{"report_id":"89b06c44-3039-49c6-8eff-75000f83b4e2","version":6,"status":"done","tags":[],"date":"2025-12-07T03:37:59Z","url":{"schema":"http","addr":"flowtracktrk.com/go/11e047d1-e745-42e9-be38-d08d8027f479?cost=0.008300\u0026visitor_id=1021376245633392641\u0026zoneid=3604848\u0026campaignid=10178647\u0026bannerid=24917602\u0026language=zh\u0026os=ios\u0026browser=firefox\u0026connection.type=broadband\u0026user_activity=medium\u0026subzone_id=1\u0026country=MO","fqdn":"flowtracktrk.com","domain":"flowtracktrk.com","tld":"com"},"ip":{"addr":"3.70.16.242","port":0,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"title":"Trip.com Official Site‎‎ | Travel Deals and Promotions","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"flowtracktrk.com/go/11e047d1-e745-42e9-be38-d08d8027f479?cost=0.008300\u0026visitor_id=1021376245633392641\u0026zoneid=3604848\u0026campaignid=10178647\u0026bannerid=24917602\u0026language=zh\u0026os=ios\u0026browser=firefox\u0026connection.type=broadband\u0026user_activity=medium\u0026subzone_id=1\u0026country=MO","fqdn":"flowtracktrk.com","domain":"flowtracktrk.com","tld":"com"},"ip":{"addr":"3.70.16.242","port":0,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-11T03:37:59Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2025-12-07","alert":"Detects SocGholish obfuscated variant first observed in July 2022","trigger":"ak-s-cw.tripcdn.com/modules/ibu/online-home/onlineRecommendAttractions.0ecfe8db0cd36e3a7174882887a63324.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"Ankit Anubhav -ankitanubhav.info","date":"2022-07-19","description":"Detects SocGholish obfuscated variant first observed in July 2022","malpedia_family":"js.fakeupdates","rule":"SocGholish_Variant_B","yarahub_author_email":"ankit.yara@inbox.ru","yarahub_author_twitter":"@ankit_anubhav","yarahub_license":"CC0 1.0","yarahub_reference_link":"https://twitter.com/ankit_anubhav/status/1549246034831781888","yarahub_reference_md5":"4fcc9569ca63cb2f5777954ac4c9290f","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"df3d194a-c6bc-4440-bad9-461e0e7962fd"}}],"urlquery":null},"summary":[{"fqdn":"nam.veta.naver.com","ip":{"addr":"203.104.162.225","port":443,"asn":23576,"as":"NAVER Cloud Corp.","country":"Germany","country_code":"DE"},"domain_registered":"1997-09-12","domain_rank":61307,"first_seen":"2023-01-11T13:24:02Z","last_seen":"2025-12-01T07:30:42.141303Z","alert_count":0,"request_count":1,"received_data":403,"sent_data":435,"comment":"","tags":null,"fingerprints":null},{"fqdn":"webresource.tripcdn.com","ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2018-07-03","domain_rank":378663,"first_seen":"2020-10-16T05:21:39Z","last_seen":"2025-12-01T20:28:59.802849Z","alert_count":0,"request_count":4,"received_data":183585,"sent_data":1933,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"file.tripcdn.com","ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2018-07-03","domain_rank":492257,"first_seen":"2022-06-21T09:27:12Z","last_seen":"2025-12-02T01:39:58.840184Z","alert_count":0,"request_count":1,"received_data":80144,"sent_data":481,"comment":"","tags":null,"fingerprints":null},{"fqdn":"wcs.naver.net","ip":{"addr":"23.36.76.106","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"1998-12-12","domain_rank":80102,"first_seen":"2012-10-23T23:36:56Z","last_seen":"2025-12-01T20:29:00.457972Z","alert_count":0,"request_count":1,"received_data":30365,"sent_data":408,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ak-s-cw.tripcdn.com","ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2018-07-03","domain_rank":387191,"first_seen":"2025-03-14T01:49:21.953623Z","last_seen":"2025-12-03T09:27:59.112013Z","alert_count":1,"request_count":85,"received_data":9765323,"sent_data":43958,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"www.trip.com","ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"1998-02-09","domain_rank":68377,"first_seen":"2017-02-07T12:50:24Z","last_seen":"2025-12-01T20:28:59.608777Z","alert_count":0,"request_count":38,"received_data":240072,"sent_data":49430,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"ssl.pstatic.net","ip":{"addr":"23.44.36.65","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"2011-09-06","domain_rank":71086,"first_seen":"2012-10-18T18:40:49Z","last_seen":"2025-12-01T07:30:42.245954Z","alert_count":0,"request_count":1,"received_data":75904,"sent_data":443,"comment":"","tags":null,"fingerprints":null},{"fqdn":"chloro.trip.com","ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"1998-02-09","domain_rank":430653,"first_seen":"2020-11-15T10:09:51Z","last_seen":"2025-12-01T20:29:00.360117Z","alert_count":0,"request_count":1,"received_data":621,"sent_data":1029,"comment":"","tags":null,"fingerprints":null},{"fqdn":"flowtracktrk.com","ip":{"addr":"3.71.151.17","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2025-08-19","domain_rank":0,"first_seen":"2025-08-26T10:36:43.228755Z","last_seen":"2025-11-22T06:41:18.90795Z","alert_count":0,"request_count":1,"received_data":1815,"sent_data":728,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ak-s.tripcdn.com","ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2018-07-03","domain_rank":403010,"first_seen":"2019-06-06T08:22:49Z","last_seen":"2025-12-01T20:29:00.222737Z","alert_count":0,"request_count":1,"received_data":23508,"sent_data":499,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2025-11-30T22:21:01.655166Z","alert_count":0,"request_count":2,"received_data":981,"sent_data":1928,"comment":"","tags":null,"fingerprints":null},{"fqdn":"wcs.naver.com","ip":{"addr":"110.93.154.74","port":443,"asn":23576,"as":"NAVER Cloud Corp.","country":"South Korea","country_code":"KR"},"domain_registered":"1997-09-12","domain_rank":75690,"first_seen":"2012-10-03T12:24:14Z","last_seen":"2025-12-01T20:29:00.604Z","alert_count":0,"request_count":1,"received_data":887,"sent_data":448,"comment":"","tags":null,"fingerprints":null},{"fqdn":"pages.trip.com","ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"1998-02-09","domain_rank":391942,"first_seen":"2017-11-24T09:11:31Z","last_seen":"2025-12-01T20:29:00.670627Z","alert_count":0,"request_count":6,"received_data":597646,"sent_data":5807,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"images3.c-ctrip.com","ip":{"addr":"23.36.77.218","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2004-08-09","domain_rank":440028,"first_seen":"2013-01-07T22:54:34Z","last_seen":"2025-12-01T20:29:00.266651Z","alert_count":0,"request_count":1,"received_data":866,"sent_data":441,"comment":"","tags":null,"fingerprints":null},{"fqdn":"static.tripcdn.com","ip":{"addr":"3.167.2.46","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2018-07-03","domain_rank":271897,"first_seen":"2019-12-14T09:50:54Z","last_seen":"2025-12-01T20:29:00.856231Z","alert_count":0,"request_count":3,"received_data":183336,"sent_data":1425,"comment":"","tags":null,"fingerprints":[{"name":"Varnish:6.0","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"dimg04.tripcdn.com","ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2018-07-03","domain_rank":359215,"first_seen":"2024-05-01T10:49:07Z","last_seen":"2025-12-01T20:28:59.753165Z","alert_count":0,"request_count":8,"received_data":145413,"sent_data":3674,"comment":"","tags":null,"fingerprints":null},{"fqdn":"best-r3v3nue.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-17","domain_rank":0,"first_seen":"2025-11-20T11:50:33.794826Z","last_seen":"2025-11-29T02:39:57.636377Z","alert_count":0,"request_count":1,"received_data":1203,"sent_data":641,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"aff.trustofferlink.com","ip":{"addr":"54.196.173.211","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2025-08-25","domain_rank":0,"first_seen":"2025-09-24T08:47:10.454603Z","last_seen":"2025-12-05T07:46:39.660666Z","alert_count":0,"request_count":1,"received_data":95021,"sent_data":583,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-11-30T22:16:05.472311Z","alert_count":0,"request_count":5,"received_data":2482608,"sent_data":2192,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ubt-sgp.trip.com","ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"1998-02-09","domain_rank":238793,"first_seen":"2024-04-16T15:44:25Z","last_seen":"2025-12-01T20:28:59.686165Z","alert_count":0,"request_count":12,"received_data":10340,"sent_data":8683,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ak-d.tripcdn.com","ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2018-07-03","domain_rank":241394,"first_seen":"2020-10-16T05:21:44Z","last_seen":"2025-12-02T01:39:58.764718Z","alert_count":0,"request_count":7,"received_data":530210,"sent_data":3264,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/gtm-loader/gtm-loader.131ef8b57f3d288725f3c2c14517cd74.js","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"131ef8b57f3d288725f3c2c14517cd74","sha1":"9f6f0f257068a15df76bc400ef42aa47a4544913","sha256":"e78b6e011d1a6796557d027206a613af5c59b72e47ae7601e7d4a9fe45054422","sha512":"66f11860c5eadff4711b97a941f42a811d7c0ccf1027d6d239c9f4f788212a2ce75e2192869c1331fe890c6727dff2b9fac1be0072f83a2dbcb889b7ef50a663","ssdeep":"96:gm3DCpHiPs4c4ie+/aWwCpM2q6vI5nOw5twOjjSfzJqnG:vzCpSc4ix0CpMVwUwwjSfVqG","tlshash":"90a1b59ab7c7f0b8c29658d9483f630ad1346a559493e4c6d902dcacace4fa34067f2d","size":4928,"data":"","first_seen":"2025-08-15T02:09:37.907417Z","last_seen":"2026-04-15T17:38:47.428497Z","times_seen":2901,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/locale/v3/33000011/en-XX.js?etagc=4d5d09ca1e41fbfd6074c434de291df3","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"4d5d09ca1e41fbfd6074c434de291df3","sha1":"ab5ad0a025cf17721e98b6ad0bba44cb28d5d4c8","sha256":"decf1150e07fdf678a0703d500b271d2c315e046f1c1c32e7f3743b316e6ec95","sha512":"231afd6c8fe2ff4dabdf6375d365be0f96383faa566ba9183a4606945ec95960fe2ef0d33f58b8440b49a1416b7dd943c93fb69e841d6ee8c28cb712679e5848","ssdeep":"96:A+zQeDOpqdGWZ/a4kEpti+tIGmMGxWlY+zEvyKz+i7gRlnWsrJJA+6cjebkS3HA6:HEe4gfizEuDGK0WMnNjjS3HRXpvwf07","tlshash":"7be1a41eb571641ba873e0f6fa2e8619b020583305c58816b99c11fc3fd259782fadfa","size":6824,"data":"","first_seen":"2025-10-13T16:34:16.478955Z","last_seen":"2026-04-15T17:38:47.558702Z","times_seen":2354,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/locale/v3/33000016/en-XX.js?etagc=fae519ebbee04d3b85b4f6241bb1dc7e","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"fae519ebbee04d3b85b4f6241bb1dc7e","sha1":"4fb7d238814b4fc76106469c80d489391bbb1966","sha256":"01bb0e706e529abbaa66cc9df381cf0d8029807dd9821c005ab4153b1f1f1873","sha512":"b52a324ec20c461ca81041abc9bc769596e4daa93e5e81482bd26445f3e585360b59c832a5bc03e6c320930f38852532e1aeac87afba5e8133a4d9d13fafe399","ssdeep":"96:A+zQeDOpqdGWZ/a4kEpti+tIGmMGxWlJZogRkTkVWsk5JkXAks6cjlhbkS3HAqkc:HEe4gfizEuDGK0WPy4jMS3HhXQqwf07","tlshash":"81b1959a79719427d4f3f5fa8a2f9700f070a82304c48915f68c519c7fd1896c6f2af9","size":5418,"data":"","first_seen":"2025-10-13T16:34:16.400436Z","last_seen":"2025-12-11T10:11:07.765074Z","times_seen":974,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/locale/v3/33000002/en-XX.js?etagc=b3db7d87032826cd676b5a8b7d733a24","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3db7d87032826cd676b5a8b7d733a24","sha1":"cab30ad2153b67e099898a3b3f3d477107477669","sha256":"91de51f984622dabb419fd7ffd31a6590375ed2c86939b947cadc298203f0f2a","sha512":"d3dd10b24a25b6e02218c2c0d8d93511c332636bc5d3fac0ef1f2e264a9f42ac79f08ab9f86baf823f0850e7a953038687b3ebf277528bc9fbd8e1e3da0cd3ff","ssdeep":"192:HEe4gfizEuDGK4njE0GyWcTdjTS3HRXFfwf07:HEe1a4n26Tm1fb","tlshash":"3ed195cda8766427d9b6b4ba8d2f5600f460947304d49c74ba8c91ec3fd3495c2b2aea","size":6400,"data":"","first_seen":"2025-10-13T16:34:16.30319Z","last_seen":"2025-12-11T00:38:21.255542Z","times_seen":969,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"e0e41e44c64d75bfe34bfc1cadf63d04","sha1":"a0ed8d154ec8b45e09efb26aa1eabf5cf92b3845","sha256":"ee4a138c979f8889f0366f303f8d144a5c8d3c85990001821173fad6404ba2d1","sha512":"61af9dd7644dba37f24145c477ecd2607278ca2ad0845231fa127e9b5cf83bd789b2f6e5ae45d3b2c7d8458267cfeba69995d25d2fd69d779c891e02a11470db","ssdeep":"","tlshash":"efe026ceb2cbfb1063212221a4bf016a79ba4852c589a8809485b1d13e3996c0676e28","size":321,"data":"","first_seen":"2023-08-13T03:23:56Z","last_seen":"2026-04-15T17:38:47.586777Z","times_seen":3072,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"07f978b69611468461a8db60046c8310","sha1":"fd4e4017f8c5b73d80406e0f86ceb4cade639854","sha256":"658aca0e58b4d6487a329bdbcf211e50a23c6fb1e53fa67780f2b7db0f9dbd61","sha512":"a17cd68c3013041b2ea5cb3b01d86abc37c7ca3c28d92540059f6e383d5aa3f69a0ba5155779e49d75cb4be74d4dae4f120fe44e09a0a186254df650b699dcab","ssdeep":"","tlshash":"e6e0abceb2d2f000cab6e45156bb665bf114e854e00b68f2898776503d69adf41b8f36","size":436,"data":"","first_seen":"2023-05-22T11:20:33Z","last_seen":"2026-04-15T17:38:47.58611Z","times_seen":3073,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"07f978b69611468461a8db60046c8310","sha1":"fd4e4017f8c5b73d80406e0f86ceb4cade639854","sha256":"658aca0e58b4d6487a329bdbcf211e50a23c6fb1e53fa67780f2b7db0f9dbd61","sha512":"a17cd68c3013041b2ea5cb3b01d86abc37c7ca3c28d92540059f6e383d5aa3f69a0ba5155779e49d75cb4be74d4dae4f120fe44e09a0a186254df650b699dcab","ssdeep":"","tlshash":"e6e0abceb2d2f000cab6e45156bb665bf114e854e00b68f2898776503d69adf41b8f36","size":436,"data":"","first_seen":"2023-05-22T11:20:33Z","last_seen":"2026-04-15T17:38:47.58611Z","times_seen":3073,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/locale/v3/33000034/en-XX.js?etagc=c179f8329f4ac94e4e7c7d414162368a","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"c179f8329f4ac94e4e7c7d414162368a","sha1":"fdf524cd3bc9c1f847e4e67b24f22f20827dc078","sha256":"4840cada36f84d552842f954861ead7e6a8931a2165e3abd8f6c3e91e4274eef","sha512":"563316eecb211668fab19f240298a6a03ff060cdf09a917626ffb7779768722a0b2341f7f49753e92a092bb1dce915201ccc53c1178f9faeaac39efffdb8831d","ssdeep":"96:A+zQeDOpqdGWZ/a4kEpti+tIGmMGxWlgn3gRs0WsIJIA96cj/bkS3H3zbhX0Dts9:HEe4gfizEuDGK/nUWTq0j4S3HBXoywfG","tlshash":"7ab1838a6971a027d4f3f5fa9a2f4600f070a82314c58a59f75c21ac3f914d7d2f2ee9","size":5297,"data":"","first_seen":"2025-10-13T16:34:16.523649Z","last_seen":"2026-04-15T17:38:47.46257Z","times_seen":2354,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"721c0d835e1c03126e615e0e151ff01d","sha1":"ac152181ddb3d794ede2de148c958c2b991c1952","sha256":"a0314d2cd24deb33641b661bebc5c1343c1d29adb641f61b703ce37908c64ce1","sha512":"b3013897828a53b421688989fad310a35061774a6d65a2411fa18d0110deade8f62029b1cc8de9d16bd0914d754f2b8473607bfd7035f92996af10878836376a","ssdeep":"","tlshash":"f7c08c4af7f8627b234a70ab0239410300078aeb0e08432872320dd84a171a286a5de8","size":159,"data":"","first_seen":"2024-08-10T09:34:02Z","last_seen":"2026-04-15T17:38:47.599855Z","times_seen":1948,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