{"report_id":"630b04b9-53c0-41cd-99ff-3d9a7f5f0ce6","version":6,"status":"done","tags":[],"date":"2025-08-15T16:26:36Z","url":{"schema":"http","addr":"hrenaissancecancunresortmarina.com-hotel.com","fqdn":"hrenaissancecancunresortmarina.com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.83.149.10","port":0,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"final":{"url":{"schema":"https","addr":"com-hotel.com/","fqdn":"com-hotel.com","domain":"com-hotel.com","tld":"com"},"title":"Hotels \u0026 Resorts"},"submit":{"url":{"schema":"http","addr":"hrenaissancecancunresortmarina.com-hotel.com","fqdn":"hrenaissancecancunresortmarina.com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.83.149.10","port":0,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-19T16:26:36Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"static11.com-hotel.com","ip":{"addr":"104.26.3.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-06-27","domain_rank":0,"first_seen":"2021-08-27T08:36:38Z","last_seen":"2025-08-07T21:49:34.815546Z","alert_count":0,"request_count":20,"received_data":5786180,"sent_data":11933,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"eur3.otcdn.com","ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2013-10-17","domain_rank":4666388,"first_seen":"2018-05-09T05:29:30Z","last_seen":"2025-08-11T11:20:45.722932Z","alert_count":0,"request_count":12,"received_data":957236,"sent_data":6228,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"booking.mkp10-2.com-hotel.com","ip":{"addr":"212.222.42.74","port":443,"asn":3257,"as":"GTT Communications Inc.","country":"Spain","country_code":"ES"},"domain_registered":"2016-06-27","domain_rank":0,"first_seen":"2020-08-24T09:49:02Z","last_seen":"2025-08-04T23:34:35.265233Z","alert_count":0,"request_count":16,"received_data":265290,"sent_data":17100,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-08-13T15:12:46.750635Z","alert_count":0,"request_count":6,"received_data":2005150,"sent_data":3278,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"maxcdn.bootstrapcdn.com","ip":{"addr":"104.18.10.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-25","domain_rank":6807,"first_seen":"2014-06-18T00:37:31Z","last_seen":"2025-08-13T17:54:29.546352Z","alert_count":0,"request_count":2,"received_data":160031,"sent_data":962,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ajax.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3691,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2025-08-13T15:43:42.429518Z","alert_count":0,"request_count":1,"received_data":96978,"sent_data":443,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-08-13T15:14:14.224423Z","alert_count":0,"request_count":1,"received_data":14318,"sent_data":466,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"eur1.otcdn.com","ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2013-10-17","domain_rank":4591886,"first_seen":"2018-05-09T05:29:30Z","last_seen":"2025-08-11T11:20:45.714274Z","alert_count":0,"request_count":19,"received_data":362664,"sent_data":10020,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"eur2.otcdn.com","ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2013-10-17","domain_rank":4086882,"first_seen":"2018-05-09T05:29:30Z","last_seen":"2025-08-04T23:34:35.37101Z","alert_count":0,"request_count":36,"received_data":553181,"sent_data":17807,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"static12.com-hotel.com","ip":{"addr":"104.26.3.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-06-27","domain_rank":0,"first_seen":"2021-08-27T08:36:38Z","last_seen":"2025-08-07T21:49:35.096507Z","alert_count":0,"request_count":4,"received_data":22874,"sent_data":2302,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"com-hotel.com","ip":{"addr":"212.129.55.48","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"domain_registered":"2016-06-27","domain_rank":192873,"first_seen":"2016-07-04T14:30:14Z","last_seen":"2025-08-04T23:34:35.470918Z","alert_count":0,"request_count":27,"received_data":943455,"sent_data":18273,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"jQuery Migrate:1.2.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"BootstrapCDN:3.3.6","description":"BootstrapCDN is a powerful and reliable Content Delivery Network (CDN) that delivers static resources, including CSS, JavaScript, and font files, for the widely-used Bootstrap framework. By leveraging multiple server locations worldwide, BootstrapCDN accelerates website loading times, ensuring a smooth and visually appealing user experience. Additionally, it ensures website compatibility with various devices and browsers. The service reduces bandwidth usage and server load, improving web performance for developers and end-users alike.","website":"https://www.bootstrapcdn.com/","common_platform_enumeration":"","icon":"BootstrapCDN.png","categories":["CDN"]},{"name":"Bootstrap:3.3.6","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"jQuery:1.11.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"eur4.otcdn.com","ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2013-10-17","domain_rank":0,"first_seen":"2018-05-09T05:29:30Z","last_seen":"2025-08-04T23:34:35.202342Z","alert_count":0,"request_count":4,"received_data":458195,"sent_data":1982,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-08-13T15:10:36.82984Z","alert_count":0,"request_count":3,"received_data":128418,"sent_data":1661,"comment":"","tags":null,"fingerprints":null},{"fqdn":"hrenaissancecancunresortmarina.com-hotel.com","ip":{"addr":"212.83.149.10","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"domain_registered":"2016-06-27","domain_rank":0,"first_seen":"2025-08-15T16:26:40.354964Z","last_seen":"2025-08-15T16:26:40.354965Z","alert_count":0,"request_count":2,"received_data":4394,"sent_data":1128,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"eur4.otcdn.com/headers/ac/illmagallanes_sp/illmagallanes_sp_b6ef3e24a71d97ff68d7c6c77123e4e8_20250623_111014.js","fqdn":"eur4.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4c6fafa2516deb6e4cc1003a5199936d","sha1":"1a36f17de4d6236c0f55ebc8073bb706e65a9087","sha256":"8d8363ebc3d31a5c743496445d1d9351521f802915787519f4291660702e8b70","sha512":"a7583896372a76b78eb90505b0398839422ede54c4f4ddd24858c9a3a3122851364aaa4f3696f4da760ca6e5fed37f9e352e5322e9d7b848bd331310ae12adf9","ssdeep":"3072:DIh8GgP3hujzwbhd3XvSiDQ47GKSPhQDtvKYD1LJa5Y/EUEP3:Dy8G6RujcHX6MQ47GKSPyDtvKYD1L05H","tlshash":"0af318cdb3c6702347a720b9606f510bb27759a9684c8414f168d4e6bcb8e8d927bf3d","size":163462,"data":"","first_seen":"2025-06-28T23:09:08.303238Z","last_seen":"2025-12-22T03:26:28.05857Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/common/js/libraries/widgets/Main.js?v=1749489405","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"48c62ea339bbb1d7dc1ab6b4f28a8214","sha1":"70818591c1b89ca435d65789b3bf3ea7d87122de","sha256":"ec591ed9ac3ac8cd36d6fdf1f3596d18d5c0714ed9d66e6a23dcc7329a0c9e45","sha512":"b11b9c10a5516c3cdab7e8ac6a96cb3343493730380dbfb504867acf95d2d5d6353d6a8d30e4737d9a529a3c4bbbd621416c00887f554ce28ce46dd6af3cd19c","ssdeep":"","tlshash":"5e1161e938cb762903672970481fb74b6d222e86254c8401d230e043bdb8acd896f96b","size":1000,"data":"","first_seen":"2025-06-28T23:09:08.343331Z","last_seen":"2025-12-16T17:35:04.733851Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"com-hotel.com/","fqdn":"com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.129.55.48","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"955b6ecc18ec4699b4ae3aec93c3549e","sha1":"1bca07e95f84931b561d032a05863d965096ac75","sha256":"115232c8bcf4ffe5f5e92409f4d614fa1feb01b6a0d73ab21b2fb0bb368ba44e","sha512":"3e1464203b9c760db0e0de8942e5a934c27544fd275d272b8229f8387cfef71738d73e6279aca5774dd1c47e9f6e82c7b72e776ce0273c7b36891f4cbf4feb7b","ssdeep":"","tlshash":"61f0c99a2ca3b4a237fa6a3dc327566a2727070375c2d408ba0dc4142f94a812851a8e","size":561,"data":"","first_seen":"2023-07-18T15:04:14Z","last_seen":"2026-05-15T15:56:25.181537Z","times_seen":191,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/vendor/dayjs/1.10.7/dayjs.min.js?v=1748355821","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"deb6ca07ea6a16065535668ce4427f76","sha1":"dd9016a222dcf440762cd87c5ef45ed17696bcfc","sha256":"0cb46af5dfac6a4f8315df6d367b620e16e2b76029d8306555f87b97da3e2cd3","sha512":"6f00f7543fe3eb2a524a7ca3b9a51189d664b28571dcbd513ef4e495e0b8f126c7099b1e993dd528c0f7f4a9273e71fbdbc2cb5d53138ac1122013806f9fd6d1","ssdeep":"192:+8Zzla2pG7z/t10xbw2+7a3o4rT0M8TOF:+8Zzla2Mz/r0xbwXi3r5IS","tlshash":"d3d1308ab182f5161753a274482f4006f26e1da67c5f85adf57ac8c27c7888e913bf78","size":6494,"data":"","first_seen":"2023-03-08T13:34:09Z","last_seen":"2026-05-13T15:28:32.349001Z","times_seen":91,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/vendor/flatpickr-4.6.9/plugins/rangePlugin.min.js?v=1748355821","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b77f627ca5c108df2a52dede71a4766","sha1":"5b84280fd0bfa3ac7678fe17e4b89a57832f68c9","sha256":"aaf93a9af24e3c4eac6839adfeac9aabfe0b9e26cb486e9fd62775cdfcc49d4b","sha512":"7c47d883fc71baed790666b8d3ed1f8c5747dfbac5a983aa0a22bec00e00cc270ae08f43a7d5787510833d3cfdb873d45fe12b5a1b8ff3a1333862387f2dd805","ssdeep":"","tlshash":"a4513359b4106a3a32db16b185bf44ceba31dabe5ccbc891713094552d70dc9e32fe8e","size":2773,"data":"","first_seen":"2023-03-13T20:32:43Z","last_seen":"2026-05-12T12:11:56.590332Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur3.otcdn.com/headers/widgets/search/js/SearcherCustomerLocationParams.js?v=1749488646","fqdn":"eur3.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"398d68bd44e64eb1d702828de23f575f","sha1":"69ea58b895967d715282461bd81b6002476562af","sha256":"b172a4f0cf06f96beb6387268a29152c5bff939daf8b143f071b7ac61247938e","sha512":"5435e5d70a16cd705d116334be2c5b3050c0a21ed6921f6d614c251988b8609ddaf51a23e78fd122e42a1f988716f02dc890d6799a4ec5070e4bdd9d552a6692","ssdeep":"","tlshash":"8701898872e6a0f496f790720d5f22115076443621e698e87aa9c09fdebce194513f2a","size":768,"data":"","first_seen":"2023-03-13T20:32:43Z","last_seen":"2026-02-03T13:35:48.410234Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/common/js/libraries/widgets/search/SelectGroupWidget/Plugin.js?v=1749489349","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"51b3761d22414dbcb89446205cf311dd","sha1":"169864d10fae5151fc43a7c2a836a36f4c8435e2","sha256":"9a909508c6f57c52f6a7ae1de5753855884ece6f9ab73f866afd8946a49bc32d","sha512":"bef9855f869f883257dfd3a42b026ddc2d99760ed11a055b8ae31f14a60c3caeb03908d46eb6daafa7ca7ea137a7954ef68066875c102bbd5b7cf4c3ea31360c","ssdeep":"","tlshash":"73313505e67d1d3697fe14be859e13096353ca9fc2c488786f28d9dad464ee41162b04","size":1831,"data":"","first_seen":"2023-03-13T20:32:42Z","last_seen":"2026-05-12T12:11:56.533256Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur1.otcdn.com/headers/vendor/jquery/plugins/jquery.cookie.js?v=1749490630","fqdn":"eur1.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0584cc2f421bcb47e59fefa7030bcbc2","sha1":"bb734df6a6ea142f4ff670e98f9809f44a1c2658","sha256":"55180283058e5825307bcf02e0f79111cb7d57b98ca143b5e28d61f446441d3d","sha512":"d5bc437fd485485640df3a11728346aae5cab42c4a7f3c28d1cd3799d69e2466ba904bf46086d91569eed15c4817c2bc8dd1acf3f7e87cddc2876ae841764d60","ssdeep":"","tlshash":"eb21968970cbf81617979ba53f3f8a8fb0085f0944dc898ccb45a0503a74a030772f75","size":1133,"data":"","first_seen":"2024-08-19T19:28:21.62972Z","last_seen":"2026-05-12T12:11:56.491866Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking.mkp10-2.com-hotel.com/themes/ilussion/cross_domain_helper?xdm_e=https%3A%2F%2Fbooking.mkp10-2.com-hotel.com%2Fpublic%2Fwidget%2F291117%2F4106755428\u0026xdm_c=default2482\u0026xdm_p=4","fqdn":"booking.mkp10-2.com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.222.42.74","port":443,"asn":3257,"as":"GTT Communications Inc.","country":"Spain","country_code":"ES"},"introduction_type":"scriptElement","is_inline":true,"md5":"846860368417994d2af07024ba9f6517","sha1":"e74f46a7111b8a2e06071c4bcabff5c283d82396","sha256":"f4e7117b70a453a25be2eb514d4038c50574a1e68541249fd944649e93316305","sha512":"48c89f86a45bdaf9e68bf56e036f478b198aab9ce71c17644654bbd122b0f29b02217a8893db29e95870099ffd568820ff90aef026c60226e9e48d7ebe4fad70","ssdeep":"96:p0vUvOc2C4o4Jp78Lzmnp4HHMqcQEuUNsmEcRLTMUomVdQGlNBYswoCY8EPYlv3:URC4bngmCHH/Ksm1BMqVdQGasicPof","tlshash":"39a109549fdb09e890d5c1987e50bee12e63385fe1c6adc7c404fec114a65fa3a8b06b","size":4923,"data":"","first_seen":"2025-08-15T16:26:55.772945Z","last_seen":"2025-08-15T16:26:55.772945Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"com-hotel.com/plugins/jquery-migrate-1.2.1.min.js","fqdn":"com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.129.55.48","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb05d8d73b5b13d8d84308a4751ece96","sha1":"743052320809514fb788fe1d3df37fc87ce90452","sha256":"1e67d8dbcca1f6fd94e077c85c2fb40fa1c2756c99238daa8da882144260a68d","sha512":"7b68a43a22a41404a2ff58e0da6a237492cad0fc3e56d216980802b4d5fb483895262a7e049340d6670002bdf899ba88c319239e60d0aae1ac31d98556b0ad6e","ssdeep":"96:tBySz91Gwyk35YrfBewIt9jKLKDs2SFNK7wIDBRANyCfVJ45NI:zySzvGw/35YbMx9jKLKD3UIDBR8VVUq","tlshash":"3fe196dc72aab5611ffa30a8503bd21b72b25aec140d95a4f08ccde5392cc5d413ab7e","size":7199,"data":"","first_seen":"2023-03-07T01:02:56Z","last_seen":"2026-05-15T15:20:19.241237Z","times_seen":22314,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"com-hotel.com/compiled/lb-frontent-translations.js","fqdn":"com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.129.55.48","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"a1a0bb3d13a1e8841725f9dfcf33ec05","sha1":"824739b8b876f848a5b08042b98fa5de376ee840","sha256":"8cab97cb51c3388248a82d39c1fd30e70023be6639201b19161166390537c862","sha512":"01a4ff356a1b84228c5458a680566c274a56ec251ca6ef7865c2b935b62b141ee638903e7a4f0331ca8027aeea980d4a1592f08cffe1c44308e86d55ab29ff44","ssdeep":"3072:gEnrtZAp7z0iJ9+jghhY5y3HDlEOEee0R5ms7LXFKhIxlbrTEs6Z:TrtpghZJ5XbFFvzm","tlshash":"176410199f682037289533921fdda087b7dc9c08e5baccca7488581a37e6f78573b45e","size":335528,"data":"","first_seen":"2025-01-30T19:03:22.406781Z","last_seen":"2026-05-15T15:56:25.129254Z","times_seen":2499,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","fqdn":"booking.mkp10-2.com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.222.42.74","port":443,"asn":3257,"as":"GTT Communications Inc.","country":"Spain","country_code":"ES"},"introduction_type":"scriptElement","is_inline":true,"md5":"78a0f21252d8c45ec8bb8746077b70c7","sha1":"2dae795cb0764dadf323df0fe2435e87182f6639","sha256":"12726650b68bdacf7225afcded64f30adaee289490f68d087cfbe3001144715d","sha512":"c587fb0abbfa59073f29cf8f17c9a7fd5d796f3da635a7fc28d1af129b48ed877d1608210bf63482cd9f0d516edf4a8fe085b4d6c1f441bf8d9c24c833bbf6d9","ssdeep":"192:AmV+uEAoIsAcY8F2PzPaGLILxVU0YdP9qUlJbHR:jVXjdb8F2DaGULn8VqUltx","tlshash":"ca22b48c7aa2b07903ab3031917f540fb57a6d2928588580f00de1fd6f789ac675bf1e","size":9983,"data":"","first_seen":"2023-03-13T20:32:42Z","last_seen":"2026-05-12T12:11:56.616106Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","fqdn":"booking.mkp10-2.com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.222.42.74","port":443,"asn":3257,"as":"GTT Communications Inc.","country":"Spain","country_code":"ES"},"introduction_type":"scriptElement","is_inline":true,"md5":"cf3175993964ed2141ea6a47c38508ab","sha1":"dc1a895a045a98113c13696f59a371eb05462847","sha256":"4ac23de2a34f9ed42415a82324f61a9b53553f887ffdaf9862e3d35fdf396e35","sha512":"daa9b8d60910af5a242cbe887ef590665cb21b468fa53a5a89bfab71f9a88fa1cc692952fd017638de1172a9c5c1af42189447ed2290fca131c6327279419356","ssdeep":"","tlshash":"6bf02876a010e0ba166e003c717ebb917d7e37173063ec42e53c65441af2d0a6844d78","size":633,"data":"","first_seen":"2023-11-27T12:30:24Z","last_seen":"2026-05-12T12:11:56.616822Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/common/js/transports/GeolocationGeounitManager.js?v=1749489267","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"282a874bc2ba0e3b6b3ce6391a9e8a7d","sha1":"5a9dc963c4d2982d1141c6d9ab3f872a8ef68507","sha256":"3ef905cddeab628ff9aa028b1cf4c06804b97d271cc22e10fe62a7cea0cdf50c","sha512":"e74d9af73f59133bd3fc5d8d196e54ae0d4c27b7f37b38936b6cc27cd426f188c059578e77d5888601eac6b4840ad1ef1fb6d7522499e6084a7dad44b71b1682","ssdeep":"","tlshash":"9821f457976d213385e2b1376c8f0202107bd44bbe8c98263541daa6cc5793c8f43fa4","size":1208,"data":"","first_seen":"2023-03-13T20:32:42Z","last_seen":"2026-05-12T12:11:56.516332Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hrenaissancecancunresortmarina.com-hotel.com/sandbox%20eval%20code","fqdn":"hrenaissancecancunresortmarina.com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"92b651082ce234f66bb544e678befda3","sha1":"14c21c55ddce43b6f677caadf51d4ab98c6a3df8","sha256":"25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded","sha512":"b4fcbc037e0a3d91db2a624921e96b878e9e18dd998ad5649d77d7d053faf28b09c8725a0542aef702310bf85f3037b70985c274db8acabd021efb171d41f361","ssdeep":"","tlshash":"34c08ca3e74026ae2a1166b2b810e003a2866b015aa78402b00a003b1441fe21aaa1a8","size":147,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-05-15T15:20:14.035685Z","times_seen":878509,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"com-hotel.com/compiled/lb-frontent.js","fqdn":"com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.129.55.48","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"27e0f2d6a10084e198ead78867c0d0b7","sha1":"bba007184041ca554882e90b62f2e814dfd2a5bb","sha256":"06d9bd3f9589b45f80df15bca07b5dfa7bb9101c1887aa438b4b177e0b0db9dc","sha512":"e7d51b8935869876635df485c2273c7a3d6f4cafed8968719116dab6ff13f13e784706804a98bb5f4db7368e4472baf0ce9155961081142022812a983ca49069","ssdeep":"768:6ylblUZC73CmmJ43ApJzkl8SSGgoMlJYeJPBCgI8rcrlumyOS5SIQ8Hj1ZqDjT:6HJJ43A4SGgZlvBNylumyOSsN8Hj1KjT","tlshash":"7733c88afb0124fa11fb763b947ff11910335eee4a819081a93b8464197da4e7353fad","size":52353,"data":"","first_seen":"2024-08-19T19:44:32.249664Z","last_seen":"2026-05-15T15:56:25.158402Z","times_seen":2606,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"com-hotel.com/compiled/lb-frontent-routes.js","fqdn":"com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.129.55.48","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"506b86d5082f6fb21eed37c8517e1baf","sha1":"0396650c7d53b3b6df5bfecc810c0b53406c1e75","sha256":"69f6f44759b66cb796e5d15d4fd384644febf670e195d80e75c239dace1f75fd","sha512":"ed80dcce51e104e71366bb4fac5c21523f0a228be4c4e1b1956a6c148786705ae7fedb0540dfaa29158675221b0642434459126399fa2c70a386b3695e5987db","ssdeep":"768:rd/xQG+OsiGkh5xCw5SecFWpuSzYvT0KYziKcQ25Gi0VCwCUIsUeygQwUk0JSoVL:rd/xQG+OsiGkh5xCw5SecFWpuSzYvT0o","tlshash":"0c1311d5b6d7cc4634dfd57afd01228719fabe48d171a811cecad2ea0e70089398a93d","size":44068,"data":"","first_seen":"2025-01-30T19:03:22.221429Z","last_seen":"2026-05-15T15:56:25.175387Z","times_seen":2496,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-VSVH2X36Y6\u0026cx=c\u0026gtm=457e58d1za200\u0026tag_exp=101509157~103116026~103200004~103233427~104684208~104684211~105033763~105033765~105103161~105103163~105231383~105231385","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6899d8d1872bfb82049c67e4c99a3a0e","sha1":"81e4261758310f11871841fa4e37617f11fc0adc","sha256":"2b0dc2bee46e7c1de26c6f3b79b325d50aed4f41dd50b3e0185a157417bb6a56","sha512":"a0e174d2d149a0aeb2b304567f9ab4e81e5cee8a0a5e9748e017c236fb79c163b6f1da76937e1205fd04c893663bb9b54940f1fdf6c745a16fd124db22e51f87","ssdeep":"6144:GmLLFAcd7tIxSgw5xvuW/uSoTuFHUKPyXr:vPVd5cWzUr","tlshash":"c09408ce73d674625396f478402f01cba97b28a2b49cc8aaf185cdf42d3469a5127f7c","size":417575,"data":"","first_seen":"2025-08-15T16:26:55.767356Z","last_seen":"2025-08-15T16:26:55.767356Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur3.otcdn.com/headers/vendor/dayjs/1.10.7/plugin/localizedFormat.js?v=1749489784","fqdn":"eur3.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ea609b4ce97e30900df4266803fe68c3","sha1":"aede63b0199ed2d221170238e2ef3db15f5fc13b","sha256":"eb27b1ef12bd40db3a93af0ce93e0e7e791bd4cfb62c373518d38647a3bff33c","sha512":"2b2dc3e0285b916aa589a22cb41bc53b321cab52546e359c12f75fe832edb4a40da3247e66321089d700eacbbac50eee1be121f395a5272bc9bbf009a2b3b0f0","ssdeep":"","tlshash":"400144cef65a6c97435571f0405f8657beb6d6b615cd088110c1a0f62e7484c44a3fd9","size":709,"data":"","first_seen":"2023-11-27T12:30:24Z","last_seen":"2026-05-12T12:11:56.515541Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/common/js/libraries/widgets/transport/search/TransportTrainSearcherWidget/Plugin.js?v=1749489365","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d07e0474545dec50b95d5b5ead7d7b1e","sha1":"7e36282197bf65bfdeffe8aeee6bc98b9ab8da27","sha256":"c57a286d70e022f0eca58f61d1fe0fb50f11b87ddf999a1df4ec4e139ab9b174","sha512":"9faa47c75a00d3bc7fc23967980a710b43e09f91570f7773a29b2d4e32be6ace78819fa8e4d45f3335e58b96d14d60a4f1b4ed7f5885f95b04eb65006de00084","ssdeep":"96:xFPKCwzuIbpiA3hbvhqqs6dOnB4ddFkxRaEOjB95eIIn0fNfrgGan:xFPOpiA3N51s6dxddFkxRaErR","tlshash":"6fb13fca73a8356703efa13b865b6201603798fe9682c65c6d34b1f909789c81737f34","size":5423,"data":"","first_seen":"2024-08-19T19:28:21.650477Z","last_seen":"2026-05-12T12:11:56.521677Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/vendor/flatpickr-4.6.9/l10n/no.min.js?v=1748355821","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8b2c4518de7d3fec7bdbab25aa897cbd","sha1":"e99cea5fd57b5f9dbf9a7847f18ca38d9a785e88","sha256":"be33adc39684e8272160b54858aaf5b4e079d5fdb574a39c492feb650d849877","sha512":"a3cb775d80e1f19bf984f0807d152d5cd99b11ddc90f36927cc7f1b118cac1344d1f665de59b22a54fdd665b43780512f0e55b0400c0c992b945f922944dc3bc","ssdeep":"","tlshash":"662195292231a802101729e4803f8907b1640037e6ca00c3b8f9793f5cf86ad71ea98a","size":1290,"data":"","first_seen":"2023-03-13T20:32:42Z","last_seen":"2026-05-12T12:11:56.548854Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxcdn.bootstrapcdn.com/bootstrap/3.3.6/js/bootstrap.min.js","fqdn":"maxcdn.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.10.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c5b5b2fa19bd66ff23211d9f844e0131","sha1":"791aa054a026bddc0de92bad6cf7a1c6e73713d5","sha256":"2979f9a6e32fc42c3e7406339ee9fe76b31d1b52059776a02b4a7fa6a4fd280a","sha512":"d9ef2aab411371f5912381c9073422037528c8593ab5b3721bea926880592f25bd5dfdec5991cdfe5c5ef5f4e1d54e390e93dfd3bca3f782ac5071d67b8624d4","ssdeep":"768:4UfYD27UwlNHMl9lqNuCPNjhqg8epm5CCJFXflA8Gf3ZTbQ:z/76whqKGvlm3ZXQ","tlshash":"47f29606b23031a147efb1e1525b020a7239696ee906907c78b9daf53db9c48717bf3d","size":36868,"data":"","first_seen":"2023-03-07T01:02:25Z","last_seen":"2026-05-15T15:30:47.880389Z","times_seen":18717,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"com-hotel.com/","fqdn":"com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.129.55.48","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"beb23e120ed3c6bdbff377271a445afe","sha1":"9400dbdbd1b21f8774a7d52a836f788214ecf013","sha256":"71022d9f91f83f3bc2f1b4cb122aae153e2630f987145478a7e8d82978147035","sha512":"95da8dac20810c350b432e89be301edf7fc530c10fb902978c9c1822775ef3a3fee4c47fa6c9be18a48d4d02f31543f153f52a9f96fc35166e4511d11a7d62d5","ssdeep":"","tlshash":"98b012bde5a910c545f331206b3f812034b730172900d840350ce5400f1e4280106000","size":113,"data":"","first_seen":"2023-07-18T15:04:14Z","last_seen":"2026-05-09T06:32:58.646949Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/common/js/libraries/widgets/search/OccupancyLayerWidget/Plugin.js?v=1749489331","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ab44dcbf2ffb7685621643872a2d40a8","sha1":"86f272aa4115128c5d2a6fc0437ba9edaeac685b","sha256":"565cc90ad1abdae9612d308480c49148bad4049bbc574ce7ce5a91cd5e463c39","sha512":"9183a1839b789f6bb96f2bdae9b90aff161cd83468d7d1094d391ab6b0a27bca17bd21cc5faf246fd7d05ff04492c8fbacecc183eff6888f97f00325b6821afe","ssdeep":"192:xZWz45w6yziTkeJUpWBZh9mDtBhn3Nr+L7RFIpRag+UlKRmxr2XI72o:qz45w9zIU4BoJ9r0z8H72o","tlshash":"efe1b601b662987bafaa4aa8711f630637b1d90a8454f0cef945e0f13e60dcd1837b76","size":7236,"data":"","first_seen":"2025-06-28T23:09:08.228891Z","last_seen":"2026-05-12T12:11:56.475754Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/common/js/libraries/widgets/search/HotelSearchWidget/Plugin.js?v=1750151534","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"982c41bd849340edae97d3180163f9ac","sha1":"fb9ff4f8e4dfc387c1ec9d7de47a11f9f4ed0561","sha256":"c029f5ca8cf9c275c8c0272cdc5e8ad99b3784febcb01f3d02b9f55cc854bff3","sha512":"a880703aa244b179e998c18cb5c012d7974e64186a815e9d9b0cbc9aa16a33099cacbdd4867b02739270d7391465b727a9f3f3f9efd4fcaf8c4c5d3090a6ee06","ssdeep":"96:xxoAAwzutdxEvYfAqx4//amzoAcI9JgdwccnPNM3/fYI5FAdRaQ:xxadxEvYZzmOdqlM3/gI5FAdRaQ","tlshash":"aba1544a73587d5b43ff813ab92ba340a261647a82c4d50da571f1f518b9d860b33f3a","size":4873,"data":"","first_seen":"2025-06-28T23:09:08.088612Z","last_seen":"2026-02-03T13:35:48.422312Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur1.otcdn.com/headers/common/js/libraries/jquery.autocomplete/jquery.autocomplete.js?v=1748355805","fqdn":"eur1.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ca4569463728e6b0219cc4a734da4a3e","sha1":"21913ef0327d1b9193526e66d99b62e13bc446a1","sha256":"10a7ca36ca253b37301bd8d40fc50cc825b357740caa8c9ca3ee1a22f90bb6af","sha512":"299b265aff47a5e56b25e554b72255749d60bf4cfa5510f93edb5bb3d7ae72c41ed5d0a091d490a73c09d7e054de38e44935ba29b35fadd00f67ebf0c4a34bd8","ssdeep":"384:/TsFg7H007FOFXFjYYuBkDqVlRQrtyTIlhOEpmLB8zKnpXNH7012u1QOc628qva/:bfQJIRB8WnP7wbX","tlshash":"40f28509afe91126c393317a5fcf5009a53c822bb90ac4597c9e83e41fd963856bef74","size":35047,"data":"","first_seen":"2025-06-28T23:09:08.364351Z","last_seen":"2025-11-09T04:05:22.247646Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hrenaissancecancunresortmarina.com-hotel.com/","fqdn":"hrenaissancecancunresortmarina.com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.83.149.10","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"1bedbd7d5795c081549555ffb40e36c1","sha1":"9984bd085e9cd45d4ef3750e6f952fc1ad3015f0","sha256":"b2368dc9aee3dfb30fc007d693c558194e65c1e0bce8146b2c3f40a5b042589f","sha512":"610a948aec2eb3b895734f652df2a0138ba8e985ee4b2a9c5226890661a27e1dd84a26e4c6d2046090a06b071653b52f9fa8c44bfeb0b1a55fb2701f907e34e1","ssdeep":"","tlshash":"2cc02b88210a0cf191f72700cb3ff600b402331894d05a31480d2308ce20f07d744804","size":155,"data":"","first_seen":"2025-08-15T16:26:55.779334Z","last_seen":"2025-08-15T16:26:55.779334Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hrenaissancecancunresortmarina.com-hotel.com/","fqdn":"hrenaissancecancunresortmarina.com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.83.149.10","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"ba16a5225ce2978371e03334dfe4c2c9","sha1":"e6c33347962383b9623d99c46eb60dcaa6d7fde1","sha256":"8dcc1aacc425e4e46e687cc09e936ecfa67c59d9cb2617b13addc38051c49867","sha512":"6f26be0a6464a18aec6a30d74d516098f1e8a5787753105b326848774755eb5016cebe875e963f127f86c423924490eea42d3d71df51fe209e0aeeb6c712c9f6","ssdeep":"","tlshash":"2cb0128a6669110927a3d071aeb73904316730bf488c9544bd1cc9001f2034fe1177c8","size":116,"data":"","first_seen":"2025-08-15T16:26:55.780291Z","last_seen":"2025-08-15T16:26:55.780291Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-D7G4Q9TG14\u0026cx=c\u0026gtm=457e58e0h2za200\u0026tag_exp=101509157~103116026~103200004~103233427~104684208~104684211~105033763~105033765~105103161~105103163~105231383~105231385","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed31d77eed7fd1751a42ef6bc1e06d1c","sha1":"07691634b12660217adce90ccb067584d76585f3","sha256":"b6b0e83c6cea3a5e2674726da5f82a765e201188ce621e8db769d8c1722e75c2","sha512":"5a7ff32dc9287b868b45888baac8f322949529bf49f18ac26676cc63b08c73985adeafa683fc51dfb3c5d74f087dfa664df7529f9336d6e0ea407f8974f79d79","ssdeep":"6144:+17mo893vsKCBCyGLHUZkpDt1aRIambWeQZZlT:S7mx9fsRBCyGLHUah8ZT","tlshash":"f27428cd73d674629392b478403f018bb17b68a2f44cc899f186c9e52e74aaa4177f7c","size":351051,"data":"","first_seen":"2025-08-15T16:26:55.70499Z","last_seen":"2025-08-15T16:26:55.70499Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"com-hotel.com/plugins/bootstrap-datepicker-front/js/locales/bootstrap-datepicker.en.js","fqdn":"com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.129.55.48","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"cec28b89d81a232d436e6b34a7654b41","sha1":"b9be5558a177e28e82937c1e868d1e9199f2da21","sha256":"d527ad888ec7d518ec57d23f77496c864fb906024ff76bed85915a15f0e85cbc","sha512":"67dcac08602d63d147f14dcb193e32e89dfc18ef67b32307875fdf91ccd61603b45a427999da77f054591e74656fda8b78adcd3935c766c2382726d61c6254c6","ssdeep":"","tlshash":"d801f23c6501a643d1bac31a78a31a077b18238b0515aa1fb2ec2d854f4c9a8b33e42c","size":740,"data":"","first_seen":"2023-07-18T15:04:15Z","last_seen":"2026-05-15T15:56:25.178466Z","times_seen":2267,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","fqdn":"booking.mkp10-2.com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.222.42.74","port":443,"asn":3257,"as":"GTT Communications Inc.","country":"Spain","country_code":"ES"},"introduction_type":"scriptElement","is_inline":true,"md5":"5f5c8e371cb892d8cc395e9ea8750b2d","sha1":"4eae377986c46c2899161785fa9616d8f6e7bce0","sha256":"2faf2ecd10df3c1a3d3a68e4a48c56da43c619d6c1d4073cb0a5da0224871034","sha512":"4ce8a6b350c8c9642e5f94f0b82c5d9d48f53dead09436280988db9f596d3e926165fda947744968efb8420dfb06ec85d3e0866c84c0ea53bcd62be81be20e95","ssdeep":"","tlshash":"d011f95b679b4c0203e126a86fdf3b00b05270528354dea03e5d6d182fa1e37b5b46d0","size":873,"data":"","first_seen":"2025-03-11T12:09:34.912887Z","last_seen":"2025-09-12T10:22:10.565006Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/vendor/jalaali-js-1.2.3/jalaali.min.js?v=1748355821","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3740cceffc7577222133e9eb34b447a1","sha1":"bc18d95838d52a2d88c19c577a672281c956993b","sha256":"64800f3c19ffaf28789f1517fe2fe3554adc89ce8e53c6e77b9f7b7680e9aa2d","sha512":"ec76b08c074782056040c4e7d319926f1be9077e732a1b650f3d03f93a47048e2340e88e8b1ced378e9ac066fec85e6a93a9786a564706fe79a6144aaec01008","ssdeep":"","tlshash":"865182cd36e1f4429327a5fac05fa04bb1b4a9b6554c8d01c78dc1f83d345a98b27e48","size":2773,"data":"","first_seen":"2023-03-13T20:32:43Z","last_seen":"2026-05-12T12:11:56.61175Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/common/js/libraries/widgets/transport/MultiplesJourneyLocationAndDateWidget/Plugin.js?v=1749489364","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bbe0bd4711ae49f956db7c737c77b10e","sha1":"2f1a546684c1f5056bcb98828811f182f5528a7f","sha256":"0efe16dc1b9bead304dbcfdce6a0a64453e5f6729178caf846fd1cfac0590ebe","sha512":"26a0031f4e128c60ab2fa124578fefd0063225d12a4aa2300e51e2f0ee921b787dbdf271ec2224aeefc6d5c5242613efe3599544e67bd89c3b0c44eb7b2be6ec","ssdeep":"96:xxWPKzpyOR26nITuVAXEx0FxxfcRaxpxzi7vOVZBn:xxWPGpyORfIqKUx0FxxfcRaxpxe7+B","tlshash":"c2a1238ba7a52d2447ce3999c03f9341602648df8dd1d44cee1ab7e865705de9f1ef20","size":4800,"data":"","first_seen":"2023-03-13T20:32:43Z","last_seen":"2026-05-12T12:11:56.596444Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/common/js/libraries/widgets/search/MultiSearcherWidget/Plugin.js?v=1749712209","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"94af4c25eac9454ef085fbaa125939a6","sha1":"e197a71650c0966b230c069670ab27deddd1db3a","sha256":"dbb769039ff03cfd8593cca6e725ff69762d298b787ee76006482985ce78656f","sha512":"1bd15ff4d7c6488b068208a184fd563a7abc8291b81a56e29bcbc780e96b77dda77417dd952ae5cf7a7c4c7011a09fe715b1a188335df73b1223cf96510279ca","ssdeep":"192:xnlj3tZpdzid+zckUMKdnjzVbznpCyljVPDLCqawtOyihOcep/O/GodFrVIXRaW3:brKd35qgg8/dow","tlshash":"e7f1150866bb24659d37323d8eef7184326b444b442cdd047d7c61a0af998fa06f5fe8","size":7698,"data":"","first_seen":"2025-06-28T23:09:08.245439Z","last_seen":"2026-05-12T12:11:56.492813Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/vendor/greensock/gsap-3.1.1/minified/gsap.min.js?v=1748355821","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"663fd753cae2b462cf8ed119c3f991ab","sha1":"06a63bc0ec823880b5420c23071e3c3c0582c11a","sha256":"732117ac92a33b760d9290a33f1541762ee9449dc417ea249b5a0df50738ad16","sha512":"d11607aa8380466a71344c3e7acc4d1d768fa17594dfab300bc6b90609a77b164d98e8437b00af2913568ad262c1fe34a3c254b20f37d54bbf71120deec09d28","ssdeep":"768:N1JsoGPTyHRUxrSOdlWfT2OlUFi2rLei2YCv0BiDTTW9t9gE0aZC3n5N:NDFGlrSGlWTCPb9b+","tlshash":"964309cd3292b42642975161457f0a0bf33ba998200f4518f664e4cd7e3cdae42bbf7a","size":57826,"data":"","first_seen":"2023-03-07T13:48:25Z","last_seen":"2026-05-15T13:22:59.522076Z","times_seen":172,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","fqdn":"booking.mkp10-2.com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.222.42.74","port":443,"asn":3257,"as":"GTT Communications Inc.","country":"Spain","country_code":"ES"},"introduction_type":"Function","is_inline":false,"md5":"62e10f5bb0fd9180c505852e56af495c","sha1":"15b42cc4986dbebfb71313b2c70e98d0d223d9b9","sha256":"0b90c932649b63293384f43d943ce128cdb51dad62ba83a36ebbd8730e8183b7","sha512":"bcad51bed5bde3988262d963da878b9ee3884da5660df704683338dc69e0e73cded75bc3bc69d17a554d7f8cc914e24582190b32da6f8f7bcf131ed0962911e7","ssdeep":"","tlshash":"4b31a741bae52970a7aa975d14db7401e7a39a0393f44b467a5ccfb38bd006e4983ef0","size":1678,"data":"","first_seen":"2023-07-18T15:04:14Z","last_seen":"2026-05-12T12:11:56.633061Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"com-hotel.com/compiled/env-default-template.js","fqdn":"com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.129.55.48","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"b12451b1ae81533307c88f141a19e172","sha1":"b08836eae0170129c2c15dfd35b9c700d025b826","sha256":"a69d4ec5ef20171d1b4e192292206c6764e4be0b8828e2ff208e5625e7b4d35b","sha512":"b1a2f5e7e1f783521e7403557b1df49ea495ba1b0451016bea7410924e7d711b8cda417e822a48fdd49d7e92213f9a1cda7c61ee9632e55b5ebc8c52ec228301","ssdeep":"192:BaIm/JgLDbhAA3hlohfTJMT0he/pg3MPmhXxLSNgNrcWuW:BaIm/JgHbilTJMTJ/pWQ4XxLRX","tlshash":"26e154e63258249902df3833c61faf4560b3686edec7a841e54289f909bc6de9353bc4","size":7348,"data":"","first_seen":"2023-07-18T15:04:15Z","last_seen":"2026-05-09T06:32:58.551501Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"com-hotel.com/compiled/lb-web.js","fqdn":"com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.129.55.48","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"1af44cefd589826d2a0b888d824a2cff","sha1":"fd4cd5d974c325f9b7108f4b914540757b0a0d0a","sha256":"e9a077f8242db1267def5e4798b9bacfd399007f56a4254bb6ebe4ddb2bced54","sha512":"fb06948911698f3deb7a430ba960e8fdc21445111070b14e0881459b7d593a5061556a6fb0f0f1651add87fdeb38b1427ac056ff1f7806a407bd98235c83b044","ssdeep":"192:bAxAzh5LxUV88J+0beAhf2Tv9Jw35gj6odJZWGimZhd1kNdvhp:bqE5LxUV1JZhyYpvyWGimZhzwRn","tlshash":"08d151cc79b805e72f9f33ba44d7c28a46aa64ae89a580d141dd04404db8fce9377f5a","size":6397,"data":"","first_seen":"2023-07-16T11:29:18Z","last_seen":"2026-05-15T15:56:25.165213Z","times_seen":2610,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"com-hotel.com/api/en/5809db55-7408-11e8-bfca-000c2914c1c1/adv/component.js","fqdn":"com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.129.55.48","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"65258956cbcf27f489a95c31aae5113e","sha1":"df9d230ae6b97521105a1e70d17a897f4a0545f8","sha256":"099c21182cab777e353fe95dde02e8699fbe6ae78038bce9b2c1c7c3ece46462","sha512":"4efc1b6cc70746826331ac8d02719775f1c713b2c2c8b9fa25258b1847a86b660ba8d61d55de177757ca6eaefd7eb9445772e1f0f35e4a0561e5ba424d9a982b","ssdeep":"","tlshash":"0071bc49fed5108492a731398baf42046731b8df9d07d8d2be5c17c40f58a7ca346bda","size":3787,"data":"","first_seen":"2023-07-18T15:04:14Z","last_seen":"2026-03-10T11:37:27.5195Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f24128d0c9cba7be2916c693427a3483","sha1":"1b6397d496ea896ebc2018b01b995cee4f166029","sha256":"58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8","sha512":"c4950733b44e258bbc817ce6396f002caec1e11a6413fd0038c9baef2d5f1d992b1fd0ec52515aba52faedb52c28b996a7fc063f28a0f45f3aab5e2f91bf5be5","ssdeep":"96:A1VdZYqhPnjpWx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBfQPfCHiUr3:AXdZYqNjpU4yPqSMbqaQGL2QfdDayCZC","tlshash":"a6a1dc9939fb50210233b1bd1bafa918b23895236208dd61b98c9364bf94437d7f1fc9","size":4691,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-05-15T15:20:14.037086Z","times_seen":876844,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/common/js/less/less-1.6.0.min.js?v=1748355805","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d4683be5fde216affc31f6fd3e720b3","sha1":"3e358d29518670b807c6a0c5b836453e8de3cb59","sha256":"4f0ac8edae97f493fd50bdbaa56cf2cbb6ad097e08c7cb9dc6375cb047562469","sha512":"c3395dba14be69f38b9b0937c5e5276370c85ac61946ae50acc1e5c36daafe189a2b2906f6b06bd8957817d50896312aefa7a95da4ea5acbd101e1c58a194d94","ssdeep":"1536:GU2vLVP2ifP1l+k1mlQsAoy4QwXg/94eggyXXGe2ajGnSsNQUSAnkGz36o4ci3rZ:Qf1SZBy4QwXg14egNGRajGnSqGh88fHL","tlshash":"3193c69973827466c36b7564047b114ba33b6e9ab40888bcf06cc1d5be35f4921bbf78","size":96472,"data":"","first_seen":"2023-03-13T20:32:42Z","last_seen":"2026-05-12T12:11:56.60056Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur3.otcdn.com/headers/vendor/dayjs/1.10.7/plugin/minMax.js?v=1749489783","fqdn":"eur3.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1b2a2841abbe78adc266b55e5dc0fc75","sha1":"67c7bcdb77abb35c10cda0144e1c90b39be7bafe","sha256":"492c2e2cd221a7354ef1d93b562f6c59c403a104e7dd6823461173623754a43a","sha512":"f2cb8a12bf569e31b01197c6aba450710489499881a145d329d9a70a67ad77e121dbec745ad049f14981f1b3dac4b4adbc9c2ba8bdb8c384a5aeb458851c2dc5","ssdeep":"","tlshash":"c5f078c6bf417052a7263560903f0007f43a9cb7af4c5854a1119df12d705da40d7fac","size":618,"data":"","first_seen":"2023-03-13T20:32:43Z","last_seen":"2026-05-12T12:11:56.479271Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur3.otcdn.com/headers/common/js/libraries/widgets/search/NightsScrollWidget/Controls/Nights.js?v=1749489354","fqdn":"eur3.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3172c357943933356a83538a3b03cdb5","sha1":"5ddc4e78bc00fcaf30d1d92f350e2150278107a3","sha256":"c5d466caf4860727af165265faf70559de52eb4725bfd64d275f3d7ca6fe6b0d","sha512":"ac14cbfa60e9a5be37f85f026c330fe29a4448926e0ed4eebccb31fe7e78a42dff1fe6d84929efcb4893e4cb601c3a73b6ef25d80c1c44fd7014f57ff60de8f9","ssdeep":"","tlshash":"9ab09b84ac77360d276d34f96407134b57553a45f40815057015f8c1a95ee1c405151d","size":121,"data":"","first_seen":"2023-03-13T20:32:43Z","last_seen":"2026-05-12T12:11:56.497862Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/widgets/search/js/LastSearchCookieManager.js?v=1749488646","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"328d6e2a082b5b7b62bef8a109c8e5b6","sha1":"e56d52682aa8ef42635f4ccd4442807eba65b8f6","sha256":"b5d1df59e565949be71b65d5fe60373511a67959615c6e285fa235bd7bc0fc98","sha512":"ca5027cd41572a83e56586ecc285ebdf3294709ebd3872d44adab8ce666855beff79dffb11f2576eac84a2ef2dec1cf2bc03d90ffa6f38519b791368f19eb626","ssdeep":"","tlshash":"644161aa7216a12b8bff6030d41f0a017062e55f16d4806ebc04e8e42935dce1f3fb3a","size":2223,"data":"","first_seen":"2023-03-13T20:32:43Z","last_seen":"2026-05-12T12:11:56.53071Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/common/js/libraries/widgets/generic/CheckBoxGroupWidget/Plugin.js?v=1749489327","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"33b085a230007db588780537d0db48e6","sha1":"c6ba2e6a4da14a351c06e9b514999a28c8cd9445","sha256":"cd0f9ee72e924d088bed7cdb7663f0ebebf3082c4621a268d0da6811a2b076c1","sha512":"df8e3e75f5bbaa68e4b1303206487de5d8df0136911682c10c02f63ba875fda1204767d2e49cd962cd3767464e1786918a71faaad1352b05feaa2a2425059389","ssdeep":"96:YA5bQcmI4jRzJmGn52ndMFmdLNEiuwYpIbXxPFBhoWR7:YABPmIiRzJmG5edMFmxNswYpIFPLhoK","tlshash":"6fa1f35ab640b8b142b7b0b644af1245f17b98b68666ec5cc9c2d0f02dfb8c94533f5d","size":4628,"data":"","first_seen":"2024-08-19T19:28:21.575966Z","last_seen":"2026-05-12T12:11:56.50743Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/common/js/libraries/i18n/locales/en.js?v=1748355805","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"980f4c3108c8b02dcaa0c92a2abd20c9","sha1":"d8a9825ec4b75ba43670416b239872c940b1591f","sha256":"b4a5ab9694efca818c1cac9af49eef522873f659162d38ef8edc19f030530538","sha512":"fd30b6031236c9fb41791d54e191d855e7e51ef8615fdf258a7fd4ae28ea5a3c5cc2633df7409d4c13c4233e8f0d9a76307dc746ccc49115abca52a780b94760","ssdeep":"","tlshash":"9311d37f718f882eb473c4f74185274b5190937660c9999c2ccc88ec87c86eb31aa3d1","size":1000,"data":"","first_seen":"2025-08-04T23:34:46.986721Z","last_seen":"2025-12-16T17:35:04.732772Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"com-hotel.com/compiled/translations-template-default.js","fqdn":"com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.129.55.48","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a7da1acc0cc889e74b33e838a9f86b2","sha1":"b5e3b227abc07a600538bad1de6693f6828297f9","sha256":"c2a714afb99543566bf79a5724b17324a47ae04920a8f2d264ef60b9fe0f72b3","sha512":"de3d2e3de6a9372596a2596ca6a10febbc7ff3d9a44847431c2ba2486bdd3bd825e0ebc381ff35ef2fe07c1ff9463781fdbba9742f695c67c607ec863972cd8f","ssdeep":"192:O+b+LKHpbKoKV+oKVPoKVSoKVIoKVxoKVooK39V33o+75TdLHXGEdSBrQReqzdrz:O+b+LKHpbKBV+BVPBVSBVIBVxBVoB3Lj","tlshash":"4a329d0d39b4c623276b315487de9ac4b4e05c4ecf13f8e9b2e98d1a36912a773ad714","size":11314,"data":"","first_seen":"2023-07-18T15:04:14Z","last_seen":"2026-05-09T06:32:58.598423Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur4.otcdn.com/headers/ilusion/common/js/CookiesPanel.js?v=1748355810","fqdn":"eur4.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f2b2ca54e4f432c2d85b32634733f1f3","sha1":"8f23fdd61f88a219ca2f1e2c5ac2d3f48d7c0e68","sha256":"53096da56dc24373b12b80e3cd67793e5e5763dc79ff3bc9f5b30efc07a00d56","sha512":"7b967d0056e46ebc5d7820cb5eb397a21be9430e9292dae217c527bcae1a8f622265c180f722721c78df276e766813eb329e82a62d89ee3fae9bc8c0b1279cba","ssdeep":"","tlshash":"8a41fe0476f1515342b3b43c934fba1632551583608dcb493d2eb3281f5087a2bb2f5e","size":2076,"data":"","first_seen":"2023-03-13T20:32:42Z","last_seen":"2026-05-12T12:11:56.524388Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur3.otcdn.com/headers/vendor/handlebars/custom_helpers.js?v=1749490745","fqdn":"eur3.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8d5f223260bd032edad32a2486f8e5e9","sha1":"145198a4ebb7ddec3a8840e681db88e91a7e7017","sha256":"c5e25b5d1d795f977febefb930f52dc7f8712c483d3bb169e6b960f7e63a2b16","sha512":"53cb03db31299d1626a6b73998ef744bcaf0b3a5ee69fe6d23b03ce6126ec3e9d9d8916686ab0daa05fa7e15e0145a0c4c07c3029c140cbd2d6fe66d98629c68","ssdeep":"96:pkgmAEDmy2Pp9ngqclL+J+jvvv36vzxvGR3uMRbQMhTWLFP2FWiaeOXTZWxwC6tN:pfmHmy2Pp9nfAL+I733KvGcMRbQMhTYT","tlshash":"43c1554cebcef947a6d639745d6f5183a7a65701660cc8acf440d3e15ab988ac03bf31","size":6078,"data":"","first_seen":"2023-03-13T20:32:43Z","last_seen":"2026-05-12T12:11:56.509701Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/vendor/flatpickr-4.6.9/l10n/fa-jal.min.js?v=1748355821","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ce427bc3d74c60a527b054fe90405027","sha1":"53e1cc76811347a820a21572a84bfb88a91db115","sha256":"65a382c767dd7bf96ab02715cd4d06bb403bafc7ff1088eff2a1fca810bbd0cc","sha512":"a61f0ffcde5b8fb07e42ab83921824bf03971be47dec68b9e5ff37601a14565a756d5d91fb725d8dedc249b674623d7d44cb8804baefcb3f4a89942e44288396","ssdeep":"","tlshash":"9121313a1b24a17023134b5360bb7b3fe5b2c435422f94d839d83b72e841c9e12d268b","size":1311,"data":"","first_seen":"2023-03-13T20:32:43Z","last_seen":"2026-05-12T12:11:56.483618Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur1.otcdn.com/headers/ilusion/common/js/Telephone.js?v=1748355810","fqdn":"eur1.