{"report_id":"14a15c51-a59b-4688-8f84-e34c7a616e21","version":0,"status":"done","tags":[],"date":"2026-06-23T23:42:56Z","url":{"schema":"http","addr":"booking-jp.com","fqdn":"booking-jp.com","domain":"booking-jp.com","tld":"com"},"ip":{"addr":"121.127.232.46","port":0,"asn":152194,"as":"CTG Server Limited","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"booking-jp.com/#/","fqdn":"booking-jp.com","domain":"booking-jp.com","tld":"com"},"title":"booking-jp.com/#/","dom":{"size":39,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"booking-jp.com","fqdn":"booking-jp.com","domain":"booking-jp.com","tld":"com"},"ip":{"addr":"121.127.232.46","port":0,"asn":152194,"as":"CTG Server Limited","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-28T23:42:56Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"booking-jp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"booking-jp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"client.salesmartly.com","ip":{"addr":"108.156.60.16","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2021-07-22","domain_rank":491526,"first_seen":"2024-06-25T09:52:15Z","last_seen":"2026-06-21T00:44:04.402512Z","alert_count":0,"request_count":2,"received_data":84970,"sent_data":1027,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"api.salesmartly.com","ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-07-22","domain_rank":387428,"first_seen":"2022-11-29T17:40:50Z","last_seen":"2026-06-17T09:01:23.836258Z","alert_count":0,"request_count":2,"received_data":4369,"sent_data":1380,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.dcloud.net.cn","ip":{"addr":"124.222.174.117","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"domain_registered":"2013-07-17","domain_rank":296858,"first_seen":"2018-09-15T09:18:08Z","last_seen":"2026-06-19T06:07:40.024347Z","alert_count":0,"request_count":1,"received_data":577,"sent_data":549,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"plugin-code.salesmartly.com","ip":{"addr":"3.164.240.27","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2021-07-22","domain_rank":530835,"first_seen":"2024-12-12T08:03:04.74606Z","last_seen":"2026-06-17T16:00:34.40137Z","alert_count":0,"request_count":10,"received_data":958279,"sent_data":4824,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"booking-jp.com","ip":{"addr":"121.127.232.46","port":443,"asn":152194,"as":"CTG Server Limited","country":"Hong Kong","country_code":"HK"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":44,"request_count":22,"received_data":1944457,"sent_data":11187,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"hotel.cdn.ruanyiit.com","ip":{"addr":"154.41.93.241","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"domain_registered":"2018-09-05","domain_rank":0,"first_seen":"2026-06-23T23:42:59.954287Z","last_seen":"2026-06-23T23:42:59.954287Z","alert_count":0,"request_count":10,"received_data":948554,"sent_data":5770,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"msg.salesmartly.com","ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-07-22","domain_rank":360322,"first_seen":"2022-11-29T17:40:54Z","last_seen":"2026-06-20T05:27:30.675316Z","alert_count":0,"request_count":3,"received_data":2060,"sent_data":2479,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.mescroll.com","ip":{"addr":"185.199.108.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2017-06-01","domain_rank":2976239,"first_seen":"2019-05-22T11:41:52Z","last_seen":"2026-06-07T16:21:55.173992Z","alert_count":0,"request_count":1,"received_data":984,"sent_data":551,"comment":"","tags":null,"fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"srz.salesmartly.com","ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-07-22","domain_rank":378797,"first_seen":"2024-02-20T03:50:45Z","last_seen":"2026-06-20T07:56:04.242455Z","alert_count":0,"request_count":3,"received_data":2045,"sent_data":2163,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget/code/js/vendor1_b8775aab.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.27","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4dd10bf9e3a55d04fb02d076f8d888fd","sha1":"73fe2ade639561e0fbee753a10ab3a8f64457ba6","sha256":"9b5cc937de300ae7ed821b3c25405086cd9fc0c25be5f6afc2213b06d1981408","sha512":"768877b7f6860408251dfc60ac57ed4499ac9ff259f506f98020a848b1f8dd67378758074406603c95d98bfa621d4d451d9a941f9932c2bc9ecfe1eb9e69f9ba","ssdeep":"3072:hUj1XOH0ipFe9OY0ceCK7KtWO77yzk83UzlgE6CjnWO:2kHbDCK7gf7n85NO","tlshash":"b22408c8b295b06143a770b4407f550bf13ab915680ec5a4f226e8da7cbc98e907bf7d","size":225000,"data":"","first_seen":"2025-05-10T22:57:10.916725Z","last_seen":"2026-07-18T04:13:55.337375Z","times_seen":2571,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget/code/js/plugin.6e022713.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.27","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2fcd72cb563bba01f81b49211a8be717","sha1":"21fcad565344af8ffffa528963e0671e5476f7d9","sha256":"91cb86436e3a04d3c6779741304406634506d3b0e79a706b2fbc41c915ba3ae0","sha512":"1bc0665437cfd75582dc11039e4d6eee5a906ded63a620cace330f1a9ad2de537a96de2a8e34e1c381ac034002d9533d7bb2c0a5440136fc52ebca9ff7a6d836","ssdeep":"6144:G0bg30bPKQQDLVQbO0NzhDetWx9a+gcmLTLrqGKAbCPfvaHcqiQUd+wa8Ar4gWDE:5bPKQQDLVQb5NzhDbMLrqGKAbCPaHcqn","tlshash":"cd843a49f5c9f86b07b361b1602f6009b3ba1b48e409d8e0fe75d6e91ab4d496323f1d","size":380050,"data":"","first_seen":"2026-05-06T06:21:51.054543Z","last_seen":"2026-07-18T04:13:55.322161Z","times_seen":415,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking-jp.com/","fqdn":"booking-jp.com","domain":"booking-jp.com","tld":"com"},"ip":{"addr":"121.127.232.46","port":443,"asn":152194,"as":"CTG Server Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"93368157fb131b56a45d6f60f8b40342","sha1":"ea2a25edb7b00c3e0a06650f02fded5bd87dfa20","sha256":"c48d4859bc082aa591168f7d7230bef438ecc2b3074e707c83864e11ec1a891f","sha512":"366c90d022f7fd6718d76460de51a154cf6cf8bf8e3aefa2e0e736cbba24ec53506485331abd3c3c2a7e6ae00c9a3b957a9aa675ecdd389afca7863ad8365908","ssdeep":"","tlshash":"c8e068c260a6294c02208016304ac1031bb608729ec149613c4c67a58fb9f4bc46e859","size":352,"data":"","first_seen":"2023-03-07T01:10:06Z","last_seen":"2026-07-18T09:53:51.232611Z","times_seen":4453,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget/code/install.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.27","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9988204b465c5f291cde56c7367b71c","sha1":"bbfd28ec48085b50f7bf2d29ce360dedc0b67065","sha256":"e4348a3c9d1a33865ad565906a0e10b77b8acc216cf0b01c9c48c66a562dd1fc","sha512":"62c249d781fcf4b691433075224a2cc8cfce86837afc7f02850689ecab62569b6aca9971cf88866e8845571494b6ab5ee183867c3e00981418d094b078a479ae","ssdeep":"","tlshash":"6f31369836e5f8a153d76568013f8045f3ba08651879f4e0d3a9ccb9bc34c8d4073f5a","size":1578,"data":"","first_seen":"2026-05-06T06:21:51.036806Z","last_seen":"2026-07-18T04:13:55.301187Z","times_seen":490,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking-jp.com/static/js/pages-hotellist-index~pages-index~pages-my-index~pages-orderlist-index.e0a60ad2.js","fqdn":"booking-jp.com","domain":"booking-jp.com","tld":"com"},"ip":{"addr":"121.127.232.46","port":443,"asn":152194,"as":"CTG Server Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"82d5b38fbe0144277a00a5b3934466e5","sha1":"f2796676abbe0a22554efd10108848de92fae61d","sha256":"afa41361c5685541af749bbadad6ab52db5d2ecd1d99b14561b303f76d6035ae","sha512":"557ecb4feb2bd9f44394f6b89942cb1bd70b59f0ff0ab0b05976a2b3eb3f60f96a05f614f8f969ea49c46151033e41a061e8ae796e2a8edc0bbb13bb478b3ce4","ssdeep":"768:kORs5pRfhVoW9HTH3y1MIMOfc+QtxY/TcvZvYIwvOB1qKXQFHKlEmldDtIw7+:DR+p7mFQt/h3AwK","tlshash":"6c03d81db845345a06dfa270f12f0b0d823f2e5e6101d0c8ba74fdfb99646be9156f68","size":38376,"data":"","first_seen":"2026-06-23T23:43:14.494511Z","last_seen":"2026-06-23T23:44:30.666607Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking-jp.com/static/js/pages-common-textview-privacy~pages-hotellist-index~pages-index~pages-login-register.1366551f.js","fqdn":"booking-jp.com","domain":"booking-jp.com","tld":"com"},"ip":{"addr":"121.127.232.46","port":443,"asn":152194,"as":"CTG Server Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"e466f8a83053a5011090c5d6d4ad70eb","sha1":"52f88ca87f5e52a06876ee9c461925cd0a7734ed","sha256":"3b4b1aa48c2e09e6e5d95fa0f39e73d489f5273b2499fb16f7ce13c6505fded2","sha512":"99f81e3bd687fe01851827cda6164b7404d64c436aa33f84272e81923f0c5fad4d308ec30cf7447d530bf194ac4a20c633bab95299c7f3cfee18ae638cca128a","ssdeep":"192:Hw85HPS12GeMXIakt5kjBOmVd9ITEYx2wqxc+gbkx/4L:Hh561oMYaktQBOmVd9IThxxqxAvL","tlshash":"24825bc9ec8c06e43bb7e38fd65b791b7a887f95c0e128249d63428e09e973155e472c","size":19061,"data":"","first_seen":"2026-06-23T23:43:14.502623Z","last_seen":"2026-06-23T23:44:30.657376Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking-jp.com/static/js/pages-index.d868273b.js","fqdn":"booking-jp.com","domain":"booking-jp.com","tld":"com"},"ip":{"addr":"121.127.232.46","port":443,"asn":152194,"as":"CTG Server Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"83e1f3e11f301345f11a82d8892bbc3a","sha1":"c5107c2da1151de1d3cc922044d858d9196fcc12","sha256":"f3be1331c581b82aab0f95d7af19a65e3c06794a2d55e8409c7672a7350d7905","sha512":"0bb5fedf27b38c30605f345f25113bb177e9e8bd7d10fd7f07aa8653b4e3936c61967099cee348e91e404b860ae1d2adc3721d773e2521b94e88b88e38b980c2","ssdeep":"3072:Rpk/NPx+br3mZicwnT2g2lEiKCpDEoOk5:Rpk/NQmZicwnT2g2lEiKCpDEoOk5","tlshash":"2eb3e91d7489b8374ea35030101f174693360e7998967c0cbb7aa7c59ebd98e11afbf8","size":109580,"data":"","first_seen":"2026-06-23T23:43:14.511834Z","last_seen":"2026-06-23T23:44:30.672363Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget/code/js/chunk-vendors.6ef765fa.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.27","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8e788461ba915adcbfcfa9b10c35f265","sha1":"bc3841eff0c3841cfdef9a2f1e1b5f1d0dd6c26e","sha256":"69ced1151fb1b32d26c8b70739681828a1d99333c4a08114c98cd8af90b3f2ca","sha512":"b20ea5f22352ee329e6982d0fbd14fa2f4607a186b2d2973a99e43975164b2c6142b8ce87f7d5f54f47cb41bd6a33329ec3d09fafcb971de6e316ce5c0c8cfe0","ssdeep":"3072:gZcGj+j4Cm4m5BJ1IWqq/1cuC+4DdC58+skrMJz+8:gG27J1Wycu+4ikrMB","tlshash":"1424f7cdbb92f06843a335a4806f150bf17b6a18f40e81d4e6a6d5d1ac78a8e5137f3d","size":214670,"data":"","first_seen":"2025-12-10T08:58:23.267899Z","last_seen":"2026-07-18T04:13:55.348748Z","times_seen":1352,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/js/project_656442_677071_1773919079.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.27","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4cdaa2a659034e143217057180534e2","sha1":"3f56f70a92467aee3accfa75645e3c0ac6941ffa","sha256":"122226978a3bf8021b78728314fa5ee65bfff77b60a452e397d91e0e77d3b5ef","sha512":"ae7659d939dbdf130c095a6894c54f0f0562324b09d770b7c68167907b7af83743d138996df666824ec571c218034ec728533cb645794f3ae93b2301d96bd530","ssdeep":"","tlshash":"dc21c9472c67a4797ad5727b8b3f88ad3998a2433004cc10bc4dd4681f909e20a9eee4","size":1184,"data":"","first_seen":"2026-06-23T23:43:14.525661Z","last_seen":"2026-06-23T23:44:30.656211Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client.salesmartly.com/js/marked/v14.1.2/marked.min.js","fqdn":"client.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"108.156.60.16","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4726c8d370952011c5137ee8e13eb6bb","sha1":"96c7a41fdc5d4530bb46f1a629f86ecaf068de82","sha256":"eeaba2c06a990d4602b4142cce579f4cce16fba404e6cc82c5c2f7ccb1e7bd1f","sha512":"6d7c814f6fec623660d43ef29034ba789484e0314354f247bdb4407dd7d82abe88bacac2cfbc009929b7eafcfd1bcccca1bdb946faaef74bdfb77248ef5ca071","ssdeep":"768:aH13NvoICzvRDEeJX2QLGbdpB+xJhuLPbBc5jI0sJMF2/bOCbnEytnbBOmVzFoso:aHOXo5ECPbBc5MB2A/blnEMRoaM","tlshash":"67f2094832ae3a6987d439e66cf81060e27f8e68344c545cf664f5f37c2690a61ebf70","size":36489,"data":"","first_seen":"2024-09-13T03:55:13Z","last_seen":"2026-07-18T09:37:27.703702Z","times_seen":2677,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking-jp.com/static/js/chunk-vendors.5143560b.js","fqdn":"booking-jp.com","domain":"booking-jp.com","tld":"com"},"ip":{"addr":"121.127.232.46","port":443,"asn":152194,"as":"CTG Server Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb83d6603abbb164214a0e67641d77e4","sha1":"646aa72a649310f2916d60b66483fcd7d0ea34e3","sha256":"33e2c79e4f92b14bf18b5db55759aeabe457774dc62c4d32cbe647fbfad73b46","sha512":"87ae84b01fe2f4d14277d9cad8b0e52ec41f5b258d3fc52f26b2beed6a151896186b0021f38a6a6dc406d1e272dd17290baf94e06a9692f3204825cb52409660","ssdeep":"6144:6FpTCHYJDUSl6BUDOseiS3WzNoXIapNvtwTf3uXb/ffzvaNTK/bsvmRne+Qh8pvE:6vD/kBdN1wTfefjatmPeWv/zd5WHGABL","tlshash":"2a25188cf285b0b607e760b5403f220bb23b6969b40a94d4f675e4d1ad7894e6237f3d","size":1026714,"data":"","first_seen":"2026-06-23T23:43:14.527629Z","last_seen":"2026-06-23T23:44:30.671243Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking-jp.com/static/js/index.d47b4b61.js","fqdn":"booking-jp.com","domain":"booking-jp.com","tld":"com"},"ip":{"addr":"121.127.232.46","port":443,"asn":152194,"as":"CTG Server Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"dfd89b20a9ec36f3890e86d200ed6026","sha1":"c384441ecb15daf9ebe478adf437661b5c5ea300","sha256":"36623a29d140422b5fbb48ac904f9ad1e0219cc8941754e1309e2ef47e7700c6","sha512":"a5ac6203b4af2e947a8a848f971079b4f67f190a9906ab46bbac2220d3acd95eeb9dfe36f50a42fc24a9483fbae6c554b0dfd6d05c180169deedbc10b9a7e333","ssdeep":"6144:uG2kGt25CBQGXZmgcaqJDCf+rxzKNthX5b:KB5XZaJDXrxzgpb","tlshash":"81648faaeacd18dd3697d007b44b630531f0ae52c5cac415f7de90189bd7ecba293b24","size":335033,"data":"","first_seen":"2026-06-23T23:43:14.521528Z","last_seen":"2026-06-23T23:44:30.653132Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking-jp.com/static/js/pages-index~pages-login-index~pages-login-profile-completion~pages-login-register~pages-login-reset-~3764d391.76cea81c.js","fqdn":"booking-jp.com","domain":"booking-jp.com","tld":"com"},"ip":{"addr":"121.127.232.46","port":443,"asn":152194,"as":"CTG Server Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"f5e9e7d95e5f5fa66c4de92d61b370a5","sha1":"c57a9bc0e7a6082d0ffab4800feb23a596747462","sha256":"cfec0558b0a0929f7dc7ef07e5a3a1df45ec3f01f931c656e378409de289004e","sha512":"11bd85a2af39c81b55bde974654d402a24a7faf4ee20b483993e57c9e99083d27ba912aa363b81393d5b3b141c4b370d4a50e0e910a9b36581555003b915e9c7","ssdeep":"192:FwEx1sX3ATPRzqDUfaFsPj7cwS0uBvjDLm2G00Y:FjxeXw9zEUfaKPiv","tlshash":"ab12743db09cf5934ed3c934a0df514252216a4cc8956884e7b675a887bbb88133bf6f","size":9752,"data":"","first_seen":"2026-06-23T23:43:14.49277Z","last_seen":"2026-06-23T23:44:30.671767Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget/code/plugin-install.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.27","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"57b64e45a506003e2cdfe8ab5ab79af0","sha1":"3cbc00ba71e00abb435f74a43b07b47e7ed94828","sha256":"dd053d736f0affeb5b6e511470cd6eb8d940866089a2e23e29b60f26fa389ce8","sha512":"89f6959d8bcba3d4f0da62a42bd57e1467f75dcc7936774f9676dfde001cfddd7bc11d4b675255592fca91c2a72079ffe7e03cbfd6a538ebeba919da903787a6","ssdeep":"384:GPyg/NXbASoSALbGf4NwNiB0W9jyyxRyL1hKGadeBTKSwQU:2yg/ia4NQiGWwnLadeBTGl","tlshash":"e8921a4874297c7842ae5a3325fea214307f1b852931d0a0f26cdb796b78d875177ebc","size":20819,"data":"","first_seen":"2026-05-06T06:21:51.028594Z","last_seen":"2026-07-18T04:13:55.319466Z","times_seen":443,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget/code/js/chunk-common.923779f6.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.27","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7fa48373e689723ee51b2cb2c176d619","sha1":"fdea5e7eebe313c9898dacbfff19c6bf6530f319","sha256":"35bc14c3367afb14beb47478f52369784df0b2120b6729118116465b35ac586d","sha512":"94e6c42a0d414073fa618f633807ca8ea55d7e450efcdffc7beded1e3739b8124c5850d98946a991e5925f325c2a4cc21b7e85042a6a112f48a4053f7cd929e4","ssdeep":"384:kF9kWEuK2U72UecAvTbDPnPuTc2YejErqSqcDRVE10DTaR5HJrCiKMcJHI7jW:q9mZ72UecAvrPuSqSpEBIMoyW","tlshash":"dbc222ccf2d7f0650b9a38a481bf110ae23e7d99b44e9196d261e0c17c3455da273f9b","size":27007,"data":"","first_seen":"2026-05-06T06:21:51.04932Z","last_seen":"2026-07-18T04:13:55.318516Z","times_seen":440,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"userInfo","filename":"https://booking-jp.com/static/js/pages-index.d868273b.js","line_number":0,"column_number":0},{"level":"log","text":"searchFormmap[actor:server1.conn0.watcher14.process7//obj70 class:Object extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[kind:Object ownProperties:map[dateRange:map[configurable:true enumerable:true get:map[actor:server1.conn0.watcher14.process7//obj73 class:Function displayName:get extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:7513 line:28 url:https://booking-jp.com/static/js/chunk-vendors.5143560b.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] set:map[actor:server1.conn0.watcher14.process7//obj74 class:Function displayName:set extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:7639 line:28 url:https://booking-jp.com/static/js/chunk-vendors.5143560b.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object]] keyword:map[configurable:true enumerable:true get:map[actor:server1.conn0.watcher14.process7//obj71 class:Function displayName:get extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:7513 line:28 url:https://booking-jp.com/static/js/chunk-vendors.5143560b.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] set:map[actor:server1.conn0.watcher14.process7//obj72 class:Function displayName:set extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:7639 line:28 url:https://booking-jp.com/static/js/chunk-vendors.5143560b.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object]]] ownPropertiesLength:3] sealed:false type:object]","filename":"https://booking-jp.com/static/js/pages-index.d868273b.js","line_number":0,"column_number":0},{"level":"log","text":"请求参数map[actor:server1.conn0.watcher14.process7//obj75 class:Object extensible:true frozen:false isError:false ownPropertyLength:5 preview:map[kind:Object ownProperties:map[data:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj77 class:Object extensible:true frozen:false isError:false ownPropertyLength:5 sealed:false type:object] writable:true] headers:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj76 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 sealed:false type:object] writable:true] method:map[configurable:true enumerable:true value:post writable:true] timeout:map[configurable:true enumerable:true value:20000 writable:true] url:map[configurable:true enumerable:true value:/home writable:true]] ownPropertiesLength:5] sealed:false type:object]","filename":"https://booking-jp.com/static/js/index.d47b4b61.js","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj78 class:Object extensible:true frozen:false isError:false ownPropertyLength:24 preview:map[kind:Object ownProperties:map[_fallbackRoot:map[configurable:true enumerable:true value:true writable:true] _fallbackRootWithEmptyString:map[configurable:true enumerable:true value:true writable:true] _formatFallbackMessages:map[configurable:true enumerable:true value:false writable:true] _formatter:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj80 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 sealed:false type:object] writable:true] _missing:map[configurable:true enumerable:true value:map[type:null] writable:true] _modifiers:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj81 class:Object extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object] writable:true] _root:map[configurable:true enumerable:true value:map[type:null] writable:true] _silentTranslationWarn:map[configurable:true enumerable:true value:false writable:true] _sync:map[configurable:true enumerable:true value:true writable:true] _vm:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj79 class:Object extensible:true frozen:false isError:false ownPropertyLength:34 sealed:false type:object] writable:true]] ownPropertiesLength:24] sealed:false type:object]东西","filename":"https://booking-jp.com/static/js/index.d47b4b61.js","line_number":0,"column_number":0},{"level":"log","text":"userInfo","filename":"https://booking-jp.com/static/js/pages-index.d868273b.js","line_number":0,"column_number":0},{"level":"log","text":"searchFormmap[actor:server1.conn0.watcher14.process7//obj82 class:Object extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[kind:Object ownProperties:map[dateRange:map[configurable:true enumerable:true get:map[actor:server1.conn0.watcher14.process7//obj85 class:Function displayName:get extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:7513 line:28 url:https://booking-jp.com/static/js/chunk-vendors.5143560b.