:3C","sha256":"31:B4:F1:6F:B9:43:CE:E2:95:A8:98:0A:8A:2C:53:14:B6:A1:C8:DB:55:EC:BD:2F:D1:88:82:44:35:BB:15:38"}}},"request":{"raw":"GET /cdn/search-duration/v2/search-duration.js HTTP/1.1\r\nHost: cloud.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Mon, 16 Mar 2026 11:06:18 GMT\r\netag: \"571649ea6ef8e7fa8ccdc5597217056c\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-amz-cf-pop: FRA50-P2\r\nx-amz-cf-id: txu9rLOO0ErNDWWkUNXon54zJFjcBwgFcSyGD0g9rSm4rtNck4dggQ==\r\ncontent-encoding: gzip\r\ncontent-length: 12568\r\ncache-control: max-age=1\r\nexpires: Sat, 20 Jun 2026 17:28:07 GMT\r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\nvary: Accept-Encoding\r\nage: 599\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":75573,"size_decoded":13110,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text, with very long lines (64786), with no line terminators","md5":"571649ea6ef8e7fa8ccdc5597217056c","sha1":"4e6eb8e04035596dcd972f2f4ab1f883b53b825e","sha256":"04761533831639f6a465b60fd698eee470b90e6bc18ef429dbc99e0a6e92b61f","sha512":"23b37d983c3f78a2f0cd304efaf21a30982aae887df591eac37236232c789863e86caaff5868fa3f1a72873637291dc4f4e5736ad8b86c29bd99fc29a31c7391","ssdeep":"768:H8WpEzGzoeBVK2WgOkYJ8yUO4v4skwiiFsLCATuujmFCQ:cWEzOXnUU3kfiYCA6ujmFCQ","tlshash":"6e73a6397400c3737dab8ffdd3ed0b29219a360099215c79bf2e648b03ce9aa5155b79","first_seen":"2026-03-29T05:54:31.415603Z","last_seen":"2026-06-20T17:28:47.927961Z","times_seen":5,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloud.tui.com/cdn/favorites/current/enums-DhJnbe0z.js","fqdn":"cloud.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.432Z","timestamp":1781976486432,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloud.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Tue, 16 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"7D:E5:28:0F:B6:E6:8A:A2:A4:FC:71:45:EB:89:19:59:DA:00:B6:3C","sha256":"31:B4:F1:6F:B9:43:CE:E2:95:A8:98:0A:8A:2C:53:14:B6:A1:C8:DB:55:EC:BD:2F:D1:88:82:44:35:BB:15:38"}}},"request":{"raw":"GET /cdn/favorites/current/enums-DhJnbe0z.js HTTP/1.1\r\nHost: cloud.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cloud.tui.com/cdn/favorites/current/tui-favorites-heart.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 11 Feb 2026 08:45:29 GMT\r\netag: \"3aeee928a6eabc53c7106d9dc5592a8f\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-amz-cf-pop: FRA50-P2\r\nx-amz-cf-id: RtXkmeLb3IPTzzXou7WGYXciPMylRvEj4QhrvDVLxiSPRbrxJAIrXw==\r\ncontent-encoding: gzip\r\ncontent-length: 13782\r\ncache-control: max-age=1\r\nexpires: Sat, 20 Jun 2026 17:28:07 GMT\r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\nvary: Accept-Encoding\r\nage: 599\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":63723,"size_decoded":14324,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (63546)","md5":"3aeee928a6eabc53c7106d9dc5592a8f","sha1":"29a947439c49e4190a7f79d05fa34e879c4bd3bf","sha256":"89061e02ae749eeda4dfe560079a97296fb03a2ebbe728b929b98dd10b765b6a","sha512":"5cc9b171f111468c24d2242f26114a611eeaff9ee5aba9bb43f7844be91b7b22a7f3edb00eb3752fb8d19d319108f74d0664bdf663011874bb9749b09b7b667e","ssdeep":"1536:fY8xMzrwW661MKyUcGchTSBxob1VOgUl32dsaTx:fxMzr8hTSBx+fO3l3Sb","tlshash":"4a537475f412b1bb29032f7f73ebca19736dbc00d6302664fe8a94d6099e1fb019a615","first_seen":"2026-03-28T02:59:34.64095Z","last_seen":"2026-06-20T17:28:47.928823Z","times_seen":9,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloud.tui.com/cdn/travel-explorer/v1/themes/tui-light.css","fqdn":"cloud.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.880Z","timestamp":1781976486880,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloud.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Tue, 16 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"7D:E5:28:0F:B6:E6:8A:A2:A4:FC:71:45:EB:89:19:59:DA:00:B6:3C","sha256":"31:B4:F1:6F:B9:43:CE:E2:95:A8:98:0A:8A:2C:53:14:B6:A1:C8:DB:55:EC:BD:2F:D1:88:82:44:35:BB:15:38"}}},"request":{"raw":"GET /cdn/travel-explorer/v1/themes/tui-light.css HTTP/1.1\r\nHost: cloud.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nCookie: _vis_opt_exp_de24_combi=2; tui-coupon-wallet-enabled=true; _vis_opt_exp_P1973_combi=A; ecid=66966107634980792017217711389285007288; kndctr_41E27DA552A6473A0A490D4D_AdobeOrg_cluster=irl1; ak_bmsc=B67A7B246DD506FF96868E790DEC7588~000000000000000000000000000000~YAAQnQplX5EeC8yeAQAA/0oT5gDOPuTt/btrBxkEvsjZCv5iCpXn0dXIvmJwn7xqmMAnNIe0nO0FY39Vbl5SjyGMJEVaR4G9q1/l42ck/a/EQOacJ4igK59UwcumJR8QpmYiwT+CVeC/eOnPjNwPUHExTtozITtaYleYz3l9P1pItpV47INsmiRsPueOOgIFv4Y8oYKv34ceEccDtGFc3g6P6Mp+trxKpDZd6yc0HigFXe28HQYG7avaeFj+ik5m0MFEhAiuBqS6SvCL4vy3reXusZ6jxYvIWHdT6PwPnlhHpHp22JmnVdOr/CIQP/7fu/r0sRyFMPvi8dmL3H+VaoMn7Zyfl7wI1msqdFED3mRYtf6+m0f5fS2F1TrGMkXqOaIHTqRL2Aw2; _tfm_exp_tfo1684=2; _vis_opt_exp_CTRRTBb_combi=0; _vis_opt_exp_CTRRTBc_combi=3; _vis_opt_exp_18742_combi=2; utag_main=v_id:019ee6135181001c3648a73012a605050001400900918$_sn:1$_se:1%3Bexp-session$_ss:1%3Bexp-session$_st:1781978286274%3Bexp-session$ses_id:1781976486274%3Bexp-session$_pn:1%3Bexp-session; _vis_opt_exp_tfo1518_combi=2; _vis_opt_exp_AbDist0_combi=1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\nlast-modified: Tue, 26 Nov 2024 12:45:13 GMT\r\netag: \"11b7ebfba3a7665151ae7f3e49b6761e\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-amz-cf-pop: TXL50-P4\r\nx-amz-cf-id: x-CDEraD1jE-5aqkWDT3RChDdi2iYf5MEY-oGaTnwUlE5sX_86ZOtg==\r\ncontent-encoding: gzip\r\ncontent-length: 4063\r\ncache-control: max-age=1\r\nexpires: Sat, 20 Jun 2026 17:28:07 GMT\r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\nvary: Accept-Encoding\r\nage: 599\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":26958,"size_decoded":4597,"mime_type":"text/css","magic":"ASCII text, with very long lines (459)","md5":"11b7ebfba3a7665151ae7f3e49b6761e","sha1":"080685cd16327c63f3551e6598330e7f984abd1e","sha256":"e71e8af1dfdd68e83075c0b53d0ef61f0f79e4c06fc68a400f0c37ffab725290","sha512":"7b83856272031795448e876fe0f0f2ea9004f5dc706e750a3a615f601c546a58adbd44e3da6f71598c239559ef698cc2b3c618c996cdacff4430751e074d42f5","ssdeep":"192:nL155xY5s5y5H5x56UE5R/vkTWoRX5D5tj5p5/5t5JA5k5ELo5ulKLcuZQBx12kj:fu/Dxlmky7Qai40JGzzhUCRBT","tlshash":"83c2b150f821b0fa393f463f334bce69727878515f05aa58bece94d40d6a3f72586a42","first_seen":"2025-09-28T22:43:58.455624Z","last_seen":"2026-06-20T17:28:47.929788Z","times_seen":14,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/shared/mwa/assets/v2/fonts/ambit-regular.woff2","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:07.071Z","timestamp":1781976487071,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /shared/mwa/assets/v2/fonts/ambit-regular.woff2 HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: binary/octet-stream\r\nx-amzn-requestid: 8e8b8c74-e7ef-4486-9c5a-8c6d042b8a18\r\nx-amzn-remapped-content-length: 31680\r\nx-amz-apigw-id: fOyvaH7AliAFjRw=\r\ntimestamp: Fri, 19 Jun 2026 23:05:20 GMT\r\nx-amzn-trace-id: Root=1-6a35cb2f-6f8a08da50658a1855040347\r\ncache-control: public, max-age=538632\r\nexpires: Fri, 26 Jun 2026 23:05:19 GMT\r\ndate: Sat, 20 Jun 2026 17:28:07 GMT\r\ncontent-length: 31680\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver: TUI Web\r\nvary: Accept-Encoding,Origin\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31680,"size_decoded":32299,"mime_type":"binary/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 31680, version 1.1441","md5":"189126b4981a7938826b37f066b2df7b","sha1":"8375660fe9f574d39ac7dd31205f7cd36617b506","sha256":"3eef8b18fcc9bbd105bd6a7f4f7999f78b84756ca2e8503c3b4cdcff90458826","sha512":"4c7335aaf62b4d4241c5042632642ce7d291b7049dc2fbab4ebd7cc7d634f72bf5fc8604598594e868e68bf88fd8f343a59cab0d5f4677584bb0b2e8cfc7375e","ssdeep":"768:Li8XW7DUE0zYZM+SX7IMGxABewrkDt7Hw5G/6:WnZ0zYWExABhrCQT","tlshash":"7be2f1f1818be0de954841ed8729b97acd25c34b6819f104edbb096492f316d213daf7","first_seen":"2023-05-16T11:44:06Z","last_seen":"2026-06-20T17:28:47.895056Z","times_seen":84,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/customer/mwa/auth-i11n-layer/de.js","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:07.019Z","timestamp":1781976487019,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /customer/mwa/auth-i11n-layer/de.js HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nCookie: _vis_opt_exp_de24_combi=2; tui-coupon-wallet-enabled=true; _vis_opt_exp_P1973_combi=A; ecid=66966107634980792017217711389285007288; kndctr_41E27DA552A6473A0A490D4D_AdobeOrg_cluster=irl1; ak_bmsc=B67A7B246DD506FF96868E790DEC7588~000000000000000000000000000000~YAAQnQplX5EeC8yeAQAA/0oT5gDOPuTt/btrBxkEvsjZCv5iCpXn0dXIvmJwn7xqmMAnNIe0nO0FY39Vbl5SjyGMJEVaR4G9q1/l42ck/a/EQOacJ4igK59UwcumJR8QpmYiwT+CVeC/eOnPjNwPUHExTtozITtaYleYz3l9P1pItpV47INsmiRsPueOOgIFv4Y8oYKv34ceEccDtGFc3g6P6Mp+trxKpDZd6yc0HigFXe28HQYG7avaeFj+ik5m0MFEhAiuBqS6SvCL4vy3reXusZ6jxYvIWHdT6PwPnlhHpHp22JmnVdOr/CIQP/7fu/r0sRyFMPvi8dmL3H+VaoMn7Zyfl7wI1msqdFED3mRYtf6+m0f5fS2F1TrGMkXqOaIHTqRL2Aw2; _tfm_exp_tfo1684=2; _vis_opt_exp_CTRRTBb_combi=0; _vis_opt_exp_CTRRTBc_combi=3; _vis_opt_exp_18742_combi=2; utag_main=v_id:019ee6135181001c3648a73012a605050001400900918$_sn:1$_se:1%3Bexp-session$_ss:1%3Bexp-session$_st:1781978286274%3Bexp-session$ses_id:1781976486274%3Bexp-session$_pn:1%3Bexp-session; _vis_opt_exp_tfo1518_combi=2; _vis_opt_exp_AbDist0_combi=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\ncontent-type: application/json\r\ncontent-length: 0\r\nx-amzn-requestid: 3e9a2a83-ab41-4398-a417-d67f33985d7d\r\nx-amz-apigw-id: fRUOTGDhFiAEAsA=\r\nlocation: https://mwa.tui.com/customer/mwa/auth-i11n-layer/1.1.2/de.js\r\ncache-control: public, max-age=600\r\nexpires: Sat, 20 Jun 2026 17:38:07 GMT\r\ndate: Sat, 20 Jun 2026 17:28:07 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver: TUI Web\r\nvary: Origin\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T20:29:48.587722Z","times_seen":16589263,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tui.com/assets/v2/fonts/ambit-semibold.woff2","fqdn":"static.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"13.249.8.122","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:07.133Z","timestamp":1781976487133,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Jul 2025 00:00:00 GMT","end":"Wed, 29 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B1:29:28:04:46:85:C0:F0:4D:6F:D6:B9:CC:AA:FF:BE:E9:8C:8E:D4","sha256":"F6:AE:7B:84:78:6D:24:4A:0F:93:96:0C:8B:78:F7:AF:26:0C:5C:AB:8E:7A:05:74:F4:C4:6C:E3:1E:20:86:4A"}}},"request":{"raw":"GET /assets/v2/fonts/ambit-semibold.woff2 HTTP/1.1\r\nHost: static.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: binary/octet-stream\r\ncontent-length: 33700\r\naccess-control-allow-origin: *\r\nlast-modified: Wed, 31 Jul 2024 14:37:18 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\naccess-control-expose-headers: Date\r\nvia: 1.1 9b70adf7c49e859435e96eb0fc35c216.cloudfront.net (CloudFront), 1.1 118086882d9f17e10877e0653a055586.cloudfront.net (CloudFront)\r\ndate: Sat, 20 Jun 2026 16:34:56 GMT\r\ncache-control: max-age=7200\r\netag: \"f8b21c7784ff981fd148182f5b2efbf5\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: FRA60-P9, ARN53-P3\r\nx-amz-cf-id: UDJ9tRKr_22QAKsTTIAdf_6p2Y1Qq1-BoARXxGPPo_maY8Qdwb7QmA==\r\nage: 3207\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":33700,"size_decoded":34400,"mime_type":"binary/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 33700, version 1.1441","md5":"f8b21c7784ff981fd148182f5b2efbf5","sha1":"b3c0507a25ead3079fd60d20f288f6cfb5e9276a","sha256":"83c005d8582cda59e736347d8c34a95ed849ac449ebee68f208c98ccce51094c","sha512":"841dd1f20836c093d67b33e30dc62d76b3ae795cc9eb533c7c6977fb2961485f1f2028c462a32138af87e37b710b8b293311b11221754bea2e5c02e721d0efd9","ssdeep":"768:qwvJtQTLudCyrvAeen+hwhoUO/27IGrri/abRE/aDUio:qwvsfuMyrYKbXgri/abREvb","tlshash":"fbe2f1f7c9a05b2ac72964627f7fd5294109b8138a60e90ff8f2cdcf5d166ad4098e81","first_seen":"2023-05-08T13:26:09Z","last_seen":"2026-06-20T17:28:47.92238Z","times_seen":82,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/shared/mwa/assets/v2/icons/tui-light/oncoming-taxi.svg","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:07.375Z","timestamp":1781976487375,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /shared/mwa/assets/v2/icons/tui-light/oncoming-taxi.svg HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mwa.tui.com/browse/mwa/workflow-ssg-prod/workflow-pages-home/assets/workflow-pages-home_26.25.1/home/index.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T20:29:48.587722Z","times_seen":16589263,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tui.com/assets/v2/logos/app/apple-appstore-de.svg","fqdn":"static.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"13.249.8.122","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:05.353Z","timestamp":1781976485353,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Jul 2025 00:00:00 GMT","end":"Wed, 29 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B1:29:28:04:46:85:C0:F0:4D:6F:D6:B9:CC:AA:FF:BE:E9:8C:8E:D4","sha256":"F6:AE:7B:84:78:6D:24:4A:0F:93:96:0C:8B:78:F7:AF:26:0C:5C:AB:8E:7A:05:74:F4:C4:6C:E3:1E:20:86:4A"}}},"request":{"raw":"GET /assets/v2/logos/app/apple-appstore-de.svg HTTP/1.1\r\nHost: static.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nCookie: _vis_opt_exp_de24_combi=2; tui-coupon-wallet-enabled=true; _vis_opt_exp_P1973_combi=A; ecid=66966107634980792017217711389285007288; kndctr_41E27DA552A6473A0A490D4D_AdobeOrg_cluster=irl1; ak_bmsc=B67A7B246DD506FF96868E790DEC7588~000000000000000000000000000000~YAAQnQplX5EeC8yeAQAA/0oT5gDOPuTt/btrBxkEvsjZCv5iCpXn0dXIvmJwn7xqmMAnNIe0nO0FY39Vbl5SjyGMJEVaR4G9q1/l42ck/a/EQOacJ4igK59UwcumJR8QpmYiwT+CVeC/eOnPjNwPUHExTtozITtaYleYz3l9P1pItpV47INsmiRsPueOOgIFv4Y8oYKv34ceEccDtGFc3g6P6Mp+trxKpDZd6yc0HigFXe28HQYG7avaeFj+ik5m0MFEhAiuBqS6SvCL4vy3reXusZ6jxYvIWHdT6PwPnlhHpHp22JmnVdOr/CIQP/7fu/r0sRyFMPvi8dmL3H+VaoMn7Zyfl7wI1msqdFED3mRYtf6+m0f5fS2F1TrGMkXqOaIHTqRL2Aw2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 31 Jul 2024 14:37:24 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: br\r\nvia: 1.1 a6ec089aa02839578670b49d128782c2.cloudfront.net (CloudFront), 1.1 118086882d9f17e10877e0653a055586.cloudfront.net (CloudFront)\r\ndate: Sat, 20 Jun 2026 16:22:31 GMT\r\ncache-control: max-age=7200\r\netag: W/\"28c42bc4cc636aad6a525cec43ebb049\"\r\nvary: Accept-Encoding,Origin\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: FRA60-P9, ARN53-P3\r\nx-amz-cf-id: bGHd-eq_139Ho5mjKaWkMB9Qzp6TJQD8meupDtoH1sVmo6YXQa5oCA==\r\nage: 4026\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":14711,"size_decoded":6692,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"28c42bc4cc636aad6a525cec43ebb049","sha1":"bdfef5e28d9fa58b84669ac627b04c5eace8098b","sha256":"210aa49c525e15f941780536a9aeb13e4f4338c1a66be3252b99aee05608dfb8","sha512":"2cf5d5a35b0bc476f09018d0e41273f3e45cc9d443de4abfda9ed82c25ab2d3567155084d098e8afc0e0fa8ad9d48d4afc780c1ec3aa99e7f27ff242ce3e25bb","ssdeep":"384:D0bompKUnUNpFzQ02mG2S1bJJBOgt0bEKLs:D0brpKSUNpFzQ0w2IOgt0jI","tlshash":"f16208d91223cef6ee87c6de6d430849385724bab5a0435cccaeda143d66ce40879dd7","first_seen":"2025-09-28T22:43:58.414461Z","last_seen":"2026-06-20T17:28:47.930971Z","times_seen":14,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":1,"connect":11,"send":0,"wait":11,"receive":0,"ssl":241},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tui.com/assets/v2/fonts/ambit-regular.woff2","fqdn":"static.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"13.249.8.122","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:07.136Z","timestamp":1781976487136,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Jul 2025 00:00:00 GMT","end":"Wed, 29 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B1:29:28:04:46:85:C0:F0:4D:6F:D6:B9:CC:AA:FF:BE:E9:8C:8E:D4","sha256":"F6:AE:7B:84:78:6D:24:4A:0F:93:96:0C:8B:78:F7:AF:26:0C:5C:AB:8E:7A:05:74:F4:C4:6C:E3:1E:20:86:4A"}}},"request":{"raw":"GET /assets/v2/fonts/ambit-regular.woff2 HTTP/1.1\r\nHost: static.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: binary/octet-stream\r\ncontent-length: 31680\r\naccess-control-allow-origin: *\r\nlast-modified: Wed, 31 Jul 2024 14:37:18 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\naccess-control-expose-headers: Date\r\nvia: 1.1 6641a812839e5267ee0880e96b41efc4.cloudfront.net (CloudFront), 1.1 118086882d9f17e10877e0653a055586.cloudfront.net (CloudFront)\r\ndate: Sat, 20 Jun 2026 16:34:56 GMT\r\ncache-control: max-age=7200\r\netag: \"189126b4981a7938826b37f066b2df7b\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: FRA60-P9, ARN53-P3\r\nx-amz-cf-id: LjY_KI00uo4AF-4X96f_NDvU1tPTU9qb_mHaSD4xTyaZQzDAYBkXVg==\r\nage: 4640\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":31680,"size_decoded":32380,"mime_type":"binary/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 31680, version 1.1441","md5":"189126b4981a7938826b37f066b2df7b","sha1":"8375660fe9f574d39ac7dd31205f7cd36617b506","sha256":"3eef8b18fcc9bbd105bd6a7f4f7999f78b84756ca2e8503c3b4cdcff90458826","sha512":"4c7335aaf62b4d4241c5042632642ce7d291b7049dc2fbab4ebd7cc7d634f72bf5fc8604598594e868e68bf88fd8f343a59cab0d5f4677584bb0b2e8cfc7375e","ssdeep":"768:Li8XW7DUE0zYZM+SX7IMGxABewrkDt7Hw5G/6:WnZ0zYWExABhrCQT","tlshash":"7be2f1f1818be0de954841ed8729b97acd25c34b6819f104edbb096492f316d213daf7","first_seen":"2023-05-16T11:44:06Z","last_seen":"2026-06-20T17:28:47.895056Z","times_seen":84,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdns.gigya.com/js/gigya.js?apiKey=4_LWGzxVDlxnaTetL1EDjQ7w","fqdn":"cdns.gigya.com","domain":"gigya.com","tld":"com"},"ip":{"addr":"143.204.238.2","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:07.273Z","timestamp":1781976487273,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn3.gigya.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Thu, 03 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1D:EE:07:E0:1D:28:1F:15:0F:8C:5F:AA:62:30:B2:53:9A:48:FF:C8","sha256":"81:CD:A6:69:9B:80:55:AC:77:D1:1B:73:FE:67:AC:9C:9E:47:39:EC:12:E1:68:B7:2A:57:19:F2:DD:F4:F4:D2"}}},"request":{"raw":"GET /js/gigya.js?apiKey=4_LWGzxVDlxnaTetL1EDjQ7w HTTP/1.1\r\nHost: cdns.gigya.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: CloudFront\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 213113\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nedge-cache-tag: siteid_206115723840,ver_latest\r\nx-sdk-version: latest\r\np3p: CP=\"IDC COR PSA DEV ADM OUR IND ONL\"\r\nx-error-code: 0\r\nx-soa: true, Gator\r\nx-server: gator-us1d-prod-65d94b7f7d-qchwm\r\nx-callid: 019ed65c88d67c01be84c8471a65a9eb\r\nx-robots-tag: none\r\ndate: Sat, 20 Jun 2026 17:15:38 GMT\r\ncache-control: public, s-maxage=3600, max-age=900\r\netag: 091b719b2b07d74a54f216a58e46891c\r\nvary: Accept-Encoding\r\nvia: 1.1 efb457127ee6c499c1028eb8a099d19a.cloudfront.net (CloudFront)\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 748\r\nx-sdk-canary: probability: 0%; roll: 49%; effective version: latest\r\nset-cookie: gig_canary=latest; Secure; HttpOnly; Path=/; Max-Age=600; SameSite=None; Partitioned\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: 5txmognx8o5OL8UN8KOdcv9BimI_61BzBD0vBYaZ6Db1_jdUz6OonQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":557102,"size_decoded":214107,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (63166)","md5":"091b719b2b07d74a54f216a58e46891c","sha1":"c796d652e3f767540f31cf40dde22ba8d3690309","sha256":"df4c353c15d1c96d82fd7695ddbd46cab926bc837963e95b421a1e9a5411c121","sha512":"f276435463f58aeb0e64cb7db93822f1b208e929c9286e82038fb9371f5d7e4568f3765c8f69b3b6aa9cca7d09cebe532d12b925e6d135a6a09e1f72d30792b3","ssdeep":"6144:R+ghjNpfJSDTH1H82HqzFivna3PYf4Wkuu4s:7hjsCaqzFi/a3PEkJ7","tlshash":"d0c4a5d9b6d2b07643a765e8553f230ab23a6958640cc428f665c4d57cb8a4bc233ffc","first_seen":"2026-06-20T17:28:47.931911Z","last_seen":"2026-06-20T17:28:47.931911Z","times_seen":1,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":0,"dns":2,"connect":8,"send":0,"wait":14,"receive":24,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/shared/mwa/assets/v2/icons/tui-light/signpost-directions.svg","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:07.302Z","timestamp":1781976487302,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /shared/mwa/assets/v2/icons/tui-light/signpost-directions.svg HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mwa.tui.com/browse/mwa/workflow-ssg-prod/workflow-pages-home/assets/workflow-pages-home_26.25.1/home/index.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T20:29:48.587722Z","times_seen":16589263,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tui.com/assets/v2/icons/bullet/globe-europe.svg","fqdn":"static.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"13.249.8.122","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.057Z","timestamp":1781976486057,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Jul 2025 00:00:00 GMT","end":"Wed, 29 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B1:29:28:04:46:85:C0:F0:4D:6F:D6:B9:CC:AA:FF:BE:E9:8C:8E:D4","sha256":"F6:AE:7B:84:78:6D:24:4A:0F:93:96:0C:8B:78:F7:AF:26:0C:5C:AB:8E:7A:05:74:F4:C4:6C:E3:1E:20:86:4A"}}},"request":{"raw":"GET /assets/v2/icons/bullet/globe-europe.svg HTTP/1.1\r\nHost: static.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\ncontent-length: 882\r\naccess-control-allow-origin: *\r\nlast-modified: Wed, 31 Jul 2024 14:37:19 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\naccess-control-expose-headers: Date\r\nvia: 1.1 e1af02661708034e962bd39b357a50aa.cloudfront.net (CloudFront), 1.1 118086882d9f17e10877e0653a055586.cloudfront.net (CloudFront)\r\ndate: Sat, 20 Jun 2026 16:06:07 GMT\r\ncache-control: max-age=7200\r\netag: \"ba6d22552937cbb52e77927a0052681a\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: FRA60-P9, ARN53-P3\r\nx-amz-cf-id: bBSM2f7cK5s-BYIfOqBGFS49Ldusp8a6-I0PEvNUI6pK7tMxTqBfpQ==\r\nage: 5096\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":882,"size_decoded":1574,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ba6d22552937cbb52e77927a0052681a","sha1":"81998658832db1e747a579ede093a539088a5707","sha256":"bd4a368c861879473bcb1ae7900aaa838db35edb23dc0ffe93bc8b53a6e414d6","sha512":"d8a4fb9f57276c03cedac6dcd4c220bb307ccbef60f9e26d0e0e0c120d30c9a3eb890b7720fb6c7933ad41f54d8d7d4525f00446a0f51168533a438ce8c8ac0b","ssdeep":"","tlshash":"591123c20700ccdc5a4a9578fe336ee4312f20aa4e6712cc60da68215357ed9e212d64","first_seen":"2025-09-28T22:43:58.503441Z","last_seen":"2026-06-20T17:28:47.932789Z","times_seen":14,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.content.tuigroup.com/adamtui/2026_5/20_13/b2ead9ab-0237-4dea-adf6-b45000df96d7/last-minute-vater-kind-strandWebOriginalCompressed.jpg?i10c=img.resize(width:658);img.crop(width:658,height:370)","fqdn":"cdn.content.tuigroup.com","domain":"tuigroup.com","tld":"com"},"ip":{"addr":"95.101.10.105","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.172Z","timestamp":1781976486172,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.content.tuigroup.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 23 Feb 2026 00:00:00 GMT","end":"Mon, 22 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:A2:A9:E1:36:21:12:70:71:62:D8:9E:CC:C0:F9:EB:9C:0E:5A:B8","sha256":"B9:93:43:16:0C:4D:95:D2:95:92:C2:C7:38:98:8D:C1:23:69:E0:6E:91:8C:9E:98:6E:CB:44:F8:39:7E:96:14"}}},"request":{"raw":"GET /adamtui/2026_5/20_13/b2ead9ab-0237-4dea-adf6-b45000df96d7/last-minute-vater-kind-strandWebOriginalCompressed.jpg?i10c=img.resize(width:658);img.crop(width:658,height:370) HTTP/1.1\r\nHost: cdn.content.tuigroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\netag: \"e4bc62d14a6f1eeb0fcc8330b0b7c3fb\"\r\nlast-modified: Wed, 10 Jun 2026 03:04:25 GMT\r\nserver: Akamai Image Manager\r\ncontent-length: 48973\r\ncontent-type: image/avif\r\ncache-control: private, no-transform, max-age=2592000\r\nexpires: Mon, 20 Jul 2026 17:28:06 GMT\r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\nalt-svc: h3=\":443\"; ma=93600\r\nquic-version: 0x00000001\r\nage: 915820\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48973,"size_decoded":49356,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"482a9e72c784c531325ab956a0c06616","sha1":"c410cda50dd9aab3e14ac1f1494b04f52d8d8ccc","sha256":"9f246c0a7ec0d491fcf3d56bb9986933c4a60ab478b13bba6453949a8cbea1e6","sha512":"103c78e649b41eb074c54d61b69be7d6d7dd05a02c949fcee1946d955c732bff4726445d0944001308fbf405833f9907c0c61ead13e2c7b00a9d7a2043f119ed","ssdeep":"768:+71h7EY9F8pt2UNOefIFAOanVzuQ9zKKdNTKxObZl7Ao9UaS80xpGk8qh0yW:+777d0sDefMJanVTVTXbZl7Ao9x/0LG/","tlshash":"5a23f1bd1670a859bd3ba3fadb1f5e5802fe362a1433c1530881dcdc1fa0976de66462","first_seen":"2026-06-20T17:28:47.933739Z","last_seen":"2026-06-20T17:28:47.933739Z","times_seen":1,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/shared/mwa/assets/v2/fonts/ambit-regular.subset.woff2","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.262Z","timestamp":1781976486262,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /shared/mwa/assets/v2/fonts/ambit-regular.subset.woff2 HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: binary/octet-stream\r\ncontent-length: 15539\r\nx-amzn-requestid: dcebf706-8a7e-4d61-afc2-9a394c5e81b1\r\ncontent-encoding: gzip\r\nx-amzn-remapped-content-length: 15516\r\nx-amz-apigw-id: fOy9nE1UliAFZGA=\r\ntimestamp: Fri, 19 Jun 2026 23:06:50 GMT\r\nx-amzn-trace-id: Root=1-6a35cb89-5f08dfa1677f84b10ed6374b\r\ncache-control: public, max-age=538724\r\nexpires: Fri, 26 Jun 2026 23:06:50 GMT\r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver: TUI Web\r\nvary: Accept-Encoding,Origin\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15516,"size_decoded":16182,"mime_type":"binary/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 15516, version 1.1441","md5":"84e963d8ae0e39b173d215186cf35ce3","sha1":"6e6becee69d442a5c1cb856f8ccdefb5248f30a2","sha256":"aac391f330aa1d14b4080c8bc876f3124176717f34bc2e81102fc61bcb68cfc1","sha512":"1feee69d0f61fdec9d09c4bbcba29d1d16c7a07e146a99148635971a8d6e41a7bfcc9b734b80f5c182e7e577f84b8af478bc9cb2153bf5d5666be83c5da2b0aa","ssdeep":"384:yf4h6DtOSE6rx+RCzVywaYcwK3DzV+gUj0Xa8QtaBTuW6A:6DMSE6rxAC3D6Vij0XagBTutA","tlshash":"0a62d0c1962582b7cf11e982cc9f675dbe8de8dcf21eca7b09031281ea059e1c8855df","first_seen":"2025-09-28T22:43:58.370156Z","last_seen":"2026-06-20T17:28:47.93465Z","times_seen":28,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/shared/mwa/assets/v2/icons/tui-light/chevron-down.svg","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.299Z","timestamp":1781976486299,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /shared/mwa/assets/v2/icons/tui-light/chevron-down.svg HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mwa.tui.com/browse/mwa/workflow-ssg-prod/workflow-pages-home/assets/workflow-pages-home_26.25.1/home/index.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\nx-amzn-requestid: f350d101-df37-45fe-957d-7b0294ecdad3\r\nx-amzn-remapped-content-length: 197\r\nx-amz-apigw-id: fOzLNF_dFiAFT6g=\r\ntimestamp: Fri, 19 Jun 2026 23:08:18 GMT\r\nx-amzn-trace-id: Root=1-6a35cbe0-1a0d09134b6d93b2112c797b\r\ncontent-encoding: gzip\r\ncontent-length: 160\r\ncache-control: public, max-age=538811\r\nexpires: Fri, 26 Jun 2026 23:08:17 GMT\r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver: TUI Web\r\nvary: Accept-Encoding,Origin\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":197,"size_decoded":793,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e18853c764243ac68ad302037afc7eb9","sha1":"834cfa9191b4a4a9b2db9c0e9e8a618f8e9a9d2f","sha256":"dc731507a1daa80b663afadb4ffc0e99ffa284a8356bc015790e76a12dfab231","sha512":"2ee34a8a0ba73cf3da9cd421914bd528ad18f2fdf2a071be24c77e76a8d8acad96c899522f6a74895c00f6ff57deb014205fd7c83bee417b5dbe36c85822b625","ssdeep":"","tlshash":"e5d0125ea36c1c2cf5368660e7753b70516d1152594821bd84b615306259e8db4379f4","first_seen":"2025-09-28T22:43:58.522303Z","last_seen":"2026-06-20T17:28:47.895927Z","times_seen":21,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/shared/mwa/assets/v2/icons/tui-light/world.svg","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.993Z","timestamp":1781976486993,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /shared/mwa/assets/v2/icons/tui-light/world.svg HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mwa.tui.com/browse/mwa/workflow-ssg-prod/workflow-pages-home/assets/workflow-pages-home_26.25.1/home/index.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\nx-amzn-requestid: 5cd6151b-0ed8-477f-bb71-61b58371d20e\r\nx-amzn-remapped-content-length: 471\r\nx-amz-apigw-id: fO7XUHN1liAFm6g=\r\ntimestamp: Sat, 20 Jun 2026 00:04:12 GMT\r\nx-amzn-trace-id: Root=1-6a35d8fb-41a0294e638b8c977c21ade2\r\ncontent-encoding: gzip\r\ncontent-length: 310\r\ncache-control: public, max-age=542164\r\nexpires: Sat, 27 Jun 2026 00:04:11 GMT\r\ndate: Sat, 20 Jun 2026 17:28:07 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver: TUI Web\r\nvary: Accept-Encoding,Origin\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":471,"size_decoded":943,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dc51fea88f07f92b5f4c38b53e85c3ba","sha1":"49bebabef4348b01d603b7c30abf9c389405ea76","sha256":"a0e065e8231dde2872ea765522028189ec864931dcccb6c2cedc630b95ca07ee","sha512":"717d0469c1ffd19d274f81e2d5e5d97454e3824c49315f3c44e064eae44df78c1b3d8eb45f86a8a2ffe63d1ca60c89bff6ada483f87068008ccd499989b40357","ssdeep":"","tlshash":"e9f0d48b8e4c6c8ca325cd31db587670302d2417384d2598907b1f30520679a74674d8","first_seen":"2026-03-29T05:54:31.42504Z","last_seen":"2026-06-20T17:28:47.905434Z","times_seen":3,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/shared/mwa/assets/v2/icons/tui-light/plus-circled.svg","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:07.760Z","timestamp":1781976487760,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /shared/mwa/assets/v2/icons/tui-light/plus-circled.svg HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mwa.tui.com/browse/mwa/workflow-ssg-prod/workflow-pages-home/assets/workflow-pages-home_26.25.1/home/index.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\nx-amzn-requestid: 92227d51-9713-4dfc-bb07-5c9c3219b663\r\nx-amzn-remapped-content-length: 255\r\nx-amz-apigw-id: fOzP0E-bliAFuXg=\r\ntimestamp: Fri, 19 Jun 2026 23:08:47 GMT\r\nx-amzn-trace-id: Root=1-6a35cbfe-7972f9ee1aa26a9c3b7e7470\r\ncontent-encoding: gzip\r\ncontent-length: 202\r\ncache-control: public, max-age=538839\r\nexpires: Fri, 26 Jun 2026 23:08:46 GMT\r\ndate: Sat, 20 Jun 2026 17:28:07 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver: TUI Web\r\nvary: Accept-Encoding,Origin\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/svg+xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T20:29:48.587722Z","times_seen":16589263,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdns.eu1.gigya.com/sdk.config.get?apiKey=3_gqHUXVI8IXKRF51nbhQXeEJZE_7wGeXchfGs7UyV3Y08FFnxj_fxkeBW0nagr8XZ\u0026httpStatusCodes=true\u0026ver=1781976480000","fqdn":"cdns.eu1.gigya.com","domain":"gigya.com","tld":"com"},"ip":{"addr":"143.204.238.2","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cdns.eu1.gigya.com/js/sso.htm?APIKey=3_gqHUXVI8IXKRF51nbhQXeEJZE_7wGeXchfGs7UyV3Y08FFnxj_fxkeBW0nagr8XZ\u0026ssoSegment=\u0026version=latest\u0026build=1930\u0026flavor=base\u0026sourceKey=4_LWGzxVDlxnaTetL1EDjQ7w#m=getToken\u0026d=https%3A%2F%2Fwww.tui.com\u0026callbackID=gig_sso_cb1781976488654_0\u0026sAPIKey=4_LWGzxVDlxnaTetL1EDjQ7w\u0026gig_loggerConfig=%7B%22logLevel%22%3A0%2C%22clientMuteLevel%22%3A0%2C%22logTheme%22%3A1%7D","date":"2026-06-20T17:28:08.849Z","timestamp":1781976488849,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn3.gigya.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Thu, 03 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1D:EE:07:E0:1D:28:1F:15:0F:8C:5F:AA:62:30:B2:53:9A:48:FF:C8","sha256":"81:CD:A6:69:9B:80:55:AC:77:D1:1B:73:FE:67:AC:9C:9E:47:39:EC:12:E1:68:B7:2A:57:19:F2:DD:F4:F4:D2"}}},"request":{"raw":"GET /sdk.config.get?apiKey=3_gqHUXVI8IXKRF51nbhQXeEJZE_7wGeXchfGs7UyV3Y08FFnxj_fxkeBW0nagr8XZ\u0026httpStatusCodes=true\u0026ver=1781976480000 HTTP/1.1\r\nHost: cdns.eu1.gigya.