fonts.googleapis.com/css?family=Open+Sans:400,600
200 OK 1.2 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Open+Sans:400,600
IP
Requested by https://secured.bookaahotels.com/booking/payment/95cd7498-7ade-493f-a068-8ea6e650d896/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type gzip compressed data, max compression\012- data
Hash 682f5c808628b98f80291103aae672c7
40976588d9685165a00f1705f6a64930dc389c1e
e1c95d1f9bf6898059d4cf5f9a7cf7d41c942e6ac994944d640f17caea637179
GET /css?family=Open+Sans:400,600 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secured.bookaahotels.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 19 Nov 2023 11:32:56 GMT
date: Sun, 19 Nov 2023 11:32:56 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
d3spfm6su8m7c5.cloudfront.net/aa-f73b3d6c18b00e72c0a3.css
200 OK 35 kB URL GET HTTP/2 d3spfm6su8m7c5.cloudfront.net/aa-f73b3d6c18b00e72c0a3.css
IP
Requested by https://secured.bookaahotels.com/booking/payment/95cd7498-7ade-493f-a068-8ea6e650d896/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 8e15a1a415f2412a020c6c168b5a3c86
0be121e1d8aef49bdcf3c091fe8b80816bc27f5c
a17c467b51fc300ea7604e53785248391b575c376d4d5027fd41ad2ed2b7b936
GET /aa-f73b3d6c18b00e72c0a3.css HTTP/1.1
Host: d3spfm6su8m7c5.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secured.bookaahotels.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
date: Fri, 17 Nov 2023 14:36:39 GMT
last-modified: Mon, 09 Oct 2023 15:42:36 GMT
etag: W/"1e3359e8de3280917dad2a40240afa2f"
x-amz-server-side-encryption: AES256
x-amz-meta-x-amz-meta-hybrid-fe-version: 40d72c4d2fd47097e4e7b27a752ada8fa94292e3
cache-control: max-age=2592000, public
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 22Cw8_7J4Y9wP_J--asOK34XIjjqXeHI7tdsuU1izfIO8a0Ibh85pA==
age: 161777
X-Firefox-Spdy: h2
d1fc8wv8zag5ca.cloudfront.net/2.6.2/sp.js
301 Moved Permanently 0 B URL GET HTTP/1.1 d1fc8wv8zag5ca.cloudfront.net/2.6.2/sp.js
IP
Requested by https://secured.bookaahotels.com/booking/payment/95cd7498-7ade-493f-a068-8ea6e650d896/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /2.6.2/sp.js HTTP/1.1
Host: d1fc8wv8zag5ca.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secured.bookaahotels.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Content-Length: 0
Connection: keep-alive
Date: Sat, 18 Nov 2023 14:39:46 GMT
Location: https://cdn.jsdelivr.net/gh/snowplow/sp-js-assets@2.6.2/sp.js
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: VKyAnwpXhwq5nwuZ1beYxXfe6WozsiKpOpuOt9UP8f-r6Y3iuLkejg==
Age: 75191
www.aa.com/favicon.ico
1.1 kB IP
Requested by https://secured.bookaahotels.com/booking/payment/95cd7498-7ade-493f-a068-8ea6e650d896/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD
Certificate IssuerEntrust, Inc.
Subjectwww.aa.com
Fingerprint29:0F:8C:25:F0:90:16:01:97:23:69:25:64:18:F9:14:D2:9C:6C:58
ValidityWed, 08 Feb 2023 18:01:16 GMT - Thu, 08 Feb 2024 18:01:15 GMT
File type MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Hash 6d60f02fc7eaeae9c33b8477ef24a770
34eaa263beacbe00ccb433eb1fd043fc930d7f6b
67affb85f8da58f95af8829af09f39649680e1e9ed157e367cb0dd010193e1fb
GET /favicon.ico HTTP/1.1
Host: www.aa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secured.bookaahotels.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/x-icon
x-oneagent-js-injection: true
accept-ranges: bytes
etag: W/"6518-1700169828000"
last-modified: Thu, 16 Nov 2023 21:23:48 GMT
content-encoding: gzip
content-length: 1137
cache-control: private, max-age=7200
expires: Sun, 19 Nov 2023 13:32:56 GMT
date: Sun, 19 Nov 2023 11:32:56 GMT
vary: Accept-Encoding
set-cookie: aka_state_code=; path=/; secure
aka_cr_code=NO-; path=/; secure
aka_lc_code=ML; Path=/
server-timing: cdn-cache; desc=HIT, edge; dur=1, dtRpid;desc="-146636373", dtSInfo;desc="0", ak_p; desc="1700393576423_388255495_1921610941_29_11909_1_7_21";dur=1
da_aka_attributes: {"state": "", "country": "NO", "language": "en-US,en;q=0.5"}
referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000
X-Firefox-Spdy: h2
static.cloudflareinsights.com/beacon.min.js/v84a3a4012de94ce1a686ba8c167c359c1696973893317
200 OK 1.1 MB URL GET HTTP/2 static.cloudflareinsights.com/beacon.min.js/v84a3a4012de94ce1a686ba8c167c359c1696973893317
IP
Requested by https://secured.bookaahotels.com/booking/payment/95cd7498-7ade-493f-a068-8ea6e650d896/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint89:79:35:ED:04:A2:CA:50:F7:9A:B8:FE:DF:A5:0C:B1:F2:E6:DD:E8
ValidityMon, 10 Apr 2023 00:00:00 GMT - Tue, 09 Apr 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Size 1.1 MB (1136363 bytes)
Hash 5c5aa76d382e2173d5e5ecbf46c19768
2ecdb44c886d6f9fa19027068b05dacfe6a0ff2a
eec787808b653bbd89e3b25790407cbc0a27964948e6fd5092f794f4f20ab5d0
GET /beacon.min.js/v84a3a4012de94ce1a686ba8c167c359c1696973893317 HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://secured.bookaahotels.com
DNT: 1
Connection: keep-alive
Referer: https://secured.bookaahotels.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 19 Nov 2023 11:32:56 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/"2023.10.0"
last-modified: Tue, 10 Oct 2023 21:38:13 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 828822aa8ac2569f-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.jsdelivr.net/gh/snowplow/sp-js-assets@2.6.2/sp.js
200 OK 27 kB URL GET HTTP/2 cdn.jsdelivr.net/gh/snowplow/sp-js-assets@2.6.2/sp.js
IP
Requested by https://secured.bookaahotels.com/booking/payment/95cd7498-7ade-493f-a068-8ea6e650d896/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File type ASCII text, with very long lines (2512)
Hash 9b1c9a5872480d4bb08968d1c7656b08
f9c83721ac30dc1c3cdfaa38227382200caa3ad7
6b8ee02bddec67b4e38863e28da563f65c682459773ba2a0800a839bc98755e7
GET /gh/snowplow/sp-js-assets@2.6.2/sp.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://secured.bookaahotels.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 2.6.2
x-jsd-version-type: version
etag: W/"125f4-+cg3Iaww3Bw836o4InOCIAyqOtc"
content-encoding: br
accept-ranges: bytes
date: Sun, 19 Nov 2023 11:32:56 GMT
age: 1676184
x-served-by: cache-fra-eddf8230061-FRA, cache-bma1650-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 27202
X-Firefox-Spdy: h2
secured.bookaahotels.com/cdn-cgi/rum?
204 No Content 0 B URL POST HTTP/2 secured.bookaahotels.com/cdn-cgi/rum?
IP
Requested by https://secured.bookaahotels.com/booking/payment/95cd7498-7ade-493f-a068-8ea6e650d896/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD
Certificate IssuerCloudflare, Inc.
Subjectsecured.bookaahotels.com
Fingerprint72:12:30:D2:A4:5E:EC:7D:82:45:55:45:A3:4D:2B:16:98:FA:28:47
ValiditySat, 03 Jun 2023 00:00:00 GMT - Sun, 02 Jun 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/rum? HTTP/1.1
Host: secured.bookaahotels.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 2545
Origin: https://secured.bookaahotels.com
DNT: 1
Connection: keep-alive
Referer: https://secured.bookaahotels.com/booking/payment/95cd7498-7ade-493f-a068-8ea6e650d896/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD
Cookie: __cf_bm=P_mktZL4IMg16hLKBHAI_65U_bwV7kHoJIYAO1mrR1c-1700393575-0-Ac/ujav1lUxXbERBYC92Te0XtMv2/09G4XsoRwVP+/eJNbPwtFlaSP0Yu7Z2vVxsVoMZnyC+Ri5lI7ttgBoo7zo=; raygun4js-userid=a4687025-c47b-97bb-1164-3e422e1238cc
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Sun, 19 Nov 2023 11:32:57 GMT
access-control-allow-origin: https://secured.bookaahotels.com
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 828822b1ebdc5699-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
d3spfm6su8m7c5.cloudfront.net/12-6f8b79c2953ce6330afd.js
200 OK 408 B URL GET HTTP/2 d3spfm6su8m7c5.cloudfront.net/12-6f8b79c2953ce6330afd.js
IP
Requested by https://secured.bookaahotels.com/booking/payment/95cd7498-7ade-493f-a068-8ea6e650d896/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type ASCII text, with very long lines (304)
Hash e3e24d6953eb49325346e1849958d15f
dc4f3f46387f6d435befb6be2e09dd657cc65e95
87b1fac3e9d4a090ea3a152840894b4e46a4d785e85bf5e64880f891c5484c39
GET /12-6f8b79c2953ce6330afd.js HTTP/1.1
Host: d3spfm6su8m7c5.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://secured.bookaahotels.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
content-length: 408
date: Fri, 17 Nov 2023 14:36:42 GMT
last-modified: Mon, 09 Oct 2023 15:42:36 GMT
etag: "e3e24d6953eb49325346e1849958d15f"
x-amz-server-side-encryption: AES256
x-amz-meta-x-amz-meta-hybrid-fe-version: 40d72c4d2fd47097e4e7b27a752ada8fa94292e3
cache-control: max-age=2592000, public
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: RHdTbcHMyy6DhY-DvDn2oZdaX-uXQEw5clLcPrf4riw3-Ieb9MRsgA==
age: 161775
X-Firefox-Spdy: h2
d3spfm6su8m7c5.cloudfront.net/14-6f8b79c2953ce6330afd.js
200 OK 388 B URL GET HTTP/2 d3spfm6su8m7c5.cloudfront.net/14-6f8b79c2953ce6330afd.js
IP
Requested by https://secured.bookaahotels.com/booking/payment/95cd7498-7ade-493f-a068-8ea6e650d896/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
Hash 392425ced95a9cf91d873a07a9eac2ab
f0a7ebd49bcf0c25f278c31d6f93d8ecdb6ada37
f90d823112a57ce823a74ae35e690c0dd60cec2efdebc91b0b474afbfe6d5a12
GET /14-6f8b79c2953ce6330afd.js HTTP/1.1
Host: d3spfm6su8m7c5.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://secured.bookaahotels.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
content-length: 388
date: Fri, 17 Nov 2023 14:36:42 GMT
last-modified: Mon, 09 Oct 2023 15:42:36 GMT
etag: "392425ced95a9cf91d873a07a9eac2ab"
x-amz-server-side-encryption: AES256
x-amz-meta-x-amz-meta-hybrid-fe-version: 40d72c4d2fd47097e4e7b27a752ada8fa94292e3
cache-control: max-age=2592000, public
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: kWvc_F4DwlgaazLFpj4jFE9ysA6JFeUyGAUyinqalvC715lKHmUT4Q==
age: 161775
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 48 kB URL GET HTTP/2 fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
Requested by https://secured.bookaahotels.com/booking/payment/95cd7498-7ade-493f-a068-8ea6e650d896/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 48432, version 1.0\012- data
Hash e2d74c5e631bc53a7240bbfe4be99c8f
eb513857bb01cc4f7249067fc7e969bef415fc90
9b1b9d7cb74a9923d83f36f0026f421940b861fd6e1a51b8f79af45492ed4ed5
GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://secured.bookaahotels.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48432
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 16 Nov 2023 04:47:53 GMT
expires: Fri, 15 Nov 2024 04:47:53 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Sep 2023 00:40:31 GMT
content-type: font/woff2
age: 283504
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
d3spfm6su8m7c5.cloudfront.net/13-6f8b79c2953ce6330afd.js
200 OK 566 B URL GET HTTP/2 d3spfm6su8m7c5.cloudfront.net/13-6f8b79c2953ce6330afd.js
IP
Requested by https://secured.bookaahotels.com/booking/payment/95cd7498-7ade-493f-a068-8ea6e650d896/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type ASCII text, with very long lines (462)
Hash b9e9cb7cd67b38aa535b6d9328fb86ca
92699e2d0273e8268486bc8fbc1a6d19cec64b29
a46285919bd0ee2a5defd0aa1fc40c4e02ffb61e6dd038176092231dcb5570f5
GET /13-6f8b79c2953ce6330afd.js HTTP/1.1
Host: d3spfm6su8m7c5.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://secured.bookaahotels.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
content-length: 566
date: Sun, 19 Nov 2023 11:32:58 GMT
last-modified: Mon, 09 Oct 2023 15:42:36 GMT
etag: "b9e9cb7cd67b38aa535b6d9328fb86ca"
x-amz-server-side-encryption: AES256
x-amz-meta-x-amz-meta-hybrid-fe-version: 40d72c4d2fd47097e4e7b27a752ada8fa94292e3
cache-control: max-age=2592000, public
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: vxmIlPHL73heJC5vrNKgr5XA-_b9D-7-TfCcLw9YcEqe4hX5UqivCA==
X-Firefox-Spdy: h2
fonts.gstatic.com/s/actor/v17/wEOzEBbCkc5cO0ejVSk.woff2
200 OK 22 kB URL GET HTTP/2 fonts.gstatic.com/s/actor/v17/wEOzEBbCkc5cO0ejVSk.woff2
IP
Requested by https://secured.bookaahotels.com/booking/payment/95cd7498-7ade-493f-a068-8ea6e650d896/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 21976, version 1.0\012- data
Hash 7ee7f470152787952958d6adfa07b2ac
14a09075b2cbec9ff65302de9d634f9011f70e53
b31aaefa522d67846638fa4181bbb22375bd0cb1beb37d514609c3821953161a
GET /s/actor/v17/wEOzEBbCkc5cO0ejVSk.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://secured.bookaahotels.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 21976
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 15 Nov 2023 21:53:39 GMT
expires: Thu, 14 Nov 2024 21:53:39 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 19 Apr 2022 19:22:29 GMT
content-type: font/woff2
age: 308363
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
secured.bookaahotels.com/rest/aadvantage/site?sessionSiteSlug=aadvantage
200 OK 49 kB URL GET HTTP/2 secured.bookaahotels.com/rest/aadvantage/site?sessionSiteSlug=aadvantage
IP
Requested by https://secured.bookaahotels.com/booking/payment/95cd7498-7ade-493f-a068-8ea6e650d896/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD
Certificate IssuerCloudflare, Inc.
