| cdnjs.cloudflare.com/ajax/libs/intl-tel-input/17.0.8/css/intlTelInput.css |  104.17.24.14 | 200 OK | 2.0 kB |
URL GET HTTP/3cdnjs.cloudflare.com/ajax/libs/intl-tel-input/17.0.8/css/intlTelInput.css IP104.17.24.14:443
Requested byhttps://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/login CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
Hasha69aa970266649e0b08c2cb4bc166568 d9314a52085a2bb6d284421bb18a4c546ecb73d4 ad32b1248207ba91fb945a37d38e7c9deafcba849245872203482db42930d491
GET /ajax/libs/intl-tel-input/17.0.8/css/intlTelInput.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 04:09:52 GMT
content-type: text/css; charset=utf-8
content-length: 1970
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5f902e0e-62a6"
last-modified: Wed, 21 Oct 2020 12:48:14 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 215603
expires: Tue, 08 Apr 2025 04:09:52 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=f98cpUWeD2EYuEQFDyefMfrIUpzglIWMjtkYdDSzQCLC7OVnauTmQ6rqdAH%2FGbBydf%2ByrxfryeBRKvPtY2NXDtOqbuFgwhNz%2FDz5Tt0yH9cXV6FnV%2F6j8TZBAOdlk01AB1%2F4ky17"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8761cd452d625688-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css | 104.17.24.14 | 200 OK | 5.6 kB |
URL GET HTTP/3cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css IP104.17.24.14:443
Requested byhttps://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/login CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeASCII text, with very long lines (30837) Hash269550530cc127b6aa5a35925a7de6ce 512c7d79033e3028a9be61b540cf1a6870c896f8 799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd
GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 04:09:52 GMT
content-type: text/css; charset=utf-8
content-length: 5631
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e5f-7918"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 206877
expires: Tue, 08 Apr 2025 04:09:52 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=i7Pp8iEvrtkoPSdpMqqNUqWQafJ1wtJpD6IkcoNcsUxxVBNk4kAW1DFjVzY%2FmuPuWnD%2BY2AMzyjP5Cf5K5MOPDMsfqSHHyG0I9ClxxluGCk%2FOwMN1vR%2B2TjDEP4VTpAew7DmjC0S"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8761cd453d665688-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/timepicker/1.3.5/jquery.timepicker.min.css | 104.17.24.14 | 200 OK | 330 B |
URL GET HTTP/3cdnjs.cloudflare.com/ajax/libs/timepicker/1.3.5/jquery.timepicker.min.css IP104.17.24.14:443
Requested byhttps://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/login CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeASCII text, with very long lines (1025), with no line terminators Hash03d9983229c533a4a40b27cf1412d676 7e0e4e61f1be61da952004a8fca738903b087135 0d5579714f69c471f64687e8a775c3ddbdeb6dface488cb69d4eb50c46d8cb54
GET /ajax/libs/timepicker/1.3.5/jquery.timepicker.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 04:09:52 GMT
content-type: text/css; charset=utf-8
content-length: 330
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ffd-401"
last-modified: Mon, 04 May 2020 16:17:01 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 605519
expires: Tue, 08 Apr 2025 04:09:52 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wdaVtp3awGCRYFmWxg9dW69nmtCPTFtWCFjjqD988iXUc%2BW%2B9c2177kzt%2FDp%2BoSXvn%2Fvdm%2BXjZFrVpPeuK7E5G%2FPW3gy2qqwQ2XKD79PLS4WOtgTd9QC0zVZwzbZ99UFsXFNRMAH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8761cd453d695688-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/ |  172.66.43.102 | | 6.5 kB |
URL airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/ IP172.66.43.102:0
Hash1c9891492aa62caa5817310a7d900db8 db68755906ac43a62b29bad67bd1e0d059e5ab33 c1508825fc6067da1dad2f024f3e22065f6912fd80ed9f291712bc289e635c1d
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Airbnb, Inc. |
GET / HTTP/1.1
Host: airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Thu, 18 Apr 2024 04:09:51 GMT
content-type: text/html; charset=utf-8
location: https://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/login
report-to: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1713413391&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&s=zTnzgESomIwViDkNa38O6rpOwzTbQLrHt03Fz6WGH%2BQ%3D"}]}
reporting-endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1713413391&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&s=zTnzgESomIwViDkNa38O6rpOwzTbQLrHt03Fz6WGH%2BQ%3D
nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
referrer-policy: strict-origin-when-cross-origin
cache-control: no-cache
x-request-id: c4034088-d03a-4c33-a246-e474de05e93f
x-runtime: 0.024025
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains
via: 1.1 vegur
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8761cd3f7c1c56ca-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.jsdelivr.net/npm/select2@4.1.0-beta.1/dist/css/select2.min.css | 151.101.193.229 | 200 OK | 2.4 kB |
URL GET HTTP/3cdn.jsdelivr.net/npm/select2@4.1.0-beta.1/dist/css/select2.min.css IP151.101.193.229:443
Requested byhttps://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/login CertificateIssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09 ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File typeASCII text, with very long lines (15822) Hash809b4f5299218eab37a7c31e4c20478b c9448efbf22bc6f6fbbbbfebbd656642bab13767 907f4395f54e25a1da1181672f1a498e98b26f7bfc6dcb6c209a737472451e49
GET /npm/select2@4.1.0-beta.1/dist/css/select2.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 4.1.0-beta.1
x-jsd-version-type: version
etag: W/"3dcf-yUSO+/Irxvb7u7/rvWVmQrqxN2c"
content-encoding: br
accept-ranges: bytes
date: Thu, 18 Apr 2024 04:09:52 GMT
age: 9162615
x-served-by: cache-fra-eddf8230060-FRA, cache-hel1410025-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 2372
X-Firefox-Spdy: h2
|
|
| ajax.googleapis.com/ajax/libs/jqueryui/1.12.1/themes/smoothness/jquery-ui.css | 142.250.74.170 | 200 OK | 8.4 kB |
URL GET HTTP/3ajax.googleapis.com/ajax/libs/jqueryui/1.12.1/themes/smoothness/jquery-ui.css IP142.250.74.170:443
Requested byhttps://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/login CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
File typeASCII text, with very long lines (2363) Hashbf051f24690699bc2665ef6e4d7487a7 0a5599c5783e60b7d51e928812039f3f5c74666a f9b751c1cd0d2b0f91862db987fed9dda48758b15e6f42ca67796b45f4b21702
GET /ajax/libs/jqueryui/1.12.1/themes/smoothness/jquery-ui.css HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 8422
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 11 Apr 2024 17:25:02 GMT
expires: Fri, 11 Apr 2025 17:25:02 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 557090
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/css; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ajax.googleapis.com/ajax/libs/jqueryui/1.12.1/themes/smoothness/jquery-ui.css | 142.250.74.170 | 200 OK | 8.4 kB |
URL GET HTTP/3ajax.googleapis.com/ajax/libs/jqueryui/1.12.1/themes/smoothness/jquery-ui.css IP142.250.74.170:443
Requested byhttps://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/login CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
File typeASCII text, with very long lines (2363) Hashbf051f24690699bc2665ef6e4d7487a7 0a5599c5783e60b7d51e928812039f3f5c74666a f9b751c1cd0d2b0f91862db987fed9dda48758b15e6f42ca67796b45f4b21702
GET /ajax/libs/jqueryui/1.12.1/themes/smoothness/jquery-ui.css HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 8422
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 11 Apr 2024 17:25:02 GMT