"e0e41e44c64d75bfe34bfc1cadf63d04","sha1":"a0ed8d154ec8b45e09efb26aa1eabf5cf92b3845","sha256":"ee4a138c979f8889f0366f303f8d144a5c8d3c85990001821173fad6404ba2d1","sha512":"61af9dd7644dba37f24145c477ecd2607278ca2ad0845231fa127e9b5cf83bd789b2f6e5ae45d3b2c7d8458267cfeba69995d25d2fd69d779c891e02a11470db","ssdeep":"","tlshash":"efe026ceb2cbfb1063212221a4bf016a79ba4852c589a8809485b1d13e3996c0676e28","size":321,"data":"","first_seen":"2023-08-13T03:23:56Z","last_seen":"2026-04-15T17:38:47.586777Z","times_seen":3072,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"e0e41e44c64d75bfe34bfc1cadf63d04","sha1":"a0ed8d154ec8b45e09efb26aa1eabf5cf92b3845","sha256":"ee4a138c979f8889f0366f303f8d144a5c8d3c85990001821173fad6404ba2d1","sha512":"61af9dd7644dba37f24145c477ecd2607278ca2ad0845231fa127e9b5cf83bd789b2f6e5ae45d3b2c7d8458267cfeba69995d25d2fd69d779c891e02a11470db","ssdeep":"","tlshash":"efe026ceb2cbfb1063212221a4bf016a79ba4852c589a8809485b1d13e3996c0676e28","size":321,"data":"","first_seen":"2023-08-13T03:23:56Z","last_seen":"2026-04-15T17:38:47.586777Z","times_seen":3072,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/locale/v3/33000010/en-XX.js?etagc=5ead18c6229825d328bbfba73ca0197f","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ead18c6229825d328bbfba73ca0197f","sha1":"48050e10fc7814af2a1a99c04a5ca70c7022d7e7","sha256":"f4f342b2fd8b6351be705cc4b104a7865dd14e30b94a299cfbed394399d87adf","sha512":"ff3294d14c3ae0ea6d563d81b15b0a3104ea31ba6273b715727328110d381e187eb5f095268cdcdd91b893f65f1d2515a5b9502f1aa4be91c9f38c8d3e493d18","ssdeep":"96:A+zQeDOpqdGWZ/a4kEpti+tIGmMGxWl+X6Zy9gR+2WsiJyAH6cjxbkS3HRdbhX0+:HEe4gfizEuDGK5bKWFAijiS3HBXKwwfG","tlshash":"13c1959b7971a417d4b7f4ba8a2f9700f030983308d44959fa4c219c7fd1896c7f2aea","size":5613,"data":"","first_seen":"2025-10-13T16:34:16.462463Z","last_seen":"2026-01-28T08:36:29.742017Z","times_seen":1235,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/online-home/hotel.d72af2b6e1ab15a14e46422965164fe0.js","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"d72af2b6e1ab15a14e46422965164fe0","sha1":"2a8b9b155daaf3dc7dc328c8f29cd54d400523a7","sha256":"d08e1f81d8a0fa3fc556760d70c15b8b32420604b73c03dc072097ad0e57cfda","sha512":"b0d714e440ade8a29bf0a5d742cb3d242fdde3249fe722b2d1a083b44331ab295431ff0234aebdb1ebbcc9877b5ae051751b68f80e682a263cc0617ce0c5c114","ssdeep":"12288:PWcnOG/sww8uwgfAQB96Bx/6+2bPyGPtIpnmuNOIzrYCoLII+:PWcOGv/uwgfAIDPtIpnmuNOIvYCoLII+","tlshash":"8cd429c9b5a1f4a113b354f5803f110af23e3d295409b4a0f3a6ddd57868a8fa227f79","size":650721,"data":"","first_seen":"2025-12-03T08:08:10.109713Z","last_seen":"2025-12-08T09:12:13.26141Z","times_seen":101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"c26c06d295f36a81ff5a5c15d79f20cf","sha1":"58f60096800064d16dddf9c2473d186a269e3c82","sha256":"78d3c8d75495e5c831cef73fcbaf985bd71d00d2a336de0e90bc917053e8e9b9","sha512":"22c596b114b353e73cc0def6030ab5a1f13cabb1201f122e7ced85e9bcbd8f980440f307181a8e2417f81753a7ee5a3d79be252c97c1c64033f9c2b367f13e16","ssdeep":"","tlshash":"a1c08c4ef2f8726b234a306b0235411220078aeb4e0843247a320dd84616162c299dfa","size":159,"data":"","first_seen":"2024-08-10T09:34:02Z","last_seen":"2026-04-15T17:38:47.634795Z","times_seen":2606,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webresource.tripcdn.com/ares2/train/csec/*/default/sec/c-sec.js?v=2025127","fqdn":"webresource.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"5d6db8a514c5e25ba535e9a4414683ec","sha1":"8a8537119a9f8f6cb01003abf154a69c5c873547","sha256":"e82f00cc1fe69d7ea3e7c976e87a9137dc603536ae0407a6b476468586915a86","sha512":"6da3786efdb55606671a9bf6a39867f41cfdbaddf5c7d93c2fa786492ae6eb423e937afafabe809239686add42b8daebfef8153edbaa089dc795e7a1b067811f","ssdeep":"768:3apMGGXTSFKiVwIlcVik9I29urh/ihhYM8dWFN5KaPF3Z/IeyG7bGJDvT:+wWFK9IU9u5IY1K5B/ICbA","tlshash":"248395deb0d2b115133af075107f704bf6baed94250e4841c429d1eaf8b26aa8637df9","size":87754,"data":"","first_seen":"2025-09-13T09:38:08.274511Z","last_seen":"2026-04-15T17:38:47.482629Z","times_seen":2961,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"07f978b69611468461a8db60046c8310","sha1":"fd4e4017f8c5b73d80406e0f86ceb4cade639854","sha256":"658aca0e58b4d6487a329bdbcf211e50a23c6fb1e53fa67780f2b7db0f9dbd61","sha512":"a17cd68c3013041b2ea5cb3b01d86abc37c7ca3c28d92540059f6e383d5aa3f69a0ba5155779e49d75cb4be74d4dae4f120fe44e09a0a186254df650b699dcab","ssdeep":"","tlshash":"e6e0abceb2d2f000cab6e45156bb665bf114e854e00b68f2898776503d69adf41b8f36","size":436,"data":"","first_seen":"2023-05-22T11:20:33Z","last_seen":"2026-04-15T17:38:47.58611Z","times_seen":3073,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/locale/v3/100018131/en-XX.js?etagc=2c86aeba7610937b17a453ad6da4d7f0","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c86aeba7610937b17a453ad6da4d7f0","sha1":"124e0269eec203121a0db858df6110ae23a51e34","sha256":"a11a022db7deb5b27f23f7a2a1d18b54866a7daa978833ad16ba270563d2078d","sha512":"535b3b791ad480caecba08f175914e4d21c01f4f9084faadff9876a4c05f226f9210482b9275e352cc5bcf2371978abbf4145b6d6230a795d9a551fa0dea85a0","ssdeep":"3072:ne49SmXBnCEc/GZlpJYcGMTJmpUryaRfNNX89Jg6:ne49SmRnCL/GZvJYcGMTJmpUryafNX8l","tlshash":"9ac3848fafc4187a07d60953fd8eaf4327e42004f2404b69a57cc6bd36de6d9e9a3644","size":119474,"data":"","first_seen":"2025-12-01T11:09:27.911179Z","last_seen":"2025-12-11T07:28:08.571162Z","times_seen":154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-MV95N9D","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cbb680a64984bcd60253a39f99a290c6","sha1":"f07c2adabdb84a2a076e0d48bf5b99db2914acfb","sha256":"6e97d4606a181ee646c6f9bf197711edb57338aadab0b70f6a6c4265b0fe6551","sha512":"11d48ebcb10509b46b176641ccc736feb23c9b1587ec8c4e84753881dc3d6c27c0931bb47d16d4f84e98c5450fb73f52f1fd09bc651164cdd91aaf4099c060af","ssdeep":"6144:mO/NwxY1nlNjZwEVKQ2b9WSwVWSayql+VD75U6k/bbqt3H3cfjxvxTHiVdT:r/NwC2BjtSwwVDt3c9xM9","tlshash":"7bf41c8f77c4a47ac3a59520a43f454d2a3d10e2b64c5490f0d98ce42e799ba71a3fef","size":737475,"data":"","first_seen":"2025-12-07T03:38:25.940804Z","last_seen":"2025-12-07T03:38:25.940804Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"a0fdac99c50bb540413853385f76c79b","sha1":"a8ab9d664d4d98817ae36139f52af7f34dd6eecb","sha256":"23181a17fe1ede0009ca4fcb94dae11219db4362016e4e6e86f9cefb6bc35902","sha512":"4f3fcb6a083efe8f436683ece74c1f748a4b3d6db16f9b9fbcbf6c3e477b5a09522cc2e3025de82cc870d610ff1bfbf2951f3f85e4fd2a2a5280001881105ba1","ssdeep":"","tlshash":"01e0c0c3972327ee59401c141a3f640374a62c858909f8a35044d162ff0169f53de844","size":367,"data":"","first_seen":"2023-08-24T17:57:45Z","last_seen":"2026-04-15T17:38:47.613773Z","times_seen":1925,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"7666c8e0175732c711e794a42119a56b","sha1":"f44da7e61d1114c7ca25b65075368d86ec4821b6","sha256":"27276d1ceef3d4a746a936a01069e13f90de4c3f5bc22736fa7cf241fb093a94","sha512":"0b198ebebe1ef87fb1740fa594221aff52d9603a508c5500b817a40415f9cb33468bea2da2ba04a569dc0ed33c72454f2c311efcf5e3767d7a79819db7f5f5a3","ssdeep":"","tlshash":"efc08c4af3f8626b334a316b0235511300078afb4e084324b2320ed846261628299de8","size":159,"data":"","first_seen":"2024-07-17T14:06:14Z","last_seen":"2026-04-15T17:38:47.638545Z","times_seen":1937,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"1f4a80de67bd96e5a27d1933ff77387e","sha1":"3e48be0e9e8d61a1709425ffe09f75bd95903054","sha256":"f83760930e42fe100763d395115e0d0dd1082a42910cb6cde74f849c50f11ff6","sha512":"3c036fbcd5110641ff51d69b8f203a40389ae44f20feeba3d06c1b1c94844b1a9d3ecc07c206b69f23edd6758e524388b60268d6d8de4bd4010340bf0a506571","ssdeep":"","tlshash":"0ae0c0c3932327ee59441c141a3f600374a62c858809f8a35044d161ff0169f53ef844","size":367,"data":"","first_seen":"2024-08-10T09:34:03Z","last_seen":"2026-04-15T17:38:47.642459Z","times_seen":1737,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/locale/v3/33000032/en-XX.js?etagc=32a4f615eb07e411f879cd8ee1fe04a6","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"32a4f615eb07e411f879cd8ee1fe04a6","sha1":"6150559a2aa8c7e1d00d0c11c16029bc0d0c3758","sha256":"95883246c8cd236dc36e25572c42a143dd50bd6b00f9749607df8aaf3b8cefc9","sha512":"2b1a7c560abeb8bddbaee88dda15de843cffb20e8769efca002c68fadb78b5c332aca128285cc2d046c6488c125c7173abd7b0bc6993df0084a7bb06aecdf9b3","ssdeep":"96:A+zQeDOpqdGWZ/a4kEpti+tIGmMGxWlCgRGOWsKJaAP6cjVbkS3HZ1bhX0DLs2Sb:HEe4gfizEuDGKwWRYGj2S3HxXCYwf07","tlshash":"42a1845a68729427d4b3f5fa8a2f9700f070a83304d48d59fa8c129c7fd1496d2f2be9","size":5081,"data":"","first_seen":"2025-10-13T16:34:16.589817Z","last_seen":"2026-04-15T17:38:47.518958Z","times_seen":2355,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/locale/v3/6002/en-XX.js?etagc=2a3a8fc84656d6a0da168f4594a80095","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a3a8fc84656d6a0da168f4594a80095","sha1":"71b8d16fa06812f8c2aeec4fd33cc53f6026d805","sha256":"d04ffbe82103496a8736fd9944c7b24c00984a1efe857c7afcbdcb2cb4676082","sha512":"4b919431d0936b10ac8c55ef7699f7ff0bd1bc797f671ee403fd2d8aae04672c33f9f7be7c11f33114693b67d22a7aed46c9c0e1691a76b4a8ae925070bd2dec","ssdeep":"768:ijYESXJn/fOGelJAACNKNm5k4N/i1yhpc2ULj4TIt+UXT7Vl2qTDL:J2Tmg6/tqXjMs+UXTT","tlshash":"2a03452a72c102f4e3f74215f850984776a16a78bcc9278e663ec47b4fd5a0cbdd8d62","size":37876,"data":"","first_seen":"2025-11-17T02:33:01.956042Z","last_seen":"2025-12-15T02:36:48.296325Z","times_seen":504,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"07f978b69611468461a8db60046c8310","sha1":"fd4e4017f8c5b73d80406e0f86ceb4cade639854","sha256":"658aca0e58b4d6487a329bdbcf211e50a23c6fb1e53fa67780f2b7db0f9dbd61","sha512":"a17cd68c3013041b2ea5cb3b01d86abc37c7ca3c28d92540059f6e383d5aa3f69a0ba5155779e49d75cb4be74d4dae4f120fe44e09a0a186254df650b699dcab","ssdeep":"","tlshash":"e6e0abceb2d2f000cab6e45156bb665bf114e854e00b68f2898776503d69adf41b8f36","size":436,"data":"","first_seen":"2023-05-22T11:20:33Z","last_seen":"2026-04-15T17:38:47.58611Z","times_seen":3073,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"7dba096604a805ab76b98262ece99433","sha1":"7f93742be53b2e984a8848941db02b848043536d","sha256":"15fe525c71f32d1869355427b02ce59337412fbf17e38af3fdf324275cc70aed","sha512":"a85915565b8df23659e7073456fae2d74c1c7e422569b7f652d9feb87659d2814f35b0ea46f978bef0134b6a3c3613dfef63baf09a79a56a605cbda663ade358","ssdeep":"","tlshash":"aa51c22adf582890d0f08c3b4c53617073e7f463a2dccee4eb647a61be90a9a88705d5","size":2864,"data":"","first_seen":"2024-08-21T06:36:44.964117Z","last_seen":"2026-04-15T17:38:47.587474Z","times_seen":1958,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"6a88e663c6c443636eabf71f6810207a","sha1":"5314ad71579dafa102f57065efe2513cd4eaad20","sha256":"0234bc8661de949193d1ed8b741c0d1ae98caa88344f100cbe12f8ff1d7975f6","sha512":"06dc17e3a5602f0a4e779f6c727487eef28373d10343c6d532be79a3042eeade9d964aadb780f1ba7e2245337aac848c0494f60e373fd0782389a64e9cdf23a5","ssdeep":"","tlshash":"97e0c0c3932327ee59441c141a3f600374aa3c858809f8a35044d1a1ff1169f53df844","size":366,"data":"","first_seen":"2025-03-02T05:44:43.754934Z","last_seen":"2026-04-15T17:38:47.620053Z","times_seen":1958,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wcs.naver.net/wcslog.js","fqdn":"wcs.naver.net","domain":"naver.net","tld":"net"},"ip":{"addr":"23.36.76.106","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9b9eb9937e6bd4e0f6cca5faabab7a4","sha1":"22f9b44bd2c0d8ff3c17ff33c8b5a35a83ca9bf2","sha256":"f85c25ccd2d895cb838de9fbd7e6a8d7db306a22901a2113cafc22452dae3777","sha512":"66f3be1120228151619cf35efd94da1271b9d32a3d073e8ab9cae0ff52fb29b713eef11b7d3864dbd5469e9ed0003989e1abfb2fd8366822eb5181d8687c3ae6","ssdeep":"384:jb4HoIWdDF+kDW2xR2A0DeTiclCRkoWy0nboOWQSGG4MLRBuiyQmcnS+/PAdwUEu:II5SYnmkyTlGdML+iWc7/PAd84ca","tlshash":"b4d2f99a36125365b6eb20e901ff820b70a196350528c0f4c586e5f1363ce6a53bbffd","size":30044,"data":"","first_seen":"2025-01-10T09:36:48.796157Z","last_seen":"2026-04-15T20:15:04.834919Z","times_seen":9070,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/online-home/aidSid.7a94c0dba7b3199ab7fa8a166f0d362a.js","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a94c0dba7b3199ab7fa8a166f0d362a","sha1":"140d5e0a4f02760218f151ccadab185842a8a96d","sha256":"2c8dbfa8902627b585b93b10456f59ae56db0b54b67378a90f197ad0d8018c78","sha512":"6f2ccb4752016cb6a1e25f1063802d49106f84fa4ac26eeb0f7188d4f4cd7e7bb5f88ab8ace2d5abef68502db113af1cad627f0b7d31c07014cd8bb2d95b625f","ssdeep":"384:B0k1diaQ4yQJhFiFZI/VnRM4qai0pZoo8FIf1r3okSY0zrJsm:H1ca1DjBRM70w5F4+Y0zFsm","tlshash":"3aa2f7ccb5d1f09a13a7a074523f220af2bb78a5640dd840d615daf1be7469f8323e9d","size":22005,"data":"","first_seen":"2025-12-03T08:08:10.114228Z","last_seen":"2025-12-08T09:12:13.22189Z","times_seen":101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"f3553759724b9c88ba24c538055b41fd","sha1":"ff6fa4e0bf94b213d35b258a6fa6b2512d84d11b","sha256":"4118a5c9e4cbaf38b087bd3ba39b91303bb7e3c4c3a01eedcb3e4b94d332a640","sha512":"b8b2052954d0988af8024bd1222cfce5e041725020a041e275bb14ed9c68bd5cb30483306009b859727b389fb890f19b25079af79cb0892699f40444ac599ea6","ssdeep":"","tlshash":"11c08c8af7f8626b239a706f22354102001782eb5e08432472324dd84b17162c2d6de8","size":161,"data":"","first_seen":"2023-12-04T03:22:05Z","last_seen":"2026-04-15T17:38:47.5971Z","times_seen":1529,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"87a939514851b22caa9e7eaa86858738","sha1":"639fcfc7c983eece0999ced245e0781d465cbf7d","sha256":"f8e84fadaeaeba236fe1dee4416532a4123ccaacff7abb76db8b71af27dcf979","sha512":"fe28cc825f7c6d72eeca05f8bef824dcbff0c2c6027381989802447021b5d0e2da9cec5615b016c5fa1fb45745aab7c93193737ae1058d6b9e68e61fa0989c0e","ssdeep":"","tlshash":"cdc012e27141887a691a841f5a63376525487b56aa813203520201247491d43a405789","size":170,"data":"","first_seen":"2025-08-26T03:41:13.646528Z","last_seen":"2026-04-15T15:40:01.341742Z","times_seen":2433,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"e0e41e44c64d75bfe34bfc1cadf63d04","sha1":"a0ed8d154ec8b45e09efb26aa1eabf5cf92b3845","sha256":"ee4a138c979f8889f0366f303f8d144a5c8d3c85990001821173fad6404ba2d1","sha512":"61af9dd7644dba37f24145c477ecd2607278ca2ad0845231fa127e9b5cf83bd789b2f6e5ae45d3b2c7d8458267cfeba69995d25d2fd69d779c891e02a11470db","ssdeep":"","tlshash":"efe026ceb2cbfb1063212221a4bf016a79ba4852c589a8809485b1d13e3996c0676e28","size":321,"data":"","first_seen":"2023-08-13T03:23:56Z","last_seen":"2026-04-15T17:38:47.586777Z","times_seen":3072,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/locale/v3/100052930/en-XX.js?etagc=fd3af4f1930a38efe55f36616e2a80da","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"fd3af4f1930a38efe55f36616e2a80da","sha1":"59aea4be33329a77017890bc68d1d2bb70bc4a1e","sha256":"391230908bd2c7a9f89af7722bbac0a4b8290d146b8924f75a33752e1e388b91","sha512":"07490356ef61febbf19ae27edd868c8ba53f75b49f6ef3b04fb49a4acbf89babb8c9eddd728d312b9d7ba957e9cdd6b25599b6632e9f0e39fa36bcf6c9208879","ssdeep":"768:y/n9O0e2VyiduDcIpHfjjw9eVQPYpbjUavwBKhsfR:Infe2VyiduD5pHfjUUSPubQavwchs5","tlshash":"b8f22b0975e01e3adfc203b1f89a178b69b25339329b24fdf9bdd038e6e0658191756c","size":35778,"data":"","first_seen":"2025-11-17T08:09:13.112364Z","last_seen":"2025-12-11T00:38:21.127145Z","times_seen":459,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/basebiz/ipoll-online-sdk/index.ebc5d439ea8db69057264a878b3a35a6.js","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"ebc5d439ea8db69057264a878b3a35a6","sha1":"707c3eab4dd84c19c60b7057a6dfe793f7f43bba","sha256":"fddffda12b9a574412160a2c7d33945d2c5eab06f7e6a18aa9b66cfe88a81207","sha512":"1ac46689ae43154aea928c007d13bb64ac33a8d86faa6bfa13fbb37b1afd6c5d3c747b2debbcca34c59c4d0ae85456ac8c52ebab896fd2125c4a7a027e51b8fa","ssdeep":"3072:POjhKd3tX8o0Tv/ibqlE70iJvZHxcaNgfDTEF:PO0d3tjsimgnN0k","tlshash":"e71429d93992f42157f321b7106f1407b33d291b680c8950e216eddab8f945ea23bfad","size":207579,"data":"","first_seen":"2023-05-22T11:20:32Z","last_seen":"2026-04-15T17:38:47.498764Z","times_seen":2996,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"3042021a0c26d18de62c58d5d2659f32","sha1":"f01680372802a0cc22c4d331673c37581245b5e8","sha256":"4de357ac236cc153ade1700b3dcad12a190ae1466fae73b816c56dc44a699b26","sha512":"51f54f291140ae7daabb445f0d14ce409f275168b9dbda78981959d2ef2d44eb93127b472aa34443b9a1e43a5182623ee964946b2d36f06c22dd2b79d048809a","ssdeep":"","tlshash":"c4b0124df3aa72b34356705f123572d7116704b3d8148b18b2b58ad4251a26d91badfc","size":112,"data":"","first_seen":"2023-08-13T03:23:55Z","last_seen":"2026-04-15T17:38:47.598474Z","times_seen":1987,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"e42f4271cfdca69b7bd7d54d7f7892a6","sha1":"4d6066b20d308c0668b0b027c06a54af175905ec","sha256":"d1b062207ddc3e4587d76df54ff8a67c5b20a299db844d54a5b429b1bd963f60","sha512":"7df99fa15ac1745b2653bf83b324c999585374e2842e597e113659ac0b8908b8ba11f5af9b08601b9adb77616f5a64c0491c553419a45bbe7b6e0e07b73ecbc6","ssdeep":"","tlshash":"c5b0124df3aa72a34346715f123562e7116b04b3d9148b18b2758ad8211a16d417adfc","size":112,"data":"","first_seen":"2023-08-24T17:57:44Z","last_seen":"2026-04-15T17:38:47.594687Z","times_seen":1790,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"c09fc78d0166f27cfc7ca1be028812ac","sha1":"80018627955ee45f5eeda52809e3b517e6446fc0","sha256":"5033417857893c01012ec0e4a26bee1206f0a0d196380b01e6ad3e1828ddc8fe","sha512":"c7a6571370a4f2bbbc9041ffa28729200387d37c19efe2ec8681a807a533ec8af2f9bfe1a3130a6f207e1149c2888716fecaa13abd665d96535d1fdf1639112a","ssdeep":"","tlshash":"00e061cdb2d2b000db76d45056fb6667f114f454a41b18b4944371503d695de4179f35","size":392,"data":"","first_seen":"2023-05-22T11:20:33Z","last_seen":"2026-04-15T13:34:06.103983Z","times_seen":2371,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"b51a9c929a186b8263b5911684fd6cde","sha1":"ae3185e2135410669f5bd8183c292cac89d7f023","sha256":"03c73d23163d5ed381fbaef6041e4723fb77e89cac87df0e32da1352399bf4a0","sha512":"9b39f987e0a7294583097d57208157b670aaa066465d8dcf77ac6d6a3ab3094ed5cfa28755bd16adac8ffa3783aa372e2d6d4110cba92047e957d3abb11ca91c","ssdeep":"","tlshash":"6611447c38e77808d60edafe766fc78d20b674125a84cd908149c0a8e519f8800d177c","size":887,"data":"","first_seen":"2024-07-17T14:06:12Z","last_seen":"2025-12-17T21:12:26.824978Z","times_seen":1350,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/locale/v3/33000001/en-XX.js?etagc=f6205428e2d9913ae4cfb4be96594b08","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6205428e2d9913ae4cfb4be96594b08","sha1":"eb48a75280ed8b2178728c4b9df7be184754a4ec","sha256":"75605e22ae85ce50b8c4848cada226d8b8ba028cbb9a3ea717d06c5f46a66527","sha512":"2c02904cbb0419c7dd7a43bb4a05e797e7acdd85da9c8c6495549d20b3ad818eb2ca2dd1a6e1192526557cadfcfff5e49f1f7a69a64828279f9cd97cd35823d7","ssdeep":"192:HEe4gfizEuDGKhq8SNojN94dvFlKufw9/44lTFmcPVOWbakjIS3HhXAGwf07:HEe1ab7X41+/TFm4rIWwGb","tlshash":"f402e88a74a1a877cbb5b0e5a81f0d0f60b565a334c18f68f59c91fc2bd3542c2a1db7","size":8820,"data":"","first_seen":"2025-10-14T14:36:34.729542Z","last_seen":"2025-12-17T08:17:11.306197Z","times_seen":1019,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s.tripcdn.com/modules/ibu/online-assets/pwa-plugin.3604c5b57f580e83dcf1bb65c931c4ba.js?from=plugin\u0026scope=global","fqdn":"ak-s.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"3604c5b57f580e83dcf1bb65c931c4ba","sha1":"25ed52d80ddce7c94d2f9e644721843611b72268","sha256":"48e31ba91a6ec3995bc13777f82e14ebfff46d7bc9d67149d13a850c7d9cc65f","sha512":"8edd16e7e04cddd2d62ca42eb70b1f47686c898683889d9c04f2d2db7f303b609c210a9b144a77816983084cf0e3adffe19f2e7004dbd76900a9430fa95e8123","ssdeep":"384:qjbLk2I/phm6CZPQKQYQgQyQ4Qo31XdMU/sdv0deT+mdyi/zgCCkR/wLC28wrJea:mXO/pc6CJBZd5xZxR/gQeiXiUCCkqC2x","tlshash":"bfa21999b1caf73a83e950a6007f6a06b2bd0916710cc044f18589d67cede0b9173fbe","size":22696,"data":"","first_seen":"2024-12-25T08:05:20.301452Z","last_seen":"2026-04-15T17:38:47.515447Z","times_seen":3054,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/ibu-public-component-umd/production.min.e60ad7659c4307455a5d16ce5eb7707d.js","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"e60ad7659c4307455a5d16ce5eb7707d","sha1":"9a307f30cb115615d62f58d5dc46bcda59bf6a2b","sha256":"493a60a7c7122a8c5cdeaef4ab3e2cdb58e1fbdcd4fb7be2c2b5b9b22312e699","sha512":"efc6f0afc64ab57433acc23d385f3fadeb3b22204a2d526f5d3af12a7013a4b4fb8d6149bca1fdf4bfcb2857cf832adef225993bff271b6e10c860d378b0a4b6","ssdeep":"","tlshash":"90617338321077b112939091167fc20af4756072a1fa6480b27ec9f5afb8cc994e2f3a","size":3339,"data":"","first_seen":"2025-07-01T08:09:14.330709Z","last_seen":"2026-04-15T17:38:47.427806Z","times_seen":2942,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"1490ae6f70f3a8ba201d50d84659bfc4","sha1":"ce39a99bba232cb21ded6eef89b2016d539b1ff8","sha256":"5408f2a7e41ffee3c06b3ea974f28bf448881825f2f4d8fa6ec2903929b6ddb5","sha512":"217f64ebd5fb2012c4d989ec4e022ae0c583a0b7583f19d269f55799b356e54eec06b5172958efb5e18e4894eeecb531661bb440d49d4f73e9ac04e12d127c29","ssdeep":"","tlshash":"86a0241147f4c40104c43540514037070d4110fd3fdd4cd1d05c57cc74013733110013","size":80,"data":"","first_seen":"2025-08-08T21:12:18.88937Z","last_seen":"2026-04-14T23:07:50.242569Z","times_seen":1523,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"80440bd95f51e4f8dd7bc62bb5dc0ce4","sha1":"e9afc495f1a0d941b4c1466c4eec6c8674f9d225","sha256":"169107f2d5056eb1b6716b7a64c3a21da57bb9975a9908e86aa86165e7172d11","sha512":"35271b52c6cde01551c9b0f948857efdafa8dfb98490385e05bcc497b42b902885029e777802277b591eb8ccc075c0abb28d2319eed648f1d643ae3f7f6404da","ssdeep":"768:oPK4XVbL2syUurqWPwxPpw1jSCQV0URQj:kK4XVbL2syUnNR0","tlshash":"0413979f93c5ac3bcf9971c3618b682efe9db037c0b5dc60e2a85e1802f6ad5911905d","size":41490,"data":"","first_seen":"2025-12-07T03:38:26.26111Z","last_seen":"2025-12-07T03:38:26.26111Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/ibu-public-component-umd/production.min.ad8f8f8f0b6573ad6946b2b8339633cd.js","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"ad8f8f8f0b6573ad6946b2b8339633cd","sha1":"812ae0c92d746866a1fff918eb12cc66c2e804c4","sha256":"58227c5a3c03e9fcda77012de872c7ca9624992d53921a4456b1ed9db0e8ba5a","sha512":"30b3132a4e619b90ad0d55b32995edd93144d7a44490b1b5b1169b49a52284846263bfadbbdc4d0d90e14721a3f8216eafa52087a7caedc0199d894ee6861a6d","ssdeep":"768:xBmOE7yU+0SXO/ppSfnGRNfCDF9IHA9BJhhu9CX6p7uVBOGQoTumoH0UhYopnA3F:DmOEeU+QpK80ThqOmd8oVe0WuTuDuA","tlshash":"26a3e688b692f0b596e261e5402f410bf23e193aa45d9490e295d9f17cfcd8f8137f2e","size":98694,"data":"","first_seen":"2025-07-01T08:09:14.239788Z","last_seen":"2026-04-15T17:38:47.55025Z","times_seen":2924,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/locale/v3/6001/en-XX.js?etagc=a924a949b52b7efe31fb9abda03c329f","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"a924a949b52b7efe31fb9abda03c329f","sha1":"7e5af9abd80efbd7de42d9786575d7b623d67030","sha256":"fc010ed3a9c5ac8707e1ea983af2568c30461bb7943fcc4e243eb8e9f04a3467","sha512":"bfc91d5871a7e3e3e898101ab4057954b048c8af5a0e4301216517da9e0d1b6dc7500a0aeb6cedc385d9da6b8c8c3da820c2fcbc68fa00b866a83a79d5fb00ca","ssdeep":"","tlshash":"2921af18ac322472e8b3e5faa22f575821344b1304950299bac52add79520e760f3ed1","size":1322,"data":"","first_seen":"2025-09-04T14:38:39.147525Z","last_seen":"2026-04-15T17:38:47.552084Z","times_seen":2512,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"07f978b69611468461a8db60046c8310","sha1":"fd4e4017f8c5b73d80406e0f86ceb4cade639854","sha256":"658aca0e58b4d6487a329bdbcf211e50a23c6fb1e53fa67780f2b7db0f9dbd61","sha512":"a17cd68c3013041b2ea5cb3b01d86abc37c7ca3c28d92540059f6e383d5aa3f69a0ba5155779e49d75cb4be74d4dae4f120fe44e09a0a186254df650b699dcab","ssdeep":"","tlshash":"e6e0abceb2d2f000cab6e45156bb665bf114e854e00b68f2898776503d69adf41b8f36","size":436,"data":"","first_seen":"2023-05-22T11:20:33Z","last_seen":"2026-04-15T17:38:47.58611Z","times_seen":3073,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"c1536de7a2342eb7c2e3b75cdae5f382","sha1":"a99b9717950168026ad22f615096f97ce7e48557","sha256":"96c8ed23175ecd8176c426b5669d8b303f727cb900b1e47a87d086ff40f4c3b7","sha512":"30a3a03dfd1ebbfea6d98a41913973fa93164fcc8e07e2622beffb46334c548299e0e2a87a24a4a9f0e1c09dce120f92bd857307476c3b74a91f2fa9c9ba89c4","ssdeep":"96:je3i0RYvZrIFfjgYHySMS+cpxIgFif9SDfLDB5VV7SAEkZngraoXyJr0lfmVu78f:K3upIFLQatQ2VcSBB8wiDvY","tlshash":"37e1aaa797fec4459a882894aa9870490cc121bf5fded9e5d0acdfcc3826bfb7550047","size":7288,"data":"","first_seen":"2025-12-05T07:20:42.428691Z","last_seen":"2025-12-08T09:12:13.325132Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"8dea21817ed56d00abb8846dc4e0fe48","sha1":"6be7bb99eae60dbc33486546405e5d958b452224","sha256":"2dbea92d374f980c7fce5ef3ac9db6289cf6d288a30d1d2d01a06b1a63945bf0","sha512":"d7847b2ea8986747262c32b7ab538146dc3b39cd8825fe372203d80f475a2756b2afb71f36b9affdcd4f94f79d1341203bf98a71f7254eebf61bd7ddb349c707","ssdeep":"","tlshash":"4dc08c4ef3f8a26b634e306f02356112100787eb0e08432472320ed8861a1628295dec","size":157,"data":"","first_seen":"2025-03-02T05:44:43.815446Z","last_seen":"2026-04-15T17:38:47.606927Z","times_seen":1972,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"089f8becea5a1467a8cc92f64c5e0c34","sha1":"4cbe0f16bc57ecc69b977a53512ec8414cea3771","sha256":"453abf2abcf657397c623cbce1f5756aa622a1ff9affd501ef59bcff9ee19dfb","sha512":"b14064d218db3ecc2c6eb221442a85cf93f901d3421833f79c0abf8029f1fa3451f216554780174f8a3050232cf7730a955cbe5a730aa1aa04c86a9c70333d37","ssdeep":"","tlshash":"acb0124df3ae72a3434a705f123562d6116704b3d8088b18b2758ad4211a56d417adfc","size":112,"data":"","first_seen":"2023-08-13T03:23:56Z","last_seen":"2026-04-15T17:38:47.631092Z","times_seen":1984,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"7ab4bf9ecd34ede73fe8f1f30239a5e8","sha1":"85f80882849f7211c77237babc64c903a0c10cd0","sha256":"ce7c38f6cc5896f2d24d555883c342aa168dd533fa83c73fe9ba6c1f1935ce13","sha512":"b5642add612aec76da770efa97b27b07783c5768c7d8a974aa37bed28610406d31a82e0af1be046fb8723a7f4e867dfcf8c612abe055ef2ee137fff3789b9529","ssdeep":"","tlshash":"17e0c6c3932327ee5a401c181b3fa00378aa2c85880af8a3a044d1a2ff0169f63ee844","size":367,"data":"","first_seen":"2024-08-10T09:34:03Z","last_seen":"2026-04-15T17:38:47.626388Z","times_seen":1935,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"8b1362a2b8572c471dc6651b05f748b8","sha1":"107187d7d0fc2ea0e6c16849d6634b6e847ab33d","sha256":"98266466259b37234d42b24fdb67bf9d8c545a3d38660b5ce78c4d63065fa3e6","sha512":"8d9e73de7b116dbdb922217a5012b593611d49959d400ed7cad56ea6179bf04537b009184e0edd4276e0e7af771142e7bbaa11e4cce77ecf87c80ef5c39297b6","ssdeep":"","tlshash":"36e0c0c3932327ee59441c141a3fa00374a62c858809f8a35044d162ff0169f53de844","size":367,"data":"","first_seen":"2024-07-17T14:06:14Z","last_seen":"2026-04-15T17:38:47.631829Z","times_seen":1916,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"7539c07a9dd61da30ce9ca942f6ae0c0","sha1":"b307dea827dfdf1469cb814120bcffa171e58e35","sha256":"9e58323a991d99f7f2994165979a0968c1b23883f757cf0a5c1e13ed7ef399f4","sha512":"3556d06da82bd3eaadff2713fdacebf24e2ce430acafed53b3d975c9c0af32905c9d25fc769446d1fc53026c9db2db2d6f75f007ca432c2d77c09a85144e7284","ssdeep":"","tlshash":"a7c08c4af3f8626b334e30af0239510200078aeb0e08432472320dd88a1a1a282a9de8","size":159,"data":"","first_seen":"2024-08-10T09:34:02Z","last_seen":"2026-04-15T17:38:47.60194Z","times_seen":2223,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"7a3bbec75164a20f27892a229ac2b7c2","sha1":"90b7a25446dddc3b6fc6e1c1cc2299c1241fd829","sha256":"b910fdec50231c953da8e0a12a246bc5159e748bcc93274f10d6e59467f55d38","sha512":"471844f6670366c687d26980afcdcba65cc6423c8af25b6b7bc3c9d991a17234bb4b6e22a6bc00b6f7a3dc7121bbb39688995513feed36d65748076ebdc97dcd","ssdeep":"","tlshash":"9b90027d70d5b4751601621489264005627559d29b0660154d450645296c54b427579c","size":54,"data":"","first_seen":"2023-03-07T21:21:43Z","last_seen":"2026-04-15T18:22:01.495829Z","times_seen":2843,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/locale/v3/100015469/en-XX.js?etagc=ac6182eaf6fe7b9a2c46ecdb63b69612","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"ac6182eaf6fe7b9a2c46ecdb63b69612","sha1":"d05b235af1472a3a5898819fda2d7f3dac403877","sha256":"16ddb9a49bf6624d8e2514ce2fca4cbc9dde9e4d42b94528916ee594c5c21021","sha512":"0e56e0588ec44ba9128d944d3cf50d698f8b19280055f7e94e580f3700a7fe0426c3985346971a83b17eceeaf4f67b7e67aafaa999f2a80d07d94b20322875b0","ssdeep":"3072:x9nV9NyPoSd2tz/kSVyOckLKnRj4mxKVqJMqb78yzvVOv:xbaui4mktz","tlshash":"d4b3840ea6d425f30fd50521fc5babab32960054af90988d8abcd07d37f2b957fa3560","size":107464,"data":"","first_seen":"2025-11-24T06:32:04.064504Z","last_seen":"2025-12-07T23:38:01.311226Z","times_seen":321,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/online-home/l10n.3655b329d9dec8fa96837e71abc5f2ac.js","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"3655b329d9dec8fa96837e71abc5f2ac","sha1":"a10ecc77e0ed2c507cb75fd4f813ead4ed02d6eb","sha256":"f061db128cf0ffd7aefc34a7f70954c706c3f24929e24bfc5747649f933cc24e","sha512":"a03ef00d17274a111df2200cbee4810fe820635a67198d65b3987ecdfc7257bf5845a7097d07b440186cb839d47b1d4a131a130ac2045691df0ecb3d13d3df97","ssdeep":"768:HGjXOLz0+0yVsab3C59bBOSjL41ZE0mZmDk2sv3WPiEa102A8XJESO:mjs0Gsab3AOSS3jDx2IiEC02AiO","tlshash":"9763d5ce3586b01257b626b5082f050bf33e9995684e4e0cf118d9e9783dc6e917bfb8","size":66855,"data":"","first_seen":"2025-12-03T08:08:10.069762Z","last_seen":"2025-12-08T09:12:13.260836Z","times_seen":101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"4d9a128ba64ca378bab6ac25b68023ba","sha1":"4fb4ba23cac79f2094a5677f36cf30e762ad16ac","sha256":"f1966a140bc09c3a153ee9f72169d15707d2da6c9976cfc0a8ac79e42c0a84ad","sha512":"d8c8e27675911088578204245b87e4e05afb00e1e926edd1cec803c8c883de2e7ce8771357f6f0287dea774a5c1e448efb62c42e2d857a03fe2310588d42f594","ssdeep":"","tlshash":"e8c08c4af3f8626b234a306b123541020007cafb0e08432472728dd8461616282a5de9","size":159,"data":"","first_seen":"2025-03-02T05:44:43.814331Z","last_seen":"2026-04-15T17:38:47.592737Z","times_seen":2686,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webresource.tripcdn.com/resaresenglish/risk/ubtrms/dist/rms.051e0d85.js","fqdn":"webresource.