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] set:map[actor:server1.conn0.watcher14.process7//obj86 class:Function displayName:set extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:7639 line:28 url:https://booking-jp.com/static/js/chunk-vendors.5143560b.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object]] keyword:map[configurable:true enumerable:true get:map[actor:server1.conn0.watcher14.process7//obj83 class:Function displayName:get extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:7513 line:28 url:https://booking-jp.com/static/js/chunk-vendors.5143560b.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] set:map[actor:server1.conn0.watcher14.process7//obj84 class:Function displayName:set extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:7639 line:28 url:https://booking-jp.com/static/js/chunk-vendors.5143560b.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object]]] ownPropertiesLength:3] sealed:false type:object]","filename":"https://booking-jp.com/static/js/pages-index.d868273b.js","line_number":0,"column_number":0},{"level":"log","text":"请求参数map[actor:server1.conn0.watcher14.process7//obj87 class:Object extensible:true frozen:false isError:false ownPropertyLength:5 preview:map[kind:Object ownProperties:map[data:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj89 class:Object extensible:true frozen:false isError:false ownPropertyLength:5 sealed:false type:object] writable:true] headers:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj88 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 sealed:false type:object] writable:true] method:map[configurable:true enumerable:true value:post writable:true] timeout:map[configurable:true enumerable:true value:20000 writable:true] url:map[configurable:true enumerable:true value:/home writable:true]] ownPropertiesLength:5] sealed:false type:object]","filename":"https://booking-jp.com/static/js/index.d47b4b61.js","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj90 class:Object extensible:true frozen:false isError:false ownPropertyLength:24 preview:map[kind:Object ownProperties:map[_fallbackRoot:map[configurable:true enumerable:true value:true writable:true] _fallbackRootWithEmptyString:map[configurable:true enumerable:true value:true writable:true] _formatFallbackMessages:map[configurable:true enumerable:true value:false writable:true] _formatter:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj92 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 sealed:false type:object] writable:true] _missing:map[configurable:true enumerable:true value:map[type:null] writable:true] _modifiers:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj93 class:Object extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object] writable:true] _root:map[configurable:true enumerable:true value:map[type:null] writable:true] _silentTranslationWarn:map[configurable:true enumerable:true value:false writable:true] _sync:map[configurable:true enumerable:true value:true writable:true] _vm:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj91 class:Object extensible:true frozen:false isError:false ownPropertyLength:34 sealed:false type:object] writable:true]] ownPropertiesLength:24] sealed:false type:object]东西","filename":"https://booking-jp.com/static/js/index.d47b4b61.js","line_number":0,"column_number":0},{"level":"log","text":"item.hotelInfomap[actor:server1.conn0.watcher14.process7//obj105 class:Object extensible:true frozen:false isError:false ownPropertyLength:17 preview:map[kind:Object ownProperties:map[address:map[configurable:true enumerable:true value:ศรีภูมิ 3ข ซอย 2 Tambon Si Phum, Amphoe Mueang Chiang Mai, Chang Wat Chiang Mai 50200 タイ writable:true] city:map[configurable:true enumerable:true value:N/A writable:true] country:map[configurable:true enumerable:true value:Thailand writable:true] image:map[configurable:true enumerable:true value:http://hotel.cdn.ruanyiit.com/hotel/cab729fdc2b71d0f033cd24385420f7b.jpg writable:true] name:map[configurable:true enumerable:true value:Pran@Kumuang Boutique House writable:true] placeId:map[configurable:true enumerable:true value:ChIJqzMUkn472jAR0CLRsddPHLM writable:true] priceLevel:map[configurable:true enumerable:true value:$ 240 writable:true] rating:map[configurable:true enumerable:true value:4.9 writable:true] reviewsCount:map[configurable:true enumerable:true value:107 writable:true] summary:map[configurable:true enumerable:true value:No description available writable:true]] ownPropertiesLength:17] sealed:false type:object]","filename":"https://booking-jp.com/static/js/pages-index.d868273b.js","line_number":0,"column_number":0},{"level":"log","text":"item.hotelInfomap[actor:server1.conn0.watcher14.process7//obj106 class:Object extensible:true frozen:false isError:false ownPropertyLength:17 preview:map[kind:Object ownProperties:map[address:map[configurable:true enumerable:true value:69 Thanon Yen Akat, Khwaeng Chong Nonsi, Khet Yan Nawa, Krung Thep Maha Nakhon 10120 タイ writable:true] city:map[configurable:true enumerable:true value:N/A writable:true] country:map[configurable:true enumerable:true value:Thailand writable:true] image:map[configurable:true enumerable:true value:http://hotel.cdn.ruanyiit.com/hotel/b4eb5f3b1086244a2a0c9d055ce626cf.jpg writable:true] name:map[configurable:true enumerable:true value:Shama Yen-Akat Bangkok writable:true] placeId:map[configurable:true enumerable:true value:ChIJvcECSBqf4jARgoHWb5x0r2Q writable:true] priceLevel:map[configurable:true enumerable:true value:$ 261 writable:true] rating:map[configurable:true enumerable:true value:4.8 writable:true] reviewsCount:map[configurable:true enumerable:true value:1701 writable:true] summary:map[configurable:true enumerable:true value:Streamlined quarters, some with kitchenettes, in a modern hotel featuring dining \u0026 an outdoor pool. writable:true]] ownPropertiesLength:17] sealed:false type:object]","filename":"https://booking-jp.com/static/js/pages-index.d868273b.js","line_number":0,"column_number":0},{"level":"log","text":"item.hotelInfomap[actor:server1.conn0.watcher14.process7//obj107 class:Object extensible:true frozen:false isError:false ownPropertyLength:17 preview:map[kind:Object ownProperties:map[address:map[configurable:true enumerable:true value:13 1 Thanon Chiang Mai-Lamphun, Tambon Chang Moi, Amphoe Mueang Chiang Mai, Chang Wat Chiang Mai 50000 タイ writable:true] city:map[configurable:true enumerable:true value:N/A writable:true] country:map[configurable:true enumerable:true value:Thailand writable:true] image:map[configurable:true enumerable:true value:http://hotel.cdn.ruanyiit.com/hotel/6f91536076aab16172dad0851517189b.jpg writable:true] name:map[configurable:true enumerable:true value:Rimping Village Chiang Mai writable:true] placeId:map[configurable:true enumerable:true value:ChIJDVp8Wqk62jARm2wj9i-HTgQ writable:true] priceLevel:map[configurable:true enumerable:true value:$ 225 writable:true] rating:map[configurable:true enumerable:true value:4.8 writable:true] reviewsCount:map[configurable:true enumerable:true value:507 writable:true] summary:map[configurable:true enumerable:true value:Straightforward rooms \u0026 suites in an informal hotel with an outdoor pool \u0026 a restaurant. writable:true]] ownPropertiesLength:17] sealed:false type:object]","filename":"https://booking-jp.com/static/js/pages-index.d868273b.js","line_number":0,"column_number":0},{"level":"log","text":"item.hotelInfomap[actor:server1.conn0.watcher14.process7//obj108 class:Object extensible:true frozen:false isError:false ownPropertyLength:17 preview:map[kind:Object ownProperties:map[address:map[configurable:true enumerable:true value:06 Đ. Nguyễn Chánh, Lộc Thọ, Nha Trang, Khánh Hòa 57000 ベトナム writable:true] city:map[configurable:true enumerable:true value:Nha Trang writable:true] country:map[configurable:true enumerable:true value:Vietnam writable:true] image:map[configurable:true enumerable:true value:http://hotel.cdn.ruanyiit.com/hotel/09ec0b426068cb5c57795e7501590631.jpg writable:true] name:map[configurable:true enumerable:true value:Four Points by Sheraton Nha Trang writable:true] placeId:map[configurable:true enumerable:true value:ChIJ3VPQWldncDERkjfn6pEiF8w writable:true] priceLevel:map[configurable:true enumerable:true value:$ 250 writable:true] rating:map[configurable:true enumerable:true value:4.8 writable:true] reviewsCount:map[configurable:true enumerable:true value:49 writable:true] summary:map[configurable:true enumerable:true value:No description available writable:true]] ownPropertiesLength:17] sealed:false type:object]","filename":"https://booking-jp.com/static/js/pages-index.d868273b.js","line_number":0,"column_number":0},{"level":"log","text":"item.hotelInfomap[actor:server1.conn0.watcher14.process7//obj109 class:Object extensible:true frozen:false isError:false ownPropertyLength:17 preview:map[kind:Object ownProperties:map[address:map[configurable:true enumerable:true value:154 Yaowarad Rd, Tambon Talat Yai, Amphoe Mueang Phuket, Chang Wat Phuket 83000 タイ writable:true] city:map[configurable:true enumerable:true value:N/A writable:true] country:map[configurable:true enumerable:true value:Thailand writable:true] image:map[configurable:true enumerable:true value:http://hotel.cdn.ruanyiit.com/hotel/0263895920fea8b4d6a935e2f28e2660.jpg writable:true] name:map[configurable:true enumerable:true value:ホテルヴェルディグリス writable:true] placeId:map[configurable:true enumerable:true value:ChIJm0tLf6AxUDARzAwBrCywpTA writable:true] priceLevel:map[configurable:true enumerable:true value:$ 250 writable:true] rating:map[configurable:true enumerable:true value:4.8 writable:true] reviewsCount:map[configurable:true enumerable:true value:118 writable:true] summary:map[configurable:true enumerable:true value:No description available writable:true]] ownPropertiesLength:17] sealed:false type:object]","filename":"https://booking-jp.com/static/js/pages-index.d868273b.js","line_number":0,"column_number":0},{"level":"log","text":"item.hotelInfomap[actor:server1.conn0.watcher14.process7//obj110 class:Object extensible:true frozen:false isError:false ownPropertyLength:17 preview:map[kind:Object ownProperties:map[address:map[configurable:true enumerable:true value:82 Thanon Kata, Tambon Karon, Amphoe Mueang Phuket, Chang Wat Phuket 83100 タイ writable:true] city:map[configurable:true enumerable:true value:Tambon Karon writable:true] country:map[configurable:true enumerable:true value:Thailand writable:true] image:map[configurable:true enumerable:true value:http://hotel.cdn.ruanyiit.com/hotel/c7283da5fc55cf2e1be3eecb6abe928b.jpg writable:true] name:map[configurable:true enumerable:true value:Niranapa Boutique Resort (ณีรานภา) writable:true] placeId:map[configurable:true enumerable:true value:ChIJLyo4XhElUDARPjGcpkmmqvQ writable:true] priceLevel:map[configurable:true enumerable:true value:$ 223 writable:true] rating:map[configurable:true enumerable:true value:4.7 writable:true] reviewsCount:map[configurable:true enumerable:true value:833 writable:true] summary:map[configurable:true enumerable:true value:No description available writable:true]] ownPropertiesLength:17] sealed:false type:object]","filename":"https://booking-jp.com/static/js/pages-index.d868273b.js","line_number":0,"column_number":0},{"level":"log","text":"item.hotelInfomap[actor:server1.conn0.watcher14.process7//obj111 class:Object extensible:true frozen:false isError:false ownPropertyLength:17 preview:map[kind:Object ownProperties:map[address:map[configurable:true enumerable:true value:157, Tambon Don Kaeo, Amphoe Mae Rim, Chang Wat Chiang Mai 50180 タイ writable:true] city:map[configurable:true enumerable:true value:Tambon Don Kaeo writable:true] country:map[configurable:true enumerable:true value:Thailand writable:true] image:map[configurable:true enumerable:true value:http://hotel.cdn.ruanyiit.com/hotel/3e3fde9ed8e58d097daca415cdb8e7b7.jpg writable:true] name:map[configurable:true enumerable:true value:Raya Heritage writable:true] placeId:map[configurable:true enumerable:true value:ChIJieYgBzM82jARGOIe2G6_Bbo writable:true] priceLevel:map[configurable:true enumerable:true value:$ 219 writable:true] rating:map[configurable:true enumerable:true value:4.7 writable:true] reviewsCount:map[configurable:true enumerable:true value:588 writable:true] summary:map[configurable:true enumerable:true value:Luxe, airy rooms with covered terraces in an upscale hotel offering a restaurant, a pool \u0026 a spa. writable:true]] ownPropertiesLength:17] sealed:false type:object]","filename":"https://booking-jp.com/static/js/pages-index.d868273b.js","line_number":0,"column_number":0},{"level":"log","text":"item.hotelInfomap[actor:server1.conn0.watcher14.process7//obj112 class:Object extensible:true frozen:false isError:false ownPropertyLength:17 preview:map[kind:Object ownProperties:map[address:map[configurable:true enumerable:true value:Jl. Embong Malang No.85-89, Kedungdoro, Kec. Tegalsari, Surabaya, Jawa Timur 60261 インドネシア writable:true] city:map[configurable:true enumerable:true value:N/A writable:true] country:map[configurable:true enumerable:true value:Indonesia writable:true] image:map[configurable:true enumerable:true value:http://hotel.cdn.ruanyiit.com/hotel/41400575cb4e4dfe59c99e235d9ee8c1.jpg writable:true] name:map[configurable:true enumerable:true value:JW マリオットホテルスラバヤ writable:true] placeId:map[configurable:true enumerable:true value:ChIJ5xru9lz51y0RQZWFRLoeTmA writable:true] priceLevel:map[configurable:true enumerable:true value:$ 219 writable:true] rating:map[configurable:true enumerable:true value:4.7 writable:true] reviewsCount:map[configurable:true enumerable:true value:18969 writable:true] summary:map[configurable:true enumerable:true value:Sophisticated hotel with premium rooms \u0026 opulent suites, plus fine dining, a gym \u0026 an outdoor pool. writable:true]] ownPropertiesLength:17] sealed:false type:object]","filename":"https://booking-jp.com/static/js/pages-index.d868273b.js","line_number":0,"column_number":0},{"level":"log","text":"item.hotelInfomap[actor:server1.conn0.watcher14.process7//obj113 class:Object extensible:true frozen:false isError:false ownPropertyLength:17 preview:map[kind:Object ownProperties:map[address:map[configurable:true enumerable:true value:Jl. Sultan Iskandar Muda, Kby. Lama Utara, Kec. Kebayoran Lama, Kota Jakarta Selatan, Daerah Khusus Ibukota Jakarta 12240 インドネシア writable:true] city:map[configurable:true enumerable:true value:N/A writable:true] country:map[configurable:true enumerable:true value:Indonesia writable:true] image:map[configurable:true enumerable:true value:http://hotel.cdn.ruanyiit.com/hotel/2d5184560081af5e07102e3bf3d1130d.jpg writable:true] name:map[configurable:true enumerable:true value:シェラトン グランド ジャカルタ ガンダリア シティ ホテル writable:true] placeId:map[configurable:true enumerable:true value:ChIJ9xdmoxDxaS4RhiO5ymN-w9o writable:true] priceLevel:map[configurable:true enumerable:true value:$ 231 writable:true] rating:map[configurable:true enumerable:true value:4.7 writable:true] reviewsCount:map[configurable:true enumerable:true value:14248 writable:true] summary:map[configurable:true enumerable:true value:Sophisticated hotel featuring international dining \u0026 a bar, plus a pool \u0026 a 24/7 fitness room. writable:true]] ownPropertiesLength:17] sealed:false type:object]","filename":"https://booking-jp.com/static/js/pages-index.d868273b.js","line_number":0,"column_number":0},{"level":"log","text":"item.hotelInfomap[actor:server1.conn0.watcher14.process7//obj114 class:Object extensible:true frozen:false isError:false ownPropertyLength:17 preview:map[kind:Object ownProperties:map[address:map[configurable:true enumerable:true value:26/2 Soi Phetchaburi 11, Khwaeng Thanon Phaya Thai, Khet Ratchathewi, Krung Thep Maha Nakhon 10400 タイ writable:true] city:map[configurable:true enumerable:true value:N/A writable:true] country:map[configurable:true enumerable:true value:Thailand writable:true] image:map[configurable:true enumerable:true value:http://hotel.cdn.ruanyiit.com/hotel/d18d28c69c394de27a79e655f6d71235.jpg writable:true] name:map[configurable:true enumerable:true value:Vince Hotel Bangkok Pratunam writable:true] placeId:map[configurable:true enumerable:true value:ChIJhYTCg8me4jAReu77cCAdS3k writable:true] priceLevel:map[configurable:true enumerable:true value:$ 229 writable:true] rating:map[configurable:true enumerable:true value:4.7 writable:true] reviewsCount:map[configurable:true enumerable:true value:7210 writable:true] summary:map[configurable:true enumerable:true value:Laid-back lodging featuring a hip restaurant \u0026 a gym, along with a rooftop pool \u0026 bar. writable:true]] ownPropertiesLength:17] sealed:false type:object]","filename":"https://booking-jp.com/static/js/pages-index.d868273b.js","line_number":0,"column_number":0},{"level":"log","text":"item.hotelInfomap[actor:server1.conn0.watcher14.process7//obj127 class:Object extensible:true frozen:false isError:false ownPropertyLength:17 preview:map[kind:Object ownProperties:map[address:map[configurable:true enumerable:true value:ศรีภูมิ 3ข ซอย 2 Tambon Si Phum, Amphoe Mueang Chiang Mai, Chang Wat Chiang Mai 50200 タイ writable:true] city:map[configurable:true enumerable:true value:N/A writable:true] country:map[configurable:true enumerable:true value:Thailand writable:true] image:map[configurable:true enumerable:true value:http://hotel.cdn.ruanyiit.com/hotel/cab729fdc2b71d0f033cd24385420f7b.jpg writable:true] name:map[configurable:true enumerable:true value:Pran@Kumuang Boutique House writable:true] placeId:map[configurable:true enumerable:true value:ChIJqzMUkn472jAR0CLRsddPHLM writable:true] priceLevel:map[configurable:true enumerable:true value:$ 240 writable:true] rating:map[configurable:true enumerable:true value:4.9 writable:true] reviewsCount:map[configurable:true enumerable:true value:107 writable:true] summary:map[configurable:true enumerable:true value:No description available writable:true]] ownPropertiesLength:17] sealed:false type:object]","filename":"https://booking-jp.com/static/js/pages-index.d868273b.js","line_number":0,"column_number":0},{"level":"log","text":"item.hotelInfomap[actor:server1.conn0.watcher14.process7//obj128 class:Object extensible:true frozen:false isError:false ownPropertyLength:17 preview:map[kind:Object ownProperties:map[address:map[configurable:true enumerable:true value:69 Thanon Yen Akat, Khwaeng Chong Nonsi, Khet Yan Nawa, Krung Thep Maha Nakhon 10120 タイ writable:true] city:map[configurable:true enumerable:true value:N/A writable:true] country:map[configurable:true enumerable:true value:Thailand writable:true] image:map[configurable:true enumerable:true value:http://hotel.cdn.ruanyiit.com/hotel/b4eb5f3b1086244a2a0c9d055ce626cf.jpg writable:true] name:map[configurable:true enumerable:true value:Shama Yen-Akat Bangkok writable:true] placeId:map[configurable:true enumerable:true value:ChIJvcECSBqf4jARgoHWb5x0r2Q writable:true] priceLevel:map[configurable:true enumerable:true value:$ 261 writable:true] rating:map[configurable:true enumerable:true value:4.8 writable:true] reviewsCount:map[configurable:true enumerable:true value:1701 writable:true] summary:map[configurable:true enumerable:true value:Streamlined quarters, some with kitchenettes, in a modern hotel featuring dining \u0026 an outdoor pool. writable:true]] ownPropertiesLength:17] sealed:false type:object]","filename":"https://booking-jp.com/static/js/pages-index.d868273b.js","line_number":0,"column_number":0},{"level":"log","text":"item.hotelInfomap[actor:server1.conn0.watcher14.process7//obj129 class:Object extensible:true frozen:false isError:false ownPropertyLength:17 preview:map[kind:Object ownProperties:map[address:map[configurable:true enumerable:true value:13 1 Thanon Chiang Mai-Lamphun, Tambon Chang Moi, Amphoe Mueang Chiang Mai, Chang Wat Chiang Mai 50000 タイ writable:true] city:map[configurable:true enumerable:true value:N/A writable:true] country:map[configurable:true enumerable:true value:Thailand writable:true] image:map[configurable:true enumerable:true value:http://hotel.cdn.ruanyiit.com/hotel/6f91536076aab16172dad0851517189b.jpg writable:true] name:map[configurable:true enumerable:true value:Rimping Village Chiang Mai writable:true] placeId:map[configurable:true enumerable:true value:ChIJDVp8Wqk62jARm2wj9i-HTgQ writable:true] priceLevel:map[configurable:true enumerable:true value:$ 225 writable:true] rating:map[configurable:true enumerable:true value:4.8 writable:true] reviewsCount:map[configurable:true enumerable:true value:507 writable:true] summary:map[configurable:true enumerable:true value:Straightforward rooms \u0026 suites in an informal hotel with an outdoor pool \u0026 a restaurant. writable:true]] ownPropertiesLength:17] sealed:false type:object]","filename":"https://booking-jp.com/static/js/pages-index.d868273b.js","line_number":0,"column_number":0},{"level":"log","text":"item.hotelInfomap[actor:server1.conn0.watcher14.process7//obj130 class:Object extensible:true frozen:false isError:false ownPropertyLength:17 preview:map[kind:Object ownProperties:map[address:map[configurable:true enumerable:true value:06 Đ. Nguyễn Chánh, Lộc Thọ, Nha Trang, Khánh Hòa 57000 ベトナム writable:true] city:map[configurable:true enumerable:true value:Nha Trang writable:true] country:map[configurable:true enumerable:true value:Vietnam writable:true] image:map[configurable:true enumerable:true value:http://hotel.cdn.ruanyiit.com/hotel/09ec0b426068cb5c57795e7501590631.jpg writable:true] name:map[configurable:true enumerable:true value:Four Points by Sheraton Nha Trang writable:true] placeId:map[configurable:true enumerable:true value:ChIJ3VPQWldncDERkjfn6pEiF8w writable:true] priceLevel:map[configurable:true enumerable:true value:$ 250 writable:true] rating:map[configurable:true enumerable:true value:4.8 writable:true] reviewsCount:map[configurable:true enumerable:true value:49 writable:true] summary:map[configurable:true enumerable:true value:No description available writable:true]] ownPropertiesLength:17] sealed:false type:object]","filename":"https://booking-jp.com/static/js/pages-index.d868273b.js","line_number":0,"column_number":0},{"level":"log","text":"item.hotelInfomap[actor:server1.conn0.watcher14.process7//obj131 class:Object extensible:true frozen:false isError:false ownPropertyLength:17 preview:map[kind:Object ownProperties:map[address:map[configurable:true enumerable:true value:154 Yaowarad Rd, Tambon Talat Yai, Amphoe Mueang Phuket, Chang Wat Phuket 83000 タイ writable:true] city:map[configurable:true enumerable:true value:N/A writable:true] country:map[configurable:true enumerable:true value:Thailand writable:true] image:map[configurable:true enumerable:true value:http://hotel.cdn.ruanyiit.com/hotel/0263895920fea8b4d6a935e2f28e2660.jpg writable:true] name:map[configurable:true enumerable:true value:ホテルヴェルディグリス writable:true] placeId:map[configurable:true enumerable:true value:ChIJm0tLf6AxUDARzAwBrCywpTA writable:true] priceLevel:map[configurable:true enumerable:true value:$ 250 writable:true] rating:map[configurable:true enumerable:true value:4.8 writable:true] reviewsCount:map[configurable:true enumerable:true value:118 writable:true] summary:map[configurable:true enumerable:true value:No description available writable:true]] ownPropertiesLength:17] sealed:false type:object]","filename":"https://booking-jp.com/static/js/pages-index.d868273b.js","line_number":0,"column_number":0},{"level":"log","text":"item.hotelInfomap[actor:server1.conn0.watcher14.process7//obj132 class:Object extensible:true frozen:false isError:false ownPropertyLength:17 preview:map[kind:Object ownProperties:map[address:map[configurable:true enumerable:true value:82 Thanon Kata, Tambon Karon, Amphoe Mueang Phuket, Chang Wat Phuket 83100 タイ writable:true] city:map[configurable:true enumerable:true value:Tambon Karon writable:true] country:map[configurable:true enumerable:true value:Thailand writable:true] image:map[configurable:true enumerable:true value:http://hotel.cdn.ruanyiit.com/hotel/c7283da5fc55cf2e1be3eecb6abe928b.jpg writable:true] name:map[configurable:true enumerable:true value:Niranapa Boutique Resort (ณีรานภา) writable:true] placeId:map[configurable:true enumerable:true value:ChIJLyo4XhElUDARPjGcpkmmqvQ writable:true] priceLevel:map[configurable:true enumerable:true value:$ 223 writable:true] rating:map[configurable:true enumerable:true value:4.7 writable:true] reviewsCount:map[configurable:true enumerable:true value:833 writable:true] summary:map[configurable:true enumerable:true value:No description available writable:true]] ownPropertiesLength:17] sealed:false type:object]","filename":"https://booking-jp.com/static/js/pages-index.d868273b.js","line_number":0,"column_number":0},{"level":"log","text":"item.hotelInfomap[actor:server1.conn0.watcher14.process7//obj133 class:Object extensible:true frozen:false isError:false ownPropertyLength:17 preview:map[kind:Object ownProperties:map[address:map[configurable:true enumerable:true value:157, Tambon Don Kaeo, Amphoe Mae Rim, Chang Wat Chiang Mai 50180 タイ writable:true] city:map[configurable:true enumerable:true value:Tambon Don Kaeo writable:true] country:map[configurable:true enumerable:true value:Thailand writable:true] image:map[configurable:true enumerable:true value:http://hotel.cdn.ruanyiit.com/hotel/3e3fde9ed8e58d097daca415cdb8e7b7.jpg writable:true] name:map[configurable:true enumerable:true value:Raya Heritage writable:true] placeId:map[configurable:true enumerable:true value:ChIJieYgBzM82jARGOIe2G6_Bbo writable:true] priceLevel:map[configurable:true enumerable:true value:$ 219 writable:true] rating:map[configurable:true enumerable:true value:4.7 writable:true] reviewsCount:map[configurable:true enumerable:true value:588 writable:true] summary:map[configurable:true enumerable:true value:Luxe, airy rooms with covered terraces in an upscale hotel offering a restaurant, a pool \u0026 a spa. writable:true]] ownPropertiesLength:17] sealed:false type:object]","filename":"https://booking-jp.com/static/js/pages-index.d868273b.js","line_number":0,"column_number":0},{"level":"log","text":"item.hotelInfomap[actor:server1.conn0.watcher14.process7//obj134 class:Object extensible:true frozen:false isError:false ownPropertyLength:17 preview:map[kind:Object ownProperties:map[address:map[configurable:true enumerable:true value:Jl. Embong Malang No.85-89, Kedungdoro, Kec. Tegalsari, Surabaya, Jawa Timur 60261 インドネシア writable:true] city:map[configurable:true enumerable:true value:N/A writable:true] country:map[configurable:true enumerable:true value:Indonesia writable:true] image:map[configurable:true enumerable:true value:http://hotel.cdn.ruanyiit.com/hotel/41400575cb4e4dfe59c99e235d9ee8c1.jpg writable:true] name:map[configurable:true enumerable:true value:JW マリオットホテルスラバヤ writable:true] placeId:map[configurable:true enumerable:true value:ChIJ5xru9lz51y0RQZWFRLoeTmA writable:true] priceLevel:map[configurable:true enumerable:true value:$ 219 writable:true] rating:map[configurable:true enumerable:true value:4.7 writable:true] reviewsCount:map[configurable:true enumerable:true value:18969 writable:true] summary:map[configurable:true enumerable:true value:Sophisticated hotel with premium rooms \u0026 opulent suites, plus fine dining, a gym \u0026 an outdoor pool. writable:true]] ownPropertiesLength:17] sealed:false type:object]","filename":"https://booking-jp.com/static/js/pages-index.d868273b.js","line_number":0,"column_number":0},{"level":"log","text":"item.hotelInfomap[actor:server1.conn0.watcher14.process7//obj135 class:Object extensible:true frozen:false isError:false ownPropertyLength:17 preview:map[kind:Object ownProperties:map[address:map[configurable:true enumerable:true value:Jl. Sultan Iskandar Muda, Kby. Lama Utara, Kec. Kebayoran Lama, Kota Jakarta Selatan, Daerah Khusus Ibukota Jakarta 12240 インドネシア writable:true] city:map[configurable:true enumerable:true value:N/A writable:true] country:map[configurable:true enumerable:true value:Indonesia writable:true] image:map[configurable:true enumerable:true value:http://hotel.cdn.ruanyiit.com/hotel/2d5184560081af5e07102e3bf3d1130d.jpg writable:true] name:map[configurable:true enumerable:true value:シェラトン グランド ジャカルタ ガンダリア シティ ホテル writable:true] placeId:map[configurable:true enumerable:true value:ChIJ9xdmoxDxaS4RhiO5ymN-w9o writable:true] priceLevel:map[configurable:true enumerable:true value:$ 231 writable:true] rating:map[configurable:true enumerable:true value:4.7 writable:true] reviewsCount:map[configurable:true enumerable:true value:14248 writable:true] summary:map[configurable:true enumerable:true value:Sophisticated hotel featuring international dining \u0026 a bar, plus a pool \u0026 a 24/7 fitness room. writable:true]] ownPropertiesLength:17] sealed:false type:object]","filename":"https://booking-jp.com/static/js/pages-index.d868273b.js","line_number":0,"column_number":0},{"level":"log","text":"item.hotelInfomap[actor:server1.conn0.watcher14.process7//obj136 class:Object extensible:true frozen:false isError:false ownPropertyLength:17 preview:map[kind:Object ownProperties:map[address:map[configurable:true enumerable:true value:26/2 Soi Phetchaburi 11, Khwaeng Thanon Phaya Thai, Khet Ratchathewi, Krung Thep Maha Nakhon 10400 タイ writable:true] city:map[configurable:true enumerable:true value:N/A writable:true] country:map[configurable:true enumerable:true value:Thailand writable:true] image:map[configurable:true enumerable:true value:http://hotel.cdn.ruanyiit.com/hotel/d18d28c69c394de27a79e655f6d71235.jpg writable:true] name:map[configurable:true enumerable:true value:Vince Hotel Bangkok Pratunam writable:true] placeId:map[configurable:true enumerable:true value:ChIJhYTCg8me4jAReu77cCAdS3k writable:true] priceLevel:map[configurable:true enumerable:true value:$ 229 writable:true] rating:map[configurable:true enumerable:true value:4.7 writable:true] reviewsCount:map[configurable:true enumerable:true value:7210 writable:true] summary:map[configurable:true enumerable:true value:Laid-back lodging featuring a hip restaurant \u0026 a gym, along with a rooftop pool \u0026 bar. writable:true]] ownPropertiesLength:17] sealed:false type:object]","filename":"https://booking-jp.com/static/js/pages-index.d868273b.js","line_number":0,"column_number":0}]},"http":[{"url":{"schema":"https","addr":"cdn.dcloud.net.cn/img/shadow-grey.png","fqdn":"cdn.dcloud.net.cn","domain":"dcloud.net.cn","tld":"net.cn"},"ip":{"addr":"124.222.174.117","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking-jp.com/","date":"2026-06-23T23:42:27.951Z","timestamp":1782258147951,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dcloud.net.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 26 Aug 2025 11:47:17 GMT","end":"Fri, 25 Sep 2026 11:47:16 GMT"},"fingerprint":{"sha1":"47:A7:6C:09:6B:1D:CA:2D:7D:39:2E:C1:7F:15:DE:5D:F2:C4:0F:77","sha256":"EA:73:37:83:D0:38:44:D9:3C:0B:26:F0:DD:D1:22:2F:36:F7:F2:86:A1:B0:58:52:DE:4E:0A:21:D6:89:E7:3E"}}},"request":{"raw":"GET /img/shadow-grey.png HTTP/1.1\r\nHost: cdn.dcloud.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking-jp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 23 Jun 2026 23:42:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 136\r\nlast-modified: Thu, 06 Jun 2019 06:42:07 GMT\r\netag: \"5cf8b5bf-88\"\r\nexpires: Wed, 24 Jun 2026 15:42:28 GMT\r\ncache-control: max-age=57600\r\nset-cookie: __uni__uid=rBEQa2o7GeSA8zweA22ZAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dcloud.net.cn; path=/; secure; httponly; samesite=none\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":136,"size_decoded":577,"mime_type":"image/png","magic":"PNG image data, 1 x 6, 4-bit colormap, non-interlaced","md5":"5a962adf74d92ae702467b3f47976547","sha1":"36f74049375584e3fa69b5ef87e9572336ff9e7a","sha256":"ad4ebea1c3496dd2924789ee009174a2c6289d1200e9811f458fd46f172d1d6f","sha512":"4ace23fe7ec6c7271710030fd423aace13eafac68ac3e76366ce4ce9bdc702caf71c9bdc2fb6a32c8e9791546098617cc0259decd8bb8489afdbce43e1b53a73","ssdeep":"","tlshash":"47c09bf3a615dc754a0d153b42e98271f429511e07046d0e5a13c216741e3448d56793","first_seen":"2023-04-15T10:50:30Z","last_seen":"2026-07-18T06:07:00.205575Z","times_seen":17239,"resource_available":false,"data":null}},"time_used":966,"timings":{"blocked":0,"dns":111,"connect":217,"send":0,"wait":218,"receive":0,"ssl":420},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget/code/js/plugin.6e022713.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.27","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking-jp.com/","date":"2026-06-23T23:42:27.960Z","timestamp":1782258147960,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget/code/js/plugin.6e022713.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Tue, 23 Jun 2026 10:07:23 GMT\r\nx-oss-server-time: 8\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6A3A5ADB7594F93337B41FFD\r\nlast-modified: Wed, 06 May 2026 03:49:02 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12812757773187201760\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: L81yy1Y7ugH4G0khGovnFw==\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 75d52516d2e9126ccb2b4cf8db62c446.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: zC1mDGhAbgPdygJ3L3HMUvQxpn_q3QIFVYH447_58XVu5CXki5r1Xw==\r\nage: 48904\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":380050,"size_decoded":112455,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (62398), with no line terminators","md5":"2fcd72cb563bba01f81b49211a8be717","sha1":"21fcad565344af8ffffa528963e0671e5476f7d9","sha256":"91cb86436e3a04d3c6779741304406634506d3b0e79a706b2fbc41c915ba3ae0","sha512":"1bc0665437cfd75582dc11039e4d6eee5a906ded63a620cace330f1a9ad2de537a96de2a8e34e1c381ac034002d9533d7bb2c0a5440136fc52ebca9ff7a6d836","ssdeep":"6144:G0bg30bPKQQDLVQbO0NzhDetWx9a+gcmLTLrqGKAbCPfvaHcqiQUd+wa8Ar4gWDE:5bPKQQDLVQb5NzhDbMLrqGKAbCPaHcqn","tlshash":"cd843a49f5c9f86b07b361b1602f6009b3ba1b48e409d8e0fe75d6e91ab4d496323f1d","first_seen":"2026-05-06T06:21:51.054543Z","last_seen":"2026-07-18T04:13:55.322161Z","times_seen":415,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking-jp.com/static/images/index/icon_stars.png","fqdn":"booking-jp.com","domain":"booking-jp.com","tld":"com"},"ip":{"addr":"121.127.232.46","port":443,"asn":152194,"as":"CTG Server Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking-jp.com/","date":"2026-06-23T23:42:28.192Z","timestamp":1782258148192,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booking-jp.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 13:30:03 GMT","end":"Mon, 31 Aug 2026 13:30:02 GMT"},"fingerprint":{"sha1":"09:ED:E4:79:12:3A:70:97:E1:FC:61:F4:52:0B:D7:A8:FC:7C:74:D8","sha256":"70:5F:C2:88:EA:8F:91:67:52:30:8D:96:24:AE:22:98:CA:46:C6:6F:D1:AD:1C:95:24:0F:80:84:CA:9A:6C:EE"}}},"request":{"raw":"GET /static/images/index/icon_stars.png HTTP/1.1\r\nHost: booking-jp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking-jp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 23 Jun 2026 23:40:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 460\r\nlast-modified: Sat, 13 Jun 2026 06:15:04 GMT\r\netag: \"6a2cf568-1cc\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":460,"size_decoded":896,"mime_type":"image/png","magic":"PNG image data, 12 x 12, 8-bit/color RGBA, non-interlaced","md5":"fb62602393caea76dfd7687539927488","sha1":"fcc4cbd2007691ae8eff2ac82a16bc18966b749a","sha256":"0ade945133c0597f71ab5c5f32a0cb32126b20ef02043b1021a1ce9b3a5c67ba","sha512":"68a43f8f8f9d4bbc37a91f37f762c32186283d48230f4dc5e8d49cfa196e681413d07907b74af9b0ded27655381e0ab2ca3d85dd7755ceab70a71091cb4357fb","ssdeep":"","tlshash":"5af023d2eab74f75cd9ba23a00b5f4d40c3c5c6e666889464ac7d9df692c473b00e4c2","first_seen":"2026-06-23T23:43:14.462836Z","last_seen":"2026-06-23T23:44:30.694736Z","times_seen":2,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"booking-jp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"booking-jp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hotel.cdn.ruanyiit.com/hotel/b4eb5f3b1086244a2a0c9d055ce626cf.jpg","fqdn":"hotel.cdn.ruanyiit.com","domain":"ruanyiit.com","tld":"com"},"ip":{"addr":"154.41.93.241","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking-jp.com/","date":"2026-06-23T23:42:28.215Z","timestamp":1782258148215,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hotel.cdn.ruanyiit.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2024","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Tue, 02 Jun 2026 14:00:00 GMT","end":"Mon, 31 Aug 2026 13:59:59 GMT"},"fingerprint":{"sha1":"48:1A:B4:A7:19:D1:42:49:00:3B:5C:B5:FB:23:5F:DB:05:44:BD:2D","sha256":"E6:6E:A5:A4:BD:ED:84:89:AE:95:A4:8F:B4:AF:29:41:A7:D4:A8:19:16:1B:74:60:0F:C0:A1:F7:5F:B3:D4:F7"}}},"request":{"raw":"GET /hotel/b4eb5f3b1086244a2a0c9d055ce626cf.jpg HTTP/1.1\r\nHost: hotel.cdn.ruanyiit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nReferer: https://booking-jp.com/\r\nSec-Fetch-Storage-Access: none\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Tue, 23 Jun 2026 23:42:29 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 67048\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 949215\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"b4eb5f3b1086244a2a0c9d055ce626cf.jpg\"; filename*=utf-8''b4eb5f3b1086244a2a0c9d055ce626cf.jpg\r\nContent-Md5: tbcYHnHscykaeF0qtjkVEQ==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"Fo5erXeSKSRDgy7ECXK4ckikutYI\"\r\nLast-Modified: Wed, 25 Feb 2026 13:40:14 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg121;QNM3\r\nX-M-Reqid: QvKkweArt\r\nX-Qiniu-Zone: 0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: 1WIAAABGUcsJe7gY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":67048,"size_decoded":67812,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 800x322, components 3","md5":"b5b7181e71ec73291a785d2ab6391511","sha1":"8e5ead7792292443832ec40972b87248a4bad608","sha256":"983a1497cdab4fda027eaffa193098aee404a131a5fb9486c2152f74feedfc7f","sha512":"b13453701974fc6cdda1371d976e293ffa9ff5265ceb071d9b8c2b923511b96ddf5509d77a507211bef39f18d0a35ab078f39aaa27ddb2060cec3a3c4171d0be","ssdeep":"1536:TShCcx1q4k6X+KJun57ieZlsrcAbl7y2Zx1QkaBKOubgMin:TShxPX+vn57tZlsIAx7nBfgJ","tlshash":"dd630282eef35269ee6d95b05c396504b542f3bd73201b28ec79483e03a10b257aded7","first_seen":"2026-06-23T23:43:14.466929Z","last_seen":"2026-06-23T23:44:30.678524Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2399,"timings":{"blocked":-1,"dns":917,"connect":242,"send":0,"wait":325,"receive":424,"ssl":490},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking-jp.com/static/images/index/icon_user.png","fqdn":"booking-jp.com","domain":"booking-jp.com","tld":"com"},"ip":{"addr":"121.127.232.46","port":443,"asn":152194,"as":"CTG Server Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking-jp.com/","date":"2026-06-23T23:42:27.740Z","timestamp":1782258147740,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booking-jp.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 13:30:03 GMT","end":"Mon, 31 Aug 2026 13:30:02 GMT"},"fingerprint":{"sha1":"09:ED:E4:79:12:3A:70:97:E1:FC:61:F4:52:0B:D7:A8:FC:7C:74:D8","sha256":"70:5F:C2:88:EA:8F:91:67:52:30:8D:96:24:AE:22:98:CA:46:C6:6F:D1:AD:1C:95:24:0F:80:84:CA:9A:6C:EE"}}},"request":{"raw":"GET /static/images/index/icon_user.png HTTP/1.1\r\nHost: booking-jp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking-jp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 23 Jun 2026 23:40:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 982\r\nlast-modified: Sat, 13 Jun 2026 06:15:05 GMT\r\netag: \"6a2cf569-3d6\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":982,"size_decoded":1418,"mime_type":"image/png","magic":"PNG image data, 26 x 26, 8-bit/color RGBA, non-interlaced","md5":"29c99ad5da155ff45fb8fcf3760a19c5","sha1":"98477052a91dd86cef4d55aeb9bc73d014991988","sha256":"ce1da22b1708081469979be4ecc39802073d8c359c9994fe76b9f7fcb01593c8","sha512":"98a580dc75c6ecd067e4db63e19391984e9681c946e471615447b124050c9bc18d9d16f5f0931e59f53cabd40f3a2194c7bcf37c1b9374e249062facbb420f43","ssdeep":"","tlshash":"3c11c8ad37b1ffbad549433f263035395a1635bf0a5440cba54fb0054722d5108999ac","first_seen":"2026-06-23T23:43:14.470072Z","last_seen":"2026-06-23T23:44:30.66179Z","times_seen":2,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"booking-jp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"booking-jp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking-jp.com/static/images/index/icon1.png","fqdn":"booking-jp.com","domain":"booking-jp.com","tld":"com"},"ip":{"addr":"121.127.232.46","port":443,"asn":152194,"as":"CTG Server Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking-jp.com/","date":"2026-06-23T23:42:27.744Z","timestamp":1782258147744,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booking-jp.