expires: Fri, 11 Apr 2025 17:25:02 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 557090
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/css; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/login | 172.66.43.102 | 200 OK | 12 kB |
URL User Request GET HTTP/3airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/login IP172.66.43.102:443
CertificateIssuerLet's Encrypt Subjecttangram.co Fingerprint3C:26:99:6C:71:13:DE:82:D0:46:1D:FC:E6:CF:4A:60:89:DA:33:71 ValiditySun, 10 Mar 2024 01:15:48 GMT - Sat, 08 Jun 2024 01:15:47 GMT
File typeJavaScript source, ASCII text, with very long lines (1267) Hash18ef4b834d29045d5a476f3e88f5ea22 50fdc892b78586d525fff2c538795bd97489c05e c7baf6eea5cbd72bac460ec6bce055fa3e988c5a97991067d4b8756cfc417a2d
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Airbnb, Inc. |
GET /login HTTP/1.1
Host: airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 04:09:51 GMT
content-type: text/html; charset=utf-8
report-to: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1713413391&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&s=zTnzgESomIwViDkNa38O6rpOwzTbQLrHt03Fz6WGH%2BQ%3D"}]}
reporting-endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1713413391&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&s=zTnzgESomIwViDkNa38O6rpOwzTbQLrHt03Fz6WGH%2BQ%3D
nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
referrer-policy: strict-origin-when-cross-origin
link: </packs/js/application-bc289b28b95dffd161ab.js>; rel=preload; as=script; nopush,</packs/js/nonessential-2722edaa7d34b3cbd8c2.js>; rel=preload; as=script; nopush,<//ajax.googleapis.com/ajax/libs/jqueryui/1.12.1/themes/smoothness/jquery-ui.css>; rel=preload; as=style; nopush,</assets/application-92b8a4bba2895d1d2a4b99215c202c211c695b7987b154512a588a13f2967830.css>; rel=preload; as=style; nopush
cache-control: max-age=0, private, must-revalidate
set-cookie: _devise-omniauth_session=847b367b87f5e8ae7c332176ae9c8333; path=/; secure; HttpOnly; SameSite=Lax
x-request-id: f3858e93-7412-45b1-bde2-aa6250bd3f34
x-runtime: 0.068190
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains
via: 1.1 vegur
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8761cd41fd8e56ca-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| pairi-app-v3.s3.amazonaws.com/syj5cm6bvzs8f1yomrfutvu80jcm?response-content-disposition=inline%3B%20filename%3D%22Airbnb-logo.jpg%22%3B%20filename%2A%3DUTF-8%27%27Airbnb-logo.jpg&response-content-type=image%2Fjpeg&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAI2EP7SIHAOAWMI5A%2F20240418%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240418T040952Z&X-Amz-Expires=300&X-Amz-SignedHeaders=host&X-Amz-Signature=708654009cb47333b6d2566364cb19eccfe0c47ffc4c9dea2c4f910af02ae712 | 52.217.165.137 | | 45 kB |
URL pairi-app-v3.s3.amazonaws.com/syj5cm6bvzs8f1yomrfutvu80jcm?response-content-disposition=inline%3B%20filename%3D%22Airbnb-logo.jpg%22%3B%20filename%2A%3DUTF-8%27%27Airbnb-logo.jpg&response-content-type=image%2Fjpeg&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAI2EP7SIHAOAWMI5A%2F20240418%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240418T040952Z&X-Amz-Expires=300&X-Amz-SignedHeaders=host&X-Amz-Signature=708654009cb47333b6d2566364cb19eccfe0c47ffc4c9dea2c4f910af02ae712 IP52.217.165.137:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2030x1031, components 3 Hash8edd730ff134b50053eead431ebd1a4d db68621727496d891fb3cd2342dffc989ac1f936 a7285524f143063c1bae1ed4ac4e17725c4327f80b137b88d86c0598af5cc5ea
GET /syj5cm6bvzs8f1yomrfutvu80jcm?response-content-disposition=inline%3B%20filename%3D%22Airbnb-logo.jpg%22%3B%20filename%2A%3DUTF-8%27%27Airbnb-logo.jpg&response-content-type=image%2Fjpeg&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAI2EP7SIHAOAWMI5A%2F20240418%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240418T040952Z&X-Amz-Expires=300&X-Amz-SignedHeaders=host&X-Amz-Signature=708654009cb47333b6d2566364cb19eccfe0c47ffc4c9dea2c4f910af02ae712 HTTP/1.1
Host: pairi-app-v3.s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: yl16AMTvU0U+6DbK+kM1B0yiOvywcwm9/OoOIWHKNbk6RzinfZHI5VTPt91cuD5cs2Gg2tPK/7s=
x-amz-request-id: KJ1MTHVQ2M32RWV6
Date: Thu, 18 Apr 2024 04:09:53 GMT
Last-Modified: Wed, 21 Apr 2021 16:28:41 GMT
ETag: "8edd730ff134b50053eead431ebd1a4d"
x-amz-version-id: null
Content-Disposition: inline; filename="Airbnb-logo.jpg"; filename*=UTF-8''Airbnb-logo.jpg
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 44681
|
|
| cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 | 104.17.24.14 | 200 OK | 77 kB |
URL GET HTTP/3cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 IP104.17.24.14:443
Requested byhttps://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/login CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 77160, version 4.459 Hashaf7ae505a9eed503f8b8e6982036873e d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c 2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co
DNT: 1
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 04:09:53 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 77160
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "5eb03e5f-12d68"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 4272609
expires: Tue, 08 Apr 2025 04:09:53 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qqqZ998%2F1e%2B9BS5Uss%2Fz5YBl9msHfdQyJWdcB4V%2FuXxj0MYBjxG2NBl89frTvfo75ghNTUQFGFvn9HN8b6retsa%2BUQEvi3ru2Kcf7o2V%2FLF1yP28VolKbakyGY87vRb98ek3QUXr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8761cd4b1c65b518-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cdn.jsdelivr.net/npm/select2@4.1.0-beta.1/dist/js/select2.min.js | 151.101.193.229 | 200 OK | 21 kB |
URL GET HTTP/3cdn.jsdelivr.net/npm/select2@4.1.0-beta.1/dist/js/select2.min.js IP151.101.193.229:443
Requested byhttps://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/login CertificateIssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09 ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (64125) Hash1e3d14fddf0553e0b51f69cdccd4fd7f b36737e7d2a65815c40ac86d0502f0cbb8b9bad8 9c04b5c034013c1a9ad5f9d9abcc1dd59e8237e3e09875cb15d328d20da961fd
GET /npm/select2@4.1.0-beta.1/dist/js/select2.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 21026
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 4.1.0-beta.1
x-jsd-version-type: version
etag: W/"11afb-s2c359KmWBXECshtBQLwy7i5utg"
content-encoding: br
accept-ranges: bytes
date: Thu, 18 Apr 2024 04:09:53 GMT
age: 18929660
x-served-by: cache-fra-eddf8230091-FRA, cache-hel1410026-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
|
|
| cdn.jsdelivr.net/npm/bootstrap@4.6.2/dist/js/bootstrap.bundle.min.js | 151.101.193.229 | 200 OK | 24 kB |
URL GET HTTP/3cdn.jsdelivr.net/npm/bootstrap@4.6.2/dist/js/bootstrap.bundle.min.js IP151.101.193.229:443
Requested byhttps://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/login CertificateIssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09 ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File typeJavaScript source, ASCII text, with very long lines (65299) Hasha0805bca912ec901f2a7096228b62d46 3233fd01d87fba457eaad8dcbc289f75b170f814 19126b874a32753d42c12dfa6c17892bfd93820a5a5100ba1b34da4d07599b49
GET /npm/bootstrap@4.6.2/dist/js/bootstrap.bundle.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/
Origin: https://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 23636
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 4.6.2
x-jsd-version-type: version
etag: W/"145b0-MjP9Adh/ukV+qtjcvCifdbFw+BQ"
