{"report_id":"3b6d2183-81ab-405e-9a4d-2324d39467e9","version":0,"status":"done","tags":[],"date":"2026-07-29T12:57:13Z","url":{"schema":"http","addr":"booklngstay-prearrlvalupdat.com/1319574359","fqdn":"booklngstay-prearrlvalupdat.com","domain":"booklngstay-prearrlvalupdat.com","tld":"com"},"ip":{"addr":"172.67.167.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"booklngstay-prearrlvalupdat.com/1319574359","fqdn":"booklngstay-prearrlvalupdat.com","domain":"booklngstay-prearrlvalupdat.com","tld":"com"},"title":"Booking.com - Bekreftelse","dom":{"size":296235,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (52400)","md5":"b0fccdf8f172bb966aece209d7748fb0","sha1":"cadb6b6a83d253c2bd5ed7f128ef0800c66996fe","sha256":"b4c8931c4d3c641bd3a805e35570b224407462b7507e77d7a3b1ee09c4258838","sha512":"203b91a1ae09a38f9c4242f0829ff89c974906b718a8e5c434bd5b3e6ef74ecc9f0775f519179ba7be4729ca63917a59b43251ff20432c5f0262d9207f190633","ssdeep":"6144:2I4xXw0okHcHAa0evnNyolRjiunyl6fRZzxx02F9dGp6Y:23JozAa0QyolRVnyl6fRZzxxkN","tlshash":"31547d5261f5273e045b02c9a9563e2e6fedc23be652c5c4b58c87b43fe2c68d237468","dom_hash":"domhash802400db2f9e917611654fd6e7f2ec5c","first_seen":"2026-07-29T12:57:16.711033Z","last_seen":"2026-07-29T12:57:16.711033Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"booklngstay-prearrlvalupdat.com/1319574359","fqdn":"booklngstay-prearrlvalupdat.com","domain":"booklngstay-prearrlvalupdat.com","tld":"com"},"ip":{"addr":"172.67.167.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-02T12:57:13Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"booklngstay-prearrlvalupdat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"flagcdn.com","ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-04-05","domain_rank":30920,"first_seen":"2020-04-05T08:17:33Z","last_seen":"2026-07-24T06:33:06.436724Z","alert_count":0,"request_count":2,"received_data":2507,"sent_data":1102,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"i.imgur.com","ip":{"addr":"199.232.196.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2009-01-09","domain_rank":3309,"first_seen":"2012-05-21T08:09:36Z","last_seen":"2026-07-24T10:41:38.173856Z","alert_count":0,"request_count":1,"received_data":1346,"sent_data":549,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-26T22:23:14.439231Z","alert_count":0,"request_count":1,"received_data":1249,"sent_data":522,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"booklngstay-prearrlvalupdat.com","ip":{"addr":"104.21.75.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-23","domain_rank":0,"first_seen":"2026-07-29T12:54:30.438604Z","last_seen":"2026-07-29T12:54:30.438604Z","alert_count":52,"request_count":52,"received_data":639417,"sent_data":37684,"comment":"","tags":null,"fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}]},{"fqdn":"t-cf.bstatic.com","ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2009-04-24","domain_rank":123886,"first_seen":"2022-12-04T19:01:11Z","last_seen":"2026-07-27T05:51:48.01466Z","alert_count":0,"request_count":41,"received_data":49379,"sent_data":24518,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"cf.bstatic.com","ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2009-04-24","domain_rank":109157,"first_seen":"2020-10-08T14:09:51Z","last_seen":"2026-07-26T04:00:51.634317Z","alert_count":0,"request_count":1,"received_data":224934,"sent_data":661,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"raw.githubusercontent.com","ip":{"addr":"185.199.109.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2014-02-06","domain_rank":22021,"first_seen":"2014-03-01T07:08:08Z","last_seen":"2026-07-23T23:18:20.113893Z","alert_count":0,"request_count":8,"received_data":31218,"sent_data":4930,"comment":"","tags":null,"fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-26T22:19:52.505461Z","alert_count":0,"request_count":1,"received_data":129166,"sent_data":583,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"booklngstay-prearrlvalupdat.com/book/js/script.js?v=1771629200","fqdn":"booklngstay-prearrlvalupdat.com","domain":"booklngstay-prearrlvalupdat.com","tld":"com"},"ip":{"addr":"104.21.75.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a45316929ab38c470f84213cf4d1407a","sha1":"0675f47e9ff02c185f47d83ce2de1161c5782449","sha256":"2f218382621c06f00a84958dd8ee0a7cacdd46573175007a29c42b31c7bbc130","sha512":"a6908415354865fd35964793193eb5435102ff3aaaa806eaaba6e3f7effc32227855388ee5cfcaffb5640b80e37b8d2c18691c91fad2de858f3bc50a36298c7a","ssdeep":"192:Na+N9SCxAP+N9SCfWXXWybUBYPosmy0pQ3BdTpi6cMjTpQlnyJZzLADCn6YJ:srTD1xj1l","tlshash":"8642251416f5183642b364ff7bcb91c5b62201ef984198793cac960e1fa0e945bf1be6","size":12315,"data":"","first_seen":"2026-05-02T20:55:48.333704Z","last_seen":"2026-08-06T00:54:57.291008Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booklngstay-prearrlvalupdat.com/js/payment-modal.js?v=","fqdn":"booklngstay-prearrlvalupdat.com","domain":"booklngstay-prearrlvalupdat.com","tld":"com"},"ip":{"addr":"104.21.75.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fc6b202863c88531817f142e526e592","sha1":"c143cdbc179c0bb47f6aacf21661dc678ad6a696","sha256":"0baddefff3ec3949bbbdcbd2fd5b8d96c02e913d0b0144972a5fa05ced405b17","sha512":"7aa8e99b3013cca57a90c0a6e6b0d77432f9e1d763c681055a9c651273ad327cd063cd24d05062ab32bd132ffbeb890e5a26587fa9ca794ced7b87a5b335a302","ssdeep":"768:0yUlCoVj/eie3lLJJW/5raUm9EQqWGu3NJ6+hNDa:0PlCEj/eLbM5r8Dq0NJq","tlshash":"c9838258a6f321720a7775bb47ff4205763b00974409ce907c5cba881fc0ea5a7f6ae9","size":81886,"data":"","first_seen":"2026-07-29T12:57:16.729565Z","last_seen":"2026-08-06T00:54:57.31896Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booklngstay-prearrlvalupdat.com/js/support.js?v=1782665000","fqdn":"booklngstay-prearrlvalupdat.com","domain":"booklngstay-prearrlvalupdat.com","tld":"com"},"ip":{"addr":"104.21.75.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c7112e388f1a61bc1bac10fe648dbb7d","sha1":"26657ea0b48c4f2a820e1c23546c56607b39f6d7","sha256":"b5d70c6bdb5bf20df529b425fb3175255073b02107a0715a18ea7ac82d41b06f","sha512":"061dd2b8819956b80a0568f3ef69b6f891e163486386ff93cd4b17a695019e53a581290d2366c92d6aba817528311729ec80860800bab58e067870c6127c8637","ssdeep":"1536:MyQVAp8hjrIE6kKJEcB44MvfSagQrE/2k:QVAp8hhKB5YfSt","tlshash":"25430a692ab700291877a175b7cfa70533259007a107da243b9c564cffd0be9d2fabd8","size":55489,"data":"","first_seen":"2026-07-29T12:57:16.739186Z","last_seen":"2026-08-06T00:54:57.286631Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"booklngstay-prearrlvalupdat.com/api/support/getMessages","fqdn":"booklngstay-prearrlvalupdat.com","domain":"booklngstay-prearrlvalupdat.com","tld":"com"},"ip":{"addr":"104.21.75.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:57:05.861Z","timestamp":1785329825861,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booklngstay-prearrlvalupdat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 11:41:52 GMT","end":"Wed, 21 Oct 2026 12:40:36 GMT"},"fingerprint":{"sha1":"DB:AF:8A:08:8A:25:1D:15:95:70:4C:A2:5A:B5:81:10:DB:6E:21:35","sha256":"15:AA:2A:FE:B4:10:C9:B3:8F:8D:C6:43:0C:B7:8D:B8:1B:D5:9A:F2:D8:D7:58:DB:D2:E1:B7:4B:E7:E2:0B:C4"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booklngstay-prearrlvalupdat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booklngstay-prearrlvalupdat.com/1319574359\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://booklngstay-prearrlvalupdat.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=b31a4c32-1714-4a83-92aa-24a6bd0fb2a2; connect.sid=s%3AAfAG8o4L7A_bO_qkT-qw8e5RocYfDJoe.4Fp2OE7ssfj%2B9th6Q88vtp3s4wZfnBKhnmQs%2FZpv388\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1785329805611.9065\",\"chatVisible\":true,\"lang\":\"no\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 29 Jul 2026 12:57:05 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LbuevuDMRQa8DZ8xexMI9XFXRznHqKl%2BRTIxqOyLhzzQP4cus2J%2FWTEcnH%2FcpQ1E6aAPa%2BN2%2BToPZJ8jQtvUITRKXUtxwh89mFKSdaKwsTD6Wx6rnCLC5s5SFew3UfEdsg2y6kGEpqbOCWm5YnD5fPRY\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"277-7LcLm6YmCWKd7GiUK7Wuu/JZeuY\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a22c4993a8a2569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":631,"size_decoded":1096,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"780cec47c41e22354090c2dd1488a679","sha1":"ecb70b9ba62609629dec68942bb5aebbf2597ae6","sha256":"f62376ab9cbb592d8536eef3c505739ade54099751dcb5fe0532b9fa481d78d0","sha512":"6c274367bdfee106d2fbc3695c01ea8f5b87025ca696478efa416106194f178e0ebe816a0cefa909dd47d61670a21599e578bc295766f85f55790b86a8817cbd","ssdeep":"","tlshash":"1df002dfcb4f2da42bc20113b04d2287b6f4104d4b6530b10e4ee4183334b56db2b45b","first_seen":"2026-07-29T12:57:16.713555Z","last_seen":"2026-07-29T12:57:16.713555Z","times_seen":1,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"booklngstay-prearrlvalupdat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Hr@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:46.701Z","timestamp":1785329806701,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Hr@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booklngstay-prearrlvalupdat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 996\r\nlast-modified: Mon, 19 Jan 2026 12:32:11 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: 7_IUfMd.5GEWQU_9bR8YwVptLuPUdyyC\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Tue, 28 Jul 2026 17:23:06 GMT\r\netag: \"52d8768a8236e6aded4448bbba3c3532\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4118da051b044af6aef02765a0bd4fe4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: B42dGecwIvpnskblgH1KyDeWZ-X-y_UEU_yHCimbmB1SjVgdbOSygA==\r\nage: 70421\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":996,"size_decoded":1773,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"a396bedbcf5a559c02996ced38aec94e","sha1":"cf6d47767a2a62e4992671b2ea6a63c0e0e079ab","sha256":"d416e0168f6eb8355b546fe6344b35eb0d76ff4bff0b6aeeb5e4e35602e6a2e7","sha512":"9ea42df5dab7b3b8174d6ce0033e4c4d77dd03803047a74c2a00e31deb856c4e7b93b72f40b5d25871486e0dbb6f257547e8fc806fb17519a6436f64f8eae563","ssdeep":"","tlshash":"6111a8c9c575d4e5442a1d2b4d5e054c6b27d22c14e17c3b9175d571b04cc485241a13","first_seen":"2026-05-02T20:55:48.339976Z","last_seen":"2026-08-06T00:54:57.323352Z","times_seen":8,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Jp@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:46.709Z","timestamp":1785329806709,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Jp@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booklngstay-prearrlvalupdat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 385\r\nlast-modified: Mon, 19 Jan 2026 12:32:11 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: aQmLSR6XA4BDEy9LspmrcyxKOIFNPer0\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Tue, 28 Jul 2026 17:23:06 GMT\r\netag: \"091e3fea9788d22f32f0d4f15908f734\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4118da051b044af6aef02765a0bd4fe4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: EK6Sl05D_AmZkuo71GYsq7idDLHB0qBeWap4Nxuq2eYk9_fitRsLDQ==\r\nage: 70421\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":385,"size_decoded":1162,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"d075ec16020cde76748ca66165150fd5","sha1":"cb4f00c037870f2af12ffd5837a5c5b8d36aa435","sha256":"c6f0b5419e93764cb2ac6ca105354951648b1a696c4a8e5684ccb7cf2fa2f77c","sha512":"d0be1b6f9b03a8d6ee939d808052c73bc6e8a0ecd02a67af92ab10f61fd93997fe5513c36f3e8150807864a6f23ab7ccd9153d7c0d9fee296f38dfa82232a05d","ssdeep":"","tlshash":"78e0f1df01863837c4e582fb22300da1b91746408911c02c761a884c30156c0bf9f2f5","first_seen":"2025-03-18T07:37:38.816113Z","last_seen":"2026-08-07T00:48:35.885773Z","times_seen":2649,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Ge@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:46.711Z","timestamp":1785329806711,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Ge@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booklngstay-prearrlvalupdat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 366\r\nlast-modified: Mon, 19 Jan 2026 12:32:10 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: Lg5yOCDuhDlfShUcVrHfs.Huq7LOUFDv\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Tue, 28 Jul 2026 17:53:37 GMT\r\netag: \"c53bd4524300c027e11048ece117a603\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4118da051b044af6aef02765a0bd4fe4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: rpDmnRrE384S0z52ro2GvPUPNXthyz9ODjACHzcsZ0YwY3Z3F76o2Q==\r\nage: 68590\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":366,"size_decoded":1143,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"bbca025d77b9e6d52fa7107046656ec1","sha1":"a9834dfe00a25a54e12fe3f83851ed5ef78befa8","sha256":"584aad0731bad63a3705ae0f7e819ad38267266a60a7029f2f863a568c369970","sha512":"99459001518df3b427218e9908413dc22b46a9045104989b64e2b4bcd9557112a2f008143b740b568f1acd21ca3c08af4f0dfe8465249a5731f6c4a1707b2098","ssdeep":"","tlshash":"4be068cee7d86ce5e51a695780532a68a76b042a0a01ba51a0688839857a2d5ca93e60","first_seen":"2026-05-02T20:55:48.309225Z","last_seen":"2026-08-06T00:54:57.313188Z","times_seen":8,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Th@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:46.743Z","timestamp":1785329806743,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Th@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booklngstay-prearrlvalupdat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 183\r\nlast-modified: Mon, 19 Jan 2026 12:32:15 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: HUyGG89NdlW46Osg6FO0.8n1RwbrEiLV\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Tue, 28 Jul 2026 17:53:37 GMT\r\netag: \"ddcd2550c5d5d7ff8589d7799df8723b\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4118da051b044af6aef02765a0bd4fe4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: Jz57GBfiI-GJLDBUee9KN1YhmOc0utl2tLdkuDCBV22nLf8V9i68Tw==\r\nage: 68590\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":183,"size_decoded":960,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"51199138b31635f838f723c889d6e992","sha1":"d4089bee1730192b96fa9a54611c80312441db72","sha256":"d1d51cbdc2a7d461bf529de2e30438e420e2f9d6183867edaddd12e23daa3664","sha512":"c70f2dd1fa6ad6a5f0901ae5e9ae3100ef9f83f50a309bd7d433086b2e33753e0631eefcced69c69830e135245e4b6b394d9d5cc1ea16fa62072ca0e0d1779b5","ssdeep":"","tlshash":"b1c022caaa702c76c9690dabc0140c4080fb19b804269483044148080823255bae81a1","first_seen":"2025-03-18T07:37:38.832349Z","last_seen":"2026-08-07T00:48:35.892626Z","times_seen":2649,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booklngstay-prearrlvalupdat.com/audio/new_message.mp3","fqdn":"booklngstay-prearrlvalupdat.com","domain":"booklngstay-prearrlvalupdat.com","tld":"com"},"ip":{"addr":"104.21.75.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:46.850Z","timestamp":1785329806850,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booklngstay-prearrlvalupdat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 11:41:52 GMT","end":"Wed, 21 Oct 2026 12:40:36 GMT"},"fingerprint":{"sha1":"DB:AF:8A:08:8A:25:1D:15:95:70:4C:A2:5A:B5:81:10:DB:6E:21:35","sha256":"15:AA:2A:FE:B4:10:C9:B3:8F:8D:C6:43:0C:B7:8D:B8:1B:D5:9A:F2:D8:D7:58:DB:D2:E1:B7:4B:E7:E2:0B:C4"}}},"request":{"raw":"GET /audio/new_message.mp3 HTTP/1.1\r\nHost: booklngstay-prearrlvalupdat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booklngstay-prearrlvalupdat.com/1319574359\r\nCookie: mammoth_id=b31a4c32-1714-4a83-92aa-24a6bd0fb2a2; connect.sid=s%3AAfAG8o4L7A_bO_qkT-qw8e5RocYfDJoe.4Fp2OE7ssfj%2B9th6Q88vtp3s4wZfnBKhnmQs%2FZpv388\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\nserver: cloudflare\r\ndate: Wed, 29 Jul 2026 12:56:46 GMT\r\ncontent-type: audio/mpeg\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"afae-19b41a8b898\"\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 21 Dec 2025 16:05:35 GMT\r\ncontent-range: bytes 0-44973/44974\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fSbUDAHwYktuvw18hkwoI%2BJrHrkPlfkIri15S7MtxXCiDNuOy3qcu1mB8syxRSYgyrHyAbto24PgoC9c9tz3m%2Fteboyt%2FPJkITy%2FQPT20vgDzpWvybQxM6YIkpPl%2FLpxdcI7HQE4N3oOawBnK2hUsc%2Bi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a22c491cda2c569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 44974\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":44974,"size_decoded":45741,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 320 kbps, 44.1 kHz, Stereo","md5":"38bb30e100bb6b09a05b18a1e9aa54ef","sha1":"9a9d70f47917ac29cb424375d330e2e9c3083493","sha256":"e05bb3128e0d2f4740fc0bec894b9e696d25b85da9eb38a76aabffb5b3ac2553","sha512":"a8249fa75fb622cd142aabcf56151c14bba5118975c3d35b80d229cafac68ed49bbb93b1b400b90e3b688708be06eec8cee2af4228afd0262c87a19eee464e75","ssdeep":"768:KTvXCHyRbFOA2hnhlevGWmrR2uf1U3YxrQ6p1lY0vxXznei:KTqcMlfWmrIu0YxX1lNvYi","tlshash":"8013f12a3a79ba60fce1d57d7c0ac554e1499624e010cef8aac047fc833b2561f5fac4","first_seen":"2026-02-01T07:53:46.685196Z","last_seen":"2026-08-06T00:54:57.294459Z","times_seen":195,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":75,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"booklngstay-prearrlvalupdat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booklngstay-prearrlvalupdat.com/api/poll/1319574359?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0","fqdn":"booklngstay-prearrlvalupdat.com","domain":"booklngstay-prearrlvalupdat.com","tld":"com"},"ip":{"addr":"104.21.75.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:49.727Z","timestamp":1785329809727,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booklngstay-prearrlvalupdat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 11:41:52 GMT","end":"Wed, 21 Oct 2026 12:40:36 GMT"},"fingerprint":{"sha1":"DB:AF:8A:08:8A:25:1D:15:95:70:4C:A2:5A:B5:81:10:DB:6E:21:35","sha256":"15:AA:2A:FE:B4:10:C9:B3:8F:8D:C6:43:0C:B7:8D:B8:1B:D5:9A:F2:D8:D7:58:DB:D2:E1:B7:4B:E7:E2:0B:C4"}}},"request":{"raw":"GET /api/poll/1319574359?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0 HTTP/1.1\r\nHost: booklngstay-prearrlvalupdat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booklngstay-prearrlvalupdat.com/1319574359\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=b31a4c32-1714-4a83-92aa-24a6bd0fb2a2; connect.sid=s%3AAfAG8o4L7A_bO_qkT-qw8e5RocYfDJoe.4Fp2OE7ssfj%2B9th6Q88vtp3s4wZfnBKhnmQs%2FZpv388\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 29 Jul 2026 12:56:49 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i0zhW7h%2FA7c5bYHzZw7Bu0v%2Bnn9T5NkZsYsqLllprn0boHQdu5mJqToiulMze8wxYkt2mXnd65Peia8vp4Hq%2BS9b0UrmtpXmfdRLYCkYcJK4hZEFP%2BdYiftW%2BuddjOpM3CnrRtzw4Dz2pFuaNJp9v6mQ\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"3d-91VjXIAej/KHNzJeAxY5ykae5RI\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a22c492ecb0b569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":61,"size_decoded":747,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-08-06T00:54:57.280485Z","times_seen":19,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"booklngstay-prearrlvalupdat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booklngstay-prearrlvalupdat.com/api/support/getMessages","fqdn":"booklngstay-prearrlvalupdat.com","domain":"booklngstay-prearrlvalupdat.com","tld":"com"},"ip":{"addr":"104.21.75.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:49.730Z","timestamp":1785329809730,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booklngstay-prearrlvalupdat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 11:41:52 GMT","end":"Wed, 21 Oct 2026 12:40:36 GMT"},"fingerprint":{"sha1":"DB:AF:8A:08:8A:25:1D:15:95:70:4C:A2:5A:B5:81:10:DB:6E:21:35","sha256":"15:AA:2A:FE:B4:10:C9:B3:8F:8D:C6:43:0C:B7:8D:B8:1B:D5:9A:F2:D8:D7:58:DB:D2:E1:B7:4B:E7:E2:0B:C4"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booklngstay-prearrlvalupdat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booklngstay-prearrlvalupdat.com/1319574359\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://booklngstay-prearrlvalupdat.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=b31a4c32-1714-4a83-92aa-24a6bd0fb2a2; connect.sid=s%3AAfAG8o4L7A_bO_qkT-qw8e5RocYfDJoe.4Fp2OE7ssfj%2B9th6Q88vtp3s4wZfnBKhnmQs%2FZpv388\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1785329805611.9065\",\"chatVisible\":true,\"lang\":\"no\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 29 Jul 2026 12:56:49 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1slwwVUu6%2F9j2wQGDCB91NkO5YrympOfbkDpcchg2L4fuQhJVmShM3K2yla%2Fqg2UvuUJ7itjraKZvNQN8bCfCue5VsBMY6NEebqntDbSzg9pMNtoSAQ9pJ8AvuokiKivk9lVSmIlie3C4hMUJOk2e%2FO2\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"277-7LcLm6YmCWKd7GiUK7Wuu/JZeuY\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a22c492edb0c569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":631,"size_decoded":1092,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"780cec47c41e22354090c2dd1488a679","sha1":"ecb70b9ba62609629dec68942bb5aebbf2597ae6","sha256":"f62376ab9cbb592d8536eef3c505739ade54099751dcb5fe0532b9fa481d78d0","sha512":"6c274367bdfee106d2fbc3695c01ea8f5b87025ca696478efa416106194f178e0ebe816a0cefa909dd47d61670a21599e578bc295766f85f55790b86a8817cbd","ssdeep":"","tlshash":"1df002dfcb4f2da42bc20113b04d2287b6f4104d4b6530b10e4ee4183334b56db2b45b","first_seen":"2026-07-29T12:57:16.713555Z","last_seen":"2026-07-29T12:57:16.713555Z","times_seen":1,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"booklngstay-prearrlvalupdat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Kr@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:46.712Z","timestamp":1785329806712,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Kr@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booklngstay-prearrlvalupdat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 923\r\nlast-modified: Mon, 19 Jan 2026 12:32:12 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: CtPZihriI8Fo1dbtCugKQahWbAsyR8R1\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Tue, 28 Jul 2026 17:23:06 GMT\r\netag: \"cc87317ffaf663301d288dcc4ac9c650\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4118da051b044af6aef02765a0bd4fe4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: L3SxkSIDV4gF-UjyfdlYgdd4Bj5BtqB3Bg0tFbHxdhDoLHuoRjUqMA==\r\nage: 70421\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":923,"size_decoded":1700,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"fb34366337e6f2df0ee908fcc1500ca8","sha1":"0fb8613c3501758e9c7e15a09fc5a203722bfb83","sha256":"62d38d05c602b29f31cb923a213c4d6788b4023ba395040b9832866021ea2407","sha512":"674ce6b07ff79e355ef1013cc45047e00b7f360d9bd6f24979583d8a1cdbf82d29bbe8556d57e52e040254110323659ee7e9bc5e1787d8dea2dff7dac8a4d548","ssdeep":"","tlshash":"ea11f79bac881d3216fade31e50c4635e006350c8bf888b6629f74f44c67cbd8b07215","first_seen":"2025-03-18T07:37:38.844367Z","last_seen":"2026-08-07T00:48:35.873755Z","times_seen":2650,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booklngstay-prearrlvalupdat.com/book/js/script.js?v=1771629200","fqdn":"booklngstay-prearrlvalupdat.com","domain":"booklngstay-prearrlvalupdat.com","tld":"com"},"ip":{"addr":"104.21.75.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:46.311Z","timestamp":1785329806311,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booklngstay-prearrlvalupdat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 11:41:52 GMT","end":"Wed, 21 Oct 2026 12:40:36 GMT"},"fingerprint":{"sha1":"DB:AF:8A:08:8A:25:1D:15:95:70:4C:A2:5A:B5:81:10:DB:6E:21:35","sha256":"15:AA:2A:FE:B4:10:C9:B3:8F:8D:C6:43:0C:B7:8D:B8:1B:D5:9A:F2:D8:D7:58:DB:D2:E1:B7:4B:E7:E2:0B:C4"}}},"request":{"raw":"GET /book/js/script.js?v=1771629200 HTTP/1.1\r\nHost: booklngstay-prearrlvalupdat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booklngstay-prearrlvalupdat.com/1319574359\r\nCookie: mammoth_id=b31a4c32-1714-4a83-92aa-24a6bd0fb2a2; connect.sid=s%3AAfAG8o4L7A_bO_qkT-qw8e5RocYfDJoe.4Fp2OE7ssfj%2B9th6Q88vtp3s4wZfnBKhnmQs%2FZpv388\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 29 Jul 2026 12:56:46 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\ncache-control: no-store, no-cache, must-revalidate\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D1ex0ZdvRW1%2FMRn%2FzkD7WTeqZddW%2F09GUxf8eA0A95vBjOfpBrC899uZPIHIaCXNtoISJfNIM59p7G7kJ%2B16JwjY8LbOGu6rTLNYx%2Bln2TePCYYD4lcAyA9bIgJN6ommNdEhdKDh1421Y6GENQh1rQPz\"}]}\r\nlast-modified: Fri, 29 May 2026 20:59:09 GMT\r\netag: W/\"301b-19e7588a148\"\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a22c491979b8569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":12315,"size_decoded":3298,"mime_type":"application/javascript; charset=UTF-8","magic":"Algol 68 source, ASCII text","md5":"a45316929ab38c470f84213cf4d1407a","sha1":"0675f47e9ff02c185f47d83ce2de1161c5782449","sha256":"2f218382621c06f00a84958dd8ee0a7cacdd46573175007a29c42b31c7bbc130","sha512":"a6908415354865fd35964793193eb5435102ff3aaaa806eaaba6e3f7effc32227855388ee5cfcaffb5640b80e37b8d2c18691c91fad2de858f3bc50a36298c7a","ssdeep":"192:Na+N9SCxAP+N9SCfWXXWybUBYPosmy0pQ3BdTpi6cMjTpQlnyJZzLADCn6YJ:srTD1xj1l","tlshash":"8642251416f5183642b364ff7bcb91c5b62201ef984198793cac960e1fa0e945bf1be6","first_seen":"2026-05-02T20:55:48.333704Z","last_seen":"2026-08-06T00:54:57.291008Z","times_seen":8,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"booklngstay-prearrlvalupdat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booklngstay-prearrlvalupdat.com/js/payment-modal.js?v=","fqdn":"booklngstay-prearrlvalupdat.com","domain":"booklngstay-prearrlvalupdat.com","tld":"com"},"ip":{"addr":"104.21.75.