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 13:30:03 GMT","end":"Mon, 31 Aug 2026 13:30:02 GMT"},"fingerprint":{"sha1":"09:ED:E4:79:12:3A:70:97:E1:FC:61:F4:52:0B:D7:A8:FC:7C:74:D8","sha256":"70:5F:C2:88:EA:8F:91:67:52:30:8D:96:24:AE:22:98:CA:46:C6:6F:D1:AD:1C:95:24:0F:80:84:CA:9A:6C:EE"}}},"request":{"raw":"GET /static/images/index/icon1.png HTTP/1.1\r\nHost: booking-jp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking-jp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 23 Jun 2026 23:40:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 658\r\nlast-modified: Sat, 13 Jun 2026 06:15:03 GMT\r\netag: \"6a2cf567-292\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":658,"size_decoded":1094,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"df12fbcfdb8781ae9f0493693399ccd9","sha1":"f9351813c9f58aafafd6de77dfd5dbdc5f6a66ed","sha256":"60e4a154492acc18e75b24b044e09e6fae603bea89707918c2e483a82738144b","sha512":"17439a7fd7975572beb0a7232895a201a6a2c766fb07c847fce68daf73a3acd826ed2e81fb23fb5e740aa7c26814eb27853e403a525e47f513594371427f2436","ssdeep":"","tlshash":"1b01d8f2d288b11961947427f42342b431f7041e23933209553e13ea280553fd121e05","first_seen":"2026-06-23T23:43:14.472857Z","last_seen":"2026-06-23T23:44:30.676115Z","times_seen":2,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"booking-jp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"booking-jp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"msg.salesmartly.com/chat/chat-msg/unread-msg-list-v2?login_token=3279059c7c506f0829f493f846c9dfd4\u0026chat_user_id=03b2ccbcc6fc9e7642d6c144b4037350\u0026direction_type=1\u0026plugin_id=g1khdfx\u0026over_time=\u0026env=chat\u0026_=1782258148681\u0026_lt=3279059c7c506f0829f493f846c9dfd4\u0026_u=\u0026_xma_=656442","fqdn":"msg.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://booking-jp.com/","date":"2026-06-23T23:42:28.692Z","timestamp":1782258148692,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 May 2026 04:11:02 GMT","end":"Mon, 17 Aug 2026 05:11:01 GMT"},"fingerprint":{"sha1":"BE:DA:3A:E3:5E:0A:DB:E3:90:79:47:8A:52:F8:40:16:E7:F0:B3:5B","sha256":"2E:4A:21:E0:76:66:96:FA:95:36:C0:F9:E9:87:40:A1:68:C4:58:F8:2E:5B:E7:0B:61:5F:37:AE:7E:A9:84:08"}}},"request":{"raw":"GET /chat/chat-msg/unread-msg-list-v2?login_token=3279059c7c506f0829f493f846c9dfd4\u0026chat_user_id=03b2ccbcc6fc9e7642d6c144b4037350\u0026direction_type=1\u0026plugin_id=g1khdfx\u0026over_time=\u0026env=chat\u0026_=1782258148681\u0026_lt=3279059c7c506f0829f493f846c9dfd4\u0026_u=\u0026_xma_=656442 HTTP/1.1\r\nHost: msg.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nexternal-sign: d9715675cf0db43c8b45d2226400b306\r\nOrigin: https://booking-jp.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking-jp.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 23 Jun 2026 23:42:28 GMT\r\ncontent-type: application/json\r\ncf-ray: a10759758b504e4c-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://booking-jp.com\r\nserver: cloudflare\r\nvary: accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT, Keep-Alive, User-Agent, Cache-Control, Content-Type, Authorization, Origin, Cpl, Client-Type, X-Requested-With, Accept, External-Sign\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nx-request-id: cda35fb6-240c-4028-804f-c54b248b665c\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66,"size_decoded":781,"mime_type":"application/json","magic":"JSON text data","md5":"48016efe262190df0ad5b1d7340a60c4","sha1":"1cd9c973630bf59e2c479cada9105bbfad39dec3","sha256":"6e59b9f826a2a9b503fb05fd33448a0583d30552aed790dfea6cb19e74bb409c","sha512":"274e846e9ad5c7fdbff3fb665809347f229260b2b2eb491f386a5d1084a7fd7526a4e0eb331c71c4eeb14a98143925c29e2702869c11883176eb14ffbba9993b","ssdeep":"","tlshash":"4ca002562c2c1e4b0f0fe489780d1b17d6e911445a252712cdcc915c870da5eb5c7521","first_seen":"2023-04-19T11:38:49Z","last_seen":"2026-07-18T09:37:27.717959Z","times_seen":1882,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking-jp.com/static/images/index/icon_time.png","fqdn":"booking-jp.com","domain":"booking-jp.com","tld":"com"},"ip":{"addr":"121.127.232.46","port":443,"asn":152194,"as":"CTG Server Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking-jp.com/","date":"2026-06-23T23:42:27.749Z","timestamp":1782258147749,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booking-jp.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 13:30:03 GMT","end":"Mon, 31 Aug 2026 13:30:02 GMT"},"fingerprint":{"sha1":"09:ED:E4:79:12:3A:70:97:E1:FC:61:F4:52:0B:D7:A8:FC:7C:74:D8","sha256":"70:5F:C2:88:EA:8F:91:67:52:30:8D:96:24:AE:22:98:CA:46:C6:6F:D1:AD:1C:95:24:0F:80:84:CA:9A:6C:EE"}}},"request":{"raw":"GET /static/images/index/icon_time.png HTTP/1.1\r\nHost: booking-jp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking-jp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 23 Jun 2026 23:40:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 569\r\nlast-modified: Sat, 13 Jun 2026 06:15:04 GMT\r\netag: \"6a2cf568-239\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":569,"size_decoded":1005,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"7a8f8df6ea9abdbb156c5a04c8d356e1","sha1":"fa807dc5b65acb76e74249039a197cad901cf107","sha256":"35bc9770c755d19313f83418b628611adbe91d275dff4020bd718a6f456c0a4b","sha512":"5fb4b55f327b105bac9f14a6acdf5bb9990df813eaba58e96ad6712334145c9a151f1e4c27f1c77e67f4e05c4dd78be575864bff4b22c5d9aa2c16db51511ffa","ssdeep":"","tlshash":"25f041b2b35295b6f35d023b4a85f3a21f50c00938091a6c908d9ee021e5b84056a391","first_seen":"2026-06-23T23:43:14.476399Z","last_seen":"2026-06-23T23:44:30.680902Z","times_seen":2,"resource_available":false,"data":null}},"time_used":360,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":360,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"booking-jp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"booking-jp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hotel.cdn.ruanyiit.com/hotel/c7283da5fc55cf2e1be3eecb6abe928b.jpg","fqdn":"hotel.cdn.ruanyiit.com","domain":"ruanyiit.com","tld":"com"},"ip":{"addr":"154.41.93.241","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking-jp.com/","date":"2026-06-23T23:42:28.222Z","timestamp":1782258148222,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hotel.cdn.ruanyiit.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2024","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Tue, 02 Jun 2026 14:00:00 GMT","end":"Mon, 31 Aug 2026 13:59:59 GMT"},"fingerprint":{"sha1":"48:1A:B4:A7:19:D1:42:49:00:3B:5C:B5:FB:23:5F:DB:05:44:BD:2D","sha256":"E6:6E:A5:A4:BD:ED:84:89:AE:95:A4:8F:B4:AF:29:41:A7:D4:A8:19:16:1B:74:60:0F:C0:A1:F7:5F:B3:D4:F7"}}},"request":{"raw":"GET /hotel/c7283da5fc55cf2e1be3eecb6abe928b.jpg HTTP/1.1\r\nHost: hotel.cdn.ruanyiit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nReferer: https://booking-jp.com/\r\nSec-Fetch-Storage-Access: none\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Tue, 23 Jun 2026 23:42:43 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 158356\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 941398\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"c7283da5fc55cf2e1be3eecb6abe928b.jpg\"; filename*=utf-8''c7283da5fc55cf2e1be3eecb6abe928b.jpg\r\nContent-Md5: SQOiMDycKauhAAe99X6jqQ==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"Fm7EI4MdVTueWEzbmDSYpPuMOkSy\"\r\nLast-Modified: Wed, 25 Feb 2026 13:30:47 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg119;QNM3:1\r\nX-M-Reqid: ZizvjKjYz\r\nX-Qiniu-Zone: 0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: f8kAAACBeC0pgrgY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":158356,"size_decoded":159123,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 800x534, components 3","md5":"4903a2303c9c29aba10007bdf57ea3a9","sha1":"6ec423831d553b9e584cdb983498a4fb8c3a44b2","sha256":"a0ad603d9e1e77a5e554b1045276f2bf19a33e5c91edb6bf00696bbd28000215","sha512":"42fba3bf4421d5e9e48f664f0b3a4df1d81fa1179fcb6adf6d47e6619447019263401802ad0091da2b899fa6abc2f3de5a3aff199c0cfe1dd8af607456c4ec3a","ssdeep":"3072:TMBcC95uRImpGAphQ4LHGUN76P8J6x3EYRfOToShC8B5uXcAN/Hu:5C9YimpfQ4LHGUtJxTohcA5u","tlshash":"93f312f17b86a733ec4f1330ce7885f8b48eb53d560285899ab4390d9e83d74c67994a","first_seen":"2026-06-23T23:43:14.478462Z","last_seen":"2026-06-23T23:44:30.660326Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20211,"timings":{"blocked":-1,"dns":910,"connect":254,"send":0,"wait":3637,"receive":1057,"ssl":14351},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking-jp.com/static/images/tabbar/home_1.png","fqdn":"booking-jp.com","domain":"booking-jp.com","tld":"com"},"ip":{"addr":"121.127.232.46","port":443,"asn":152194,"as":"CTG Server Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking-jp.com/","date":"2026-06-23T23:42:26.555Z","timestamp":1782258146555,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booking-jp.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 13:30:03 GMT","end":"Mon, 31 Aug 2026 13:30:02 GMT"},"fingerprint":{"sha1":"09:ED:E4:79:12:3A:70:97:E1:FC:61:F4:52:0B:D7:A8:FC:7C:74:D8","sha256":"70:5F:C2:88:EA:8F:91:67:52:30:8D:96:24:AE:22:98:CA:46:C6:6F:D1:AD:1C:95:24:0F:80:84:CA:9A:6C:EE"}}},"request":{"raw":"GET /static/images/tabbar/home_1.png HTTP/1.1\r\nHost: booking-jp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking-jp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 23 Jun 2026 23:40:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 828\r\nlast-modified: Sat, 13 Jun 2026 06:15:19 GMT\r\netag: \"6a2cf577-33c\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":828,"size_decoded":1264,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"0aa43eb268a337731cc505a8dab2c771","sha1":"9f5a9287c7a5f32cfabdfe1fbb1d0c58a41b90b7","sha256":"31700fc9779779d6240059fafbfffa871bbec90f074daff0c50f0b91b59c6698","sha512":"3a0436d3aa416e0409ea37085d1e4af4e8d736401829f5227a1b99a126e973ea9285f9ee16db659ada74c8f38517bd8c970250411345e0fb0c29a34ee37f4814","ssdeep":"","tlshash":"f70152b3340a5c5eea87625683d20babea70b5464085843b90ea0e915689c651f98c86","first_seen":"2026-06-23T23:43:14.480533Z","last_seen":"2026-06-23T23:44:30.679707Z","times_seen":2,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":392,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"booking-jp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"booking-jp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking-jp.com/static/images/tabbar/hotel_0.png","fqdn":"booking-jp.com","domain":"booking-jp.com","tld":"com"},"ip":{"addr":"121.127.232.46","port":443,"asn":152194,"as":"CTG Server Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking-jp.com/","date":"2026-06-23T23:42:26.557Z","timestamp":1782258146557,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booking-jp.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 13:30:03 GMT","end":"Mon, 31 Aug 2026 13:30:02 GMT"},"fingerprint":{"sha1":"09:ED:E4:79:12:3A:70:97:E1:FC:61:F4:52:0B:D7:A8:FC:7C:74:D8","sha256":"70:5F:C2:88:EA:8F:91:67:52:30:8D:96:24:AE:22:98:CA:46:C6:6F:D1:AD:1C:95:24:0F:80:84:CA:9A:6C:EE"}}},"request":{"raw":"GET /static/images/tabbar/hotel_0.png HTTP/1.1\r\nHost: booking-jp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking-jp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 23 Jun 2026 23:40:44 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 13 Jun 2026 06:15:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2cf577-423\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1059,"size_decoded":1524,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"c5332a478528c20bdb11ee58863d06ff","sha1":"2df9aa359432f626b113218c79e3e99f9b86ce08","sha256":"ef6d99195f437202b833ee763ef8483033372fc24b7d0bcf1737f3aed9fc49c0","sha512":"cce49f573c0f94cb15e611ad9558e21aedb622ab320f4b281b355cd393d204900ffb035af67cc20f12fbcbfa36cb06b69f9897d56110555cb430690772280629","ssdeep":"","tlshash":"5e11b9b561ee5875f2af80d203dd01b9c534036f357b10011747ba0db8634c654fa3c5","first_seen":"2026-06-23T23:43:14.482354Z","last_seen":"2026-06-23T23:44:30.677359Z","times_seen":2,"resource_available":false,"data":null}},"time_used":390,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":390,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"booking-jp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"booking-jp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget/code/css/plugin.ca8811dc.css","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.27","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://booking-jp.com/","date":"2026-06-23T23:42:27.015Z","timestamp":1782258147015,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget/code/css/plugin.ca8811dc.css HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\nserver: AliyunOSS\r\ndate: Tue, 23 Jun 2026 10:07:23 GMT\r\nx-oss-server-time: 5\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6A3A5ADBF9AF893231215D03\r\nlast-modified: Wed, 06 May 2026 03:49:02 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4711444634510545221\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: GJkBkDDNMX5T+a6ZYreZHQ==\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 75d52516d2e9126ccb2b4cf8db62c446.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: TK5lxuwaH3jpIshA--vTAKq2ZN_79zeAZ7iP2osyv6i-KVWp6zGkbQ==\r\nage: 48904\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":77948,"size_decoded":14876,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"1899019030cd317e53f9ae9962b7991d","sha1":"b9d94d577b4c079d5fa4823f82896df59f4d9b5e","sha256":"2d16333363ea5a097558bc8675e8fd989e71e6144b89c0ff537bfb5ca3a087b9","sha512":"152a11565d2e8f381451c197d63daadc1cc14baa9c2113361549949b0a2db1b1c5ad535a152b80eea4728caa8dae9ee32b26e15d42886dae45df70b97f9506d5","ssdeep":"1536:B+1IfcryTXKrMV4wU3k1rz0JUjMBwrjlvOb/E0/qPxE7aWSlsgTu1dQq5qsLxHig:g1Ifc6KYVh0JUjMBwrj6qxE7aWSlsgTg","tlshash":"5a73a832ca15312da177e125f5c0f9d930b5c207fa230aadfda47939c2f298527b668d","first_seen":"2025-11-10T12:55:36.307776Z","last_seen":"2026-07-18T04:13:55.369003Z","times_seen":1720,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking-jp.com/api/app/home","fqdn":"booking-jp.com","domain":"booking-jp.com","tld":"com"},"ip":{"addr":"121.127.232.46","port":443,"asn":152194,"as":"CTG Server Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://booking-jp.com/","date":"2026-06-23T23:42:27.589Z","timestamp":1782258147589,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booking-jp.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 13:30:03 GMT","end":"Mon, 31 Aug 2026 13:30:02 GMT"},"fingerprint":{"sha1":"09:ED:E4:79:12:3A:70:97:E1:FC:61:F4:52:0B:D7:A8:FC:7C:74:D8","sha256":"70:5F:C2:88:EA:8F:91:67:52:30:8D:96:24:AE:22:98:CA:46:C6:6F:D1:AD:1C:95:24:0F:80:84:CA:9A:6C:EE"}}},"request":{"raw":"POST /api/app/home HTTP/1.1\r\nHost: booking-jp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlang: ja\r\nContent-Type: application/json\r\nContent-Length: 81\r\nOrigin: https://booking-jp.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking-jp.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 23 Jun 2026 23:40:46 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://booking-jp.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npragma: no-cache\r\nexpires: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate, no-cache\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44052,"size_decoded":6999,"mime_type":"application/json","magic":"JSON text data","md5":"d48a6244c0cae1414b55630a37051abe","sha1":"f7bf1c6d4049b69b1af0444b6d4e1a3f6e1b7cc2","sha256":"0d1250dabdd301bf9f8264697edeed8413ffa8f9da01d39fa5a7d10fd260ca36","sha512":"be860575549cac2e507b419757e9ba26a1cb3a52efec6ff29e4d0e51f022247e530e9af5266ecf0c0047e02218c65ba138efcb516651a95de5bf48b0772f9ea1","ssdeep":"768:ZicaBkZxW1k+EN+0XAwlEWukunlkuXEJc6vQoQnNtzQJQfQKQm:ZicaBkZxW1k+EN+oEWukulkuU+mQoQnH","tlshash":"ab13d258df185d3a09a5a9db2cfe3c86dfec9742c98085a981e8ce080375c77373725a","first_seen":"2026-06-23T23:43:14.485013Z","last_seen":"2026-06-23T23:43:14.485013Z","times_seen":1,"resource_available":false,"data":null}},"time_used":917,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":917,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"booking-jp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"booking-jp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hotel.cdn.ruanyiit.com/hotel/09ec0b426068cb5c57795e7501590631.jpg","fqdn":"hotel.cdn.ruanyiit.com","domain":"ruanyiit.com","tld":"com"},"ip":{"addr":"154.41.93.241","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking-jp.com/","date":"2026-06-23T23:42:28.218Z","timestamp":1782258148218,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hotel.cdn.ruanyiit.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2024","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Tue, 02 Jun 2026 14:00:00 GMT","end":"Mon, 31 Aug 2026 13:59:59 GMT"},"fingerprint":{"sha1":"48:1A:B4:A7:19:D1:42:49:00:3B:5C:B5:FB:23:5F:DB:05:44:BD:2D","sha256":"E6:6E:A5:A4:BD:ED:84:89:AE:95:A4:8F:B4:AF:29:41:A7:D4:A8:19:16:1B:74:60:0F:C0:A1:F7:5F:B3:D4:F7"}}},"request":{"raw":"GET /hotel/09ec0b426068cb5c57795e7501590631.jpg HTTP/1.1\r\nHost: hotel.cdn.ruanyiit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nReferer: https://booking-jp.com/\r\nSec-Fetch-Storage-Access: none\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Tue, 23 Jun 2026 23:42:43 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 40656\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 949229\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"09ec0b426068cb5c57795e7501590631.jpg\"; filename*=utf-8''09ec0b426068cb5c57795e7501590631.jpg\r\nContent-Md5: Q0vRlRJCBrJLgqxk7LaDng==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"Fm-Y5dLak2DSi5VcYOnF0a0X1Nir\"\r\nLast-Modified: Wed, 25 Feb 2026 17:25:55 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg119;QNM3\r\nX-M-Reqid: agn5uwkTn\r\nX-Qiniu-Zone: 0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: X0oAAAD5LLkJe7gY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40656,"size_decoded":41420,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 480x320, components 3","md5":"434bd195124206b24b82ac64ecb6839e","sha1":"6f98e5d2da9360d28b955c60e9c5d1ad17d4d8ab","sha256":"b4b7b88406c8144e6e0bf7d4f092c54b569facce4f328bb7d72a52aa00e04750","sha512":"a069f2bbfd0a51bf8b1283d45812877518b23cd9dbb9e3620ba209e149e305b051b5f18f83b6a330504d8c8eb6c2ff7a0e7d93f4f53ee93307daec4f7101fc67","ssdeep":"768:pYyQKQeyZ/90Ozf0d4waddlPBc7aMXr/vgie/nPFP0Fo4:p9bSF0Yf03adXPCr/de/PFP0V","tlshash":"3f03f1c75b8b6097f08ceaf818a35f39d8eaa622cc24f708d447173d574946c785b6ac","first_seen":"2026-06-23T23:43:14.486827Z","last_seen":"2026-06-23T23:44:30.679123Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19556,"timings":{"blocked":-1,"dns":915,"connect":246,"send":0,"wait":3533,"receive":529,"ssl":14332},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client.salesmartly.com/js/marked/v14.1.2/marked.min.js","fqdn":"client.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"108.156.60.16","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking-jp.com/","date":"2026-06-23T23:42:28.098Z","timestamp":1782258148098,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /js/marked/v14.1.2/marked.min.js HTTP/1.1\r\nHost: client.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ndate: Wed, 03 Jun 2026 04:42:48 GMT\r\nx-amz-replication-status: REPLICA\r\nlast-modified: Fri, 20 Sep 2024 06:38:39 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: JFBntxsrfZ64VoXBE8CHtNjr4.xFrBV4\r\ncontent-encoding: gzip\r\netag: W/\"4726c8d370952011c5137ee8e13eb6bb\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c38563a65534cacc21516bd5450b0818.