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"df4929a72925e787d14d9f05a5989bdd","sha1":"467ddd2d7e70f831fb7ee8f05435675ca071128f","sha256":"35a6426ed02356383529c6852cd184dbea912cc5a8326ab28c3dfade607b8a18","sha512":"7f594d92278d58b64cba388207ee51914274e73bf6f02aa2157caba2765b3a7d8f894dc19cdb254c385e7bd16d2cdae408b53b27b36e30ddb6d4780159e94693","ssdeep":"","tlshash":"5d41df68aff52943103fb0bb97afa405a61ad443294dcd603cec83b6af58938155866c","size":2396,"data":"","first_seen":"2023-07-18T15:04:14Z","last_seen":"2026-04-30T09:19:51.334955Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/vendor/handlebars/4.7.7/handlebars.min-v4.7.7.js?v=1749490742","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"734c421fde5a80ef94d90e6530dd90ca","sha1":"95a81c2e062ab4c0fd20b67cbcc4d2f44e4f7db6","sha256":"681acc5a36a49fd272b9d75775d3c7764af51a67cc879fa67f2ab4f674ec61b8","sha512":"325ad8f07fd90c545c08bd7609a6c81bdcfb24c235e1a0f5de273c13fcf9d28a08764b722808d0a666d312a7840c89fa81fae1f2bce0a8e99c6725029ecbd9ba","ssdeep":"","tlshash":"a811bddd344af8825397627417cf8107aad4a8ae445cf5619282cbeabf3140d90f67e1","size":1000,"data":"","first_seen":"2025-08-04T23:34:46.979409Z","last_seen":"2025-12-16T17:35:04.711159Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/common/js/libraries/widgets/search/TransportAndHotelSearcherWidget/Plugin.js?v=1749489357","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"92e350cf71e8b59d39c8d5cbcf3e4148","sha1":"dce6225c4848a3ce77ee86deaa89366613612407","sha256":"cbbe6ee6c874c31b58240f66cc76b3c0d6c683e65bd04e20927aaa760f6c351e","sha512":"d2ebd87498831ead5a3ca87561f5162aea4e9cd1a7dad0736f0eda2503c623bdbc502d43667473798211fc38dc4bd8b573e216798a1cb46455faf282cb8f72a1","ssdeep":"192:xClgDeDxi4FVeSnYH9r+L7wFtyRaN/09558V2tMpzkG:og6DUcfYdr07V8F5V","tlshash":"2e22528a6394285503ff5123840b2601733998fe8b92da9de9b0b5f559b8cd9033ff39","size":10776,"data":"","first_seen":"2025-06-28T23:09:08.030283Z","last_seen":"2025-09-21T13:22:40.661944Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/1.11.3/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f03e5a3bf534f4a738bc350631fd05bd","sha1":"37b1db88b57438f1072a8ebc7559c909c9d3a682","sha256":"aec3d419d50f05781a96f223e18289aeb52598b5db39be82a7b71dc67d6a7947","sha512":"8eeeaefb86cf5f9d09426814f7b60e1805e644cac3f5ab382c4d393dd0b7ab272c1909a31a57e6d38d5acf207555f097a64a6dd62f60a97093e97bb184126d2a","ssdeep":"1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmm:R+41ZqLTW8xRrqSb8qGH77da98Hr3","tlshash":"1793d8d9b7d67162977730b850bf510bb13a98eab80c4ca0f0a4d8e47d74a89507bf2d","size":95992,"data":"","first_seen":"2023-03-07T01:02:11Z","last_seen":"2026-05-15T15:26:14.987712Z","times_seen":23819,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"com-hotel.com/","fqdn":"com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.129.55.48","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"7473126a70f0d9822456ecef7e0ab346","sha1":"2b421ed7d2ad9d4e402cb900d197cc52abeb4806","sha256":"d93392a1eee09d3abe1892ab4f84398ca48b0cdf0d6947cad07aa4f12f1fad35","sha512":"ef2eef295122e89ae799f48bd45779b8b1efff182d9f9b2a63ee196a7db578df40430e6b1b297a6da19af53667e47f3257fe88e2d59ba8672d649173db162802","ssdeep":"","tlshash":"245132fff62ddc96f2920cae1d7b2e396113812e9894a470fa1ddd154b4883593b381a","size":3060,"data":"","first_seen":"2025-08-04T23:34:46.969943Z","last_seen":"2025-10-21T10:14:47.367637Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-133452114-1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"293d8fff99556ac9b82cf071d2d57542","sha1":"e679a8739008c81d1576ad969a5626b072919e66","sha256":"9392c3061225c2e9734b84af0f8b82308e6356ea3a8d4e4681df20f3e0a172a5","sha512":"bbe62103c49898864f0b6b9aec7454c0aab2a2eeeb342982a90dc99a2a0c1fef4dcdf233b51d007d168b866ced2805c1ef31b413dddd3caad1410d7c6a92dfc3","ssdeep":"3072:5EY8g61JLwDPpApB0Sv5DhSb5qlUmxxgbXwDctaW/uSoTQtF021tDRI0df7:smLpAKtIxmwLW/uSoTuFHtDug","tlshash":"f05409cd73d6b46283a3a474503f014bb23b6992f84cc894f186c9d92d74aaa4277f7d","size":293085,"data":"","first_seen":"2025-08-15T16:26:55.732485Z","last_seen":"2025-08-15T16:26:55.732485Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-133452114-2\u0026cx=c\u0026gtm=457e58d1za200\u0026tag_exp=101509157~103116026~103200004~103233427~104684208~104684211~105033763~105033765~105103161~105103163~105231383~105231385","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ea1b6e248245f04b11fa74c58949779c","sha1":"881a8e6f660535bea11a64e6cf9a4589f91f1e9a","sha256":"15bda6d4b60737ee4e31b1cb86529c8a8f287a4c2d8c180fe03ddf059f57841e","sha512":"2787ccd30d894fb6136c7ce37199818646d4abd4b89b2114207ecd0abb40607b5881a9021f1525209264b852dc6d5dbf48a3d6d04067c1506c6fdb6c59512e25","ssdeep":"3072:GEb3g61JLwDPbA5B0S25DhSb5qlUmxxgbXwDctaW/uSoTQtF021tDRISdf7:TmLbATtIxmwLW/uSoTuFHtDuy","tlshash":"845409cd73d6b42283a36474503f014bb23b6992f84cc894f186d9d92e74aaa4277f7d","size":293094,"data":"","first_seen":"2025-08-15T16:26:55.750617Z","last_seen":"2025-08-15T16:26:55.750617Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/common/js/libraries/widgets/search/DateScrollWidget/Plugin.js?v=1749489334","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e2542afcd370bd47dde2f271a2f40e28","sha1":"b312902a169c1093349bb8951add2f932dc65296","sha256":"290a4fd69543dee4450237091c6782832e28fd3b29eb453b6ef7b0bb75c6418e","sha512":"842ecec5bbc63bf5fafb5ceaa94130d4b2e60f61dcf9fbf04e2533d0807d852adb01845e92975c4165cd3493fe5ed833d2fd4a8da52fb1cf10d9c03f8a29b0dd","ssdeep":"","tlshash":"6741e1d8b2c0712657d6f335847f070aa23b64a09bbdc44cd265e4e13db489c952ffa8","size":2403,"data":"","first_seen":"2023-11-27T12:30:25Z","last_seen":"2026-02-03T13:35:48.480631Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/common/js/libraries/widgets/search/CheckDatesScrollWidget/Plugin.js?v=1748355805","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b19c6ae395ea9419149a4cc99161b144","sha1":"ec4d667cf497cc2c2325d496a64e48c3f9580f91","sha256":"e26ffde5e1951c38f62dbf502e4c19a5a89578699addd34b9b08bfe7d8ebdb3d","sha512":"936cc92d91df0c8fc0984438994bf76f498a3a6fb1f801ac50fa522861674d6955e8b89e551158d54ec7b2725f6c4f7bea0e6a5f9607d462abcac1e7ea7bd7fb","ssdeep":"384:oRo/eQvPeEv1qaVzwZogPu2g/+d4ES3GwGKY8faibujYRIOS8UPPPu2yIvflYPZY:h/eQeERVzKp/bYPZVDQtL/wAnBoWF9Z","tlshash":"73f2240869a7155113ab34398faf23033615444b0b8eed587ebcbaa01f4487585fffea","size":37636,"data":"","first_seen":"2025-06-28T23:09:08.10438Z","last_seen":"2025-08-15T16:26:55.710018Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","fqdn":"booking.mkp10-2.com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.222.42.74","port":443,"asn":3257,"as":"GTT Communications Inc.","country":"Spain","country_code":"ES"},"introduction_type":"Function","is_inline":false,"md5":"58b92342b636f8615c229fb3c66a88e7","sha1":"eaa57f7af0948d747de895d4184bd4c665445e01","sha256":"af0c0538f88fb6fc60b367d6d346c1ae83a32c9c92dfd6abcc01574c8b149665","sha512":"748e68a045e757356b99fdf5ccc41faaa01638e97b88fb6dadbb211b0505a949e0fae0c864cdad2eafdf0ff66eebddb3344b07fbcddd4d149758a13a706ed279","ssdeep":"","tlshash":"c721ac40baf61970e366431d14dab400eb138a0353f85f06b79ccea35bd006d4a42ef4","size":1250,"data":"","first_seen":"2023-07-18T15:04:14Z","last_seen":"2026-05-12T12:11:56.621824Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","fqdn":"booking.mkp10-2.com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.222.42.74","port":443,"asn":3257,"as":"GTT Communications Inc.","country":"Spain","country_code":"ES"},"introduction_type":"Function","is_inline":false,"md5":"345038c2fc4e826251918b45af11e90e","sha1":"35ce5130083105dfdaa714f274c8fd4f6241f66a","sha256":"7bdf2c97f628baf829749cbb00b903ad3bf81f668d9546e8c9d4b8e4055c5a5a","sha512":"75c01650700e4552c96bf97bf8eb802fa366b22dcaeed71a1bd045e74cbbe63074392434f9f581ee9229cfb31d6a2d42c4ed3f5f169f6af1de253a35c217845a","ssdeep":"48:Ap8f+YI3UTRt+6MH4+Ouk4qSTKeKTRWTi6KST+27IvaT6KvaGAaFs:Ap8fbvnnMYuN5awRJIyRx/Fs","tlshash":"42916941bae61ef0e7b9434e199eb401a7d3da0753f41e02769ccea687d10be4891ee1","size":4376,"data":"","first_seen":"2023-11-27T12:30:24Z","last_seen":"2026-05-12T12:11:56.618274Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","fqdn":"booking.mkp10-2.com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.222.42.74","port":443,"asn":3257,"as":"GTT Communications Inc.","country":"Spain","country_code":"ES"},"introduction_type":"Function","is_inline":false,"md5":"24ca5ed2c11dd1020a79255966e1d2ac","sha1":"627cc4d7042d03cba37a58f55d93cfa367861b69","sha256":"79f05179e1748659eba6bf0f115978158bbc666f2d0118dd921d6bbe4d984399","sha512":"127aa19e603490af7d19f1d9160e8c2027392185f69836106ea49b197ffedaec8f0da372bf7e992298431675c3cc2f0af095e5e4497c46d80f666e618fb7b30b","ssdeep":"","tlshash":"84b012583dd07833d33d26076073ce049c145912dc2ddd00b4609d4164d20257012d8c","size":95,"data":"","first_seen":"2023-07-18T15:04:14Z","last_seen":"2026-05-12T12:11:56.623915Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur3.otcdn.com/headers/components/compiled/prod/es6/customelements.mjs?v=1748355805","fqdn":"eur3.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3034e483e685deb6a70217811cca20c1","sha1":"779fb6f8ff3e5585a093680de2442b5489b5cb75","sha256":"c5b7a0ae69f008053f93f0d829f38872c96a17dfa015ea7bc34fe8aef027c255","sha512":"067fb6436e77c75ce5915ff7b4f471ec63f512f61ba2eec9648b8da3c71b6d5c8692a19ec44ec2a38493e97d0b83f265d6225cf061c4f86bc8ab71bf3161a193","ssdeep":"768:T4f08l0M/XUqk32y/SicIYJU2BSY1+G2BzboDPkHM:T4f08SM/XUqI2CSjJU2BSY1+GDPkHM","tlshash":"8c03f704725569725ee941d9913f2287b2217148981890fcba7cccfe37b8cc971abbf6","size":40778,"data":"","first_seen":"2025-06-28T23:09:08.272401Z","last_seen":"2026-05-12T12:11:56.60487Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking.mkp10-2.com-hotel.com/themes/ilussion/cross_domain_helper?xdm_e=https%3A%2F%2Fbooking.mkp10-2.com-hotel.com%2Fpublic%2Fwidget%2F291117%2F4106755428\u0026xdm_c=default2482\u0026xdm_p=4","fqdn":"booking.mkp10-2.com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.222.42.74","port":443,"asn":3257,"as":"GTT Communications Inc.","country":"Spain","country_code":"ES"},"introduction_type":"scriptElement","is_inline":true,"md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-05-15T15:17:23.788217Z","times_seen":202943,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"com-hotel.com/compiled/pb-default-template.js","fqdn":"com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.129.55.48","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"125ee738d6485fefe9a9908b572d4bcc","sha1":"ee33723c22a1d8b4194691faf3b525c7baa61d56","sha256":"409a118532983282df63a998ff9c1ec167ad1c0c125e3131d45d3fd8c2b47c92","sha512":"f74b8069fd3a5f08666c8675d193b11cf327a45904ee4b9ad37a1e73c72c18caf5b7965567c627bee6697e10fc7500a051ce32233ed11b88e200a1ae0109d007","ssdeep":"","tlshash":"80f0492d1050705c0777c6a1d86fb2673476036d6524e27d09b0fca839b2d7a26bbf94","size":643,"data":"","first_seen":"2023-07-16T11:29:18Z","last_seen":"2026-05-15T15:56:25.12825Z","times_seen":2584,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"com-hotel.com/","fqdn":"com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.129.55.48","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"56df0b40f23939251957b7e7442d578c","sha1":"606be956a4a28887786c444a98489699e91f5543","sha256":"d452afbdb8cf46cf180bc34e7c4377190823d904111d4a43c38c733483af80ed","sha512":"ecfda77735d3ef056709d092a44085131667eb3709042dae03baafe0d394b40252e60d8900cd3d0ff934fec7ec240f40774075ff31ec7e201301167473291e66","ssdeep":"","tlshash":"b6f0a7e9329b91d863f370b9ae6af5851833207f1dc1f900769c55444f9dd1992b7608","size":541,"data":"","first_seen":"2023-07-18T15:04:14Z","last_seen":"2026-05-09T06:32:58.648687Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"com-hotel.com/compiled/pb-f.js","fqdn":"com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.129.55.48","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"88e06cd2df5db88ee998da3a25526b1c","sha1":"bc0942ba7bfa5142fbbfbfa410ca7db352a8b324","sha256":"31cd6813e2334f65b37f1773ba1ced1b5539e72b4118277fab1e9fc4734c0f2a","sha512":"44ea4f0c264569ed5ee57d48f8f60737273c0b368b8f9dc1c4e765ef5115d032a861655d281aaa2ecbe4f62e4c7b8f4ab90f904bfd10b1d1aedabeea26bd1008","ssdeep":"1536:dIZ1hxMTS5Y4N0ljmeqEj06oidWzYZO5qYjawTW3Jny+09dA:dIZ1DMrjmeqEj06U57Li","tlshash":"bc430a093182616e4adf30fab8eb620e73b6956580495095b9fcd4d1bef8f4470a3f6c","size":60047,"data":"","first_seen":"2023-07-16T11:29:17Z","last_seen":"2026-05-15T15:56:25.16733Z","times_seen":2611,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","fqdn":"booking.mkp10-2.com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.222.42.74","port":443,"asn":3257,"as":"GTT Communications Inc.","country":"Spain","country_code":"ES"},"introduction_type":"scriptElement","is_inline":true,"md5":"761148c4c7fb1c965c92da27d54eb6c3","sha1":"5db2b031a0febd027b505b769d0785cccb78a5b7","sha256":"c4d3736fcdfc3b507e9c19258df9eb0a3d9c7210d532f29f402d2c02a22767e0","sha512":"4464d0a70ea5d28d7e217f9094bf75347a05b8c9788698f6e24bb6173e8a4b982bdccfc558607adee55954612379b601bc92bdf5be55137e78b96ad2019a6903","ssdeep":"","tlshash":"f890008822020c0000a0aa082f0eba88b0023022a0a0a8222e00a208a320c0baa80280","size":48,"data":"","first_seen":"2023-03-07T01:35:27Z","last_seen":"2026-05-15T07:48:21.57892Z","times_seen":4899,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur3.otcdn.com/headers/common/js/libraries/widgets/search/NightsScrollWidget/Renderers/SelectNights.js?v=1749489353","fqdn":"eur3.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"098e5dc7ae3df6899f83725e0c669dd5","sha1":"933cc72fdf5f1c3a3227b6884582bfe11f7efce3","sha256":"cc5e75b6503b2e61b47443a70b3ba7e32b0b7272c2bcbbf10ad69edc6e4a9b77","sha512":"2b2645edd5e2d7fe71f44d266d6f5eea687457e647f0f7931dcc6344b20c679a0365f76de59ec626445b8a0d444d78dd1c6a7e98480b8340bef20a669cd66194","ssdeep":"","tlshash":"e1c02284a6aeb81233de11e8c41fa46708b90b00b40c8080d962d2f1973b9acc23390e","size":194,"data":"","first_seen":"2023-03-13T20:32:43Z","last_seen":"2026-05-12T12:11:56.487072Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","fqdn":"booking.mkp10-2.com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.222.42.74","port":443,"asn":3257,"as":"GTT Communications Inc.","country":"Spain","country_code":"ES"},"introduction_type":"scriptElement","is_inline":true,"md5":"1ea7f17143289a37efd530f385864052","sha1":"f412aceb401606ebe635f4fd35fd22cefa79e9f2","sha256":"d4320736f61014a94152a391d72059b1b5beaf5d57d134f3194e3fe225fd6721","sha512":"7c401cea764e22d416cdd811c0dccfd374b5c7c0ef3833c31ea82a289ffde25499927c1e2ee117b11941c84949406a4bc2401fdd6f8bc4caf8d58926ab730f6c","ssdeep":"","tlshash":"3811b1a1908416f4e7046ebbe05cc9ccf52100092b4b9428ba1dd5664d58c3b77b9efe","size":964,"data":"","first_seen":"2025-06-28T23:09:08.33912Z","last_seen":"2025-09-21T13:22:40.745379Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","fqdn":"booking.mkp10-2.com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.222.42.74","port":443,"asn":3257,"as":"GTT Communications Inc.","country":"Spain","country_code":"ES"},"introduction_type":"Function","is_inline":false,"md5":"b01c4df2a1e0b64fea6158d2e10909c8","sha1":"6650805823e9ff083345227e14231ba22bb1e23e","sha256":"905ddfba59da5cf7d777641280b56b6c3b1873ef65774055f06e549bb8d02bdb","sha512":"45ced18e695c09d5e9e03737aac7e5aca2d3bb5da1858832ad06f9c75d2959c3f427bec53d945a7851bedae9e17ebd16b182602aede6d61501bdfb5105ac1c46","ssdeep":"","tlshash":"fb018e40b6e129709756974d11dab404e616490383f54a05776ccf675bc146d8942ee5","size":828,"data":"","first_seen":"2023-07-18T15:04:14Z","last_seen":"2026-05-12T12:11:56.619652Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"com-hotel.com/","fqdn":"com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.129.55.48","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"eb2a498d77a74680d0091d61650e26ac","sha1":"e1e72dfb51468696f19cd486c6c3fefce033419d","sha256":"5f7850b1c27b7b48028115e230891b4ec00986aacd9c9f8d4a6b1f66ad66637f","sha512":"e961387f4d780f0d0ebe5c1cd2782fe92338638088136c9e5da0027190c18d955030c8d6c1d86a929cbd123b23851d392460460cf0298d429ee993096767bc2a","ssdeep":"","tlshash":"4fb011aa20ab008000b330282a3b82803033302b3a00a8003a0c22800f0a82c2202008","size":93,"data":"","first_seen":"2023-07-16T11:29:18Z","last_seen":"2026-05-15T15:56:25.185192Z","times_seen":2590,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/common/js/libraries/widgets/search/NightsScrollWidget/Plugin.js?v=1749489354","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"14b693121095c5839ff049698c609da9","sha1":"b27fc11f441cf6f8c4270d82f231da97886f9be1","sha256":"aa96bd9778f881c66d76a081c7e73214a32c9dd9c0f07aa11a57baf523bd80ab","sha512":"cb9373a1f2baa45f2432d0c508e6a8ab4ab1eef56691212b126f3b2aa2b246c21251cec7fcba21953fd28de3d489943c73bbbb572407247cd3275e8cf7dfbc98","ssdeep":"","tlshash":"8e51545d7585771023cbb070c43f1b0b933b64a55a8dc008a64ae4e13fbdaae422bf2d","size":2505,"data":"","first_seen":"2023-03-13T20:32:42Z","last_seen":"2026-02-03T13:35:48.406379Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/vendor/jquery/plugins/jquery.cookie.min.js?v=1748355822","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d7171770443cc0f07dd7db3fba550465","sha1":"0af8b6b8c2547f1331755d468469b4375bce92f0","sha256":"d8efb1b57aa96405184e6993738285502155a46774221912887b5149463ec838","sha512":"25a59bff876d57be7f8552d206bf2fd1a286d0065ea3865263a76c956f4cdead6acb971a5e04c14654e94b17f658d3dead3c05740c068c1039192c22f2e57cc7","ssdeep":"","tlshash":"7d01cec434c9fc0929aa8b1b3be6449e70acab4848ec5869df4174e076305579fb5bb4","size":816,"data":"","first_seen":"2023-03-13T20:32:43Z","last_seen":"2026-05-12T12:11:56.595773Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/common/js/libraries/widgets/search/AdvancedSearchCriteriaWidget/Plugin.js?v=1749489333","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eff6452eaba908d527e1b7358778d7ad","sha1":"418c8f13a7219bfc1d382b2bb9773552bf121e37","sha256":"a838653e821edfcc9084e8affa5e408483250dec50a86173794eb6c07538dfdb","sha512":"8a748b396320a45c7f5db800c73487cf2298a4b469d7ebe8328b7e6e4ca3c6c8c6f14c0e0b6cf74a835ae05c77708332f647bfae76b49408e9124d69dfc52690","ssdeep":"","tlshash":"7941f406f1d938db1b6e51b4659f720a323b58dee401d81679b4e0d7d82269842e3b7c","size":2349,"data":"","first_seen":"2024-08-19T19:28:21.637925Z","last_seen":"2026-05-12T12:11:56.496186Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f24128d0c9cba7be2916c693427a3483","sha1":"1b6397d496ea896ebc2018b01b995cee4f166029","sha256":"58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8","sha512":"c4950733b44e258bbc817ce6396f002caec1e11a6413fd0038c9baef2d5f1d992b1fd0ec52515aba52faedb52c28b996a7fc063f28a0f45f3aab5e2f91bf5be5","ssdeep":"96:A1VdZYqhPnjpWx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBfQPfCHiUr3:AXdZYqNjpU4yPqSMbqaQGL2QfdDayCZC","tlshash":"a6a1dc9939fb50210233b1bd1bafa918b23895236208dd61b98c9364bf94437d7f1fc9","size":4691,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-05-15T15:20:14.037086Z","times_seen":876844,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"com-hotel.com/compiled/c-home-company-default-template.js","fqdn":"com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.129.55.48","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"a057cc4b2c9f9b6827977d3e7df67dab","sha1":"6159e93c963343ca6464f5a8a058419de212a0fa","sha256":"ce10aa08344fd949fbe3aefe98bb2c96683c8b01a364646f1894214a701ecde9","sha512":"000b9f12af07f2b83800adca37ef50b597fbe5c4076fb51eba74b831bc41c73ac180c27fa56820909299018d7687545bf8229bd5947c5ce0e7cad7622c8bdba0","ssdeep":"96:FhOZu4v3tbs+V8GeJgLcidC4IDc9f4QK2gelbBBgWTReD:z0FFQHJyW4yLnelbBy1","tlshash":"86a150c67a4454a3f2db2c3a027faa95257375bfdc86ad85540258a14ab98cf2333bc4","size":4723,"data":"","first_seen":"2023-07-18T15:04:15Z","last_seen":"2026-05-09T06:32:58.629868Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"com-hotel.com/compiled/pp-home-company-default-template.js","fqdn":"com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.129.55.48","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"d7522bfb67ceff32bbd738c21ff9c3b2","sha1":"6de9425d4e2544ef24253da501192be999befd13","sha256":"23bb32f15f3208fd5cea91b20ca36cf0a7c603e2acec8193ee02f455a67614af","sha512":"f0fba6d804035e87260a31b28324550466280e296a0a3576ded8e1a1bbda1e70b06dac9b3c298d4111c7485befade097eaf75b9939bf7372fa1e6511d3a66512","ssdeep":"768:ub8qCDgkwozV0g5pDyQL+jdpGo41J7KGBxvy0Ihka0Ih2lh5aJaGQDdy/6:u3Cjwozz5NXodGBxXaJaRDt","tlshash":"9803f8997045255582fb91b5001727037733e9790c8a443cbd7cfadaa9b8e1a60befbc","size":38393,"data":"","first_seen":"2023-07-18T15:04:14Z","last_seen":"2026-05-09T06:32:58.615723Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"com-hotel.com/","fqdn":"com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.129.55.48","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"b75e361a84fe84a710eca42dff5f327d","sha1":"098d391c7e333766faa6e43a2a9d235dfd82f878","sha256":"c687aa4f2bc70a0ebe5ea46dd1a9167c3825cdaed6f47bee0fc905ba32d6b961","sha512":"c1e40e06d2020647ccba40f5a872fe7995b1da3de2e9e9246fd7e0d8a493333fcd20416419b8769f1b554b451ea55c6ce0b5f2c3c10d176067bfaf8ce086e745","ssdeep":"","tlshash":"92b011ae20ab808022b332282a3b82803033302b3a08a8003a0c22800f0a22c020220c","size":98,"data":"","first_seen":"2023-07-16T11:29:18Z","last_seen":"2026-05-15T15:56:25.185776Z","times_seen":2586,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-RRL6TC2WHG\u0026cx=c\u0026gtm=457e58d1za200\u0026tag_exp=101509157~103116026~103200004~103233427~104684208~104684211~105033763~105033765~105103161~105103163~105231383~105231385","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1129fe9abdf32f7e552931cbc0625773","sha1":"f3403ef82740d03d36fbd5613ebb40fa150f3be6","sha256":"dcd9654b1a5b9b2c208e6b994bf4a11e21239e8897bafd8f9abeee810aaf2b2d","sha512":"d10f8015a468ba1a99cd44018bbbda03856a79274aed9b884691dd45e93aa7b93aa8be7664cb0162c8b29cc3ef0fe1680ffa9ce2a4316373b3f7f81a77a57daa","ssdeep":"3072:Mx3JVg61JLwDPLzA2dzT0SL5DUSb5qlUmxxgJgJ471MSXw1PMqaW/uSoTQtF021l:QmLLzA2ddtIxgwhqW/uSoTuFHlKPDQv","tlshash":"1b7429cd73d670629392b478503f018bb17b28a2f44cc899f186c9e52e74a9a5277f7c","size":351052,"data":"","first_seen":"2025-08-15T16:26:55.723578Z","last_seen":"2025-08-15T16:26:55.723578Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","fqdn":"booking.mkp10-2.com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.222.42.74","port":443,"asn":3257,"as":"GTT Communications Inc.","country":"Spain","country_code":"ES"},"introduction_type":"scriptElement","is_inline":true,"md5":"211af4c3758ecff0dccce69f134cda05","sha1":"0e51435724abd594300a9f3a12db5a37e82096db","sha256":"6cd663f8d9f218636e079e00eebeb6ca8544bc1a26a88cc41bd08227caa5ddcc","sha512":"41fd7e389a418fc8daca575c8ba88cdcfc8b74f361e8aa19164482247f3132ec555ecad27c6cb0123dd1819777a7ce8a0ffc5e9bc64fbe9071eba37b1d6b3966","ssdeep":"","tlshash":"13f0c2499cfa34630a2b345c088e50003a02a157164d6f683e7d62dccf0837e0650b0c","size":447,"data":"","first_seen":"2023-07-18T15:04:14Z","last_seen":"2025-09-12T10:22:10.571579Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","fqdn":"booking.mkp10-2.com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.222.42.74","port":443,"asn":3257,"as":"GTT Communications Inc.","country":"Spain","country_code":"ES"},"introduction_type":"scriptElement","is_inline":true,"md5":"c98848ca31c9ae5cf6452992df4af303","sha1":"6e5a07d3837a3467941cd214cc4080d987de886f","sha256":"86055a9c290b99aca81be18288ccb9c75645f152642bbf6f9acfe1f8e13b5650","sha512":"bad45e37c6336ed1da5f2ef28eb5f11115127a6bc59d6c875ec04a150bd5eeb85dadf81ed7263e70bcb6ed3e4929dd24f617f15cb512ab953b94dc834d698a08","ssdeep":"","tlshash":"72f0920936f2542150e375ad1b9f7a05342753cb808ace403e0cbac0ef6402b9a727ea","size":464,"data":"","first_seen":"2023-07-18T15:04:15Z","last_seen":"2025-11-09T04:05:22.24584Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/common/js/libraries/widgets/search/JourneyLocationWidget/Plugin.js?v=1749489344","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6d539119d1974ee196edd2963a264ae8","sha1":"5bafba66ed304d7950422a1216723e37b1d80b8e","sha256":"6a43d8553772203e45c7e02cce464bf04fa5b87b48c9a612056d485d7ef16442","sha512":"ef55f1934be70a55d2fba6aa907e5e248179c6fba9a67b3ba52bf65c177bf9440370c69faefc74288c4211d600b97b7ba97757e544af3d3bfbe37e4ab347801a","ssdeep":"192:xmfsmM/gl8o8Er+N34rsknr+L7kFBaRa5O96QNqa8y10S:RmM4liAr0b9Vqa8y1t","tlshash":"79d124c7f694941283ffa197dc2a6301a1339aefa550989ce828e4f55530b4ecb37f58","size":6647,"data":"","first_seen":"2025-06-28T23:09:08.238254Z","last_seen":"2026-05-12T12:11:56.591061Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f24128d0c9cba7be2916c693427a3483","sha1":"1b6397d496ea896ebc2018b01b995cee4f166029","sha256":"58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8","sha512":"c4950733b44e258bbc817ce6396f002caec1e11a6413fd0038c9baef2d5f1d992b1fd0ec52515aba52faedb52c28b996a7fc063f28a0f45f3aab5e2f91bf5be5","ssdeep":"96:A1VdZYqhPnjpWx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBfQPfCHiUr3:AXdZYqNjpU4yPqSMbqaQGL2QfdDayCZC","tlshash":"a6a1dc9939fb50210233b1bd1bafa918b23895236208dd61b98c9364bf94437d7f1fc9","size":4691,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-05-15T15:20:14.037086Z","times_seen":876844,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/common/js/libraries/util/StringAlternativesGenerator.js?v=1749489456","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2364fe768913159161696d55bb62ccc0","sha1":"2642abee0065424d12cd1c68cd853d0357d2a463","sha256":"25a66c07596ea931b9ef3ae5df1f7305725ea8e53a34c4a82024bb7e6d0d602b","sha512":"cd92ac0d6fd958ee89275c4b62968be7e3da84bac935a83394af486b14e54e3b86a00b9e0aff6557841859b3ddef9bff9640f284fdfdeb7a0e609a81e2c4e815","ssdeep":"96:ZFpF2V1mlPcuqJEc/W6C4upbJAI20/Wj9IbIwtYHiDIRIT59KPikmYkh+x/kW6HY:3jOCSJrtwIgTrYkh+x/kW6HujHy1YLn","tlshash":"1302ef3d9787b70e118f3a8114f15c2f22bab736316b7906d8550d44a29a3877bee78c","size":8529,"data":"","first_seen":"2023-03-13T20:32:43Z","last_seen":"2026-05-12T12:11:56.497257Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","fqdn":"booking.mkp10-2.com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.222.42.74","port":443,"asn":3257,"as":"GTT Communications Inc.","country":"Spain","country_code":"ES"},"introduction_type":"Function","is_inline":false,"md5":"97a2ad05e798572c9ee05f589744275f","sha1":"1708b38cd47a64f2596f5c569222b2a10891699b","sha256":"aedd0a2368e67bc3309538e5de734f9a389958048c9e0a23086461f28e19ec03","sha512":"1394ed6963feaafc70f8db3ce4cb25752fadaa7c010b182c8c273bb064995d70ae9273838cace924eb21189bf659b141e0dcfc80cc80d0f8a0d7d59203cd3526","ssdeep":"","tlshash":"2a514246b6e626b0e366c36815db7401aa53ea1393f84f06735cca7247e04b95a42cf1","size":2562,"data":"","first_seen":"2025-06-28T23:09:08.350104Z","last_seen":"2025-12-16T17:35:04.720133Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-133452114-6","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1a78a7e8cf1852d337605691984868ed","sha1":"cdc57815a44180356506b383ca05e0c075a4c448","sha256":"2f06d0440f2b61c96e3b9bf8b942721d477e81756a7936e700dd17a2703f3fa1","sha512":"5090867c44db401144a32db03390047d59ad17c0ca0aaf5d12fe1a2cd01172db36c939140e5d2628624c536840e9c737f4eb3ae7f885d04632986be16bf189f0","ssdeep":"6144:G17moFWTCBCyGLHUIkpDG1OIambWeQ3LU0Ff:a7mOVBCyGLHUJhn3jl","tlshash":"ce54f7cd73d6b4228393a478503f014bb23b6992f84cd894f186c9d52e74aaa4277f7d","size":293249,"data":"","first_seen":"2025-08-15T16:26:55.737067Z","last_seen":"2025-08-15T16:26:55.737067Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"com-hotel.com/sandbox%20eval%20code","fqdn":"com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"92b651082ce234f66bb544e678befda3","sha1":"14c21c55ddce43b6f677caadf51d4ab98c6a3df8","sha256":"25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded","sha512":"b4fcbc037e0a3d91db2a624921e96b878e9e18dd998ad5649d77d7d053faf28b09c8725a0542aef702310bf85f3037b70985c274db8acabd021efb171d41f361","ssdeep":"","tlshash":"34c08ca3e74026ae2a1166b2b810e003a2866b015aa78402b00a003b1441fe21aaa1a8","size":147,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-05-15T15:20:14.035685Z","times_seen":878509,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/common/js/RequestManager.js?v=1749489289","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a0380643c205ca91cce346a53c0ba726","sha1":"6564e0405bf4f61b282579bf85bde8db3be52b81","sha256":"da29df2f5101167a8bba68e418255782f2f30a94895dda5de9769dabb7413798","sha512":"97d2deac291319d96ecd3d9c32f44595d0d5026cdba6e0ea73fa1276db1a0595ed2ca5f05efcd2306cb1c1a264afee6b15ff6115cf757c939103b9454c1fd522","ssdeep":"","tlshash":"3521b10b23596d77c519241bee36f703612f51d3b9804037b91475ed9d36216c2d366e","size":1373,"data":"","first_seen":"2023-03-13T20:32:43Z","last_seen":"2026-05-12T12:11:56.587824Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur3.otcdn.com/headers/common/js/libraries/Class.js?v=1749489511","fqdn":"eur3.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e8c253eea6bbddee5f293d0060f06adf","sha1":"6bd2c15fb2052b756d8b63c349525c0b3bd2404d","sha256":"6217f92427bb011a824f08dacc49b656bc1539f5a6d166cda78a558c91152452","sha512":"5aee182e348a0713d75fe64947a772e663ee1c131acd35193b0b32afa1d68f2f9921c32bd0174f3b13b68880de32f7904e50f93c2dc1deb542fbca6052f75651","ssdeep":"","tlshash":"47f02b8e76a370f6822ba166017f410a263b75b5d5cc8108b5a0d4e828f99180622f3d","size":539,"data":"","first_seen":"2023-03-13T20:32:42Z","last_seen":"2026-05-12T12:11:56.597742Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/common/js/libraries/widgets/search/JourneyLocationAndDateScrollWidget/Plugin.js?v=1748355805","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0adf661e268879d83f61181af2af9b17","sha1":"650abef1c3a33cd7bd10973dc9a8344ff83cbb03","sha256":"b84d3af84ee87879de97d04ca63d390a2dcdaf977a668acbf52d3c56c74e86c7","sha512":"7c32da35d4c42dda1c9d7a04ab88f40878b12dbcead9d69f55acef2ed7d27138e38a95f841070bdd80bc32c4ba9ffbead4bff9bead791796dc6bd32d191723c3","ssdeep":"192:ePWPYJCFr6g2Nu6+wVXMRa7GjY3CPml+Z8XxCvWT3+mIK9ryr0MCQvS+UJNPyURI:dSg8ujQzB+N2lPZRDOf","tlshash":"f842ec49a9fa1550576b303a8e6f52017621844f098ffe447d2cf7940f849b986fefe8","size":12892,"data":"","first_seen":"2023-03-13T20:32:43Z","last_seen":"2026-05-12T12:11:56.601247Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","fqdn":"booking.mkp10-2.com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.222.42.74","port":443,"asn":3257,"as":"GTT Communications Inc.","country":"Spain","country_code":"ES"},"introduction_type":"scriptElement","is_inline":true,"md5":"2ff07b867a7faed3d1e55c0251d0d3cf","sha1":"9606105f13f4a36af3457354b71a3966eb962e4e","sha256":"8bfd9a8f376b34b7d1e4f1f22e48c6e7e36b48f0990bea7834968e98ab2aa3a3","sha512":"e87b2b017bb05393d59b9a6ddd8db2285932d4f03e68c591a3f11d03c530bae88cd9605b059dc6d76c07e845589ff175d38f951ad56c9dab66653ee447c553ed","ssdeep":"192:CEQLlOHMeKyM69OyLK5U0nFwvSR7GxkMNJmwVSw60Y2omp3Os9Thxh:CzLlTDkLK5UqFwvSRBAmw43bs9Td","tlshash":"cd02780a273077bcdacb29ec78e63e145467b025311c989a9ad763e490e8fad707d07d","size":8963,"data":"","first_seen":"2025-08-15T16:26:55.794446Z","last_seen":"2025-08-15T16:26:55.794446Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur4.otcdn.com/headers/ac/il_cd/il_cd_eb1bf117ce1f7b430a294cb622ee3f2f_20250609_191844.js","fqdn":"eur4.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a7e11ca597d2f9de4f7601d0a38fd7b7","sha1":"61ddbb37320bb8fc8eb20fba03e1e86c8d4f81be","sha256":"39f152afdcf6f11d5ffabe73ec4924fbf2a08245c87ebd1317905b18772b68c1","sha512":"15c9a43115b0f9323c025e87a235f60e8e806de05e29c064c6bb26e4e27fb5c933c500933cc7ca4f5af5d6394ae99f03efa644546dce79d330fa6e8527410bc5","ssdeep":"384:2C3RzmfWoaeBFf22PmnvJNZz/dZ3xyIk6KBuc15fs3IC/3lUIl5vA8fBuqSV+8Km:DQqKqBb3rUw5QGBO5Tph2Bk4c","tlshash":"33e2e689b3a1623556d3207874af3608b37d9152742cc970d193e0e87e7ca8e4a37fad","size":33642,"data":"","first_seen":"2025-03-11T12:09:34.766649Z","last_seen":"2025-08-15T16:26:55.665145Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"com-hotel.com/sandbox%20eval%20code","fqdn":"com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"92b651082ce234f66bb544e678befda3","sha1":"14c21c55ddce43b6f677caadf51d4ab98c6a3df8","sha256":"25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded","sha512":"b4fcbc037e0a3d91db2a624921e96b878e9e18dd998ad5649d77d7d053faf28b09c8725a0542aef702310bf85f3037b70985c274db8acabd021efb171d41f361","ssdeep":"","tlshash":"34c08ca3e74026ae2a1166b2b810e003a2866b015aa78402b00a003b1441fe21aaa1a8","size":147,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-05-15T15:20:14.035685Z","times_seen":878509,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"com-hotel.com/","fqdn":"com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.129.55.48","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"d27d26d7f97055785e08ade4a34d2e05","sha1":"f6cd4fa09f091e5eaa0f6341178d9836c4c5186c","sha256":"de081849e2acd8d3fa836c304da45694f1de93e43cb43bfb936a1503aeabf0c2","sha512":"6c551582b9d938a38a4a9ad225093a658e2aa32e77f96def5f2d9e8c07444663d62f6ce4b2a421f05597d686bd0f4b9e1e824b7f3f39fc4c4cad55bfa1174999","ssdeep":"","tlshash":"52f0925d155f5cb150bb1e0acb5fe850741f2213da95ed103e9e9308af60a1b8230e14","size":635,"data":"","first_seen":"2023-07-18T15:04:15Z","last_seen":"2026-03-10T11:37:27.555229Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/common/js/libraries/widgets/search/RadioButtonGroupWidget/Plugin.js?v=1749489350","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"384c13dac612b0f936483b7314814d69","sha1":"5bef1a7b9f8b81b51e8bcff2849ab092fd1cff9b","sha256":"1b3fc63c1b4fbacd9ea88ae1391e064eb1b6c8f65abc0e63a173bbe7b5738551","sha512":"57dadd7d357688cca7f35446792ee6a9e4d7851f48258517e82bc064af0f869e9352b40e3ed9ece0f0970bb012c74565a9c8899c3f5e42f8ef75620c8d15ca69","ssdeep":"","tlshash":"d031e285f2ab385a43ad7830553f674593690dead58878989d20f0f3e970f428e32f6d","size":1828,"data":"","first_seen":"2025-06-28T23:09:08.1304Z","last_seen":"2026-05-12T12:11:56.532381Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/ilusion/common/js/Login.js?v=1748355810","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ae2f3ff85f93ae8385e699fda90de71","sha1":"eae494a90b9f7beb333f6ea0009aa1066f64653d","sha256":"18c5085bbb08d704c463a70c705b52e4870b0b90e430a6a236a3e9f1cafbb87a","sha512":"522bf11566ad19a9e680f5e303f3de5f5062235bd4c6bc143d56403fa370af648833f9149137d15614bb2050b45724b714c5c309ffbfe68dc1d46fb2fec967bf","ssdeep":"","tlshash":"9931bb0c35b2117611a3635c933fa715aa1a6103800ec915ba7f769d8fa19b464b7a6c","size":1552,"data":"","first_seen":"2023-03-13T20:32:42Z","last_seen":"2026-05-12T12:11:56.494074Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/ilusion/common/js/MultiLogin.js?v=1748355810","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d07a0d616a7e0c7e619612b2763929e0","sha1":"397cc8aa1aa7f566bfa222a75dd20019f2bb10ea","sha256":"c6ff6d834d3ab59f79640132d0db152f21f2347f136b5f1a8496ef9495128c78","sha512":"d2f622d2794709617d74082189023a1c13bfed17be31e6f1d87269ac4713d8a6928d41007380cc3373532da3e5cb7ced8c35e1839887582cec4e6f16dbd1ff65","ssdeep":"192:AEzdr4c9cLifZHog9id2qTBkYgmkiFwjSCyUa:E4NlK9t/","tlshash":"44e1f94c69f66d6240737069a3af60c8717a8513090dee18bd1c7390df9c23aa6b6fdc","size":7135,"data":"","first_seen":"2023-03-13T20:32:43Z","last_seen":"2025-08-15T16:26:55.691397Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur4.otcdn.com/headers/ac/illmagallanes/illmagallanes_de8307de38c60eab96b956b2fb141926_20250617_151012.js","fqdn":"eur4.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9c2ae1ef1433cc41f4c4467329431514","sha1":"0c524e16a72a31e7ff6ab5f4ebba7760604bbadb","sha256":"805be053a29ea0bd95daca4415c3dbddda3c5bf8f63c7aaee83096c695b30648","sha512":"e2a51ee93365acca2714f893fe7852e6b252b0233ddffbfb5e8fd139f80e9106a9033b3156a1be5e4713122b9769494c5f8dcea0d54a200bcb10e5e03e99edd3","ssdeep":"","tlshash":"26119e00ba35a51a137723edb11f580be52a2c7f4bbcace1a394cdf5587424e0449b5b","size":1000,"data":"","first_seen":"2025-06-07T23:58:43.426148Z","last_seen":"2026-05-15T09:45:49.886119Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/vendor/flatpickr-4.6.9/flatpickr.min.js?v=1748355821","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6487402724b80c2a7e2daba0fc865806","sha1":"c1cf69d33f4bf5d8d13a0359f0d71d75da22e247","sha256":"59a7aea615babde6242881e75891e10c9fa9364ef39cd7c047be18e04795df66","sha512":"78ac74bd5665eb72c62ec6be35d5c0940a3c89a7b4c04b2c0cc7500a8a5eee562bb630a24207c85fcbe337b76ad1fe587a2e4d96f399148cd5f73e932ddc9f5c","ssdeep":"","tlshash":"e211e146391094c74af2085d09bf4207a4344a7f6d4c9c41a2b0fdf578e4d9649bdb9a","size":1000,"data":"","first_seen":"2025-07-08T20:51:29.918178Z","last_seen":"2026-05-09T13:20:30.365942Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/common/js/libraries/widgets/search/LocationWidget/Plugin.js?v=1751267413","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c1d61315b58e2fe298d9a71998e076e","sha1":"4b7be209e349b1fdfd5e023bd461b071707cd5f2","sha256":"f3ff6108ae4ff9781962bffdb6430067d632b4b428e4af6d5eb85e499c91835e","sha512":"a84110a23fc8094825c3f42593c7e360354bb239c3a6651295031a76a95319cc7f0d792102a009a6192ae4476d676b41d1730f6f895c933289c2b4959ca77f2d","ssdeep":"192:wBmZz9KCSyTuCyEFmnmmkYChlKkMR4K6VBeRahMtdAvPE5Sk41oH6QykZUSQy4DG:NBpgkYC5PEHl25i2xPgqX4V73u98","tlshash":"3ad22b496af72042826b74be8fdf2205663a444b944cdd01bd2c92905f84b7d5bfafe8","size":30220,"data":"","first_seen":"2025-08-04T23:34:46.839961Z","last_seen":"2025-08-15T16:26:55.735504Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/common/js/libraries/widgets/transport/search/TransportFlightSearcherWidget/Plugin.js?v=1749489366","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9eefb18b1ef798ecb6871fca8a3179f2","sha1":"6f33f9e576949258c270059598196396c1b7489b","sha256":"9f54e2c3b99c0e2729136f06c655b5adf7c313dd5af1fde1f220db0f1b484177","sha512":"956e10f2a5e4504e25bbd8efa6dcea8e9fa97d5ee7a4022b3224fe2036849752f8d10857156a0259efc57f73a1a18aedc33e18a8167405f8538207ea0a91aa46","ssdeep":"192:xvPt4PfxkTAaA+6d/R8mGPcd4yo5vDDdDFSvRa2Eb7I8kx+x5/:4P7Cv5L6ZS","tlshash":"dd323d8ab3a83c9642ff507b492b7201623588ffd682d99d5e79b1b518788c85337f31","size":11087,"data":"","first_seen":"2024-08-19T19:28:21.502549Z","last_seen":"2025-10-11T14:06:36.248445Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"static11.com-hotel.com/uploads/company/129/photo/hotels-resorts-1_1587640316.jpeg","fqdn":"static11.com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"104.26.3.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://com-hotel.com/","date":"2025-08-15T16:26:13.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-hotel.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 23 Jul 2025 18:54:03 GMT","end":"Tue, 21 Oct 2025 19:53:48 GMT"},"fingerprint":{"sha1":"EA:55:3C:55:09:75:23:AE:89:4A:FE:4F:11:E7:BA:EC:D6:B2:09:A2","sha256":"B7:68:47:73:B1:DF:BE:D9:C7:0A:24:C4:86:09:05:40:A0:C2:62:36:56:46:E5:73:3B:65:9B:A0:48:33:A5:41"}}},"request":{"raw":"GET /uploads/company/129/photo/hotels-resorts-1_1587640316.jpeg HTTP/1.1\r\nHost: static11.com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://com-hotel.com/\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:13 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 911030\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=exUM6yzTjrtSBKYubf7aDKheDnWKhBbFyL25L5igtIxRzLlUmTFB%2B%2F1cSYeeOXLplFx6aqY95usvVXta3ZG2JHlscsuObZKmUCFgbyfk7S5jLhbfqA%3D%3D\"}]}\r\ncache-control: max-age=31104000\r\ncf-bgj: imgq:100,h2pri\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-polished: origSize=1022409\r\netag: \"f99c9-5a3f3511cedb3\"\r\nexpires: Thu, 25 Jun 2026 18:32:55 GMT\r\nlast-modified: Thu, 23 Apr 2020 11:11:56 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: sameorigin\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: HIT\r\nage: 2006464\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncf-ray: 96fa0d6c2f543131-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":911030,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], progressive, precision 8, 1920x892, components 3","md5":"862c550048ac424c3e34da2564012205","sha1":"838f822a98e426cac95874b8154563dd8275ab78","sha256":"6f9d2c5bc280b96cdfddcc37192e30f6b3bca0d6fb83c7b0f301fd35f36cff4a","sha512":"00638e9798a21bd170c1d80ee66aa2053a0ab6ad0dfc2c8158bdb69b206eef77c8dde505f55b738a22fe1ce13d8a743be54f77aaba4b8213388a814fe820de4f","ssdeep":"24576:o89Niwgh8giLQ6JtHFc5brv/qWHw+jksN:mX6JtlcVr/qSwSk8","tlshash":"6e1523c5814b24f9edae8c0b5ea9a1cf613bfdec1e61ea26d6361c789643f004e17c51","first_seen":"2023-07-18T15:04:15Z","last_seen":"2026-03-10T11:37:27.505899Z","times_seen":11,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":56,"dns":31,"connect":10,"send":0,"wait":26,"receive":135,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur1.otcdn.com/headers/common/js/libraries/jquery.autocomplete/jquery.autocomplete.css?v=1749491714","fqdn":"eur1.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:15.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/common/js/libraries/jquery.autocomplete/jquery.autocomplete.css?v=1749491714 HTTP/1.1\r\nHost: eur1.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 09 Jun 2025 17:55:14 GMT\r\netag: \"68472002-4a1\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000, must-revalidate, proxy-revalidate\r\npragma: public\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: HIT\r\nage: 2019744\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k9%2FEOJLqmJs3rkiXd32O8kvkTum%2BF5zwJbdz%2BIwnGWBB%2BjcxrHuxH1C%2F%2F6KgO4OFrcD2JZkNnpCA5yeFjSOLxsu1iQtLujCROGQq2SM%3D\"}]}\r\ncf-ray: 96fa0d757a7d49b7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1185,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1185), with no line terminators","md5":"630183ba5ae1dde66735028cbabdb595","sha1":"b0f5a21902660fc41653e1a34df595355eb03621","sha256":"2a99197fce33bd5bec04b8c61accde3bfd1339080e4f48167308ff376207b959","sha512":"0ecd4d46d6c2badbf88b4d54438f5f7ac264629c05c8ece603d997471cbae58670011fdc9c975018899071b28d34c320b003a76bc02fe957df8694cb37cad0b6","ssdeep":"","tlshash":"9521f114b7c7241f762b8017f4e232dc282c9c52b3050bac5c5c7275a18d5ad643a7ed","first_seen":"2025-06-28T23:09:08.019588Z","last_seen":"2025-12-02T04:58:57.262655Z","times_seen":9,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":71,"dns":1,"connect":11,"send":0,"wait":29,"receive":0,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/vendor/jalaali-js-1.2.3/jalaali.min.js?v=1748355821","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:15.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/vendor/jalaali-js-1.2.3/jalaali.min.js?v=1748355821 HTTP/1.1\r\nHost: eur2.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2773\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 27 May 2025 14:23:41 GMT\r\netag: \"6835caed-ad5\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000, must-revalidate, proxy-revalidate\r\npragma: public\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: HIT\r\nage: 3330008\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BhKgJt4ibkKkM1fYx%2FTAVRJ4AlvjV%2FyTFgX%2FHta%2BkD4ny1G3k6afcfHV%2FfGlBIy57ZiZons6q6V%2FtuOBSmyCeN55YX4JpOlmMLNP9fc%3D\"}]}\r\ncf-ray: 96fa0d759aeb49b7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2773,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2773), with no line terminators","md5":"3740cceffc7577222133e9eb34b447a1","sha1":"bc18d95838d52a2d88c19c577a672281c956993b","sha256":"64800f3c19ffaf28789f1517fe2fe3554adc89ce8e53c6e77b9f7b7680e9aa2d","sha512":"ec76b08c074782056040c4e7d319926f1be9077e732a1b650f3d03f93a47048e2340e88e8b1ced378e9ac066fec85e6a93a9786a564706fe79a6144aaec01008","ssdeep":"","tlshash":"865182cd36e1f4429327a5fac05fa04bb1b4a9b6554c8d01c78dc1f83d345a98b27e48","first_seen":"2023-03-13T20:32:43Z","last_seen":"2026-05-12T12:11:56.61175Z","times_seen":23,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/vendor/flatpickr-4.6.9/flatpickr.min.js?v=1748355821","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:15.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/vendor/flatpickr-4.6.9/flatpickr.min.js?v=1748355821 HTTP/1.1\r\nHost: eur2.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 27 May 2025 14:23:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6835caed-c2bb\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000, must-revalidate, proxy-revalidate\r\npragma: public\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: HIT\r\nage: 2371137\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WqJcvTQX6e7aVlzAGIQX%2B1pIYPcpxQMfMyb5IJ0Wvd59VmlPUQeqPZfX4aV95SktS%2FAxgVSu8b6sJqm4QVIFjXEnQvfYjCRiDsQEUJQ%3D\"}]}\r\ncf-ray: 96fa0d75aafd49b7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49851,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (49813)","md5":"3aadb3c0d3dae699686caf1ba350b20e","sha1":"b9a2df559d43720c3018f709b372bbec3d71e3d8","sha256":"c4b517fc5a0582a861d13d707803ba51d1f971f2f7575b0ad628823043f34aa6","sha512":"d15e3a906e15eb526fb410cefa93297ee3c91fb14812c564e131e180a05ab46bb563134a877fb7e86ad6beb33bef41f88e4dcef70469a2c173e814ef56fdff37","ssdeep":"1536:zahhtKUyRx0IQNio6So1Kf8U5ogYweue/WRuGsrwIXYdxmA:zAvyRirN5ogwGcY","tlshash":"2123d64b391c3933529a78acc4af021abf301fe648c75450b55ff1142ebad86927efa5","first_seen":"2023-03-13T20:32:43Z","last_seen":"2026-05-12T12:11:56.605635Z","times_seen":23,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking.mkp10-2.com-hotel.com/themes/ilussion/cross_domain_helper?xdm_e=https%3A%2F%2Fbooking.mkp10-2.com-hotel.com%2Fpublic%2Fwidget%2F291117%2F4106755428\u0026xdm_c=default2482\u0026xdm_p=4","fqdn":"booking.mkp10-2.com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.222.42.74","port":443,"asn":3257,"as":"GTT Communications Inc.","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:17.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booking.mkp10-2.com-hotel.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 15:29:42 GMT","end":"Sat, 25 Oct 2025 15:29:41 GMT"},"fingerprint":{"sha1":"57:68:C3:79:2F:35:9C:F6:B6:43:DA:EE:68:C6:38:20:F8:16:92:45","sha256":"39:40:E7:DD:A6:26:78:27:3D:A3:E2:98:35:0A:FD:32:DB:0E:0C:90:48:84:D3:3C:1B:F3:9B:69:9B:F3:C5:94"}}},"request":{"raw":"GET /themes/ilussion/cross_domain_helper?xdm_e=https%3A%2F%2Fbooking.mkp10-2.com-hotel.com%2Fpublic%2Fwidget%2F291117%2F4106755428\u0026xdm_c=default2482\u0026xdm_p=4 HTTP/1.1\r\nHost: booking.mkp10-2.com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173; _ga_RRL6TC2WHG=GS2.1.s1755275174$o1$g0$t1755275174$j60$l0$h0; _ga_VSVH2X36Y6=GS2.1.s1755275174$o1$g0$t1755275174$j60$l0$h0; brand=30389; mkt_pref=YToxOntzOjEwOiJ0cmFja3BhcmFtIjtzOjM4OiJhJTNBMCUzQSU3QiU3RERBVEFfU0VQQVJBVE9SNDE4OTAyMDk3NyI7fQ%3D%3D; info_localizacion=30169%2Fno%2FNOK%2F; _upfs=eyJtYXJrZXRfaWQiOjM5LCJsYW5nXzM5Ijoibm8ifQ%3D%3D; remite=olt_bookingmkp10-2com-hotel%2Ftrack_portal\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 15 Aug 2025 16:26:17 GMT\r\nServer: Apache\r\nSet-Cookie: user_language=no; expires=Mon, 29 Sep 2025 16:26:17 GMT; Max-Age=3888000; path=/; domain=.destinia.co.no; secure; HttpOnly\r\nCache-Control: private, no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0\r\nX-Server: WHVrNmdsdkJjRFZETWFLSlFaamRwQT09Og6QtPhcl+PXNLhB5oIHc9g=\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 2973\r\nContent-Type: text/html; charset=UTF-8\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5272,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (4903)","md5":"1010a5d9b9c509ac439e76bf1bb103a3","sha1":"a92d75b8abdbe732411bee69b3e7da1a7eec9e3a","sha256":"c10325c061eb257509b5f448f69b952dcf9361e1f2fe1c4e09b8bed00200a78a","sha512":"21690a4f8a9681266c687c54c50f1ba6121ba1de81ee8f7f523b097af329c05ddae7d0ffc5438956f4310d5b3043eab992d05022dd4e0500d6869a0e6c8fca4b","ssdeep":"96:O0vUvOc2C4o4Jp78Lzmnp4HHMqcQEuUNsmEcRLTMUomVdQGlNBYswoCY8EPYlvi3:PRC4bngmCHH/Ksm1BMqVdQGasicPo0","tlshash":"26b11b949fdb09e890d181987e60bee51e63385fe1c6edc7c400f9c114a66fa3e4b01b","first_seen":"2025-08-15T16:26:55.638246Z","last_seen":"2025-08-15T16:26:55.638246Z","times_seen":1,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":152,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur3.otcdn.com/headers/common/js/libraries/Class.js?v=1749489511","fqdn":"eur3.