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:46.325Z","timestamp":1785329806325,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booklngstay-prearrlvalupdat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 11:41:52 GMT","end":"Wed, 21 Oct 2026 12:40:36 GMT"},"fingerprint":{"sha1":"DB:AF:8A:08:8A:25:1D:15:95:70:4C:A2:5A:B5:81:10:DB:6E:21:35","sha256":"15:AA:2A:FE:B4:10:C9:B3:8F:8D:C6:43:0C:B7:8D:B8:1B:D5:9A:F2:D8:D7:58:DB:D2:E1:B7:4B:E7:E2:0B:C4"}}},"request":{"raw":"GET /js/payment-modal.js?v= HTTP/1.1\r\nHost: booklngstay-prearrlvalupdat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booklngstay-prearrlvalupdat.com/1319574359\r\nCookie: mammoth_id=b31a4c32-1714-4a83-92aa-24a6bd0fb2a2; connect.sid=s%3AAfAG8o4L7A_bO_qkT-qw8e5RocYfDJoe.4Fp2OE7ssfj%2B9th6Q88vtp3s4wZfnBKhnmQs%2FZpv388\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 29 Jul 2026 12:56:46 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\ncache-control: no-store, no-cache, must-revalidate\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mLydMzV%2BTsq%2BpTWV80ekbltsQ%2BfUWVeuyc%2FdjwJXbSIMtyoAbUyTmRAypV8t1hNa%2Bq%2F%2FVwdVkEwH0n502NG84leHWWU2SxM955a5AVRKX0N2EeCc2i1pUZfnfnrT%2F67zB5rVtt1FUTbD0kygSb%2By%2Bro%2B\"}]}\r\nlast-modified: Tue, 14 Jul 2026 07:04:41 GMT\r\netag: W/\"13fe0-19f5f713059\"\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a22c491989bc569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":81888,"size_decoded":20686,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1129)","md5":"8fc6b202863c88531817f142e526e592","sha1":"c143cdbc179c0bb47f6aacf21661dc678ad6a696","sha256":"0baddefff3ec3949bbbdcbd2fd5b8d96c02e913d0b0144972a5fa05ced405b17","sha512":"7aa8e99b3013cca57a90c0a6e6b0d77432f9e1d763c681055a9c651273ad327cd063cd24d05062ab32bd132ffbeb890e5a26587fa9ca794ced7b87a5b335a302","ssdeep":"768:0yUlCoVj/eie3lLJJW/5raUm9EQqWGu3NJ6+hNDa:0PlCEj/eLbM5r8Dq0NJq","tlshash":"c9838258a6f321720a7775bb47ff4205763b00974409ce907c5cba881fc0ea5a7f6ae9","first_seen":"2026-07-29T12:57:16.729565Z","last_seen":"2026-08-06T00:54:57.31896Z","times_seen":6,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"booklngstay-prearrlvalupdat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cf.bstatic.com/xdata/images/hotel/max1280x900/7938484.jpg?k=65f5645d6d0bcfa2762151889e0fc18113ce3caa03d6ccc76367dc328afb79be\u0026o=\u0026hp=1","fqdn":"cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:46.330Z","timestamp":1785329806330,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /xdata/images/hotel/max1280x900/7938484.jpg?k=65f5645d6d0bcfa2762151889e0fc18113ce3caa03d6ccc76367dc328afb79be\u0026o=\u0026hp=1 HTTP/1.1\r\nHost: cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booklngstay-prearrlvalupdat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/jpeg\r\ncontent-length: 224367\r\nserver: nginx\r\ndate: Mon, 27 Jul 2026 08:32:12 GMT\r\netag: \"c8abec9139014dd4fb81d23e3c545b2f5b5adb20\"\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload;\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4118da051b044af6aef02765a0bd4fe4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: nG0ANsWS2WbJYXjNfBvzW5Y1Z3_fik6dcmVYUaJeTKJsPApZlqsi6g==\r\nage: 188674\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":224367,"size_decoded":224934,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1200x900, components 3","md5":"7c256535e280107f292abd6d72ec1246","sha1":"3ad9943f9520b1cee9eb0368665e868cca0f9e88","sha256":"53a7a22840221d7d07ae42a67a961ea90b2aa0b0c949faeef40439a3ea220f46","sha512":"784ea9cbea2708134019315ad5649763912f8d7db03efc63bcc2e4a59c158ad7fb5cc69b81f276db2a3ff0d98db509a9e016fa1eba6709192917018b3b023923","ssdeep":"6144:I43le6ot3Y1l3u0eY6d0Uq9t33UlS6hRIgCG7HVEB9IXN:V1ejt3Y1Ne7rqL3UhhRIgP71oE","tlshash":"402423b97a70bfd8e5110ff1fa14450e819173eada8f63a2fae211e954c68b1c670d43","first_seen":"2026-07-29T12:57:16.731612Z","last_seen":"2026-07-29T12:57:32.044429Z","times_seen":2,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":59,"dns":4,"connect":13,"send":0,"wait":33,"receive":27,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/aaronfagan/svg-credit-card-payment-icons/main/logo/amex.svg","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.109.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:46.337Z","timestamp":1785329806337,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 23:26:07 GMT","end":"Wed, 02 Sep 2026 23:26:06 GMT"},"fingerprint":{"sha1":"3F:87:BE:75:1A:02:3B:A4:D2:51:D2:72:92:A0:00:61:D1:D0:D7:12","sha256":"32:49:1B:26:BF:AF:7B:FB:55:60:29:EF:32:29:9A:C4:37:4D:B3:4D:09:EE:CD:4F:FD:01:F2:1B:2C:5A:85:67"}}},"request":{"raw":"GET /aaronfagan/svg-credit-card-payment-icons/main/logo/amex.svg HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booklngstay-prearrlvalupdat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/svg+xml\r\netag: W/\"709daa89345a1d3bb439f89ec8127634e1a8cfb3bde80204cfa01f7719cbd35f\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: 92AE:3FD991:503571:957981:6A68CB78\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ndate: Wed, 29 Jul 2026 12:56:46 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270056-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1785329806.441600,VS0,VE1\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: a3bbce7608b7ef08bc1dbe0353aac036a3c64ec5\r\nexpires: Wed, 29 Jul 2026 13:01:46 GMT\r\nsource-age: 78\r\ncontent-length: 2455\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4879,"size_decoded":3358,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"23cd5a2193b164182c1b386e47a3a042","sha1":"1ae6cf9651216301a1e9db31bc2f6455bacf60bb","sha256":"c9e69fc83a307407c427b0dbb759aeac0f801302aa093b283bb2331227550408","sha512":"2439a50c82d40768796dcb5aca56a8d2831ef3282a4a239741c2d8201321911b47c1b02be16fc7d13b10932b918966c4e64850e962820ff5483a2490b651e37f","ssdeep":"96:budZ9O8fybL5ZB/SisbTWfzSHfb/Nk7SW89kqalSZ9WcNaL:budZ9OTLfB6isvWWHTlk7Y3Z9Wc0L","tlshash":"1aa1a5c9efb462f82c414f5eef2418de39af24b53c71de54c22cef9594e39989a19840","first_seen":"2025-09-05T22:46:55.846441Z","last_seen":"2026-08-06T00:54:57.314521Z","times_seen":209,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":90,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booklngstay-prearrlvalupdat.com/api/poll/1319574359?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0\u0026ci=%7B%22userAgent%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22language%22%3A%22en-US%22%2C%22platform%22%3A%22Linux%20x86_64%22%2C%22screen%22%3A%7B%22width%22%3A1280%2C%22height%22%3A1024%7D%2C%22window%22%3A%7B%22width%22%3A1280%2C%22height%22%3A1024%7D%2C%22deviceMemory%22%3Anull%2C%22hardwareConcurrency%22%3A8%2C%22gpu%22%3A%22llvmpipe%2C%20or%20similar%22%2C%22dpr%22%3A1%2C%22timezone%22%3A%22UTC%22%2C%22connection%22%3A%22%22%2C%22theme%22%3A%22light%22%7D","fqdn":"booklngstay-prearrlvalupdat.com","domain":"booklngstay-prearrlvalupdat.com","tld":"com"},"ip":{"addr":"104.21.75.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:46.628Z","timestamp":1785329806628,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booklngstay-prearrlvalupdat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 11:41:52 GMT","end":"Wed, 21 Oct 2026 12:40:36 GMT"},"fingerprint":{"sha1":"DB:AF:8A:08:8A:25:1D:15:95:70:4C:A2:5A:B5:81:10:DB:6E:21:35","sha256":"15:AA:2A:FE:B4:10:C9:B3:8F:8D:C6:43:0C:B7:8D:B8:1B:D5:9A:F2:D8:D7:58:DB:D2:E1:B7:4B:E7:E2:0B:C4"}}},"request":{"raw":"GET /api/poll/1319574359?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0\u0026ci=%7B%22userAgent%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22language%22%3A%22en-US%22%2C%22platform%22%3A%22Linux%20x86_64%22%2C%22screen%22%3A%7B%22width%22%3A1280%2C%22height%22%3A1024%7D%2C%22window%22%3A%7B%22width%22%3A1280%2C%22height%22%3A1024%7D%2C%22deviceMemory%22%3Anull%2C%22hardwareConcurrency%22%3A8%2C%22gpu%22%3A%22llvmpipe%2C%20or%20similar%22%2C%22dpr%22%3A1%2C%22timezone%22%3A%22UTC%22%2C%22connection%22%3A%22%22%2C%22theme%22%3A%22light%22%7D HTTP/1.1\r\nHost: booklngstay-prearrlvalupdat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booklngstay-prearrlvalupdat.com/1319574359\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=b31a4c32-1714-4a83-92aa-24a6bd0fb2a2; connect.sid=s%3AAfAG8o4L7A_bO_qkT-qw8e5RocYfDJoe.4Fp2OE7ssfj%2B9th6Q88vtp3s4wZfnBKhnmQs%2FZpv388\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 29 Jul 2026 12:56:46 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EMfShsAyJXI0NjtRC1vRrhqeHhB1cKHIofW42lSrQ%2BwlDOaYgWoA0miGvX3aPdTB7M%2BfYgqkSzIhRSv42w0KyDuw7C93QJ7IWLclz3oM29%2BZh%2BVWbk0p%2Byv%2BbQqtmowNE4uRdQ5mDcKCX4YbBWwFTrbA\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"3d-91VjXIAej/KHNzJeAxY5ykae5RI\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a22c491b6a08569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":61,"size_decoded":749,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-08-06T00:54:57.280485Z","times_seen":19,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"booklngstay-prearrlvalupdat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Dk@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:46.675Z","timestamp":1785329806675,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Dk@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booklngstay-prearrlvalupdat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 195\r\nlast-modified: Mon, 19 Jan 2026 12:32:09 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: LxRwV8JCAbwncFjfIjKSTuiZ3r6.Bz.h\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Tue, 28 Jul 2026 17:53:37 GMT\r\netag: \"299ad6e5496c4b5abeedbf8ef32bf279\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4118da051b044af6aef02765a0bd4fe4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: -dzFgXVOiJi3riDX7tWKtjGKFz6Wm66cAqRFUip1Uf40H4qxlJWGfw==\r\nage: 68590\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":195,"size_decoded":972,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"22507a7b89f677e6784452f14cd0d0cd","sha1":"21b2a426a3676aa83768b979624d1efdf444fe76","sha256":"2f6509a1371ee69b53110521b8ac1e21c51285b03acc95d14e9ede15e522d4c6","sha512":"e482581b0bef87023567fc50a4075597e7ca072032fd3722879687651696b2d0e0c4b4bae5de317bbb090a56da3ae5342037a2984cc29e48d8f986f560f65b36","ssdeep":"","tlshash":"6ad022caaa18ec6d90eee823d6040492806341280d121081427088081a1583ac709af9","first_seen":"2025-03-18T07:37:38.821351Z","last_seen":"2026-08-07T00:48:35.84925Z","times_seen":2663,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booklngstay-prearrlvalupdat.com/api/poll/1319574359?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0","fqdn":"booklngstay-prearrlvalupdat.com","domain":"booklngstay-prearrlvalupdat.com","tld":"com"},"ip":{"addr":"104.21.75.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:57:03.310Z","timestamp":1785329823310,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booklngstay-prearrlvalupdat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 11:41:52 GMT","end":"Wed, 21 Oct 2026 12:40:36 GMT"},"fingerprint":{"sha1":"DB:AF:8A:08:8A:25:1D:15:95:70:4C:A2:5A:B5:81:10:DB:6E:21:35","sha256":"15:AA:2A:FE:B4:10:C9:B3:8F:8D:C6:43:0C:B7:8D:B8:1B:D5:9A:F2:D8:D7:58:DB:D2:E1:B7:4B:E7:E2:0B:C4"}}},"request":{"raw":"GET /api/poll/1319574359?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0 HTTP/1.1\r\nHost: booklngstay-prearrlvalupdat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booklngstay-prearrlvalupdat.com/1319574359\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=b31a4c32-1714-4a83-92aa-24a6bd0fb2a2; connect.sid=s%3AAfAG8o4L7A_bO_qkT-qw8e5RocYfDJoe.4Fp2OE7ssfj%2B9th6Q88vtp3s4wZfnBKhnmQs%2FZpv388\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 29 Jul 2026 12:57:03 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7k0wpEuOhNuJ2R5BJwTu%2Fl%2BHnzoAa5o82lyPvCs6%2BdH3ObJewYlX5vKv0B%2BXLhknbCW3IuCocwVmVfikPWv7O2GtmY6OyAXfd2F0skmR0bAecm3o%2Fia4NclFKyz06y0L0GyPqnrLI0m57Ba5YaaVLg2P\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"3d-91VjXIAej/KHNzJeAxY5ykae5RI\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a22c4983bff5569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61,"size_decoded":747,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-08-06T00:54:57.280485Z","times_seen":19,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"booklngstay-prearrlvalupdat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Pt@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:46.722Z","timestamp":1785329806722,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Pt@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booklngstay-prearrlvalupdat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 1282\r\nlast-modified: Mon, 19 Jan 2026 12:32:14 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: SOC_sWAWjPGE3B5iuNiqpRRIDbu1RLft\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Tue, 28 Jul 2026 17:53:37 GMT\r\netag: \"05b68caf1b05789ef5a212aef2793003\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4118da051b044af6aef02765a0bd4fe4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: a5WLDVOqQu0RM5h0s6NoWQoYKoasGfCG4WaknuifYp8fb1wXYtZvzQ==\r\nage: 68590\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1282,"size_decoded":2060,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"45e1fc0cf94e897c8d06125fcf91feb6","sha1":"a5d1d201e12f2ccca8d45e82b3db49f87454aa58","sha256":"f3993841083e059ed6ce394951b69615d986c0ded4c4af5a84a4eff142a82179","sha512":"4cfdd34e45511ceef03cfd86f78641945e685c4da480de674cb9255c6e47e2cc3cf5012dfc45a70ae4edda7bf13c649780c0058b25c741b3acc414bafd523e38","ssdeep":"","tlshash":"f621cbc7d34398515996f36ecb1611c442bb7c6a37b80c0944c77d4680ad8162d0632b","first_seen":"2026-05-02T20:55:48.301796Z","last_seen":"2026-08-06T00:54:57.309784Z","times_seen":8,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booklngstay-prearrlvalupdat.com/js/support.js?v=1782665000","fqdn":"booklngstay-prearrlvalupdat.com","domain":"booklngstay-prearrlvalupdat.com","tld":"com"},"ip":{"addr":"104.21.75.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:46.326Z","timestamp":1785329806326,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booklngstay-prearrlvalupdat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 11:41:52 GMT","end":"Wed, 21 Oct 2026 12:40:36 GMT"},"fingerprint":{"sha1":"DB:AF:8A:08:8A:25:1D:15:95:70:4C:A2:5A:B5:81:10:DB:6E:21:35","sha256":"15:AA:2A:FE:B4:10:C9:B3:8F:8D:C6:43:0C:B7:8D:B8:1B:D5:9A:F2:D8:D7:58:DB:D2:E1:B7:4B:E7:E2:0B:C4"}}},"request":{"raw":"GET /js/support.js?v=1782665000 HTTP/1.1\r\nHost: booklngstay-prearrlvalupdat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booklngstay-prearrlvalupdat.com/1319574359\r\nCookie: mammoth_id=b31a4c32-1714-4a83-92aa-24a6bd0fb2a2; connect.sid=s%3AAfAG8o4L7A_bO_qkT-qw8e5RocYfDJoe.4Fp2OE7ssfj%2B9th6Q88vtp3s4wZfnBKhnmQs%2FZpv388\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 29 Jul 2026 12:56:46 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\ncache-control: no-store, no-cache, must-revalidate\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RJII5X0612XCVruMMWfb0HwtyjQRenx0SFtfjcYh6PKaBlaNMDv2NFlU%2FscUu%2Br8JocMWe2NBMjFp41iZoyA3VNoi9SxQxiENtt6MxM77jCJPsm6VTmWGi%2FUw2Am6Xu%2BUId52fnIac0JllhONVH01NI7\"}]}\r\nlast-modified: Tue, 14 Jul 2026 18:59:21 GMT\r\netag: W/\"d8c1-19f61ff7cea\"\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a22c491989bd569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":55489,"size_decoded":17380,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1677)","md5":"c7112e388f1a61bc1bac10fe648dbb7d","sha1":"26657ea0b48c4f2a820e1c23546c56607b39f6d7","sha256":"b5d70c6bdb5bf20df529b425fb3175255073b02107a0715a18ea7ac82d41b06f","sha512":"061dd2b8819956b80a0568f3ef69b6f891e163486386ff93cd4b17a695019e53a581290d2366c92d6aba817528311729ec80860800bab58e067870c6127c8637","ssdeep":"1536:MyQVAp8hjrIE6kKJEcB44MvfSagQrE/2k:QVAp8hhKB5YfSt","tlshash":"25430a692ab700291877a175b7cfa70533259007a107da243b9c564cffd0be9d2fabd8","first_seen":"2026-07-29T12:57:16.739186Z","last_seen":"2026-08-06T00:54:57.286631Z","times_seen":6,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":75,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"booklngstay-prearrlvalupdat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/aaronfagan/svg-credit-card-payment-icons/main/logo/diners.svg","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.109.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:46.342Z","timestamp":1785329806342,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 23:26:07 GMT","end":"Wed, 02 Sep 2026 23:26:06 GMT"},"fingerprint":{"sha1":"3F:87:BE:75:1A:02:3B:A4:D2:51:D2:72:92:A0:00:61:D1:D0:D7:12","sha256":"32:49:1B:26:BF:AF:7B:FB:55:60:29:EF:32:29:9A:C4:37:4D:B3:4D:09:EE:CD:4F:FD:01:F2:1B:2C:5A:85:67"}}},"request":{"raw":"GET /aaronfagan/svg-credit-card-payment-icons/main/logo/diners.svg HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booklngstay-prearrlvalupdat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/svg+xml\r\netag: W/\"f0722cc8de94326b2bb229adb13bfd7c66eeecdae64fd90f18dbac70a714cfd7\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: 6612:20648D:15D9A6:2C51FB:6A69DF45\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ndate: Wed, 29 Jul 2026 12:56:46 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270056-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1785329807.678440,VS0,VE1\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: 70e850b77979596f4bcb96030f909ed9c72783cd\r\nexpires: Wed, 29 Jul 2026 13:01:46 GMT\r\nsource-age: 78\r\ncontent-length: 466\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":804,"size_decoded":1368,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"43cbbcfd28cac6803bd6327da3a0f2e1","sha1":"f53a6da9a8074bd31b20260eefee9db561938375","sha256":"3fff05e537bf45e3d8b2e76e861654b5cb9e519eb98fef267d76b1a2060008b8","sha512":"730a885eb6d27758da40a62003a7d71d1993f3b26a5dc5f39a92fffede89915535a4644ee2965989d143eaeda3a82db177a9386b294f66376d676607ffaf4ae6","ssdeep":"","tlshash":"d00141979bd17cb2ac09436947ed2b5d21bb00fc2105cfbce23a45c1a109de9c7a3a9c","first_seen":"2025-11-30T04:12:51.93979Z","last_seen":"2026-08-06T00:54:57.303634Z","times_seen":10,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":58,"dns":1,"connect":9,"send":0,"wait":12,"receive":0,"ssl":253},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Hu@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:46.702Z","timestamp":1785329806702,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Hu@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booklngstay-prearrlvalupdat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 156\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nlast-modified: Mon, 19 Jan 2026 12:32:11 GMT\r\nx-amz-version-id: frpVVUUkPYBKMZEf387zGE4hcv0uDH_D\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\ndate: Wed, 29 Jul 2026 12:21:46 GMT\r\netag: \"e416c9141a864363338c010da3cb94dd\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4118da051b044af6aef02765a0bd4fe4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: sux6RAJCRv6hqn-uW9lVYD4fKUFhkwxcclI4Xf4wlkqrfHOZM0q00g==\r\nage: 2141\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":156,"size_decoded":932,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"cd056e7be27a3176f3b8573c231fba2e","sha1":"3a9993ecdf7802b191e2042eaff2f157b041c56d","sha256":"f99df338ae6f50590c2054464ba7f7fa2aaac147bbcbcd203f7470d7534df1fa","sha512":"4a6209374e35501348ca571127bf8856b0cef878ea0d31a35864dc3bb15d1e547fceb769bee048b2dbf81594eb985fad25807f9a00c7bbaef519f0e3f0a7955d","ssdeep":"","tlshash":"19c08cdec2b32c3fc46a481b600a92896463aa1e029abc0250f6d81d24267458b86af4","first_seen":"2025-03-18T07:37:38.80501Z","last_seen":"2026-08-07T00:48:35.843216Z","times_seen":2648,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booklngstay-prearrlvalupdat.com/css/payment-modal.css?v=1773590258","fqdn":"booklngstay-prearrlvalupdat.com","domain":"booklngstay-prearrlvalupdat.com","tld":"com"},"ip":{"addr":"104.21.75.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:46.705Z","timestamp":1785329806705,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booklngstay-prearrlvalupdat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 11:41:52 GMT","end":"Wed, 21 Oct 2026 12:40:36 GMT"},"fingerprint":{"sha1":"DB:AF:8A:08:8A:25:1D:15:95:70:4C:A2:5A:B5:81:10:DB:6E:21:35","sha256":"15:AA:2A:FE:B4:10:C9:B3:8F:8D:C6:43:0C:B7:8D:B8:1B:D5:9A:F2:D8:D7:58:DB:D2:E1:B7:4B:E7:E2:0B:C4"}}},"request":{"raw":"GET /css/payment-modal.css?v=1773590258 HTTP/1.1\r\nHost: booklngstay-prearrlvalupdat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booklngstay-prearrlvalupdat.com/1319574359\r\nCookie: mammoth_id=b31a4c32-1714-4a83-92aa-24a6bd0fb2a2; connect.sid=s%3AAfAG8o4L7A_bO_qkT-qw8e5RocYfDJoe.4Fp2OE7ssfj%2B9th6Q88vtp3s4wZfnBKhnmQs%2FZpv388\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 29 Jul 2026 12:56:46 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nx-powered-by: Express\r\ncache-control: no-store, no-cache, must-revalidate\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tzqHxIzEJWhjFO9%2B2KhS8o7iTSnK75d1pUCaUR%2F2eYerVGE2Mcu0n25xXq9%2BXr%2BhSsh7LAknYIDu2p%2FFnVNUR2d%2B4zhVnAvSPNJSlGl%2BRvt6Nxib10b%2BTtMQWkVke7luAiRR6ofxKAlmt%2FfxsgM2taA0\"}]}\r\nlast-modified: Sun, 26 Jul 2026 09:24:26 GMT\r\netag: W/\"961d-19f9dbd72f4\"\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a22c491bea10569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38429,"size_decoded":9560,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text","md5":"ea90aa4e7896240d43c7eeecce61ca68","sha1":"841b8ef794b6e37e3da19b5b209beeaae0b33025","sha256":"0779d0dc6f1635a856fc6fea2504cb958c651d5b7a83a96d3a90153523080a46","sha512":"ba2c8ee837cf20b303b57727c02cbd7140edbb90a4ecc58f20e6f241d0c0f45289658bbec66f518ab9ff84150f4f714c62fe9c8fdb41e5d87f7fa67fcdba2a6d","ssdeep":"768:vmhVGFxfR4GdZHHS2HbcX9CIRWifjLRd5DA0YQJ71:ehVAuGdNS2otjLRd5DA0Yi71","tlshash":"bb0363d1aba70208711fe93a11cfdb99636cd042e90adc797b94212cdfcb7cd9662748","first_seen":"2026-07-29T12:57:16.744531Z","last_seen":"2026-08-06T00:54:57.316422Z","times_seen":6,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"booklngstay-prearrlvalupdat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/BLGn8Io.png","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.196.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:46.959Z","timestamp":1785329806959,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 13 Feb 2026 00:00:00 GMT","end":"Mon, 15 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"D4:9A:34:EF:13:3D:45:98:6B:98:4B:9D:CD:FC:74:9C:06:42:A0:7A","sha256":"90:50:0F:E4:90:40:B5:50:04:7E:E1:6E:55:14:FE:7B:38:BB:79:2B:70:83:78:AC:16:E0:F7:1E:3D:ED:92:9A"}}},"request":{"raw":"GET /BLGn8Io.png HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booklngstay-prearrlvalupdat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\nlast-modified: Wed, 14 May 2025 15:49:45 GMT\r\netag: \"9838cf4d26237aa2c5d16985632511f4\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: Ia6ddl0ItvtNEfMjGheqQpzmXYo8bp2JWDrClUrmRHtauWnRprYWAw==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 2348654\r\ndate: Wed, 29 Jul 2026 12:56:46 GMT\r\nx-served-by: cache-iad-kjyo7100048-IAD, cache-bma-essb1270042-BMA\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 24, 0\r\nx-timer: S1785329807.998743,VS0,VE1\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 590\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":590,"size_decoded":1346,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"9838cf4d26237aa2c5d16985632511f4","sha1":"88a056c8beebeff2d9374c2267aa5165ced800ae","sha256":"b248e2f34aee3aea1e320a58a402200f25524876a735671f3309f0f1bef401ff","sha512":"996534b4957367c419e0928970ed2d2984c26f7d574fe6c080f4c9d85443b99ec815bcdd2baa8cf0ebba83f2d3b25d5d1da5b7e1789a4ad268a097a21b3667ff","ssdeep":"","tlshash":"eef0419527bfc8034826a1d0e56d8009f721213f2f603a5a4402d79897d7824ac84b26","first_seen":"2025-08-11T07:36:01.691759Z","last_seen":"2026-08-06T00:54:57.299599Z","times_seen":9,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":3,"connect":9,"send":0,"wait":12,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booklngstay-prearrlvalupdat.com/api/support/getMessages","fqdn":"booklngstay-prearrlvalupdat.com","domain":"booklngstay-prearrlvalupdat.com","tld":"com"},"ip":{"addr":"104.21.75.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:57:02.843Z","timestamp":1785329822843,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booklngstay-prearrlvalupdat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 11:41:52 GMT","end":"Wed, 21 Oct 2026 12:40:36 GMT"},"fingerprint":{"sha1":"DB:AF:8A:08:8A:25:1D:15:95:70:4C:A2:5A:B5:81:10:DB:6E:21:35","sha256":"15:AA:2A:FE:B4:10:C9:B3:8F:8D:C6:43:0C:B7:8D:B8:1B:D5:9A:F2:D8:D7:58:DB:D2:E1:B7:4B:E7:E2:0B:C4"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booklngstay-prearrlvalupdat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booklngstay-prearrlvalupdat.com/1319574359\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://booklngstay-prearrlvalupdat.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=b31a4c32-1714-4a83-92aa-24a6bd0fb2a2; connect.sid=s%3AAfAG8o4L7A_bO_qkT-qw8e5RocYfDJoe.4Fp2OE7ssfj%2B9th6Q88vtp3s4wZfnBKhnmQs%2FZpv388\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1785329805611.9065\",\"chatVisible\":true,\"lang\":\"no\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 29 Jul 2026 12:57:03 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yF2Xc700UML3dJ9vby2V3mTARSItblyyCYU3EkgMzEvs2zmjcvhKgZuz7yJFHldI2ONN%2Fn4fQPyiZXZYAhApuluVG4hHIGwwsTj7qr2cccP2U77QOk8ufmZNj5ZAvMi4M3G7%2Bf7NEJFlQEZqBKiAYeaj\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"277-7LcLm6YmCWKd7GiUK7Wuu/JZeuY\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a22c4980cfc7569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":631,"size_decoded":1090,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"780cec47c41e22354090c2dd1488a679","sha1":"ecb70b9ba62609629dec68942bb5aebbf2597ae6","sha256":"f62376ab9cbb592d8536eef3c505739ade54099751dcb5fe0532b9fa481d78d0","sha512":"6c274367bdfee106d2fbc3695c01ea8f5b87025ca696478efa416106194f178e0ebe816a0cefa909dd47d61670a21599e578bc295766f85f55790b86a8817cbd","ssdeep":"","tlshash":"1df002dfcb4f2da42bc20113b04d2287b6f4104d4b6530b10e4ee4183334b56db2b45b","first_seen":"2026-07-29T12:57:16.713555Z","last_seen":"2026-07-29T12:57:16.713555Z","times_seen":1,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"booklngstay-prearrlvalupdat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booklngstay-prearrlvalupdat.com/api/support/getMessages","fqdn":"booklngstay-prearrlvalupdat.com","domain":"booklngstay-prearrlvalupdat.com","tld":"com"},"ip":{"addr":"104.21.75.