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS1-P2\r\nx-amz-cf-id: gKZQVfiMn2iN7QbZ154LebTNuiV6eWG5tMEBkGj3DhfOuY1GR3ExdA==\r\nage: 1796381\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":36489,"size_decoded":11882,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (36340)","md5":"4726c8d370952011c5137ee8e13eb6bb","sha1":"96c7a41fdc5d4530bb46f1a629f86ecaf068de82","sha256":"eeaba2c06a990d4602b4142cce579f4cce16fba404e6cc82c5c2f7ccb1e7bd1f","sha512":"6d7c814f6fec623660d43ef29034ba789484e0314354f247bdb4407dd7d82abe88bacac2cfbc009929b7eafcfd1bcccca1bdb946faaef74bdfb77248ef5ca071","ssdeep":"768:aH13NvoICzvRDEeJX2QLGbdpB+xJhuLPbBc5jI0sJMF2/bOCbnEytnbBOmVzFoso:aHOXo5ECPbBc5MB2A/blnEMRoaM","tlshash":"67f2094832ae3a6987d439e66cf81060e27f8e68344c545cf664f5f37c2690a61ebf70","first_seen":"2024-09-13T03:55:13Z","last_seen":"2026-07-18T09:37:27.703702Z","times_seen":2677,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.salesmartly.com/sys/company/plugin/get-plugin-info?plugin_sign=3c062487549c260b70b3b0c6bf8b551f\u0026plugin_id=g1khdfx\u0026over_time=\u0026env=chat\u0026_=1782258148090\u0026_lt=\u0026_u=\u0026_xma_=","fqdn":"api.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://booking-jp.com/","date":"2026-06-23T23:42:28.106Z","timestamp":1782258148106,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 May 2026 10:33:25 GMT","end":"Fri, 21 Aug 2026 11:33:22 GMT"},"fingerprint":{"sha1":"66:AE:2D:94:59:D4:27:FE:72:D4:A2:2A:60:36:C1:B0:DE:5C:8A:BB","sha256":"30:37:3C:6F:90:83:7E:BF:5B:35:F1:92:2D:75:33:36:F2:C6:B6:D9:89:4A:FD:B6:CB:B6:B8:98:C7:21:FA:C0"}}},"request":{"raw":"GET /sys/company/plugin/get-plugin-info?plugin_sign=3c062487549c260b70b3b0c6bf8b551f\u0026plugin_id=g1khdfx\u0026over_time=\u0026env=chat\u0026_=1782258148090\u0026_lt=\u0026_u=\u0026_xma_= HTTP/1.1\r\nHost: api.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://booking-jp.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking-jp.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 23 Jun 2026 23:42:28 GMT\r\ncontent-type: application/json; charset=UTF-8\r\ncf-ray: a1075971ddcc8be6-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://booking-jp.com\r\nserver: cloudflare\r\nvary: accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type, Share-Access-Token, External-Token\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nx-request-id: 48de418a-261d-4038-9dd3-232133266371\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2821,"size_decoded":1818,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"391138f0458a94c2461b26a23bc26e48","sha1":"d309387db224f0f460b998e2997c8cc89a228f8c","sha256":"0fe9e3233b086c077c4a4edd95ea1daeae9c0b2bfb168d58c63cee01e3e0ab17","sha512":"079a07e855b00f9b0d56eb680d793f30f243924ded203f82c09b1ff46e06d8e3bd51d0179e616bb79e400c3323a1b1e8c0ce40ed982180394dcc7750e9b06b20","ssdeep":"","tlshash":"6451e021906f8d6765e3447472dd9d106fde5bb884c88e49edecde1a06ec8cab70640f","first_seen":"2026-06-23T23:43:14.489431Z","last_seen":"2026-06-23T23:44:30.66428Z","times_seen":2,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":8,"connect":22,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hotel.cdn.ruanyiit.com/hotel/0263895920fea8b4d6a935e2f28e2660.jpg","fqdn":"hotel.cdn.ruanyiit.com","domain":"ruanyiit.com","tld":"com"},"ip":{"addr":"154.41.93.241","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking-jp.com/","date":"2026-06-23T23:42:28.220Z","timestamp":1782258148220,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hotel.cdn.ruanyiit.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2024","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Tue, 02 Jun 2026 14:00:00 GMT","end":"Mon, 31 Aug 2026 13:59:59 GMT"},"fingerprint":{"sha1":"48:1A:B4:A7:19:D1:42:49:00:3B:5C:B5:FB:23:5F:DB:05:44:BD:2D","sha256":"E6:6E:A5:A4:BD:ED:84:89:AE:95:A4:8F:B4:AF:29:41:A7:D4:A8:19:16:1B:74:60:0F:C0:A1:F7:5F:B3:D4:F7"}}},"request":{"raw":"GET /hotel/0263895920fea8b4d6a935e2f28e2660.jpg HTTP/1.1\r\nHost: hotel.cdn.ruanyiit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nReferer: https://booking-jp.com/\r\nSec-Fetch-Storage-Access: none\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Tue, 23 Jun 2026 23:42:30 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 182352\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 949216\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"0263895920fea8b4d6a935e2f28e2660.jpg\"; filename*=utf-8''0263895920fea8b4d6a935e2f28e2660.jpg\r\nContent-Md5: 18jO/C+nGbWAAp2Mjbyiww==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FgQiIGMDH3dWF5BBUut85Mryl67L\"\r\nLast-Modified: Wed, 25 Feb 2026 13:32:21 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg119;QNM3:1\r\nX-M-Reqid: J6ak3p0Uz\r\nX-Qiniu-Zone: 0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: knIAAAAnQ9AJe7gY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":182352,"size_decoded":183119,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Picasa], baseline, precision 8, 600x800, components 3","md5":"d7c8cefc2fa719b580029d8c8dbca2c3","sha1":"04222063031f775617904152eb7ce4caf297aecb","sha256":"6cb7a73d609ec6d6d8d79ef4e1a67aedd6e277bc434dbd069a376c82ec8989c0","sha512":"809139599d37c2f17950eb94ec2ce3c931340e702f3bba7c3427b95bec1db5eef2696012ddb909d71bec2f1a2ae772ae5a7554dc79f9ee188a0a730503ddb56c","ssdeep":"3072:vQ/BTp10h6JYuWhdPiBtoY6HUVawbdqbK3b8ULQvONjBU0uuKtw/SAjTwhvG57mm:YZv0h66tPiBt760VawbIbQnQvOTXucz3","tlshash":"6004127e73910660cab109fa5ce75fe5c13eb1f987ef4018b0278aa5f2237499bb1941","first_seen":"2026-06-23T23:43:14.491054Z","last_seen":"2026-06-23T23:44:30.658453Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2908,"timings":{"blocked":-1,"dns":912,"connect":267,"send":0,"wait":358,"receive":832,"ssl":538},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking-jp.com/static/js/pages-index~pages-login-index~pages-login-profile-completion~pages-login-register~pages-login-reset-~3764d391.76cea81c.js","fqdn":"booking-jp.com","domain":"booking-jp.com","tld":"com"},"ip":{"addr":"121.127.232.46","port":443,"asn":152194,"as":"CTG Server Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking-jp.com/","date":"2026-06-23T23:42:26.541Z","timestamp":1782258146541,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booking-jp.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 13:30:03 GMT","end":"Mon, 31 Aug 2026 13:30:02 GMT"},"fingerprint":{"sha1":"09:ED:E4:79:12:3A:70:97:E1:FC:61:F4:52:0B:D7:A8:FC:7C:74:D8","sha256":"70:5F:C2:88:EA:8F:91:67:52:30:8D:96:24:AE:22:98:CA:46:C6:6F:D1:AD:1C:95:24:0F:80:84:CA:9A:6C:EE"}}},"request":{"raw":"GET /static/js/pages-index~pages-login-index~pages-login-profile-completion~pages-login-register~pages-login-reset-~3764d391.76cea81c.js HTTP/1.1\r\nHost: booking-jp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking-jp.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 23 Jun 2026 23:40:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 13 Jun 2026 06:14:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2cf558-2618\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9752,"size_decoded":3473,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9636), with no line terminators","md5":"f5e9e7d95e5f5fa66c4de92d61b370a5","sha1":"c57a9bc0e7a6082d0ffab4800feb23a596747462","sha256":"cfec0558b0a0929f7dc7ef07e5a3a1df45ec3f01f931c656e378409de289004e","sha512":"11bd85a2af39c81b55bde974654d402a24a7faf4ee20b483993e57c9e99083d27ba912aa363b81393d5b3b141c4b370d4a50e0e910a9b36581555003b915e9c7","ssdeep":"192:FwEx1sX3ATPRzqDUfaFsPj7cwS0uBvjDLm2G00Y:FjxeXw9zEUfaKPiv","tlshash":"ab12743db09cf5934ed3c934a0df514252216a4cc8956884e7b675a887bbb88133bf6f","first_seen":"2026-06-23T23:43:14.49277Z","last_seen":"2026-06-23T23:44:30.671767Z","times_seen":2,"resource_available":true,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"booking-jp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"booking-jp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking-jp.com/static/js/pages-hotellist-index~pages-index~pages-my-index~pages-orderlist-index.e0a60ad2.js","fqdn":"booking-jp.com","domain":"booking-jp.com","tld":"com"},"ip":{"addr":"121.127.232.46","port":443,"asn":152194,"as":"CTG Server Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking-jp.com/","date":"2026-06-23T23:42:26.545Z","timestamp":1782258146545,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booking-jp.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 13:30:03 GMT","end":"Mon, 31 Aug 2026 13:30:02 GMT"},"fingerprint":{"sha1":"09:ED:E4:79:12:3A:70:97:E1:FC:61:F4:52:0B:D7:A8:FC:7C:74:D8","sha256":"70:5F:C2:88:EA:8F:91:67:52:30:8D:96:24:AE:22:98:CA:46:C6:6F:D1:AD:1C:95:24:0F:80:84:CA:9A:6C:EE"}}},"request":{"raw":"GET /static/js/pages-hotellist-index~pages-index~pages-my-index~pages-orderlist-index.e0a60ad2.js HTTP/1.1\r\nHost: booking-jp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking-jp.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 23 Jun 2026 23:40:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 13 Jun 2026 06:14:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2cf555-960e\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38414,"size_decoded":10346,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (37908), with no line terminators","md5":"82d5b38fbe0144277a00a5b3934466e5","sha1":"f2796676abbe0a22554efd10108848de92fae61d","sha256":"afa41361c5685541af749bbadad6ab52db5d2ecd1d99b14561b303f76d6035ae","sha512":"557ecb4feb2bd9f44394f6b89942cb1bd70b59f0ff0ab0b05976a2b3eb3f60f96a05f614f8f969ea49c46151033e41a061e8ae796e2a8edc0bbb13bb478b3ce4","ssdeep":"768:kORs5pRfhVoW9HTH3y1MIMOfc+QtxY/TcvZvYIwvOB1qKXQFHKlEmldDtIw7+:DR+p7mFQt/h3AwK","tlshash":"6c03d81db845345a06dfa270f12f0b0d823f2e5e6101d0c8ba74fdfb99646be9156f68","first_seen":"2026-06-23T23:43:14.494511Z","last_seen":"2026-06-23T23:44:30.666607Z","times_seen":2,"resource_available":true,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"booking-jp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"booking-jp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"client.salesmartly.com/setting/sounds/ling.mp3","fqdn":"client.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"108.156.60.16","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://booking-jp.com/","date":"2026-06-23T23:42:27.006Z","timestamp":1782258147006,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /setting/sounds/ling.mp3 HTTP/1.1\r\nHost: client.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking-jp.com/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\ncontent-type: audio/mp3\r\ncontent-length: 47223\r\ndate: Wed, 03 Jun 2026 04:42:48 GMT\r\nx-amz-replication-status: REPLICA\r\nlast-modified: Tue, 02 Jul 2024 06:29:42 GMT\r\netag: \"1065fe976ff9e98d69772fe0f0d7b808\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=15552000\r\nx-amz-version-id: J6b7RzocQsVXwTzS3QxevgOr1gKTyblY\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ncontent-range: bytes 0-47222/47223\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c38563a65534cacc21516bd5450b0818.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS1-P2\r\nx-amz-cf-id: ia2kcO21jY7stL2Lb7Pf7RKAdrR_LneWlJE9OGxjAXo1Sh_cIbdeUA==\r\nage: 1796380\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":47223,"size_decoded":47882,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 192 kbps, 48 kHz, JntStereo","md5":"1065fe976ff9e98d69772fe0f0d7b808","sha1":"122193fafe8453db01635cf4502524eb93264fdc","sha256":"35fbb2ad61551e3a396591657a66b563222454418238c46005b89418556f9983","sha512":"7d0de1b98c66aaa939f56253d100f5efc36128c2b8420fc8c932f68873a643a1179411a9410125aa3ff5512f74dad1209f2e19c5a0734d4582c5b94280e242a7","ssdeep":"384:ju+iqqxhBRBJ2zjBQRB57Nsyf+/C6ufaPkm5NyxGo5Vtll9rFd1ft7FDehm:junhJdlac","tlshash":"00239434b6a108d0e14eaaffb0deb2121e771ec3cd56a84075ef78044fb1179255b8b6","first_seen":"2023-04-19T11:38:49Z","last_seen":"2026-07-18T09:37:27.683388Z","times_seen":3188,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":0,"dns":18,"connect":20,"send":0,"wait":24,"receive":18,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget/code/js/chunk-common.923779f6.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.27","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking-jp.com/","date":"2026-06-23T23:42:27.018Z","timestamp":1782258147018,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget/code/js/chunk-common.923779f6.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Tue, 23 Jun 2026 10:07:23 GMT\r\nx-oss-server-time: 8\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6A3A5ADBAA0DCC3937E0890B\r\nlast-modified: Wed, 06 May 2026 03:49:02 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12681956637835031194\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: f6SDc+aJcj7lGyyywXbWGQ==\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 75d52516d2e9126ccb2b4cf8db62c446.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: 6gG8JM-EeOR5DXFQvbxUhbr_OUtfbihIifnJGjDh_0jr0iai9xxTMw==\r\nage: 48904\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":27007,"size_decoded":10160,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (26864), with no line terminators","md5":"7fa48373e689723ee51b2cb2c176d619","sha1":"fdea5e7eebe313c9898dacbfff19c6bf6530f319","sha256":"35bc14c3367afb14beb47478f52369784df0b2120b6729118116465b35ac586d","sha512":"94e6c42a0d414073fa618f633807ca8ea55d7e450efcdffc7beded1e3739b8124c5850d98946a991e5925f325c2a4cc21b7e85042a6a112f48a4053f7cd929e4","ssdeep":"384:kF9kWEuK2U72UecAvTbDPnPuTc2YejErqSqcDRVE10DTaR5HJrCiKMcJHI7jW:q9mZ72UecAvrPuSqSpEBIMoyW","tlshash":"dbc222ccf2d7f0650b9a38a481bf110ae23e7d99b44e9196d261e0c17c3455da273f9b","first_seen":"2026-05-06T06:21:51.04932Z","last_seen":"2026-07-18T04:13:55.318516Z","times_seen":440,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget/code/js/chunk-vendors.6ef765fa.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.27","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking-jp.com/","date":"2026-06-23T23:42:27.020Z","timestamp":1782258147020,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget/code/js/chunk-vendors.6ef765fa.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Tue, 23 Jun 2026 10:07:23 GMT\r\nx-oss-server-time: 6\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6A3A5ADBFEEE6A343615982A\r\nlast-modified: Wed, 06 May 2026 03:49:02 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16184782789754269720\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: jniEYbqRWty/z6mxDDXyZQ==\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 75d52516d2e9126ccb2b4cf8db62c446.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: RM_8MQnks7q09gABx9V-MUJoiGjptSfjBr0CeMsgsXN0AAqpEWsvfg==\r\nage: 48904\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":214670,"size_decoded":77136,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65531), with no line terminators","md5":"8e788461ba915adcbfcfa9b10c35f265","sha1":"bc3841eff0c3841cfdef9a2f1e1b5f1d0dd6c26e","sha256":"69ced1151fb1b32d26c8b70739681828a1d99333c4a08114c98cd8af90b3f2ca","sha512":"b20ea5f22352ee329e6982d0fbd14fa2f4607a186b2d2973a99e43975164b2c6142b8ce87f7d5f54f47cb41bd6a33329ec3d09fafcb971de6e316ce5c0c8cfe0","ssdeep":"3072:gZcGj+j4Cm4m5BJ1IWqq/1cuC+4DdC58+skrMJz+8:gG27J1Wycu+4ikrMB","tlshash":"1424f7cdbb92f06843a335a4806f150bf17b6a18f40e81d4e6a6d5d1ac78a8e5137f3d","first_seen":"2025-12-10T08:58:23.267899Z","last_seen":"2026-07-18T04:13:55.348748Z","times_seen":1352,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking-jp.com/api/app/home","fqdn":"booking-jp.com","domain":"booking-jp.com","tld":"com"},"ip":{"addr":"121.127.232.46","port":443,"asn":152194,"as":"CTG Server Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://booking-jp.com/","date":"2026-06-23T23:42:27.325Z","timestamp":1782258147325,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booking-jp.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 13:30:03 GMT","end":"Mon, 31 Aug 2026 13:30:02 GMT"},"fingerprint":{"sha1":"09:ED:E4:79:12:3A:70:97:E1:FC:61:F4:52:0B:D7:A8:FC:7C:74:D8","sha256":"70:5F:C2:88:EA:8F:91:67:52:30:8D:96:24:AE:22:98:CA:46:C6:6F:D1:AD:1C:95:24:0F:80:84:CA:9A:6C:EE"}}},"request":{"raw":"POST /api/app/home HTTP/1.1\r\nHost: booking-jp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlang: ja\r\nContent-Type: application/json\r\nContent-Length: 81\r\nOrigin: https://booking-jp.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking-jp.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 23 Jun 2026 23:40:46 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://booking-jp.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npragma: no-cache\r\nexpires: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate, no-cache\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44052,"size_decoded":6999,"mime_type":"application/json","magic":"JSON text data","md5":"d48a6244c0cae1414b55630a37051abe","sha1":"f7bf1c6d4049b69b1af0444b6d4e1a3f6e1b7cc2","sha256":"0d1250dabdd301bf9f8264697edeed8413ffa8f9da01d39fa5a7d10fd260ca36","sha512":"be860575549cac2e507b419757e9ba26a1cb3a52efec6ff29e4d0e51f022247e530e9af5266ecf0c0047e02218c65ba138efcb516651a95de5bf48b0772f9ea1","ssdeep":"768:ZicaBkZxW1k+EN+0XAwlEWukunlkuXEJc6vQoQnNtzQJQfQKQm:ZicaBkZxW1k+EN+oEWukulkuU+mQoQnH","tlshash":"ab13d258df185d3a09a5a9db2cfe3c86dfec9742c98085a981e8ce080375c77373725a","first_seen":"2026-06-23T23:43:14.485013Z","last_seen":"2026-06-23T23:43:14.485013Z","times_seen":1,"resource_available":false,"data":null}},"time_used":811,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":811,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"booking-jp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"booking-jp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking-jp.com/static/images/index/icon_date.png","fqdn":"booking-jp.com","domain":"booking-jp.com","tld":"com"},"ip":{"addr":"121.127.232.46","port":443,"asn":152194,"as":"CTG Server Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking-jp.com/","date":"2026-06-23T23:42:27.751Z","timestamp":1782258147751,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booking-jp.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 13:30:03 GMT","end":"Mon, 31 Aug 2026 13:30:02 GMT"},"fingerprint":{"sha1":"09:ED:E4:79:12:3A:70:97:E1:FC:61:F4:52:0B:D7:A8:FC:7C:74:D8","sha256":"70:5F:C2:88:EA:8F:91:67:52:30:8D:96:24:AE:22:98:CA:46:C6:6F:D1:AD:1C:95:24:0F:80:84:CA:9A:6C:EE"}}},"request":{"raw":"GET /static/images/index/icon_date.png HTTP/1.1\r\nHost: booking-jp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking-jp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 23 Jun 2026 23:40:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 425\r\nlast-modified: Sat, 13 Jun 2026 06:15:03 GMT\r\netag: \"6a2cf567-1a9\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":425,"size_decoded":861,"mime_type":"image/png","magic":"PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced","md5":"e1d8472cf1ae9921b425a799c0397e35","sha1":"7112357bb6793cd6b989f7a34ddfd32c349e0f0b","sha256":"f225caa2778db8c31e4f8a7f89842deccb6814d4fe0116fa6fef9b55470c5fa4","sha512":"ab139f4e3f2c438d87ce37c707de055ffd4374c0df9ebbd6e96a873bae3d9f9412c855c7cdb6907169803920344946bc868d8b5ac2b91bc6d777807c5ee4cb22","ssdeep":"","tlshash":"dee02be63a38a029b3182b24020a2225be48a908202020ee3034c473a042cc93e892ce","first_seen":"2026-06-23T23:43:14.498587Z","last_seen":"2026-06-23T23:44:30.709257Z","times_seen":2,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":358,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"booking-jp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"booking-jp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mescroll.com/img/mescroll-totop.png","fqdn":"www.mescroll.com","domain":"mescroll.com","tld":"com"},"ip":{"addr":"185.199.108.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking-jp.com/","date":"2026-06-23T23:42:27.752Z","timestamp":1782258147752,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mescroll.