{"report_id":"613b7e14-615b-4323-a74b-3f01ad9b27e4","version":0,"status":"done","tags":[],"date":"2026-06-12T02:19:41Z","url":{"schema":"http","addr":"hilton-hr.com","fqdn":"hilton-hr.com","domain":"hilton-hr.com","tld":"com"},"ip":{"addr":"64.29.17.1","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"hilton-hr.com/","fqdn":"hilton-hr.com","domain":"hilton-hr.com","tld":"com"},"title":"Careers at Hilton | Hilton Job Opportunities","dom":{"size":14177,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (14177), with no line terminators","md5":"4639b86ebeabe05a9357edb195757df0","sha1":"0a58af187820dd81810f01b209c3a3509d555a39","sha256":"5d470fb9da6bb9d322020113be9a64f50e45c406637198bc0fb093751c5ecfdf","sha512":"c25d28dbcb76a46b5ee1ea39a04c64652d4e183868f12fcfdfe97cf06981d11ffd832acd8941f5a0f340f168f8d97ca73c34f6d0631026d3fcdab423e7bf6671","ssdeep":"192:cWaWPFqRrLW0gFQAZbVFvHNZeFREurBcB8v3Fa8xpT71PUv50U2VXg/jklNahh+u:cWaWP0LKxFvHNZARrht57HdgQza7u4","tlshash":"1d52a6fd6b71a9e1d58ad3e6fb214279701b447fab6e0e0cd2bc9f982385d548884cc1","dom_hash":"domhash5d25c611bb31807cedf9be81580285dd","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"hilton-hr.com","fqdn":"hilton-hr.com","domain":"hilton-hr.com","tld":"com"},"ip":{"addr":"64.29.17.1","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-17T02:19:41Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-12","alert":"Sinkholed","trigger":"hilton-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"hilton-hr.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-12","alert":"Sinkholed","trigger":"hilton-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"region1.google-analytics.com","ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-07-18","domain_rank":19689,"first_seen":"2022-03-17T11:26:33Z","last_seen":"2026-06-11T12:52:23.268017Z","alert_count":0,"request_count":2,"received_data":1654,"sent_data":1879,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.phenompeople.com","ip":{"addr":"13.249.8.51","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2015-02-09","domain_rank":256264,"first_seen":"2022-12-03T13:05:14Z","last_seen":"2026-05-31T22:26:19.500195Z","alert_count":0,"request_count":2,"received_data":3570,"sent_data":1210,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-06-07T22:22:03.23237Z","alert_count":0,"request_count":2,"received_data":27415,"sent_data":1073,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-06-07T22:18:26.533791Z","alert_count":0,"request_count":2,"received_data":83929,"sent_data":1086,"comment":"","tags":null,"fingerprints":null},{"fqdn":"hilton-hr.com","ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2026-05-18","domain_rank":0,"first_seen":"2026-06-12T02:19:42.199976Z","last_seen":"2026-06-12T02:19:42.199976Z","alert_count":24,"request_count":8,"received_data":367949,"sent_data":4115,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-06-07T22:29:27.813409Z","alert_count":0,"request_count":1,"received_data":483857,"sent_data":476,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"hilton-hr.com/","fqdn":"hilton-hr.com","domain":"hilton-hr.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"0f2a554de3668ca54d3489c3adf9d149","sha1":"f68860c63f11a9a50f8c1ed658ba217bc38ddc9f","sha256":"30a4897896e43f724bef01d3fbcfb1652d5d55967f048638455e233c4827a858","sha512":"a59e6291f6491dd624cc00b4e51cdc182759c9e0f8916e8cfa0c32803d8529c80420aeb937c56c491ede591b16dbccee26177f313ee6352bcafa93957ba860dd","ssdeep":"","tlshash":"10b022b82a038cb282ef0ba00baf22002822232280a03b280832b0082232c233000c80","size":129,"data":"","first_seen":"2025-09-23T05:46:57.201531Z","last_seen":"2026-06-12T02:42:37.406095Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hilton-hr.com/static/js/main.1b6cea52.js","fqdn":"hilton-hr.com","domain":"hilton-hr.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1f2fc1c712102ef74484097c492120d6","sha1":"4f698c15a180d8320a311e6811467548790ecd5a","sha256":"44758c6d37e2312b63659fed74992755c1918fb659de54a928c7971bd3e76923","sha512":"304b46b45826113cda582b50037aab0dca412cf2b57bd06dd2a922d5b87169463ef6a797397891bf90307ee9d71678644665b4e4a3fb7ef9afa13c168f0e753d","ssdeep":"3072:ny1JVUVTWqxq2Xn0Y59920XSHkhSwqaj5rNy5lLNbeVCslX:ny1JVUVXb2qhSwqaV+hKL","tlshash":"d5544ad87555f555beb202e700af140a737d1a2f780d88a0b260fc9d74b889a712bfde","size":288344,"data":"","first_seen":"2026-06-12T02:19:45.695825Z","last_seen":"2026-06-12T02:19:45.695825Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-123NZLZV56","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b438f81b0a36e2c15c7b47792f63f53b","sha1":"e1d9379622305c4c94ea42893bd6820cda1db7d0","sha256":"65354fd77a6eec9e1ea940062f64a963f2e9fa47b0dfcbdcbc3826cc9763dd28","sha512":"8b6c7d76aa612954fe5d9e5c89637ddef5bd016