Subjectsecured.bookaahotels.com
Fingerprint72:12:30:D2:A4:5E:EC:7D:82:45:55:45:A3:4D:2B:16:98:FA:28:47
ValiditySat, 03 Jun 2023 00:00:00 GMT - Sun, 02 Jun 2024 23:59:59 GMT
File type gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)\012- data
Hash 529d0791a2bf90b93e67e507f27ac0d9
1b2ff68dad6cc25e5da197e5ff3d78d96fd9d47d
1f350f3f1465694ea4e313f8ba093678f976ad11226df7f31ea9fbc21ce7b653
GET /rest/aadvantage/site?sessionSiteSlug=aadvantage HTTP/1.1
Host: secured.bookaahotels.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secured.bookaahotels.com/booking/payment/95cd7498-7ade-493f-a068-8ea6e650d896/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD
Cookie: __cf_bm=P_mktZL4IMg16hLKBHAI_65U_bwV7kHoJIYAO1mrR1c-1700393575-0-Ac/ujav1lUxXbERBYC92Te0XtMv2/09G4XsoRwVP+/eJNbPwtFlaSP0Yu7Z2vVxsVoMZnyC+Ri5lI7ttgBoo7zo=; raygun4js-userid=a4687025-c47b-97bb-1164-3e422e1238cc; _dd_s=rum=1&id=d0e4ba1c-a20e-425f-9cdc-9d97a791a01f&created=1700393578895&expire=1700394478895; WL_LANG=en
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Nov 2023 11:32:57 GMT
content-type: application/json;charset=UTF-8
access-control-expose-headers: RM-SessionId, RM-ClientId, XSRF-TOKEN
cache-control: no-cache="set-cookie"
content-encoding: gzip
rm-clientid: 4cefb3ec-c7f6-4e6e-a744-b94507ea7064
rm-sessionid: 5830f74c-5145-43ea-a4c1-5ccafcfc811a
set-cookie: XSRF-TOKEN=42161155-145f-4ad9-9c0a-6808b1e8af70; Secure; SameSite=None; Path=/
JSESSIONID=5830f74c-5145-43ea-a4c1-5ccafcfc811a; Path=/; Secure; HttpOnly; SameSite=None
rm_cid=4cefb3ec-c7f6-4e6e-a744-b94507ea7064; Max-Age=62208000; Expires=Sat, 08 Nov 2025 11:32:57 GMT; Path=/; Secure; SameSite=None
rm_cid=d790f43e-e8c9-476f-aacd-fd28b611d639; Max-Age=62208000; Expires=Sat, 08 Nov 2025 11:32:57 GMT; Path=/; Secure; SameSite=None
AWSELB=19E5D91110276A13CC3A01EE72CFF4C194AB6BF3117328A293A296281E8C50498A2348E899C76C6B20F0410F48EB1C3C668D9DC5501EBE99632DB00E96DB718855494924E7;PATH=/
AWSELBCORS=19E5D91110276A13CC3A01EE72CFF4C194AB6BF3117328A293A296281E8C50498A2348E899C76C6B20F0410F48EB1C3C668D9DC5501EBE99632DB00E96DB718855494924E7;PATH=/;SECURE;SAMESITE=None
vary: accept-encoding
x-rti-requesttraceid: 5578c582-3725-460d-8c9a-ad265073fb27
x-rti-wl-proxy-config: hybrid-unified
x-rti-wl-proxy-version: 53ccd20588f7a514d97c39ec7a4d40c576844dc4
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 828822b39d295699-OSL
X-Firefox-Spdy: h2
js.braintreegateway.com/web/3.85.2/js/client.min.js
200 OK 13 kB URL GET HTTP/2 js.braintreegateway.com/web/3.85.2/js/client.min.js
IP
Requested by https://secured.bookaahotels.com/booking/payment/95cd7498-7ade-493f-a068-8ea6e650d896/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD
Certificate IssuerDigiCert Inc
Subjectwww.paypal.com
Fingerprint4B:C0:E1:F0:16:B3:A4:B3:63:08:41:DF:F2:EF:8D:65:54:1D:30:B1
ValidityThu, 12 Oct 2023 00:00:00 GMT - Thu, 31 Oct 2024 23:59:59 GMT
File type ASCII text, with very long lines (43064), with no line terminators
Hash 6c056cc1bfa36c2dd8f2ff37bee1d3e4
01f56d82c004645b788898bffdf209c123e99733
4a3569fc82e8fef2a9125e05232c934b475e8c895e2454de87877d78da71a325
GET /web/3.85.2/js/client.min.js HTTP/1.1
Host: js.braintreegateway.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secured.bookaahotels.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=86400
content-security-policy: style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' *.braintreegateway.com *.braintree-api.com;
content-type: application/javascript
date: Sun, 19 Nov 2023 11:33:02 GMT
etag: "6554f271-a838+gzip"
expires: Mon, 20 Nov 2023 11:33:02 GMT
last-modified: Wed, 15 Nov 2023 16:31:45 GMT
server: ECAcc (ska/F75C)
strict-transport-security: max-age=63072000; includeSubDomains; preload
vary: Accept-Encoding
x-cache: HIT
content-length: 12824
X-Firefox-Spdy: h2
secured.bookaahotels.com/rest/aadvantage?sessionSiteSlug=aadvantage
200 OK 16 kB URL GET HTTP/2 secured.bookaahotels.com/rest/aadvantage?sessionSiteSlug=aadvantage
IP
Requested by https://secured.bookaahotels.com/booking/payment/95cd7498-7ade-493f-a068-8ea6e650d896/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD
Certificate IssuerCloudflare, Inc.
Subjectsecured.bookaahotels.com
Fingerprint72:12:30:D2:A4:5E:EC:7D:82:45:55:45:A3:4D:2B:16:98:FA:28:47
ValiditySat, 03 Jun 2023 00:00:00 GMT - Sun, 02 Jun 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (60795), with no line terminators
Hash 128167f6c67999f0b687ba82b3a4337b
1cfa24b6490dca320290c21fb5eeca5e05f98a14
893b7fe83703127f5e6c1dd0bc5a66c66867df0837f1d31c2144660bada0a0c0
GET /rest/aadvantage?sessionSiteSlug=aadvantage HTTP/1.1
Host: secured.bookaahotels.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secured.bookaahotels.com/booking/payment/95cd7498-7ade-493f-a068-8ea6e650d896/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD
Cookie: __cf_bm=P_mktZL4IMg16hLKBHAI_65U_bwV7kHoJIYAO1mrR1c-1700393575-0-Ac/ujav1lUxXbERBYC92Te0XtMv2/09G4XsoRwVP+/eJNbPwtFlaSP0Yu7Z2vVxsVoMZnyC+Ri5lI7ttgBoo7zo=; raygun4js-userid=a4687025-c47b-97bb-1164-3e422e1238cc; _dd_s=rum=1&id=d0e4ba1c-a20e-425f-9cdc-9d97a791a01f&created=1700393578895&expire=1700394478895; WL_LANG=en
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Nov 2023 11:32:58 GMT
content-type: application/json;charset=UTF-8
access-control-expose-headers: RM-SessionId, RM-ClientId, XSRF-TOKEN
cache-control: no-cache="set-cookie"
content-encoding: gzip
rm-clientid: 47897bca-56a1-403a-8543-d24e3b45fba8
rm-sessionid: d627ff83-36e4-4f1d-aa0c-4612c4514c65
set-cookie: XSRF-TOKEN=99324137-9925-4c3a-9776-e354ef47e377; Secure; SameSite=None; Path=/
JSESSIONID=d627ff83-36e4-4f1d-aa0c-4612c4514c65; Path=/; Secure; HttpOnly; SameSite=None
rm_cid=47897bca-56a1-403a-8543-d24e3b45fba8; Max-Age=62208000; Expires=Sat, 08 Nov 2025 11:32:57 GMT; Path=/; Secure; SameSite=None
rm_cid=a8f83ad6-c2d2-4f13-a69c-da87f2160fd5; Max-Age=62208000; Expires=Sat, 08 Nov 2025 11:32:57 GMT; Path=/; Secure; SameSite=None
AWSELB=19E5D91110276A13CC3A01EE72CFF4C194AB6BF3117328A293A296281E8C50498A2348E8999881C83A03981E19F2807214930FF3061EBE99632DB00E96DB718855494924E7;PATH=/
AWSELBCORS=19E5D91110276A13CC3A01EE72CFF4C194AB6BF3117328A293A296281E8C50498A2348E8999881C83A03981E19F2807214930FF3061EBE99632DB00E96DB718855494924E7;PATH=/;SECURE;SAMESITE=None
vary: accept-encoding
x-rti-requesttraceid: 0096ea0f-5baa-4024-adbf-1d3c6db1f78e
x-rti-wl-proxy-config: hybrid-unified
x-rti-wl-proxy-version: 53ccd20588f7a514d97c39ec7a4d40c576844dc4
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 828822b39d225699-OSL
X-Firefox-Spdy: h2
js.braintreegateway.com/web/3.85.2/js/data-collector.min.js
200 OK 11 kB URL GET HTTP/2 js.braintreegateway.com/web/3.85.2/js/data-collector.min.js
IP
Requested by https://secured.bookaahotels.com/booking/payment/95cd7498-7ade-493f-a068-8ea6e650d896/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD
Certificate IssuerDigiCert Inc
Subjectwww.paypal.com
Fingerprint4B:C0:E1:F0:16:B3:A4:B3:63:08:41:DF:F2:EF:8D:65:54:1D:30:B1
ValidityThu, 12 Oct 2023 00:00:00 GMT - Thu, 31 Oct 2024 23:59:59 GMT
File type ASCII text, with very long lines (32513), with no line terminators
Hash e5ee70b1d7a2b8470b452cf72830deb4
f66c20c589eb87b43eff7d7a85947e1d411916c0
2f502042efa3bddb6a712e08df94e1dfec86c4ec79c14e81c404fcdf8df6cb84
GET /web/3.85.2/js/data-collector.min.js HTTP/1.1
Host: js.braintreegateway.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secured.bookaahotels.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=86400
content-security-policy: style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' *.braintreegateway.com *.braintree-api.com;
content-type: application/javascript
date: Sun, 19 Nov 2023 11:33:02 GMT
etag: "6554f272-7f01+gzip"
expires: Mon, 20 Nov 2023 11:33:02 GMT
last-modified: Wed, 15 Nov 2023 16:31:46 GMT
server: ECAcc (ska/F6BB)
strict-transport-security: max-age=63072000; includeSubDomains; preload
vary: Accept-Encoding
x-cache: HIT
content-length: 10752
X-Firefox-Spdy: h2
js.braintreegateway.com/web/3.85.2/js/venmo.min.js
200 OK 15 kB URL GET HTTP/2 js.braintreegateway.com/web/3.85.2/js/venmo.min.js
IP
Requested by https://secured.bookaahotels.com/booking/payment/95cd7498-7ade-493f-a068-8ea6e650d896/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD
Certificate IssuerDigiCert Inc
Subjectwww.paypal.com
Fingerprint4B:C0:E1:F0:16:B3:A4:B3:63:08:41:DF:F2:EF:8D:65:54:1D:30:B1
ValidityThu, 12 Oct 2023 00:00:00 GMT - Thu, 31 Oct 2024 23:59:59 GMT
File type ASCII text, with very long lines (60436), with no line terminators
Hash 6b9c7e86e00159eafd855e5fe0c63e94
a4a8204fdc852055de639aee77f900060df0a8d5
7e26b32b7f8cc41775ea5b08716ec04fe4ce9654862ef99068b01bf878d05d0c
GET /web/3.85.2/js/venmo.min.js HTTP/1.1
Host: js.braintreegateway.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secured.bookaahotels.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=86400
content-security-policy: style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' *.braintreegateway.com *.braintree-api.com;
content-type: application/javascript
date: Sun, 19 Nov 2023 11:33:02 GMT
etag: "6554f270-ec14+gzip"
expires: Mon, 20 Nov 2023 11:33:02 GMT
last-modified: Wed, 15 Nov 2023 16:31:44 GMT
server: ECAcc (ska/F773)
strict-transport-security: max-age=63072000; includeSubDomains; preload
vary: Accept-Encoding
x-cache: HIT
content-length: 15301
X-Firefox-Spdy: h2
www.bookaahotels.com/rm_tracker?label=nolabel&tg=rmbpl&callback=angular.callbacks._0
301 Moved Permanently 0 B URL GET HTTP/1.1 www.bookaahotels.com/rm_tracker?label=nolabel&tg=rmbpl&callback=angular.callbacks._0
IP
ASN #20940 Akamai International B.V.