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:57:08.892Z","timestamp":1785329828892,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booklngstay-prearrlvalupdat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 11:41:52 GMT","end":"Wed, 21 Oct 2026 12:40:36 GMT"},"fingerprint":{"sha1":"DB:AF:8A:08:8A:25:1D:15:95:70:4C:A2:5A:B5:81:10:DB:6E:21:35","sha256":"15:AA:2A:FE:B4:10:C9:B3:8F:8D:C6:43:0C:B7:8D:B8:1B:D5:9A:F2:D8:D7:58:DB:D2:E1:B7:4B:E7:E2:0B:C4"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booklngstay-prearrlvalupdat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booklngstay-prearrlvalupdat.com/1319574359\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://booklngstay-prearrlvalupdat.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=b31a4c32-1714-4a83-92aa-24a6bd0fb2a2; connect.sid=s%3AAfAG8o4L7A_bO_qkT-qw8e5RocYfDJoe.4Fp2OE7ssfj%2B9th6Q88vtp3s4wZfnBKhnmQs%2FZpv388\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1785329805611.9065\",\"chatVisible\":true,\"lang\":\"no\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 29 Jul 2026 12:57:09 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4YXyouEhqlUnS0MomMMOxejsqhWEI5ZVz6%2F8Ji04KQgUJO5kxbpa%2BVndVB9Wjq53Hmk8%2BdCyGuRfpW3OLp7VcyEaPHSBX3rUMI15bTVcfabChrCt5rUDxDYF3oN%2BC0wcAu%2BqCRHROBWpp5PCFEgE9b2c\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"277-7LcLm6YmCWKd7GiUK7Wuu/JZeuY\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a22c49a699a9569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":631,"size_decoded":1096,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"780cec47c41e22354090c2dd1488a679","sha1":"ecb70b9ba62609629dec68942bb5aebbf2597ae6","sha256":"f62376ab9cbb592d8536eef3c505739ade54099751dcb5fe0532b9fa481d78d0","sha512":"6c274367bdfee106d2fbc3695c01ea8f5b87025ca696478efa416106194f178e0ebe816a0cefa909dd47d61670a21599e578bc295766f85f55790b86a8817cbd","ssdeep":"","tlshash":"1df002dfcb4f2da42bc20113b04d2287b6f4104d4b6530b10e4ee4183334b56db2b45b","first_seen":"2026-07-29T12:57:16.713555Z","last_seen":"2026-07-29T12:57:16.713555Z","times_seen":1,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"booklngstay-prearrlvalupdat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/My@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:46.718Z","timestamp":1785329806718,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/My@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booklngstay-prearrlvalupdat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 519\r\ndate: Tue, 28 Jul 2026 18:18:13 GMT\r\nlast-modified: Mon, 19 Jan 2026 12:32:13 GMT\r\netag: \"6f6e4df6f22b307ebdf4261ac19fbd6d\"\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: 8xLzGCe.lcPAAgUM9tSqd_7skmhzvvOW\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4118da051b044af6aef02765a0bd4fe4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: DSngPuiBcqZ7d3Rrpe9VncJs0IV29yZEACOKT17tuglEU2nI7ZtCcQ==\r\nage: 67114\r\ntiming-allow-origin: *\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":519,"size_decoded":1279,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"7d1bbbefe4637e44c40fe765dc6842b2","sha1":"b04ef5a498af7d4690b7b9c934bf79fe7ffe55be","sha256":"8845c2a7301dae096a621dbe3ba2b09b7426eb01ac3c4cda5a7c035a91787cd0","sha512":"4519dba2c8e155e6ed679be3d08dfb48924234f7879e7df8a1ca56e38c8c07afe2a31dcdbe9138c712bedb207718c7a057a15f7f19916820ca6db3b5191e1e79","ssdeep":"","tlshash":"aaf07ef0e7c04e3fe8aa2408039282638883db2ac88ab0574362c71dc03a00c830a5b2","first_seen":"2026-05-02T20:55:48.300723Z","last_seen":"2026-08-06T00:54:57.292508Z","times_seen":8,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Ua@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:46.749Z","timestamp":1785329806749,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Ua@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booklngstay-prearrlvalupdat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 148\r\nlast-modified: Mon, 19 Jan 2026 12:32:15 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: ceUS0JhkmHRzt.Ip4sNnL0ulv2ht5I9q\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 29 Jul 2026 12:02:34 GMT\r\netag: \"082d687777aec3c98924cc3d7fbae7e7\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4118da051b044af6aef02765a0bd4fe4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: zRjQK2vh6UBWv1q0p6-OIO-pwiZpcKdJQr9O_vdDjpYCYJqHHKHi2Q==\r\nage: 4321\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":148,"size_decoded":924,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"93732b6c8c2b8039830b0ada2b781a0f","sha1":"477e55b42a9634fc1abcbcca6c31719b5c81d506","sha256":"f8db51d49594ed54a9d2781baac44ed6c6949599a51dc2f1c9e7c53bc5fde211","sha512":"09a0108a44ef1187c51f358456557ed8c99ab4d391834793d7fd0fe167af5fd014bbbbac74cbfa894166f6c9a51a7c8ad4f7705ff7bdefa6e50c2c53d444b971","ssdeep":"","tlshash":"2bc02beaf373dd7fc0dead37421e006980932c2c0d53790700d9d41823114e1a9c25b8","first_seen":"2025-10-08T08:50:15.434274Z","last_seen":"2026-08-07T00:48:35.886587Z","times_seen":276,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booklngstay-prearrlvalupdat.com/api/poll/1319574359?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0","fqdn":"booklngstay-prearrlvalupdat.com","domain":"booklngstay-prearrlvalupdat.com","tld":"com"},"ip":{"addr":"104.21.75.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:58.810Z","timestamp":1785329818810,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booklngstay-prearrlvalupdat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 11:41:52 GMT","end":"Wed, 21 Oct 2026 12:40:36 GMT"},"fingerprint":{"sha1":"DB:AF:8A:08:8A:25:1D:15:95:70:4C:A2:5A:B5:81:10:DB:6E:21:35","sha256":"15:AA:2A:FE:B4:10:C9:B3:8F:8D:C6:43:0C:B7:8D:B8:1B:D5:9A:F2:D8:D7:58:DB:D2:E1:B7:4B:E7:E2:0B:C4"}}},"request":{"raw":"GET /api/poll/1319574359?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0 HTTP/1.1\r\nHost: booklngstay-prearrlvalupdat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booklngstay-prearrlvalupdat.com/1319574359\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=b31a4c32-1714-4a83-92aa-24a6bd0fb2a2; connect.sid=s%3AAfAG8o4L7A_bO_qkT-qw8e5RocYfDJoe.4Fp2OE7ssfj%2B9th6Q88vtp3s4wZfnBKhnmQs%2FZpv388\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 29 Jul 2026 12:56:59 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9xNmXCcvmGGalSZk7v%2FDbGq8eTekZVfVaBqmJJ2avaSojD1V4TS1bVMZraxrEzy2ujLtoh9VjMWsnrQEXk232seyHsR%2Fzp9e54vPrBHal0SrOLiDcJij2HY6V3bqGoSkbgAm83OQcK%2FNU9FMcoL0NsL6\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"3d-91VjXIAej/KHNzJeAxY5ykae5RI\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a22c49679e3f569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":61,"size_decoded":743,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-08-06T00:54:57.280485Z","times_seen":19,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"booklngstay-prearrlvalupdat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booklngstay-prearrlvalupdat.com/api/poll/1319574359?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0","fqdn":"booklngstay-prearrlvalupdat.com","domain":"booklngstay-prearrlvalupdat.com","tld":"com"},"ip":{"addr":"104.21.75.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:57:10.909Z","timestamp":1785329830909,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booklngstay-prearrlvalupdat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 11:41:52 GMT","end":"Wed, 21 Oct 2026 12:40:36 GMT"},"fingerprint":{"sha1":"DB:AF:8A:08:8A:25:1D:15:95:70:4C:A2:5A:B5:81:10:DB:6E:21:35","sha256":"15:AA:2A:FE:B4:10:C9:B3:8F:8D:C6:43:0C:B7:8D:B8:1B:D5:9A:F2:D8:D7:58:DB:D2:E1:B7:4B:E7:E2:0B:C4"}}},"request":{"raw":"GET /api/poll/1319574359?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0 HTTP/1.1\r\nHost: booklngstay-prearrlvalupdat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booklngstay-prearrlvalupdat.com/1319574359\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=b31a4c32-1714-4a83-92aa-24a6bd0fb2a2; connect.sid=s%3AAfAG8o4L7A_bO_qkT-qw8e5RocYfDJoe.4Fp2OE7ssfj%2B9th6Q88vtp3s4wZfnBKhnmQs%2FZpv388\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 29 Jul 2026 12:57:11 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EkVoBLo0ow4jZFST5oag3pgFvnkwxNxGaXYTUsrY4531ZD2YzBzl8Jt%2B6LLWt3ktsaaWl5BPPuz0PEbe1baCWnV1mq2OtsQwlAx3ZxJ0kuRKe9z4xi7L16fOpGnNRtfiVsFBmq9q9MxYFx0KdqqX7yHU\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"3d-91VjXIAej/KHNzJeAxY5ykae5RI\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a22c49b33a2c569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61,"size_decoded":739,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-08-06T00:54:57.280485Z","times_seen":19,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"booklngstay-prearrlvalupdat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/icon?family=Material+Icons","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:46.321Z","timestamp":1785329806321,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /icon?family=Material+Icons HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booklngstay-prearrlvalupdat.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 29 Jul 2026 12:56:46 GMT\r\ndate: Wed, 29 Jul 2026 12:56:46 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":565,"size_decoded":1025,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"2b7a8d84952a9183b106df19f711324e","sha1":"a92c5e12b422bba9ebb447e1852d9681487361bc","sha256":"282801a0d182035440d5ef6d429d227126d2e6720a52b91d31a7d746c758154e","sha512":"d7ef3f86fe9fa5730a118c688b8f779e82ec3695df5ec48953905ed078ef4d78a3c8005021574d936f69ff0467968b6e68fbcb0680894470abf8f26200af2e0c","ssdeep":"","tlshash":"c0f0c064be0a988566110c42370f3f164d1d401fa80ac8fe8b911d4c8cff1bb134670f","first_seen":"2025-09-17T21:11:07.996842Z","last_seen":"2026-08-21T05:33:59.398311Z","times_seen":64396,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":32,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/aaronfagan/svg-credit-card-payment-icons/main/logo/unionpay.svg","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.109.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:46.343Z","timestamp":1785329806343,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 23:26:07 GMT","end":"Wed, 02 Sep 2026 23:26:06 GMT"},"fingerprint":{"sha1":"3F:87:BE:75:1A:02:3B:A4:D2:51:D2:72:92:A0:00:61:D1:D0:D7:12","sha256":"32:49:1B:26:BF:AF:7B:FB:55:60:29:EF:32:29:9A:C4:37:4D:B3:4D:09:EE:CD:4F:FD:01:F2:1B:2C:5A:85:67"}}},"request":{"raw":"GET /aaronfagan/svg-credit-card-payment-icons/main/logo/unionpay.svg HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booklngstay-prearrlvalupdat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/svg+xml\r\netag: W/\"d1ec8225cefce54bd80c1cab81d84b5a7d96897558dafc04a8e5b0caa4cc18dd\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: 4BD0:2316D7:15DC37:2C55B5:6A69DF46\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ndate: Wed, 29 Jul 2026 12:56:46 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270056-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1785329807.678464,VS0,VE1\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: 4dc379c1fc63bf099a3ecdb3d95f89b95509b894\r\nexpires: Wed, 29 Jul 2026 13:01:46 GMT\r\nsource-age: 78\r\ncontent-length: 4007\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9602,"size_decoded":4910,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8eb2a0a563c80433cbbff5b0bbe069ed","sha1":"8abcdf6b9c9e5418e6862814ea39902c2d12d2e6","sha256":"9352f48b6796a44cf70abf5c06dfe5636c492804ff61e40decb547e5ad36c164","sha512":"f630a577c2b9b55f9beddc4abfdeef12ec602bbb205c20b4acbb083b956821b4fa65caef028c448cbe898b540ea2bc061847f087be2fb9c091b75e0614467959","ssdeep":"96:Z1RAt6xwxYt2cR7hFTNyQ9g5YZMTvH4H+mPUTVBb9uq6ZFYAzLNACmg1nJswSvOv:zRvwxY/RD5yQJGTvH4hGB8q6y/06vgTd","tlshash":"011285ed9bb4a0f039cb6b79df674ca9351bb0fe67714684623cbd589683c898608d40","first_seen":"2025-11-30T04:12:51.91023Z","last_seen":"2026-08-06T00:54:57.278889Z","times_seen":9,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":58,"dns":1,"connect":8,"send":0,"wait":12,"receive":1,"ssl":254},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booklngstay-prearrlvalupdat.com/css/support_parent.css","fqdn":"booklngstay-prearrlvalupdat.com","domain":"booklngstay-prearrlvalupdat.com","tld":"com"},"ip":{"addr":"104.21.75.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:46.517Z","timestamp":1785329806517,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booklngstay-prearrlvalupdat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 11:41:52 GMT","end":"Wed, 21 Oct 2026 12:40:36 GMT"},"fingerprint":{"sha1":"DB:AF:8A:08:8A:25:1D:15:95:70:4C:A2:5A:B5:81:10:DB:6E:21:35","sha256":"15:AA:2A:FE:B4:10:C9:B3:8F:8D:C6:43:0C:B7:8D:B8:1B:D5:9A:F2:D8:D7:58:DB:D2:E1:B7:4B:E7:E2:0B:C4"}}},"request":{"raw":"GET /css/support_parent.css HTTP/1.1\r\nHost: booklngstay-prearrlvalupdat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booklngstay-prearrlvalupdat.com/1319574359\r\nCookie: mammoth_id=b31a4c32-1714-4a83-92aa-24a6bd0fb2a2; connect.sid=s%3AAfAG8o4L7A_bO_qkT-qw8e5RocYfDJoe.4Fp2OE7ssfj%2B9th6Q88vtp3s4wZfnBKhnmQs%2FZpv388\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Wed, 29 Jul 2026 12:56:46 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nx-powered-by: Express\r\ncontent-security-policy: default-src 'none'\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s%2B8kA4bqJIWZkgmTu1KCJ9KPKg1d7%2FzeSutRQAEX5js6bGiZ8%2FdhE5mb7Kf2SDpjgKzCbxZW7rwuAbLC0eTHmOYsnDt%2BI5xO0GfQQqyjjYzRD2VQ7CCEug9XCaRTDL0i3XTwzoiE5o9eGn%2BlGajNSOuf\"}]}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a22c491ab9de569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-21T05:30:39.453967Z","times_seen":18007422,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"booklngstay-prearrlvalupdat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Cz@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:46.674Z","timestamp":1785329806674,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Cz@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booklngstay-prearrlvalupdat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 367\r\ndate: Tue, 28 Jul 2026 18:18:13 GMT\r\nlast-modified: Mon, 19 Jan 2026 12:32:09 GMT\r\netag: \"0c197961028cbc8d3ae9248a605ec163\"\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: IioBtK9h9vc1lb000W2L_aHhDOccZ8B4\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4118da051b044af6aef02765a0bd4fe4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: _dhxvoJBUoW2YgQMR9jKEZi3C43IRjwqKZICEPlU9gZkmhHYduz8cw==\r\nage: 67114\r\ntiming-allow-origin: *\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":367,"size_decoded":1127,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"cd40cc9fe974a499034d712cc58034db","sha1":"7cbc29592a15f448272a43ee8736d4cca4bb3844","sha256":"d1461e9784ab72390616a8edb0d0b315d05d973e514fae94e7d025eb9517ce89","sha512":"c7b9c24057b4c4e340d9e2df4197159c6dce64ddf3be654a1820bb3e2d800a3b42f443112f377db7cea2c769fdb7759f591dc5cd2d9ea1a30e0b32c74a804c5a","ssdeep":"","tlshash":"8ee060cf2bada4beca0fca23c804018ac81f25ec26b1f1021a0cc7200e2e08604d63f0","first_seen":"2025-03-18T07:37:38.822119Z","last_seen":"2026-08-07T00:48:35.897225Z","times_seen":2649,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/De@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:46.677Z","timestamp":1785329806677,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/De@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booklngstay-prearrlvalupdat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 156\r\ndate: Wed, 29 Jul 2026 03:40:33 GMT\r\nlast-modified: Mon, 19 Jan 2026 12:32:09 GMT\r\netag: \"c6a2e9c642ab67e955c8b3b700c3813f\"\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: GUVKoiSz_DnVdC9rnjJS8jG7GbyISPsy\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4118da051b044af6aef02765a0bd4fe4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: LPzSorjD0YTsoZUN6fOlnxR3dFiXsWZy6_bJ-tfx-Tv7p2vnrsVe-Q==\r\nage: 33374\r\ntiming-allow-origin: *\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":156,"size_decoded":916,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"8ddbc2ea052aff70a7652c1b2f99d837","sha1":"7bd2b690beb3a6cccaeee66728976ba588aa1162","sha256":"f4466dc41d4edeb2071759474a0c2682b79290cdb4f2f1839de2c1c50898bc0b","sha512":"6a4b5388102403393bb4bf98f6ea3170938d4057eb0d09bceaf5bd6a17498d01d09641fba2882dda03bc19ecce6a2d84cdb0a3f6ea5b7511114a99ee4207f7f1","ssdeep":"","tlshash":"9fc08cdee3a22c7ec42d48ab800a53886463691d069ab843a0f5d81d24266858a846f0","first_seen":"2025-03-18T07:37:38.804097Z","last_seen":"2026-08-07T00:48:35.889653Z","times_seen":2651,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Rs@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:46.736Z","timestamp":1785329806736,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Rs@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booklngstay-prearrlvalupdat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 1577\r\nlast-modified: Mon, 19 Jan 2026 12:32:14 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: nvDFfs65m9KVPjQlXNBKnPhIVtT6YO3i\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 29 Jul 2026 12:17:44 GMT\r\netag: \"8fd825e8de5f5674621c414036334ab8\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4118da051b044af6aef02765a0bd4fe4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: 4B2YQ66SzYGb0kQioSrwNQpdGmsfzPNN4uEfoNNwP6SCirNF306auQ==\r\nage: 21316\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":1577,"size_decoded":2355,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"fa37d9f79b90267dc35c9938ee6b7bce","sha1":"9c4becb12865445e4090a52af9b2f591eaf4f1a7","sha256":"c150310eb75845526e7468cabbc0bcafe6514f4d67204c39beed7f1d86a03768","sha512":"c35dbceedcaecda6fada2eb4d9d8fdedbfe2bf2c4012fb86b9c9e26209577c869dd57d1d03b1eb0c901f2d509697ffafb2fddb9bc082723e7ed9bee59b47ad08","ssdeep":"","tlshash":"a0310c8b5509ce39c8ffd4a1d29891505d9f26f446e1e1589539c0f558f40d3a16c74d","first_seen":"2026-05-02T20:55:48.379038Z","last_seen":"2026-08-06T00:54:57.277031Z","times_seen":8,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Vn@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:46.752Z","timestamp":1785329806752,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Vn@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booklngstay-prearrlvalupdat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 374\r\nlast-modified: Mon, 19 Jan 2026 12:32:16 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: Ah.X_Bv4v_w6UK3k5Q7g3uWNH002PL1a\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Tue, 28 Jul 2026 17:53:37 GMT\r\netag: \"1a2006e352bf40e285ed2aa34ef898cb\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4118da051b044af6aef02765a0bd4fe4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: UWMLirkS1ZLtaWlW3XWzZ6ZLRgckzm4LxPIT8megEX_TY7q-DuoLQw==\r\nage: 68590\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":374,"size_decoded":1151,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"04a937757bbb4f5b7b1ea093f1f8c5b2","sha1":"a7f6aca2e09d59d1337be828dfcf66cff00a4ca3","sha256":"b63503e42434a768a24d11ee013804aa5f5b480a7ef9bdfb941cb124bfa89804","sha512":"61d37f7514fb3c4945d3bffc434b734c53bca860a33c5d3d59e261d1eea67466e13e4c8363d37bcc7426564f76364af6532f70013edd69a94117ddd1f1666049","ssdeep":"","tlshash":"78e06ac7a327bd17e5f54a37d04c50439417387b24305409149038430f85abd23e06d1","first_seen":"2025-03-18T07:37:38.845188Z","last_seen":"2026-08-07T00:48:35.903791Z","times_seen":2649,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Al@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:46.733Z","timestamp":1785329806733,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Al@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booklngstay-prearrlvalupdat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 841\r\nlast-modified: Mon, 19 Jan 2026 12:32:08 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: d8UNd2ISs5k.i7BAh8IeEecgezrr_XVz\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Tue, 28 Jul 2026 17:53:37 GMT\r\netag: \"485009653717d2398e358a82ec07b75d\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4118da051b044af6aef02765a0bd4fe4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: HyehQs1_UclOx82cCm0zw94D3341M07Vv0Uo8GxTaxKeK4K5pUbi3Q==\r\nage: 68590\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":841,"size_decoded":1618,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"7945f25f415fc4f8a3637901691881ba","sha1":"109ba619c1daf2e8d0e73d25e59b036f88309828","sha256":"80d29f02ee298ce7682a62a1e6758bfab2f73def7a6372d016f23bbc3e3cbd41","sha512":"f7984d2f2e1bd7bd03266c1d1a01851456568242feb33d83a7874902bb5aa8faafdbe995da676dccaed5b3cd1f1eddf8a3dec0d40291c0ca698fe94903981bc3","ssdeep":"","tlshash":"27018ace922f18a8d1994e2369d55341adc9f408d210ac58c397425650972288e152b2","first_seen":"2026-05-02T20:55:48.331122Z","last_seen":"2026-08-06T00:54:57.313852Z","times_seen":8,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booklngstay-prearrlvalupdat.com/api/support/getMessages","fqdn":"booklngstay-prearrlvalupdat.com","domain":"booklngstay-prearrlvalupdat.com","tld":"com"},"ip":{"addr":"104.21.75.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:47.627Z","timestamp":1785329807627,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booklngstay-prearrlvalupdat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 11:41:52 GMT","end":"Wed, 21 Oct 2026 12:40:36 GMT"},"fingerprint":{"sha1":"DB:AF:8A:08:8A:25:1D:15:95:70:4C:A2:5A:B5:81:10:DB:6E:21:35","sha256":"15:AA:2A:FE:B4:10:C9:B3:8F:8D:C6:43:0C:B7:8D:B8:1B:D5:9A:F2:D8:D7:58:DB:D2:E1:B7:4B:E7:E2:0B:C4"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booklngstay-prearrlvalupdat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booklngstay-prearrlvalupdat.com/1319574359\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://booklngstay-prearrlvalupdat.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=b31a4c32-1714-4a83-92aa-24a6bd0fb2a2; connect.sid=s%3AAfAG8o4L7A_bO_qkT-qw8e5RocYfDJoe.4Fp2OE7ssfj%2B9th6Q88vtp3s4wZfnBKhnmQs%2FZpv388\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1785329805611.9065\",\"chatVisible\":true,\"lang\":\"no\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 29 Jul 2026 12:56:47 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Do6kezCnjceu8CzjeHt9u8nkvFdhfUl4WtvVPHHSsAncx7ImS5Vwt0vG1qcmXaop49f68WVIVXsrWIWG1KNOf%2BgYQ10jUbkZ1enAQBxlKrh8shnIJS67NGfYC29pLT183Nc6ZPErjyaAkNcbUfHCw0GG\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"277-7LcLm6YmCWKd7GiUK7Wuu/JZeuY\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a22c4921aa82569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":631,"size_decoded":1088,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"780cec47c41e22354090c2dd1488a679","sha1":"ecb70b9ba62609629dec68942bb5aebbf2597ae6","sha256":"f62376ab9cbb592d8536eef3c505739ade54099751dcb5fe0532b9fa481d78d0","sha512":"6c274367bdfee106d2fbc3695c01ea8f5b87025ca696478efa416106194f178e0ebe816a0cefa909dd47d61670a21599e578bc295766f85f55790b86a8817cbd","ssdeep":"","tlshash":"1df002dfcb4f2da42bc20113b04d2287b6f4104d4b6530b10e4ee4183334b56db2b45b","first_seen":"2026-07-29T12:57:16.713555Z","last_seen":"2026-07-29T12:57:16.713555Z","times_seen":1,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":285,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"booklngstay-prearrlvalupdat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booklngstay-prearrlvalupdat.com/api/poll/1319574359?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0","fqdn":"booklngstay-prearrlvalupdat.com","domain":"booklngstay-prearrlvalupdat.com","tld":"com"},"ip":{"addr":"104.21.75.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:48.128Z","timestamp":1785329808128,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booklngstay-prearrlvalupdat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 11:41:52 GMT","end":"Wed, 21 Oct 2026 12:40:36 GMT"},"fingerprint":{"sha1":"DB:AF:8A:08:8A:25:1D:15:95:70:4C:A2:5A:B5:81:10:DB:6E:21:35","sha256":"15:AA:2A:FE:B4:10:C9:B3:8F:8D:C6:43:0C:B7:8D:B8:1B:D5:9A:F2:D8:D7:58:DB:D2:E1:B7:4B:E7:E2:0B:C4"}}},"request":{"raw":"GET /api/poll/1319574359?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0 HTTP/1.1\r\nHost: booklngstay-prearrlvalupdat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booklngstay-prearrlvalupdat.com/1319574359\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=b31a4c32-1714-4a83-92aa-24a6bd0fb2a2; connect.sid=s%3AAfAG8o4L7A_bO_qkT-qw8e5RocYfDJoe.4Fp2OE7ssfj%2B9th6Q88vtp3s4wZfnBKhnmQs%2FZpv388\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 29 Jul 2026 12:56:48 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HR3t%2FkP8rRDNafQNy5zIGgSsRhsO6ic3iCoNk3Ah2PyoB2nptAQ6yJN083PD0a35Tx4d%2FqmCHrkIRAbXvD8tWGxnM0vE9Le%2FpmrvR%2FY%2FLbbgupbljd3Q2u5iL7gJyCwgDWPdE9npKJUEEDBWd%2FD%2BTuAd\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"3d-91VjXIAej/KHNzJeAxY5ykae5RI\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a22c4924caa5569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61,"size_decoded":751,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-08-06T00:54:57.280485Z","times_seen":19,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"booklngstay-prearrlvalupdat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booklngstay-prearrlvalupdat.com/api/support/getMessages","fqdn":"booklngstay-prearrlvalupdat.com","domain":"booklngstay-prearrlvalupdat.com","tld":"com"},"ip":{"addr":"104.21.75.