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Jun 2026 06:33:59 GMT","end":"Mon, 14 Sep 2026 06:33:58 GMT"},"fingerprint":{"sha1":"B5:15:25:E3:C9:0F:A3:01:40:29:7D:76:74:1F:10:F0:1C:E9:4B:F8","sha256":"C5:BD:48:63:7C:D3:8A:72:C2:28:69:82:41:05:BE:03:18:84:B0:E3:15:6E:AE:02:2D:3A:A6:E9:B8:EA:12:4F"}}},"request":{"raw":"GET /img/mescroll-totop.png HTTP/1.1\r\nHost: www.mescroll.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking-jp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: GitHub.com\r\ncontent-type: image/png\r\nx-origin-cache: HIT\r\nlast-modified: Mon, 30 Dec 2024 01:21:49 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"6771f5ad-120\"\r\nexpires: Wed, 10 Jun 2026 22:25:21 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: 9F7C:225D9E:2A3E5:2E950:6A29E1F6\r\naccept-ranges: bytes\r\ndate: Tue, 23 Jun 2026 23:42:28 GMT\r\nvia: 1.1 varnish\r\nage: 564\r\nx-served-by: cache-bma-essb1270077-BMA\r\nx-cache: HIT\r\nx-cache-hits: 25203\r\nx-timer: S1782258148.344054,VS0,VE0\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 3a792fc05a96b4d5da0ef0927e978a80c5ced125\r\ncontent-length: 288\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":288,"size_decoded":984,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 4-bit colormap, non-interlaced","md5":"a1ac5449856aa3281f069562d729b2be","sha1":"dc2e2aa01e05ea3ea6a23c2b15fdd4e066a5d39c","sha256":"8ca7928d883d9e850cbd3cd6d83129cfc8a8589f2d26ee3f7ed9b7473c6723b5","sha512":"01beec0c204536c4e2c960943086bca14bc3533f7cca819d1d89af44d8404b0e79d721144274726c9074cdaa22418b1f19b3b2eb8ac86571d4b4034e2f958562","ssdeep":"","tlshash":"1dd0ebfae03f1e3fe1820aa9dab20403dd0bb000938c03ac21a0c93d590020cf8e93c3","first_seen":"2023-05-01T21:53:31Z","last_seen":"2026-07-14T21:59:45.682889Z","times_seen":84,"resource_available":false,"data":null}},"time_used":597,"timings":{"blocked":-1,"dns":559,"connect":9,"send":0,"wait":10,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"srz.salesmartly.com/client/station/log?plugin_sign=cb387092e00d8af2de4c8e0ac041c722\u0026plugin_id=g1khdfx\u0026over_time=\u0026env=chat\u0026_=1782258149183\u0026_lt=3279059c7c506f0829f493f846c9dfd4\u0026_u=\u0026_xma_=656442","fqdn":"srz.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://booking-jp.com/","date":"2026-06-23T23:42:29.186Z","timestamp":1782258149186,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"srz.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 14 May 2026 15:19:30 GMT","end":"Wed, 12 Aug 2026 16:19:28 GMT"},"fingerprint":{"sha1":"63:EF:4F:67:AD:CD:95:CB:E8:09:7F:C4:F5:F2:CE:1A:FC:7D:96:20","sha256":"25:6B:45:E3:03:83:AB:E5:28:74:CC:AD:25:1A:0F:61:07:BF:77:5C:3A:22:80:6E:D8:91:5F:33:89:44:B5:02"}}},"request":{"raw":"POST /client/station/log?plugin_sign=cb387092e00d8af2de4c8e0ac041c722\u0026plugin_id=g1khdfx\u0026over_time=\u0026env=chat\u0026_=1782258149183\u0026_lt=3279059c7c506f0829f493f846c9dfd4\u0026_u=\u0026_xma_=656442 HTTP/1.1\r\nHost: srz.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 463\r\nOrigin: https://booking-jp.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking-jp.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 23 Jun 2026 23:42:29 GMT\r\ncontent-type: application/json; charset=UTF-8\r\npriority: u=3,i=?0\r\nset-cookie: ss_uid=36725c982ebf06126d6e09303c2bbcc8; expires=Wed, 23-Jun-2027 23:42:29 GMT; Max-Age=31535999; path=/; domain=salesmartly.com; HttpOnly; SameSite=None; Secure\r\naccess-control-allow-origin: https://booking-jp.com\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a10759786e2a56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87,"size_decoded":815,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"c66fdc6dbeb9f1d59314f973f2775265","sha1":"b27662a9078eebb71932274370fc7ce019fe5c67","sha256":"528789424e83ab76839f2f5baa939de2f4d44a78cf2b5cdb452a125c0671f8f6","sha512":"07addca80d5734419204e9da1cfdee56cb484cc15a9c74de057366f979b312bebb3eacf7cc653d4ee5c896a603c71a916d54b91e9a453b423c28354eedac8404","ssdeep":"","tlshash":"aab012335514020b1d40014e44002a25819400504f180f09c85c911c83088447282590","first_seen":"2026-06-23T23:43:14.501028Z","last_seen":"2026-06-23T23:43:14.501028Z","times_seen":1,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking-jp.com/static/js/pages-common-textview-privacy~pages-hotellist-index~pages-index~pages-login-register.1366551f.js","fqdn":"booking-jp.com","domain":"booking-jp.com","tld":"com"},"ip":{"addr":"121.127.232.46","port":443,"asn":152194,"as":"CTG Server Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking-jp.com/","date":"2026-06-23T23:42:26.547Z","timestamp":1782258146547,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booking-jp.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 13:30:03 GMT","end":"Mon, 31 Aug 2026 13:30:02 GMT"},"fingerprint":{"sha1":"09:ED:E4:79:12:3A:70:97:E1:FC:61:F4:52:0B:D7:A8:FC:7C:74:D8","sha256":"70:5F:C2:88:EA:8F:91:67:52:30:8D:96:24:AE:22:98:CA:46:C6:6F:D1:AD:1C:95:24:0F:80:84:CA:9A:6C:EE"}}},"request":{"raw":"GET /static/js/pages-common-textview-privacy~pages-hotellist-index~pages-index~pages-login-register.1366551f.js HTTP/1.1\r\nHost: booking-jp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking-jp.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 23 Jun 2026 23:40:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 13 Jun 2026 06:14:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2cf553-4a75\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19061,"size_decoded":4319,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (18623), with no line terminators","md5":"e466f8a83053a5011090c5d6d4ad70eb","sha1":"52f88ca87f5e52a06876ee9c461925cd0a7734ed","sha256":"3b4b1aa48c2e09e6e5d95fa0f39e73d489f5273b2499fb16f7ce13c6505fded2","sha512":"99f81e3bd687fe01851827cda6164b7404d64c436aa33f84272e81923f0c5fad4d308ec30cf7447d530bf194ac4a20c633bab95299c7f3cfee18ae638cca128a","ssdeep":"192:Hw85HPS12GeMXIakt5kjBOmVd9ITEYx2wqxc+gbkx/4L:Hh561oMYaktQBOmVd9IThxxqxAvL","tlshash":"24825bc9ec8c06e43bb7e38fd65b791b7a887f95c0e128249d63428e09e973155e472c","first_seen":"2026-06-23T23:43:14.502623Z","last_seen":"2026-06-23T23:44:30.657376Z","times_seen":2,"resource_available":true,"data":null}},"time_used":310,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":310,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"booking-jp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"booking-jp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.salesmartly.com/chat/msg-user/create-user?plugin_sign=5bf2219f756af8b6747e8399442c14db\u0026plugin_id=g1khdfx\u0026over_time=\u0026env=chat\u0026_=1782258148423\u0026_lt=\u0026_u=\u0026_xma_=656442","fqdn":"api.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://booking-jp.com/","date":"2026-06-23T23:42:28.427Z","timestamp":1782258148427,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 May 2026 10:33:25 GMT","end":"Fri, 21 Aug 2026 11:33:22 GMT"},"fingerprint":{"sha1":"66:AE:2D:94:59:D4:27:FE:72:D4:A2:2A:60:36:C1:B0:DE:5C:8A:BB","sha256":"30:37:3C:6F:90:83:7E:BF:5B:35:F1:92:2D:75:33:36:F2:C6:B6:D9:89:4A:FD:B6:CB:B6:B8:98:C7:21:FA:C0"}}},"request":{"raw":"POST /chat/msg-user/create-user?plugin_sign=5bf2219f756af8b6747e8399442c14db\u0026plugin_id=g1khdfx\u0026over_time=\u0026env=chat\u0026_=1782258148423\u0026_lt=\u0026_u=\u0026_xma_=656442 HTTP/1.1\r\nHost: api.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 373\r\nOrigin: https://booking-jp.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking-jp.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 23 Jun 2026 23:42:28 GMT\r\ncontent-type: application/json; charset=UTF-8\r\ncf-ray: a1075973a8dd8be6-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://booking-jp.com\r\nserver: cloudflare\r\nvary: accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type, Share-Access-Token, External-Token\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nx-request-id: e0b52856-b61b-4b41-9cae-17bf6812f734\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":157,"size_decoded":795,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"b86548bccc28800f3255ea3c54101b98","sha1":"39cb38f0d34a28917666a96b52b1cefa18625e35","sha256":"de7f9199d3300815c34fd410b335affed49a234acf0df4239440ed043bcb39d8","sha512":"8fc107fbc70ed648e8aeb13f9065c92f79a63d9548be3e98ae7799bc63cca2b1372738f9f15aa89c2775532d131fbcf6d01260ffa6d213753def4741daa244e4","ssdeep":"","tlshash":"6ec08c13654a26eb09c90a5e4002aa42e15f15362e3a6faa58fc022806ac1d972e2821","first_seen":"2026-06-23T23:43:14.504311Z","last_seen":"2026-06-23T23:43:14.504311Z","times_seen":1,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking-jp.com/","fqdn":"booking-jp.com","domain":"booking-jp.com","tld":"com"},"ip":{"addr":"121.127.232.46","port":443,"asn":152194,"as":"CTG Server Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-23T23:42:22.402Z","timestamp":1782258142402,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booking-jp.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 13:30:03 GMT","end":"Mon, 31 Aug 2026 13:30:02 GMT"},"fingerprint":{"sha1":"09:ED:E4:79:12:3A:70:97:E1:FC:61:F4:52:0B:D7:A8:FC:7C:74:D8","sha256":"70:5F:C2:88:EA:8F:91:67:52:30:8D:96:24:AE:22:98:CA:46:C6:6F:D1:AD:1C:95:24:0F:80:84:CA:9A:6C:EE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: booking-jp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 23 Jun 2026 23:40:42 GMT\r\ncontent-type: text/html\r\ncontent-length: 782\r\nlast-modified: Sat, 13 Jun 2026 06:15:42 GMT\r\netag: \"6a2cf58e-30e\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":782,"size_decoded":1218,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (503)","md5":"f5f3168c209bcb28dbb1cd8c87df1617","sha1":"8371b20afcafb0244c519f0b5b017867b997febd","sha256":"d4f32604319bc397385278c7dffcd7dc4ae93108333a1ddd04aa58ebcae7a3b2","sha512":"a2de2a08e54e3775dba3fcce14c9e0447fd0e05303f1c7dece6a8130bce3893df0b57c7a718a5c2586cfbe8a21c692b378436f08483c300f4437ba7e7807ff4a","ssdeep":"","tlshash":"8801f1c31c51e44d0710855574bae51e8a6649f5ad90dd507cdc6aec8bd078dce6f810","first_seen":"2026-06-23T23:43:14.505917Z","last_seen":"2026-06-23T23:44:30.676802Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1608,"timings":{"blocked":-1,"dns":535,"connect":265,"send":0,"wait":267,"receive":2,"ssl":539},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"booking-jp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"booking-jp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking-jp.com/favicon.ico","fqdn":"booking-jp.com","domain":"booking-jp.com","tld":"com"},"ip":{"addr":"121.127.232.46","port":443,"asn":152194,"as":"CTG Server Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking-jp.com/","date":"2026-06-23T23:42:26.959Z","timestamp":1782258146959,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booking-jp.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 13:30:03 GMT","end":"Mon, 31 Aug 2026 13:30:02 GMT"},"fingerprint":{"sha1":"09:ED:E4:79:12:3A:70:97:E1:FC:61:F4:52:0B:D7:A8:FC:7C:74:D8","sha256":"70:5F:C2:88:EA:8F:91:67:52:30:8D:96:24:AE:22:98:CA:46:C6:6F:D1:AD:1C:95:24:0F:80:84:CA:9A:6C:EE"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: booking-jp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking-jp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Tue, 23 Jun 2026 23:40:45 GMT\r\ncontent-type: text/html\r\ncontent-length: 138\r\netag: \"699ff045-8a\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":138,"size_decoded":292,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7389d931c86b3d7bb6b8af46d8c4172b","sha1":"8d2a4760aa0b47984d11cd1a66448719177fb791","sha256":"301bd9f16f94feedfae7a946a14bac38cb73c43efe6117bc5586835af03d7d6f","sha512":"dd6d1511e4fcd5bc09d821ffe091fb5946ac9654c48664aed504e479e9ac20c1cad44b6df90f42190d47e28f5f96bfb09d24056df6b950243d68ee8100a9a889","ssdeep":"","tlshash":"d9c09b5d755366449913155167c33641d196837f689a84510941c593f0cf69ac4c73a9","first_seen":"2023-03-13T12:56:15Z","last_seen":"2026-07-18T09:40:15.704245Z","times_seen":312878,"resource_available":true,"data":null}},"time_used":266,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"booking-jp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"booking-jp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"srz.salesmartly.com/client/log/log?plugin_sign=dce136ab58ae4c7d4311517fae02bd4e\u0026plugin_id=g1khdfx\u0026over_time=\u0026env=chat\u0026_=1782258148101\u0026_lt=\u0026_u=\u0026_xma_=","fqdn":"srz.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://booking-jp.com/","date":"2026-06-23T23:42:28.112Z","timestamp":1782258148112,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"srz.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 14 May 2026 15:19:30 GMT","end":"Wed, 12 Aug 2026 16:19:28 GMT"},"fingerprint":{"sha1":"63:EF:4F:67:AD:CD:95:CB:E8:09:7F:C4:F5:F2:CE:1A:FC:7D:96:20","sha256":"25:6B:45:E3:03:83:AB:E5:28:74:CC:AD:25:1A:0F:61:07:BF:77:5C:3A:22:80:6E:D8:91:5F:33:89:44:B5:02"}}},"request":{"raw":"POST /client/log/log?plugin_sign=dce136ab58ae4c7d4311517fae02bd4e\u0026plugin_id=g1khdfx\u0026over_time=\u0026env=chat\u0026_=1782258148101\u0026_lt=\u0026_u=\u0026_xma_= HTTP/1.1\r\nHost: srz.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 600\r\nOrigin: https://booking-jp.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking-jp.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 23 Jun 2026 23:42:28 GMT\r\ncontent-type: application/json; charset=UTF-8\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: https://booking-jp.com\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a10759720c2456c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":610,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"77e652f404f47086bb49598b43b92d9a","sha1":"9b4981aa40e98879d7f2efda3261e0f0c76a0d78","sha256":"052a4866127cab399192f6179141e92ce42742a7c09ccf7a0ffba2f0583869b5","sha512":"70e55dcdfca4754735386a3074c028d1047fce9b9d946cc84c2ea59d57799ffdc8071abc4c62142e2a1c319a948ad71eb696e0892bcaf1ce41f4616026a6bb63","ssdeep":"","tlshash":"bf900433341cc3470d05504f50053715d0f410500f104751ccfc0314430c4d57143410","first_seen":"2023-08-03T19:40:41Z","last_seen":"2026-07-18T09:37:27.687331Z","times_seen":2563,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":48,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hotel.cdn.ruanyiit.com/hotel/cab729fdc2b71d0f033cd24385420f7b.jpg","fqdn":"hotel.cdn.ruanyiit.com","domain":"ruanyiit.com","tld":"com"},"ip":{"addr":"154.41.93.241","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking-jp.com/","date":"2026-06-23T23:42:28.211Z","timestamp":1782258148211,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hotel.cdn.ruanyiit.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2024","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Tue, 02 Jun 2026 14:00:00 GMT","end":"Mon, 31 Aug 2026 13:59:59 GMT"},"fingerprint":{"sha1":"48:1A:B4:A7:19:D1:42:49:00:3B:5C:B5:FB:23:5F:DB:05:44:BD:2D","sha256":"E6:6E:A5:A4:BD:ED:84:89:AE:95:A4:8F:B4:AF:29:41:A7:D4:A8:19:16:1B:74:60:0F:C0:A1:F7:5F:B3:D4:F7"}}},"request":{"raw":"GET /hotel/cab729fdc2b71d0f033cd24385420f7b.jpg HTTP/1.1\r\nHost: hotel.cdn.ruanyiit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nReferer: https://booking-jp.com/\r\nSec-Fetch-Storage-Access: none\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Tue, 23 Jun 2026 23:42:43 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 127338\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 949229\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"cab729fdc2b71d0f033cd24385420f7b.jpg\"; filename*=utf-8''cab729fdc2b71d0f033cd24385420f7b.jpg\r\nContent-Md5: Bkf699VKFs/V7Fuhmjdpzw==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FqsCW-DUseDuFZxJnCAr2oM36yQf\"\r\nLast-Modified: Wed, 25 Feb 2026 13:34:54 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg121;QNM3\r\nX-M-Reqid: ITvxL22jO\r\nX-Qiniu-Zone: 0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: EAcAAAAEALYJe7gY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-18T09:43:23.238949Z","times_seen":17334766,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msg.salesmartly.com/chat/chat-auto/user/trigger?login_token=3279059c7c506f0829f493f846c9dfd4\u0026chat_user_id=03b2ccbcc6fc9e7642d6c144b4037350\u0026plugin_sign=6a09294cfad91aadb48bdfcbed47b1f4\u0026plugin_id=g1khdfx\u0026over_time=\u0026env=chat\u0026_=1782258148680\u0026_lt=3279059c7c506f0829f493f846c9dfd4\u0026_u=\u0026_xma_=656442","fqdn":"msg.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://booking-jp.com/","date":"2026-06-23T23:42:28.689Z","timestamp":1782258148689,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 May 2026 04:11:02 GMT","end":"Mon, 17 Aug 2026 05:11:01 GMT"},"fingerprint":{"sha1":"BE:DA:3A:E3:5E:0A:DB:E3:90:79:47:8A:52:F8:40:16:E7:F0:B3:5B","sha256":"2E:4A:21:E0:76:66:96:FA:95:36:C0:F9:E9:87:40:A1:68:C4:58:F8:2E:5B:E7:0B:61:5F:37:AE:7E:A9:84:08"}}},"request":{"raw":"POST /chat/chat-auto/user/trigger?login_token=3279059c7c506f0829f493f846c9dfd4\u0026chat_user_id=03b2ccbcc6fc9e7642d6c144b4037350\u0026plugin_sign=6a09294cfad91aadb48bdfcbed47b1f4\u0026plugin_id=g1khdfx\u0026over_time=\u0026env=chat\u0026_=1782258148680\u0026_lt=3279059c7c506f0829f493f846c9dfd4\u0026_u=\u0026_xma_=656442 HTTP/1.1\r\nHost: msg.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 13\r\nOrigin: https://booking-jp.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking-jp.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 23 Jun 2026 23:42:28 GMT\r\ncontent-type: application/json\r\ncf-ray: a10759757b2f4e4c-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://booking-jp.com\r\nserver: cloudflare\r\nvary: accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT, Keep-Alive, User-Agent, Cache-Control, Content-Type, Authorization, Origin, Cpl, Client-Type, X-Requested-With, Accept, External-Sign\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nx-request-id: edd93518-11ff-43f6-9b7a-ab5051c6f22f\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36,"size_decoded":716,"mime_type":"application/json","magic":"JSON text data","md5":"6b210154a96c28a41ffbe341a228c02a","sha1":"2e5751bde9f2323a79989d165f22ba111624ab76","sha256":"57109c9877bb6690c6284c7b2b98088071ee4762449b6b5659dd908bf9d703e3","sha512":"16fc9ff07ff4e167be6b24dad448fe7479cb1e5b50d5e7f251c84852e4c67d8caff68a1eae5be69b8f4561d97bc6d41be026597033718181025b3a97c7e292fe","ssdeep":"","tlshash":"89800023282c2c830e0238cc880e8b8820e820808e200330cc8ca228cb080a8ba82830","first_seen":"2023-06-30T01:11:08Z","last_seen":"2026-07-18T09:37:27.697809Z","times_seen":2141,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":0,"dns":10,"connect":13,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking-jp.com/static/images/tabbar/my_0.png","fqdn":"booking-jp.com","domain":"booking-jp.com","tld":"com"},"ip":{"addr":"121.127.232.46","port":443,"asn":152194,"as":"CTG Server Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking-jp.com/","date":"2026-06-23T23:42:26.561Z","timestamp":1782258146561,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booking-jp.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 13:30:03 GMT","end":"Mon, 31 Aug 2026 13:30:02 GMT"},"fingerprint":{"sha1":"09:ED:E4:79:12:3A:70:97:E1:FC:61:F4:52:0B:D7:A8:FC:7C:74:D8","sha256":"70:5F:C2:88:EA:8F:91:67:52:30:8D:96:24:AE:22:98:CA:46:C6:6F:D1:AD:1C:95:24:0F:80:84:CA:9A:6C:EE"}}},"request":{"raw":"GET /static/images/tabbar/my_0.png HTTP/1.1\r\nHost: booking-jp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking-jp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 23 Jun 2026 23:40:44 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 13 Jun 2026 06:15:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2cf578-618\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1560,"size_decoded":2030,"mime_type":"image/png","magic":"PNG image data, 38 x 38, 8-bit/color RGBA, non-interlaced","md5":"dd83b344cfce6015320aefdcccbd640e","sha1":"28274fbdd722e286c1139172f5af8aac07014c30","sha256":"f636ed682f2d6546124339421baf1be308ea7649a8ccad515d8c0470c055088e","sha512":"c9aecf35c308a6163c457be0aa8bf87f12c0388e9bcd80e7543e4dda02a5f1cdb82a337b23735891152f594cf2afe5678a577d3a316fe7b5b7bf63a25c4abb7b","ssdeep":"","tlshash":"08310a37997050a742473d114339a7218e54676c0412d00faea93796ada37fe8d78ec1","first_seen":"2026-06-23T23:43:14.510328Z","last_seen":"2026-06-23T23:44:30.663411Z","times_seen":2,"resource_available":false,"data":null}},"time_used":389,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":389,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"booking-jp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"booking-jp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking-jp.com/static/js/pages-index.d868273b.js","fqdn":"booking-jp.com","domain":"booking-jp.com","tld":"com"},"ip":{"addr":"121.127.232.46","port":443,"asn":152194,"as":"CTG Server Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking-jp.com/","date":"2026-06-23T23:42:26.549Z","timestamp":1782258146549,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booking-jp.