d74ac61e8fefd882f7612ac6ef9256f017cd5a4cd92faf3997da64189b78e4835629e979c28f65f8b698c1dd1","ssdeep":"6144:so/bRknTI8s5XtjLEEQT1TpqBEzVTI1Ce8G3h7Y1MD9f:RmnTsEZXysu","tlshash":"dea4e9ceb3d674225296f478903f018ba57b29e2b44cc899f189cce42e7469a4177f7c","size":483253,"data":"","first_seen":"2026-06-12T02:19:45.687518Z","last_seen":"2026-06-12T02:19:45.687518Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Nunito:ital,wght@0,200..1000;1,200..1000\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hilton-hr.com/","date":"2026-06-12T02:19:12.254Z","timestamp":1781230752254,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css2?family=Nunito:ital,wght@0,200..1000;1,200..1000\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hilton-hr.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 12 Jun 2026 02:19:12 GMT\r\ndate: Fri, 12 Jun 2026 02:19:12 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3707,"size_decoded":1296,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f694f62bd417d30718eb8cb17a4c35ff","sha1":"798240e40c85b73afea129b1634d10ab81ff4da2","sha256":"da38e9809c4d7f004a9a8a11bb06f39d56c9ae7e06d8f7b68a6c7cdb3018eb47","sha512":"e084ed28ab8fb45cff0cab59ba50060a21c87398364a618e8f6e06a4b17896ee90f9de3a20acd13468935ce4a982024e463e86569fd1500811bbdbd5d522eaf8","ssdeep":"","tlshash":"5571acd1045bd100aa472dc267cf7e36ed4e61517424c97aebfd98a8ecabc236224b0d","first_seen":"2025-09-17T15:53:14.372232Z","last_seen":"2026-06-21T08:42:26.486207Z","times_seen":2840,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":35,"connect":49,"send":0,"wait":66,"receive":0,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:wght@300;400;500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hilton-hr.com/","date":"2026-06-12T02:19:12.256Z","timestamp":1781230752256,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css2?family=Roboto:wght@300;400;500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hilton-hr.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 12 Jun 2026 02:19:12 GMT\r\ndate: Fri, 12 Jun 2026 02:19:12 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22340,"size_decoded":2448,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"b9f037ad2bf34f0e66cb12a391456d5f","sha1":"9e5e9fa857e3ed7ef12535c8fac83846034bf4a5","sha256":"2d09d5a02335bea6714b8a21156de9506fdd34d43d597aea05792ff050a588a6","sha512":"a49ad933cd238b818c604b044fa200f2d6a40d24040be41584f0c535f948b2f7642b0d91cbb77b07f41f071d46e6738a0d9c3a2d9ea125f463329280fbfbd970","ssdeep":"384:p9f59g9P9r9yU9/qY4+949Y9p9fM919W969yh9/qY4X9N9t9i9fD9O9d9B9ya9/U:pDS99YURRuWDyjooYhREHPM5svvYaR78","tlshash":"86a210a1041744009b834ce223cebf35fe1f52117142d0b5abfd9b6b9ddbca6526939d","first_seen":"2026-02-19T22:28:50.873195Z","last_seen":"2026-06-21T09:47:25.523422Z","times_seen":4795,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":33,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hilton-hr.com/","date":"2026-06-12T02:19:12.520Z","timestamp":1781230752520,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://hilton-hr.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 05 Jun 2026 10:28:31 GMT\r\nexpires: Sat, 05 Jun 2027 10:28:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 575441\r\nlast-modified: Mon, 15 Sep 2025 17:03:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":39128,"size_decoded":39961,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39128, version 1.0","md5":"166202cc391c71a57730bed12cbcb159","sha1":"76388dbfe374be06fdc6f9ba38d3f4e479025eeb","sha256":"ba344451eab25b217a165363b1982048a5e5830a0daf36577973955a04cac793","sha512":"9f4d1c14aa729e837b964898a1dd27e99ff674256c43326aa982cc0c17fa8b0d71a0b7df627f03cb4ac6ec7f22f0a19d65302743ff09187ce81414dde74c43e2","ssdeep":"768:lxbc6Qon+A9wOfdj2rELqjOmaLqLqKeI+00t0xIj:layndm0j2cqjOmGq+tbUIj","tlshash":"d9030284fd6a02d8c7fc1f6ef25a9f28272c2078440b6a9c44a79a6bd5975f84dd3330","first_seen":"2025-09-17T01:48:11.920934Z","last_seen":"2026-06-21T10:45:05.916913Z","times_seen":33643,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":0,"dns":35,"connect":47,"send":0,"wait":102,"receive":54,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hilton-hr.com/static/media/phone-call.ca6fcfe1f0b0a5200d4793554a9a83ed.svg","fqdn":"hilton-hr.com","domain":"hilton-hr.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hilton-hr.com/","date":"2026-06-12T02:19:12.591Z","timestamp":1781230752591,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.hilton-hr.