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:15.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/common/js/libraries/Class.js?v=1749489511 HTTP/1.1\r\nHost: eur3.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 539\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 09 Jun 2025 17:18:31 GMT\r\netag: \"68471767-21b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000, must-revalidate, proxy-revalidate\r\npragma: public\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: HIT\r\nage: 650543\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OfpPWgEOG9sbYictielmTwqgajtyQvH4nzh6kbnF6rAAzZrOyEfH%2Ff6VeBNMTE7A9v75McqGb00goTsjqjQ1spP%2FpVBRwSiMP%2BSZ1oQ%3D\"}]}\r\ncf-ray: 96fa0d756a5349b7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":539,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (539), with no line terminators","md5":"e8c253eea6bbddee5f293d0060f06adf","sha1":"6bd2c15fb2052b756d8b63c349525c0b3bd2404d","sha256":"6217f92427bb011a824f08dacc49b656bc1539f5a6d166cda78a558c91152452","sha512":"5aee182e348a0713d75fe64947a772e663ee1c131acd35193b0b32afa1d68f2f9921c32bd0174f3b13b68880de32f7904e50f93c2dc1deb542fbca6052f75651","ssdeep":"","tlshash":"47f02b8e76a370f6822ba166017f410a263b75b5d5cc8108b5a0d4e828f99180622f3d","first_seen":"2023-03-13T20:32:42Z","last_seen":"2026-05-12T12:11:56.597742Z","times_seen":23,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static12.com-hotel.com/images/frontend/template/default/paypal.png","fqdn":"static12.com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"104.26.3.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://com-hotel.com/","date":"2025-08-15T16:26:13.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-hotel.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 23 Jul 2025 18:54:03 GMT","end":"Tue, 21 Oct 2025 19:53:48 GMT"},"fingerprint":{"sha1":"EA:55:3C:55:09:75:23:AE:89:4A:FE:4F:11:E7:BA:EC:D6:B2:09:A2","sha256":"B7:68:47:73:B1:DF:BE:D9:C7:0A:24:C4:86:09:05:40:A0:C2:62:36:56:46:E5:73:3B:65:9B:A0:48:33:A5:41"}}},"request":{"raw":"GET /images/frontend/template/default/paypal.png HTTP/1.1\r\nHost: static12.com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://com-hotel.com/\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 2499\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31104000\r\ncf-bgj: imgq:100,h2pri\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-polished: origSize=2650\r\netag: \"a5a-55cd789e0c74d\"\r\nexpires: Fri, 26 Jun 2026 04:33:52 GMT\r\nlast-modified: Tue, 31 Oct 2017 13:14:44 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncf-cache-status: HIT\r\nage: 876933\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NSKOSO0R9OoY8gEKXAQNVhzKm9njEd2WR8iAsVfOVgn2PxXywnuMxk0j%2BMmpKDrvTVRkQyDrYg2pYOToh%2BpszBANsVcH3y4cui1PJDOgn%2F%2F3Aw6Ubw%3D%3D\"}]}\r\ncf-ray: 96fa0d6c88223131-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2499,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 38, 8-bit/color RGBA, non-interlaced","md5":"b7f6f94543f09234ee5e9717b4d24dd6","sha1":"72c25de8013d0cb9971e9bf2ce08140d156eaa72","sha256":"dd0719ddcc4981bdbd7914bce51d752953fc8afa678302347a18461941c1a51f","sha512":"4ee7d660e50546045a04a1469e485b83f6decc2487edfc5f8c39cf093ad146f22e4b8c6e0077c9f15650f406fd8b2d4d096d0154559274ecf213b00128296ac5","ssdeep":"","tlshash":"e0514cc63fbe2a33b439b1e490818678fcf1cd09497591965b4e387d65f69f1600e832","first_seen":"2025-07-02T04:21:11.90882Z","last_seen":"2026-05-15T15:38:41.174163Z","times_seen":978,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":99,"dns":57,"connect":10,"send":0,"wait":19,"receive":0,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur1.otcdn.com/headers/widgets/search/hotelsearchwidget/css/hotelsearchwidget_base.css?v=1749491595","fqdn":"eur1.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:15.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/widgets/search/hotelsearchwidget/css/hotelsearchwidget_base.css?v=1749491595 HTTP/1.1\r\nHost: eur1.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 09 Jun 2025 17:53:15 GMT\r\netag: \"68471f8b-8d9\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000, must-revalidate, proxy-revalidate\r\npragma: public\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: HIT\r\nage: 462915\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4PaQ7H9R1Sl0bHq0pNsC0whLOEtgtsa8SafLuW1v4esrPqQO5nUMLLAVPv4xCvSTzBHwm2kKxtRdcQPnk8c7GRo3cMvMBKu21dSBJCQ%3D\"}]}\r\ncf-ray: 96fa0d75ebd949b7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2265,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2265), with no line terminators","md5":"b79288415a51383ff658d47cbcc0d77d","sha1":"5becfa204e9b465d02a9fd24e1462aa51303a1af","sha256":"90753847be30d7003977e788973c289f80475bd02238741cd502d96af8bfb295","sha512":"bc85ee0e314187a85a7e94fc40b3c6baf5e315260ef1b783a9f37ec6637e57cb4a8c1029a32f5510efc914565fa8946872c94b340b65eb490ba6e5589036ab37","ssdeep":"","tlshash":"2441fe0d0e4a5d687837811268f3758871b4c74cf7272eca6e6aea118648dca5f7a0c8","first_seen":"2025-06-28T23:09:08.081087Z","last_seen":"2025-12-02T04:58:57.255636Z","times_seen":9,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":110,"dns":3,"connect":14,"send":0,"wait":37,"receive":0,"ssl":86},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur1.otcdn.com/headers/widgets/search/journeylocationwidget/css/journeylocationwidget_base.css?v=1749491590","fqdn":"eur1.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:15.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/widgets/search/journeylocationwidget/css/journeylocationwidget_base.css?v=1749491590 HTTP/1.1\r\nHost: eur1.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 09 Jun 2025 17:53:10 GMT\r\netag: \"68471f86-707\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000, must-revalidate, proxy-revalidate\r\npragma: public\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: HIT\r\nage: 2881847\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cm8%2BlFDbpVsaoSfuMY37ixvQKxoIMfYOjG4DwUubXX2C8rTlnCQIMn2FyswO8JiL8scWHBhiouhSjOaFJ1rc80J%2FDM8zA9%2FDfnYes9Y%3D\"}]}\r\ncf-ray: 96fa0d761c8549b7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1799,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1799), with no line terminators","md5":"32cb78ab73e3c4060c8945621552715c","sha1":"4f96fdaba7fecd9d30d52c03135020ef94906d75","sha256":"8744c8061fa790d826e661746bef2737c6c2b84f9aff19abc85529edae9fef4f","sha512":"6fa88c3a2c38aede7a76d2ffd6993508a8e479bf660cefc81bb4ed821a393ea5bf1b8e290130feaebd7891db285f407c04396f6fc3dee2af2818a4a331dc34c0","ssdeep":"","tlshash":"6e3124e64296001f23cf4783fad45d81b23e94c79463d4e869b722d2cb89b4d057f68d","first_seen":"2025-06-28T23:09:07.988071Z","last_seen":"2025-10-11T14:06:36.208597Z","times_seen":7,"resource_available":false,"data":null}},"time_used":359,"timings":{"blocked":132,"dns":4,"connect":16,"send":0,"wait":45,"receive":0,"ssl":85},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/common/js/libraries/i18n/locales/en.js?v=1748355805","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:15.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/common/js/libraries/i18n/locales/en.js?v=1748355805 HTTP/1.1\r\nHost: eur2.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 27 May 2025 14:23:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6835cadd-48b4\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000, must-revalidate, proxy-revalidate\r\npragma: public\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: HIT\r\nage: 3186713\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eFrQJT7y59OSV%2Fzv3eR1unsj4gg1WrwQn6o9tdkMu4mqx5Vnk5aqUE%2BZYeDIDZd3s6fjMpwIBXubnHbsqVKaCf%2BBHtbmC1NpQKHwb4U%3D\"}]}\r\ncf-ray: 96fa0d759acb49b7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18612,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (18612), with no line terminators","md5":"fd2129de931a5fcefb1d2e1fdc3514f2","sha1":"8c48da738c4c2eca93a987983c40d6ddca0084e4","sha256":"01c834d40a6a05c3a69f4260690d8cb601bd0a9f69c4de9e2649f9bd36c4aa2e","sha512":"c4652b1df352b31b616fd509ab68c5fb6784911031c3ef59d67d06f8d69982ebbd554d05e9cd3d83e3e778c2de211fe766fe67e24a45b3baa92d3d27f9603659","ssdeep":"384:9KdWvEpEhal5zohQeJIazJBorllGftRUP3i3LWjICbdAXdVVv8IL9qJ8nLmbLWNw:hHUyvBweESr8t","tlshash":"da82596b304f887e68f7c4f75189274bb1a093b655c59a896ccc8cac8bc4fdb20567d2","first_seen":"2025-03-11T12:09:34.837618Z","last_seen":"2026-05-12T12:11:56.519588Z","times_seen":19,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":19,"connect":27,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hrenaissancecancunresortmarina.com-hotel.com/favicon.ico","fqdn":"hrenaissancecancunresortmarina.com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.83.149.10","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hrenaissancecancunresortmarina.com-hotel.com/","date":"2025-08-15T16:26:12.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com-hotel.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 02:30:46 GMT","end":"Sat, 08 Nov 2025 02:30:45 GMT"},"fingerprint":{"sha1":"0B:8A:1E:6C:23:CC:63:19:29:31:67:DE:3D:5B:71:D9:CC:0E:F9:C8","sha256":"E1:C6:52:2D:8E:1B:0B:71:99:30:1E:97:D0:0D:8A:7F:D6:93:89:4F:EC:54:28:15:56:2D:B8:4B:A3:69:AF:44"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: hrenaissancecancunresortmarina.com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hrenaissancecancunresortmarina.com-hotel.com/\r\nCookie: PHPSESSID=pemmhrtgqjcqtdst83kheqh88h; device_view=full; _bb_sofia_GEO_COUNTRY_CODE=NO; _bb_sofia_GEO_LOCALE=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:12 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\ncontent-length: 1590\r\nlast-modified: Sat, 11 Nov 2017 16:07:46 GMT\r\netag: \"636-55db73cf04f02\"\r\naccept-ranges: bytes\r\ncache-control: max-age=604800\r\nexpires: Fri, 22 Aug 2025 16:26:12 GMT\r\nvary: User-Agent\r\nserver: nginx-more\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1590,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"PNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced","md5":"1f6fe1061c3e7b5c4cc4a241d026c7fe","sha1":"aab2378c915fd090284866e46f3e9cb7e459a0a2","sha256":"cad468eed0571e8ed14d9e55e4b21bef59492976090709642d1d76235204e88b","sha512":"cd57683527739095fbfd44bfb220b04790af363180f5016ffe495753e2e9b47c1bf09c7652a72dc93f454089b4b374573f0c4e2c36102be555a607325c4ea9e7","ssdeep":"","tlshash":"183195c46ce690f5c84e6d254fb8d049da7a04056ae6d589bc4d8dbb9f8c2da00cf6cd","first_seen":"2023-07-18T15:04:15Z","last_seen":"2025-11-12T03:29:01.721184Z","times_seen":9,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static11.com-hotel.com/uploads/destination/79614/photo/spain-lanzarote_15821079018.jpeg","fqdn":"static11.com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"104.26.3.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://com-hotel.com/","date":"2025-08-15T16:26:14.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-hotel.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 23 Jul 2025 18:54:03 GMT","end":"Tue, 21 Oct 2025 19:53:48 GMT"},"fingerprint":{"sha1":"EA:55:3C:55:09:75:23:AE:89:4A:FE:4F:11:E7:BA:EC:D6:B2:09:A2","sha256":"B7:68:47:73:B1:DF:BE:D9:C7:0A:24:C4:86:09:05:40:A0:C2:62:36:56:46:E5:73:3B:65:9B:A0:48:33:A5:41"}}},"request":{"raw":"GET /uploads/destination/79614/photo/spain-lanzarote_15821079018.jpeg HTTP/1.1\r\nHost: static11.com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://com-hotel.com/\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 15 Aug 2025 16:26:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 242998\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31104000\r\ncf-bgj: imgq:100,h2pri\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-polished: origSize=255860\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RDbK50z60BXipcLB4KszjbBXyzpYQC4KqIvbcrCoyXKfWSRGhldCJNnG%2BrIxRUQVjwnht2p%2BhrTw%2BtG5WjIM4TvbCacYO7zK2j%2Fu7ZkYeeqZdExO1w%3D%3D\"}]}\r\naccess-control-allow-origin: *\r\netag: \"3e774-59eeb33789f16\"\r\nexpires: Fri, 26 Jun 2026 09:29:56 GMT\r\nlast-modified: Wed, 19 Feb 2020 10:25:01 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: sameorigin\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nx-accel-buffering: yes\r\nage: 2006465\r\ncf-ray: 96fa0d6efc9a3438-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":242998,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 2000x976, components 3","md5":"a3accaa1f13e6bb57564c4d3d8a8bf5c","sha1":"d9634a5331721f5cfa03ade8f680385701ba4717","sha256":"a974b796a3f2930a27c7f125f932ddf7718b8e4dd0ff82f0e00bf77f2f6b0854","sha512":"ac62253e71aee04f100b4449f1e1b14b4944a025c990c43c43646f5cfe2b465f454e58d434138ecb9158420aa20b093f6545b57d9525b570a8210467a645cf1d","ssdeep":"6144:OZVx6mVMzVctci3GQMw1f1h5FlKyc8G4nnOgn78p11uxw:OZVxEZU/1DkYIg78nIW","tlshash":"4d342370226428d0d2371ae67f612d2b23df3cc5936a316dfa67891f6d597260fa20b1","first_seen":"2023-07-18T15:04:15Z","last_seen":"2026-03-10T11:37:27.544941Z","times_seen":11,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":127,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static11.com-hotel.com/uploads/destination/79630/photo/spain-seville_15821079903.jpeg","fqdn":"static11.com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"104.26.3.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://com-hotel.com/","date":"2025-08-15T16:26:14.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-hotel.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 23 Jul 2025 18:54:03 GMT","end":"Tue, 21 Oct 2025 19:53:48 GMT"},"fingerprint":{"sha1":"EA:55:3C:55:09:75:23:AE:89:4A:FE:4F:11:E7:BA:EC:D6:B2:09:A2","sha256":"B7:68:47:73:B1:DF:BE:D9:C7:0A:24:C4:86:09:05:40:A0:C2:62:36:56:46:E5:73:3B:65:9B:A0:48:33:A5:41"}}},"request":{"raw":"GET /uploads/destination/79630/photo/spain-seville_15821079903.jpeg HTTP/1.1\r\nHost: static11.com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://com-hotel.com/\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 15 Aug 2025 16:26:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 324405\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31104000\r\ncf-bgj: imgq:100,h2pri\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-polished: origSize=337767\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7FiTZNY31lu08MPpmIyuPHmojJSkJzJwAlORJEgKW6wvNvaLJlK5SI0hKnvdgp76Zcy5rg7O9h%2BrbQyuaOj6Rjr4RulwAbEsLNPo97%2B9texVMtX6YQ%3D%3D\"}]}\r\naccess-control-allow-origin: *\r\netag: \"52767-59eeb38cb32b6\"\r\nexpires: Wed, 24 Jun 2026 12:29:02 GMT\r\nlast-modified: Wed, 19 Feb 2020 10:26:30 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: sameorigin\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nx-accel-buffering: yes\r\nage: 1991952\r\ncf-ray: 96fa0d6f3cad3438-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":324405,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 2000x976, components 3","md5":"b51592d1852be209841922018075b00c","sha1":"20bb91d58d8821458b6cd27ce42e58ef38a0f2ea","sha256":"830a9085c3e807b6e731f3c470ad653f24c69d9466da61a51c660218fd6c78d6","sha512":"3f93633c3da10bbbeaa38de919dfc1424c72887d567c7a766fb2ccaffc2641c21347409a25dacfff22c6079a2d72c66a29f9ec4ab674da3bdbac7ee9550db50d","ssdeep":"6144:wH0S0t9YdnEJ3qpxx6vDNhjD4gFZvJ3gDy98u4u2jAqANel4+AVYgqH8HhPRVV:wH08CIv6vvjhJJ3lGju20qQyZtg00pVV","tlshash":"ff6423356296d44f2d23a97fb689e0a2031b5c2b71412cdfe346f56a0bbdce32699344","first_seen":"2025-08-15T16:26:55.649229Z","last_seen":"2026-03-10T11:37:27.521367Z","times_seen":3,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":351,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur1.otcdn.com/headers/widgets/search/radiobuttongroupwidget/css/radiobuttongroupwidget_base.css?v=1749491587","fqdn":"eur1.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:15.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/widgets/search/radiobuttongroupwidget/css/radiobuttongroupwidget_base.css?v=1749491587 HTTP/1.1\r\nHost: eur1.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 09 Jun 2025 17:53:07 GMT\r\netag: \"68471f83-9ed\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000, must-revalidate, proxy-revalidate\r\npragma: public\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: HIT\r\nage: 3188699\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VCh2XRa2F2nwLFdpA6QRVc5aKY1v1IX8HSzBhTC2dWwxCd5hmyc3zqV21KKGsLZdXqRBFWphU%2FPOfMnoW8XlgUM7BzeAUpK67CGoX5s%3D\"}]}\r\ncf-ray: 96fa0d761c7c49b7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2541,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2541), with no line terminators","md5":"7658bf13850ec23890a493dec53e3611","sha1":"a372a97d38b5f38c493592eff1cef074b4645bbf","sha256":"2717f3b32cecac60a8dd56d61522487eefabdf58d0946687ba50e0fe0c5521ad","sha512":"f25e5d503fc9f40fa17c0083bb43b38f1b590f80a2a26ffb45369cc00cf78af878f8db3ab709edc0b4fd03593ec5a277f74b2cad0bf724b9f139da73a468c37f","ssdeep":"","tlshash":"b05155215023223f723bc5abad67a26fb034418ba783955cd37b7ad27f639ddc118510","first_seen":"2025-06-28T23:09:08.068769Z","last_seen":"2025-10-11T14:06:36.219343Z","times_seen":7,"resource_available":false,"data":null}},"time_used":362,"timings":{"blocked":135,"dns":1,"connect":21,"send":0,"wait":40,"receive":0,"ssl":92},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"com-hotel.com/compiled/translations-template-default.js","fqdn":"com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.129.55.48","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://com-hotel.com/","date":"2025-08-15T16:26:13.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com-hotel.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 02:30:46 GMT","end":"Sat, 08 Nov 2025 02:30:45 GMT"},"fingerprint":{"sha1":"0B:8A:1E:6C:23:CC:63:19:29:31:67:DE:3D:5B:71:D9:CC:0E:F9:C8","sha256":"E1:C6:52:2D:8E:1B:0B:71:99:30:1E:97:D0:0D:8A:7F:D6:93:89:4F:EC:54:28:15:56:2D:B8:4B:A3:69:AF:44"}}},"request":{"raw":"GET /compiled/translations-template-default.js HTTP/1.1\r\nHost: com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://com-hotel.com/\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173; PHPSESSID=savjjkb6rnnhi299dtfd2vevvh; _bb_sofia_GEO_COUNTRY_CODE=NO; _bb_sofia_GEO_LOCALE=en; device_view=full\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:13 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 2037\r\nlast-modified: Tue, 12 Aug 2025 13:15:42 GMT\r\netag: \"2c32-63c2ad651a4f7-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Sat, 15 Aug 2026 16:26:13 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nserver: nginx-more\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11314,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7851)","md5":"8a7da1acc0cc889e74b33e838a9f86b2","sha1":"b5e3b227abc07a600538bad1de6693f6828297f9","sha256":"c2a714afb99543566bf79a5724b17324a47ae04920a8f2d264ef60b9fe0f72b3","sha512":"de3d2e3de6a9372596a2596ca6a10febbc7ff3d9a44847431c2ba2486bdd3bd825e0ebc381ff35ef2fe07c1ff9463781fdbba9742f695c67c607ec863972cd8f","ssdeep":"192:O+b+LKHpbKoKV+oKVPoKVSoKVIoKVxoKVooK39V33o+75TdLHXGEdSBrQReqzdrz:O+b+LKHpbKBV+BVPBVSBVIBVxBVoB3Lj","tlshash":"4a329d0d39b4c623276b315487de9ac4b4e05c4ecf13f8e9b2e98d1a36912a773ad714","first_seen":"2023-07-18T15:04:14Z","last_seen":"2026-05-09T06:32:58.598423Z","times_seen":47,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/vendor/dayjs/1.10.7/dayjs.min.js?v=1748355821","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:15.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/vendor/dayjs/1.10.7/dayjs.min.js?v=1748355821 HTTP/1.1\r\nHost: eur2.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 6494\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 27 May 2025 14:23:41 GMT\r\netag: \"6835caed-195e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000, must-revalidate, proxy-revalidate\r\npragma: public\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: HIT\r\nage: 2029379\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rhI5C5bXVSshWifQAPizijrWNb3s9Frd%2B70h2vJVf3wGQ5JJntib7FGpOU6BN%2F0vvU7LTYcF5NCZNkh0bu3Wp%2FTkiisyS8Q3CxwF3nA%3D\"}]}\r\ncf-ray: 96fa0d759ada49b7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6494,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6494), with no line terminators","md5":"deb6ca07ea6a16065535668ce4427f76","sha1":"dd9016a222dcf440762cd87c5ef45ed17696bcfc","sha256":"0cb46af5dfac6a4f8315df6d367b620e16e2b76029d8306555f87b97da3e2cd3","sha512":"6f00f7543fe3eb2a524a7ca3b9a51189d664b28571dcbd513ef4e495e0b8f126c7099b1e993dd528c0f7f4a9273e71fbdbc2cb5d53138ac1122013806f9fd6d1","ssdeep":"192:+8Zzla2pG7z/t10xbw2+7a3o4rT0M8TOF:+8Zzla2Mz/r0xbwXi3r5IS","tlshash":"d3d1308ab182f5161753a274482f4006f26e1da67c5f85adf57ac8c27c7888e913bf78","first_seen":"2023-03-08T13:34:09Z","last_seen":"2026-05-13T15:28:32.349001Z","times_seen":91,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static11.com-hotel.com/uploads/destination/79603/photo/spain-gran-canaria_15821078355.jpeg","fqdn":"static11.com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"104.26.3.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://com-hotel.com/","date":"2025-08-15T16:26:14.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-hotel.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 23 Jul 2025 18:54:03 GMT","end":"Tue, 21 Oct 2025 19:53:48 GMT"},"fingerprint":{"sha1":"EA:55:3C:55:09:75:23:AE:89:4A:FE:4F:11:E7:BA:EC:D6:B2:09:A2","sha256":"B7:68:47:73:B1:DF:BE:D9:C7:0A:24:C4:86:09:05:40:A0:C2:62:36:56:46:E5:73:3B:65:9B:A0:48:33:A5:41"}}},"request":{"raw":"GET /uploads/destination/79603/photo/spain-gran-canaria_15821078355.jpeg HTTP/1.1\r\nHost: static11.com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://com-hotel.com/\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 15 Aug 2025 16:26:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 332854\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31104000\r\ncf-bgj: imgq:100,h2pri\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-polished: origSize=350981\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nm1vbzZk1SLv9jnmdMHiPztFW97lfNw9A49gap%2B2wvjJXIxuYIvGNUoASALPj1nn5N8VEt9EMpZu3aVVRwoyda%2FcX%2FmwNHfgNeVWp%2BIXQyu7F0%2F%2F4Q%3D%3D\"}]}\r\naccess-control-allow-origin: *\r\netag: \"55b05-59eeb2f8f5e7b\"\r\nexpires: Thu, 25 Jun 2026 23:41:20 GMT\r\nlast-modified: Wed, 19 Feb 2020 10:23:55 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: sameorigin\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nx-accel-buffering: yes\r\nage: 2006465\r\ncf-ray: 96fa0d6efc993438-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":332854,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 2000x976, components 3","md5":"db48b4837bdc273b35a7abe402b5d5d1","sha1":"be1f4db78b3ff9203ebeb5452bc4f08517ccbbf4","sha256":"8327488316e9615d3b75cde9ed17eac52432143d32be561a0f9e97cea91c0f5d","sha512":"0edbeb182912f67a7c2f7155c38db7d085b17d1ceea9d02ce16d3a7d17ebf4eb8e1755829001e6e5ff373d35daa4f4ed38b42f65eae73b934a22c9d5785a418c","ssdeep":"6144:529U80hv3FufllgZUKb3/wdw5n2Tkuy6j5WZuSUuara3MWDUSIdLY:529U3ht4gZUQ/WSn2Auy4WcNrEMFRM","tlshash":"2564239c993b974a6133f5a19504e011e171ce96040b67eb94a2f82bb3b6fb77940fcc","first_seen":"2023-07-18T15:04:16Z","last_seen":"2026-03-10T11:37:27.50316Z","times_seen":11,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":134,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static11.com-hotel.com/uploads/destination/29325/photo/chile-o-higgins_1487338684.jpeg","fqdn":"static11.com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"104.26.3.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://com-hotel.com/","date":"2025-08-15T16:26:14.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-hotel.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 23 Jul 2025 18:54:03 GMT","end":"Tue, 21 Oct 2025 19:53:48 GMT"},"fingerprint":{"sha1":"EA:55:3C:55:09:75:23:AE:89:4A:FE:4F:11:E7:BA:EC:D6:B2:09:A2","sha256":"B7:68:47:73:B1:DF:BE:D9:C7:0A:24:C4:86:09:05:40:A0:C2:62:36:56:46:E5:73:3B:65:9B:A0:48:33:A5:41"}}},"request":{"raw":"GET /uploads/destination/29325/photo/chile-o-higgins_1487338684.jpeg HTTP/1.1\r\nHost: static11.com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://com-hotel.com/\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 15 Aug 2025 16:26:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 316033\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31104000\r\ncf-bgj: imgq:100,h2pri\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-polished: origSize=330174\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nOkoeJTUK0xVjYJSP0hpGkhw0zBcIhiQTJJdLRxtTY6j8zdkg498xHBc6dsdVay3GEEE8wSDwin%2BSE%2FnonAEejhNC5%2F8y1BF1UaLo%2FNpD6o3ZiFn2Q%3D%3D\"}]}\r\naccess-control-allow-origin: *\r\netag: \"509be-548ba05eba700\"\r\nexpires: Thu, 25 Jun 2026 23:41:20 GMT\r\nlast-modified: Fri, 17 Feb 2017 13:38:04 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: sameorigin\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nx-accel-buffering: yes\r\nage: 2178652\r\ncf-ray: 96fa0d6f1ca33438-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":316033,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 2000x976, components 3","md5":"a29f84f45e313c97782e4380fed6e44b","sha1":"07e6d9b5405884c58db22277ffd8616407e58714","sha256":"045c3abdbceccf3a780a877e167ab62d0d90efd3047ecb289d3512b747c1c0b6","sha512":"a12d6ed7ae2890c1c1d7a1efb7ca8e4fe99104740b7b29ca4737fa5f1500187b764109d25c44472d9ac4546408325a5f3518e6b88a06887a280ff7cd0dfd45f7","ssdeep":"6144:T8JTY5sl34HfJZqKNjbvUiaUaa+eGYHy8LQTJQ:IvlI/JZFIUa2Guy8LQdQ","tlshash":"326423692b35d49a178c1eb51f32507f63fcb6146ae10d9202acb8627b01f94cdafb81","first_seen":"2024-08-19T19:28:21.454318Z","last_seen":"2025-08-15T16:26:55.659456Z","times_seen":2,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking.mkp10-2.com-hotel.com/headers/widgets/search/hotelsearchwidget/css/hotelsearchwidget_ssm.less","fqdn":"booking.mkp10-2.com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.222.42.74","port":443,"asn":3257,"as":"GTT Communications Inc.","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:16.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booking.mkp10-2.com-hotel.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 15:29:42 GMT","end":"Sat, 25 Oct 2025 15:29:41 GMT"},"fingerprint":{"sha1":"57:68:C3:79:2F:35:9C:F6:B6:43:DA:EE:68:C6:38:20:F8:16:92:45","sha256":"39:40:E7:DD:A6:26:78:27:3D:A3:E2:98:35:0A:FD:32:DB:0E:0C:90:48:84:D3:3C:1B:F3:9B:69:9B:F3:C5:94"}}},"request":{"raw":"GET /headers/widgets/search/hotelsearchwidget/css/hotelsearchwidget_ssm.less HTTP/1.1\r\nHost: booking.mkp10-2.com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173; _ga_RRL6TC2WHG=GS2.1.s1755275174$o1$g0$t1755275174$j60$l0$h0; _ga_VSVH2X36Y6=GS2.1.s1755275174$o1$g0$t1755275174$j60$l0$h0; brand=30389; mkt_pref=YToxOntzOjEwOiJ0cmFja3BhcmFtIjtzOjM4OiJhJTNBMCUzQSU3QiU3RERBVEFfU0VQQVJBVE9SNDE4OTAyMDk3NyI7fQ%3D%3D; info_localizacion=30169%2Fno%2FNOK%2F; _upfs=eyJtYXJrZXRfaWQiOjM5LCJsYW5nXzM5Ijoibm8ifQ%3D%3D; remite=olt_bookingmkp10-2com-hotel%2Ftrack_portal\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 15 Aug 2025 16:26:16 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 27 May 2025 14:23:44 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 0\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T15:20:42.416165Z","times_seen":15223586,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/vendor/flatpickr-4.6.9/l10n/no.min.js?v=1748355821","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:16.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/vendor/flatpickr-4.6.9/l10n/no.min.js?v=1748355821 HTTP/1.1\r\nHost: eur2.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1290\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 27 May 2025 14:23:41 GMT\r\netag: \"6835caed-50a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000, must-revalidate, proxy-revalidate\r\npragma: public\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: HIT\r\nage: 2002022\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B8zgfdkiDgN3P%2FxHE9CFM2Kf57245L%2Bh7OGscggmMpNrbjoG9UHJPnQMpynCX9ok%2F1NF5z%2B7aE1OxwR3MUVN0yEj0Wme5Rtu%2Bj6K1qA%3D\"}]}\r\ncf-ray: 96fa0d76cec949b7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1290,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (955)","md5":"8b2c4518de7d3fec7bdbab25aa897cbd","sha1":"e99cea5fd57b5f9dbf9a7847f18ca38d9a785e88","sha256":"be33adc39684e8272160b54858aaf5b4e079d5fdb574a39c492feb650d849877","sha512":"a3cb775d80e1f19bf984f0807d152d5cd99b11ddc90f36927cc7f1b118cac1344d1f665de59b22a54fdd665b43780512f0e55b0400c0c992b945f922944dc3bc","ssdeep":"","tlshash":"662195292231a802101729e4803f8907b1640037e6ca00c3b8f9793f5cf86ad71ea98a","first_seen":"2023-03-13T20:32:42Z","last_seen":"2026-05-12T12:11:56.548854Z","times_seen":18,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur4.otcdn.com/headers/ac/il_cd/il_cd_eb1bf117ce1f7b430a294cb622ee3f2f_20250609_191844.js","fqdn":"eur4.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking.mkp10-2.com-hotel.com/themes/ilussion/cross_domain_helper?xdm_e=https%3A%2F%2Fbooking.mkp10-2.com-hotel.com%2Fpublic%2Fwidget%2F291117%2F4106755428\u0026xdm_c=default2482\u0026xdm_p=4","date":"2025-08-15T16:26:18.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/ac/il_cd/il_cd_eb1bf117ce1f7b430a294cb622ee3f2f_20250609_191844.js HTTP/1.1\r\nHost: eur4.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:18 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 23 Jun 2025 07:49:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68590712-836a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000, must-revalidate, proxy-revalidate\r\npragma: public\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: HIT\r\nage: 2036199\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xSUUIgyxgp2i0FypTsj4UEaQJbWYIuGC8n9w55pIHC%2FD%2FXesd1N6rIG4rP9ORYskifh6tGz0L1EU9LhM764aQlzujdV6wrmD6gZsycQ%3D\"}]}\r\ncf-ray: 96fa0d8aaa5f49b7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33642,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (25360)","md5":"a7e11ca597d2f9de4f7601d0a38fd7b7","sha1":"61ddbb37320bb8fc8eb20fba03e1e86c8d4f81be","sha256":"39f152afdcf6f11d5ffabe73ec4924fbf2a08245c87ebd1317905b18772b68c1","sha512":"15c9a43115b0f9323c025e87a235f60e8e806de05e29c064c6bb26e4e27fb5c933c500933cc7ca4f5af5d6394ae99f03efa644546dce79d330fa6e8527410bc5","ssdeep":"384:2C3RzmfWoaeBFf22PmnvJNZz/dZ3xyIk6KBuc15fs3IC/3lUIl5vA8fBuqSV+8Km:DQqKqBb3rUw5QGBO5Tph2Bk4c","tlshash":"33e2e689b3a1623556d3207874af3608b37d9152742cc970d193e0e87e7ca8e4a37fad","first_seen":"2025-03-11T12:09:34.766649Z","last_seen":"2025-08-15T16:26:55.665145Z","times_seen":6,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static11.com-hotel.com/uploads/destination/29241/photo/chile-bio-bio_1487338611.jpeg","fqdn":"static11.com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"104.26.3.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://com-hotel.com/","date":"2025-08-15T16:26:14.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-hotel.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 23 Jul 2025 18:54:03 GMT","end":"Tue, 21 Oct 2025 19:53:48 GMT"},"fingerprint":{"sha1":"EA:55:3C:55:09:75:23:AE:89:4A:FE:4F:11:E7:BA:EC:D6:B2:09:A2","sha256":"B7:68:47:73:B1:DF:BE:D9:C7:0A:24:C4:86:09:05:40:A0:C2:62:36:56:46:E5:73:3B:65:9B:A0:48:33:A5:41"}}},"request":{"raw":"GET /uploads/destination/29241/photo/chile-bio-bio_1487338611.jpeg HTTP/1.1\r\nHost: static11.com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://com-hotel.com/\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 15 Aug 2025 16:26:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 330633\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31104000\r\ncf-bgj: imgq:100,h2pri\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-polished: origSize=346260\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vnr%2BVSRqwYzroyXXS5m%2FjjAbqnjTWZZSN0u7rLPQF1skWsACjscA3EOAsoxAfkcLdS5EJC%2BTaAn%2BvCPQK22GcOpTDdxrgLeLn0WXbseHhaWoe%2BP7HA%3D%3D\"}]}\r\naccess-control-allow-origin: *\r\netag: \"54894-548ba0191c2c0\"\r\nexpires: Fri, 26 Jun 2026 09:38:04 GMT\r\nlast-modified: Fri, 17 Feb 2017 13:36:51 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: sameorigin\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nx-accel-buffering: yes\r\nage: 1308551\r\ncf-ray: 96fa0d6f0ca23438-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":330633,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 2000x976, components 3","md5":"45c0c230e291b78a2d06db8071945965","sha1":"8985c3ff16c2ba48ba5bd9574234be054e949177","sha256":"5e72c1ca6cd38d05dc41a29c844c385c9b56c46cdc14d55bd0e69956d47aade1","sha512":"38eb1429db7d58f8091078b87c6c51713d5304ec6c8a03879270ba08c31d9187f2ca417c733585398f9557d14d23e856a95d3682cdc8bc622602fe1ea6b3d5e7","ssdeep":"6144:5/jNr16xQH1VeijBJ10sfWeUck1mOQJAG0Zd9wVDrEd26CHUxO4s:5/jNh6xfwr0sfNUcM3GCu/Wo4s","tlshash":"d56423663564c67b6ff7c4b06a899fb691a00bc88d5b31109b0ecd07da39db74e407d8","first_seen":"2025-08-15T16:26:55.667703Z","last_seen":"2026-03-10T11:37:27.51724Z","times_seen":4,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":175,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static11.com-hotel.com/uploads/destination/32208/photo/puerto-rico-puerto-rico-1_1473431143.jpeg","fqdn":"static11.com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"104.26.3.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://com-hotel.com/","date":"2025-08-15T16:26:14.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-hotel.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 23 Jul 2025 18:54:03 GMT","end":"Tue, 21 Oct 2025 19:53:48 GMT"},"fingerprint":{"sha1":"EA:55:3C:55:09:75:23:AE:89:4A:FE:4F:11:E7:BA:EC:D6:B2:09:A2","sha256":"B7:68:47:73:B1:DF:BE:D9:C7:0A:24:C4:86:09:05:40:A0:C2:62:36:56:46:E5:73:3B:65:9B:A0:48:33:A5:41"}}},"request":{"raw":"GET /uploads/destination/32208/photo/puerto-rico-puerto-rico-1_1473431143.jpeg HTTP/1.1\r\nHost: static11.com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://com-hotel.com/\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 15 Aug 2025 16:26:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 287085\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31104000\r\ncf-bgj: imgq:100,h2pri\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-polished: origSize=304257\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zgp8gjZAEloIvb0T3HbAUfgmuLMCLpVyPyg0YPe2mxZPxIGl1RyXp%2BneIzTa0GQVrBcljluWN%2Fw%2BUL%2Bv1WO8IVA1n8bNvysW93wKe1XbyVhb0%2BL5Qw%3D%3D\"}]}\r\naccess-control-allow-origin: *\r\netag: \"4a481-53c13ebe127c0\"\r\nexpires: Wed, 24 Jun 2026 16:28:50 GMT\r\nlast-modified: Fri, 09 Sep 2016 14:25:43 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: sameorigin\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nx-accel-buffering: yes\r\nage: 1631335\r\ncf-ray: 96fa0d6f1ca43438-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":287085,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 2000x976, components 3","md5":"bfeb66c17e8146d1e0b64d773ad3fa00","sha1":"fd018d891fb71300ede96ef8e70367ed0c9d6df9","sha256":"c78b808a4cdef4ae448208c344dd706109a8b1dfc73ef1c4021da14155ae4acf","sha512":"551d6ebea9d693507181ef6aec57b68ad43466e1689b3790504e4be3d961d28c95fd502039a3b48e5f499ae485ef7d20e2e13b7be62ae428d108e41bc92942c5","ssdeep":"6144:uIIsL3lT+uneBSlfXO4qy3qjgU9sjfLnhLbk:uIIaT+ueBAm4qy3ugU9WfLRbk","tlshash":"6d5423002948340dfaa529f426250bc977c244bde90727e6ed1b5ffae5d324e6ce391b","first_seen":"2025-03-11T12:09:34.737891Z","last_seen":"2025-08-15T16:26:55.670091Z","times_seen":2,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static11.com-hotel.com/uploads/destination/79613/photo/spain-la-rioja_15821078961.jpeg","fqdn":"static11.com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"104.26.3.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://com-hotel.com/","date":"2025-08-15T16:26:14.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-hotel.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 23 Jul 2025 18:54:03 GMT","end":"Tue, 21 Oct 2025 19:53:48 GMT"},"fingerprint":{"sha1":"EA:55:3C:55:09:75:23:AE:89:4A:FE:4F:11:E7:BA:EC:D6:B2:09:A2","sha256":"B7:68:47:73:B1:DF:BE:D9:C7:0A:24:C4:86:09:05:40:A0:C2:62:36:56:46:E5:73:3B:65:9B:A0:48:33:A5:41"}}},"request":{"raw":"GET /uploads/destination/79613/photo/spain-la-rioja_15821078961.jpeg HTTP/1.1\r\nHost: static11.com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://com-hotel.com/\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 15 Aug 2025 16:26:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 387918\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31104000\r\ncf-bgj: imgq:100,h2pri\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-polished: origSize=410394\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bli0BZbOaygPtF0bDDu8Xt3vC%2BYXtpzhaLxhWk8eNVWlcQGjIt21ocn2SIP%2Fn2cEsx%2F9AYN%2F6y6tVfwpLIp%2B6iSnVULU1JBso61WlbTuH0ZfQWqhzg%3D%3D\"}]}\r\naccess-control-allow-origin: *\r\netag: \"6431a-59eeb33309901\"\r\nexpires: Fri, 26 Jun 2026 04:37:05 GMT\r\nlast-modified: Wed, 19 Feb 2020 10:24:56 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: sameorigin\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nx-accel-buffering: yes\r\nage: 1631335\r\ncf-ray: 96fa0d6f2ca93438-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":387918,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 2000x976, components 3","md5":"61ee60136b32cbac65da3b6196d6e188","sha1":"982e9d5be9f26d7b2aa664e25a033d1da49a323a","sha256":"1c822f28a52476798a127f47e1bd8a1d555a725765315f96e68a0588ac05378d","sha512":"791df20203e28c073761e8d25b4dfadeeb9e6373e2e6647b426efd5415f6f0f0c7602cc923089581c55796ad475be6aa724f4a840e50b65e6729946002587452","ssdeep":"6144:DuInhJcb8wqrs4J6zqBNKnbwB4qBt4ptpbOexPMYC2XAkaJckadTnuJ1vstU:qqs4QqBN6wBBBs/OX2XAkaJckadTnuJv","tlshash":"f6842333c6e1b0c46e8dab6753b8ad3c3290787297d550e8669efdf2b6129d71488831","first_seen":"2025-03-11T12:09:34.834096Z","last_seen":"2025-09-12T10:20:55.479719Z","times_seen":3,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":283,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"com-hotel.com/compiled/ll-default-template.css","fqdn":"com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.129.55.48","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://com-hotel.com/","date":"2025-08-15T16:26:14.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com-hotel.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 02:30:46 GMT","end":"Sat, 08 Nov 2025 02:30:45 GMT"},"fingerprint":{"sha1":"0B:8A:1E:6C:23:CC:63:19:29:31:67:DE:3D:5B:71:D9:CC:0E:F9:C8","sha256":"E1:C6:52:2D:8E:1B:0B:71:99:30:1E:97:D0:0D:8A:7F:D6:93:89:4F:EC:54:28:15:56:2D:B8:4B:A3:69:AF:44"}}},"request":{"raw":"GET /compiled/ll-default-template.css HTTP/1.1\r\nHost: com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://com-hotel.com/\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173; PHPSESSID=savjjkb6rnnhi299dtfd2vevvh; _bb_sofia_GEO_COUNTRY_CODE=NO; _bb_sofia_GEO_LOCALE=en; device_view=full\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:14 GMT\r\ncontent-type: text/css\r\ncontent-length: 610\r\nlast-modified: Tue, 12 Aug 2025 13:15:42 GMT\r\netag: \"977-63c2ad65af3e1-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Sat, 15 Aug 2026 16:26:14 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nserver: nginx-more\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2423,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2026)","md5":"3999b9e565931a4d3450ad595a2e9f33","sha1":"6903544e49dbf2ace13c3b46fbb9b0724a9fd60d","sha256":"29dd05ec22547fcc5b4c81b2be80fa6e851e61c638dd15349f807acfc307bcfc","sha512":"898bfa3ff298d8a780b9b082a7978ceb0152417cd3f6e1475688908112628e0bc77bc8dc91900557e982d4d59453a93e69a56c7ae8f4891ff9827ce2e5d1f6ca","ssdeep":"","tlshash":"2641e17a139b1e7c78178f27e0e2bba43289dff1eada4893c90d5695c5d51e84930308","first_seen":"2023-07-18T15:04:15Z","last_seen":"2026-05-09T06:32:58.587335Z","times_seen":48,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur1.otcdn.com/headers/widgets/search/multisearcherwidget/css/multisearcherwidget_base.css?v=1749491589","fqdn":"eur1.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:15.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/widgets/search/multisearcherwidget/css/multisearcherwidget_base.css?v=1749491589 HTTP/1.1\r\nHost: eur1.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 09 Jun 2025 17:53:09 GMT\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000, must-revalidate, proxy-revalidate\r\npragma: public\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: HIT\r\nage: 3012729\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q726PSr86ivJQFnUt1MBEeM0bfEEpSmavw3ly%2BQ9PoiUQBglVVLM4iTJDlkyHmc4vGT%2FYeBtH%2BsCzaEvXc27W0c4DcH2urlb74cmPmI%3D\"}]}\r\netag: W/\"68471f85-0\"\r\ncontent-encoding: br\r\ncf-ray: 96fa0d756a4149b7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T15:20:42.416165Z","times_seen":15223586,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur3.otcdn.com/headers/ilusion/fonts/roboto/v18/roboto-v18-latin-700.woff2","fqdn":"eur3.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:15.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/ilusion/fonts/roboto/v18/roboto-v18-latin-700.woff2 HTTP/1.1\r\nHost: eur3.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nOrigin: https://booking.mkp10-2.com-hotel.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 15436\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 27 May 2025 14:23:30 GMT\r\netag: \"6835cae2-3c4c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000, must-revalidate, proxy-revalidate\r\npragma: public\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: HIT\r\nage: 1546535\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=px8kkFEytUkUuhDh3%2FvnDyY1z5Jg8ir1dbLCBYQwgTsb43A5UTCjWgERsIk8kXPqmTE2BnFphXko2%2FRDZ2tRWpW8Q8PWuPxjqb4gkIU%3D\"}]}\r\ncf-ray: 96fa0d758dcde0fe-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15436,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15436, version 1.0","md5":"037d830416495def72b7881024c14b7b","sha1":"619389190b3cafafb5db94113990350acc8a0278","sha256":"1d5b7c64458f4af91dcfee0354be47adde1f739b5aded03a7ab6068a1bb6ca97","sha512":"c8d2808945a9bf2e6ad36c7749313467ff390f195448c326c4d4d7a4a635a11e2ddf4d0779be2db274f1d1d9d022b1f837294f1e12c9f87e3eac8a95cfd8872f","ssdeep":"384:uJ/qNyGt74AcZEG+69hFFHDJ1CggakKt0y:+q/kAc+ohFx9YgB2y","tlshash":"6e62d017f1fe5110ded279ba7e4f003b18e194e6eb308ab8412789266e4c18dacf8d35","first_seen":"2023-04-07T06:04:51Z","last_seen":"2026-05-15T13:40:04.902399Z","times_seen":8258,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static11.com-hotel.com/uploads/destination/79593/photo/spain-cantabria_15821077674.jpeg","fqdn":"static11.com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"104.26.3.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://com-hotel.com/","date":"2025-08-15T16:26:14.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-hotel.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 23 Jul 2025 18:54:03 GMT","end":"Tue, 21 Oct 2025 19:53:48 GMT"},"fingerprint":{"sha1":"EA:55:3C:55:09:75:23:AE:89:4A:FE:4F:11:E7:BA:EC:D6:B2:09:A2","sha256":"B7:68:47:73:B1:DF:BE:D9:C7:0A:24:C4:86:09:05:40:A0:C2:62:36:56:46:E5:73:3B:65:9B:A0:48:33:A5:41"}}},"request":{"raw":"GET /uploads/destination/79593/photo/spain-cantabria_15821077674.jpeg HTTP/1.1\r\nHost: static11.com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://com-hotel.com/\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 15 Aug 2025 16:26:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 178969\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31104000\r\ncf-bgj: imgq:100,h2pri\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-polished: origSize=190135\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JJwGDyNehsuZVptlM1BNBg8Amro%2FiQC4%2FqXT4s0pcoBLvI2EL%2F7h%2BK5b696PzzQswbGMLSpz6jh2MPrm06HJEL83zIOyDQ2pAY1GkgZ3EHTKeXwM%2Bg%3D%3D\"}]}\r\naccess-control-allow-origin: *\r\netag: \"2e6b7-59eeb2b76149d\"\r\nexpires: Fri, 26 Jun 2026 09:49:07 GMT\r\nlast-modified: Wed, 19 Feb 2020 10:22:47 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: sameorigin\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nx-accel-buffering: yes\r\nage: 1489134\r\ncf-ray: 96fa0d6f2ca73438-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":178969,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 2000x976, components 3","md5":"ef556921fb585ef06883230986a2ee70","sha1":"c21c68180ac821a4b8c29e0c59a2bfbcae63fbba","sha256":"37d5b8d8632f024ff7d9c1f07e7643bba4b5ae8ebf1e642a29393d42d2d67465","sha512":"ecced0c9780b3643b2f72904bb46ef5f3ddb6ef28e2f63f39821ae24b1ccecf7c2e8e737f1a44705dba015487acb01600365d72004047e741371ce17bff70edb","ssdeep":"3072:HQUZ+mJPYu3jVupw4lHSbxb+bCmCJH2DTmMT0Q8as1SAQmBDhqc/yLuzVHpAb:zJPH3+3mxbMCdJH2DKg80AQoDH/yLuz6","tlshash":"28041215b4b07fc7e73c377605091a5e708cab956eaf34ad11b34e8899aad3b098022d","first_seen":"2024-08-19T19:28:21.464854Z","last_seen":"2025-10-21T10:14:47.329682Z","times_seen":4,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking.mkp10-2.com-hotel.com/headers/widgets/transport/search/transportflightsearcherwidget/css/transportflightsearcherwidget_ssm.less","fqdn":"booking.mkp10-2.com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.222.42.74","port":443,"asn":3257,"as":"GTT Communications Inc.","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:16.