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"051e0d8593307cbb3e56220a460e153f","sha1":"11a4867b1adca9d9e2418d1f7f4a20d85b880653","sha256":"3b6dadc4f4a00dd9c3741e94f62efc4782f5d328ccf6efe012a1b9538485bd11","sha512":"e78a0d7804729fd1eeafbf75aa30476fafcf450e215b9abbc7efc1b661b9621db602cc3ec381a8eecff81fa7f066afe34824610c09a279de4b66ec73772332f4","ssdeep":"192:yHY5t4AGHYHMK57xGTV1SSJPv4/8aDT189Nkv9WuAJiVSZ/kXY3:oLYHJRxmb5Pwkav+jkvQu7VSZsw","tlshash":"4222faa4324198f1b8b724b26b7fe601333737a168465464ab1485777c6fb4b8027eec","size":10342,"data":"","first_seen":"2025-11-25T14:10:16.302863Z","last_seen":"2025-12-30T10:55:05.269538Z","times_seen":332,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/locale/v3/330153/en-XX.js?etagc=c00f3a95ed92b69fe7b16389b59faee4","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"c00f3a95ed92b69fe7b16389b59faee4","sha1":"c71f62fa77ac9c7be883da495b8f77dbcdcfc91a","sha256":"066443ee681f3e6c575e9ea9a26671acabd5156043f3d340833e78de09ec18ca","sha512":"37851d09d0ea70ac0bca81f557bd1de5657cf9a4dc19d8ee2f65ff96893541e261b31cdbaadb5a1f3ab1b265848f6b1034cd08bc28a3b0b9d301d5d840601d81","ssdeep":"768:yABQN9ufzLZN6P3f32MXpPrmGbI/fIPhov2NJxZLDiO6s9:fC7ufzla3f2M5PrmGE/gPhFRMC","tlshash":"4033d50ab6f53a321bd11165fcaba80522e0444a1ec55c69e9fcd8bc33d4bddbd2724e","size":53332,"data":"","first_seen":"2025-11-25T09:36:21.079853Z","last_seen":"2025-12-11T10:11:07.775138Z","times_seen":318,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"6ea7761586fc59c301e3bc6fb6a1cf55","sha1":"16d0885db8e2b2aaafc87f5b535acdcf0c74cbca","sha256":"d6ce706f3ca85c67f43e4081c76232d46c2bab5e202c9530e4c44c6ef13cd30b","sha512":"962d610b3d441ecad439fd9acd80a5bd543a617e0315eb33e3bc13124c199b504fca596da08f4ed6ca085a874ff9684580afe13430c83d981bea29413fc3ffc5","ssdeep":"","tlshash":"95b0121df2a472630707301f117641222157458209c8971871a589d14d1a1dc40b5fd8","size":106,"data":"","first_seen":"2025-06-30T09:07:33.685231Z","last_seen":"2026-04-15T17:38:47.616561Z","times_seen":1941,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"ebb0edb2555e6a39c8c1a35594e7cded","sha1":"27daa6ecf9fc6f54251c7157193e29f2f17406eb","sha256":"b46415c073fe56511f77c96e5c8a651dfcbd6246a7f5f00ea95a639de1450073","sha512":"7aa2e9d1616ca3adac2c466a26c0481d8a4a92e66ac8cf9018224c858a7b376c1e050582cde5278c5db1f4d857e1fcc5389d0dc94721275b862ccb6cb86ff5bd","ssdeep":"","tlshash":"f9c08c4af3f8a26b234e306f0a75411700478aeb0e488324b2320dd84b1a1628299de8","size":159,"data":"","first_seen":"2024-08-10T09:34:02Z","last_seen":"2026-04-15T17:38:47.592081Z","times_seen":2324,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"e0e41e44c64d75bfe34bfc1cadf63d04","sha1":"a0ed8d154ec8b45e09efb26aa1eabf5cf92b3845","sha256":"ee4a138c979f8889f0366f303f8d144a5c8d3c85990001821173fad6404ba2d1","sha512":"61af9dd7644dba37f24145c477ecd2607278ca2ad0845231fa127e9b5cf83bd789b2f6e5ae45d3b2c7d8458267cfeba69995d25d2fd69d779c891e02a11470db","ssdeep":"","tlshash":"efe026ceb2cbfb1063212221a4bf016a79ba4852c589a8809485b1d13e3996c0676e28","size":321,"data":"","first_seen":"2023-08-13T03:23:56Z","last_seen":"2026-04-15T17:38:47.586777Z","times_seen":3072,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"29a026fb114812404b6139ec2a7550f6","sha1":"75aab9fdbdbeb28a43eaa5690b68ef6879f17e7f","sha256":"097d30409883293210998d4a8455c5faac8784d87c4b49363dece37895414a8c","sha512":"7375e230a941e662cee10956e906be63c2fda124137ae1e21cdb450751dc12925e8fe6259dfc7144c2a955815203d315c4d126a550aadab0773e5af403f38933","ssdeep":"","tlshash":"6511146d38e76808d60e9bfa355f978d20b7b8155d41cd90c189c4e4a555fc800a1bbc","size":926,"data":"","first_seen":"2025-06-25T16:34:08.682163Z","last_seen":"2025-12-17T21:12:26.802427Z","times_seen":1329,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"07f978b69611468461a8db60046c8310","sha1":"fd4e4017f8c5b73d80406e0f86ceb4cade639854","sha256":"658aca0e58b4d6487a329bdbcf211e50a23c6fb1e53fa67780f2b7db0f9dbd61","sha512":"a17cd68c3013041b2ea5cb3b01d86abc37c7ca3c28d92540059f6e383d5aa3f69a0ba5155779e49d75cb4be74d4dae4f120fe44e09a0a186254df650b699dcab","ssdeep":"","tlshash":"e6e0abceb2d2f000cab6e45156bb665bf114e854e00b68f2898776503d69adf41b8f36","size":436,"data":"","first_seen":"2023-05-22T11:20:33Z","last_seen":"2026-04-15T17:38:47.58611Z","times_seen":3073,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webresource.tripcdn.com/resaresenglish/risk/ubtrms/dist/d.min.9dc5ef39.js","fqdn":"webresource.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"9dc5ef394b8a6f3ba7ce96f0f58c315f","sha1":"9e50b5761a522b9028d9fb895e2b39e5e1316714","sha256":"5f2c53ec2e6d33fa57c7f9123c6aa333fc6cf9801f635d3d4670f47a4b36d9e9","sha512":"ddf6e99e0d424f81d3999f571ae0d38b1d6b418f0886e6b4f8943ca81dbd66b0ce9207d1106588f5ac9d4120c2d5bdaff862929edf2a70bd4b07bdae6e9295c3","ssdeep":"1536:YwvQyq0YSCpnTqxHwmMNegSnZ4A/w223BcH+:YwvQyxFCpTqxnMNegKW3Bce","tlshash":"03834cd5730ba8364ff362e9242b5484307a638f3d4988c9fc55889069b0e6f5267ff9","size":81791,"data":"","first_seen":"2025-11-25T14:10:16.26654Z","last_seen":"2026-02-01T16:36:12.288379Z","times_seen":576,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/locale/v3/33000018/en-XX.js?etagc=05878ee507e48a0e965e9edd69be8968","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"05878ee507e48a0e965e9edd69be8968","sha1":"dfe082b5599e62c055220bc596a75f18bb561de8","sha256":"dbfd757035346997f3fd9917e6e9843037e0cba393c572a17a9dfd72961f4bd2","sha512":"63d6d70a6cce9569e0382f9974a87232a4ad931bda452e3ba3f1de73d4bf156776ed555f4bbc8c11b00a04a16b6c3d3fede2bf56ac3dc9f0afa05429256a9fe7","ssdeep":"96:A+zQeDOpqdGWZ/a4kEpti+tIGmMGxWlhbgRmuWsqJ6Av6cjpbkS3HJk2bhX0Dnsz:HEe4gfizEuDGKhWNoajaS3HOyXiowf07","tlshash":"ecc1b5453971e42b95f3e5f6d61f5601f031a82308884d5af75c91ac3fd04d392b6be9","size":5959,"data":"","first_seen":"2025-10-13T16:34:16.439783Z","last_seen":"2026-04-15T17:38:47.542786Z","times_seen":2355,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/online-home/poisearch.3516f34ef8dfba711096cd4ea134fd56.js","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"3516f34ef8dfba711096cd4ea134fd56","sha1":"43fcf16672add688ce98fd3e30bd860258855a1b","sha256":"66757662122b55f15d2f0bf06a12b5c0fd5faede72cdd068b451acc53ac290c5","sha512":"d02a7906e612610e5c36810f82c2d4fbeb474d8000676b333da852f7c46b3acd852c99f39e5a6119a56c0c8aef6b0d66e349321878ec5ed36016faa7f6d95a62","ssdeep":"1536:N1hB0S8PHrF5sflUkQmtRm7zmTmJeoNqXjxu:38PHLsNURmto7a2","tlshash":"fe73d7cd3ec6f0a542f36163802f5106f2be1a65680d9c51ea11e5e06cb6d8fd23bf99","size":77743,"data":"","first_seen":"2025-12-03T08:08:10.064541Z","last_seen":"2025-12-08T09:12:13.175086Z","times_seen":101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/online-home/onlineGotop.d862412ff5b5e88b8a50c8750bdb34f9.js","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"d862412ff5b5e88b8a50c8750bdb34f9","sha1":"fcec2ef5b26d6c338437ab70ebd986d82b11b4c7","sha256":"a73956cb25c8c11995dd8c72dc767838dd0edace80de2f1e2ea6dbcfd7d33c83","sha512":"533a2bca770bda5a8d533196904710b3c5b30cf9eb2f3f8ddda9897f3e3b3399c298866a3e719899b3846e26f4e3475c648b016d159ef2d152b5bf381b2747b1","ssdeep":"6144:FjrIOnjPYICPoMpVfWBjhizT0fQSwn1zBKTIo5ZEJFvw5:Fjkui30fQln1EhZOvw5","tlshash":"02a41a59b151743906d6406a902f150bf3362a2d346ac45cb368e4efbcbcece317ab79","size":469869,"data":"","first_seen":"2025-12-03T08:08:10.027919Z","last_seen":"2025-12-08T09:12:13.10738Z","times_seen":101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/locale/v3/100009239/en-XX.js?etagc=91e510d1c5ecce127c4e5f93f55a0d3c","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"91e510d1c5ecce127c4e5f93f55a0d3c","sha1":"f826f161efb412e6986dd80e446467f273fc1281","sha256":"f982fd96153837effaf842c81915edc63d0323e15f9a5a612d65c1eca745bb26","sha512":"081382d03203eac34688b7f4584f864267fa57907bfbf983f4913283a3afb74236bd1d653097f15b44852af626e9359f3e96114f1fe67ca3c0308e4b8edb23c0","ssdeep":"384:HEe1aS4Z1ojIRfCRIH0Ppgnyc3Pm17SJQpDb:yp1ogfYVcwN","tlshash":"bf62c58d64ae7c7bdbb474a0bcab0d0a28b405a170818ebcb5ecd8bc17c7645d522d77","size":15818,"data":"","first_seen":"2025-11-08T09:35:25.205372Z","last_seen":"2025-12-12T06:07:22.885804Z","times_seen":629,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webresource.tripcdn.com/ares2/risk/ubtrms/*/default/rms.js?v=2025127","fqdn":"webresource.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"a3c4a6905bae26dfa2b9cb3ffea5a86a","sha1":"2fda961fa045ce0d40cf4fd3725ed44a6db051a4","sha256":"791d8ce3f0202f65a649c752c9f8e6500df4550306276af72a51d3d5c69e6a14","sha512":"498ad62666616889ffa1197adc61c4313495301350aaf10f61a73d4e7358725f5303085047c30e52d38e66e1db9e5694ffee08d221eb227692d3235eed0ef5dd","ssdeep":"","tlshash":"66e07d0d3c55d8244ba2307aa17fe90872262ab49801c040e0dbccc83d38fc7e80ce8c","size":353,"data":"","first_seen":"2025-11-25T14:10:16.227466Z","last_seen":"2025-12-30T10:55:05.314828Z","times_seen":332,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"143fa863764a77397e47e298ade7b096","sha1":"7cbc3777d713d85bac1580a675619d5b27c7df1c","sha256":"835899c42b81c8ac96cdfe435973ce4a2a2be7b1308b89ea03f666199de3a458","sha512":"bbf24d3243a1e5a74faa2638e72be26487ff047736dc5ae04e991f7c0b91477dea4dbd603c75888184ae9aa2489388121c0c01f77aa3fc7b6ffe6629195c35f2","ssdeep":"","tlshash":"46c08c4af2f8626b234a306b0235510210478aeb0e0843247a720dd84716162c299dfa","size":159,"data":"","first_seen":"2024-08-10T09:34:02Z","last_seen":"2026-04-15T17:38:47.634096Z","times_seen":2537,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"0a19ee0958f5a1f24b3c9739f297095a","sha1":"e82a1e88018878c93cde3feff823aa388083c509","sha256":"5f7edbafc51c097494611c4198dd1613b3c7d00914b8e08d1afcc64e96a8ad21","sha512":"c107648cc16010bf4d1b550b3e127df4c472e82ce2a1facb555eafc9a093844e1af9b1ab35971dbfac5c1c92661f647b9a4162c93ec3b0d9eb13d83e2facf192","ssdeep":"","tlshash":"2ce0c0c3932327ef5a441c141e3f600374a63d858809f8a35044d161ff0169f53de844","size":367,"data":"","first_seen":"2024-08-10T09:34:03Z","last_seen":"2026-04-15T17:38:47.601203Z","times_seen":2279,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"e0e41e44c64d75bfe34bfc1cadf63d04","sha1":"a0ed8d154ec8b45e09efb26aa1eabf5cf92b3845","sha256":"ee4a138c979f8889f0366f303f8d144a5c8d3c85990001821173fad6404ba2d1","sha512":"61af9dd7644dba37f24145c477ecd2607278ca2ad0845231fa127e9b5cf83bd789b2f6e5ae45d3b2c7d8458267cfeba69995d25d2fd69d779c891e02a11470db","ssdeep":"","tlshash":"efe026ceb2cbfb1063212221a4bf016a79ba4852c589a8809485b1d13e3996c0676e28","size":321,"data":"","first_seen":"2023-08-13T03:23:56Z","last_seen":"2026-04-15T17:38:47.586777Z","times_seen":3072,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"3f805c3133fe1b0de74af2580493af8c","sha1":"cb390a711033e2261823ae11cbae6639a048220f","sha256":"f7a76c07cb72cfe4e7cc35da6fe7caaeeeab9a1e272608cfe7162b58f1638bb0","sha512":"0690bfdd1fad38bfa504ac36aad172f3827c262b610b87359d29f8ce85aa1da7985307bc936bd8432a2b4e571d9ca475305143a5916aa1178e8ea1304f79a8fd","ssdeep":"","tlshash":"dc11147d38e76818d60e9bfe359f978d2077b8115d80dd90c149c4a4a555fc850a1bbc","size":926,"data":"","first_seen":"2025-06-25T16:34:08.676074Z","last_seen":"2025-12-17T21:12:26.84774Z","times_seen":1322,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/online-home/onlineHome.bb4c42e44d5f1401242fc99120c633de.js","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb4c42e44d5f1401242fc99120c633de","sha1":"c6933ea5fe59f824eebd47c81c711e507716bac8","sha256":"370c21607cf9ae006fe6478fa93f61c48ca89c88be53eab1d03d7d8c94554b00","sha512":"a3bd79200e6f1e4746f80f2a44f03fc5002223626ae1d45b46b665fdf8056e437e9f2bdee5e2006cbe31d6ad52e7ad3516873c33094cc541725f5405dc49eb16","ssdeep":"24576:tPR1K/xoKCgwxKIzC0ydE8nJCLPTDUhYwflg8XJ:v1CpwxKIzC0MCLPTAhYwm8XJ","tlshash":"97250988b1a2f4a502a755b6403f660af23a3f5568199c10e265ccd87c74fcf9237f6e","size":1041190,"data":"","first_seen":"2025-12-03T08:08:10.093201Z","last_seen":"2025-12-08T09:12:13.00581Z","times_seen":101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"e0e41e44c64d75bfe34bfc1cadf63d04","sha1":"a0ed8d154ec8b45e09efb26aa1eabf5cf92b3845","sha256":"ee4a138c979f8889f0366f303f8d144a5c8d3c85990001821173fad6404ba2d1","sha512":"61af9dd7644dba37f24145c477ecd2607278ca2ad0845231fa127e9b5cf83bd789b2f6e5ae45d3b2c7d8458267cfeba69995d25d2fd69d779c891e02a11470db","ssdeep":"","tlshash":"efe026ceb2cbfb1063212221a4bf016a79ba4852c589a8809485b1d13e3996c0676e28","size":321,"data":"","first_seen":"2023-08-13T03:23:56Z","last_seen":"2026-04-15T17:38:47.586777Z","times_seen":3072,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"07f978b69611468461a8db60046c8310","sha1":"fd4e4017f8c5b73d80406e0f86ceb4cade639854","sha256":"658aca0e58b4d6487a329bdbcf211e50a23c6fb1e53fa67780f2b7db0f9dbd61","sha512":"a17cd68c3013041b2ea5cb3b01d86abc37c7ca3c28d92540059f6e383d5aa3f69a0ba5155779e49d75cb4be74d4dae4f120fe44e09a0a186254df650b699dcab","ssdeep":"","tlshash":"e6e0abceb2d2f000cab6e45156bb665bf114e854e00b68f2898776503d69adf41b8f36","size":436,"data":"","first_seen":"2023-05-22T11:20:33Z","last_seen":"2026-04-15T17:38:47.58611Z","times_seen":3073,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b8f5114492fd3acca59f91419166aa2","sha1":"4f108c74dbddaf00670ed15354a42883f34f0cd3","sha256":"8e4335d9bc85de08344471c27c8d1bf022155215ee77c72f7ff6188167ff1b1f","sha512":"eea0780763b82cd971b0e567f13ed318ef8308fcabb446f72e3a967912bff5f947ccc244df0aae1f0c1cdf3ecb6c531c80b81b4b7d575ce0618b2e8158574c4a","ssdeep":"","tlshash":"10b09205431a0c06b84232317b8ba7a31198cb37fbe0d22585a9cd2cf251691596440a","size":129,"data":"","first_seen":"2023-10-17T05:23:19Z","last_seen":"2026-04-15T17:38:47.594041Z","times_seen":2980,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/online-home/onlineSecondEntry.ef96293b184e4ac840928e77c45394da.js","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef96293b184e4ac840928e77c45394da","sha1":"2d661492ae0b1299928b451758c81fec3555a9df","sha256":"42c8f828773a36cc2a7d2632b79c0c7a05f546bc399ee69c36ded24ca62b963f","sha512":"4056caef726c4f00b967096362b7776faffaeabf41d33cdc11ae9d74cfb01318e55bbe3983a939479cfed0fbad308a3ba839ed2402c993e6d3f31adcc3cc3c82","ssdeep":"1536:2R6UDqnMBZfBERgvSeN6shpgTdmnVK4v/OsEMP6Kadrm+yXNcvqcYKrCfPg7qeQ:ZUWnozEvdigTkk6OsEMPGdruPE+Hgi","tlshash":"e5d31b89b191f4aa03e350ba403f250af37a2e55781dc820e150d8d97cb9b9f9277f6d","size":140819,"data":"","first_seen":"2025-12-03T08:08:10.11161Z","last_seen":"2025-12-08T09:12:13.087402Z","times_seen":101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"Function","is_inline":false,"md5":"2512414f817df8312569d55032748f81","sha1":"13467df6e962aa77bb36867ff1412e1ba9f8feb1","sha256":"e193735f8d500f10e2cdc6a94f5a43fb0257c1e2f8afc10fa04f0e3761d258de","sha512":"db6e4298746d519b0987bfa0feb89c39315718e178418e482b1c10c76439eae343afabf2db35ffaaa26c7ee6a3855084d39e9b88d35b11f87c354ceaf38874a0","ssdeep":"","tlshash":"a590029525c25101965295d4455b5c8450658675249569809180956259550205125cbc","size":47,"data":"","first_seen":"2023-04-11T22:25:25Z","last_seen":"2026-04-15T17:38:47.59779Z","times_seen":19617,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"bf69b99b59f5f1fab3589f8280fb548b","sha1":"86977e19ab139624c90d9816a4972eddc45c3684","sha256":"1924a8c56facdef3b6a025cfd68d287a8c7512d5a16a51f57bf4c308b06c39df","sha512":"623f05173bbf75abcb29beaef42ff4dfb8bf2a06e0977e21527a76edbdeee30bb1648c89f914e95c8a2483c1a44bebc4cf0e4a7ec3bfb102b67a909e801672a2","ssdeep":"","tlshash":"2bc08c8af3f8626b234a306b1335420200078afb0e084324b2360dd846161628295de8","size":159,"data":"","first_seen":"2023-08-24T17:57:45Z","last_seen":"2026-04-15T17:38:47.588216Z","times_seen":1918,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"78121554383706328caec0f79d9d67db","sha1":"6053de3bc8f6492885ef1eeafc8adaa5bd549d41","sha256":"efdfce912f1feeaa7f16fe3f9580af146c251fcfc6984c623bf90ab0e8f4b602","sha512":"b673b888f94b316b90a889ffd1efc2d26a05ed2dc9cb0f5ec0443a2917d7440d534ca3caee041d2abb506b390f7896fc661f4bf26379d3a920b671f920a6a18c","ssdeep":"","tlshash":"8ee0c6c3932327ef5a441c181e3fa00378aa2d86880af8a3a044d1a2ff0169f53ee844","size":367,"data":"","first_seen":"2024-06-20T14:52:57Z","last_seen":"2026-04-15T17:38:47.604037Z","times_seen":2444,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"baf0c934eaf98d4452308f116d7a8d04","sha1":"24cf9b37844c63b812a7423423eeec347ee66b46","sha256":"ef28df5dd4e33e1d35b0b132f48c4b0ed9ec5501a79fab7b9733ba4a76087776","sha512":"f9c261a80189b354541806f06d75c31aaf5663e545a1a0351e0d4eeff90e2d114f6441ceed7743330bb2942101c69a071921ed104c9443288a43103da9fdb47a","ssdeep":"","tlshash":"28c080e37141cc7b681bc41f5a633765354c7f56ab4171021301013474d1d43b40a7c9","size":167,"data":"","first_seen":"2025-08-26T03:41:13.635858Z","last_seen":"2026-04-15T17:38:47.622465Z","times_seen":2079,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"54c5c8f3475e97821129c74615d7152e","sha1":"1b0aa935b724afeb5421ae81ab629ac3997db7ce","sha256":"91c481655316e6cf5f76308e889e16063099f799f8a7256aa664f0005db7f132","sha512":"7b947aa206af61235bec3d00cad1feb5d4974c9cf18a94eed5422f918a4a69077f5d1663b5d8c4b2148f7ef420c146a6171dd739430b010dc3d22c36e1490763","ssdeep":"","tlshash":"46f023ea2c82853915b816e1a773c7143052064d3c09f9e1c48d8cd95d24fe818cea0c","size":444,"data":"","first_seen":"2025-06-19T07:14:09.939778Z","last_seen":"2025-12-17T21:12:26.846328Z","times_seen":1328,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/locale/v3/33000033/en-XX.js?etagc=a36f81a753aa4e098f16c5d1086f4812","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"a36f81a753aa4e098f16c5d1086f4812","sha1":"0f9821615bdecfe01a723c2e115ca62c15c6408f","sha256":"ec021c286cee266cedec6465661e64dcdc5920136a24efc54f397ec32aba8883","sha512":"eaf27c60c347ca0dbdb0bf970e2d849d9e291827958d2b426538c1dd4e536bed3687191aba90b890226fdc58f78d075d1340f09f105457b60ff0177385d098cb","ssdeep":"192:HEe4gfizEuDGKtnHybKsV2Wo/hjnS3HNXBXwf07:HEe1a1HybKsVdSnCxXb","tlshash":"b1e1a78a69b9e42799b3e5f9dd6f0a0070f0582308814c18fa7c546d3fd1d46b2a7de5","size":7091,"data":"","first_seen":"2025-11-19T17:01:49.826454Z","last_seen":"2026-03-02T17:09:43.460355Z","times_seen":1155,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"1d30d13844c02de88cea13a4d809bdfd","sha1":"c8345e8d0d023a66843d9d18d7f2f3a960cb5b38","sha256":"7dd4baf0326374792ecaa01fb5b1e04268b85fefc81966a4f4ae04f430518771","sha512":"a892c1d34ae4c8cedfc9ed9b70e6127f9e9cb6a06b278de6b41110785a71be4a180a77c80b2e7d7f2bb6a7a2d543e1d19e5ccc5b6e3f0fa80a977b49e5cd82db","ssdeep":"","tlshash":"f8c08c4af2f862ab374a306b02355112000782eb1e0c432472320dd846171628295de8","size":161,"data":"","first_seen":"2025-06-30T09:07:33.664486Z","last_seen":"2026-04-15T17:12:43.771932Z","times_seen":1430,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"7218723506b0cb5df5e5ed93af75a63b","sha1":"057f7a6fa10090fddddf978e500962d1c27e2883","sha256":"ada7fc3c5a66697354327d06eca0b15f1fa012cd89c7eeea9fd84d76ca6c70dc","sha512":"5123466a362ad2d81d9985f1a021006e5cd4788caa5c3043af2da0371ac675ddb6eb1049fc362d4f517c87271593d4459a572c9a996b718960aad7bb01465723","ssdeep":"","tlshash":"bab0124df3aa72a34346705f123562d611a704b3d8049b1cb3758ad4211a17d417adfc","size":112,"data":"","first_seen":"2023-12-04T03:22:04Z","last_seen":"2026-04-15T17:38:47.644313Z","times_seen":1972,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"13b559ad49ff030260df693ed0fff627","sha1":"8c42969843c642cbb9440852fe48d955055edb32","sha256":"aa93037f5bff664b4f5e85932859e34bcffb406c75701ef7c995f8347c6f2a07","sha512":"0c78cd95a9e030f42551630c2ac839ac72e8994f6ca171c0c0b54d41e57408f6db85138ebd933413890f9a0247eed5127121ba5d4e30455fcca7f4fe44ae647e","ssdeep":"","tlshash":"86e072c5e3232f7c42822c192b2c980370b22cc46908ec385140e4917e0068c03aed88","size":311,"data":"","first_seen":"2025-03-02T05:44:43.803924Z","last_seen":"2026-04-15T17:38:47.628874Z","times_seen":1803,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"376b9bb6bc8a637182918b87dd29d288","sha1":"e016398f30e04f05e0cc53a433d0ef297feeb9fa","sha256":"f6b7818fb4ba6761667c4cbe73282275cf4860e805f629616e80a3092362bfb7","sha512":"f2a3c3ee281dbaf8cdf8cb8cf331922b02c4783251f6ca3855b0190775b5c443c3dc6986836cdf851370f4079edc7e9973103447419d1e1c94570d6f03e63589","ssdeep":"","tlshash":"37e0c0c3932327ef59441c181a3f640374a62c85880df8a35044d162ff0169f53df844","size":368,"data":"","first_seen":"2025-06-30T09:07:33.629334Z","last_seen":"2026-04-15T17:12:43.76151Z","times_seen":1430,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-X437DZ73MR\u0026cx=c\u0026gtm=4e5c31h1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"78e3e5e4ed75d9a607c2fa589921b5be","sha1":"e18d823016068f14eade17bd715f271eedcbe7bf","sha256":"64156ee518d7a31f981ed030ecfcdf353828dc124734832af973f1de7b7346c9","sha512":"e092f0ffdf1208fb5017897d17998a8d4bf270b50cd2354f5efc9fa50a6e4901bf084f41db8dbf5048a9e22e5edc34ac8674dba73125f80f3a0e0559ba21e723","ssdeep":"6144:eG7WIGw+WSayqljVD75U6k/bbqt3L3ci17bBvxTkh12rN4:/PGmSwpVDJ3cWxC","tlshash":"5eb40a9e73c6742652daf468502f01cba9bb24e2b45cc8abb1c9cdf02d3459a4167f7c","size":509133,"data":"","first_seen":"2025-12-07T03:38:25.962133Z","last_seen":"2025-12-07T03:38:25.962133Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"3b73c30adc5932ae9cf81f21125935dd","sha1":"d8ba68b325fce34820603066b7219f1c26e88dcf","sha256":"c0623cd01048235a4c1b4796213da3845f48b01625768bfd078317448baf3b35","sha512":"6b5dbadaf2f76517f12280fbf1cdbe821b2fde7a926e67fb2cc787ef86920737c151f025c386cb0ea8f865c11d27a1de788f4260d6bc1e2bffa429a47a04d276","ssdeep":"","tlshash":"53e0c0c3932327ee59401c241a3f600374aa3c858909f8a35044d161ff0169f53de844","size":366,"data":"","first_seen":"2025-03-02T05:44:43.775311Z","last_seen":"2026-04-15T17:38:47.604745Z","times_seen":1966,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"86aa1f2659eb8dd7864464119998a93d","sha1":"1bcfcb923886956c5404a3d80b4aefb433bf7d07","sha256":"d029279150b32911a68e798796a2f93517c393f1bc3f62085f8d03b5b4e31832","sha512":"3ae1127eaf8b95bcf9ed0e782df06a4d05c5523fef233c1d04bf6dd47011dfc68e38414855232b2d4bd3f2ffbe2909b3ec88654fcaafe6c11906aa2e2037ad9d","ssdeep":"","tlshash":"76b0124df3aa72a37346705f123562d6116704b3d8048f18b2758ad4211e16d417adfc","size":112,"data":"","first_seen":"2023-08-24T17:57:44Z","last_seen":"2026-04-15T17:38:47.59916Z","times_seen":1975,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"2106065cadc47b0a5e742a7be9f22a22","sha1":"fcc96d23d3852e04c446835fce542b450f8733b6","sha256":"3e0b47859798c6065f0aa022e427f69b436a7124031b8eee10ae71678209064d","sha512":"3a0ec75dc8ecdf213aa5ecaa32666e6ed3e60d68825293f4d936d1d0d80c7e3c30547027b5c00c75b49d875affe6fabc0662cd68989c33a932685aca29d1a3ac","ssdeep":"","tlshash":"d1c08c8af3f8626b234f706f0a79420200078aeb4e08432472324dd8461a1628699de8","size":159,"data":"","first_seen":"2024-08-10T09:34:03Z","last_seen":"2026-04-15T17:38:47.62087Z","times_seen":2413,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"91f714a4b47cf27b4af8a53ab26bf91c","sha1":"4cc702cf51714282002a062876bebf2bfaa63ac4","sha256":"9a6aa08c0271840a53afee0b1c00b217a3e72a85ce63ce91dfc09218ae1d3ec2","sha512":"3c710c4ff1e2107b2a650efa5f908f032e40a28b6756863bb758a295b3a1a8cd578021ad1df610d7c87788c45091a92ef336ed5ac65b530ebb7e891562bf75bd","ssdeep":"","tlshash":"fde0c0c3932327fe59411c141a3f700374aa2c858809f8a36044d161ff0169f63ee844","size":368,"data":"","first_seen":"2023-12-04T03:22:05Z","last_seen":"2026-04-15T17:38:47.600533Z","times_seen":1520,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/online-home/vendor.dll.e67ec87028758c36a79350ae7fe673b8.js","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"e67ec87028758c36a79350ae7fe673b8","sha1":"0584cf5ad666558b14f1c5f121e4d76fd6e65649","sha256":"3773593f3d68ed8e643fc882109e194224e1f4a0e23a6cb06f44b4848d768e71","sha512":"0f03bbb34b14fc03f18624e6b7f46df007d51415de3275ebead5f89a659091e0f940bc57e24e9271c04d472edd26c868244338a610794bbc856feb24dc3ed1a3","ssdeep":"12288:nj9ilpjpeAKu9cOGOxpkIxnmPjldTd0SuH9N+G:nj9il+nu9cOGVOnmPjlpdE/","tlshash":"71f44bcd7586f5a247a311b6403f290bf33d1a6a680d9810e651e8d5bcb4cae9237f7c","size":754343,"data":"","first_seen":"2025-12-02T07:10:06.889797Z","last_seen":"2025-12-08T09:12:13.186183Z","times_seen":116,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"4e6f4d970f6cc8cf3aee5739ee7a662c","sha1":"5b9ce9b1d03e67eba829a5775a88128d9474da85","sha256":"6510d1cba2540080533c415a93fbde75f4f2142d71c95dd64e5bad1da930074d","sha512":"2755e80fbd3589348da2c2632bafb8733b47a03824a6f00b26ffc25dbebe87b3dfc2d2457ae299d977dc635ba02c0b0a3ea551f477741441b1228149bf99a899","ssdeep":"","tlshash":"c651c22adf582890d0f08c3b4c53617073e7f463a2dccee4eb647a61be90a9a88705d5","size":2864,"data":"","first_seen":"2025-03-02T05:44:43.822956Z","last_seen":"2026-04-15T17:38:47.641674Z","times_seen":1757,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"07f978b69611468461a8db60046c8310","sha1":"fd4e4017f8c5b73d80406e0f86ceb4cade639854","sha256":"658aca0e58b4d6487a329bdbcf211e50a23c6fb1e53fa67780f2b7db0f9dbd61","sha512":"a17cd68c3013041b2ea5cb3b01d86abc37c7ca3c28d92540059f6e383d5aa3f69a0ba5155779e49d75cb4be74d4dae4f120fe44e09a0a186254df650b699dcab","ssdeep":"","tlshash":"e6e0abceb2d2f000cab6e45156bb665bf114e854e00b68f2898776503d69adf41b8f36","size":436,"data":"","first_seen":"2023-05-22T11:20:33Z","last_seen":"2026-04-15T17:38:47.58611Z","times_seen":3073,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-827436400","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"05df3a848fd34b0c3c2445cce2438c94","sha1":"4e55d0349a494ed6774da56e3de99d24abe02111","sha256":"ab1ba3ceeb30cb453b5417eb81e2de1515806f4ad5153c47ff5f99338f160ef7","sha512":"1f37397da4a46af9fab9333de9cfe75e15bd9165adcb21dc317c8665da7c0a7a87a6add041b540b53bc05e2e4db59267a4f040701a16f5a2b40087b069714d40","ssdeep":"6144:D7WTwVWSayql+VD75U6k/bbqt3D3cY+1vxTvz:v8tSwwVD53cvxP","tlshash":"167429cd73d674264393b478403f008ba17b69a2f84cc895f186c9e52e74aaa4277f7d","size":356062,"data":"","first_seen":"2025-12-07T03:38:25.981112Z","last_seen":"2025-12-07T03:38:25.981112Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tripcdn.com/packages/ares/nfes-libs/2.0.86/screenshot2.js","fqdn":"static.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"3.167.2.46","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"71ece23f0e2f68c2997de58ae23d3f9f","sha1":"cbea86050daa504903b0d8e54b50f1a99713c431","sha256":"4f4a3c71bcba34726a7d4ac382242466a31590bcf5b1f34a0d07c4f2da7e3170","sha512":"43c468fa73f142f4431de93d62398496841eecc9c5f1f0ee4c0559343b8e8c3ad6e2f1a9268ff8782dc027b192e70cf8238244fac7c693d38bccbd9c1ca459ad","ssdeep":"768:iCM2JwC8V5t/pXVuAnH6jVCYXNOr6sDt+BF94KSQ3SOcLMZ:82JyV5t/pFuAnCXs66tGfIRYZ","tlshash":"203308757192f22512b6605becbb6b0de0b4dc4cc113ee33d86cd4b276145a2a1e3be9","size":50925,"data":"","first_seen":"2025-10-07T12:32:07.885013Z","last_seen":"2026-04-15T17:38:47.536494Z","times_seen":2334,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"best-r3v3nue.com/?url=https%3A%2F%2Faff.trustofferlink.com%2F2JRNK2B%2F7JH5N3F%2F%3Fsub1%3D2uafUxoTYS1Z9pe3vvAHFR%26source_id%3De017c010%26sub2%3DPropellerAds1%26sub3%3D3646","fqdn":"best-r3v3nue.com","domain":"best-r3v3nue.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bcb905f88065e3a19b948eb0f9314718","sha1":"738f03ad81ebe02bd27f29549c393634f3054615","sha256":"6be0431630d7171cb51f52e63208be17503592aca5ad336d96bba1c6d2ac3d6a","sha512":"4b8a9c434a1f98bef3e0f8f77c2ff8cce626da6aae9014ea3188940bcef7aa504d0db8b957c653cd18a13c21f9775250c128ff54c8472056fce4a2ec6a2c9111","ssdeep":"","tlshash":"9bc09b7f779658340377b53d231ee744297640033445d80a7a6c06954f6da548075645","size":161,"data":"","first_seen":"2025-05-08T19:03:40.35397Z","last_seen":"2026-04-15T15:42:15.360391Z","times_seen":2823,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/locale/v3/100012276/en-XX.js?etagc=ad42c2c732eda13a1d4f9e5730c6aed5","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"ad42c2c732eda13a1d4f9e5730c6aed5","sha1":"721df810468114a6853bc2b95e02d4d58ed81c7d","sha256":"5d4c97c8ea7fe3f00f32e52ee947270af07332711494feda3bf7da31711dc045","sha512":"e7cac05a7eecf8757b09097d3efd92ef04096ba4d50ad5ac7b1cf79963e42b037cf93449b6726f2b6438583da89c86e1413a4cd53f3711266ebf141f422ea162","ssdeep":"3072:EEf8oifJiAgHEpLoDz10DGOoOQJFLO6u6ENRp:O38iCOovXi6ZGT","tlshash":"3924d56bf3e832761be31251fced97ca77a844085b2949a55c7d80bd13c8a392a3f4c5","size":212806,"data":"","first_seen":"2025-12-05T08:32:09.968816Z","last_seen":"2025-12-09T08:31:12.01434Z","times_seen":79,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tripcdn.com/packages/ares/nfes-libs/2.0.86/foundation.js","fqdn":"static.