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 05:41:05 GMT","end":"Sun, 16 Aug 2026 05:41:04 GMT"},"fingerprint":{"sha1":"A6:2D:E2:81:45:95:33:71:F2:2D:B4:CD:E4:2A:BE:7B:60:36:0A:5F","sha256":"43:E6:A9:31:B8:9A:67:93:24:94:24:04:A8:8E:7D:A8:86:B5:D4:C1:67:EA:07:CB:E7:93:F3:96:EE:2A:68:F3"}}},"request":{"raw":"GET /static/media/phone-call.ca6fcfe1f0b0a5200d4793554a9a83ed.svg HTTP/1.1\r\nHost: hilton-hr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hilton-hr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1022621\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"phone-call.ca6fcfe1f0b0a5200d4793554a9a83ed.svg\"\r\ncontent-type: image/svg+xml\r\ndate: Fri, 12 Jun 2026 02:19:12 GMT\r\netag: \"f1a9c6d11ed6979c98db3218518dae07\"\r\nlast-modified: Sun, 31 May 2026 06:15:31 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::wg7pd-1781230752618-bc78299174e8\r\ncontent-length: 483\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":483,"size_decoded":1036,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f1a9c6d11ed6979c98db3218518dae07","sha1":"764810a7e079686f05898e7057053301ece1d827","sha256":"f932e1ff09209a356c3f2bf0aa553fe0603800a7d0e1a35d1c60270fa37a842e","sha512":"2a2a8f79bc0959dd75e82b53697ab7f27c0a1c06e7e463fe7643f6b26bf1244ce6c7e93bac4a8a2874858bfadf6f0b1b3dddf8a36267fa90268dad6efb1b2883","ssdeep":"","tlshash":"bff0e27a8ecd0a2cb01bc7809f28a221372f6123b10c83a5ca2e26346003255fd7b154","first_seen":"2026-04-21T04:27:12.233434Z","last_seen":"2026-06-12T02:42:37.400621Z","times_seen":21,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-12","alert":"Sinkholed","trigger":"hilton-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"hilton-hr.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-12","alert":"Sinkholed","trigger":"hilton-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-123NZLZV56","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hilton-hr.com/","date":"2026-06-12T02:19:12.190Z","timestamp":1781230752190,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:36:26 GMT","end":"Mon, 17 Aug 2026 08:36:25 GMT"},"fingerprint":{"sha1":"B1:69:2D:8A:87:48:5C:47:05:41:5B:52:3B:0E:2C:E9:BD:CC:03:75","sha256":"91:1E:26:69:78:6C:F7:F4:05:E8:B1:07:F4:04:FB:66:B9:20:6A:EB:43:9D:02:70:C8:AF:60:8C:BB:58:30:4F"}}},"request":{"raw":"GET /gtag/js?id=G-123NZLZV56 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hilton-hr.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Fri, 12 Jun 2026 02:19:12 GMT\r\nexpires: Fri, 12 Jun 2026 02:19:12 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 163734\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":483253,"size_decoded":164338,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"b438f81b0a36e2c15c7b47792f63f53b","sha1":"e1d9379622305c4c94ea42893bd6820cda1db7d0","sha256":"65354fd77a6eec9e1ea940062f64a963f2e9fa47b0dfcbdcbc3826cc9763dd28","sha512":"8b6c7d76aa612954fe5d9e5c89637ddef5bd016d74ac61e8fefd882f7612ac6ef9256f017cd5a4cd92faf3997da64189b78e4835629e979c28f65f8b698c1dd1","ssdeep":"6144:so/bRknTI8s5XtjLEEQT1TpqBEzVTI1Ce8G3h7Y1MD9f:RmnTsEZXysu","tlshash":"dea4e9ceb3d674225296f478903f018ba57b29e2b44cc899f189cce42e7469a4177f7c","first_seen":"2026-06-12T02:19:45.687518Z","last_seen":"2026-06-12T02:19:45.687518Z","times_seen":1,"resource_available":true,"data":null}},"time_used":415,"timings":{"blocked":-1,"dns":35,"connect":47,"send":0,"wait":76,"receive":191,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hilton-hr.com/static/css/main.35c15e58.css","fqdn":"hilton-hr.com","domain":"hilton-hr.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hilton-hr.com/","date":"2026-06-12T02:19:12.193Z","timestamp":1781230752193,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.hilton-hr.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 05:41:05 GMT","end":"Sun, 16 Aug 2026 05:41:04 GMT"},"fingerprint":{"sha1":"A6:2D:E2:81:45:95:33:71:F2:2D:B4:CD:E4:2A:BE:7B:60:36:0A:5F","sha256":"43:E6:A9:31:B8:9A:67:93:24:94:24:04:A8:8E:7D:A8:86:B5:D4:C1:67:EA:07:CB:E7:93:F3:96:EE:2A:68:F3"}}},"request":{"raw":"GET /static/css/main.35c15e58.css HTTP/1.1\r\nHost: hilton-hr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hilton-hr.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1022639\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"main.35c15e58.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Fri, 12 Jun 2026 02:19:12 GMT\r\netag: W/\"2766a8687a978664a850a59cef90a647\"\r\nlast-modified: Sun, 31 May 2026 06:15:12 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::pvsjg-1781230752218-d592c3b97c0a\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":34938,"size_decoded":8457,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (34893)","md5":"2766a8687a978664a850a59cef90a647","sha1":"3c472ab5e84e470174c9c8522a641eb8f7ce4f75","sha256":"78cbe6106225c8900e61d7b6ef5ea7935e2236f9ed7d13d8c7e5b363c93e8dc0","sha512":"853e893eaa46d8a3f1883b7285e5b2c1524d615e723a0f6c6e0b89ea6a9bf359971a9acbe1b995f7326d88c7a5e16d78cc56b90ee4370fd4135685ce3b37bc85","ssdeep":"192:pdhkbEuC66E3t6ES4l+Q/uF7xERUAganwONEWgsVArWPEIkBGWbPYqt03du3eTSf:zN/QMyUsvZPVW7yc1XH+NmD1I35xTB/G","tlshash":"86f2a533f154212eb42bc8b961d0e98f7015ca53e52757beed66b638c5c70932b32b88","first_seen":"2026-05-08T09:04:14.653852Z","last_seen":"2026-06-12T02:42:37.403361Z","times_seen":17,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"hilton-hr.