content-encoding: br
accept-ranges: bytes
date: Thu, 18 Apr 2024 04:09:53 GMT
age: 17114609
x-served-by: cache-fra-etou8220105-FRA, cache-hel1410026-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
|
|
| cdnjs.cloudflare.com/ajax/libs/pdfmake/0.1.36/vfs_fonts.js | 104.17.24.14 | 200 OK | 320 kB |
URL GET HTTP/3cdnjs.cloudflare.com/ajax/libs/pdfmake/0.1.36/vfs_fonts.js IP104.17.24.14:443
Requested byhttps://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/login CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeASCII text, with very long lines (65480) Size320 kB (320395 bytes) Hash795e143b8f4eeb5089b2638cdeca7006 914c1db78046ed67723702de671b32a0b591206f 5cb81fa70754070475938e9859359a268122c9b62cac154ebb8e120e812662cc
GET /ajax/libs/pdfmake/0.1.36/vfs_fonts.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 04:09:53 GMT
content-type: application/javascript; charset=utf-8
content-length: 320395
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03f87-d478c"
last-modified: Mon, 04 May 2020 16:15:03 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 2277799
expires: Tue, 08 Apr 2025 04:09:53 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=614QTr4x%2Bp2ocEyXs%2B1sPKIXdnsL%2BYaUsqByxBaSsoms2o%2FvFSAissjck2wz5aQc2dFcnnZvdvQDXn3hEYOgqTzIr81u2GI%2FVlU2gZ%2BMKMqiZP%2B3fUrg%2B1ADu31l72KlbMg6p8gY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8761cd4b8f0356a9-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cdnjs.cloudflare.com/ajax/libs/pdfmake/0.1.36/pdfmake.min.js | 104.17.24.14 | 200 OK | 316 kB |
URL GET HTTP/3cdnjs.cloudflare.com/ajax/libs/pdfmake/0.1.36/pdfmake.min.js IP104.17.24.14:443
Requested byhttps://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/login CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65465) Size316 kB (316240 bytes) Hashffa9a02736fe4a19a3a08179ceb35a3f 7df31462c443637e656cc8f8bea4f3c835ae24af 071a29c794ab8b2a52f1e139aabdfc06f6a9d99371dc2525f4767ab1ec01b5f9
GET /ajax/libs/pdfmake/0.1.36/pdfmake.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 04:09:53 GMT
content-type: application/javascript; charset=utf-8
content-length: 316240
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03f87-ece93"
last-modified: Mon, 04 May 2020 16:15:03 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 206687
expires: Tue, 08 Apr 2025 04:09:53 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZOWYZNB%2BxnCU7olsbB1rOKSTJsypAwAC23cAXG88g0rDe0X7XUddZZ8Jei5N52ttppr0Vx8GKuxtCVzvKVqrRMaZYTcZU0gJZATFSMbAcdFIBarwe5mivhSzVQl%2Biyd%2BGcy%2B%2Fjpd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8761cd4b8f0456a9-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cdnjs.cloudflare.com/ajax/libs/intl-tel-input/17.0.8/js/intlTelInput.min.js | 104.17.24.14 | 200 OK | 8.9 kB |
URL GET HTTP/3cdnjs.cloudflare.com/ajax/libs/intl-tel-input/17.0.8/js/intlTelInput.min.js IP104.17.24.14:443
Requested byhttps://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/login CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (26997) Hashf38113141ba37f6d39da0f22fb96702a bec789ca106293f96d2cf31285236398776b911e 64cb11eb2a5237cbe1e05ccf25acefeed578f32d1a6923d58de35c8a0145e8cd
GET /ajax/libs/intl-tel-input/17.0.8/js/intlTelInput.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 04:09:53 GMT
content-type: application/javascript; charset=utf-8
content-length: 8889
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5f902e0e-72d9"
last-modified: Wed, 21 Oct 2020 12:48:14 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 630859
expires: Tue, 08 Apr 2025 04:09:53 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qyag3cNMHgqHBEtNQ7bj5dFnQvVmOgfu9Qgf%2BMubHKuw98D6iS4DILJplVlbxEbSMnRpNT%2Bj369MisWVEHSFBJ2X3y58%2FJVuAgqIca65GKBA8salKKH1PFNDbgLnjbZjRCZ23uzE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8761cd4b9f1956a9-OSL
alt-svc: h3=":443"; ma=86400
|
|
| airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/cdn-cgi/challenge-platform/scripts/jsd/main.js | 172.66.43.102 | | 0 B |
URL airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/cdn-cgi/challenge-platform/scripts/jsd/main.js IP172.66.43.102:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Airbnb, Inc. |
GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: _devise-omniauth_session=847b367b87f5e8ae7c332176ae9c8333
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
date: Thu, 18 Apr 2024 04:09:53 GMT
content-length: 0
cache-control: max-age=300, public
access-control-allow-origin: *
location: /cdn-cgi/challenge-platform/h/g/scripts/jsd/54ea73d52131/main.js
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vMup9UQDZDfv7YkT7b2QKBvRr5VUuWI9RiALfLYx5tIPAarR9X3X9R3B9mxMzu7%2BXEJCE%2FXUSg32wFBulvoGvEY1NGOnhVCgwIWiBVGzH66dKjKi1sWZNBHqrmu6VWgWUg847jKz0%2FNPPwR8H9i3YqnWjn8wAURJi45ssD7ClBz0ALVPbdkIhQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8761cd4bdf28568a-OSL
alt-svc: h3=":443"; ma=86400
|
|
| airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/favicon.ico | 172.66.43.102 | 200 OK | 0 B |
URL GET HTTP/3airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/favicon.ico IP172.66.43.102:443
Requested byhttps://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/login CertificateIssuerLet's Encrypt Subjecttangram.co Fingerprint3C:26:99:6C:71:13:DE:82:D0:46:1D:FC:E6:CF:4A:60:89:DA:33:71 ValiditySun, 10 Mar 2024 01:15:48 GMT - Sat, 08 Jun 2024 01:15:47 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Airbnb, Inc. |
GET /favicon.ico HTTP/1.1
Host: airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/login
DNT: 1
Connection: keep-alive
Cookie: _devise-omniauth_session=847b367b87f5e8ae7c332176ae9c8333
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 04:09:53 GMT
content-type: image/vnd.microsoft.icon
content-length: 0
report-to: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1713398017&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&s=5w77sDO0GZCM5vBQNx%2FYyYQQIMckCnqA6BqoTgxxJIE%3D"}]}
reporting-endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1713398017&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&s=5w77sDO0GZCM5vBQNx%2FYyYQQIMckCnqA6BqoTgxxJIE%3D
nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}
last-modified: Wed, 17 Apr 2024 22:30:15 GMT
strict-transport-security: max-age=63072000; includeSubDomains
via: 1.1 vegur
cache-control: max-age=120
cf-cache-status: REVALIDATED
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 8761cd4d5ff5568a-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cdn.jsdelivr.net/npm/bootstrap@4.6.2/dist/js/bootstrap.bundle.min.js | 151.101.193.229 | 200 OK | 24 kB |
URL GET HTTP/3cdn.jsdelivr.net/npm/bootstrap@4.6.2/dist/js/bootstrap.bundle.min.js IP151.101.193.229:443
Requested byhttps://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/login CertificateIssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09 ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File typeJavaScript source, ASCII text, with very long lines (65299) Hasha0805bca912ec901f2a7096228b62d46 3233fd01d87fba457eaad8dcbc289f75b170f814 19126b874a32753d42c12dfa6c17892bfd93820a5a5100ba1b34da4d07599b49
GET /npm/bootstrap@4.6.2/dist/js/bootstrap.bundle.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/
Origin: https://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 23636
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 4.6.2
x-jsd-version-type: version
etag: W/"145b0-MjP9Adh/ukV+qtjcvCifdbFw+BQ"
content-encoding: br
accept-ranges: bytes
date: Thu, 18 Apr 2024 04:09:54 GMT
age: 17114610