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"3.167.2.46","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e3a5e26914de15e430604655c89482ee","sha1":"766dceca3876b2485fa0af0ac4d728f2b5b37850","sha256":"f39c9140c3a19468b993799846ebaac0bb70c8a7a15b2e70d1f1fd38288d19ec","sha512":"31fc5c20c551c56369286dfa1a619c87179e8ecb507bd23895f1173a2fd2145a38917a2e17ca6d1e29540a209c94f15f36bb3f75ede5c6616112c8140b7dd066","ssdeep":"768:UCjr5C8CZ7zmzonL9mrn8n+Gcjw7IYXxCCZemOkP5KwZ5Wg8dPx34+1:Fq6Awtni9Bb5B5Wg8dPH1","tlshash":"af431addf292b43562f32175a03f630ab23a6b1128499440d16bd9d43c7ce9b923bf6d","size":55529,"data":"","first_seen":"2025-11-29T02:09:36.278743Z","last_seen":"2025-12-08T09:12:13.266277Z","times_seen":119,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/i18ntripgeniecomponentsdk/bundle.c58ee751a5aaa3c21f42d666d3fb37d6.js","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"c58ee751a5aaa3c21f42d666d3fb37d6","sha1":"9a95efef887b061aedf0c62079d796cb6132e1e4","sha256":"d17ee0347fe51ac88cd8c3f3a5fe3f147b31e4eb9ba3c826d2790ba790393c6c","sha512":"6d8c2a92bb47484d5e9be6035762309c188847f61a0397961b1924b5a49167b6521cb76b180dc90081e6b0cd0b8f8f69dc554241bfeb22d3673a114df3b5296b","ssdeep":"24576:3KraX+op3lbyz+eBzFUiS4iZMgMU5Ncb5T5jE9Lz6f87/s:Wauop3lbyznBzFRS4iKgMU5Ncb5T5jEc","tlshash":"a5554c88b191b47843e250b6803f150af7363a1e685d8418b676d8d97d78ece633bf39","size":1386393,"data":"","first_seen":"2025-12-03T14:10:24.022859Z","last_seen":"2025-12-18T09:06:16.401615Z","times_seen":178,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"d8a2fc29b6478c8a1e6487cc36b7b7ff","sha1":"f8353342a19cbc19abd48518b2d051b1cad33fb6","sha256":"3800530676723daa53755460cded76a0a8909a1e689ab5be0c1759179f9229a4","sha512":"6486d78598b9d304b9ec4ef953e19b333e806e40a9f44758a01c3a9cfdfa67de4858e02aa9295b584b95223e2b5d0b146658f4d270b9a3f792c9fd5e42df69c5","ssdeep":"","tlshash":"8fe072c5e3232f7c42822c192b2c980370b22cc56808ec385180e4917e0078c03aed88","size":311,"data":"","first_seen":"2025-06-30T09:07:33.690763Z","last_seen":"2026-04-15T17:38:47.606183Z","times_seen":1876,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"466105f25698982c627d569577010cff","sha1":"f23740d82fd2808d36fe68a6108a7c876aca8f67","sha256":"3f5cbb87c7e707f3e4ee71e8fdd8b72a9c246205b21b168c19b42aee028b6ae5","sha512":"ba0a58309c6845a576c2d49fd79811abdf4da72b3bc3aed08b88387d3cbd28df7b4f7ca4bc3c8249b980187a23aafd91d30ea33fa521e01898c17d02c623dc1d","ssdeep":"","tlshash":"96e0c0c3932327ee59401c141a3f600374aa2c858809f8a35044d161ff0169f53de844","size":367,"data":"","first_seen":"2025-03-02T05:44:43.757974Z","last_seen":"2026-04-15T17:38:47.591415Z","times_seen":2614,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"644799443c2b1cf297e788864f72027b","sha1":"5a911dc467249d077653d6d6cc5cc3f4a5e40bcc","sha256":"2641d1bcaed9386487ae65d557b1b0c9dbf16d227078d70aebf9cec977dc5f95","sha512":"30991fc82065115eb095fa1054ff9a47d496da87bbd8b83d4bc6231db2fcb55ed4d22ebcc279037ee00e69fa0bb164fcdcd3936a35c0b3338bc5953bbe931148","ssdeep":"","tlshash":"d0c08c4af3f8626b234f706f0a79510340078aeb0e08432472320dd84a2a162c2a9de8","size":159,"data":"","first_seen":"2024-06-20T14:52:59Z","last_seen":"2026-04-15T17:38:47.614605Z","times_seen":2473,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"e0e41e44c64d75bfe34bfc1cadf63d04","sha1":"a0ed8d154ec8b45e09efb26aa1eabf5cf92b3845","sha256":"ee4a138c979f8889f0366f303f8d144a5c8d3c85990001821173fad6404ba2d1","sha512":"61af9dd7644dba37f24145c477ecd2607278ca2ad0845231fa127e9b5cf83bd789b2f6e5ae45d3b2c7d8458267cfeba69995d25d2fd69d779c891e02a11470db","ssdeep":"","tlshash":"efe026ceb2cbfb1063212221a4bf016a79ba4852c589a8809485b1d13e3996c0676e28","size":321,"data":"","first_seen":"2023-08-13T03:23:56Z","last_seen":"2026-04-15T17:38:47.586777Z","times_seen":3072,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/locale/v3/330151/en-XX.js?etagc=beef432a285d7f438524585a01269b1a","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"beef432a285d7f438524585a01269b1a","sha1":"66a8ae883adba06fb26587df5356c2163167b023","sha256":"147f019f7de2e021f936a0932e6b055af206a66828ce613856fd112f3f1d233c","sha512":"8de0382034de2f1cfd6c59eba71989078a52e222696036085d60de0ee5381bb7f737cca8ea8b63a5706741655ba66bd7a8e12e39d830ee24a8a58dbc93bbaf69","ssdeep":"768:yLGkjGymnch1UT1dCfIDu0LJfVC7Teo/fsQMiLHTzlHBN9nkZ7H55ZDT4FRFZXvc:aiFS1vQPZ8TtXhMI5HBvmHdDcFn1YF","tlshash":"8883e90a73f13f375be60266fceb594621e801046ed44c399abec87c13d5da99d2728b","size":81788,"data":"","first_seen":"2025-12-05T05:02:15.924809Z","last_seen":"2025-12-17T08:17:11.13052Z","times_seen":148,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-T2SD","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d00f01868bdbb63849d02d70661cafea","sha1":"db8e03e6001b8a1b26226605d2bce725fcffb63c","sha256":"a66d52e4525abfe3316875da284e9372ad9c7224ce6ec1168fb1ae52e3c495d8","sha512":"6e981f9f8e04ff6d57bd9b259d0630b9d2ee102c849a4a5de63f90e0c98ccba72ba2355e9f0ed35235cf1b56fe3ab55e9b234fab78eb3fdb8310458883fcd6d6","ssdeep":"6144:wSqgZ+EXUa4wcwT225QpWSwVWSayql+VD75U6k/bbqt3H3cAqIvxT6wVN:BT22ojtSwwVDt3cwxRN","tlshash":"49b42bcdb3c5b4b683a6aa74842f090e613e24b6b48cec50e1e6c8d52e7457d2163f7d","size":520814,"data":"","first_seen":"2025-12-06T18:12:40.083491Z","last_seen":"2025-12-07T07:20:29.587132Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"deda0d497c38edb70d7f38df347231c3","sha1":"5081a47df15d77a72a7c29241507630348588853","sha256":"0f663a1ec410206d97d968609250977b9f7a8ff1031860320ea47262dc4ce100","sha512":"1b2e00ca06e466ba5b4a9922eb8afc427b9d3a9d1bc977aa4433ea4cc84cafebd9f71c5727b1c9685020e4994eac1e67995774769e193caca46d577278620cd1","ssdeep":"","tlshash":"c5c08c4af2fc62ab234b706b0235810610478aeb0e0c43247a320dd846172628299dfa","size":159,"data":"","first_seen":"2025-03-02T05:44:43.76083Z","last_seen":"2026-04-15T17:38:47.632586Z","times_seen":2647,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"e0e41e44c64d75bfe34bfc1cadf63d04","sha1":"a0ed8d154ec8b45e09efb26aa1eabf5cf92b3845","sha256":"ee4a138c979f8889f0366f303f8d144a5c8d3c85990001821173fad6404ba2d1","sha512":"61af9dd7644dba37f24145c477ecd2607278ca2ad0845231fa127e9b5cf83bd789b2f6e5ae45d3b2c7d8458267cfeba69995d25d2fd69d779c891e02a11470db","ssdeep":"","tlshash":"efe026ceb2cbfb1063212221a4bf016a79ba4852c589a8809485b1d13e3996c0676e28","size":321,"data":"","first_seen":"2023-08-13T03:23:56Z","last_seen":"2026-04-15T17:38:47.586777Z","times_seen":3072,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"f7dd2a0892f141e363cfe36f758faded","sha1":"9b7b6f20e09f7858a5594fb1051df3beba4abadb","sha256":"64b2ad0522456478b7734376c40101bda2e8c8e6f497f0b1fcc535a3b916c773","sha512":"b03e0833546c49b811948dbab05c734bcbc156847c2057c07baf225fe249de69198b35aa9524828665b32c913ccaf0ba764e0afc53cd21320a9ed5f4b0b5dd01","ssdeep":"","tlshash":"06c02bb82fa7ac7112ff0f82471fb5842492336047d0052d0c12b5482b34e3f20c4cb4","size":160,"data":"","first_seen":"2023-05-22T11:20:32Z","last_seen":"2026-04-15T17:38:47.639278Z","times_seen":2956,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.pstatic.net/melona/libs/gfp-nac-module/synchronizer.js","fqdn":"ssl.pstatic.net","domain":"pstatic.net","tld":"net"},"ip":{"addr":"23.44.36.65","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"867952280538f37644afdbfd98a92979","sha1":"3444c40c4610806539c3208dbff646299d33dcc8","sha256":"a071e796adb442dbd8af4e03a0f8b90c6b8b3b5f333bf456a7236099e434ca1a","sha512":"e5f948ce93c06fa76e25d7ec681d9445d79f4dec24886de039dfca7ee8da3e2b4d7f345d31729d4c3868d4d761c79e7d24a0251df9bd0c360b3a87695f91c631","ssdeep":"1536:yAKljBZ08a9zMvD0WCa1451fvfXj63WSXkTN5AaU3/I4iz7w:h8aFMv3W9rpU3oY","tlshash":"eb73744dfed1f0904763f666926fa41ab2bb1a55b40fc8d0926ad1e0dc7898f4133e2d","size":75445,"data":"","first_seen":"2024-12-11T11:55:27.291019Z","last_seen":"2026-03-25T21:03:06.748946Z","times_seen":6638,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"07f978b69611468461a8db60046c8310","sha1":"fd4e4017f8c5b73d80406e0f86ceb4cade639854","sha256":"658aca0e58b4d6487a329bdbcf211e50a23c6fb1e53fa67780f2b7db0f9dbd61","sha512":"a17cd68c3013041b2ea5cb3b01d86abc37c7ca3c28d92540059f6e383d5aa3f69a0ba5155779e49d75cb4be74d4dae4f120fe44e09a0a186254df650b699dcab","ssdeep":"","tlshash":"e6e0abceb2d2f000cab6e45156bb665bf114e854e00b68f2898776503d69adf41b8f36","size":436,"data":"","first_seen":"2023-05-22T11:20:33Z","last_seen":"2026-04-15T17:38:47.58611Z","times_seen":3073,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/locale/v3/100014113/en-XX.js?etagc=bda093f877645492f01846d9368e38df","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"bda093f877645492f01846d9368e38df","sha1":"11fa5ffcbfc7851cc293469024e991b065f78768","sha256":"1976339a8987d76ccb6b1058828f77221e2cebbc1249d9cd5f506a16c9c2da47","sha512":"9c30b670e749d11cd96d4b0775210072609aa5b9938ced3d7622b1f235bb6f3730d088037ea7a0b131567095b368390124eecc4c38bf287ec2f78677af74d78c","ssdeep":"6144:GtN2KXFvewHYdFNxdW2qliezIsdRGuE9m075TXAQ5RBz81a+zavR1lKGcV5xn:GttGw4dfRwvVOTwGBz81axblkBn","tlshash":"9f94f91f53b819371e6701a2ec39d59f7b8c100ca31ad962ccbf813d9391599e23ba9d","size":422219,"data":"","first_seen":"2025-12-05T11:35:05.490882Z","last_seen":"2025-12-08T09:12:13.043008Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"e51347d52edc7295d66c586765bfe0cf","sha1":"bbde1c55038fe18f2c3aebfd116f8d3626e71157","sha256":"8393c23fe7e98a6b08a136ad4b1a03c6ebcec3bf56b77824d90fe57c370fb597","sha512":"b7eb30f0a4d6a70cc2fe14770ff4796ac39ac52f8dc179c94212f3672a073064f26d04e4f54f51504f249351dd6d41710158413038533d824efead7d3babc668","ssdeep":"","tlshash":"d3c08c4af2f8b27b234a306b02355102000796eb0e08532472320ed84a161628295dec","size":157,"data":"","first_seen":"2025-03-02T05:44:43.771807Z","last_seen":"2026-04-15T17:38:47.628078Z","times_seen":1958,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/locale/v3/100014416/en-XX.js?etagc=d93b35114b49c2175189e0778fbdb08d","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"d93b35114b49c2175189e0778fbdb08d","sha1":"3e13b5f6ce5a0dae1f85699c42d9d30f9fc41568","sha256":"f96343d837290a4cd686396a7ec8449cdff9eb6b69c215d1fa3a14660f80c1c1","sha512":"8496e1334dc067859877e6fb14ae5d585709659719f6edcb9fdfdd59919b70be279a41b971a11af69966e4aec56e239f22d25f7c54bcebd6168486f2079f1ab8","ssdeep":"384:HEe1a79Ui6loJ3KX2inuPv5ZP7hJc6/G0LOcARrdtZhc78DnTn+U6oG4voXbVRCQ:yhUi9dPH8OR6ZTtZq7k6U6uQXbVRz7b","tlshash":"23e2b549ebf82ca77d530592fd35e12e329c286a5254889b7cfec82bd7d034456231de","size":33230,"data":"","first_seen":"2025-12-01T06:08:30.087845Z","last_seen":"2025-12-11T10:11:07.83065Z","times_seen":163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"c13aaa0995a7671c16f668012f589e7c","sha1":"5f6e51dfb8f7a8844b3c5121f40042f406165e4f","sha256":"7e0e8bf3a824d9517470a51e657ce464d3bdb3ec302cf88e998cc6c0c70ac635","sha512":"f0af099c995aa3cf77386f8bdf54511d1406da99840ea8ea61ceea6d0ff725d6a60fc14f34ae329a4ed36b79f4ee3a58b8dcc2fb6ee1bc3a9765abed8e2e4182","ssdeep":"","tlshash":"64e072c5e3232f7c42862c192f2c9c0270b22cc4a808ec385140e0927e0068c03aed48","size":311,"data":"","first_seen":"2024-08-10T09:34:03Z","last_seen":"2026-04-15T17:38:47.595395Z","times_seen":2364,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"c115a3f514c9d77bb5f6b0d85f92d1ab","sha1":"0c1e9a32b50ebfadeb0ed09734371640a662b473","sha256":"23bc0a3ca9130cf049740d1ad3948aef092fcadabbeb1c6e4bec9f714d74a908","sha512":"4b328b82593a397172254cc6ccfbcb9364b34f484aad7dea959c6cc3c015efa10bd7c101849003ed56802f8b282a300f3dcae65f5ad3a9f420c1d951f151e6d5","ssdeep":"","tlshash":"7ce026ceb1cbfb1062212221a8af116ab5ba4852c589e8408485b1d13e39d6c0536e28","size":314,"data":"","first_seen":"2024-01-21T16:37:47Z","last_seen":"2026-04-15T17:12:43.779142Z","times_seen":2635,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"ccf98650a8d43823b908d8c2f1db2465","sha1":"6a910ff972fafdaea8037b0a7f5adf142d4a5c96","sha256":"54a4190487ab83225b280cd412a9ca86a959183529fdd9c4ff9952ab984e2bdf","sha512":"84b1dcf65950ad463235d55b163371cb715201ba5abca3556812a39ba0c026420c851ff475b015a1a1e387aac7b4f96269194c3b4fd7efb62abbfda64ba6d54e","ssdeep":"","tlshash":"a9017baaf15c90b101fbe129e61fa719200326ea5e560781423849f130abb4fcb54fd8","size":665,"data":"","first_seen":"2025-08-15T02:09:38.120441Z","last_seen":"2026-04-15T13:34:06.083268Z","times_seen":926,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"e0e41e44c64d75bfe34bfc1cadf63d04","sha1":"a0ed8d154ec8b45e09efb26aa1eabf5cf92b3845","sha256":"ee4a138c979f8889f0366f303f8d144a5c8d3c85990001821173fad6404ba2d1","sha512":"61af9dd7644dba37f24145c477ecd2607278ca2ad0845231fa127e9b5cf83bd789b2f6e5ae45d3b2c7d8458267cfeba69995d25d2fd69d779c891e02a11470db","ssdeep":"","tlshash":"efe026ceb2cbfb1063212221a4bf016a79ba4852c589a8809485b1d13e3996c0676e28","size":321,"data":"","first_seen":"2023-08-13T03:23:56Z","last_seen":"2026-04-15T17:38:47.586777Z","times_seen":3072,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/locale/v3/3828/en-XX.js?etagc=64c7d15eba4684490ef3af54b5603d4b","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"64c7d15eba4684490ef3af54b5603d4b","sha1":"d487468b320de9f7fb48acd5230df1619b5991c3","sha256":"b173b60b7c4924cee158006ff275b2269108d8519b0b4b5f5ee062405a160488","sha512":"d0199221254a5929cebfe84d6e7fad3c813cd2d7f486f1b53c51440bb2e6d114e7d7d3311d9e20bbb1377d50f56b07f99a3fdf2ed0f1a8a81985f02b24e5fb1e","ssdeep":"192:HEe4gfizEuDGKR3YiWPqAjES3HhXQmwf07:HEe1aafE+Amb","tlshash":"10d1d94a6932a627e972b2f6895f4600f030883705d54c60b7cca96c3f911aac2f7ff5","size":6656,"data":"","first_seen":"2025-10-13T16:34:16.408225Z","last_seen":"2026-04-15T17:38:47.490092Z","times_seen":2354,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/online-home/common.dll.aaca8289553569c27f8bb34343acd8a3.js","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"aaca8289553569c27f8bb34343acd8a3","sha1":"5ce707696712c6af3e929301b4c0395491ebbd58","sha256":"59e42344c258b13cd646333a990d7e8bec5480379a516f3e50abe8b6f3f8bd5d","sha512":"e45731c9bd5710a6e6578c611a87c92bee943bd3d31a77faa57dc87bcfc7866c652b7d36f9db52b26012799e5f3afe73a17c6f2cf699081117ed1a184bec5469","ssdeep":"1536:pedhBwiYPXdHpm7NI2rmiJeJs/PB+gFUsEE:yBKpm7NDmiJBceUsEE","tlshash":"1b937fccb6d2f05183a364b941bf004bf33e6ea6748e8114d169e4e9bc7854e9277e2d","size":93007,"data":"","first_seen":"2025-12-02T07:10:06.771959Z","last_seen":"2025-12-08T09:12:13.149822Z","times_seen":116,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"876784c676f541f45629d0124c711fb6","sha1":"0773415ccddaafe812c9edf83b05f92646a6b759","sha256":"6af53049a590282df90f271bdd6547166cadcec4373412256b2cf6f363a86c0d","sha512":"ad7cb163247b92a0467c8fa3efb8fe951e17ad167bdeb05d0682bcf81855c629fc889245c9e9bfa8c1701be1be57ccd0104b46625f8f80db1aff1851b35cfc41","ssdeep":"","tlshash":"05c0808347501cfe84ccd42c970c7f278828b83f925172257208001439ff4bd575651b","size":185,"data":"","first_seen":"2023-10-25T15:59:06Z","last_seen":"2025-12-09T21:17:17.144859Z","times_seen":1193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/locale/v3/100015463/en-XX.js?etagc=c5dd9641ab81988eb3968b0aa3022aa6","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"c5dd9641ab81988eb3968b0aa3022aa6","sha1":"5b9560ccc522d48c6e305ae57731c7b293325d51","sha256":"9eb5e950502c3b5e62d08f05536ba22bfdbf898012b7d931673def26abcd3c2f","sha512":"57f695aa2ae43a93dd96528e8bc1b722d0504afef3c8a439af7a0d266df6216b3c6ea8c741301f92d5759bf104215cde02cc3ab855467cc84dd23ec3ce6cdfcf","ssdeep":"1536:s24xSEU3vSzX5t3YtBbLoApW0xA6zvt2Waxty:Axb0vSzX5t3YtBLoaW0xA6zvt2fQ","tlshash":"1d93830db3d12f708fd702d1fda64a8b26f0a500335588adae7ec07967eb6845e77a44","size":91657,"data":"","first_seen":"2025-09-04T14:38:38.982705Z","last_seen":"2025-12-11T07:28:08.582324Z","times_seen":1131,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"99840c9f4131a320650cc3f6361d8ca8","sha1":"18bb7e30d7da66bb3e9d69fc41c66a62bcc2fbaf","sha256":"39a34aeecb5dc7626cdd5cec73603337bdc5f5ed2adddb8083c7e5640b2eaa7c","sha512":"d15d34a185f0853ee32dc0203c2a0668ded7b53e758bdabbc4dff0e0617f6ea1dce5dc1ad7d7d73a3a1e9eaec02f305fc24a97b4baa275332ab2486927173492","ssdeep":"","tlshash":"5fb0124df3ae72a38347705f133562d6116704b3d8048f18b2b58ad4211a16d417edfc","size":112,"data":"","first_seen":"2025-03-02T05:44:43.810904Z","last_seen":"2026-04-15T17:38:47.618381Z","times_seen":1957,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"07f978b69611468461a8db60046c8310","sha1":"fd4e4017f8c5b73d80406e0f86ceb4cade639854","sha256":"658aca0e58b4d6487a329bdbcf211e50a23c6fb1e53fa67780f2b7db0f9dbd61","sha512":"a17cd68c3013041b2ea5cb3b01d86abc37c7ca3c28d92540059f6e383d5aa3f69a0ba5155779e49d75cb4be74d4dae4f120fe44e09a0a186254df650b699dcab","ssdeep":"","tlshash":"e6e0abceb2d2f000cab6e45156bb665bf114e854e00b68f2898776503d69adf41b8f36","size":436,"data":"","first_seen":"2023-05-22T11:20:33Z","last_seen":"2026-04-15T17:38:47.58611Z","times_seen":3073,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"eval","is_inline":false,"md5":"c115a3f514c9d77bb5f6b0d85f92d1ab","sha1":"0c1e9a32b50ebfadeb0ed09734371640a662b473","sha256":"23bc0a3ca9130cf049740d1ad3948aef092fcadabbeb1c6e4bec9f714d74a908","sha512":"4b328b82593a397172254cc6ccfbcb9364b34f484aad7dea959c6cc3c015efa10bd7c101849003ed56802f8b282a300f3dcae65f5ad3a9f420c1d951f151e6d5","ssdeep":"","tlshash":"7ce026ceb1cbfb1062212221a8af116ab5ba4852c589e8408485b1d13e39d6c0536e28","size":314,"data":"","first_seen":"2024-01-21T16:37:47Z","last_seen":"2026-04-15T17:12:43.779142Z","times_seen":2635,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"4157a89f8131fca73fd11eff0e943222","sha1":"025f4ca1c773b396d9461850cb0f7b04eab5e20d","sha256":"c1b58fa33d227028fc0d6f3031108812f75f01766e62c97c2c288edcee0222d5","sha512":"b85cc4367251071b3f59719ccfd25b988e5726276e168140f45973c5ee35b2e11e9e4627afa1d1911d07a4c1d6fb712ec41031570a0426c62d951dc870fddf3a","ssdeep":"96:OcAqIPZ9oEyOfN2y+mbFiAPLMIyBJgZYjM1:OvLf0MtjMIEmGjW","tlshash":"bb91322f09b6c5918bc2a1a6dffa740c5861357b9adfd022b4ccd2c827297fb5c858c5","size":4484,"data":"","first_seen":"2025-12-05T11:35:05.638983Z","last_seen":"2025-12-07T23:38:01.406552Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tripcdn.com/packages/ubt/websdk/*/ubt.minh.js?d=2025127","fqdn":"static.