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-12","alert":"Sinkholed","trigger":"hilton-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-12","alert":"Sinkholed","trigger":"hilton-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hilton-hr.com/static/media/lauren.9f5befb15acdbdf62bfe.jpg","fqdn":"hilton-hr.com","domain":"hilton-hr.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hilton-hr.com/","date":"2026-06-12T02:19:12.587Z","timestamp":1781230752587,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.hilton-hr.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 05:41:05 GMT","end":"Sun, 16 Aug 2026 05:41:04 GMT"},"fingerprint":{"sha1":"A6:2D:E2:81:45:95:33:71:F2:2D:B4:CD:E4:2A:BE:7B:60:36:0A:5F","sha256":"43:E6:A9:31:B8:9A:67:93:24:94:24:04:A8:8E:7D:A8:86:B5:D4:C1:67:EA:07:CB:E7:93:F3:96:EE:2A:68:F3"}}},"request":{"raw":"GET /static/media/lauren.9f5befb15acdbdf62bfe.jpg HTTP/1.1\r\nHost: hilton-hr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hilton-hr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1022620\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"lauren.9f5befb15acdbdf62bfe.jpg\"\r\ncontent-type: image/jpeg\r\ndate: Fri, 12 Jun 2026 02:19:12 GMT\r\netag: \"7f095467bc94740cdb3508607b118e07\"\r\nlast-modified: Sun, 31 May 2026 06:15:31 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::sfd5p-1781230752612-706155f1d30a\r\ncontent-length: 13796\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":13796,"size_decoded":14332,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 200x200, components 3","md5":"7f095467bc94740cdb3508607b118e07","sha1":"ff62169a718b711c3a4299e25fb007a00d99a45c","sha256":"003a419fbdd8b2beb2914e054fb5ad279c6a6b9b49dae64f75aaf94eb2155a91","sha512":"ce4e99a7b10e2e55a993f35927652aa80cda4325e391ec8abc038a0a12450087dec810e938a819eb6682e236a4ff149cfa885ebd3efad7b0b3527f5cc1b0853e","ssdeep":"384:c1uu90VbGxeTxBinezvi6KedEYLn/aprzgFZMWXwa:c1uu96GQNBSYdK3GSiFeWAa","tlshash":"c752d0536ab64ac0f18188794013ef9de3d7251730ad2a8b36e46dad243fdc548f4db9","first_seen":"2026-06-12T02:19:45.689424Z","last_seen":"2026-06-12T02:19:45.689424Z","times_seen":1,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-12","alert":"Sinkholed","trigger":"hilton-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-12","alert":"Sinkholed","trigger":"hilton-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"hilton-hr.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hilton-hr.com/static/media/clock.2ced35e604aa6d1f8eea0c5026a61f6d.svg","fqdn":"hilton-hr.com","domain":"hilton-hr.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hilton-hr.com/","date":"2026-06-12T02:19:12.589Z","timestamp":1781230752589,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.hilton-hr.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 05:41:05 GMT","end":"Sun, 16 Aug 2026 05:41:04 GMT"},"fingerprint":{"sha1":"A6:2D:E2:81:45:95:33:71:F2:2D:B4:CD:E4:2A:BE:7B:60:36:0A:5F","sha256":"43:E6:A9:31:B8:9A:67:93:24:94:24:04:A8:8E:7D:A8:86:B5:D4:C1:67:EA:07:CB:E7:93:F3:96:EE:2A:68:F3"}}},"request":{"raw":"GET /static/media/clock.2ced35e604aa6d1f8eea0c5026a61f6d.svg HTTP/1.1\r\nHost: hilton-hr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hilton-hr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1022621\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"clock.2ced35e604aa6d1f8eea0c5026a61f6d.svg\"\r\ncontent-type: image/svg+xml\r\ndate: Fri, 12 Jun 2026 02:19:12 GMT\r\netag: \"9bcfd04c638bb3672a3de10d296018e4\"\r\nlast-modified: Sun, 31 May 2026 06:15:31 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::pvsjg-1781230752614-eb84d467aa75\r\ncontent-length: 324\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":324,"size_decoded":872,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9bcfd04c638bb3672a3de10d296018e4","sha1":"d314b9857c755ef09a2a140f280d2798423cbb0b","sha256":"c62edbc2bef7498dd55844ab59f675b3470e03c1e630d59866df3a4c54cdc79f","sha512":"457c8420d60efcc1c80edad068a1aa4d8fbfcbe26ecea2072759b6b157210c82c869c61d7383dd39ebeb670c389dc3bf31efe31ea8791296321e5ae8e2d24910","ssdeep":"","tlshash":"0be0869a65cf3a2c662bc350c7297724432d1292018d591dcee113252a4a91d383fadd","first_seen":"2025-09-23T05:46:57.176093Z","last_seen":"2026-06-12T02:42:37.399573Z","times_seen":34,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-12","alert":"Sinkholed","trigger":"hilton-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"hilton-hr.