x-served-by: cache-fra-etou8220105-FRA, cache-hel1410026-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
|
|
| cdn.datatables.net/2.0.4/js/dataTables.min.js | 104.26.8.123 | 200 OK | 32 kB |
URL GET HTTP/2cdn.datatables.net/2.0.4/js/dataTables.min.js IP104.26.8.123:443
Requested byhttps://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/login CertificateIssuerGoogle Trust Services LLC Subjectdatatables.net Fingerprint90:1B:E4:09:AA:D0:D8:54:84:42:01:61:2A:F3:FD:AA:42:CC:89:6D ValidityWed, 27 Mar 2024 23:37:26 GMT - Tue, 25 Jun 2024 23:37:25 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65458) Hash014f519f7af582357bce79a4f07927b3 f0146ffab07b75e7913fa77749ddc18089b00798 3dc97902b667770191be2c90e08942ad8ed6b7f60a204efb223ee3543adb9ba6
GET /2.0.4/js/dataTables.min.js HTTP/1.1
Host: cdn.datatables.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 04:09:53 GMT
content-type: application/javascript; charset=utf-8
x-frame-options: SAMEORIGIN
last-modified: Tue, 16 Apr 2024 12:21:37 GMT
etag: W/"1380197-15fd5-61635c78d164c-gzip"
cache-control: max-age=31536000
expires: Wed, 16 Apr 2025 13:19:04 GMT
vary: Accept-Encoding,User-Agent
access-control-allow-origin: *
access-control-allow-headers: origin, x-requested-with, content-type
access-control-allow-methods: GET
cf-cache-status: HIT
age: 139849
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6wzBSP%2Fggj2YoTV83r51KV%2BxeVsTtfmBSSCaYEO5nzbBv1jCXptiaMckNsvFtg6%2Bhbtb8JFMGwIrdvdt2MmcUb%2FgC6S19VcfpRt%2BcUk8kamI77Oz0rDyE51KhOUC8%2BONOktTMA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8761cd4b8e31b4ee-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js | 172.66.43.102 | 200 OK | 9.5 kB |
URL GET HTTP/3airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js IP172.66.43.102:443
Requested byhttps://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/login CertificateIssuerLet's Encrypt Subjecttangram.co Fingerprint3C:26:99:6C:71:13:DE:82:D0:46:1D:FC:E6:CF:4A:60:89:DA:33:71 ValiditySun, 10 Mar 2024 01:15:48 GMT - Sat, 08 Jun 2024 01:15:47 GMT
File typegzip compressed data, from Unix Hash9ee00a748b2b6d259c562f526cf33d4d 9d6b55f05a14a916db8e07d38de3d161fe6b3ad0 4a0867494db5870cb743e59f7623dd54a9f78ef9b4420234f2238e28bd6ce5ab
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Airbnb, Inc. |
GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1
Host: airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/login
DNT: 1
Connection: keep-alive
Cookie: _devise-omniauth_session=847b367b87f5e8ae7c332176ae9c8333
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 04:09:52 GMT
content-type: application/javascript
last-modified: Mon, 15 Apr 2024 08:31:34 GMT
etag: W/"661ce5e6-302c"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VfDgO5eKNk2X3F2QUSTbAzaOodg%2FWK0wDqScOFOI8lq9dB3au8wYMcJGAa7tVOvS0AicgkKnZ4xKMs%2Fg5il7M%2BMEACUUb%2FYaAkULE7vqgNWzFMUCtrMW8IolB0cOZa0xdIMon2r1siItCi%2FeIhgHXOY2mY7SkriofopFY%2ByVGrdowuf8lPcckQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8761cd44db43568a-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Sat, 20 Apr 2024 04:09:52 GMT
cache-control: max-age=172800, public
content-encoding: gzip
|
|
| cdnjs.cloudflare.com/ajax/libs/timepicker/1.3.5/jquery.timepicker.min.css | 104.17.24.14 | 200 OK | 330 B |
URL GET HTTP/3cdnjs.cloudflare.com/ajax/libs/timepicker/1.3.5/jquery.timepicker.min.css IP104.17.24.14:443
Requested byhttps://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/login CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeASCII text, with very long lines (1025), with no line terminators Hash03d9983229c533a4a40b27cf1412d676 7e0e4e61f1be61da952004a8fca738903b087135 0d5579714f69c471f64687e8a775c3ddbdeb6dface488cb69d4eb50c46d8cb54
GET /ajax/libs/timepicker/1.3.5/jquery.timepicker.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 04:09:54 GMT
content-type: text/css; charset=utf-8
content-length: 330
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ffd-401"
last-modified: Mon, 04 May 2020 16:17:01 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 605521
expires: Tue, 08 Apr 2025 04:09:54 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FO9P98eomrMHdUvAwfLIgv0EI4y8HzCW5AfyVQ0Z1lRV8jGP4qFi%2BwmHzfhe3cnZwFm%2BOiRjtc0yX8zTzMvc8fnq0bYZl6Y6wRpgJ6kq4DiMs5XVOm8cZu854wV%2FktovPouMvhHH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8761cd529adb56a9-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cdn.jsdelivr.net/npm/select2@4.1.0-beta.1/dist/css/select2.min.css | 151.101.193.229 | 200 OK | 2.4 kB |
URL GET HTTP/3cdn.jsdelivr.net/npm/select2@4.1.0-beta.1/dist/css/select2.min.css IP151.101.193.229:443
Requested byhttps://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/login CertificateIssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09 ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File typeASCII text, with very long lines (15822) Hash809b4f5299218eab37a7c31e4c20478b c9448efbf22bc6f6fbbbbfebbd656642bab13767 907f4395f54e25a1da1181672f1a498e98b26f7bfc6dcb6c209a737472451e49
GET /npm/select2@4.1.0-beta.1/dist/css/select2.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 2372
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 4.1.0-beta.1
x-jsd-version-type: version
etag: W/"3dcf-yUSO+/Irxvb7u7/rvWVmQrqxN2c"
content-encoding: br
accept-ranges: bytes
date: Thu, 18 Apr 2024 04:09:54 GMT
age: 9162617
x-served-by: cache-fra-eddf8230060-FRA, cache-hel1410026-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
|
|
| cdnjs.cloudflare.com/ajax/libs/intl-tel-input/17.0.8/css/intlTelInput.css | 104.17.24.14 | 200 OK | 2.0 kB |
URL GET HTTP/3cdnjs.cloudflare.com/ajax/libs/intl-tel-input/17.0.8/css/intlTelInput.css IP104.17.24.14:443
Requested byhttps://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/login CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
Hasha69aa970266649e0b08c2cb4bc166568 d9314a52085a2bb6d284421bb18a4c546ecb73d4 ad32b1248207ba91fb945a37d38e7c9deafcba849245872203482db42930d491
GET /ajax/libs/intl-tel-input/17.0.8/css/intlTelInput.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 04:09:54 GMT
content-type: text/css; charset=utf-8
content-length: 1970
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5f902e0e-62a6"
last-modified: Wed, 21 Oct 2020 12:48:14 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 215605
expires: Tue, 08 Apr 2025 04:09:54 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BgCkkw92QF5KQ1X1%2FAWqnlEInzyEa5veMzPqKkHyEqbxiaZRt6J5z5yN9%2FBPZSQ472OruzZjQEKyCADArxa6F5CVv4JV5cEv4xXmgGEJ4yib%2FhTz4qmg6JWy2gjH40kwX4RHNCKR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8761cd52aadd56a9-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ajax.googleapis.com/ajax/libs/jqueryui/1.12.1/themes/smoothness/jquery-ui.css | 142.250.74.170 | 200 OK | 8.4 kB |
URL GET HTTP/3ajax.googleapis.com/ajax/libs/jqueryui/1.12.1/themes/smoothness/jquery-ui.css IP142.250.74.170:443
Requested byhttps://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/login CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
File typeASCII text, with very long lines (2363) Hashbf051f24690699bc2665ef6e4d7487a7 0a5599c5783e60b7d51e928812039f3f5c74666a f9b751c1cd0d2b0f91862db987fed9dda48758b15e6f42ca67796b45f4b21702
GET /ajax/libs/jqueryui/1.12.1/themes/smoothness/jquery-ui.css HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 8422
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 11 Apr 2024 17:25:02 GMT
expires: Fri, 11 Apr 2025 17:25:02 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 557092