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booking.mkp10-2.com-hotel.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 15:29:42 GMT","end":"Sat, 25 Oct 2025 15:29:41 GMT"},"fingerprint":{"sha1":"57:68:C3:79:2F:35:9C:F6:B6:43:DA:EE:68:C6:38:20:F8:16:92:45","sha256":"39:40:E7:DD:A6:26:78:27:3D:A3:E2:98:35:0A:FD:32:DB:0E:0C:90:48:84:D3:3C:1B:F3:9B:69:9B:F3:C5:94"}}},"request":{"raw":"GET /headers/widgets/transport/search/transportflightsearcherwidget/css/transportflightsearcherwidget_ssm.less HTTP/1.1\r\nHost: booking.mkp10-2.com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173; _ga_RRL6TC2WHG=GS2.1.s1755275174$o1$g0$t1755275174$j60$l0$h0; _ga_VSVH2X36Y6=GS2.1.s1755275174$o1$g0$t1755275174$j60$l0$h0; brand=30389; mkt_pref=YToxOntzOjEwOiJ0cmFja3BhcmFtIjtzOjM4OiJhJTNBMCUzQSU3QiU3RERBVEFfU0VQQVJBVE9SNDE4OTAyMDk3NyI7fQ%3D%3D; info_localizacion=30169%2Fno%2FNOK%2F; _upfs=eyJtYXJrZXRfaWQiOjM5LCJsYW5nXzM5Ijoibm8ifQ%3D%3D; remite=olt_bookingmkp10-2com-hotel%2Ftrack_portal\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 15 Aug 2025 16:26:16 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 27 May 2025 14:23:44 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 0\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T15:20:42.416165Z","times_seen":15223586,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"com-hotel.com/images/frontend/widget/destination.jpg","fqdn":"com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.129.55.48","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://com-hotel.com/","date":"2025-08-15T16:26:14.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com-hotel.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 02:30:46 GMT","end":"Sat, 08 Nov 2025 02:30:45 GMT"},"fingerprint":{"sha1":"0B:8A:1E:6C:23:CC:63:19:29:31:67:DE:3D:5B:71:D9:CC:0E:F9:C8","sha256":"E1:C6:52:2D:8E:1B:0B:71:99:30:1E:97:D0:0D:8A:7F:D6:93:89:4F:EC:54:28:15:56:2D:B8:4B:A3:69:AF:44"}}},"request":{"raw":"GET /images/frontend/widget/destination.jpg HTTP/1.1\r\nHost: com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://com-hotel.com/compiled/lb-frontend.css\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173; PHPSESSID=savjjkb6rnnhi299dtfd2vevvh; _bb_sofia_GEO_COUNTRY_CODE=NO; _bb_sofia_GEO_LOCALE=en; device_view=full\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 58004\r\nlast-modified: Tue, 06 Nov 2018 18:48:05 GMT\r\netag: \"e294-57a03712144ab\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31104000\r\nexpires: Mon, 10 Aug 2026 16:26:14 GMT\r\nserver: nginx-more\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58004,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2016:09:13 07:13:17], progressive, precision 8, 2000x760, components 1","md5":"7874664963d6338e4f4ea6b77a9b0b76","sha1":"4a9a55a20dd7bfb1d896b2c40f45954e0fc085bd","sha256":"6c0d74bdd1cd4e930dfc6b193ebacd4af65b64d54513d6c12e892f93a8bc98c1","sha512":"2d54c30f7c6a50e21f5dea02c2338bd6fd7ebc6a76f0c19ff1e34be2035404c6d172d99554017115e08526695d3fa51ccc3fdbc82cf1456892175116ce2aa24e","ssdeep":"768:MHvbY73vbLsJzMFfY2mn9k8dq7xD3NLw9j1Vgn14l8MxEmRbKXhTaN:sGXsJzoQL5duD1yj8n14UuN","tlshash":"e243f111e7416ea6e9c10230d5b0d7197babd8427f671349beac0c413b24755ec2f29f","first_seen":"2023-07-18T15:04:15Z","last_seen":"2026-03-10T11:37:27.514992Z","times_seen":12,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://com-hotel.com/","date":"2025-08-15T16:26:14.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://com-hotel.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48332\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 14 Aug 2025 15:48:02 GMT\r\nexpires: Fri, 14 Aug 2026 15:48:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 88692\r\nlast-modified: Wed, 28 May 2025 18:06:59 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48332,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48332, version 1.0","md5":"5734e133a619a6ae6ee21a6c00a95eba","sha1":"57c0ac17302d07bd4f968240098afe5ed53d4ad2","sha256":"d7a547581722aa055a7fb5b9912aebf3f3e928e1db3e5af9e54cf158cb4c4c4a","sha512":"a881b689d0990693ef7feb11d55155a8fa63f94e870bfeb5c61edbb9a7891990bb920147b05d371d302f91c0562fb87f46d334afd70d1cba36228e41dcd5ec55","ssdeep":"768:VRQzlrtlSlX2HnXb438KRr2FGTI8pGRY+rbma2NHhd37ohZ4Dge99ZBN62GcC7jr:mlrtlnL68gqF98URY+rbmd9XoAD/r42+","tlshash":"2e23f1de20f58f0bf84693f864eb9562506f706877721aa6bee1c1b48e757033267520","first_seen":"2025-05-29T17:20:03.50604Z","last_seen":"2026-05-15T14:37:07.682353Z","times_seen":51585,"resource_available":false,"data":null}},"time_used":468,"timings":{"blocked":186,"dns":1,"connect":29,"send":0,"wait":35,"receive":39,"ssl":168},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur1.otcdn.com/headers/widgets/search/journeylocationanddatescrollwidget/css/journeylocationanddatescrollwidget_base.css?v=1749491592","fqdn":"eur1.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:15.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/widgets/search/journeylocationanddatescrollwidget/css/journeylocationanddatescrollwidget_base.css?v=1749491592 HTTP/1.1\r\nHost: eur1.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 09 Jun 2025 17:53:12 GMT\r\netag: \"68471f88-5ba\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000, must-revalidate, proxy-revalidate\r\npragma: public\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: HIT\r\nage: 1981233\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q38zr%2BKPuK00zzi53oDd0Q%2FRpg8gmuZv9i788fIqtE6C7AT6khhu30tG4MqmzvtklLfIQk%2B6mDdXihBgNzZCmM86aRFkoY%2BTz3wj7Zk%3D\"}]}\r\ncf-ray: 96fa0d7549fe49b7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1466,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1466), with no line terminators","md5":"882b0748ee73b8d2c075c11d4e9a18bc","sha1":"e7a7890d6fca675b83b9576d275d6a6468051eb4","sha256":"5f33e23daf13dd1f4a4e8fb461d648712f61157dc866464a220952798044a5d6","sha512":"974d03fba5bfae363277c60dd9cb606e953d9f7a40a7e19ebfb45178c81f7dc04edcac704adc88b8d13234fd1d20ba1a4bbad45a4fc870588aa7a63ce57d7322","ssdeep":"","tlshash":"1931dcc69d52311872eb807ff5f89244153dca836aa755d6d86ffcd2a0d855c0137538","first_seen":"2023-07-18T15:04:16Z","last_seen":"2025-10-11T14:06:36.145843Z","times_seen":10,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking.mkp10-2.com-hotel.com/headers/widgets/transport/multiplesjourneylocationanddatewidget/css/multiplesjourneylocationanddatewidget_ssm.less","fqdn":"booking.mkp10-2.com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.222.42.74","port":443,"asn":3257,"as":"GTT Communications Inc.","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:16.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booking.mkp10-2.com-hotel.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 15:29:42 GMT","end":"Sat, 25 Oct 2025 15:29:41 GMT"},"fingerprint":{"sha1":"57:68:C3:79:2F:35:9C:F6:B6:43:DA:EE:68:C6:38:20:F8:16:92:45","sha256":"39:40:E7:DD:A6:26:78:27:3D:A3:E2:98:35:0A:FD:32:DB:0E:0C:90:48:84:D3:3C:1B:F3:9B:69:9B:F3:C5:94"}}},"request":{"raw":"GET /headers/widgets/transport/multiplesjourneylocationanddatewidget/css/multiplesjourneylocationanddatewidget_ssm.less HTTP/1.1\r\nHost: booking.mkp10-2.com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173; _ga_RRL6TC2WHG=GS2.1.s1755275174$o1$g0$t1755275174$j60$l0$h0; _ga_VSVH2X36Y6=GS2.1.s1755275174$o1$g0$t1755275174$j60$l0$h0; brand=30389; mkt_pref=YToxOntzOjEwOiJ0cmFja3BhcmFtIjtzOjM4OiJhJTNBMCUzQSU3QiU3RERBVEFfU0VQQVJBVE9SNDE4OTAyMDk3NyI7fQ%3D%3D; info_localizacion=30169%2Fno%2FNOK%2F; _upfs=eyJtYXJrZXRfaWQiOjM5LCJsYW5nXzM5Ijoibm8ifQ%3D%3D; remite=olt_bookingmkp10-2com-hotel%2Ftrack_portal\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 15 Aug 2025 16:26:16 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 27 May 2025 14:23:44 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 902\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":902,"size_decoded":0,"mime_type":"text/xml","magic":"ASCII text","md5":"65f30ec26679d12139ddc7f838165462","sha1":"3a074dc259c99798482787a36bbd552a9a86aaac","sha256":"0ce2d899b8da9a33e2ef747a90007112458d936e611679b9a964ba1327a7af1f","sha512":"00ead53084b1d9d49b7eaa1bf440367a1f7ad8c4499fa38ad02a08f020019bd778bcd0cc1ae121e5812ba3d811d57532b4a6a64e885452cdb97750e03bd044fd","ssdeep":"","tlshash":"ed115e43ed992e5515e6017fb0e1d7e02fae1ac9c86b2e89edb7f50660810c199b3072","first_seen":"2023-07-18T15:04:15Z","last_seen":"2026-05-12T12:11:56.566187Z","times_seen":15,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking.mkp10-2.com-hotel.com/headers/widgets/transport/search/transportflightsearcherwidget/css/transportflightsearcherwidget_ssm.less","fqdn":"booking.mkp10-2.com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.222.42.74","port":443,"asn":3257,"as":"GTT Communications Inc.","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:17.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booking.mkp10-2.com-hotel.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 15:29:42 GMT","end":"Sat, 25 Oct 2025 15:29:41 GMT"},"fingerprint":{"sha1":"57:68:C3:79:2F:35:9C:F6:B6:43:DA:EE:68:C6:38:20:F8:16:92:45","sha256":"39:40:E7:DD:A6:26:78:27:3D:A3:E2:98:35:0A:FD:32:DB:0E:0C:90:48:84:D3:3C:1B:F3:9B:69:9B:F3:C5:94"}}},"request":{"raw":"GET /headers/widgets/transport/search/transportflightsearcherwidget/css/transportflightsearcherwidget_ssm.less HTTP/1.1\r\nHost: booking.mkp10-2.com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173; _ga_RRL6TC2WHG=GS2.1.s1755275174$o1$g0$t1755275174$j60$l0$h0; _ga_VSVH2X36Y6=GS2.1.s1755275174$o1$g0$t1755275174$j60$l0$h0; brand=30389; mkt_pref=YToxOntzOjEwOiJ0cmFja3BhcmFtIjtzOjM4OiJhJTNBMCUzQSU3QiU3RERBVEFfU0VQQVJBVE9SNDE4OTAyMDk3NyI7fQ%3D%3D; info_localizacion=30169%2Fno%2FNOK%2F; _upfs=eyJtYXJrZXRfaWQiOjM5LCJsYW5nXzM5Ijoibm8ifQ%3D%3D; remite=olt_bookingmkp10-2com-hotel%2Ftrack_portal\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 15 Aug 2025 16:26:17 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 27 May 2025 14:23:44 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 0\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T15:20:42.416165Z","times_seen":15223586,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"com-hotel.com/api/en/5809db55-7408-11e8-bfca-000c2914c1c1/adv/component.js","fqdn":"com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.129.55.48","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://com-hotel.com/","date":"2025-08-15T16:26:13.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com-hotel.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 02:30:46 GMT","end":"Sat, 08 Nov 2025 02:30:45 GMT"},"fingerprint":{"sha1":"0B:8A:1E:6C:23:CC:63:19:29:31:67:DE:3D:5B:71:D9:CC:0E:F9:C8","sha256":"E1:C6:52:2D:8E:1B:0B:71:99:30:1E:97:D0:0D:8A:7F:D6:93:89:4F:EC:54:28:15:56:2D:B8:4B:A3:69:AF:44"}}},"request":{"raw":"GET /api/en/5809db55-7408-11e8-bfca-000c2914c1c1/adv/component.js HTTP/1.1\r\nHost: com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://com-hotel.com/\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173; PHPSESSID=savjjkb6rnnhi299dtfd2vevvh; _bb_sofia_GEO_COUNTRY_CODE=NO; _bb_sofia_GEO_LOCALE=en; device_view=full\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:13 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\nset-cookie: _bb_sofia_GEO_COUNTRY_CODE=NO; expires=Fri, 22-Aug-2025 16:26:13 GMT; Max-Age=604800; path=/; HttpOnly\n_bb_sofia_GEO_LOCALE=en; expires=Fri, 22-Aug-2025 16:26:13 GMT; Max-Age=604800; path=/; HttpOnly\r\nvary: Accept-Encoding, User-Agent\r\nserver: nginx-more\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3787,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"65258956cbcf27f489a95c31aae5113e","sha1":"df9d230ae6b97521105a1e70d17a897f4a0545f8","sha256":"099c21182cab777e353fe95dde02e8699fbe6ae78038bce9b2c1c7c3ece46462","sha512":"4efc1b6cc70746826331ac8d02719775f1c713b2c2c8b9fa25258b1847a86b660ba8d61d55de177757ca6eaefd7eb9445772e1f0f35e4a0561e5ba424d9a982b","ssdeep":"","tlshash":"0071bc49fed5108492a731398baf42046731b8df9d07d8d2be5c17c40f58a7ca346bda","first_seen":"2023-07-18T15:04:14Z","last_seen":"2026-03-10T11:37:27.5195Z","times_seen":12,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntucondensed/v16/u-4k0rCzjgs5J7oXnJcM_0kACGMtT-Dfqw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://com-hotel.com/","date":"2025-08-15T16:26:14.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/ubuntucondensed/v16/u-4k0rCzjgs5J7oXnJcM_0kACGMtT-Dfqw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://com-hotel.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29252\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 14 Aug 2025 19:17:38 GMT\r\nexpires: Fri, 14 Aug 2026 19:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 76116\r\nlast-modified: Wed, 27 Apr 2022 15:46:53 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29252,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29252, version 1.0","md5":"560f20b3c1c9c5da37a1f3db36a107a0","sha1":"592121dc8d1cb5ab1e588122a69be069ab7f14af","sha256":"6b1adc37a16294b5127dc6e84c9fc36e1f50bac718dcfe35f60f466fdf692bbf","sha512":"f7fc0fe9954f8321f99296d8bc28ab28e8ac84fd1346da39141b46e764daeb8a1c26cb5c008d943dede7c72f91bf30a6c2f1c491486345d30163937a0807963c","ssdeep":"384:mlYV0V3XumAExiGGbmNxtAKCbkminKGBJl7X+18qfL4Wjyx3SBgCCuSpzx3sSl4u:IbQ4OmDuqjBCtL4EgjaU77N","tlshash":"24d2f15b6ea25852883fbd717bbabd2d490521207b0b02017d4866ba846d3cbf977f07","first_seen":"2023-04-07T13:32:30Z","last_seen":"2026-05-12T10:28:51.270592Z","times_seen":858,"resource_available":false,"data":null}},"time_used":492,"timings":{"blocked":192,"dns":1,"connect":28,"send":0,"wait":48,"receive":25,"ssl":192},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/widgets/search/js/LastSearchCookieManager.js?v=1749488646","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:15.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/widgets/search/js/LastSearchCookieManager.js?v=1749488646 HTTP/1.1\r\nHost: eur2.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2223\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 09 Jun 2025 17:04:06 GMT\r\netag: \"68471406-8af\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000, must-revalidate, proxy-revalidate\r\npragma: public\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: HIT\r\nage: 725682\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0dilzDSOaitIEAoVm0w3qHyWgsYyHbd28gbTJ%2B1FqBJHM8q%2B45obx%2FCJQjIRliaI9qyThHD8dowEdtJD%2FOcz652H0kplkARTAf9BA6w%3D\"}]}\r\ncf-ray: 96fa0d761c7f49b7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2223,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2223), with no line terminators","md5":"328d6e2a082b5b7b62bef8a109c8e5b6","sha1":"e56d52682aa8ef42635f4ccd4442807eba65b8f6","sha256":"b5d1df59e565949be71b65d5fe60373511a67959615c6e285fa235bd7bc0fc98","sha512":"ca5027cd41572a83e56586ecc285ebdf3294709ebd3872d44adab8ce666855beff79dffb11f2576eac84a2ef2dec1cf2bc03d90ffa6f38519b791368f19eb626","ssdeep":"","tlshash":"644161aa7216a12b8bff6030d41f0a017062e55f16d4806ebc04e8e42935dce1f3fb3a","first_seen":"2023-03-13T20:32:43Z","last_seen":"2026-05-12T12:11:56.53071Z","times_seen":23,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static12.com-hotel.com/images/frontend/template/default/logos-net.png","fqdn":"static12.com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"104.26.3.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://com-hotel.com/","date":"2025-08-15T16:26:13.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-hotel.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 23 Jul 2025 18:54:03 GMT","end":"Tue, 21 Oct 2025 19:53:48 GMT"},"fingerprint":{"sha1":"EA:55:3C:55:09:75:23:AE:89:4A:FE:4F:11:E7:BA:EC:D6:B2:09:A2","sha256":"B7:68:47:73:B1:DF:BE:D9:C7:0A:24:C4:86:09:05:40:A0:C2:62:36:56:46:E5:73:3B:65:9B:A0:48:33:A5:41"}}},"request":{"raw":"GET /images/frontend/template/default/logos-net.png HTTP/1.1\r\nHost: static12.com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://com-hotel.com/\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 10074\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31104000\r\ncf-bgj: imgq:100,h2pri\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-polished: origSize=13230\r\netag: \"33ae-55cd789e0c365\"\r\nexpires: Sat, 04 Jul 2026 02:52:26 GMT\r\nlast-modified: Tue, 31 Oct 2017 13:14:44 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncf-cache-status: HIT\r\nage: 1394936\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B7qri3kBnBTXipsVVnB9rjB82823UXUSHDhPqo0%2BXLZ97S45vUSZPzjtbRd%2Bf8FeHvqJjs9HhtKBkns92fK4K0dKlwggadjPhw3bE0m5L7C7%2BCCOGA%3D%3D\"}]}\r\ncf-ray: 96fa0d6c88473131-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10074,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 248 x 28, 8-bit/color RGBA, non-interlaced","md5":"1143bc2b744fadadb6f55e65cc79a86d","sha1":"3f3491773f6d01e0700a50d6a5d2f911d620b9ab","sha256":"c3977a65723ddbc5fb2cbdaa7af285012e6647d0e5db27233dc8a8889dc80274","sha512":"14f07a299abccf2a893c26a107fcc22d6d38e4674d289a983ae2e3bfecfb8d364bcf30c956b44f15095fe69b3b4c94c794097a31b3bf894f0f0fa45a2a9cb5e5","ssdeep":"192:KKs1bU0SVAMYBT+PM3sLM3mP/1tTlcMBWCG1DckmNo5jKIy9YA+MEq:k1bUmGMcccPaEy1Dc1o5A93zEq","tlshash":"0722bfea7de9ed7000b7cfb2c47d35408a0e123cd0c24086aa676b551898bca75b7ee0","first_seen":"2025-08-04T23:34:46.91367Z","last_seen":"2026-05-09T06:32:58.635051Z","times_seen":33,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":103,"dns":59,"connect":10,"send":0,"wait":23,"receive":1,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static11.com-hotel.com/uploads/destination/79624/photo/spain-navarra_15821079612.jpeg","fqdn":"static11.com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"104.26.3.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://com-hotel.com/","date":"2025-08-15T16:26:14.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-hotel.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 23 Jul 2025 18:54:03 GMT","end":"Tue, 21 Oct 2025 19:53:48 GMT"},"fingerprint":{"sha1":"EA:55:3C:55:09:75:23:AE:89:4A:FE:4F:11:E7:BA:EC:D6:B2:09:A2","sha256":"B7:68:47:73:B1:DF:BE:D9:C7:0A:24:C4:86:09:05:40:A0:C2:62:36:56:46:E5:73:3B:65:9B:A0:48:33:A5:41"}}},"request":{"raw":"GET /uploads/destination/79624/photo/spain-navarra_15821079612.jpeg HTTP/1.1\r\nHost: static11.com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://com-hotel.com/\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 15 Aug 2025 16:26:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 252667\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31104000\r\ncf-bgj: imgq:100,h2pri\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-polished: origSize=266060\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xTFOTH5HlkZxxqrvHr2SFVVd9fNiSYAOGGQ6IktXStxpD9955kNunh2zCAW9kkFHjfjIB9vC%2FTJ7iEq3hoG5R5y%2BqhUFAqmhkdCbUDWSplamA2KxRw%3D%3D\"}]}\r\naccess-control-allow-origin: *\r\netag: \"40f4c-59eeb37054fa1\"\r\nexpires: Thu, 25 Jun 2026 19:29:24 GMT\r\nlast-modified: Wed, 19 Feb 2020 10:26:01 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: sameorigin\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nx-accel-buffering: yes\r\nage: 1489606\r\ncf-ray: 96fa0d6f2cac3438-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":252667,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 2000x976, components 3","md5":"ff67238d71806e74393ebc40dbe6087c","sha1":"f6f5915ce6e3981b738187ef2b958a0fbfb27fb4","sha256":"321ada4aaa83c8d3a2d493085b6f6624683986cb3d62a9cfec8ee27feb6fc3ce","sha512":"a7f02d2a917f3c3842cd492d704bfc8007b547618fab1fa73b0805038198fb4b20a8cd1b5cd2e8dc0a81e132aa54e692a2a10a36bf68eb61e57ec9565539d334","ssdeep":"3072:ooCOO5XL2gdPXT5E/LOzkaFH8XOBC+Y9q83WjESxIXQP5rYwLYuZeFzTwG0xHWdX:ovxb2gdPDy/K44BQ9qBrYgYuohqpYFZ","tlshash":"78342338a4c3cb73572f8f3c2baaddd8755028ce36c6b844178124553937c79aa61bb8","first_seen":"2024-08-19T19:28:21.46827Z","last_seen":"2025-09-12T10:22:10.420848Z","times_seen":4,"resource_available":false,"data":null}},"time_used":352,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":337,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/common/js/libraries/widgets/transport/search/TransportFlightSearcherWidget/Plugin.js?v=1749489366","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:15.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/common/js/libraries/widgets/transport/search/TransportFlightSearcherWidget/Plugin.js?v=1749489366 HTTP/1.1\r\nHost: eur2.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 09 Jun 2025 17:16:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"684716d6-2b4f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\npragma: public\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2X39gAKyMO1jy87NQybQeXaenNXH5B5mgaaLUMmBBWct2L7%2BKiG%2FvAIa9uJ18u9DAeScw204UqvWagEYrfG%2Fj4NcGPH7PL46n14Sdnw%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 96fa0d764d0f49b7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11087,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (11087), with no line terminators","md5":"9eefb18b1ef798ecb6871fca8a3179f2","sha1":"6f33f9e576949258c270059598196396c1b7489b","sha256":"9f54e2c3b99c0e2729136f06c655b5adf7c313dd5af1fde1f220db0f1b484177","sha512":"956e10f2a5e4504e25bbd8efa6dcea8e9fa97d5ee7a4022b3224fe2036849752f8d10857156a0259efc57f73a1a18aedc33e18a8167405f8538207ea0a91aa46","ssdeep":"192:xvPt4PfxkTAaA+6d/R8mGPcd4yo5vDDdDFSvRa2Eb7I8kx+x5/:4P7Cv5L6ZS","tlshash":"dd323d8ab3a83c9642ff507b492b7201623588ffd682d99d5e79b1b518788c85337f31","first_seen":"2024-08-19T19:28:21.502549Z","last_seen":"2025-10-11T14:06:36.248445Z","times_seen":13,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/common/js/libraries/widgets/search/MultiSearcherWidget/Plugin.js?v=1749712209","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:15.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/common/js/libraries/widgets/search/MultiSearcherWidget/Plugin.js?v=1749712209 HTTP/1.1\r\nHost: eur2.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 7698\r\nserver: cloudflare\r\nlast-modified: Thu, 12 Jun 2025 07:10:09 GMT\r\netag: \"684a7d51-1e12\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\npragma: public\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sHt7Av%2BM065x15iPiiOP8erxMYTWbutNhGo3Jv79BrkwtrgTN%2BERT8wcswWjzRKxh8tMZAe%2BPkNOc6ntLJ9nn%2BLcO%2Bo4NVeUNriW1Ho%3D\"}]}\r\ncf-ray: 96fa0d765d3d49b7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7698,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"94af4c25eac9454ef085fbaa125939a6","sha1":"e197a71650c0966b230c069670ab27deddd1db3a","sha256":"dbb769039ff03cfd8593cca6e725ff69762d298b787ee76006482985ce78656f","sha512":"1bd15ff4d7c6488b068208a184fd563a7abc8291b81a56e29bcbc780e96b77dda77417dd952ae5cf7a7c4c7011a09fe715b1a188335df73b1223cf96510279ca","ssdeep":"192:xnlj3tZpdzid+zckUMKdnjzVbznpCyljVPDLCqawtOyihOcep/O/GodFrVIXRaW3:brKd35qgg8/dow","tlshash":"e7f1150866bb24659d37323d8eef7184326b444b442cdd047d7c61a0af998fa06f5fe8","first_seen":"2025-06-28T23:09:08.245439Z","last_seen":"2026-05-12T12:11:56.492813Z","times_seen":19,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking.mkp10-2.com-hotel.com/headers/widgets/search/journeylocationanddatescrollwidget/css/journeylocationanddatescrollwidget_ssm.less","fqdn":"booking.mkp10-2.com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.222.42.74","port":443,"asn":3257,"as":"GTT Communications Inc.","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:16.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booking.mkp10-2.com-hotel.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 15:29:42 GMT","end":"Sat, 25 Oct 2025 15:29:41 GMT"},"fingerprint":{"sha1":"57:68:C3:79:2F:35:9C:F6:B6:43:DA:EE:68:C6:38:20:F8:16:92:45","sha256":"39:40:E7:DD:A6:26:78:27:3D:A3:E2:98:35:0A:FD:32:DB:0E:0C:90:48:84:D3:3C:1B:F3:9B:69:9B:F3:C5:94"}}},"request":{"raw":"GET /headers/widgets/search/journeylocationanddatescrollwidget/css/journeylocationanddatescrollwidget_ssm.less HTTP/1.1\r\nHost: booking.mkp10-2.com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173; _ga_RRL6TC2WHG=GS2.1.s1755275174$o1$g0$t1755275174$j60$l0$h0; _ga_VSVH2X36Y6=GS2.1.s1755275174$o1$g0$t1755275174$j60$l0$h0; brand=30389; mkt_pref=YToxOntzOjEwOiJ0cmFja3BhcmFtIjtzOjM4OiJhJTNBMCUzQSU3QiU3RERBVEFfU0VQQVJBVE9SNDE4OTAyMDk3NyI7fQ%3D%3D; info_localizacion=30169%2Fno%2FNOK%2F; _upfs=eyJtYXJrZXRfaWQiOjM5LCJsYW5nXzM5Ijoibm8ifQ%3D%3D; remite=olt_bookingmkp10-2com-hotel%2Ftrack_portal\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 15 Aug 2025 16:26:16 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 27 May 2025 14:23:44 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 428\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":428,"size_decoded":0,"mime_type":"text/xml","magic":"ASCII text","md5":"f7ec52e3a8d9847aea73d25df2eee0c7","sha1":"30ef4b368846a17e603870d08a4d7f21c1b6c170","sha256":"b9c5f442d3658981ed51534cc44ac1e96f8151aaa0a477ca9030ae675d6e458e","sha512":"c4c47470db961f8eb33eec722bd33687fe5d8d4c5aa471b3e37492cdc1d6067babd299af625f9e3f9af363e8342c50e0f0bc75e0614303ba225b04a8307b3c33","ssdeep":"","tlshash":"2be06583bd902916228911bbf0f9a720513e4ada19a454c1dcf6fd87b9d15c90273675","first_seen":"2023-07-18T15:04:15Z","last_seen":"2026-05-12T12:11:56.468596Z","times_seen":15,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://com-hotel.com/","date":"2025-08-15T16:26:14.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://com-hotel.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48332\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 14 Aug 2025 15:48:02 GMT\r\nexpires: Fri, 14 Aug 2026 15:48:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 88692\r\nlast-modified: Wed, 28 May 2025 18:06:59 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48332,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48332, version 1.0","md5":"5734e133a619a6ae6ee21a6c00a95eba","sha1":"57c0ac17302d07bd4f968240098afe5ed53d4ad2","sha256":"d7a547581722aa055a7fb5b9912aebf3f3e928e1db3e5af9e54cf158cb4c4c4a","sha512":"a881b689d0990693ef7feb11d55155a8fa63f94e870bfeb5c61edbb9a7891990bb920147b05d371d302f91c0562fb87f46d334afd70d1cba36228e41dcd5ec55","ssdeep":"768:VRQzlrtlSlX2HnXb438KRr2FGTI8pGRY+rbma2NHhd37ohZ4Dge99ZBN62GcC7jr:mlrtlnL68gqF98URY+rbmd9XoAD/r42+","tlshash":"2e23f1de20f58f0bf84693f864eb9562506f706877721aa6bee1c1b48e757033267520","first_seen":"2025-05-29T17:20:03.50604Z","last_seen":"2026-05-15T14:37:07.682353Z","times_seen":51585,"resource_available":false,"data":null}},"time_used":520,"timings":{"blocked":216,"dns":1,"connect":27,"send":0,"wait":83,"receive":2,"ssl":177},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur1.otcdn.com/headers/widgets/search/css/search_base.css?v=1749491593","fqdn":"eur1.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:15.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/widgets/search/css/search_base.css?v=1749491593 HTTP/1.1\r\nHost: eur1.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 09 Jun 2025 17:53:13 GMT\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000, must-revalidate, proxy-revalidate\r\npragma: public\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: HIT\r\nage: 3317289\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HohX4xFPkGQpR%2FlZInWQ5fBK9IQoMHXQ5cKwxgycF%2FQYr4%2FdY8NYg7%2BVngf1x4ypO7JPnbSgaWjoSBWftwd5xKvmRJFyKELQGLaJYKo%3D\"}]}\r\netag: W/\"68471f89-0\"\r\ncontent-encoding: br\r\ncf-ray: 96fa0d75ebe749b7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T15:20:42.416165Z","times_seen":15223586,"resource_available":true,"data":null}},"time_used":307,"timings":{"blocked":109,"dns":4,"connect":14,"send":0,"wait":33,"receive":0,"ssl":87},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur1.otcdn.com/headers/widgets/transport/search/transportflightsearcherwidget/css/transportflightsearcherwidget_base.css?v=1749491605","fqdn":"eur1.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:15.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/widgets/transport/search/transportflightsearcherwidget/css/transportflightsearcherwidget_base.css?v=1749491605 HTTP/1.1\r\nHost: eur1.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 09 Jun 2025 17:53:25 GMT\r\netag: \"68471f95-539\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000, must-revalidate, proxy-revalidate\r\npragma: public\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: HIT\r\nage: 1981233\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dKiTDV%2BP6yi%2FYBlIqLVD290s%2FSPitGfX81Uhhhp0Ag1UiuST1Xr8A%2Fbbp4gCZ5f5GXa5gMHk2PwzzBRTAvbLv9%2BcHaojfmRO3w5S7EY%3D\"}]}\r\ncf-ray: 96fa0d754a0449b7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1337,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1337), with no line terminators","md5":"fb593ef5f32519ec33f0f159b5e3016f","sha1":"99f23dbc42217057be27ad52dc66fff9e0fd7e70","sha256":"de0b674a5b4f03295e18d210ced7d276861355e21842489698b719b17ad7391e","sha512":"9d473885148ff21e8dae15ba5b1bad781d79ad5fab7e561e274e24ad0c0c99867af341f7262371aa4a7de893496cd58aab761474a41f7d41dba8ffae023c7403","ssdeep":"","tlshash":"5121f190ef1d119de52bc132aeb76bceab702742d4237900e7767bd8c5e90063311a4a","first_seen":"2023-07-18T15:04:16Z","last_seen":"2025-10-11T14:06:36.163374Z","times_seen":10,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/common/js/libraries/widgets/Main.js?v=1749489405","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:15.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/common/js/libraries/widgets/Main.js?v=1749489405 HTTP/1.1\r\nHost: eur2.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 09 Jun 2025 17:16:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"684716fd-397a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\npragma: public\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kVCOJaYhpCVtlPTsOt2fhwwgUu%2FGl%2FuuxNkQPF9NEDSNyVKv7QJo%2BH0XhaKaILtqlCED28VtF64VPk8o7xz8M%2Fg7WADbm4ECTDG5yig%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 96fa0d759ad249b7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14714,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (14714), with no line terminators","md5":"6be277b1ff33421882dfe8a13a3a32dd","sha1":"e67dd6b1fbaa2ad599474550d81d6479ae393186","sha256":"514c27d8c202a9190a9f050e50870dca8e694d1e6ead168cb423c11759b86c91","sha512":"b556e8460e5f06e124b96d2edb5c72d6d82353e4c2c787e3b0909d4e589acf9a05ace6e2eb921eaac44cca8f2e827280b274195971a0821d1fc730c154e5d8cf","ssdeep":"192:nii7zW6Qnvv1b0aKWRpZ3rB9XsEgt8555hnZscYLRlSl5mWt3Xk2VvdlE0cW:niiP8vyaKG98Z8555hnlYLSdHR1q0T","tlshash":"55625451e76b181f81b77c64cc3e704aa4b54ed9046aa4537f7b90b3a6af28c217363c","first_seen":"2023-03-13T20:32:43Z","last_seen":"2026-05-12T12:11:56.546228Z","times_seen":23,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":17,"connect":27,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking.mkp10-2.com-hotel.com/headers/widgets/search/locationwidget/css/locationwidget_ssm.less","fqdn":"booking.mkp10-2.com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.222.42.74","port":443,"asn":3257,"as":"GTT Communications Inc.","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:16.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booking.mkp10-2.com-hotel.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 15:29:42 GMT","end":"Sat, 25 Oct 2025 15:29:41 GMT"},"fingerprint":{"sha1":"57:68:C3:79:2F:35:9C:F6:B6:43:DA:EE:68:C6:38:20:F8:16:92:45","sha256":"39:40:E7:DD:A6:26:78:27:3D:A3:E2:98:35:0A:FD:32:DB:0E:0C:90:48:84:D3:3C:1B:F3:9B:69:9B:F3:C5:94"}}},"request":{"raw":"GET /headers/widgets/search/locationwidget/css/locationwidget_ssm.less HTTP/1.1\r\nHost: booking.mkp10-2.com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173; _ga_RRL6TC2WHG=GS2.1.s1755275174$o1$g0$t1755275174$j60$l0$h0; _ga_VSVH2X36Y6=GS2.1.s1755275174$o1$g0$t1755275174$j60$l0$h0; brand=30389; mkt_pref=YToxOntzOjEwOiJ0cmFja3BhcmFtIjtzOjM4OiJhJTNBMCUzQSU3QiU3RERBVEFfU0VQQVJBVE9SNDE4OTAyMDk3NyI7fQ%3D%3D; info_localizacion=30169%2Fno%2FNOK%2F; _upfs=eyJtYXJrZXRfaWQiOjM5LCJsYW5nXzM5Ijoibm8ifQ%3D%3D; remite=olt_bookingmkp10-2com-hotel%2Ftrack_portal\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 15 Aug 2025 16:26:16 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 27 May 2025 14:23:44 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 208\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":208,"size_decoded":0,"mime_type":"text/xml","magic":"ASCII text","md5":"b5de3b1ab33300b8093a14392e96f8b6","sha1":"f237222c24e7edffb0fc876603abae3473fb7479","sha256":"da3dfefbb1b40468c0d07fa488c1ac409081f22ff3ffdb1b4be5bef3acf9c4db","sha512":"d378a7c013ec44fa9a7c5a63282ec27a5cd4f4bf140289ac31f7078ede3a1f08a02dc6ce1057788bc40f9752e489dd862fc4e3a94610488b9c67a87018331f43","ssdeep":"","tlshash":"10d0920c07250a0313886985ed2887c8b32901c113c7f59a24f20262c60c30d52bb62f","first_seen":"2025-06-28T23:09:08.193853Z","last_seen":"2026-05-12T12:11:56.597105Z","times_seen":17,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static11.com-hotel.com/uploads/destination/79601/photo/spain-fuerteventura_15821056292.jpeg","fqdn":"static11.com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"104.26.3.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://com-hotel.com/","date":"2025-08-15T16:26:14.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-hotel.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 23 Jul 2025 18:54:03 GMT","end":"Tue, 21 Oct 2025 19:53:48 GMT"},"fingerprint":{"sha1":"EA:55:3C:55:09:75:23:AE:89:4A:FE:4F:11:E7:BA:EC:D6:B2:09:A2","sha256":"B7:68:47:73:B1:DF:BE:D9:C7:0A:24:C4:86:09:05:40:A0:C2:62:36:56:46:E5:73:3B:65:9B:A0:48:33:A5:41"}}},"request":{"raw":"GET /uploads/destination/79601/photo/spain-fuerteventura_15821056292.jpeg HTTP/1.1\r\nHost: static11.com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://com-hotel.com/\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 15 Aug 2025 16:26:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 195118\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31104000\r\ncf-bgj: imgq:100,h2pri\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-polished: origSize=206312\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1%2BUH724nxWXbAzkCV89qwpHlp1qdzPnBtNZIhlUmCJOr6D9QwqCO3TEhlj%2Br4ikis60uBvSXv0zCWdOwX3JoFVzmcvhJHJshKhEa%2FbSg16TN7ptHEQ%3D%3D\"}]}\r\naccess-control-allow-origin: *\r\netag: \"325e8-59eeaac1039b9\"\r\nexpires: Wed, 29 Jul 2026 17:36:19 GMT\r\nlast-modified: Wed, 19 Feb 2020 09:47:09 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: sameorigin\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nx-accel-buffering: yes\r\nage: 462915\r\ncf-ray: 96fa0d6efc983438-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":195118,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 2000x976, components 3","md5":"f38dd756305d2c8dcf57a84adc1af094","sha1":"414ba76b4e0c87a1a18fde0682a432089d557574","sha256":"68b3e3aa72ab1cfe0c9164107efa0ae234f02280d6ee25c77e3a40eff93c4efd","sha512":"b618339fb80f8467fcb4aa8ea8f3c90dc8ccbc5efc93d921fe5d0cf989ca0299db465b73d9cbe226377fae67e4a13d7174a20db8fd287762f4a916eeba15fcdd","ssdeep":"3072:8KeDNr5OMx5WIdyrm1Ompons3oaFGqzNRN4yibYH7fTT/+rygGmvLA6R+s3c7Vub:hqBUML7O1s3L/uYHDTTLgfvM68VuC2","tlshash":"831412f314fbe4305a573e90fb0c213a9a02ae655ca6764a1423cf708e95cfbc49987d","first_seen":"2023-07-18T15:04:15Z","last_seen":"2026-03-10T11:37:27.502058Z","times_seen":11,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":90,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/common/js/RequestManager.js?v=1749489289","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:15.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/common/js/RequestManager.js?v=1749489289 HTTP/1.1\r\nHost: eur2.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1373\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 09 Jun 2025 17:14:49 GMT\r\netag: \"68471689-55d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000, must-revalidate, proxy-revalidate\r\npragma: public\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: HIT\r\nage: 3330008\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FAdd4IjREH%2BxdS65sh1LkCKuPgmTfMLY5yr0b%2F2pOtxjy5C%2F6yITzeU2j7edBufCPfLDmc%2BSh6RQoow5Jwc53gJWapwsSeKsYCJtY0g%3D\"}]}\r\ncf-ray: 96fa0d759ad749b7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1373,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1373), with no line terminators","md5":"a0380643c205ca91cce346a53c0ba726","sha1":"6564e0405bf4f61b282579bf85bde8db3be52b81","sha256":"da29df2f5101167a8bba68e418255782f2f30a94895dda5de9769dabb7413798","sha512":"97d2deac291319d96ecd3d9c32f44595d0d5026cdba6e0ea73fa1276db1a0595ed2ca5f05efcd2306cb1c1a264afee6b15ff6115cf757c939103b9454c1fd522","ssdeep":"","tlshash":"3521b10b23596d77c519241bee36f703612f51d3b9804037b91475ed9d36216c2d366e","first_seen":"2023-03-13T20:32:43Z","last_seen":"2026-05-12T12:11:56.587824Z","times_seen":23,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":15,"connect":20,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur1.otcdn.com/headers/common/js/libraries/jquery.autocomplete/jquery.autocomplete.js?v=1748355805","fqdn":"eur1.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:15.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/common/js/libraries/jquery.autocomplete/jquery.autocomplete.js?v=1748355805 HTTP/1.1\r\nHost: eur1.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 27 May 2025 14:23:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6835cadd-884d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000, must-revalidate, proxy-revalidate\r\npragma: public\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: HIT\r\nage: 2029379\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h6WjnjCKvUPTy4zscir8T6hvihMhDGecmm5IghmrlxpvG%2BqYpz0hjLLwiwDkOYpmuqEVtlHjnWduVNLjFOKbAlJbOPDUImTCQeEojEc%3D\"}]}\r\ncf-ray: 96fa0d75ebfa49b7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34893,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"743ce77e1ed54aba06e538627b98ba54","sha1":"cc3f7d8319f85adfcbe123d85fc4cae937ba7777","sha256":"8c31203a246b81dc2988e008a736718d9f7d75a5649c6af80e45dd0445c3e2ea","sha512":"b13679f4ea75de30f35afb6ca6b75a5a8eb6fd5b201fcb1bc495d078e83ffd8b0b50e67cd0a56a08581ba37924d9093bdd997761476ead397b73c201a1fda0c1","ssdeep":"384:/QsFg7H007FOFXFjYYuBkDqVlRQrtyTIlhOE+mLB8zKnpXcH8Q012u1QhrIJ:KfQJIcB8Wn68QwmG","tlshash":"3df28409bfe91126c3a3317c5fcf5049a538821bb90ac4597c5e83e41f9963856befb8","first_seen":"2025-06-28T23:09:07.970679Z","last_seen":"2025-11-09T04:05:22.132687Z","times_seen":11,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/ilusion/common/js/MultiLogin.js?v=1748355810","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:16.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/ilusion/common/js/MultiLogin.js?v=1748355810 HTTP/1.1\r\nHost: eur2.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 7135\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 27 May 2025 14:23:30 GMT\r\netag: \"6835cae2-1bdf\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000, must-revalidate, proxy-revalidate\r\npragma: public\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: HIT\r\nage: 2029379\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aTDNzLuoFKdn4YUsmbysjsnfCWB0DFrxloddDGYTBw3cqkYY%2BDru6iQ6yq2ZSCpuAVRt20n6dYlpB4HTcZHIvl%2FPfoGSvWsc62Q8lag%3D\"}]}\r\ncf-ray: 96fa0d76cec249b7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7135,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"d07a0d616a7e0c7e619612b2763929e0","sha1":"397cc8aa1aa7f566bfa222a75dd20019f2bb10ea","sha256":"c6ff6d834d3ab59f79640132d0db152f21f2347f136b5f1a8496ef9495128c78","sha512":"d2f622d2794709617d74082189023a1c13bfed17be31e6f1d87269ac4713d8a6928d41007380cc3373532da3e5cb7ced8c35e1839887582cec4e6f16dbd1ff65","ssdeep":"192:AEzdr4c9cLifZHog9id2qTBkYgmkiFwjSCyUa:E4NlK9t/","tlshash":"44e1f94c69f66d6240737069a3af60c8717a8513090dee18bd1c7390df9c23aa6b6fdc","first_seen":"2023-03-13T20:32:43Z","last_seen":"2025-08-15T16:26:55.691397Z","times_seen":8,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur3.otcdn.com/headers/components/compiled/prod/es6/customelements.mjs?v=1748355805","fqdn":"eur3.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:15.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/components/compiled/prod/es6/customelements.mjs?v=1748355805 HTTP/1.1\r\nHost: eur3.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://booking.mkp10-2.com-hotel.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 27 May 2025 14:23:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6835cadd-9f4a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000, must-revalidate, proxy-revalidate\r\npragma: public\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: HIT\r\nage: 1669973\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IqoH06GqrAzL5AHmk%2BoTc4jUosDmGue%2B89FdW7yicnUkx92QVnt7gHSJZddICLYpW90JVixPTbJP0eYoO%2F%2FFh%2BldtWjU5esOf%2BwAgA8%3D\"}]}\r\ncf-ray: 96fa0d75be47e0fe-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40778,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (40673)","md5":"3034e483e685deb6a70217811cca20c1","sha1":"779fb6f8ff3e5585a093680de2442b5489b5cb75","sha256":"c5b7a0ae69f008053f93f0d829f38872c96a17dfa015ea7bc34fe8aef027c255","sha512":"067fb6436e77c75ce5915ff7b4f471ec63f512f61ba2eec9648b8da3c71b6d5c8692a19ec44ec2a38493e97d0b83f265d6225cf061c4f86bc8ab71bf3161a193","ssdeep":"768:T4f08l0M/XUqk32y/SicIYJU2BSY1+G2BzboDPkHM:T4f08SM/XUqI2CSjJU2BSY1+GDPkHM","tlshash":"8c03f704725569725ee941d9913f2287b2217148981890fcba7cccfe37b8cc971abbf6","first_seen":"2025-06-28T23:09:08.272401Z","last_seen":"2026-05-12T12:11:56.60487Z","times_seen":21,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/ilusion/common/js/Login.js?v=1748355810","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:16.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/ilusion/common/js/Login.js?v=1748355810 HTTP/1.1\r\nHost: eur2.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1552\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 27 May 2025 14:23:30 GMT\r\netag: \"6835cae2-610\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000, must-revalidate, proxy-revalidate\r\npragma: public\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: HIT\r\nage: 3197707\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4r3dsX6GIHU1aBed9EFnlFxmkzrbKFwV%2F%2FIAU2MNCawiAl9kvEmzYcRT%2FckzeGaXRuYOsk0zUA2gWg6I9X434CqAWMdO%2FyHtzGcWlUs%3D\"}]}\r\ncf-ray: 96fa0d769e0e49b7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1552,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"7ae2f3ff85f93ae8385e699fda90de71","sha1":"eae494a90b9f7beb333f6ea0009aa1066f64653d","sha256":"18c5085bbb08d704c463a70c705b52e4870b0b90e430a6a236a3e9f1cafbb87a","sha512":"522bf11566ad19a9e680f5e303f3de5f5062235bd4c6bc143d56403fa370af648833f9149137d15614bb2050b45724b714c5c309ffbfe68dc1d46fb2fec967bf","ssdeep":"","tlshash":"9931bb0c35b2117611a3635c933fa715aa1a6103800ec915ba7f769d8fa19b464b7a6c","first_seen":"2023-03-13T20:32:42Z","last_seen":"2026-05-12T12:11:56.494074Z","times_seen":22,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"com-hotel.com/compiled/pp-home-company-default-template.css","fqdn":"com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.129.55.48","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://com-hotel.com/","date":"2025-08-15T16:26:13.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com-hotel.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 02:30:46 GMT","end":"Sat, 08 Nov 2025 02:30:45 GMT"},"fingerprint":{"sha1":"0B:8A:1E:6C:23:CC:63:19:29:31:67:DE:3D:5B:71:D9:CC:0E:F9:C8","sha256":"E1:C6:52:2D:8E:1B:0B:71:99:30:1E:97:D0:0D:8A:7F:D6:93:89:4F:EC:54:28:15:56:2D:B8:4B:A3:69:AF:44"}}},"request":{"raw":"GET /compiled/pp-home-company-default-template.css HTTP/1.1\r\nHost: com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://com-hotel.com/\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173; PHPSESSID=savjjkb6rnnhi299dtfd2vevvh; _bb_sofia_GEO_COUNTRY_CODE=NO; _bb_sofia_GEO_LOCALE=en; device_view=full\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16361,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16171)","md5":"33f937a5a0bef81374365831c9a802d8","sha1":"34e4a0684c0e01ded40aad154cc4dbd332885f76","sha256":"c359d12f27b9912c8da89d04e6e3dd468ca53be128635be28a5228ffa38ca394","sha512":"1c26935289e4be49fec1ec5f1501c785174de3fe740c0b10f053776288a40fd6d5bb4207c35fb5d1d325fd7a13825aeea95174596191d5e10ba7bc2f25ed42f5","ssdeep":"384:GYZ2KieQ0gc2Htl7FDc3YeiqG4sRaaSBMA39Vrt7PdKaSBMmHtl7RXkN:3Q0IFDH4s0t7SRXkN","tlshash":"177268185744382f2867c5569994bcf7ef4790af9c7d8b79b0a018ec032eda311ad9b3","first_seen":"2023-07-16T11:29:18Z","last_seen":"2026-05-15T15:56:25.168903Z","times_seen":2608,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static11.com-hotel.com/uploads/destination/79591/photo/spain-caceres_15821077572.jpeg","fqdn":"static11.com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"104.26.3.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://com-hotel.com/","date":"2025-08-15T16:26:14.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-hotel.