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 13:30:03 GMT","end":"Mon, 31 Aug 2026 13:30:02 GMT"},"fingerprint":{"sha1":"09:ED:E4:79:12:3A:70:97:E1:FC:61:F4:52:0B:D7:A8:FC:7C:74:D8","sha256":"70:5F:C2:88:EA:8F:91:67:52:30:8D:96:24:AE:22:98:CA:46:C6:6F:D1:AD:1C:95:24:0F:80:84:CA:9A:6C:EE"}}},"request":{"raw":"GET /static/js/pages-index.d868273b.js HTTP/1.1\r\nHost: booking-jp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking-jp.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 23 Jun 2026 23:40:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 13 Jun 2026 06:14:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2cf558-1ac0c\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":109580,"size_decoded":24482,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64730), with no line terminators","md5":"83e1f3e11f301345f11a82d8892bbc3a","sha1":"c5107c2da1151de1d3cc922044d858d9196fcc12","sha256":"f3be1331c581b82aab0f95d7af19a65e3c06794a2d55e8409c7672a7350d7905","sha512":"0bb5fedf27b38c30605f345f25113bb177e9e8bd7d10fd7f07aa8653b4e3936c61967099cee348e91e404b860ae1d2adc3721d773e2521b94e88b88e38b980c2","ssdeep":"3072:Rpk/NPx+br3mZicwnT2g2lEiKCpDEoOk5:Rpk/NQmZicwnT2g2lEiKCpDEoOk5","tlshash":"2eb3e91d7489b8374ea35030101f174693360e7998967c0cbb7aa7c59ebd98e11afbf8","first_seen":"2026-06-23T23:43:14.511834Z","last_seen":"2026-06-23T23:44:30.672363Z","times_seen":2,"resource_available":true,"data":null}},"time_used":395,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":395,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"booking-jp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"booking-jp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking-jp.com/static/images/index/bg.png","fqdn":"booking-jp.com","domain":"booking-jp.com","tld":"com"},"ip":{"addr":"121.127.232.46","port":443,"asn":152194,"as":"CTG Server Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking-jp.com/","date":"2026-06-23T23:42:27.745Z","timestamp":1782258147745,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booking-jp.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 13:30:03 GMT","end":"Mon, 31 Aug 2026 13:30:02 GMT"},"fingerprint":{"sha1":"09:ED:E4:79:12:3A:70:97:E1:FC:61:F4:52:0B:D7:A8:FC:7C:74:D8","sha256":"70:5F:C2:88:EA:8F:91:67:52:30:8D:96:24:AE:22:98:CA:46:C6:6F:D1:AD:1C:95:24:0F:80:84:CA:9A:6C:EE"}}},"request":{"raw":"GET /static/images/index/bg.png HTTP/1.1\r\nHost: booking-jp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking-jp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 23 Jun 2026 23:40:46 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 13 Jun 2026 06:15:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2cf565-3174e\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":202574,"size_decoded":201361,"mime_type":"image/png","magic":"PNG image data, 390 x 277, 8-bit/color RGBA, non-interlaced","md5":"2b9a8a750418d54e1123ec20b5a18805","sha1":"f99e3914e0928b10544a40892672d83fd8d83171","sha256":"6809cbb1b299d2415850f8ff64ac9f9850114898d7a1ac62e71a2b1533e9363e","sha512":"7c16706fb78a61107ca0cf5d067ffaa686c625e165da56edb051a1b42c510f3d9fd386166235e0fd1cb492bf6466988bbe2473963e0d3e4d6e4799b218228d23","ssdeep":"3072:V7ZTkSFDRcsga+r1ZtFTTb+lza6ajPu1iJcqV9ervt0ZR3uAkkz6LkPnt6:3t8aQ1ZzbIhajPuoGqVgqZR3ukmqc","tlshash":"ac142307d1326bf6df17226ea49189ff43e54b1073154f26a2b982e023297e59374fd8","first_seen":"2026-06-23T23:43:14.51351Z","last_seen":"2026-06-23T23:44:30.668282Z","times_seen":2,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"booking-jp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"booking-jp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/js/code_project_plugin_g1khdfx.js?t=1782258146687","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.27","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking-jp.com/","date":"2026-06-23T23:42:26.689Z","timestamp":1782258146689,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /js/code_project_plugin_g1khdfx.js?t=1782258146687 HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking-jp.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncontent-type: application/xml\r\ncontent-length: 394\r\nserver: AliyunOSS\r\ndate: Tue, 23 Jun 2026 23:42:26 GMT\r\nx-oss-ec: 0026-00000001\r\nx-oss-request-id: 6A3B19E28E4DB93134FBEEDB\r\nx-oss-server-time: 1\r\nx-cache: Error from cloudfront\r\nvia: 1.1 75d52516d2e9126ccb2b4cf8db62c446.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: okgK6TbyoC51JlcQE6eeUqtkIr4QHXEKqFUADju9Sl05WvJFZZ5shg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-18T09:43:23.238949Z","times_seen":17334766,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget/code/plugin-install.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.27","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking-jp.com/","date":"2026-06-23T23:42:26.925Z","timestamp":1782258146925,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget/code/plugin-install.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking-jp.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Tue, 23 Jun 2026 10:07:23 GMT\r\nx-oss-server-time: 2\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6A3A5ADBCA1C6332373BE889\r\nlast-modified: Wed, 06 May 2026 03:49:02 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 6723015326894798230\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: V7ZORaUGAD4s3+irWrea8A==\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 75d52516d2e9126ccb2b4cf8db62c446.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: QejfikLSkkbaXU3t-oSaeJNgUJULKqvVAD7xhUmOwwH3r06PlPCzIw==\r\nage: 48903\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":20819,"size_decoded":7549,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20819), with no line terminators","md5":"57b64e45a506003e2cdfe8ab5ab79af0","sha1":"3cbc00ba71e00abb435f74a43b07b47e7ed94828","sha256":"dd053d736f0affeb5b6e511470cd6eb8d940866089a2e23e29b60f26fa389ce8","sha512":"89f6959d8bcba3d4f0da62a42bd57e1467f75dcc7936774f9676dfde001cfddd7bc11d4b675255592fca91c2a72079ffe7e03cbfd6a538ebeba919da903787a6","ssdeep":"384:GPyg/NXbASoSALbGf4NwNiB0W9jyyxRyL1hKGadeBTKSwQU:2yg/ia4NQiGWwnLadeBTGl","tlshash":"e8921a4874297c7842ae5a3325fea214307f1b852931d0a0f26cdb796b78d875177ebc","first_seen":"2026-05-06T06:21:51.028594Z","last_seen":"2026-07-18T04:13:55.319466Z","times_seen":443,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hotel.cdn.ruanyiit.com/hotel/41400575cb4e4dfe59c99e235d9ee8c1.jpg","fqdn":"hotel.cdn.ruanyiit.com","domain":"ruanyiit.com","tld":"com"},"ip":{"addr":"154.41.93.241","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking-jp.com/","date":"2026-06-23T23:42:28.225Z","timestamp":1782258148225,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hotel.cdn.ruanyiit.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2024","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Tue, 02 Jun 2026 14:00:00 GMT","end":"Mon, 31 Aug 2026 13:59:59 GMT"},"fingerprint":{"sha1":"48:1A:B4:A7:19:D1:42:49:00:3B:5C:B5:FB:23:5F:DB:05:44:BD:2D","sha256":"E6:6E:A5:A4:BD:ED:84:89:AE:95:A4:8F:B4:AF:29:41:A7:D4:A8:19:16:1B:74:60:0F:C0:A1:F7:5F:B3:D4:F7"}}},"request":{"raw":"GET /hotel/41400575cb4e4dfe59c99e235d9ee8c1.jpg HTTP/1.1\r\nHost: hotel.cdn.ruanyiit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nReferer: https://booking-jp.com/\r\nSec-Fetch-Storage-Access: none\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Tue, 23 Jun 2026 23:42:31 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 49282\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 949216\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"41400575cb4e4dfe59c99e235d9ee8c1.jpg\"; filename*=utf-8''41400575cb4e4dfe59c99e235d9ee8c1.jpg\r\nContent-Md5: qf4UQnRlwXfONMPq2mujAw==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"Fmm-tCJ8ThJXCaGip1_TV3a8GWqU\"\r\nLast-Modified: Wed, 11 Mar 2026 08:48:10 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg121;QNM3\r\nX-M-Reqid: utagjdLXs\r\nX-Qiniu-Zone: 0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: LCUAAACMhvIJe7gY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":49282,"size_decoded":50046,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 320x480, components 3","md5":"a9fe14427465c177ce34c3eada6ba303","sha1":"69beb4227c4e125709a1a2a75fd35776bc196a94","sha256":"3879180ccaee4d600f5478695ac7f613b993dc0782b404a3ec93cc7c22773a9d","sha512":"890fa2b3c18edd83891236a9ffc066262fd77254ac6db499f1e32d022ee4ae2f7a6a51977986e4fa108c4e9fce9900da7fa4f55799f687ce20b3d179e94363d1","ssdeep":"768:pYyuezYxNQ52o3sTHnfSJPrBxmF2hTFHzWSwIX5uP4DyOFqUvxTKSLD4cN:pBENQQjfSJPrBo2J2aEErDTKSLscN","tlshash":"fe23f1766b521f5fef2d48b12a899691d1b5b31ad323023d0cb2d229d1f70847b2cb75","first_seen":"2026-06-23T23:43:14.51591Z","last_seen":"2026-06-23T23:44:30.709951Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3164,"timings":{"blocked":2837,"dns":0,"connect":0,"send":0,"wait":284,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hotel.cdn.ruanyiit.com/hotel/d18d28c69c394de27a79e655f6d71235.jpg","fqdn":"hotel.cdn.ruanyiit.com","domain":"ruanyiit.com","tld":"com"},"ip":{"addr":"154.41.93.241","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking-jp.com/","date":"2026-06-23T23:42:28.227Z","timestamp":1782258148227,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hotel.cdn.ruanyiit.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2024","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Tue, 02 Jun 2026 14:00:00 GMT","end":"Mon, 31 Aug 2026 13:59:59 GMT"},"fingerprint":{"sha1":"48:1A:B4:A7:19:D1:42:49:00:3B:5C:B5:FB:23:5F:DB:05:44:BD:2D","sha256":"E6:6E:A5:A4:BD:ED:84:89:AE:95:A4:8F:B4:AF:29:41:A7:D4:A8:19:16:1B:74:60:0F:C0:A1:F7:5F:B3:D4:F7"}}},"request":{"raw":"GET /hotel/d18d28c69c394de27a79e655f6d71235.jpg HTTP/1.1\r\nHost: hotel.cdn.ruanyiit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nReferer: https://booking-jp.com/\r\nSec-Fetch-Storage-Access: none\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Tue, 23 Jun 2026 23:42:31 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 89903\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 941385\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"d18d28c69c394de27a79e655f6d71235.jpg\"; filename*=utf-8''d18d28c69c394de27a79e655f6d71235.jpg\r\nContent-Md5: 5dUSOwb/lKRqtYVpk2hlXw==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FrED0GpXgREaR6KzYvf8C3lfTYNT\"\r\nLast-Modified: Wed, 25 Feb 2026 13:26:07 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg121;QNM3\r\nX-M-Reqid: Z4mambujZ\r\nX-Qiniu-Zone: 0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: aMkAAAB-hjSoVpwY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":89903,"size_decoded":90667,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 800x534, components 3","md5":"e5d5123b06ff94a46ab585699368655f","sha1":"b103d06a5781111a47a2b362f7fc0b795f4d8353","sha256":"671dde550fe407f7f1c0017170195b08e40a7c5b73c3b7a3fc1d3bdcfb97d716","sha512":"c62dfc4eb605ea235c82ebdb913ffc7f841fa19acfce503649bc6b9d5e237d88b0b7730ca10183346e7e9ae7bbb81bf73631813437760133b20c214f386d5df0","ssdeep":"1536:fNsAm9zRbD3uscy+ny7d+nLf892zE7H9sYTWVzUmibZmuDDC4C2ap+4nz:CtzRbD+aVB+Lo2zED97TM4mi1muDO1vn","tlshash":"ff931298e1b2a336f658f33300f689810b90f3f5532145a27bd1662a36a476b7462377","first_seen":"2026-06-23T23:43:14.517556Z","last_seen":"2026-06-23T23:44:30.673931Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3282,"timings":{"blocked":2955,"dns":0,"connect":0,"send":0,"wait":256,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking-jp.com/static/images/tabbar/order_0.png","fqdn":"booking-jp.com","domain":"booking-jp.com","tld":"com"},"ip":{"addr":"121.127.232.46","port":443,"asn":152194,"as":"CTG Server Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking-jp.com/","date":"2026-06-23T23:42:26.560Z","timestamp":1782258146560,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booking-jp.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 13:30:03 GMT","end":"Mon, 31 Aug 2026 13:30:02 GMT"},"fingerprint":{"sha1":"09:ED:E4:79:12:3A:70:97:E1:FC:61:F4:52:0B:D7:A8:FC:7C:74:D8","sha256":"70:5F:C2:88:EA:8F:91:67:52:30:8D:96:24:AE:22:98:CA:46:C6:6F:D1:AD:1C:95:24:0F:80:84:CA:9A:6C:EE"}}},"request":{"raw":"GET /static/images/tabbar/order_0.png HTTP/1.1\r\nHost: booking-jp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking-jp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 23 Jun 2026 23:40:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 971\r\nlast-modified: Sat, 13 Jun 2026 06:15:21 GMT\r\netag: \"6a2cf579-3cb\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":971,"size_decoded":1407,"mime_type":"image/png","magic":"PNG image data, 34 x 38, 8-bit/color RGBA, non-interlaced","md5":"073e4a101f79f540c9cf797e0ee42dc7","sha1":"1fb6bf41bf79956e0361137935b91df43f997fd2","sha256":"897c821099d62ec2c9e17d09931f546bab447aa433addfeacdfe0f6b0a7c6ef6","sha512":"5cd62b2ba0ff084e29c01f55ca0ceabeb5b7ae13925a6b3bba1b2feb4b9f40dab873a95603f241b2c559d79c3db20f776aabde422f5a82130d1996cead3d6842","ssdeep":"","tlshash":"0e119443b624aa39ca0761332e9390f531a3cf998c7502dbba43b88aa111f183222690","first_seen":"2026-06-23T23:43:14.519014Z","last_seen":"2026-06-23T23:44:30.670095Z","times_seen":2,"resource_available":false,"data":null}},"time_used":389,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":389,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"booking-jp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"booking-jp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking-jp.com/static/index.cc298949.css","fqdn":"booking-jp.com","domain":"booking-jp.com","tld":"com"},"ip":{"addr":"121.127.232.46","port":443,"asn":152194,"as":"CTG Server Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://booking-jp.com/","date":"2026-06-23T23:42:24.265Z","timestamp":1782258144265,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booking-jp.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 13:30:03 GMT","end":"Mon, 31 Aug 2026 13:30:02 GMT"},"fingerprint":{"sha1":"09:ED:E4:79:12:3A:70:97:E1:FC:61:F4:52:0B:D7:A8:FC:7C:74:D8","sha256":"70:5F:C2:88:EA:8F:91:67:52:30:8D:96:24:AE:22:98:CA:46:C6:6F:D1:AD:1C:95:24:0F:80:84:CA:9A:6C:EE"}}},"request":{"raw":"GET /static/index.cc298949.css HTTP/1.1\r\nHost: booking-jp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking-jp.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 23 Jun 2026 23:40:42 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 13 Jun 2026 06:14:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2cf546-17998\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":96664,"size_decoded":26958,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"b23ffbdf507ee417fc3c7b7b242737a7","sha1":"eba2371178176221506aff0dc474570e47562e55","sha256":"97fafefc6bb45ed52a6930fd2fa079e13da77929f11bc7b813d5f09c85ff0f36","sha512":"c5bcad9b474333689093a848601b2871dcd50e04fbd2592ebee0053bed1c540a95f371e84db5bd34f641345bff4cfdf3938a9266b3280243f95fa7cafd6e4519","ssdeep":"1536:qlIApuK7hmVmU2RS1Wu3xdynGJ7eh/nQhlvbc:hApuK7hmV+S1Wu3iG41nQPI","tlshash":"b993f73719012e39e52bcd26b6c1ab5a1e61c033e15307adfba47628cbcf9c9167b345","first_seen":"2026-03-22T00:30:56.219993Z","last_seen":"2026-07-18T05:28:41.11877Z","times_seen":410,"resource_available":false,"data":null}},"time_used":437,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":437,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"booking-jp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"booking-jp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking-jp.com/static/js/index.d47b4b61.js","fqdn":"booking-jp.com","domain":"booking-jp.com","tld":"com"},"ip":{"addr":"121.127.232.46","port":443,"asn":152194,"as":"CTG Server Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking-jp.com/","date":"2026-06-23T23:42:24.268Z","timestamp":1782258144268,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booking-jp.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 13:30:03 GMT","end":"Mon, 31 Aug 2026 13:30:02 GMT"},"fingerprint":{"sha1":"09:ED:E4:79:12:3A:70:97:E1:FC:61:F4:52:0B:D7:A8:FC:7C:74:D8","sha256":"70:5F:C2:88:EA:8F:91:67:52:30:8D:96:24:AE:22:98:CA:46:C6:6F:D1:AD:1C:95:24:0F:80:84:CA:9A:6C:EE"}}},"request":{"raw":"GET /static/js/index.d47b4b61.js HTTP/1.1\r\nHost: booking-jp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking-jp.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 23 Jun 2026 23:40:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 13 Jun 2026 06:14:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2cf551-51cb9\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":335033,"size_decoded":107620,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64145), with no line terminators","md5":"dfd89b20a9ec36f3890e86d200ed6026","sha1":"c384441ecb15daf9ebe478adf437661b5c5ea300","sha256":"36623a29d140422b5fbb48ac904f9ad1e0219cc8941754e1309e2ef47e7700c6","sha512":"a5ac6203b4af2e947a8a848f971079b4f67f190a9906ab46bbac2220d3acd95eeb9dfe36f50a42fc24a9483fbae6c554b0dfd6d05c180169deedbc10b9a7e333","ssdeep":"6144:uG2kGt25CBQGXZmgcaqJDCf+rxzKNthX5b:KB5XZaJDXrxzgpb","tlshash":"81648faaeacd18dd3697d007b44b630531f0ae52c5cac415f7de90189bd7ecba293b24","first_seen":"2026-06-23T23:43:14.521528Z","last_seen":"2026-06-23T23:44:30.653132Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1042,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1042,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"booking-jp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"booking-jp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hotel.cdn.ruanyiit.com/hotel/6f91536076aab16172dad0851517189b.jpg","fqdn":"hotel.cdn.ruanyiit.com","domain":"ruanyiit.com","tld":"com"},"ip":{"addr":"154.41.93.241","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking-jp.com/","date":"2026-06-23T23:42:28.217Z","timestamp":1782258148217,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hotel.cdn.ruanyiit.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2024","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Tue, 02 Jun 2026 14:00:00 GMT","end":"Mon, 31 Aug 2026 13:59:59 GMT"},"fingerprint":{"sha1":"48:1A:B4:A7:19:D1:42:49:00:3B:5C:B5:FB:23:5F:DB:05:44:BD:2D","sha256":"E6:6E:A5:A4:BD:ED:84:89:AE:95:A4:8F:B4:AF:29:41:A7:D4:A8:19:16:1B:74:60:0F:C0:A1:F7:5F:B3:D4:F7"}}},"request":{"raw":"GET /hotel/6f91536076aab16172dad0851517189b.jpg HTTP/1.1\r\nHost: hotel.cdn.ruanyiit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nReferer: https://booking-jp.com/\r\nSec-Fetch-Storage-Access: none\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Tue, 23 Jun 2026 23:42:30 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 151612\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 949216\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"6f91536076aab16172dad0851517189b.jpg\"; filename*=utf-8''6f91536076aab16172dad0851517189b.jpg\r\nContent-Md5: wYcAds3jrNBGgd9KoaeUQw==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"Fu7S82gSAN2Dgz8v_hPJE1FiiE5M\"\r\nLast-Modified: Wed, 25 Feb 2026 13:32:45 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg121;QNM3\r\nX-M-Reqid: 4rHeOOKor\r\nX-Qiniu-Zone: 0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: 6McAAADHybgJe7gY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":151612,"size_decoded":152377,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 800x534, components 3","md5":"c1870076cde3acd04681df4aa1a79443","sha1":"eed2f3681200dd83833f2ffe13c9135162884e4c","sha256":"f09eab5b325829c4ba6837cffcff21c5db48dc63f99705119318d7352cbad3dd","sha512":"fbd2ea0809ad625ead637dbb66e09836b587b443b42713e4356cfc919590e053de203823689035bbc717b1600115848d2138930f4a8f2c97380fc57966ac7b29","ssdeep":"3072:TBlG7AtH7tdshCJyDUvRNpwn3NOxs+uFdygBeDbTd3+agzVKw6NwFR:+AVkxIvRN0es+ibobTVg8wSwFR","tlshash":"dfe312347e8b0722e09bfd7825d97da8d89de9513f1ace1412b25ab40a14d2136ce1ef","first_seen":"2026-06-23T23:43:14.522906Z","last_seen":"2026-06-23T23:44:30.669433Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2847,"timings":{"blocked":-1,"dns":916,"connect":269,"send":0,"wait":360,"receive":765,"ssl":537},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hotel.cdn.ruanyiit.com/hotel/3e3fde9ed8e58d097daca415cdb8e7b7.jpg","fqdn":"hotel.cdn.ruanyiit.com","domain":"ruanyiit.com","tld":"com"},"ip":{"addr":"154.41.93.241","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking-jp.com/","date":"2026-06-23T23:42:28.223Z","timestamp":1782258148223,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hotel.cdn.ruanyiit.