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdns.eu1.gigya.com/js/sso.htm?APIKey=3_gqHUXVI8IXKRF51nbhQXeEJZE_7wGeXchfGs7UyV3Y08FFnxj_fxkeBW0nagr8XZ\u0026ssoSegment=\u0026version=latest\u0026build=1930\u0026flavor=base\u0026sourceKey=4_LWGzxVDlxnaTetL1EDjQ7w\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: gig_canary=latest; gig3pctest=true\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: CloudFront\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 3866\r\nx-amz-cf-pop: ARN53-P4\r\naccess-control-allow-origin: *\r\ncache-control: public, s-maxage=120, max-age=60\r\ncontent-encoding: gzip\r\nedge-cache-tag: siteid_8011391\r\np3p: CP=\"IDC COR PSA DEV ADM OUR IND ONL\"\r\nx-error-code: 0\r\nx-soa: true, Gator\r\nx-server: gator-us1d-prod-65d94b7f7d-fnqc6\r\nx-callid: 019ee6127f347ad084335d357d840403\r\nx-robots-tag: none, none\r\ndate: Sat, 20 Jun 2026 17:27:51 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nvia: 1.1 4d370877aaf92bbc7827e0db032dc51c.cloudfront.net (CloudFront)\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 17\r\nx-sdk-canary: Skipped canary rolling. version 'latest' is specified by gig_canary cookie\r\nx-sdk-version: latest\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-id: j-udr050PfKpHle6wZbNfrKuROXItv81YtGI8eRRRlDHx18AVhI4mg==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":9720,"size_decoded":4730,"mime_type":"text/javascript; charset=utf-8","magic":"JSON text data","md5":"635f2e535d26cc1e730f7a75b5a7c26c","sha1":"3b3fbe5dbeae62d45c8310f42279afc4fdf17011","sha256":"3666e06e165376a02af579f18645fc86745c6f5fe66d3fd80ecce6e27f969838","sha512":"70ac3a65b71fe4a287b23402bf0fbbf2be67ef4198a5978ce2b91933c4b1e3214f836e73d2c5d5180db01a91dc781c0530cc241afddbcf1608b4d48b5ffe5277","ssdeep":"96:WEmlqtu+uCDr4rF5FztLGsvlyAL/VUP3Fg+HXPc5tQBsuz02q/GF1FVbRzLFVbRe:3E+VD+5zPA2/ubvz9z1Tn0T4gUgU0","tlshash":"0b120e37c1250dbe08f4116eaa546983f638637f6200d9afb1bd010e2fb6535b194eec","first_seen":"2026-06-20T17:28:47.935236Z","last_seen":"2026-06-20T17:28:47.935236Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/browse/mwa/workflow-ssg-prod/workflow-pages-home/assets/workflow-pages-home_26.25.1/themes/tui-light/index.css","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:04.935Z","timestamp":1781976484935,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /browse/mwa/workflow-ssg-prod/workflow-pages-home/assets/workflow-pages-home_26.25.1/themes/tui-light/index.css HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\naccess-control-allow-methods: GET, POST, PUT\r\naccess-control-max-age: 0\r\nlast-modified: Mon, 15 Jun 2026 09:23:25 GMT\r\netag: \"6a3af5f9f8d0d034ecae7371ff640a00\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nx-amz-cf-pop: FRA60-P14\r\nx-amz-cf-id: nvPEA_ycYRKv-Hjsm2Wb4d9KlT_ARSmEjYu90x4ut8W5E-ZkgWAP1g==\r\ncontent-encoding: gzip\r\ncontent-length: 4318\r\ncache-control: max-age=600\r\nexpires: Sat, 20 Jun 2026 17:38:05 GMT\r\ndate: Sat, 20 Jun 2026 17:28:05 GMT\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver: TUI Web\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-origin: https://www.tui.com\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":32242,"size_decoded":5038,"mime_type":"text/css","magic":"ASCII text, with very long lines (32242), with no line terminators","md5":"6a3af5f9f8d0d034ecae7371ff640a00","sha1":"18a2a0d8d5425d25f84f33a075a37354708d8067","sha256":"f71e5735bff9e3b9e8a1f043e1e09ef4b16c9856240a82a497c586220c44f08c","sha512":"8ba803c6bbdc8b451b8821498e6289b805811f8b167d25fa9bb8954e8d9b4cb58770d5d580821b4ff0820f200c14fee11b19711fabd8470a584fbbc2d62df173","ssdeep":"384:E7GRCxVRKo+ngQ7YuDaksCcERvJLh2JY6pvK6YrPF:E7GRCxVRKo+nR7YuDaksCcEfhyYrPF","tlshash":"94e2e064f836a0fb3d1b5a3e539bde397349b810bb192a50bb4aa4c435e31f711c6b05","first_seen":"2026-06-20T17:28:47.936079Z","last_seen":"2026-06-20T17:28:47.936079Z","times_seen":1,"resource_available":false,"data":null}},"time_used":352,"timings":{"blocked":-1,"dns":9,"connect":28,"send":0,"wait":68,"receive":0,"ssl":245},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.content.tuigroup.com/adamtui/2025_12/3_14/79b054c4-1f8a-4dea-ad95-b3a800edd42a/tuerkei-tuerkische-riviera-wasserfall.jpeg?i10c=img.resize(width:658);img.crop(width:658,height:370)","fqdn":"cdn.content.tuigroup.com","domain":"tuigroup.com","tld":"com"},"ip":{"addr":"95.101.10.105","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.193Z","timestamp":1781976486193,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.content.tuigroup.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 23 Feb 2026 00:00:00 GMT","end":"Mon, 22 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:A2:A9:E1:36:21:12:70:71:62:D8:9E:CC:C0:F9:EB:9C:0E:5A:B8","sha256":"B9:93:43:16:0C:4D:95:D2:95:92:C2:C7:38:98:8D:C1:23:69:E0:6E:91:8C:9E:98:6E:CB:44:F8:39:7E:96:14"}}},"request":{"raw":"GET /adamtui/2025_12/3_14/79b054c4-1f8a-4dea-ad95-b3a800edd42a/tuerkei-tuerkische-riviera-wasserfall.jpeg?i10c=img.resize(width:658);img.crop(width:658,height:370) HTTP/1.1\r\nHost: cdn.content.tuigroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\netag: \"f563ac6e5560cf6c94259812d58246fb\"\r\nlast-modified: Mon, 18 May 2026 14:13:43 GMT\r\nserver: Akamai Image Manager\r\ncontent-length: 92972\r\ncontent-type: image/webp\r\ncache-control: private, no-transform, max-age=2592000\r\nexpires: Mon, 20 Jul 2026 17:28:06 GMT\r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\nalt-svc: h3=\":443\"; ma=93600\r\nquic-version: 0x00000001\r\nage: 530056\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":92972,"size_decoded":93355,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 658x370, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e68e91c106976f2b060fe688a127f4b2","sha1":"0634d806ee126e5bc93c3e77b7e7acaea351fcaa","sha256":"0a94232e82ac28b402cf66c5757931d27a850c623e087737cd00c528423a124a","sha512":"86557dc20fa3907843d25395c953cc2d717806ac8361bfab134f941b44a7ccc503202101391f9af03d975ebc892861abb7303e067fd882774abc3f1a73956b08","ssdeep":"1536:dVMZEKMzHJjijxVakYA6apsxB/UwNrSkMH3j7AhFdxaoUR517Dz1NA0VDAuP8VVW:djzpeNAHPNrgTS8oUh7DnVVsQqVYK8","tlshash":"a89312a047de5958aebb914dbb4f68c7096703e8fb2273136d827627a20ec65c0391d7","first_seen":"2026-06-20T17:28:47.937039Z","last_seen":"2026-06-20T17:28:47.937039Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/shared/mwa/assets/v2/icons/tui-light/oncoming-taxi.svg","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.664Z","timestamp":1781976486664,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /shared/mwa/assets/v2/icons/tui-light/oncoming-taxi.svg HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mwa.tui.com/browse/mwa/workflow-ssg-prod/workflow-pages-home/assets/workflow-pages-home_26.25.1/home/index.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\nx-amzn-requestid: 1df61f6b-60c8-41e7-aba9-75474ef1fc00\r\nx-amzn-remapped-content-length: 392\r\nx-amz-apigw-id: fOywBHxPliAFuSw=\r\ntimestamp: Fri, 19 Jun 2026 23:05:23 GMT\r\nx-amzn-trace-id: Root=1-6a35cb32-574bef1e07190b036226c319\r\ncontent-encoding: gzip\r\ncontent-length: 277\r\ncache-control: public, max-age=538636\r\nexpires: Fri, 26 Jun 2026 23:05:22 GMT\r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver: TUI Web\r\nvary: Accept-Encoding,Origin\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":392,"size_decoded":910,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3f4ebdfec9bbbe777794969d4e8ccc53","sha1":"ff0f57b10634928b7d1ca120306f8686a03c7b2a","sha256":"e6900db3b8ffb164885fb2feb9cdd75cbad674c77e30fa045b69e9856cd19feb","sha512":"6354a8f14325ba5fb7b6bb2a3e17426f893fdbde4c0deaeb9209eeef5a794f61ba5a6845cbb206616c22e4e46102fbb347a8168f2a04eb1c526b8c49e25f6bff","ssdeep":"","tlshash":"89e06811eb4c4c3ca51a46f0db2c7b30252e12b2648c1964a0bd22b0a20e70eec77ae4","first_seen":"2026-03-29T05:54:31.326573Z","last_seen":"2026-06-20T17:28:47.937893Z","times_seen":3,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/shared/mwa/assets/v2/icons/tui-light/heart.svg","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:07.056Z","timestamp":1781976487056,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /shared/mwa/assets/v2/icons/tui-light/heart.svg HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\nx-amzn-requestid: bb4f2068-b33c-45f2-a5ef-fcff874af2a7\r\nx-amzn-remapped-content-length: 275\r\nx-amz-apigw-id: fOyvaEXUliAFfjQ=\r\ntimestamp: Fri, 19 Jun 2026 23:05:20 GMT\r\nx-amzn-trace-id: Root=1-6a35cb2f-0867fad1540f5c655cc03fe3\r\ncontent-encoding: gzip\r\ncontent-length: 193\r\ncache-control: public, max-age=538632\r\nexpires: Fri, 26 Jun 2026 23:05:19 GMT\r\ndate: Sat, 20 Jun 2026 17:28:07 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver: TUI Web\r\nvary: Accept-Encoding,Origin\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":275,"size_decoded":826,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c42799ced4aff9e7348c54ef428c40c5","sha1":"ef21e0936631fa67637d76d1114517e82d7aa399","sha256":"4effe6cc00f9f1dacf93f3a089ba7fca9e7e35d0d264145d6420ce5611541836","sha512":"92d242fa2aa599dc80d629bc6134a1bb74c69a5fac60471d46506aa0cbf260d3710f1d4f22e4f95d483312344d8cba26402ffa8513102ac5a8d3011dfbd77383","ssdeep":"","tlshash":"74d05bbe834c0d3cbb378660e7343a71a21e106d194c517e887f5174125a959a527de5","first_seen":"2025-09-28T22:43:58.335702Z","last_seen":"2026-06-20T17:28:47.938728Z","times_seen":21,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tui.com/assets/v2/fonts/tuitypelight-bold.woff2","fqdn":"static.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"13.249.8.122","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:07.126Z","timestamp":1781976487126,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Jul 2025 00:00:00 GMT","end":"Wed, 29 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B1:29:28:04:46:85:C0:F0:4D:6F:D6:B9:CC:AA:FF:BE:E9:8C:8E:D4","sha256":"F6:AE:7B:84:78:6D:24:4A:0F:93:96:0C:8B:78:F7:AF:26:0C:5C:AB:8E:7A:05:74:F4:C4:6C:E3:1E:20:86:4A"}}},"request":{"raw":"GET /assets/v2/fonts/tuitypelight-bold.woff2 HTTP/1.1\r\nHost: static.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: binary/octet-stream\r\ncontent-length: 32884\r\naccess-control-allow-origin: *\r\nlast-modified: Wed, 31 Jul 2024 14:37:19 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\naccess-control-expose-headers: Date\r\nvia: 1.1 c8faaa7d637dd73af72e1355a476ffc2.cloudfront.net (CloudFront), 1.1 118086882d9f17e10877e0653a055586.cloudfront.net (CloudFront)\r\ndate: Sat, 20 Jun 2026 16:44:15 GMT\r\ncache-control: max-age=7200\r\netag: \"04e8b36eb6ce1f110923994f591deca9\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: FRA60-P9, ARN53-P3\r\nx-amz-cf-id: lANP8gmHK9vMkCrEV5AH-tpZhEDZtxpB1Sb9yhVWMWDanKUxK9F26Q==\r\nage: 3809\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":32884,"size_decoded":33584,"mime_type":"binary/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 32884, version 2.6619","md5":"04e8b36eb6ce1f110923994f591deca9","sha1":"ae3e99ff690360d220aabc77ffb0eac08b2694d1","sha256":"6cd8a4fd92abdfdb4a81e7fdbb944754ccc9411d9c8ed52ad338c51bb0d999ac","sha512":"7dcece938e0defc887699d0e34e93d90bd410a863efcf099b9c984b5df16061d1cb98d6a2e021c2249f77d4fcb6b2ac736427bd0804dfbff773f4973a7a626bb","ssdeep":"768:RU1kJx0Gwdyo5r1sy2kQFUglqyrvKV5vvUn:GCbxwddrOfkwUBVg","tlshash":"4ae2f1cff694de3cc41524468fbebc24489eb4762b34f597beda280dc0c672a5ad6244","first_seen":"2023-05-08T13:26:09Z","last_seen":"2026-06-20T17:28:47.900173Z","times_seen":39,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tui.com/assets/v2/icons/tui-light/chevron-down.svg","fqdn":"static.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"13.249.8.122","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:05.927Z","timestamp":1781976485927,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Jul 2025 00:00:00 GMT","end":"Wed, 29 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B1:29:28:04:46:85:C0:F0:4D:6F:D6:B9:CC:AA:FF:BE:E9:8C:8E:D4","sha256":"F6:AE:7B:84:78:6D:24:4A:0F:93:96:0C:8B:78:F7:AF:26:0C:5C:AB:8E:7A:05:74:F4:C4:6C:E3:1E:20:86:4A"}}},"request":{"raw":"GET /assets/v2/icons/tui-light/chevron-down.svg HTTP/1.1\r\nHost: static.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\ncontent-length: 197\r\naccess-control-allow-origin: *\r\nlast-modified: Wed, 31 Jul 2024 14:37:20 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\naccess-control-expose-headers: Date\r\nvia: 1.1 3677df2c828d68a6a84555cd8a40cf50.cloudfront.net (CloudFront), 1.1 118086882d9f17e10877e0653a055586.cloudfront.net (CloudFront)\r\ndate: Sat, 20 Jun 2026 16:34:03 GMT\r\ncache-control: max-age=7200\r\netag: \"6944d48a6e5315f957931a887f617e55\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: FRA60-P9, ARN53-P3\r\nx-amz-cf-id: Lr4_RXY-fb6Oj1f5lKR2qR0BtGbIdbOqxjUMKAsGSr5rCwfuGrnTcQ==\r\nage: 3285\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":197,"size_decoded":889,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6944d48a6e5315f957931a887f617e55","sha1":"e1fb20b2bca7012650729ac2833eed9dae06fa4b","sha256":"398bdd7646ea91ef9f9bc0129142b7c4c7adf560f32a6569c514a9313c752fee","sha512":"6a0a454f8cfdfe91d92d585f89be4136c3b6faec2a1953555333e54ad16df78452235dee2f52e779c4e901ef4d6ee455ece8e039e3fb081dfe2ceab84ce2544a","ssdeep":"","tlshash":"7bd0125e53281c2cb53a4a60e7753b70116d21525948317d84b214306259e8d7437af4","first_seen":"2025-06-28T16:10:42.69857Z","last_seen":"2026-06-20T17:28:47.939236Z","times_seen":25,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloud.tui.com/cdn/footer/v2/themes/tui-light/index.css","fqdn":"cloud.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.008Z","timestamp":1781976486008,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloud.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Tue, 16 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"7D:E5:28:0F:B6:E6:8A:A2:A4:FC:71:45:EB:89:19:59:DA:00:B6:3C","sha256":"31:B4:F1:6F:B9:43:CE:E2:95:A8:98:0A:8A:2C:53:14:B6:A1:C8:DB:55:EC:BD:2F:D1:88:82:44:35:BB:15:38"}}},"request":{"raw":"GET /cdn/footer/v2/themes/tui-light/index.css HTTP/1.1\r\nHost: cloud.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nCookie: _vis_opt_exp_de24_combi=2; tui-coupon-wallet-enabled=true; _vis_opt_exp_P1973_combi=A; ecid=66966107634980792017217711389285007288; kndctr_41E27DA552A6473A0A490D4D_AdobeOrg_cluster=irl1; ak_bmsc=B67A7B246DD506FF96868E790DEC7588~000000000000000000000000000000~YAAQnQplX5EeC8yeAQAA/0oT5gDOPuTt/btrBxkEvsjZCv5iCpXn0dXIvmJwn7xqmMAnNIe0nO0FY39Vbl5SjyGMJEVaR4G9q1/l42ck/a/EQOacJ4igK59UwcumJR8QpmYiwT+CVeC/eOnPjNwPUHExTtozITtaYleYz3l9P1pItpV47INsmiRsPueOOgIFv4Y8oYKv34ceEccDtGFc3g6P6Mp+trxKpDZd6yc0HigFXe28HQYG7avaeFj+ik5m0MFEhAiuBqS6SvCL4vy3reXusZ6jxYvIWHdT6PwPnlhHpHp22JmnVdOr/CIQP/7fu/r0sRyFMPvi8dmL3H+VaoMn7Zyfl7wI1msqdFED3mRYtf6+m0f5fS2F1TrGMkXqOaIHTqRL2Aw2\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\nlast-modified: Thu, 12 Feb 2026 10:19:59 GMT\r\netag: \"869d15634bbf3ad7e4e70a45f3793a8a\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-amz-cf-pop: FRA50-P2\r\nx-amz-cf-id: G9FnwVMrAya4Zy0CbVYTXqVaPHc9sVojEyTbfF0NoHeitqUP0MaP5A==\r\ncontent-encoding: gzip\r\ncontent-length: 4417\r\ncache-control: max-age=1\r\nexpires: Sat, 20 Jun 2026 17:28:07 GMT\r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\nvary: Accept-Encoding\r\nage: 599\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":34579,"size_decoded":4951,"mime_type":"text/css","magic":"ASCII text, with very long lines (459)","md5":"869d15634bbf3ad7e4e70a45f3793a8a","sha1":"a36f11c0ee3c6b883c93fa74076031f6a7d963b4","sha256":"5f220f3a88c8615caf2ceaa217171f9e70b922a1c81a1398a468d9066372373e","sha512":"6075cfaa99602b9d0bed28865b38f28d952f94464b35aee513ac154ac9e7733d1292619e4a48e27ee9d951671605e1351c501e722b3b59e012f8a635c9813535","ssdeep":"192:jb/D5+fl/cmbKbMtjbHbMtjbv4155xY5s5y5H5x56UE5R/vkTWoRX5D5tj5p5/5a:+ce59lAky7Qai4KGamhaCRBk","tlshash":"b5f2c150f421b0ba392f4a3f730bde29737c74516b15aa58beca54c40daa3f721c6b46","first_seen":"2026-03-28T02:59:34.618867Z","last_seen":"2026-06-20T17:28:47.940117Z","times_seen":7,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.content.tuigroup.com/adamtui/2026_2/25_8/4186db5f-f293-4b8d-b434-b3fc008b44ba/tuerkei-strand-in-belek-mit-sonnenschirmen.jpeg?i10c=img.resize(width:658);img.crop(width:658,height:370)","fqdn":"cdn.content.tuigroup.com","domain":"tuigroup.com","tld":"com"},"ip":{"addr":"95.101.10.105","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.187Z","timestamp":1781976486187,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.content.tuigroup.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 23 Feb 2026 00:00:00 GMT","end":"Mon, 22 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:A2:A9:E1:36:21:12:70:71:62:D8:9E:CC:C0:F9:EB:9C:0E:5A:B8","sha256":"B9:93:43:16:0C:4D:95:D2:95:92:C2:C7:38:98:8D:C1:23:69:E0:6E:91:8C:9E:98:6E:CB:44:F8:39:7E:96:14"}}},"request":{"raw":"GET /adamtui/2026_2/25_8/4186db5f-f293-4b8d-b434-b3fc008b44ba/tuerkei-strand-in-belek-mit-sonnenschirmen.jpeg?i10c=img.resize(width:658);img.crop(width:658,height:370) HTTP/1.1\r\nHost: cdn.content.tuigroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\netag: \"d3673eb4573d5cf52d4ed9b2f203af8c\"\r\nlast-modified: Wed, 25 Feb 2026 16:02:47 GMT\r\nserver: Akamai Image Manager\r\ncontent-length: 77872\r\ncontent-type: image/webp\r\ncache-control: private, no-transform, max-age=2592000\r\nexpires: Mon, 20 Jul 2026 17:28:06 GMT\r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\nalt-svc: h3=\":443\"; ma=93600\r\nquic-version: 0x00000001\r\nage: 427906\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":77872,"size_decoded":78255,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 658x370, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f679ad932528270782afa9e6c8465f30","sha1":"414673dfd6fa5c2073587e199b277092f58cae44","sha256":"13f6b6ce291cf21abae75c22e5e339cc6c8a461369f10f22869a03b0712e498e","sha512":"5c99ad68b1fe8e95caf3a626bf684160cb138144a4b3c6eba852e6ac3d6dffd9d9253dbdf5b155f6214ac473bdcf1a6bd45310dd96e45dfa0d12acfbb01a7c85","ssdeep":"1536:HSSPQhA1BNBnmJ/WkA5kZPWkoA/1N42/O0FxohTxc23:yNhoBNBmJuWeuNN4f0FKZ1","tlshash":"a87302fd5325cfff6922319230a77afd170891721fbeac881d994ac9805211c3dd3a2a","first_seen":"2026-06-20T17:28:47.941084Z","last_seen":"2026-06-20T17:28:47.941084Z","times_seen":1,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloud.tui.com/osp/ao/ui/nordic-search-panel/current/nordic-search-panel.esm.js","fqdn":"cloud.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.184Z","timestamp":1781976486184,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloud.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Tue, 16 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"7D:E5:28:0F:B6:E6:8A:A2:A4:FC:71:45:EB:89:19:59:DA:00:B6:3C","sha256":"31:B4:F1:6F:B9:43:CE:E2:95:A8:98:0A:8A:2C:53:14:B6:A1:C8:DB:55:EC:BD:2F:D1:88:82:44:35:BB:15:38"}}},"request":{"raw":"GET /osp/ao/ui/nordic-search-panel/current/nordic-search-panel.esm.js HTTP/1.1\r\nHost: cloud.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-expose-headers: Date\r\naccess-control-max-age: 3600\r\nlast-modified: Thu, 28 May 2026 06:23:31 GMT\r\ncontent-encoding: gzip\r\nx-amz-server-side-encryption: AES256\r\nserver: AmazonS3\r\netag: W/\"67e2d35785fc9ec1a929d36bf0db4003\"\r\nx-amz-cf-pop: FRA56-P6\r\nx-amz-cf-id: d8OC5cbBTnwt79UwYRuliUdqa6KH912tqOstTiMJfo1_woUZ9hq-2Q==\r\ncontent-length: 1850\r\ncache-control: public, max-age=300\r\nexpires: Sat, 20 Jun 2026 17:33:06 GMT\r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\nvary: Accept-Encoding\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":5138,"size_decoded":2481,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (5051)","md5":"67e2d35785fc9ec1a929d36bf0db4003","sha1":"08204b590acdd1a3ffa3f2ddc262f6509d515946","sha256":"56f34038cf9a1be4acdc23faf0aae7f7d7cc7d72edef999892478ee47823a868","sha512":"cf02824af1c82b39914504445f9dcce4ea1e6d701eb1941265a044b27c0a8d446c58a657b23f250f8737d648b8ab028e062205e8dfab57bc8dc7b0b4bf5c9696","ssdeep":"96:Q5uyrFUxIpYNN124qEi96kKanE/waaTIjjpF+AWZ5qzGSz9ILIDuQgfq5Ht4tNrz:Q5uCKxIEvbiYkKantaa8jjeAaqdz9eFv","tlshash":"bab154e7d8be04f377ff40ffa9b4bed48d06462066019541aae0d19628e9f8f3166235","first_seen":"2026-06-06T12:22:18.125143Z","last_seen":"2026-06-20T17:28:47.941932Z","times_seen":2,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/shared/mwa/assets/v2/fonts/ambit-bold.subset.woff2","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.258Z","timestamp":1781976486258,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /shared/mwa/assets/v2/fonts/ambit-bold.subset.woff2 HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: binary/octet-stream\r\ncontent-length: 16728\r\nx-amzn-requestid: 56374c18-574d-410f-b7a1-30bd9f5e068a\r\ncontent-encoding: gzip\r\nx-amzn-remapped-content-length: 16700\r\nx-amz-apigw-id: fOyvQF0zFiAFT6g=\r\ntimestamp: Fri, 19 Jun 2026 23:05:19 GMT\r\nx-amzn-trace-id: Root=1-6a35cb2e-673389aa1fc247f75879ee4a\r\ncache-control: public, max-age=538632\r\nexpires: Fri, 26 Jun 2026 23:05:18 GMT\r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver: TUI Web\r\nvary: Accept-Encoding,Origin\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16700,"size_decoded":17371,"mime_type":"binary/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 16700, version 1.1441","md5":"6d79f9f05327cc998229d9f08e64f6d4","sha1":"0b9e9c2cae3da7ed4deeb7f87933f9255a3fd87e","sha256":"8f60e4ba98fe0910ef396b161d01073c9ce5c2f26421aba95bc611c7ae16a417","sha512":"0c89183d873d15f3ea705faf86478eb7d34eac4c11583f45e6c86387f94f9897ff24a6742f03344606560eaa698d8ee1153e38b8e95d2d03eae98657575b5049","ssdeep":"384:gW8QMNoV4Tr//xOo610IWnCy11e6hyqGTdBtgVywW4n1r:f8Q8rr/p610IWCUevvtgVywNn1r","tlshash":"d372e12ccbd866adfd614e092ffb3945518a43b78c0655207805e7acca0afa4f910c2b","first_seen":"2025-09-28T22:43:58.346844Z","last_seen":"2026-06-20T17:28:47.914325Z","times_seen":28,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tui.com/assets/v2/icons/tui-light/chevron-updown.svg","fqdn":"static.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"13.249.8.122","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:07.279Z","timestamp":1781976487279,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Jul 2025 00:00:00 GMT","end":"Wed, 29 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B1:29:28:04:46:85:C0:F0:4D:6F:D6:B9:CC:AA:FF:BE:E9:8C:8E:D4","sha256":"F6:AE:7B:84:78:6D:24:4A:0F:93:96:0C:8B:78:F7:AF:26:0C:5C:AB:8E:7A:05:74:F4:C4:6C:E3:1E:20:86:4A"}}},"request":{"raw":"GET /assets/v2/icons/tui-light/chevron-updown.svg HTTP/1.1\r\nHost: static.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\ncontent-length: 209\r\naccess-control-allow-origin: *\r\nlast-modified: Wed, 31 Jul 2024 14:37:20 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\naccess-control-expose-headers: Date\r\nvia: 1.1 ccd3e547bd5d86bbfbaca15b4307ce70.cloudfront.net (CloudFront), 1.1 118086882d9f17e10877e0653a055586.cloudfront.net (CloudFront)\r\ndate: Sat, 20 Jun 2026 17:22:44 GMT\r\ncache-control: max-age=7200\r\netag: \"8f8fb6f63f069243aa7b01643a850932\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: FRA60-P9, ARN53-P3\r\nx-amz-cf-id: OVFALCeQKJ1dEVtRVbEvOXLAX5Hq2eO0KF2xA6l6kZ_UkiW7OMB6DA==\r\nage: 793\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":209,"size_decoded":900,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8f8fb6f63f069243aa7b01643a850932","sha1":"ad8acf436f3196b959abaa3d038b7cdfd6955837","sha256":"898d0c13d715ab6505cbc18d06d6c8f006f44017587a7271eeece48c5ce2669a","sha512":"f5142df245deee8af516cc9a9e098f1b25863b3dcba3350d9210322ae5a678c3b6251219b8a1bdb1c9b962260b4dd090010486486f10a6d3756d8455f889246f","ssdeep":"","tlshash":"add0c98d82180c3cb5369a60db753b70606920535648256d84b302356255a8d7437af8","first_seen":"2026-03-28T02:59:34.662994Z","last_seen":"2026-06-20T17:28:47.942801Z","times_seen":3,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/shared/mwa/assets/v2/icons/tui-light/world.svg","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:07.368Z","timestamp":1781976487368,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /shared/mwa/assets/v2/icons/tui-light/world.svg HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mwa.tui.com/browse/mwa/workflow-ssg-prod/workflow-pages-home/assets/workflow-pages-home_26.25.1/home/index.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T20:29:48.587722Z","times_seen":16589263,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/shared/mwa/assets/v2/fonts/tuitypelight-bold.subset.woff2","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:05.900Z","timestamp":1781976485900,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /shared/mwa/assets/v2/fonts/tuitypelight-bold.subset.woff2 HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mwa.tui.com/browse/mwa/workflow-ssg-prod/workflow-pages-home/assets/workflow-pages-home_26.25.1/themes/tui-light/index.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: binary/octet-stream\r\nx-amzn-requestid: 3a15000f-f9fe-4b59-89e6-93e7a5f1d476\r\nx-amzn-remapped-content-length: 18360\r\nx-amz-apigw-id: fOyvWEF7FiAFuXg=\r\ntimestamp: Fri, 19 Jun 2026 23:05:19 GMT\r\nx-amzn-trace-id: Root=1-6a35cb2e-359d1562128aa7302e10ac77\r\ncache-control: public, max-age=538633\r\nexpires: Fri, 26 Jun 2026 23:05:18 GMT\r\ndate: Sat, 20 Jun 2026 17:28:05 GMT\r\ncontent-length: 18360\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver: TUI Web\r\nvary: Accept-Encoding,Origin\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18360,"size_decoded":18973,"mime_type":"binary/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 18360, version 2.6619","md5":"84aa00ac3a3bc6a2d26b97ae743d5010","sha1":"683aa597662bf5040158669de588d7972f276d8c","sha256":"12a642318c3bf80afeba913f3510b17a0360882c78180316498e3faa2babc221","sha512":"ea5e6c1760473d2f75887d4db5665abf1c0231aa1f01d2e7a4918a27cf72a9694058ffc637322e8f6a5dfd257ba8830470da052ece8ef9be162156a3b921f46a","ssdeep":"384:q2dCUKfQrdnfP7DNP9wocR7arMzC9KGyxIm1ViFyXFtg1:BkQdPF9E2Tat18FyVm1","tlshash":"a982e101694a3542df4d92b8ba9b9cb529c7c05523ca25e2184ceb386c3991f0993f5e","first_seen":"2025-06-28T16:10:42.720413Z","last_seen":"2026-06-20T17:28:47.926264Z","times_seen":30,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/shared/mwa/assets/v2/fonts/ambit-regular.subset.woff2","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.272Z","timestamp":1781976486272,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /shared/mwa/assets/v2/fonts/ambit-regular.subset.woff2 HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: binary/octet-stream\r\ncontent-length: 15539\r\nx-amzn-requestid: dcebf706-8a7e-4d61-afc2-9a394c5e81b1\r\ncontent-encoding: gzip\r\nx-amzn-remapped-content-length: 15516\r\nx-amz-apigw-id: fOy9nE1UliAFZGA=\r\ntimestamp: Fri, 19 Jun 2026 23:06:50 GMT\r\nx-amzn-trace-id: Root=1-6a35cb89-5f08dfa1677f84b10ed6374b\r\ncache-control: public, max-age=538724\r\nexpires: Fri, 26 Jun 2026 23:06:50 GMT\r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver: TUI Web\r\nvary: Accept-Encoding,Origin\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15516,"size_decoded":16182,"mime_type":"binary/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 15516, version 1.1441","md5":"84e963d8ae0e39b173d215186cf35ce3","sha1":"6e6becee69d442a5c1cb856f8ccdefb5248f30a2","sha256":"aac391f330aa1d14b4080c8bc876f3124176717f34bc2e81102fc61bcb68cfc1","sha512":"1feee69d0f61fdec9d09c4bbcba29d1d16c7a07e146a99148635971a8d6e41a7bfcc9b734b80f5c182e7e577f84b8af478bc9cb2153bf5d5666be83c5da2b0aa","ssdeep":"384:yf4h6DtOSE6rx+RCzVywaYcwK3DzV+gUj0Xa8QtaBTuW6A:6DMSE6rxAC3D6Vij0XagBTutA","tlshash":"0a62d0c1962582b7cf11e982cc9f675dbe8de8dcf21eca7b09031281ea059e1c8855df","first_seen":"2025-09-28T22:43:58.370156Z","last_seen":"2026-06-20T17:28:47.93465Z","times_seen":28,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/shared/mwa/assets/v2/icons/tui-light/oncoming-camper.svg","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:07.373Z","timestamp":1781976487373,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /shared/mwa/assets/v2/icons/tui-light/oncoming-camper.svg HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mwa.tui.com/browse/mwa/workflow-ssg-prod/workflow-pages-home/assets/workflow-pages-home_26.25.1/home/index.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T20:29:48.587722Z","times_seen":16589263,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tui.com/assets/v2/icons/tui-light/user-chat.svg","fqdn":"static.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"13.249.8.122","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:05.922Z","timestamp":1781976485922,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Jul 2025 00:00:00 GMT","end":"Wed, 29 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B1:29:28:04:46:85:C0:F0:4D:6F:D6:B9:CC:AA:FF:BE:E9:8C:8E:D4","sha256":"F6:AE:7B:84:78:6D:24:4A:0F:93:96:0C:8B:78:F7:AF:26:0C:5C:AB:8E:7A:05:74:F4:C4:6C:E3:1E:20:86:4A"}}},"request":{"raw":"GET /assets/v2/icons/tui-light/user-chat.svg HTTP/1.1\r\nHost: static.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\ncontent-length: 495\r\naccess-control-allow-origin: *\r\nlast-modified: Wed, 31 Jul 2024 14:37:21 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\naccess-control-expose-headers: Date\r\nvia: 1.1 4d37a80c51c1368344134f5bdf1ea92e.cloudfront.net (CloudFront), 1.1 118086882d9f17e10877e0653a055586.cloudfront.net (CloudFront)\r\ndate: Sat, 20 Jun 2026 17:08:57 GMT\r\ncache-control: max-age=7200\r\netag: \"ea4ddc346db8cbd6187964c47781a1c0\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: FRA60-P9, ARN53-P3\r\nx-amz-cf-id: ABfuSJN0-NYbcnp5X-51wqoXJ2pzED1PLFbq6wMcKfq0bqcYh1NKew==\r\nage: 1550\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":495,"size_decoded":1187,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ea4ddc346db8cbd6187964c47781a1c0","sha1":"6624496e375898c47790ac1011a7c127d4610f5a","sha256":"6de38960d70447ba08e200ddc35f02fc6652047df45ea7011c8206b0a504a93b","sha512":"d2fb9c0e00f7e0e22abdb5eb7253b070afd5c3663860a5f7327278c5d72124818a76a9a8ae75b0bbecba941b544b3a4305e2589192aeca653dee83aaf670168b","ssdeep":"","tlshash":"a4f09789aa089c5c390eb2b8df69337528773093c71ca028b4334b24320e9986927ed8","first_seen":"2025-06-29T08:41:34.904188Z","last_seen":"2026-06-20T17:28:47.943593Z","times_seen":17,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.content.tuigroup.com/adamtui/2026_4/14_13/61cac352-697f-4d31-8e1c-b42c00e1012b/frau-sitzt-am-pool.jpeg?i10c=img.resize(width:658);img.crop(width:658,height:370)","fqdn":"cdn.content.tuigroup.com","domain":"tuigroup.com","tld":"com"},"ip":{"addr":"95.101.10.105","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.173Z","timestamp":1781976486173,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.content.tuigroup.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 23 Feb 2026 00:00:00 GMT","end":"Mon, 22 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:A2:A9:E1:36:21:12:70:71:62:D8:9E:CC:C0:F9:EB:9C:0E:5A:B8","sha256":"B9:93:43:16:0C:4D:95:D2:95:92:C2:C7:38:98:8D:C1:23:69:E0:6E:91:8C:9E:98:6E:CB:44:F8:39:7E:96:14"}}},"request":{"raw":"GET /adamtui/2026_4/14_13/61cac352-697f-4d31-8e1c-b42c00e1012b/frau-sitzt-am-pool.jpeg?i10c=img.resize(width:658);img.crop(width:658,height:370) HTTP/1.1\r\nHost: cdn.content.tuigroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\netag: \"74e675db509623b9856808beb615bed9\"\r\nlast-modified: Thu, 18 Jun 2026 05:29:33 GMT\r\nserver: Akamai Image Manager\r\ncontent-length: 61736\r\ncontent-type: image/webp\r\ncache-control: private, no-transform, max-age=2592000\r\nexpires: Mon, 20 Jul 2026 17:28:06 GMT\r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\nalt-svc: h3=\":443\"; ma=93600\r\nquic-version: 0x00000001\r\nage: 215907\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":61736,"size_decoded":62119,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 658x370, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a522d18b239ab5f2e787771086127e30","sha1":"9934f348d1daaf060f218f3dcb2b055c70f680af","sha256":"7809a002192e9afca72f6ffac4cddc93796e91cfe058f8937bf9af03e4971604","sha512":"6c0e28b8637c08ba30a1f4c86b0b86ac5703aa2d337336d741083e83627c9b3b1dd5d52c2cd250549a8f4c72267772ab5539bb563589aaab6ae7014949f43fdb","ssdeep":"1536:l7l6Bqnc801HUEwacZ7VgFjpU+31ymO3hef45pch:l7EB78Q0Zaa8jpUY4mO3h2k+h","tlshash":"27530289ba267d1bf04889c6e93cc953eeccdfc94a95e3214bb1a43e884650318f5f59","first_seen":"2026-06-20T17:28:47.94447Z","last_seen":"2026-06-20T17:28:47.94447Z","times_seen":1,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloud.tui.com/cdn/favorites/current/user-CxAhDbHC.js","fqdn":"cloud.