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-12","alert":"Sinkholed","trigger":"hilton-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hilton-hr.com/static/media/globe.1eae85210f348ab9e928a0dd6e17ff89.svg","fqdn":"hilton-hr.com","domain":"hilton-hr.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hilton-hr.com/","date":"2026-06-12T02:19:12.593Z","timestamp":1781230752593,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.hilton-hr.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 05:41:05 GMT","end":"Sun, 16 Aug 2026 05:41:04 GMT"},"fingerprint":{"sha1":"A6:2D:E2:81:45:95:33:71:F2:2D:B4:CD:E4:2A:BE:7B:60:36:0A:5F","sha256":"43:E6:A9:31:B8:9A:67:93:24:94:24:04:A8:8E:7D:A8:86:B5:D4:C1:67:EA:07:CB:E7:93:F3:96:EE:2A:68:F3"}}},"request":{"raw":"GET /static/media/globe.1eae85210f348ab9e928a0dd6e17ff89.svg HTTP/1.1\r\nHost: hilton-hr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hilton-hr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1022621\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"globe.1eae85210f348ab9e928a0dd6e17ff89.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 12 Jun 2026 02:19:12 GMT\r\netag: W/\"169be7b2dddf5af0574f30e7d4520c3e\"\r\nlast-modified: Sun, 31 May 2026 06:15:31 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::dftd7-1781230752619-80e759381048\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1877,"size_decoded":1368,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"169be7b2dddf5af0574f30e7d4520c3e","sha1":"70c1364110f946a0e934c5684752a478d72dbef6","sha256":"6271e432ab6a0c376914b01e2190babb6fd9bdf852190c8e1844147258e3258b","sha512":"6613c9f467b8881401a160d09cf4bc1d3d1cb3b8014ba12d5d5dbb66f88ff91f6dd63e45f2f2ed11e8d3eb0bc33b225c0200f450a87e8a8c6a42f85947467414","ssdeep":"","tlshash":"984122f619e68688a4439ff6ac237a7a33c918fa7f4547928280b1c352640f5850541d","first_seen":"2025-09-23T05:46:57.188917Z","last_seen":"2026-06-12T02:42:37.401248Z","times_seen":34,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-12","alert":"Sinkholed","trigger":"hilton-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-12","alert":"Sinkholed","trigger":"hilton-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"hilton-hr.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hilton-hr.com/static/media/hilton.370e820d27f65fb3d9ee.png","fqdn":"hilton-hr.com","domain":"hilton-hr.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hilton-hr.com/","date":"2026-06-12T02:19:12.585Z","timestamp":1781230752585,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.hilton-hr.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 05:41:05 GMT","end":"Sun, 16 Aug 2026 05:41:04 GMT"},"fingerprint":{"sha1":"A6:2D:E2:81:45:95:33:71:F2:2D:B4:CD:E4:2A:BE:7B:60:36:0A:5F","sha256":"43:E6:A9:31:B8:9A:67:93:24:94:24:04:A8:8E:7D:A8:86:B5:D4:C1:67:EA:07:CB:E7:93:F3:96:EE:2A:68:F3"}}},"request":{"raw":"GET /static/media/hilton.370e820d27f65fb3d9ee.png HTTP/1.1\r\nHost: hilton-hr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hilton-hr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1022621\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"hilton.370e820d27f65fb3d9ee.png\"\r\ncontent-type: image/png\r\ndate: Fri, 12 Jun 2026 02:19:12 GMT\r\netag: \"fa3c16724b85f5d55a9fd9e436ae3309\"\r\nlast-modified: Sun, 31 May 2026 06:15:31 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::pvsjg-1781230752610-e4b5733d65aa\r\ncontent-length: 22805\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22805,"size_decoded":23340,"mime_type":"image/png","magic":"PNG image data, 1516 x 563, 8-bit/color RGBA, non-interlaced","md5":"fa3c16724b85f5d55a9fd9e436ae3309","sha1":"6f29ecbace129a40d61875e90a4da522a17979e2","sha256":"0019897239cd15b2b73d389ebd3c952d51e0f582d2766712a6e96bef60d69fbf","sha512":"69d0b68284ae723b2c06e1d0dac50790b3ee00a36e2552650c4a6345ab63d2365e2d2254a6f38f9768907453fe5b59bbcf8ada5b7ad663e5e3f86f0513dcfab0","ssdeep":"384:BYZoSl32GSS7wtUQJm2bTvCO+B0qjepHf8XNPz967KQ7G7jDah/5J0IAXPXVs:OaCPwtU52bLN+yqCpEXsrGDat0Z/K","tlshash":"bda2c08c0446be4fc59e66328266539cffdf5b1d11104f43eba35cb2288df488ad6d14","first_seen":"2026-06-12T02:19:45.69203Z","last_seen":"2026-06-12T02:19:45.69203Z","times_seen":1,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":136,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-12","alert":"Sinkholed","trigger":"hilton-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"hilton-hr.