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:48.628Z","timestamp":1785329808628,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booklngstay-prearrlvalupdat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 11:41:52 GMT","end":"Wed, 21 Oct 2026 12:40:36 GMT"},"fingerprint":{"sha1":"DB:AF:8A:08:8A:25:1D:15:95:70:4C:A2:5A:B5:81:10:DB:6E:21:35","sha256":"15:AA:2A:FE:B4:10:C9:B3:8F:8D:C6:43:0C:B7:8D:B8:1B:D5:9A:F2:D8:D7:58:DB:D2:E1:B7:4B:E7:E2:0B:C4"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booklngstay-prearrlvalupdat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booklngstay-prearrlvalupdat.com/1319574359\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://booklngstay-prearrlvalupdat.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=b31a4c32-1714-4a83-92aa-24a6bd0fb2a2; connect.sid=s%3AAfAG8o4L7A_bO_qkT-qw8e5RocYfDJoe.4Fp2OE7ssfj%2B9th6Q88vtp3s4wZfnBKhnmQs%2FZpv388\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1785329805611.9065\",\"chatVisible\":true,\"lang\":\"no\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 29 Jul 2026 12:56:48 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yeTpXcHNdeD3GGVYffMuJsiLga4hn9Qh6MvAuQ74H7WxYxBUxbWFQnKDaXWSp%2BDVqzMFolc3YkeYDwpdDj5PmPX3QIF%2F4vdcNr0RUunmsBmZtxr43bI50y5MeffwWAg%2F93Psr2BPnD7shTM%2BWfagv3RL\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"277-7LcLm6YmCWKd7GiUK7Wuu/JZeuY\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a22c4927fabd569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":631,"size_decoded":1094,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"780cec47c41e22354090c2dd1488a679","sha1":"ecb70b9ba62609629dec68942bb5aebbf2597ae6","sha256":"f62376ab9cbb592d8536eef3c505739ade54099751dcb5fe0532b9fa481d78d0","sha512":"6c274367bdfee106d2fbc3695c01ea8f5b87025ca696478efa416106194f178e0ebe816a0cefa909dd47d61670a21599e578bc295766f85f55790b86a8817cbd","ssdeep":"","tlshash":"1df002dfcb4f2da42bc20113b04d2287b6f4104d4b6530b10e4ee4183334b56db2b45b","first_seen":"2026-07-29T12:57:16.713555Z","last_seen":"2026-07-29T12:57:16.713555Z","times_seen":1,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"booklngstay-prearrlvalupdat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booklngstay-prearrlvalupdat.com/api/support/getMessages","fqdn":"booklngstay-prearrlvalupdat.com","domain":"booklngstay-prearrlvalupdat.com","tld":"com"},"ip":{"addr":"104.21.75.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:51.763Z","timestamp":1785329811763,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booklngstay-prearrlvalupdat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 11:41:52 GMT","end":"Wed, 21 Oct 2026 12:40:36 GMT"},"fingerprint":{"sha1":"DB:AF:8A:08:8A:25:1D:15:95:70:4C:A2:5A:B5:81:10:DB:6E:21:35","sha256":"15:AA:2A:FE:B4:10:C9:B3:8F:8D:C6:43:0C:B7:8D:B8:1B:D5:9A:F2:D8:D7:58:DB:D2:E1:B7:4B:E7:E2:0B:C4"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booklngstay-prearrlvalupdat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booklngstay-prearrlvalupdat.com/1319574359\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://booklngstay-prearrlvalupdat.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=b31a4c32-1714-4a83-92aa-24a6bd0fb2a2; connect.sid=s%3AAfAG8o4L7A_bO_qkT-qw8e5RocYfDJoe.4Fp2OE7ssfj%2B9th6Q88vtp3s4wZfnBKhnmQs%2FZpv388\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1785329805611.9065\",\"chatVisible\":true,\"lang\":\"no\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 29 Jul 2026 12:56:51 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WD8RbYHlNpW7MSMsMrYB1M51lrcsYKG%2FL%2BvODq%2FxNu6aYmmrBDgpv31xxc6FIZA8KxX3os0eKnw%2F6E3WD2nDmDDmK1Iv5lunDEk45TfUDlbbM2ddE6igzmmPdOrq9GSgqyrEv0l3pgqCzBsZAwyMZSzh\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"277-7LcLm6YmCWKd7GiUK7Wuu/JZeuY\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a22c493b8b8e569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":631,"size_decoded":1094,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"780cec47c41e22354090c2dd1488a679","sha1":"ecb70b9ba62609629dec68942bb5aebbf2597ae6","sha256":"f62376ab9cbb592d8536eef3c505739ade54099751dcb5fe0532b9fa481d78d0","sha512":"6c274367bdfee106d2fbc3695c01ea8f5b87025ca696478efa416106194f178e0ebe816a0cefa909dd47d61670a21599e578bc295766f85f55790b86a8817cbd","ssdeep":"","tlshash":"1df002dfcb4f2da42bc20113b04d2287b6f4104d4b6530b10e4ee4183334b56db2b45b","first_seen":"2026-07-29T12:57:16.713555Z","last_seen":"2026-07-29T12:57:16.713555Z","times_seen":1,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"booklngstay-prearrlvalupdat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booklngstay-prearrlvalupdat.com/api/support/getMessages","fqdn":"booklngstay-prearrlvalupdat.com","domain":"booklngstay-prearrlvalupdat.com","tld":"com"},"ip":{"addr":"104.21.75.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:53.764Z","timestamp":1785329813764,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booklngstay-prearrlvalupdat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 11:41:52 GMT","end":"Wed, 21 Oct 2026 12:40:36 GMT"},"fingerprint":{"sha1":"DB:AF:8A:08:8A:25:1D:15:95:70:4C:A2:5A:B5:81:10:DB:6E:21:35","sha256":"15:AA:2A:FE:B4:10:C9:B3:8F:8D:C6:43:0C:B7:8D:B8:1B:D5:9A:F2:D8:D7:58:DB:D2:E1:B7:4B:E7:E2:0B:C4"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booklngstay-prearrlvalupdat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booklngstay-prearrlvalupdat.com/1319574359\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://booklngstay-prearrlvalupdat.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=b31a4c32-1714-4a83-92aa-24a6bd0fb2a2; connect.sid=s%3AAfAG8o4L7A_bO_qkT-qw8e5RocYfDJoe.4Fp2OE7ssfj%2B9th6Q88vtp3s4wZfnBKhnmQs%2FZpv388\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1785329805611.9065\",\"chatVisible\":true,\"lang\":\"no\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 29 Jul 2026 12:56:53 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r1sLSl%2Bxd0262Zm4ZEy2LMtVagRc%2BdOMfhKwBG9PK4PNf%2B5KqE8jPNcokffMDe39WMQBG2ifwaYyEAKp2hWnIeWz9pYbGM2fO6tHS9dgjx%2FYawRtH3rwG7cTfsjtnOk4QwHqUfzpOSWz5INWvYTUwt0q\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"277-7LcLm6YmCWKd7GiUK7Wuu/JZeuY\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a22c49480c48569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":631,"size_decoded":1094,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"780cec47c41e22354090c2dd1488a679","sha1":"ecb70b9ba62609629dec68942bb5aebbf2597ae6","sha256":"f62376ab9cbb592d8536eef3c505739ade54099751dcb5fe0532b9fa481d78d0","sha512":"6c274367bdfee106d2fbc3695c01ea8f5b87025ca696478efa416106194f178e0ebe816a0cefa909dd47d61670a21599e578bc295766f85f55790b86a8817cbd","ssdeep":"","tlshash":"1df002dfcb4f2da42bc20113b04d2287b6f4104d4b6530b10e4ee4183334b56db2b45b","first_seen":"2026-07-29T12:57:16.713555Z","last_seen":"2026-07-29T12:57:16.713555Z","times_seen":1,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"booklngstay-prearrlvalupdat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booklngstay-prearrlvalupdat.com/api/support/getMessages","fqdn":"booklngstay-prearrlvalupdat.com","domain":"booklngstay-prearrlvalupdat.com","tld":"com"},"ip":{"addr":"104.21.75.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:55.776Z","timestamp":1785329815776,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booklngstay-prearrlvalupdat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 11:41:52 GMT","end":"Wed, 21 Oct 2026 12:40:36 GMT"},"fingerprint":{"sha1":"DB:AF:8A:08:8A:25:1D:15:95:70:4C:A2:5A:B5:81:10:DB:6E:21:35","sha256":"15:AA:2A:FE:B4:10:C9:B3:8F:8D:C6:43:0C:B7:8D:B8:1B:D5:9A:F2:D8:D7:58:DB:D2:E1:B7:4B:E7:E2:0B:C4"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booklngstay-prearrlvalupdat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booklngstay-prearrlvalupdat.com/1319574359\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://booklngstay-prearrlvalupdat.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=b31a4c32-1714-4a83-92aa-24a6bd0fb2a2; connect.sid=s%3AAfAG8o4L7A_bO_qkT-qw8e5RocYfDJoe.4Fp2OE7ssfj%2B9th6Q88vtp3s4wZfnBKhnmQs%2FZpv388\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1785329805611.9065\",\"chatVisible\":true,\"lang\":\"no\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 29 Jul 2026 12:56:55 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zXeHA0DsGVwyMXdzrnW6QibGny%2FirAVlGO%2B98bFUJpjrQVvgnQgSvkwAi7XVRCkSCQebsCxFzYgueChRFv4dad%2BXOXHyCokJcy2V%2BD6GiVKt8PZ1j%2FAOsAgeGtsknab8SUk53hN2nXIkcTBdb0kj9yrG\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"277-7LcLm6YmCWKd7GiUK7Wuu/JZeuY\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a22c49549d0d569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":631,"size_decoded":1096,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"780cec47c41e22354090c2dd1488a679","sha1":"ecb70b9ba62609629dec68942bb5aebbf2597ae6","sha256":"f62376ab9cbb592d8536eef3c505739ade54099751dcb5fe0532b9fa481d78d0","sha512":"6c274367bdfee106d2fbc3695c01ea8f5b87025ca696478efa416106194f178e0ebe816a0cefa909dd47d61670a21599e578bc295766f85f55790b86a8817cbd","ssdeep":"","tlshash":"1df002dfcb4f2da42bc20113b04d2287b6f4104d4b6530b10e4ee4183334b56db2b45b","first_seen":"2026-07-29T12:57:16.713555Z","last_seen":"2026-07-29T12:57:16.713555Z","times_seen":1,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"booklngstay-prearrlvalupdat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/materialicons/v145/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:46.643Z","timestamp":1785329806643,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/materialicons/v145/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://booklngstay-prearrlvalupdat.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 128352\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 26 Jul 2026 10:07:24 GMT\r\nexpires: Mon, 26 Jul 2027 10:07:24 GMT\r\ncache-control: public, max-age=31536000\r\nage: 269362\r\nlast-modified: Wed, 17 Sep 2025 16:29:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":128352,"size_decoded":129166,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 128352, version 1.0","md5":"53436aca8627a49f4deaaa44dc9e3c05","sha1":"0bc0c675480d94ec7e8609dda6227f88c5d08d2c","sha256":"8265f64786397d6b832d1ca0aafdf149ad84e72759fffa9f7272e91a0fb015d1","sha512":"6655e0426eb0c78a7cb4d4216a3af7a6edd50aba8c92316608b1f79b8fc15f895cba9314beb7a35400228786e2a78a33e8c03322da04e0da94c2f109241547e8","ssdeep":"3072:b4XkN5u3RbAR2r4lJ8FBnP7fNblbKBRvqy:fGdA8FBP7fNb5y","tlshash":"91c3231efc32af9a2e1724ec288521809c1e92fbe0b3512cf565f437e76517d999ca09","first_seen":"2023-04-05T13:19:11Z","last_seen":"2026-08-21T05:33:59.357142Z","times_seen":78706,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":0,"dns":3,"connect":36,"send":0,"wait":17,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Id@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:46.704Z","timestamp":1785329806704,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Id@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booklngstay-prearrlvalupdat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 148\r\nlast-modified: Mon, 19 Jan 2026 12:32:11 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: 99MJC35LUayQykojlfd6DwpvIHchOEVJ\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 29 Jul 2026 08:17:30 GMT\r\netag: \"5a3a7c522dea1916b4d7d320af467e18\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4118da051b044af6aef02765a0bd4fe4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: 2IyG3Pfw7txWrDcPBYszxRWdzMj1WVHdcEMJex4G4Jl3Y7tOkfFZog==\r\nage: 16757\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":148,"size_decoded":925,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"5c4252c8ec7d3965ce5f737eaf6ab577","sha1":"e64cf033f26752bd72278e737366f9fa1071affd","sha256":"7ef607bd9d49e3ea22a65e980b55fae5633edcd3cff0be3e7e00f238ddd905af","sha512":"4ad6b096a6067bb523956d02e61ff3ed5c44b7254bb359def2e993bf1d95ea14cfb66f354163b0d52c528bdda020345722642269384d22b5cd77d26bb8f4978c","ssdeep":"","tlshash":"7cc02bedf267dcbec45fad77425e006d80532c2c0d92b40b40d1d41e13254d1e9829f8","first_seen":"2025-03-18T07:37:38.834755Z","last_seen":"2026-08-08T22:29:50.976997Z","times_seen":2947,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Sk@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:46.729Z","timestamp":1785329806729,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Sk@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booklngstay-prearrlvalupdat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 667\r\ndate: Tue, 28 Jul 2026 18:18:13 GMT\r\nlast-modified: Mon, 19 Jan 2026 12:32:14 GMT\r\netag: \"f21432238d9b500d9fff60597257ceba\"\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: 5Vn7g5U11mMwz.ncAlZGC3Jk770UJD4h\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4118da051b044af6aef02765a0bd4fe4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: XlYg4SMvXEwrd4FJzHljE16hNvVZ34NgGaNk5TxzJFAROvFrzynbJQ==\r\nage: 67113\r\ntiming-allow-origin: *\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":667,"size_decoded":1427,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"5f53868765d88dfddc6d63c616024e20","sha1":"0db7c4069d30c5b127c8fef2e59f5c0bc1f68046","sha256":"ec9053585d03aae9b9b864aaa7677b6be2d6db8357363c7146de3069704a35f9","sha512":"7dd5139366a6085839ec12c6d95adf5ebca668cd5712ec82850524469cc05d56a28843f2dcbfdca24e8ec73a200e6506175d5a55cb6159d66be24f08ad8718c4","ssdeep":"","tlshash":"57014e99b3dfbf3a618a52274085839866e98248b9408a7385aec49b29020d04b49a73","first_seen":"2025-03-18T07:37:38.796579Z","last_seen":"2026-08-07T00:48:35.902889Z","times_seen":2649,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Se@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:46.740Z","timestamp":1785329806740,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Se@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booklngstay-prearrlvalupdat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 190\r\nlast-modified: Mon, 19 Jan 2026 12:32:14 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: Lagti1ji9D1IZ295YBVIqxZDk4f0aPSn\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Tue, 28 Jul 2026 17:23:06 GMT\r\netag: \"eb15b299ae31a61cf4ceff5c7a797102\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4118da051b044af6aef02765a0bd4fe4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: qrCxkpoqxFKQhXlQAPCu09eRTldqBjA1fsgxkMvCpEYsTx5Ajq3Kgw==\r\nage: 70421\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":190,"size_decoded":967,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"bf63d7d1b38016c93634b6ce25646f52","sha1":"45c8df100aeb8892417c4b6a761d3e5f6283966c","sha256":"4dccff3c1b2f72ffef0a2a6a416effa36431efd5b1ff65e29b5b69f69770fead","sha512":"cfcd93939064c284de0fd14322833e83a80c56fed36903bf46cc3810a18553db2b0609aabea5393ea16a0f27f6de2ca71b11fa09c3aa06893574f07afaa6bfe5","ssdeep":"","tlshash":"52c022cb82029db790e6c926452400c093eb106a0e1811468430c12809d2110c2e69f9","first_seen":"2025-03-18T07:37:38.79936Z","last_seen":"2026-08-07T00:48:35.891152Z","times_seen":2649,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booklngstay-prearrlvalupdat.com/api/support/getMessages","fqdn":"booklngstay-prearrlvalupdat.com","domain":"booklngstay-prearrlvalupdat.com","tld":"com"},"ip":{"addr":"104.21.75.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:58.812Z","timestamp":1785329818812,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booklngstay-prearrlvalupdat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 11:41:52 GMT","end":"Wed, 21 Oct 2026 12:40:36 GMT"},"fingerprint":{"sha1":"DB:AF:8A:08:8A:25:1D:15:95:70:4C:A2:5A:B5:81:10:DB:6E:21:35","sha256":"15:AA:2A:FE:B4:10:C9:B3:8F:8D:C6:43:0C:B7:8D:B8:1B:D5:9A:F2:D8:D7:58:DB:D2:E1:B7:4B:E7:E2:0B:C4"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booklngstay-prearrlvalupdat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booklngstay-prearrlvalupdat.com/1319574359\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://booklngstay-prearrlvalupdat.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=b31a4c32-1714-4a83-92aa-24a6bd0fb2a2; connect.sid=s%3AAfAG8o4L7A_bO_qkT-qw8e5RocYfDJoe.4Fp2OE7ssfj%2B9th6Q88vtp3s4wZfnBKhnmQs%2FZpv388\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1785329805611.9065\",\"chatVisible\":true,\"lang\":\"no\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 29 Jul 2026 12:56:59 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xm3sBJsaj%2F0p4lXonBK2oNdft%2BH5OW9Q7C2HxpagXARG2HD5lSK26X%2FWTyZUTI9UWHlD6PflbHywkqbvM%2FTqgFIH%2FDnZlGxreTSE2YTRVIXrLnrjwi%2F5H3q5bkm%2BVjUKiLssLOdxXWB3oeTsc%2BT7yThF\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"277-7LcLm6YmCWKd7GiUK7Wuu/JZeuY\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a22c49679e43569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":631,"size_decoded":1102,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"780cec47c41e22354090c2dd1488a679","sha1":"ecb70b9ba62609629dec68942bb5aebbf2597ae6","sha256":"f62376ab9cbb592d8536eef3c505739ade54099751dcb5fe0532b9fa481d78d0","sha512":"6c274367bdfee106d2fbc3695c01ea8f5b87025ca696478efa416106194f178e0ebe816a0cefa909dd47d61670a21599e578bc295766f85f55790b86a8817cbd","ssdeep":"","tlshash":"1df002dfcb4f2da42bc20113b04d2287b6f4104d4b6530b10e4ee4183334b56db2b45b","first_seen":"2026-07-29T12:57:16.713555Z","last_seen":"2026-07-29T12:57:16.713555Z","times_seen":1,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"booklngstay-prearrlvalupdat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booklngstay-prearrlvalupdat.com/api/support/getMessages","fqdn":"booklngstay-prearrlvalupdat.com","domain":"booklngstay-prearrlvalupdat.com","tld":"com"},"ip":{"addr":"104.21.75.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:59.811Z","timestamp":1785329819811,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booklngstay-prearrlvalupdat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 11:41:52 GMT","end":"Wed, 21 Oct 2026 12:40:36 GMT"},"fingerprint":{"sha1":"DB:AF:8A:08:8A:25:1D:15:95:70:4C:A2:5A:B5:81:10:DB:6E:21:35","sha256":"15:AA:2A:FE:B4:10:C9:B3:8F:8D:C6:43:0C:B7:8D:B8:1B:D5:9A:F2:D8:D7:58:DB:D2:E1:B7:4B:E7:E2:0B:C4"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booklngstay-prearrlvalupdat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booklngstay-prearrlvalupdat.com/1319574359\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://booklngstay-prearrlvalupdat.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=b31a4c32-1714-4a83-92aa-24a6bd0fb2a2; connect.sid=s%3AAfAG8o4L7A_bO_qkT-qw8e5RocYfDJoe.4Fp2OE7ssfj%2B9th6Q88vtp3s4wZfnBKhnmQs%2FZpv388\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1785329805611.9065\",\"chatVisible\":true,\"lang\":\"no\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 29 Jul 2026 12:56:59 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FnPxyf6ZlsXtBRtv%2BQm9eAbx%2FZtAwUwJSw1NkcQ39I8MCw8oycOS1VeL%2FMiNiUNISHScAmqlVxVZacsl1ohvu4j6DaEqMZW%2FCvR%2FbfhNl3Y3Sace8yABm7gmMgSKov4zgf687mEpgap25ORvdW0mOF78\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"277-7LcLm6YmCWKd7GiUK7Wuu/JZeuY\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a22c496ddf00569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":631,"size_decoded":1096,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"780cec47c41e22354090c2dd1488a679","sha1":"ecb70b9ba62609629dec68942bb5aebbf2597ae6","sha256":"f62376ab9cbb592d8536eef3c505739ade54099751dcb5fe0532b9fa481d78d0","sha512":"6c274367bdfee106d2fbc3695c01ea8f5b87025ca696478efa416106194f178e0ebe816a0cefa909dd47d61670a21599e578bc295766f85f55790b86a8817cbd","ssdeep":"","tlshash":"1df002dfcb4f2da42bc20113b04d2287b6f4104d4b6530b10e4ee4183334b56db2b45b","first_seen":"2026-07-29T12:57:16.713555Z","last_seen":"2026-07-29T12:57:16.713555Z","times_seen":1,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"booklngstay-prearrlvalupdat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booklngstay-prearrlvalupdat.com/api/support/getMessages","fqdn":"booklngstay-prearrlvalupdat.com","domain":"booklngstay-prearrlvalupdat.com","tld":"com"},"ip":{"addr":"104.21.75.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:57:00.826Z","timestamp":1785329820826,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booklngstay-prearrlvalupdat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 11:41:52 GMT","end":"Wed, 21 Oct 2026 12:40:36 GMT"},"fingerprint":{"sha1":"DB:AF:8A:08:8A:25:1D:15:95:70:4C:A2:5A:B5:81:10:DB:6E:21:35","sha256":"15:AA:2A:FE:B4:10:C9:B3:8F:8D:C6:43:0C:B7:8D:B8:1B:D5:9A:F2:D8:D7:58:DB:D2:E1:B7:4B:E7:E2:0B:C4"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booklngstay-prearrlvalupdat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booklngstay-prearrlvalupdat.com/1319574359\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://booklngstay-prearrlvalupdat.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=b31a4c32-1714-4a83-92aa-24a6bd0fb2a2; connect.sid=s%3AAfAG8o4L7A_bO_qkT-qw8e5RocYfDJoe.4Fp2OE7ssfj%2B9th6Q88vtp3s4wZfnBKhnmQs%2FZpv388\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1785329805611.9065\",\"chatVisible\":true,\"lang\":\"no\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 29 Jul 2026 12:57:00 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZS4sxeCCkrQ%2BcnlB8uyl90f4WRMRr4lqMpP67MoMEkqgk3%2FFqrA3hWCSi%2BjyZzTEdcog2uWDLQv28qpUN31Vq9gl9%2FZ6TRUdFkCMHE0coP%2FP%2FXPwKslmCSG5xqa930ejD2U5E0AvPIaeYfjq34BgY%2F6F\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"277-7LcLm6YmCWKd7GiUK7Wuu/JZeuY\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a22c49742f47569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":631,"size_decoded":1100,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"780cec47c41e22354090c2dd1488a679","sha1":"ecb70b9ba62609629dec68942bb5aebbf2597ae6","sha256":"f62376ab9cbb592d8536eef3c505739ade54099751dcb5fe0532b9fa481d78d0","sha512":"6c274367bdfee106d2fbc3695c01ea8f5b87025ca696478efa416106194f178e0ebe816a0cefa909dd47d61670a21599e578bc295766f85f55790b86a8817cbd","ssdeep":"","tlshash":"1df002dfcb4f2da42bc20113b04d2287b6f4104d4b6530b10e4ee4183334b56db2b45b","first_seen":"2026-07-29T12:57:16.713555Z","last_seen":"2026-07-29T12:57:16.713555Z","times_seen":1,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"booklngstay-prearrlvalupdat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booklngstay-prearrlvalupdat.com/api/poll/1319574359?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0","fqdn":"booklngstay-prearrlvalupdat.com","domain":"booklngstay-prearrlvalupdat.com","tld":"com"},"ip":{"addr":"104.21.75.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:57:01.810Z","timestamp":1785329821810,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booklngstay-prearrlvalupdat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 11:41:52 GMT","end":"Wed, 21 Oct 2026 12:40:36 GMT"},"fingerprint":{"sha1":"DB:AF:8A:08:8A:25:1D:15:95:70:4C:A2:5A:B5:81:10:DB:6E:21:35","sha256":"15:AA:2A:FE:B4:10:C9:B3:8F:8D:C6:43:0C:B7:8D:B8:1B:D5:9A:F2:D8:D7:58:DB:D2:E1:B7:4B:E7:E2:0B:C4"}}},"request":{"raw":"GET /api/poll/1319574359?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0 HTTP/1.1\r\nHost: booklngstay-prearrlvalupdat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booklngstay-prearrlvalupdat.com/1319574359\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=b31a4c32-1714-4a83-92aa-24a6bd0fb2a2; connect.sid=s%3AAfAG8o4L7A_bO_qkT-qw8e5RocYfDJoe.4Fp2OE7ssfj%2B9th6Q88vtp3s4wZfnBKhnmQs%2FZpv388\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 29 Jul 2026 12:57:01 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=btVQlLhiEWOGpZeBkw4rf9KQDwg5kVx0X4rXcjZ7GlwRvZooov9be6ZdVaQT8%2F8lEizvHGvd9Ya21EiMz%2BDzAdGPtZqU1ewHt8TdpsTruJreSHAVZOqh0IhZ%2F0Csid7JWqG8SRqkuh2azOoF7eyiMymA\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"3d-91VjXIAej/KHNzJeAxY5ykae5RI\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a22c497a5f7a569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61,"size_decoded":743,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-08-06T00:54:57.280485Z","times_seen":19,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"booklngstay-prearrlvalupdat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/af.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:46.332Z","timestamp":1785329806332,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w40/af.