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"3.167.2.46","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"24392c35be75699f3b42e7b220c25b06","sha1":"d94ca2fe030e4b3543150573ef77a77f0a0f1fd2","sha256":"018850b11c997ab5611334b2dd4448197af1b90692a9804cb72d25192348b829","sha512":"b7babd7b5d4e8e8a480262549292f72c7147c8721937ad3a3b2d208acbb2b93d762b653795dd8cb89e4ce7d083f966e6c062d0cb35b79278c13316da2304de0e","ssdeep":"1536:VGUhmI7R+vSMo/L/4NK3BsMiWS58XukU/ucMi:VjXMMz6Eukdi","tlshash":"7f733da6b3a7b43107fd1266d0375601f33d17281c09a06cf25a69df7c45ecba2a6b78","size":73857,"data":"","first_seen":"2025-11-22T06:08:26.020779Z","last_seen":"2025-12-28T04:37:57.000793Z","times_seen":408,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/online-home/onlineLoginPopup.8fe5be2797e67f517c2ed8a513e7c7f5.js","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fe5be2797e67f517c2ed8a513e7c7f5","sha1":"dae2ba9bbd7f832e2bcbd1e871e642ada6c7837d","sha256":"84725a5466611e222001a45b556660308fe6052004640311ef0c2fd7d8acc145","sha512":"16eb3a7023eec399be6551f5f196981385670ceebed2fe0d3a56141db1de9e956a64aef6d43c9bee015a6ba50ecf698e4e570b071905067f7e3f878f620b0af1","ssdeep":"768:YIFDK7YDYSdd4XIngyhsg4oT0oej1mqTrRqRSw3Y3aKLd:3jyXIgtoIFj1jQSiELd","tlshash":"5df2098db091f49906a7a065513f220af17b6d65680ddc20e212cae17d78bdfd233eed","size":34865,"data":"","first_seen":"2025-12-03T08:08:10.054262Z","last_seen":"2025-12-08T09:12:13.19683Z","times_seen":101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-789926500\u0026cx=c\u0026gtm=4e5c31","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"17c7666d8780fa580feda523ad9c1365","sha1":"cf3eccf8603dc7f28439974e0033319b718f91ab","sha256":"89adf3165ff11b22031d7a62e78ddc9790e7ffa325b94c39205c06db99bdad18","sha512":"c51e8ce6cb2e83a447d05fa6f4dd0a08fae370eb988e7315cde97056c71ab10cb4e45e6f74c6ca34d4743b5d9390344fddcde5184b02348285aef3b5d479045c","ssdeep":"6144:i7WTwVWSayql+VD75U6k/bbqt3D3cY+1vxTvz:Y8tSwwVD53cvxP","tlshash":"eb7429cd73d674264393b478403f008ba17b69a2f84cc895f186c9e52e74aaa4277f7d","size":355978,"data":"","first_seen":"2025-12-07T03:38:25.912628Z","last_seen":"2025-12-07T07:20:29.333067Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/online-home/onlineGotop.14b5d0d6936deeee4887fd6d0eb37107.css","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:32.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /modules/ibu/online-home/onlineGotop.14b5d0d6936deeee4887fd6d0eb37107.css HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-ares-server: r100013666-21038164-zctqw@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: N5EBJ4F6GDB01FHZ\r\netag: W/\"14b5d0d6936deeee4887fd6d0eb37107\"\r\nlast-modified: Tue, 02 Dec 2025 12:25:45 GMT\r\nx-ares-raw-buffer-size: 71629\r\nx-backend-latency: 0.020\r\ncontent-encoding: br\r\nx-varnish: 16787412\r\nx-device: U R Android\r\naccept-ranges: bytes\r\ncontent-length: 10037\r\ncache-control: max-age=4783693\r\nexpires: Sat, 31 Jan 2026 12:25:45 GMT\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a249\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":71629,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"14b5d0d6936deeee4887fd6d0eb37107","sha1":"fce842950df47ce27cdca11c3257bfbc67df8927","sha256":"1135506b08aae9811f3b5a6a7b8174a7765602202d0c485e6b93fec99f5357b9","sha512":"5210bdda236cc42716335529866a7729cc7c18e24662f7a66977d11c8e1062c771eb4879373abe9524dc0a47820db6c93602189fb2bc59b7ea8126a709c1a44d","ssdeep":"384:INRA7Q0lPJlNZzFLz7rQUcAJdw3L33fepEtI5WU7+Ou9CtGBqul3FGGlp0B3L3aj:IR3x4w3L3veBE+3L3aJ19bNuvXtQzF","tlshash":"2f632165e07600df3536c5261fd9b679302a9923d1a3ad7ee18133aca0db34e39e1e71","first_seen":"2025-10-09T14:38:51.303504Z","last_seen":"2026-02-10T07:39:12.619949Z","times_seen":1592,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":79,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/restapi/soa2/19816/bjjson/queryAdsDisplayData","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:34.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"POST /restapi/soa2/19816/bjjson/queryAdsDisplayData HTTP/1.1\r\nHost: www.trip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003\r\ncookieOrigin: https://www.trip.com\r\nx-ctx-Currency: USD\r\nx-ctx-Locale: en-XX\r\nlocale: en-XX\r\ncurrency: USD\r\ncontent-type: application/json\r\nx-ctx-wclient-req: 9e32b53dc9948bbe38c675c22653088c\r\nContent-Length: 310\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: Union=AllianceID=6015822\u0026SID=168798533\u0026OUID=ctag.hash.ccjJjXXJOpYl\u0026Expires=1767670651990\u0026createtime=1765078651; UBT_VID=1765078651988.0c55yqsxjtpp; ibu_online_jump_site_result={\"isShowSuggestion\":false}; ibusite=EN; ibugroup=trip; ibulanguage=EN; ibulocale=en_xx; cookiePricesDisplayed=USD; ibu_cookie_strict=0; _abtest_userid=e7b40962-e94a-4116-9bcf-af1ceddea7af; _tp_search_latest_channel_name=hotels\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":310,"data":"{\"head\":{\"cid\":\"\",\"ctok\":\"\",\"cver\":\"1.0\",\"lang\":\"01\",\"sid\":\"8888\",\"syscode\":\"09\",\"auth\":\"\",\"xsid\":\"\",\"extension\":[],\"Locale\":\"en-XX\",\"Language\":\"en\",\"Currency\":\"USD\",\"ClientID\":\"\",\"group\":\"trip\",\"locale\":\"en-XX\",\"currency\":\"USD\",\"source\":\"ONLINE\",\"clientID\":\"\"},\"moduleNames\":[\"public_Online_Homepage_Notice\"]}"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\nx-cat-server: cat.fx.sgp.tripws.com:80\r\nx-cat-root-id: 100025527-0a0e03ce-490299-312795\r\nx-cat-parent-id: 100025527-0a0e03ce-490299-312800\r\nx-cat-id: 100025527-0a9a2480-490299-69716\r\nx-cat-root-url: http://cat.fx.sgp.tripws.com:80/cat/r/m/100025527-0a0e03ce-490299-312795\r\nclogging_trace_id: 2502625580189649997\r\nrootmessageid: 100025527-0a0e03ce-490299-312795\r\nservermessageid: 100025527-0a9a2480-490299-69716\r\nvary: accept-encoding\r\ncontent-encoding: gzip\r\nx-gate-root-id: 100025527-0a0e03ce-490299-312795\r\nx-gate-region: SGP-ALI\r\nx-service-call: 0.205\r\naccess-control-expose-headers: RootMessageId, x-service-call, x-gate-region\r\nx-gate: ctrip-gate\r\nx-originating-url: https://www.trip.com/restapi/soa2/19816/bjjson/queryAdsDisplayData\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-trip-region: de\r\ndate: Sun, 07 Dec 2025 03:37:34 GMT\r\ncontent-length: 322\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver-timing: cdn-cache; desc=MISS, edge; dur=6, origin; dur=232\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: MISS\r\nunique-request-id: 361246dc\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":410,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"5cda8249ce724c1d37e8c676e5aa36b0","sha1":"2dbe32f8d4726f2118232b266dbbe180b96085d1","sha256":"19fbf15dbdd9048a1cd7d9dc60f22833f0b915ad7f5c5b41ced6ce11096a2d92","sha512":"d0d79c7bba758cec224bcf2a2bb76ceddca71412c2b78964a4fe06481d1b6763192206cab7cd7c04e857c9a409fee0c155370f33e75687224bb86658625d37a7","ssdeep":"","tlshash":"32e0ab094a7c0cae460a919cb48668879c8538c522cb4950a44d05690ec21efe980ad8","first_seen":"2025-12-07T03:38:25.910035Z","last_seen":"2025-12-07T03:38:25.910035Z","times_seen":1,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/online-home/vendor.dll.e67ec87028758c36a79350ae7fe673b8.js","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:32.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /modules/ibu/online-home/vendor.dll.e67ec87028758c36a79350ae7fe673b8.js HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 172605\r\nx-ares-server: r100013666-91049052-v4nfb@SGP-ALI\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aliyun\r\nx-ares-request-id: 6929444C4D7A2730336C9E50\r\netag: W/\"e67ec87028758c36a79350ae7fe673b8\"\r\nlast-modified: Fri, 28 Nov 2025 06:42:20 GMT\r\nx-ares-raw-buffer-size: 754343\r\nx-backend-latency: 0.047\r\ncontent-encoding: br\r\nx-varnish: 120483678 125247080\r\nx-device: U R iPhone\r\naccept-ranges: bytes\r\ncache-control: max-age=4417570\r\nexpires: Tue, 27 Jan 2026 06:43:42 GMT\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a20e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":754343,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (59038)","md5":"e67ec87028758c36a79350ae7fe673b8","sha1":"0584cf5ad666558b14f1c5f121e4d76fd6e65649","sha256":"3773593f3d68ed8e643fc882109e194224e1f4a0e23a6cb06f44b4848d768e71","sha512":"0f03bbb34b14fc03f18624e6b7f46df007d51415de3275ebead5f89a659091e0f940bc57e24e9271c04d472edd26c868244338a610794bbc856feb24dc3ed1a3","ssdeep":"12288:nj9ilpjpeAKu9cOGOxpkIxnmPjldTd0SuH9N+G:nj9il+nu9cOGVOnmPjlpdE/","tlshash":"71f44bcd7586f5a247a311b6403f290bf33d1a6a680d9810e651e8d5bcb4cae9237f7c","first_seen":"2025-12-02T07:10:06.889797Z","last_seen":"2025-12-08T09:12:13.186183Z","times_seen":116,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":101,"dns":0,"connect":0,"send":0,"wait":45,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/online-home/onlineTripSketch.5dd5816c62845b0813ae38ff102db870.js","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:32.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /modules/ibu/online-home/onlineTripSketch.5dd5816c62845b0813ae38ff102db870.js HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nx-ares-server: r100013666-21038164-zctqw@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: MHDGN1Z72PSGYVTX\r\netag: W/\"5dd5816c62845b0813ae38ff102db870\"\r\nlast-modified: Wed, 03 Dec 2025 07:34:19 GMT\r\nx-ares-raw-buffer-size: 3019\r\nx-backend-latency: 0.080\r\ncontent-encoding: br\r\nx-varnish: 89986071\r\naccept-ranges: bytes\r\ncontent-length: 987\r\ncache-control: max-age=4852607\r\nexpires: Sun, 01 Feb 2026 07:34:19 GMT\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a233\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":3019,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2900)","md5":"5dd5816c62845b0813ae38ff102db870","sha1":"6b48f3a01ad40def95e2788b4d0d2f3a891a7846","sha256":"42f066e5f687b1da4bf4920bcae243477540fd053983189500569df59a824628","sha512":"93891014adaa7cdae0c95fec7a9715da6acfce0c716bfa80be8c87553c7504ee1bba7f87d9e6cc38f1781ff4ffd57f79335a873abc71c810bcb88b2ffd927ef9","ssdeep":"","tlshash":"10510e65b0e0fdde43671067462f010af5a21e6ec6396898d3e4cad8fd34a8e2528f19","first_seen":"2025-12-03T08:08:10.043687Z","last_seen":"2025-12-08T09:12:13.256529Z","times_seen":101,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":69,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/online-home/onlineRecommendFlights.e041d4859b731aa74d4d098dc3fdaf0c.js","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:32.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /modules/ibu/online-home/onlineRecommendFlights.e041d4859b731aa74d4d098dc3fdaf0c.js HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nx-ares-server: r100013666-21038164-zctqw@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: MHDS0NS53Z9H5PA6\r\netag: W/\"e041d4859b731aa74d4d098dc3fdaf0c\"\r\nlast-modified: Wed, 03 Dec 2025 07:34:19 GMT\r\nx-ares-raw-buffer-size: 45017\r\nx-backend-latency: 0.250\r\ncontent-encoding: br\r\nx-varnish: 1925916\r\naccept-ranges: bytes\r\ncontent-length: 12424\r\ncache-control: max-age=4852607\r\nexpires: Sun, 01 Feb 2026 07:34:19 GMT\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a238\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":45017,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (44888)","md5":"e041d4859b731aa74d4d098dc3fdaf0c","sha1":"35df952d1d8364eae494d64ae28bba916c259289","sha256":"7d2c9fd0e32a34769ca50bacd74155039a15c854a1cdc454468a03bdb30651f3","sha512":"79716dd0b787f52314ece7fc2eb92fd90d3ef24a1fffc6c097148a5408124ca00a2050ca5441a78c171b484ff6ce2de8c4411f962763e6a53ea61acfd3dc219b","ssdeep":"768:LviiLifdUaXKZOuRAB7aJ3NWYWRESqeqTmoRazReBSzjUPmNn:LodUaXKZOuRyaJ9WYWWGReBUNn","tlshash":"4c13f849b091f8ed02bb5167513fa60af33a3b55a8198c10d162c9cc7d34fce9136b6e","first_seen":"2025-12-03T08:08:10.10384Z","last_seen":"2025-12-08T09:12:13.152588Z","times_seen":101,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":71,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-789926500\u0026cx=c\u0026gtm=4e5c31","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:35.852Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:33:43 GMT","end":"Mon, 19 Jan 2026 08:33:42 GMT"},"fingerprint":{"sha1":"4E:9E:D1:61:E4:7D:C2:8A:B6:AD:D2:31:C7:07:01:E4:DB:A0:A7:A9","sha256":"C5:DD:D4:CA:97:B7:B5:8C:B4:99:E8:56:30:AC:1B:F0:FD:7C:5A:FD:19:ED:13:D0:27:D6:0B:76:C7:C7:A0:66"}}},"request":{"raw":"GET /gtag/js?id=AW-789926500\u0026cx=c\u0026gtm=4e5c31 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 07 Dec 2025 03:37:35 GMT\r\nexpires: Sun, 07 Dec 2025 03:37:35 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sun, 07 Dec 2025 03:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 123829\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":355978,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5911)","md5":"17c7666d8780fa580feda523ad9c1365","sha1":"cf3eccf8603dc7f28439974e0033319b718f91ab","sha256":"89adf3165ff11b22031d7a62e78ddc9790e7ffa325b94c39205c06db99bdad18","sha512":"c51e8ce6cb2e83a447d05fa6f4dd0a08fae370eb988e7315cde97056c71ab10cb4e45e6f74c6ca34d4743b5d9390344fddcde5184b02348285aef3b5d479045c","ssdeep":"6144:i7WTwVWSayql+VD75U6k/bbqt3D3cY+1vxTvz:Y8tSwwVD53cvxP","tlshash":"eb7429cd73d674264393b478403f008ba17b69a2f84cc895f186c9e52e74aaa4277f7d","first_seen":"2025-12-07T03:38:25.912628Z","last_seen":"2025-12-07T07:20:29.333067Z","times_seen":3,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ubt-sgp.trip.com/bee/collect","fqdn":"ubt-sgp.