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.437Z","timestamp":1781976486437,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloud.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Tue, 16 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"7D:E5:28:0F:B6:E6:8A:A2:A4:FC:71:45:EB:89:19:59:DA:00:B6:3C","sha256":"31:B4:F1:6F:B9:43:CE:E2:95:A8:98:0A:8A:2C:53:14:B6:A1:C8:DB:55:EC:BD:2F:D1:88:82:44:35:BB:15:38"}}},"request":{"raw":"GET /cdn/favorites/current/user-CxAhDbHC.js HTTP/1.1\r\nHost: cloud.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cloud.tui.com/cdn/favorites/current/tui-favorites-heart.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 11 Feb 2026 08:45:29 GMT\r\netag: \"a5575e721b76504f2da53e6b0e43057b\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-amz-cf-pop: FRA50-P2\r\nx-amz-cf-id: tGqcO2cXNcjFwBpyduEmngV4nn9ADK6hMidKd2o38X4FlVpT5Uh5Ag==\r\ncontent-encoding: gzip\r\ncontent-length: 323\r\ncache-control: max-age=1\r\nexpires: Sat, 20 Jun 2026 17:28:07 GMT\r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\nvary: Accept-Encoding\r\nage: 599\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":455,"size_decoded":863,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (412)","md5":"a5575e721b76504f2da53e6b0e43057b","sha1":"e9d5070d9beeacbe06c34f774ecc8e63ad16b79d","sha256":"5c9cb702ae7054642981b5c3532f2050359a53fb102f63e8d0467c73684a6210","sha512":"abe8ea45c7d00fefc707db3fbf2ac25acd0a6c9ba4c805320022d5ac80db292d5c0adc683e6a66b5d41618cbefabaea754293413cf5dc9eea9aa5ab0b942bd7f","ssdeep":"","tlshash":"fdf0dc8b38e721f5888128bc2197a26be33c5906690e8540d00235241c29de7a195e2e","first_seen":"2026-03-28T02:59:34.601648Z","last_seen":"2026-06-20T17:28:47.945347Z","times_seen":9,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/shared/mwa/assets/v2/icons/tui-light/chevron-circled-down.svg","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.667Z","timestamp":1781976486667,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /shared/mwa/assets/v2/icons/tui-light/chevron-circled-down.svg HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mwa.tui.com/browse/mwa/workflow-ssg-prod/workflow-pages-home/assets/workflow-pages-home_26.25.1/home/index.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\nx-amzn-requestid: bbaa0f12-d9ce-4c40-9d65-586a120ba79a\r\nx-amzn-remapped-content-length: 252\r\nx-amz-apigw-id: fKLbbF2OFiAFemw=\r\ntimestamp: Thu, 18 Jun 2026 13:29:20 GMT\r\nx-amzn-trace-id: Root=1-6a33f2af-39f7cbae547f47094282e6bc\r\ncontent-encoding: gzip\r\ncontent-length: 196\r\ncache-control: public, max-age=417673\r\nexpires: Thu, 25 Jun 2026 13:29:19 GMT\r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver: TUI Web\r\nvary: Accept-Encoding,Origin\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":252,"size_decoded":829,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"910b6af1b8c00b7cd432f925090b4aa7","sha1":"63356e0004a06b9594d7df25a325d10a6d6560f9","sha256":"e5a5f2099bbfea88bcfa1f7d7596653f11e88be3083e9619dd1cec826ee21f36","sha512":"23d853004572d2bbec36c38b211fbb3dc33d46e4100b0c0178f47786f5fad073248e95404e3354a97f0c60c8c74779031e353bd2b380e199ef932c858810568e","ssdeep":"","tlshash":"43d02b0696985c3a103641f497237711103b21111a4aab2ca0600730e10bbe734166e8","first_seen":"2026-03-29T05:54:31.376259Z","last_seen":"2026-06-20T17:28:47.945868Z","times_seen":5,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.cloud.tui.com/search-destination/v2/de/package/TUICOM/giata/selected/giata_200016;giata_133;giata_46;giata_149;giata_127;giata_128;giata_59;giata_135;giata_1031;giata_45","fqdn":"api.cloud.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"63.184.79.191","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.833Z","timestamp":1781976486833,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.cloud.tui.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 31 Mar 2026 00:00:00 GMT","end":"Wed, 14 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4D:1B:CF:1F:A2:F7:54:75:66:1A:59:5D:5D:E3:9C:C5:4D:DA:A8:29","sha256":"19:24:EA:ED:3E:EF:31:9A:A1:7B:3D:65:EE:5D:75:06:99:FE:4F:3F:31:14:A9:3C:67:1F:22:BC:0B:DE:DA:0D"}}},"request":{"raw":"GET /search-destination/v2/de/package/TUICOM/giata/selected/giata_200016;giata_133;giata_46;giata_149;giata_127;giata_128;giata_59;giata_135;giata_1031;giata_45 HTTP/1.1\r\nHost: api.cloud.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.tui.com/\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 24537\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\nx-correlation-id: 1deb9f21-3506-4fdc-b22d-342962be6403\r\netag: W/\"5fd9-bvIhBanDmEM8/qjFqhOe9loXG9o\"\r\napigw-requestid: fRUSIiPNFiAEJ9Q=\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":24537,"size_decoded":24869,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"656fef44cfd51875b6289342b9284e9d","sha1":"6ef22105a9c398433cfea8c5aa139ef65a171bda","sha256":"d03f4a794457ff1348cd112f7f0ce9ff5e3af124a8300cc17d26c91ea1effa17","sha512":"e4f1b9c725563e7de2a68e2492a346e6ba6002745bd0a746ceec054a0b0a608011eada14d5f723a1620618ac79dfddbd593ecc5bdf6c8b1dcc9db45164302a0e","ssdeep":"192:eo1btfFoKaiAbZPjhnwt3KbsfgwS8UiPRLaOfVHpqD:eohPvRANtnwt6bsfgwSNiPkOfVHpqD","tlshash":"40b2f83da5e598bbe334bbdc22cace27b7f1706e0a03748db0414b92494f75a5d09b16","first_seen":"2026-06-20T17:28:47.946761Z","last_seen":"2026-06-20T17:28:47.946761Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/shared/mwa/assets/v2/icons/tui-light/world.svg","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:07.300Z","timestamp":1781976487300,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /shared/mwa/assets/v2/icons/tui-light/world.svg HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mwa.tui.com/browse/mwa/workflow-ssg-prod/workflow-pages-home/assets/workflow-pages-home_26.25.1/home/index.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\nx-amzn-requestid: 5cd6151b-0ed8-477f-bb71-61b58371d20e\r\nx-amzn-remapped-content-length: 471\r\nx-amz-apigw-id: fO7XUHN1liAFm6g=\r\ntimestamp: Sat, 20 Jun 2026 00:04:12 GMT\r\nx-amzn-trace-id: Root=1-6a35d8fb-41a0294e638b8c977c21ade2\r\ncontent-encoding: gzip\r\ncontent-length: 310\r\ncache-control: public, max-age=542164\r\nexpires: Sat, 27 Jun 2026 00:04:11 GMT\r\ndate: Sat, 20 Jun 2026 17:28:07 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver: TUI Web\r\nvary: Accept-Encoding,Origin\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":471,"size_decoded":943,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dc51fea88f07f92b5f4c38b53e85c3ba","sha1":"49bebabef4348b01d603b7c30abf9c389405ea76","sha256":"a0e065e8231dde2872ea765522028189ec864931dcccb6c2cedc630b95ca07ee","sha512":"717d0469c1ffd19d274f81e2d5e5d97454e3824c49315f3c44e064eae44df78c1b3d8eb45f86a8a2ffe63d1ca60c89bff6ada483f87068008ccd499989b40357","ssdeep":"","tlshash":"e9f0d48b8e4c6c8ca325cd31db587670302d2417384d2598907b1f30520679a74674d8","first_seen":"2026-03-29T05:54:31.42504Z","last_seen":"2026-06-20T17:28:47.905434Z","times_seen":3,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/shared/mwa/assets/v2/icons/tui-light/oncoming-taxi.svg","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:07.754Z","timestamp":1781976487754,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /shared/mwa/assets/v2/icons/tui-light/oncoming-taxi.svg HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mwa.tui.com/browse/mwa/workflow-ssg-prod/workflow-pages-home/assets/workflow-pages-home_26.25.1/home/index.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\nx-amzn-requestid: 1df61f6b-60c8-41e7-aba9-75474ef1fc00\r\nx-amzn-remapped-content-length: 392\r\nx-amz-apigw-id: fOywBHxPliAFuSw=\r\ntimestamp: Fri, 19 Jun 2026 23:05:23 GMT\r\nx-amzn-trace-id: Root=1-6a35cb32-574bef1e07190b036226c319\r\ncontent-encoding: gzip\r\ncontent-length: 277\r\ncache-control: public, max-age=538635\r\nexpires: Fri, 26 Jun 2026 23:05:22 GMT\r\ndate: Sat, 20 Jun 2026 17:28:07 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver: TUI Web\r\nvary: Accept-Encoding,Origin\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/svg+xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T20:29:48.587722Z","times_seen":16589263,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/shared/mwa/assets/v2/fonts/tuitypelight-regular.subset.woff2","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.265Z","timestamp":1781976486265,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /shared/mwa/assets/v2/fonts/tuitypelight-regular.subset.woff2 HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: binary/octet-stream\r\ncontent-length: 15391\r\nx-amzn-requestid: d7a83545-c624-459f-91de-35efb945c7f7\r\ncontent-encoding: gzip\r\nx-amzn-remapped-content-length: 15368\r\nx-amz-apigw-id: fOyvREJrFiAFvIA=\r\ntimestamp: Fri, 19 Jun 2026 23:05:19 GMT\r\nx-amzn-trace-id: Root=1-6a35cb2e-4eca5928037f85af132cab81\r\ncache-control: public, max-age=538632\r\nexpires: Fri, 26 Jun 2026 23:05:18 GMT\r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver: TUI Web\r\nvary: Accept-Encoding,Origin\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15368,"size_decoded":16034,"mime_type":"binary/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 15368, version 2.6619","md5":"1389b47fcf4f656f51e5318b718153cc","sha1":"762bcb2a4cdf56d8e1776eb364430d276a47a9fd","sha256":"3d0815ef1f743303d39876629c254bda311f209160939735b25b9a338e4c1ab4","sha512":"d1863789cc119cf331cf02ed9e8e0fdbef4db5906c09efc8fa04d45de2701c94618b442ed3ffed9079b1b0ba203f5c581244e0a7feee3a8e49b2c00e5a5c9333","ssdeep":"384:UO9kJW99YV7xrarwpzgrsnTeXOoywzSuseD576wm8VZhtF1T6YZ5:Uw996arwFgrsnTeX2wzSsDldDB96YZ5","tlshash":"5462d10e49bcf125d3cf2db3194b16a7dc4cfb969ce3af6fe81c51441c4a6852a6b045","first_seen":"2025-06-28T16:10:42.66676Z","last_seen":"2026-06-20T17:28:47.947594Z","times_seen":30,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/shared/mwa/assets/v2/icons/tui-light/oncoming-camper.svg","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:07.305Z","timestamp":1781976487305,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /shared/mwa/assets/v2/icons/tui-light/oncoming-camper.svg HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mwa.tui.com/browse/mwa/workflow-ssg-prod/workflow-pages-home/assets/workflow-pages-home_26.25.1/home/index.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T20:29:48.587722Z","times_seen":16589263,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdns.eu1.gigya.com/js/Api.htm?apiKey=4_LWGzxVDlxnaTetL1EDjQ7w\u0026version=latest\u0026build=1930\u0026flavor=base\u0026serviceName=apiService#origin=https://www.tui.com/\u0026gig_loggerConfig=%7B%22logLevel%22%3A0%2C%22clientMuteLevel%22%3A0%2C%22logTheme%22%3A1%7D","fqdn":"cdns.eu1.gigya.com","domain":"gigya.com","tld":"com"},"ip":{"addr":"143.204.238.2","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:07.964Z","timestamp":1781976487964,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn3.gigya.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Thu, 03 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1D:EE:07:E0:1D:28:1F:15:0F:8C:5F:AA:62:30:B2:53:9A:48:FF:C8","sha256":"81:CD:A6:69:9B:80:55:AC:77:D1:1B:73:FE:67:AC:9C:9E:47:39:EC:12:E1:68:B7:2A:57:19:F2:DD:F4:F4:D2"}}},"request":{"raw":"GET /js/Api.htm?apiKey=4_LWGzxVDlxnaTetL1EDjQ7w\u0026version=latest\u0026build=1930\u0026flavor=base\u0026serviceName=apiService HTTP/1.1\r\nHost: cdns.eu1.gigya.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: CloudFront\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 52975\r\nx-amz-cf-pop: ARN53-P4\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nedge-cache-tag: siteid_206115723840,ver_latest\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-sdk-version: latest\r\np3p: CP=\"IDC COR PSA DEV ADM OUR IND ONL\"\r\nx-error-code: 0\r\nx-soa: true, Gator\r\nx-server: gator-us1d-prod-65d94b7f7d-hqrwt\r\nx-callid: 019edc56e47b787fbebe424b7624368b\r\nx-robots-tag: none\r\ndate: Sat, 20 Jun 2026 17:22:38 GMT\r\ncache-control: public, s-maxage=3600, max-age=900\r\netag: ee205cf726df62fbed53966720d8d471\r\nvary: Accept-Encoding\r\nvia: 1.1 4d370877aaf92bbc7827e0db032dc51c.cloudfront.net (CloudFront)\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 337\r\nx-sdk-canary: probability: 0%; roll: 49%; effective version: latest\r\nset-cookie: gig_canary=latest; Secure; HttpOnly; Path=/; Max-Age=600; SameSite=None; Partitioned\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-id: ERGii0m5azDHEtCLJBH_uyEmKHIzWnWSCMt5eZIzauG3R_jz03Lixw==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":130465,"size_decoded":54015,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (64717)","md5":"ee205cf726df62fbed53966720d8d471","sha1":"354b895f6e64ce5ca23135a676e6000ff0e2ea21","sha256":"933b1d50c4130085e6c5e9b99b857ed9f43cc69df20827544daf17edb2a5c741","sha512":"566c9244e2f09c372f1c987127bfab7cb54eb91152a7e7026719ffc1efd87e04a9ca1a833a158f5e62cef49cf3d4a996b77bfd55cdb979762873d5b0ab40395d","ssdeep":"1536:vZWVY5F41389IRYKApAAmGruR7+cHK798yQv8oGAErUnk9FuEdGL8Ee:vZg1rHC928oMtFJnx","tlshash":"ccd3d6d8b6d2b06203a764f8903f220bb33a6d59644c8468f656d4d57cb864ec277fbc","first_seen":"2026-06-20T17:28:47.948552Z","last_seen":"2026-06-20T17:28:47.948552Z","times_seen":1,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":127,"dns":70,"connect":0,"send":0,"wait":21,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdns.eu1.gigya.com/js/sso.htm?APIKey=3_gqHUXVI8IXKRF51nbhQXeEJZE_7wGeXchfGs7UyV3Y08FFnxj_fxkeBW0nagr8XZ\u0026ssoSegment=\u0026version=latest\u0026build=1930\u0026flavor=base\u0026sourceKey=4_LWGzxVDlxnaTetL1EDjQ7w#m=getToken\u0026d=https%3A%2F%2Fwww.tui.com\u0026callbackID=gig_sso_cb1781976488654_0\u0026sAPIKey=4_LWGzxVDlxnaTetL1EDjQ7w\u0026gig_loggerConfig=%7B%22logLevel%22%3A0%2C%22clientMuteLevel%22%3A0%2C%22logTheme%22%3A1%7D","fqdn":"cdns.eu1.gigya.com","domain":"gigya.com","tld":"com"},"ip":{"addr":"143.204.238.2","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:08.668Z","timestamp":1781976488668,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn3.gigya.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Thu, 03 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1D:EE:07:E0:1D:28:1F:15:0F:8C:5F:AA:62:30:B2:53:9A:48:FF:C8","sha256":"81:CD:A6:69:9B:80:55:AC:77:D1:1B:73:FE:67:AC:9C:9E:47:39:EC:12:E1:68:B7:2A:57:19:F2:DD:F4:F4:D2"}}},"request":{"raw":"GET /js/sso.htm?APIKey=3_gqHUXVI8IXKRF51nbhQXeEJZE_7wGeXchfGs7UyV3Y08FFnxj_fxkeBW0nagr8XZ\u0026ssoSegment=\u0026version=latest\u0026build=1930\u0026flavor=base\u0026sourceKey=4_LWGzxVDlxnaTetL1EDjQ7w HTTP/1.1\r\nHost: cdns.eu1.gigya.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nCookie: gig_canary=latest; gig3pctest=true\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: CloudFront\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 30738\r\nx-amz-cf-pop: ARN53-P4\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nedge-cache-tag: siteid_8011391,ver_latest\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-sdk-version: latest\r\np3p: CP=\"IDC COR PSA DEV ADM OUR IND ONL\"\r\nx-error-code: 0\r\nx-soa: true, Gator\r\nx-server: gator-us1d-prod-65d94b7f7d-q9dlk\r\nx-callid: 019edc68d5107a28b3240a62c1ca891b\r\nx-robots-tag: none\r\ndate: Sat, 20 Jun 2026 17:25:25 GMT\r\ncache-control: public, s-maxage=3600, max-age=900\r\netag: 57217fed22225baa1beb13d386755341\r\nvary: Accept-Encoding\r\nvia: 1.1 4d370877aaf92bbc7827e0db032dc51c.cloudfront.net (CloudFront)\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 164\r\nx-sdk-canary: Skipped canary rolling. version 'latest' is specified by gig_canary cookie\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-id: pzFFXy6KiGCZkPIWw9aBqo7HZovAnZpia_nC2-GjiC8R1RRfdyT9kw==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":77271,"size_decoded":31696,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (63397)","md5":"57217fed22225baa1beb13d386755341","sha1":"29a274ed797892a3c5ff9fda7ee71272056ea8ea","sha256":"0c369c141794fdbefcb826ffb56c302affb8122e73061d807885648d1e4a5476","sha512":"2ca79963acea19b26b298fbd3e9d69b688698a9f93e9c76506ed6993a7a08aaf4cfd02309b8760e3520a34cee2650beb36f8ab98a2e6fe2c7b1040ec84d47a86","ssdeep":"768:EBvMAcAWmbIirmZtxrQUMx7+OU8N8M6TW18QXfk0wIUHdpv/v5XrbLzBSlHad/mp:EBkAcAWmFrKa7+L8kTT0wIUHdy","tlshash":"9373c6d9b6d2756203d390f8543f2107b23ea999240c8468f566c5e67cb8a4ec277fbc","first_seen":"2026-06-06T12:22:18.01488Z","last_seen":"2026-06-20T17:28:47.905993Z","times_seen":4,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.ctfassets.net/wft38qt3w1fi/7p6CxIzHAGUm8zlvGemwXu/3fbd9e4bcff6a2cb7017b803ad570291/pinterest.svg","fqdn":"images.ctfassets.net","domain":"ctfassets.net","tld":"net"},"ip":{"addr":"108.157.229.8","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:05.362Z","timestamp":1781976485362,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.ctfassets.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sat, 18 Oct 2025 00:00:00 GMT","end":"Sun, 15 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:39:C1:37:7A:6B:60:8A:D5:73:9E:D7:C4:F9:3A:11:9B:BD:94:2B","sha256":"AC:EA:37:10:54:C2:91:B5:04:B8:B4:CA:CD:35:48:4D:D0:92:78:F6:E2:8B:D9:57:78:20:D6:74:FE:14:16:A9"}}},"request":{"raw":"GET /wft38qt3w1fi/7p6CxIzHAGUm8zlvGemwXu/3fbd9e4bcff6a2cb7017b803ad570291/pinterest.svg HTTP/1.1\r\nHost: images.ctfassets.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 06 Jul 2023 07:25:42 GMT\r\nserver: Contentful Images API\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ndate: Sat, 20 Jun 2026 05:34:41 GMT\r\ncache-control: max-age=31536000\r\netag: W/\"039b485a56773287d686f2bef7aa7db9\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 3346055bb53a57ebf02828b88e1ee87c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: p_xRfd25HVD5MZ4LB1LsAb9PsNiEfQD2pBITXkBw8mhYkFwTCvgeHQ==\r\nage: 43136\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1005,"size_decoded":1125,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"039b485a56773287d686f2bef7aa7db9","sha1":"e879010b3ded35c5965b1706460c325698de88ed","sha256":"3d9f18bc032a1cc64258b2a8acf6afc72784e90a532118243d38c58199507573","sha512":"31085c4649428bbf124b69c0c363a19040c7a3da15da0b6edee8e50af298f334b2d77c3878324cce386383253bed5adc5ec0b61477e3f617c1f3ca64d828ac97","ssdeep":"","tlshash":"851105d6bf243474548e87be7b0c74a13e1f35bd752a0a99d2a94f509182b86e941c50","first_seen":"2025-09-28T22:43:58.425701Z","last_seen":"2026-06-20T17:28:47.94956Z","times_seen":10,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloud.tui.com/cdn/holiday-offer-filter/v3/holiday-offer-filter.iife.js","fqdn":"cloud.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.179Z","timestamp":1781976486179,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloud.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Tue, 16 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"7D:E5:28:0F:B6:E6:8A:A2:A4:FC:71:45:EB:89:19:59:DA:00:B6:3C","sha256":"31:B4:F1:6F:B9:43:CE:E2:95:A8:98:0A:8A:2C:53:14:B6:A1:C8:DB:55:EC:BD:2F:D1:88:82:44:35:BB:15:38"}}},"request":{"raw":"GET /cdn/holiday-offer-filter/v3/holiday-offer-filter.iife.js HTTP/1.1\r\nHost: cloud.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 16 Jun 2026 10:26:01 GMT\r\netag: \"f9864a4af0afbb20b59353181e086441\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-amz-cf-pop: FRA50-P2\r\nx-amz-cf-id: yI8R22MOZN0xB1juLFTX-EKK-yfRalLrtci9nvI4dfyBj_j2-p7woQ==\r\ncontent-encoding: gzip\r\ncontent-length: 77943\r\ncache-control: max-age=1\r\nexpires: Sat, 20 Jun 2026 17:28:07 GMT\r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\nvary: Accept-Encoding\r\nage: 599\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":444009,"size_decoded":78485,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f9864a4af0afbb20b59353181e086441","sha1":"1a609adbf00b5c27751b143477beabe0c7aca0d6","sha256":"727b6cfcc803921fc4e84a3ff8b12c6532500ef7a55c089f7a976d905ee35c41","sha512":"0c5c4f81c5a004b1785f20354f064a3ac9b7a6ca1245f46e1059c1e317cce24f8ee3fc00668cc2d55ed149e8ac02d0e9a3c85edc34e97a15b776bcbfa59d6a85","ssdeep":"6144:rKcZfvWJ3idN05S8cweXqwtX5YaASUhwf+:ZZfvWJ3idi5S8cweRDiwf+","tlshash":"b0944b54f05160bb3d17967db38e8e2cb719a450eb0201b8bf4ed5c82bcb8fb5257a25","first_seen":"2026-06-20T17:28:47.950365Z","last_seen":"2026-06-20T17:28:47.950365Z","times_seen":1,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/shared/mwa/assets/v2/fonts/ambit-semibold.subset.woff2","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.268Z","timestamp":1781976486268,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /shared/mwa/assets/v2/fonts/ambit-semibold.subset.woff2 HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: binary/octet-stream\r\ncontent-length: 16363\r\nx-amzn-requestid: 7c5b6f12-d302-48f6-994c-2c9e5386ec56\r\ncontent-encoding: gzip\r\nx-amzn-remapped-content-length: 16340\r\nx-amz-apigw-id: fOyvQGXYFiAFYMA=\r\ntimestamp: Fri, 19 Jun 2026 23:05:19 GMT\r\nx-amzn-trace-id: Root=1-6a35cb2e-19de80167cd75e3b4e5b113a\r\ncache-control: public, max-age=538632\r\nexpires: Fri, 26 Jun 2026 23:05:18 GMT\r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver: TUI Web\r\nvary: Accept-Encoding,Origin\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16340,"size_decoded":17006,"mime_type":"binary/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 16340, version 1.1441","md5":"7c2afb8493d1f7a33c914b5868ab4f04","sha1":"b4e9cdd2a1d59dc1dbe6af2f373f0ad13805098f","sha256":"290a3e14769be68e4ce341ec0cc608113cfcdf2685fe07871d5d7c2c8ee7ad1f","sha512":"eea44a39226117500b3dc57a7cd13f4fd06ec90cd3d0c9ae944737e01c2b4aceeec6097fa2a738e950726153ea511d9be0632f1da27ba018e839b9d592e2c835","ssdeep":"384:n6WrO/D1VjjjIZ1Oiwjc3r7cyMJSVBGclJkehz9CRi:n6Wr6NGOiqcsyPO83pwRi","tlshash":"0572d0bea150becdd281278e321ef1aac260703dbe51ddd8d0b84444b473de0a05bead","first_seen":"2025-09-28T22:43:58.436602Z","last_seen":"2026-06-20T17:28:47.951386Z","times_seen":28,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tui.co.uk/static-images/_ui/mobile/th/images/thomson/favicon.png","fqdn":"www.tui.co.uk","domain":"tui.co.uk","tld":"co.uk"},"ip":{"addr":"95.101.10.208","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.392Z","timestamp":1781976486392,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /static-images/_ui/mobile/th/images/thomson/favicon.png HTTP/1.1\r\nHost: www.tui.co.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 \r\nserver: AkamaiGHost\r\nmime-version: 1.0\r\ncontent-type: text/html\r\ncontent-length: 459\r\ncache-control: private, max-age=2592000\r\nexpires: Mon, 20 Jul 2026 17:28:06 GMT\r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\nalt-svc: h3=\":443\"; ma=93600\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T20:29:48.587722Z","times_seen":16589263,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.cloud.tui.com/search-destination/v2/de/package/TUICOM/giata/regions","fqdn":"api.cloud.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"63.184.79.191","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.716Z","timestamp":1781976486716,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.cloud.tui.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 31 Mar 2026 00:00:00 GMT","end":"Wed, 14 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4D:1B:CF:1F:A2:F7:54:75:66:1A:59:5D:5D:E3:9C:C5:4D:DA:A8:29","sha256":"19:24:EA:ED:3E:EF:31:9A:A1:7B:3D:65:EE:5D:75:06:99:FE:4F:3F:31:14:A9:3C:67:1F:22:BC:0B:DE:DA:0D"}}},"request":{"raw":"GET /search-destination/v2/de/package/TUICOM/giata/regions HTTP/1.1\r\nHost: api.cloud.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.tui.com/\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 3144\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\nx-correlation-id: b05ecf27-c22e-4eee-b3a0-7385fa3d957e\r\netag: W/\"c48-nPUuhWcfZtOnYtvnsD++1GpcMAs\"\r\napigw-requestid: fRUSHj4mFiAEJpw=\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":3144,"size_decoded":3474,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"bc0668aead5b7cebda5539480a80f960","sha1":"9cf52e85671f66d3a762dbe7b03fbed46a5c300b","sha256":"325eaf859f5c67a3b75aaaaa0a903f52f4ccaac2391412dea1fda7d717fe2e5e","sha512":"91a662a38510fe4e14770576cab11afb14d61aa47d035b3dfd28ca3f84db0ebcb81575ae7ff88f367b0bec1e6c968f381b1b58e87427f8d1f5d02c155cdb4643","ssdeep":"","tlshash":"6e51e1a13049ebbbc37439d4609bf487a131271c6ec068ccf5c06f86068a79adfa5235","first_seen":"2026-06-20T17:28:47.952446Z","last_seen":"2026-06-20T17:28:47.952446Z","times_seen":1,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":21,"send":0,"wait":37,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tui.de/","fqdn":"tui.de","domain":"tui.de","tld":"de"},"ip":{"addr":"82.98.80.196","port":443,"asn":12306,"as":"Plus.line AG","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-20T17:28:03.853Z","timestamp":1781976483853,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tui.com","organization":""},"issuer":{"commonName":"Thawte EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 07 Oct 2025 00:00:00 GMT","end":"Tue, 06 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:48:0A:F7:EB:5C:E8:88:CD:40:5B:1F:9F:96:06:A1:D4:DC:60:A2","sha256":"C8:C9:79:F9:70:2C:B9:C1:6B:4D:FE:E1:48:C1:C4:01:01:8D:AC:F7:8B:F1:9C:98:2F:33:E0:94:F4:3C:5B:AC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: tui.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Sat, 20 Jun 2026 16:37:20 GMT\r\nx-frame-options: SAMEORIGIN\r\nlocation: https://www.tui.com/\r\ncontent-length: 228\r\ncontent-type: text/html; charset=iso-8859-1\r\nx-ua-device: \r\nx-cacheable: YES\r\ncache-control: max-age=14400\r\nage: 3044\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: Origin\r\nx-cache: HIT prod-cache-101.com.tui.plusline.net tui.de\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T20:29:48.587722Z","times_seen":16589263,"resource_available":true,"data":null}},"time_used":375,"timings":{"blocked":-1,"dns":10,"connect":20,"send":0,"wait":45,"receive":0,"ssl":300},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.ctfassets.net/wft38qt3w1fi/5uJyTL1AeWqCKw1UXTaXAi/66b30ebf72b40ad9e237f107b93f5c42/TikTok_Icon_Black_Circle.svg","fqdn":"images.ctfassets.net","domain":"ctfassets.net","tld":"net"},"ip":{"addr":"108.157.229.8","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:05.368Z","timestamp":1781976485368,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.ctfassets.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sat, 18 Oct 2025 00:00:00 GMT","end":"Sun, 15 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:39:C1:37:7A:6B:60:8A:D5:73:9E:D7:C4:F9:3A:11:9B:BD:94:2B","sha256":"AC:EA:37:10:54:C2:91:B5:04:B8:B4:CA:CD:35:48:4D:D0:92:78:F6:E2:8B:D9:57:78:20:D6:74:FE:14:16:A9"}}},"request":{"raw":"GET /wft38qt3w1fi/5uJyTL1AeWqCKw1UXTaXAi/66b30ebf72b40ad9e237f107b93f5c42/TikTok_Icon_Black_Circle.svg HTTP/1.1\r\nHost: images.ctfassets.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 20 Aug 2024 13:06:25 GMT\r\nserver: Contentful Images API\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ndate: Sat, 20 Jun 2026 03:00:01 GMT\r\ncache-control: max-age=31536000\r\netag: W/\"86e92fdf9fa0862a5ed70aee1d8e4fe8\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 3346055bb53a57ebf02828b88e1ee87c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: 5sBAjDYsBsY71pg4Me0dLyb6aQTEdIirrxQ2o7Y0LPdOKxgzyr2Aag==\r\nage: 54125\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":27186,"size_decoded":9159,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"86e92fdf9fa0862a5ed70aee1d8e4fe8","sha1":"86198fc68ce6e7e643a8c2ce5745ea037e9913a3","sha256":"bc3874614f8fb3e8311e5a6ce2d153db2e77a8a875008a8da1dedf154fd6a7aa","sha512":"b8d4d44f2cc5c77cc3ca5d2a52b15e52cc88c5a4059a177d438a89beb2abf98f9fe136bc05e47346f8bc21bf3055a6a1c4953fa04e4752bb852329e8502a2eba","ssdeep":"384:YtwMyXVNivszoY8Z3WYESXOkWhyF75oF9fycCGAgRbqvZCb1VDYvvmMy1x:7GvszoY+OjkjF75+9tqZCbG+X1x","tlshash":"11c219e5236499e2f901d8d56e213d54262f30eeefcc3398d1c2662a6c1a4e8893cf57","first_seen":"2025-09-28T22:43:58.480267Z","last_seen":"2026-06-20T17:28:47.953881Z","times_seen":10,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tui.com/assets/v2/icons/tui-light/shop.svg","fqdn":"static.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"13.249.8.122","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:05.924Z","timestamp":1781976485924,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Jul 2025 00:00:00 GMT","end":"Wed, 29 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B1:29:28:04:46:85:C0:F0:4D:6F:D6:B9:CC:AA:FF:BE:E9:8C:8E:D4","sha256":"F6:AE:7B:84:78:6D:24:4A:0F:93:96:0C:8B:78:F7:AF:26:0C:5C:AB:8E:7A:05:74:F4:C4:6C:E3:1E:20:86:4A"}}},"request":{"raw":"GET /assets/v2/icons/tui-light/shop.svg HTTP/1.1\r\nHost: static.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\ncontent-length: 524\r\naccess-control-allow-origin: *\r\nlast-modified: Wed, 31 Jul 2024 14:37:21 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\naccess-control-expose-headers: Date\r\nvia: 1.1 c8faaa7d637dd73af72e1355a476ffc2.cloudfront.net (CloudFront), 1.1 118086882d9f17e10877e0653a055586.cloudfront.net (CloudFront)\r\ndate: Sat, 20 Jun 2026 17:12:57 GMT\r\ncache-control: max-age=7200\r\netag: \"07346d38c4c0c139a0f00a7773575c18\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: FRA60-P9, ARN53-P3\r\nx-amz-cf-id: 5Y6TMR4a2fJ5MOZ-5bXsNaMaEbCy1-OxiEXp4Kp8RyF701bxMDB2pA==\r\nage: 3808\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":524,"size_decoded":1216,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"07346d38c4c0c139a0f00a7773575c18","sha1":"6705da70b88588c0b362b83f7284005f3b73c990","sha256":"5ae04ae8a7581109f8bfccbcdcd8db036d5aea8a328a95aa33d13550e9ceddc2","sha512":"386ed2c857b2dff366a1ac8ac3eab5ba3a768002eaf67f8c1e323b79f7ae19a52acd6512f4421cb5b5fad1578c42ec3e514c6aea72b7c3f16ba3522ffafd471d","ssdeep":"","tlshash":"4ef02b81cf8c5aac296644a89f5cb372032f33f5742c106c687d0121a140415f9635d0","first_seen":"2025-06-29T08:41:34.90572Z","last_seen":"2026-06-20T17:28:47.954908Z","times_seen":17,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloud.tui.com/cdn/search-departure-airport/v2/search-departure-airport.js","fqdn":"cloud.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.164Z","timestamp":1781976486164,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloud.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Tue, 16 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"7D:E5:28:0F:B6:E6:8A:A2:A4:FC:71:45:EB:89:19:59:DA:00:B6:3C","sha256":"31:B4:F1:6F:B9:43:CE:E2:95:A8:98:0A:8A:2C:53:14:B6:A1:C8:DB:55:EC:BD:2F:D1:88:82:44:35:BB:15:38"}}},"request":{"raw":"GET /cdn/search-departure-airport/v2/search-departure-airport.js HTTP/1.1\r\nHost: cloud.