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/css; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cdn.jsdelivr.net/npm/fullcalendar@5.3.0/main.min.css | 151.101.193.229 | 200 OK | 6.3 kB |
URL GET HTTP/3cdn.jsdelivr.net/npm/fullcalendar@5.3.0/main.min.css IP151.101.193.229:443
Requested byhttps://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/login CertificateIssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09 ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File typeASCII text, with very long lines (24939), with no line terminators Hash5ec4701a7865ac9ff768dab5464d65f9 d1eb4ce68abceb9e2c07ce61a6440319f76a44c5 baaf4f36533307ed61d35223f5cc7bcde136391da92c07d1c37b9450e38f29d0
GET /npm/fullcalendar@5.3.0/main.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 6337
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 5.3.0
x-jsd-version-type: version
etag: W/"616b-0etM5oq8654sB85hpkQDGfdqRMU"
content-encoding: br
accept-ranges: bytes
age: 1110773
date: Thu, 18 Apr 2024 04:09:54 GMT
x-served-by: cache-fra-eddf8230026-FRA, cache-hel1410026-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
|
|
| ajax.googleapis.com/ajax/libs/jqueryui/1.12.1/themes/smoothness/jquery-ui.css | 142.250.74.170 | 200 OK | 8.4 kB |
URL GET HTTP/3ajax.googleapis.com/ajax/libs/jqueryui/1.12.1/themes/smoothness/jquery-ui.css IP142.250.74.170:443
Requested byhttps://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/login CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
File typeASCII text, with very long lines (2363) Hashbf051f24690699bc2665ef6e4d7487a7 0a5599c5783e60b7d51e928812039f3f5c74666a f9b751c1cd0d2b0f91862db987fed9dda48758b15e6f42ca67796b45f4b21702
GET /ajax/libs/jqueryui/1.12.1/themes/smoothness/jquery-ui.css HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 8422
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 11 Apr 2024 17:25:02 GMT
expires: Fri, 11 Apr 2025 17:25:02 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 557092
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/css; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/packs/js/application-bc289b28b95dffd161ab.js | 172.66.43.102 | 200 OK | 157 kB |
URL GET HTTP/3airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/packs/js/application-bc289b28b95dffd161ab.js IP172.66.43.102:443
Requested byhttps://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/login CertificateIssuerLet's Encrypt Subjecttangram.co Fingerprint3C:26:99:6C:71:13:DE:82:D0:46:1D:FC:E6:CF:4A:60:89:DA:33:71 ValiditySun, 10 Mar 2024 01:15:48 GMT - Sat, 08 Jun 2024 01:15:47 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size157 kB (156680 bytes) Hash0a8c1e86a874399a807661b68919ba72 05c0e1fdc103b795f5191b420881d70f30af1d71 b5bf16ccfab7ed6d86843a4070baa3b305fc6e902e603ed2ec5fbbc7d12ff11b
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Airbnb, Inc. |
GET /packs/js/application-bc289b28b95dffd161ab.js HTTP/1.1
Host: airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/login
DNT: 1
Connection: keep-alive
Cookie: _devise-omniauth_session=847b367b87f5e8ae7c332176ae9c8333; cf_clearance=i4sOKBkZC5T_NsEpUSnCvUjCjNOIlicvmuAvujvtds4-1713413393-1.0.1.1-hUdQ_YJ281Kwu_QWExHS9D7zqYKhEXEuIi3LSHHgwRIgCnElHeGQqtf7H5971PpucaKyit4NU7.EH3zAZmluPA; timezone=UTC; utc_offset=0; cookies_enabled=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 04:09:54 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=465701
last-modified: Wed, 17 Apr 2024 22:32:15 GMT
nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}
report-to: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1713395334&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&s=3PPzj5l9%2FfeNdTsLbCigrikMu4%2Fz%2F7uFpUxymENVDhU%3D"}]}
reporting-endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1713395334&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&s=3PPzj5l9%2FfeNdTsLbCigrikMu4%2Fz%2F7uFpUxymENVDhU%3D
strict-transport-security: max-age=63072000; includeSubDomains
vary: Accept-Encoding
via: 1.1 vegur
cache-control: max-age=120
cf-cache-status: HIT
age: 2
server: cloudflare
cf-ray: 8761cd528ad0568a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/packs/js/nonessential-2722edaa7d34b3cbd8c2.js | 172.66.43.102 | 200 OK | 89 kB |
URL GET HTTP/3airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/packs/js/nonessential-2722edaa7d34b3cbd8c2.js IP172.66.43.102:443
Requested byhttps://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/login CertificateIssuerLet's Encrypt Subjecttangram.co Fingerprint3C:26:99:6C:71:13:DE:82:D0:46:1D:FC:E6:CF:4A:60:89:DA:33:71 ValiditySun, 10 Mar 2024 01:15:48 GMT - Sat, 08 Jun 2024 01:15:47 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hashb5889d46b1789fe28eabd4ef74181955 bb6059aae6d3eb7944aa39e093bbd2aaec6a020d 6c4b590b5868a4654f45bcf1da096012af3842f04bd044816d882b338abd0af6
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Airbnb, Inc. |
GET /packs/js/nonessential-2722edaa7d34b3cbd8c2.js HTTP/1.1
Host: airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/login
DNT: 1
Connection: keep-alive
Cookie: _devise-omniauth_session=847b367b87f5e8ae7c332176ae9c8333; cf_clearance=i4sOKBkZC5T_NsEpUSnCvUjCjNOIlicvmuAvujvtds4-1713413393-1.0.1.1-hUdQ_YJ281Kwu_QWExHS9D7zqYKhEXEuIi3LSHHgwRIgCnElHeGQqtf7H5971PpucaKyit4NU7.EH3zAZmluPA; timezone=UTC; utc_offset=0; cookies_enabled=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 04:09:54 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=205745
last-modified: Wed, 17 Apr 2024 22:32:15 GMT
nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}
report-to: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1713395334&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&s=3PPzj5l9%2FfeNdTsLbCigrikMu4%2Fz%2F7uFpUxymENVDhU%3D"}]}
reporting-endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1713395334&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&s=3PPzj5l9%2FfeNdTsLbCigrikMu4%2Fz%2F7uFpUxymENVDhU%3D
strict-transport-security: max-age=63072000; includeSubDomains
vary: Accept-Encoding
via: 1.1 vegur
cache-control: max-age=120
cf-cache-status: HIT
age: 2
server: cloudflare
cf-ray: 8761cd528ad2568a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdnjs.cloudflare.com/ajax/libs/pdfmake/0.1.36/vfs_fonts.js | 104.17.24.14 | 200 OK | 320 kB |
URL GET HTTP/3cdnjs.cloudflare.com/ajax/libs/pdfmake/0.1.36/vfs_fonts.js IP104.17.24.14:443
Requested byhttps://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/login CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeASCII text, with very long lines (65480) Size320 kB (320395 bytes) Hash795e143b8f4eeb5089b2638cdeca7006 914c1db78046ed67723702de671b32a0b591206f 5cb81fa70754070475938e9859359a268122c9b62cac154ebb8e120e812662cc
GET /ajax/libs/pdfmake/0.1.36/vfs_fonts.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 04:09:54 GMT
content-type: application/javascript; charset=utf-8
content-length: 320395
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03f87-d478c"
last-modified: Mon, 04 May 2020 16:15:03 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 2277800
expires: Tue, 08 Apr 2025 04:09:54 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Q4Evwt6ThjcNdWQCYz4RmO3l9lBZuM%2Fi02nfe8Fq0LY8l4XLie2NyiFsHx2%2FXZhKXjN4lxLe99DP5y0waFkucrA22SQ25ZwODfn2zoAqsDhudnTlJMcfIIMDqMMDsMzv%2Fps0%2FFyj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8761cd538b3856a9-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cdnjs.cloudflare.com/ajax/libs/pdfmake/0.1.36/pdfmake.min.js | 104.17.24.14 | 200 OK | 316 kB |