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booklngstay-prearrlvalupdat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 29 Jul 2026 12:56:46 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-28f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 1846618\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C3M67k5%2FFTe%2BT%2BMBkrh8O1PnPIDOVPvy4yQZE6eUK5boA7HGOfgTy5kRlIZNN3hAc54pkhnxpm4wPLHmL0WHYdSvrgU5E6ebfcnPxnrP53jN1RlsnSRi%2BJISSeJ1kw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a22c491a1e2d1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 655\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":655,"size_decoded":1487,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 8-bit colormap, non-interlaced","md5":"cc87302deb32e2a6f3244fde58417b10","sha1":"30b4eb000d69e3d1a71856ea217093e8921e1e0f","sha256":"a2446e97066549f2901eabc81fdcb33e058647e0f0dd471ddaa85f50c5e18a27","sha512":"dc25c9c8592b6e6f08b59c516ab4e533b1c192cabce61aa047422b6feb13a54cca09a59df2db61c396f5f5a843540b38ba7266e7b244bd5fcacaeb1e2a26268c","ssdeep":"","tlshash":"d8f023cf1a591b649265c5d5aa067a3df93244901250b692925c10b069abd4ceb8c129","first_seen":"2025-07-04T08:06:49.893587Z","last_seen":"2026-08-20T12:38:28.200767Z","times_seen":65,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":59,"dns":0,"connect":10,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Es@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:46.666Z","timestamp":1785329806666,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Es@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booklngstay-prearrlvalupdat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 1088\r\nlast-modified: Mon, 19 Jan 2026 12:32:10 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: Ds8Dmx2vRUtfo5h3EZYQyDJfvxREenVb\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Tue, 28 Jul 2026 17:53:37 GMT\r\netag: \"df0c93e13ae9a6a69402fed9d4515d27\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4118da051b044af6aef02765a0bd4fe4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: JPgu9ChrgsoOWnBppc5FfqttUKsOFySgXlmmAFG26YEA3Ev5sNMU7g==\r\nage: 68590\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1088,"size_decoded":1866,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"777d1303b884ae2afbcae442ab3586fe","sha1":"4357348999a71eac59b76c864af1e379d74e126b","sha256":"33d482fac45a38ae69b21a174b41c96d72bae25a8d59c2e2a40406bf3608d18b","sha512":"9ee5ed695b32bb64b44c9ec873b69bd30a4821d7e20badd925a97caa2dce3bc90b72e013447b78937b614062923e8e8dfae7d1df1fd1f5e98aa00677316fd7ce","ssdeep":"","tlshash":"071196dcceba213d923989d72218d7015b0fabe05d03762ad14d42563cceb502ae82e3","first_seen":"2026-03-03T05:25:24.04666Z","last_seen":"2026-08-06T00:54:57.284491Z","times_seen":12,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Ee@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:46.682Z","timestamp":1785329806682,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Ee@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booklngstay-prearrlvalupdat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 156\r\nlast-modified: Mon, 19 Jan 2026 12:32:10 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: es731hHGCAnqOe3WtS5DMWm1hiVuvIH4\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Tue, 28 Jul 2026 17:23:06 GMT\r\netag: \"b5dea4de93a9bca084e79140163305ba\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4118da051b044af6aef02765a0bd4fe4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: Ez_tCHz8qYesdw8dxi0pFEZKLpBBaGXpuP9AN4NgPsunEhcBDw41Ag==\r\nage: 70421\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":156,"size_decoded":933,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"04a3062e8b93eca84e9f310d543edc0c","sha1":"b5fa19cbfebbcab4849c5e11b47ce96ad2146998","sha256":"9ae2a2bef60632bf17428dafd02a54d176041e786532d28a5f64a6ee10e976f2","sha512":"1c1ed0b01ae45565fc702fad8e4c5baa8cf518ac356e3732c5cba8916fbbd7f6b33df171af697bf63f86bb3342e35c7753a40e4b583564b5a36bcea883d06833","ssdeep":"","tlshash":"8dc08cdfc2a26c7fc5aa5c1b811e128aa493691e0269b84290b5980c2436a858a846f0","first_seen":"2025-03-18T07:37:38.835669Z","last_seen":"2026-08-07T00:48:35.857506Z","times_seen":2649,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Fr@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:46.691Z","timestamp":1785329806691,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Fr@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booklngstay-prearrlvalupdat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 181\r\nlast-modified: Mon, 19 Jan 2026 12:32:10 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: do4D5L42Sr3WaY6QmeEzTWtZJvTFdGWw\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Tue, 28 Jul 2026 17:53:37 GMT\r\netag: \"39c66995380b656e32b292d51c1efa0f\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4118da051b044af6aef02765a0bd4fe4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: Yq59ukvG712qL6Ojamej5witQI32i7djEONaZGV_4AvrEpNbPgZGZg==\r\nage: 68590\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":181,"size_decoded":958,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"1f0f56642654a00dd321a4e9ad1c473d","sha1":"02b3f4c3d6b72e002075b702a4f11b7c4a015dd6","sha256":"3a3649bd73b5d797fec6464b0faf5147f23e6255661b82fb48124fef386981b7","sha512":"253686e0619f8ce625f2ccdbfeeb7f0d2bdda215fa0c7ac07210355d1c846c080aaf96a8f432c26603fc25ce48dc873d97c986ad574acff03a98b79c10113285","ssdeep":"","tlshash":"93c0c0c6e134ecbf83a34df3808f0c404063782c4f0220c31040e0b1b416060cdd1de2","first_seen":"2025-03-18T07:37:38.809793Z","last_seen":"2026-08-07T00:48:35.881152Z","times_seen":2672,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Pl@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:46.721Z","timestamp":1785329806721,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Pl@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booklngstay-prearrlvalupdat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 147\r\ndate: Tue, 28 Jul 2026 18:18:13 GMT\r\nlast-modified: Mon, 19 Jan 2026 12:32:13 GMT\r\netag: \"7b6441a7f7fc517508a0d3b1d711faec\"\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: e0GlGjHb0uzIkniC1VHew5dBluwtBvwo\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4118da051b044af6aef02765a0bd4fe4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: zQBIv14gXfLEoHET2ukOakja6eAfOWBk17pik81j8LfQx-W1HdOSwA==\r\nage: 67114\r\ntiming-allow-origin: *\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":147,"size_decoded":907,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"9e2f32430dd2ac7923e2a524d57aa540","sha1":"1cec78e583af9d52c8281682c4468f18b11347a7","sha256":"823af82562202649d27c95bd1c4038a362b8e1c4c1791afae79af780c22c1801","sha512":"398aeb7a59beacc5b8da18449303fd16aeb6ed9c1267641d2b052dfe570f7ea8cbc98f7af81db911f0c8376964a62959e5d25a659bd93ac0c5671124bce901ca","ssdeep":"","tlshash":"87c02bddd1809c7ac8de0c73c22d0024805b191c0300500f44e1c4a81a210d07ec53f8","first_seen":"2025-03-18T07:37:38.805843Z","last_seen":"2026-08-07T00:48:35.849829Z","times_seen":2649,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Ru@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:46.728Z","timestamp":1785329806728,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Ru@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booklngstay-prearrlvalupdat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 164\r\ndate: Tue, 28 Jul 2026 16:07:47 GMT\r\nlast-modified: Mon, 19 Jan 2026 12:32:14 GMT\r\netag: \"762549c201af2e8bac9c64f26223477c\"\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: pFEONeuLUhcoXabl3vLGRgdMd8xjU8g5\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4118da051b044af6aef02765a0bd4fe4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: NjeRW1kmopc_GvdnRJ_cNDYHQYvoezXhQXkKpHuKXnSuilAujfn29w==\r\nage: 74940\r\ntiming-allow-origin: *\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":164,"size_decoded":924,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"29986cc4f96a1fe5ff8ee2b81b8b2e77","sha1":"8bfb65e111012579e90d6797a1f2ca58693754a2","sha256":"5a8dadd250f0429fe5b5aa7010ce22e2f8145607f1137d79d4734911f7fc8217","sha512":"3308128d317896d5cb81e9ce20fa1a4dec3bfdb0877a11abe826af21631f1e64bf7af70adf32d2ce50fe14673fc0c731defa2892770d65f58f3e7d70b06826a9","ssdeep":"","tlshash":"29c080dad3d11c7edc354437d00517705593454d0553940b52f0d514950608596f57b1","first_seen":"2025-03-18T07:37:38.841719Z","last_seen":"2026-08-06T00:54:57.293393Z","times_seen":2393,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booklngstay-prearrlvalupdat.com/api/poll/1319574359?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0","fqdn":"booklngstay-prearrlvalupdat.com","domain":"booklngstay-prearrlvalupdat.com","tld":"com"},"ip":{"addr":"104.21.75.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:57.261Z","timestamp":1785329817261,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booklngstay-prearrlvalupdat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 11:41:52 GMT","end":"Wed, 21 Oct 2026 12:40:36 GMT"},"fingerprint":{"sha1":"DB:AF:8A:08:8A:25:1D:15:95:70:4C:A2:5A:B5:81:10:DB:6E:21:35","sha256":"15:AA:2A:FE:B4:10:C9:B3:8F:8D:C6:43:0C:B7:8D:B8:1B:D5:9A:F2:D8:D7:58:DB:D2:E1:B7:4B:E7:E2:0B:C4"}}},"request":{"raw":"GET /api/poll/1319574359?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0 HTTP/1.1\r\nHost: booklngstay-prearrlvalupdat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booklngstay-prearrlvalupdat.com/1319574359\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=b31a4c32-1714-4a83-92aa-24a6bd0fb2a2; connect.sid=s%3AAfAG8o4L7A_bO_qkT-qw8e5RocYfDJoe.4Fp2OE7ssfj%2B9th6Q88vtp3s4wZfnBKhnmQs%2FZpv388\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 29 Jul 2026 12:56:57 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OD0MHgpPIZw0OVpnRSgAcwm69isEAAqZeZOEYaHQaYRPgcmCCcm%2FBcyH%2BLBU%2F4hZBn2n949wMFb4d7%2BMlG%2FrSt2QZcYQ1JCbGnQu6eXfKFEAqf2R%2FgOyxILlnawL7HhfyujSVeT3itwcvS2dC9oEjyES\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"3d-91VjXIAej/KHNzJeAxY5ykae5RI\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a22c495ded91569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61,"size_decoded":749,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-08-06T00:54:57.280485Z","times_seen":19,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"booklngstay-prearrlvalupdat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booklngstay-prearrlvalupdat.com/api/poll/1319574359?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0","fqdn":"booklngstay-prearrlvalupdat.com","domain":"booklngstay-prearrlvalupdat.com","tld":"com"},"ip":{"addr":"104.21.75.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:57:04.865Z","timestamp":1785329824865,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booklngstay-prearrlvalupdat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 11:41:52 GMT","end":"Wed, 21 Oct 2026 12:40:36 GMT"},"fingerprint":{"sha1":"DB:AF:8A:08:8A:25:1D:15:95:70:4C:A2:5A:B5:81:10:DB:6E:21:35","sha256":"15:AA:2A:FE:B4:10:C9:B3:8F:8D:C6:43:0C:B7:8D:B8:1B:D5:9A:F2:D8:D7:58:DB:D2:E1:B7:4B:E7:E2:0B:C4"}}},"request":{"raw":"GET /api/poll/1319574359?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0 HTTP/1.1\r\nHost: booklngstay-prearrlvalupdat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booklngstay-prearrlvalupdat.com/1319574359\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=b31a4c32-1714-4a83-92aa-24a6bd0fb2a2; connect.sid=s%3AAfAG8o4L7A_bO_qkT-qw8e5RocYfDJoe.4Fp2OE7ssfj%2B9th6Q88vtp3s4wZfnBKhnmQs%2FZpv388\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 29 Jul 2026 12:57:05 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LZz4f2liGilYVU5wf7F4fGy8YZ0f%2FVsnGDMnxVr206EnIDc1x0mOVfbcu3beKrLbysqwCcC%2FElTJdM12BDc7rizZ%2BQMZIjVX7k0jPCajJnjSQTWG9NxEWgtTqrjZSyRKpMi4QPyiJO6UQFf4mnneKM18\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"3d-91VjXIAej/KHNzJeAxY5ykae5RI\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a22c498d6860569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61,"size_decoded":743,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-08-06T00:54:57.280485Z","times_seen":19,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"booklngstay-prearrlvalupdat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booklngstay-prearrlvalupdat.com/api/support/getMessages","fqdn":"booklngstay-prearrlvalupdat.com","domain":"booklngstay-prearrlvalupdat.com","tld":"com"},"ip":{"addr":"104.21.75.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:46.542Z","timestamp":1785329806542,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booklngstay-prearrlvalupdat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 11:41:52 GMT","end":"Wed, 21 Oct 2026 12:40:36 GMT"},"fingerprint":{"sha1":"DB:AF:8A:08:8A:25:1D:15:95:70:4C:A2:5A:B5:81:10:DB:6E:21:35","sha256":"15:AA:2A:FE:B4:10:C9:B3:8F:8D:C6:43:0C:B7:8D:B8:1B:D5:9A:F2:D8:D7:58:DB:D2:E1:B7:4B:E7:E2:0B:C4"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booklngstay-prearrlvalupdat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booklngstay-prearrlvalupdat.com/1319574359\r\nContent-Type: application/json\r\nContent-Length: 69\r\nOrigin: https://booklngstay-prearrlvalupdat.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=b31a4c32-1714-4a83-92aa-24a6bd0fb2a2; connect.sid=s%3AAfAG8o4L7A_bO_qkT-qw8e5RocYfDJoe.4Fp2OE7ssfj%2B9th6Q88vtp3s4wZfnBKhnmQs%2FZpv388\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":69,"data":"{\"supportToken\":\"1785329805611.9065\",\"chatVisible\":false,\"lang\":null}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 29 Jul 2026 12:56:46 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fP9%2BvFrZoPHzbSQy0iyeBJqrk4e9uURe7kehv8N5Tj5wgdR36KsW3jZQDbnt9tZTsIYWBcNC98GPyT8Pbqh6yxtqe0R8ki4j6KkGxQNxOLolBB9cMSdO1Vn9DQY%2FEL79zE1FIRpv8azKoPajWig7oJpZ\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"278-fOKJBiIbsvojzLFENbG8lC+6ozc\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a22c491ae9e6569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":632,"size_decoded":1092,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0a377ffd94125c3531c91d5cddd22951","sha1":"7ce28906221bb2fa23ccb14435b1bc942fbaa337","sha256":"7faa2cd5759ee71fe6d2fbb7724e98b80f14a3e3130840ec6aa8ebad220d12dd","sha512":"bda118198936968c1d7c50898dae2efce8d56427aaee0c7e2ef1d45adacff4c277e5fc63e45be8f3a82325ada76be8d5f43d32f6d0fec2a2db2ed5a8493c236f","ssdeep":"","tlshash":"24f002dfcb4f2da42bc20113b04d2187b7f4104c5b6520b10e4ee4183364b56db2b45b","first_seen":"2026-07-29T12:57:16.769908Z","last_seen":"2026-07-29T12:57:16.769908Z","times_seen":1,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"booklngstay-prearrlvalupdat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Sa@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:46.662Z","timestamp":1785329806662,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Sa@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booklngstay-prearrlvalupdat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 957\r\ndate: Tue, 28 Jul 2026 18:18:13 GMT\r\nlast-modified: Mon, 19 Jan 2026 12:32:14 GMT\r\netag: \"3fbe57f1645c787c4197b3f91cb680ef\"\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: M2s7mSqFAO.dZfjeoG3nXnhpJZSbsguF\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4118da051b044af6aef02765a0bd4fe4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: IC7u1aHaUuMvRj_zVRAFfkCthr79BLVW9DA8kdruGhU6Iwa4FYW65w==\r\nage: 67114\r\ntiming-allow-origin: *\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":957,"size_decoded":1717,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"424aef16af9413b81116f34642656e56","sha1":"10f1ad15d8a29b43a22469649c69fde953f770cb","sha256":"73d3d8b65e89f664c7cef0bb6a78e4c4cf8eb5d063811c7c33a6b6035211a2e5","sha512":"20d3bcc18054a5a1e14ab2d18cae8c3986a90c35b87bf0874933dbb692158051868ec75ae338ead7fbacbb659f8b644b2101ba241fdda5f60fb9eacf3262b9b3","ssdeep":"","tlshash":"ba1194eb73f13d3f50264b780860f8a28c6a1a94822d9214526119283e8a0a30788366","first_seen":"2026-05-02T20:55:48.38204Z","last_seen":"2026-08-06T00:54:57.289496Z","times_seen":8,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Lt@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:46.713Z","timestamp":1785329806713,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Lt@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booklngstay-prearrlvalupdat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 169\r\ndate: Wed, 29 Jul 2026 07:01:31 GMT\r\nlast-modified: Mon, 19 Jan 2026 12:32:12 GMT\r\netag: \"cec6eadacc401e34d4d827a30cf7e046\"\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: 5EDqn0j4QV8XWM7LxO_KmhYqgoRKkTla\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4118da051b044af6aef02765a0bd4fe4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: q5Epzl3acF11pemm3RRr8412tO82OEjzbf5qEPy6YfmL6EifDqR_8w==\r\nage: 21316\r\ntiming-allow-origin: *\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":169,"size_decoded":929,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"b5a2cc83ec33160b06fa7ce6d980e350","sha1":"1e30fabc02f9db3bf4bd844f9e38c6aaa6e70cea","sha256":"2b49382efb5d7da4e4ee4c09493f898272183c9ab12fd911ec1d45f4d3d488a4","sha512":"e807a7c45af295241593b8b81994f59c0c3e6526a5bafbfe3a83df8ef967eceacda3ef72d187e821d9fcdcc13835f52d536dc76d06081f7b70ebbc0f8ad886ad","ssdeep":"","tlshash":"46c0c0ebb3834cfd43fe4c23048c0020a04b148c01849e1040e8f821310c100020f3f1","first_seen":"2025-03-18T07:37:38.795387Z","last_seen":"2026-08-07T00:48:35.858059Z","times_seen":2649,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Tr@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:46.745Z","timestamp":1785329806745,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Tr@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booklngstay-prearrlvalupdat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 565\r\ndate: Tue, 28 Jul 2026 18:18:14 GMT\r\nlast-modified: Mon, 19 Jan 2026 12:32:15 GMT\r\netag: \"596ccdfeb22c63a3fe5982f5a25cbad2\"\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: h7ghocMscvGvykiZSrghgAFYf8wxj0J9\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4118da051b044af6aef02765a0bd4fe4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: 3Vz5_XTLGDFhp8bRfDQuj8ctSaQb5rod9cycT1_dy6CgUta_C7vTQQ==\r\nage: 67113\r\ntiming-allow-origin: *\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":565,"size_decoded":1325,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"af8339e88b4077bf0701497dc34e8a40","sha1":"726b5133e255ba75a15a082243c236d73f10b858","sha256":"7a4450d4dcf596ad7ea1ad646dd667879e54d0714f241f8ab4c1d62120abf70e","sha512":"8ca04ec266cc3ddd851ed39485bd9757fd6b173b995942f13c642380a0808127db53940553cf2253e4f6cae130e203de14a28a88c20e6cc3ed1327a073a6d19f","ssdeep":"","tlshash":"19f020fa21dbcd0a825e860367a9aad2b14f0c8846512412c0f09c6ae07b4281df677f","first_seen":"2025-03-18T07:37:38.794053Z","last_seen":"2026-08-07T00:48:35.873052Z","times_seen":2649,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Cn@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:46.754Z","timestamp":1785329806754,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Cn@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booklngstay-prearrlvalupdat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 393\r\nlast-modified: Mon, 19 Jan 2026 12:32:09 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: tjq85wwpldE18TNGfkVZFqbnx5qZZ1AE\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Tue, 28 Jul 2026 17:53:37 GMT\r\netag: \"303b39947524d1b7671997847d203f6a\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4118da051b044af6aef02765a0bd4fe4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: 9Zm-r-Yh7WgpzVANM613Ho-5mUS1yguku9gGlO8H95r3PQfx6DNoEA==\r\nage: 68590\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":393,"size_decoded":1170,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"c1f57830241ee6a0687fcdf70b9ba017","sha1":"88a55c56a6e2ef110943ca58b4ef95ad5aca7fe0","sha256":"f07febebaf2e053eff4b62c8e8403908b76d7242ec6090418f87978039df1314","sha512":"9a0ccb8c11f148f373ba9d1c7fbc3a1c4fe52835015b90140b068def50b685306933112990315905a15d2c7af74ea4d19157e8b35458633949c263e0d5d1713d","ssdeep":"","tlshash":"66e0f1cdd100d4bfc85f685383140cd43ee3f60e0012f14992a446066e732ded642670","first_seen":"2025-03-18T07:37:38.815244Z","last_seen":"2026-08-07T00:48:35.882596Z","times_seen":2650,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/gg.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:46.823Z","timestamp":1785329806823,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w40/gg.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booklngstay-prearrlvalupdat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 29 Jul 2026 12:56:46 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-bc\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 135147\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9PxbrU1XaqIERHska4xOfls%2BvSEcZg8cMWpid8rRbepA3z3a%2BZ9VnV9%2FaxMt14H71M3UaaiekzlbvRNyreprf9uCXr8EVS1u2raxg4zw23soh%2B3ajqWSL%2BvPn6j9Pg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a22c491cae991525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 188\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":188,"size_decoded":1020,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 4-bit colormap, non-interlaced","md5":"50d332b898b150c4c4e7409f80a46023","sha1":"57397b83cdd6abb4cc1788d1aed887feed512258","sha256":"a27b2da1026e3876decad1040981d2b96b6a38371392d233c9f1880313cf5876","sha512":"50fbac72c955e8b33237e8cb7daaed1383096150e10004272c4abc783b89cb0016fda420af1a78386e3faf9bdc4ef9eafba7aba4631e5b2c82eee3fe62934d57","ssdeep":"","tlshash":"4dc0c0f83920bc7bd36f0035db04a4cfd8b128ac21010d273d0c1425035a559ecee342","first_seen":"2025-11-04T09:03:44.043999Z","last_seen":"2026-08-18T11:52:52.989338Z","times_seen":16,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booklngstay-prearrlvalupdat.com/api/support/getMessages","fqdn":"booklngstay-prearrlvalupdat.com","domain":"booklngstay-prearrlvalupdat.com","tld":"com"},"ip":{"addr":"104.21.75.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:54.777Z","timestamp":1785329814777,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booklngstay-prearrlvalupdat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 11:41:52 GMT","end":"Wed, 21 Oct 2026 12:40:36 GMT"},"fingerprint":{"sha1":"DB:AF:8A:08:8A:25:1D:15:95:70:4C:A2:5A:B5:81:10:DB:6E:21:35","sha256":"15:AA:2A:FE:B4:10:C9:B3:8F:8D:C6:43:0C:B7:8D:B8:1B:D5:9A:F2:D8:D7:58:DB:D2:E1:B7:4B:E7:E2:0B:C4"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booklngstay-prearrlvalupdat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booklngstay-prearrlvalupdat.com/1319574359\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://booklngstay-prearrlvalupdat.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=b31a4c32-1714-4a83-92aa-24a6bd0fb2a2; connect.sid=s%3AAfAG8o4L7A_bO_qkT-qw8e5RocYfDJoe.4Fp2OE7ssfj%2B9th6Q88vtp3s4wZfnBKhnmQs%2FZpv388\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1785329805611.9065\",\"chatVisible\":true,\"lang\":\"no\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 29 Jul 2026 12:56:54 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KOGTbQ%2F0mDfV2GCa6zOeOPSHPQEompV44mbYOlU%2FofskgW5%2B8OkGZ3rSMC3gVCGqvD%2FrL048nDeFxj%2FSpKkZ1H5YaorZAxCRWLzdBy%2BtJEvGuX9h4lwP8wyK8UsmPg0EDnbfgUSrKFAxY4Ku0C44lbhC\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"277-7LcLm6YmCWKd7GiUK7Wuu/JZeuY\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a22c494e5c9b569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":631,"size_decoded":1098,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"780cec47c41e22354090c2dd1488a679","sha1":"ecb70b9ba62609629dec68942bb5aebbf2597ae6","sha256":"f62376ab9cbb592d8536eef3c505739ade54099751dcb5fe0532b9fa481d78d0","sha512":"6c274367bdfee106d2fbc3695c01ea8f5b87025ca696478efa416106194f178e0ebe816a0cefa909dd47d61670a21599e578bc295766f85f55790b86a8817cbd","ssdeep":"","tlshash":"1df002dfcb4f2da42bc20113b04d2287b6f4104d4b6530b10e4ee4183334b56db2b45b","first_seen":"2026-07-29T12:57:16.713555Z","last_seen":"2026-07-29T12:57:16.713555Z","times_seen":1,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"booklngstay-prearrlvalupdat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booklngstay-prearrlvalupdat.com/api/support/getMessages","fqdn":"booklngstay-prearrlvalupdat.com","domain":"booklngstay-prearrlvalupdat.com","tld":"com"},"ip":{"addr":"104.21.75.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:57:01.827Z","timestamp":1785329821827,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booklngstay-prearrlvalupdat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 11:41:52 GMT","end":"Wed, 21 Oct 2026 12:40:36 GMT"},"fingerprint":{"sha1":"DB:AF:8A:08:8A:25:1D:15:95:70:4C:A2:5A:B5:81:10:DB:6E:21:35","sha256":"15:AA:2A:FE:B4:10:C9:B3:8F:8D:C6:43:0C:B7:8D:B8:1B:D5:9A:F2:D8:D7:58:DB:D2:E1:B7:4B:E7:E2:0B:C4"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booklngstay-prearrlvalupdat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booklngstay-prearrlvalupdat.com/1319574359\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://booklngstay-prearrlvalupdat.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=b31a4c32-1714-4a83-92aa-24a6bd0fb2a2; connect.sid=s%3AAfAG8o4L7A_bO_qkT-qw8e5RocYfDJoe.4Fp2OE7ssfj%2B9th6Q88vtp3s4wZfnBKhnmQs%2FZpv388\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1785329805611.9065\",\"chatVisible\":true,\"lang\":\"no\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 29 Jul 2026 12:57:01 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dkbL1hpuVHZqvyVxAitZ9V%2FPMFgUqgXvTFDn7XDMeN6C7KclCgvfULgJNUYJ3ViJIkitspQLiTn0cdX7JdrAd%2B7r%2FWB48Y%2FXXLjCZ%2FpbyxosoIxCUQTqUE74qqi7GhVNynt9z0PMI1ip4HFdSACqGgXe\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"277-7LcLm6YmCWKd7GiUK7Wuu/JZeuY\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a22c497a6f7b569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":631,"size_decoded":1096,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"780cec47c41e22354090c2dd1488a679","sha1":"ecb70b9ba62609629dec68942bb5aebbf2597ae6","sha256":"f62376ab9cbb592d8536eef3c505739ade54099751dcb5fe0532b9fa481d78d0","sha512":"6c274367bdfee106d2fbc3695c01ea8f5b87025ca696478efa416106194f178e0ebe816a0cefa909dd47d61670a21599e578bc295766f85f55790b86a8817cbd","ssdeep":"","tlshash":"1df002dfcb4f2da42bc20113b04d2287b6f4104d4b6530b10e4ee4183334b56db2b45b","first_seen":"2026-07-29T12:57:16.713555Z","last_seen":"2026-07-29T12:57:16.713555Z","times_seen":1,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"booklngstay-prearrlvalupdat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Ro@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:46.725Z","timestamp":1785329806725,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Ro@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booklngstay-prearrlvalupdat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 181\r\ndate: Tue, 28 Jul 2026 18:18:13 GMT\r\nlast-modified: Mon, 19 Jan 2026 12:32:14 GMT\r\netag: \"f0315a3e969130a46e5e014b633e7fea\"\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: 9.Efoj4gTMXsBqYfJgc8j42z9EWEUmRw\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4118da051b044af6aef02765a0bd4fe4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: BxO6zdX2EBhQTA-6I5hJ5QdxML-4Mm0k9brevM1zzPRKZI2R9DJoZg==\r\nage: 67114\r\ntiming-allow-origin: *\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":181,"size_decoded":941,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"295f0ce06cafbe2370693e85aedae78f","sha1":"d3baf4b39c89f9042a2c6f231c1da632cb36f5d9","sha256":"768f0b40d2b9a01863f8ddf5967dd75fd1a0bb2161aaf281aceb32140943aa09","sha512":"dff161bbfbae575904dfa20127d262a8f6e1590cff49a8a8d839d4b763965c00350992637348cb9013bc081db6061e686c36378d16fcffffa437de16e62431ab","ssdeep":"","tlshash":"44c0c0cae1342cfec32b88f380ce01d08067ac3c0e1320c30490f071b8020344dd6d62","first_seen":"2025-03-18T07:37:38.810667Z","last_seen":"2026-08-07T00:48:35.892017Z","times_seen":2649,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booklngstay-prearrlvalupdat.com/1319574359","fqdn":"booklngstay-prearrlvalupdat.com","domain":"booklngstay-prearrlvalupdat.com","tld":"com"},"ip":{"addr":"104.21.75.