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 23 Jul 2025 18:54:03 GMT","end":"Tue, 21 Oct 2025 19:53:48 GMT"},"fingerprint":{"sha1":"EA:55:3C:55:09:75:23:AE:89:4A:FE:4F:11:E7:BA:EC:D6:B2:09:A2","sha256":"B7:68:47:73:B1:DF:BE:D9:C7:0A:24:C4:86:09:05:40:A0:C2:62:36:56:46:E5:73:3B:65:9B:A0:48:33:A5:41"}}},"request":{"raw":"GET /uploads/destination/79591/photo/spain-caceres_15821077572.jpeg HTTP/1.1\r\nHost: static11.com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://com-hotel.com/\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 15 Aug 2025 16:26:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 248863\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31104000\r\ncf-bgj: imgq:100,h2pri\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-polished: origSize=263423\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qQcCsGygTShEdfsmpG9XE%2F0J%2Bjv3uPvux%2B%2Bwn08FA4YOINUnX%2BFDAgxY%2Fc%2F5mcTvdmB0Wkb2s0ouiP4lwZB1uX8BhrKYSFE2xxHJjlMJ5%2FXIlLsVnA%3D%3D\"}]}\r\naccess-control-allow-origin: *\r\netag: \"404ff-59eeb2adf22c4\"\r\nexpires: Thu, 25 Jun 2026 09:00:45 GMT\r\nlast-modified: Wed, 19 Feb 2020 10:22:37 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: sameorigin\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nx-accel-buffering: yes\r\nage: 1798073\r\ncf-ray: 96fa0d6f1ca53438-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":248863,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 2000x976, components 3","md5":"beb266e9a2abf96f24a6aa7f0c2eacef","sha1":"1de9e41045213aa6db48defe9bfa8f4437cdc301","sha256":"b3fd93a4788857ec7c0fa81f828aba5c4ceee1cf03708c88ed1d53767391593a","sha512":"85b1ba751e1c91d68bfa65bcdf30c27b2f6b9fa07470a98c0c17c825067410fa04f616c1624521f10d33063844e8d5a73f840d1e010fb9170d27a47bed05a536","ssdeep":"6144:gPcqp5jjugSwtMa/KoBozj23bu60pWJcAf:ecqPjLMKKOmj23C60pYf","tlshash":"da342328fd74b2df951772d06a4ba681fc40a235156c439172058c3e98ff82687ab2bf","first_seen":"2025-08-15T16:26:55.694888Z","last_seen":"2026-03-10T11:37:27.539883Z","times_seen":3,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur1.otcdn.com/headers/widgets/transport/search/transporttrainsearcherwidget/css/transporttrainsearcherwidget_base.css?v=1749491606","fqdn":"eur1.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:15.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/widgets/transport/search/transporttrainsearcherwidget/css/transporttrainsearcherwidget_base.css?v=1749491606 HTTP/1.1\r\nHost: eur1.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 09 Jun 2025 17:53:26 GMT\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000, must-revalidate, proxy-revalidate\r\npragma: public\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: HIT\r\nage: 1981233\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xAXBpCMk9uZEueO6s3k7vEAELa%2FDa6hgA6RuPIJHCMtduxgmOMGk5qAc%2BLmRNxTJhdR7NywBFhFtbBq961BE2Qb9sdud%2BCUS6Xl%2FZIo%3D\"}]}\r\netag: W/\"68471f96-0\"\r\ncontent-encoding: br\r\ncf-ray: 96fa0d755a3b49b7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T15:20:42.416165Z","times_seen":15223586,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur4.otcdn.com/headers/ac/illmagallanes_sp/illmagallanes_sp_b6ef3e24a71d97ff68d7c6c77123e4e8_20250623_111014.js","fqdn":"eur4.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:15.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/ac/illmagallanes_sp/illmagallanes_sp_b6ef3e24a71d97ff68d7c6c77123e4e8_20250623_111014.js HTTP/1.1\r\nHost: eur4.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 23 Jun 2025 09:13:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68591ad5-27e86\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000, must-revalidate, proxy-revalidate\r\npragma: public\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: HIT\r\nage: 2029380\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W75M5BEZEX2ZF3G4Z9Z7fl0c4JsZbyDB6GCZK20HmgIYY1cgZVig5u51GFASfw9tH417JcpqouqwMVLN2nnXwTFI%2Ft6O8pFNqI3qniE%3D\"}]}\r\ncf-ray: 96fa0d75ebd349b7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":163462,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"4c6fafa2516deb6e4cc1003a5199936d","sha1":"1a36f17de4d6236c0f55ebc8073bb706e65a9087","sha256":"8d8363ebc3d31a5c743496445d1d9351521f802915787519f4291660702e8b70","sha512":"a7583896372a76b78eb90505b0398839422ede54c4f4ddd24858c9a3a3122851364aaa4f3696f4da760ca6e5fed37f9e352e5322e9d7b848bd331310ae12adf9","ssdeep":"3072:DIh8GgP3hujzwbhd3XvSiDQ47GKSPhQDtvKYD1LJa5Y/EUEP3:Dy8G6RujcHX6MQ47GKSPyDtvKYD1L05H","tlshash":"0af318cdb3c6702347a720b9606f510bb27759a9684c8414f168d4e6bcb8e8d927bf3d","first_seen":"2025-06-28T23:09:08.303238Z","last_seen":"2025-12-22T03:26:28.05857Z","times_seen":14,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":43,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur4.otcdn.com/headers/ilusion/common/js/CookiesPanel.js?v=1748355810","fqdn":"eur4.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:15.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/ilusion/common/js/CookiesPanel.js?v=1748355810 HTTP/1.1\r\nHost: eur4.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2076\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 27 May 2025 14:23:30 GMT\r\netag: \"6835cae2-81c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000, must-revalidate, proxy-revalidate\r\npragma: public\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: HIT\r\nage: 3244691\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zXWv4eh4sWOra8YjMzMyr9xLl6DKxbTF9RsqvjeJ5R3ooCX0OaQWXSTx05XaOEqkR2A8x2mMzZ5wbWdpZuguDgrNX93b62QmPxLtE48%3D\"}]}\r\ncf-ray: 96fa0d75cb7b49b7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2076,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"f2b2ca54e4f432c2d85b32634733f1f3","sha1":"8f23fdd61f88a219ca2f1e2c5ac2d3f48d7c0e68","sha256":"53096da56dc24373b12b80e3cd67793e5e5763dc79ff3bc9f5b30efc07a00d56","sha512":"7b967d0056e46ebc5d7820cb5eb397a21be9430e9292dae217c527bcae1a8f622265c180f722721c78df276e766813eb329e82a62d89ee3fae9bc8c0b1279cba","ssdeep":"","tlshash":"8a41fe0476f1515342b3b43c934fba1632551583608dcb493d2eb3281f5087a2bb2f5e","first_seen":"2023-03-13T20:32:42Z","last_seen":"2026-05-12T12:11:56.524388Z","times_seen":23,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":9,"connect":33,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/vendor/flatpickr-4.6.9/plugins/rangePlugin.min.js?v=1748355821","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:15.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/vendor/flatpickr-4.6.9/plugins/rangePlugin.min.js?v=1748355821 HTTP/1.1\r\nHost: eur2.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2773\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 27 May 2025 14:23:41 GMT\r\netag: \"6835caed-ad5\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000, must-revalidate, proxy-revalidate\r\npragma: public\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: HIT\r\nage: 2029379\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e8aJRd%2BJoK2Z1eaFoM8hXMPKwijJyckgjpnjCRgg4Y3kIKX3Rw1HeWiWFREY7bMoHlS5KaYgiSTAvLZszWHvXzoZbcvCoHpw1az09nE%3D\"}]}\r\ncf-ray: 96fa0d75aaff49b7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2773,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2773), with no line terminators","md5":"9b77f627ca5c108df2a52dede71a4766","sha1":"5b84280fd0bfa3ac7678fe17e4b89a57832f68c9","sha256":"aaf93a9af24e3c4eac6839adfeac9aabfe0b9e26cb486e9fd62775cdfcc49d4b","sha512":"7c47d883fc71baed790666b8d3ed1f8c5747dfbac5a983aa0a22bec00e00cc270ae08f43a7d5787510833d3cfdb873d45fe12b5a1b8ff3a1333862387f2dd805","ssdeep":"","tlshash":"a4513359b4106a3a32db16b185bf44ceba31dabe5ccbc891713094552d70dc9e32fe8e","first_seen":"2023-03-13T20:32:43Z","last_seen":"2026-05-12T12:11:56.590332Z","times_seen":23,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static11.com-hotel.com/uploads/destination/31705/photo/republica-dominicana-republica-dominicana-1_1473164737.jpeg","fqdn":"static11.com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"104.26.3.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://com-hotel.com/","date":"2025-08-15T16:26:14.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-hotel.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 23 Jul 2025 18:54:03 GMT","end":"Tue, 21 Oct 2025 19:53:48 GMT"},"fingerprint":{"sha1":"EA:55:3C:55:09:75:23:AE:89:4A:FE:4F:11:E7:BA:EC:D6:B2:09:A2","sha256":"B7:68:47:73:B1:DF:BE:D9:C7:0A:24:C4:86:09:05:40:A0:C2:62:36:56:46:E5:73:3B:65:9B:A0:48:33:A5:41"}}},"request":{"raw":"GET /uploads/destination/31705/photo/republica-dominicana-republica-dominicana-1_1473164737.jpeg HTTP/1.1\r\nHost: static11.com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://com-hotel.com/\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 15 Aug 2025 16:26:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 169290\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31104000\r\ncf-bgj: imgq:100,h2pri\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-polished: origSize=181386\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dWWRWaGmlalXEmVDF7%2F9aNsb5tVxZ44HuJeQBW9%2BVEftRlU3%2F3xVHPc03cRnM4taxI5g5DLvT%2FAHSYNhtBA6U6PXSlDKoRL%2B%2Fia1FknD0IpRWQi2Jg%3D%3D\"}]}\r\naccess-control-allow-origin: *\r\netag: \"2c48a-53bd5e4e77480\"\r\nexpires: Thu, 25 Jun 2026 18:32:55 GMT\r\nlast-modified: Tue, 06 Sep 2016 12:25:38 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: sameorigin\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nx-accel-buffering: yes\r\nage: 380683\r\ncf-ray: 96fa0d6eec943438-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":169290,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 2000x976, components 3","md5":"456be2a22f6497920fec9510ca8f43ea","sha1":"cbc3920ed051bb726d7ccdf10576ef6d81ec932a","sha256":"8287b5e2097c10cf309bb32e56e0fbeeb63e17163fd8dc277464083dea2b3e99","sha512":"7ce80451099158245c12dd0e34ed8e81223b2aba75e6204a785da82120ad5ff13a0390d1ffa96394dc54bb9e5288ce3be155a434787871bf79f8b8350205240e","ssdeep":"3072:LPG8sxkuZUYnpp4WA6OPL1OLLnCXCDLCIm7fLOLqmQMl1EF3CD2DIZarTsBZx:1sxkuZrnpOVvPL1OvnCXx6Lnl1M+Ivsl","tlshash":"ecf323a011c9a446d5eddb70025933e70be1e3fd6fcf6af56810290bb86db90a9c3917","first_seen":"2023-07-18T15:04:15Z","last_seen":"2026-03-10T11:37:27.536022Z","times_seen":11,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/common/js/libraries/widgets/search/RadioButtonGroupWidget/Plugin.js?v=1749489350","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:15.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/common/js/libraries/widgets/search/RadioButtonGroupWidget/Plugin.js?v=1749489350 HTTP/1.1\r\nHost: eur2.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1828\r\nserver: cloudflare\r\nlast-modified: Mon, 09 Jun 2025 17:15:50 GMT\r\netag: \"684716c6-724\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\npragma: public\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZXQxIEQJ7KuBMpVrcS9r955FKUnjGw75rB6dqbECLz294A9f%2BoRTQHVlauyBJLDW4lEBE14ANDzWy8GvCG3t1PcPlyI3xB167VdmQs8%3D\"}]}\r\ncf-ray: 96fa0d763cdf49b7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1828,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (1828), with no line terminators","md5":"384c13dac612b0f936483b7314814d69","sha1":"5bef1a7b9f8b81b51e8bcff2849ab092fd1cff9b","sha256":"1b3fc63c1b4fbacd9ea88ae1391e064eb1b6c8f65abc0e63a173bbe7b5738551","sha512":"57dadd7d357688cca7f35446792ee6a9e4d7851f48258517e82bc064af0f869e9352b40e3ed9ece0f0970bb012c74565a9c8899c3f5e42f8ef75620c8d15ca69","ssdeep":"","tlshash":"d031e285f2ab385a43ad7830553f674593690dead58878989d20f0f3e970f428e32f6d","first_seen":"2025-06-28T23:09:08.1304Z","last_seen":"2026-05-12T12:11:56.532381Z","times_seen":14,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Ubuntu+Condensed|Open+Sans:400,700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://com-hotel.com/","date":"2025-08-15T16:26:14.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"GET /css?family=Ubuntu+Condensed|Open+Sans:400,700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://com-hotel.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 15 Aug 2025 16:26:14 GMT\r\ndate: Fri, 15 Aug 2025 16:26:14 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13632,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"75a0aedb2c29cbdb7d7b9ae6cf07b302","sha1":"0c60ad00e088c417bbf30b2f1e29fc87bccb6b6d","sha256":"5f90ec7ccde6cc9377df017a6b98db410df24152eccd50aa26e6d72eb4be6067","sha512":"379a53ded29f561a3f032648e4813cb45e4ea7bed1cced40d663dfa7b9ea2e8f170d14922e4924d8092a44dbaa40cd4c6e3a2c1ba8c1c55df8c1bfb2aad3eb59","ssdeep":"192:wZdAZVZoZd1Z6ZwqbZAbqGIwV4RZNZwqZtZdZZMZhZdsZ/ZwqmZAbqGIwV4YZEZt:i2GqY4xl5qY4w8","tlshash":"7e525ea0042b5810a7435cd633de7e30ee0fa2257148d0766bfd4b8aeedad6963b431d","first_seen":"2025-06-09T20:45:14.951909Z","last_seen":"2025-08-15T16:26:55.699418Z","times_seen":485,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":18,"dns":1,"connect":7,"send":0,"wait":18,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur1.otcdn.com/headers/widgets/search/transportandhotelsearcherwidget/css/transportandhotelsearcherwidget_base.css?v=1749491591","fqdn":"eur1.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:15.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/widgets/search/transportandhotelsearcherwidget/css/transportandhotelsearcherwidget_base.css?v=1749491591 HTTP/1.1\r\nHost: eur1.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 09 Jun 2025 17:53:11 GMT\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000, must-revalidate, proxy-revalidate\r\npragma: public\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: HIT\r\nage: 1981233\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uNns%2FvUQNVeAdg%2BddaN16QZez3EzDdDACZW5MOsh8H7Pvj8hj4Er9BrQWONyv2rJF%2B7uuRWxhNCsItAz0AFtJ6stdrFrwwH8bxNqvTc%3D\"}]}\r\netag: W/\"68471f87-0\"\r\ncontent-encoding: br\r\ncf-ray: 96fa0d754a0649b7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T15:20:42.416165Z","times_seen":15223586,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur3.otcdn.com/headers/vendor/handlebars/custom_helpers.js?v=1749490745","fqdn":"eur3.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:15.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/vendor/handlebars/custom_helpers.js?v=1749490745 HTTP/1.1\r\nHost: eur3.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 6078\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 09 Jun 2025 17:39:05 GMT\r\netag: \"68471c39-17be\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000, must-revalidate, proxy-revalidate\r\npragma: public\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: HIT\r\nage: 2029379\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EbGuGde%2FigFFRqeaCNTycTV%2FrcDClVTuqW2duUemSNJYcMnh8xniXdrtnP1r4UUee1VAydUJXPGvTE4ePeohjgMzyifrnO6mfInhzTg%3D\"}]}\r\ncf-ray: 96fa0d758ac049b7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6078,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6078), with no line terminators","md5":"8d5f223260bd032edad32a2486f8e5e9","sha1":"145198a4ebb7ddec3a8840e681db88e91a7e7017","sha256":"c5e25b5d1d795f977febefb930f52dc7f8712c483d3bb169e6b960f7e63a2b16","sha512":"53cb03db31299d1626a6b73998ef744bcaf0b3a5ee69fe6d23b03ce6126ec3e9d9d8916686ab0daa05fa7e15e0145a0c4c07c3029c140cbd2d6fe66d98629c68","ssdeep":"96:pkgmAEDmy2Pp9ngqclL+J+jvvv36vzxvGR3uMRbQMhTWLFP2FWiaeOXTZWxwC6tN:pfmHmy2Pp9nfAL+I733KvGcMRbQMhTYT","tlshash":"43c1554cebcef947a6d639745d6f5183a7a65701660cc8acf440d3e15ab988ac03bf31","first_seen":"2023-03-13T20:32:43Z","last_seen":"2026-05-12T12:11:56.509701Z","times_seen":23,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"com-hotel.com/compiled/lp-home-company-default-template.css","fqdn":"com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.129.55.48","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://com-hotel.com/","date":"2025-08-15T16:26:13.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com-hotel.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 02:30:46 GMT","end":"Sat, 08 Nov 2025 02:30:45 GMT"},"fingerprint":{"sha1":"0B:8A:1E:6C:23:CC:63:19:29:31:67:DE:3D:5B:71:D9:CC:0E:F9:C8","sha256":"E1:C6:52:2D:8E:1B:0B:71:99:30:1E:97:D0:0D:8A:7F:D6:93:89:4F:EC:54:28:15:56:2D:B8:4B:A3:69:AF:44"}}},"request":{"raw":"GET /compiled/lp-home-company-default-template.css HTTP/1.1\r\nHost: com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://com-hotel.com/\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173; PHPSESSID=savjjkb6rnnhi299dtfd2vevvh; _bb_sofia_GEO_COUNTRY_CODE=NO; _bb_sofia_GEO_LOCALE=en; device_view=full\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:13 GMT\r\ncontent-type: text/css\r\ncontent-length: 1003\r\nlast-modified: Tue, 12 Aug 2025 13:15:24 GMT\r\netag: \"135e-63c2ad5414754-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Sat, 15 Aug 2026 16:26:13 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nserver: nginx-more\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4958,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4284)","md5":"baf7325101488b4c7eac7ce775ec8db8","sha1":"dbe60adbd30e2573b6aa8bf01036091f8a375afc","sha256":"3ec35743cd6d6dd689791c2bb6717738aa211f64ffc86ffb6815da2a8779ee55","sha512":"816cff4303448298377e17c1065a453483736e421cf91deca8e5999b01448a6962bd19dba8d6d9e9812b2f79dce4d0d16499523785504b2edd483f728240f973","ssdeep":"96:IUlMgCux/gv9YtGOMMUdgCP6KtGOMMWhCgfMPdGnv:9yHmgFYtGOIdgCSKtGOahCgfMlGnv","tlshash":"6ea1df340b40013f74d3156fb73c364ca6a9e287c92aae9a5496e7db92cfac405733b0","first_seen":"2023-07-18T15:04:15Z","last_seen":"2026-05-09T06:32:58.593456Z","times_seen":49,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"com-hotel.com/compiled/c-home-company-default-template.js","fqdn":"com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.129.55.48","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://com-hotel.com/","date":"2025-08-15T16:26:13.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com-hotel.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 02:30:46 GMT","end":"Sat, 08 Nov 2025 02:30:45 GMT"},"fingerprint":{"sha1":"0B:8A:1E:6C:23:CC:63:19:29:31:67:DE:3D:5B:71:D9:CC:0E:F9:C8","sha256":"E1:C6:52:2D:8E:1B:0B:71:99:30:1E:97:D0:0D:8A:7F:D6:93:89:4F:EC:54:28:15:56:2D:B8:4B:A3:69:AF:44"}}},"request":{"raw":"GET /compiled/c-home-company-default-template.js HTTP/1.1\r\nHost: com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://com-hotel.com/\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173; PHPSESSID=savjjkb6rnnhi299dtfd2vevvh; _bb_sofia_GEO_COUNTRY_CODE=NO; _bb_sofia_GEO_LOCALE=en; device_view=full\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:13 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 1686\r\nlast-modified: Tue, 12 Aug 2025 13:15:25 GMT\r\netag: \"1273-63c2ad5585dbd-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Sat, 15 Aug 2026 16:26:13 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nserver: nginx-more\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4723,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2491)","md5":"a057cc4b2c9f9b6827977d3e7df67dab","sha1":"6159e93c963343ca6464f5a8a058419de212a0fa","sha256":"ce10aa08344fd949fbe3aefe98bb2c96683c8b01a364646f1894214a701ecde9","sha512":"000b9f12af07f2b83800adca37ef50b597fbe5c4076fb51eba74b831bc41c73ac180c27fa56820909299018d7687545bf8229bd5947c5ce0e7cad7622c8bdba0","ssdeep":"96:FhOZu4v3tbs+V8GeJgLcidC4IDc9f4QK2gelbBBgWTReD:z0FFQHJyW4yLnelbBy1","tlshash":"86a150c67a4454a3f2db2c3a027faa95257375bfdc86ad85540258a14ab98cf2333bc4","first_seen":"2023-07-18T15:04:15Z","last_seen":"2026-05-09T06:32:58.629868Z","times_seen":51,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/common/js/libraries/util/StringAlternativesGenerator.js?v=1749489456","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:15.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/common/js/libraries/util/StringAlternativesGenerator.js?v=1749489456 HTTP/1.1\r\nHost: eur2.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 8529\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 09 Jun 2025 17:17:36 GMT\r\netag: \"68471730-2151\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000, must-revalidate, proxy-revalidate\r\npragma: public\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: HIT\r\nage: 2029379\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L%2FxpDU%2FvTdvgERTAd57eg6wKwilZ5vaob8iERO0whkNPFLvW4Fgq2dzLwtFRfuQYI4fHtFkeph8TokhnZYoivOXPsVnN1DByVNoGwFo%3D\"}]}\r\ncf-ray: 96fa0d759ad949b7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8529,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7287), with no line terminators","md5":"2364fe768913159161696d55bb62ccc0","sha1":"2642abee0065424d12cd1c68cd853d0357d2a463","sha256":"25a66c07596ea931b9ef3ae5df1f7305725ea8e53a34c4a82024bb7e6d0d602b","sha512":"cd92ac0d6fd958ee89275c4b62968be7e3da84bac935a83394af486b14e54e3b86a00b9e0aff6557841859b3ddef9bff9640f284fdfdeb7a0e609a81e2c4e815","ssdeep":"96:ZFpF2V1mlPcuqJEc/W6C4upbJAI20/Wj9IbIwtYHiDIRIT59KPikmYkh+x/kW6HY:3jOCSJrtwIgTrYkh+x/kW6HujHy1YLn","tlshash":"1302ef3d9787b70e118f3a8114f15c2f22bab736316b7906d8550d44a29a3877bee78c","first_seen":"2023-03-13T20:32:43Z","last_seen":"2026-05-12T12:11:56.497257Z","times_seen":23,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":9,"connect":19,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur3.otcdn.com/headers/widgets/search/js/SearcherCustomerLocationParams.js?v=1749488646","fqdn":"eur3.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:15.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/widgets/search/js/SearcherCustomerLocationParams.js?v=1749488646 HTTP/1.1\r\nHost: eur3.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 768\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 09 Jun 2025 17:04:06 GMT\r\netag: \"68471406-300\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000, must-revalidate, proxy-revalidate\r\npragma: public\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: HIT\r\nage: 2029379\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KCVyMAqTxuPJu3UoZter4IsHYXP%2FNWc7ikmakau1UI734Tohd1gT3Cgd2Jij2gJfoA0wJab05rroFmqfaN7V5B%2BPnQPxGMi10%2FdYCU8%3D\"}]}\r\ncf-ray: 96fa0d763cd949b7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":768,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (768), with no line terminators","md5":"398d68bd44e64eb1d702828de23f575f","sha1":"69ea58b895967d715282461bd81b6002476562af","sha256":"b172a4f0cf06f96beb6387268a29152c5bff939daf8b143f071b7ac61247938e","sha512":"5435e5d70a16cd705d116334be2c5b3050c0a21ed6921f6d614c251988b8609ddaf51a23e78fd122e42a1f988716f02dc890d6799a4ec5070e4bdd9d552a6692","ssdeep":"","tlshash":"8701898872e6a0f496f790720d5f22115076443621e698e87aa9c09fdebce194513f2a","first_seen":"2023-03-13T20:32:43Z","last_seen":"2026-02-03T13:35:48.410234Z","times_seen":19,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking.mkp10-2.com-hotel.com/headers/widgets/search/journeylocationwidget/css/journeylocationwidget_ssm.less","fqdn":"booking.mkp10-2.com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.222.42.74","port":443,"asn":3257,"as":"GTT Communications Inc.","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:16.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booking.mkp10-2.com-hotel.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 15:29:42 GMT","end":"Sat, 25 Oct 2025 15:29:41 GMT"},"fingerprint":{"sha1":"57:68:C3:79:2F:35:9C:F6:B6:43:DA:EE:68:C6:38:20:F8:16:92:45","sha256":"39:40:E7:DD:A6:26:78:27:3D:A3:E2:98:35:0A:FD:32:DB:0E:0C:90:48:84:D3:3C:1B:F3:9B:69:9B:F3:C5:94"}}},"request":{"raw":"GET /headers/widgets/search/journeylocationwidget/css/journeylocationwidget_ssm.less HTTP/1.1\r\nHost: booking.mkp10-2.com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173; _ga_RRL6TC2WHG=GS2.1.s1755275174$o1$g0$t1755275174$j60$l0$h0; _ga_VSVH2X36Y6=GS2.1.s1755275174$o1$g0$t1755275174$j60$l0$h0; brand=30389; mkt_pref=YToxOntzOjEwOiJ0cmFja3BhcmFtIjtzOjM4OiJhJTNBMCUzQSU3QiU3RERBVEFfU0VQQVJBVE9SNDE4OTAyMDk3NyI7fQ%3D%3D; info_localizacion=30169%2Fno%2FNOK%2F; _upfs=eyJtYXJrZXRfaWQiOjM5LCJsYW5nXzM5Ijoibm8ifQ%3D%3D; remite=olt_bookingmkp10-2com-hotel%2Ftrack_portal\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 15 Aug 2025 16:26:16 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 27 May 2025 14:23:44 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 158\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":158,"size_decoded":0,"mime_type":"text/xml","magic":"ASCII text","md5":"2cde2a96fa1741805653f1cfa171ef2d","sha1":"4a52437c3a47ebdb55fcba3e59cb82ca50c5422b","sha256":"65b677e0bab81f66683ad577beebfa6ab10c76ad71e71e5709959b2dc9c6c279","sha512":"41d406226a8491c43c84a1bf1a34d96a89d1bfc19f180e8d95acf9a1ed22ac7ec9f4fd655a40ac909b079aa06c13d3a572e516d353c90d34348101d3b094afdf","ssdeep":"","tlshash":"7ec08c1a00e4c49f430d8140186eb1047ed830802bce9d8319c220a0cf7cdec0020280","first_seen":"2023-07-18T15:04:15Z","last_seen":"2026-05-12T12:11:56.550413Z","times_seen":15,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking.mkp10-2.com-hotel.com/headers/widgets/transport/search/transporttrainsearcherwidget/css/transporttrainsearcherwidget_ssm.less","fqdn":"booking.mkp10-2.com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.222.42.74","port":443,"asn":3257,"as":"GTT Communications Inc.","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:17.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booking.mkp10-2.com-hotel.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 15:29:42 GMT","end":"Sat, 25 Oct 2025 15:29:41 GMT"},"fingerprint":{"sha1":"57:68:C3:79:2F:35:9C:F6:B6:43:DA:EE:68:C6:38:20:F8:16:92:45","sha256":"39:40:E7:DD:A6:26:78:27:3D:A3:E2:98:35:0A:FD:32:DB:0E:0C:90:48:84:D3:3C:1B:F3:9B:69:9B:F3:C5:94"}}},"request":{"raw":"GET /headers/widgets/transport/search/transporttrainsearcherwidget/css/transporttrainsearcherwidget_ssm.less HTTP/1.1\r\nHost: booking.mkp10-2.com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173; _ga_RRL6TC2WHG=GS2.1.s1755275174$o1$g0$t1755275174$j60$l0$h0; _ga_VSVH2X36Y6=GS2.1.s1755275174$o1$g0$t1755275174$j60$l0$h0; brand=30389; mkt_pref=YToxOntzOjEwOiJ0cmFja3BhcmFtIjtzOjM4OiJhJTNBMCUzQSU3QiU3RERBVEFfU0VQQVJBVE9SNDE4OTAyMDk3NyI7fQ%3D%3D; info_localizacion=30169%2Fno%2FNOK%2F; _upfs=eyJtYXJrZXRfaWQiOjM5LCJsYW5nXzM5Ijoibm8ifQ%3D%3D; remite=olt_bookingmkp10-2com-hotel%2Ftrack_portal\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 15 Aug 2025 16:26:17 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 27 May 2025 14:23:44 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 0\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T15:20:42.416165Z","times_seen":15223586,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-D7G4Q9TG14\u0026cx=c\u0026gtm=457e58e0h2za200\u0026tag_exp=101509157~103116026~103200004~103233427~104684208~104684211~105033763~105033765~105103161~105103163~105231383~105231385","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hrenaissancecancunresortmarina.com-hotel.com/","date":"2025-08-15T16:26:12.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"A2:8A:24:AD:51:7D:A4:62:BB:34:6F:C9:21:A1:B9:E1:2D:A6:0E:C1","sha256":"9F:B9:94:8F:84:D3:44:71:A7:81:72:C8:80:4D:14:02:E3:E0:30:0C:F1:17:27:83:00:82:D9:C3:68:D3:B3:AF"}}},"request":{"raw":"GET /gtag/js?id=G-D7G4Q9TG14\u0026cx=c\u0026gtm=457e58e0h2za200\u0026tag_exp=101509157~103116026~103200004~103233427~104684208~104684211~105033763~105033765~105103161~105103163~105231383~105231385 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hrenaissancecancunresortmarina.com-hotel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 15 Aug 2025 16:26:12 GMT\r\nexpires: Fri, 15 Aug 2025 16:26:12 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1099:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1099:0\r\nreport-to: {\"group\":\"ascgcycc:1099:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1099:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 122138\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":351051,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6006)","md5":"ed31d77eed7fd1751a42ef6bc1e06d1c","sha1":"07691634b12660217adce90ccb067584d76585f3","sha256":"b6b0e83c6cea3a5e2674726da5f82a765e201188ce621e8db769d8c1722e75c2","sha512":"5a7ff32dc9287b868b45888baac8f322949529bf49f18ac26676cc63b08c73985adeafa683fc51dfb3c5d74f087dfa664df7529f9336d6e0ea407f8974f79d79","ssdeep":"6144:+17mo893vsKCBCyGLHUZkpDt1aRIambWeQZZlT:S7mx9fsRBCyGLHUah8ZT","tlshash":"f27428cd73d674629392b478403f018bb17b68a2f44cc899f186c9e52e74aaa4177f7c","first_seen":"2025-08-15T16:26:55.70499Z","last_seen":"2025-08-15T16:26:55.70499Z","times_seen":1,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/common/js/libraries/widgets/search/JourneyLocationWidget/Plugin.js?v=1749489344","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:15.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/common/js/libraries/widgets/search/JourneyLocationWidget/Plugin.js?v=1749489344 HTTP/1.1\r\nHost: eur2.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 6647\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 09 Jun 2025 17:15:44 GMT\r\netag: \"684716c0-19f7\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\npragma: public\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z5U2%2FHkDFssh%2BfP82Y5wq1tiVyxGLTW2NkWzoMntY7V2HvbfnZ6tDX4KhecLE49OI0nx5W50sctCIOeejAhmYJlalmm37P8vz8uPGEM%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 96fa0d763ce349b7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6647,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6647), with no line terminators","md5":"6d539119d1974ee196edd2963a264ae8","sha1":"5bafba66ed304d7950422a1216723e37b1d80b8e","sha256":"6a43d8553772203e45c7e02cce464bf04fa5b87b48c9a612056d485d7ef16442","sha512":"ef55f1934be70a55d2fba6aa907e5e248179c6fba9a67b3ba52bf65c177bf9440370c69faefc74288c4211d600b97b7ba97757e544af3d3bfbe37e4ab347801a","ssdeep":"192:xmfsmM/gl8o8Er+N34rsknr+L7kFBaRa5O96QNqa8y10S:RmM4liAr0b9Vqa8y1t","tlshash":"79d124c7f694941283ffa197dc2a6301a1339aefa550989ce828e4f55530b4ecb37f58","first_seen":"2025-06-28T23:09:08.238254Z","last_seen":"2026-05-12T12:11:56.591061Z","times_seen":14,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/common/js/libraries/widgets/search/SelectGroupWidget/Plugin.js?v=1749489349","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:15.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/common/js/libraries/widgets/search/SelectGroupWidget/Plugin.js?v=1749489349 HTTP/1.1\r\nHost: eur2.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1831\r\nserver: cloudflare\r\nlast-modified: Mon, 09 Jun 2025 17:15:49 GMT\r\netag: \"684716c5-727\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\npragma: public\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Iv5AQGsrJpV7wG4tqg2p6if5GUobD0hdp9WHVOYwccwtDDnSD152EbyOrqCgianE1jbpNwbnAOM%2BWvYwS5tqGIbZylOqxrp6i1NOXgc%3D\"}]}\r\ncf-ray: 96fa0d764d0749b7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1831,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (1831), with no line terminators","md5":"51b3761d22414dbcb89446205cf311dd","sha1":"169864d10fae5151fc43a7c2a836a36f4c8435e2","sha256":"9a909508c6f57c52f6a7ae1de5753855884ece6f9ab73f866afd8946a49bc32d","sha512":"bef9855f869f883257dfd3a42b026ddc2d99760ed11a055b8ae31f14a60c3caeb03908d46eb6daafa7ca7ea137a7954ef68066875c102bbd5b7cf4c3ea31360c","ssdeep":"","tlshash":"73313505e67d1d3697fe14be859e13096353ca9fc2c488786f28d9dad464ee41162b04","first_seen":"2023-03-13T20:32:42Z","last_seen":"2026-05-12T12:11:56.533256Z","times_seen":18,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxcdn.bootstrapcdn.com/bootstrap/3.3.6/css/bootstrap.min.css","fqdn":"maxcdn.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.10.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://com-hotel.com/","date":"2025-08-15T16:26:13.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Jul 2025 02:43:39 GMT","end":"Fri, 10 Oct 2025 03:43:37 GMT"},"fingerprint":{"sha1":"C1:BD:D6:84:57:89:FE:9E:6D:F9:1F:26:76:1D:7C:45:E8:23:F6:35","sha256":"42:6A:B9:E6:CC:53:CB:12:2A:7A:43:B8:3D:90:FC:5E:4D:CA:A2:E0:3D:B4:2E:38:10:A6:6F:26:86:7F:D5:A0"}}},"request":{"raw":"GET /bootstrap/3.3.6/css/bootstrap.min.css HTTP/1.1\r\nHost: maxcdn.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://com-hotel.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://com-hotel.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:13 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncf-ray: 96fa0d6bcd493a56-ARN\r\ncdn-pullzone: 252412\r\ncdn-uid: b1941f61-b576-4f40-80de-5677acb38f74\r\ncdn-requestcountrycode: DE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"2f624089c65f12185e79925bc5a7fc42\"\r\nlast-modified: Mon, 25 Jan 2021 22:03:59 GMT\r\ncdn-cachedat: 10/12/2024 20:34:21\r\ncdn-proxyver: 1.04\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1048\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 7268781bf2dc4710393157b52dbab95d\r\ncdn-cache: HIT\r\ncf-cache-status: HIT\r\nage: 1669974\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":121260,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65371)","md5":"2f624089c65f12185e79925bc5a7fc42","sha1":"8eb176c70b9cfa6871b76d6dc98fb526e7e9b3de","sha256":"eece6e0c65b7007ab0eb1b4998d36dafe381449525824349128efc3f86f4c91c","sha512":"9cda3ec821c4ca7d2c98cc52b309dffce9d7ebf2b026e65394d6418dab8a8532b473ecd3faae49382c7450585743aac947d8e0e84b3c80fb83dae65c6032ea4b","ssdeep":"768:ly3Gxw/jc/QWlJxtQ8IuiHlqLmzI4X8OAduFKbv2ctg2Bd8JP7ecQVvH1FS:Xw/o1BIuiHlqLmN8lDbNmPbh","tlshash":"4dc3c7a0f21031ea7333c55a75d0ed872219a153e56a4fb7f22f25d88f845ca1673f1a","first_seen":"2023-04-05T03:20:05Z","last_seen":"2026-05-15T15:30:47.901241Z","times_seen":16578,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":20,"dns":1,"connect":8,"send":0,"wait":20,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/1.11.3/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://com-hotel.com/","date":"2025-08-15T16:26:13.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"GET /ajax/libs/jquery/1.11.3/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://com-hotel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 33507\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 13 Aug 2025 19:04:47 GMT\r\nexpires: Thu, 13 Aug 2026 19:04:47 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nage: 163287\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":95992,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32038)","md5":"f03e5a3bf534f4a738bc350631fd05bd","sha1":"37b1db88b57438f1072a8ebc7559c909c9d3a682","sha256":"aec3d419d50f05781a96f223e18289aeb52598b5db39be82a7b71dc67d6a7947","sha512":"8eeeaefb86cf5f9d09426814f7b60e1805e644cac3f5ab382c4d393dd0b7ab272c1909a31a57e6d38d5acf207555f097a64a6dd62f60a97093e97bb184126d2a","ssdeep":"1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmm:R+41ZqLTW8xRrqSb8qGH77da98Hr3","tlshash":"1793d8d9b7d67162977730b850bf510bb13a98eab80c4ca0f0a4d8e47d74a89507bf2d","first_seen":"2023-03-07T01:02:11Z","last_seen":"2026-05-15T15:26:14.987712Z","times_seen":23819,"resource_available":true,"data":null}},"time_used":390,"timings":{"blocked":-1,"dns":0,"connect":27,"send":0,"wait":28,"receive":29,"ssl":306},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"com-hotel.com/compiled/pp-home-company-default-template.js","fqdn":"com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.129.55.48","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://com-hotel.com/","date":"2025-08-15T16:26:13.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com-hotel.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 02:30:46 GMT","end":"Sat, 08 Nov 2025 02:30:45 GMT"},"fingerprint":{"sha1":"0B:8A:1E:6C:23:CC:63:19:29:31:67:DE:3D:5B:71:D9:CC:0E:F9:C8","sha256":"E1:C6:52:2D:8E:1B:0B:71:99:30:1E:97:D0:0D:8A:7F:D6:93:89:4F:EC:54:28:15:56:2D:B8:4B:A3:69:AF:44"}}},"request":{"raw":"GET /compiled/pp-home-company-default-template.js HTTP/1.1\r\nHost: com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://com-hotel.com/\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173; PHPSESSID=savjjkb6rnnhi299dtfd2vevvh; _bb_sofia_GEO_COUNTRY_CODE=NO; _bb_sofia_GEO_LOCALE=en; device_view=full\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:13 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 10398\r\nlast-modified: Tue, 12 Aug 2025 13:15:25 GMT\r\netag: \"95f9-63c2ad54d1acd-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Sat, 15 Aug 2026 16:26:13 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nserver: nginx-more\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38393,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32344)","md5":"d7522bfb67ceff32bbd738c21ff9c3b2","sha1":"6de9425d4e2544ef24253da501192be999befd13","sha256":"23bb32f15f3208fd5cea91b20ca36cf0a7c603e2acec8193ee02f455a67614af","sha512":"f0fba6d804035e87260a31b28324550466280e296a0a3576ded8e1a1bbda1e70b06dac9b3c298d4111c7485befade097eaf75b9939bf7372fa1e6511d3a66512","ssdeep":"768:ub8qCDgkwozV0g5pDyQL+jdpGo41J7KGBxvy0Ihka0Ih2lh5aJaGQDdy/6:u3Cjwozz5NXodGBxXaJaRDt","tlshash":"9803f8997045255582fb91b5001727037733e9790c8a443cbd7cfadaa9b8e1a60befbc","first_seen":"2023-07-18T15:04:14Z","last_seen":"2026-05-09T06:32:58.615723Z","times_seen":51,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static11.com-hotel.com/uploads/destination/29086/photo/argentina-santa-fe_1473172096.jpeg","fqdn":"static11.com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"104.26.3.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://com-hotel.com/","date":"2025-08-15T16:26:14.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-hotel.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 23 Jul 2025 18:54:03 GMT","end":"Tue, 21 Oct 2025 19:53:48 GMT"},"fingerprint":{"sha1":"EA:55:3C:55:09:75:23:AE:89:4A:FE:4F:11:E7:BA:EC:D6:B2:09:A2","sha256":"B7:68:47:73:B1:DF:BE:D9:C7:0A:24:C4:86:09:05:40:A0:C2:62:36:56:46:E5:73:3B:65:9B:A0:48:33:A5:41"}}},"request":{"raw":"GET /uploads/destination/29086/photo/argentina-santa-fe_1473172096.jpeg HTTP/1.1\r\nHost: static11.com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://com-hotel.com/\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 15 Aug 2025 16:26:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 112139\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31104000\r\ncf-bgj: imgq:100,h2pri\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-polished: origSize=129364\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9mnZ0e0C0XJP5%2FuDemCpTwF3nNeN89mL%2BoyRjvj0Vr74BLiJT3Xel%2BhF1k10HoU0k6bgbPXzdsPbGx%2BT%2FbHSFtzV9d7OZBj%2BMYdHjllddKlAkz0W4g%3D%3D\"}]}\r\naccess-control-allow-origin: *\r\netag: \"1f954-53bd79b79a000\"\r\nexpires: Mon, 03 Aug 2026 01:42:22 GMT\r\nlast-modified: Tue, 06 Sep 2016 14:28:16 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: sameorigin\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nx-accel-buffering: yes\r\ncf-ray: 96fa0d6f0ca03438-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":112139,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 2000x976, components 3","md5":"7747ecd37438c2f45ad049e4f57565f6","sha1":"326ed770b2206e078caecb03b7a11e7f53fc70de","sha256":"8122c74f87ae0a631e4f643239bd049d5ca2763b38afb585a67572a4631f2f4b","sha512":"d1d3ecbf7a12234512f6c5dd59c0523c9ecd85b98892536156409878132e6d95b8354432199e093d1073eb2ecfba9df12ede57557fd18a608fa2ee77d8f5bf13","ssdeep":"3072:oC/e5ugLuVedjlP1IaxNDdMKswP5I0DQn:ne5ZLuE99ziKswP59I","tlshash":"5bb302ff6a19c26dcf9b33f2a3434f6814415a8d3e6062b3fa5c26425865fc47b2a40d","first_seen":"2025-03-11T12:09:34.850779Z","last_seen":"2026-03-09T16:45:38.660197Z","times_seen":3,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/common/js/libraries/widgets/search/CheckDatesScrollWidget/Plugin.js?v=1748355805","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:15.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/common/js/libraries/widgets/search/CheckDatesScrollWidget/Plugin.js?v=1748355805 HTTP/1.1\r\nHost: eur2.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 27 May 2025 14:23:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6835cadd-9304\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\npragma: public\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o7gPnUS0QgwbfZwx6Jw3icNi22pX8luLCnMtNBGXx%2FOdylxDAOaNvj4X5Yh%2B9qe81Ke9FUdWb7ZVoc0YW2WdYbvZgSW0FdChPuDpPcU%3D\"}]}\r\ncf-ray: 96fa0d75ab0749b7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37636,"size_decoded":0,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text","md5":"b19c6ae395ea9419149a4cc99161b144","sha1":"ec4d667cf497cc2c2325d496a64e48c3f9580f91","sha256":"e26ffde5e1951c38f62dbf502e4c19a5a89578699addd34b9b08bfe7d8ebdb3d","sha512":"936cc92d91df0c8fc0984438994bf76f498a3a6fb1f801ac50fa522861674d6955e8b89e551158d54ec7b2725f6c4f7bea0e6a5f9607d462abcac1e7ea7bd7fb","ssdeep":"384:oRo/eQvPeEv1qaVzwZogPu2g/+d4ES3GwGKY8faibujYRIOS8UPPPu2yIvflYPZY:h/eQeERVzKp/bYPZVDQtL/wAnBoWF9Z","tlshash":"73f2240869a7155113ab34398faf23033615444b0b8eed587ebcbaa01f4487585fffea","first_seen":"2025-06-28T23:09:08.10438Z","last_seen":"2025-08-15T16:26:55.710018Z","times_seen":4,"resource_available":true,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/common/js/libraries/widgets/search/OccupancyLayerWidget/Plugin.js?v=1749489331","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:15.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/common/js/libraries/widgets/search/OccupancyLayerWidget/Plugin.js?v=1749489331 HTTP/1.1\r\nHost: eur2.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 7236\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 09 Jun 2025 17:15:31 GMT\r\netag: \"684716b3-1c44\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\npragma: public\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V4G6ULzi56k4J5%2BOImMSrzWwLtT1ivA2weaFMNqNUKBIUlmZyXnXM9xLNeWO3z2COjlhilTZWKxptOMbBNR7tu6bkJ4iOJKVROna3QQ%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 96fa0d75cb7049b7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7236,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (7236), with no line terminators","md5":"ab44dcbf2ffb7685621643872a2d40a8","sha1":"86f272aa4115128c5d2a6fc0437ba9edaeac685b","sha256":"565cc90ad1abdae9612d308480c49148bad4049bbc574ce7ce5a91cd5e463c39","sha512":"9183a1839b789f6bb96f2bdae9b90aff161cd83468d7d1094d391ab6b0a27bca17bd21cc5faf246fd7d05ff04492c8fbacecc183eff6888f97f00325b6821afe","ssdeep":"192:xZWz45w6yziTkeJUpWBZh9mDtBhn3Nr+L7RFIpRag+UlKRmxr2XI72o:qz45w9zIU4BoJ9r0z8H72o","tlshash":"efe1b601b662987bafaa4aa8711f630637b1d90a8454f0cef945e0f13e60dcd1837b76","first_seen":"2025-06-28T23:09:08.228891Z","last_seen":"2026-05-12T12:11:56.475754Z","times_seen":19,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"com-hotel.com/compiled/pb-f.js","fqdn":"com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.129.55.48","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://com-hotel.com/","date":"2025-08-15T16:26:13.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com-hotel.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 02:30:46 GMT","end":"Sat, 08 Nov 2025 02:30:45 GMT"},"fingerprint":{"sha1":"0B:8A:1E:6C:23:CC:63:19:29:31:67:DE:3D:5B:71:D9:CC:0E:F9:C8","sha256":"E1:C6:52:2D:8E:1B:0B:71:99:30:1E:97:D0:0D:8A:7F:D6:93:89:4F:EC:54:28:15:56:2D:B8:4B:A3:69:AF:44"}}},"request":{"raw":"GET /compiled/pb-f.js HTTP/1.1\r\nHost: com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://com-hotel.com/\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173; PHPSESSID=savjjkb6rnnhi299dtfd2vevvh; _bb_sofia_GEO_COUNTRY_CODE=NO; _bb_sofia_GEO_LOCALE=en; device_view=full\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:13 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 17655\r\nlast-modified: Tue, 12 Aug 2025 13:17:23 GMT\r\netag: \"ea8f-63c2adc5d9f88-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Sat, 15 Aug 2026 16:26:13 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nserver: nginx-more\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":60047,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (27420)","md5":"88e06cd2df5db88ee998da3a25526b1c","sha1":"bc0942ba7bfa5142fbbfbfa410ca7db352a8b324","sha256":"31cd6813e2334f65b37f1773ba1ced1b5539e72b4118277fab1e9fc4734c0f2a","sha512":"44ea4f0c264569ed5ee57d48f8f60737273c0b368b8f9dc1c4e765ef5115d032a861655d281aaa2ecbe4f62e4c7b8f4ab90f904bfd10b1d1aedabeea26bd1008","ssdeep":"1536:dIZ1hxMTS5Y4N0ljmeqEj06oidWzYZO5qYjawTW3Jny+09dA:dIZ1DMrjmeqEj06U57Li","tlshash":"bc430a093182616e4adf30fab8eb620e73b6956580495095b9fcd4d1bef8f4470a3f6c","first_seen":"2023-07-16T11:29:17Z","last_seen":"2026-05-15T15:56:25.16733Z","times_seen":2611,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"com-hotel.com/api/en/5809db55-7408-11e8-bfca-000c2914c1c1/adv/render.json?templatePosition=14\u0026country=NO\u0026locationEntityId=\u0026locationEntityClass=\u0026locationEntityType=\u0026useAppRequestEntity=true\u0026device=desktop","fqdn":"com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.129.55.48","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://com-hotel.com/","date":"2025-08-15T16:26:14.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com-hotel.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 02:30:46 GMT","end":"Sat, 08 Nov 2025 02:30:45 GMT"},"fingerprint":{"sha1":"0B:8A:1E:6C:23:CC:63:19:29:31:67:DE:3D:5B:71:D9:CC:0E:F9:C8","sha256":"E1:C6:52:2D:8E:1B:0B:71:99:30:1E:97:D0:0D:8A:7F:D6:93:89:4F:EC:54:28:15:56:2D:B8:4B:A3:69:AF:44"}}},"request":{"raw":"GET /api/en/5809db55-7408-11e8-bfca-000c2914c1c1/adv/render.json?templatePosition=14\u0026country=NO\u0026locationEntityId=\u0026locationEntityClass=\u0026locationEntityType=\u0026useAppRequestEntity=true\u0026device=desktop HTTP/1.1\r\nHost: com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://com-hotel.com/\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173; PHPSESSID=savjjkb6rnnhi299dtfd2vevvh; _bb_sofia_GEO_COUNTRY_CODE=NO; _bb_sofia_GEO_LOCALE=en; device_view=full; _ga_RRL6TC2WHG=GS2.1.s1755275174$o1$g0$t1755275174$j60$l0$h0; _ga_VSVH2X36Y6=GS2.1.s1755275174$o1$g0$t1755275174$j60$l0$h0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: application/json\r\ncontent-length: 133\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nserver: nginx-more\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":155,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d46d1e1ca2ca968e8fd817a37f1b9348","sha1":"d73bf6f34be300bd8f1bc968b630a341928c036e","sha256":"dee96abab88cc9bcea846e6ff2c810bd4058e1491f6e7ca8fca601a6e01235e0","sha512":"b65846495f2a49324d63fda8fc980c7c3157702ae53f452311e2090e5433bfc23c92462eda00994db14bcfc1902bc03687f94a7b170b8e6783bf3754b1e10a46","ssdeep":"","tlshash":"8dc08c409af6ec1f4527a386b82b2c00b2d49084d0b82411893a20b8c2829d7aea324a","first_seen":"2023-07-16T11:29:18Z","last_seen":"2026-05-13T01:11:35.42483Z","times_seen":798,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur3.otcdn.com/headers/vendor/dayjs/1.10.7/plugin/minMax.js?v=1749489783","fqdn":"eur3.