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-12","alert":"Sinkholed","trigger":"hilton-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"region1.google-analytics.com/g/collect?v=2\u0026tid=G-123NZLZV56\u0026gtm=45je66a1v9220620325za200zd9220620325\u0026_p=1781230751869\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026cid=1019137828.1781230753\u0026frm=0\u0026pscdl=noapi\u0026rcb=12\u0026sr=1280x1024\u0026ul=en-us\u0026_s=1\u0026tag_exp=115938465~115938468~119392697~119392705~119456239~119456247\u0026sid=1781230752\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fhilton-hr.com%2F\u0026dt=Careers%20at%20Hilton%20%7C%20Hilton%20Job%20Opportunities\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_ee=1\u0026tfd=1423","fqdn":"region1.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hilton-hr.com/","date":"2026-06-12T02:19:12.769Z","timestamp":1781230752769,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:35:20 GMT","end":"Mon, 10 Aug 2026 18:35:19 GMT"},"fingerprint":{"sha1":"63:72:D7:36:8B:4A:E9:19:CA:E0:B4:EB:48:4F:D5:0D:68:A1:98:18","sha256":"41:D5:9A:61:75:1B:F5:CA:A6:88:2D:3D:DE:D4:36:13:4C:3A:6D:2D:2A:EB:E6:2F:11:A0:E9:DD:B5:EB:F1:03"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-123NZLZV56\u0026gtm=45je66a1v9220620325za200zd9220620325\u0026_p=1781230751869\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026cid=1019137828.1781230753\u0026frm=0\u0026pscdl=noapi\u0026rcb=12\u0026sr=1280x1024\u0026ul=en-us\u0026_s=1\u0026tag_exp=115938465~115938468~119392697~119392705~119456239~119456247\u0026sid=1781230752\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fhilton-hr.com%2F\u0026dt=Careers%20at%20Hilton%20%7C%20Hilton%20Job%20Opportunities\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_ee=1\u0026tfd=1423 HTTP/1.1\r\nHost: region1.google-analytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://hilton-hr.com/\r\nOrigin: https://hilton-hr.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 \r\naccess-control-allow-origin: https://hilton-hr.com\r\ndate: Fri, 12 Jun 2026 02:19:12 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:138:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:138:0\r\nreport-to: {\"group\":\"ascnsrsggc:138:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:138:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":837,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-21T10:29:49.859728Z","times_seen":16606232,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":35,"connect":40,"send":0,"wait":88,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.phenompeople.com/CareerConnectResources/pp/HILTGLOBAL/en_us/desktop/assets/images/favicon.ico","fqdn":"cdn.phenompeople.com","domain":"phenompeople.com","tld":"com"},"ip":{"addr":"13.249.8.51","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hilton-hr.com/","date":"2026-06-12T02:19:12.983Z","timestamp":1781230752983,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.phenompeople.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 24 Sep 2025 00:00:00 GMT","end":"Fri, 23 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DA:F5:93:E0:1C:A7:A6:EA:ED:BA:88:31:6A:30:BF:DF:9C:F2:6B:0E","sha256":"36:28:23:9A:89:BA:CF:76:D4:70:64:29:56:7D:2E:5E:FE:D5:19:6F:4D:1E:6A:4C:5C:23:8C:34:3B:F9:60:DD"}}},"request":{"raw":"GET /CareerConnectResources/pp/HILTGLOBAL/en_us/desktop/assets/images/favicon.ico HTTP/1.1\r\nHost: cdn.phenompeople.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hilton-hr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/x-icon\r\ncontent-length: 1150\r\ndate: Sat, 06 Jun 2026 13:21:00 GMT\r\nlast-modified: Fri, 14 Mar 2025 17:50:53 GMT\r\netag: \"93bd4de3a01934e3141b8a188e9a1413\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-content-type: image/vnd.microsoft.icon\r\nx-amz-version-id: OBmZbPyD5z5kLab4Urib.Ef3KDwYPxTw\r\naccept-ranges: bytes\r\nserver: PhenomPeople\r\ncache-control: max-age=604800\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 baef86fdeac136e8f6ea0adf662fe0dc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: Z6MSgVTus6HiH2k5Twgom_3V3hm-z520cbpqtnOUwMKtjuB1sdAd1g==\r\nage: 478693\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1150,"size_decoded":1785,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"93bd4de3a01934e3141b8a188e9a1413","sha1":"9b51e829cd9b8533c978b56936c81f5c92b80008","sha256":"6721ad0461d0e47d3a1857a06e184541e00a22cd8a0a9d8ca3fc72fe24d25176","sha512":"ea7e801d502f4266f4e9bdfb6097608dfe9584c2924c6126c10541c152a06854f7ad65988a3b05178541ecb50dc87106ed68d4fa01dfc7cbade3b612c0043501","ssdeep":"","tlshash":"6921e5852501299fd03b42b379079609555c7d6e66f3211ef3cff1be2973a090dc8247","first_seen":"2026-06-12T02:19:45.693843Z","last_seen":"2026-06-12T02:19:45.693843Z","times_seen":1,"resource_available":false,"data":null}},"time_used":619,"timings":{"blocked":-1,"dns":71,"connect":41,"send":0,"wait":173,"receive":0,"ssl":332},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.phenompeople.com/CareerConnectResources/pp/HILTGLOBAL/en_us/desktop/assets/images/favicon.ico","fqdn":"cdn.phenompeople.com","domain":"phenompeople.com","tld":"com"},"ip":{"addr":"13.249.8.51","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hilton-hr.com/","date":"2026-06-12T02:19:12.985Z","timestamp":1781230752985,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.phenompeople.