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-29T12:56:44.902Z","timestamp":1785329804902,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booklngstay-prearrlvalupdat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 11:41:52 GMT","end":"Wed, 21 Oct 2026 12:40:36 GMT"},"fingerprint":{"sha1":"DB:AF:8A:08:8A:25:1D:15:95:70:4C:A2:5A:B5:81:10:DB:6E:21:35","sha256":"15:AA:2A:FE:B4:10:C9:B3:8F:8D:C6:43:0C:B7:8D:B8:1B:D5:9A:F2:D8:D7:58:DB:D2:E1:B7:4B:E7:E2:0B:C4"}}},"request":{"raw":"GET /1319574359 HTTP/1.1\r\nHost: booklngstay-prearrlvalupdat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 29 Jul 2026 12:56:45 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hjPDdZj0XbAb77TgpKbARwwlAav0UpblQJwUdskUjiEFXAM6ib2J0vlZs6N7NfCVfLXWgYYtzUBDANj9asSzdAbMsGzuGk9VR71dkOS1rkDrAAx8CnnLyzh4WMkxsjDcNHG%2FHGk6JQfJ9kNcf2svLx0D\"}]}\r\npriority: u=0,i\r\nx-powered-by: Express\r\nset-cookie: mammoth_id=b31a4c32-1714-4a83-92aa-24a6bd0fb2a2; Max-Age=31536000; Domain=.booklngstay-prearrlvalupdat.com; Path=/; Expires=Thu, 29 Jul 2027 12:56:45 GMT; HttpOnly; SameSite=Lax\nconnect.sid=s%3AAfAG8o4L7A_bO_qkT-qw8e5RocYfDJoe.4Fp2OE7ssfj%2B9th6Q88vtp3s4wZfnBKhnmQs%2FZpv388; Path=/; HttpOnly\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a22c4910c94f569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":282377,"size_decoded":96013,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (52377)","md5":"f95b932233e516e3c7fa0159a388cc2f","sha1":"e33439ed114a9adb9563ec605152dbc8f948f7ba","sha256":"00f9abfd32019e1868a53892f7d161f50cddbd1bae14afac0140ce3a2d5242ff","sha512":"7302a2a1848bbb767925979d27502ea1cdd7fdde3db6f384f3a1b8086dc14797cd6e9dd6921f5dbf675ef55eebc105023e357c7bfdaeaf21f642bddbdb720001","ssdeep":"6144:fI4xXw0okHcHAa0evnNyolRjiui5z6fRZzxx22F9dGp6D:f3JozAa0QyolRVi5z6fRZzxxWM","tlshash":"57546d5265f9677e049b02c9a9563d2a1fedc23be652c5c4b54c8bb43fe2c2cc237468","first_seen":"2026-07-29T12:57:16.779218Z","last_seen":"2026-07-29T12:57:16.779218Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1154,"timings":{"blocked":-1,"dns":5,"connect":13,"send":0,"wait":1020,"receive":116,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"booklngstay-prearrlvalupdat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booklngstay-prearrlvalupdat.com/book/css/styles.css?v=1771629300","fqdn":"booklngstay-prearrlvalupdat.com","domain":"booklngstay-prearrlvalupdat.com","tld":"com"},"ip":{"addr":"104.21.75.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:46.314Z","timestamp":1785329806314,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booklngstay-prearrlvalupdat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 11:41:52 GMT","end":"Wed, 21 Oct 2026 12:40:36 GMT"},"fingerprint":{"sha1":"DB:AF:8A:08:8A:25:1D:15:95:70:4C:A2:5A:B5:81:10:DB:6E:21:35","sha256":"15:AA:2A:FE:B4:10:C9:B3:8F:8D:C6:43:0C:B7:8D:B8:1B:D5:9A:F2:D8:D7:58:DB:D2:E1:B7:4B:E7:E2:0B:C4"}}},"request":{"raw":"GET /book/css/styles.css?v=1771629300 HTTP/1.1\r\nHost: booklngstay-prearrlvalupdat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booklngstay-prearrlvalupdat.com/1319574359\r\nCookie: mammoth_id=b31a4c32-1714-4a83-92aa-24a6bd0fb2a2; connect.sid=s%3AAfAG8o4L7A_bO_qkT-qw8e5RocYfDJoe.4Fp2OE7ssfj%2B9th6Q88vtp3s4wZfnBKhnmQs%2FZpv388\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 29 Jul 2026 12:56:46 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nx-powered-by: Express\r\ncache-control: no-store, no-cache, must-revalidate\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4aAOkAVH%2FE9pejJkHu8pRf6yHAF7bAIVJr1bjctiZS1APnzFXA4Ms5XnnRlcLTPsQqy9qJC9GnJ6UNyuZ9lg8K2NTs6zaXvOMYwaegvG%2BMSV5ts2mu5gcp2Bw%2BjcvqdwexjT7kgoBtnnZ6McGyWL1b2s\"}]}\r\nlast-modified: Fri, 20 Mar 2026 12:41:44 GMT\r\netag: W/\"9bdd-19d0b441340\"\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a22c491979b9569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":39901,"size_decoded":10260,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (388)","md5":"327907828684af6e145e66536a4b2051","sha1":"8ee986c3fc5557fd896d342543013850fe02934d","sha256":"f480303ed1feb42b748803554e87f3d2504ac31836d88dc5247986b21ab76ba1","sha512":"3bc61963142bf02bac5b8d0da6ee0a374532525f6d0b514d5cfbd5cb8baf96731ff4d211fd9ae3acf3376d556242ae2872f969ca46f0de2074f0b6e1ef495c29","ssdeep":"768:cq82ykhxOn51et/3gJQivtnlOtQAczFHWM:cq82ykhxc5W3guivtnEhchWM","tlshash":"170384da2bb54950b4278a787aa5974573198003810eed7cbfe1206ccfc93a5dbb27cd","first_seen":"2026-05-02T20:55:48.357566Z","last_seen":"2026-08-06T00:54:57.296703Z","times_seen":8,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"booklngstay-prearrlvalupdat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booklngstay-prearrlvalupdat.com/book/images/flags.png","fqdn":"booklngstay-prearrlvalupdat.com","domain":"booklngstay-prearrlvalupdat.com","tld":"com"},"ip":{"addr":"104.21.75.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:46.502Z","timestamp":1785329806502,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booklngstay-prearrlvalupdat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 11:41:52 GMT","end":"Wed, 21 Oct 2026 12:40:36 GMT"},"fingerprint":{"sha1":"DB:AF:8A:08:8A:25:1D:15:95:70:4C:A2:5A:B5:81:10:DB:6E:21:35","sha256":"15:AA:2A:FE:B4:10:C9:B3:8F:8D:C6:43:0C:B7:8D:B8:1B:D5:9A:F2:D8:D7:58:DB:D2:E1:B7:4B:E7:E2:0B:C4"}}},"request":{"raw":"GET /book/images/flags.png HTTP/1.1\r\nHost: booklngstay-prearrlvalupdat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booklngstay-prearrlvalupdat.com/1319574359\r\nCookie: mammoth_id=b31a4c32-1714-4a83-92aa-24a6bd0fb2a2; connect.sid=s%3AAfAG8o4L7A_bO_qkT-qw8e5RocYfDJoe.4Fp2OE7ssfj%2B9th6Q88vtp3s4wZfnBKhnmQs%2FZpv388\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 29 Jul 2026 12:56:46 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\nx-powered-by: Express\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 09 Nov 2025 12:21:57 GMT\r\netag: W/\"77d8-19a6890e288\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9owTB3zYbsDLuNmcOX6LaGiNLfIKvqQ2oSx1SNF6cucDSsBJkxz6eiY9%2Bc6e7din72UYGYh6oGrP4NWrbEEldJeN%2FcHv7fyGbiEWKVUP%2FxsguqohAvC8hwK%2BaARrVrtHoNVbwXiRwdioMsU6%2BJD%2FLVo8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a22c491aa9db569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 30680\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30680,"size_decoded":31429,"mime_type":"image/png","magic":"PNG image data, 18 x 6243, 8-bit colormap, non-interlaced","md5":"7e2c6009cfe0db90435c9e506e718913","sha1":"aa5b9747f1fd934f465a2eb1a6119df78cd8147e","sha256":"fc78e1550450ab81964ef660b05cb14fb17e0b895b261925ad7e6e073502dfc4","sha512":"ed75a82d511d2d28b6077ed626d054944c9c9005b0282cfd3c63365da415186dbf1913651b1b3cab153b35254449aaff15eed7aed1e00101d22bc39a4f76324c","ssdeep":"768:+u/kdoLtfqovOH/rceeugVi292Hvzd6lnri5HVoI3zk6suob+HHO:+uRtqHDc/ukuIlCzNsuo2O","tlshash":"6fd2f152bf5c2e767e9fa4edd363009ba100c3ee6fa6dd4926441bf888c1a92f091547","first_seen":"2023-08-22T12:49:30Z","last_seen":"2026-08-06T00:54:57.283486Z","times_seen":2554,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"booklngstay-prearrlvalupdat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Bg@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:46.664Z","timestamp":1785329806664,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Bg@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booklngstay-prearrlvalupdat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 156\r\ndate: Tue, 28 Jul 2026 18:18:13 GMT\r\nlast-modified: Mon, 19 Jan 2026 12:32:08 GMT\r\netag: \"5164d7c5831a6b2ca99424447bf11793\"\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: GOFQJH4n7UMBCx4Y1Oy0TZBzYkAxRb8q\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4118da051b044af6aef02765a0bd4fe4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: _ZWgPbY-B7UVYbJ77rYWufTAOu6ay0H6yhoV29IsGWstTGyEo0Ho6g==\r\nage: 67114\r\ntiming-allow-origin: *\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":156,"size_decoded":916,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"05660139a0bed8e76a330bd75c838928","sha1":"e16cc8ef88ee416b94d87480bd874385056a673e","sha256":"ee767c53d4a9ca68011a6e7d5492e93936573331cae748e55ef70a527091adfe","sha512":"0eeeca9f0c813e4156f1f3b6f4304763df3f56df45741bbd0d4df5b7ce6ba4cc4af86405c4f735b345da910c690a34a298a6013c5813ecc8b99c9af55aa10ce7","ssdeep":"","tlshash":"03c080ded1011d3fc51d5c6b404f91c06493695d11517c0151b49408202564549c4af4","first_seen":"2025-03-18T07:37:38.833889Z","last_seen":"2026-08-07T00:48:35.870056Z","times_seen":2649,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booklngstay-prearrlvalupdat.com/api/poll/1319574359?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0","fqdn":"booklngstay-prearrlvalupdat.com","domain":"booklngstay-prearrlvalupdat.com","tld":"com"},"ip":{"addr":"104.21.75.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:52.760Z","timestamp":1785329812760,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booklngstay-prearrlvalupdat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 11:41:52 GMT","end":"Wed, 21 Oct 2026 12:40:36 GMT"},"fingerprint":{"sha1":"DB:AF:8A:08:8A:25:1D:15:95:70:4C:A2:5A:B5:81:10:DB:6E:21:35","sha256":"15:AA:2A:FE:B4:10:C9:B3:8F:8D:C6:43:0C:B7:8D:B8:1B:D5:9A:F2:D8:D7:58:DB:D2:E1:B7:4B:E7:E2:0B:C4"}}},"request":{"raw":"GET /api/poll/1319574359?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0 HTTP/1.1\r\nHost: booklngstay-prearrlvalupdat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booklngstay-prearrlvalupdat.com/1319574359\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=b31a4c32-1714-4a83-92aa-24a6bd0fb2a2; connect.sid=s%3AAfAG8o4L7A_bO_qkT-qw8e5RocYfDJoe.4Fp2OE7ssfj%2B9th6Q88vtp3s4wZfnBKhnmQs%2FZpv388\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 29 Jul 2026 12:56:52 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iJXOK9PTb7KyllqChKOOYNc9xl9oxvxsDmjk0i6hV0NUgjp%2Fh52XyUfm5nl4QNbMvY9sIb%2FCAhxSiep6ue22RKfdYgWSxZzNuaUQkdz1PsQ9t5YhF%2Bq0pJLP9Hy4p7uHkYqnKq3Q5ThuN47SDLFqWBKc\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"3d-91VjXIAej/KHNzJeAxY5ykae5RI\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a22c4941cbf6569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":61,"size_decoded":743,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-08-06T00:54:57.280485Z","times_seen":19,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"booklngstay-prearrlvalupdat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booklngstay-prearrlvalupdat.com/api/support/getMessages","fqdn":"booklngstay-prearrlvalupdat.com","domain":"booklngstay-prearrlvalupdat.com","tld":"com"},"ip":{"addr":"104.21.75.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:57:03.845Z","timestamp":1785329823845,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booklngstay-prearrlvalupdat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 11:41:52 GMT","end":"Wed, 21 Oct 2026 12:40:36 GMT"},"fingerprint":{"sha1":"DB:AF:8A:08:8A:25:1D:15:95:70:4C:A2:5A:B5:81:10:DB:6E:21:35","sha256":"15:AA:2A:FE:B4:10:C9:B3:8F:8D:C6:43:0C:B7:8D:B8:1B:D5:9A:F2:D8:D7:58:DB:D2:E1:B7:4B:E7:E2:0B:C4"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booklngstay-prearrlvalupdat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booklngstay-prearrlvalupdat.com/1319574359\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://booklngstay-prearrlvalupdat.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=b31a4c32-1714-4a83-92aa-24a6bd0fb2a2; connect.sid=s%3AAfAG8o4L7A_bO_qkT-qw8e5RocYfDJoe.4Fp2OE7ssfj%2B9th6Q88vtp3s4wZfnBKhnmQs%2FZpv388\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1785329805611.9065\",\"chatVisible\":true,\"lang\":\"no\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 29 Jul 2026 12:57:03 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7O%2FektFbdQRVRuFdQ%2BtjuU1zKyR30q%2FR2emn4Z%2FeoEf227vjK3Kl2TDE5Gm%2BF5xZRU02nf1zWOcxPllET%2FUkmanAEgnDXYBhFyAFLp7KOHgJkmdtx5uLUIlyfmVv9TO3hT2MrDJSS6y%2BgafGL%2FDKbt4S\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"277-7LcLm6YmCWKd7GiUK7Wuu/JZeuY\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a22c4987081d569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":631,"size_decoded":1102,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"780cec47c41e22354090c2dd1488a679","sha1":"ecb70b9ba62609629dec68942bb5aebbf2597ae6","sha256":"f62376ab9cbb592d8536eef3c505739ade54099751dcb5fe0532b9fa481d78d0","sha512":"6c274367bdfee106d2fbc3695c01ea8f5b87025ca696478efa416106194f178e0ebe816a0cefa909dd47d61670a21599e578bc295766f85f55790b86a8817cbd","ssdeep":"","tlshash":"1df002dfcb4f2da42bc20113b04d2287b6f4104d4b6530b10e4ee4183334b56db2b45b","first_seen":"2026-07-29T12:57:16.713555Z","last_seen":"2026-07-29T12:57:16.713555Z","times_seen":1,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"booklngstay-prearrlvalupdat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booklngstay-prearrlvalupdat.com/api/poll/1319574359?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0","fqdn":"booklngstay-prearrlvalupdat.com","domain":"booklngstay-prearrlvalupdat.com","tld":"com"},"ip":{"addr":"104.21.75.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:57:06.359Z","timestamp":1785329826359,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booklngstay-prearrlvalupdat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 11:41:52 GMT","end":"Wed, 21 Oct 2026 12:40:36 GMT"},"fingerprint":{"sha1":"DB:AF:8A:08:8A:25:1D:15:95:70:4C:A2:5A:B5:81:10:DB:6E:21:35","sha256":"15:AA:2A:FE:B4:10:C9:B3:8F:8D:C6:43:0C:B7:8D:B8:1B:D5:9A:F2:D8:D7:58:DB:D2:E1:B7:4B:E7:E2:0B:C4"}}},"request":{"raw":"GET /api/poll/1319574359?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0 HTTP/1.1\r\nHost: booklngstay-prearrlvalupdat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booklngstay-prearrlvalupdat.com/1319574359\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=b31a4c32-1714-4a83-92aa-24a6bd0fb2a2; connect.sid=s%3AAfAG8o4L7A_bO_qkT-qw8e5RocYfDJoe.4Fp2OE7ssfj%2B9th6Q88vtp3s4wZfnBKhnmQs%2FZpv388\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 29 Jul 2026 12:57:06 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6ui7H%2Bv4rz%2FGv%2FWG%2FI9zz%2BCSYPjC2huFFTi%2BKf4Ybq%2FLDezO4rm9qPnx6LsaczPeJ4pXin2rP%2FoRId373yutsr2FmiUogOsCrmiSH1E9%2FjX%2BpjbMJB2Vc0YFCuCSqNdIvVrbfMI9s6IgZGdH3HNUeCpM\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"3d-91VjXIAej/KHNzJeAxY5ykae5RI\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a22c4996c8f8569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61,"size_decoded":757,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-08-06T00:54:57.280485Z","times_seen":19,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"booklngstay-prearrlvalupdat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booklngstay-prearrlvalupdat.com/css/support_parent.css","fqdn":"booklngstay-prearrlvalupdat.com","domain":"booklngstay-prearrlvalupdat.com","tld":"com"},"ip":{"addr":"104.21.75.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:46.320Z","timestamp":1785329806320,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booklngstay-prearrlvalupdat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 11:41:52 GMT","end":"Wed, 21 Oct 2026 12:40:36 GMT"},"fingerprint":{"sha1":"DB:AF:8A:08:8A:25:1D:15:95:70:4C:A2:5A:B5:81:10:DB:6E:21:35","sha256":"15:AA:2A:FE:B4:10:C9:B3:8F:8D:C6:43:0C:B7:8D:B8:1B:D5:9A:F2:D8:D7:58:DB:D2:E1:B7:4B:E7:E2:0B:C4"}}},"request":{"raw":"GET /css/support_parent.css HTTP/1.1\r\nHost: booklngstay-prearrlvalupdat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booklngstay-prearrlvalupdat.com/1319574359\r\nCookie: mammoth_id=b31a4c32-1714-4a83-92aa-24a6bd0fb2a2; connect.sid=s%3AAfAG8o4L7A_bO_qkT-qw8e5RocYfDJoe.4Fp2OE7ssfj%2B9th6Q88vtp3s4wZfnBKhnmQs%2FZpv388\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Wed, 29 Jul 2026 12:56:46 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nx-powered-by: Express\r\ncontent-security-policy: default-src 'none'\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4SNRssvkvLJp4Y07eVwW%2BuxrJNL3BWqOc907s0UnULWwxIP6ZLQn3WhuNqWXB1okMKwPqbt7gnTKvQbUE2Z9XeTnDfq8LUBb1f2gVfaItVdhZa53pyFnPhEWmf0N1pqbFmUTE8OpdCPeySKEQDqAebAy\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a22c491989bb569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-21T05:30:39.453967Z","times_seen":18007422,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"booklngstay-prearrlvalupdat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/aaronfagan/svg-credit-card-payment-icons/main/logo/visa.svg","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.109.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:46.335Z","timestamp":1785329806335,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 23:26:07 GMT","end":"Wed, 02 Sep 2026 23:26:06 GMT"},"fingerprint":{"sha1":"3F:87:BE:75:1A:02:3B:A4:D2:51:D2:72:92:A0:00:61:D1:D0:D7:12","sha256":"32:49:1B:26:BF:AF:7B:FB:55:60:29:EF:32:29:9A:C4:37:4D:B3:4D:09:EE:CD:4F:FD:01:F2:1B:2C:5A:85:67"}}},"request":{"raw":"GET /aaronfagan/svg-credit-card-payment-icons/main/logo/visa.svg HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booklngstay-prearrlvalupdat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/svg+xml\r\netag: W/\"228ca07b117b8fecc04578f9b7b5280b98d49d04c686c4c2afdb953a22b6445b\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: 1B96:3A3E35:4DE9D3:932C76:6A68CB79\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ndate: Wed, 29 Jul 2026 12:56:46 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270056-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1785329807.678043,VS0,VE2\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: 6ee6328ac16fffa256beb458a48c76c05c3ae505\r\nexpires: Wed, 29 Jul 2026 13:01:46 GMT\r\nsource-age: 78\r\ncontent-length: 610\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":1204,"size_decoded":1512,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1170e846efc35f50a41fc10cf37d5c4f","sha1":"ee6657741ec8fed7d9ebd361b5de2593397c59ae","sha256":"8d837bb887be5ac1a959c8bfc8874dc35d1571d5953efa560b1f317ed6f56bb4","sha512":"88a7a6ac917560efbe30ba89038b95199be369f60781f32613cbb1612b03d6abd6f5423f0051219c05806365b5492ebd266f45c9ef5e27d6d1740d4ecca9b036","ssdeep":"","tlshash":"872167ed3f9428c9c4c24fd5b615150d3229d0f3ac455942ca003f0431c986161bebf2","first_seen":"2025-06-23T21:13:45.828877Z","last_seen":"2026-08-06T00:54:57.288192Z","times_seen":241,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":59,"dns":1,"connect":8,"send":0,"wait":16,"receive":0,"ssl":250},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/aaronfagan/svg-credit-card-payment-icons/main/logo/maestro.svg","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.109.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:46.344Z","timestamp":1785329806344,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 23:26:07 GMT","end":"Wed, 02 Sep 2026 23:26:06 GMT"},"fingerprint":{"sha1":"3F:87:BE:75:1A:02:3B:A4:D2:51:D2:72:92:A0:00:61:D1:D0:D7:12","sha256":"32:49:1B:26:BF:AF:7B:FB:55:60:29:EF:32:29:9A:C4:37:4D:B3:4D:09:EE:CD:4F:FD:01:F2:1B:2C:5A:85:67"}}},"request":{"raw":"GET /aaronfagan/svg-credit-card-payment-icons/main/logo/maestro.svg HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booklngstay-prearrlvalupdat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/svg+xml\r\netag: W/\"b9851849fc716685f0543bed6e51e61de8c314460c47403a1c1afe563b259132\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: FC72:3FD991:503573:957987:6A68CB79\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ndate: Wed, 29 Jul 2026 12:56:46 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270056-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1785329807.678821,VS0,VE1\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: 4210aae560f33fd6d41bcf9b80808cd35af1b635\r\nexpires: Wed, 29 Jul 2026 13:01:46 GMT\r\nsource-age: 78\r\ncontent-length: 730\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":1418,"size_decoded":1632,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5a44ff01b20aa7692ee7e4579dcd478f","sha1":"398894130418b3c7b30e32f8ef5f19971e3e2493","sha256":"eea18aabfd772d504260fdced1e4ed10e36483265239094c9e8abccaf0feafb1","sha512":"b7a4fa7daa06821c375201057c9baefe60b3f9522a8bf0c49621b26c1114eb2bed75682f4776eb8c739175057d1e367284b87d8d947d1dbf2b5004ba4de3a297","ssdeep":"","tlshash":"742122ec276488c04844cbe2bf3a1acd0ddfc5d32cd5cc59e51c5b0a658463a9cd1ae7","first_seen":"2026-02-01T07:53:46.692926Z","last_seen":"2026-08-06T00:54:57.321098Z","times_seen":206,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":58,"dns":1,"connect":9,"send":0,"wait":15,"receive":0,"ssl":252},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Gr@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:46.680Z","timestamp":1785329806680,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Gr@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booklngstay-prearrlvalupdat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 257\r\ndate: Tue, 28 Jul 2026 15:21:13 GMT\r\nlast-modified: Mon, 19 Jan 2026 12:32:10 GMT\r\netag: \"f9a5f70a8f8702c501beb7daa292883b\"\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: QpPXZGAwsz_p6wNDHMjMV9CamEKSiLDP\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4118da051b044af6aef02765a0bd4fe4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: nHnC48M9Wn2CC2PVAyrIo2-MEOWTXe8rEOnmjdg0y1feo4ZmA9swQA==\r\nage: 77734\r\ntiming-allow-origin: *\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":257,"size_decoded":1017,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"550d5f7bd750b6185f6586b371b39698","sha1":"08d8f835e39732003eabd9029e1bdd50cfc0e4fb","sha256":"bdc85911c3912c973e3170f85506cc6e29d83586bad949d4188803f95b9e7c39","sha512":"371a1814fef91d90c4cce566fd0ae6ac4a27c074110dfa85b603bbcca6ea59c9c50abb35d571bd94fbe578ff22360d2ff893891e0f13836ef705128409bd171f","ssdeep":"","tlshash":"7dd02bdda22e5939c5df4fb30055448080531d695602a305b970c8592b0f02892c82f1","first_seen":"2025-03-18T07:37:38.806728Z","last_seen":"2026-08-07T00:48:35.89795Z","times_seen":2649,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Si@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:46.730Z","timestamp":1785329806730,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Si@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booklngstay-prearrlvalupdat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 582\r\nlast-modified: Mon, 19 Jan 2026 12:32:14 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: VeCvSSeVpuUJCXZnqBZ.ojaf28G4haUJ\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Tue, 28 Jul 2026 16:49:03 GMT\r\netag: \"d4dad9312a784095410441c064c590b6\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4118da051b044af6aef02765a0bd4fe4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: R1NRQpG1w4Bp5SCQuNao1YggYydZCTw-zCcYK6Wt1SFtzUY9FuATBQ==\r\nage: 72464\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":582,"size_decoded":1359,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"a011bf048fdde7e06bf902c38a0e89d7","sha1":"d5043b458155c32c0af0397445dd5cbc8b4a4b1a","sha256":"a7f5a2e8d3fe21abc111e40a5bbfee3db9c5a1d5fd1ed447617dc762f7f88455","sha512":"5f9dead7eb393ec2ec64175db79c5937285acc38e27e0cd7cf72ae62b1af51c8be9ca95610a9feddf1038081c575a3411043c6203bdde9869599885b53ddd64e","ssdeep":"","tlshash":"59f0b1c123c3b42649f68822bc3308f93e2a88a8e000060a01c499b0704f4f86f8e46c","first_seen":"2025-03-18T07:37:38.836599Z","last_seen":"2026-08-07T00:48:35.884471Z","times_seen":2649,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booklngstay-prearrlvalupdat.com/api/poll/1319574359?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0","fqdn":"booklngstay-prearrlvalupdat.com","domain":"booklngstay-prearrlvalupdat.com","tld":"com"},"ip":{"addr":"104.21.75.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:51.229Z","timestamp":1785329811229,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booklngstay-prearrlvalupdat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 11:41:52 GMT","end":"Wed, 21 Oct 2026 12:40:36 GMT"},"fingerprint":{"sha1":"DB:AF:8A:08:8A:25:1D:15:95:70:4C:A2:5A:B5:81:10:DB:6E:21:35","sha256":"15:AA:2A:FE:B4:10:C9:B3:8F:8D:C6:43:0C:B7:8D:B8:1B:D5:9A:F2:D8:D7:58:DB:D2:E1:B7:4B:E7:E2:0B:C4"}}},"request":{"raw":"GET /api/poll/1319574359?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0 HTTP/1.1\r\nHost: booklngstay-prearrlvalupdat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booklngstay-prearrlvalupdat.com/1319574359\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=b31a4c32-1714-4a83-92aa-24a6bd0fb2a2; connect.sid=s%3AAfAG8o4L7A_bO_qkT-qw8e5RocYfDJoe.4Fp2OE7ssfj%2B9th6Q88vtp3s4wZfnBKhnmQs%2FZpv388\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 29 Jul 2026 12:56:51 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O5VzHRpj1Hp6gWd9XnJZoBCBYjh7fGFFesV6bIVZz1EyC7nEokVlYCgReyf8gYSxDIonKxznOjZcYs7tr%2BQoWx6auYNV2vNy%2BZmBBP5NJ0%2BubWQrvnlkiOKsp7BET%2Fdcng0QO04t%2FmgDG9qxNLT8DNZ0\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"3d-91VjXIAej/KHNzJeAxY5ykae5RI\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a22c49383b6f569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":61,"size_decoded":747,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-08-06T00:54:57.280485Z","times_seen":19,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"booklngstay-prearrlvalupdat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booklngstay-prearrlvalupdat.com/api/support/getMessages","fqdn":"booklngstay-prearrlvalupdat.com","domain":"booklngstay-prearrlvalupdat.com","tld":"com"},"ip":{"addr":"104.21.75.