Requested by https://secured.bookaahotels.com/booking/payment/95cd7498-7ade-493f-a068-8ea6e650d896/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD
Certificate IssuerDigiCert Inc
Subjectwww.usairways.com
Fingerprint2E:BE:C2:12:89:AD:80:26:C8:3C:3A:AE:87:1C:8B:C5:20:50:89:63
ValidityThu, 20 Apr 2023 00:00:00 GMT - Sat, 20 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rm_tracker?label=nolabel&tg=rmbpl&callback=angular.callbacks._0 HTTP/1.1
Host: www.bookaahotels.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secured.bookaahotels.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: https://www.aadvantagehotels.com?label=nolabel&tg=rmbpl&callback=angular.callbacks._0
Date: Sun, 19 Nov 2023 11:33:02 GMT
Connection: keep-alive
q.bstatic.com/data/sp_aff/366304/aa-logo.png
200 OK 6.2 kB URL GET HTTP/2 q.bstatic.com/data/sp_aff/366304/aa-logo.png
IP
Requested by https://secured.bookaahotels.com/booking/payment/95cd7498-7ade-493f-a068-8ea6e650d896/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD
Certificate IssuerDigiCert Inc
Subject*.bstatic.com
FingerprintE0:83:54:2F:B0:EC:78:50:D3:62:8F:37:8F:D9:CC:EE:79:F5:B1:F3
ValidityWed, 13 Sep 2023 00:00:00 GMT - Sat, 31 Aug 2024 23:59:59 GMT
File type PNG image data, 622 x 96, 8-bit/color RGBA, non-interlaced\012- data
Hash caf46e03ac837362ac277c97fbd47ecc
d75c84c5dd8f8c0f4f3c866c7a0d4d05ac22ab82
596cfaf67c2f2f9b9156724442e7f3a8937652ff03b5b1ae47279eda2cd36608
GET /data/sp_aff/366304/aa-logo.png HTTP/1.1
Host: q.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secured.bookaahotels.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
access-control-allow-origin: *
cache-control: max-age=2592000
date: Fri, 17 Nov 2023 16:40:56 GMT
server: nginx
strict-transport-security: max-age=17280000
x-booking-request-id: 147AC302-8568-11EE-80EE-87BD309C5DB3
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 2afd697fc5d0058ea30d6c4b939e714c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: HZbytbMSIc1816DsortwqtO_ZManfP7wY0Y2xNYUHRsDDJqtciZGuw==
age: 154326
X-Firefox-Spdy: h2
d3spfm6su8m7c5.cloudfront.net/494a8a026e527bbc05641ba3a013fc50.png
200 OK 303 B URL GET HTTP/2 d3spfm6su8m7c5.cloudfront.net/494a8a026e527bbc05641ba3a013fc50.png
IP
Requested by https://secured.bookaahotels.com/booking/payment/95cd7498-7ade-493f-a068-8ea6e650d896/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type PNG image data, 1010 x 6, 8-bit/color RGBA, non-interlaced\012- data
Hash 494a8a026e527bbc05641ba3a013fc50
56a2199b5ab8fc43e7f1a86199cbca81cb49252a
0527271c146e6ad82828d1c63401e1c1ee1b347bd40b62d3456ed86babb6e392
GET /494a8a026e527bbc05641ba3a013fc50.png HTTP/1.1
Host: d3spfm6su8m7c5.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3spfm6su8m7c5.cloudfront.net/aa-f73b3d6c18b00e72c0a3.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 303
date: Fri, 17 Nov 2023 16:40:56 GMT
last-modified: Mon, 09 Oct 2023 15:42:36 GMT
etag: "494a8a026e527bbc05641ba3a013fc50"
x-amz-server-side-encryption: AES256
x-amz-meta-x-amz-meta-hybrid-fe-version: 40d72c4d2fd47097e4e7b27a752ada8fa94292e3
cache-control: max-age=2592000, public
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: tvv8B50V1J3QRGL__n3PbLFRtgdu5CvlBgJnQPilZ7P5Ka0RW9hIpw==
age: 154328
X-Firefox-Spdy: h2
beacon.riskified.com/?shop=rocketmiles.com&sid=d627ff83-36e4-4f1d-aa0c-4612c4514c65
200 OK 15 kB URL GET HTTP/2 beacon.riskified.com/?shop=rocketmiles.com&sid=d627ff83-36e4-4f1d-aa0c-4612c4514c65
IP
Requested by https://secured.bookaahotels.com/booking/payment/95cd7498-7ade-493f-a068-8ea6e650d896/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD
Certificate IssuerAmazon
Subject*.riskified.com
Fingerprint49:4E:C5:F0:BC:C7:CE:8C:54:12:16:92:A2:BC:CD:FD:33:AE:A4:07
ValidityTue, 21 Mar 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)\012- data
Hash 58a61220c88b581ff1310eafb50e15b9
edff0538182f2c56bf6e1fa709bc4a64e9b8963d
39d061b4efec6d013f58300975e852008ffceeadccc695f442802568ae804a6b
GET /?shop=rocketmiles.com&sid=d627ff83-36e4-4f1d-aa0c-4612c4514c65 HTTP/1.1
Host: beacon.riskified.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secured.bookaahotels.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 19 Nov 2023 11:33:03 GMT
content-type: application/javascript; charset=UTF-8
trace-id: 3fe0f6cdfec09bbcda5e6cc389d6d744
access-control-allow-origin: *
timing-allow-origin: *
access-control-request-method: *
access-control-allow-methods: PUT, OPTIONS, GET, DELETE, POST
access-control-allow-headers: Content-Type,Access-Control-Allow-Headers,Access-Control-Allow-Origin,x-csrf-token,X_CI_HMAC_SHA256
cache-control: max-age=600
content-encoding: gzip
x-sourcemap: sm/cm9ja2V0bWlsZXMuY29t/ZDYyN2ZmODMtMzZlNC00ZjFkLWFhMGMtNDYxMmM0NTE0YzY1
strict-transport-security: max-age=15768000; includeSubDomains; preload
X-Firefox-Spdy: h2
d3spfm6su8m7c5.cloudfront.net/8-6f8b79c2953ce6330afd.js
200 OK 2.1 kB URL GET HTTP/2 d3spfm6su8m7c5.cloudfront.net/8-6f8b79c2953ce6330afd.js
IP
Requested by https://secured.bookaahotels.com/booking/payment/95cd7498-7ade-493f-a068-8ea6e650d896/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type ASCII text, with very long lines (14934)
Hash f6935f5354e7295adf2cc14270bf3b43
cbddc0303fd6e9485d1feeb05eb1c8bf294a41bc
89f2bf10e4dc3e8b6afcf8d612487c4109b7c75b29d37b61f97597d8fcd6a7cb
GET /8-6f8b79c2953ce6330afd.js HTTP/1.1
Host: d3spfm6su8m7c5.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://secured.bookaahotels.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
date: Sun, 19 Nov 2023 11:32:58 GMT
last-modified: Mon, 09 Oct 2023 15:42:36 GMT
etag: W/"34ca3050a600a2f192afaff1018919de"
x-amz-server-side-encryption: AES256
x-amz-meta-x-amz-meta-hybrid-fe-version: 40d72c4d2fd47097e4e7b27a752ada8fa94292e3
cache-control: max-age=2592000, public
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: GlDmCsh9jlvQ0hDwaFP91tLU1mShqGjytsX18KmqSyvuJKh2dGX3mw==
X-Firefox-Spdy: h2
ocsp.entrust.net/
1.6 kB IP
Hash ca16a7e0c3ef31d63283b9f7100a687d
33d521399413a278822e655866ed05a2fb931958
310cc0f56f5334c2675d3b60a773c7aabbce5437140de0275a9bbae145f57a7e
POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "310CC0F56F5334C2675D3B60A773C7AABBCE5437140DE0275A9BBAE145F57A7E"
Last-Modified: Sun, 19 Nov 2023 04:00:00 UTC
Content-Length: 1588
Cache-Control: public, no-transform, must-revalidate, max-age=3454
Expires: Sun, 19 Nov 2023 12:30:37 GMT
Date: Sun, 19 Nov 2023 11:33:03 GMT
Connection: keep-alive
secured.bookaahotels.com/rest/aadvantage/languages?max=1000
200 OK 736 B URL GET HTTP/2 secured.bookaahotels.com/rest/aadvantage/languages?max=1000
IP
Requested by https://secured.bookaahotels.com/booking/payment/95cd7498-7ade-493f-a068-8ea6e650d896/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD
Certificate IssuerCloudflare, Inc.