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 27 Jan 2026 13:34:13 GMT\r\netag: \"84d180ef04308e944bba495c0f8442f7\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-amz-cf-pop: DUS51-P6\r\nx-amz-cf-id: 1SgqoXEH9bVXxdAbq_7loI7xW2f5lI_3V9-xYb8Ky2BK6FTejrI1Dg==\r\ncontent-encoding: gzip\r\ncontent-length: 10925\r\ncache-control: max-age=1\r\nexpires: Sat, 20 Jun 2026 17:28:07 GMT\r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\nvary: Accept-Encoding\r\nage: 599\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":53515,"size_decoded":11467,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text, with very long lines (53469)","md5":"84d180ef04308e944bba495c0f8442f7","sha1":"b8b9d02ed28222582cbb3c15a8bad2348e108a30","sha256":"af47ea0eab8207b6f094728c0de291ed5b20abe7f5c3afc9f59ac44a0e692d32","sha512":"b4eda9692cbec08268a912da15acf9d4818af9ae2dbb2a4d2d7641d9fdc1a3ab5be427cf8575661b0eb76b7db0a72af75a94a6ecd63ed0666f9efc76a9436101","ssdeep":"768:HezNMWFwHqYfvve8OYaYKpkRGbxR2grCW:+8DfvZxlc1rCW","tlshash":"1733d71770a6a0719d338ff263ee477d765572009c214a69bf1d00868fcddeea22b639","first_seen":"2026-03-29T05:54:31.399002Z","last_seen":"2026-06-20T17:28:47.955835Z","times_seen":5,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/shared/mwa/assets/v2/pictograms/wallet.svg","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.165Z","timestamp":1781976486165,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /shared/mwa/assets/v2/pictograms/wallet.svg HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nCookie: _vis_opt_exp_de24_combi=2; tui-coupon-wallet-enabled=true; _vis_opt_exp_P1973_combi=A; ecid=66966107634980792017217711389285007288; kndctr_41E27DA552A6473A0A490D4D_AdobeOrg_cluster=irl1; ak_bmsc=B67A7B246DD506FF96868E790DEC7588~000000000000000000000000000000~YAAQnQplX5EeC8yeAQAA/0oT5gDOPuTt/btrBxkEvsjZCv5iCpXn0dXIvmJwn7xqmMAnNIe0nO0FY39Vbl5SjyGMJEVaR4G9q1/l42ck/a/EQOacJ4igK59UwcumJR8QpmYiwT+CVeC/eOnPjNwPUHExTtozITtaYleYz3l9P1pItpV47INsmiRsPueOOgIFv4Y8oYKv34ceEccDtGFc3g6P6Mp+trxKpDZd6yc0HigFXe28HQYG7avaeFj+ik5m0MFEhAiuBqS6SvCL4vy3reXusZ6jxYvIWHdT6PwPnlhHpHp22JmnVdOr/CIQP/7fu/r0sRyFMPvi8dmL3H+VaoMn7Zyfl7wI1msqdFED3mRYtf6+m0f5fS2F1TrGMkXqOaIHTqRL2Aw2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\ncontent-length: 1102\r\nx-amzn-requestid: 2489ea29-148e-46a3-b5fb-19841f9f6aa7\r\ncontent-encoding: gzip\r\nx-amzn-remapped-content-length: 2463\r\nx-amz-apigw-id: fOzdLGPzliAFuSw=\r\ntimestamp: Fri, 19 Jun 2026 23:10:12 GMT\r\nx-amzn-trace-id: Root=1-6a35cc53-727c59cd6a19dd2d46c8975c\r\ncache-control: public, max-age=538926\r\nexpires: Fri, 26 Jun 2026 23:10:12 GMT\r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver: TUI Web\r\nvary: Accept-Encoding,Origin\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2463,"size_decoded":1705,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3fb3e8fa38ba1c741417f920a4796cb9","sha1":"10634ae14fc01d6b2af898b4d26a9803d0ee94ca","sha256":"323734c4d0fd60855cc68a99166e738bf4427d6ae53b0c73c87c34597bc6f54f","sha512":"e4fbc194c7ab7035ce0178ccd1e640e8160c82968f425c30aded4639aaddc0b3846abecc603fe2e434b12ba36850b364ef2777b2183aa0bacbbbf42dd8700113","ssdeep":"","tlshash":"f75197f2b76cb41c8783471c5f9e39b5333eb0dd6ba24ea8b62dad2411c2683d407a10","first_seen":"2026-06-06T12:22:18.116756Z","last_seen":"2026-06-20T17:28:47.966008Z","times_seen":2,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/shared/mwa/assets/v2/icons/tui-light/car.svg","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.651Z","timestamp":1781976486651,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /shared/mwa/assets/v2/icons/tui-light/car.svg HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mwa.tui.com/browse/mwa/workflow-ssg-prod/workflow-pages-home/assets/workflow-pages-home_26.25.1/home/index.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\nx-amzn-requestid: e55e6485-7ef1-41f4-87a8-de173736b54a\r\nx-amzn-remapped-content-length: 393\r\nx-amz-apigw-id: fOzJyF2oliAFeWg=\r\ntimestamp: Fri, 19 Jun 2026 23:08:08 GMT\r\nx-amzn-trace-id: Root=1-6a35cbd7-6cfe768d70c8bb137f733b2e\r\ncontent-encoding: gzip\r\ncontent-length: 282\r\ncache-control: public, max-age=538801\r\nexpires: Fri, 26 Jun 2026 23:08:07 GMT\r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver: TUI Web\r\nvary: Accept-Encoding,Origin\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":393,"size_decoded":915,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"88a9162d3186f085db87ac215371afe7","sha1":"09dc863d7466a967f3940b625367b3653b491f46","sha256":"f6fb8abc8804e2e88b457bda17baeeebcce6621df62795c48a2cf2a2ebc642eb","sha512":"c6b7db012b4736ea20cce0b77841cdcce2042d207e0958a4a439dd801d1e51a3d9280b14eb020e22d17982f69d1a96feea2d979b95480ccb4ddc855694377630","ssdeep":"","tlshash":"a0e0ab51cadc3937803b02e02b657702603b7665210eae3891ec03701907b533452bd8","first_seen":"2025-06-29T08:41:34.864215Z","last_seen":"2026-06-20T17:28:47.968795Z","times_seen":8,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/customer/mwa/auth-i11n-layer/1.1.2/de.js","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:07.145Z","timestamp":1781976487145,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /customer/mwa/auth-i11n-layer/1.1.2/de.js HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.tui.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _vis_opt_exp_de24_combi=2; tui-coupon-wallet-enabled=true; _vis_opt_exp_P1973_combi=A; ecid=66966107634980792017217711389285007288; kndctr_41E27DA552A6473A0A490D4D_AdobeOrg_cluster=irl1; ak_bmsc=B67A7B246DD506FF96868E790DEC7588~000000000000000000000000000000~YAAQnQplX5EeC8yeAQAA/0oT5gDOPuTt/btrBxkEvsjZCv5iCpXn0dXIvmJwn7xqmMAnNIe0nO0FY39Vbl5SjyGMJEVaR4G9q1/l42ck/a/EQOacJ4igK59UwcumJR8QpmYiwT+CVeC/eOnPjNwPUHExTtozITtaYleYz3l9P1pItpV47INsmiRsPueOOgIFv4Y8oYKv34ceEccDtGFc3g6P6Mp+trxKpDZd6yc0HigFXe28HQYG7avaeFj+ik5m0MFEhAiuBqS6SvCL4vy3reXusZ6jxYvIWHdT6PwPnlhHpHp22JmnVdOr/CIQP/7fu/r0sRyFMPvi8dmL3H+VaoMn7Zyfl7wI1msqdFED3mRYtf6+m0f5fS2F1TrGMkXqOaIHTqRL2Aw2; _tfm_exp_tfo1684=2; _vis_opt_exp_CTRRTBb_combi=0; _vis_opt_exp_CTRRTBc_combi=3; _vis_opt_exp_18742_combi=2; utag_main=v_id:019ee6135181001c3648a73012a605050001400900918$_sn:1$_se:1%3Bexp-session$_ss:1%3Bexp-session$_st:1781978286274%3Bexp-session$ses_id:1781976486274%3Bexp-session$_pn:1%3Bexp-session; _vis_opt_exp_tfo1518_combi=2; _vis_opt_exp_AbDist0_combi=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nx-amzn-requestid: 7cd9d07e-14a8-458f-a3d1-5daff641e7f9\r\naccess-control-allow-headers: Accept, Accept-Encoding, Accept-Language, Connection, Host, Origin, Referer, Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site, User-Agent, Content-Type, X-Requested-With\r\nx-amzn-remapped-content-length: 19302\r\nx-amz-apigw-id: fRUNsF7TliAEbVg=\r\naccess-control-allow-methods: GET, OPTIONS\r\ntimestamp: Sat, 20 Jun 2026 17:27:39 GMT\r\nx-amzn-trace-id: Root=1-6a36cd8a-196e01ff772dc5444fb9e459\r\ncontent-encoding: gzip\r\ncontent-length: 5922\r\ncache-control: public, max-age=600\r\nexpires: Sat, 20 Jun 2026 17:38:07 GMT\r\ndate: Sat, 20 Jun 2026 17:28:07 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver: TUI Web\r\nvary: Accept-Encoding, Origin\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19302,"size_decoded":6769,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (15791)","md5":"1e75bf3b39132c1cd1fabb31c54dd3c0","sha1":"0b23de10aa8160bf5db49015c71b2c25799efc7d","sha256":"b2fb4780a139e8497d0e50dd15cd6a935232d60996dab93c9677fea76aa8adf5","sha512":"63cdbaa854ffaa81cca926f8ca6a8b550e3def3c76da7cb98c203808f3e7663960b2a2bd539cee29a1b929676c653350e6001efa086f749ef9bcf5727bcbaffe","ssdeep":"384:o024jbvATLS3LyTHEiqZumxFDpvRLNNGl7unLzOQaO7YMr7hMo/f0L7SBBZFxX8c:o024jbvAT2bukiqV5LPmuLiyFMo/ML7O","tlshash":"fb82c699b38ab9700991c5b668bf331057397904381ec81cfb3d5cd27d91a4a533ea7a","first_seen":"2026-03-28T02:59:34.583929Z","last_seen":"2026-06-20T17:28:47.970023Z","times_seen":4,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tags.tiqcdn.com/utag/tui/main/prod/utag.js","fqdn":"tags.tiqcdn.com","domain":"tiqcdn.com","tld":"com"},"ip":{"addr":"65.9.46.57","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:05.886Z","timestamp":1781976485886,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tags.tiqcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 09 Mar 2026 00:00:00 GMT","end":"Tue, 22 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D6:76:2F:BD:9C:CC:DC:5A:C2:A1:D3:60:C0:08:21:C9:62:EB:5E:69","sha256":"D1:5D:04:F4:35:9F:D3:9D:4B:7D:16:79:64:5C:FC:23:0C:52:77:2C:46:02:F2:D8:7D:8A:08:6D:1A:58:40:12"}}},"request":{"raw":"GET /utag/tui/main/prod/utag.js HTTP/1.1\r\nHost: tags.tiqcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nlast-modified: Wed, 17 Jun 2026 14:57:04 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: eJ1QFTQU5vLZg.RQiKFJUONM5s_YkMfq\r\ncontent-encoding: br\r\ndate: Sat, 20 Jun 2026 17:26:57 GMT\r\netag: W/\"a283cbf333c013101e335be8d48d9087\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 62fb1997c40a03e325a22b812f7b7e10.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: qUzbSfK66z_K5w5puQDSzQbEeNOapf3WkRvIxS4SpBADqHSkLgH5MA==\r\nage: 92\r\ncache-control: max-age=300\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":651467,"size_decoded":143249,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19067)","md5":"a283cbf333c013101e335be8d48d9087","sha1":"8b77bf1e850bd174d12e52b74764041d6f5e57ed","sha256":"52d9623fe41818aa40a09fdef4edf144ebc67926193160af46eccc0202bf936c","sha512":"5106e0db00e3ed58cba57112ca19221e9d4d04d9a41360309c203af9d2f7d737b8cf1728232a148c58e6f8b55aa45f496c63e4b83614b57d3fab8c6aba7a01f1","ssdeep":"12288:wto0IThjMJGZpLgKm+/NILZY4HkwuyUuZWuJxufKuk9ujKuXbueNZ0zliQiQhKj:wt1ShjMJaLgwILZAwuyUuZWuJxufKukW","tlshash":"5bd46c48b2e4b13643e62479616f1b06f13a640378978858f168dc946f78c8ed2b7f7e","first_seen":"2026-06-20T17:28:47.971181Z","last_seen":"2026-06-20T17:28:47.971181Z","times_seen":1,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":4,"connect":10,"send":0,"wait":15,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/shared/mwa/assets/v2/fonts/tuitypelight-regular.subset.woff2","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:05.894Z","timestamp":1781976485894,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /shared/mwa/assets/v2/fonts/tuitypelight-regular.subset.woff2 HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mwa.tui.com/browse/mwa/workflow-ssg-prod/workflow-pages-home/assets/workflow-pages-home_26.25.1/themes/tui-light/index.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: binary/octet-stream\r\nx-amzn-requestid: d7a83545-c624-459f-91de-35efb945c7f7\r\nx-amzn-remapped-content-length: 15368\r\nx-amz-apigw-id: fOyvREJrFiAFvIA=\r\ntimestamp: Fri, 19 Jun 2026 23:05:19 GMT\r\nx-amzn-trace-id: Root=1-6a35cb2e-4eca5928037f85af132cab81\r\ncache-control: public, max-age=538633\r\nexpires: Fri, 26 Jun 2026 23:05:18 GMT\r\ndate: Sat, 20 Jun 2026 17:28:05 GMT\r\ncontent-length: 15368\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver: TUI Web\r\nvary: Accept-Encoding,Origin\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15368,"size_decoded":15981,"mime_type":"binary/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 15368, version 2.6619","md5":"1389b47fcf4f656f51e5318b718153cc","sha1":"762bcb2a4cdf56d8e1776eb364430d276a47a9fd","sha256":"3d0815ef1f743303d39876629c254bda311f209160939735b25b9a338e4c1ab4","sha512":"d1863789cc119cf331cf02ed9e8e0fdbef4db5906c09efc8fa04d45de2701c94618b442ed3ffed9079b1b0ba203f5c581244e0a7feee3a8e49b2c00e5a5c9333","ssdeep":"384:UO9kJW99YV7xrarwpzgrsnTeXOoywzSuseD576wm8VZhtF1T6YZ5:Uw996arwFgrsnTeX2wzSsDldDB96YZ5","tlshash":"5462d10e49bcf125d3cf2db3194b16a7dc4cfb969ce3af6fe81c51441c4a6852a6b045","first_seen":"2025-06-28T16:10:42.66676Z","last_seen":"2026-06-20T17:28:47.947594Z","times_seen":30,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/shared/mwa/assets/v2/fonts/ambit-semibold.subset.woff2","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.260Z","timestamp":1781976486260,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /shared/mwa/assets/v2/fonts/ambit-semibold.subset.woff2 HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: binary/octet-stream\r\ncontent-length: 16363\r\nx-amzn-requestid: 7c5b6f12-d302-48f6-994c-2c9e5386ec56\r\ncontent-encoding: gzip\r\nx-amzn-remapped-content-length: 16340\r\nx-amz-apigw-id: fOyvQGXYFiAFYMA=\r\ntimestamp: Fri, 19 Jun 2026 23:05:19 GMT\r\nx-amzn-trace-id: Root=1-6a35cb2e-19de80167cd75e3b4e5b113a\r\ncache-control: public, max-age=538632\r\nexpires: Fri, 26 Jun 2026 23:05:18 GMT\r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver: TUI Web\r\nvary: Accept-Encoding,Origin\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16340,"size_decoded":17006,"mime_type":"binary/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 16340, version 1.1441","md5":"7c2afb8493d1f7a33c914b5868ab4f04","sha1":"b4e9cdd2a1d59dc1dbe6af2f373f0ad13805098f","sha256":"290a3e14769be68e4ce341ec0cc608113cfcdf2685fe07871d5d7c2c8ee7ad1f","sha512":"eea44a39226117500b3dc57a7cd13f4fd06ec90cd3d0c9ae944737e01c2b4aceeec6097fa2a738e950726153ea511d9be0632f1da27ba018e839b9d592e2c835","ssdeep":"384:n6WrO/D1VjjjIZ1Oiwjc3r7cyMJSVBGclJkehz9CRi:n6Wr6NGOiqcsyPO83pwRi","tlshash":"0572d0bea150becdd281278e321ef1aac260703dbe51ddd8d0b84444b473de0a05bead","first_seen":"2025-09-28T22:43:58.436602Z","last_seen":"2026-06-20T17:28:47.951386Z","times_seen":28,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.cloud.tui.com/search-destination/v2/de/package/TUICOM/giata/regions","fqdn":"api.cloud.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.428Z","timestamp":1781976486428,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /search-destination/v2/de/package/TUICOM/giata/regions HTTP/1.1\r\nHost: api.cloud.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.tui.com/\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T20:29:48.587722Z","times_seen":16589263,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tui.com/assets/v2/fonts/ambit-bold.woff2","fqdn":"static.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"13.249.8.122","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.885Z","timestamp":1781976486885,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Jul 2025 00:00:00 GMT","end":"Wed, 29 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B1:29:28:04:46:85:C0:F0:4D:6F:D6:B9:CC:AA:FF:BE:E9:8C:8E:D4","sha256":"F6:AE:7B:84:78:6D:24:4A:0F:93:96:0C:8B:78:F7:AF:26:0C:5C:AB:8E:7A:05:74:F4:C4:6C:E3:1E:20:86:4A"}}},"request":{"raw":"GET /assets/v2/fonts/ambit-bold.woff2 HTTP/1.1\r\nHost: static.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: binary/octet-stream\r\ncontent-length: 34312\r\naccess-control-allow-origin: *\r\nlast-modified: Wed, 31 Jul 2024 14:37:18 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\naccess-control-expose-headers: Date\r\nvia: 1.1 45e3ccd889272a7e8732f0eda13e87ca.cloudfront.net (CloudFront), 1.1 118086882d9f17e10877e0653a055586.cloudfront.net (CloudFront)\r\ndate: Sat, 20 Jun 2026 16:28:52 GMT\r\ncache-control: max-age=7200\r\netag: \"cf0e07dc831210edc78c0c3b81886099\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: FRA60-P9, ARN53-P3\r\nx-amz-cf-id: WBJzRDA2HfVrKpuFR40NglgUpOJ6zTmZWyZtJjRHhG5XuR6GuoTc0A==\r\nage: 3807\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":34312,"size_decoded":35012,"mime_type":"binary/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 34312, version 1.1441","md5":"cf0e07dc831210edc78c0c3b81886099","sha1":"35e3c399e41adfdb7d35a7e1d2943834312b2f5c","sha256":"2f7f582eb801b2b92441b7fa22efec39d97b5bd14688ef4811b1d2a84c7b52b3","sha512":"159c89b4b50f9e38cc3b770ef88c58163b11b0a66553f817dcfa1099f93d729bcc87f94766f3837749c1be9310a22758efedd8604882d59d34766d64935e25fb","ssdeep":"768:fua9p7Kcqjx7wRkLLt2Du4hPE7j4Bj5aTTG09hBFKmvcxzIS:fua9p77XWt2g7jy9a2uQUKIS","tlshash":"26f2f2f2579562474a5330fd7723bdc5c92ac5b631728e006a4d6f98070e7b90ceca57","first_seen":"2023-05-08T13:26:09Z","last_seen":"2026-06-20T17:28:47.904887Z","times_seen":50,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/shared/mwa/assets/v2/fonts/ambit-bold.woff2","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:07.069Z","timestamp":1781976487069,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /shared/mwa/assets/v2/fonts/ambit-bold.woff2 HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: binary/octet-stream\r\nx-amzn-requestid: 062d9756-5906-4f24-bdf8-c3a206b7dbde\r\nx-amzn-remapped-content-length: 34312\r\nx-amz-apigw-id: fO7Z_EEbliAFk9g=\r\ntimestamp: Sat, 20 Jun 2026 00:04:29 GMT\r\nx-amzn-trace-id: Root=1-6a35d90c-4c0cc15d5c5d77a64444077b\r\ncache-control: public, max-age=542181\r\nexpires: Sat, 27 Jun 2026 00:04:28 GMT\r\ndate: Sat, 20 Jun 2026 17:28:07 GMT\r\ncontent-length: 34312\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver: TUI Web\r\nvary: Accept-Encoding,Origin\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34312,"size_decoded":34931,"mime_type":"binary/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 34312, version 1.1441","md5":"cf0e07dc831210edc78c0c3b81886099","sha1":"35e3c399e41adfdb7d35a7e1d2943834312b2f5c","sha256":"2f7f582eb801b2b92441b7fa22efec39d97b5bd14688ef4811b1d2a84c7b52b3","sha512":"159c89b4b50f9e38cc3b770ef88c58163b11b0a66553f817dcfa1099f93d729bcc87f94766f3837749c1be9310a22758efedd8604882d59d34766d64935e25fb","ssdeep":"768:fua9p7Kcqjx7wRkLLt2Du4hPE7j4Bj5aTTG09hBFKmvcxzIS:fua9p77XWt2g7jy9a2uQUKIS","tlshash":"26f2f2f2579562474a5330fd7723bdc5c92ac5b631728e006a4d6f98070e7b90ceca57","first_seen":"2023-05-08T13:26:09Z","last_seen":"2026-06-20T17:28:47.904887Z","times_seen":50,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloud.tui.com/cdn/crisis-ticker/v1/themes/tui-light.css","fqdn":"cloud.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:07.120Z","timestamp":1781976487120,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloud.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Tue, 16 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"7D:E5:28:0F:B6:E6:8A:A2:A4:FC:71:45:EB:89:19:59:DA:00:B6:3C","sha256":"31:B4:F1:6F:B9:43:CE:E2:95:A8:98:0A:8A:2C:53:14:B6:A1:C8:DB:55:EC:BD:2F:D1:88:82:44:35:BB:15:38"}}},"request":{"raw":"GET /cdn/crisis-ticker/v1/themes/tui-light.css HTTP/1.1\r\nHost: cloud.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nCookie: _vis_opt_exp_de24_combi=2; tui-coupon-wallet-enabled=true; _vis_opt_exp_P1973_combi=A; ecid=66966107634980792017217711389285007288; kndctr_41E27DA552A6473A0A490D4D_AdobeOrg_cluster=irl1; ak_bmsc=B67A7B246DD506FF96868E790DEC7588~000000000000000000000000000000~YAAQnQplX5EeC8yeAQAA/0oT5gDOPuTt/btrBxkEvsjZCv5iCpXn0dXIvmJwn7xqmMAnNIe0nO0FY39Vbl5SjyGMJEVaR4G9q1/l42ck/a/EQOacJ4igK59UwcumJR8QpmYiwT+CVeC/eOnPjNwPUHExTtozITtaYleYz3l9P1pItpV47INsmiRsPueOOgIFv4Y8oYKv34ceEccDtGFc3g6P6Mp+trxKpDZd6yc0HigFXe28HQYG7avaeFj+ik5m0MFEhAiuBqS6SvCL4vy3reXusZ6jxYvIWHdT6PwPnlhHpHp22JmnVdOr/CIQP/7fu/r0sRyFMPvi8dmL3H+VaoMn7Zyfl7wI1msqdFED3mRYtf6+m0f5fS2F1TrGMkXqOaIHTqRL2Aw2; _tfm_exp_tfo1684=2; _vis_opt_exp_CTRRTBb_combi=0; _vis_opt_exp_CTRRTBc_combi=3; _vis_opt_exp_18742_combi=2; utag_main=v_id:019ee6135181001c3648a73012a605050001400900918$_sn:1$_se:1%3Bexp-session$_ss:1%3Bexp-session$_st:1781978286274%3Bexp-session$ses_id:1781976486274%3Bexp-session$_pn:1%3Bexp-session; _vis_opt_exp_tfo1518_combi=2; _vis_opt_exp_AbDist0_combi=1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\nlast-modified: Wed, 01 Oct 2025 14:07:58 GMT\r\netag: \"f47576464024b5a78894374e84fc5971\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-amz-cf-pop: DUS51-P6\r\nx-amz-cf-id: zzmeyBxhqladgydyE-yPiIGKrV8H4EEkuQ_AnF4u567eTguWSoYZ5A==\r\ncontent-encoding: gzip\r\ncontent-length: 4473\r\ncache-control: max-age=1\r\nexpires: Sat, 20 Jun 2026 17:28:08 GMT\r\ndate: Sat, 20 Jun 2026 17:28:07 GMT\r\nvary: Accept-Encoding\r\nage: 599\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":33495,"size_decoded":5007,"mime_type":"text/css","magic":"ASCII text, with very long lines (459)","md5":"f47576464024b5a78894374e84fc5971","sha1":"f55c6f14e4fb8c9831f6f01c9810d925bc8411e6","sha256":"65b13e72aede1c575b6b65fb7c0fc8a9e8754cd06203a497717b65515edab701","sha512":"cbcd6a48120f759c16f629d49cc36963e424b954ee9386a7662dc9d2a12c3795235490bf5b6ff1b749544d53eed6ef04ae09cdb07c5e01fefc7c425b51b14fef","ssdeep":"192:McX6icOcX6icv0155xY5s5y5H5x56UE5R/vkTWoRX5D5tj5p5/5t5JA5k5ELo5u6:fu3Dclsky7Qai402GahhfCRBT","tlshash":"1ae2c250f421b0bb392f4a3f330bde1973787451af15aa58bec954c40daa3fb25c2a46","first_seen":"2025-09-28T22:43:58.453909Z","last_seen":"2026-06-20T17:28:47.972695Z","times_seen":12,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.ctfassets.net/wft38qt3w1fi/7A3emKc5It2SnlMioK0xlA/3dcba1f62b51253119b1e3ff46883650/instagram.svg","fqdn":"images.ctfassets.net","domain":"ctfassets.net","tld":"net"},"ip":{"addr":"108.157.229.8","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:05.357Z","timestamp":1781976485357,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.ctfassets.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sat, 18 Oct 2025 00:00:00 GMT","end":"Sun, 15 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:39:C1:37:7A:6B:60:8A:D5:73:9E:D7:C4:F9:3A:11:9B:BD:94:2B","sha256":"AC:EA:37:10:54:C2:91:B5:04:B8:B4:CA:CD:35:48:4D:D0:92:78:F6:E2:8B:D9:57:78:20:D6:74:FE:14:16:A9"}}},"request":{"raw":"GET /wft38qt3w1fi/7A3emKc5It2SnlMioK0xlA/3dcba1f62b51253119b1e3ff46883650/instagram.svg HTTP/1.1\r\nHost: images.ctfassets.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 06 Jul 2023 07:23:22 GMT\r\nserver: Contentful Images API\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ndate: Sat, 20 Jun 2026 02:09:33 GMT\r\ncache-control: max-age=31536000\r\netag: W/\"acb932cf05bfb4d377cedb100df87c39\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 3346055bb53a57ebf02828b88e1ee87c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: Owoh4zgCv-2rIw7Sev0fi4ooL7oNYRRco6pzHobRovSmweSXcIiumw==\r\nage: 55356\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2990,"size_decoded":1909,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"acb932cf05bfb4d377cedb100df87c39","sha1":"00a8ff3b1cef2ef1832bdbe5b0fd65ac3fed7bb9","sha256":"a4bc091cd26e1ae82407e00f7bd286f792ac929add0c82bfd524cdb8fdc6a42a","sha512":"eeeed92c943e90be09ba2c751b65a3cfd40d95910d44abdaa9b029f1f92495e7a01d911dcc9df974242ecdc03eb469a25dfc2015d42fd226bd3529a815b9f574","ssdeep":"","tlshash":"f15156d8c7b013b8b889d78ce7759c98301d65bd35b1cb09caadaf0d18978c5ed09b60","first_seen":"2025-09-28T22:43:58.530951Z","last_seen":"2026-06-20T17:28:47.973983Z","times_seen":10,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloud.tui.com/cdn/header/current/themes/tui-light.css","fqdn":"cloud.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:05.888Z","timestamp":1781976485888,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloud.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Tue, 16 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"7D:E5:28:0F:B6:E6:8A:A2:A4:FC:71:45:EB:89:19:59:DA:00:B6:3C","sha256":"31:B4:F1:6F:B9:43:CE:E2:95:A8:98:0A:8A:2C:53:14:B6:A1:C8:DB:55:EC:BD:2F:D1:88:82:44:35:BB:15:38"}}},"request":{"raw":"GET /cdn/header/current/themes/tui-light.css HTTP/1.1\r\nHost: cloud.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nCookie: _vis_opt_exp_de24_combi=2; tui-coupon-wallet-enabled=true; _vis_opt_exp_P1973_combi=A; ecid=66966107634980792017217711389285007288; kndctr_41E27DA552A6473A0A490D4D_AdobeOrg_cluster=irl1; ak_bmsc=B67A7B246DD506FF96868E790DEC7588~000000000000000000000000000000~YAAQnQplX5EeC8yeAQAA/0oT5gDOPuTt/btrBxkEvsjZCv5iCpXn0dXIvmJwn7xqmMAnNIe0nO0FY39Vbl5SjyGMJEVaR4G9q1/l42ck/a/EQOacJ4igK59UwcumJR8QpmYiwT+CVeC/eOnPjNwPUHExTtozITtaYleYz3l9P1pItpV47INsmiRsPueOOgIFv4Y8oYKv34ceEccDtGFc3g6P6Mp+trxKpDZd6yc0HigFXe28HQYG7avaeFj+ik5m0MFEhAiuBqS6SvCL4vy3reXusZ6jxYvIWHdT6PwPnlhHpHp22JmnVdOr/CIQP/7fu/r0sRyFMPvi8dmL3H+VaoMn7Zyfl7wI1msqdFED3mRYtf6+m0f5fS2F1TrGMkXqOaIHTqRL2Aw2\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\nlast-modified: Tue, 10 Feb 2026 13:46:53 GMT\r\netag: \"c042e19ed1217f443718c4f5115cfda1\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-amz-cf-pop: DUS51-P6\r\nx-amz-cf-id: N4gp0fL55ZeqtMYnbFS1HqrI2IiHcbzaJsJEG_wxcg0VzqqHdbN-qg==\r\ncontent-encoding: gzip\r\ncontent-length: 4605\r\ncache-control: max-age=1\r\nexpires: Sat, 20 Jun 2026 17:28:06 GMT\r\ndate: Sat, 20 Jun 2026 17:28:05 GMT\r\nvary: Accept-Encoding\r\nage: 599\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":33686,"size_decoded":5139,"mime_type":"text/css","magic":"ASCII text, with very long lines (459)","md5":"c042e19ed1217f443718c4f5115cfda1","sha1":"f1f5dba1ac408676eba6cdb3b5f2ef7d8451276b","sha256":"38b828d498a08a8cc0d64a53b363b5fdf3bf176b27da0f85ddf5180e6387bf5e","sha512":"664c6fe12ee04e1bc38eb919e6bc4499581035ef6c06ca79926d521c63e796aab05b276a318d380ea5ae288c04a801cc65d6f0e747a9c96f220e5ad5f55acfa6","ssdeep":"192:g1+bd1R1+bd1v4155xY5s5y5H5x56UE5R/vkTWoRX5D5tj5p5/5t5JA5k5ELo5uQ:5ce59lEky7Qai4KGamhaCRBR","tlshash":"2ae2d150f421b0fa392f4a3f730bde29737874516f15aa58bec954c40daa3f725c2a46","first_seen":"2026-03-28T02:59:34.582506Z","last_seen":"2026-06-20T17:28:47.975051Z","times_seen":9,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tui.com/assets/v2/icons/tui-light/checkmark.svg","fqdn":"static.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"13.249.8.122","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.054Z","timestamp":1781976486054,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Jul 2025 00:00:00 GMT","end":"Wed, 29 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B1:29:28:04:46:85:C0:F0:4D:6F:D6:B9:CC:AA:FF:BE:E9:8C:8E:D4","sha256":"F6:AE:7B:84:78:6D:24:4A:0F:93:96:0C:8B:78:F7:AF:26:0C:5C:AB:8E:7A:05:74:F4:C4:6C:E3:1E:20:86:4A"}}},"request":{"raw":"GET /assets/v2/icons/tui-light/checkmark.svg HTTP/1.1\r\nHost: static.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\ncontent-length: 197\r\naccess-control-allow-origin: *\r\nlast-modified: Wed, 31 Jul 2024 14:37:20 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\naccess-control-expose-headers: Date\r\nvia: 1.1 4d37a80c51c1368344134f5bdf1ea92e.cloudfront.net (CloudFront), 1.1 118086882d9f17e10877e0653a055586.cloudfront.net (CloudFront)\r\ndate: Sat, 20 Jun 2026 16:34:55 GMT\r\ncache-control: max-age=7200\r\netag: \"75531f781b8f27244ccdc3afc0df7032\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: FRA60-P9, ARN53-P3\r\nx-amz-cf-id: RHAZuyW9eVV4AiuDk61BVkXHk3gXq3aXTXsmgsPDeumW9D476-GcsQ==\r\nage: 3205\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":197,"size_decoded":889,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"75531f781b8f27244ccdc3afc0df7032","sha1":"8da96ea4d4616c0f9958a0131c8a00a379778bde","sha256":"29f0dcbd3a1ab011b7613a094ecfd4fc11cab3c687af683688eabd971f0d6514","sha512":"f85fc4f6065d57f47ed8fa3a617e86a27dc0527b67aa4178c1ed52a0fa55b9c75dfbf3ba06157a590c9f61abfe4a72f757a152211ab7a061f9431879333cc963","ssdeep":"","tlshash":"43d0129d520c2c2cf5368a24d7783b70106a20525648316d94b204716255e4d7437af8","first_seen":"2025-09-28T22:43:58.477062Z","last_seen":"2026-06-20T17:28:47.976446Z","times_seen":14,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.content.tuigroup.com/adamtui/2026_1/16_11/1064c6f2-7e7d-4588-bde0-b3d400b5fdc0/griechenland-rhodos-lindos.jpeg?i10c=img.resize(width:658);img.crop(width:658,height:370)","fqdn":"cdn.content.tuigroup.com","domain":"tuigroup.com","tld":"com"},"ip":{"addr":"95.101.10.105","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.192Z","timestamp":1781976486192,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.content.tuigroup.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 23 Feb 2026 00:00:00 GMT","end":"Mon, 22 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:A2:A9:E1:36:21:12:70:71:62:D8:9E:CC:C0:F9:EB:9C:0E:5A:B8","sha256":"B9:93:43:16:0C:4D:95:D2:95:92:C2:C7:38:98:8D:C1:23:69:E0:6E:91:8C:9E:98:6E:CB:44:F8:39:7E:96:14"}}},"request":{"raw":"GET /adamtui/2026_1/16_11/1064c6f2-7e7d-4588-bde0-b3d400b5fdc0/griechenland-rhodos-lindos.jpeg?i10c=img.resize(width:658);img.crop(width:658,height:370) HTTP/1.1\r\nHost: cdn.content.tuigroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\netag: \"b82d647e7ebe891c732af06609315931\"\r\nlast-modified: Wed, 21 Jan 2026 11:56:09 GMT\r\nserver: Akamai Image Manager\r\ncontent-length: 82175\r\ncontent-type: image/jpeg\r\ncache-control: private, no-transform, max-age=2592000\r\nexpires: Mon, 20 Jul 2026 17:28:06 GMT\r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\nalt-svc: h3=\":443\"; ma=93600\r\nquic-version: 0x00000001\r\nage: 477370\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":82175,"size_decoded":82558,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPCM), density 118x118, segment length 16, progressive, precision 8, 658x334, components 3","md5":"41f9ce638d81a98168c10a16bbde8d83","sha1":"37fca1ab57dafefcf10b896824615a2c83efa2d8","sha256":"31418c92aed91e73c4d7faca90c9efddcd8ecdf85d731c2b52059b23c922377f","sha512":"2c6647248609d85f0705ce715467d734069ae226c58dedd38e8f18185470a168aec96f3723813bd2f7543ba277271e2e887a606d461fc00ac127b27ed76b612f","ssdeep":"1536:/CdLZnFEKNipvYdN2mrKAM9G8Qypp27qlFD4rNhitMbNNkKNM:6d5FdNipvY+mrKJ9G8L2qlN4qMbNNxe","tlshash":"a983027416b966af554347a2ba312903c941658f2cdd3af3e2aff165f248de0b390873","first_seen":"2026-06-20T17:28:47.97752Z","last_seen":"2026-06-20T17:28:47.97752Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/shared/mwa/assets/v2/icons/tui/calendar.svg","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.558Z","timestamp":1781976486558,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /shared/mwa/assets/v2/icons/tui/calendar.svg HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\nx-amzn-requestid: af92604b-7283-4a43-b063-af9341daa488\r\nx-amzn-remapped-content-length: 283\r\nx-amz-apigw-id: fOyvjFVOFiAFYeQ=\r\ntimestamp: Fri, 19 Jun 2026 23:05:20 GMT\r\nx-amzn-trace-id: Root=1-6a35cb2f-042cfcb912a74c0c45f404fc\r\ncontent-encoding: gzip\r\ncontent-length: 211\r\ncache-control: public, max-age=538633\r\nexpires: Fri, 26 Jun 2026 23:05:19 GMT\r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver: TUI Web\r\nvary: Accept-Encoding,Origin\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":283,"size_decoded":844,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"92f452357bcab32f0dd07b7c91b67a2c","sha1":"c121a82e75976f199ca6754127b34ecc164593b7","sha256":"c7a12458a88e3ebe857240b36fcce1764d1bb35b23dfdd3a7d62c2981e4e1865","sha512":"dadbc39c5c08c7a9fe24c9afc72b75d6009f4eb0c4218a288be610e163ba1263e591675c14361bda1957bd29e2b9d98e8f113b2226331329b1b2b35607abfa91","ssdeep":"","tlshash":"d3d0c28b07140c9cb02b4a70d768b33420722595266898a4aaa22170a341a9b696bee9","first_seen":"2026-03-29T05:54:31.361447Z","last_seen":"2026-06-20T17:28:47.978716Z","times_seen":5,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.cloud.tui.com/search-departure-airport/v2/departureAirportGroups/TUICOM/de-DE","fqdn":"api.cloud.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"63.184.79.191","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.695Z","timestamp":1781976486695,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.cloud.tui.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 31 Mar 2026 00:00:00 GMT","end":"Wed, 14 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4D:1B:CF:1F:A2:F7:54:75:66:1A:59:5D:5D:E3:9C:C5:4D:DA:A8:29","sha256":"19:24:EA:ED:3E:EF:31:9A:A1:7B:3D:65:EE:5D:75:06:99:FE:4F:3F:31:14:A9:3C:67:1F:22:BC:0B:DE:DA:0D"}}},"request":{"raw":"GET /search-departure-airport/v2/departureAirportGroups/TUICOM/de-DE HTTP/1.1\r\nHost: api.cloud.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.tui.com/\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 1354\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"11df-9AhewDyt7EdmclhI/DYY2VXqQRw\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\napigw-requestid: fRUSHjlyFiAEJqA=\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":4575,"size_decoded":1674,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5b4e526ce2c042c229875685096980f2","sha1":"f4085ec03cadec4766725848fc3618d955ea411c","sha256":"1a74d68e5d8b7a771f649c4d11b0e6df7303f337333fbb81225a6da3f0e9d843","sha512":"4dfc37681d9a6f3cc8cf8a39217c0fdb4ccdee96724a296b4c35d4f748975fb21582415007d3113e63df1a9f236de621e38d19155725a8805cc78adf502bace4","ssdeep":"96:EldhSny/DO7UlZwBKS5+8Hy+qzE18GZnGzxr4fNGQdP0GbfVGj0RgjGPNS/7LR6j:orH2YbQR0KsXAoU","tlshash":"1691e9ff30a80d7e474746fa9d0173e79ea534762ba91c89a80b2a4994c732fe517807","first_seen":"2026-06-20T17:28:47.915334Z","last_seen":"2026-06-20T17:28:47.915334Z","times_seen":1,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":26,"send":0,"wait":34,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloud.tui.com/osp/ao/ui/nordic-search-panel/current/p-hl2OCUe7.js","fqdn":"cloud.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.890Z","timestamp":1781976486890,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloud.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Tue, 16 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"7D:E5:28:0F:B6:E6:8A:A2:A4:FC:71:45:EB:89:19:59:DA:00:B6:3C","sha256":"31:B4:F1:6F:B9:43:CE:E2:95:A8:98:0A:8A:2C:53:14:B6:A1:C8:DB:55:EC:BD:2F:D1:88:82:44:35:BB:15:38"}}},"request":{"raw":"GET /osp/ao/ui/nordic-search-panel/current/p-hl2OCUe7.js HTTP/1.1\r\nHost: cloud.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cloud.tui.com/osp/ao/ui/nordic-search-panel/current/nordic-search-panel.esm.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-expose-headers: Date\r\naccess-control-max-age: 3600\r\nlast-modified: Thu, 28 May 2026 06:23:32 GMT\r\ncontent-encoding: gzip\r\nx-amz-server-side-encryption: AES256\r\nserver: AmazonS3\r\netag: W/\"25c64290a8b21ed52ad211e72ec6fc81\"\r\nx-amz-cf-pop: FRA56-P6\r\nx-amz-cf-id: TR7GSCoxwePAkf6TQuVQ04vpYV3hIo0BQBzivLkUTQsbttqGiEADOg==\r\ncontent-length: 13611\r\ncache-control: public, max-age=300\r\nexpires: Sat, 20 Jun 2026 17:33:06 GMT\r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\nvary: Accept-Encoding\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":69679,"size_decoded":14243,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (65449)","md5":"25c64290a8b21ed52ad211e72ec6fc81","sha1":"da51355cadeb4954521a05460522da1796fd5f25","sha256":"5de65ce488c0d821bea5521e1365ce9b333220305c109a6d989dfec0a3a1d1de","sha512":"1a7bc14aa38c0817e788aaa715c4d31b62f7e5ce41311dd3dd9b85343fbd9dc599e240e1ce2b2fdad416c980a37dba597b2764227347e52756bab3a2e346b681","ssdeep":"1536:rczhE5pYzMV46c2ZZHTQwuqnhwqz/vy7z46c2ZZkTQwuqVSa2YcXG2UIG+mPI1aq:r0hE5pwMV46c2ZZPhwqz/vyH46c2ZZMK","tlshash":"8c6386b8f821a0bb3d1b597f43aad979b349b800bf052a60fb05a8c974d75e301d7b15","first_seen":"2026-06-06T12:22:18.157007Z","last_seen":"2026-06-20T17:28:47.979917Z","times_seen":2,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloud.tui.com/cdn/header/current/index.js","fqdn":"cloud.