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 24 Sep 2025 00:00:00 GMT","end":"Fri, 23 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DA:F5:93:E0:1C:A7:A6:EA:ED:BA:88:31:6A:30:BF:DF:9C:F2:6B:0E","sha256":"36:28:23:9A:89:BA:CF:76:D4:70:64:29:56:7D:2E:5E:FE:D5:19:6F:4D:1E:6A:4C:5C:23:8C:34:3B:F9:60:DD"}}},"request":{"raw":"GET /CareerConnectResources/pp/HILTGLOBAL/en_us/desktop/assets/images/favicon.ico HTTP/1.1\r\nHost: cdn.phenompeople.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hilton-hr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/x-icon\r\ncontent-length: 1150\r\ndate: Sat, 06 Jun 2026 13:21:00 GMT\r\nlast-modified: Fri, 14 Mar 2025 17:50:53 GMT\r\netag: \"93bd4de3a01934e3141b8a188e9a1413\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-content-type: image/vnd.microsoft.icon\r\nx-amz-version-id: OBmZbPyD5z5kLab4Urib.Ef3KDwYPxTw\r\naccept-ranges: bytes\r\nserver: PhenomPeople\r\ncache-control: max-age=604800\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 baef86fdeac136e8f6ea0adf662fe0dc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: TIqLcc39GiULF5K3hUTomTBqKO9NOsIgUQJ9adR7xoXExaSPa00N6Q==\r\nage: 478693\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1150,"size_decoded":1785,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"93bd4de3a01934e3141b8a188e9a1413","sha1":"9b51e829cd9b8533c978b56936c81f5c92b80008","sha256":"6721ad0461d0e47d3a1857a06e184541e00a22cd8a0a9d8ca3fc72fe24d25176","sha512":"ea7e801d502f4266f4e9bdfb6097608dfe9584c2924c6126c10541c152a06854f7ad65988a3b05178541ecb50dc87106ed68d4fa01dfc7cbade3b612c0043501","ssdeep":"","tlshash":"6921e5852501299fd03b42b379079609555c7d6e66f3211ef3cff1be2973a090dc8247","first_seen":"2026-06-12T02:19:45.693843Z","last_seen":"2026-06-12T02:19:45.693843Z","times_seen":1,"resource_available":false,"data":null}},"time_used":618,"timings":{"blocked":0,"dns":70,"connect":41,"send":0,"wait":157,"receive":0,"ssl":349},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hilton-hr.com/","fqdn":"hilton-hr.com","domain":"hilton-hr.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-12T02:19:11.377Z","timestamp":1781230751377,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.hilton-hr.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 05:41:05 GMT","end":"Sun, 16 Aug 2026 05:41:04 GMT"},"fingerprint":{"sha1":"A6:2D:E2:81:45:95:33:71:F2:2D:B4:CD:E4:2A:BE:7B:60:36:0A:5F","sha256":"43:E6:A9:31:B8:9A:67:93:24:94:24:04:A8:8E:7D:A8:86:B5:D4:C1:67:EA:07:CB:E7:93:F3:96:EE:2A:68:F3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: hilton-hr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1193581\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Fri, 12 Jun 2026 02:19:11 GMT\r\netag: W/\"50e81e75bde87a7029bcd210f2799f7c\"\r\nlast-modified: Fri, 29 May 2026 06:46:10 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::pvsjg-1781230751603-8b83f309909f\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":1155,"size_decoded":1083,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1155), with no line terminators","md5":"50e81e75bde87a7029bcd210f2799f7c","sha1":"696421a5ccda979bdde39a29e39fcf80ac398309","sha256":"5f83d3d7d9f4829032f332296329378b0693aca35f252d156e3022e5c9daa5ec","sha512":"505c586e995fa02090bcb470e69436b385f274c2f60448a94500d425b38b29c690d91ef9be75f5f618cd29bad2004cc26d9b7fb10e806c7935181d54e7c3ef72","ssdeep":"","tlshash":"182133638c21d449433053fbfe73b14c8c067a08ddb0fa5466e6206686e4fe34820cb5","first_seen":"2026-06-12T02:19:45.694906Z","last_seen":"2026-06-12T02:19:45.694906Z","times_seen":1,"resource_available":true,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":66,"connect":33,"send":0,"wait":43,"receive":0,"ssl":98},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-12","alert":"Sinkholed","trigger":"hilton-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-12","alert":"Sinkholed","trigger":"hilton-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"hilton-hr.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hilton-hr.com/static/js/main.1b6cea52.js","fqdn":"hilton-hr.com","domain":"hilton-hr.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hilton-hr.com/","date":"2026-06-12T02:19:12.192Z","timestamp":1781230752192,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.hilton-hr.