Subjectsecured.bookaahotels.com
Fingerprint72:12:30:D2:A4:5E:EC:7D:82:45:55:45:A3:4D:2B:16:98:FA:28:47
ValiditySat, 03 Jun 2023 00:00:00 GMT - Sun, 02 Jun 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (2536), with no line terminators
Hash fa2971c6f88adb1aa709f9c67f1c9b8a
b12c0e1b36928a219bf3c5fead45d919aba29e22
2dcdbc3cce6dba1b31baecc981e42e7c8f145f881cca8ed17780d26a8f7c431d
GET /rest/aadvantage/languages?max=1000 HTTP/1.1
Host: secured.bookaahotels.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-XSRF-TOKEN: 99324137-9925-4c3a-9776-e354ef47e377
DNT: 1
Connection: keep-alive
Referer: https://secured.bookaahotels.com/booking/payment/95cd7498-7ade-493f-a068-8ea6e650d896/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD
Cookie: __cf_bm=P_mktZL4IMg16hLKBHAI_65U_bwV7kHoJIYAO1mrR1c-1700393575-0-Ac/ujav1lUxXbERBYC92Te0XtMv2/09G4XsoRwVP+/eJNbPwtFlaSP0Yu7Z2vVxsVoMZnyC+Ri5lI7ttgBoo7zo=; raygun4js-userid=a4687025-c47b-97bb-1164-3e422e1238cc; _dd_s=rum=1&id=d0e4ba1c-a20e-425f-9cdc-9d97a791a01f&created=1700393578895&expire=1700394478895; WL_LANG=en; XSRF-TOKEN=99324137-9925-4c3a-9776-e354ef47e377; JSESSIONID=d627ff83-36e4-4f1d-aa0c-4612c4514c65; rm_cid=a8f83ad6-c2d2-4f13-a69c-da87f2160fd5; AWSELB=19E5D91110276A13CC3A01EE72CFF4C194AB6BF3117328A293A296281E8C50498A2348E8999881C83A03981E19F2807214930FF3061EBE99632DB00E96DB718855494924E7; AWSELBCORS=19E5D91110276A13CC3A01EE72CFF4C194AB6BF3117328A293A296281E8C50498A2348E8999881C83A03981E19F2807214930FF3061EBE99632DB00E96DB718855494924E7; _sp_ses.77b6=*; _sp_id.77b6=7a3ce15c-f767-4b98-b164-10db3f5d9e98.1700393579.1.1700393584.1700393579.ef20914f-dcb0-475f-855b-a722544541d2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Nov 2023 11:33:03 GMT
content-type: application/json;charset=UTF-8
content-length: 736
access-control-expose-headers: RM-SessionId, RM-ClientId, XSRF-TOKEN
content-encoding: gzip
rm-clientid: a8f83ad6-c2d2-4f13-a69c-da87f2160fd5
rm-sessionid: d627ff83-36e4-4f1d-aa0c-4612c4514c65
vary: accept-encoding
x-rti-requesttraceid: 090b2a85-80c7-4f8a-ac75-0ad6b8c20916
x-rti-wl-proxy-config: hybrid-unified
x-rti-wl-proxy-version: 53ccd20588f7a514d97c39ec7a4d40c576844dc4
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 828822d6ce1a5699-OSL
X-Firefox-Spdy: h2
d4466r3vlr9ym.cloudfront.net/uploads/logos/booking-blue.png
200 OK 4.6 kB URL GET HTTP/2 d4466r3vlr9ym.cloudfront.net/uploads/logos/booking-blue.png
IP
Requested by https://secured.bookaahotels.com/booking/payment/95cd7498-7ade-493f-a068-8ea6e650d896/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type PNG image data, 300 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash 8d64017a85536a216f16973224defcc8
3bfd4776b8777334d504061afe64c58483da695b
1d68291d1c22741cfa6ef69b21cfc0a7b9542b900724be0bd5f0c99b69875f9c
GET /uploads/logos/booking-blue.png HTTP/1.1
Host: d4466r3vlr9ym.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secured.bookaahotels.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
content-length: 4612
last-modified: Tue, 12 Jul 2022 04:31:49 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Sun, 19 Nov 2023 11:33:04 GMT
etag: "8d64017a85536a216f16973224defcc8"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: J3PEHMqgphzQp06Rk4tUl3nwTKH03tEXC3PvPGxdX6qkBIcZo-vqFQ==
X-Firefox-Spdy: h2
img.riskified.com/img/image-l.gif?t=17003935846170.912017520079488&c=0k4h878kgcdbvm66jz62pvklp5efqvz&p=xa02cu&a=d627ff83-36e4-4f1d-aa0c-4612c4514c65&o=rocketmiles.com&rt=1700393583017
200 OK 35 B URL GET HTTP/2 img.riskified.com/img/image-l.gif?t=17003935846170.912017520079488&c=0k4h878kgcdbvm66jz62pvklp5efqvz&p=xa02cu&a=d627ff83-36e4-4f1d-aa0c-4612c4514c65&o=rocketmiles.com&rt=1700393583017
IP
Requested by https://secured.bookaahotels.com/booking/payment/95cd7498-7ade-493f-a068-8ea6e650d896/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD
Certificate IssuerDigiCert Inc
Subjectimg.riskified.com
FingerprintA8:F3:27:00:4D:86:1C:D5:98:ED:EC:D0:76:3E:FE:26:DF:75:2B:DC
ValidityWed, 17 May 2023 00:00:00 GMT - Thu, 16 May 2024 23:59:59 GMT
File type GIF image data, version 87a, 1 x 1\012- data
Hash cfea9e094d58b54abf242e795f0b913f
cbeee1f89a77b67897eea9a54c0ac6b75c18d4b6
b03a66cf3c1b8d1757cb7fb0268c86aae035e91a39e18cb571f8fcc3508e1f4d
GET /img/image-l.gif?t=17003935846170.912017520079488&c=0k4h878kgcdbvm66jz62pvklp5efqvz&p=xa02cu&a=d627ff83-36e4-4f1d-aa0c-4612c4514c65&o=rocketmiles.com&rt=1700393583017 HTTP/1.1
Host: img.riskified.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secured.bookaahotels.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.23.3
date: Sun, 19 Nov 2023 11:33:03 GMT
content-type: image/gif
content-length: 35
last-modified: Thu, 29 Sep 2022 08:50:09 GMT
etag: "63355c41-23"
accept-ranges: bytes
X-Firefox-Spdy: h2
rum-http-intake.logs.datadoghq.com/v1/input/pube1b7279fdd98c19ab2beeb51e9f21426?ddsource=browser&ddtags=sdk_version%3A2.18.0%2Cenv%3Aproduction%2Cservice%3Ahybrid-frontend%2Cversion%3A40d72c4d2fd47097e4e7b27a752ada8fa94292e3&batch_time=1700393584073
200 OK 2 B URL POST HTTP/2 rum-http-intake.logs.datadoghq.com/v1/input/pube1b7279fdd98c19ab2beeb51e9f21426?ddsource=browser&ddtags=sdk_version%3A2.18.0%2Cenv%3Aproduction%2Cservice%3Ahybrid-frontend%2Cversion%3A40d72c4d2fd47097e4e7b27a752ada8fa94292e3&batch_time=1700393584073
IP
Requested by https://secured.bookaahotels.com/booking/payment/95cd7498-7ade-493f-a068-8ea6e650d896/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD
Certificate IssuerDigiCert Inc
Subject*.logs.datadoghq.com
Fingerprint29:24:46:A8:06:E2:F4:15:BE:A6:74:80:B3:36:D5:3D:E7:D5:15:99
ValidityWed, 22 Mar 2023 00:00:00 GMT - Fri, 22 Mar 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
POST /v1/input/pube1b7279fdd98c19ab2beeb51e9f21426?ddsource=browser&ddtags=sdk_version%3A2.18.0%2Cenv%3Aproduction%2Cservice%3Ahybrid-frontend%2Cversion%3A40d72c4d2fd47097e4e7b27a752ada8fa94292e3&batch_time=1700393584073 HTTP/1.1
Host: rum-http-intake.logs.datadoghq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 16097
Origin: https://secured.bookaahotels.com
DNT: 1
Connection: keep-alive
Referer: https://secured.bookaahotels.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 19 Nov 2023 11:33:03 GMT
content-type: application/json
content-length: 2
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2
img.riskified.com/img/image-l.gif?t=17003935851660.37474034565749426&c=0k4h878kgcdbvm66jz62pvklp5efqvz&p=xa02cu&a=d627ff83-36e4-4f1d-aa0c-4612c4514c65&o=rocketmiles.com&rt=1700393583017
200 OK 35 B URL GET HTTP/2 img.riskified.com/img/image-l.gif?t=17003935851660.37474034565749426&c=0k4h878kgcdbvm66jz62pvklp5efqvz&p=xa02cu&a=d627ff83-36e4-4f1d-aa0c-4612c4514c65&o=rocketmiles.com&rt=1700393583017
IP
Requested by https://secured.bookaahotels.com/booking/payment/95cd7498-7ade-493f-a068-8ea6e650d896/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD
Certificate IssuerDigiCert Inc
Subjectimg.riskified.com
FingerprintA8:F3:27:00:4D:86:1C:D5:98:ED:EC:D0:76:3E:FE:26:DF:75:2B:DC
ValidityWed, 17 May 2023 00:00:00 GMT - Thu, 16 May 2024 23:59:59 GMT
File type GIF image data, version 87a, 1 x 1\012- data
Hash cfea9e094d58b54abf242e795f0b913f
cbeee1f89a77b67897eea9a54c0ac6b75c18d4b6
b03a66cf3c1b8d1757cb7fb0268c86aae035e91a39e18cb571f8fcc3508e1f4d
GET /img/image-l.gif?t=17003935851660.37474034565749426&c=0k4h878kgcdbvm66jz62pvklp5efqvz&p=xa02cu&a=d627ff83-36e4-4f1d-aa0c-4612c4514c65&o=rocketmiles.com&rt=1700393583017 HTTP/1.1
Host: img.riskified.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secured.bookaahotels.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.23.3
date: Sun, 19 Nov 2023 11:33:03 GMT
content-type: image/gif
content-length: 35
last-modified: Thu, 29 Sep 2022 08:50:09 GMT
etag: "63355c41-23"
accept-ranges: bytes
X-Firefox-Spdy: h2
secured.bookaahotels.com/rest/aadvantage/search/95cd7498-7ade-493f-a068-8ea6e650d896/results/undefined/rooms/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD&sessionSiteSlug=aadvantage&language=en&boostLevel=0
204 No Content 0 B URL GET HTTP/2 secured.bookaahotels.com/rest/aadvantage/search/95cd7498-7ade-493f-a068-8ea6e650d896/results/undefined/rooms/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD&sessionSiteSlug=aadvantage&language=en&boostLevel=0
IP
Requested by https://secured.bookaahotels.com/booking/payment/95cd7498-7ade-493f-a068-8ea6e650d896/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD
Certificate IssuerCloudflare, Inc.
Subjectsecured.bookaahotels.com
Fingerprint72:12:30:D2:A4:5E:EC:7D:82:45:55:45:A3:4D:2B:16:98:FA:28:47
ValiditySat, 03 Jun 2023 00:00:00 GMT - Sun, 02 Jun 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rest/aadvantage/search/95cd7498-7ade-493f-a068-8ea6e650d896/results/undefined/rooms/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD&sessionSiteSlug=aadvantage&language=en&boostLevel=0 HTTP/1.1
Host: secured.bookaahotels.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-XSRF-TOKEN: 99324137-9925-4c3a-9776-e354ef47e377
DNT: 1
Connection: keep-alive
Referer: https://secured.bookaahotels.com/booking/payment/95cd7498-7ade-493f-a068-8ea6e650d896/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD&offerIsBoosted=0
Cookie: __cf_bm=P_mktZL4IMg16hLKBHAI_65U_bwV7kHoJIYAO1mrR1c-1700393575-0-Ac/ujav1lUxXbERBYC92Te0XtMv2/09G4XsoRwVP+/eJNbPwtFlaSP0Yu7Z2vVxsVoMZnyC+Ri5lI7ttgBoo7zo=; raygun4js-userid=a4687025-c47b-97bb-1164-3e422e1238cc; _dd_s=rum=1&id=d0e4ba1c-a20e-425f-9cdc-9d97a791a01f&created=1700393578895&expire=1700394478895; WL_LANG=en; XSRF-TOKEN=99324137-9925-4c3a-9776-e354ef47e377; JSESSIONID=d627ff83-36e4-4f1d-aa0c-4612c4514c65; rm_cid=a8f83ad6-c2d2-4f13-a69c-da87f2160fd5; AWSELB=19E5D91110276A13CC3A01EE72CFF4C194AB6BF3117328A293A296281E8C50498A2348E8999881C83A03981E19F2807214930FF3061EBE99632DB00E96DB718855494924E7; AWSELBCORS=19E5D91110276A13CC3A01EE72CFF4C194AB6BF3117328A293A296281E8C50498A2348E8999881C83A03981E19F2807214930FF3061EBE99632DB00E96DB718855494924E7; _sp_ses.77b6=*; _sp_id.77b6=7a3ce15c-f767-4b98-b164-10db3f5d9e98.1700393579.1.1700393584.1700393579.ef20914f-dcb0-475f-855b-a722544541d2; lastRskxRun=1700393584606; rskxRunCookie=0; rCookie=0k4h878kgcdbvm66jz62pvklp5efqvz; WL_CURR=USD
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Sun, 19 Nov 2023 11:33:04 GMT
access-control-expose-headers: RM-SessionId, RM-ClientId, XSRF-TOKEN
rm-clientid: a8f83ad6-c2d2-4f13-a69c-da87f2160fd5
rm-sessionid: d627ff83-36e4-4f1d-aa0c-4612c4514c65
x-rti-requesttraceid: df7f1869-7b12-48d1-8e1a-ba7388b6d7dd
x-rti-wl-proxy-config: hybrid-unified
x-rti-wl-proxy-version: 53ccd20588f7a514d97c39ec7a4d40c576844dc4
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 828822dc1ba35699-OSL
X-Firefox-Spdy: h2
collector.rocketmiles.com/com.snowplowanalytics.snowplow/tp2
200 OK 0 B URL OPTIONS HTTP/2 collector.rocketmiles.com/com.snowplowanalytics.snowplow/tp2
IP
Requested by https://secured.bookaahotels.com/booking/payment/95cd7498-7ade-493f-a068-8ea6e650d896/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD
Certificate IssuerAmazon
Subject*.rocketmiles.com
FingerprintC7:F6:60:10:A6:6E:ED:D7:29:F6:E6:08:78:7C:D7:B8:28:75:16:49
ValidityThu, 02 Mar 2023 00:00:00 GMT - Sat, 30 Mar 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: collector.rocketmiles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://secured.bookaahotels.com/
Origin: https://secured.bookaahotels.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 19 Nov 2023 11:33:04 GMT
content-length: 0
server: nginx