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:05.269Z","timestamp":1781976485269,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloud.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Tue, 16 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"7D:E5:28:0F:B6:E6:8A:A2:A4:FC:71:45:EB:89:19:59:DA:00:B6:3C","sha256":"31:B4:F1:6F:B9:43:CE:E2:95:A8:98:0A:8A:2C:53:14:B6:A1:C8:DB:55:EC:BD:2F:D1:88:82:44:35:BB:15:38"}}},"request":{"raw":"GET /cdn/header/current/index.js HTTP/1.1\r\nHost: cloud.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 10 Feb 2026 13:46:53 GMT\r\netag: \"8104b084a5d5c61df603a5c41d9c5f96\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-amz-cf-pop: FRA50-P2\r\nx-amz-cf-id: nu1ktkvGgE3xFP8NpEhqFWxK26Az0uj61ol3S4_p1AXfYHbyC2q02A==\r\ncontent-encoding: gzip\r\ncontent-length: 44244\r\ncache-control: max-age=1\r\nexpires: Sat, 20 Jun 2026 17:28:06 GMT\r\ndate: Sat, 20 Jun 2026 17:28:05 GMT\r\nvary: Accept-Encoding\r\nage: 599\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":252049,"size_decoded":44786,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8104b084a5d5c61df603a5c41d9c5f96","sha1":"908b6c394d70de3f827e2496f18e5be36847128a","sha256":"bee3043d080a81d6d7c1dda6bdca82ab128003bbbf9516043683c53a4cde30cf","sha512":"08c2c9ba1490fcb93aed4fdbc798febac173a19f07b0a8517a873af449e2145734906cd407f756127a313a5b958e72e36bd5f0e1e4dc0cb70fadd76ce15c6728","ssdeep":"3072:djdRdeRX4p9sTvZRXZsQZGVmlEVtH54/ZG+5By:d8RBGVvW/Zry","tlshash":"a6341985a1c421367cbfc665b2da9e4467951c41d847d85cfabc98cb0fc3ee260a3a3d","first_seen":"2026-03-28T02:59:34.616471Z","last_seen":"2026-06-20T17:28:47.980834Z","times_seen":9,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":4,"send":0,"wait":49,"receive":3,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/browse/mwa/workflow-ssg-prod/workflow-pages-home/assets/workflow-pages-home_26.25.1/home/index.js","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:05.285Z","timestamp":1781976485285,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /browse/mwa/workflow-ssg-prod/workflow-pages-home/assets/workflow-pages-home_26.25.1/home/index.js HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\naccess-control-allow-methods: GET, POST, PUT\r\naccess-control-max-age: 0\r\nlast-modified: Mon, 15 Jun 2026 09:23:23 GMT\r\netag: \"3b518f331ed7716234a5f8eef1135fba\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nx-amz-cf-pop: FRA60-P14\r\nx-amz-cf-id: fk_0BtoNY7QfFJytKVXiPea8_M8GDVTM7d1zHeuBZ8VF2_sMFvQPAQ==\r\ncontent-encoding: gzip\r\ncontent-length: 29658\r\ncache-control: max-age=600\r\nexpires: Sat, 20 Jun 2026 17:38:05 GMT\r\ndate: Sat, 20 Jun 2026 17:28:05 GMT\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver: TUI Web\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-origin: https://www.tui.com\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":98218,"size_decoded":30386,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"3b518f331ed7716234a5f8eef1135fba","sha1":"d66cb36103470a29028fa84df139675ad9861e76","sha256":"f5abaf9bed69e3970cc74eab95b9f32e21ba3aa301e30ccd49fd258d5a87ee27","sha512":"6b9a29b5daccad6bfc5d75c92ee0bd7d05e6ce053e9fceb6833fab54c9f9996bfff64d20b1d0a6db8b3523bb1dae5e3583ec41b2500c01b7595ee59db6f98d55","ssdeep":"1536:vwkwrsnKGmkngap4wCGDkWfdp2lBbaF7rW5TMG6jz0Q39OMxiI6c1a0IswY:vwUngap4wCGjfdp2lBbaF74TMGSwQ39t","tlshash":"6ea319953094b53202eb68f7a16f6644b3752598b00d8554b43cccca3fb9dc392b7afa","first_seen":"2026-06-20T17:28:47.982587Z","last_seen":"2026-06-20T17:28:47.982587Z","times_seen":1,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tui.com/assets/v2/icons/bullet/padlock-checked.svg","fqdn":"static.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"13.249.8.122","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:05.344Z","timestamp":1781976485344,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Jul 2025 00:00:00 GMT","end":"Wed, 29 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B1:29:28:04:46:85:C0:F0:4D:6F:D6:B9:CC:AA:FF:BE:E9:8C:8E:D4","sha256":"F6:AE:7B:84:78:6D:24:4A:0F:93:96:0C:8B:78:F7:AF:26:0C:5C:AB:8E:7A:05:74:F4:C4:6C:E3:1E:20:86:4A"}}},"request":{"raw":"GET /assets/v2/icons/bullet/padlock-checked.svg HTTP/1.1\r\nHost: static.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nCookie: _vis_opt_exp_de24_combi=2; tui-coupon-wallet-enabled=true; _vis_opt_exp_P1973_combi=A; ecid=66966107634980792017217711389285007288; kndctr_41E27DA552A6473A0A490D4D_AdobeOrg_cluster=irl1; ak_bmsc=B67A7B246DD506FF96868E790DEC7588~000000000000000000000000000000~YAAQnQplX5EeC8yeAQAA/0oT5gDOPuTt/btrBxkEvsjZCv5iCpXn0dXIvmJwn7xqmMAnNIe0nO0FY39Vbl5SjyGMJEVaR4G9q1/l42ck/a/EQOacJ4igK59UwcumJR8QpmYiwT+CVeC/eOnPjNwPUHExTtozITtaYleYz3l9P1pItpV47INsmiRsPueOOgIFv4Y8oYKv34ceEccDtGFc3g6P6Mp+trxKpDZd6yc0HigFXe28HQYG7avaeFj+ik5m0MFEhAiuBqS6SvCL4vy3reXusZ6jxYvIWHdT6PwPnlhHpHp22JmnVdOr/CIQP/7fu/r0sRyFMPvi8dmL3H+VaoMn7Zyfl7wI1msqdFED3mRYtf6+m0f5fS2F1TrGMkXqOaIHTqRL2Aw2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\ncontent-length: 694\r\nlast-modified: Wed, 31 Jul 2024 14:37:19 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nvia: 1.1 32803d0ba3af70cddd7db80d2fd00608.cloudfront.net (CloudFront), 1.1 118086882d9f17e10877e0653a055586.cloudfront.net (CloudFront)\r\ndate: Sat, 20 Jun 2026 17:03:05 GMT\r\ncache-control: max-age=7200\r\netag: \"0bfff9bcd1e0363c7eaf87a00494862b\"\r\nvary: Accept-Encoding,Origin\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: FRA60-P9, ARN53-P3\r\nx-amz-cf-id: wIkzpu3605RuL8SiHrr16esJ6d7XTiP8i7OYbQ4KG3PBK89YEwvF8Q==\r\nage: 1579\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":694,"size_decoded":1324,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0bfff9bcd1e0363c7eaf87a00494862b","sha1":"f4586d33ab14667a9c9c61e98acf3e09b94acab3","sha256":"2af935fdebf60b18190d2ae6c2833a0839dc9f68acd10b01c53af772c5b9679f","sha512":"62db3eec3b00506d2b5901753158b5076d25e19c4ce7c7ff996f28247d8828b5e2aed140917ddb2c2cecb8b1a3d174c75345a24ca56dd6bee9a8125bc033c2f1","ssdeep":"","tlshash":"53019ecd42180c5cb6574b3ce33d31706169d596620a2e6c41741038515a6aeb8bfff2","first_seen":"2025-09-28T22:43:58.490759Z","last_seen":"2026-06-20T17:28:47.984188Z","times_seen":14,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":2,"connect":12,"send":0,"wait":11,"receive":0,"ssl":239},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloud.tui.com/cdn/search-form/v2/search-form.js","fqdn":"cloud.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.161Z","timestamp":1781976486161,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloud.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Tue, 16 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"7D:E5:28:0F:B6:E6:8A:A2:A4:FC:71:45:EB:89:19:59:DA:00:B6:3C","sha256":"31:B4:F1:6F:B9:43:CE:E2:95:A8:98:0A:8A:2C:53:14:B6:A1:C8:DB:55:EC:BD:2F:D1:88:82:44:35:BB:15:38"}}},"request":{"raw":"GET /cdn/search-form/v2/search-form.js HTTP/1.1\r\nHost: cloud.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 29 Jan 2026 09:30:40 GMT\r\netag: \"cbd0bf6672036c19f858f4f45f09b8cb\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-amz-cf-pop: FRA50-P2\r\nx-amz-cf-id: 6iLTWQl0-fCpE4ou3T01J9rZvrBNoPtVYjPPoHVex94XmkxJTnqClg==\r\ncontent-encoding: gzip\r\ncontent-length: 14864\r\ncache-control: max-age=1\r\nexpires: Sat, 20 Jun 2026 17:28:07 GMT\r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\nvary: Accept-Encoding\r\nage: 599\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":115539,"size_decoded":15406,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"68268d900435be4b484ab62fc5361115","sha1":"44b16ef24baa4c213921155935297724d0256555","sha256":"f40605987c5e6ce5d3326b966671271f863a004ac40c36248097ac88773ab661","sha512":"fd4dc78673dcddf386bd3eddcb0f6b480de36769805bafedbdae657c4670a4c729accbe0b71e98f4b84961523120d75d512ce19004bd2b1ecc122c7e8c60c558","ssdeep":"1536:V2lVDMqUTgwrPlPZLmAZC6oEPhWwtgbYedWsO9+U/DpRJIczpW661MKyUcGBhAS2:y+vXIcz8hASBxczCSBxr","tlshash":"b4b34474f461a2ba6c275f7f73ef9a68336874019e3026a8bf8d50c7038e1fa0199755","first_seen":"2026-03-29T05:54:31.390126Z","last_seen":"2026-06-20T17:28:47.985208Z","times_seen":5,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloud.tui.com/cdn/favorites/current/render-DnQyu38p.js","fqdn":"cloud.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.434Z","timestamp":1781976486434,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloud.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Tue, 16 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"7D:E5:28:0F:B6:E6:8A:A2:A4:FC:71:45:EB:89:19:59:DA:00:B6:3C","sha256":"31:B4:F1:6F:B9:43:CE:E2:95:A8:98:0A:8A:2C:53:14:B6:A1:C8:DB:55:EC:BD:2F:D1:88:82:44:35:BB:15:38"}}},"request":{"raw":"GET /cdn/favorites/current/render-DnQyu38p.js HTTP/1.1\r\nHost: cloud.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cloud.tui.com/cdn/favorites/current/tui-favorites-heart.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 11 Feb 2026 08:45:29 GMT\r\netag: \"e5860483abde56c62ad773e19f7480f1\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-amz-cf-pop: FRA50-P2\r\nx-amz-cf-id: LYCWxGBkUMFUA7gJk4DulyimN2wAV2n3ZTufsCjdrX-32qm8k4jkuw==\r\ncontent-encoding: gzip\r\ncontent-length: 1200\r\ncache-control: max-age=583\r\nexpires: Sat, 20 Jun 2026 17:37:49 GMT\r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\nvary: Accept-Encoding\r\nage: 17\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":2702,"size_decoded":1742,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (2657)","md5":"e5860483abde56c62ad773e19f7480f1","sha1":"8465daadd246441fd094b5c132d402fa72376885","sha256":"512e73e4ddc756a222bcbae5aaf1494ad6d427bdebb0b69c42f2b9283a9668ad","sha512":"42469e3f3962e783ca400b4f522dd210074d40e98cd42595e4adf8e529035a0cbb5ba8326973ccb1bd8a1a872232a9c064bd650c28d4bbb4006fd838f3275c3a","ssdeep":"","tlshash":"6051746261b868fbad15d521c1ca31b6792b55d1b100a868fa4e0c611f19ed1ec37c7f","first_seen":"2025-09-28T22:43:58.361671Z","last_seen":"2026-06-20T17:28:47.986317Z","times_seen":15,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/shared/mwa/assets/v2/icons/tui-light/oncoming-camper.svg","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.662Z","timestamp":1781976486662,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /shared/mwa/assets/v2/icons/tui-light/oncoming-camper.svg HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mwa.tui.com/browse/mwa/workflow-ssg-prod/workflow-pages-home/assets/workflow-pages-home_26.25.1/home/index.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\nx-amzn-requestid: ce417b65-6ca5-4d2b-9843-1573b259b73d\r\nx-amzn-remapped-content-length: 519\r\nx-amz-apigw-id: fKLbdGnRFiAFT6g=\r\ntimestamp: Thu, 18 Jun 2026 13:29:20 GMT\r\nx-amzn-trace-id: Root=1-6a33f2af-1f5fada610a9c53920f51f0f\r\ncontent-encoding: gzip\r\ncontent-length: 336\r\ncache-control: public, max-age=417673\r\nexpires: Thu, 25 Jun 2026 13:29:19 GMT\r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver: TUI Web\r\nvary: Accept-Encoding,Origin\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":519,"size_decoded":969,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6e725a4a58ca6ac1902c6f877c5e810e","sha1":"a72682fc68e328a2034aa815e5911fda90c037b5","sha256":"79e73b2e3265e7c74e54ae3fbd02c87ee2c5b1b87e3c48d35e42a28b8b6f1e80","sha512":"23c42ae11955407878bc2b3e44185cc38b9cbcad27049aab2407ed9471ffa61da232eb50b80587622368d1bfa56887e423f3dfe2b0f33271b63b7071511b5195","ssdeep":"","tlshash":"62f05061db5c1d0cf55b4670df187571137a7153a14c9074586c22306356a1afdb75b4","first_seen":"2026-03-29T05:54:31.314912Z","last_seen":"2026-06-20T17:28:47.999658Z","times_seen":3,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/shared/mwa/assets/v2/icons/tui-light/plus-circled.svg","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:07.307Z","timestamp":1781976487307,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /shared/mwa/assets/v2/icons/tui-light/plus-circled.svg HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mwa.tui.com/browse/mwa/workflow-ssg-prod/workflow-pages-home/assets/workflow-pages-home_26.25.1/home/index.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T20:29:48.587722Z","times_seen":16589263,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"login.tui.com/accounts.webSdkBootstrap?apiKey=4_LWGzxVDlxnaTetL1EDjQ7w\u0026pageURL=https%3A%2F%2Fwww.tui.com%2F\u0026sdk=js_latest\u0026sdkBuild=1930\u0026format=json","fqdn":"login.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"3.164.240.108","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:08.335Z","timestamp":1781976488335,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 05 Sep 2025 00:00:00 GMT","end":"Fri, 04 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:5D:7A:1A:E0:66:FD:26:C8:F2:72:FD:47:28:62:29:7E:FA:15:A5","sha256":"F8:F7:4D:8F:C6:0E:39:86:00:A4:69:52:37:A7:89:8A:A1:66:38:EF:2A:EE:23:55:AD:27:45:02:50:1B:EE:24"}}},"request":{"raw":"GET /accounts.webSdkBootstrap?apiKey=4_LWGzxVDlxnaTetL1EDjQ7w\u0026pageURL=https%3A%2F%2Fwww.tui.com%2F\u0026sdk=js_latest\u0026sdkBuild=1930\u0026format=json HTTP/1.1\r\nHost: login.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nCookie: _vis_opt_exp_de24_combi=2; tui-coupon-wallet-enabled=true; _vis_opt_exp_P1973_combi=A; ecid=66966107634980792017217711389285007288; kndctr_41E27DA552A6473A0A490D4D_AdobeOrg_cluster=irl1; ak_bmsc=B67A7B246DD506FF96868E790DEC7588~000000000000000000000000000000~YAAQnQplX5EeC8yeAQAA/0oT5gDOPuTt/btrBxkEvsjZCv5iCpXn0dXIvmJwn7xqmMAnNIe0nO0FY39Vbl5SjyGMJEVaR4G9q1/l42ck/a/EQOacJ4igK59UwcumJR8QpmYiwT+CVeC/eOnPjNwPUHExTtozITtaYleYz3l9P1pItpV47INsmiRsPueOOgIFv4Y8oYKv34ceEccDtGFc3g6P6Mp+trxKpDZd6yc0HigFXe28HQYG7avaeFj+ik5m0MFEhAiuBqS6SvCL4vy3reXusZ6jxYvIWHdT6PwPnlhHpHp22JmnVdOr/CIQP/7fu/r0sRyFMPvi8dmL3H+VaoMn7Zyfl7wI1msqdFED3mRYtf6+m0f5fS2F1TrGMkXqOaIHTqRL2Aw2; _tfm_exp_tfo1684=2; _vis_opt_exp_CTRRTBb_combi=0; _vis_opt_exp_CTRRTBc_combi=3; _vis_opt_exp_18742_combi=2; utag_main=v_id:019ee6135181001c3648a73012a605050001400900918$_sn:1$_se:1%3Bexp-session$_ss:1%3Bexp-session$_st:1781978286274%3Bexp-session$ses_id:1781976486274%3Bexp-session$_pn:1%3Bexp-session; _vis_opt_exp_tfo1518_combi=2; _vis_opt_exp_AbDist0_combi=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 182\r\ndate: Sat, 20 Jun 2026 17:28:08 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,PUT,DELETE,HEAD,OPTIONS,POST,PATCH\r\naccess-control-allow-origin: https://www.tui.com\r\naccess-control-max-age: 86400\r\ncache-control: private\r\ncontent-encoding: gzip\r\nset-cookie: gmid=gmid.ver4.AtLtemewZQ.r4t7lANZRdypQ6yiE8G9X1rE609iNXh5EYmiaCFNe81a3OZtpRfw-5RuRr28T-vz.-ijhexjQQY9JRRRnsGcNGr5AkiwdVWSGw0lA3gbOfvvHaw7dPisRvrXiBbaRpQJnkbL98dE0AumI2GeW9Oyp7w.sc3; expires=Sun, 20 Jun 2027 17:28:08 GMT; domain=.login.tui.com; path=/; secure; samesite=none; httponly\nucid=bbvDql2Ihgc7hS6aS-wN1A; expires=Sun, 20 Jun 2027 17:28:08 GMT; domain=.login.tui.com; path=/; secure; samesite=none; httponly\nhasGmid=ver4; expires=Sun, 20 Dec 2026 17:28:08 GMT; domain=.login.tui.com; path=/; secure; samesite=none\r\nvary: Origin, Accept-Encoding\r\np3p: CP=\"IDC COR PSA DEV ADM OUR IND ONL\"\r\nx-error-code: 0\r\nx-soa: true, Gator\r\nx-server: gator-eu1-prod-66f54cff46-rkmqk\r\nx-callid: 019ee6135a9474f0b069c7fa815e1587\r\nx-robots-tag: none\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 bf9e29084831d9a2b72227f617c2b80c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: NzBOyygooOY0ys7Val-oeEfKSO8j9Hrj4cSOeQlOZT834My_N3Aajg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":199,"size_decoded":1510,"mime_type":"text/javascript; charset=utf-8","magic":"JSON text data","md5":"b91750e05c5e3978fc92546f77a6cec8","sha1":"57f39c6a8ca02a5387f87499f45c5375c7e680c7","sha256":"11e757c4fa255da30c8b6090d36cafa61b17645edbacf59c255ca24967465734","sha512":"cbb59cd0cd90a77a7bbf2f035d456d7c9e3264b7be1f326cdee7b02b86079c24f6ae44f7548f2fb95b4477af6b9b05511c474cd8d19c9042eebb6312a8e28c05","ssdeep":"","tlshash":"55d022000e9522b6383c82e20878474437a2bf0e02770e5b37bb3f28230a9724504b52","first_seen":"2026-06-20T17:28:48.000676Z","last_seen":"2026-06-20T17:28:48.000676Z","times_seen":1,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":57,"connect":9,"send":0,"wait":221,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/browse/mwa/workflow-ssg-prod/workflow-pages-home/assets/workflow-pages-home_26.25.1/home/index.css","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:04.938Z","timestamp":1781976484938,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /browse/mwa/workflow-ssg-prod/workflow-pages-home/assets/workflow-pages-home_26.25.1/home/index.css HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nCookie: _vis_opt_exp_de24_combi=2; tui-coupon-wallet-enabled=true; _vis_opt_exp_P1973_combi=A; ecid=66966107634980792017217711389285007288; kndctr_41E27DA552A6473A0A490D4D_AdobeOrg_cluster=irl1; ak_bmsc=B67A7B246DD506FF96868E790DEC7588~000000000000000000000000000000~YAAQnQplX5EeC8yeAQAA/0oT5gDOPuTt/btrBxkEvsjZCv5iCpXn0dXIvmJwn7xqmMAnNIe0nO0FY39Vbl5SjyGMJEVaR4G9q1/l42ck/a/EQOacJ4igK59UwcumJR8QpmYiwT+CVeC/eOnPjNwPUHExTtozITtaYleYz3l9P1pItpV47INsmiRsPueOOgIFv4Y8oYKv34ceEccDtGFc3g6P6Mp+trxKpDZd6yc0HigFXe28HQYG7avaeFj+ik5m0MFEhAiuBqS6SvCL4vy3reXusZ6jxYvIWHdT6PwPnlhHpHp22JmnVdOr/CIQP/7fu/r0sRyFMPvi8dmL3H+VaoMn7Zyfl7wI1msqdFED3mRYtf6+m0f5fS2F1TrGMkXqOaIHTqRL2Aw2\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\nlast-modified: Mon, 15 Jun 2026 09:23:24 GMT\r\netag: \"b2aebbbae9f2676d25f036739d3dffb1\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nx-amz-cf-pop: FRA60-P14\r\nx-amz-cf-id: grvSxVQiQ_xGaT_egDJOUdsS7_DrdyFD7D_0XL6jGbXYx87RXeZgmQ==\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ncontent-encoding: gzip\r\ncontent-length: 40870\r\ncache-control: max-age=600\r\nexpires: Sat, 20 Jun 2026 17:38:05 GMT\r\ndate: Sat, 20 Jun 2026 17:28:05 GMT\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver: TUI Web\r\nvary: Accept-Encoding, Origin\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":395287,"size_decoded":41534,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"b2aebbbae9f2676d25f036739d3dffb1","sha1":"b165286d5cd35ff4cc3e03f33b1382679a59838f","sha256":"06384bbf1bb245be2afa6deec4f625ae295523c865b5fa320f38ef89eba72018","sha512":"b247ef4f07b49f19e0ef03bf90a736e2d44ec50fb1e5b33201e5e298055e43bc86ed2a4677a3db56b8435468fb88049a80a20493a288f17c495249e4732efc79","ssdeep":"3072:Vcy1wd3nwd2ejnmwdWOfZ0n+aY3sIwdpQ+hwdym/wdy+FmxP1/qmkdnpQEI/JNZp:Vc8imxP1/qmkdnp8L","tlshash":"6b84c5a8b518b67dfd7b943e275da68c5120b820de5382f9fa43910586cbbf31923d4c","first_seen":"2026-06-20T17:28:48.012069Z","last_seen":"2026-06-20T17:28:48.012069Z","times_seen":1,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":6,"connect":28,"send":0,"wait":105,"receive":18,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.ctfassets.net/wft38qt3w1fi/5k06pFkxV8PfsJ92JSDKfe/95ec5da840e45ac7c6a6cc9f46c740ca/tuicardclassic-card.svg","fqdn":"images.ctfassets.net","domain":"ctfassets.net","tld":"net"},"ip":{"addr":"108.157.229.8","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:05.335Z","timestamp":1781976485335,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.ctfassets.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sat, 18 Oct 2025 00:00:00 GMT","end":"Sun, 15 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:39:C1:37:7A:6B:60:8A:D5:73:9E:D7:C4:F9:3A:11:9B:BD:94:2B","sha256":"AC:EA:37:10:54:C2:91:B5:04:B8:B4:CA:CD:35:48:4D:D0:92:78:F6:E2:8B:D9:57:78:20:D6:74:FE:14:16:A9"}}},"request":{"raw":"GET /wft38qt3w1fi/5k06pFkxV8PfsJ92JSDKfe/95ec5da840e45ac7c6a6cc9f46c740ca/tuicardclassic-card.svg HTTP/1.1\r\nHost: images.ctfassets.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 06 Jul 2023 06:58:22 GMT\r\nserver: Contentful Images API\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ndate: Sat, 20 Jun 2026 03:00:01 GMT\r\ncache-control: max-age=31536000\r\netag: W/\"9b4b3a96047e5b6463df9faa39eee77d\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 3346055bb53a57ebf02828b88e1ee87c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: NQVE0gj2RVtyL1b-Oac_Peb2xMFAIeccsnm0wwXL8wVJ8Jhie6F9ew==\r\nage: 54392\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":24404,"size_decoded":9995,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9b4b3a96047e5b6463df9faa39eee77d","sha1":"5f154a9af4b069e117cc406f90003960a95258cd","sha256":"0a295f14f2a4b927b14700f19d52a9c1f1ccd2764f373dfd7b1901583599ee52","sha512":"95d70c64978daefcd0220c9a3b198f63c05d38ba6dff1ff13ee64af9fa5e8ebd79c3a7564b276dafa491ffe39228aaff7a8b9e66ed5b8ca740c442c2581e9891","ssdeep":"384:8tNFCw/1Yd18Xz8snaAB0TRRc1VI7+UMrYfi7aE7YQvavpEpJm/VRUP:gvkjIzBWc1VI7TfiGE7YZP/Vk","tlshash":"78b2c7c91b3212fdb3c49abed522114a7e277ca13b700a9cd6475d086895de66cb8ce3","first_seen":"2026-03-28T02:59:34.568955Z","last_seen":"2026-06-20T17:28:48.013423Z","times_seen":3,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/shared/mwa/assets/v2/fonts/ambit-bold.subset.woff2","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:05.898Z","timestamp":1781976485898,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /shared/mwa/assets/v2/fonts/ambit-bold.subset.woff2 HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mwa.tui.com/browse/mwa/workflow-ssg-prod/workflow-pages-home/assets/workflow-pages-home_26.25.1/themes/tui-light/index.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: binary/octet-stream\r\nx-amzn-requestid: 56374c18-574d-410f-b7a1-30bd9f5e068a\r\nx-amzn-remapped-content-length: 16700\r\nx-amz-apigw-id: fOyvQF0zFiAFT6g=\r\ntimestamp: Fri, 19 Jun 2026 23:05:19 GMT\r\nx-amzn-trace-id: Root=1-6a35cb2e-673389aa1fc247f75879ee4a\r\ncache-control: public, max-age=538633\r\nexpires: Fri, 26 Jun 2026 23:05:18 GMT\r\ndate: Sat, 20 Jun 2026 17:28:05 GMT\r\ncontent-length: 16700\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver: TUI Web\r\nvary: Accept-Encoding,Origin\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16700,"size_decoded":17313,"mime_type":"binary/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 16700, version 1.1441","md5":"6d79f9f05327cc998229d9f08e64f6d4","sha1":"0b9e9c2cae3da7ed4deeb7f87933f9255a3fd87e","sha256":"8f60e4ba98fe0910ef396b161d01073c9ce5c2f26421aba95bc611c7ae16a417","sha512":"0c89183d873d15f3ea705faf86478eb7d34eac4c11583f45e6c86387f94f9897ff24a6742f03344606560eaa698d8ee1153e38b8e95d2d03eae98657575b5049","ssdeep":"384:gW8QMNoV4Tr//xOo610IWnCy11e6hyqGTdBtgVywW4n1r:f8Q8rr/p610IWCUevvtgVywNn1r","tlshash":"d372e12ccbd866adfd614e092ffb3945518a43b78c0655207805e7acca0afa4f910c2b","first_seen":"2025-09-28T22:43:58.346844Z","last_seen":"2026-06-20T17:28:47.914325Z","times_seen":28,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/shared/mwa/assets/v2/icons/tui-light/letter-i-circled.svg","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.047Z","timestamp":1781976486047,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /shared/mwa/assets/v2/icons/tui-light/letter-i-circled.svg HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mwa.tui.com/browse/mwa/workflow-ssg-prod/workflow-pages-home/assets/workflow-pages-home_26.25.1/home/index.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\nx-amzn-requestid: efe0ca0d-aa0d-4a39-97bd-8694b6b74a8f\r\nx-amzn-remapped-content-length: 282\r\nx-amz-apigw-id: fOyvYEW-FiAFfjQ=\r\ntimestamp: Fri, 19 Jun 2026 23:05:19 GMT\r\nx-amzn-trace-id: Root=1-6a35cb2e-5bf3ba9a57132758169e4a20\r\ncontent-encoding: gzip\r\ncontent-length: 200\r\ncache-control: public, max-age=538632\r\nexpires: Fri, 26 Jun 2026 23:05:18 GMT\r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver: TUI Web\r\nvary: Accept-Encoding,Origin\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":282,"size_decoded":833,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"985e7d41ef5ba0d534e3c51eaf38c919","sha1":"00e528f66d984fab6b3ffd80c337ea0362110e7b","sha256":"973dcf42f24e96422d56c5cb3afc62c9a6ac91b37bc8c37329b43357b8b3445f","sha512":"de32ff181fc0872d492f914ca66965957d4babb88626334225b87e9fe9a525a8ac807fcb7a4d356eda83e08ff17a01164af220a4e6d05df1db2b3a7e6a5f38a0","ssdeep":"","tlshash":"80d02b59510ccc1c75268138e3273671303f20121a0d2a5cb0b11930e3057ef782baf8","first_seen":"2026-04-17T05:28:36.39306Z","last_seen":"2026-06-20T17:28:48.015661Z","times_seen":3,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdns.eu1.gigya.com/sdk.config.get?apiKey=3_gqHUXVI8IXKRF51nbhQXeEJZE_7wGeXchfGs7UyV3Y08FFnxj_fxkeBW0nagr8XZ\u0026httpStatusCodes=true\u0026ver=1781976480000","fqdn":"cdns.eu1.gigya.com","domain":"gigya.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cdns.eu1.gigya.com/js/sso.htm?APIKey=3_gqHUXVI8IXKRF51nbhQXeEJZE_7wGeXchfGs7UyV3Y08FFnxj_fxkeBW0nagr8XZ\u0026ssoSegment=\u0026version=latest\u0026build=1930\u0026flavor=base\u0026sourceKey=4_LWGzxVDlxnaTetL1EDjQ7w#m=getToken\u0026d=https%3A%2F%2Fwww.tui.com\u0026callbackID=gig_sso_cb1781976489012_2\u0026sAPIKey=4_LWGzxVDlxnaTetL1EDjQ7w\u0026gig_loggerConfig=%7B%22logLevel%22%3A0%2C%22clientMuteLevel%22%3A0%2C%22logTheme%22%3A1%7D","date":"2026-06-20T17:28:09.194Z","timestamp":1781976489194,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /sdk.config.get?apiKey=3_gqHUXVI8IXKRF51nbhQXeEJZE_7wGeXchfGs7UyV3Y08FFnxj_fxkeBW0nagr8XZ\u0026httpStatusCodes=true\u0026ver=1781976480000 HTTP/1.1\r\nHost: cdns.eu1.gigya.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdns.eu1.gigya.com/js/sso.htm?APIKey=3_gqHUXVI8IXKRF51nbhQXeEJZE_7wGeXchfGs7UyV3Y08FFnxj_fxkeBW0nagr8XZ\u0026ssoSegment=\u0026version=latest\u0026build=1930\u0026flavor=base\u0026sourceKey=4_LWGzxVDlxnaTetL1EDjQ7w\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: gig_canary=latest\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T20:29:48.587722Z","times_seen":16589263,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tui.com/","fqdn":"www.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-20T17:28:04.237Z","timestamp":1781976484237,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Feb 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"93:A2:36:4F:F0:E1:E2:A8:E3:8E:ED:43:25:EC:2E:34:A5:C9:B6:95","sha256":"17:6D:39:3B:D0:83:79:93:5B:D6:9B:20:64:6C:9B:25:D4:8D:6F:6D:CD:60:93:9F:18:91:AB:DB:5D:01:51:80"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/html\r\nx-amzn-requestid: 62d3226d-1d88-40b9-8e54-f712417ddbb1\r\nlast-modified: Fri, 19 Jun 2026 07:58:35 GMT\r\nx-amz-meta-market: DE\r\nx-amz-meta-template-id: home\r\ncontent-encoding: gzip\r\nx-amz-cf-pop: FRA60-P9\r\nx-amz-cf-id: m4cQeUf-_Xhr9q3TdBwbhiOtkgUOQHJD_OzB_XEL_xjwvLW8JYL75A==\r\naccess-control-allow-origin: https://m.tui.com\r\nx-ua-device: firefox\r\nx-cacheable: YES\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: User-Agent, Accept-Encoding, Origin\r\nserver: plcache.edge\r\nx-pl-serverid: prod-edge-02.d.de\r\nx-pl-reqid: 4825ce59-7509-42ec-a282-9c1a253c638b\r\ncache-control: no-cache\r\nexpires: Sat, 20 Jun 2026 17:28:04 GMT\r\ndate: Sat, 20 Jun 2026 17:28:04 GMT\r\nalt-svc: h3=\":443\"; ma=93600\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\nx-debug-activity: \"{\\\"activity\\\":{\\\"id\\\":\\\"0\\\",\\\"schema\\\":\\\"https://ns.adobe.com/personalization/json-content-item\\\",\\\"meta\\\":{\\\"experience.id\\\":\\\"0\\\",\\\"activity.name\\\":\\\"DE_Akamai_PKG_Search_Panel\\\",\\\"activity.id\\\":\\\"1256942\\\",\\\"experience.name\\\":\\\"Experience A\\\"},\\\"data\\\":{\\\"id\\\":\\\"0\\\",\\\"format\\\":\\\"application/json\\\",\\\"content\\\":{\\\"variant\\\":\\\"current\\\",\\\"cookieName\\\":\\\"_vis_opt_exp_P1973_combi\\\",\\\"cookieValue\\\":\\\"A\\\",\\\"isDisabledAnalitics\\\":true,\\\"isDisabledAMCVCookie\\\":true}}},\\\"ecid\\\":\\\"66966107634980792017217711389285007288\\\"}\"\r\nset-cookie: _vis_opt_exp_de24_combi=2; Domain=tui.com; Max-Age=2592000; Path=/;\ntui-coupon-wallet-enabled=true; Domain=tui.com; Max-Age=2592000; Path=/;\n_vis_opt_exp_P1973_combi=A; Expires=Thu, 15 Jul 2027 17:28:04 GMT; Domain=.tui.com; Path=/; Secure; SameSite=None\necid=66966107634980792017217711389285007288; Expires=Thu, 15 Jul 2027 17:28:04 GMT; Domain=.tui.com; Path=/; Secure; SameSite=None\nkndctr_41E27DA552A6473A0A490D4D_AdobeOrg_cluster=irl1; Expires=Thu, 15 Jul 2027 17:28:04 GMT; Domain=.tui.com; Path=/; Secure; SameSite=None\nak_bmsc=B67A7B246DD506FF96868E790DEC7588~000000000000000000000000000000~YAAQnQplX5EeC8yeAQAA/0oT5gDOPuTt/btrBxkEvsjZCv5iCpXn0dXIvmJwn7xqmMAnNIe0nO0FY39Vbl5SjyGMJEVaR4G9q1/l42ck/a/EQOacJ4igK59UwcumJR8QpmYiwT+CVeC/eOnPjNwPUHExTtozITtaYleYz3l9P1pItpV47INsmiRsPueOOgIFv4Y8oYKv34ceEccDtGFc3g6P6Mp+trxKpDZd6yc0HigFXe28HQYG7avaeFj+ik5m0MFEhAiuBqS6SvCL4vy3reXusZ6jxYvIWHdT6PwPnlhHpHp22JmnVdOr/CIQP/7fu/r0sRyFMPvi8dmL3H+VaoMn7Zyfl7wI1msqdFED3mRYtf6+m0f5fS2F1TrGMkXqOaIHTqRL2Aw2; Domain=.tui.com; Path=/; Expires=Sat, 20 Jun 2026 19:28:04 GMT; Max-Age=7200; SameSite=None; Secure; HttpOnly\r\nx-cookie-data: \"{\\\"ecid\\\":\\\"66966107634980792017217711389285007288\\\",\\\"locationHintId\\\":\\\"irl1\\\",\\\"cookies\\\":[{\\\"name\\\":\\\"_vis_opt_exp_P1973_combi\\\",\\\"value\\\":\\\"A\\\"}],\\\"isDisabledAMCVCookie\\\":true}\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Contentful","description":"Contentful is an API-first content management platform to create, manage and publish content on any digital channel.","website":"https://www.contentful.com","common_platform_enumeration":"","icon":"Contentful.svg","categories":["CMS"]}],"data":{"size":383072,"size_decoded":52821,"mime_type":"text/html","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (60024)","md5":"75cdb612239aa92f06043c8c14a3c8ea","sha1":"de28dc9c00f2ce7d860a3691f0fbbcda25ebaf9f","sha256":"187f23d512de9263fff03a42f25fe018d1ba264aa422d597bbf31b5e6a878ca4","sha512":"69282d972c37115d64c5a22c21edc8dbc2cd5f4900d5a002435f31664534ba715eafb0525c43b10b3a4d73b11457b8eacc50797c04dba721e33a25c47ffa9090","ssdeep":"3072:fjdRdeRX4p9sTvZRXZFFY+oKBU7ce5ehaCRBYOABtgWjoqiwB:v8RkLoHwB","tlshash":"708408769080b03b7d1f82f6739beb2d62959403ca83d8d9f9ac56490fc7ef24993509","first_seen":"2026-06-20T17:28:48.017782Z","last_seen":"2026-06-20T17:28:48.017782Z","times_seen":1,"resource_available":true,"data":null}},"time_used":371,"timings":{"blocked":-1,"dns":11,"connect":2,"send":0,"wait":349,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloud.tui.com/cdn/search-destination/v2/search-destination.js","fqdn":"cloud.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.169Z","timestamp":1781976486169,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloud.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Tue, 16 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"7D:E5:28:0F:B6:E6:8A:A2:A4:FC:71:45:EB:89:19:59:DA:00:B6:3C","sha256":"31:B4:F1:6F:B9:43:CE:E2:95:A8:98:0A:8A:2C:53:14:B6:A1:C8:DB:55:EC:BD:2F:D1:88:82:44:35:BB:15:38"}}},"request":{"raw":"GET /cdn/search-destination/v2/search-destination.js HTTP/1.1\r\nHost: cloud.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 19 Mar 2026 12:43:28 GMT\r\netag: \"2ccb7f953f49f1c44aa434b05e95b89f\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-amz-cf-pop: FRA50-P2\r\nx-amz-cf-id: KhkT_Hh-jkrkrdcufS28XFXj53UwgFpaxvH5YtAJLx4iDMIhd0BlRQ==\r\ncontent-encoding: gzip\r\ncontent-length: 10995\r\ncache-control: max-age=50\r\nexpires: Sat, 20 Jun 2026 17:28:56 GMT\r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\nvary: Accept-Encoding\r\nage: 550\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":62554,"size_decoded":11538,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text, with very long lines (62545)","md5":"2ccb7f953f49f1c44aa434b05e95b89f","sha1":"a3ca4b73462a36ff28f60b498492a045cb7aa6ea","sha256":"12e3543ccbe2baa07bb2110f03106a6b1b02f411f25fadaefeabefb025a587d8","sha512":"aac086819915323b5890684ea9dcb27353b719e849f8dd2a09d0ca31d58adfdf652b845d0053e347e68854bd1c5f210bab1aacee6d989320f0964a44c47d0203","ssdeep":"768:bwNPuMAzCeuxpNo6FhisWssX37UfUgid/pEIjQWmm/piXrdIA6E1+MQwpCV:spUgZIjU4iXryTE1+uCV","tlshash":"4253c81ab11193b27c274ffab7de836c75a1e1009d22556c7f1d50cb0b4d9ac9273a3a","first_seen":"2026-03-29T05:54:31.414512Z","last_seen":"2026-06-20T17:28:48.020685Z","times_seen":5,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloud.tui.com/cdn/search-button/v2/search-button.js","fqdn":"cloud.