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:57:07.876Z","timestamp":1785329827876,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booklngstay-prearrlvalupdat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 11:41:52 GMT","end":"Wed, 21 Oct 2026 12:40:36 GMT"},"fingerprint":{"sha1":"DB:AF:8A:08:8A:25:1D:15:95:70:4C:A2:5A:B5:81:10:DB:6E:21:35","sha256":"15:AA:2A:FE:B4:10:C9:B3:8F:8D:C6:43:0C:B7:8D:B8:1B:D5:9A:F2:D8:D7:58:DB:D2:E1:B7:4B:E7:E2:0B:C4"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booklngstay-prearrlvalupdat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booklngstay-prearrlvalupdat.com/1319574359\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://booklngstay-prearrlvalupdat.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=b31a4c32-1714-4a83-92aa-24a6bd0fb2a2; connect.sid=s%3AAfAG8o4L7A_bO_qkT-qw8e5RocYfDJoe.4Fp2OE7ssfj%2B9th6Q88vtp3s4wZfnBKhnmQs%2FZpv388\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1785329805611.9065\",\"chatVisible\":true,\"lang\":\"no\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 29 Jul 2026 12:57:08 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YtrXvz6k9iIsW%2F8RarwxbuC5lT4rohBNPO55xth6khdv5X8L0DZwbueSvxNorMk%2BzAPwcU35hbFY1t2mqMWJGo1eEqTZz4L8qhOk1Svg%2Bv1jcA2C0SIJ4VuFJWqbT14KHUEpVaZ3m3wLPZ7mSNnU9c6A\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"277-7LcLm6YmCWKd7GiUK7Wuu/JZeuY\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a22c49a03966569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":631,"size_decoded":1092,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"780cec47c41e22354090c2dd1488a679","sha1":"ecb70b9ba62609629dec68942bb5aebbf2597ae6","sha256":"f62376ab9cbb592d8536eef3c505739ade54099751dcb5fe0532b9fa481d78d0","sha512":"6c274367bdfee106d2fbc3695c01ea8f5b87025ca696478efa416106194f178e0ebe816a0cefa909dd47d61670a21599e578bc295766f85f55790b86a8817cbd","ssdeep":"","tlshash":"1df002dfcb4f2da42bc20113b04d2287b6f4104d4b6530b10e4ee4183334b56db2b45b","first_seen":"2026-07-29T12:57:16.713555Z","last_seen":"2026-07-29T12:57:16.713555Z","times_seen":1,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"booklngstay-prearrlvalupdat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booklngstay-prearrlvalupdat.com/api/poll/1319574359?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0","fqdn":"booklngstay-prearrlvalupdat.com","domain":"booklngstay-prearrlvalupdat.com","tld":"com"},"ip":{"addr":"104.21.75.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:57:09.360Z","timestamp":1785329829360,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booklngstay-prearrlvalupdat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 11:41:52 GMT","end":"Wed, 21 Oct 2026 12:40:36 GMT"},"fingerprint":{"sha1":"DB:AF:8A:08:8A:25:1D:15:95:70:4C:A2:5A:B5:81:10:DB:6E:21:35","sha256":"15:AA:2A:FE:B4:10:C9:B3:8F:8D:C6:43:0C:B7:8D:B8:1B:D5:9A:F2:D8:D7:58:DB:D2:E1:B7:4B:E7:E2:0B:C4"}}},"request":{"raw":"GET /api/poll/1319574359?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0 HTTP/1.1\r\nHost: booklngstay-prearrlvalupdat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booklngstay-prearrlvalupdat.com/1319574359\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=b31a4c32-1714-4a83-92aa-24a6bd0fb2a2; connect.sid=s%3AAfAG8o4L7A_bO_qkT-qw8e5RocYfDJoe.4Fp2OE7ssfj%2B9th6Q88vtp3s4wZfnBKhnmQs%2FZpv388\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 29 Jul 2026 12:57:09 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OVJUPGTvKUVLSWdmChRm%2F8WwUtMalW1wH6cufJBLegrZr5WT4qxicTzACIjZ7%2FDb4nfBncskX5iRYniyy82ZWUmWDFB6m4thiwSRIJnwdKXOTPyBAmHMnvwCXE23zUZ4u5MS9vBUUqkXQarVDA%2FbgcOb\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"3d-91VjXIAej/KHNzJeAxY5ykae5RI\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a22c49a989be569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61,"size_decoded":743,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-08-06T00:54:57.280485Z","times_seen":19,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"booklngstay-prearrlvalupdat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booklngstay-prearrlvalupdat.com/api/support/getMessages","fqdn":"booklngstay-prearrlvalupdat.com","domain":"booklngstay-prearrlvalupdat.com","tld":"com"},"ip":{"addr":"104.21.75.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:57:10.912Z","timestamp":1785329830912,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booklngstay-prearrlvalupdat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 11:41:52 GMT","end":"Wed, 21 Oct 2026 12:40:36 GMT"},"fingerprint":{"sha1":"DB:AF:8A:08:8A:25:1D:15:95:70:4C:A2:5A:B5:81:10:DB:6E:21:35","sha256":"15:AA:2A:FE:B4:10:C9:B3:8F:8D:C6:43:0C:B7:8D:B8:1B:D5:9A:F2:D8:D7:58:DB:D2:E1:B7:4B:E7:E2:0B:C4"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booklngstay-prearrlvalupdat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booklngstay-prearrlvalupdat.com/1319574359\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://booklngstay-prearrlvalupdat.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=b31a4c32-1714-4a83-92aa-24a6bd0fb2a2; connect.sid=s%3AAfAG8o4L7A_bO_qkT-qw8e5RocYfDJoe.4Fp2OE7ssfj%2B9th6Q88vtp3s4wZfnBKhnmQs%2FZpv388\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1785329805611.9065\",\"chatVisible\":true,\"lang\":\"no\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 29 Jul 2026 12:57:11 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vXmJpHp62%2Fwoom4G4gv4vKKITYLq1REgvROlpb8WmMfOaah1JZJNYNQc8ssDUTH571FTgJ%2B3FtCrkvi1fddVnTruF9lof2udamlA5GG7qHjbU15t7Mevcj92AmZH3gPb4HPbs4Bnu65SmwsaL1w8xDUF\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"277-7LcLm6YmCWKd7GiUK7Wuu/JZeuY\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a22c49b33a2d569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":631,"size_decoded":1090,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"780cec47c41e22354090c2dd1488a679","sha1":"ecb70b9ba62609629dec68942bb5aebbf2597ae6","sha256":"f62376ab9cbb592d8536eef3c505739ade54099751dcb5fe0532b9fa481d78d0","sha512":"6c274367bdfee106d2fbc3695c01ea8f5b87025ca696478efa416106194f178e0ebe816a0cefa909dd47d61670a21599e578bc295766f85f55790b86a8817cbd","ssdeep":"","tlshash":"1df002dfcb4f2da42bc20113b04d2287b6f4104d4b6530b10e4ee4183334b56db2b45b","first_seen":"2026-07-29T12:57:16.713555Z","last_seen":"2026-07-29T12:57:16.713555Z","times_seen":1,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"booklngstay-prearrlvalupdat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/aaronfagan/svg-credit-card-payment-icons/main/logo/jcb.svg","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.109.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:46.340Z","timestamp":1785329806340,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 23:26:07 GMT","end":"Wed, 02 Sep 2026 23:26:06 GMT"},"fingerprint":{"sha1":"3F:87:BE:75:1A:02:3B:A4:D2:51:D2:72:92:A0:00:61:D1:D0:D7:12","sha256":"32:49:1B:26:BF:AF:7B:FB:55:60:29:EF:32:29:9A:C4:37:4D:B3:4D:09:EE:CD:4F:FD:01:F2:1B:2C:5A:85:67"}}},"request":{"raw":"GET /aaronfagan/svg-credit-card-payment-icons/main/logo/jcb.svg HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booklngstay-prearrlvalupdat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/svg+xml\r\netag: W/\"2726b2424d363025096b1a5ec48e0c86efb818a4787de8105f29c8ce44f69869\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: 0B54:164CA3:1537B7:2BAF5C:6A69DF46\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ndate: Wed, 29 Jul 2026 12:56:46 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270056-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1785329806.440970,VS0,VE2\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: bafc9fba9a6abdbdf39312359497dae534bd55c4\r\nexpires: Wed, 29 Jul 2026 13:01:46 GMT\r\nsource-age: 78\r\ncontent-length: 1536\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":3202,"size_decoded":2439,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8bb2d74d95894464f28bf7cb84060d5a","sha1":"951e92034847cddab02bd6a2777bcdf86a6dcf64","sha256":"5feacae1824b67253308bf7e85e5d128bacf834d6c422370eb4ecafd206444dc","sha512":"0ff79dec8263bdb7d182318aa67a2edba5e42cc96b80a81b9a1b6b099caf19a045630f4f988f2c1dfc488c25267743d1a5bf13246f103bc82221d22db38f9e14","ssdeep":"","tlshash":"0e6184eedb79e0b5f04593acdf105d9c260f15ee6820c368c63daf4a45b3e894a48680","first_seen":"2026-04-05T23:18:09.645402Z","last_seen":"2026-08-06T00:54:57.306952Z","times_seen":9,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":89,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Gb@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:46.656Z","timestamp":1785329806656,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Gb@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booklngstay-prearrlvalupdat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 743\r\nlast-modified: Mon, 19 Jan 2026 12:32:10 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: acDzrqBZDz05IFOFN0ynlTV7DrrKn0Gd\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 29 Jul 2026 12:02:34 GMT\r\netag: \"d1dbefecf4dcac68e1c75bb71fcef0b6\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4118da051b044af6aef02765a0bd4fe4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: ZOYuQOsHk1sTsso9r7Hv55XO9tZr1Z85junXrutwiNpzwhW9q35AoQ==\r\nage: 4321\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":743,"size_decoded":1519,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"c3d06580eeaef36441e5be59b5e63173","sha1":"1597d22ffeb0057b1ba9f58e2f518c7cbbd87f5c","sha256":"984c40b090d8ea734b17e1b63edd06d77ce2a424d3d2392a4fa1e0c577b27426","sha512":"9aa9307188c6790ba974d53387d76d26cfe0b66e6dda4939b94abd390cd90b5006450853223348416a9f70e6d28f252af52bca0c133a73ae79c881f8010dc475","ssdeep":"","tlshash":"fd01b598b0247c2c9a72ea23c40e817200c3af5b7b04a100ea26d0202a4e64af138bf2","first_seen":"2023-08-14T11:16:25Z","last_seen":"2026-08-16T18:01:14.763405Z","times_seen":2687,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":1,"connect":10,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Is@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:46.706Z","timestamp":1785329806706,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Is@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booklngstay-prearrlvalupdat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 203\r\ndate: Tue, 28 Jul 2026 18:18:13 GMT\r\nlast-modified: Mon, 19 Jan 2026 12:32:11 GMT\r\netag: \"57d60b5ca317dbf982310e8d79048791\"\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: IUjtjWOU2GDXzhSHCOxjjZ.k06uLAhmX\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4118da051b044af6aef02765a0bd4fe4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: EEeqMkClG7lUOZm6IP7gcH5-DlGetSCXAegF8sQZgymPqbxij2XK5g==\r\nage: 67114\r\ntiming-allow-origin: *\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":203,"size_decoded":963,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"69ec21e6295d1570ed3817745f59cacc","sha1":"bcad7a543dfb9ccefa72b7000e6a1dfb9727c927","sha256":"9dd177d4e977f84feb5276fe49e2edee721015271fef3e7e26aef259002dad18","sha512":"72987779458f71b5b668c6bbee556800e1554eb6818ab8b08efe6a13ba98d66db45d4dfa526e56fd4429f49226dafa9c7d276d3d2be93d1aaf5e87eee1a4df40","ssdeep":"","tlshash":"b4d0a9ca970aa9a581a90ea2810c0042aa670d3908021e7fc5b1c416261e219ea8a5bb","first_seen":"2025-03-18T07:37:38.802083Z","last_seen":"2026-08-07T00:48:35.893264Z","times_seen":2649,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/It@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:46.708Z","timestamp":1785329806708,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/It@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booklngstay-prearrlvalupdat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 181\r\ndate: Tue, 28 Jul 2026 18:18:13 GMT\r\nlast-modified: Mon, 19 Jan 2026 12:32:11 GMT\r\netag: \"36302f9872e905a23bb2045cecd891bd\"\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: oyGMSBUX5gifNAtxSePCdPacpvgONaeB\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4118da051b044af6aef02765a0bd4fe4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: qK4pL6YKNeHXuIyuNdd6ISGYaNvSo4h3cS8iGBkPNHmErP6jUN3evg==\r\nage: 67114\r\ntiming-allow-origin: *\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":181,"size_decoded":941,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"fda9103fda62835e02a3f29a8b304ebf","sha1":"3009647d72c67b373fe8594b51f8998d30fc3656","sha256":"acd6090c24cbb6e61a6d9d8df451cb6193827b5de99ceabb48ce619b6b1a9075","sha512":"fd63d6fdf15137e10d18f6bdb7715aeca347673284c422662f4377c07d245c0165775e872aa3fec5538774bf4b3fd796e12d5f47e5f20c7636b6c5b646d9a51a","ssdeep":"","tlshash":"71c0c0c6e1282cfe832758f3908e0190c127793c0d0260c30851f031a4020304ec1aa2","first_seen":"2023-11-09T09:51:20Z","last_seen":"2026-08-18T06:52:35.873348Z","times_seen":2658,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Lv@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:46.714Z","timestamp":1785329806714,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Lv@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booklngstay-prearrlvalupdat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 149\r\nlast-modified: Mon, 19 Jan 2026 12:32:12 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: kK73BL0heY74NTYtYq4v684JkwrpUxCx\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Tue, 28 Jul 2026 17:23:06 GMT\r\netag: \"534b86e209f9623b5e12df0e9bbd9a8f\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4118da051b044af6aef02765a0bd4fe4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: Riwy73FpUPvf4KamqdgGsLkp6hopSG8rlcRWoHR_Ksx7qPbFmyg1Dw==\r\nage: 70421\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":149,"size_decoded":926,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"44d702b89bfde14a95451dd921b13e64","sha1":"3636c679250f4e1c981a60f60c1a3bd5452a2fc2","sha256":"243e47de15df4587a8a7449c34e44be4cd7914503eba1597e2340205103ea586","sha512":"4f948495f9ccd25b83d61a45395ecb3b0c689a1a59a1467d22849a8b4d2a411ad69b92e60fd732393a5404ff1fac613b8fd428bc1ca473169e84e19b304b5da9","ssdeep":"","tlshash":"0cc08cc7b2a42cbac079482388480b828057e1680fe246439094cc14080e018961aea5","first_seen":"2025-03-18T07:37:38.825679Z","last_seen":"2026-08-07T00:48:35.902244Z","times_seen":2649,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Nl@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:46.720Z","timestamp":1785329806720,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Nl@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booklngstay-prearrlvalupdat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 156\r\ndate: Tue, 28 Jul 2026 18:18:13 GMT\r\nlast-modified: Mon, 19 Jan 2026 12:32:13 GMT\r\netag: \"3c08bdb98f8bd27cfa60b053dd98f042\"\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: XV7NgcPcMdbB15oh6gpizFdW41bkde5K\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4118da051b044af6aef02765a0bd4fe4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: jb6-JagdyloDQ8AfHg0DHM-r2OAFbEo7WOYaeLr0AsTAirzC7oP4xA==\r\nage: 67113\r\ntiming-allow-origin: *\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":156,"size_decoded":916,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"6981c145caa140d21c5ef6a8df1e0632","sha1":"1a4fdf6f6fa9e17abc0c0728d98cf304b51b58e3","sha256":"5024952a08666993287ec58f21c362fa58552efd4e1a23fdb67f0a49b5e6ab07","sha512":"852ac7fc2f91b7b1c44031e3287410d85b73b10077b5fea8cb7e00ecfb4dede8f692d7ff80c77f11a6dd494044112c0f7424b5b5e49b630066dc42513c08713e","ssdeep":"","tlshash":"b1c08ceed2062c3fc56a4c2b408f5290a89b591d2161bc0261b2981860755468a85af8","first_seen":"2025-03-18T07:37:38.823703Z","last_seen":"2026-08-07T00:48:35.869437Z","times_seen":2663,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booklngstay-prearrlvalupdat.com/api/support/getMessages","fqdn":"booklngstay-prearrlvalupdat.com","domain":"booklngstay-prearrlvalupdat.com","tld":"com"},"ip":{"addr":"104.21.75.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:52.763Z","timestamp":1785329812763,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booklngstay-prearrlvalupdat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 11:41:52 GMT","end":"Wed, 21 Oct 2026 12:40:36 GMT"},"fingerprint":{"sha1":"DB:AF:8A:08:8A:25:1D:15:95:70:4C:A2:5A:B5:81:10:DB:6E:21:35","sha256":"15:AA:2A:FE:B4:10:C9:B3:8F:8D:C6:43:0C:B7:8D:B8:1B:D5:9A:F2:D8:D7:58:DB:D2:E1:B7:4B:E7:E2:0B:C4"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booklngstay-prearrlvalupdat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booklngstay-prearrlvalupdat.com/1319574359\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://booklngstay-prearrlvalupdat.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=b31a4c32-1714-4a83-92aa-24a6bd0fb2a2; connect.sid=s%3AAfAG8o4L7A_bO_qkT-qw8e5RocYfDJoe.4Fp2OE7ssfj%2B9th6Q88vtp3s4wZfnBKhnmQs%2FZpv388\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1785329805611.9065\",\"chatVisible\":true,\"lang\":\"no\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 29 Jul 2026 12:56:52 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bugtJWNZNdQQmZv8KyK6qqeTHd7JZ9IWDeShtzsZL4XnIG%2F%2B1v8ylFv7tu%2BEdnGsOqLSGmflPcIPIeKZ9BVBTMBwsb8wef0OqMS4oiDmzSmvwfFYEFSLFFBVe4se2lYQ27sgA%2FUKci1OWFTh59ap7bL7\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"277-7LcLm6YmCWKd7GiUK7Wuu/JZeuY\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a22c4941cbf7569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":631,"size_decoded":1094,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"780cec47c41e22354090c2dd1488a679","sha1":"ecb70b9ba62609629dec68942bb5aebbf2597ae6","sha256":"f62376ab9cbb592d8536eef3c505739ade54099751dcb5fe0532b9fa481d78d0","sha512":"6c274367bdfee106d2fbc3695c01ea8f5b87025ca696478efa416106194f178e0ebe816a0cefa909dd47d61670a21599e578bc295766f85f55790b86a8817cbd","ssdeep":"","tlshash":"1df002dfcb4f2da42bc20113b04d2287b6f4104d4b6530b10e4ee4183334b56db2b45b","first_seen":"2026-07-29T12:57:16.713555Z","last_seen":"2026-07-29T12:57:16.713555Z","times_seen":1,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"booklngstay-prearrlvalupdat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booklngstay-prearrlvalupdat.com/api/support/getMessages","fqdn":"booklngstay-prearrlvalupdat.com","domain":"booklngstay-prearrlvalupdat.com","tld":"com"},"ip":{"addr":"104.21.75.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:57:04.868Z","timestamp":1785329824868,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booklngstay-prearrlvalupdat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 11:41:52 GMT","end":"Wed, 21 Oct 2026 12:40:36 GMT"},"fingerprint":{"sha1":"DB:AF:8A:08:8A:25:1D:15:95:70:4C:A2:5A:B5:81:10:DB:6E:21:35","sha256":"15:AA:2A:FE:B4:10:C9:B3:8F:8D:C6:43:0C:B7:8D:B8:1B:D5:9A:F2:D8:D7:58:DB:D2:E1:B7:4B:E7:E2:0B:C4"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booklngstay-prearrlvalupdat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booklngstay-prearrlvalupdat.com/1319574359\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://booklngstay-prearrlvalupdat.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=b31a4c32-1714-4a83-92aa-24a6bd0fb2a2; connect.sid=s%3AAfAG8o4L7A_bO_qkT-qw8e5RocYfDJoe.4Fp2OE7ssfj%2B9th6Q88vtp3s4wZfnBKhnmQs%2FZpv388\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1785329805611.9065\",\"chatVisible\":true,\"lang\":\"no\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 29 Jul 2026 12:57:05 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xrCfPgrHSD9KZiJMjzKbXl13RzD1hz767C0BwKfAgJBqcBjgGrGl5eICbRFuy4AZ61nZHnDKJH3G6q4JzJkPXpHrZYkjEje%2B53SRFaQEypND9C9%2FzCmA7HIAFIZ86Ack3WeK8fgLy0%2Bbb3uAaWCdDhlh\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"277-7LcLm6YmCWKd7GiUK7Wuu/JZeuY\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a22c498d7861569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":631,"size_decoded":1092,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"780cec47c41e22354090c2dd1488a679","sha1":"ecb70b9ba62609629dec68942bb5aebbf2597ae6","sha256":"f62376ab9cbb592d8536eef3c505739ade54099751dcb5fe0532b9fa481d78d0","sha512":"6c274367bdfee106d2fbc3695c01ea8f5b87025ca696478efa416106194f178e0ebe816a0cefa909dd47d61670a21599e578bc295766f85f55790b86a8817cbd","ssdeep":"","tlshash":"1df002dfcb4f2da42bc20113b04d2287b6f4104d4b6530b10e4ee4183334b56db2b45b","first_seen":"2026-07-29T12:57:16.713555Z","last_seen":"2026-07-29T12:57:16.713555Z","times_seen":1,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"booklngstay-prearrlvalupdat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/aaronfagan/svg-credit-card-payment-icons/main/logo/mastercard.svg","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.109.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:46.334Z","timestamp":1785329806334,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 23:26:07 GMT","end":"Wed, 02 Sep 2026 23:26:06 GMT"},"fingerprint":{"sha1":"3F:87:BE:75:1A:02:3B:A4:D2:51:D2:72:92:A0:00:61:D1:D0:D7:12","sha256":"32:49:1B:26:BF:AF:7B:FB:55:60:29:EF:32:29:9A:C4:37:4D:B3:4D:09:EE:CD:4F:FD:01:F2:1B:2C:5A:85:67"}}},"request":{"raw":"GET /aaronfagan/svg-credit-card-payment-icons/main/logo/mastercard.svg HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booklngstay-prearrlvalupdat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/svg+xml\r\netag: W/\"71db7e3e6cb790c798ee53e59438f4909759bba7f1b675f343c51259aba181ff\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: A494:D5F4B:4EC875:940BAF:6A68CB79\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ndate: Wed, 29 Jul 2026 12:56:46 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270056-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1785329806.440761,VS0,VE1\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: ef4d7d13ff27bc2dc680788aa76d835f121189c4\r\nexpires: Wed, 29 Jul 2026 13:01:46 GMT\r\nsource-age: 78\r\ncontent-length: 401\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":813,"size_decoded":1302,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"05c5498a6ca3ca61f6452d7d88843e35","sha1":"6a90b8f4820427c8d1fd773e7d3ba22abd061445","sha256":"1c8f56fb410ec06e8467423cec0fb9fe54d6b18eba703591548d3159e744496b","sha512":"865d660fce4df17306d34901ca420e7e8430561a0a85840b2e2df7bd0a00a0cd14c210ad5189ee91008041d25051cbdaea0469b39900d104759823f52e56b96f","ssdeep":"","tlshash":"3b0189e5a7988451c9e503af6f3638804e1bd0a40189923ddf262f17658195f6d99ec1","first_seen":"2025-06-23T21:13:45.862706Z","last_seen":"2026-08-09T08:23:38.341767Z","times_seen":241,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":59,"dns":1,"connect":8,"send":0,"wait":10,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Mk@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:46.715Z","timestamp":1785329806715,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Mk@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booklngstay-prearrlvalupdat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 665\r\nlast-modified: Mon, 19 Jan 2026 12:32:12 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: ampH3HeN9Qm_v3g6FQZdjIhrcmEDiEUU\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Tue, 28 Jul 2026 17:53:37 GMT\r\netag: \"5d64a9000b01d06b9ff384f6e026c21b\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4118da051b044af6aef02765a0bd4fe4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: QGJJfQ0fb4tXZ7BE69aLeZ4ft2URG8k7Ne9uJHMkX4rqrbV_6n5D0Q==\r\nage: 68590\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":665,"size_decoded":1442,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"9cfc39caca7e42f06f0cc949e3ab70f0","sha1":"3e2b38ba9a78f27bc34ba9a8c555add8e384f67a","sha256":"9a74d13db29351fff6fb4dec8de6f72afa63813d0b50e6dc869d0a2a43ef9188","sha512":"4016991cafca142352ab429e31bdee37de5fc31516d6d67451445b2a8a88c2287362f335935da20a894b5877effe0d8e526ad3a708e426fcf75ccd8a684185ea","ssdeep":"","tlshash":"0e0183ef7c0b5a9f99b3586249840e938297037f0c8fd1a1a0af502c08875ca5bb8e1d","first_seen":"2026-05-02T20:55:48.313017Z","last_seen":"2026-08-06T00:54:57.302537Z","times_seen":8,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booklngstay-prearrlvalupdat.com/api/poll/1319574359?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0","fqdn":"booklngstay-prearrlvalupdat.com","domain":"booklngstay-prearrlvalupdat.com","tld":"com"},"ip":{"addr":"104.21.75.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:55.761Z","timestamp":1785329815761,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booklngstay-prearrlvalupdat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 11:41:52 GMT","end":"Wed, 21 Oct 2026 12:40:36 GMT"},"fingerprint":{"sha1":"DB:AF:8A:08:8A:25:1D:15:95:70:4C:A2:5A:B5:81:10:DB:6E:21:35","sha256":"15:AA:2A:FE:B4:10:C9:B3:8F:8D:C6:43:0C:B7:8D:B8:1B:D5:9A:F2:D8:D7:58:DB:D2:E1:B7:4B:E7:E2:0B:C4"}}},"request":{"raw":"GET /api/poll/1319574359?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0 HTTP/1.1\r\nHost: booklngstay-prearrlvalupdat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booklngstay-prearrlvalupdat.com/1319574359\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=b31a4c32-1714-4a83-92aa-24a6bd0fb2a2; connect.sid=s%3AAfAG8o4L7A_bO_qkT-qw8e5RocYfDJoe.4Fp2OE7ssfj%2B9th6Q88vtp3s4wZfnBKhnmQs%2FZpv388\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 29 Jul 2026 12:56:55 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3uoQRN9dy9K%2Bjtml5e4pqAfTT8T%2FF6cxdFxOmgzdhjCicwSZb7snvhLFWWq7eFyg6wPPc0pEvGT37PrKs9FNxgpMoYa7K7Q0o4TodeqMvaF3FdHOgQNyZ0rIyLHdLgnzoaiKyMGE0SwXA%2Bs%2BRohVbR1q\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"3d-91VjXIAej/KHNzJeAxY5ykae5RI\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a22c49548d0a569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61,"size_decoded":745,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-08-06T00:54:57.280485Z","times_seen":19,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"booklngstay-prearrlvalupdat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booklngstay-prearrlvalupdat.com/api/support/getMessages","fqdn":"booklngstay-prearrlvalupdat.com","domain":"booklngstay-prearrlvalupdat.com","tld":"com"},"ip":{"addr":"104.21.75.