access-control-allow-origin: https://secured.bookaahotels.com
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, SP-Anonymous
access-control-max-age: 600
X-Firefox-Spdy: h2
collector.rocketmiles.com/com.snowplowanalytics.snowplow/tp2
200 OK 2 B URL OPTIONS HTTP/2 collector.rocketmiles.com/com.snowplowanalytics.snowplow/tp2
IP
Requested by https://secured.bookaahotels.com/booking/payment/95cd7498-7ade-493f-a068-8ea6e650d896/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD
Certificate IssuerAmazon
Subject*.rocketmiles.com
FingerprintC7:F6:60:10:A6:6E:ED:D7:29:F6:E6:08:78:7C:D7:B8:28:75:16:49
ValidityThu, 02 Mar 2023 00:00:00 GMT - Sat, 30 Mar 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: collector.rocketmiles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
Content-Length: 1867
Origin: https://secured.bookaahotels.com
DNT: 1
Connection: keep-alive
Referer: https://secured.bookaahotels.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Nov 2023 11:33:04 GMT
content-type: text/plain; charset=UTF-8
content-length: 2
server: nginx
set-cookie: sp=d2da6292-1a20-4bc1-b0ba-5337cc1fbba3; Expires=Mon, 18 Nov 2024 11:33:04 GMT; Domain=; Path=/; Secure; SameSite=None
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
access-control-allow-origin: https://secured.bookaahotels.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
c.riskified.com/v2/client_infos
201 Created 2 B URL POST HTTP/2 c.riskified.com/v2/client_infos
IP
Requested by https://secured.bookaahotels.com/booking/payment/95cd7498-7ade-493f-a068-8ea6e650d896/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD
Certificate IssuerAmazon
Subject*.riskified.com
Fingerprint49:4E:C5:F0:BC:C7:CE:8C:54:12:16:92:A2:BC:CD:FD:33:AE:A4:07
ValidityTue, 21 Mar 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
OPTIONS /v2/client_infos HTTP/1.1
Host: c.riskified.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: access-control-allow-headers,access-control-allow-origin,content-type
Referer: https://secured.bookaahotels.com/
Origin: https://secured.bookaahotels.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 19 Nov 2023 11:33:04 GMT
content-type: text/plain; charset=UTF-8
content-length: 2
trace-id: 6cf7c9f08651f408773720f7f1d4c913
access-control-allow-origin: *
timing-allow-origin: *
access-control-request-method: *
access-control-allow-methods: PUT, OPTIONS, GET, DELETE, POST
access-control-allow-headers: Content-Type,Access-Control-Allow-Headers,Access-Control-Allow-Origin,x-csrf-token,X_CI_HMAC_SHA256
strict-transport-security: max-age=15768000; includeSubDomains; preload
X-Firefox-Spdy: h2
collector.rocketmiles.com/com.snowplowanalytics.snowplow/tp2
200 OK 2 B URL OPTIONS HTTP/2 collector.rocketmiles.com/com.snowplowanalytics.snowplow/tp2
IP
Requested by https://secured.bookaahotels.com/booking/payment/95cd7498-7ade-493f-a068-8ea6e650d896/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD
Certificate IssuerAmazon
Subject*.rocketmiles.com
FingerprintC7:F6:60:10:A6:6E:ED:D7:29:F6:E6:08:78:7C:D7:B8:28:75:16:49
ValidityThu, 02 Mar 2023 00:00:00 GMT - Sat, 30 Mar 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: collector.rocketmiles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
Content-Length: 6244
Origin: https://secured.bookaahotels.com
DNT: 1
Connection: keep-alive
Referer: https://secured.bookaahotels.com/
Cookie: sp=d2da6292-1a20-4bc1-b0ba-5337cc1fbba3
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Nov 2023 11:33:04 GMT
content-type: text/plain; charset=UTF-8
content-length: 2
server: nginx
set-cookie: sp=d2da6292-1a20-4bc1-b0ba-5337cc1fbba3; Expires=Mon, 18 Nov 2024 11:33:04 GMT; Domain=; Path=/; Secure; SameSite=None
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
access-control-allow-origin: https://secured.bookaahotels.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
c.riskified.com/v2/client_infos
201 Created 0 B URL POST HTTP/2 c.riskified.com/v2/client_infos
IP
Requested by https://secured.bookaahotels.com/booking/payment/95cd7498-7ade-493f-a068-8ea6e650d896/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD
Certificate IssuerAmazon
Subject*.riskified.com
Fingerprint49:4E:C5:F0:BC:C7:CE:8C:54:12:16:92:A2:BC:CD:FD:33:AE:A4:07
ValidityTue, 21 Mar 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /v2/client_infos HTTP/1.1
Host: c.riskified.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=utf-8
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Origin: *
Content-Length: 3101
Origin: https://secured.bookaahotels.com
DNT: 1
Connection: keep-alive
Referer: https://secured.bookaahotels.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 201 Created
date: Sun, 19 Nov 2023 11:33:04 GMT
content-length: 0
trace-id: 18c856b5cfb3f3d20f91b383f04aee38
access-control-allow-origin: *
timing-allow-origin: *
access-control-request-method: *
access-control-allow-methods: PUT, OPTIONS, GET, DELETE, POST
access-control-allow-headers: Content-Type,Access-Control-Allow-Headers,Access-Control-Allow-Origin,x-csrf-token,X_CI_HMAC_SHA256
strict-transport-security: max-age=15768000; includeSubDomains; preload
X-Firefox-Spdy: h2
rum-http-intake.logs.datadoghq.com/v1/input/pube1b7279fdd98c19ab2beeb51e9f21426?ddsource=browser&ddtags=sdk_version%3A2.18.0%2Cenv%3Aproduction%2Cservice%3Ahybrid-frontend%2Cversion%3A40d72c4d2fd47097e4e7b27a752ada8fa94292e3&batch_time=1700393585777
200 OK 2 B URL POST HTTP/2 rum-http-intake.logs.datadoghq.com/v1/input/pube1b7279fdd98c19ab2beeb51e9f21426?ddsource=browser&ddtags=sdk_version%3A2.18.0%2Cenv%3Aproduction%2Cservice%3Ahybrid-frontend%2Cversion%3A40d72c4d2fd47097e4e7b27a752ada8fa94292e3&batch_time=1700393585777
IP
Requested by https://secured.bookaahotels.com/booking/payment/95cd7498-7ade-493f-a068-8ea6e650d896/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD
Certificate IssuerDigiCert Inc
Subject*.logs.datadoghq.com
Fingerprint29:24:46:A8:06:E2:F4:15:BE:A6:74:80:B3:36:D5:3D:E7:D5:15:99
ValidityWed, 22 Mar 2023 00:00:00 GMT - Fri, 22 Mar 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
POST /v1/input/pube1b7279fdd98c19ab2beeb51e9f21426?ddsource=browser&ddtags=sdk_version%3A2.18.0%2Cenv%3Aproduction%2Cservice%3Ahybrid-frontend%2Cversion%3A40d72c4d2fd47097e4e7b27a752ada8fa94292e3&batch_time=1700393585777 HTTP/1.1
Host: rum-http-intake.logs.datadoghq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 14925
Origin: https://secured.bookaahotels.com
DNT: 1
Connection: keep-alive
Referer: https://secured.bookaahotels.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Nov 2023 11:33:04 GMT
content-type: application/json
content-length: 2
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2
ssl.kaptcha.com/session/d627ff8336e44f1daa0c4612c4514c65
200 OK 0 B URL POST HTTP/1.1 ssl.kaptcha.com/session/d627ff8336e44f1daa0c4612c4514c65
IP
Requested by https://secured.bookaahotels.com/booking/payment/95cd7498-7ade-493f-a068-8ea6e650d896/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD
Certificate IssuerSectigo Limited
Subjectssl.kaptcha.com
Fingerprint19:31:6D:9F:BB:CD:47:F5:8C:A5:4D:72:A4:03:AC:21:41:D8:BA:D6
ValidityWed, 16 Aug 2023 00:00:00 GMT - Thu, 15 Aug 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /session/d627ff8336e44f1daa0c4612c4514c65 HTTP/1.1
Host: ssl.kaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: client-id
Referer: https://secured.bookaahotels.com/
Origin: https://secured.bookaahotels.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Headers: Content-Type, client-id
Access-Control-Allow-Methods: POST
Access-Control-Allow-Origin: *
X-Correlation-Id: db22aa93-a9ae-4548-8ba3-16b2c1c44a76
Date: Sun, 19 Nov 2023 11:33:04 GMT
Content-Length: 0
ssl.kaptcha.com/cs/config?m=134400&s=d627ff8336e44f1daa0c4612c4514c65&sv=1.1.6
200 OK 149 B URL GET HTTP/1.1 ssl.kaptcha.com/cs/config?m=134400&s=d627ff8336e44f1daa0c4612c4514c65&sv=1.1.6
IP
Requested by https://secured.bookaahotels.com/booking/payment/95cd7498-7ade-493f-a068-8ea6e650d896/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD
Certificate IssuerSectigo Limited
Subjectssl.kaptcha.com
Fingerprint19:31:6D:9F:BB:CD:47:F5:8C:A5:4D:72:A4:03:AC:21:41:D8:BA:D6
ValidityWed, 16 Aug 2023 00:00:00 GMT - Thu, 15 Aug 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 67f60e7228d0c49e789dc224a03a6bf9
f8f1c0e3f84fe259c98da3d343d48cafeff025d6
0fe19bf27667e50de4fcda374b966a0ce1001ea42c7dd0077eb3de21c081f517
GET /cs/config?m=134400&s=d627ff8336e44f1daa0c4612c4514c65&sv=1.1.6 HTTP/1.1
Host: ssl.kaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://secured.bookaahotels.com/
Origin: https://secured.bookaahotels.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Cache-Control: no-cache, no-store, must-revalidate, private
Expires: 0
Pragma: no-cache
X-Correlation-Id: ec7fe469-97c0-4f3e-b201-34033d7f7a52
Date: Sun, 19 Nov 2023 11:33:04 GMT
Content-Length: 149
Content-Type: text/plain; charset=utf-8
ssl.kaptcha.com/session/d627ff8336e44f1daa0c4612c4514c65
200 OK 0 B URL POST HTTP/1.1 ssl.kaptcha.com/session/d627ff8336e44f1daa0c4612c4514c65
IP
Requested by https://secured.bookaahotels.com/booking/payment/95cd7498-7ade-493f-a068-8ea6e650d896/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD
Certificate IssuerSectigo Limited
Subjectssl.kaptcha.com
Fingerprint19:31:6D:9F:BB:CD:47:F5:8C:A5:4D:72:A4:03:AC:21:41:D8:BA:D6
ValidityWed, 16 Aug 2023 00:00:00 GMT - Thu, 15 Aug 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /session/d627ff8336e44f1daa0c4612c4514c65 HTTP/1.1
Host: ssl.kaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
client-id: 134400
Origin: https://secured.bookaahotels.com
DNT: 1
Connection: keep-alive
Referer: https://secured.bookaahotels.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Cache-Control: no-cache, no-store, must-revalidate, private
Expires: 0
Pragma: no-cache
Set-Cookie: k=3d22baad44754c42add10caba8598962; Path=/; Expires=Sat, 17 Feb 2024 11:33:05 GMT; HttpOnly; Secure; SameSite=None
X-Correlation-Id: dfdea8f1-fb81-4cd3-98aa-2a4a7f5163ff
Date: Sun, 19 Nov 2023 11:33:05 GMT
Content-Length: 0
ssl.kaptcha.com/cs/generatecookie?m=134400&s=d627ff8336e44f1daa0c4612c4514c65&sv=1.1.6
200 OK 323 B URL GET HTTP/1.1 ssl.kaptcha.com/cs/generatecookie?m=134400&s=d627ff8336e44f1daa0c4612c4514c65&sv=1.1.6
IP
Requested by https://secured.bookaahotels.com/booking/payment/95cd7498-7ade-493f-a068-8ea6e650d896/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD
Certificate IssuerSectigo Limited
Subjectssl.kaptcha.com
Fingerprint19:31:6D:9F:BB:CD:47:F5:8C:A5:4D:72:A4:03:AC:21:41:D8:BA:D6
ValidityWed, 16 Aug 2023 00:00:00 GMT - Thu, 15 Aug 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (323), with no line terminators
Hash 3a5ea3f115c9dd510c489300682160ac
78859cfd1f05d7b2be02e37189c6381821cc00da
9d2e7cd4a0ec7a357798ed2b4da8230f0295920c64adce51d33b552065e4919f
GET /cs/generatecookie?m=134400&s=d627ff8336e44f1daa0c4612c4514c65&sv=1.1.6 HTTP/1.1
Host: ssl.kaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://secured.bookaahotels.com/
Origin: https://secured.bookaahotels.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Cache-Control: no-cache, no-store, must-revalidate, private
Expires: 0
Pragma: no-cache
X-Correlation-Id: 9aaeda99-1f44-479d-89ba-49d4a89602e1
Date: Sun, 19 Nov 2023 11:33:05 GMT
Content-Length: 323
Content-Type: text/plain; charset=utf-8
rum-http-intake.logs.datadoghq.com/v1/input/pube1b7279fdd98c19ab2beeb51e9f21426?ddsource=browser&ddtags=sdk_version%3A2.18.0%2Cenv%3Aproduction%2Cservice%3Ahybrid-frontend%2Cversion%3A40d72c4d2fd47097e4e7b27a752ada8fa94292e3&batch_time=1700393586365