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:15.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/vendor/dayjs/1.10.7/plugin/minMax.js?v=1749489783 HTTP/1.1\r\nHost: eur3.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 618\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 09 Jun 2025 17:23:03 GMT\r\netag: \"68471877-26a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000, must-revalidate, proxy-revalidate\r\npragma: public\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: HIT\r\nage: 3151569\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E39SKKkIt%2FlSlzDIHWEh1PNLEXD4OfAzqj8VTCTfkv3XOQTrhehZ4JSe%2B8oTvrkajC2IrPfsFTD7tly57QFq2%2FRPgl4SwBUw%2FimSQTc%3D\"}]}\r\ncf-ray: 96fa0d759ac549b7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":618,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (618), with no line terminators","md5":"1b2a2841abbe78adc266b55e5dc0fc75","sha1":"67c7bcdb77abb35c10cda0144e1c90b39be7bafe","sha256":"492c2e2cd221a7354ef1d93b562f6c59c403a104e7dd6823461173623754a43a","sha512":"f2cb8a12bf569e31b01197c6aba450710489499881a145d329d9a70a67ad77e121dbec745ad049f14981f1b3dac4b4adbc9c2ba8bdb8c384a5aeb458851c2dc5","ssdeep":"","tlshash":"c5f078c6bf417052a7263560903f0007f43a9cb7af4c5854a1119df12d705da40d7fac","first_seen":"2023-03-13T20:32:43Z","last_seen":"2026-05-12T12:11:56.479271Z","times_seen":23,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur3.otcdn.com/headers/vendor/dayjs/1.10.7/plugin/localizedFormat.js?v=1749489784","fqdn":"eur3.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:15.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/vendor/dayjs/1.10.7/plugin/localizedFormat.js?v=1749489784 HTTP/1.1\r\nHost: eur3.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 709\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 09 Jun 2025 17:23:04 GMT\r\netag: \"68471878-2c5\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000, must-revalidate, proxy-revalidate\r\npragma: public\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: HIT\r\nage: 3188699\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ISi48uXCky16sWzwfSg2uTvNpcfuVCO6XsyD7mfk3XtwhaPOfXz8%2FdNBWQqH%2FMCvXi3PtqzEoasl64uKTN9%2BzeAayHcrjHcCrTaS7g8%3D\"}]}\r\ncf-ray: 96fa0d759ac949b7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":709,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (709), with no line terminators","md5":"ea609b4ce97e30900df4266803fe68c3","sha1":"aede63b0199ed2d221170238e2ef3db15f5fc13b","sha256":"eb27b1ef12bd40db3a93af0ce93e0e7e791bd4cfb62c373518d38647a3bff33c","sha512":"2b2dc3e0285b916aa589a22cb41bc53b321cab52546e359c12f75fe832edb4a40da3247e66321089d700eacbbac50eee1be121f395a5272bc9bbf009a2b3b0f0","ssdeep":"","tlshash":"400144cef65a6c97435571f0405f8657beb6d6b615cd088110c1a0f62e7484c44a3fd9","first_seen":"2023-11-27T12:30:24Z","last_seen":"2026-05-12T12:11:56.515541Z","times_seen":23,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking.mkp10-2.com-hotel.com/headers/widgets/search/hotelsearchwidget/css/hotelsearchwidget_ssm.less","fqdn":"booking.mkp10-2.com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.222.42.74","port":443,"asn":3257,"as":"GTT Communications Inc.","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:17.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booking.mkp10-2.com-hotel.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 15:29:42 GMT","end":"Sat, 25 Oct 2025 15:29:41 GMT"},"fingerprint":{"sha1":"57:68:C3:79:2F:35:9C:F6:B6:43:DA:EE:68:C6:38:20:F8:16:92:45","sha256":"39:40:E7:DD:A6:26:78:27:3D:A3:E2:98:35:0A:FD:32:DB:0E:0C:90:48:84:D3:3C:1B:F3:9B:69:9B:F3:C5:94"}}},"request":{"raw":"GET /headers/widgets/search/hotelsearchwidget/css/hotelsearchwidget_ssm.less HTTP/1.1\r\nHost: booking.mkp10-2.com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173; _ga_RRL6TC2WHG=GS2.1.s1755275174$o1$g0$t1755275174$j60$l0$h0; _ga_VSVH2X36Y6=GS2.1.s1755275174$o1$g0$t1755275174$j60$l0$h0; brand=30389; mkt_pref=YToxOntzOjEwOiJ0cmFja3BhcmFtIjtzOjM4OiJhJTNBMCUzQSU3QiU3RERBVEFfU0VQQVJBVE9SNDE4OTAyMDk3NyI7fQ%3D%3D; info_localizacion=30169%2Fno%2FNOK%2F; _upfs=eyJtYXJrZXRfaWQiOjM5LCJsYW5nXzM5Ijoibm8ifQ%3D%3D; remite=olt_bookingmkp10-2com-hotel%2Ftrack_portal\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 15 Aug 2025 16:26:17 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 27 May 2025 14:23:44 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 0\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T15:20:42.416165Z","times_seen":15223586,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"com-hotel.com/compiled/lb-default-template.css","fqdn":"com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.129.55.48","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://com-hotel.com/","date":"2025-08-15T16:26:13.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com-hotel.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 02:30:46 GMT","end":"Sat, 08 Nov 2025 02:30:45 GMT"},"fingerprint":{"sha1":"0B:8A:1E:6C:23:CC:63:19:29:31:67:DE:3D:5B:71:D9:CC:0E:F9:C8","sha256":"E1:C6:52:2D:8E:1B:0B:71:99:30:1E:97:D0:0D:8A:7F:D6:93:89:4F:EC:54:28:15:56:2D:B8:4B:A3:69:AF:44"}}},"request":{"raw":"GET /compiled/lb-default-template.css HTTP/1.1\r\nHost: com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://com-hotel.com/\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173; PHPSESSID=savjjkb6rnnhi299dtfd2vevvh; _bb_sofia_GEO_COUNTRY_CODE=NO; _bb_sofia_GEO_LOCALE=en; device_view=full\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:13 GMT\r\ncontent-type: text/css\r\ncontent-length: 1977\r\nlast-modified: Tue, 12 Aug 2025 13:15:40 GMT\r\netag: \"23df-63c2ad633a10b-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Sat, 15 Aug 2026 16:26:13 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nserver: nginx-more\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9183,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7813)","md5":"1398c4a3290bd4d4ad8fcbc449529bf7","sha1":"9bff20d3633331ad7f4dde1db0fe45da449ad6f4","sha256":"af1a903329126f8167c2c18d0cb628cb10d8e662b9e2f0c54bab149f7bc8c999","sha512":"752deb789ae72d829388a188a36823f04f9bd36f39135e614099bbf6e01e026f96d459d7d45a75d17bca0c1f9010809326ecd871c29017a437fa4fb00504d91d","ssdeep":"192:qXgdhuhxnnmAVTgCF1fafJ32/KCuzjTl/ENtnW8Stmq4h/RfHHpwqKAcA9ad6d1y:un5mAV13fafJ32/KCuzjTl/ENtnWKq4o","tlshash":"dc12cc6c53a03abcbb378727e686cf9431482a31aed7d58bff51558f81c4198db0ab14","first_seen":"2023-07-18T15:04:15Z","last_seen":"2026-05-09T06:32:58.618755Z","times_seen":51,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"com-hotel.com/compiled/pb-default-template.js","fqdn":"com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.129.55.48","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://com-hotel.com/","date":"2025-08-15T16:26:13.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com-hotel.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 02:30:46 GMT","end":"Sat, 08 Nov 2025 02:30:45 GMT"},"fingerprint":{"sha1":"0B:8A:1E:6C:23:CC:63:19:29:31:67:DE:3D:5B:71:D9:CC:0E:F9:C8","sha256":"E1:C6:52:2D:8E:1B:0B:71:99:30:1E:97:D0:0D:8A:7F:D6:93:89:4F:EC:54:28:15:56:2D:B8:4B:A3:69:AF:44"}}},"request":{"raw":"GET /compiled/pb-default-template.js HTTP/1.1\r\nHost: com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://com-hotel.com/\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173; PHPSESSID=savjjkb6rnnhi299dtfd2vevvh; _bb_sofia_GEO_COUNTRY_CODE=NO; _bb_sofia_GEO_LOCALE=en; device_view=full\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:13 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 319\r\nlast-modified: Tue, 12 Aug 2025 13:15:40 GMT\r\netag: \"283-63c2ad6372385-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Sat, 15 Aug 2026 16:26:13 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nserver: nginx-more\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":643,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (643), with no line terminators","md5":"125ee738d6485fefe9a9908b572d4bcc","sha1":"ee33723c22a1d8b4194691faf3b525c7baa61d56","sha256":"409a118532983282df63a998ff9c1ec167ad1c0c125e3131d45d3fd8c2b47c92","sha512":"f74b8069fd3a5f08666c8675d193b11cf327a45904ee4b9ad37a1e73c72c18caf5b7965567c627bee6697e10fc7500a051ce32233ed11b88e200a1ae0109d007","ssdeep":"","tlshash":"80f0492d1050705c0777c6a1d86fb2673476036d6524e27d09b0fca839b2d7a26bbf94","first_seen":"2023-07-16T11:29:18Z","last_seen":"2026-05-15T15:56:25.12825Z","times_seen":2584,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur1.otcdn.com/headers/ilusion/magallanes/dist/svg/sprite/magallanes_general_sprite.svg?v=1748355813","fqdn":"eur1.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:15.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/ilusion/magallanes/dist/svg/sprite/magallanes_general_sprite.svg?v=1748355813 HTTP/1.1\r\nHost: eur1.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://booking.mkp10-2.com-hotel.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 27 May 2025 14:23:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6835cae5-2a3d2\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000, must-revalidate, proxy-revalidate\r\npragma: public\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: HIT\r\nage: 1669973\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uTLsM733CbUr5t9GfZ%2FABZFOoCWzZACxl8a05GgWZoC1SxNqaPlFDyNmO7xxhI2Xofv2jnSvygpoCKEfT%2Bx8uRJQPqOhIbykq4Bitmo%3D\"}]}\r\ncf-ray: 96fa0d751ca5e0fe-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":173010,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"38bcc76e398e1d924e5bb7c63b308998","sha1":"4f7196cf3dd2ff87039a4551782583eee30e032c","sha256":"d0da32e09c34a19c395d296aa58718513ee2eb753aec3148a4a39ebc40e6b6bb","sha512":"0f0b88dba531e5e442ded28a43a40f6065dbbd2db80fe59fd27e3b1738bf759a113db97ad987707db11af57c89b30d864cb7da0c11051fd744d18b355f89b7b5","ssdeep":"1536:aoGSmJyFraa7ujAZI3swDHTgQKNamEUzDd9XlJbOv/CjHUkA/vGOU3dfHi1sX9Kb:a56I1U99VpI+fXq8f8eKMNpezz","tlshash":"f3f3c7da673092ccb8ce8d7eef399985652bb0fa39f68dc4919e4b18654bcc8f504d10","first_seen":"2025-06-28T23:09:08.301096Z","last_seen":"2026-05-12T12:11:56.562857Z","times_seen":19,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":52,"dns":21,"connect":8,"send":0,"wait":28,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur3.otcdn.com/headers/common/js/libraries/widgets/search/NightsScrollWidget/Renderers/SelectNights.js?v=1749489353","fqdn":"eur3.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:15.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/common/js/libraries/widgets/search/NightsScrollWidget/Renderers/SelectNights.js?v=1749489353 HTTP/1.1\r\nHost: eur3.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 194\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 09 Jun 2025 17:15:53 GMT\r\netag: \"684716c9-c2\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\npragma: public\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CO8j8LKCLU%2F3oLMDEIOo9BQiMKnnc5ULGumA3m4fs94CME%2FuOktculN5DbPasFT69qrVnGU1Rw9bsZUqYT%2FGoA1%2FlrwQg3Q246KZ5Qg%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 96fa0d75ab2049b7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":194,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with no line terminators","md5":"098e5dc7ae3df6899f83725e0c669dd5","sha1":"933cc72fdf5f1c3a3227b6884582bfe11f7efce3","sha256":"cc5e75b6503b2e61b47443a70b3ba7e32b0b7272c2bcbbf10ad69edc6e4a9b77","sha512":"2b2645edd5e2d7fe71f44d266d6f5eea687457e647f0f7931dcc6344b20c679a0365f76de59ec626445b8a0d444d78dd1c6a7e98480b8340bef20a669cd66194","ssdeep":"","tlshash":"e1c02284a6aeb81233de11e8c41fa46708b90b00b40c8080d962d2f1973b9acc23390e","first_seen":"2023-03-13T20:32:43Z","last_seen":"2026-05-12T12:11:56.487072Z","times_seen":23,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/common/js/libraries/widgets/generic/CheckBoxGroupWidget/Plugin.js?v=1749489327","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:15.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/common/js/libraries/widgets/generic/CheckBoxGroupWidget/Plugin.js?v=1749489327 HTTP/1.1\r\nHost: eur2.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 4628\r\nserver: cloudflare\r\nlast-modified: Mon, 09 Jun 2025 17:15:27 GMT\r\netag: \"684716af-1214\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\npragma: public\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GOiMcAfZ8JuDNbIxDCiY0T%2BiO%2FBucGYRq9OW%2B3nTUrVWjZR%2FGb7Pzlw8NceTgzUYS4%2F0nZ2c5CBdO3XYqxx3XYupdHqSEGyjTRhteFQ%3D\"}]}\r\ncf-ray: 96fa0d763ce549b7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4628,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4628), with no line terminators","md5":"33b085a230007db588780537d0db48e6","sha1":"c6ba2e6a4da14a351c06e9b514999a28c8cd9445","sha256":"cd0f9ee72e924d088bed7cdb7663f0ebebf3082c4621a268d0da6811a2b076c1","sha512":"df8e3e75f5bbaa68e4b1303206487de5d8df0136911682c10c02f63ba875fda1204767d2e49cd962cd3767464e1786918a71faaad1352b05feaa2a2425059389","ssdeep":"96:YA5bQcmI4jRzJmGn52ndMFmdLNEiuwYpIbXxPFBhoWR7:YABPmIiRzJmG5edMFmxNswYpIFPLhoK","tlshash":"6fa1f35ab640b8b142b7b0b644af1245f17b98b68666ec5cc9c2d0f02dfb8c94533f5d","first_seen":"2024-08-19T19:28:21.575966Z","last_seen":"2026-05-12T12:11:56.50743Z","times_seen":17,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur3.otcdn.com/headers/ilusion/fonts/roboto/v18/roboto-v18-latin-500.woff2","fqdn":"eur3.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:15.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/ilusion/fonts/roboto/v18/roboto-v18-latin-500.woff2 HTTP/1.1\r\nHost: eur3.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nOrigin: https://booking.mkp10-2.com-hotel.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 15552\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 27 May 2025 14:23:30 GMT\r\netag: \"6835cae2-3cc0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000, must-revalidate, proxy-revalidate\r\npragma: public\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: HIT\r\nage: 3317289\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WVMJMz3sxUtwFxiZcmr5z6G0LgtmGzCS7YOZJ0xA4W%2FN8JZ0zYMirzIenVE2AsarzDRZXhmUl42g8zxBnhsfPX%2BJvcatp7W3HE3zo%2Bo%3D\"}]}\r\ncf-ray: 96fa0d755d4ee0fe-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15552,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15552, version 1.0","md5":"285467176f7fe6bb6a9c6873b3dad2cc","sha1":"ea04e4ff5142ddd69307c183def721a160e0a64e","sha256":"5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7","sha512":"5f9bb763406ea8ce978ec675bd51a0263e9547021ea71188dbd62f0212eb00c1421b750d3b94550b50425bebff5f881c41299f6a33bbfa12fb1ff18c12bc7ff1","ssdeep":"384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi","tlshash":"8462e103f2bc4c01e786193ebb5870237205272619efa67780ce7ea4c65ec81a39b457","first_seen":"2023-04-05T04:58:40Z","last_seen":"2026-05-15T13:40:04.910243Z","times_seen":340072,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/common/js/libraries/widgets/search/HotelSearchWidget/Plugin.js?v=1750151534","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:15.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/common/js/libraries/widgets/search/HotelSearchWidget/Plugin.js?v=1750151534 HTTP/1.1\r\nHost: eur2.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 4873\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Jun 2025 09:12:14 GMT\r\netag: \"6851316e-1309\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\npragma: public\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lNd%2ByO9YT5Fy6l2slHmLkEFylBgbPhkBkRjvZpC9klS%2Fvl4FO%2BZsjwIgGa6b5iSpZbewTYPdbuwe6Jt4qt%2Fg%2BNy%2F6ZloaXwZs%2FpDxZY%3D\"}]}\r\ncf-ray: 96fa0d761c7249b7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4873,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4873), with no line terminators","md5":"982c41bd849340edae97d3180163f9ac","sha1":"fb9ff4f8e4dfc387c1ec9d7de47a11f9f4ed0561","sha256":"c029f5ca8cf9c275c8c0272cdc5e8ad99b3784febcb01f3d02b9f55cc854bff3","sha512":"a880703aa244b179e998c18cb5c012d7974e64186a815e9d9b0cbc9aa16a33099cacbdd4867b02739270d7391465b727a9f3f3f9efd4fcaf8c4c5d3090a6ee06","ssdeep":"96:xxoAAwzutdxEvYfAqx4//amzoAcI9JgdwccnPNM3/fYI5FAdRaQ:xxadxEvYZzmOdqlM3/gI5FAdRaQ","tlshash":"aba1544a73587d5b43ff813ab92ba340a261647a82c4d50da571f1f518b9d860b33f3a","first_seen":"2025-06-28T23:09:08.088612Z","last_seen":"2026-02-03T13:35:48.422312Z","times_seen":15,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"com-hotel.com/","fqdn":"com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.129.55.48","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-15T16:26:12.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com-hotel.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 02:30:46 GMT","end":"Sat, 08 Nov 2025 02:30:45 GMT"},"fingerprint":{"sha1":"0B:8A:1E:6C:23:CC:63:19:29:31:67:DE:3D:5B:71:D9:CC:0E:F9:C8","sha256":"E1:C6:52:2D:8E:1B:0B:71:99:30:1E:97:D0:0D:8A:7F:D6:93:89:4F:EC:54:28:15:56:2D:B8:4B:A3:69:AF:44"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hrenaissancecancunresortmarina.com-hotel.com/\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:13 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 14584\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\nset-cookie: PHPSESSID=savjjkb6rnnhi299dtfd2vevvh; path=/\n_bb_sofia_GEO_COUNTRY_CODE=NO; expires=Fri, 22-Aug-2025 16:26:13 GMT; Max-Age=604800; path=/; HttpOnly\n_bb_sofia_GEO_LOCALE=en; expires=Fri, 22-Aug-2025 16:26:13 GMT; Max-Age=604800; path=/; HttpOnly\ndevice_view=full; expires=Mon, 15-Sep-2025 16:26:13 GMT; Max-Age=2678400; path=/; HttpOnly\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nserver: nginx-more\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"jQuery Migrate:1.2.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"BootstrapCDN:3.3.6","description":"BootstrapCDN is a powerful and reliable Content Delivery Network (CDN) that delivers static resources, including CSS, JavaScript, and font files, for the widely-used Bootstrap framework. By leveraging multiple server locations worldwide, BootstrapCDN accelerates website loading times, ensuring a smooth and visually appealing user experience. Additionally, it ensures website compatibility with various devices and browsers. The service reduces bandwidth usage and server load, improving web performance for developers and end-users alike.","website":"https://www.bootstrapcdn.com/","common_platform_enumeration":"","icon":"BootstrapCDN.png","categories":["CDN"]},{"name":"Bootstrap:3.3.6","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"jQuery:1.11.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":203710,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1121), with CRLF, LF line terminators","md5":"858ba1fb988ce660b006b8b5b9d9e74a","sha1":"946e8ba42e9bc9789d6154f6d7ae7f77ec1efa79","sha256":"bcfdc24c50a66c1dd34dee4d1adbca61a1a736bd1df637e3a85ae7563b1136d4","sha512":"57ad1c46ae4749ce1f274a5c9c0fd8e9dac45be7ae886af4394ba20bfa6421a07a609a7b363ddafb67e2f4068adbade071ff53be5df8c5379b8177b7e14bf1f2","ssdeep":"1536:1//AhEzLh/TtzSddqrqWr7bBZ6SOdqq+tEcO6Gc/r:bZSy5","tlshash":"8a145568d5fb607a011bc5e2a5705b0eaf21d84bee9e4c4bf1fd4bd10f41da2ba43168","first_seen":"2025-08-15T16:26:55.719547Z","last_seen":"2025-08-15T16:26:55.719547Z","times_seen":1,"resource_available":false,"data":null}},"time_used":898,"timings":{"blocked":132,"dns":29,"connect":28,"send":0,"wait":604,"receive":29,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"com-hotel.com/compiled/pb-frontend.css","fqdn":"com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.129.55.48","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://com-hotel.com/","date":"2025-08-15T16:26:13.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com-hotel.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 02:30:46 GMT","end":"Sat, 08 Nov 2025 02:30:45 GMT"},"fingerprint":{"sha1":"0B:8A:1E:6C:23:CC:63:19:29:31:67:DE:3D:5B:71:D9:CC:0E:F9:C8","sha256":"E1:C6:52:2D:8E:1B:0B:71:99:30:1E:97:D0:0D:8A:7F:D6:93:89:4F:EC:54:28:15:56:2D:B8:4B:A3:69:AF:44"}}},"request":{"raw":"GET /compiled/pb-frontend.css HTTP/1.1\r\nHost: com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://com-hotel.com/\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173; PHPSESSID=savjjkb6rnnhi299dtfd2vevvh; _bb_sofia_GEO_COUNTRY_CODE=NO; _bb_sofia_GEO_LOCALE=en; device_view=full\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:13 GMT\r\ncontent-type: text/css\r\ncontent-length: 4229\r\nlast-modified: Tue, 12 Aug 2025 13:17:21 GMT\r\netag: \"35d2-63c2adc397d23-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Sat, 15 Aug 2026 16:26:13 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nserver: nginx-more\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13778,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (8352)","md5":"4d060ac1590f320b18e1db07de0b1079","sha1":"62c4d43f3bcb8932295abb39c7e7e6db4dd15660","sha256":"5c286edbc85e001e539f0592053f404061f9781d425ec360e1bec5b8c5229304","sha512":"213414308e2fc0e36143e24c469318b7b1abab1e93d85ab2ee9fc65e6a834d93fa4d3e3751ed2af5d64552c643e16d137c9356a04539cc1187e91ac0cae5bb3a","ssdeep":"192:sU1AoTaq5e1XhY1SqcbY8sypttfGDVMB1:nI5RYz83tGMB1","tlshash":"ec52963825803639fbb7e123f4916382113b8053ed663dbd385e76bc978a5c4b9b3592","first_seen":"2023-07-16T11:29:18Z","last_seen":"2026-05-15T15:56:25.159746Z","times_seen":2612,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static11.com-hotel.com/uploads/company/129/logo/hotels-resorts-colombia_logo_1546343050.png","fqdn":"static11.com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"104.26.3.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://com-hotel.com/","date":"2025-08-15T16:26:13.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-hotel.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 23 Jul 2025 18:54:03 GMT","end":"Tue, 21 Oct 2025 19:53:48 GMT"},"fingerprint":{"sha1":"EA:55:3C:55:09:75:23:AE:89:4A:FE:4F:11:E7:BA:EC:D6:B2:09:A2","sha256":"B7:68:47:73:B1:DF:BE:D9:C7:0A:24:C4:86:09:05:40:A0:C2:62:36:56:46:E5:73:3B:65:9B:A0:48:33:A5:41"}}},"request":{"raw":"GET /uploads/company/129/logo/hotels-resorts-colombia_logo_1546343050.png HTTP/1.1\r\nHost: static11.com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://com-hotel.com/\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 7527\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31104000\r\ncf-bgj: imgq:100,h2pri\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-polished: origSize=12701\r\netag: \"319d-57e640c3ca5b6\"\r\nexpires: Thu, 25 Jun 2026 03:28:30 GMT\r\nlast-modified: Tue, 01 Jan 2019 11:44:10 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: sameorigin\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: HIT\r\nage: 1064707\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WLOWXLvaeGjvUd1VZ4%2FhQjwrpt7risegSUM6u0ZwrD1skE9uI4XLq3ANIwg10QVA4csL1zj%2FhGFG%2F5utL7hkLX0ywDGhj2NqExAAyHinAxNpVSz3OQ%3D%3D\"}]}\r\ncf-ray: 96fa0d6c1f103131-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7527,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 40, 8-bit/color RGBA, non-interlaced","md5":"06a23d3b2589f6e1be2d1499e9ce5a77","sha1":"5d58c8ea86b8b7c7cb05284ab659fdde53acfa73","sha256":"3974bf70ca9a681486da0c81dbc0562bdc62b81a438a9c54dcca858ec230ea28","sha512":"47965bbb37189ef3c9d1ad8f07474307466f637c69a7d89e0c00e1895069fe7c556b5c17361fe0df7f275998f2b881147153439522caf8e8d28881ce6bc6bbdf","ssdeep":"192:D1F1EOVC1rlPgVkC8OX+HTMQvrro66E37f+krVf0UU:r1rCX7CzIMQvrrou7+KS","tlshash":"4cf1bf2e9ad88064b41f69d0aff2b582e5df554fc28bbdc0dc2c55d0a35c60d6d8b8e1","first_seen":"2025-08-04T23:34:46.847443Z","last_seen":"2025-10-21T10:14:47.355893Z","times_seen":6,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":39,"dns":31,"connect":8,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"com-hotel.com/compiled/lb-frontent.js","fqdn":"com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.129.55.48","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://com-hotel.com/","date":"2025-08-15T16:26:13.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com-hotel.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 02:30:46 GMT","end":"Sat, 08 Nov 2025 02:30:45 GMT"},"fingerprint":{"sha1":"0B:8A:1E:6C:23:CC:63:19:29:31:67:DE:3D:5B:71:D9:CC:0E:F9:C8","sha256":"E1:C6:52:2D:8E:1B:0B:71:99:30:1E:97:D0:0D:8A:7F:D6:93:89:4F:EC:54:28:15:56:2D:B8:4B:A3:69:AF:44"}}},"request":{"raw":"GET /compiled/lb-frontent.js HTTP/1.1\r\nHost: com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://com-hotel.com/\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173; PHPSESSID=savjjkb6rnnhi299dtfd2vevvh; _bb_sofia_GEO_COUNTRY_CODE=NO; _bb_sofia_GEO_LOCALE=en; device_view=full\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:13 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 13771\r\nlast-modified: Tue, 12 Aug 2025 13:17:24 GMT\r\netag: \"cc81-63c2adc6bebd8-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Sat, 15 Aug 2026 16:26:13 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nserver: nginx-more\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":52353,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32056)","md5":"27e0f2d6a10084e198ead78867c0d0b7","sha1":"bba007184041ca554882e90b62f2e814dfd2a5bb","sha256":"06d9bd3f9589b45f80df15bca07b5dfa7bb9101c1887aa438b4b177e0b0db9dc","sha512":"e7d51b8935869876635df485c2273c7a3d6f4cafed8968719116dab6ff13f13e784706804a98bb5f4db7368e4472baf0ce9155961081142022812a983ca49069","ssdeep":"768:6ylblUZC73CmmJ43ApJzkl8SSGgoMlJYeJPBCgI8rcrlumyOS5SIQ8Hj1ZqDjT:6HJJ43A4SGgZlvBNylumyOSsN8Hj1KjT","tlshash":"7733c88afb0124fa11fb763b947ff11910335eee4a819081a93b8464197da4e7353fad","first_seen":"2024-08-19T19:44:32.249664Z","last_seen":"2026-05-15T15:56:25.158402Z","times_seen":2606,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-RRL6TC2WHG\u0026cx=c\u0026gtm=457e58d1za200\u0026tag_exp=101509157~103116026~103200004~103233427~104684208~104684211~105033763~105033765~105103161~105103163~105231383~105231385","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://com-hotel.com/","date":"2025-08-15T16:26:14.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"A2:8A:24:AD:51:7D:A4:62:BB:34:6F:C9:21:A1:B9:E1:2D:A6:0E:C1","sha256":"9F:B9:94:8F:84:D3:44:71:A7:81:72:C8:80:4D:14:02:E3:E0:30:0C:F1:17:27:83:00:82:D9:C3:68:D3:B3:AF"}}},"request":{"raw":"GET /gtag/js?id=G-RRL6TC2WHG\u0026cx=c\u0026gtm=457e58d1za200\u0026tag_exp=101509157~103116026~103200004~103233427~104684208~104684211~105033763~105033765~105103161~105103163~105231383~105231385 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://com-hotel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 15 Aug 2025 16:26:14 GMT\r\nexpires: Fri, 15 Aug 2025 16:26:14 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1099:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1099:0\r\nreport-to: {\"group\":\"ascgcycc:1099:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1099:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 122317\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":351052,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6006)","md5":"1129fe9abdf32f7e552931cbc0625773","sha1":"f3403ef82740d03d36fbd5613ebb40fa150f3be6","sha256":"dcd9654b1a5b9b2c208e6b994bf4a11e21239e8897bafd8f9abeee810aaf2b2d","sha512":"d10f8015a468ba1a99cd44018bbbda03856a79274aed9b884691dd45e93aa7b93aa8be7664cb0162c8b29cc3ef0fe1680ffa9ce2a4316373b3f7f81a77a57daa","ssdeep":"3072:Mx3JVg61JLwDPLzA2dzT0SL5DUSb5qlUmxxgJgJ471MSXw1PMqaW/uSoTQtF021l:QmLLzA2ddtIxgwhqW/uSoTuFHlKPDQv","tlshash":"1b7429cd73d670629392b478503f018bb17b28a2f44cc899f186c9e52e74a9a5277f7c","first_seen":"2025-08-15T16:26:55.723578Z","last_seen":"2025-08-15T16:26:55.723578Z","times_seen":1,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur1.otcdn.com/headers/widgets/search/locationwidget/css/locationwidget_base.css?v=1749491589","fqdn":"eur1.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:15.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/widgets/search/locationwidget/css/locationwidget_base.css?v=1749491589 HTTP/1.1\r\nHost: eur1.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 09 Jun 2025 17:53:09 GMT\r\netag: \"68471f85-2087\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000, must-revalidate, proxy-revalidate\r\npragma: public\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: HIT\r\nage: 2019744\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9tr%2BONLS3IEMcHjMIJRAkvE0U5hhMGicDDZ5x%2FIcB%2F7nQLB05nGLCluOmuYiRvQkCxOhgIoUrSgC3SW0SYqyOKb%2FEKB2W1FLqsIZEXs%3D\"}]}\r\ncf-ray: 96fa0d7549f749b7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8327,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (8327), with no line terminators","md5":"d451fefb389eb31864e3245456b9d091","sha1":"7f7108734b15de1165a22e8ce5442e99b88611c4","sha256":"7e1e5b1e05b1cfb64118a740acf065028f37cab99ec74c8b5f72b3a99c68e5bd","sha512":"84ee17ff5f002f806b109e7aabd471beeab6aee14cb55605e64968e02721426696aea4223bd25e620a9994cb143a1b43b5973d6102c370d8ca5f465b39e31aa4","ssdeep":"96:Y3ZFPzRk3ZFWZQm3ZFG3lyjF30yTuYUA3ZFr3ZQ3Z53Zm3ZS3j3Z73ZS3Z+3Zmxh:iwSBHU6XoLec37xyKohSgLWtWOEypQJ","tlshash":"9d02b1593845201f77b39872f5a276ccb51f18c153a65efe193e69b6904838c333a6d8","first_seen":"2025-06-28T23:09:08.22142Z","last_seen":"2025-10-11T14:06:36.161867Z","times_seen":7,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":28,"dns":1,"connect":14,"send":0,"wait":33,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"com-hotel.com/compiled/lb-frontend.css","fqdn":"com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.129.55.48","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://com-hotel.com/","date":"2025-08-15T16:26:13.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com-hotel.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 02:30:46 GMT","end":"Sat, 08 Nov 2025 02:30:45 GMT"},"fingerprint":{"sha1":"0B:8A:1E:6C:23:CC:63:19:29:31:67:DE:3D:5B:71:D9:CC:0E:F9:C8","sha256":"E1:C6:52:2D:8E:1B:0B:71:99:30:1E:97:D0:0D:8A:7F:D6:93:89:4F:EC:54:28:15:56:2D:B8:4B:A3:69:AF:44"}}},"request":{"raw":"GET /compiled/lb-frontend.css HTTP/1.1\r\nHost: com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://com-hotel.com/\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173; PHPSESSID=savjjkb6rnnhi299dtfd2vevvh; _bb_sofia_GEO_COUNTRY_CODE=NO; _bb_sofia_GEO_LOCALE=en; device_view=full\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:13 GMT\r\ncontent-type: text/css\r\ncontent-length: 1942\r\nlast-modified: Tue, 12 Aug 2025 13:17:21 GMT\r\netag: \"20a1-63c2adc3feda5-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Sat, 15 Aug 2026 16:26:13 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nserver: nginx-more\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8353,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5310)","md5":"7cde4081a816dc37b0083eab4c7c3c73","sha1":"c9eb54cc40efcb2cf77789f94b67ea93efd4691f","sha256":"31bd44bb2c1dc837c6b566eebd2796072493c4485dc952897d3a516733fb1b81","sha512":"8987b9b25bec4fa63db394f55904c14898aae20cbade31f321fabdadb44e57d30da86d72437a111c09abe242f51817dad319afb46fbe3f34e8904134c6fa0d93","ssdeep":"96:IKDmi1o2mLiPqWAM4OpVESzmVQWdV05SZxbWPpV2gvaF:Jmia2mLRWQOTlmVQGqwd+72gvW","tlshash":"ec0262a2b601143ef477a2167e1072ecb239d6d5d62b2e6ae4f37620c7c63d2163351c","first_seen":"2025-01-30T19:03:22.180946Z","last_seen":"2026-05-15T15:56:25.126535Z","times_seen":2603,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"com-hotel.com/template/frontend/officiallight/images/translate.webp","fqdn":"com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.129.55.48","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://com-hotel.com/","date":"2025-08-15T16:26:13.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com-hotel.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 02:30:46 GMT","end":"Sat, 08 Nov 2025 02:30:45 GMT"},"fingerprint":{"sha1":"0B:8A:1E:6C:23:CC:63:19:29:31:67:DE:3D:5B:71:D9:CC:0E:F9:C8","sha256":"E1:C6:52:2D:8E:1B:0B:71:99:30:1E:97:D0:0D:8A:7F:D6:93:89:4F:EC:54:28:15:56:2D:B8:4B:A3:69:AF:44"}}},"request":{"raw":"GET /template/frontend/officiallight/images/translate.webp HTTP/1.1\r\nHost: com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://com-hotel.com/\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173; PHPSESSID=savjjkb6rnnhi299dtfd2vevvh; _bb_sofia_GEO_COUNTRY_CODE=NO; _bb_sofia_GEO_LOCALE=en; device_view=full\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 396\r\nlast-modified: Fri, 18 Jul 2025 02:01:47 GMT\r\netag: \"18c-63a2a8229166d\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31104000\r\nexpires: Mon, 10 Aug 2026 16:26:13 GMT\r\nvary: User-Agent\r\nserver: nginx-more\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":396,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"92424f0d1c5fce6c97926a34b9f109f3","sha1":"33813ccd190136232b33222fb3fad3313076358e","sha256":"8800f2d471ed1614c823990e8e4b834279ece917d8e1dc448870c1709bd1ebf2","sha512":"041cae32c838f9433987bb9644be961c5787d2871cf889290ded034aa94da81b142a37ca14db18998ecbf6a910eac41fdf70b19eeea35e5b4f3b4b2b04efdaaf","ssdeep":"","tlshash":"4ae0f121755c4202da421d2a4178e15e95375c39e416825422b333b309d56e8b66ca5a","first_seen":"2025-07-21T05:41:22.743501Z","last_seen":"2026-05-15T15:56:25.174818Z","times_seen":1145,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static11.com-hotel.com/uploads/destination/79638/photo/spain-valladolid_15821080415.jpeg","fqdn":"static11.com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"104.26.3.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://com-hotel.com/","date":"2025-08-15T16:26:14.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-hotel.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 23 Jul 2025 18:54:03 GMT","end":"Tue, 21 Oct 2025 19:53:48 GMT"},"fingerprint":{"sha1":"EA:55:3C:55:09:75:23:AE:89:4A:FE:4F:11:E7:BA:EC:D6:B2:09:A2","sha256":"B7:68:47:73:B1:DF:BE:D9:C7:0A:24:C4:86:09:05:40:A0:C2:62:36:56:46:E5:73:3B:65:9B:A0:48:33:A5:41"}}},"request":{"raw":"GET /uploads/destination/79638/photo/spain-valladolid_15821080415.jpeg HTTP/1.1\r\nHost: static11.com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://com-hotel.com/\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 15 Aug 2025 16:26:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 302508\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31104000\r\ncf-bgj: imgq:100,h2pri\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-polished: origSize=317939\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GLoq0HylrgzOr3r4lbXWm1a%2B1Te7pfs1qPYZAnU%2Bc3dOm%2BvaTATkoG08JgR9z93iG4jzWki%2FDnJpa4CTyXrZa49PfRfZbKxWtwEv7RzA67xK5HzMlA%3D%3D\"}]}\r\naccess-control-allow-origin: *\r\netag: \"4d9f3-59eeb3bc85fd0\"\r\nexpires: Thu, 25 Jun 2026 09:05:45 GMT\r\nlast-modified: Wed, 19 Feb 2020 10:27:21 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: sameorigin\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nx-accel-buffering: yes\r\nage: 2588922\r\ncf-ray: 96fa0d6f3cae3438-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":302508,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 2000x976, components 3","md5":"186f1767f45fd84fcda3a89432ed7407","sha1":"485c26208c70441738dba2ab00009f1e2804f010","sha256":"ac1c18857d5b89ab32caa53d1b023a3d4127c5156124ebc026a5fd2b9057eab8","sha512":"96940acad18b468b71dba183d9863e178e7bc9fed335c623eed6d1a6bd204e62eaf9b13f7e3632534596da09fdb6d41a78e914fc6b5a92a86ad9e7ab144d2d80","ssdeep":"6144:zOMoaTpIij1hiD0K396K+SrvSLk84rBScmtJpC3MMai950QgVUAs/yN3sl9lC0c:CMpTCODlK39brvSLkrrVapzMaiD0Q1Uj","tlshash":"385423761579fd4f963879227aae1a5d04a932f7dc1c70fef804e82ac4b087d6ca5028","first_seen":"2025-08-15T16:26:55.727054Z","last_seen":"2025-09-12T10:22:10.544917Z","times_seen":2,"resource_available":false,"data":null}},"time_used":389,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":369,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/common/js/libraries/widgets/search/NightsScrollWidget/Plugin.js?v=1749489354","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:15.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/common/js/libraries/widgets/search/NightsScrollWidget/Plugin.js?v=1749489354 HTTP/1.1\r\nHost: eur2.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2505\r\nserver: cloudflare\r\nlast-modified: Mon, 09 Jun 2025 17:15:54 GMT\r\netag: \"684716ca-9c9\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\npragma: public\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kt0R1zEgXyJ0l1%2FBTGLxCKzcMMMongpPuTO5QkpCUfZU4yeo43LGi5So7CmYc6JncyEfvX9y0EN6%2FgCSgkyTvRjSCJObSauM1BqlZ70%3D\"}]}\r\ncf-ray: 96fa0d75ab0e49b7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2505,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2505), with no line terminators","md5":"14b693121095c5839ff049698c609da9","sha1":"b27fc11f441cf6f8c4270d82f231da97886f9be1","sha256":"aa96bd9778f881c66d76a081c7e73214a32c9dd9c0f07aa11a57baf523bd80ab","sha512":"cb9373a1f2baa45f2432d0c508e6a8ab4ab1eef56691212b126f3b2aa2b246c21251cec7fcba21953fd28de3d489943c73bbbb572407247cd3275e8cf7dfbc98","ssdeep":"","tlshash":"8e51545d7585771023cbb070c43f1b0b933b64a55a8dc008a64ae4e13fbdaae422bf2d","first_seen":"2023-03-13T20:32:42Z","last_seen":"2026-02-03T13:35:48.406379Z","times_seen":19,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur1.otcdn.com/headers/ilusion/common/js/Telephone.js?v=1748355810","fqdn":"eur1.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:15.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/ilusion/common/js/Telephone.js?v=1748355810 HTTP/1.1\r\nHost: eur1.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2396\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 27 May 2025 14:23:30 GMT\r\netag: \"6835cae2-95c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000, must-revalidate, proxy-revalidate\r\npragma: public\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: HIT\r\nage: 2029379\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aqBnajn%2BMva1PQlcvqQTRFFpUJgKA0mobcIb4j5hl3GIfc5ffh6FUcJZDvOnZq9xA%2BHI8yvKqCRLUWnaVhetfybbKUtlZgg%2BkWMI9UM%3D\"}]}\r\ncf-ray: 96fa0d765d4a49b7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2396,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"df4929a72925e787d14d9f05a5989bdd","sha1":"467ddd2d7e70f831fb7ee8f05435675ca071128f","sha256":"35a6426ed02356383529c6852cd184dbea912cc5a8326ab28c3dfade607b8a18","sha512":"7f594d92278d58b64cba388207ee51914274e73bf6f02aa2157caba2765b3a7d8f894dc19cdb254c385e7bd16d2cdae408b53b27b36e30ddb6d4780159e94693","ssdeep":"","tlshash":"5d41df68aff52943103fb0bb97afa405a61ad443294dcd603cec83b6af58938155866c","first_seen":"2023-07-18T15:04:14Z","last_seen":"2026-04-30T09:19:51.334955Z","times_seen":13,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking.mkp10-2.com-hotel.com/headers/widgets/search/radiobuttongroupwidget/css/radiobuttongroupwidget_ssm.less","fqdn":"booking.mkp10-2.com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.222.42.74","port":443,"asn":3257,"as":"GTT Communications Inc.","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:16.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booking.mkp10-2.com-hotel.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 15:29:42 GMT","end":"Sat, 25 Oct 2025 15:29:41 GMT"},"fingerprint":{"sha1":"57:68:C3:79:2F:35:9C:F6:B6:43:DA:EE:68:C6:38:20:F8:16:92:45","sha256":"39:40:E7:DD:A6:26:78:27:3D:A3:E2:98:35:0A:FD:32:DB:0E:0C:90:48:84:D3:3C:1B:F3:9B:69:9B:F3:C5:94"}}},"request":{"raw":"GET /headers/widgets/search/radiobuttongroupwidget/css/radiobuttongroupwidget_ssm.less HTTP/1.1\r\nHost: booking.mkp10-2.com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173; _ga_RRL6TC2WHG=GS2.1.s1755275174$o1$g0$t1755275174$j60$l0$h0; _ga_VSVH2X36Y6=GS2.1.s1755275174$o1$g0$t1755275174$j60$l0$h0; brand=30389; mkt_pref=YToxOntzOjEwOiJ0cmFja3BhcmFtIjtzOjM4OiJhJTNBMCUzQSU3QiU3RERBVEFfU0VQQVJBVE9SNDE4OTAyMDk3NyI7fQ%3D%3D; info_localizacion=30169%2Fno%2FNOK%2F; _upfs=eyJtYXJrZXRfaWQiOjM5LCJsYW5nXzM5Ijoibm8ifQ%3D%3D; remite=olt_bookingmkp10-2com-hotel%2Ftrack_portal\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 15 Aug 2025 16:26:16 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 27 May 2025 14:23:44 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 954\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":954,"size_decoded":0,"mime_type":"text/xml","magic":"ASCII text","md5":"912397092539e52b2d41ac7c004d9ab6","sha1":"b4ed2fbd4d4b6140267db90aeef183705e4eed37","sha256":"50bafc9b1f89cb5d494729ed5a231754734e03c4a751476ea4d521f322e96410","sha512":"72aefe2097adbd49680363182ec9567f4019c6672cef2ec8e2192c257694dc298b618d940085aa7390b848cd3882ed3055ebef3c4bc08cff594b7da32e1eb5d6","ssdeep":"","tlshash":"6011cb1ab0b606a6391b465d7e374e83d21820cb6555ea4c738493b13fe10d9a32dfa6","first_seen":"2025-06-28T23:09:08.198894Z","last_seen":"2026-05-12T12:11:56.602668Z","times_seen":14,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static12.com-hotel.com/images/frontend/template/default/master-card.png","fqdn":"static12.com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"104.26.3.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://com-hotel.com/","date":"2025-08-15T16:26:13.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-hotel.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 23 Jul 2025 18:54:03 GMT","end":"Tue, 21 Oct 2025 19:53:48 GMT"},"fingerprint":{"sha1":"EA:55:3C:55:09:75:23:AE:89:4A:FE:4F:11:E7:BA:EC:D6:B2:09:A2","sha256":"B7:68:47:73:B1:DF:BE:D9:C7:0A:24:C4:86:09:05:40:A0:C2:62:36:56:46:E5:73:3B:65:9B:A0:48:33:A5:41"}}},"request":{"raw":"GET /images/frontend/template/default/master-card.png HTTP/1.1\r\nHost: static12.com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://com-hotel.com/\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 3925\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31104000\r\ncf-bgj: imgq:100,h2pri\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-polished: origSize=4086\r\netag: \"ff6-55cd789e0c74d\"\r\nexpires: Thu, 25 Jun 2026 23:41:20 GMT\r\nlast-modified: Tue, 31 Oct 2017 13:14:44 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncf-cache-status: HIT\r\nage: 2178653\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7CVZ62ODziK8rzhTTL2y21h2M3oIzLcQJ%2FiQ%2BR%2F9diDTx0gBB3mgKqPYrPq0k4Y6AlZpAIGNXJW7f6nJAhcq2f5KWOYyV8A35qK%2FmExuvAR6yaq1Hw%3D%3D\"}]}\r\ncf-ray: 96fa0d6c78053131-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3925,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 38, 8-bit/color RGBA, non-interlaced","md5":"5c007f74c58a4161cd34e0638d855687","sha1":"f944f69abd97a96eb72df6709ce43bb7b723cc1a","sha256":"d34a2e07e305c44ab0915fab0d1b7300ecb4c07267dac020a407dcebac0859bc","sha512":"b2ff15cdf41befe01520879f5e840df04129d6208447e6fa054132ddedd26e74338a4b43688aebfe84d8b4710c81e28422610b9c9209c5204d48c40ca6547506","ssdeep":"","tlshash":"6a816c439e48d1441a4b53f576ae0e0fc4a19c874133218e3af8a8c0d4ae839c1afa64","first_seen":"2025-07-02T04:21:11.943994Z","last_seen":"2026-05-15T15:38:41.189237Z","times_seen":980,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":90,"dns":55,"connect":10,"send":0,"wait":26,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"com-hotel.com/plugins/jquery-migrate-1.2.1.min.js","fqdn":"com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.129.55.48","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://com-hotel.com/","date":"2025-08-15T16:26:13.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com-hotel.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 02:30:46 GMT","end":"Sat, 08 Nov 2025 02:30:45 GMT"},"fingerprint":{"sha1":"0B:8A:1E:6C:23:CC:63:19:29:31:67:DE:3D:5B:71:D9:CC:0E:F9:C8","sha256":"E1:C6:52:2D:8E:1B:0B:71:99:30:1E:97:D0:0D:8A:7F:D6:93:89:4F:EC:54:28:15:56:2D:B8:4B:A3:69:AF:44"}}},"request":{"raw":"GET /plugins/jquery-migrate-1.2.1.min.js HTTP/1.1\r\nHost: com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://com-hotel.com/\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173; PHPSESSID=savjjkb6rnnhi299dtfd2vevvh; _bb_sofia_GEO_COUNTRY_CODE=NO; _bb_sofia_GEO_LOCALE=en; device_view=full\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:13 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 3063\r\nlast-modified: Tue, 21 Feb 2017 21:17:33 GMT\r\netag: \"1c1f-54910e88e9c15-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Sat, 15 Aug 2026 16:26:13 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nserver: nginx-more\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7199,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7085)","md5":"eb05d8d73b5b13d8d84308a4751ece96","sha1":"743052320809514fb788fe1d3df37fc87ce90452","sha256":"1e67d8dbcca1f6fd94e077c85c2fb40fa1c2756c99238daa8da882144260a68d","sha512":"7b68a43a22a41404a2ff58e0da6a237492cad0fc3e56d216980802b4d5fb483895262a7e049340d6670002bdf899ba88c319239e60d0aae1ac31d98556b0ad6e","ssdeep":"96:tBySz91Gwyk35YrfBewIt9jKLKDs2SFNK7wIDBRANyCfVJ45NI:zySzvGw/35YbMx9jKLKD3UIDBR8VVUq","tlshash":"3fe196dc72aab5611ffa30a8503bd21b72b25aec140d95a4f08ccde5392cc5d413ab7e","first_seen":"2023-03-07T01:02:56Z","last_seen":"2026-05-15T15:20:19.241237Z","times_seen":22314,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxcdn.bootstrapcdn.com/bootstrap/3.3.6/js/bootstrap.min.js","fqdn":"maxcdn.