URL GET HTTP/3cdnjs.cloudflare.com/ajax/libs/pdfmake/0.1.36/pdfmake.min.js IP104.17.24.14:443
Requested byhttps://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/login CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65465) Size316 kB (316240 bytes) Hashffa9a02736fe4a19a3a08179ceb35a3f 7df31462c443637e656cc8f8bea4f3c835ae24af 071a29c794ab8b2a52f1e139aabdfc06f6a9d99371dc2525f4767ab1ec01b5f9
GET /ajax/libs/pdfmake/0.1.36/pdfmake.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 04:09:54 GMT
content-type: application/javascript; charset=utf-8
content-length: 316240
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03f87-ece93"
last-modified: Mon, 04 May 2020 16:15:03 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 206688
expires: Tue, 08 Apr 2025 04:09:54 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TXwmnLdQSxlAF6ev59vnGZ3xYRuZZYZhDsG1UWFIpR9NliKb0XkBCDdKvHMt2Y6BPleE%2BrTByngvaLNJm2TXYnxn2Y3D1Cei00AUjtAJAVKtLuPEodjmLLavw0Ryatom89Ed8m3N"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8761cd538b3a56a9-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cdnjs.cloudflare.com/ajax/libs/intl-tel-input/17.0.8/js/intlTelInput.min.js | 104.17.24.14 | 200 OK | 8.9 kB |
URL GET HTTP/3cdnjs.cloudflare.com/ajax/libs/intl-tel-input/17.0.8/js/intlTelInput.min.js IP104.17.24.14:443
Requested byhttps://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/login CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (26997) Hashf38113141ba37f6d39da0f22fb96702a bec789ca106293f96d2cf31285236398776b911e 64cb11eb2a5237cbe1e05ccf25acefeed578f32d1a6923d58de35c8a0145e8cd
GET /ajax/libs/intl-tel-input/17.0.8/js/intlTelInput.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 04:09:54 GMT
content-type: application/javascript; charset=utf-8
content-length: 8889
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5f902e0e-72d9"
last-modified: Wed, 21 Oct 2020 12:48:14 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 630860
expires: Tue, 08 Apr 2025 04:09:54 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sMasi%2FCeAKrPKjh%2FnT0g90NuDjLYB7ejqF7IHGta4vsS4E4Lq2bpyukkUidqL28Jc6910lgaV0ji1wUo8feKQ%2FArJUjGWwAfJQToxHjRB2ivlPVm05KdLy%2BsA32nNubV1bRdeXO5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8761cd544baa56a9-OSL
alt-svc: h3=":443"; ma=86400
|
|
| pairi-app-v3.s3.amazonaws.com/syj5cm6bvzs8f1yomrfutvu80jcm?response-content-disposition=inline%3B%20filename%3D%22Airbnb-logo.jpg%22%3B%20filename%2A%3DUTF-8%27%27Airbnb-logo.jpg&response-content-type=image%2Fjpeg&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAI2EP7SIHAOAWMI5A%2F20240418%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240418T040954Z&X-Amz-Expires=300&X-Amz-SignedHeaders=host&X-Amz-Signature=4f54f6a337900881b233d4d91ccd8ab95de72c5ce9d7a719f94de39ba090a538 | 52.217.165.137 | 200 OK | 45 kB |
URL GET HTTP/1.1pairi-app-v3.s3.amazonaws.com/syj5cm6bvzs8f1yomrfutvu80jcm?response-content-disposition=inline%3B%20filename%3D%22Airbnb-logo.jpg%22%3B%20filename%2A%3DUTF-8%27%27Airbnb-logo.jpg&response-content-type=image%2Fjpeg&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAI2EP7SIHAOAWMI5A%2F20240418%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240418T040954Z&X-Amz-Expires=300&X-Amz-SignedHeaders=host&X-Amz-Signature=4f54f6a337900881b233d4d91ccd8ab95de72c5ce9d7a719f94de39ba090a538 IP52.217.165.137:443
Requested byhttps://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/login CertificateIssuerAmazon Subject*.s3.amazonaws.com FingerprintDC:41:A6:3E:EE:32:6F:36:76:5A:EF:9D:17:AF:14:13:E3:05:C6:D1 ValidityTue, 10 Oct 2023 00:00:00 GMT - Wed, 03 Jul 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2030x1031, components 3 Hash8edd730ff134b50053eead431ebd1a4d db68621727496d891fb3cd2342dffc989ac1f936 a7285524f143063c1bae1ed4ac4e17725c4327f80b137b88d86c0598af5cc5ea
GET /syj5cm6bvzs8f1yomrfutvu80jcm?response-content-disposition=inline%3B%20filename%3D%22Airbnb-logo.jpg%22%3B%20filename%2A%3DUTF-8%27%27Airbnb-logo.jpg&response-content-type=image%2Fjpeg&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAI2EP7SIHAOAWMI5A%2F20240418%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240418T040954Z&X-Amz-Expires=300&X-Amz-SignedHeaders=host&X-Amz-Signature=4f54f6a337900881b233d4d91ccd8ab95de72c5ce9d7a719f94de39ba090a538 HTTP/1.1
Host: pairi-app-v3.s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: wG2r6eVCuJuYcAlNxtKS38q5Ajqom/eCF7/SKoFgvyOiJmeneWZpqWaMr+Xf+ljHK1JV0U1aOBo=
x-amz-request-id: GMK1JN01R9XJ0JX9
Date: Thu, 18 Apr 2024 04:09:55 GMT
Last-Modified: Wed, 21 Apr 2021 16:28:41 GMT
ETag: "8edd730ff134b50053eead431ebd1a4d"
x-amz-version-id: null
Content-Disposition: inline; filename="Airbnb-logo.jpg"; filename*=UTF-8''Airbnb-logo.jpg
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 44681
|
|
| airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/cdn-cgi/challenge-platform/h/g/jsd/r/8761cd41fd8e56ca | 172.66.43.102 | | 77 kB |
URL airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/cdn-cgi/challenge-platform/h/g/jsd/r/8761cd41fd8e56ca IP172.66.43.102:0
Hash834e06221afea9b3d0302afa1f47d9bc 24a1911b348d8f25a1b8f7e020c3d91f3dda258a faac459c50693d3e926cfcf4f46afb075767f5a546f4c6f4dc0bd42823cb7931
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Airbnb, Inc. |
POST /cdn-cgi/challenge-platform/h/g/jsd/r/8761cd41fd8e56ca HTTP/1.1
Host: airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 12293
Origin: https://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co
DNT: 1
Connection: keep-alive
Referer: https://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/login
Cookie: _devise-omniauth_session=847b367b87f5e8ae7c332176ae9c8333
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 04:09:53 GMT
content-type: text/plain; charset=UTF-8
set-cookie: cf_clearance=i4sOKBkZC5T_NsEpUSnCvUjCjNOIlicvmuAvujvtds4-1713413393-1.0.1.1-hUdQ_YJ281Kwu_QWExHS9D7zqYKhEXEuIi3LSHHgwRIgCnElHeGQqtf7H5971PpucaKyit4NU7.EH3zAZmluPA; path=/; expires=Fri, 18-Apr-25 04:09:53 GMT; domain=.tangram.co; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ave7PMgWzXt4F7dz1GM1Yki2E1hlXsHCojyHitMTAhW0%2FlBTw1XCFpZxHjb25EuwzAkID7Loq9kDkrAm%2FCrs8mDpLHDkbJV4rAwcjiBqo%2FsWE2wz3xkxJ%2FxM4L%2BIR%2FnmiNS4w5zAToAXMQHIkLnYLec%2B5kUmVlD6QIa75awGmz6MeaWeY8Cc%2BA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8761cd4e68a3568a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/favicon.ico | 172.66.43.102 | 200 OK | 0 B |
URL GET HTTP/3airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/favicon.ico IP172.66.43.102:443
Requested byhttps://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/login CertificateIssuerLet's Encrypt Subjecttangram.co Fingerprint3C:26:99:6C:71:13:DE:82:D0:46:1D:FC:E6:CF:4A:60:89:DA:33:71 ValiditySun, 10 Mar 2024 01:15:48 GMT - Sat, 08 Jun 2024 01:15:47 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Airbnb, Inc. |
GET /favicon.ico HTTP/1.1
Host: airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/login
DNT: 1
Connection: keep-alive
Cookie: _devise-omniauth_session=847b367b87f5e8ae7c332176ae9c8333; cf_clearance=i4sOKBkZC5T_NsEpUSnCvUjCjNOIlicvmuAvujvtds4-1713413393-1.0.1.1-hUdQ_YJ281Kwu_QWExHS9D7zqYKhEXEuIi3LSHHgwRIgCnElHeGQqtf7H5971PpucaKyit4NU7.EH3zAZmluPA; timezone=UTC; utc_offset=0; cookies_enabled=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 04:09:55 GMT
content-type: image/vnd.microsoft.icon
content-length: 0
report-to: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1713398017&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&s=5w77sDO0GZCM5vBQNx%2FYyYQQIMckCnqA6BqoTgxxJIE%3D"}]}