200 OK 2 B URL POST HTTP/2 rum-http-intake.logs.datadoghq.com/v1/input/pube1b7279fdd98c19ab2beeb51e9f21426?ddsource=browser&ddtags=sdk_version%3A2.18.0%2Cenv%3Aproduction%2Cservice%3Ahybrid-frontend%2Cversion%3A40d72c4d2fd47097e4e7b27a752ada8fa94292e3&batch_time=1700393586365
IP
Requested by https://secured.bookaahotels.com/booking/payment/95cd7498-7ade-493f-a068-8ea6e650d896/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD
Certificate IssuerDigiCert Inc
Subject*.logs.datadoghq.com
Fingerprint29:24:46:A8:06:E2:F4:15:BE:A6:74:80:B3:36:D5:3D:E7:D5:15:99
ValidityWed, 22 Mar 2023 00:00:00 GMT - Fri, 22 Mar 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
POST /v1/input/pube1b7279fdd98c19ab2beeb51e9f21426?ddsource=browser&ddtags=sdk_version%3A2.18.0%2Cenv%3Aproduction%2Cservice%3Ahybrid-frontend%2Cversion%3A40d72c4d2fd47097e4e7b27a752ada8fa94292e3&batch_time=1700393586365 HTTP/1.1
Host: rum-http-intake.logs.datadoghq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 16125
Origin: https://secured.bookaahotels.com
DNT: 1
Connection: keep-alive
Referer: https://secured.bookaahotels.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Nov 2023 11:33:05 GMT
content-type: application/json
content-length: 2
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2
ocsp.r2m03.amazontrust.com/
471 B URL ocsp.r2m03.amazontrust.com/
IP
Hash b6c285ab52784e3441aa976c5d20ec1d
5cacfc2db530991031c5c835326497272e1be9c8
e47a0f71b52fe2b87120887eef85243aa7af4951766360cf192c23229ae71f4a
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: max-age=7200
Date: Sun, 19 Nov 2023 11:33:05 GMT
Server: ECAcc (amb/6AE7)
X-Cache: Miss from cloudfront
Via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: kCFAMl2posZuYF8qIEpRDNGLdpOTNntiupoATeBlmSOsstnbF5V65g==
api.raygun.io/entries?apikey=FerhvCHh7KSWN%2BOOhgT%2FnA%3D%3D
202 Accepted 2 B URL POST HTTP/2 api.raygun.io/entries?apikey=FerhvCHh7KSWN%2BOOhgT%2FnA%3D%3D
IP
Requested by https://secured.bookaahotels.com/booking/payment/95cd7498-7ade-493f-a068-8ea6e650d896/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD
Certificate IssuerAmazon
Subject*.raygun.io
FingerprintB7:CD:4F:A6:DD:1D:B3:E9:7F:CC:23:FC:D9:D3:A0:24:6D:36:D6:06
ValidityMon, 11 Sep 2023 00:00:00 GMT - Wed, 09 Oct 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
POST /entries?apikey=FerhvCHh7KSWN%2BOOhgT%2FnA%3D%3D HTTP/1.1
Host: api.raygun.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 11460
Origin: https://secured.bookaahotels.com
DNT: 1
Connection: keep-alive
Referer: https://secured.bookaahotels.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 202 Accepted
date: Sun, 19 Nov 2023 11:33:05 GMT
content-type: application/json
content-length: 2
access-control-allow-origin: *
X-Firefox-Spdy: h2
ssl.kaptcha.com/logo.htm?m=134400&s=d627ff8336e44f1daa0c4612c4514c65&sv=1.1.6
200 OK 23 kB URL GET HTTP/1.1 ssl.kaptcha.com/logo.htm?m=134400&s=d627ff8336e44f1daa0c4612c4514c65&sv=1.1.6
IP
Requested by https://secured.bookaahotels.com/booking/payment/95cd7498-7ade-493f-a068-8ea6e650d896/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD
Certificate IssuerSectigo Limited
Subjectssl.kaptcha.com
Fingerprint19:31:6D:9F:BB:CD:47:F5:8C:A5:4D:72:A4:03:AC:21:41:D8:BA:D6
ValidityWed, 16 Aug 2023 00:00:00 GMT - Thu, 15 Aug 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (22205)
Hash 63a538759d5a2e3f0de4dd33d9d581cd
793dbcd4cb3b45e99e31e8dba163cd0dab378aa4
470524765dd11f6fca42fce1c1d02e4d89e112cbd17dcad4fcb6f792b9db054d
GET /logo.htm?m=134400&s=d627ff8336e44f1daa0c4612c4514c65&sv=1.1.6 HTTP/1.1
Host: ssl.kaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secured.bookaahotels.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Cache-Control: no-cache, no-store, must-revalidate, private
Content-Type: text/html
Expires: 0
Pragma: no-cache
Set-Cookie: k=154b8894cd6d442b970ba23eb69ca303; Path=/; Expires=Sat, 17 Feb 2024 11:33:05 GMT; HttpOnly; Secure; SameSite=None
X-Correlation-Id: 00b6c727-92d3-4a6f-83f2-7420bd813cce
Date: Sun, 19 Nov 2023 11:33:05 GMT
Transfer-Encoding: chunked
ssl.kaptcha.com/md
200 OK 0 B IP
Requested by https://ssl.kaptcha.com/logo.htm?m=134400&s=d627ff8336e44f1daa0c4612c4514c65&sv=1.1.6
Certificate IssuerSectigo Limited
Subjectssl.kaptcha.com
Fingerprint19:31:6D:9F:BB:CD:47:F5:8C:A5:4D:72:A4:03:AC:21:41:D8:BA:D6
ValidityWed, 16 Aug 2023 00:00:00 GMT - Thu, 15 Aug 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /md HTTP/1.1
Host: ssl.kaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 258
Origin: https://ssl.kaptcha.com
DNT: 1
Connection: keep-alive
Referer: https://ssl.kaptcha.com/logo.htm?m=134400&s=d627ff8336e44f1daa0c4612c4514c65&sv=1.1.6
Cookie: k=154b8894cd6d442b970ba23eb69ca303
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Cache-Control: no-cache, no-store, must-revalidate, private
Expires: 0
Pragma: no-cache
X-Correlation-Id: afa8af26-bdf2-45d6-9996-0dcbb61e694a
Date: Sun, 19 Nov 2023 11:33:06 GMT
Content-Length: 0
ssl.kaptcha.com/fin
200 OK 0 B IP
Requested by https://ssl.kaptcha.com/logo.htm?m=134400&s=d627ff8336e44f1daa0c4612c4514c65&sv=1.1.6
Certificate IssuerSectigo Limited
Subjectssl.kaptcha.com
Fingerprint19:31:6D:9F:BB:CD:47:F5:8C:A5:4D:72:A4:03:AC:21:41:D8:BA:D6
ValidityWed, 16 Aug 2023 00:00:00 GMT - Thu, 15 Aug 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /fin HTTP/1.1
Host: ssl.kaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 119
Origin: https://ssl.kaptcha.com
DNT: 1
Connection: keep-alive
Referer: https://ssl.kaptcha.com/logo.htm?m=134400&s=d627ff8336e44f1daa0c4612c4514c65&sv=1.1.6
Cookie: k=154b8894cd6d442b970ba23eb69ca303
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Cache-Control: no-cache, no-store, must-revalidate, private
Expires: 0
Pragma: no-cache
X-Correlation-Id: a0b4a150-5a0a-4fd0-830c-1027da274023
Date: Sun, 19 Nov 2023 11:33:08 GMT
Content-Length: 0
d3spfm6su8m7c5.cloudfront.net/aa-6f8b79c2953ce6330afd.js
200 OK 4.7 MB URL GET HTTP/2 d3spfm6su8m7c5.cloudfront.net/aa-6f8b79c2953ce6330afd.js
IP
Requested by https://secured.bookaahotels.com/booking/payment/95cd7498-7ade-493f-a068-8ea6e650d896/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
Size 4.7 MB (4680215 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /aa-6f8b79c2953ce6330afd.js HTTP/1.1
Host: d3spfm6su8m7c5.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secured.bookaahotels.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
date: Fri, 17 Nov 2023 14:36:39 GMT
last-modified: Mon, 09 Oct 2023 15:42:36 GMT
etag: W/"0541220d9111f873cbb0144970a5a2f9"
x-amz-server-side-encryption: AES256
x-amz-meta-x-amz-meta-hybrid-fe-version: 40d72c4d2fd47097e4e7b27a752ada8fa94292e3
cache-control: max-age=2592000, public
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: LbnoCGBkQkhlGjZQt77ZrWjEW69UPJlhpvTe-dgwsANq860U_Le9zA==
age: 161777
X-Firefox-Spdy: h2
js.braintreegateway.com/web/3.85.2/js/paypal-checkout.min.js
200 OK 56 kB URL GET HTTP/2 js.braintreegateway.com/web/3.85.2/js/paypal-checkout.min.js
IP
Requested by https://secured.bookaahotels.com/booking/payment/95cd7498-7ade-493f-a068-8ea6e650d896/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD
Certificate IssuerDigiCert Inc
Subjectwww.paypal.com
Fingerprint4B:C0:E1:F0:16:B3:A4:B3:63:08:41:DF:F2:EF:8D:65:54:1D:30:B1
ValidityThu, 12 Oct 2023 00:00:00 GMT - Thu, 31 Oct 2024 23:59:59 GMT
File type ASCII text, with very long lines (55847), with no line terminators
Hash 1d755ec9f8202252383a89a366b234f3
b95523cd89e8d585e5d04073b3976106115ea0d6
106cc265f34c25113c1c57a7b606878708cbb4205a66e82f495cd40014b24258
GET /web/3.85.2/js/paypal-checkout.min.js HTTP/1.1
Host: js.braintreegateway.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secured.bookaahotels.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=86400
content-security-policy: style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' *.braintreegateway.com *.braintree-api.com;
content-type: application/javascript
date: Sun, 19 Nov 2023 11:33:02 GMT
etag: "6554f26f-da27+gzip"
expires: Mon, 20 Nov 2023 11:33:02 GMT
last-modified: Wed, 15 Nov 2023 16:31:43 GMT
server: ECAcc (ska/F6A3)
strict-transport-security: max-age=63072000; includeSubDomains; preload
vary: Accept-Encoding
x-cache: HIT
content-length: 15132
X-Firefox-Spdy: h2
secured.bookaahotels.com/rest/aadvantage/partnerConfiguration/aadvantage
200 OK 101 B URL GET HTTP/2 secured.bookaahotels.com/rest/aadvantage/partnerConfiguration/aadvantage
IP
Requested by https://secured.bookaahotels.com/booking/payment/95cd7498-7ade-493f-a068-8ea6e650d896/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD
Certificate IssuerCloudflare, Inc.
Subjectsecured.bookaahotels.com
Fingerprint72:12:30:D2:A4:5E:EC:7D:82:45:55:45:A3:4D:2B:16:98:FA:28:47
ValiditySat, 03 Jun 2023 00:00:00 GMT - Sun, 02 Jun 2024 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash 2811cac8c10d16721e9b686aa13ee64c
e17778edc266eb4fa201ae9b90b3fa3467aa61fe
694ab31276b9d5181571004e7f3f3479ddfbf2a752c30ed60d68768dfd85ad5b
GET /rest/aadvantage/partnerConfiguration/aadvantage HTTP/1.1
Host: secured.bookaahotels.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-XSRF-TOKEN: 99324137-9925-4c3a-9776-e354ef47e377
DNT: 1
Connection: keep-alive
Referer: https://secured.bookaahotels.com/booking/payment/95cd7498-7ade-493f-a068-8ea6e650d896/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD
Cookie: __cf_bm=P_mktZL4IMg16hLKBHAI_65U_bwV7kHoJIYAO1mrR1c-1700393575-0-Ac/ujav1lUxXbERBYC92Te0XtMv2/09G4XsoRwVP+/eJNbPwtFlaSP0Yu7Z2vVxsVoMZnyC+Ri5lI7ttgBoo7zo=; raygun4js-userid=a4687025-c47b-97bb-1164-3e422e1238cc; _dd_s=rum=1&id=d0e4ba1c-a20e-425f-9cdc-9d97a791a01f&created=1700393578895&expire=1700394478895; WL_LANG=en; XSRF-TOKEN=99324137-9925-4c3a-9776-e354ef47e377; JSESSIONID=d627ff83-36e4-4f1d-aa0c-4612c4514c65; rm_cid=a8f83ad6-c2d2-4f13-a69c-da87f2160fd5; AWSELB=19E5D91110276A13CC3A01EE72CFF4C194AB6BF3117328A293A296281E8C50498A2348E8999881C83A03981E19F2807214930FF3061EBE99632DB00E96DB718855494924E7; AWSELBCORS=19E5D91110276A13CC3A01EE72CFF4C194AB6BF3117328A293A296281E8C50498A2348E8999881C83A03981E19F2807214930FF3061EBE99632DB00E96DB718855494924E7; _sp_ses.77b6=*; _sp_id.77b6=7a3ce15c-f767-4b98-b164-10db3f5d9e98.1700393579.1.1700393586.1700393579.ef20914f-dcb0-475f-855b-a722544541d2; lastRskxRun=1700393584606; rskxRunCookie=0; rCookie=0k4h878kgcdbvm66jz62pvklp5efqvz; WL_CURR=USD
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 19 Nov 2023 11:33:04 GMT
content-type: application/json;charset=UTF-8
access-control-expose-headers: RM-SessionId, RM-ClientId, XSRF-TOKEN
content-encoding: gzip
rm-clientid: a8f83ad6-c2d2-4f13-a69c-da87f2160fd5
rm-sessionid: d627ff83-36e4-4f1d-aa0c-4612c4514c65
vary: accept-encoding
x-rti-requesttraceid: be40674e-0183-49e8-9e2b-0843915b9753
x-rti-wl-proxy-config: hybrid-unified
x-rti-wl-proxy-version: 53ccd20588f7a514d97c39ec7a4d40c576844dc4
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 828822de8dcf5699-OSL
X-Firefox-Spdy: h2
secured.bookaahotels.com/rest/aadvantage/languages?sessionSiteSlug=aadvantage&max=1000
200 OK 2.5 kB URL GET HTTP/2 secured.bookaahotels.com/rest/aadvantage/languages?sessionSiteSlug=aadvantage&max=1000
IP
Requested by https://secured.bookaahotels.com/booking/payment/95cd7498-7ade-493f-a068-8ea6e650d896/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD
Certificate IssuerCloudflare, Inc.