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:56.794Z","timestamp":1785329816794,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booklngstay-prearrlvalupdat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 11:41:52 GMT","end":"Wed, 21 Oct 2026 12:40:36 GMT"},"fingerprint":{"sha1":"DB:AF:8A:08:8A:25:1D:15:95:70:4C:A2:5A:B5:81:10:DB:6E:21:35","sha256":"15:AA:2A:FE:B4:10:C9:B3:8F:8D:C6:43:0C:B7:8D:B8:1B:D5:9A:F2:D8:D7:58:DB:D2:E1:B7:4B:E7:E2:0B:C4"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booklngstay-prearrlvalupdat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booklngstay-prearrlvalupdat.com/1319574359\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://booklngstay-prearrlvalupdat.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=b31a4c32-1714-4a83-92aa-24a6bd0fb2a2; connect.sid=s%3AAfAG8o4L7A_bO_qkT-qw8e5RocYfDJoe.4Fp2OE7ssfj%2B9th6Q88vtp3s4wZfnBKhnmQs%2FZpv388\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1785329805611.9065\",\"chatVisible\":true,\"lang\":\"no\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 29 Jul 2026 12:56:56 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Byx0xXaHwoNSAZINmSn%2BYmbWjucK%2B8vWk73Kgnn83WRf6MMOMPskQPOvh9D6lHzQiXcigOOSzN%2Fxl64cCSH0JQkhQJrPAySr6qpeYlfX8OsuhCmTL7C5%2FsQxlP4OlOPgNpYbqQTriMT1dE7fHcjd3T64\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"277-7LcLm6YmCWKd7GiUK7Wuu/JZeuY\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a22c495afd7a569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":631,"size_decoded":1094,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"780cec47c41e22354090c2dd1488a679","sha1":"ecb70b9ba62609629dec68942bb5aebbf2597ae6","sha256":"f62376ab9cbb592d8536eef3c505739ade54099751dcb5fe0532b9fa481d78d0","sha512":"6c274367bdfee106d2fbc3695c01ea8f5b87025ca696478efa416106194f178e0ebe816a0cefa909dd47d61670a21599e578bc295766f85f55790b86a8817cbd","ssdeep":"","tlshash":"1df002dfcb4f2da42bc20113b04d2287b6f4104d4b6530b10e4ee4183334b56db2b45b","first_seen":"2026-07-29T12:57:16.713555Z","last_seen":"2026-07-29T12:57:16.713555Z","times_seen":1,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"booklngstay-prearrlvalupdat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booklngstay-prearrlvalupdat.com/api/support/getMessages","fqdn":"booklngstay-prearrlvalupdat.com","domain":"booklngstay-prearrlvalupdat.com","tld":"com"},"ip":{"addr":"104.21.75.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:57:06.875Z","timestamp":1785329826875,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booklngstay-prearrlvalupdat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 11:41:52 GMT","end":"Wed, 21 Oct 2026 12:40:36 GMT"},"fingerprint":{"sha1":"DB:AF:8A:08:8A:25:1D:15:95:70:4C:A2:5A:B5:81:10:DB:6E:21:35","sha256":"15:AA:2A:FE:B4:10:C9:B3:8F:8D:C6:43:0C:B7:8D:B8:1B:D5:9A:F2:D8:D7:58:DB:D2:E1:B7:4B:E7:E2:0B:C4"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booklngstay-prearrlvalupdat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booklngstay-prearrlvalupdat.com/1319574359\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://booklngstay-prearrlvalupdat.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=b31a4c32-1714-4a83-92aa-24a6bd0fb2a2; connect.sid=s%3AAfAG8o4L7A_bO_qkT-qw8e5RocYfDJoe.4Fp2OE7ssfj%2B9th6Q88vtp3s4wZfnBKhnmQs%2FZpv388\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1785329805611.9065\",\"chatVisible\":true,\"lang\":\"no\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 29 Jul 2026 12:57:07 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7ssL4cmLtbLgeGIJ%2BCmUIQpppu7DDgF%2B3Flqy5xpSrPBbs4a4WA7BeOIa7%2FirmRx6pPxV4YGzfdtp7OOpoY%2FZIuv0Zo5TcSsY6QbmBwjCP6S6%2Fh%2FjuXj0I2I%2F5WBo2pgcmBE%2BcYAz4nJb%2BuNFd84Fy2T\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"277-7LcLm6YmCWKd7GiUK7Wuu/JZeuY\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a22c4999f92b569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":631,"size_decoded":1104,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"780cec47c41e22354090c2dd1488a679","sha1":"ecb70b9ba62609629dec68942bb5aebbf2597ae6","sha256":"f62376ab9cbb592d8536eef3c505739ade54099751dcb5fe0532b9fa481d78d0","sha512":"6c274367bdfee106d2fbc3695c01ea8f5b87025ca696478efa416106194f178e0ebe816a0cefa909dd47d61670a21599e578bc295766f85f55790b86a8817cbd","ssdeep":"","tlshash":"1df002dfcb4f2da42bc20113b04d2287b6f4104d4b6530b10e4ee4183334b56db2b45b","first_seen":"2026-07-29T12:57:16.713555Z","last_seen":"2026-07-29T12:57:16.713555Z","times_seen":1,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"booklngstay-prearrlvalupdat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booklngstay-prearrlvalupdat.com/api/poll/1319574359?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0","fqdn":"booklngstay-prearrlvalupdat.com","domain":"booklngstay-prearrlvalupdat.com","tld":"com"},"ip":{"addr":"104.21.75.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:57:07.860Z","timestamp":1785329827860,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booklngstay-prearrlvalupdat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 11:41:52 GMT","end":"Wed, 21 Oct 2026 12:40:36 GMT"},"fingerprint":{"sha1":"DB:AF:8A:08:8A:25:1D:15:95:70:4C:A2:5A:B5:81:10:DB:6E:21:35","sha256":"15:AA:2A:FE:B4:10:C9:B3:8F:8D:C6:43:0C:B7:8D:B8:1B:D5:9A:F2:D8:D7:58:DB:D2:E1:B7:4B:E7:E2:0B:C4"}}},"request":{"raw":"GET /api/poll/1319574359?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0 HTTP/1.1\r\nHost: booklngstay-prearrlvalupdat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booklngstay-prearrlvalupdat.com/1319574359\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=b31a4c32-1714-4a83-92aa-24a6bd0fb2a2; connect.sid=s%3AAfAG8o4L7A_bO_qkT-qw8e5RocYfDJoe.4Fp2OE7ssfj%2B9th6Q88vtp3s4wZfnBKhnmQs%2FZpv388\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 29 Jul 2026 12:57:08 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hzsrdn0vT86doIc3eXW6LKjQMgtcgWd2T9A4RZtr1t9iuhI%2FLPEi1tHK%2BK8M6STy4djvz8urJF5t4dqY8U5tx5nMpadLLkn63NmW7gaDlTvyLpKKKnKrfZzaeVjtVGBVESH%2FJD9zbmVfHbgAKgiz4jHi\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"3d-91VjXIAej/KHNzJeAxY5ykae5RI\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a22c49a02965569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":61,"size_decoded":743,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-08-06T00:54:57.280485Z","times_seen":19,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"booklngstay-prearrlvalupdat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booklngstay-prearrlvalupdat.com/api/support/getMessages","fqdn":"booklngstay-prearrlvalupdat.com","domain":"booklngstay-prearrlvalupdat.com","tld":"com"},"ip":{"addr":"104.21.75.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:57:09.905Z","timestamp":1785329829905,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booklngstay-prearrlvalupdat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 11:41:52 GMT","end":"Wed, 21 Oct 2026 12:40:36 GMT"},"fingerprint":{"sha1":"DB:AF:8A:08:8A:25:1D:15:95:70:4C:A2:5A:B5:81:10:DB:6E:21:35","sha256":"15:AA:2A:FE:B4:10:C9:B3:8F:8D:C6:43:0C:B7:8D:B8:1B:D5:9A:F2:D8:D7:58:DB:D2:E1:B7:4B:E7:E2:0B:C4"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booklngstay-prearrlvalupdat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booklngstay-prearrlvalupdat.com/1319574359\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://booklngstay-prearrlvalupdat.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=b31a4c32-1714-4a83-92aa-24a6bd0fb2a2; connect.sid=s%3AAfAG8o4L7A_bO_qkT-qw8e5RocYfDJoe.4Fp2OE7ssfj%2B9th6Q88vtp3s4wZfnBKhnmQs%2FZpv388\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1785329805611.9065\",\"chatVisible\":true,\"lang\":\"no\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 29 Jul 2026 12:57:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FSryz1NN%2BbPBzBKd9Ni0wuKEKpPp7e5806UPITZjqJoF%2BFKwepbHYj0OAKQy33et52%2FTlzqQ06c8iglxd9WLogrFbcvVdMx2hr9F1iUaLedupiLJV3FkZYQv1cUs8aVwvK5APUIlBM5PbWfbLFLVJT7a\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"277-7LcLm6YmCWKd7GiUK7Wuu/JZeuY\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a22c49ace9e9569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":631,"size_decoded":1094,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"780cec47c41e22354090c2dd1488a679","sha1":"ecb70b9ba62609629dec68942bb5aebbf2597ae6","sha256":"f62376ab9cbb592d8536eef3c505739ade54099751dcb5fe0532b9fa481d78d0","sha512":"6c274367bdfee106d2fbc3695c01ea8f5b87025ca696478efa416106194f178e0ebe816a0cefa909dd47d61670a21599e578bc295766f85f55790b86a8817cbd","ssdeep":"","tlshash":"1df002dfcb4f2da42bc20113b04d2287b6f4104d4b6530b10e4ee4183334b56db2b45b","first_seen":"2026-07-29T12:57:16.713555Z","last_seen":"2026-07-29T12:57:16.713555Z","times_seen":1,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"booklngstay-prearrlvalupdat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/aaronfagan/svg-credit-card-payment-icons/main/logo/discover.svg","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.109.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:46.338Z","timestamp":1785329806338,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 23:26:07 GMT","end":"Wed, 02 Sep 2026 23:26:06 GMT"},"fingerprint":{"sha1":"3F:87:BE:75:1A:02:3B:A4:D2:51:D2:72:92:A0:00:61:D1:D0:D7:12","sha256":"32:49:1B:26:BF:AF:7B:FB:55:60:29:EF:32:29:9A:C4:37:4D:B3:4D:09:EE:CD:4F:FD:01:F2:1B:2C:5A:85:67"}}},"request":{"raw":"GET /aaronfagan/svg-credit-card-payment-icons/main/logo/discover.svg HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booklngstay-prearrlvalupdat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/svg+xml\r\netag: W/\"a898221ac2c9b26d70e44e28b377e6c8e225ec809b34f4fc7aba1f6201e446d7\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: 4BFE:2C0FE:4ED364:94169E:6A68CB79\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ndate: Wed, 29 Jul 2026 12:56:46 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270056-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1785329807.678258,VS0,VE1\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: 178208a9d109d6d33e0bfcdd37a2317fc7aa33b7\r\nexpires: Wed, 29 Jul 2026 13:01:46 GMT\r\nsource-age: 78\r\ncontent-length: 1105\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2078,"size_decoded":2007,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"71dfc3b50c775ba7c65e51141f4bbb48","sha1":"82e6ca5d19b86e4bb2bc659395f9bf61f0f08ce4","sha256":"8ef8d5002bc7364c2468f24156a6cb5bd9321a4461f4fda5de5aa21cfc9a13ca","sha512":"c7e20a645942511d895a273993ab5a6fd168cfd8e46f9b547f5fb57c70d962301c4d6fcdea228c51c00c98c20946b3e08f2ce439cde56760b0a8b82f87f1bab3","ssdeep":"","tlshash":"8a4173e4efb174fdc8c96398db709c5831b734b87425ca0801ae9bd89981a0c8fadcd0","first_seen":"2025-11-30T04:12:51.981515Z","last_seen":"2026-08-06T00:54:57.297215Z","times_seen":204,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":58,"dns":1,"connect":13,"send":0,"wait":13,"receive":0,"ssl":249},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Fi@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:46.688Z","timestamp":1785329806688,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Fi@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booklngstay-prearrlvalupdat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 186\r\naccept-ranges: bytes\r\ndate: Tue, 28 Jul 2026 18:18:12 GMT\r\nserver: AmazonS3\r\nlast-modified: Mon, 19 Jan 2026 12:32:10 GMT\r\netag: \"92a947b7ae2e835cf3f371191f7ea7c2\"\r\nx-amz-version-id: .tXrADMEUyHwS0xtxjL4FpFZG0uAX5th\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4118da051b044af6aef02765a0bd4fe4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: HQDTQbMFKDpHdK2n_67zVvWJIdudwnrg7DAdbVp7W57GUUgkxGOFHQ==\r\nage: 67114\r\ntiming-allow-origin: *\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":186,"size_decoded":946,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"6301628b63b750f566ddc31b306d7f7f","sha1":"b6347df062b6a37df90728404258aaa8c22400e2","sha256":"863ce74405428e6a5fb9ab9aceebe987bad7af5a8e155d9c9617657895effdad","sha512":"76390ce13d9a10298fbedb1edd79c910d4c0212c6e6fdc5407176d96aeb69b660b41399713901847420970bab4c2bdfa52eb3a4de26aee9fcb2ca9914997c5d8","ssdeep":"","tlshash":"b8c022e7030e3c248b5f1ce3700502c0c3c701582992be08401090ae1c810c1c5549b2","first_seen":"2025-03-18T07:37:38.843491Z","last_seen":"2026-08-07T00:48:35.866162Z","times_seen":2649,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Il@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:46.693Z","timestamp":1785329806693,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Il@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booklngstay-prearrlvalupdat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 518\r\nlast-modified: Mon, 19 Jan 2026 12:32:11 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: YNqJYojr.DPgmCyoX2_HdHxevPTzVc.n\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Tue, 28 Jul 2026 17:53:37 GMT\r\netag: \"962a361a88e2a8618a69f640e6eba26b\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4118da051b044af6aef02765a0bd4fe4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: HN8DCos227WAo3mIT6MXak5G3zRN29hNHIdSFSVNyMuNJcytpVfoKg==\r\nage: 68590\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":518,"size_decoded":1295,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"ea731d61528b7bf005ce3d913066c30f","sha1":"fa91a8b3cec6d5ba6121e5a29b5025cc2f1a1dc3","sha256":"c7e996e74254942f092d4197e8ef1456e07f80f0bb0f2b6ae2dcba1bd6cd7733","sha512":"48e385c199e560258506f071f87060ee18cd548f42219d678e25cee3cf9d2ef2090b2e50e7a4a1f05d07d5655dcd65810e005620b355d835e1d02eda95dd4247","ssdeep":"","tlshash":"90f005ff7abf582811971c7aa01d16196db7cdcd0620d0c4501190bfb17e1912af3162","first_seen":"2025-03-18T07:37:38.822924Z","last_seen":"2026-08-07T00:48:35.898813Z","times_seen":2649,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booklngstay-prearrlvalupdat.com/api/support/getMessages","fqdn":"booklngstay-prearrlvalupdat.com","domain":"booklngstay-prearrlvalupdat.com","tld":"com"},"ip":{"addr":"104.21.75.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:50.728Z","timestamp":1785329810728,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booklngstay-prearrlvalupdat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 11:41:52 GMT","end":"Wed, 21 Oct 2026 12:40:36 GMT"},"fingerprint":{"sha1":"DB:AF:8A:08:8A:25:1D:15:95:70:4C:A2:5A:B5:81:10:DB:6E:21:35","sha256":"15:AA:2A:FE:B4:10:C9:B3:8F:8D:C6:43:0C:B7:8D:B8:1B:D5:9A:F2:D8:D7:58:DB:D2:E1:B7:4B:E7:E2:0B:C4"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booklngstay-prearrlvalupdat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booklngstay-prearrlvalupdat.com/1319574359\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://booklngstay-prearrlvalupdat.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=b31a4c32-1714-4a83-92aa-24a6bd0fb2a2; connect.sid=s%3AAfAG8o4L7A_bO_qkT-qw8e5RocYfDJoe.4Fp2OE7ssfj%2B9th6Q88vtp3s4wZfnBKhnmQs%2FZpv388\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1785329805611.9065\",\"chatVisible\":true,\"lang\":\"no\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 29 Jul 2026 12:56:50 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xKsFcPkg9O6jMKtGCC7NfK%2F%2B47hLYH%2BlePFjjNuAEY0rPYxGBTqL1oZD125fvpEhmmeCZca9JULZbxDYQU%2BnyM%2BsQ9%2FXc88ogPmfDTHOlEXRDjeMt8QX7PwY%2FJeSOJbLZu4ERm8nVl%2FttJv66nGO%2FpTv\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"277-7LcLm6YmCWKd7GiUK7Wuu/JZeuY\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a22c49350b51569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":631,"size_decoded":1104,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"780cec47c41e22354090c2dd1488a679","sha1":"ecb70b9ba62609629dec68942bb5aebbf2597ae6","sha256":"f62376ab9cbb592d8536eef3c505739ade54099751dcb5fe0532b9fa481d78d0","sha512":"6c274367bdfee106d2fbc3695c01ea8f5b87025ca696478efa416106194f178e0ebe816a0cefa909dd47d61670a21599e578bc295766f85f55790b86a8817cbd","ssdeep":"","tlshash":"1df002dfcb4f2da42bc20113b04d2287b6f4104d4b6530b10e4ee4183334b56db2b45b","first_seen":"2026-07-29T12:57:16.713555Z","last_seen":"2026-07-29T12:57:16.713555Z","times_seen":1,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"booklngstay-prearrlvalupdat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booklngstay-prearrlvalupdat.com/api/support/getMessages","fqdn":"booklngstay-prearrlvalupdat.com","domain":"booklngstay-prearrlvalupdat.com","tld":"com"},"ip":{"addr":"104.21.75.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:57.794Z","timestamp":1785329817794,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booklngstay-prearrlvalupdat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 11:41:52 GMT","end":"Wed, 21 Oct 2026 12:40:36 GMT"},"fingerprint":{"sha1":"DB:AF:8A:08:8A:25:1D:15:95:70:4C:A2:5A:B5:81:10:DB:6E:21:35","sha256":"15:AA:2A:FE:B4:10:C9:B3:8F:8D:C6:43:0C:B7:8D:B8:1B:D5:9A:F2:D8:D7:58:DB:D2:E1:B7:4B:E7:E2:0B:C4"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booklngstay-prearrlvalupdat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booklngstay-prearrlvalupdat.com/1319574359\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://booklngstay-prearrlvalupdat.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=b31a4c32-1714-4a83-92aa-24a6bd0fb2a2; connect.sid=s%3AAfAG8o4L7A_bO_qkT-qw8e5RocYfDJoe.4Fp2OE7ssfj%2B9th6Q88vtp3s4wZfnBKhnmQs%2FZpv388\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1785329805611.9065\",\"chatVisible\":true,\"lang\":\"no\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 29 Jul 2026 12:56:57 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vy0b%2FPc1f97CxhH2PJ9Wjb5xEdyVGyKSHrb5xB9h5Nzxa2XaAPBMDpl9aDpEA4i0RoY%2FHAUki2wFv7mWFsWGLWbS0aHQ18nwsqMCzx%2BZ60oBLLatwkWPCw83XzSKS6%2BuuBPx1nvqeX4y%2FxGRPInpddhx\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"277-7LcLm6YmCWKd7GiUK7Wuu/JZeuY\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a22c49613dc2569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":631,"size_decoded":1096,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"780cec47c41e22354090c2dd1488a679","sha1":"ecb70b9ba62609629dec68942bb5aebbf2597ae6","sha256":"f62376ab9cbb592d8536eef3c505739ade54099751dcb5fe0532b9fa481d78d0","sha512":"6c274367bdfee106d2fbc3695c01ea8f5b87025ca696478efa416106194f178e0ebe816a0cefa909dd47d61670a21599e578bc295766f85f55790b86a8817cbd","ssdeep":"","tlshash":"1df002dfcb4f2da42bc20113b04d2287b6f4104d4b6530b10e4ee4183334b56db2b45b","first_seen":"2026-07-29T12:57:16.713555Z","last_seen":"2026-07-29T12:57:16.713555Z","times_seen":1,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"booklngstay-prearrlvalupdat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/No@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:46.653Z","timestamp":1785329806653,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/No@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booklngstay-prearrlvalupdat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 210\r\nlast-modified: Mon, 19 Jan 2026 12:32:13 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: x5hMioC93fqo94ywowGQ2mcv9TmRvRs1\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Tue, 28 Jul 2026 17:53:37 GMT\r\netag: \"ab07e6a99882d77d96c02aa003fda888\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4118da051b044af6aef02765a0bd4fe4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: cimMJv0plj9PgZwPyydDMg-kLJWThN_vGoJ6YeDJmMag48HsNc1yyw==\r\nage: 68590\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":210,"size_decoded":987,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"7006b4a6c4aef50a01790960fce2a4d9","sha1":"a4e8bbcc5b64273e423c0f81cc1fc677edfca576","sha256":"53d4a46ae56fb944ac07a2e2f63c83fde841f39d8c951ccee9d6d4eabb0cabfa","sha512":"137c1e98ca786e5b4219738ad5a4f492f649e2608e3e75cba7eea6370f2fd8da7ddb08d535d3f63aa1ba29f04b805fd84a625005c9d2233e759a6cfbcf7c1ab1","ssdeep":"","tlshash":"21d023dadd37ec35925d0fb3910e105c8853505d1f5151af4550d435154fd94da4ab71","first_seen":"2025-03-18T07:37:38.829529Z","last_seen":"2026-08-07T00:48:35.865314Z","times_seen":2663,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":4,"connect":11,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/In@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:46.699Z","timestamp":1785329806699,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/In@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booklngstay-prearrlvalupdat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 331\r\ndate: Tue, 28 Jul 2026 18:18:13 GMT\r\nlast-modified: Mon, 19 Jan 2026 12:32:11 GMT\r\netag: \"cd131635eaaa23c462720b8e8ee777d1\"\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: eqBuykUKg5MAStpFzippifq17J0O63Kw\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4118da051b044af6aef02765a0bd4fe4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: 1qXbEFBJjuZtQjuFeDlo1wJQMAE0CKct8nNtCf2OInCN-OLVAIhjjA==\r\nage: 67114\r\ntiming-allow-origin: *\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":331,"size_decoded":1091,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"213daea409debbe15cee520d43cb9776","sha1":"34f8985f04bc4add0be26254943abd4dda7f626d","sha256":"87c24918d8be1eb2ee1588cdca289145f513ad81d61ca7a3518b3ff30b89b459","sha512":"2187632855251779ee93d701d4b025ccc9d09ce30793867a6f7ceab5f20a2eb2c79366edbf2e4c48b5c63da7b66be2189ff978e2e7051dd57d30f6398afeb9aa","ssdeep":"","tlshash":"69e07dc9c0127e75d1e59c92553703304acfb549dfb089a211e3c45be2135c84d3d9f0","first_seen":"2025-03-18T07:37:38.831438Z","last_seen":"2026-08-07T00:48:35.874535Z","times_seen":2660,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booklngstay-prearrlvalupdat.com/api/poll/1319574359?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0","fqdn":"booklngstay-prearrlvalupdat.com","domain":"booklngstay-prearrlvalupdat.com","tld":"com"},"ip":{"addr":"104.21.75.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:56:54.261Z","timestamp":1785329814261,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booklngstay-prearrlvalupdat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 11:41:52 GMT","end":"Wed, 21 Oct 2026 12:40:36 GMT"},"fingerprint":{"sha1":"DB:AF:8A:08:8A:25:1D:15:95:70:4C:A2:5A:B5:81:10:DB:6E:21:35","sha256":"15:AA:2A:FE:B4:10:C9:B3:8F:8D:C6:43:0C:B7:8D:B8:1B:D5:9A:F2:D8:D7:58:DB:D2:E1:B7:4B:E7:E2:0B:C4"}}},"request":{"raw":"GET /api/poll/1319574359?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0 HTTP/1.1\r\nHost: booklngstay-prearrlvalupdat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booklngstay-prearrlvalupdat.com/1319574359\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=b31a4c32-1714-4a83-92aa-24a6bd0fb2a2; connect.sid=s%3AAfAG8o4L7A_bO_qkT-qw8e5RocYfDJoe.4Fp2OE7ssfj%2B9th6Q88vtp3s4wZfnBKhnmQs%2FZpv388\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 29 Jul 2026 12:56:54 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EsiUXomlQRVit8ywzwWUUP7lztzRZySrhaF%2FphadnkFoQl96O9G155QLxjbcFJyl8OQi5Husie19Lasci7H01srCGktL5stluD2MmJKKnuXJexuZlqqspwhFzhT34fU1gc18azojS9KDALk5LkGtD5KH\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"3d-91VjXIAej/KHNzJeAxY5ykae5RI\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a22c494b2c70569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":61,"size_decoded":739,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-08-06T00:54:57.280485Z","times_seen":19,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"booklngstay-prearrlvalupdat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booklngstay-prearrlvalupdat.com/api/poll/1319574359?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0","fqdn":"booklngstay-prearrlvalupdat.com","domain":"booklngstay-prearrlvalupdat.com","tld":"com"},"ip":{"addr":"104.21.75.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booklngstay-prearrlvalupdat.com/1319574359","date":"2026-07-29T12:57:00.310Z","timestamp":1785329820310,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booklngstay-prearrlvalupdat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 11:41:52 GMT","end":"Wed, 21 Oct 2026 12:40:36 GMT"},"fingerprint":{"sha1":"DB:AF:8A:08:8A:25:1D:15:95:70:4C:A2:5A:B5:81:10:DB:6E:21:35","sha256":"15:AA:2A:FE:B4:10:C9:B3:8F:8D:C6:43:0C:B7:8D:B8:1B:D5:9A:F2:D8:D7:58:DB:D2:E1:B7:4B:E7:E2:0B:C4"}}},"request":{"raw":"GET /api/poll/1319574359?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0 HTTP/1.1\r\nHost: booklngstay-prearrlvalupdat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booklngstay-prearrlvalupdat.com/1319574359\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=b31a4c32-1714-4a83-92aa-24a6bd0fb2a2; connect.sid=s%3AAfAG8o4L7A_bO_qkT-qw8e5RocYfDJoe.4Fp2OE7ssfj%2B9th6Q88vtp3s4wZfnBKhnmQs%2FZpv388\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 29 Jul 2026 12:57:00 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HEs3c6iU49RGhwFjhTx1tcs3IDneDPZbZgQQ588vbLJMnr1g8qmYzcTzBqdW5EyUb7HQaZPKhoKEh2bXn5acQ%2Bg7UPkSLoEXNbAZBWfdEwo248Z3tOUtw5InDKeGjDRKyUwduIGUhdZq0wknSPlXc2Px\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"3d-91VjXIAej/KHNzJeAxY5ykae5RI\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a22c4970ff1b569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61,"size_decoded":739,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-08-06T00:54:57.280485Z","times_seen":19,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"booklngstay-prearrlvalupdat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}