reporting-endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1713398017&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&s=5w77sDO0GZCM5vBQNx%2FYyYQQIMckCnqA6BqoTgxxJIE%3D
nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}
last-modified: Wed, 17 Apr 2024 22:30:15 GMT
strict-transport-security: max-age=63072000; includeSubDomains
via: 1.1 vegur
cache-control: max-age=120
cf-cache-status: HIT
age: 2
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 8761cd572dae568a-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cdn.jsdelivr.net/npm/bootstrap@4.6.2/dist/js/bootstrap.bundle.min.js | 151.101.193.229 | 200 OK | 24 kB |
URL GET HTTP/3cdn.jsdelivr.net/npm/bootstrap@4.6.2/dist/js/bootstrap.bundle.min.js IP151.101.193.229:443
Requested byhttps://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/login CertificateIssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09 ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File typeJavaScript source, ASCII text, with very long lines (65299) Hasha0805bca912ec901f2a7096228b62d46 3233fd01d87fba457eaad8dcbc289f75b170f814 19126b874a32753d42c12dfa6c17892bfd93820a5a5100ba1b34da4d07599b49
GET /npm/bootstrap@4.6.2/dist/js/bootstrap.bundle.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/
Origin: https://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 23636
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 4.6.2
x-jsd-version-type: version
etag: W/"145b0-MjP9Adh/ukV+qtjcvCifdbFw+BQ"
content-encoding: br
accept-ranges: bytes
date: Thu, 18 Apr 2024 04:09:55 GMT
age: 17114611
x-served-by: cache-fra-etou8220105-FRA, cache-hel1410026-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
|
|
| airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/favicon.png?v= | 172.66.43.102 | 200 OK | 25 kB |
URL GET HTTP/3airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/favicon.png?v= IP172.66.43.102:443
Requested byhttps://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/login CertificateIssuerLet's Encrypt Subjecttangram.co Fingerprint3C:26:99:6C:71:13:DE:82:D0:46:1D:FC:E6:CF:4A:60:89:DA:33:71 ValiditySun, 10 Mar 2024 01:15:48 GMT - Sat, 08 Jun 2024 01:15:47 GMT
File typeRIFF (little-endian) data, Web/P image Hashfbf154aa30e250de4dda4fabf3e99612 7fceaa5a2a59b01e205841aade649df4c2f68f2a a4b53f37b7c800636f50f99e0d68b52cd62624d2ea025b78ff88bfc13bbf5de9
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Airbnb, Inc. |
GET /favicon.png?v= HTTP/1.1
Host: airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/login
DNT: 1
Connection: keep-alive
Cookie: _devise-omniauth_session=847b367b87f5e8ae7c332176ae9c8333; cf_clearance=i4sOKBkZC5T_NsEpUSnCvUjCjNOIlicvmuAvujvtds4-1713413393-1.0.1.1-hUdQ_YJ281Kwu_QWExHS9D7zqYKhEXEuIi3LSHHgwRIgCnElHeGQqtf7H5971PpucaKyit4NU7.EH3zAZmluPA; timezone=UTC; utc_offset=0; cookies_enabled=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 18 Apr 2024 04:09:55 GMT
content-type: image/webp
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=80370
content-disposition: inline; filename="favicon.webp"
last-modified: Wed, 17 Apr 2024 22:30:15 GMT
nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}
report-to: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1713398590&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&s=uWX4zmBP3d93Dl0gPAEPGrh0CLMzEYmQDwS48G7sWeo%3D"}]}
reporting-endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1713398590&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&s=uWX4zmBP3d93Dl0gPAEPGrh0CLMzEYmQDwS48G7sWeo%3D
strict-transport-security: max-age=63072000; includeSubDomains
vary: Accept
via: 1.1 vegur
cache-control: max-age=120
cf-cache-status: HIT
age: 1
server: cloudflare
cf-ray: 8761cd5b3859568a-OSL
alt-svc: h3=":443"; ma=86400
|
|
| airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBclFSIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--0df61ee3f5c5651f8d3b9fcd2c2e8cdbcd7fdc4d/Airbnb-logo.jpg | 172.66.43.102 | 302 Found | 45 kB |
URL GET HTTP/3airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBclFSIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--0df61ee3f5c5651f8d3b9fcd2c2e8cdbcd7fdc4d/Airbnb-logo.jpg IP172.66.43.102:443
Requested byhttps://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/login CertificateIssuerLet's Encrypt Subjecttangram.co Fingerprint3C:26:99:6C:71:13:DE:82:D0:46:1D:FC:E6:CF:4A:60:89:DA:33:71 ValiditySun, 10 Mar 2024 01:15:48 GMT - Sat, 08 Jun 2024 01:15:47 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Airbnb, Inc. |
GET /rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBclFSIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--0df61ee3f5c5651f8d3b9fcd2c2e8cdbcd7fdc4d/Airbnb-logo.jpg HTTP/1.1
Host: airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/login
DNT: 1
Connection: keep-alive
Cookie: _devise-omniauth_session=847b367b87f5e8ae7c332176ae9c8333; cf_clearance=i4sOKBkZC5T_NsEpUSnCvUjCjNOIlicvmuAvujvtds4-1713413393-1.0.1.1-hUdQ_YJ281Kwu_QWExHS9D7zqYKhEXEuIi3LSHHgwRIgCnElHeGQqtf7H5971PpucaKyit4NU7.EH3zAZmluPA; timezone=UTC; utc_offset=0; cookies_enabled=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
date: Thu, 18 Apr 2024 04:09:54 GMT
content-type: text/html; charset=utf-8
location: https://pairi-app-v3.s3.amazonaws.com/syj5cm6bvzs8f1yomrfutvu80jcm?response-content-disposition=inline%3B%20filename%3D%22Airbnb-logo.jpg%22%3B%20filename%2A%3DUTF-8%27%27Airbnb-logo.jpg&response-content-type=image%2Fjpeg&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAI2EP7SIHAOAWMI5A%2F20240418%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240418T040954Z&X-Amz-Expires=300&X-Amz-SignedHeaders=host&X-Amz-Signature=4f54f6a337900881b233d4d91ccd8ab95de72c5ce9d7a719f94de39ba090a538
report-to: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1713413394&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&s=qzmoC6M4Rzt2Veekila2bZEayk%2BZTTX58CPRjS6OzsM%3D"}]}
reporting-endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1713413394&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&s=qzmoC6M4Rzt2Veekila2bZEayk%2BZTTX58CPRjS6OzsM%3D
nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
referrer-policy: strict-origin-when-cross-origin
cache-control: max-age=300, private
x-request-id: efeafa04-fc1e-4929-a383-0e2e2f5a291e
x-runtime: 0.009368
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains
via: 1.1 vegur
cf-cache-status: BYPASS
server: cloudflare
cf-ray: 8761cd52bae8568a-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cdn.datatables.net/buttons/3.0.2/js/dataTables.buttons.min.js | 104.26.8.123 | 200 OK | 27 kB |
URL GET HTTP/2cdn.datatables.net/buttons/3.0.2/js/dataTables.buttons.min.js IP104.26.8.123:443
Requested byhttps://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/login CertificateIssuerGoogle Trust Services LLC Subjectdatatables.net Fingerprint90:1B:E4:09:AA:D0:D8:54:84:42:01:61:2A:F3:FD:AA:42:CC:89:6D ValidityWed, 27 Mar 2024 23:37:26 GMT - Tue, 25 Jun 2024 23:37:25 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /buttons/3.0.2/js/dataTables.buttons.min.js HTTP/1.1
Host: cdn.datatables.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 04:09:54 GMT
content-type: application/javascript; charset=utf-8
x-frame-options: SAMEORIGIN
last-modified: Tue, 16 Apr 2024 12:21:39 GMT
etag: W/"1360275-6854-61635c7a8b0b4-gzip"
cache-control: max-age=31536000
expires: Wed, 16 Apr 2025 14:17:46 GMT
vary: Accept-Encoding,User-Agent
access-control-allow-origin: *
access-control-allow-headers: origin, x-requested-with, content-type