Subjectsecured.bookaahotels.com
Fingerprint72:12:30:D2:A4:5E:EC:7D:82:45:55:45:A3:4D:2B:16:98:FA:28:47
ValiditySat, 03 Jun 2023 00:00:00 GMT - Sun, 02 Jun 2024 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with very long lines (2952), with no line terminators
Hash f1859537fe5f6a93ba3166685bbf10e8
fcc87a03b82f2fe91ea829aa009b0333aa5b3096
db346ffe30fb41adaa38c4cf78414e977b9ff29e29ddbc8f95e912091bcd2459
GET /rest/aadvantage/languages?sessionSiteSlug=aadvantage&max=1000 HTTP/1.1
Host: secured.bookaahotels.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-XSRF-TOKEN: 99324137-9925-4c3a-9776-e354ef47e377
DNT: 1
Connection: keep-alive
Referer: https://secured.bookaahotels.com/booking/payment/95cd7498-7ade-493f-a068-8ea6e650d896/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD
Cookie: __cf_bm=P_mktZL4IMg16hLKBHAI_65U_bwV7kHoJIYAO1mrR1c-1700393575-0-Ac/ujav1lUxXbERBYC92Te0XtMv2/09G4XsoRwVP+/eJNbPwtFlaSP0Yu7Z2vVxsVoMZnyC+Ri5lI7ttgBoo7zo=; raygun4js-userid=a4687025-c47b-97bb-1164-3e422e1238cc; _dd_s=rum=1&id=d0e4ba1c-a20e-425f-9cdc-9d97a791a01f&created=1700393578895&expire=1700394478895; WL_LANG=en; XSRF-TOKEN=99324137-9925-4c3a-9776-e354ef47e377; JSESSIONID=d627ff83-36e4-4f1d-aa0c-4612c4514c65; rm_cid=a8f83ad6-c2d2-4f13-a69c-da87f2160fd5; AWSELB=19E5D91110276A13CC3A01EE72CFF4C194AB6BF3117328A293A296281E8C50498A2348E8999881C83A03981E19F2807214930FF3061EBE99632DB00E96DB718855494924E7; AWSELBCORS=19E5D91110276A13CC3A01EE72CFF4C194AB6BF3117328A293A296281E8C50498A2348E8999881C83A03981E19F2807214930FF3061EBE99632DB00E96DB718855494924E7; _sp_ses.77b6=*; _sp_id.77b6=7a3ce15c-f767-4b98-b164-10db3f5d9e98.1700393579.1.1700393584.1700393579.ef20914f-dcb0-475f-855b-a722544541d2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 19 Nov 2023 11:33:03 GMT
content-type: application/json;charset=UTF-8
access-control-expose-headers: RM-SessionId, RM-ClientId, XSRF-TOKEN
content-encoding: gzip
rm-clientid: a8f83ad6-c2d2-4f13-a69c-da87f2160fd5
rm-sessionid: d627ff83-36e4-4f1d-aa0c-4612c4514c65
vary: accept-encoding
x-rti-requesttraceid: b85fc59b-5f10-4d88-abf1-720d50be8a86
x-rti-wl-proxy-config: hybrid-unified
x-rti-wl-proxy-version: 53ccd20588f7a514d97c39ec7a4d40c576844dc4
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 828822d6ce165699-OSL
X-Firefox-Spdy: h2
secured.bookaahotels.com/rest/aadvantage/searchRequest/95cd7498-7ade-493f-a068-8ea6e650d896?language=en&sessionSiteSlug=aadvantage
200 OK 2.4 kB URL GET HTTP/2 secured.bookaahotels.com/rest/aadvantage/searchRequest/95cd7498-7ade-493f-a068-8ea6e650d896?language=en&sessionSiteSlug=aadvantage
IP
Requested by https://secured.bookaahotels.com/booking/payment/95cd7498-7ade-493f-a068-8ea6e650d896/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD
Certificate IssuerCloudflare, Inc.
Subjectsecured.bookaahotels.com
Fingerprint72:12:30:D2:A4:5E:EC:7D:82:45:55:45:A3:4D:2B:16:98:FA:28:47
ValiditySat, 03 Jun 2023 00:00:00 GMT - Sun, 02 Jun 2024 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with very long lines (2695), with no line terminators
Hash beb52f022a03f0f8ad458d9316df3f67
7bd6792b2c98e232603816e2c1cb0023ac277f6d
60633698c0288d106747541c537a1317cddaf7e568d1c7f0647a8a16d74bc3b8
GET /rest/aadvantage/searchRequest/95cd7498-7ade-493f-a068-8ea6e650d896?language=en&sessionSiteSlug=aadvantage HTTP/1.1
Host: secured.bookaahotels.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-XSRF-TOKEN: 99324137-9925-4c3a-9776-e354ef47e377
DNT: 1
Connection: keep-alive
Referer: https://secured.bookaahotels.com/booking/payment/95cd7498-7ade-493f-a068-8ea6e650d896/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD&offerIsBoosted=0
Cookie: __cf_bm=P_mktZL4IMg16hLKBHAI_65U_bwV7kHoJIYAO1mrR1c-1700393575-0-Ac/ujav1lUxXbERBYC92Te0XtMv2/09G4XsoRwVP+/eJNbPwtFlaSP0Yu7Z2vVxsVoMZnyC+Ri5lI7ttgBoo7zo=; raygun4js-userid=a4687025-c47b-97bb-1164-3e422e1238cc; _dd_s=rum=1&id=d0e4ba1c-a20e-425f-9cdc-9d97a791a01f&created=1700393578895&expire=1700394478895; WL_LANG=en; XSRF-TOKEN=99324137-9925-4c3a-9776-e354ef47e377; JSESSIONID=d627ff83-36e4-4f1d-aa0c-4612c4514c65; rm_cid=a8f83ad6-c2d2-4f13-a69c-da87f2160fd5; AWSELB=19E5D91110276A13CC3A01EE72CFF4C194AB6BF3117328A293A296281E8C50498A2348E8999881C83A03981E19F2807214930FF3061EBE99632DB00E96DB718855494924E7; AWSELBCORS=19E5D91110276A13CC3A01EE72CFF4C194AB6BF3117328A293A296281E8C50498A2348E8999881C83A03981E19F2807214930FF3061EBE99632DB00E96DB718855494924E7; _sp_ses.77b6=*; _sp_id.77b6=7a3ce15c-f767-4b98-b164-10db3f5d9e98.1700393579.1.1700393584.1700393579.ef20914f-dcb0-475f-855b-a722544541d2; lastRskxRun=1700393584606; rskxRunCookie=0; rCookie=0k4h878kgcdbvm66jz62pvklp5efqvz; WL_CURR=USD
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 19 Nov 2023 11:33:04 GMT
content-type: application/json;charset=UTF-8
access-control-expose-headers: RM-SessionId, RM-ClientId, XSRF-TOKEN
content-encoding: gzip
rm-clientid: a8f83ad6-c2d2-4f13-a69c-da87f2160fd5
rm-sessionid: d627ff83-36e4-4f1d-aa0c-4612c4514c65
vary: accept-encoding
x-rti-requesttraceid: 911ceb75-5d1a-40e4-95fa-b0b6bb59db76
x-rti-wl-proxy-config: hybrid-unified
x-rti-wl-proxy-version: 53ccd20588f7a514d97c39ec7a4d40c576844dc4
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 828822dc1ba15699-OSL
X-Firefox-Spdy: h2
www.rocketmiles.com/mvp/images/rocketmiles-logo-dark.png
403 Forbidden 0 B URL GET HTTP/2 www.rocketmiles.com/mvp/images/rocketmiles-logo-dark.png
IP
Requested by https://ssl.kaptcha.com/logo.htm?m=134400&s=d627ff8336e44f1daa0c4612c4514c65&sv=1.1.6
Certificate IssuerCloudflare, Inc.
Subjectwww.rocketmiles.com
Fingerprint75:BE:88:B5:41:DE:F8:45:8E:58:9E:56:16:55:D6:DE:3F:69:1A:5D
ValidityMon, 18 Sep 2023 00:00:00 GMT - Mon, 16 Sep 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /mvp/images/rocketmiles-logo-dark.png HTTP/1.1
Host: www.rocketmiles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ssl.kaptcha.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
date: Sun, 19 Nov 2023 11:33:06 GMT
content-type: application/xml
x-amz-request-id: CJJYC0CNVF0DE4JK
x-amz-id-2: hGUZDA1fYy3pGTUe4svgh0vteFjsw/G1tR2pBVJH/eIByM/qkVV3iJIdaBbD16oR7AWEUmm++7w=
x-cache: Error from cloudfront
via: 1.1 1448f69604d5be1f9c9f0c64cfa90594.cloudfront.net (CloudFront)
x-amz-cf-pop: IAD89-C1
x-amz-cf-id: MBNwu-qJ9TvaRpmUi123AWe9fUvKhGtzK-SysPkKGInWNCZA0k3Cvw==
cf-cache-status: MISS
set-cookie: __cf_bm=0lNk4FfNNrc__63wnNxJn9w51mi39hnP9dY.Uhi.c.8-1700393586-0-AYAX83cNCHn7tAyKjp0pSNN09a09H0Uh3xQy/oy3bIrYook66aPXT6zDtV+iJgds/X9qZANw0QzNsYxrSf3HmiY=; path=/; expires=Sun, 19-Nov-23 12:03:06 GMT; domain=.www.rocketmiles.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 828822e7998456cb-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
secured.bookaahotels.com/rest/aadvantage/experiments?sessionSiteSlug=aadvantage&max=100
200 OK 9.7 kB URL GET HTTP/2 secured.bookaahotels.com/rest/aadvantage/experiments?sessionSiteSlug=aadvantage&max=100
IP
Requested by https://secured.bookaahotels.com/booking/payment/95cd7498-7ade-493f-a068-8ea6e650d896/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD
Certificate IssuerCloudflare, Inc.