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.10.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://com-hotel.com/","date":"2025-08-15T16:26:13.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Jul 2025 02:43:39 GMT","end":"Fri, 10 Oct 2025 03:43:37 GMT"},"fingerprint":{"sha1":"C1:BD:D6:84:57:89:FE:9E:6D:F9:1F:26:76:1D:7C:45:E8:23:F6:35","sha256":"42:6A:B9:E6:CC:53:CB:12:2A:7A:43:B8:3D:90:FC:5E:4D:CA:A2:E0:3D:B4:2E:38:10:A6:6F:26:86:7F:D5:A0"}}},"request":{"raw":"GET /bootstrap/3.3.6/js/bootstrap.min.js HTTP/1.1\r\nHost: maxcdn.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://com-hotel.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://com-hotel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:13 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncf-ray: 96fa0d6bcd533a56-ARN\r\ncdn-pullzone: 252412\r\ncdn-uid: b1941f61-b576-4f40-80de-5677acb38f74\r\ncdn-requestcountrycode: DE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: W/\"c5b5b2fa19bd66ff23211d9f844e0131\"\r\nlast-modified: Mon, 25 Jan 2021 22:03:59 GMT\r\ncdn-cachedat: 03/18/2024 12:50:54\r\ncdn-proxyver: 1.04\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 723\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-status: 200\r\ncdn-requestid: c40a843f46f5762fb732df3b650ab657\r\ncdn-cache: HIT\r\ncdn-requesttime: 0\r\ncf-cache-status: HIT\r\nage: 1669974\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36868,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32003)","md5":"c5b5b2fa19bd66ff23211d9f844e0131","sha1":"791aa054a026bddc0de92bad6cf7a1c6e73713d5","sha256":"2979f9a6e32fc42c3e7406339ee9fe76b31d1b52059776a02b4a7fa6a4fd280a","sha512":"d9ef2aab411371f5912381c9073422037528c8593ab5b3721bea926880592f25bd5dfdec5991cdfe5c5ef5f4e1d54e390e93dfd3bca3f782ac5071d67b8624d4","ssdeep":"768:4UfYD27UwlNHMl9lqNuCPNjhqg8epm5CCJFXflA8Gf3ZTbQ:z/76whqKGvlm3ZXQ","tlshash":"47f29606b23031a147efb1e1525b020a7239696ee906907c78b9daf53db9c48717bf3d","first_seen":"2023-03-07T01:02:25Z","last_seen":"2026-05-15T15:30:47.880389Z","times_seen":18717,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-133452114-1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://com-hotel.com/","date":"2025-08-15T16:26:13.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"A2:8A:24:AD:51:7D:A4:62:BB:34:6F:C9:21:A1:B9:E1:2D:A6:0E:C1","sha256":"9F:B9:94:8F:84:D3:44:71:A7:81:72:C8:80:4D:14:02:E3:E0:30:0C:F1:17:27:83:00:82:D9:C3:68:D3:B3:AF"}}},"request":{"raw":"GET /gtag/js?id=UA-133452114-1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://com-hotel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 15 Aug 2025 16:26:13 GMT\r\nexpires: Fri, 15 Aug 2025 16:26:13 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Fri, 15 Aug 2025 15:47:45 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1099:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1099:0\r\nreport-to: {\"group\":\"ascgcycc:1099:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1099:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 103233\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":293085,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5911)","md5":"293d8fff99556ac9b82cf071d2d57542","sha1":"e679a8739008c81d1576ad969a5626b072919e66","sha256":"9392c3061225c2e9734b84af0f8b82308e6356ea3a8d4e4681df20f3e0a172a5","sha512":"bbe62103c49898864f0b6b9aec7454c0aab2a2eeeb342982a90dc99a2a0c1fef4dcdf233b51d007d168b866ced2805c1ef31b413dddd3caad1410d7c6a92dfc3","ssdeep":"3072:5EY8g61JLwDPpApB0Sv5DhSb5qlUmxxgbXwDctaW/uSoTQtF021tDRI0df7:smLpAKtIxmwLW/uSoTuFHtDug","tlshash":"f05409cd73d6b46283a3a474503f014bb23b6992f84cc894f186c9d92d74aaa4277f7d","first_seen":"2025-08-15T16:26:55.732485Z","last_seen":"2025-08-15T16:26:55.732485Z","times_seen":1,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/common/js/less/less-1.6.0.min.js?v=1748355805","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:15.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/common/js/less/less-1.6.0.min.js?v=1748355805 HTTP/1.1\r\nHost: eur2.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 27 May 2025 14:23:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6835cadd-178d8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000, must-revalidate, proxy-revalidate\r\npragma: public\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: HIT\r\nage: 3198051\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wdC7nFeFjqwZXIc8an8RIgJleziLwWWmjj1dgYLTP6tG%2BR7MO9DK7gYlHxCXzUsWcRXhgeDAEB%2BOoNXd7GcdP7sUM4EQmuA2CjQtfB8%3D\"}]}\r\ncf-ray: 96fa0d759ad449b7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":96472,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32100)","md5":"2d4683be5fde216affc31f6fd3e720b3","sha1":"3e358d29518670b807c6a0c5b836453e8de3cb59","sha256":"4f0ac8edae97f493fd50bdbaa56cf2cbb6ad097e08c7cb9dc6375cb047562469","sha512":"c3395dba14be69f38b9b0937c5e5276370c85ac61946ae50acc1e5c36daafe189a2b2906f6b06bd8957817d50896312aefa7a95da4ea5acbd101e1c58a194d94","ssdeep":"1536:GU2vLVP2ifP1l+k1mlQsAoy4QwXg/94eggyXXGe2ajGnSsNQUSAnkGz36o4ci3rZ:Qf1SZBy4QwXg14egNGRajGnSqGh88fHL","tlshash":"3193c69973827466c36b7564047b114ba33b6e9ab40888bcf06cc1d5be35f4921bbf78","first_seen":"2023-03-13T20:32:42Z","last_seen":"2026-05-12T12:11:56.60056Z","times_seen":29,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking.mkp10-2.com-hotel.com/headers/ilusion/magallanes/dist/css/magallanes.less?v=2","fqdn":"booking.mkp10-2.com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.222.42.74","port":443,"asn":3257,"as":"GTT Communications Inc.","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:17.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booking.mkp10-2.com-hotel.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 15:29:42 GMT","end":"Sat, 25 Oct 2025 15:29:41 GMT"},"fingerprint":{"sha1":"57:68:C3:79:2F:35:9C:F6:B6:43:DA:EE:68:C6:38:20:F8:16:92:45","sha256":"39:40:E7:DD:A6:26:78:27:3D:A3:E2:98:35:0A:FD:32:DB:0E:0C:90:48:84:D3:3C:1B:F3:9B:69:9B:F3:C5:94"}}},"request":{"raw":"GET /headers/ilusion/magallanes/dist/css/magallanes.less?v=2 HTTP/1.1\r\nHost: booking.mkp10-2.com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173; _ga_RRL6TC2WHG=GS2.1.s1755275174$o1$g0$t1755275174$j60$l0$h0; _ga_VSVH2X36Y6=GS2.1.s1755275174$o1$g0$t1755275174$j60$l0$h0; brand=30389; mkt_pref=YToxOntzOjEwOiJ0cmFja3BhcmFtIjtzOjM4OiJhJTNBMCUzQSU3QiU3RERBVEFfU0VQQVJBVE9SNDE4OTAyMDk3NyI7fQ%3D%3D; info_localizacion=30169%2Fno%2FNOK%2F; _upfs=eyJtYXJrZXRfaWQiOjM5LCJsYW5nXzM5Ijoibm8ifQ%3D%3D; remite=olt_bookingmkp10-2com-hotel%2Ftrack_portal\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 15 Aug 2025 16:26:17 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 27 May 2025 14:23:33 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 24611\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":24611,"size_decoded":0,"mime_type":"text/xml","magic":"Unicode text, UTF-8 text","md5":"1d67f675fee1ea5f96a0b28dbd457157","sha1":"9648068d83b48e748168d5c87aa09209c9b3596a","sha256":"63bd2ed52a6ec98d020e09f8611d539238a8a1ca7f83770abeec5fa80644d10d","sha512":"35f2886911efe005f3eb59acd3f9883cd9c40c2525145a4da4be284784437919dab522d9fc93a0427e7b702fc151ce74029281c301bcb6afa2a6619af32a3db9","ssdeep":"384:zq+FL6ctK+s6Yz1zFM0619a4qwSucDFbtF7i7TYLQnUHnQOrEVfErX:4i7TYLQnUHPgVuX","tlshash":"b0b25254f1e876b7212f516ce063de917b8e6082c01ccfaa797e61acbf840c49921d6f","first_seen":"2025-06-28T23:09:07.994836Z","last_seen":"2025-09-21T13:22:40.594455Z","times_seen":9,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":55,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/common/js/libraries/widgets/search/LocationWidget/Plugin.js?v=1751267413","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:15.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/common/js/libraries/widgets/search/LocationWidget/Plugin.js?v=1751267413 HTTP/1.1\r\nHost: eur2.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 07:10:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68623855-760c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\npragma: public\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0BWsDnJY0xSRKHOQNG9TGGbjTf0DI2kZLsmtv0okRNVUWKIgUXMtWb0HQzg5CuaEqmQz7mglULWjDFTBMMN3kq6rmRKfU8ZBiCWimbc%3D\"}]}\r\ncf-ray: 96fa0d75ebd549b7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30220,"size_decoded":0,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text","md5":"1c1d61315b58e2fe298d9a71998e076e","sha1":"4b7be209e349b1fdfd5e023bd461b071707cd5f2","sha256":"f3ff6108ae4ff9781962bffdb6430067d632b4b428e4af6d5eb85e499c91835e","sha512":"a84110a23fc8094825c3f42593c7e360354bb239c3a6651295031a76a95319cc7f0d792102a009a6192ae4476d676b41d1730f6f895c933289c2b4959ca77f2d","ssdeep":"192:wBmZz9KCSyTuCyEFmnmmkYChlKkMR4K6VBeRahMtdAvPE5Sk41oH6QykZUSQy4DG:NBpgkYC5PEHl25i2xPgqX4V73u98","tlshash":"3ad22b496af72042826b74be8fdf2205663a444b944cdd01bd2c92905f84b7d5bfafe8","first_seen":"2025-08-04T23:34:46.839961Z","last_seen":"2025-08-15T16:26:55.735504Z","times_seen":3,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/common/js/libraries/widgets/transport/search/TransportTrainSearcherWidget/Plugin.js?v=1749489365","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:15.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/common/js/libraries/widgets/transport/search/TransportTrainSearcherWidget/Plugin.js?v=1749489365 HTTP/1.1\r\nHost: eur2.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 5423\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 09 Jun 2025 17:16:05 GMT\r\netag: \"684716d5-152f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\npragma: public\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mIiawcse2ViKy4j4vdVhAz%2BIWlrU%2Bxit5gW7ehuEsbUkPUel8r%2Fht%2FmQuSQccUL2vgsc8FlOklFd2OCZuX7hsyeKpppTlO0G3tNjNnE%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 96fa0d765d3049b7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5423,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5423), with no line terminators","md5":"d07e0474545dec50b95d5b5ead7d7b1e","sha1":"7e36282197bf65bfdeffe8aeee6bc98b9ab8da27","sha256":"c57a286d70e022f0eca58f61d1fe0fb50f11b87ddf999a1df4ec4e139ab9b174","sha512":"9faa47c75a00d3bc7fc23967980a710b43e09f91570f7773a29b2d4e32be6ace78819fa8e4d45f3335e58b96d14d60a4f1b4ed7f5885f95b04eb65006de00084","ssdeep":"96:xFPKCwzuIbpiA3hbvhqqs6dOnB4ddFkxRaEOjB95eIIn0fNfrgGan:xFPOpiA3N51s6dxddFkxRaErR","tlshash":"6fb13fca73a8356703efa13b865b6201603798fe9682c65c6d34b1f909789c81737f34","first_seen":"2024-08-19T19:28:21.650477Z","last_seen":"2026-05-12T12:11:56.521677Z","times_seen":15,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-133452114-6","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hrenaissancecancunresortmarina.com-hotel.com/","date":"2025-08-15T16:26:11.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"A2:8A:24:AD:51:7D:A4:62:BB:34:6F:C9:21:A1:B9:E1:2D:A6:0E:C1","sha256":"9F:B9:94:8F:84:D3:44:71:A7:81:72:C8:80:4D:14:02:E3:E0:30:0C:F1:17:27:83:00:82:D9:C3:68:D3:B3:AF"}}},"request":{"raw":"GET /gtag/js?id=UA-133452114-6 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hrenaissancecancunresortmarina.com-hotel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 15 Aug 2025 16:26:12 GMT\r\nexpires: Fri, 15 Aug 2025 16:26:12 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Fri, 15 Aug 2025 15:47:45 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1099:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1099:0\r\nreport-to: {\"group\":\"ascgcycc:1099:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1099:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 103266\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":293249,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5911)","md5":"1a78a7e8cf1852d337605691984868ed","sha1":"cdc57815a44180356506b383ca05e0c075a4c448","sha256":"2f06d0440f2b61c96e3b9bf8b942721d477e81756a7936e700dd17a2703f3fa1","sha512":"5090867c44db401144a32db03390047d59ad17c0ca0aaf5d12fe1a2cd01172db36c939140e5d2628624c536840e9c737f4eb3ae7f885d04632986be16bf189f0","ssdeep":"6144:G17moFWTCBCyGLHUIkpDG1OIambWeQ3LU0Ff:a7mOVBCyGLHUJhn3jl","tlshash":"ce54f7cd73d6b4228393a478503f014bb23b6992f84cd894f186c9d52e74aaa4277f7d","first_seen":"2025-08-15T16:26:55.737067Z","last_seen":"2025-08-15T16:26:55.737067Z","times_seen":1,"resource_available":true,"data":null}},"time_used":401,"timings":{"blocked":132,"dns":0,"connect":27,"send":0,"wait":67,"receive":67,"ssl":105},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"com-hotel.com/compiled/lb-frontent-routes.js","fqdn":"com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.129.55.48","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://com-hotel.com/","date":"2025-08-15T16:26:13.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com-hotel.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 02:30:46 GMT","end":"Sat, 08 Nov 2025 02:30:45 GMT"},"fingerprint":{"sha1":"0B:8A:1E:6C:23:CC:63:19:29:31:67:DE:3D:5B:71:D9:CC:0E:F9:C8","sha256":"E1:C6:52:2D:8E:1B:0B:71:99:30:1E:97:D0:0D:8A:7F:D6:93:89:4F:EC:54:28:15:56:2D:B8:4B:A3:69:AF:44"}}},"request":{"raw":"GET /compiled/lb-frontent-routes.js HTTP/1.1\r\nHost: com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://com-hotel.com/\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173; PHPSESSID=savjjkb6rnnhi299dtfd2vevvh; _bb_sofia_GEO_COUNTRY_CODE=NO; _bb_sofia_GEO_LOCALE=en; device_view=full\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:13 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 5664\r\nlast-modified: Tue, 12 Aug 2025 13:17:25 GMT\r\netag: \"ac24-63c2adc75273a-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Sat, 15 Aug 2026 16:26:13 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nserver: nginx-more\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44068,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32022)","md5":"506b86d5082f6fb21eed37c8517e1baf","sha1":"0396650c7d53b3b6df5bfecc810c0b53406c1e75","sha256":"69f6f44759b66cb796e5d15d4fd384644febf670e195d80e75c239dace1f75fd","sha512":"ed80dcce51e104e71366bb4fac5c21523f0a228be4c4e1b1956a6c148786705ae7fedb0540dfaa29158675221b0642434459126399fa2c70a386b3695e5987db","ssdeep":"768:rd/xQG+OsiGkh5xCw5SecFWpuSzYvT0KYziKcQ25Gi0VCwCUIsUeygQwUk0JSoVL:rd/xQG+OsiGkh5xCw5SecFWpuSzYvT0o","tlshash":"0c1311d5b6d7cc4634dfd57afd01228719fabe48d171a811cecad2ea0e70089398a93d","first_seen":"2025-01-30T19:03:22.221429Z","last_seen":"2026-05-15T15:56:25.175387Z","times_seen":2496,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static11.com-hotel.com/uploads/destination/73319/photo/costa-rica-costa-rica_1487001666.jpeg","fqdn":"static11.com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"104.26.3.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://com-hotel.com/","date":"2025-08-15T16:26:14.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-hotel.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 23 Jul 2025 18:54:03 GMT","end":"Tue, 21 Oct 2025 19:53:48 GMT"},"fingerprint":{"sha1":"EA:55:3C:55:09:75:23:AE:89:4A:FE:4F:11:E7:BA:EC:D6:B2:09:A2","sha256":"B7:68:47:73:B1:DF:BE:D9:C7:0A:24:C4:86:09:05:40:A0:C2:62:36:56:46:E5:73:3B:65:9B:A0:48:33:A5:41"}}},"request":{"raw":"GET /uploads/destination/73319/photo/costa-rica-costa-rica_1487001666.jpeg HTTP/1.1\r\nHost: static11.com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://com-hotel.com/\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 15 Aug 2025 16:26:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 239723\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31104000\r\ncf-bgj: imgq:100,h2pri\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-polished: origSize=252970\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ndsxk2mYYeYL%2BKQM6Qj6fiSNDG0q%2BGb1vLcwRw3ldaYc1vHgRpSxTj9SYFK2Bxg04jrVeWDRzYUA66IrkFrtQa9EkpV%2BkvO0zsQVL3Z7NZS4nAiC1A%3D%3D\"}]}\r\naccess-control-allow-origin: *\r\netag: \"3dc2a-5486b8e151480\"\r\nexpires: Wed, 24 Jun 2026 23:06:49 GMT\r\nlast-modified: Mon, 13 Feb 2017 16:01:06 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: sameorigin\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nx-accel-buffering: yes\r\nage: 2006465\r\ncf-ray: 96fa0d6efc973438-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":239723,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 2000x976, components 3","md5":"18fb68b20b5bde2bba723c39544d95be","sha1":"e820d5ebaa5e372c7242a473acef68cb2d744931","sha256":"5f6df2daf4be1c4c27ae1719f68b951a533c04d33e1dba74a3d0dc348afcc024","sha512":"8b0adf89fb1aa07b8587ea0b39c3518d0f29ac14b0747ebf89521c4871ee00d2335152353014342982a475253f050021bc50056f9f23fbd6a8ec97744d6ef8a7","ssdeep":"6144:irxEp0p/VQsUr1gMHgyrjA2zNJrdDUcwv0cNWOjOC1/:mEpq/msCH1jRzNnjmE2B/","tlshash":"7c34230c35ad0f7fc62f7a7081a753310b638e7467303a879d4a4b928aa339d79d5b25","first_seen":"2023-07-18T15:04:16Z","last_seen":"2026-03-10T11:37:27.547694Z","times_seen":11,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static11.com-hotel.com/uploads/destination/79620/photo/spain-mallorca_15821079347.jpeg","fqdn":"static11.com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"104.26.3.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://com-hotel.com/","date":"2025-08-15T16:26:14.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-hotel.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 23 Jul 2025 18:54:03 GMT","end":"Tue, 21 Oct 2025 19:53:48 GMT"},"fingerprint":{"sha1":"EA:55:3C:55:09:75:23:AE:89:4A:FE:4F:11:E7:BA:EC:D6:B2:09:A2","sha256":"B7:68:47:73:B1:DF:BE:D9:C7:0A:24:C4:86:09:05:40:A0:C2:62:36:56:46:E5:73:3B:65:9B:A0:48:33:A5:41"}}},"request":{"raw":"GET /uploads/destination/79620/photo/spain-mallorca_15821079347.jpeg HTTP/1.1\r\nHost: static11.com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://com-hotel.com/\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 15 Aug 2025 16:26:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 311022\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31104000\r\ncf-bgj: imgq:100,h2pri\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-polished: origSize=326409\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WwK7f2hTeyi4T38u8WXq%2BnHLkN307SgUN%2FZn1F%2FrVX38AiSJmePT04OkTNPJSfLmFSn8jUL8OVE21rS8OILEG7yBSy6SWWia9p9z%2BVrQjbk9tMxdKQ%3D%3D\"}]}\r\naccess-control-allow-origin: *\r\netag: \"4fb09-59eeb3575329c\"\r\nexpires: Fri, 26 Jun 2026 09:42:04 GMT\r\nlast-modified: Wed, 19 Feb 2020 10:25:34 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: sameorigin\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nx-accel-buffering: yes\r\nage: 591119\r\ncf-ray: 96fa0d6f2cab3438-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":311022,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 2000x976, components 3","md5":"eb91b368c75f0b5f68e2d12ec2160fb7","sha1":"42af1ce5eec52ea770808001a59bdcabecb23298","sha256":"f00534aaf152181942e9b64aac48db8f23354a66924d6e878b6e3cfdc0a8cf21","sha512":"bbba42841ae50c4087f6f0d7f1c2a537cab370ce6981de6fb6166f23c823882a476bbe31e98fe5271c656c134b46f3ac5183d2fd169ec1c0681da9a5864be8cd","ssdeep":"6144:AA/NHdQ0OBWJw4D9TwiBKhT2h3HyZs2RrfCA4HiuXi/8MqV+O:AyLQrBkwJda5HyXrfCA4CuXG1q","tlshash":"04642380498047907fa9f980ba3f32cf6677a98e2761349487a07e5b9069c7bf40f95d","first_seen":"2025-08-15T16:26:55.739119Z","last_seen":"2026-03-09T16:45:38.669789Z","times_seen":3,"resource_available":false,"data":null}},"time_used":339,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":321,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur1.otcdn.com/headers/widgets/transport/multiplesjourneylocationanddatewidget/css/multiplesjourneylocationanddatewidget_base.css?v=1749491604","fqdn":"eur1.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:15.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/widgets/transport/multiplesjourneylocationanddatewidget/css/multiplesjourneylocationanddatewidget_base.css?v=1749491604 HTTP/1.1\r\nHost: eur1.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 09 Jun 2025 17:53:24 GMT\r\netag: \"68471f94-5a0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000, must-revalidate, proxy-revalidate\r\npragma: public\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: HIT\r\nage: 2881847\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DNxce%2BPT7FP9h7QUp2wD17evmK5mKF7DvjAMAMsudRHF6h4Oxn3j1h5CzKNbFVeKQz7ruUa5tUPMHs8Fzhj4x9c8HHKiFp1R1LkNBZw%3D\"}]}\r\ncf-ray: 96fa0d754a0249b7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1440,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1440), with no line terminators","md5":"41bb240216ac56885f70dd1da783002c","sha1":"ac1e37813288a8dbd1be4080b6036ef4bfe3e4ec","sha256":"51cf7732aef72913f07fa05f49c9c25d9fd9d809177f494582c8a4d1f6fbc298","sha512":"b69a7924adf0f2f668c2d7efc558a96dfb77ffc20dfd3e76a79f96ab44d1a70b0894aa7def8309c34606b1fb5c6ddd912e45c5a1be1cfe173a58b9e4d88300c9","ssdeep":"","tlshash":"5c210682ec4c398461ea407bf1f4d3c00ffc99468ca31581ddbbf95af0d000a6267a76","first_seen":"2023-07-18T15:04:16Z","last_seen":"2025-10-11T14:06:36.166477Z","times_seen":10,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/common/js/libraries/widgets/transport/MultiplesJourneyLocationAndDateWidget/Plugin.js?v=1749489364","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:15.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/common/js/libraries/widgets/transport/MultiplesJourneyLocationAndDateWidget/Plugin.js?v=1749489364 HTTP/1.1\r\nHost: eur2.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 4800\r\nserver: cloudflare\r\nlast-modified: Mon, 09 Jun 2025 17:16:04 GMT\r\netag: \"684716d4-12c0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\npragma: public\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OcF09yiK9xDgqui3RW0k8WpEzm4EOlUKiK6hbDbsJISRvUSRep91MJNOxC4tXE4yvLjs0zpH%2B70gTrvOmV9zBh2oUrinJgJNgd7LuSs%3D\"}]}\r\ncf-ray: 96fa0d764d0349b7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4800,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4800), with no line terminators","md5":"bbe0bd4711ae49f956db7c737c77b10e","sha1":"2f1a546684c1f5056bcb98828811f182f5528a7f","sha256":"0efe16dc1b9bead304dbcfdce6a0a64453e5f6729178caf846fd1cfac0590ebe","sha512":"26a0031f4e128c60ab2fa124578fefd0063225d12a4aa2300e51e2f0ee921b787dbdf271ec2224aeefc6d5c5242613efe3599544e67bd89c3b0c44eb7b2be6ec","ssdeep":"96:xxWPKzpyOR26nITuVAXEx0FxxfcRaxpxzi7vOVZBn:xxWPGpyORfIqKUx0FxxfcRaxpxe7+B","tlshash":"c2a1238ba7a52d2447ce3999c03f9341602648df8dd1d44cee1ab7e865705de9f1ef20","first_seen":"2023-03-13T20:32:43Z","last_seen":"2026-05-12T12:11:56.596444Z","times_seen":17,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking.mkp10-2.com-hotel.com/headers/ilusion/magallanes/dist/css/magallanes_iframe.less","fqdn":"booking.mkp10-2.com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.222.42.74","port":443,"asn":3257,"as":"GTT Communications Inc.","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:17.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booking.mkp10-2.com-hotel.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 15:29:42 GMT","end":"Sat, 25 Oct 2025 15:29:41 GMT"},"fingerprint":{"sha1":"57:68:C3:79:2F:35:9C:F6:B6:43:DA:EE:68:C6:38:20:F8:16:92:45","sha256":"39:40:E7:DD:A6:26:78:27:3D:A3:E2:98:35:0A:FD:32:DB:0E:0C:90:48:84:D3:3C:1B:F3:9B:69:9B:F3:C5:94"}}},"request":{"raw":"GET /headers/ilusion/magallanes/dist/css/magallanes_iframe.less HTTP/1.1\r\nHost: booking.mkp10-2.com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173; _ga_RRL6TC2WHG=GS2.1.s1755275174$o1$g0$t1755275174$j60$l0$h0; _ga_VSVH2X36Y6=GS2.1.s1755275174$o1$g0$t1755275174$j60$l0$h0; brand=30389; mkt_pref=YToxOntzOjEwOiJ0cmFja3BhcmFtIjtzOjM4OiJhJTNBMCUzQSU3QiU3RERBVEFfU0VQQVJBVE9SNDE4OTAyMDk3NyI7fQ%3D%3D; info_localizacion=30169%2Fno%2FNOK%2F; _upfs=eyJtYXJrZXRfaWQiOjM5LCJsYW5nXzM5Ijoibm8ifQ%3D%3D; remite=olt_bookingmkp10-2com-hotel%2Ftrack_portal\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 15 Aug 2025 16:26:17 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 27 May 2025 14:23:33 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 335\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":335,"size_decoded":0,"mime_type":"text/xml","magic":"ASCII text","md5":"733542fa3e3ff75a23737d2552b29350","sha1":"8113724a3daa4b190c02a438fdefc064af7a29eb","sha256":"b98de1fc9666dfdbc83dc46ac1a90f6d25fbb91ee63ab72747ca30b79db4373e","sha512":"8d135eea833f9b2269c284ac56e0cadf01622a8d6d77c7df7d9f24d944cef397447bcc6786d596653c97f5243e31e92ec223c5cc0ac30c314e6c34a117b98ccb","ssdeep":"","tlshash":"f8e048a37cf81904322f440993c71e78f76de167040d5cf5bb20196b8f5574c41c5515","first_seen":"2023-07-18T15:04:15Z","last_seen":"2025-12-16T17:35:04.596667Z","times_seen":9,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur1.otcdn.com/headers/ilusion/sunrise/dist/svg/icon-ownfill-travelsearch-location-74716E.svg","fqdn":"eur1.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:17.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/ilusion/sunrise/dist/svg/icon-ownfill-travelsearch-location-74716E.svg HTTP/1.1\r\nHost: eur1.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur1.otcdn.com/headers/widgets/search/locationwidget/css/locationwidget_base.css?v=1749491589\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:17 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 27 May 2025 14:23:34 GMT\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000, must-revalidate, proxy-revalidate\r\npragma: public\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: HIT\r\nage: 2034703\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f27369OXOqlPDH1QBbdfl%2FpeOcp%2BgHLYklk7pBP5pJQd6RMLi%2FOHrbNFJ4s3Du8lGOGhtqBzMkQpo1rwYMkyiJR%2F%2Bc6Je0Ym9kw9lVw%3D\"}]}\r\netag: W/\"6835cae6-1dc\"\r\ncontent-encoding: br\r\ncf-ray: 96fa0d83feeb49b7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":476,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"622b49d967667cca175284d56ad86227","sha1":"91450048fd939e03ffce8fe12ba47c3384c93fcd","sha256":"1c796d5e061702eb690bd32bdd55be294ce89e490ac10c434653903ae7b0f66b","sha512":"feafcccec67dec7dfc753574e67f94a2545583684bb137ca6b025eaac234896ad76145f9ebf2a4567a840c182348392408898831c5e1346132c28d39040c0e7e","ssdeep":"","tlshash":"5af097586938b08c68b2ca24aa2a24c2012ea5f222c88d09ffa80721368450cb8a0c5a","first_seen":"2025-06-28T23:09:08.181556Z","last_seen":"2025-10-15T21:46:25.926981Z","times_seen":11,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur3.otcdn.com/headers/ilusion/fonts/roboto/v18/roboto-v18-latin-300.woff2","fqdn":"eur3.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:15.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/ilusion/fonts/roboto/v18/roboto-v18-latin-300.woff2 HTTP/1.1\r\nHost: eur3.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nOrigin: https://booking.mkp10-2.com-hotel.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 15440\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 27 May 2025 14:23:30 GMT\r\netag: \"6835cae2-3c50\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000, must-revalidate, proxy-revalidate\r\npragma: public\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: HIT\r\nage: 1546535\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iwLIgvMWGtpwbaGXj7KdCjfNGxAcY4aA9O6jAtlBu%2FBbhiCDc%2BmnGWikIOoVaEuUln95VTafEANyWe5AK3PIUh5LtxAsGoqHGwn87Ko%3D\"}]}\r\ncf-ray: 96fa0d755d4de0fe-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15440,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15440, version 1.0","md5":"55536c8e9e9a532651e3cf374f290ea3","sha1":"ff3a9b8ae317896cbbcbadfbe615d671bd1d32a2","sha256":"eca8ffa764a66cd084800e2e71c4176ef089ebd805515664a6cb8d4fb3b598bf","sha512":"1346654c8293a2f38dd425ad44a2aa0ed2feab224388ab4e38fb99082769bbd14d67d74cac3ce6e39a562a0812f9bce0a623be233f9632dcb8d5d358e42f2186","ssdeep":"384:Vzm4Gnfp4YvadhOqhqWhUOcgYLeIEY1Uy72I+AaTHO9jXd4:Vdifp6dTqEUOcg67EHy/nf9j2","tlshash":"b562df1caee3c5a2d7da4cbc71cf44016c045ac847753294bb87f2927b96711aea3b2c","first_seen":"2023-04-05T04:58:40Z","last_seen":"2026-05-15T03:13:05.258004Z","times_seen":1544,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur1.otcdn.com/headers/ilusion/fonts/georama/Georama-Bold.woff2","fqdn":"eur1.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:15.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/ilusion/fonts/georama/Georama-Bold.woff2 HTTP/1.1\r\nHost: eur1.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nOrigin: https://booking.mkp10-2.com-hotel.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 57524\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 27 May 2025 14:23:30 GMT\r\netag: \"6835cae2-e0b4\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000, must-revalidate, proxy-revalidate\r\npragma: public\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: HIT\r\nage: 1546535\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VoeNf3mnu7tHGDRL6Thjp1uIyuxr9bSggKDVNv0zyrqr42wILjtANgWTMSaAtCfm7IkwmCKWwViM1EIhv94sPwbe8zcluoOrRZbZWFI%3D\"}]}\r\ncf-ray: 96fa0d754d0be0fe-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":57524,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 57524, version 1.0","md5":"2a8c83dc5701a9854ea28d8efc31cfdd","sha1":"55e3bb2370d35cb929677d2b11200137593829cc","sha256":"5f8aa9f28086d1670d5a199e76e98e0d38f2f14eef23b122f809fbfc53b135c9","sha512":"8e138924e6e4d1dfaa68c8ee2374efe6fc35dd7129cb36d5db5276dd40e473a5a5963d1c74f4dbfc4668753ade9f0951c5326399067e59388e86efe2e8fbf381","ssdeep":"1536:+hPwtM+4bkhbxPP5xN4K8OWb40sicbKyNfThHkXyCg:+9J6xPP5xynB9aRfTW1g","tlshash":"79430275ae82399c56213d4d8ca6db9a70774db8c781a32677e540cbd258e07dc80e1b","first_seen":"2023-11-27T12:30:25Z","last_seen":"2026-05-12T12:11:56.513706Z","times_seen":51,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur4.otcdn.com/headers/ac/illmagallanes/illmagallanes_de8307de38c60eab96b956b2fb141926_20250617_151012.js","fqdn":"eur4.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:15.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/ac/illmagallanes/illmagallanes_de8307de38c60eab96b956b2fb141926_20250617_151012.js HTTP/1.1\r\nHost: eur4.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 23 Jun 2025 07:49:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68590711-3e712\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000, must-revalidate, proxy-revalidate\r\npragma: public\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: HIT\r\nage: 3330008\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qP%2BgY%2Bs8TAcGuqZA60Ay9zJjwZgbqRAvHy%2FFWui3HR0xShV64Afawv%2BOLvkZM3NQcDIJ4qgn4AG1qYtIr%2BER1hXt8HD%2FcaM9coea1FM%3D\"}]}\r\ncf-ray: 96fa0d75ebcb49b7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":255762,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (34750)","md5":"8ffe1756508e7529edad87ca9bff2c7c","sha1":"e9e0efd1b305f7189b151c99bf44fa69f3b317d3","sha256":"ee352f06460ca63deec309e490f6030b339a9a4d8b2a535fc5b437702f236f92","sha512":"a6a7652c3d75e2d160f113371f4f528abe5488ee119844e313d3afa5fa41d650d66935b1361bbf8c9e78601749822a482730fe2db4b52b2aed640ed8675fb2a7","ssdeep":"3072:ntNmTLiToyYrz4a4aB9Rd/SlXbkz00Cp2xZwL4mVQA9R9chIA+dDG4PUBNHy:tQTLiTqz9dalXbkHZwL4mVJA+dDaHy","tlshash":"d3443b897251b07783fb31b4106f120af23b6a25a84d80a4f168d4e57eb9d4da137f7e","first_seen":"2025-06-28T23:09:08.020757Z","last_seen":"2025-12-22T03:26:28.137533Z","times_seen":14,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":28,"connect":34,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking.mkp10-2.com-hotel.com/preferences/set?i=1\u0026user_currency=NOK\u0026t=1755275178","fqdn":"booking.mkp10-2.com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.222.42.74","port":443,"asn":3257,"as":"GTT Communications Inc.","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:18.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booking.mkp10-2.com-hotel.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 15:29:42 GMT","end":"Sat, 25 Oct 2025 15:29:41 GMT"},"fingerprint":{"sha1":"57:68:C3:79:2F:35:9C:F6:B6:43:DA:EE:68:C6:38:20:F8:16:92:45","sha256":"39:40:E7:DD:A6:26:78:27:3D:A3:E2:98:35:0A:FD:32:DB:0E:0C:90:48:84:D3:3C:1B:F3:9B:69:9B:F3:C5:94"}}},"request":{"raw":"GET /preferences/set?i=1\u0026user_currency=NOK\u0026t=1755275178 HTTP/1.1\r\nHost: booking.mkp10-2.com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173; _ga_RRL6TC2WHG=GS2.1.s1755275174$o1$g0$t1755275174$j60$l0$h0; _ga_VSVH2X36Y6=GS2.1.s1755275174$o1$g0$t1755275174$j60$l0$h0; brand=30389; mkt_pref=YToxOntzOjEwOiJ0cmFja3BhcmFtIjtzOjM4OiJhJTNBMCUzQSU3QiU3RERBVEFfU0VQQVJBVE9SNDE4OTAyMDk3NyI7fQ%3D%3D; info_localizacion=30169%2Fno%2FNOK%2F; _upfs=eyJtYXJrZXRfaWQiOjM5LCJsYW5nXzM5Ijoibm8ifQ%3D%3D; remite=olt_bookingmkp10-2com-hotel%2Ftrack_portal\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 15 Aug 2025 16:26:18 GMT\r\nServer: Apache\r\nSet-Cookie: user_language=no; expires=Mon, 29 Sep 2025 16:26:18 GMT; Max-Age=3888000; path=/; domain=.destinia.co.no; secure; HttpOnly\n_upfs=eyJtYXJrZXRfaWQiOjM5LCJsYW5nXzM5Ijoibm8iLCJjdXJyZW5jeSI6Ik5PSyJ9; expires=Mon, 29 Sep 2025 16:26:19 GMT; Max-Age=3888000; path=/; domain=.mkp10-2.com-hotel.com; secure; HttpOnly\ninfo_localizacion=30169%2Fno%2FNOK%2F; expires=Sat, 30 Aug 2025 12:26:19 GMT; Max-Age=1281600; path=/; domain=.mkp10-2.com-hotel.com; secure; HttpOnly\n_upfs=eyJtYXJrZXRfaWQiOjM5LCJsYW5nXzM5Ijoibm8iLCJjdXJyZW5jeSI6Ik5PSyJ9; expires=Mon, 29 Sep 2025 16:26:19 GMT; Max-Age=3888000; path=/; domain=.mkp10-2.com-hotel.com; secure; HttpOnly\r\nCache-Control: private, no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0\r\nX-Server: SksxcTNOSlROOHNmNWRqdlBrNllUQT09OszZj8EWNLYFTXo8anymCCE=\r\nContent-Length: 43\r\nContent-Type: image/gif; charset=UTF-8\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif; charset=UTF-8","magic":"GIF image data, version 89a, 1 x 1","md5":"325472601571f31e1bf00674c368d335","sha1":"2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a","sha256":"b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b","sha512":"717ea0ff7f3f624c268eccb244e24ec1305ab21557abb3d6f1a7e183ff68a2d28f13d1d2af926c9ef6d1fb16dd8cbe34cd98cacf79091dddc7874dcee21ecfdc","ssdeep":"","tlshash":"bf900003ea80c002c2a2c0300e0ccb802b88b0308a28030fb0fc3baeec3a3a20c23000","first_seen":"2023-04-05T06:29:39Z","last_seen":"2026-05-15T15:18:55.16981Z","times_seen":85854,"resource_available":true,"data":null}},"time_used":336,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":336,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"com-hotel.com/plugins/bootstrap-datepicker-front/js/locales/bootstrap-datepicker.en.js","fqdn":"com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.129.55.48","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://com-hotel.com/","date":"2025-08-15T16:26:13.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com-hotel.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 02:30:46 GMT","end":"Sat, 08 Nov 2025 02:30:45 GMT"},"fingerprint":{"sha1":"0B:8A:1E:6C:23:CC:63:19:29:31:67:DE:3D:5B:71:D9:CC:0E:F9:C8","sha256":"E1:C6:52:2D:8E:1B:0B:71:99:30:1E:97:D0:0D:8A:7F:D6:93:89:4F:EC:54:28:15:56:2D:B8:4B:A3:69:AF:44"}}},"request":{"raw":"GET /plugins/bootstrap-datepicker-front/js/locales/bootstrap-datepicker.en.js HTTP/1.1\r\nHost: com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://com-hotel.com/\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173; PHPSESSID=savjjkb6rnnhi299dtfd2vevvh; _bb_sofia_GEO_COUNTRY_CODE=NO; _bb_sofia_GEO_LOCALE=en; device_view=full\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:13 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 353\r\nlast-modified: Tue, 21 Feb 2017 21:17:33 GMT\r\netag: \"2e4-54910e88b5ff4-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Sat, 15 Aug 2026 16:26:13 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nserver: nginx-more\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":740,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"cec28b89d81a232d436e6b34a7654b41","sha1":"b9be5558a177e28e82937c1e868d1e9199f2da21","sha256":"d527ad888ec7d518ec57d23f77496c864fb906024ff76bed85915a15f0e85cbc","sha512":"67dcac08602d63d147f14dcb193e32e89dfc18ef67b32307875fdf91ccd61603b45a427999da77f054591e74656fda8b78adcd3935c766c2382726d61c6254c6","ssdeep":"","tlshash":"d801f23c6501a643d1bac31a78a31a077b18238b0515aa1fb2ec2d854f4c9a8b33e42c","first_seen":"2023-07-18T15:04:15Z","last_seen":"2026-05-15T15:56:25.178466Z","times_seen":2267,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","fqdn":"booking.mkp10-2.com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.222.42.74","port":443,"asn":3257,"as":"GTT Communications Inc.","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://com-hotel.com/","date":"2025-08-15T16:26:14.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booking.mkp10-2.com-hotel.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 15:29:42 GMT","end":"Sat, 25 Oct 2025 15:29:41 GMT"},"fingerprint":{"sha1":"57:68:C3:79:2F:35:9C:F6:B6:43:DA:EE:68:C6:38:20:F8:16:92:45","sha256":"39:40:E7:DD:A6:26:78:27:3D:A3:E2:98:35:0A:FD:32:DB:0E:0C:90:48:84:D3:3C:1B:F3:9B:69:9B:F3:C5:94"}}},"request":{"raw":"GET /public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal HTTP/1.1\r\nHost: booking.mkp10-2.com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://com-hotel.com/\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 15 Aug 2025 16:26:14 GMT\r\nServer: Apache\r\nSet-Cookie: brand=30389; path=/; domain=.mkp10-2.com-hotel.com; secure; HttpOnly\nuser_language=no; expires=Mon, 29 Sep 2025 16:26:14 GMT; Max-Age=3888000; path=/; domain=.destinia.co.no; secure; HttpOnly\nmkt_pref=YToxOntzOjEwOiJ0cmFja3BhcmFtIjtzOjM4OiJhJTNBMCUzQSU3QiU3RERBVEFfU0VQQVJBVE9SNDE4OTAyMDk3NyI7fQ%3D%3D; expires=Mon, 29 Sep 2025 16:26:14 GMT; Max-Age=3888000; path=/; domain=.mkp10-2.com-hotel.com; secure; HttpOnly\ninfo_localizacion=30169%2Fno%2FNOK%2F; expires=Sat, 30 Aug 2025 12:26:14 GMT; Max-Age=1281600; path=/; domain=.mkp10-2.com-hotel.com; secure; HttpOnly\n_upfs=eyJtYXJrZXRfaWQiOjM5fQ%3D%3D; expires=Mon, 29 Sep 2025 16:26:14 GMT; Max-Age=3888000; path=/; domain=.mkp10-2.com-hotel.com; secure; HttpOnly\n_upfs=eyJtYXJrZXRfaWQiOjM5LCJsYW5nXzM5Ijoibm8ifQ%3D%3D; expires=Mon, 29 Sep 2025 16:26:14 GMT; Max-Age=3888000; path=/; domain=.mkp10-2.com-hotel.com; secure; HttpOnly\nremite=olt_bookingmkp10-2com-hotel%2Ftrack_portal; expires=Mon, 29 Sep 2025 16:26:14 GMT; Max-Age=3888000; path=/; domain=.mkp10-2.com-hotel.com\r\nCache-Control: no-cache\r\nSurrogate-Key: section_99 subsection_608\r\nX-Server: c09rUVNoaHFTN3BFK1EwdEVlQ056QT09OhJoMmQOUSlUWyB59k3uFXM=\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 29327\r\nContent-Type: text/html; charset=UTF-8\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":226333,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (34754)","md5":"fb6df1110ec03a20aa999a395fdf715d","sha1":"8184e93461122623219369bac0e2489e690f96c7","sha256":"57a80d4405866d1a585d50fa82a197c734d74f9da2083b432df57ab8fd635a5f","sha512":"81cd4f929aa3f236ac0c5317b49e90e91857a61584bd7769ade724afb22748ec8838ea33843e894ad4dc5fb7bbeccab56e1a07594488fa277c52c9481b52e560","ssdeep":"768:YUkV5vaGtQL8VKEVLeMRxe390xx3kxP0PD4xfgWWClxqmkLlsLK5UqFwvSRimwKc:YUuRqEVLk9Ex70qY","tlshash":"fc24a491e4b28a3541ff31a8daa12b0a5567c78fdbc12ff8b58cd05447c4e8c4e2b5e9","first_seen":"2025-08-15T16:26:55.749538Z","last_seen":"2025-08-15T16:26:55.749538Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1047,"timings":{"blocked":153,"dns":29,"connect":52,"send":0,"wait":740,"receive":1,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-133452114-2\u0026cx=c\u0026gtm=457e58d1za200\u0026tag_exp=101509157~103116026~103200004~103233427~104684208~104684211~105033763~105033765~105103161~105103163~105231383~105231385","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://com-hotel.com/","date":"2025-08-15T16:26:14.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"A2:8A:24:AD:51:7D:A4:62:BB:34:6F:C9:21:A1:B9:E1:2D:A6:0E:C1","sha256":"9F:B9:94:8F:84:D3:44:71:A7:81:72:C8:80:4D:14:02:E3:E0:30:0C:F1:17:27:83:00:82:D9:C3:68:D3:B3:AF"}}},"request":{"raw":"GET /gtag/js?id=UA-133452114-2\u0026cx=c\u0026gtm=457e58d1za200\u0026tag_exp=101509157~103116026~103200004~103233427~104684208~104684211~105033763~105033765~105103161~105103163~105231383~105231385 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://com-hotel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 15 Aug 2025 16:26:14 GMT\r\nexpires: Fri, 15 Aug 2025 16:26:14 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Fri, 15 Aug 2025 15:47:45 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1099:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1099:0\r\nreport-to: {\"group\":\"ascgcycc:1099:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1099:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 103249\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":293094,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5911)","md5":"ea1b6e248245f04b11fa74c58949779c","sha1":"881a8e6f660535bea11a64e6cf9a4589f91f1e9a","sha256":"15bda6d4b60737ee4e31b1cb86529c8a8f287a4c2d8c180fe03ddf059f57841e","sha512":"2787ccd30d894fb6136c7ce37199818646d4abd4b89b2114207ecd0abb40607b5881a9021f1525209264b852dc6d5dbf48a3d6d04067c1506c6fdb6c59512e25","ssdeep":"3072:GEb3g61JLwDPbA5B0S25DhSb5qlUmxxgbXwDctaW/uSoTQtF021tDRISdf7:TmLbATtIxmwLW/uSoTuFHtDuy","tlshash":"845409cd73d6b42283a36474503f014bb23b6992f84cc894f186d9d92e74aaa4277f7d","first_seen":"2025-08-15T16:26:55.750617Z","last_seen":"2025-08-15T16:26:55.750617Z","times_seen":1,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/vendor/handlebars/4.7.7/handlebars.min-v4.7.7.js?v=1749490742","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:15.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/vendor/handlebars/4.7.7/handlebars.min-v4.7.7.js?v=1749490742 HTTP/1.1\r\nHost: eur2.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 09 Jun 2025 17:39:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68471c36-1343c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000, must-revalidate, proxy-revalidate\r\npragma: public\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: HIT\r\nage: 820502\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FjBT3ZoAf0OT1QoqRGyCFHCDW%2B1VVPWEtsWf0afnscAQ6dXadFQRCG6awxBY1oTpg7ETWGGa8wLZsv4l9bPEdnnrzk7QaUkyBdYgajM%3D\"}]}\r\ncf-ray: 96fa0d759ace49b7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":78908,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"dff8ea6b1495deb383bae3d740bb886a","sha1":"98df606b84d12343272fca8e002d94e472a9d634","sha256":"985d544f53161a02c9d7a257743ea74e5ce20031c9455378b142aec8c783364d","sha512":"89877604cfe3d1e6fad3441446035528778d97a5b3a6b35a019f8fedc384b12b84fb53cf2d74884dfcc0244d61ceb5225ad4c2fa9f2e1d3554a287729ab00ca3","ssdeep":"1536:i0nNEUOfEkJWoP9IDQRBznwE7Hs5tIgsqb:REUO3N9IlE7HRgb","tlshash":"3373f8cc72d5a9ab439558a049af3315523fb82d7408d4ecba74d5eab878e08407ff78","first_seen":"2023-03-13T20:32:43Z","last_seen":"2026-05-12T12:11:56.474558Z","times_seen":23,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":18,"connect":27,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"com-hotel.com/template/frontend/default/css/identity-patch.css","fqdn":"com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.129.55.48","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://com-hotel.com/","date":"2025-08-15T16:26:13.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com-hotel.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 02:30:46 GMT","end":"Sat, 08 Nov 2025 02:30:45 GMT"},"fingerprint":{"sha1":"0B:8A:1E:6C:23:CC:63:19:29:31:67:DE:3D:5B:71:D9:CC:0E:F9:C8","sha256":"E1:C6:52:2D:8E:1B:0B:71:99:30:1E:97:D0:0D:8A:7F:D6:93:89:4F:EC:54:28:15:56:2D:B8:4B:A3:69:AF:44"}}},"request":{"raw":"GET /template/frontend/default/css/identity-patch.css HTTP/1.1\r\nHost: com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://com-hotel.com/\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173; PHPSESSID=savjjkb6rnnhi299dtfd2vevvh; _bb_sofia_GEO_COUNTRY_CODE=NO; _bb_sofia_GEO_LOCALE=en; device_view=full\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:13 GMT\r\ncontent-type: text/css\r\ncontent-length: 2486\r\nlast-modified: Mon, 08 Jun 2020 21:41:35 GMT\r\netag: \"242c-5a7997998c85b-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Sat, 15 Aug 2026 16:26:13 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nserver: nginx-more\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9260,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"1c165cff077c7170d52f1836b3ffc7cb","sha1":"dcf4c75b1c1d5f35b73ceb0d3ad9c01f2b410b5d","sha256":"1a8abc7dbbecaad6c2ddc1bd0fd60b03fa217f3a23a7702bea0a3e46bc0abd87","sha512":"b893fce4993d6f99c449f35de220a2ec0cacc2486e711d1a53e03287cc4b0a9cdd07c314d0c7ec6b583754ab4c96c993f94784e172d5aa2cc9f5b077b159f22d","ssdeep":"96:9DNLNVWLaBPZ3Gm5NJIbIAORrHfPMhOkZUpnVzbuLwKe9DzV70G5dqadT7cEBI:9DtFVZ3RMbIpB/PM0kZUb3uLgvYQ7RI","tlshash":"bf123691f2842e0e716b423bd8a3dff4fe6e1580ca066ebefd65353ac7cc5951422684","first_seen":"2023-07-18T15:04:15Z","last_seen":"2026-05-09T06:32:58.613013Z","times_seen":51,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static11.com-hotel.com/uploads/destination/79634/photo/spain-tenerife_15821080181.jpeg","fqdn":"static11.com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"104.26.3.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://com-hotel.com/","date":"2025-08-15T16:26:14.