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2024","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Tue, 02 Jun 2026 14:00:00 GMT","end":"Mon, 31 Aug 2026 13:59:59 GMT"},"fingerprint":{"sha1":"48:1A:B4:A7:19:D1:42:49:00:3B:5C:B5:FB:23:5F:DB:05:44:BD:2D","sha256":"E6:6E:A5:A4:BD:ED:84:89:AE:95:A4:8F:B4:AF:29:41:A7:D4:A8:19:16:1B:74:60:0F:C0:A1:F7:5F:B3:D4:F7"}}},"request":{"raw":"GET /hotel/3e3fde9ed8e58d097daca415cdb8e7b7.jpg HTTP/1.1\r\nHost: hotel.cdn.ruanyiit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nReferer: https://booking-jp.com/\r\nSec-Fetch-Storage-Access: none\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Tue, 23 Jun 2026 23:42:30 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 130304\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 949217\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"3e3fde9ed8e58d097daca415cdb8e7b7.jpg\"; filename*=utf-8''3e3fde9ed8e58d097daca415cdb8e7b7.jpg\r\nContent-Md5: tD4BQhQecBn5EbTbLxIgbQ==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"Fnj0qEWlw6u2bnU7o-uVbzs2mnRZ\"\r\nLast-Modified: Wed, 25 Feb 2026 13:33:12 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg121;QNM3\r\nX-M-Reqid: his2N2AWN\r\nX-Qiniu-Zone: 0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: EVoAAAB404AuWJwY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":130304,"size_decoded":131069,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 800x541, components 3","md5":"b43e0142141e7019f911b4db2f12206d","sha1":"78f4a845a5c3abb66e753ba3eb956f3b369a7459","sha256":"f6c15d0220154bdb7fbf9fb2afe4913fcc0dda7fa172e44091a1485cfd7e94a5","sha512":"31305ef9ed018ef3db73135977820067fbe7b9d55a908b3e2777e72ad9182b6e1f73dd78122274726c8166c9aa2a1a135b613d5170a84f397de8eb24753194fb","ssdeep":"3072:Y85xUYPXR1Xq0FpVV0ovWHFRiKsDPoGzklXRCjQZd:YgFlq0pV6oeHFRewwS4jO","tlshash":"bfd312241d34cb1ac381ec7b270f1a76572ab516878db72712bb722960df166b04def2","first_seen":"2026-06-23T23:43:14.524316Z","last_seen":"2026-06-23T23:44:30.662845Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2955,"timings":{"blocked":2388,"dns":0,"connect":0,"send":0,"wait":269,"receive":298,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/js/project_656442_677071_1773919079.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.27","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking-jp.com/","date":"2026-06-23T23:42:26.528Z","timestamp":1782258146528,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /js/project_656442_677071_1773919079.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking-jp.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Tue, 23 Jun 2026 23:31:22 GMT\r\nx-oss-server-time: 42\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6A3B174A6590933138C13F2B\r\nlast-modified: Thu, 19 Mar 2026 11:17:59 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1803581762950613263\r\nx-oss-storage-class: Standard\r\ncontent-md5: xM2qKmWQNOFDIXBXGAU04g==\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 75d52516d2e9126ccb2b4cf8db62c446.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: 8BLblx2KcnibhysPO-KQJQ4p0CUJ0KA71c0X2ziLsJVh11jvT5_urQ==\r\nage: 664\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1184,"size_decoded":1174,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"c4cdaa2a659034e143217057180534e2","sha1":"3f56f70a92467aee3accfa75645e3c0ac6941ffa","sha256":"122226978a3bf8021b78728314fa5ee65bfff77b60a452e397d91e0e77d3b5ef","sha512":"ae7659d939dbdf130c095a6894c54f0f0562324b09d770b7c68167907b7af83743d138996df666824ec571c218034ec728533cb645794f3ae93b2301d96bd530","ssdeep":"","tlshash":"dc21c9472c67a4797ad5727b8b3f88ad3998a2433004cc10bc4dd4681f909e20a9eee4","first_seen":"2026-06-23T23:43:14.525661Z","last_seen":"2026-06-23T23:44:30.656211Z","times_seen":2,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":61,"connect":9,"send":0,"wait":32,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget/code/install.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.27","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking-jp.com/","date":"2026-06-23T23:42:26.674Z","timestamp":1782258146674,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget/code/install.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking-jp.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Tue, 23 Jun 2026 10:07:21 GMT\r\nx-oss-server-time: 4\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6A3A5AD9FEEE6A34368A832A\r\nlast-modified: Wed, 06 May 2026 03:49:02 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14896938545536636896\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=600\r\ncontent-md5: +ZiCBLRlxfKRzeVsc2e3HA==\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 75d52516d2e9126ccb2b4cf8db62c446.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: Mj_UeMHewLg8JBXtBCmq4SNZI_lXYo70K6jNoSLy2Ra5QI0QxDvJdg==\r\nage: 48905\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1578,"size_decoded":1431,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1578), with no line terminators","md5":"f9988204b465c5f291cde56c7367b71c","sha1":"bbfd28ec48085b50f7bf2d29ce360dedc0b67065","sha256":"e4348a3c9d1a33865ad565906a0e10b77b8acc216cf0b01c9c48c66a562dd1fc","sha512":"62c249d781fcf4b691433075224a2cc8cfce86837afc7f02850689ecab62569b6aca9971cf88866e8845571494b6ab5ee183867c3e00981418d094b078a479ae","ssdeep":"","tlshash":"6f31369836e5f8a153d76568013f8045f3ba08651879f4e0d3a9ccb9bc34c8d4073f5a","first_seen":"2026-05-06T06:21:51.036806Z","last_seen":"2026-07-18T04:13:55.301187Z","times_seen":490,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"srz.salesmartly.com/client/log/log?plugin_sign=b7047e325916fb2c5d3ec8e5aea4887b\u0026plugin_id=g1khdfx\u0026over_time=\u0026env=chat\u0026_=1782258148098\u0026_lt=\u0026_u=\u0026_xma_=","fqdn":"srz.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://booking-jp.com/","date":"2026-06-23T23:42:28.110Z","timestamp":1782258148110,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"srz.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 14 May 2026 15:19:30 GMT","end":"Wed, 12 Aug 2026 16:19:28 GMT"},"fingerprint":{"sha1":"63:EF:4F:67:AD:CD:95:CB:E8:09:7F:C4:F5:F2:CE:1A:FC:7D:96:20","sha256":"25:6B:45:E3:03:83:AB:E5:28:74:CC:AD:25:1A:0F:61:07:BF:77:5C:3A:22:80:6E:D8:91:5F:33:89:44:B5:02"}}},"request":{"raw":"POST /client/log/log?plugin_sign=b7047e325916fb2c5d3ec8e5aea4887b\u0026plugin_id=g1khdfx\u0026over_time=\u0026env=chat\u0026_=1782258148098\u0026_lt=\u0026_u=\u0026_xma_= HTTP/1.1\r\nHost: srz.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 480\r\nOrigin: https://booking-jp.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking-jp.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 23 Jun 2026 23:42:28 GMT\r\ncontent-type: application/json; charset=UTF-8\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: https://booking-jp.com\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a10759720c2356c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":610,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"77e652f404f47086bb49598b43b92d9a","sha1":"9b4981aa40e98879d7f2efda3261e0f0c76a0d78","sha256":"052a4866127cab399192f6179141e92ce42742a7c09ccf7a0ffba2f0583869b5","sha512":"70e55dcdfca4754735386a3074c028d1047fce9b9d946cc84c2ea59d57799ffdc8071abc4c62142e2a1c319a948ad71eb696e0892bcaf1ce41f4616026a6bb63","ssdeep":"","tlshash":"bf900433341cc3470d05504f50053715d0f410500f104751ccfc0314430c4d57143410","first_seen":"2023-08-03T19:40:41Z","last_seen":"2026-07-18T09:37:27.687331Z","times_seen":2563,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":39,"connect":16,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking-jp.com/static/js/chunk-vendors.5143560b.js","fqdn":"booking-jp.com","domain":"booking-jp.com","tld":"com"},"ip":{"addr":"121.127.232.46","port":443,"asn":152194,"as":"CTG Server Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking-jp.com/","date":"2026-06-23T23:42:24.267Z","timestamp":1782258144267,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booking-jp.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 13:30:03 GMT","end":"Mon, 31 Aug 2026 13:30:02 GMT"},"fingerprint":{"sha1":"09:ED:E4:79:12:3A:70:97:E1:FC:61:F4:52:0B:D7:A8:FC:7C:74:D8","sha256":"70:5F:C2:88:EA:8F:91:67:52:30:8D:96:24:AE:22:98:CA:46:C6:6F:D1:AD:1C:95:24:0F:80:84:CA:9A:6C:EE"}}},"request":{"raw":"GET /static/js/chunk-vendors.5143560b.js HTTP/1.1\r\nHost: booking-jp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking-jp.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 23 Jun 2026 23:40:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 13 Jun 2026 06:14:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2cf550-faa9a\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1026714,"size_decoded":332425,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (37893)","md5":"eb83d6603abbb164214a0e67641d77e4","sha1":"646aa72a649310f2916d60b66483fcd7d0ea34e3","sha256":"33e2c79e4f92b14bf18b5db55759aeabe457774dc62c4d32cbe647fbfad73b46","sha512":"87ae84b01fe2f4d14277d9cad8b0e52ec41f5b258d3fc52f26b2beed6a151896186b0021f38a6a6dc406d1e272dd17290baf94e06a9692f3204825cb52409660","ssdeep":"6144:6FpTCHYJDUSl6BUDOseiS3WzNoXIapNvtwTf3uXb/ffzvaNTK/bsvmRne+Qh8pvE:6vD/kBdN1wTfefjatmPeWv/zd5WHGABL","tlshash":"2a25188cf285b0b607e760b5403f220bb23b6969b40a94d4f675e4d1ad7894e6237f3d","first_seen":"2026-06-23T23:43:14.527629Z","last_seen":"2026-06-23T23:44:30.671243Z","times_seen":2,"resource_available":true,"data":null}},"time_used":731,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":731,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"booking-jp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"booking-jp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"msg.salesmartly.com/chat/chat-msg/unread-msg-list-v2?login_token=3279059c7c506f0829f493f846c9dfd4\u0026chat_user_id=03b2ccbcc6fc9e7642d6c144b4037350\u0026direction_type=1\u0026plugin_id=g1khdfx\u0026over_time=\u0026env=chat\u0026_=1782258148681\u0026_lt=3279059c7c506f0829f493f846c9dfd4\u0026_u=\u0026_xma_=656442","fqdn":"msg.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://booking-jp.com/","date":"2026-06-23T23:42:28.694Z","timestamp":1782258148694,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 May 2026 04:11:02 GMT","end":"Mon, 17 Aug 2026 05:11:01 GMT"},"fingerprint":{"sha1":"BE:DA:3A:E3:5E:0A:DB:E3:90:79:47:8A:52:F8:40:16:E7:F0:B3:5B","sha256":"2E:4A:21:E0:76:66:96:FA:95:36:C0:F9:E9:87:40:A1:68:C4:58:F8:2E:5B:E7:0B:61:5F:37:AE:7E:A9:84:08"}}},"request":{"raw":"OPTIONS /chat/chat-msg/unread-msg-list-v2?login_token=3279059c7c506f0829f493f846c9dfd4\u0026chat_user_id=03b2ccbcc6fc9e7642d6c144b4037350\u0026direction_type=1\u0026plugin_id=g1khdfx\u0026over_time=\u0026env=chat\u0026_=1782258148681\u0026_lt=3279059c7c506f0829f493f846c9dfd4\u0026_u=\u0026_xma_=656442 HTTP/1.1\r\nHost: msg.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: external-sign\r\nReferer: https://booking-jp.com/\r\nOrigin: https://booking-jp.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 23 Jun 2026 23:42:28 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: https://booking-jp.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT, Keep-Alive, User-Agent, Cache-Control, Content-Type, Authorization, Origin, Cpl, Client-Type, X-Requested-With, Accept, External-Sign\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a107597578cc56a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":563,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-18T09:43:23.238949Z","times_seen":17334766,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":5,"connect":13,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget/code/js/vendor1_b8775aab.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.27","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking-jp.com/","date":"2026-06-23T23:42:27.022Z","timestamp":1782258147022,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget/code/js/vendor1_b8775aab.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Tue, 23 Jun 2026 10:07:23 GMT\r\nx-oss-server-time: 6\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6A3A5ADB7594F935304C1EFD\r\nlast-modified: Wed, 06 May 2026 03:49:02 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15305004930386263030\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: TdEL+eOlXQT7AtB2+NiI/Q==\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 75d52516d2e9126ccb2b4cf8db62c446.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: vOVwbwexUuey3QtIekwDo3NEJpieufJgcOvJFWbcuI_HBOzDFLcBNw==\r\nage: 48904\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":225000,"size_decoded":78363,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (49155)","md5":"4dd10bf9e3a55d04fb02d076f8d888fd","sha1":"73fe2ade639561e0fbee753a10ab3a8f64457ba6","sha256":"9b5cc937de300ae7ed821b3c25405086cd9fc0c25be5f6afc2213b06d1981408","sha512":"768877b7f6860408251dfc60ac57ed4499ac9ff259f506f98020a848b1f8dd67378758074406603c95d98bfa621d4d451d9a941f9932c2bc9ecfe1eb9e69f9ba","ssdeep":"3072:hUj1XOH0ipFe9OY0ceCK7KtWO77yzk83UzlgE6CjnWO:2kHbDCK7gf7n85NO","tlshash":"b22408c8b295b06143a770b4407f550bf13ab915680ec5a4f226e8da7cbc98e907bf7d","first_seen":"2025-05-10T22:57:10.916725Z","last_seen":"2026-07-18T04:13:55.337375Z","times_seen":2571,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking-jp.com/static/images/index/icon_sc.png","fqdn":"booking-jp.com","domain":"booking-jp.com","tld":"com"},"ip":{"addr":"121.127.232.46","port":443,"asn":152194,"as":"CTG Server Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking-jp.com/","date":"2026-06-23T23:42:27.747Z","timestamp":1782258147747,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booking-jp.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 13:30:03 GMT","end":"Mon, 31 Aug 2026 13:30:02 GMT"},"fingerprint":{"sha1":"09:ED:E4:79:12:3A:70:97:E1:FC:61:F4:52:0B:D7:A8:FC:7C:74:D8","sha256":"70:5F:C2:88:EA:8F:91:67:52:30:8D:96:24:AE:22:98:CA:46:C6:6F:D1:AD:1C:95:24:0F:80:84:CA:9A:6C:EE"}}},"request":{"raw":"GET /static/images/index/icon_sc.png HTTP/1.1\r\nHost: booking-jp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking-jp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 23 Jun 2026 23:40:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 543\r\nlast-modified: Sat, 13 Jun 2026 06:15:04 GMT\r\netag: \"6a2cf568-21f\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":543,"size_decoded":979,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"60293cd8263a8c2f198d2af285c90f45","sha1":"ae2835a29c3df0ff6287de26f705600fe62bb0ed","sha256":"767c3fd533eaa91c3b1be772a139ce281ed7f578c7260c81cac3ea7569ee20a8","sha512":"db7d4f4415044199d75d154fa00d07803b9a2c558fc3b84a61b69508175e57128de1152a487052c05ed18fb1330618f1ee6ee3ccd3f080f5d1fdd90fadc9e566","ssdeep":"","tlshash":"4ef02087a9e73cafd26a57fb9741d2a464b9a78421000e923e40947431a26cc61cceda","first_seen":"2026-06-23T23:43:14.529913Z","last_seen":"2026-06-23T23:44:30.66882Z","times_seen":2,"resource_available":false,"data":null}},"time_used":361,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":361,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"booking-jp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"booking-jp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hotel.cdn.ruanyiit.com/hotel/2d5184560081af5e07102e3bf3d1130d.jpg","fqdn":"hotel.cdn.ruanyiit.com","domain":"ruanyiit.com","tld":"com"},"ip":{"addr":"154.41.93.241","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking-jp.com/","date":"2026-06-23T23:42:28.226Z","timestamp":1782258148226,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hotel.cdn.ruanyiit.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2024","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Tue, 02 Jun 2026 14:00:00 GMT","end":"Mon, 31 Aug 2026 13:59:59 GMT"},"fingerprint":{"sha1":"48:1A:B4:A7:19:D1:42:49:00:3B:5C:B5:FB:23:5F:DB:05:44:BD:2D","sha256":"E6:6E:A5:A4:BD:ED:84:89:AE:95:A4:8F:B4:AF:29:41:A7:D4:A8:19:16:1B:74:60:0F:C0:A1:F7:5F:B3:D4:F7"}}},"request":{"raw":"GET /hotel/2d5184560081af5e07102e3bf3d1130d.jpg HTTP/1.1\r\nHost: hotel.cdn.ruanyiit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nReferer: https://booking-jp.com/\r\nSec-Fetch-Storage-Access: none\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Tue, 23 Jun 2026 23:42:31 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 71392\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 498032\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"2d5184560081af5e07102e3bf3d1130d.jpg\"; filename*=utf-8''2d5184560081af5e07102e3bf3d1130d.jpg\r\nContent-Md5: eG0bVaIAqpr7WzOyrxl9cQ==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"Fv_BhYQJkaVZqHTUzPaXW0lMxrQt\"\r\nLast-Modified: Wed, 11 Mar 2026 09:53:25 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg119;QNM3\r\nX-M-Reqid: UF6C1JsMS\r\nX-Qiniu-Zone: 0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: WxoAAAD-NJY2n5wY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":71392,"size_decoded":72156,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 800x451, components 3","md5":"786d1b55a200aa9afb5b33b2af197d71","sha1":"ffc185840991a559a874d4ccf6975b494cc6b42d","sha256":"2edb75e93b1e7dedb5364ecc2935ff85de358df42d40f4cdd3253516571f9d61","sha512":"fdfc66609e17bc89fe74e760db004148bbf895d7f6e8a839f0eefa551345505cc868956eda53fe4e8327ccedc97cf67ee43cba21c1d00ad8487b7c89b297384e","ssdeep":"1536:vG3YmZdZ4//rINdxnMS6T1pzqj0cIFjZ9ZWZe8h5niLgiN/JgDRu89+Dv:KzdI/QFMNT1k4FjZ6A41euDR1+Dv","tlshash":"ed63020bd928a8cd1bd868a05e1ad838e6d998fe53513b7deb0f1e857192304d7324f4","first_seen":"2026-06-23T23:43:14.53111Z","last_seen":"2026-06-23T23:44:30.655674Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3240,"timings":{"blocked":2902,"dns":0,"connect":0,"send":0,"wait":281,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget/code/css/chunk-common.047ebad9.css","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.27","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://booking-jp.com/","date":"2026-06-23T23:42:27.013Z","timestamp":1782258147013,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget/code/css/chunk-common.047ebad9.css HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\nserver: AliyunOSS\r\ndate: Tue, 23 Jun 2026 10:07:23 GMT\r\nx-oss-server-time: 3\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6A3A5ADB58FFB53034EBE151\r\nlast-modified: Wed, 06 May 2026 03:49:02 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15301035701198459371\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: kuhLBjVJMHRRHJR6J/nD0w==\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 75d52516d2e9126ccb2b4cf8db62c446.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: Wmxr1HI5fsvaLa3KT1qzr6KbNVK-FtOx3POqQkSfBAtRnfEAL9-wtQ==\r\nage: 48904\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":3567,"size_decoded":1829,"mime_type":"text/css","magic":"ASCII text, with very long lines (3567), with no line terminators","md5":"92e84b0635493074511c947a27f9c3d3","sha1":"1063727a5ae72bb23c46dad693b4b45828e2a74a","sha256":"85172738795fe7c2d724963c00cddb49256a70767071cea32d1729b809702ffe","sha512":"9ee606d5139307b4a204d111caf4297943a1894038526b59e9c0a4bd5a034fd328cdfc85edc24dd76732407f80e93aafa317fa53d85471a7dc45c23f4a72a854","ssdeep":"","tlshash":"e2710de5d50814ed7333c902a385b298ad92f5b2d8e04e67f01f562c8ff2655a291f39","first_seen":"2025-08-28T20:02:37.799245Z","last_seen":"2026-07-18T04:13:55.345124Z","times_seen":2268,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}