access-control-allow-methods: GET
cf-cache-status: HIT
age: 136327
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cS91RbGzHvG2NSIRgAXHNzAgy%2B3yivv4rTWaglzHeWBadk5LX0hQ40Kxf9x0qDkoejIB0tFnP%2FHkOj8BU5tSF9TkjQemXSWZA8FvD21uSC2BYzDbgX8KoIKQ76JzrET6nzAO%2Bw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8761cd5389d1b4ee-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| cdn.datatables.net/v/dt/jszip-2.5.0/dt-1.10.22/af-2.3.5/b-1.6.4/b-html5-1.6.4/b-print-1.6.4/fh-3.1.7/kt-2.5.3/r-2.2.6/sc-2.0.3/sb-1.0.0/sp-1.2.0/datatables.min.css | 104.26.8.123 | 200 OK | 54 kB |
URL GET HTTP/2cdn.datatables.net/v/dt/jszip-2.5.0/dt-1.10.22/af-2.3.5/b-1.6.4/b-html5-1.6.4/b-print-1.6.4/fh-3.1.7/kt-2.5.3/r-2.2.6/sc-2.0.3/sb-1.0.0/sp-1.2.0/datatables.min.css IP104.26.8.123:443
Requested byhttps://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/login CertificateIssuerGoogle Trust Services LLC Subjectdatatables.net Fingerprint90:1B:E4:09:AA:D0:D8:54:84:42:01:61:2A:F3:FD:AA:42:CC:89:6D ValidityWed, 27 Mar 2024 23:37:26 GMT - Tue, 25 Jun 2024 23:37:25 GMT
File typeASCII text, with very long lines (14194) Hashfb689d3a558392451a0e22f02bec377c d5dd860f5853f575b50b9d58387196f90c98eabc 624ccc28892277435fd26a27abd18307642a0393dcad2ce439a5efe9080c340f
GET /v/dt/jszip-2.5.0/dt-1.10.22/af-2.3.5/b-1.6.4/b-html5-1.6.4/b-print-1.6.4/fh-3.1.7/kt-2.5.3/r-2.2.6/sc-2.0.3/sb-1.0.0/sp-1.2.0/datatables.min.css HTTP/1.1
Host: cdn.datatables.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 04:09:54 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
access-control-allow-methods: OPTIONS, GET
cache-control: max-age=31557600
cf-cache-status: HIT
age: 14551
last-modified: Thu, 18 Apr 2024 00:07:23 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=A77ueiRqC8ksp5Urw7O99f%2Fu8RY%2BveSjBv%2FGnmSK2Kqd%2FOa8lB3U7ejN34DSMfPZcQ5FfdN%2BVLo7NmL3saehcJVsvwQczMW%2FhMk21A%2FM5dKdbNzwuluyTgSlBWXqbhN%2BlhWLTg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8761cd52995fb4ee-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| cdn.datatables.net/buttons/3.0.2/js/buttons.html5.min.js | 104.26.8.123 | 200 OK | 26 kB |
URL GET HTTP/2cdn.datatables.net/buttons/3.0.2/js/buttons.html5.min.js IP104.26.8.123:443
Requested byhttps://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/login CertificateIssuerGoogle Trust Services LLC Subjectdatatables.net Fingerprint90:1B:E4:09:AA:D0:D8:54:84:42:01:61:2A:F3:FD:AA:42:CC:89:6D ValidityWed, 27 Mar 2024 23:37:26 GMT - Tue, 25 Jun 2024 23:37:25 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /buttons/3.0.2/js/buttons.html5.min.js HTTP/1.1
Host: cdn.datatables.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 04:09:54 GMT
content-type: application/javascript; charset=utf-8
x-frame-options: SAMEORIGIN
last-modified: Tue, 16 Apr 2024 12:21:39 GMT
etag: W/"1360293-6578-61635c7a8a8e4-gzip"
cache-control: max-age=31536000
expires: Wed, 16 Apr 2025 14:20:11 GMT
vary: Accept-Encoding,User-Agent
access-control-allow-origin: *
access-control-allow-headers: origin, x-requested-with, content-type
access-control-allow-methods: GET
cf-cache-status: HIT
age: 136182
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vQPdVhS1PdjQf7VJqvpfPsnA9rNztBMReEAGvbbLRfiLdaNqygfNccGAMtN%2BpqGxbfUxZ9%2FQCB5WeggYM%2FyIIzJsMTT5Za6n%2FkCwZqOdfGRtFfvYVrAdO4rCqTU2BYCZkfZMgQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8761cd5379cdb4ee-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/assets/application-92b8a4bba2895d1d2a4b99215c202c211c695b7987b154512a588a13f2967830.css | 172.66.43.102 | 200 OK | 344 kB |
URL GET HTTP/3airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/assets/application-92b8a4bba2895d1d2a4b99215c202c211c695b7987b154512a588a13f2967830.css IP172.66.43.102:443
Requested byhttps://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/login CertificateIssuerLet's Encrypt Subjecttangram.co Fingerprint3C:26:99:6C:71:13:DE:82:D0:46:1D:FC:E6:CF:4A:60:89:DA:33:71 ValiditySun, 10 Mar 2024 01:15:48 GMT - Sat, 08 Jun 2024 01:15:47 GMT
Size344 kB (343886 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Airbnb, Inc. |
GET /assets/application-92b8a4bba2895d1d2a4b99215c202c211c695b7987b154512a588a13f2967830.css HTTP/1.1
Host: airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/login
DNT: 1
Connection: keep-alive
Cookie: _devise-omniauth_session=847b367b87f5e8ae7c332176ae9c8333; cf_clearance=i4sOKBkZC5T_NsEpUSnCvUjCjNOIlicvmuAvujvtds4-1713413393-1.0.1.1-hUdQ_YJ281Kwu_QWExHS9D7zqYKhEXEuIi3LSHHgwRIgCnElHeGQqtf7H5971PpucaKyit4NU7.EH3zAZmluPA; timezone=UTC; utc_offset=0; cookies_enabled=true
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 18 Apr 2024 04:09:54 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=347763
last-modified: Wed, 17 Apr 2024 22:19:51 GMT
nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}
report-to: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1713395334&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&s=3PPzj5l9%2FfeNdTsLbCigrikMu4%2Fz%2F7uFpUxymENVDhU%3D"}]}
reporting-endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1713395334&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&s=3PPzj5l9%2FfeNdTsLbCigrikMu4%2Fz%2F7uFpUxymENVDhU%3D
strict-transport-security: max-age=63072000; includeSubDomains
vary: Accept-Encoding
via: 1.1 vegur
cache-control: max-age=120
cf-cache-status: HIT
age: 2
server: cloudflare
cf-ray: 8761cd52aae0568a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/assets/application-92b8a4bba2895d1d2a4b99215c202c211c695b7987b154512a588a13f2967830.css | 172.66.43.102 | 200 OK | 344 kB |
URL GET HTTP/3airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/assets/application-92b8a4bba2895d1d2a4b99215c202c211c695b7987b154512a588a13f2967830.css IP172.66.43.102:443
Requested byhttps://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/login CertificateIssuerLet's Encrypt Subjecttangram.co Fingerprint3C:26:99:6C:71:13:DE:82:D0:46:1D:FC:E6:CF:4A:60:89:DA:33:71 ValiditySun, 10 Mar 2024 01:15:48 GMT - Sat, 08 Jun 2024 01:15:47 GMT
Size344 kB (343886 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Airbnb, Inc. |
GET /assets/application-92b8a4bba2895d1d2a4b99215c202c211c695b7987b154512a588a13f2967830.css HTTP/1.1
Host: airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://airbnb-c1eab118-2df8-426d-a3c0-0e8e4016bbf4.tangram.co/login
DNT: 1
Connection: keep-alive
Cookie: _devise-omniauth_session=847b367b87f5e8ae7c332176ae9c8333; cf_clearance=i4sOKBkZC5T_NsEpUSnCvUjCjNOIlicvmuAvujvtds4-1713413393-1.0.1.1-hUdQ_YJ281Kwu_QWExHS9D7zqYKhEXEuIi3LSHHgwRIgCnElHeGQqtf7H5971PpucaKyit4NU7.EH3zAZmluPA; timezone=UTC; utc_offset=0; cookies_enabled=true
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 18 Apr 2024 04:09:54 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=347763
last-modified: Wed, 17 Apr 2024 22:19:51 GMT
nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}
report-to: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1713395334&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&s=3PPzj5l9%2FfeNdTsLbCigrikMu4%2Fz%2F7uFpUxymENVDhU%3D"}]}
reporting-endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1713395334&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&s=3PPzj5l9%2FfeNdTsLbCigrikMu4%2Fz%2F7uFpUxymENVDhU%3D
strict-transport-security: max-age=63072000; includeSubDomains
vary: Accept-Encoding
via: 1.1 vegur
cache-control: max-age=120
cf-cache-status: HIT
age: 2
server: cloudflare
cf-ray: 8761cd528ad7568a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|