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.174Z","timestamp":1781976486174,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloud.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Tue, 16 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"7D:E5:28:0F:B6:E6:8A:A2:A4:FC:71:45:EB:89:19:59:DA:00:B6:3C","sha256":"31:B4:F1:6F:B9:43:CE:E2:95:A8:98:0A:8A:2C:53:14:B6:A1:C8:DB:55:EC:BD:2F:D1:88:82:44:35:BB:15:38"}}},"request":{"raw":"GET /cdn/search-button/v2/search-button.js HTTP/1.1\r\nHost: cloud.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 28 Jan 2026 07:53:22 GMT\r\netag: \"5dd8b85d83fc20c97f48bfeb66f3bd3c\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-amz-cf-pop: DUS51-P6\r\nx-amz-cf-id: agpPEpVMWS29Afl6RsqVqAVIeCr9oRp1RsuX7oRcZ05rZkVEOxSgIA==\r\ncontent-encoding: gzip\r\ncontent-length: 3670\r\ncache-control: max-age=1\r\nexpires: Sat, 20 Jun 2026 17:28:07 GMT\r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\nvary: Accept-Encoding\r\nage: 599\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":14919,"size_decoded":4211,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (8364)","md5":"5dd8b85d83fc20c97f48bfeb66f3bd3c","sha1":"3421d0e3f7720fd61240e58517be4001a38f7230","sha256":"c07c642abd7fe535f6b699ff6dd910224621ed1b647162bd382e36119ca9770e","sha512":"7f7dbd17608e4d3560d43aea33d75f8ffa221f7577366dfe297a56b085b87d0e9b4a38249ebb4c8557f244efdf27172ad36690cbbcb4154f0a67a3dd60ccd0ce","ssdeep":"192:5yhEaDNmt3yHuo1fDcZD3wh53/uafr4ySLIC7IChJwTC0RSUI3G5K0ajxglxQvr4:Qkw4kQITTC0SVGM0aFEsFXE","tlshash":"a16273927173a27a19231f7e27ef56043322b40269314e69bf1e21d20fdd2fd0569ba7","first_seen":"2026-03-29T05:54:31.375386Z","last_seen":"2026-06-20T17:28:48.023705Z","times_seen":5,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/shared/mwa/assets/v2/fonts/tuitypelight-bold.subset.woff2","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.251Z","timestamp":1781976486251,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /shared/mwa/assets/v2/fonts/tuitypelight-bold.subset.woff2 HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: binary/octet-stream\r\ncontent-length: 18388\r\nx-amzn-requestid: 3a15000f-f9fe-4b59-89e6-93e7a5f1d476\r\ncontent-encoding: gzip\r\nx-amzn-remapped-content-length: 18360\r\nx-amz-apigw-id: fOyvWEF7FiAFuXg=\r\ntimestamp: Fri, 19 Jun 2026 23:05:19 GMT\r\nx-amzn-trace-id: Root=1-6a35cb2e-359d1562128aa7302e10ac77\r\ncache-control: public, max-age=538632\r\nexpires: Fri, 26 Jun 2026 23:05:18 GMT\r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver: TUI Web\r\nvary: Accept-Encoding,Origin\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18360,"size_decoded":19031,"mime_type":"binary/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 18360, version 2.6619","md5":"84aa00ac3a3bc6a2d26b97ae743d5010","sha1":"683aa597662bf5040158669de588d7972f276d8c","sha256":"12a642318c3bf80afeba913f3510b17a0360882c78180316498e3faa2babc221","sha512":"ea5e6c1760473d2f75887d4db5665abf1c0231aa1f01d2e7a4918a27cf72a9694058ffc637322e8f6a5dfd257ba8830470da052ece8ef9be162156a3b921f46a","ssdeep":"384:q2dCUKfQrdnfP7DNP9wocR7arMzC9KGyxIm1ViFyXFtg1:BkQdPF9E2Tat18FyVm1","tlshash":"a982e101694a3542df4d92b8ba9b9cb529c7c05523ca25e2184ceb386c3991f0993f5e","first_seen":"2025-06-28T16:10:42.720413Z","last_seen":"2026-06-20T17:28:47.926264Z","times_seen":30,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.ctfassets.net/wft38qt3w1fi/hhRX26lbTbK9xf3cGNXqx/b216814e16ec123e51d5cf5a7df16893/QR_Code_DE_App_neu_April_2025.jpg","fqdn":"images.ctfassets.net","domain":"ctfassets.net","tld":"net"},"ip":{"addr":"108.157.229.8","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:05.351Z","timestamp":1781976485351,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.ctfassets.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sat, 18 Oct 2025 00:00:00 GMT","end":"Sun, 15 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:39:C1:37:7A:6B:60:8A:D5:73:9E:D7:C4:F9:3A:11:9B:BD:94:2B","sha256":"AC:EA:37:10:54:C2:91:B5:04:B8:B4:CA:CD:35:48:4D:D0:92:78:F6:E2:8B:D9:57:78:20:D6:74:FE:14:16:A9"}}},"request":{"raw":"GET /wft38qt3w1fi/hhRX26lbTbK9xf3cGNXqx/b216814e16ec123e51d5cf5a7df16893/QR_Code_DE_App_neu_April_2025.jpg HTTP/1.1\r\nHost: images.ctfassets.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/jpeg\r\ncontent-length: 90393\r\nlast-modified: Wed, 16 Apr 2025 11:03:04 GMT\r\nserver: Contentful Images API\r\naccess-control-allow-origin: *\r\ndate: Sat, 20 Jun 2026 04:07:07 GMT\r\ncache-control: max-age=31536000\r\netag: \"1b49d5cddb53ebbf65c020ea28339156\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 3346055bb53a57ebf02828b88e1ee87c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: 0hvhe7B45Phq34HHr7FxRc9JrVXBQMcwP8hmITCCIzpBCnJXRsmjTw==\r\nage: 48310\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":90393,"size_decoded":90929,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 800x800, components 3","md5":"1b49d5cddb53ebbf65c020ea28339156","sha1":"6ed49e4c85edd1e7f70bb0557d464a04a110b620","sha256":"f4e2e1685e084abe4ce0afa5025abda9ca34e6f0b2e000d2ed3ca2f04683f243","sha512":"6b134662d5855201f50760426924f1331a1d638a6e311e0ffe2196aa436b51005dec525277ee3955f47daa9e887c4bde57f3e3b4e53c9e1c50883929d4c5c0b9","ssdeep":"1536:LXjkuU7zD4V9ghGdmyJGZxKETWht4Elwdq+ih+ZBF1jmvPQY66YjuFeOIWgvcBs4:LjOvmmX4me4ESdq+lZmvPQFF5Wgv+mgP","tlshash":"1793d027a0144bb7590cf3657e9368544f181a2d67cdb0989f630d13bfe8bf1a98e0ad","first_seen":"2026-03-28T02:59:34.624061Z","last_seen":"2026-06-20T17:28:48.026386Z","times_seen":3,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloud.tui.com/cdn/footer/v2/images/holiday.png","fqdn":"cloud.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:05.370Z","timestamp":1781976485370,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloud.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Tue, 16 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"7D:E5:28:0F:B6:E6:8A:A2:A4:FC:71:45:EB:89:19:59:DA:00:B6:3C","sha256":"31:B4:F1:6F:B9:43:CE:E2:95:A8:98:0A:8A:2C:53:14:B6:A1:C8:DB:55:EC:BD:2F:D1:88:82:44:35:BB:15:38"}}},"request":{"raw":"GET /cdn/footer/v2/images/holiday.png HTTP/1.1\r\nHost: cloud.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nCookie: _vis_opt_exp_de24_combi=2; tui-coupon-wallet-enabled=true; _vis_opt_exp_P1973_combi=A; ecid=66966107634980792017217711389285007288; kndctr_41E27DA552A6473A0A490D4D_AdobeOrg_cluster=irl1; ak_bmsc=B67A7B246DD506FF96868E790DEC7588~000000000000000000000000000000~YAAQnQplX5EeC8yeAQAA/0oT5gDOPuTt/btrBxkEvsjZCv5iCpXn0dXIvmJwn7xqmMAnNIe0nO0FY39Vbl5SjyGMJEVaR4G9q1/l42ck/a/EQOacJ4igK59UwcumJR8QpmYiwT+CVeC/eOnPjNwPUHExTtozITtaYleYz3l9P1pItpV47INsmiRsPueOOgIFv4Y8oYKv34ceEccDtGFc3g6P6Mp+trxKpDZd6yc0HigFXe28HQYG7avaeFj+ik5m0MFEhAiuBqS6SvCL4vy3reXusZ6jxYvIWHdT6PwPnlhHpHp22JmnVdOr/CIQP/7fu/r0sRyFMPvi8dmL3H+VaoMn7Zyfl7wI1msqdFED3mRYtf6+m0f5fS2F1TrGMkXqOaIHTqRL2Aw2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\netag: \"9aa467fd3507d4e87e36db5c26c13234\"\r\naccess-control-allow-origin: *\r\nlast-modified: Sun, 22 Feb 2026 18:51:14 GMT\r\nserver: Akamai Image Manager\r\nx-serial: 1931\r\ncontent-length: 3890\r\ncontent-type: image/avif\r\ncache-control: private, no-transform, max-age=2592000\r\nexpires: Mon, 20 Jul 2026 17:28:05 GMT\r\ndate: Sat, 20 Jun 2026 17:28:05 GMT\r\nage: 1038306\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":3890,"size_decoded":4285,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"23302279af4d711b6aa3b59720e83a0e","sha1":"c559176417c9dca8f51115369d51f8600a60c615","sha256":"835f1f24f0ac01a7f448cfe9ddfe4a288d77284c3d007afbd974fbb0942f05b2","sha512":"313c0eb5ae80db8167cd80f0743ccc8833686e9ec5ed552d4429b8efaf5df0ab5b261d4aae8c7263480f9ceededdab5b3d9c2970f239d2a3f8412db08a7559bf","ssdeep":"","tlshash":"b4814b4153513cc9ebbc863c4bc0b36f3a45a99ad31b9b5f20c5f535b725aa28878814","first_seen":"2025-09-28T22:43:58.492296Z","last_seen":"2026-06-20T17:28:48.029789Z","times_seen":14,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/shared/mwa/assets/v2/pictograms/calendar-flexible.svg","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.159Z","timestamp":1781976486159,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /shared/mwa/assets/v2/pictograms/calendar-flexible.svg HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nCookie: _vis_opt_exp_de24_combi=2; tui-coupon-wallet-enabled=true; _vis_opt_exp_P1973_combi=A; ecid=66966107634980792017217711389285007288; kndctr_41E27DA552A6473A0A490D4D_AdobeOrg_cluster=irl1; ak_bmsc=B67A7B246DD506FF96868E790DEC7588~000000000000000000000000000000~YAAQnQplX5EeC8yeAQAA/0oT5gDOPuTt/btrBxkEvsjZCv5iCpXn0dXIvmJwn7xqmMAnNIe0nO0FY39Vbl5SjyGMJEVaR4G9q1/l42ck/a/EQOacJ4igK59UwcumJR8QpmYiwT+CVeC/eOnPjNwPUHExTtozITtaYleYz3l9P1pItpV47INsmiRsPueOOgIFv4Y8oYKv34ceEccDtGFc3g6P6Mp+trxKpDZd6yc0HigFXe28HQYG7avaeFj+ik5m0MFEhAiuBqS6SvCL4vy3reXusZ6jxYvIWHdT6PwPnlhHpHp22JmnVdOr/CIQP/7fu/r0sRyFMPvi8dmL3H+VaoMn7Zyfl7wI1msqdFED3mRYtf6+m0f5fS2F1TrGMkXqOaIHTqRL2Aw2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\ncontent-length: 720\r\nx-amzn-requestid: 0d2647f1-96e9-4760-925d-94b03977a156\r\ncontent-encoding: gzip\r\nx-amzn-remapped-content-length: 3514\r\nx-amz-apigw-id: fOywlGgnFiAFuqA=\r\ntimestamp: Fri, 19 Jun 2026 23:05:27 GMT\r\nx-amzn-trace-id: Root=1-6a35cb36-6df38f6e68bab9ad3a1c726e\r\ncache-control: public, max-age=538640\r\nexpires: Fri, 26 Jun 2026 23:05:26 GMT\r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver: TUI Web\r\nvary: Accept-Encoding,Origin\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3514,"size_decoded":1322,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"333468bedc7d79dfe309aa06b5148b7e","sha1":"5598b1a289f11b3042f3fcabec4f77956e9d23b2","sha256":"a6eef2d11d86f882a802f6511af98d8b601a6a1705208ecd4a28d4e12542c54d","sha512":"faba4fb09057e1f17ef8efc0f37d4183c9af34d549c83ff25763be22f5ee17f3eb147058bafce92ca44b333d01a092c94335ad4c834b6e868ba0e6ff26a792fa","ssdeep":"","tlshash":"367129a263dce10cab02563b835d66fa114aa5d8673d0144b58c322099196fffc7e35f","first_seen":"2026-05-05T09:26:00.560246Z","last_seen":"2026-06-20T17:28:48.033721Z","times_seen":3,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/shared/mwa/assets/v2/icons/tui-light/signpost-directions.svg","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.659Z","timestamp":1781976486659,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /shared/mwa/assets/v2/icons/tui-light/signpost-directions.svg HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mwa.tui.com/browse/mwa/workflow-ssg-prod/workflow-pages-home/assets/workflow-pages-home_26.25.1/home/index.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\nx-amzn-requestid: 9a884a55-157b-4690-b930-e9ab23ea5f95\r\nx-amzn-remapped-content-length: 232\r\nx-amz-apigw-id: fKLbdHTEFiAFkCQ=\r\ntimestamp: Thu, 18 Jun 2026 13:29:20 GMT\r\nx-amzn-trace-id: Root=1-6a33f2af-695c2268052093db582888e9\r\ncontent-encoding: gzip\r\ncontent-length: 190\r\ncache-control: public, max-age=417673\r\nexpires: Thu, 25 Jun 2026 13:29:19 GMT\r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver: TUI Web\r\nvary: Accept-Encoding,Origin\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":232,"size_decoded":823,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"75d84e4f88f185cdfaf3fe6af6f68b8f","sha1":"c2421dab6ddcf26f100f92dda8eaa41a24ad4a81","sha256":"8d9083b2efd3935233767b83bf1605e8f147143555d1c20cbe7ba84c470c4d36","sha512":"8c9b4cff24d7dc996cd8ce9b468ebbd22a5b630742aa8c5f5aa83f3fe9a137f6cd4decca2e4c6a74affeb7696a3479a0b358b030f0018bfc3566ebaf919b7468","ssdeep":"","tlshash":"19d0a79e874c0c2cf5768620e7643e7151993111958c31acc5b611741245e5a78279b8","first_seen":"2026-03-29T05:54:31.346573Z","last_seen":"2026-06-20T17:28:48.035273Z","times_seen":4,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/shared/mwa/assets/v2/icons/tui-light/sun-set.svg","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.780Z","timestamp":1781976486780,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /shared/mwa/assets/v2/icons/tui-light/sun-set.svg HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\nx-amzn-requestid: 8227a453-dcaf-4a62-ab27-6501b62f3233\r\nx-amzn-remapped-content-length: 277\r\nx-amz-apigw-id: fOyviGXJFiAFuqA=\r\ntimestamp: Fri, 19 Jun 2026 23:05:20 GMT\r\nx-amzn-trace-id: Root=1-6a35cb2f-3e495b26565e2fa1096aa864\r\ncontent-encoding: gzip\r\ncontent-length: 217\r\ncache-control: public, max-age=538633\r\nexpires: Fri, 26 Jun 2026 23:05:19 GMT\r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver: TUI Web\r\nvary: Accept-Encoding,Origin\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":277,"size_decoded":850,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"538ee42de3df6d04d93b1d36b39a67db","sha1":"0f049269a396768d207b33e603531a5ab68eeea8","sha256":"f37896beee14dd5caf59ffc288e34d8839d28f5b6d82bdaf25b4aaca720a303f","sha512":"1542cb6b8556734853561a6261f94eadcd415dac9795e88ba88decce56e9d032f1c374c20377a37cac5de2594fec3f3e89f28fe52ca0719894e83f3f473219b2","ssdeep":"","tlshash":"9bd02bca42dc5d6cf1329974db647b31403570c14d48a0bd817601b83305949b427bb0","first_seen":"2026-03-28T02:59:34.687483Z","last_seen":"2026-06-20T17:28:48.036551Z","times_seen":7,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/shared/mwa/assets/v2/icons/tui-light/signpost-directions.svg","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.995Z","timestamp":1781976486995,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /shared/mwa/assets/v2/icons/tui-light/signpost-directions.svg HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mwa.tui.com/browse/mwa/workflow-ssg-prod/workflow-pages-home/assets/workflow-pages-home_26.25.1/home/index.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\nx-amzn-requestid: a23762c6-9afa-4ba1-8c5b-00a7384a8a7b\r\nx-amzn-remapped-content-length: 232\r\nx-amz-apigw-id: fOywuFelFiAFYeQ=\r\ntimestamp: Fri, 19 Jun 2026 23:05:28 GMT\r\nx-amzn-trace-id: Root=1-6a35cb37-18f989d54e04f5191644279f\r\ncontent-encoding: gzip\r\ncontent-length: 190\r\ncache-control: public, max-age=538640\r\nexpires: Fri, 26 Jun 2026 23:05:27 GMT\r\ndate: Sat, 20 Jun 2026 17:28:07 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver: TUI Web\r\nvary: Accept-Encoding,Origin\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":232,"size_decoded":823,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"75d84e4f88f185cdfaf3fe6af6f68b8f","sha1":"c2421dab6ddcf26f100f92dda8eaa41a24ad4a81","sha256":"8d9083b2efd3935233767b83bf1605e8f147143555d1c20cbe7ba84c470c4d36","sha512":"8c9b4cff24d7dc996cd8ce9b468ebbd22a5b630742aa8c5f5aa83f3fe9a137f6cd4decca2e4c6a74affeb7696a3479a0b358b030f0018bfc3566ebaf919b7468","ssdeep":"","tlshash":"19d0a79e874c0c2cf5768620e7643e7151993111958c31acc5b611741245e5a78279b8","first_seen":"2026-03-29T05:54:31.346573Z","last_seen":"2026-06-20T17:28:48.035273Z","times_seen":4,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tags.tiqcdn.com/utag/tui/main/prod/utag.25210.js?utv=ut4.52.202408081046","fqdn":"tags.tiqcdn.com","domain":"tiqcdn.com","tld":"com"},"ip":{"addr":"65.9.46.57","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:07.343Z","timestamp":1781976487343,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tags.tiqcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 09 Mar 2026 00:00:00 GMT","end":"Tue, 22 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D6:76:2F:BD:9C:CC:DC:5A:C2:A1:D3:60:C0:08:21:C9:62:EB:5E:69","sha256":"D1:5D:04:F4:35:9F:D3:9D:4B:7D:16:79:64:5C:FC:23:0C:52:77:2C:46:02:F2:D8:7D:8A:08:6D:1A:58:40:12"}}},"request":{"raw":"GET /utag/tui/main/prod/utag.25210.js?utv=ut4.52.202408081046 HTTP/1.1\r\nHost: tags.tiqcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nlast-modified: Wed, 17 Jun 2026 14:56:58 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: Mgb2RL90kREw8AFo8sfLS.2Kd3gGO26d\r\ncontent-encoding: br\r\ndate: Sat, 20 Jun 2026 17:24:50 GMT\r\netag: W/\"672ea263637c06c765d1b550dafb5f82\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 62fb1997c40a03e325a22b812f7b7e10.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: H2G5E3BIXTJzi9JrbxX5pObv5ygPqng-BE7Mc2xd3s5sZ9oyO_Ccfw==\r\nage: 206\r\ncache-control: max-age=300\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":3865,"size_decoded":2082,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (995)","md5":"672ea263637c06c765d1b550dafb5f82","sha1":"a5e2b6403b183f512d8d237f0ffabfbaf94c8002","sha256":"b6258d44c3351df733705f62fac9b32269d4e14180230f4ebddc3846e27dd1b5","sha512":"cbe498c412c9cf812cb5bb3e316d70bdea5b557927f7fcab9e1ab3ac4f3b55cc2b0216b1bd33aaaed4dd95d586a9351a35e1dac27c3e07226ed7c0aa8c05ec4f","ssdeep":"","tlshash":"3081524d3885a03fc8b0d112896f0f6461517a1b18a38977b5c98c5eb328d9ef85af5f","first_seen":"2026-06-20T17:28:48.037278Z","last_seen":"2026-06-20T17:28:48.037278Z","times_seen":1,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/shared/mwa/assets/v2/icons/tui-light/signpost-directions.svg","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:07.751Z","timestamp":1781976487751,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /shared/mwa/assets/v2/icons/tui-light/signpost-directions.svg HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mwa.tui.com/browse/mwa/workflow-ssg-prod/workflow-pages-home/assets/workflow-pages-home_26.25.1/home/index.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T20:29:48.587722Z","times_seen":16589263,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/shared/mwa/assets/v2/icons/tui-light/arrow-right.svg","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.044Z","timestamp":1781976486044,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /shared/mwa/assets/v2/icons/tui-light/arrow-right.svg HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mwa.tui.com/browse/mwa/workflow-ssg-prod/workflow-pages-home/assets/workflow-pages-home_26.25.1/home/index.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\nx-amzn-requestid: 5fa406c9-64fd-4253-89ba-3cc2b16b5638\r\nx-amzn-remapped-content-length: 203\r\nx-amz-apigw-id: fOyvVG_kliAFhyQ=\r\ntimestamp: Fri, 19 Jun 2026 23:05:19 GMT\r\nx-amzn-trace-id: Root=1-6a35cb2e-3e53cfcb4be2a4d46359fe48\r\ncontent-encoding: gzip\r\ncontent-length: 167\r\ncache-control: public, max-age=538632\r\nexpires: Fri, 26 Jun 2026 23:05:18 GMT\r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver: TUI Web\r\nvary: Accept-Encoding,Origin\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":203,"size_decoded":800,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9d8e79d7834c4eee59e91513f68da48e","sha1":"a050ee8ce052aa08bcc9120f42b68c79fadbd372","sha256":"1344305c076a7a84eaafa15d026ab6b9b77cf4ea4fbc865630a0fe7f5948a4c2","sha512":"1837c0340c948253ae98133793c7e378b9cf02233e7843ae673f5aba28ba39f5370bbd92fa42a0016f554b875b66e113eb39cb0d6a75f0a041f9eb873b5fb4be","ssdeep":"","tlshash":"f6d0128e928c1d2cf5368730d7757b7051292152554865ad84ba11f0535ae4db437df4","first_seen":"2025-10-20T09:22:00.801888Z","last_seen":"2026-06-20T17:28:48.039674Z","times_seen":9,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/shared/mwa/assets/v2/fonts/ambit-regular.subset.woff2","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.119Z","timestamp":1781976486119,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /shared/mwa/assets/v2/fonts/ambit-regular.subset.woff2 HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mwa.tui.com/browse/mwa/workflow-ssg-prod/workflow-pages-home/assets/workflow-pages-home_26.25.1/themes/tui-light/index.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: binary/octet-stream\r\nx-amzn-requestid: dcebf706-8a7e-4d61-afc2-9a394c5e81b1\r\nx-amzn-remapped-content-length: 15516\r\nx-amz-apigw-id: fOy9nE1UliAFZGA=\r\ntimestamp: Fri, 19 Jun 2026 23:06:50 GMT\r\nx-amzn-trace-id: Root=1-6a35cb89-5f08dfa1677f84b10ed6374b\r\ncache-control: public, max-age=538724\r\nexpires: Fri, 26 Jun 2026 23:06:50 GMT\r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\ncontent-length: 15516\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver: TUI Web\r\nvary: Accept-Encoding,Origin\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15516,"size_decoded":16135,"mime_type":"binary/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 15516, version 1.1441","md5":"84e963d8ae0e39b173d215186cf35ce3","sha1":"6e6becee69d442a5c1cb856f8ccdefb5248f30a2","sha256":"aac391f330aa1d14b4080c8bc876f3124176717f34bc2e81102fc61bcb68cfc1","sha512":"1feee69d0f61fdec9d09c4bbcba29d1d16c7a07e146a99148635971a8d6e41a7bfcc9b734b80f5c182e7e577f84b8af478bc9cb2153bf5d5666be83c5da2b0aa","ssdeep":"384:yf4h6DtOSE6rx+RCzVywaYcwK3DzV+gUj0Xa8QtaBTuW6A:6DMSE6rxAC3D6Vij0XagBTutA","tlshash":"0a62d0c1962582b7cf11e982cc9f675dbe8de8dcf21eca7b09031281ea059e1c8855df","first_seen":"2025-09-28T22:43:58.370156Z","last_seen":"2026-06-20T17:28:47.93465Z","times_seen":28,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d17coilm9czo3b.cloudfront.net/data?locale=de-DE\u0026tenant=TUICOM\u0026page=home-page","fqdn":"d17coilm9czo3b.cloudfront.net","domain":"d17coilm9czo3b.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"65.9.60.73","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.209Z","timestamp":1781976486209,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Wed, 09 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:18:5B:88:98:FA:65:52:EE:3F:8C:AC:85:C1:E4:56:E1:0D:39:DA","sha256":"C6:C6:D5:C7:F7:92:11:BB:D5:98:B6:EB:43:02:E5:65:7B:E8:32:E7:75:CE:E0:A8:29:B0:DE:A3:5E:AF:4E:02"}}},"request":{"raw":"GET /data?locale=de-DE\u0026tenant=TUICOM\u0026page=home-page HTTP/1.1\r\nHost: d17coilm9czo3b.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.tui.com/\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 4\r\nalt-svc: h3=\":443\"; ma=86400\r\napigw-requestid: fI6_MhZiFiAEJVA=\r\nserver: Crisis Ticker BFF\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ndate: Sat, 20 Jun 2026 05:08:39 GMT\r\netag: W/\"4-K+iMpCQsduglOsYkdIUQZQMtaDM\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 1abd987c61e5ddaeca88770eced438a0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nage: 47872\r\nx-amz-cf-id: _sH2PFcSCBK2LIdQzj2q3UTwzXksqP2Q7vKIm45Glo84i8My9CuUdQ==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":4,"size_decoded":541,"mime_type":"application/json; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"37a6259cc0c1dae299a7866489dff0bd","sha1":"2be88ca4242c76e8253ac62474851065032d6833","sha256":"74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b","sha512":"04f8ff2682604862e405bf88de102ed7710ac45c1205957625e4ee3e5f5a2241e453614acc451345b91bafc88f38804019c7492444595674e94e8cf4be53817f","ssdeep":"","tlshash":"b9300000000000000000000000000000000300000000000000000000000c0000000000","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-06-20T20:32:21.312735Z","times_seen":262050,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":14,"connect":22,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.cloud.tui.com/search-departure-airport/v2/departureAirportGroups/TUICOM/de-DE","fqdn":"api.cloud.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"63.184.79.191","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.720Z","timestamp":1781976486720,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.cloud.tui.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 31 Mar 2026 00:00:00 GMT","end":"Wed, 14 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4D:1B:CF:1F:A2:F7:54:75:66:1A:59:5D:5D:E3:9C:C5:4D:DA:A8:29","sha256":"19:24:EA:ED:3E:EF:31:9A:A1:7B:3D:65:EE:5D:75:06:99:FE:4F:3F:31:14:A9:3C:67:1F:22:BC:0B:DE:DA:0D"}}},"request":{"raw":"GET /search-departure-airport/v2/departureAirportGroups/TUICOM/de-DE HTTP/1.1\r\nHost: api.cloud.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.tui.com/\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 1354\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"11df-9AhewDyt7EdmclhI/DYY2VXqQRw\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\napigw-requestid: fRUSHjPWFiAEJ_g=\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":4575,"size_decoded":1674,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5b4e526ce2c042c229875685096980f2","sha1":"f4085ec03cadec4766725848fc3618d955ea411c","sha256":"1a74d68e5d8b7a771f649c4d11b0e6df7303f337333fbb81225a6da3f0e9d843","sha512":"4dfc37681d9a6f3cc8cf8a39217c0fdb4ccdee96724a296b4c35d4f748975fb21582415007d3113e63df1a9f236de621e38d19155725a8805cc78adf502bace4","ssdeep":"96:EldhSny/DO7UlZwBKS5+8Hy+qzE18GZnGzxr4fNGQdP0GbfVGj0RgjGPNS/7LR6j:orH2YbQR0KsXAoU","tlshash":"1691e9ff30a80d7e474746fa9d0173e79ea534762ba91c89a80b2a4994c732fe517807","first_seen":"2026-06-20T17:28:47.915334Z","last_seen":"2026-06-20T17:28:47.915334Z","times_seen":1,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":2,"connect":21,"send":0,"wait":34,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/shared/mwa/assets/v2/icons/tui-light/oncoming-camper.svg","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.997Z","timestamp":1781976486997,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /shared/mwa/assets/v2/icons/tui-light/oncoming-camper.svg HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mwa.tui.com/browse/mwa/workflow-ssg-prod/workflow-pages-home/assets/workflow-pages-home_26.25.1/home/index.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\nx-amzn-requestid: db7b77d2-ccdd-49b6-ba49-164c6c2c0d15\r\nx-amzn-remapped-content-length: 519\r\nx-amz-apigw-id: fO7XUEIIliAFV5Q=\r\ntimestamp: Sat, 20 Jun 2026 00:04:12 GMT\r\nx-amzn-trace-id: Root=1-6a35d8fb-2fc17a8746fc5c9716e24184\r\ncontent-encoding: gzip\r\ncontent-length: 336\r\ncache-control: public, max-age=542164\r\nexpires: Sat, 27 Jun 2026 00:04:11 GMT\r\ndate: Sat, 20 Jun 2026 17:28:07 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver: TUI Web\r\nvary: Accept-Encoding,Origin\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":519,"size_decoded":969,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6e725a4a58ca6ac1902c6f877c5e810e","sha1":"a72682fc68e328a2034aa815e5911fda90c037b5","sha256":"79e73b2e3265e7c74e54ae3fbd02c87ee2c5b1b87e3c48d35e42a28b8b6f1e80","sha512":"23c42ae11955407878bc2b3e44185cc38b9cbcad27049aab2407ed9471ffa61da232eb50b80587622368d1bfa56887e423f3dfe2b0f33271b63b7071511b5195","ssdeep":"","tlshash":"62f05061db5c1d0cf55b4670df187571137a7153a14c9074586c22306356a1afdb75b4","first_seen":"2026-03-29T05:54:31.314912Z","last_seen":"2026-06-20T17:28:47.999658Z","times_seen":3,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/shared/mwa/assets/v2/icons/tui-light/plus-circled.svg","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:07.376Z","timestamp":1781976487376,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /shared/mwa/assets/v2/icons/tui-light/plus-circled.svg HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mwa.tui.com/browse/mwa/workflow-ssg-prod/workflow-pages-home/assets/workflow-pages-home_26.25.1/home/index.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T20:29:48.587722Z","times_seen":16589263,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/browse/mwa/workflow-ssg-prod/workflow-pages-home/assets/workflow-pages-home_26.25.1/datalayer/index.js","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:04.944Z","timestamp":1781976484944,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /browse/mwa/workflow-ssg-prod/workflow-pages-home/assets/workflow-pages-home_26.25.1/datalayer/index.js HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\naccess-control-allow-methods: GET, POST, PUT\r\naccess-control-max-age: 0\r\nlast-modified: Mon, 15 Jun 2026 09:23:23 GMT\r\netag: \"e04a6b7433637ff9b444f9b7e0a8c62d\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nx-amz-cf-pop: FRA60-P14\r\nx-amz-cf-id: 8zMFpdDGlUP9HNkRzHN-SIG74SHobXPVnuWe7NzdBlxIBlqKkPbjug==\r\ncontent-encoding: gzip\r\ncontent-length: 2918\r\ncache-control: max-age=600\r\nexpires: Sat, 20 Jun 2026 17:38:05 GMT\r\ndate: Sat, 20 Jun 2026 17:28:05 GMT\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver: TUI Web\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-origin: https://www.tui.com\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":8383,"size_decoded":3645,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (8382)","md5":"e04a6b7433637ff9b444f9b7e0a8c62d","sha1":"cf571833cbfa93d57412bec71e625a8a9e42902d","sha256":"56c29323e0338bb04d9147e94c09f9690fe272fda5a2f8c79ed2145f3ec0adb8","sha512":"bbdf9860eb3430e2b965ea2db667f2ee462dc190c5fbce755d32e6b3c632089da19a744d8067c5141f4db4cc8f3856f45a700329181128185b889e7ebc7b2ff2","ssdeep":"192:qUsgYUHgYHcoEdAuYYEsIUwI6zl7BYmY3mJlMxfdBY3kQRVlpjHiIK1QGgRk31cM:qUxPgUcoEdAuYYEsIUwI6zl7B98mJlMJ","tlshash":"4302a4bb93a556a08581a49cf87abbbe7013752220d6c854ff2d9e6f340ac85c01eddd","first_seen":"2026-06-06T12:22:18.079678Z","last_seen":"2026-06-20T17:28:48.046717Z","times_seen":3,"resource_available":true,"data":null}},"time_used":347,"timings":{"blocked":-1,"dns":0,"connect":31,"send":0,"wait":71,"receive":0,"ssl":245},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloud.tui.com/cdn/search-scope/v2/search-scope.js","fqdn":"cloud.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.176Z","timestamp":1781976486176,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloud.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Tue, 16 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"7D:E5:28:0F:B6:E6:8A:A2:A4:FC:71:45:EB:89:19:59:DA:00:B6:3C","sha256":"31:B4:F1:6F:B9:43:CE:E2:95:A8:98:0A:8A:2C:53:14:B6:A1:C8:DB:55:EC:BD:2F:D1:88:82:44:35:BB:15:38"}}},"request":{"raw":"GET /cdn/search-scope/v2/search-scope.js HTTP/1.1\r\nHost: cloud.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 20 May 2026 09:18:29 GMT\r\netag: \"caa84cdfbcda7b15deab03ddeb3a54a4\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-amz-cf-pop: FRA50-P2\r\nx-amz-cf-id: q9zJcrKoRinEry3i-pPTcfhR-6U2dSt3NYTXpwXG6K8fkPr2FPrIbw==\r\ncontent-encoding: gzip\r\ncontent-length: 2384\r\ncache-control: max-age=1\r\nexpires: Sat, 20 Jun 2026 17:28:07 GMT\r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\nvary: Accept-Encoding\r\nage: 599\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":10138,"size_decoded":2925,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10135)","md5":"caa84cdfbcda7b15deab03ddeb3a54a4","sha1":"7ab792e79b9f9e68e5d8e9ca6d596b689797efcd","sha256":"5ea7af30a3dd2bc6c3ca2fe36a0a6cae6f989a19823dbc355129144bfb602e1d","sha512":"e74d1a9db2d7d10774e4fa7b0f48e392f98c902cd0115b1d9f91b0c997e7556bd4480f985bc25d73d1d0158b05cbc94e84a855e4f718973b6cbdb5a16a43cab8","ssdeep":"192:62wETFfuA2wjFfuH3k1jXMkEz8MeTslQTDqjAJS8o9CTbCw:PtTm0GhkEwMetfq1C3Cw","tlshash":"122293227a22a1354a220fd773fb1754734ab600d6b249b93f6e0082479debc2062b79","first_seen":"2026-06-06T12:22:18.033267Z","last_seen":"2026-06-20T17:28:48.047774Z","times_seen":2,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/shared/mwa/assets/v2/icons/tui/location.svg","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.556Z","timestamp":1781976486556,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /shared/mwa/assets/v2/icons/tui/location.svg HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\nx-amzn-requestid: b5b95d21-e5f4-45da-9d7d-bce4685faf59\r\nx-amzn-remapped-content-length: 334\r\nx-amz-apigw-id: fOyviFVJFiAFYeQ=\r\ntimestamp: Fri, 19 Jun 2026 23:05:20 GMT\r\nx-amzn-trace-id: Root=1-6a35cb2f-7e85498308e24e8726b4e4f9\r\ncontent-encoding: gzip\r\ncontent-length: 244\r\ncache-control: public, max-age=538633\r\nexpires: Fri, 26 Jun 2026 23:05:19 GMT\r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver: TUI Web\r\nvary: Accept-Encoding,Origin\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":334,"size_decoded":877,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4660c78fe71ec8ee5637f8d8b0d5f5f3","sha1":"b4056720a4f26352e359780dcaabdf0daaa0ec94","sha256":"4375a888956a7e55c49c17d3d4fcbdf7d09be86cb4368ad6ff89f9eacf2c03bc","sha512":"283ef63a15b2a51770308539b64676c43c4aedfc7f4cc51115373d7c48523bfb81649dd7cde8545aa3251bded35ec624607e3290ff147a107d92e89ba83fce8b","ssdeep":"","tlshash":"4ae07d5662286e3cb83f9174d7397230a13f6189634a296c76b211341386e2e7a7bdf4","first_seen":"2026-03-29T05:54:31.390873Z","last_seen":"2026-06-20T17:28:48.048871Z","times_seen":5,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/shared/mwa/assets/v2/icons/tui-light/ship.svg","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.653Z","timestamp":1781976486653,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /shared/mwa/assets/v2/icons/tui-light/ship.svg HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mwa.tui.com/browse/mwa/workflow-ssg-prod/workflow-pages-home/assets/workflow-pages-home_26.25.1/home/index.