Subjectsecured.bookaahotels.com
Fingerprint72:12:30:D2:A4:5E:EC:7D:82:45:55:45:A3:4D:2B:16:98:FA:28:47
ValiditySat, 03 Jun 2023 00:00:00 GMT - Sun, 02 Jun 2024 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with very long lines (11060), with no line terminators
Hash f53dcf1485305f72422583ba927f3468
a1f244a07ff4b110841e483f3ccb43749f4bb8d6
a0a3e48a714722e303c4ac578e676fb4ab849a1f69416fab14f3ab5d5000c41a
GET /rest/aadvantage/experiments?sessionSiteSlug=aadvantage&max=100 HTTP/1.1
Host: secured.bookaahotels.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-XSRF-TOKEN: 99324137-9925-4c3a-9776-e354ef47e377
DNT: 1
Connection: keep-alive
Referer: https://secured.bookaahotels.com/booking/payment/95cd7498-7ade-493f-a068-8ea6e650d896/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD
Cookie: __cf_bm=P_mktZL4IMg16hLKBHAI_65U_bwV7kHoJIYAO1mrR1c-1700393575-0-Ac/ujav1lUxXbERBYC92Te0XtMv2/09G4XsoRwVP+/eJNbPwtFlaSP0Yu7Z2vVxsVoMZnyC+Ri5lI7ttgBoo7zo=; raygun4js-userid=a4687025-c47b-97bb-1164-3e422e1238cc; _dd_s=rum=1&id=d0e4ba1c-a20e-425f-9cdc-9d97a791a01f&created=1700393578895&expire=1700394478895; WL_LANG=en; XSRF-TOKEN=99324137-9925-4c3a-9776-e354ef47e377; JSESSIONID=d627ff83-36e4-4f1d-aa0c-4612c4514c65; rm_cid=a8f83ad6-c2d2-4f13-a69c-da87f2160fd5; AWSELB=19E5D91110276A13CC3A01EE72CFF4C194AB6BF3117328A293A296281E8C50498A2348E8999881C83A03981E19F2807214930FF3061EBE99632DB00E96DB718855494924E7; AWSELBCORS=19E5D91110276A13CC3A01EE72CFF4C194AB6BF3117328A293A296281E8C50498A2348E8999881C83A03981E19F2807214930FF3061EBE99632DB00E96DB718855494924E7; _sp_ses.77b6=*; _sp_id.77b6=7a3ce15c-f767-4b98-b164-10db3f5d9e98.1700393579.1.1700393579.1700393579.ef20914f-dcb0-475f-855b-a722544541d2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 19 Nov 2023 11:32:58 GMT
content-type: application/json;charset=UTF-8
access-control-expose-headers: RM-SessionId, RM-ClientId, XSRF-TOKEN
content-encoding: gzip
rm-clientid: a8f83ad6-c2d2-4f13-a69c-da87f2160fd5
rm-sessionid: d627ff83-36e4-4f1d-aa0c-4612c4514c65
vary: accept-encoding
x-rti-requesttraceid: 3ad0a563-1e5d-4845-9562-84e4304c64f6
x-rti-wl-proxy-config: hybrid-unified
x-rti-wl-proxy-version: 53ccd20588f7a514d97c39ec7a4d40c576844dc4
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 828822b698745699-OSL
X-Firefox-Spdy: h2
d3spfm6su8m7c5.cloudfront.net/9-6f8b79c2953ce6330afd.js
200 OK 1.4 kB URL GET HTTP/2 d3spfm6su8m7c5.cloudfront.net/9-6f8b79c2953ce6330afd.js
IP
Requested by https://secured.bookaahotels.com/booking/payment/95cd7498-7ade-493f-a068-8ea6e650d896/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type ASCII text, with very long lines (1463), with no line terminators
Hash b4dd79bc2460ee713aae97b9b1639fca
0090df9a7ef175cf7b4a9f7122d2a27546858df1
91a03abc433d3912a94d8ae25a880d8f819a2e7bb42a621c9ccbfa24b2f33847
GET /9-6f8b79c2953ce6330afd.js HTTP/1.1
Host: d3spfm6su8m7c5.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://secured.bookaahotels.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
date: Sun, 19 Nov 2023 11:32:58 GMT
last-modified: Mon, 09 Oct 2023 15:42:36 GMT
etag: W/"a4414b805a43930bbad0f712afba00c5"
x-amz-server-side-encryption: AES256
x-amz-meta-x-amz-meta-hybrid-fe-version: 40d72c4d2fd47097e4e7b27a752ada8fa94292e3
cache-control: max-age=2592000, public
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: vA8wO40WtMdAXYB0YEsgtHDrNg9OHLD41Yh7gensH6D_mh3qfj70Lg==
X-Firefox-Spdy: h2
r.bstatic.com/data/sp_aff/366304/oneworld.png
200 OK 2.6 kB URL GET HTTP/2 r.bstatic.com/data/sp_aff/366304/oneworld.png
IP
Requested by https://secured.bookaahotels.com/booking/payment/95cd7498-7ade-493f-a068-8ea6e650d896/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD
Certificate IssuerDigiCert Inc
Subject*.bstatic.com
FingerprintE0:83:54:2F:B0:EC:78:50:D3:62:8F:37:8F:D9:CC:EE:79:F5:B1:F3
ValidityWed, 13 Sep 2023 00:00:00 GMT - Sat, 31 Aug 2024 23:59:59 GMT
File type PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced\012- data
Hash d4bc1cb68374b398c4723f1a4a651909
024f020108578cddbecd7438fe088feccb5a2fc7
4c788c428c2e656477335172571f8b36c6a0c80044b31af2b7c8056a7f1e13d5
GET /data/sp_aff/366304/oneworld.png HTTP/1.1
Host: r.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secured.bookaahotels.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
access-control-allow-origin: *
cache-control: max-age=2592000
date: Fri, 17 Nov 2023 16:40:56 GMT
server: nginx
strict-transport-security: max-age=17280000
x-booking-request-id: 1474A08A-8568-11EE-ADAC-C609D4F0994C
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: rQjjYxSw8J_rztNsFnYt3eesZw0XVb9i39nCpgGWd68CB0jaHu-wHA==
age: 154326
X-Firefox-Spdy: h2
secured.bookaahotels.com/rest/aadvantage/currencies?sessionSiteSlug=aadvantage&max=1000
200 OK 15 kB URL GET HTTP/2 secured.bookaahotels.com/rest/aadvantage/currencies?sessionSiteSlug=aadvantage&max=1000
IP
Requested by https://secured.bookaahotels.com/booking/payment/95cd7498-7ade-493f-a068-8ea6e650d896/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD
Certificate IssuerCloudflare, Inc.
Subjectsecured.bookaahotels.com
Fingerprint72:12:30:D2:A4:5E:EC:7D:82:45:55:45:A3:4D:2B:16:98:FA:28:47
ValiditySat, 03 Jun 2023 00:00:00 GMT - Sun, 02 Jun 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (14884), with no line terminators
Hash 54e9978fa4b487b67d048126650c7bc6
cd9cf410481df3e0cc5a3f675a5f56817278b4eb
d31a9c870f4d5b6afb388433f3c1d98f69c9dec351c3be51607b6406ecc2f61b
GET /rest/aadvantage/currencies?sessionSiteSlug=aadvantage&max=1000 HTTP/1.1
Host: secured.bookaahotels.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-XSRF-TOKEN: 99324137-9925-4c3a-9776-e354ef47e377
DNT: 1
Connection: keep-alive
Referer: https://secured.bookaahotels.com/booking/payment/95cd7498-7ade-493f-a068-8ea6e650d896/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD
Cookie: __cf_bm=P_mktZL4IMg16hLKBHAI_65U_bwV7kHoJIYAO1mrR1c-1700393575-0-Ac/ujav1lUxXbERBYC92Te0XtMv2/09G4XsoRwVP+/eJNbPwtFlaSP0Yu7Z2vVxsVoMZnyC+Ri5lI7ttgBoo7zo=; raygun4js-userid=a4687025-c47b-97bb-1164-3e422e1238cc; _dd_s=rum=1&id=d0e4ba1c-a20e-425f-9cdc-9d97a791a01f&created=1700393578895&expire=1700394478895; WL_LANG=en; XSRF-TOKEN=99324137-9925-4c3a-9776-e354ef47e377; JSESSIONID=d627ff83-36e4-4f1d-aa0c-4612c4514c65; rm_cid=a8f83ad6-c2d2-4f13-a69c-da87f2160fd5; AWSELB=19E5D91110276A13CC3A01EE72CFF4C194AB6BF3117328A293A296281E8C50498A2348E8999881C83A03981E19F2807214930FF3061EBE99632DB00E96DB718855494924E7; AWSELBCORS=19E5D91110276A13CC3A01EE72CFF4C194AB6BF3117328A293A296281E8C50498A2348E8999881C83A03981E19F2807214930FF3061EBE99632DB00E96DB718855494924E7; _sp_ses.77b6=*; _sp_id.77b6=7a3ce15c-f767-4b98-b164-10db3f5d9e98.1700393579.1.1700393584.1700393579.ef20914f-dcb0-475f-855b-a722544541d2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 19 Nov 2023 11:33:03 GMT
content-type: application/json;charset=UTF-8
content-length: 1648
access-control-expose-headers: RM-SessionId, RM-ClientId, XSRF-TOKEN
content-encoding: gzip
rm-clientid: a8f83ad6-c2d2-4f13-a69c-da87f2160fd5
rm-sessionid: d627ff83-36e4-4f1d-aa0c-4612c4514c65
vary: accept-encoding
x-rti-requesttraceid: e6a8e90b-cbcb-4b82-9e9d-a60c432790a5
x-rti-wl-proxy-config: hybrid-unified
x-rti-wl-proxy-version: 53ccd20588f7a514d97c39ec7a4d40c576844dc4
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 828822d6ce195699-OSL
X-Firefox-Spdy: h2
secured.bookaahotels.com/booking/payment/95cd7498-7ade-493f-a068-8ea6e650d896/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD
200 OK 3.1 kB URL User Request GET HTTP/2 secured.bookaahotels.com/booking/payment/95cd7498-7ade-493f-a068-8ea6e650d896/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD
IP
Certificate IssuerCloudflare, Inc.
Subjectsecured.bookaahotels.com
Fingerprint72:12:30:D2:A4:5E:EC:7D:82:45:55:45:A3:4D:2B:16:98:FA:28:47
ValiditySat, 03 Jun 2023 00:00:00 GMT - Sun, 02 Jun 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (3293), with no line terminators
Hash bd575611446f91019135fee6fdecb228
99c4ca3e8b7afb5c5af6acfb1f563c4fbcbe1aa8
6a328855f052808017244b37d0bb3602d6754761affbdd489b61281a2c98e844
GET /booking/payment/95cd7498-7ade-493f-a068-8ea6e650d896/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD HTTP/1.1
Host: secured.bookaahotels.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 19 Nov 2023 11:32:55 GMT
content-type: text/html; charset=utf-8
last-modified: Mon, 09 Oct 2023 15:42:37 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-x-amz-meta-hybrid-fe-version: 40d72c4d2fd47097e4e7b27a752ada8fa94292e3
cache-control: max-age=300, public
vary: Accept-Encoding
x-cache: Error from cloudfront
via: 1.1 aa6e16f47d6a0519f52b8dcfca2d841a.cloudfront.net (CloudFront)
x-amz-cf-pop: IAD89-P1
x-amz-cf-id: kaNOJVAiC-ALqq6hbSwvZjtbqbs28Kw0n1Qzu6U7YB1jyoJfIsHuJQ==
age: 7
x-frame-options: SAMEORIGIN
x-rti-wl-proxy-version: 53ccd20588f7a514d97c39ec7a4d40c576844dc4
cf-cache-status: DYNAMIC
set-cookie: __cf_bm=P_mktZL4IMg16hLKBHAI_65U_bwV7kHoJIYAO1mrR1c-1700393575-0-Ac/ujav1lUxXbERBYC92Te0XtMv2/09G4XsoRwVP+/eJNbPwtFlaSP0Yu7Z2vVxsVoMZnyC+Ri5lI7ttgBoo7zo=; path=/; expires=Sun, 19-Nov-23 12:02:55 GMT; domain=.secured.bookaahotels.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 828822a4afa15699-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.aadvantagehotels.com/?label=nolabel&tg=rmbpl&callback=angular.callbacks._0
200 OK 0 B URL GET HTTP/2 www.aadvantagehotels.com/?label=nolabel&tg=rmbpl&callback=angular.callbacks._0
IP
Requested by https://secured.bookaahotels.com/booking/payment/95cd7498-7ade-493f-a068-8ea6e650d896/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD
Certificate IssuerEntrust, Inc.
Subjectaadvantagehotels.com
Fingerprint06:CD:4C:E4:23:1F:92:C0:1B:D0:1D:85:A0:94:D3:98:10:C3:C2:2B
ValidityTue, 20 Jun 2023 16:33:47 GMT - Wed, 22 May 2024 16:33:46 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?label=nolabel&tg=rmbpl&callback=angular.callbacks._0 HTTP/1.1
Host: www.aadvantagehotels.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://secured.bookaahotels.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 19 Nov 2023 11:33:03 GMT
content-type: text/html; charset=utf-8
server: nginx
x-amz-id-2: sG5yBqLCGjkdyfy39k8dNArM3vTCvxRrDwiSa+cT8lSUUeemTUGauUQb0iYr/5CtzzDY3+0gKP8=
x-amz-request-id: BN0PWKJDX2E32NQN
last-modified: Fri, 17 Nov 2023 19:16:36 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
cache-control: max-age=300, public
etag: W/"46c1bfd260725281d8d67e944fd83881"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 baddfcb4f2a6876b4fcc03bcd62427ee.cloudfront.net (CloudFront)
x-amz-cf-pop: IAD89-C1
x-amz-cf-id: VsvEtBibd2wDuU5iq9N6CvPsJLnBhlgYIvVi1kPaL7vx8sQ8Nx1lRQ==
age: 54
strict-transport-security: max-age=63072000; includeSubdomains
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-security-policy: default-src 'self'; connect-src *; font-src *; frame-src *; img-src * data:; media-src *; object-src *; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline';
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Actor:400
200 OK 383 B URL GET HTTP/2 fonts.googleapis.com/css?family=Actor:400
IP
Requested by https://secured.bookaahotels.com/booking/payment/95cd7498-7ade-493f-a068-8ea6e650d896/9a36e8d5-b75e-dd7a-fdae-0a50d96a8d21?currency=USD
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (391), with no line terminators
Hash c3a77833b8d490fe238861bf576a1ae5
bc5665e26994439e31957c5bbadd9ec068a97611
fb349014933e5e3f4a197dabb670c647c45716878b834d527ec17b55ae389e35
GET /css?family=Actor:400 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3spfm6su8m7c5.cloudfront.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 19 Nov 2023 11:32:56 GMT
date: Sun, 19 Nov 2023 11:32:56 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
104.18.143.4
3.233.153.123
23.38.202.187
0.0.0.0