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 05:41:05 GMT","end":"Sun, 16 Aug 2026 05:41:04 GMT"},"fingerprint":{"sha1":"A6:2D:E2:81:45:95:33:71:F2:2D:B4:CD:E4:2A:BE:7B:60:36:0A:5F","sha256":"43:E6:A9:31:B8:9A:67:93:24:94:24:04:A8:8E:7D:A8:86:B5:D4:C1:67:EA:07:CB:E7:93:F3:96:EE:2A:68:F3"}}},"request":{"raw":"GET /static/js/main.1b6cea52.js HTTP/1.1\r\nHost: hilton-hr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hilton-hr.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1022639\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"main.1b6cea52.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 12 Jun 2026 02:19:12 GMT\r\netag: W/\"1f2fc1c712102ef74484097c492120d6\"\r\nlast-modified: Sun, 31 May 2026 06:15:12 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::pcphq-1781230752218-8b001f598662\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":288344,"size_decoded":88433,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65465)","md5":"1f2fc1c712102ef74484097c492120d6","sha1":"4f698c15a180d8320a311e6811467548790ecd5a","sha256":"44758c6d37e2312b63659fed74992755c1918fb659de54a928c7971bd3e76923","sha512":"304b46b45826113cda582b50037aab0dca412cf2b57bd06dd2a922d5b87169463ef6a797397891bf90307ee9d71678644665b4e4a3fb7ef9afa13c168f0e753d","ssdeep":"3072:ny1JVUVTWqxq2Xn0Y59920XSHkhSwqaj5rNy5lLNbeVCslX:ny1JVUVXb2qhSwqaV+hKL","tlshash":"d5544ad87555f555beb202e700af140a737d1a2f780d88a0b260fc9d74b889a712bfde","first_seen":"2026-06-12T02:19:45.695825Z","last_seen":"2026-06-12T02:19:45.695825Z","times_seen":1,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-12","alert":"Sinkholed","trigger":"hilton-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"hilton-hr.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-12","alert":"Sinkholed","trigger":"hilton-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hilton-hr.com/","date":"2026-06-12T02:19:12.599Z","timestamp":1781230752599,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://hilton-hr.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 11 Jun 2026 10:17:38 GMT\r\nexpires: Fri, 11 Jun 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 57695\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":43136,"size_decoded":43968,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-06-21T10:31:47.483743Z","times_seen":196289,"resource_available":false,"data":null}},"time_used":690,"timings":{"blocked":520,"dns":0,"connect":0,"send":0,"wait":48,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.google-analytics.com/g/collect?v=2\u0026tid=G-123NZLZV56\u0026gtm=45je66a1v9220620325za200zd9220620325\u0026_p=1781230751869\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026_eu=AEAAAAQ\u0026ae=a\u0026cid=1019137828.1781230753\u0026frm=0\u0026pscdl=noapi\u0026rcb=12\u0026sr=1280x1024\u0026ul=en-us\u0026_s=2\u0026tag_exp=115938465~115938468~119392697~119392705~119456239~119456247\u0026sid=1781230752\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fhilton-hr.com%2F\u0026dt=Careers%20at%20Hilton%20%7C%20Hilton%20Job%20Opportunities\u0026en=scroll\u0026epn.percent_scrolled=90\u0026tfd=6451","fqdn":"region1.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hilton-hr.com/","date":"2026-06-12T02:19:17.799Z","timestamp":1781230757799,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:35:20 GMT","end":"Mon, 10 Aug 2026 18:35:19 GMT"},"fingerprint":{"sha1":"63:72:D7:36:8B:4A:E9:19:CA:E0:B4:EB:48:4F:D5:0D:68:A1:98:18","sha256":"41:D5:9A:61:75:1B:F5:CA:A6:88:2D:3D:DE:D4:36:13:4C:3A:6D:2D:2A:EB:E6:2F:11:A0:E9:DD:B5:EB:F1:03"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-123NZLZV56\u0026gtm=45je66a1v9220620325za200zd9220620325\u0026_p=1781230751869\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026_eu=AEAAAAQ\u0026ae=a\u0026cid=1019137828.1781230753\u0026frm=0\u0026pscdl=noapi\u0026rcb=12\u0026sr=1280x1024\u0026ul=en-us\u0026_s=2\u0026tag_exp=115938465~115938468~119392697~119392705~119456239~119456247\u0026sid=1781230752\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fhilton-hr.com%2F\u0026dt=Careers%20at%20Hilton%20%7C%20Hilton%20Job%20Opportunities\u0026en=scroll\u0026epn.percent_scrolled=90\u0026tfd=6451 HTTP/1.1\r\nHost: region1.google-analytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://hilton-hr.com/\r\nOrigin: https://hilton-hr.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 \r\naccess-control-allow-origin: https://hilton-hr.com\r\ndate: Fri, 12 Jun 2026 02:19:17 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:138:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:138:0\r\nreport-to: {\"group\":\"ascnsrsggc:138:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:138:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":817,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-21T10:29:49.859728Z","times_seen":16606232,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}