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\nx-amzn-requestid: 14e6fb4b-261a-4869-aa65-a0c6a8814fb0\r\nx-amzn-remapped-content-length: 429\r\nx-amz-apigw-id: fOywuHMQliAFZGA=\r\ntimestamp: Fri, 19 Jun 2026 23:05:28 GMT\r\nx-amzn-trace-id: Root=1-6a35cb37-0a7c3ea46f9ba1a571d059a1\r\ncontent-encoding: gzip\r\ncontent-length: 269\r\ncache-control: public, max-age=538641\r\nexpires: Fri, 26 Jun 2026 23:05:27 GMT\r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver: TUI Web\r\nvary: Accept-Encoding,Origin\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":429,"size_decoded":902,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"724313c3f968907fe7a32a17320fe539","sha1":"df3d7e62d15a7bebc1e25bc37499016feea7742e","sha256":"ba7076715c661396b7262072e9e50b7561b5df3c92bec01baf331480e95ec13f","sha512":"117ad3551a4ac52f9f8a47a280ce5253bcfc557e64a799ed9dbff974dce99ba99832f554427ed91c9803fcd8c83c6d97c3581ba9d713314f3b8e33802653a348","ssdeep":"","tlshash":"9be0e5c99f4c085c649ec170d6bd723161377269360f10e854782774222a21e7467d94","first_seen":"2026-03-29T05:54:31.424175Z","last_seen":"2026-06-20T17:28:48.049915Z","times_seen":5,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/shared/mwa/assets/v2/icons/tui-light/plus-circled.svg","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:07.001Z","timestamp":1781976487001,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /shared/mwa/assets/v2/icons/tui-light/plus-circled.svg HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mwa.tui.com/browse/mwa/workflow-ssg-prod/workflow-pages-home/assets/workflow-pages-home_26.25.1/home/index.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\nx-amzn-requestid: 92227d51-9713-4dfc-bb07-5c9c3219b663\r\nx-amzn-remapped-content-length: 255\r\nx-amz-apigw-id: fOzP0E-bliAFuXg=\r\ntimestamp: Fri, 19 Jun 2026 23:08:47 GMT\r\nx-amzn-trace-id: Root=1-6a35cbfe-7972f9ee1aa26a9c3b7e7470\r\ncontent-encoding: gzip\r\ncontent-length: 202\r\ncache-control: public, max-age=538839\r\nexpires: Fri, 26 Jun 2026 23:08:46 GMT\r\ndate: Sat, 20 Jun 2026 17:28:07 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver: TUI Web\r\nvary: Accept-Encoding,Origin\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":255,"size_decoded":835,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3272f61f25796968c844f0d8178ac81f","sha1":"e38950f63b9ae10c6c65639cdc2849bebfb6be6a","sha256":"1e7c48edc35b5cb3ae3d3a2cf6a34653caa90b1e7d28f3383f3a75f8f6cfd54f","sha512":"f260c0cd512c25059428e178dc392c884f01c739603b3daa4853f423f485653f67e3a81475c1445f5fc1d62c8066d5e7436a3808b26f387b1518edb490b65b50","ssdeep":"","tlshash":"47d0954695885c3a1136c2f44b227711203731012a4aff2cb0600730e3077f73c176ec","first_seen":"2026-06-20T17:28:48.052919Z","last_seen":"2026-06-20T17:28:48.052919Z","times_seen":1,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdns.gigya.com/sdk.config.get?apiKey=4_LWGzxVDlxnaTetL1EDjQ7w\u0026httpStatusCodes=true\u0026ver=1781976480000","fqdn":"cdns.gigya.com","domain":"gigya.com","tld":"com"},"ip":{"addr":"143.204.238.9","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:07.728Z","timestamp":1781976487728,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn3.gigya.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Thu, 03 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1D:EE:07:E0:1D:28:1F:15:0F:8C:5F:AA:62:30:B2:53:9A:48:FF:C8","sha256":"81:CD:A6:69:9B:80:55:AC:77:D1:1B:73:FE:67:AC:9C:9E:47:39:EC:12:E1:68:B7:2A:57:19:F2:DD:F4:F4:D2"}}},"request":{"raw":"GET /sdk.config.get?apiKey=4_LWGzxVDlxnaTetL1EDjQ7w\u0026httpStatusCodes=true\u0026ver=1781976480000 HTTP/1.1\r\nHost: cdns.gigya.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.tui.com/\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: CloudFront\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 3785\r\nx-amz-cf-pop: ARN53-P4\r\naccess-control-allow-origin: *\r\ncache-control: public, s-maxage=120, max-age=60\r\ncontent-encoding: gzip\r\nedge-cache-tag: siteid_206115723840\r\np3p: CP=\"IDC COR PSA DEV ADM OUR IND ONL\"\r\nx-error-code: 0\r\nx-soa: true, Gator\r\nx-server: gator-us1d-prod-65d94b7f7d-bvcfg\r\nx-callid: 019ee610ef047fb0bc5ec9c560cfb8b2\r\nx-robots-tag: none, none\r\ndate: Sat, 20 Jun 2026 17:26:35 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nvia: 1.1 b682a022c770adab7986c6e1902d95ae.cloudfront.net (CloudFront)\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 92\r\nx-sdk-canary: probability: 0%; roll: 49%; effective version: latest\r\nx-sdk-version: latest\r\nset-cookie: gig_canary=latest; Secure; HttpOnly; Path=/; Max-Age=600; SameSite=None; Partitioned\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-id: PHl77cbVAf1qww9lRBm5Q16qJA1isyYtenoVUrccICFMu-RAZeMMzw==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":8168,"size_decoded":4731,"mime_type":"text/javascript; charset=utf-8","magic":"JSON text data","md5":"c7ceb6c4515580ed0b450b4ae503306b","sha1":"59849008a9302bbdc5203297bef17d6844ea2439","sha256":"79dd0ade3c4dcbf5e96ff54df07c72f2c4bfb82c506970bab179e96620f84269","sha512":"b0afdde8cd0a8ded8eea455a6af4cbb5723c7a7beb7edbc98b29ea11ccbb7f593584faf40559b1298dfff53e32543e9a036822c758aa55d34876d0eb53f0079f","ssdeep":"96:qVm9qtu+uCDr4rF5FztLGsvlyAL/VUP3Fg+HXPc5tQBsuz02q/GFRFVbRzeATnRz:gs+VD+5zPA2/ubrz1Tn0Y46U0","tlshash":"e4f1cb37c5251dbe08f4116eaa14a983f634532f6241c9afb1bd020e2fb6532b195eec","first_seen":"2026-06-20T17:28:48.057731Z","last_seen":"2026-06-20T17:28:48.057731Z","times_seen":1,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":3,"connect":16,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdns.eu1.gigya.com/sdk.config.get?apiKey=3_gqHUXVI8IXKRF51nbhQXeEJZE_7wGeXchfGs7UyV3Y08FFnxj_fxkeBW0nagr8XZ\u0026httpStatusCodes=true\u0026ver=1781976480000","fqdn":"cdns.eu1.gigya.com","domain":"gigya.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cdns.eu1.gigya.com/js/sso.htm?APIKey=3_gqHUXVI8IXKRF51nbhQXeEJZE_7wGeXchfGs7UyV3Y08FFnxj_fxkeBW0nagr8XZ\u0026ssoSegment=\u0026version=latest\u0026build=1930\u0026flavor=base\u0026sourceKey=4_LWGzxVDlxnaTetL1EDjQ7w#m=removeToken\u0026d=https%3A%2F%2Fwww.tui.com\u0026callbackID=gig_sso_cb1781976488986_1\u0026sAPIKey=4_LWGzxVDlxnaTetL1EDjQ7w\u0026gig_loggerConfig=%7B%22logLevel%22%3A0%2C%22clientMuteLevel%22%3A0%2C%22logTheme%22%3A1%7D","date":"2026-06-20T17:28:09.146Z","timestamp":1781976489146,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /sdk.config.get?apiKey=3_gqHUXVI8IXKRF51nbhQXeEJZE_7wGeXchfGs7UyV3Y08FFnxj_fxkeBW0nagr8XZ\u0026httpStatusCodes=true\u0026ver=1781976480000 HTTP/1.1\r\nHost: cdns.eu1.gigya.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdns.eu1.gigya.com/js/sso.htm?APIKey=3_gqHUXVI8IXKRF51nbhQXeEJZE_7wGeXchfGs7UyV3Y08FFnxj_fxkeBW0nagr8XZ\u0026ssoSegment=\u0026version=latest\u0026build=1930\u0026flavor=base\u0026sourceKey=4_LWGzxVDlxnaTetL1EDjQ7w\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: gig_canary=latest\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T20:29:48.587722Z","times_seen":16589263,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tui.com/assets/v2/logos/app/google-playstore-de.svg","fqdn":"static.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"13.249.8.122","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:05.355Z","timestamp":1781976485355,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Jul 2025 00:00:00 GMT","end":"Wed, 29 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B1:29:28:04:46:85:C0:F0:4D:6F:D6:B9:CC:AA:FF:BE:E9:8C:8E:D4","sha256":"F6:AE:7B:84:78:6D:24:4A:0F:93:96:0C:8B:78:F7:AF:26:0C:5C:AB:8E:7A:05:74:F4:C4:6C:E3:1E:20:86:4A"}}},"request":{"raw":"GET /assets/v2/logos/app/google-playstore-de.svg HTTP/1.1\r\nHost: static.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nCookie: _vis_opt_exp_de24_combi=2; tui-coupon-wallet-enabled=true; _vis_opt_exp_P1973_combi=A; ecid=66966107634980792017217711389285007288; kndctr_41E27DA552A6473A0A490D4D_AdobeOrg_cluster=irl1; ak_bmsc=B67A7B246DD506FF96868E790DEC7588~000000000000000000000000000000~YAAQnQplX5EeC8yeAQAA/0oT5gDOPuTt/btrBxkEvsjZCv5iCpXn0dXIvmJwn7xqmMAnNIe0nO0FY39Vbl5SjyGMJEVaR4G9q1/l42ck/a/EQOacJ4igK59UwcumJR8QpmYiwT+CVeC/eOnPjNwPUHExTtozITtaYleYz3l9P1pItpV47INsmiRsPueOOgIFv4Y8oYKv34ceEccDtGFc3g6P6Mp+trxKpDZd6yc0HigFXe28HQYG7avaeFj+ik5m0MFEhAiuBqS6SvCL4vy3reXusZ6jxYvIWHdT6PwPnlhHpHp22JmnVdOr/CIQP/7fu/r0sRyFMPvi8dmL3H+VaoMn7Zyfl7wI1msqdFED3mRYtf6+m0f5fS2F1TrGMkXqOaIHTqRL2Aw2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\nvia: 1.1 af1c2193a818b5824fd85ddd651620a8.cloudfront.net (CloudFront), 1.1 118086882d9f17e10877e0653a055586.cloudfront.net (CloudFront)\r\nlast-modified: Wed, 31 Jul 2024 14:37:24 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: br\r\ndate: Sat, 20 Jun 2026 17:03:05 GMT\r\ncache-control: max-age=7200\r\netag: W/\"4fdb53338fbf4607e2528f6a63057378\"\r\nvary: Accept-Encoding,Origin\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: FRA60-P9, ARN53-P3\r\nx-amz-cf-id: VLt4t9CiEW7AKv1DZ_L_VddIrqGprbFC6xeOspfvjs3GHvcMKqngZQ==\r\nage: 1580\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":11515,"size_decoded":4750,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4fdb53338fbf4607e2528f6a63057378","sha1":"5c82b178ca0b81342a8115d89e53c8d046af27c1","sha256":"857759372ae5a5ada1d29185ccd7237d7281a6d672aa7546728144f1fc493cc4","sha512":"c50b38091d84f86f384e873b926fb5b6641131681c9780a3e0ee527ec8992e06317bbb0ce476ce5ce470c4f65e14266ca494f279341a66d38a3da18002091ad0","ssdeep":"192:INvFkNyjh2Jsvq0n/7zM+Lt86/Ve0tCXBAwoxkM/9XJo:AagEJsvqy/nM+Lm6/VehxAXF/9a","tlshash":"2d3219e92205c9e72d4632fe386524d93da534fa7b55803cc9ffb84079169d80978ec7","first_seen":"2025-09-28T22:43:58.383209Z","last_seen":"2026-06-20T17:28:48.068216Z","times_seen":14,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":1,"connect":11,"send":0,"wait":10,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/shared/mwa/assets/v2/fonts/ambit-semibold.subset.woff2","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:05.896Z","timestamp":1781976485896,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /shared/mwa/assets/v2/fonts/ambit-semibold.subset.woff2 HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mwa.tui.com/browse/mwa/workflow-ssg-prod/workflow-pages-home/assets/workflow-pages-home_26.25.1/themes/tui-light/index.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: binary/octet-stream\r\nx-amzn-requestid: 7c5b6f12-d302-48f6-994c-2c9e5386ec56\r\nx-amzn-remapped-content-length: 16340\r\nx-amz-apigw-id: fOyvQGXYFiAFYMA=\r\ntimestamp: Fri, 19 Jun 2026 23:05:19 GMT\r\nx-amzn-trace-id: Root=1-6a35cb2e-19de80167cd75e3b4e5b113a\r\ncache-control: public, max-age=538633\r\nexpires: Fri, 26 Jun 2026 23:05:18 GMT\r\ndate: Sat, 20 Jun 2026 17:28:05 GMT\r\ncontent-length: 16340\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver: TUI Web\r\nvary: Accept-Encoding,Origin\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16340,"size_decoded":16953,"mime_type":"binary/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 16340, version 1.1441","md5":"7c2afb8493d1f7a33c914b5868ab4f04","sha1":"b4e9cdd2a1d59dc1dbe6af2f373f0ad13805098f","sha256":"290a3e14769be68e4ce341ec0cc608113cfcdf2685fe07871d5d7c2c8ee7ad1f","sha512":"eea44a39226117500b3dc57a7cd13f4fd06ec90cd3d0c9ae944737e01c2b4aceeec6097fa2a738e950726153ea511d9be0632f1da27ba018e839b9d592e2c835","ssdeep":"384:n6WrO/D1VjjjIZ1Oiwjc3r7cyMJSVBGclJkehz9CRi:n6Wr6NGOiqcsyPO83pwRi","tlshash":"0572d0bea150becdd281278e321ef1aac260703dbe51ddd8d0b84444b473de0a05bead","first_seen":"2025-09-28T22:43:58.436602Z","last_seen":"2026-06-20T17:28:47.951386Z","times_seen":28,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tui.com/shared/mwa/assets/v2/favicons/tui-apple-touch-icon-180x180.png","fqdn":"www.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.390Z","timestamp":1781976486390,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Feb 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"93:A2:36:4F:F0:E1:E2:A8:E3:8E:ED:43:25:EC:2E:34:A5:C9:B6:95","sha256":"17:6D:39:3B:D0:83:79:93:5B:D6:9B:20:64:6C:9B:25:D4:8D:6F:6D:CD:60:93:9F:18:91:AB:DB:5D:01:51:80"}}},"request":{"raw":"GET /shared/mwa/assets/v2/favicons/tui-apple-touch-icon-180x180.png HTTP/1.1\r\nHost: www.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nCookie: _vis_opt_exp_de24_combi=2; tui-coupon-wallet-enabled=true; _vis_opt_exp_P1973_combi=A; ecid=66966107634980792017217711389285007288; kndctr_41E27DA552A6473A0A490D4D_AdobeOrg_cluster=irl1; ak_bmsc=B67A7B246DD506FF96868E790DEC7588~000000000000000000000000000000~YAAQnQplX5EeC8yeAQAA/0oT5gDOPuTt/btrBxkEvsjZCv5iCpXn0dXIvmJwn7xqmMAnNIe0nO0FY39Vbl5SjyGMJEVaR4G9q1/l42ck/a/EQOacJ4igK59UwcumJR8QpmYiwT+CVeC/eOnPjNwPUHExTtozITtaYleYz3l9P1pItpV47INsmiRsPueOOgIFv4Y8oYKv34ceEccDtGFc3g6P6Mp+trxKpDZd6yc0HigFXe28HQYG7avaeFj+ik5m0MFEhAiuBqS6SvCL4vy3reXusZ6jxYvIWHdT6PwPnlhHpHp22JmnVdOr/CIQP/7fu/r0sRyFMPvi8dmL3H+VaoMn7Zyfl7wI1msqdFED3mRYtf6+m0f5fS2F1TrGMkXqOaIHTqRL2Aw2; _tfm_exp_tfo1684=2; _vis_opt_exp_CTRRTBb_combi=0; _vis_opt_exp_CTRRTBc_combi=3; _vis_opt_exp_AOSP_pc2_combi=1; _vis_opt_exp_18742_combi=2; utag_main=v_id:019ee6135181001c3648a73012a605050001400900918$_sn:1$_se:1%3Bexp-session$_ss:1%3Bexp-session$_st:1781978286274%3Bexp-session$ses_id:1781976486274%3Bexp-session$_pn:1%3Bexp-session; _vis_opt_exp_tfo1518_combi=2; _vis_opt_exp_AbDist0_combi=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: https://m.tui.com\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Sat, 20 Jun 2026 17:28:06 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: Origin\r\nserver: plcache.edge\r\nx-pl-serverid: prod-edge-02.d.de\r\nx-pl-reqid: 768e884a-80bc-4e4d-8081-f39c0e54e408\r\ncache-control: no-cache\r\nexpires: Sat, 20 Jun 2026 17:28:06 GMT\r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\nset-cookie: _vis_opt_exp_de24_combi=2; Domain=tui.com; Max-Age=2592000; Path=/;\ntui-coupon-wallet-enabled=true; Domain=tui.com; Max-Age=2592000; Path=/;\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"C3.js","description":"D3 based reusable chart library","website":"https://c3js.org/","common_platform_enumeration":"","icon":"C3.js.png","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Contentful","description":"Contentful is an API-first content management platform to create, manage and publish content on any digital channel.","website":"https://www.contentful.com","common_platform_enumeration":"","icon":"Contentful.svg","categories":["CMS"]},{"name":"TYPO3 CMS","description":"TYPO3 is a free and open-source Web content management system written in PHP.","website":"https://typo3.org/","common_platform_enumeration":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","icon":"TYPO3.svg","categories":["CMS"]}],"data":{"size":239170,"size_decoded":239911,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (39140)","md5":"6454886c86a63443167a97ad380c385a","sha1":"72655b8ddcfcd07f6ac4f776facc8fc804179082","sha256":"6c76ee7464b5bf170b2844ff46c55bf6ac7fc275020515d6d2e12338f213bc5f","sha512":"0b1b7954b78b327da5a9e1e6a314efeb246e23e27fd42b96fd3a80ee2e659bb520829c195f867368e2eed93e650f3b3c541eed77e3bed790849e97e047446221","ssdeep":"3072:Nyo2DLJKjdRdeRX4p9sTvZRXZx6pRoKB4vD:Nyo2HJY8Rdb","tlshash":"ba34fab280807577bf2bd292b2c7ef5da1c99801cdc3dd9af5b1990a0fc7eb24951909","first_seen":"2026-06-20T17:28:48.078969Z","last_seen":"2026-06-20T17:28:48.078969Z","times_seen":1,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/shared/mwa/assets/v2/icons/tui-light/home.svg","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.648Z","timestamp":1781976486648,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /shared/mwa/assets/v2/icons/tui-light/home.svg HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mwa.tui.com/browse/mwa/workflow-ssg-prod/workflow-pages-home/assets/workflow-pages-home_26.25.1/home/index.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\nx-amzn-requestid: 7f050371-f3d9-4487-8f67-c3bcec2e789d\r\nx-amzn-remapped-content-length: 264\r\nx-amz-apigw-id: fOzdQG8jFiAFm2w=\r\ntimestamp: Fri, 19 Jun 2026 23:10:13 GMT\r\nx-amzn-trace-id: Root=1-6a35cc54-461d2d35712055d57e54c778\r\ncontent-encoding: gzip\r\ncontent-length: 200\r\ncache-control: public, max-age=538926\r\nexpires: Fri, 26 Jun 2026 23:10:12 GMT\r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver: TUI Web\r\nvary: Accept-Encoding,Origin\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":264,"size_decoded":833,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1074af58a72c598cbd51d392bda5fcc7","sha1":"f5cf3f947184a2d7bb73c78cf0e67dd52659d03a","sha256":"8c50069a0f999cde7eed7fcbb0ade9d5142ca3a199679dc9edbd48d281111257","sha512":"1869a95d45fac919b33ed28e17748fc1103043a1f83a7e6d21beb7374b8de3b8c020c4d5024904ed5007854631ec5bd0d0a34964feaf1f278284a95bb29bd600","ssdeep":"","tlshash":"38d02e8b62081c2cb42a86b0db783634107a3092080824aca9b123706218b5abc7bae8","first_seen":"2026-03-29T05:54:31.380481Z","last_seen":"2026-06-20T17:28:48.080058Z","times_seen":5,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tui.com/assets/v2/fonts/tuitypelight-regular.woff2","fqdn":"static.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"13.249.8.122","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.883Z","timestamp":1781976486883,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Jul 2025 00:00:00 GMT","end":"Wed, 29 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B1:29:28:04:46:85:C0:F0:4D:6F:D6:B9:CC:AA:FF:BE:E9:8C:8E:D4","sha256":"F6:AE:7B:84:78:6D:24:4A:0F:93:96:0C:8B:78:F7:AF:26:0C:5C:AB:8E:7A:05:74:F4:C4:6C:E3:1E:20:86:4A"}}},"request":{"raw":"GET /assets/v2/fonts/tuitypelight-regular.woff2 HTTP/1.1\r\nHost: static.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: binary/octet-stream\r\ncontent-length: 29268\r\naccess-control-allow-origin: *\r\nlast-modified: Wed, 31 Jul 2024 14:37:19 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\naccess-control-expose-headers: Date\r\nvia: 1.1 d9636724d333576f23b5fcfb40d7830c.cloudfront.net (CloudFront), 1.1 118086882d9f17e10877e0653a055586.cloudfront.net (CloudFront)\r\ndate: Sat, 20 Jun 2026 16:43:55 GMT\r\ncache-control: max-age=7200\r\netag: \"02065caf3ad2fab71e6a6eb1b8a2a91e\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: FRA60-P9, ARN53-P3\r\nx-amz-cf-id: oJei23XqfTTMKSnEh0yzI1m3bIPb5IZuUXW-_uiYouoq9fYdPztlQg==\r\nage: 3184\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":29268,"size_decoded":29968,"mime_type":"binary/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 29268, version 2.6619","md5":"02065caf3ad2fab71e6a6eb1b8a2a91e","sha1":"b8706fb00b9406682b65e33fe9c7756521e71362","sha256":"6cce9af02d2022d17e1a3e8d5fbf1e13d2b303a411cffc8bbdb40e4c047ab594","sha512":"f93f9fb58c7e85bc437a35354efd52be74643e75f8d4e8efbc4a6dccba40b579ed5bc3464c687a682dfd5aba46cc0b9795da93329daa9bd1ce606368bf6def6d","ssdeep":"768:2aH2Q6BUTigx5b2gnJ5IKbauG26SNmipcCch4v/K576Iilb:2soBUeyJ51bJNXPv8IZ","tlshash":"aed2e1c0152a9ff27b3610311ded5b627b1f0d3a11d44a7a8fbc09b98794501927fee8","first_seen":"2023-05-08T13:26:09Z","last_seen":"2026-06-20T17:28:47.892829Z","times_seen":45,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/customer/mwa/login-mfe/main.js","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:07.021Z","timestamp":1781976487021,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /customer/mwa/login-mfe/main.js HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nCookie: _vis_opt_exp_de24_combi=2; tui-coupon-wallet-enabled=true; _vis_opt_exp_P1973_combi=A; ecid=66966107634980792017217711389285007288; kndctr_41E27DA552A6473A0A490D4D_AdobeOrg_cluster=irl1; ak_bmsc=B67A7B246DD506FF96868E790DEC7588~000000000000000000000000000000~YAAQnQplX5EeC8yeAQAA/0oT5gDOPuTt/btrBxkEvsjZCv5iCpXn0dXIvmJwn7xqmMAnNIe0nO0FY39Vbl5SjyGMJEVaR4G9q1/l42ck/a/EQOacJ4igK59UwcumJR8QpmYiwT+CVeC/eOnPjNwPUHExTtozITtaYleYz3l9P1pItpV47INsmiRsPueOOgIFv4Y8oYKv34ceEccDtGFc3g6P6Mp+trxKpDZd6yc0HigFXe28HQYG7avaeFj+ik5m0MFEhAiuBqS6SvCL4vy3reXusZ6jxYvIWHdT6PwPnlhHpHp22JmnVdOr/CIQP/7fu/r0sRyFMPvi8dmL3H+VaoMn7Zyfl7wI1msqdFED3mRYtf6+m0f5fS2F1TrGMkXqOaIHTqRL2Aw2; _tfm_exp_tfo1684=2; _vis_opt_exp_CTRRTBb_combi=0; _vis_opt_exp_CTRRTBc_combi=3; _vis_opt_exp_18742_combi=2; utag_main=v_id:019ee6135181001c3648a73012a605050001400900918$_sn:1$_se:1%3Bexp-session$_ss:1%3Bexp-session$_st:1781978286274%3Bexp-session$ses_id:1781976486274%3Bexp-session$_pn:1%3Bexp-session; _vis_opt_exp_tfo1518_combi=2; _vis_opt_exp_AbDist0_combi=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nlast-modified: Mon, 11 May 2026 15:23:04 GMT\r\netag: \"f03ccc85334b69ebbe5e3c6b6c81d0b2\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nx-amz-cf-pop: FRA56-P17\r\nx-amz-cf-id: uk4DZeiIyK4WaFEXcf6wZZ8n40nQu8w6Fh2CatemHH8qNMVuf34g4w==\r\nvary: Origin, Origin, Accept-Encoding, Origin\r\ncontent-encoding: gzip\r\ncache-control: max-age=600\r\nexpires: Sat, 20 Jun 2026 17:38:07 GMT\r\ndate: Sat, 20 Jun 2026 17:28:07 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver: TUI Web\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":308321,"size_decoded":77510,"mime_type":"application/javascript","magic":"data","md5":"f03ccc85334b69ebbe5e3c6b6c81d0b2","sha1":"76985d452c666d7d7851a156d18f848bcc084d05","sha256":"c9b120c3c4d02aff3ad2a1985cfefc91fcd305f8d5bf778330e7d417c5e2888f","sha512":"f91ff7b7d2efae1c01f3a396f418477b40a6528be1ae33bd031d81f70cf58e59c416721599ca45e0d467e34debc45ce3e159e07fd231ee4ddc07b5698ff58137","ssdeep":"6144:wYAhmUeaDD18aBDqKDk1DbSmJmZDzmZDL8DgZDFVDAGDzuDciDhsD5FD8hDyLDFN:GhmUeaDD18aBDqKDk1DbSmJmZDzmZDL/","tlshash":"89643b48f29070361b9302a1742f1906f366782c650dc82ce4b5d9fd3afaa8da77776d","first_seen":"2026-06-06T12:22:17.965727Z","last_seen":"2026-06-20T17:28:48.083155Z","times_seen":2,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":126,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/shared/mwa/assets/v2/fonts/tuitypelight-regular.woff2","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:07.073Z","timestamp":1781976487073,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /shared/mwa/assets/v2/fonts/tuitypelight-regular.woff2 HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: binary/octet-stream\r\nx-amzn-requestid: c1a27204-c949-433e-8a16-9fff46a9b319\r\nx-amzn-remapped-content-length: 29268\r\nx-amz-apigw-id: fOyvaH3PliAFZjQ=\r\ntimestamp: Fri, 19 Jun 2026 23:05:20 GMT\r\nx-amzn-trace-id: Root=1-6a35cb2f-4fba82673992a24f7581ef89\r\ncache-control: public, max-age=538632\r\nexpires: Fri, 26 Jun 2026 23:05:19 GMT\r\ndate: Sat, 20 Jun 2026 17:28:07 GMT\r\ncontent-length: 29268\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver: TUI Web\r\nvary: Accept-Encoding,Origin\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29268,"size_decoded":29887,"mime_type":"binary/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 29268, version 2.6619","md5":"02065caf3ad2fab71e6a6eb1b8a2a91e","sha1":"b8706fb00b9406682b65e33fe9c7756521e71362","sha256":"6cce9af02d2022d17e1a3e8d5fbf1e13d2b303a411cffc8bbdb40e4c047ab594","sha512":"f93f9fb58c7e85bc437a35354efd52be74643e75f8d4e8efbc4a6dccba40b579ed5bc3464c687a682dfd5aba46cc0b9795da93329daa9bd1ce606368bf6def6d","ssdeep":"768:2aH2Q6BUTigx5b2gnJ5IKbauG26SNmipcCch4v/K576Iilb:2soBUeyJ51bJNXPv8IZ","tlshash":"aed2e1c0152a9ff27b3610311ded5b627b1f0d3a11d44a7a8fbc09b98794501927fee8","first_seen":"2023-05-08T13:26:09Z","last_seen":"2026-06-20T17:28:47.892829Z","times_seen":45,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloud.tui.com/mfe-header/location","fqdn":"cloud.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:07.080Z","timestamp":1781976487080,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloud.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Tue, 16 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"7D:E5:28:0F:B6:E6:8A:A2:A4:FC:71:45:EB:89:19:59:DA:00:B6:3C","sha256":"31:B4:F1:6F:B9:43:CE:E2:95:A8:98:0A:8A:2C:53:14:B6:A1:C8:DB:55:EC:BD:2F:D1:88:82:44:35:BB:15:38"}}},"request":{"raw":"POST /mfe-header/location HTTP/1.1\r\nHost: cloud.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.tui.com/\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 185\r\napigw-requestid: fRUSLhqAliAEJ-A=\r\nserver: Header BFF\r\netag: W/\"b9-17JggbcUpBwvlv/HsS5MaRV6AhI\"\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\nx-amz-cf-pop: FRA56-P3\r\nx-amz-cf-id: k5vL9yHVRwtyQhvQ8xa2gmnr-nKnGyj7Vbu9JuAmgK3f9U4N28cA9w==\r\ncache-control: max-age=0\r\nexpires: Sat, 20 Jun 2026 17:28:07 GMT\r\ndate: Sat, 20 Jun 2026 17:28:07 GMT\r\nage: 0\r\nset-cookie: ak_bmsc=9E8E5B9903653001B9C39479A62A5D13~000000000000000000000000000000~YAAQXAplX8To59ueAQAAEFUT5gDOzENFdtvp7ItlRQjmSme8THhE7bkfJQ31Gu/iqrL087vERAyAk/jWvyu93Bhli7z3pkHTyOMmahM1kLvBVVzVaO72lke4ZU0/2PXJRREx7uG13D45np9p8kQuCKdLWvX9qONH2gxV0oJzxZm4bIdUiGNlRMgcCMvMYAduH2XYoSMn4vxYuCIYEk2S2pQSLGNcg1GiT7gjuYtfrhLdpYVNMM8iAaqqruuqGnldraRgTCNb4Sg9lsvmkz6zfkg93OXHpbdPWWG999tlKrwfPjK61RSPGmaDSJEBI6RyoPNLPhUdbd06K5/rQBerfw48P4gnTOX6UhaFRsd1CcIYa1RBJbAH8oIi856pBRAm+mOifGlCGnwh; Domain=.tui.com; Path=/; Expires=Sat, 20 Jun 2026 19:28:07 GMT; Max-Age=7200; HttpOnly\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Akamai Bot Manager","description":"Akamai Bot Manager detect bots using device fingerprinting bot signatures.","website":"https://www.akamai.com/us/en/products/security/bot-manager.jsp","common_platform_enumeration":"","icon":"Akamai.svg","categories":["Security"]},{"name":"Akamai","description":"Akamai is global content delivery network (CDN) services provider for media and software delivery, and cloud security solutions.","website":"https://akamai.com","common_platform_enumeration":"","icon":"Akamai.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":185,"size_decoded":1216,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1e7880d4ef760c88b318642817719c13","sha1":"d7b26081b714a41c2f96ffc7b12e4c69157a0212","sha256":"3e1c310e44f2ba136553f2cabda41acc5e83d0fe403e57b265326c44811c069d","sha512":"c66600d8aa366b317259223784e8ae8405a84e2944198f6c8338cf0f6d3ca7c6586c17fd95fdd0565c93d394c4c027b6dbb3513892b5b5e210e479884e6d6b5e","ssdeep":"","tlshash":"f9c022a90868a0c83aa7c0862878a4e6381c111f898188c0dea48f808c887a89200a86","first_seen":"2023-06-09T15:29:30Z","last_seen":"2026-06-20T17:28:48.092444Z","times_seen":26,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.ctfassets.net/wft38qt3w1fi/5dOk520x0sPP8tCfbEnZns/9570c72e5fd3d3ab4eed11bdfa5d351e/amex-card.svg","fqdn":"images.ctfassets.net","domain":"ctfassets.net","tld":"net"},"ip":{"addr":"108.157.229.8","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:05.330Z","timestamp":1781976485330,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.ctfassets.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sat, 18 Oct 2025 00:00:00 GMT","end":"Sun, 15 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:39:C1:37:7A:6B:60:8A:D5:73:9E:D7:C4:F9:3A:11:9B:BD:94:2B","sha256":"AC:EA:37:10:54:C2:91:B5:04:B8:B4:CA:CD:35:48:4D:D0:92:78:F6:E2:8B:D9:57:78:20:D6:74:FE:14:16:A9"}}},"request":{"raw":"GET /wft38qt3w1fi/5dOk520x0sPP8tCfbEnZns/9570c72e5fd3d3ab4eed11bdfa5d351e/amex-card.svg HTTP/1.1\r\nHost: images.ctfassets.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 06 Jul 2023 06:55:32 GMT\r\nserver: Contentful Images API\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ndate: Sat, 20 Jun 2026 03:18:40 GMT\r\ncache-control: max-age=31536000\r\netag: W/\"db0bd6c5e16686979e584686e6380d69\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 3346055bb53a57ebf02828b88e1ee87c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: 1GbHWupxUtW1jdD2bz9lC9Ts8m7Sn5fjCnKuWh7mz7N2yT-n8dwWmg==\r\nage: 52024\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1803,"size_decoded":1294,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"db0bd6c5e16686979e584686e6380d69","sha1":"b2cc33d737ca040accaf8192f9c7c859f4e23b04","sha256":"abf6563abdcab44a213b8ed2694c2b6a37a0a8627eee17780af541f9b265d0a2","sha512":"fba655e298b437f4865e669677d41d5207819f9fc2de9693758446e5438f34b47ce5b9dba324b564ec9abb912ae13da4ec677d4158663ada708787d60af34b90","ssdeep":"","tlshash":"8a31e2c8635c8ad95c6e13f46b1359433c7708f6b06127a8f8aee26634368e27835dd5","first_seen":"2025-09-30T04:45:21.525505Z","last_seen":"2026-06-20T17:28:48.093128Z","times_seen":7,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":1,"connect":9,"send":0,"wait":13,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/shared/mwa/assets/v2/icons/tui-light/aircraft.svg","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.643Z","timestamp":1781976486643,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /shared/mwa/assets/v2/icons/tui-light/aircraft.svg HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mwa.tui.com/browse/mwa/workflow-ssg-prod/workflow-pages-home/assets/workflow-pages-home_26.25.1/home/index.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\nx-amzn-requestid: cac3d140-6f62-4fe3-8f9f-99c6e4bff05a\r\nx-amzn-remapped-content-length: 270\r\nx-amz-apigw-id: fOywBG6LliAFlHQ=\r\ntimestamp: Fri, 19 Jun 2026 23:05:23 GMT\r\nx-amzn-trace-id: Root=1-6a35cb32-15ce77455454594b01e6eb37\r\ncontent-encoding: gzip\r\ncontent-length: 212\r\ncache-control: public, max-age=538636\r\nexpires: Fri, 26 Jun 2026 23:05:22 GMT\r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver: TUI Web\r\nvary: Accept-Encoding,Origin\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":270,"size_decoded":845,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ac0e55c6cd8dc02cfb3e596ec964045d","sha1":"3177123fa0c900f6dd84f33775f48338beaa3776","sha256":"4b398ecb087e99c9245db4617fcd78815ca368083f8a8d028431366ea0e76993","sha512":"9cd4cfb80596a61e01b68f0e22a33011740a15ccafaa8b4075cfa29f8280d89a9eaacad4cd4319a3bbe4a919dc603f16c9d28d34f01f4adefc444dba3bcc935f","ssdeep":"","tlshash":"88d02b4ac26c1e6cb921c2a0cf783b62501d2342a408247940b242701209b8db437da8","first_seen":"2026-03-29T05:54:31.423353Z","last_seen":"2026-06-20T17:28:48.09423Z","times_seen":5,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/shared/mwa/assets/v2/icons/tui-light/plus-circled.svg","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.665Z","timestamp":1781976486665,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /shared/mwa/assets/v2/icons/tui-light/plus-circled.svg HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mwa.tui.com/browse/mwa/workflow-ssg-prod/workflow-pages-home/assets/workflow-pages-home_26.25.1/home/index.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\nx-amzn-requestid: 92227d51-9713-4dfc-bb07-5c9c3219b663\r\nx-amzn-remapped-content-length: 255\r\nx-amz-apigw-id: fOzP0E-bliAFuXg=\r\ntimestamp: Fri, 19 Jun 2026 23:08:47 GMT\r\nx-amzn-trace-id: Root=1-6a35cbfe-7972f9ee1aa26a9c3b7e7470\r\ncontent-encoding: gzip\r\ncontent-length: 202\r\ncache-control: public, max-age=538840\r\nexpires: Fri, 26 Jun 2026 23:08:46 GMT\r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver: TUI Web\r\nvary: Accept-Encoding,Origin\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":255,"size_decoded":835,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3272f61f25796968c844f0d8178ac81f","sha1":"e38950f63b9ae10c6c65639cdc2849bebfb6be6a","sha256":"1e7c48edc35b5cb3ae3d3a2cf6a34653caa90b1e7d28f3383f3a75f8f6cfd54f","sha512":"f260c0cd512c25059428e178dc392c884f01c739603b3daa4853f423f485653f67e3a81475c1445f5fc1d62c8066d5e7436a3808b26f387b1518edb490b65b50","ssdeep":"","tlshash":"47d0954695885c3a1136c2f44b227711203731012a4aff2cb0600730e3077f73c176ec","first_seen":"2026-06-20T17:28:48.052919Z","last_seen":"2026-06-20T17:28:48.052919Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/shared/mwa/assets/v2/icons/tui-light/signpost-directions.svg","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:07.371Z","timestamp":1781976487371,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /shared/mwa/assets/v2/icons/tui-light/signpost-directions.svg HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mwa.tui.com/browse/mwa/workflow-ssg-prod/workflow-pages-home/assets/workflow-pages-home_26.25.1/home/index.