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-hotel.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 23 Jul 2025 18:54:03 GMT","end":"Tue, 21 Oct 2025 19:53:48 GMT"},"fingerprint":{"sha1":"EA:55:3C:55:09:75:23:AE:89:4A:FE:4F:11:E7:BA:EC:D6:B2:09:A2","sha256":"B7:68:47:73:B1:DF:BE:D9:C7:0A:24:C4:86:09:05:40:A0:C2:62:36:56:46:E5:73:3B:65:9B:A0:48:33:A5:41"}}},"request":{"raw":"GET /uploads/destination/79634/photo/spain-tenerife_15821080181.jpeg HTTP/1.1\r\nHost: static11.com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://com-hotel.com/\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 15 Aug 2025 16:26:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 325194\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31104000\r\ncf-bgj: imgq:100,h2pri\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-polished: origSize=341315\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nHyu%2F4TpNAOmGtvGMW5NdafvE0NlUr50pEkNq3oa0U4LUzp54FhfCS5r%2FPNN5m0IPiL93wtYZpyPBiTc%2BavLm9vax5Shxzw%2FXJvwgFCwFAkELQPvRA%3D%3D\"}]}\r\naccess-control-allow-origin: *\r\netag: \"53543-59eeb3a6aefdc\"\r\nexpires: Fri, 26 Jun 2026 14:28:46 GMT\r\nlast-modified: Wed, 19 Feb 2020 10:26:58 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: sameorigin\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nx-accel-buffering: yes\r\nage: 2006465\r\ncf-ray: 96fa0d6f0c9e3438-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":325194,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 2000x976, components 3","md5":"439ae72df2ca02aceefd3ff8a55324e5","sha1":"a30c394bf47270222e19c79a045bd6d6a07426cf","sha256":"0f0d05791b39839a242bcd8b6768cc6bf100fcc087b262cf6ace27b85c5dc749","sha512":"a781a382a887c4c6b6776ef8d156584549812b097ce93cf3b9cf743b81f0c950adc08f4006892adb72605494c0ec07ea254a461535f25f1ab6aa283a0c6ed16a","ssdeep":"6144:dJ/QM8vGVdnngyCM/txrq57l23hTgWf2RfKDbPF9ePsBq19pw:0MwGVxngPEtxri03hT/6iHPFEP8","tlshash":"fc6423de23ead9aa9a46800476f61c1ebce00a9d890df47b7617bb01e497dd07e090d7","first_seen":"2023-07-18T15:04:15Z","last_seen":"2026-03-10T11:37:27.53227Z","times_seen":11,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":162,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/common/js/libraries/widgets/search/AdvancedSearchCriteriaWidget/Plugin.js?v=1749489333","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:15.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/common/js/libraries/widgets/search/AdvancedSearchCriteriaWidget/Plugin.js?v=1749489333 HTTP/1.1\r\nHost: eur2.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2349\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 09 Jun 2025 17:15:33 GMT\r\netag: \"684716b5-92d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\npragma: public\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AwVjRtiiFi09yuimm4VWk5daEQbDebu1QQ7rRhp%2BCre5vZCVKAk439klsuzsrtcdawdtaVVQBvBA3m8JeLK4nieMjvMu8T1IrufUt%2Bc%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 96fa0d764d0b49b7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2349,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2349), with no line terminators","md5":"eff6452eaba908d527e1b7358778d7ad","sha1":"418c8f13a7219bfc1d382b2bb9773552bf121e37","sha256":"a838653e821edfcc9084e8affa5e408483250dec50a86173794eb6c07538dfdb","sha512":"8a748b396320a45c7f5db800c73487cf2298a4b469d7ebe8328b7e6e4ca3c6c8c6f14c0e0b6cf74a835ae05c77708332f647bfae76b49408e9124d69dfc52690","ssdeep":"","tlshash":"7941f406f1d938db1b6e51b4659f720a323b58dee401d81679b4e0d7d82269842e3b7c","first_seen":"2024-08-19T19:28:21.637925Z","last_seen":"2026-05-12T12:11:56.496186Z","times_seen":17,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static11.com-hotel.com/uploads/destination/73252/photo/panama-panama_1487002054.jpeg","fqdn":"static11.com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"104.26.3.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://com-hotel.com/","date":"2025-08-15T16:26:14.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-hotel.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 23 Jul 2025 18:54:03 GMT","end":"Tue, 21 Oct 2025 19:53:48 GMT"},"fingerprint":{"sha1":"EA:55:3C:55:09:75:23:AE:89:4A:FE:4F:11:E7:BA:EC:D6:B2:09:A2","sha256":"B7:68:47:73:B1:DF:BE:D9:C7:0A:24:C4:86:09:05:40:A0:C2:62:36:56:46:E5:73:3B:65:9B:A0:48:33:A5:41"}}},"request":{"raw":"GET /uploads/destination/73252/photo/panama-panama_1487002054.jpeg HTTP/1.1\r\nHost: static11.com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://com-hotel.com/\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 15 Aug 2025 16:26:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 289326\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31104000\r\ncf-bgj: imgq:100,h2pri\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-polished: origSize=301121\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3lC35sK0K7JQ9jHBDh3e45IXEBYm2cQ6Iq55MnNy5UepEliTDfrvMyr%2BEmrJjBpmmjMkN8Wjj0N5nQScvP6jFxfemZn1m4PuYl%2F5tWpIS%2BE15h3Xzg%3D%3D\"}]}\r\naccess-control-allow-origin: *\r\netag: \"49841-5486ba5357d80\"\r\nexpires: Mon, 03 Aug 2026 06:03:32 GMT\r\nlast-modified: Mon, 13 Feb 2017 16:07:34 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: sameorigin\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nx-accel-buffering: yes\r\nage: 163883\r\ncf-ray: 96fa0d6eec963438-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":289326,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 2000x976, components 3","md5":"04fea5934c94a009e733c0b9038ac4c6","sha1":"071b50e61b1159f1aeed54cb81f7fcf0506f8d3c","sha256":"930b8dbfba02890ba3afdee4df43750c8c3c27ff70228b632fc22058a74134ca","sha512":"e7891d52f75b5980dc30907ddcc1e794a3309dc5993f55c3d2fa957ebf455bebca38ae4da971113e46a39027bb0f056c714b4f274d2fb07cdb36b19b8ff4a41b","ssdeep":"6144:vAdmAZGsqLEKr2ufRFWE4aczMaIH3zcP2+AcV8QZ+0iHOKGKbNTjLu0Qyc:Yck3qLl2VnDMv3zcP2+AcVlZ+0uJGKbI","tlshash":"2a5423751f788da2422d6339beb0e75dfad2760a20082dc11f960cd47a98ab5cd71ce2","first_seen":"2023-07-18T15:04:15Z","last_seen":"2026-03-10T11:37:27.507821Z","times_seen":11,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur1.otcdn.com/headers/ilusion/magallanes/dist/svg/sprite/magallanes_flags_sprite.svg?v=1748355813","fqdn":"eur1.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:15.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/ilusion/magallanes/dist/svg/sprite/magallanes_flags_sprite.svg?v=1748355813 HTTP/1.1\r\nHost: eur1.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://booking.mkp10-2.com-hotel.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 27 May 2025 14:23:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6835cae5-e060\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000, must-revalidate, proxy-revalidate\r\npragma: public\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: HIT\r\nage: 2210227\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oaIYJZ%2BAp9x7NKqXUawPHs%2BhhSd8UaetK5ePGPD1plbhCdyyVs%2B9GTinjLRHwyBdptHljIBP%2BuMYDnNwYD9p40aVkTdG0k0lAozP7nU%3D\"}]}\r\ncf-ray: 96fa0d754d38e0fe-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":57440,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b95ce8fd38dd8f71894ff4f0bb9ae6c1","sha1":"cfc3250359a3a40629aa5862fc91ba8c9930181c","sha256":"64bf7f6592ba2fef3d8403efdc0678de73ebc24cad8055510c3c607e4aa5b6f5","sha512":"e470d579adf42f013bed88f499447ff60dc7441b3667a85771cf7bff331a2a218bf9ceb5617b45b5a678f53e0c45d7b1711cdd0491f4a4d1800eca1c453dee40","ssdeep":"768:UtJfrArglGCVdptC206kah9RBiui8WIbkc5zlVDGDPHLZl:UTNlGAci9ziuilOXDG7tl","tlshash":"2d43eac822389294a6c1c7fdbf7ab4c1174f30ff56944bc862a54d94626b7cbf904e80","first_seen":"2023-07-18T15:04:16Z","last_seen":"2026-05-12T12:11:56.525107Z","times_seen":25,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":69,"dns":14,"connect":8,"send":0,"wait":48,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"com-hotel.com/css/frontend/template/default/identity.css","fqdn":"com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.129.55.48","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://com-hotel.com/","date":"2025-08-15T16:26:13.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com-hotel.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 02:30:46 GMT","end":"Sat, 08 Nov 2025 02:30:45 GMT"},"fingerprint":{"sha1":"0B:8A:1E:6C:23:CC:63:19:29:31:67:DE:3D:5B:71:D9:CC:0E:F9:C8","sha256":"E1:C6:52:2D:8E:1B:0B:71:99:30:1E:97:D0:0D:8A:7F:D6:93:89:4F:EC:54:28:15:56:2D:B8:4B:A3:69:AF:44"}}},"request":{"raw":"GET /css/frontend/template/default/identity.css HTTP/1.1\r\nHost: com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://com-hotel.com/\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173; PHPSESSID=savjjkb6rnnhi299dtfd2vevvh; _bb_sofia_GEO_COUNTRY_CODE=NO; _bb_sofia_GEO_LOCALE=en; device_view=full\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:13 GMT\r\ncontent-type: text/css\r\ncontent-length: 2717\r\nlast-modified: Mon, 18 Mar 2019 19:04:13 GMT\r\netag: \"325f-584630deb19dd-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Sat, 15 Aug 2026 16:26:13 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nserver: nginx-more\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12895,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"cd9cab258003da8608a81331d580283c","sha1":"e06f44e2e300766bc6d80c5de9062fc75725b9d3","sha256":"81e616d77a2095fbb220c01cda994cbecedb02fcbf728784d26d2ccd97a29200","sha512":"dc07e377660d624767de1bbb4c8d033ec83a15af59c9d76ea80c079834913a6f481b1882b1af94da7e84059a632d1820ed6f1282b9570079b02ede5ae77d35fd","ssdeep":"384:N1f9N/d4nNE5nu+vD9Y5lZyJ4WFuJUbBHvLMv:NTEZq4WFm2BHu","tlshash":"c842650ee591292e21df4498aa1de7616f2ea48f470c5fbff65d22604f091a034b3fd5","first_seen":"2023-07-18T15:04:15Z","last_seen":"2026-05-09T06:32:58.601525Z","times_seen":53,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"com-hotel.com/api/en/5809db55-7408-11e8-bfca-000c2914c1c1/frontend/identity.css?entityId=129\u0026entityClass=Application%5CModelBundle%5CEntity%5CCompany","fqdn":"com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.129.55.48","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://com-hotel.com/","date":"2025-08-15T16:26:13.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com-hotel.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 02:30:46 GMT","end":"Sat, 08 Nov 2025 02:30:45 GMT"},"fingerprint":{"sha1":"0B:8A:1E:6C:23:CC:63:19:29:31:67:DE:3D:5B:71:D9:CC:0E:F9:C8","sha256":"E1:C6:52:2D:8E:1B:0B:71:99:30:1E:97:D0:0D:8A:7F:D6:93:89:4F:EC:54:28:15:56:2D:B8:4B:A3:69:AF:44"}}},"request":{"raw":"GET /api/en/5809db55-7408-11e8-bfca-000c2914c1c1/frontend/identity.css?entityId=129\u0026entityClass=Application%5CModelBundle%5CEntity%5CCompany HTTP/1.1\r\nHost: com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://com-hotel.com/\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173; PHPSESSID=savjjkb6rnnhi299dtfd2vevvh; _bb_sofia_GEO_COUNTRY_CODE=NO; _bb_sofia_GEO_LOCALE=en; device_view=full\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:13 GMT\r\ncontent-type: text/css; charset=UTF-8\r\ncontent-length: 4540\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\nset-cookie: _bb_sofia_GEO_COUNTRY_CODE=NO; expires=Fri, 22-Aug-2025 16:26:13 GMT; Max-Age=604800; path=/; HttpOnly\n_bb_sofia_GEO_LOCALE=en; expires=Fri, 22-Aug-2025 16:26:13 GMT; Max-Age=604800; path=/; HttpOnly\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nserver: nginx-more\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18591,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (432), with CRLF, CR line terminators","md5":"68ac2138c33e9ca72809f43db323ea95","sha1":"05820fa3ff451b105803356cc1713428e360227c","sha256":"77285d15a56480b451303fb11e074e66c588fad53f4b09bea846ea676285b627","sha512":"cbea2e0eaed5e431f992cc95e16526516b4226644edec878d60e88a669cd25937f3e219e762340338889502c63d64fe942c91a1f7bfc7487603869df2d77002f","ssdeep":"384:8F+5AXX8wBuau2ie/KlukG7RhZsE2s292wRyZCQdN:NuXX8woau2ie/KlukG7R3t2ow45N","tlshash":"c3827636b6441e05752b5323a977efed6b7b2242ca021dfaad5730b8cbce3cc4962544","first_seen":"2025-08-04T23:34:46.891763Z","last_seen":"2025-08-15T16:26:55.757156Z","times_seen":2,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static12.com-hotel.com/images/frontend/template/default/visa.png","fqdn":"static12.com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"104.26.3.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://com-hotel.com/","date":"2025-08-15T16:26:13.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-hotel.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 23 Jul 2025 18:54:03 GMT","end":"Tue, 21 Oct 2025 19:53:48 GMT"},"fingerprint":{"sha1":"EA:55:3C:55:09:75:23:AE:89:4A:FE:4F:11:E7:BA:EC:D6:B2:09:A2","sha256":"B7:68:47:73:B1:DF:BE:D9:C7:0A:24:C4:86:09:05:40:A0:C2:62:36:56:46:E5:73:3B:65:9B:A0:48:33:A5:41"}}},"request":{"raw":"GET /images/frontend/template/default/visa.png HTTP/1.1\r\nHost: static12.com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://com-hotel.com/\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 2492\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31104000\r\ncf-bgj: imgq:100,h2pri\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-polished: origSize=2699\r\netag: \"a8b-55cd789e0cb35\"\r\nexpires: Thu, 25 Jun 2026 23:41:20 GMT\r\nlast-modified: Tue, 31 Oct 2017 13:14:44 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncf-cache-status: HIT\r\nage: 2178653\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OKCxVQWp6LwTo9KSSvy9%2BG58WHqrLXmGLA1k0ySAVcgXQpCrANN05rTOcNaqJ1PB8l615kp7WBDIS1TraTfTep87Z8mzTXvS7Sha4gjkBgD%2FhbBARw%3D%3D\"}]}\r\ncf-ray: 96fa0d6c88293131-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2492,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 38, 8-bit/color RGBA, non-interlaced","md5":"6fef46472273dc47f764645ff9a629b3","sha1":"ef54ac3ce61932020fa2e70b4b70d9c6cbd69cf2","sha256":"bc2e0f6ce2cff4ee1854eb56997c1ad6f79037c642e1561f40add793cba0c14b","sha512":"cb0386843b0b98b910fe5cece4c63dce863483660ec55421d778c9b9bbb99a252d19e3362d31bcdbe681ba648359571205d2c250aa6758a282b08ed6814be4a9","ssdeep":"","tlshash":"ea514dc54f6d1c79f89c6f0a96e177752d3171a3412fc91b69094e2c12221ec7f50024","first_seen":"2025-07-02T04:21:11.952478Z","last_seen":"2026-05-15T15:38:41.156595Z","times_seen":995,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":106,"dns":60,"connect":10,"send":0,"wait":19,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"com-hotel.com/compiled/env-default-template.js","fqdn":"com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.129.55.48","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://com-hotel.com/","date":"2025-08-15T16:26:13.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com-hotel.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 02:30:46 GMT","end":"Sat, 08 Nov 2025 02:30:45 GMT"},"fingerprint":{"sha1":"0B:8A:1E:6C:23:CC:63:19:29:31:67:DE:3D:5B:71:D9:CC:0E:F9:C8","sha256":"E1:C6:52:2D:8E:1B:0B:71:99:30:1E:97:D0:0D:8A:7F:D6:93:89:4F:EC:54:28:15:56:2D:B8:4B:A3:69:AF:44"}}},"request":{"raw":"GET /compiled/env-default-template.js HTTP/1.1\r\nHost: com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://com-hotel.com/\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173; PHPSESSID=savjjkb6rnnhi299dtfd2vevvh; _bb_sofia_GEO_COUNTRY_CODE=NO; _bb_sofia_GEO_LOCALE=en; device_view=full\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:13 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 2025\r\nlast-modified: Tue, 12 Aug 2025 13:15:42 GMT\r\netag: \"1cb4-63c2ad65634fc-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Sat, 15 Aug 2026 16:26:13 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nserver: nginx-more\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7348,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7348), with no line terminators","md5":"b12451b1ae81533307c88f141a19e172","sha1":"b08836eae0170129c2c15dfd35b9c700d025b826","sha256":"a69d4ec5ef20171d1b4e192292206c6764e4be0b8828e2ff208e5625e7b4d35b","sha512":"b1a2f5e7e1f783521e7403557b1df49ea495ba1b0451016bea7410924e7d711b8cda417e822a48fdd49d7e92213f9a1cda7c61ee9632e55b5ebc8c52ec228301","ssdeep":"192:BaIm/JgLDbhAA3hlohfTJMT0he/pg3MPmhXxLSNgNrcWuW:BaIm/JgHbilTJMTJ/pWQ4XxLRX","tlshash":"26e154e63258249902df3833c61faf4560b3686edec7a841e54289f909bc6de9353bc4","first_seen":"2023-07-18T15:04:15Z","last_seen":"2026-05-09T06:32:58.551501Z","times_seen":53,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"com-hotel.com/compiled/lb-web.js","fqdn":"com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.129.55.48","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://com-hotel.com/","date":"2025-08-15T16:26:13.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com-hotel.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 02:30:46 GMT","end":"Sat, 08 Nov 2025 02:30:45 GMT"},"fingerprint":{"sha1":"0B:8A:1E:6C:23:CC:63:19:29:31:67:DE:3D:5B:71:D9:CC:0E:F9:C8","sha256":"E1:C6:52:2D:8E:1B:0B:71:99:30:1E:97:D0:0D:8A:7F:D6:93:89:4F:EC:54:28:15:56:2D:B8:4B:A3:69:AF:44"}}},"request":{"raw":"GET /compiled/lb-web.js HTTP/1.1\r\nHost: com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://com-hotel.com/\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173; PHPSESSID=savjjkb6rnnhi299dtfd2vevvh; _bb_sofia_GEO_COUNTRY_CODE=NO; _bb_sofia_GEO_LOCALE=en; device_view=full\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:13 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 1720\r\nlast-modified: Tue, 12 Aug 2025 13:17:21 GMT\r\netag: \"18fd-63c2adc359ce8-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Sat, 15 Aug 2026 16:26:13 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nserver: nginx-more\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6397,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6397), with no line terminators","md5":"1af44cefd589826d2a0b888d824a2cff","sha1":"fd4cd5d974c325f9b7108f4b914540757b0a0d0a","sha256":"e9a077f8242db1267def5e4798b9bacfd399007f56a4254bb6ebe4ddb2bced54","sha512":"fb06948911698f3deb7a430ba960e8fdc21445111070b14e0881459b7d593a5061556a6fb0f0f1651add87fdeb38b1427ac056ff1f7806a407bd98235c83b044","ssdeep":"192:bAxAzh5LxUV88J+0beAhf2Tv9Jw35gj6odJZWGimZhd1kNdvhp:bqE5LxUV1JZhyYpvyWGimZhzwRn","tlshash":"08d151cc79b805e72f9f33ba44d7c28a46aa64ae89a580d141dd04404db8fce9377f5a","first_seen":"2023-07-16T11:29:18Z","last_seen":"2026-05-15T15:56:25.165213Z","times_seen":2610,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur3.otcdn.com/headers/ac/ill_css_magallanes_ltr_s/ill_css_magallanes_ltr_s_983f8f9b98a07821941e377718eb3c99_20250722_161016.css","fqdn":"eur3.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:15.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/ac/ill_css_magallanes_ltr_s/ill_css_magallanes_ltr_s_983f8f9b98a07821941e377718eb3c99_20250722_161016.css HTTP/1.1\r\nHost: eur3.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 22 Jul 2025 14:13:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"687f9c79-cfc74\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000, must-revalidate, proxy-revalidate\r\npragma: public\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: HIT\r\nage: 2030422\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=77oCc8ZnPX%2Fqvfdjdn%2FFM6ehDJ7SWWN9eQi0CB%2BY1ZfXY44qZmZjalRfpAC%2F%2Fj7B3P3iQKgH8JLdVsG6TCaw9ZboZXJacA%2B7IgtA%2BYI%3D\"}]}\r\ncf-ray: 96fa0d75ebdb49b7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":851060,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (63471)","md5":"3ba6b0537c98d559086f8ff318a1b594","sha1":"b6e24e2ff933397e10fad7c640f0c2672690a01a","sha256":"cf2c65214fa918020336142c55ec627ef1fc468646d7f4dacfdcf292bf806ce7","sha512":"8d4f67b1f9dbffc2d10def2bd768b5911a2ee62a21160978280860a766372ec25618f8e4552ae572b454d6b1e8df493793221393163f44df70337dd58e456747","ssdeep":"6144:eiuxIdHVCAvBgqkDlJ6nF+uvnZczk7fvDws16wKj:eiu+dHVfBq6nF+uvnZczk7fvDwsEwKj","tlshash":"5705a565792070797a77c618f4d0adc76f28f203e45a5ef6ba1390ed83dc08e276271a","first_seen":"2025-08-04T23:34:46.837575Z","last_seen":"2025-08-15T16:26:55.760562Z","times_seen":3,"resource_available":false,"data":null}},"time_used":374,"timings":{"blocked":150,"dns":29,"connect":14,"send":0,"wait":37,"receive":0,"ssl":90},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/ilusion/fonts/roboto/v18/roboto-v18-latin-regular.woff2","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:15.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/ilusion/fonts/roboto/v18/roboto-v18-latin-regular.woff2 HTTP/1.1\r\nHost: eur2.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nOrigin: https://booking.mkp10-2.com-hotel.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 15344\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 27 May 2025 14:23:30 GMT\r\netag: \"6835cae2-3bf0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000, must-revalidate, proxy-revalidate\r\npragma: public\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: HIT\r\nage: 1546535\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M3S6W8N0nToWSfwzMs5SX1p6W19M18xv2QZKKdCGkutea1EfDecMD4qJeAOg2JCYB4VjjmfJ5DbVlfXd9HmZfTWXQkrOaP1YxkAWzrI%3D\"}]}\r\ncf-ray: 96fa0d759e10e0fe-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15344,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15344, version 1.0","md5":"5d4aeb4e5f5ef754e307d7ffaef688bd","sha1":"06db651cdf354c64a7383ea9c77024ef4fb4cef8","sha256":"3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc","sha512":"7eb7c301df79d35a6a521fae9d3dccc0a695d3480b4d34c7d262dd0c67abec8437ed40e2920625e98aaeafba1d908dec69c3b07494ec7c29307de49e91c2ef48","ssdeep":"384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw","tlshash":"5162e16aef76dc7e4f1af1361c01b45404462290ba6155eff00d6e1d4eed1aff461392","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T15:07:33.705132Z","times_seen":540572,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":49,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/vendor/jquery/plugins/jquery.cookie.min.js?v=1748355822","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:15.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/vendor/jquery/plugins/jquery.cookie.min.js?v=1748355822 HTTP/1.1\r\nHost: eur2.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 816\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 27 May 2025 14:23:42 GMT\r\netag: \"6835caee-330\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000, must-revalidate, proxy-revalidate\r\npragma: public\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: HIT\r\nage: 2029379\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b3%2BUSRVnWoYsqLvVF%2BMy2sNBRq8ruIJD5UwQ0gthxpMkHjb4EiY9gM4m9%2FMjxx9utjZHeFhH52RgCH78003K1DKMIAvx8zz31o3upUU%3D\"}]}\r\ncf-ray: 96fa0d75cb5a49b7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":816,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (502)","md5":"d7171770443cc0f07dd7db3fba550465","sha1":"0af8b6b8c2547f1331755d468469b4375bce92f0","sha256":"d8efb1b57aa96405184e6993738285502155a46774221912887b5149463ec838","sha512":"25a59bff876d57be7f8552d206bf2fd1a286d0065ea3865263a76c956f4cdead6acb971a5e04c14654e94b17f658d3dead3c05740c068c1039192c22f2e57cc7","ssdeep":"","tlshash":"7d01cec434c9fc0929aa8b1b3be6449e70acab4848ec5869df4174e076305579fb5bb4","first_seen":"2023-03-13T20:32:43Z","last_seen":"2026-05-12T12:11:56.595773Z","times_seen":23,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/common/js/transports/GeolocationGeounitManager.js?v=1749489267","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:15.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/common/js/transports/GeolocationGeounitManager.js?v=1749489267 HTTP/1.1\r\nHost: eur2.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1208\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 09 Jun 2025 17:14:27 GMT\r\netag: \"68471673-4b8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000, must-revalidate, proxy-revalidate\r\npragma: public\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: HIT\r\nage: 658166\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8Qg8MhbQDMmeb8QPiMYJYJCz5WlZVoAc%2Bp1kc2gtTfIWsYAVN6qm4k236ACq90UC5odU4ij5FBjOIfKU2crogD6KLjxc%2Fl0DDkG8dbM%3D\"}]}\r\ncf-ray: 96fa0d761c6c49b7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1208,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1208), with no line terminators","md5":"282a874bc2ba0e3b6b3ce6391a9e8a7d","sha1":"5a9dc963c4d2982d1141c6d9ab3f872a8ef68507","sha256":"3ef905cddeab628ff9aa028b1cf4c06804b97d271cc22e10fe62a7cea0cdf50c","sha512":"e74d9af73f59133bd3fc5d8d196e54ae0d4c27b7f37b38936b6cc27cd426f188c059578e77d5888601eac6b4840ad1ef1fb6d7522499e6084a7dad44b71b1682","ssdeep":"","tlshash":"9821f457976d213385e2b1376c8f0202107bd44bbe8c98263541daa6cc5793c8f43fa4","first_seen":"2023-03-13T20:32:42Z","last_seen":"2026-05-12T12:11:56.516332Z","times_seen":21,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking.mkp10-2.com-hotel.com/headers/widgets/transport/search/transporttrainsearcherwidget/css/transporttrainsearcherwidget_ssm.less","fqdn":"booking.mkp10-2.com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.222.42.74","port":443,"asn":3257,"as":"GTT Communications Inc.","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:17.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"booking.mkp10-2.com-hotel.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 15:29:42 GMT","end":"Sat, 25 Oct 2025 15:29:41 GMT"},"fingerprint":{"sha1":"57:68:C3:79:2F:35:9C:F6:B6:43:DA:EE:68:C6:38:20:F8:16:92:45","sha256":"39:40:E7:DD:A6:26:78:27:3D:A3:E2:98:35:0A:FD:32:DB:0E:0C:90:48:84:D3:3C:1B:F3:9B:69:9B:F3:C5:94"}}},"request":{"raw":"GET /headers/widgets/transport/search/transporttrainsearcherwidget/css/transporttrainsearcherwidget_ssm.less HTTP/1.1\r\nHost: booking.mkp10-2.com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173; _ga_RRL6TC2WHG=GS2.1.s1755275174$o1$g0$t1755275174$j60$l0$h0; _ga_VSVH2X36Y6=GS2.1.s1755275174$o1$g0$t1755275174$j60$l0$h0; brand=30389; mkt_pref=YToxOntzOjEwOiJ0cmFja3BhcmFtIjtzOjM4OiJhJTNBMCUzQSU3QiU3RERBVEFfU0VQQVJBVE9SNDE4OTAyMDk3NyI7fQ%3D%3D; info_localizacion=30169%2Fno%2FNOK%2F; _upfs=eyJtYXJrZXRfaWQiOjM5LCJsYW5nXzM5Ijoibm8ifQ%3D%3D; remite=olt_bookingmkp10-2com-hotel%2Ftrack_portal\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 15 Aug 2025 16:26:17 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 27 May 2025 14:23:44 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 0\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T15:20:42.416165Z","times_seen":15223586,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/vendor/greensock/gsap-3.1.1/minified/gsap.min.js?v=1748355821","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:15.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/vendor/greensock/gsap-3.1.1/minified/gsap.min.js?v=1748355821 HTTP/1.1\r\nHost: eur2.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 27 May 2025 14:23:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6835caed-e1e2\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000, must-revalidate, proxy-revalidate\r\npragma: public\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: HIT\r\nage: 3173755\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nsxCPVLpDr99zG8eVD4mHcju3z3UATLqK9JErCfbgHT1goLkSZGw%2BIz8LVBXYY3hJ0kCGhYhJbIonXSSJSLfCmCegUL7OYKLTfS159M%3D\"}]}\r\ncf-ray: 96fa0d764d1249b7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":57826,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (57493)","md5":"663fd753cae2b462cf8ed119c3f991ab","sha1":"06a63bc0ec823880b5420c23071e3c3c0582c11a","sha256":"732117ac92a33b760d9290a33f1541762ee9449dc417ea249b5a0df50738ad16","sha512":"d11607aa8380466a71344c3e7acc4d1d768fa17594dfab300bc6b90609a77b164d98e8437b00af2913568ad262c1fe34a3c254b20f37d54bbf71120deec09d28","ssdeep":"768:N1JsoGPTyHRUxrSOdlWfT2OlUFi2rLei2YCv0BiDTTW9t9gE0aZC3n5N:NDFGlrSGlWTCPb9b+","tlshash":"964309cd3292b42642975161457f0a0bf33ba998200f4518f664e4cd7e3cdae42bbf7a","first_seen":"2023-03-07T13:48:25Z","last_seen":"2026-05-15T13:22:59.522076Z","times_seen":172,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/common/js/libraries/widgets/search/TransportAndHotelSearcherWidget/Plugin.js?v=1749489357","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:15.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/common/js/libraries/widgets/search/TransportAndHotelSearcherWidget/Plugin.js?v=1749489357 HTTP/1.1\r\nHost: eur2.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 09 Jun 2025 17:15:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"684716cd-2a18\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\npragma: public\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bDDcJm6ryX3pMJOi6kTvz6LQg%2Brax6kg8vBxpjnBoRnEYW3e9CyfPEi1LCS3cO3t2OshNmSWw8Xne2kCFYZ5pUI4BfOKAB9II%2FwLgzs%3D\"}]}\r\ncf-ray: 96fa0d764d1349b7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10776,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (10776), with no line terminators","md5":"92e350cf71e8b59d39c8d5cbcf3e4148","sha1":"dce6225c4848a3ce77ee86deaa89366613612407","sha256":"cbbe6ee6c874c31b58240f66cc76b3c0d6c683e65bd04e20927aaa760f6c351e","sha512":"d2ebd87498831ead5a3ca87561f5162aea4e9cd1a7dad0736f0eda2503c623bdbc502d43667473798211fc38dc4bd8b573e216798a1cb46455faf282cb8f72a1","ssdeep":"192:xClgDeDxi4FVeSnYH9r+L7wFtyRaN/09558V2tMpzkG:og6DUcfYdr07V8F5V","tlshash":"2e22528a6394285503ff5123840b2601733998fe8b92da9de9b0b5f559b8cd9033ff39","first_seen":"2025-06-28T23:09:08.030283Z","last_seen":"2025-09-21T13:22:40.661944Z","times_seen":9,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hrenaissancecancunresortmarina.com-hotel.com/","fqdn":"hrenaissancecancunresortmarina.com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.83.149.10","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-15T16:26:11.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com-hotel.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 02:30:46 GMT","end":"Sat, 08 Nov 2025 02:30:45 GMT"},"fingerprint":{"sha1":"0B:8A:1E:6C:23:CC:63:19:29:31:67:DE:3D:5B:71:D9:CC:0E:F9:C8","sha256":"E1:C6:52:2D:8E:1B:0B:71:99:30:1E:97:D0:0D:8A:7F:D6:93:89:4F:EC:54:28:15:56:2D:B8:4B:A3:69:AF:44"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: hrenaissancecancunresortmarina.com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:11 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 752\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\nset-cookie: PHPSESSID=pemmhrtgqjcqtdst83kheqh88h; path=/\ndevice_view=full; expires=Mon, 15-Sep-2025 16:26:11 GMT; Max-Age=2678400; path=/; HttpOnly\n_bb_sofia_GEO_COUNTRY_CODE=NO; expires=Fri, 22-Aug-2025 16:26:11 GMT; Max-Age=604800; path=/; HttpOnly\n_bb_sofia_GEO_LOCALE=en; expires=Fri, 22-Aug-2025 16:26:11 GMT; Max-Age=604800; path=/; HttpOnly\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nserver: nginx-more\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":1684,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text, with CRLF, LF line terminators","md5":"e9b4445cb6f14a899d99260f9f4c1cef","sha1":"ca0ba6c4616fd0ba0c973e93f651aae09ada08a1","sha256":"91fefcb2ef126385ad3ed0805599c4264585ad387db2271f34f878d27903c99c","sha512":"095c7410638e4aaf9e5a7f9c743df39e8734b68fd68f442a06dcacc390dacb168a02d34cfc64f25b49cc6024648403bf5ae853bb2249483729595530690e001e","ssdeep":"","tlshash":"33314792dfb6040902f2c1649af3f6088e56074bd28fa46079cc45586fc5b4b91c71cc","first_seen":"2025-08-15T16:26:55.765341Z","last_seen":"2025-08-15T16:26:55.765341Z","times_seen":1,"resource_available":false,"data":null}},"time_used":360,"timings":{"blocked":111,"dns":14,"connect":27,"send":0,"wait":135,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"com-hotel.com/compiled/lb-frontent-translations.js","fqdn":"com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.129.55.48","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://com-hotel.com/","date":"2025-08-15T16:26:13.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com-hotel.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 02:30:46 GMT","end":"Sat, 08 Nov 2025 02:30:45 GMT"},"fingerprint":{"sha1":"0B:8A:1E:6C:23:CC:63:19:29:31:67:DE:3D:5B:71:D9:CC:0E:F9:C8","sha256":"E1:C6:52:2D:8E:1B:0B:71:99:30:1E:97:D0:0D:8A:7F:D6:93:89:4F:EC:54:28:15:56:2D:B8:4B:A3:69:AF:44"}}},"request":{"raw":"GET /compiled/lb-frontent-translations.js HTTP/1.1\r\nHost: com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://com-hotel.com/\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173; PHPSESSID=savjjkb6rnnhi299dtfd2vevvh; _bb_sofia_GEO_COUNTRY_CODE=NO; _bb_sofia_GEO_LOCALE=en; device_view=full\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:13 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nlast-modified: Tue, 12 Aug 2025 13:17:31 GMT\r\netag: \"51ea8-63c2adcd5d649-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Sat, 15 Aug 2026 16:26:13 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nserver: nginx-more\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":335528,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32047)","md5":"a1a0bb3d13a1e8841725f9dfcf33ec05","sha1":"824739b8b876f848a5b08042b98fa5de376ee840","sha256":"8cab97cb51c3388248a82d39c1fd30e70023be6639201b19161166390537c862","sha512":"01a4ff356a1b84228c5458a680566c274a56ec251ca6ef7865c2b935b62b141ee638903e7a4f0331ca8027aeea980d4a1592f08cffe1c44308e86d55ab29ff44","ssdeep":"3072:gEnrtZAp7z0iJ9+jghhY5y3HDlEOEee0R5ms7LXFKhIxlbrTEs6Z:TrtpghZJ5XbFFvzm","tlshash":"176410199f682037289533921fdda087b7dc9c08e5baccca7488581a37e6f78573b45e","first_seen":"2025-01-30T19:03:22.406781Z","last_seen":"2026-05-15T15:56:25.129254Z","times_seen":2499,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"com-hotel.com/compiled/ll-home-company-default-template.css","fqdn":"com-hotel.com","domain":"com-hotel.com","tld":"com"},"ip":{"addr":"212.129.55.48","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://com-hotel.com/","date":"2025-08-15T16:26:14.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com-hotel.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 02:30:46 GMT","end":"Sat, 08 Nov 2025 02:30:45 GMT"},"fingerprint":{"sha1":"0B:8A:1E:6C:23:CC:63:19:29:31:67:DE:3D:5B:71:D9:CC:0E:F9:C8","sha256":"E1:C6:52:2D:8E:1B:0B:71:99:30:1E:97:D0:0D:8A:7F:D6:93:89:4F:EC:54:28:15:56:2D:B8:4B:A3:69:AF:44"}}},"request":{"raw":"GET /compiled/ll-home-company-default-template.css HTTP/1.1\r\nHost: com-hotel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://com-hotel.com/\r\nCookie: _ga_D7G4Q9TG14=GS2.1.s1755275172$o1$g0$t1755275172$j60$l0$h0; _ga=GA1.1.248098058.1755275173; PHPSESSID=savjjkb6rnnhi299dtfd2vevvh; _bb_sofia_GEO_COUNTRY_CODE=NO; _bb_sofia_GEO_LOCALE=en; device_view=full\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:14 GMT\r\ncontent-type: text/css\r\ncontent-length: 323\r\nlast-modified: Tue, 12 Aug 2025 13:15:26 GMT\r\netag: \"290-63c2ad55b865e-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Sat, 15 Aug 2026 16:26:14 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nserver: nginx-more\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":656,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (655)","md5":"74552733388bd22e53a02bf41238d66f","sha1":"f60942b33af249762a125e1d2eb14fe591280621","sha256":"d0ce82d78e4e866bb822f70c15358710343dd2a4545fba136e7c0ab95c603ce8","sha512":"6770eced4e54db4b30a1e8b0d19fc7cac3c1cc4c57156b3c2c0e2d8d5a7a7e2a6e91729c3f60ff89eee3cd97e17d3f17b11fcf0ada8c2dc633a7348d7fc508a2","ssdeep":"","tlshash":"85f070726d08242cd5b300238b732c8496abc2cee6d75565dc23e85f4fc54f81f22050","first_seen":"2023-07-18T15:04:15Z","last_seen":"2026-05-09T06:32:58.57137Z","times_seen":46,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-VSVH2X36Y6\u0026cx=c\u0026gtm=457e58d1za200\u0026tag_exp=101509157~103116026~103200004~103233427~104684208~104684211~105033763~105033765~105103161~105103163~105231383~105231385","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://com-hotel.com/","date":"2025-08-15T16:26:14.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"A2:8A:24:AD:51:7D:A4:62:BB:34:6F:C9:21:A1:B9:E1:2D:A6:0E:C1","sha256":"9F:B9:94:8F:84:D3:44:71:A7:81:72:C8:80:4D:14:02:E3:E0:30:0C:F1:17:27:83:00:82:D9:C3:68:D3:B3:AF"}}},"request":{"raw":"GET /gtag/js?id=G-VSVH2X36Y6\u0026cx=c\u0026gtm=457e58d1za200\u0026tag_exp=101509157~103116026~103200004~103233427~104684208~104684211~105033763~105033765~105103161~105103163~105231383~105231385 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://com-hotel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 15 Aug 2025 16:26:14 GMT\r\nexpires: Fri, 15 Aug 2025 16:26:14 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1099:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1099:0\r\nreport-to: {\"group\":\"ascgcycc:1099:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1099:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 139683\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":417575,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7897)","md5":"6899d8d1872bfb82049c67e4c99a3a0e","sha1":"81e4261758310f11871841fa4e37617f11fc0adc","sha256":"2b0dc2bee46e7c1de26c6f3b79b325d50aed4f41dd50b3e0185a157417bb6a56","sha512":"a0e174d2d149a0aeb2b304567f9ab4e81e5cee8a0a5e9748e017c236fb79c163b6f1da76937e1205fd04c893663bb9b54940f1fdf6c745a16fd124db22e51f87","ssdeep":"6144:GmLLFAcd7tIxSgw5xvuW/uSoTuFHUKPyXr:vPVd5cWzUr","tlshash":"c09408ce73d674625396f478402f01cba97b28a2b49cc8aaf185cdf42d3469a5127f7c","first_seen":"2025-08-15T16:26:55.767356Z","last_seen":"2025-08-15T16:26:55.767356Z","times_seen":1,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":65,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/vendor/flatpickr-4.6.9/l10n/fa-jal.min.js?v=1748355821","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:15.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/vendor/flatpickr-4.6.9/l10n/fa-jal.min.js?v=1748355821 HTTP/1.1\r\nHost: eur2.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1311\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 27 May 2025 14:23:41 GMT\r\netag: \"6835caed-51f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000, must-revalidate, proxy-revalidate\r\npragma: public\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: HIT\r\nage: 652430\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NXZfSTkauq4DjwdT%2Bw356Mu2oG5PBlZw13IjqZUR%2FcaCx4bagcwJH%2BjIRnlgo85HQQdPigPmLOn0U41fFZvlw3u31YFpkeCAKkU0PUw%3D\"}]}\r\ncf-ray: 96fa0d75ab0449b7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1311,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (894)","md5":"ce427bc3d74c60a527b054fe90405027","sha1":"53e1cc76811347a820a21572a84bfb88a91db115","sha256":"65a382c767dd7bf96ab02715cd4d06bb403bafc7ff1088eff2a1fca810bbd0cc","sha512":"a61f0ffcde5b8fb07e42ab83921824bf03971be47dec68b9e5ff37601a14565a756d5d91fb725d8dedc249b674623d7d44cb8804baefcb3f4a89942e44288396","ssdeep":"","tlshash":"9121313a1b24a17023134b5360bb7b3fe5b2c435422f94d839d83b72e841c9e12d268b","first_seen":"2023-03-13T20:32:43Z","last_seen":"2026-05-12T12:11:56.483618Z","times_seen":23,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/common/js/libraries/widgets/search/JourneyLocationAndDateScrollWidget/Plugin.js?v=1748355805","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:15.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/common/js/libraries/widgets/search/JourneyLocationAndDateScrollWidget/Plugin.js?v=1748355805 HTTP/1.1\r\nHost: eur2.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 27 May 2025 14:23:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6835cadd-325c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\npragma: public\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vyOZxe159uofLTxU8UKJDZa%2BCTJXVRPpFAS4FCpAn7cZdenMNudMOICXwUrb%2Fj81tY0kC4wGG%2BthjRgfRfmcOYynT0X0KlawTSewqAY%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 96fa0d763ce749b7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12892,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"0adf661e268879d83f61181af2af9b17","sha1":"650abef1c3a33cd7bd10973dc9a8344ff83cbb03","sha256":"b84d3af84ee87879de97d04ca63d390a2dcdaf977a668acbf52d3c56c74e86c7","sha512":"7c32da35d4c42dda1c9d7a04ab88f40878b12dbcead9d69f55acef2ed7d27138e38a95f841070bdd80bc32c4ba9ffbead4bff9bead791796dc6bd32d191723c3","ssdeep":"192:ePWPYJCFr6g2Nu6+wVXMRa7GjY3CPml+Z8XxCvWT3+mIK9ryr0MCQvS+UJNPyURI:dSg8ujQzB+N2lPZRDOf","tlshash":"f842ec49a9fa1550576b303a8e6f52017621844f098ffe447d2cf7940f849b986fefe8","first_seen":"2023-03-13T20:32:43Z","last_seen":"2026-05-12T12:11:56.601247Z","times_seen":17,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur2.otcdn.com/headers/common/js/libraries/widgets/search/DateScrollWidget/Plugin.js?v=1749489334","fqdn":"eur2.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:15.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/common/js/libraries/widgets/search/DateScrollWidget/Plugin.js?v=1749489334 HTTP/1.1\r\nHost: eur2.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2403\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 09 Jun 2025 17:15:34 GMT\r\netag: \"684716b6-963\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\npragma: public\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JKkuFZvJC5Lj86wSjC%2FnguZqHeaFCYbjemyGDiq250bD7hujMKM99vqoSAoQAKgEZEJ2UtqcYw%2BRLVUHt3QBirMVAgK2Pn%2Fv3TjGJRU%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 96fa0d759af649b7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2403,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2403), with no line terminators","md5":"e2542afcd370bd47dde2f271a2f40e28","sha1":"b312902a169c1093349bb8951add2f932dc65296","sha256":"290a4fd69543dee4450237091c6782832e28fd3b29eb453b6ef7b0bb75c6418e","sha512":"842ecec5bbc63bf5fafb5ceaa94130d4b2e60f61dcf9fbf04e2533d0807d852adb01845e92975c4165cd3493fe5ed833d2fd4a8da52fb1cf10d9c03f8a29b0dd","ssdeep":"","tlshash":"6741e1d8b2c0712657d6f335847f070aa23b64a09bbdc44cd265e4e13db489c952ffa8","first_seen":"2023-11-27T12:30:25Z","last_seen":"2026-02-03T13:35:48.480631Z","times_seen":19,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur3.otcdn.com/headers/common/js/libraries/widgets/search/NightsScrollWidget/Controls/Nights.js?v=1749489354","fqdn":"eur3.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:15.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/common/js/libraries/widgets/search/NightsScrollWidget/Controls/Nights.js?v=1749489354 HTTP/1.1\r\nHost: eur3.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 121\r\nserver: cloudflare\r\nlast-modified: Mon, 09 Jun 2025 17:15:54 GMT\r\netag: \"684716ca-79\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\npragma: public\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=23RZUi7v9oRHqUBTmI66O%2FmM%2FcVevYJ1tmAbqraWfnUV6c4x42IEd4rkFDTj5MUw%2BOAr0i5lgAov0J6goKeLlmvm5w6oez94Q4dP%2Ba0%3D\"}]}\r\ncf-ray: 96fa0d75ab1249b7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":121,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with no line terminators","md5":"3172c357943933356a83538a3b03cdb5","sha1":"5ddc4e78bc00fcaf30d1d92f350e2150278107a3","sha256":"c5d466caf4860727af165265faf70559de52eb4725bfd64d275f3d7ca6fe6b0d","sha512":"ac14cbfa60e9a5be37f85f026c330fe29a4448926e0ed4eebccb31fe7e78a42dff1fe6d84929efcb4893e4cb601c3a73b6ef25d80c1c44fd7014f57ff60de8f9","ssdeep":"","tlshash":"9ab09b84ac77360d276d34f96407134b57553a45f40815057015f8c1a95ee1c405151d","first_seen":"2023-03-13T20:32:43Z","last_seen":"2026-05-12T12:11:56.497862Z","times_seen":23,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur1.otcdn.com/headers/vendor/jquery/plugins/jquery.cookie.js?v=1749490630","fqdn":"eur1.otcdn.com","domain":"otcdn.com","tld":"com"},"ip":{"addr":"172.67.70.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking.mkp10-2.com-hotel.com/public/widget/291117/4106755428?selected_tab=H\u0026trackpurchase=portal","date":"2025-08-15T16:26:15.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otcdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 18:41:51 GMT","end":"Sat, 01 Nov 2025 18:41:50 GMT"},"fingerprint":{"sha1":"48:3D:55:F1:1A:DD:7D:07:BB:67:17:D8:9D:80:01:2D:6F:F2:E6:63","sha256":"A0:31:A4:7C:08:40:D1:53:BD:79:59:33:39:98:47:9A:37:5D:E7:60:07:3E:E1:E9:AC:D1:29:60:DD:AD:82:A3"}}},"request":{"raw":"GET /headers/vendor/jquery/plugins/jquery.cookie.js?v=1749490630 HTTP/1.1\r\nHost: eur1.otcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://booking.mkp10-2.com-hotel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 16:26:15 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1133\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 09 Jun 2025 17:37:10 GMT\r\netag: \"68471bc6-46d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000, must-revalidate, proxy-revalidate\r\npragma: public\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: HIT\r\nage: 3026181\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oZosu1mahS5%2BEpjWwr4py5g6%2B0f4zrdcsd8rdwS7UoQ%2B5TNxNfhDPANNMuhmpjsZksxrjJi%2Faluu7aCwu1%2BE9rXwjEcvnP5vOyf0lRY%3D\"}]}\r\ncf-ray: 96fa0d765d3b49b7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1133,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (859)","md5":"0584cc2f421bcb47e59fefa7030bcbc2","sha1":"bb734df6a6ea142f4ff670e98f9809f44a1c2658","sha256":"55180283058e5825307bcf02e0f79111cb7d57b98ca143b5e28d61f446441d3d","sha512":"d5bc437fd485485640df3a11728346aae5cab42c4a7f3c28d1cd3799d69e2466ba904bf46086d91569eed15c4817c2bc8dd1acf3f7e87cddc2876ae841764d60","ssdeep":"","tlshash":"eb21968970cbf81617979ba53f3f8a8fb0085f0944dc898ccb45a0503a74a030772f75","first_seen":"2024-08-19T19:28:21.62972Z","last_seen":"2026-05-12T12:11:56.491866Z","times_seen":15,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}