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T20:29:48.587722Z","times_seen":16589263,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tags.tiqcdn.com/utag/tui/main/prod/utag.v.js?a=tui/main/202606171456\u0026cb=1781976487390","fqdn":"tags.tiqcdn.com","domain":"tiqcdn.com","tld":"com"},"ip":{"addr":"65.9.46.57","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:07.393Z","timestamp":1781976487393,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tags.tiqcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 09 Mar 2026 00:00:00 GMT","end":"Tue, 22 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D6:76:2F:BD:9C:CC:DC:5A:C2:A1:D3:60:C0:08:21:C9:62:EB:5E:69","sha256":"D1:5D:04:F4:35:9F:D3:9D:4B:7D:16:79:64:5C:FC:23:0C:52:77:2C:46:02:F2:D8:7D:8A:08:6D:1A:58:40:12"}}},"request":{"raw":"GET /utag/tui/main/prod/utag.v.js?a=tui/main/202606171456\u0026cb=1781976487390 HTTP/1.1\r\nHost: tags.tiqcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 2\r\nlast-modified: Thu, 11 Jun 2026 12:44:24 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: xpQwDnI3G399lOVsTdlcbNQo3KuTPmOV\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 20 Jun 2026 17:24:35 GMT\r\netag: \"7bc0ee636b3b83484fc3b9348863bd22\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 62fb1997c40a03e325a22b812f7b7e10.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: ZllYO7cgFmEilkWKECD-YXJiYRCQMlw60ZTzkNSC5uQWMW0wOHUzDA==\r\nage: 239\r\ncache-control: max-age=300\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":606,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"7bc0ee636b3b83484fc3b9348863bd22","sha1":"ebbffb7d7ea5362a22bfa1bab0bfdeb1617cd610","sha256":"a2c2339691fc48fbd14fb307292dff3e21222712d9240810742d7df0c6d74dfb","sha512":"4d094b64124366530e7e327b1ad5d06c0fd1ceb96387d6a143e9f561c2f9ff7ca9d68e7c23b8b14aab5309c202a8dced9a38d950662a50984d2841577293cd64","ssdeep":"","tlshash":"c71000000000000000000000000000c000000000000000000030000000000000000000","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-06-20T19:43:44.020188Z","times_seen":32731,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat-loader.smartagent.app/css/loader-base.css","fqdn":"chat-loader.smartagent.app","domain":"smartagent.app","tld":"app"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:09.799Z","timestamp":1781976489799,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /css/loader-base.css HTTP/1.1\r\nHost: chat-loader.smartagent.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chat-loader.smartagent.app/css/loader-bubble.css\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T20:29:48.587722Z","times_seen":16589263,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.tx4.pw.adn.cloud/X2KLWK/2582578842704030066/f7db1527-5433-425d-ac64-7a200c79bb66","fqdn":"api.tx4.pw.adn.cloud","domain":"adn.cloud","tld":"cloud"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:09.826Z","timestamp":1781976489826,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /X2KLWK/2582578842704030066/f7db1527-5433-425d-ac64-7a200c79bb66 HTTP/1.1\r\nHost: api.tx4.pw.adn.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.tui.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 484\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T20:29:48.587722Z","times_seen":16589263,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.ctfassets.net/wft38qt3w1fi/7cP3yUcO3eH8KZGf9zSdaR/7f685720fd32ff7d5408dc18c8ae1aaf/visa-card.svg","fqdn":"images.ctfassets.net","domain":"ctfassets.net","tld":"net"},"ip":{"addr":"108.157.229.8","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:05.326Z","timestamp":1781976485326,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.ctfassets.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sat, 18 Oct 2025 00:00:00 GMT","end":"Sun, 15 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:39:C1:37:7A:6B:60:8A:D5:73:9E:D7:C4:F9:3A:11:9B:BD:94:2B","sha256":"AC:EA:37:10:54:C2:91:B5:04:B8:B4:CA:CD:35:48:4D:D0:92:78:F6:E2:8B:D9:57:78:20:D6:74:FE:14:16:A9"}}},"request":{"raw":"GET /wft38qt3w1fi/7cP3yUcO3eH8KZGf9zSdaR/7f685720fd32ff7d5408dc18c8ae1aaf/visa-card.svg HTTP/1.1\r\nHost: images.ctfassets.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\ndate: Sat, 20 Jun 2026 04:29:54 GMT\r\nlast-modified: Thu, 06 Jul 2023 06:52:57 GMT\r\netag: W/\"b3cef40ada76ceb4d0239adee0e2b237\"\r\ncache-control: max-age=31536000\r\nserver: Contentful Images API\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 3346055bb53a57ebf02828b88e1ee87c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: phq1dlWKu0N75fVix7y3O9Bv9y2FBcr_-OdbJ1bxtQ-FSHy-_p67Pw==\r\nage: 46692\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2902,"size_decoded":1944,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b3cef40ada76ceb4d0239adee0e2b237","sha1":"5f3b74d7b1eb4f218bbadb3bef2c1e01ff15763f","sha256":"1ce88f5b6f699cae1f9e18c47f85c17e7245f3b8dc376c799cf2281d9aeefd56","sha512":"5e979a8662af8e712c33b756c6d735bbfb78683d288db0199793ea3db4149f606c0a9a0ccd3bfab203991f6c26326f020fc6c4a869ac8068709e25889f9f837b","ssdeep":"","tlshash":"be5194d623abaee8784343f8844311ca78b93899b1b781e4c1447ee334191a4d42ecfb","first_seen":"2025-09-30T04:45:21.554199Z","last_seen":"2026-06-20T17:28:48.095845Z","times_seen":7,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":5,"connect":10,"send":0,"wait":9,"receive":0,"ssl":231},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.ctfassets.net/wft38qt3w1fi/1YOoQuXWhHzajMGDdODxHU/755bc2f55d571eb2db2f4cf9ac919f35/Bild__10_.png","fqdn":"images.ctfassets.net","domain":"ctfassets.net","tld":"net"},"ip":{"addr":"108.157.229.8","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:05.339Z","timestamp":1781976485339,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.ctfassets.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sat, 18 Oct 2025 00:00:00 GMT","end":"Sun, 15 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:39:C1:37:7A:6B:60:8A:D5:73:9E:D7:C4:F9:3A:11:9B:BD:94:2B","sha256":"AC:EA:37:10:54:C2:91:B5:04:B8:B4:CA:CD:35:48:4D:D0:92:78:F6:E2:8B:D9:57:78:20:D6:74:FE:14:16:A9"}}},"request":{"raw":"GET /wft38qt3w1fi/1YOoQuXWhHzajMGDdODxHU/755bc2f55d571eb2db2f4cf9ac919f35/Bild__10_.png HTTP/1.1\r\nHost: images.ctfassets.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 9388\r\nlast-modified: Fri, 07 Jun 2024 12:02:07 GMT\r\nserver: Contentful Images API\r\naccess-control-allow-origin: *\r\ndate: Sat, 20 Jun 2026 04:26:47 GMT\r\ncache-control: max-age=31536000\r\netag: \"439579bbc509298c815f648637b8b264\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 3346055bb53a57ebf02828b88e1ee87c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: n3_SR7Y_txfT_rgqDCWyygGVlxOGuGYLafVsytk3IWDlncDZIi0Dlg==\r\nage: 46880\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":9388,"size_decoded":9922,"mime_type":"image/png","magic":"PNG image data, 517 x 301, 8-bit/color RGB, non-interlaced","md5":"439579bbc509298c815f648637b8b264","sha1":"ff7e7789395ddc8f7967417ce1bd83f96c18eabc","sha256":"630a240d00ecae8a07c8b4bb78cc074531d15f5bef60864effb0c2f80369bcb0","sha512":"bc8711c5358b0b584faca1415550d9c305837e4ba991d4a7c21be8d5b151a8f2588a40ceaac06cee51f4139d8ec53f54d750e9be3c117b964ea4f52bc5bc1852","ssdeep":"192:sT1n6i4IzByQKsPgzsyDcegf+sF0syy0fDniiBzLLLL8:s1nuIzBLhoFsusyy0rniihLLLL8","tlshash":"24125bc7d5dc7410dae01e90149f568fd9388ede563faab008e8d188aa7a9fdfd510e0","first_seen":"2026-03-28T02:59:34.643293Z","last_seen":"2026-06-20T17:28:48.097053Z","times_seen":3,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/shared/mwa/assets/v2/fonts/tuitypelight-regular.subset.woff2","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.253Z","timestamp":1781976486253,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /shared/mwa/assets/v2/fonts/tuitypelight-regular.subset.woff2 HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: binary/octet-stream\r\ncontent-length: 15391\r\nx-amzn-requestid: d7a83545-c624-459f-91de-35efb945c7f7\r\ncontent-encoding: gzip\r\nx-amzn-remapped-content-length: 15368\r\nx-amz-apigw-id: fOyvREJrFiAFvIA=\r\ntimestamp: Fri, 19 Jun 2026 23:05:19 GMT\r\nx-amzn-trace-id: Root=1-6a35cb2e-4eca5928037f85af132cab81\r\ncache-control: public, max-age=538632\r\nexpires: Fri, 26 Jun 2026 23:05:18 GMT\r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver: TUI Web\r\nvary: Accept-Encoding,Origin\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15368,"size_decoded":16034,"mime_type":"binary/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 15368, version 2.6619","md5":"1389b47fcf4f656f51e5318b718153cc","sha1":"762bcb2a4cdf56d8e1776eb364430d276a47a9fd","sha256":"3d0815ef1f743303d39876629c254bda311f209160939735b25b9a338e4c1ab4","sha512":"d1863789cc119cf331cf02ed9e8e0fdbef4db5906c09efc8fa04d45de2701c94618b442ed3ffed9079b1b0ba203f5c581244e0a7feee3a8e49b2c00e5a5c9333","ssdeep":"384:UO9kJW99YV7xrarwpzgrsnTeXOoywzSuseD576wm8VZhtF1T6YZ5:Uw996arwFgrsnTeX2wzSsDldDB96YZ5","tlshash":"5462d10e49bcf125d3cf2db3194b16a7dc4cfb969ce3af6fe81c51441c4a6852a6b045","first_seen":"2025-06-28T16:10:42.66676Z","last_seen":"2026-06-20T17:28:47.947594Z","times_seen":30,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/shared/mwa/assets/v2/icons/tui-light/oncoming-taxi.svg","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.999Z","timestamp":1781976486999,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /shared/mwa/assets/v2/icons/tui-light/oncoming-taxi.svg HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mwa.tui.com/browse/mwa/workflow-ssg-prod/workflow-pages-home/assets/workflow-pages-home_26.25.1/home/index.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\nx-amzn-requestid: 1df61f6b-60c8-41e7-aba9-75474ef1fc00\r\nx-amzn-remapped-content-length: 392\r\nx-amz-apigw-id: fOywBHxPliAFuSw=\r\ntimestamp: Fri, 19 Jun 2026 23:05:23 GMT\r\nx-amzn-trace-id: Root=1-6a35cb32-574bef1e07190b036226c319\r\ncontent-encoding: gzip\r\ncontent-length: 277\r\ncache-control: public, max-age=538635\r\nexpires: Fri, 26 Jun 2026 23:05:22 GMT\r\ndate: Sat, 20 Jun 2026 17:28:07 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver: TUI Web\r\nvary: Accept-Encoding,Origin\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":392,"size_decoded":910,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3f4ebdfec9bbbe777794969d4e8ccc53","sha1":"ff0f57b10634928b7d1ca120306f8686a03c7b2a","sha256":"e6900db3b8ffb164885fb2feb9cdd75cbad674c77e30fa045b69e9856cd19feb","sha512":"6354a8f14325ba5fb7b6bb2a3e17426f893fdbde4c0deaeb9209eeef5a794f61ba5a6845cbb206616c22e4e46102fbb347a8168f2a04eb1c526b8c49e25f6bff","ssdeep":"","tlshash":"89e06811eb4c4c3ca51a46f0db2c7b30252e12b2648c1964a0bd22b0a20e70eec77ae4","first_seen":"2026-03-29T05:54:31.326573Z","last_seen":"2026-06-20T17:28:47.937893Z","times_seen":3,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/shared/mwa/assets/v2/icons/tui/aircraft-up.svg","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:07.246Z","timestamp":1781976487246,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /shared/mwa/assets/v2/icons/tui/aircraft-up.svg HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\nx-amzn-requestid: 156defd4-214c-45e5-adf1-f429db162321\r\nx-amzn-remapped-content-length: 411\r\nx-amz-apigw-id: fOyw1EsbliAFaoA=\r\ntimestamp: Fri, 19 Jun 2026 23:05:29 GMT\r\nx-amzn-trace-id: Root=1-6a35cb38-29eb1a2c7421ce147ff85ab7\r\ncontent-encoding: gzip\r\ncontent-length: 288\r\ncache-control: public, max-age=538641\r\nexpires: Fri, 26 Jun 2026 23:05:28 GMT\r\ndate: Sat, 20 Jun 2026 17:28:07 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver: TUI Web\r\nvary: Accept-Encoding,Origin\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":411,"size_decoded":921,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0acf0dd3d18ab52b6542e6375442faef","sha1":"444012f3e5e52ca50f50222aed6b735e3c6fc8f5","sha256":"84cd564bf9c2e664eeb0ca424b0996af8ba17527b7baa49e6d0597a71d41518a","sha512":"3ae44f0158d959bdfa8e0fa63b54c39296c24fb26a915936a1c688ff0bed83fe9e0fe0e996c20e482b664360d7844092dab2deb67841d3fbb068652a87516840","ssdeep":"","tlshash":"49e0ab9d13146f3c64564e21f7b03271a10aa1a4e708aab582b11b30c386c057c178f2","first_seen":"2026-03-29T05:54:31.403962Z","last_seen":"2026-06-20T17:28:48.098637Z","times_seen":5,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat-loader.smartagent.app/loader/main.js","fqdn":"chat-loader.smartagent.app","domain":"smartagent.app","tld":"app"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:09.186Z","timestamp":1781976489186,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /loader/main.js HTTP/1.1\r\nHost: chat-loader.smartagent.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T20:29:48.587722Z","times_seen":16589263,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.ctfassets.net/wft38qt3w1fi/19TTZwkm720lZ3u3Mrd2MI/6f7c4a2d96635605e1cb3c4403100694/mastercard-card.svg","fqdn":"images.ctfassets.net","domain":"ctfassets.net","tld":"net"},"ip":{"addr":"108.157.229.8","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:05.328Z","timestamp":1781976485328,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.ctfassets.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sat, 18 Oct 2025 00:00:00 GMT","end":"Sun, 15 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:39:C1:37:7A:6B:60:8A:D5:73:9E:D7:C4:F9:3A:11:9B:BD:94:2B","sha256":"AC:EA:37:10:54:C2:91:B5:04:B8:B4:CA:CD:35:48:4D:D0:92:78:F6:E2:8B:D9:57:78:20:D6:74:FE:14:16:A9"}}},"request":{"raw":"GET /wft38qt3w1fi/19TTZwkm720lZ3u3Mrd2MI/6f7c4a2d96635605e1cb3c4403100694/mastercard-card.svg HTTP/1.1\r\nHost: images.ctfassets.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 06 Jul 2023 06:54:01 GMT\r\nserver: Contentful Images API\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ndate: Sat, 20 Jun 2026 02:09:32 GMT\r\ncache-control: max-age=31536000\r\netag: W/\"d947610845e02e2e78072298d2315f9c\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 3346055bb53a57ebf02828b88e1ee87c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: sdpYz1XMYgp7Au04MqP-_oeWy5IS90EqtQc8I-3_9tleK91skV3m2Q==\r\nage: 55356\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1535,"size_decoded":1246,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d947610845e02e2e78072298d2315f9c","sha1":"6ecb73b1b198c9b708a2b834aca1217f85b933f6","sha256":"6f23747c8d69991b3b7fd597c62435d329c015dd648140ad61d472e5232b3ea8","sha512":"3ce02aa775880df1ea834a533ce04cac3ef3f45c2b03f779698ca17fcfc0b52609c7b2ca6844eaa71e2fe65d2ca11c6d2550a72d691ab247deb6e0e402c2bc67","ssdeep":"","tlshash":"87312092522885bc4d9412798f6d1c8d380b609673adcfa8e8407810662a1fb98cb8fb","first_seen":"2025-09-28T22:43:58.464725Z","last_seen":"2026-06-20T17:28:48.10007Z","times_seen":14,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":3,"connect":9,"send":0,"wait":13,"receive":0,"ssl":240},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tui.com/assets/v2/icons/tui-light/user-circled.svg","fqdn":"static.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"13.249.8.122","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:05.929Z","timestamp":1781976485929,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Jul 2025 00:00:00 GMT","end":"Wed, 29 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B1:29:28:04:46:85:C0:F0:4D:6F:D6:B9:CC:AA:FF:BE:E9:8C:8E:D4","sha256":"F6:AE:7B:84:78:6D:24:4A:0F:93:96:0C:8B:78:F7:AF:26:0C:5C:AB:8E:7A:05:74:F4:C4:6C:E3:1E:20:86:4A"}}},"request":{"raw":"GET /assets/v2/icons/tui-light/user-circled.svg HTTP/1.1\r\nHost: static.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\ncontent-length: 333\r\naccess-control-allow-origin: *\r\nlast-modified: Wed, 31 Jul 2024 14:37:21 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\naccess-control-expose-headers: Date\r\nvia: 1.1 d2c570942164f5ee69dab53f43b0f1d2.cloudfront.net (CloudFront), 1.1 118086882d9f17e10877e0653a055586.cloudfront.net (CloudFront)\r\ndate: Sat, 20 Jun 2026 16:56:25 GMT\r\ncache-control: max-age=7200\r\netag: \"2126e815d378a3ca3893254d17113224\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: FRA60-P9, ARN53-P3\r\nx-amz-cf-id: k8nseGFczcpKZbjijwA93euLYtxdH8IbN_AZpXbHODOv4iiGP9MBWA==\r\nage: 2097\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":333,"size_decoded":1025,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2126e815d378a3ca3893254d17113224","sha1":"4f66f3f05c747896768ab46aa08d34f3b76aaa99","sha256":"eff7a36873bf520d0e27d7beaf51a25298c94597d006636fc0b44fdb74341a5b","sha512":"98a4dabfa6a0f0f198aa6fbbe355b0edae6e01443805fe5e48ed1e66ec471217b2cca76b5094b87a0f3240261d0b9b3019f9f63430efcd373f746c09d4348465","ssdeep":"","tlshash":"7de02619030c9c18752b4130db693333a02a20a2960c1aadb1b55634b20065a38abae8","first_seen":"2025-06-29T08:41:34.853762Z","last_seen":"2026-06-20T17:28:48.101206Z","times_seen":17,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mwa.tui.com/shared/mwa/assets/v2/icons/tui-light/chevron.svg","fqdn":"mwa.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.146","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.048Z","timestamp":1781976486048,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mwa.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:4B:1C:D2:38:3B:90:13:A3:83:58:07:2D:F5:FB:54:1D:05:EE:DD","sha256":"3A:24:CD:3F:50:B2:4D:F1:E2:F9:46:64:04:8C:3C:3A:4D:47:9C:28:FA:92:8C:23:C8:46:8C:2C:71:0B:34:E8"}}},"request":{"raw":"GET /shared/mwa/assets/v2/icons/tui-light/chevron.svg HTTP/1.1\r\nHost: mwa.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mwa.tui.com/browse/mwa/workflow-ssg-prod/workflow-pages-home/assets/workflow-pages-home_26.25.1/home/index.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\nx-amzn-requestid: 99be62a4-4461-48dd-8b70-1715cca7c01d\r\nx-amzn-remapped-content-length: 197\r\nx-amz-apigw-id: fOyvaFT1liAFemw=\r\ntimestamp: Fri, 19 Jun 2026 23:05:20 GMT\r\nx-amzn-trace-id: Root=1-6a35cb2f-6298f5da4d94203a6f4a1970\r\ncontent-encoding: gzip\r\ncontent-length: 161\r\ncache-control: public, max-age=538633\r\nexpires: Fri, 26 Jun 2026 23:05:19 GMT\r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver: TUI Web\r\nvary: Accept-Encoding,Origin\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":197,"size_decoded":794,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f72ac869a4a090af1b4fef00ea7a93b8","sha1":"3894f10545763a3eb3ae82f5f68d08264f2e17a4","sha256":"77d376b446a04a4ba792735d5bfc0e48fead7a19649cd1c3526635db8e41af4c","sha512":"11b5c55a84ad69a89e6a3f97487553d0a33325e0379406aeb2c5140efa039699b8a8af5c4267a9b6de65c41925c4ffc827d0e8bc28768f66927f0ddcc168b399","ssdeep":"","tlshash":"afd0124e925c0d3df6368620e7743f7150692052694925ad84b215305299e4db43b9f4","first_seen":"2025-10-20T09:22:00.737943Z","last_seen":"2026-06-20T17:28:48.102122Z","times_seen":10,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tui.com/assets/v2/icons/bullet/people.svg","fqdn":"static.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"13.249.8.122","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.056Z","timestamp":1781976486056,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Jul 2025 00:00:00 GMT","end":"Wed, 29 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B1:29:28:04:46:85:C0:F0:4D:6F:D6:B9:CC:AA:FF:BE:E9:8C:8E:D4","sha256":"F6:AE:7B:84:78:6D:24:4A:0F:93:96:0C:8B:78:F7:AF:26:0C:5C:AB:8E:7A:05:74:F4:C4:6C:E3:1E:20:86:4A"}}},"request":{"raw":"GET /assets/v2/icons/bullet/people.svg HTTP/1.1\r\nHost: static.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\ncontent-length: 805\r\naccess-control-allow-origin: *\r\nlast-modified: Wed, 31 Jul 2024 14:37:19 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\naccess-control-expose-headers: Date\r\nvia: 1.1 5f82872daec754c74bbd4ef1bc7f7314.cloudfront.net (CloudFront), 1.1 118086882d9f17e10877e0653a055586.cloudfront.net (CloudFront)\r\ndate: Sat, 20 Jun 2026 15:34:34 GMT\r\ncache-control: max-age=7200\r\netag: \"55c6d48ad5c223f6b3ade5c048f20cca\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: FRA60-P9, ARN53-P3\r\nx-amz-cf-id: Iyl6WNmoDEd39R77kSoxjEgcZAWZo1GYxrwY4e9oqOcXoSKsDOBCwQ==\r\nage: 6859\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":805,"size_decoded":1497,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"55c6d48ad5c223f6b3ade5c048f20cca","sha1":"c4dcf6134ce6b4211fd037e16f635f50d64eb363","sha256":"d8723aee3eb6dfd8ef320059d508fd7463b56888dc524fec0fccf8ec7480f325","sha512":"2fed31815b0d0d803031c04f521047552bf2e10635b1901a7ae2e090a95be6264dbbc3e77ae4a9f2a34de7f9f1dba93f9411ce136c5f9f75509ebd0be3456e99","ssdeep":"","tlshash":"5d01416a4b384c5c3657d838cf4b3530472fa2b476040418f9bf9a7410cad6fe507a20","first_seen":"2025-09-28T22:43:58.459463Z","last_seen":"2026-06-20T17:28:48.103961Z","times_seen":14,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.content.tuigroup.com/adamtui/2026_3/9_10/d28798db-1547-4d93-98bc-b40800a81b1a/deal-der-woche-illustration-palmen-sonnenschirmWebOriginalCompressed.jpg?i10c=img.resize(width:658);img.crop(width:658,height:370)","fqdn":"cdn.content.tuigroup.com","domain":"tuigroup.com","tld":"com"},"ip":{"addr":"95.101.10.105","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.186Z","timestamp":1781976486186,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.content.tuigroup.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 23 Feb 2026 00:00:00 GMT","end":"Mon, 22 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:A2:A9:E1:36:21:12:70:71:62:D8:9E:CC:C0:F9:EB:9C:0E:5A:B8","sha256":"B9:93:43:16:0C:4D:95:D2:95:92:C2:C7:38:98:8D:C1:23:69:E0:6E:91:8C:9E:98:6E:CB:44:F8:39:7E:96:14"}}},"request":{"raw":"GET /adamtui/2026_3/9_10/d28798db-1547-4d93-98bc-b40800a81b1a/deal-der-woche-illustration-palmen-sonnenschirmWebOriginalCompressed.jpg?i10c=img.resize(width:658);img.crop(width:658,height:370) HTTP/1.1\r\nHost: cdn.content.tuigroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\netag: \"fdb8af349afd779dacb93e38451493e1\"\r\nlast-modified: Mon, 09 Mar 2026 15:17:24 GMT\r\nserver: Akamai Image Manager\r\ncontent-length: 4904\r\ncontent-type: image/avif\r\ncache-control: private, no-transform, max-age=2592000\r\nexpires: Mon, 20 Jul 2026 17:28:06 GMT\r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\nalt-svc: h3=\":443\"; ma=93600\r\nquic-version: 0x00000001\r\nage: 2281358\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":4904,"size_decoded":5287,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"2c10aedc223c7a6b49f16557c288f5a7","sha1":"109cce96a43a1ac1d2b4fc51224f9be1b557591f","sha256":"16177930f19e501ccbef33b13ca5112c8b20dd99515de702e1d24610c587e191","sha512":"5339d08bed4d03d48fe0ae47b4b78a16467a21e3fd185f68f6d40eb315c63d613b8a7a9b7a021711836b939861e1b20a540f3a6351bb8cf44cf52c9afdf6bbe6","ssdeep":"96:rGP3KPlTBKNnhyLRQEfR4Np11u0hXZiu+WMpB6f6Vpk7:rGvYANAQBx1F0kSVpk7","tlshash":"f4a17e289e765707df1b43394851b23ed07582c16e633b87be5ba281708c2323ef496e","first_seen":"2026-06-20T17:28:48.106943Z","last_seen":"2026-06-20T17:28:48.106943Z","times_seen":1,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.ctfassets.net/wft38qt3w1fi/3fIasxwX185FvZJHEq9xKP/b20f9fd4b2fba086be838b0cec6e6afe/facebook.svg","fqdn":"images.ctfassets.net","domain":"ctfassets.net","tld":"net"},"ip":{"addr":"108.157.229.8","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:05.360Z","timestamp":1781976485360,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.ctfassets.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sat, 18 Oct 2025 00:00:00 GMT","end":"Sun, 15 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:39:C1:37:7A:6B:60:8A:D5:73:9E:D7:C4:F9:3A:11:9B:BD:94:2B","sha256":"AC:EA:37:10:54:C2:91:B5:04:B8:B4:CA:CD:35:48:4D:D0:92:78:F6:E2:8B:D9:57:78:20:D6:74:FE:14:16:A9"}}},"request":{"raw":"GET /wft38qt3w1fi/3fIasxwX185FvZJHEq9xKP/b20f9fd4b2fba086be838b0cec6e6afe/facebook.svg HTTP/1.1\r\nHost: images.ctfassets.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\ncontent-length: 693\r\nlast-modified: Thu, 06 Jul 2023 07:24:36 GMT\r\nserver: Contentful Images API\r\naccess-control-allow-origin: *\r\ndate: Sat, 20 Jun 2026 02:09:33 GMT\r\ncache-control: max-age=31536000\r\netag: \"2a809de8682c53b03eb171889e5c4437\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 3346055bb53a57ebf02828b88e1ee87c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: STFYwHOs01cFCLO5qujIr5unbbyUdTErhWWceR4QfTrJ7dx0vol0Fg==\r\nage: 56591\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":693,"size_decoded":1230,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2a809de8682c53b03eb171889e5c4437","sha1":"3363c7000443d1855289dffcb0d072f05a78add3","sha256":"47478c5542b3e4df3670cff62d39da58d2f420d312ad2b561c58a8929f09bb67","sha512":"27edf0511f8300ade2e4336825d98dc2dd03ecbb7191080c676f87a5e75d65b9fefff50401b3ffa5e9bf3851215acae7cadd2a9901dc11f1b41d84396e7d3aea","ssdeep":"","tlshash":"b60115eed75111f8180cc5a1ff1c57b23135d04c61694bf9a95d96313a4364bdc019a0","first_seen":"2025-09-28T22:43:58.537898Z","last_seen":"2026-06-20T17:28:48.108415Z","times_seen":10,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tui.com/assets/v2/logos/tui/tui-smile.svg","fqdn":"static.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"13.249.8.122","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:05.374Z","timestamp":1781976485374,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Jul 2025 00:00:00 GMT","end":"Wed, 29 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B1:29:28:04:46:85:C0:F0:4D:6F:D6:B9:CC:AA:FF:BE:E9:8C:8E:D4","sha256":"F6:AE:7B:84:78:6D:24:4A:0F:93:96:0C:8B:78:F7:AF:26:0C:5C:AB:8E:7A:05:74:F4:C4:6C:E3:1E:20:86:4A"}}},"request":{"raw":"GET /assets/v2/logos/tui/tui-smile.svg HTTP/1.1\r\nHost: static.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nCookie: _vis_opt_exp_de24_combi=2; tui-coupon-wallet-enabled=true; _vis_opt_exp_P1973_combi=A; ecid=66966107634980792017217711389285007288; kndctr_41E27DA552A6473A0A490D4D_AdobeOrg_cluster=irl1; ak_bmsc=B67A7B246DD506FF96868E790DEC7588~000000000000000000000000000000~YAAQnQplX5EeC8yeAQAA/0oT5gDOPuTt/btrBxkEvsjZCv5iCpXn0dXIvmJwn7xqmMAnNIe0nO0FY39Vbl5SjyGMJEVaR4G9q1/l42ck/a/EQOacJ4igK59UwcumJR8QpmYiwT+CVeC/eOnPjNwPUHExTtozITtaYleYz3l9P1pItpV47INsmiRsPueOOgIFv4Y8oYKv34ceEccDtGFc3g6P6Mp+trxKpDZd6yc0HigFXe28HQYG7avaeFj+ik5m0MFEhAiuBqS6SvCL4vy3reXusZ6jxYvIWHdT6PwPnlhHpHp22JmnVdOr/CIQP/7fu/r0sRyFMPvi8dmL3H+VaoMn7Zyfl7wI1msqdFED3mRYtf6+m0f5fS2F1TrGMkXqOaIHTqRL2Aw2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\ncontent-length: 589\r\nlast-modified: Wed, 31 Jul 2024 14:37:25 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nvia: 1.1 5f82872daec754c74bbd4ef1bc7f7314.cloudfront.net (CloudFront), 1.1 118086882d9f17e10877e0653a055586.cloudfront.net (CloudFront)\r\ndate: Sat, 20 Jun 2026 16:51:51 GMT\r\ncache-control: max-age=7200\r\netag: \"2430bea43c4476656fe94752e6dc80c2\"\r\nvary: Accept-Encoding,Origin\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: FRA60-P9, ARN53-P3\r\nx-amz-cf-id: fiTPAfJgPRK40VtuWuzJhkIjqNEBJZBkas12ALeKPcHZokLxAxTIvg==\r\nage: 2342\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":589,"size_decoded":1219,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2430bea43c4476656fe94752e6dc80c2","sha1":"413e2721213a5826a3b3dd4c43b931f721301f19","sha256":"e75291ead37540911b0351d2172afb598e6db9dac4d669c9ab22ef97343dabe6","sha512":"17e755a7fe0ae0cdf5ff5ba449d3d1f7ff8bd2fc8e18691e33572d020dd96407d8fa8ace882967094577fee4c44a43f42baa279b298b23e82cada7a99cfd6327","ssdeep":"","tlshash":"14f04b8f0bae19b8268f8a1220a521cfced8a02272ec82ec02e360050212af200300a3","first_seen":"2025-09-28T22:43:58.409042Z","last_seen":"2026-06-20T17:28:48.109782Z","times_seen":14,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":11,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tui.com/assets/v2/icons/tui-light/search.svg","fqdn":"static.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"13.249.8.122","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:05.932Z","timestamp":1781976485932,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 30 Jul 2025 00:00:00 GMT","end":"Wed, 29 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B1:29:28:04:46:85:C0:F0:4D:6F:D6:B9:CC:AA:FF:BE:E9:8C:8E:D4","sha256":"F6:AE:7B:84:78:6D:24:4A:0F:93:96:0C:8B:78:F7:AF:26:0C:5C:AB:8E:7A:05:74:F4:C4:6C:E3:1E:20:86:4A"}}},"request":{"raw":"GET /assets/v2/icons/tui-light/search.svg HTTP/1.1\r\nHost: static.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tui.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\ncontent-length: 246\r\naccess-control-allow-origin: *\r\nlast-modified: Wed, 31 Jul 2024 14:37:21 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\naccess-control-expose-headers: Date\r\nvia: 1.1 de048058a16d8205bfbc06a8f2eefb34.cloudfront.net (CloudFront), 1.1 118086882d9f17e10877e0653a055586.cloudfront.net (CloudFront)\r\ndate: Sat, 20 Jun 2026 15:52:52 GMT\r\ncache-control: max-age=7200\r\netag: \"92da2e55cae618d78dbf671ff744654f\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: FRA60-P9, ARN53-P3\r\nx-amz-cf-id: ipSzd-GC1PxTjxtd8Xgb3T6EZK4nCqojlQ3nybGe1ychgawYcoNZzw==\r\nage: 5731\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":246,"size_decoded":938,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"92da2e55cae618d78dbf671ff744654f","sha1":"a17d5a23c778c9c584ae5a74d56ea7c4ad3cbe80","sha256":"262205001520252609e751bf639ed591a7fb26f2fe50329a87bc3afce7ff21b5","sha512":"ad9abff8f15d45fabb6727d739cc68ad3e4e9fb754bfbf277f1d0cde2151dfc0b588f351aac561c8034c8f82f280f953b13515050867d6c9e89d7dfdcdfccc34","ssdeep":"","tlshash":"8dd0a78ad6880c3b513686f49b63bb11503b61561796ff2ca5610731510bbb73826af9","first_seen":"2025-07-01T16:49:52.328965Z","last_seen":"2026-06-20T17:28:48.111077Z","times_seen":17,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloud.tui.com/cdn/travel-explorer/v1/index.js","fqdn":"cloud.tui.com","domain":"tui.com","tld":"com"},"ip":{"addr":"95.101.10.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tui.com/","date":"2026-06-20T17:28:06.200Z","timestamp":1781976486200,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloud.tui.com","organization":""},"issuer":{"commonName":"Thawte TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Tue, 16 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"7D:E5:28:0F:B6:E6:8A:A2:A4:FC:71:45:EB:89:19:59:DA:00:B6:3C","sha256":"31:B4:F1:6F:B9:43:CE:E2:95:A8:98:0A:8A:2C:53:14:B6:A1:C8:DB:55:EC:BD:2F:D1:88:82:44:35:BB:15:38"}}},"request":{"raw":"GET /cdn/travel-explorer/v1/index.js HTTP/1.1\r\nHost: cloud.tui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tui.com/\r\nCookie: _vis_opt_exp_de24_combi=2; tui-coupon-wallet-enabled=true; _vis_opt_exp_P1973_combi=A; ecid=66966107634980792017217711389285007288; kndctr_41E27DA552A6473A0A490D4D_AdobeOrg_cluster=irl1; ak_bmsc=B67A7B246DD506FF96868E790DEC7588~000000000000000000000000000000~YAAQnQplX5EeC8yeAQAA/0oT5gDOPuTt/btrBxkEvsjZCv5iCpXn0dXIvmJwn7xqmMAnNIe0nO0FY39Vbl5SjyGMJEVaR4G9q1/l42ck/a/EQOacJ4igK59UwcumJR8QpmYiwT+CVeC/eOnPjNwPUHExTtozITtaYleYz3l9P1pItpV47INsmiRsPueOOgIFv4Y8oYKv34ceEccDtGFc3g6P6Mp+trxKpDZd6yc0HigFXe28HQYG7avaeFj+ik5m0MFEhAiuBqS6SvCL4vy3reXusZ6jxYvIWHdT6PwPnlhHpHp22JmnVdOr/CIQP/7fu/r0sRyFMPvi8dmL3H+VaoMn7Zyfl7wI1msqdFED3mRYtf6+m0f5fS2F1TrGMkXqOaIHTqRL2Aw2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 26 Nov 2024 12:45:12 GMT\r\netag: \"3912ba87d70816d48256ca4d8ba52c58\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-amz-cf-pop: TXL50-P4\r\nx-amz-cf-id: UHjb1Jqjm2ErusIwmJcbJ2IeLkIqK2VzTlAGDRcsBdJdEjQY1zRk9A==\r\ncontent-encoding: gzip\r\ncontent-length: 5812\r\ncache-control: max-age=1\r\nexpires: Sat, 20 Jun 2026 17:28:07 GMT\r\ndate: Sat, 20 Jun 2026 17:28:06 GMT\r\nvary: Accept-Encoding\r\nage: 599\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":19307,"size_decoded":6353,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10882)","md5":"3912ba87d70816d48256ca4d8ba52c58","sha1":"f05d75f617802186919a998bda34fc306190f254","sha256":"59acbd9ad421c7eba2afe229b4f1980278b69cfd7f15360a29aa721d3c1a7b2c","sha512":"53b6b4cc99680e81aff3684bac1cea13eaab82b1b1ee63228213d47b0f8a969fb395e8c3b7b83b6db86fc607d974b946f2fabc2f215088335705f10ed9f98467","ssdeep":"384:ySDDZFDf2McHkznsnBzYz6zGNChKen5+Et8Ji8zA+FdjKVUacvnNuhkQJD:ySDDZFDf2McHkznsnBzYz6zGNChp5J8C","tlshash":"cd82d87132ad93791cb78052b955060d6414c81fe85ac499f73e2db32f9bf4602bab3e","first_seen":"2025-09-28T22:43:58.401423Z","last_seen":"2026-06-20T17:28:48.112308Z","times_seen":14,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}