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:36.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"POST /bee/collect HTTP/1.1\r\nHost: ubt-sgp.trip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 7181\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nCookie: Union=AllianceID=6015822\u0026SID=168798533\u0026OUID=ctag.hash.ccjJjXXJOpYl\u0026Expires=1767670651990\u0026createtime=1765078651; UBT_VID=1765078651988.0c55yqsxjtpp; ibu_online_jump_site_result={\"isShowSuggestion\":false}; ibulanguage=EN; ibulocale=en_xx; cookiePricesDisplayed=USD; _abtest_userid=e7b40962-e94a-4116-9bcf-af1ceddea7af; _bfa=1.1765078651988.0c55yqsxjtpp.1.1765078653998.1765078653998.1.1.10320668088; _gcl_au=1.1.1944475785.1765078655; GUID=09034023113792808361; _fwb=202fgWTgpaFl4ko2G4nljfO.1765078656039\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":7181,"data":"{\"d\":\"f001765078656429!m1Legacy!d=E8Z7ImNvbnRleHQiOlsiMTAzMjA2NjgwODgiLCIxNzY1MDc4NjUxOTg4LjBjNTV5cXN4anRwcCIsMSwxAB71LjMuNzIvbmV3L3QAEPMwMDAxNDQxNixudWxsAgD3LCJvbmxpbmUiBAfJaHR0cHM6Ly93d3cudHJpcC5jb20vP0FsbGlhbmNlaWQ9NjAxNTgyMiZTSUQ9MTY4Nzk4NTMzJgEn2l9zdWIxPTAyMGFhNzlhNjBlOTRjZDA5NGJmMDBkNjViNTA5MzQ4BiL2Mz1QMzk0MjAwMwR1B4oB_DEyODAAqgH6MjQsNDgzAAv3LDMsImVuLXVzAPABAAAAAOl7XCJ2ZXJzaW9uXCI6XCJcIixcIm5ldAII_E5vbmUCDPhwbGF0Zm9ybQQc_30BkAIBNvlmZWZfbmFtACIFMwEOAE0HB_5yZwcC_WxhbgMIAIAB_lhYAw37aXphcmQHTvgiU0dQLUFMSQ65AQCpAfx0cnVlAgAHDfpdLCJidXMA8wL-c3MB0AMEzAIBzAMFyQIACepjdGFnLmhhc2guY2NqSmpYWEpPcFlsDlEMAAIA_3sAqAH8dGVyVABbBpkE6jQ2NDUsImluc3RLZXkiOiJjOTE5OUYAZfxucG1WA8UCABP7MS42LjcDD_9FDjL8Mzg5OAC3AflpelRva2VuAbcBAMYBAJEE_iI6A-YB_mZyANIC_HdvcmsARvl3ZWItY29yANUE-SJ0Y3BTZW4AI_tmYWxzZQCBAfJzU3VwcG9ydFdhc20iOgKWAgAS_08BzQP-ZWEAVP8iAQ8BNf9sADIACgOABQGPAvZhcHRhaW5BcHBJARYGxgUAGO9sc1NpemUiOjQwNiwidWJ0XwGyA_11YWcAEACKAgAeARD5Y3VycmVuYwH7Af1VU0QEDv1zaXQBIf5FTgQJ-2xvY2FsAzEA7AMAEv53YweWAvsyLjAuOAFsASb9cmVxAfkBB_wG9DY0Mjk3ZTY4T20ifQCYAvx1c2VyAKICA5cC6E06LTEsMjMwODE1X0lCVV9wd2F5aDpBOwUQ_TcyMAIT_DN3U0oIDP01MjkCEv5PVAkL_DEyMTgDEf5IUwIR-zk3LDI0AK8GAxD7SFRHOkIAEwAo_DUwNjIDawCBCP9VAI4BAhT-MjYBFv85BBP7TmV3UG8CE_40OAITBJwB-kRlc3RpbgIU_zgCRv05MjQCFPljYW1iYW5uAEoBeACkB_4yNQB5_zECF_xQcm9kAMQD_nJjA9cB_zIBNP00MDcFpgH_QgBMBeQI_yIBoAL7YnRMaXMB1wn9WzIsCKIF-jY0LCJtZQD5A_9jBCf-eyIBrwcD1AT_XwHWBPlfZGF0YWNoAYQBAJMG_yIAqwYAuAT6eyJzdGF0AKYI_DoicGEAzAT5IGZhaWxlZAAd_GVycm8AiwMAwQT5bid0IGFjYwD6BvQgcHJvcGVydHkgXCIB3Qr_QwHkCv9uAMMI-SwgZG9jdW0ACfkuZ2V0RWxlAQfzQnlJZCguLi4pIGlzIAGQAQBT-XB1cmVVcmwAVRKkChuWBflmcm9tU0RLBfsFBMoJCdoEAOkBAecB_UluaQCfAv0yNzAA_AYS0Ab_fQA7_mFsALIG_joxAPYE_1sAsQp_yAF_yAFAhwL_NAq9AgC-CvhkZXZfdHJhYwKbCQGNAv5fdAC7Af17ImsC0Ar9aWJ1AeQG_F9ndG0AxQj-YWQA_QcCSwHLAgHBDwC8Af5lcgK5AfZHVE0tTVY5NU45AYQJDtkJSfYI_30BxQH_NQq8AQChCkl9_lQyAocBX2T_Ngi7AQKIDRy6Bfdtb2R1bGVfdXMBfQfQBQMR_04DJ_tleHBvcwD6BH-CBBTtBP83B-sB_TUxNACIEiPPAQHRBw7jAQuMD39uEdwB_zgK4wEfnAn-c3QE4RAE4wH5Y2F0ZWdvcgLgEftvb2tpZQKVEABEBfoBAxABsRD7ZW5ndGgAshAA4xQB9QUB6QkAnRT-VW4D0hT9MTA0AOkTAYcGA54W_F9qdW0AuBUApQUA-A_9c3VsAesUAMcOAh4BEgELAwj7Z3JvdXAADAQ5BfwFBxcD1wUADf81AA0DigH_UADhAftlc0RpcwC0Ff55ZQHZFP8zBHcDGgDlAQAfAXD_MQAV_F9hYnQAnA8A2AX9ZXJpAigBhQH-X3QAnQEC-A4A9QYCGwTQCwXoFQIg_WJmYQAI_zcBmQH5VUJUX1ZJRALEAQHEFX-QAwyDBACYAwGQBP85CocEAIULN9oDBKMUCIUEAogD_1MALwOgCAWOBPw1Mjg3CooE90JUQWN0aXZlXwO2FgGGAwGfAwHAAv1CRkEBC_43NwQJ-ExBU1RWSUVXAdUC_jI5Aw__UACCFv1pbmcHNP00MzcBxwP6c2V0SXRlAaIZ_TQ5N3-DAhDyAgGGAgGCA_8xAJMbB_0C_zYAmwIXqAz2aHRsX29sX3djbAWKBQCOCf5lTADYBftyQ2xvcwDCAvxsaWNrCMsMA6MF_XR5cAGPAwWNHfcic291cmNlX3ADvAwL8B0SAA6uFwDbC_5pdAP9Af1maXgPqwJi1Az_MQCLHwivAv85K4wCCJgNBKcCD9QBEvcBAMEC_m51AOEaAPUdB_8D_zEAhgT_NwHqHHKUAQjbF_41NQC7ChjuAQTvCgGLAf1nZW4A_wkJqBEbmQT9YXBpBNgP_nJ1AbABAKMK_3YA3Ar9Q29kARD8MjcxNAHiHWCMAQiAFwDsAQDoBn9tWZMBCKUWAOwBGsoFAdYN-HB1Yl9ob21lAboFBd0OBLUBAOIc_nJkEOcFALwB_mdnAeYYAv0BAZgVY3QIthb_NQAGHuEM_mZjAIEnBvcMAcUL_UhvcACaHvx0b2NvAtYLAf4GAIgi_W90cAAL_1QACvlUVEZCIjo4AOgeAOkB_3IA7Sb9dFBhAJULBPcMANwa-W5GZXRjaEgAixAC9ST_VAKGJQEU_FJld3IAwQH9WEhSDAr9WGhyFxUB7g0D_iUHEf9MCIAOFyD3SW5kZXhlZERCDBACTf5NbwDWDP9vA8YmBxEGKhc8AXgCwBINgQH_dBQ9AxYJRQG6Dv1GQ1AC0g0Amw1_xw0E4hb8aXNCbwAh_iJGCMoOAZ8BAtUECMoZ_TU5NVW6CQfnKPYiSE9NRV9QQUdFAqoO_WFkVAMl_2kAxQH_aQBBAXX_bQC5FP5hbQCXBf40OQD-FmD8BQnZGf05OTAemAj-d2EBvRAAySD_XwCMIQfzAf1tc2cBgQr-ZWcA0ST9ZXIgAYYD_GJveCADrSEB0Cr_eAPIBgCgIflyYVF1ZXJ5A94GAL4E_nt9AboEYIgBCdQZ_jk5AOsHH-ke_GFqYXgB6AMM3AMA4QEBuQgAhSn_dQCtA_ogeGhyIHMB5ioAegLxBf8vAKQZ_3QAmQztL3NvYTIvMTUzNTMvYmpqc29uLwCKIwGuDPRBbmRTcGVlY2g_eC0CWAHSL_o4NTE1MjUAoAH_LQfkHvwxNTYtABP9MDQ1ABEBmy1gxgEJ6Rf9OTkyHfQD-G9oX2FzeW5jBfkdAdcFAIYY_mFyAPcxBrUMDIcGBK8L_EFpZFMAyCsEiAYA-wX_UwP4BQn0AQG4D16TAf8yCdYWW5YB_FBvaVMC2hQb2QEBwA9flQEJkxb-OTkAix948AL-MjIB1RlfkgEJ_hVblgEixgP_MgKZFV-VAQmGFv85AtkMHoIUBZIUAFwC_iIE7xME7gEC5CUC0QsIkRQCjRABJAKpEAO8IgE4ABX_MAHTIv9wCAL7b3RoZXIECf8xY58LALEyCfoBAMwUJt0B_mhlAYsr-F91bmxvZ2luEI8WB4YCAtIWApkk_1wJjhwDohJgggEJqBYC4AFlgg38OTgxNgXiDQAv_HJ5QWQF0ib_RACbAgnhDfc5NDg2MDU3ODMI4g39MzE5AAv4MTcyMTY2OTRjxgEK-RMAzDd_qgEPmgL3Njk3OTc5MDg1CaAC_zIAtwL8ODczMADDPf4xOWPGAQufFBq4HgO6Kv5tcACRQACpFAKEMAHFBhSqCAaNQP5AYwG9Af8vAQEAwRcEOP8tAacd_y0DgQf5LXNrZWxldAGkLAC_CAmAQQHbIv8wAhEA7AICDRHpGGabBgvgFB7xHn-qAXixAQvjFCKZIQWNCwW9IQDrGP8xEIELBIIP9khvdGVscyAmIEgALQHKRQC0Ov1kdWMAgD4ArA8Aox0CGgK7I_xsZWN0Bvg6_zBimgH_MwjxFP82AIYeNMgB_zIX5QH6RmxpZ2h0D-YB_2YGDwzqAf8xY5MBCPMUAPYBHtQWFOIB_zMX3wH-VHIA4iAP5gEAZAMRc4EBCPYUAPQBHuAUFOAB_zQX3QH_QwC2QA7kAQDVJ_5oaQIoc4ABCPUUAPMBKdQUCeoB_zUX3AH-QXQBTgHvMAHmB_9UAL4xEOcD_3QB0ApziwEI8BQ4xgH_Nh3HB_4gKwDjCQDNCQ7rAfxidW5kAJIBdYcBCIoVAPwBWbkUEuAoCvAS-jI0ODg0LwWJIwCyRvpmaWd1cmEBuAQJ7BIAjFIAlij-MjAJmBX_NAEK_zEAEfwyNTk3AYopYNgBCJkVALgCGo0pF5gd_3UCrEgn_h7_ZASKAgWPO_4zNgGWDV-LAQjaFADqARrPOVeTAf8yAZwoYIoBCJsU_jYwAbQzE8gx_nJlAbRT_V9ubwH1IP5jawH4KgLTKhDUPvxXZWJDAPot_i1FBBwf-C0ChAEI-BL-NjAAjxF1Ef80CoASAKgOdhAKkBEAugt2EAqiEP81AJUFE3P-b18BgDYB-AkI9AUFfgCcOf9uAIFCBOsw-W5mZXMtaDUOoDkCjx0AEwHPUAKKBgAREIgdAB_7Um9vdE0AYACGBga4M_8yAPc48zctMGEwZTAzY2UtNDkAzgX-OS0AsVb-NzkBZ-9DTE9HR0lOR19UUkFDRV9JRAHPM_01MDIApVb4NTgwMTg5NjQA-RcBrDr_ZwCwAgCjV_9SAMswAn4G3FsFEgHEJgGbF_0uMjACwAECxQ0DvgEA1V0C2jf-T0EFuTQEoAz-SG8B6lX_IgmIDAA4BBYDpzUr8x4BxkX8ZXRobwH7Af1QT1MBxjgC9wP_UgDJWgKyAQH5M_9lAIVe_2UCujgA3zgBtQsAtwH-b3UAhgH_MwCuAgCnAf1idUgA1CQD0xsFtUkCyyYABgHsXQWnSQn5XQXmCAISAO0IAhADqkMCDvpPTkxJTkUDJQKmMwLjSAWqXg-AOvp1bmtub3cByAl_tjYYnTf8MTc0MAKLBgq8FP81FoAHQcwFAJI8AYMlCYQGAK0Q_lJlAIsCAM1W_2QA1ToCplsDFhv4Bfo5YTk1NTMFjgb6MjQ1NTY3AahEEYMG-zEzNzI4APoQ-jcyMzM0MAD2I_8xAfYzJ-0F_jA0AY0kVMAFAZACAbISFu0BK-gFAo9HGPsFCc0FArkPLOoF_3YFgCsWmmd_lgU82QX-MjUCkwYK0xj_NQC2EkjNBQ3KBf8zAtYF_TYwNgHWBf8zAN8F_zcF0gX7Nzc2OTABwgsRxQX5ZDgzMmNlYQC_Fv1lMDAALwD7K_FiNzI5LWJlMjY3N2YxZDMCtQUX0AUVvAUE3GUoqgX-bS8B0hoBxQUB6AQA0lr8bmZvPwPRBP89BdVLLJsFGcQLf-ADOqUEAohUAP1TCdYEFpUVQLcKBbNKCe4KA91KGscK_ThjYwAGCNkK_jM1AfsBEfcE9DdmNTI0YjQ1LTUxZACqEfs4MTgtOQCLaPQtM2U4MmM1YTc2Yzcsxgr_MwGnDFOfCgKKAv8vA_sBf5MEf5MEA48F_zICkAUJkR4C3VMcgkz9dHRpAJtb_2UC_1UGjAUB4AQBkTkBZwDfGwB9BMsIAtkCBKYFBeUCBPgEAwwB_wEApQL_TQWOAwH9AgE-_0MBX_xDb3VuALYBALEX-mltZ1NyYwMaAQgE9iIAhCIA5AMCR_9zANVn_i0-BZIB_WlzSQHTAgZ_AI5x_Uh5ZAOGBgO6GAgP_0IAmwX7blNjcmUAm3AAyS0GEvx2aWV3Auxv_mlkAdEdAtpzBgz-SGUBqiQB6l4AkjoAewU2BK0BACcf3gMY1SJe23QRvwT-aXME3RoHw3EBtCYEuQP_SAHkCAGCcgOOCQYa-WlzRmlyc3QCrQMHDP1oeWIA318KlnMB0wUB0wYAuwP-cnQD8wcHzRD_NgGmRQKTQA0K_jI4AN4CAtQDESX-NDcC1CL8b3RhbAMUAZglAA7-dGkFAwCOaP1UVEkFBgDvEgwzAPQFAHj-aDUXYwHYBP9UAPlKAfEBAaEJBQf9Rm9yAJIC8joiQEA8ZGl2Y2xhc3M9AJU_A7g0_m1rAP8z_XN0eQCODgHPPf9kAcFe7TowcHgzMnB4O21hcmdpQFRAR2UA9xP-c3AA1iz_ZADzCP95AKoT_24AVgGsA_xBbnl3AN0__WVTaADqBPVoYXVsTW9zY293TQHBAgChUwSkUH_wUX_wUTW6UifUCjutCgH0BALmCgmPJ_8zG5sxQpBaAJoT_1QAPv9HAT38UHJlZgDLBADOCAOzMwugEP41MGPgLACmdwn3ARqjRP4yMwCeLAG_ODLsU_9zAKpmBLEJ_zQBpBxgeQn4J_8zANBcFLMOAtQTBKYR_18AnRP_Zgi-DgnKBAfSEwT5QQuTDADsYv9zAvoW_m90C7IcBawUBLUFDsESC-4D_DM0NzEB4QIED_9PC50fDkwRqxQCPgOdH_43ZAa2FP00NDMAlCUVphTrYTA5ZDg3Ni1jMGRiLTQ2ZTktYTY5AMUU-TYxOTYxMGQAjwUBuxX_aQDSGATbYwPOMADuCv9HA7IUAxEBmg0YyA5d5Q0IxBL-MTMC2SL_NQn0Kv8zAKFaFssXFMkXE-wDfGkVnQQU_wJrtwNHih0kugYNshj_bwC8TwAb_2wrGAyGJg4PDIkZENgECdYu_zQBglJY7ib-NDENvxwGtyUA-RkCvn4A5AwAGwG0OhuqJ_w4NWQ0CNkcANlPFcwcAMpb_TEwOAK4W_4zMwCsIgC6eiqmHACGdljtJgCQAv8vGOoBK7ocALUzWuomEIouQZYn_18BiQ7_cACAOA7TcX_6HBf3Ev45MACNI_9dAeEFAIkYAIQGCbsG_jl9\u0026ac=b\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json\r\ncontent-length: 66\r\ncache-control: private, no-store, no-cache, no-cache=Set-Cookie, proxy-revalidate\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\npragma: no-cache\r\nx-content-type-options: nosniff\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List\r\nx-forwarded-for: 91.90.42.154\r\naccess-control-max-age: 300\r\np3p: CP=CUR ADM OUR NOR STA NID\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\ndate: Sun, 07 Dec 2025 03:37:36 GMT\r\nalt-svc: h3=\":443\"; ma=93600\r\nset-cookie: uid=ojbiEvARHtOUOlGXoyCDpA==; Max-Age=63072000; Expires=Tue, 07 Dec 2027 03:37:36 GMT; Path=/\nsuid=ojbiEvARHtOUOlGXoyCDpA==; Max-Age=63072000; Expires=Tue, 07 Dec 2027 03:37:36 GMT; Path=/; Secure; SameSite=None\r\nquic-version: 0x00000001\r\nserver-timing: cdn-cache; desc=MISS, edge; dur=2, origin; dur=197\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: MISS\r\nunique-request-id: 3612499e\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":66,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"baebe26463bf5e757145a165c7d66539","sha1":"38f4a04956bef4a1a6a1ad0f96222cfefbacb93e","sha256":"d9bb412e1293a41797bd8e18452b5a5cf1c260a1c4531623f8f5d1ac6ad28004","sha512":"ee2271a1bb452f8f7d60adf9708d48b614c08d7d8808a2fdd3f6e4e124dc2fb38d84ecafdefc30967246a754b590b687e319fc735ce38054074f88acc775bb19","ssdeep":"","tlshash":"7da022800200e83a0b800223200ac800fbfc328c88028002000ec80c0a20c8c028f000","first_seen":"2025-12-07T03:38:25.913866Z","last_seen":"2025-12-07T03:38:25.913866Z","times_seen":1,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/online-home/hotel.236ec2c08555f23d624bba9cfaf7973f.css","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:32.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /modules/ibu/online-home/hotel.236ec2c08555f23d624bba9cfaf7973f.css HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-ares-server: r100013666-21038164-f2m7s@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: S656S4WN4J8KY4VQ\r\netag: W/\"236ec2c08555f23d624bba9cfaf7973f\"\r\nlast-modified: Thu, 25 Sep 2025 05:58:28 GMT\r\nx-ares-raw-buffer-size: 100043\r\nx-backend-latency: 0.030\r\ncontent-encoding: br\r\nx-varnish: 9927867\r\naccept-ranges: bytes\r\ncontent-length: 16148\r\ncache-control: max-age=1924823\r\nexpires: Mon, 29 Dec 2025 10:17:55 GMT\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a203\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":100043,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"236ec2c08555f23d624bba9cfaf7973f","sha1":"4386799248f3454a6c27a473e3a9fd091056ea6d","sha256":"dba5f91adc17b7e004b0c326f95c02a1ee16304005f831b53b2f9411df7bbb0b","sha512":"7835571bd35b6b79a030f312fd94c25d0e80eadd9afd8382ed01cf87afc8dfefd092754dbb4b486145b800fcf56529e1a805110904a485774b6db14a0499e96b","ssdeep":"1536:roxig11NyDJUg6UjPfo11tKL6bW35VamZSZ6dT:rox1+L6bw","tlshash":"18a37361d10a15d87f3ec67287c0f6ae2292e037cc821e39f156632c95de2d9176eb78","first_seen":"2025-09-25T06:10:18.68435Z","last_seen":"2026-04-15T17:38:47.441109Z","times_seen":2834,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":114,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/ibu-public-component-umd/production.min.e60ad7659c4307455a5d16ce5eb7707d.js","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:32.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /modules/ibu/ibu-public-component-umd/production.min.e60ad7659c4307455a5d16ce5eb7707d.js HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 1155\r\nx-ares-server: r100013666-21038164-fglz4@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: 9T42JCE3WJ0HN8WR\r\netag: W/\"e60ad7659c4307455a5d16ce5eb7707d\"\r\nlast-modified: Thu, 16 Oct 2025 09:32:50 GMT\r\nx-ares-raw-buffer-size: 3339\r\nx-backend-latency: 0.020\r\ncontent-encoding: br\r\nx-varnish: 20069750\r\naccept-ranges: bytes\r\ncache-control: max-age=3150225\r\nexpires: Mon, 12 Jan 2026 14:41:17 GMT\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a209\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":3339,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3339), with no line terminators","md5":"e60ad7659c4307455a5d16ce5eb7707d","sha1":"9a307f30cb115615d62f58d5dc46bcda59bf6a2b","sha256":"493a60a7c7122a8c5cdeaef4ab3e2cdb58e1fbdcd4fb7be2c2b5b9b22312e699","sha512":"efc6f0afc64ab57433acc23d385f3fadeb3b22204a2d526f5d3af12a7013a4b4fb8d6149bca1fdf4bfcb2857cf832adef225993bff271b6e10c860d378b0a4b6","ssdeep":"","tlshash":"90617338321077b112939091167fc20af4756072a1fa6480b27ec9f5afb8cc994e2f3a","first_seen":"2025-07-01T08:09:14.330709Z","last_seen":"2026-04-15T17:38:47.427806Z","times_seen":2942,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":108,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/i18ntripgeniecomponentsdk/main.e51e127456b27fc89b19aa932812eca3.css","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:34.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /modules/ibu/i18ntripgeniecomponentsdk/main.e51e127456b27fc89b19aa932812eca3.css HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nx-ares-server: r100013666-91049052-hx2hp@SGP-ALI\r\ntiming-allow-origin: *\r\naccess-control-allow-credentials: true\r\nx-ares-source: aliyun\r\nx-ares-request-id: 692E9BA811D1D239300BC8D0\r\netag: W/\"e51e127456b27fc89b19aa932812eca3\"\r\nlast-modified: Tue, 02 Dec 2025 07:56:24 GMT\r\nx-ares-raw-buffer-size: 377876\r\nx-backend-latency: 0.015\r\ncontent-encoding: br\r\nx-varnish: 134849596\r\naccept-ranges: bytes\r\ncontent-length: 168560\r\ncache-control: max-age=4767530\r\nexpires: Sat, 31 Jan 2026 07:56:24 GMT\r\ndate: Sun, 07 Dec 2025 03:37:34 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nquic-version: 0x00000001\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a555\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":377876,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65449)","md5":"e51e127456b27fc89b19aa932812eca3","sha1":"689f3aed4052856349c536935655f5c9e7034ca7","sha256":"76c7c4ed36b45f9e4caed775989353ea5e0944b5915928934e24ce0f81077fe0","sha512":"13dc8f024fb7c96a5723113d6185eb8972bba81435781d1462443d2b7c6c110f0b71508653380bf51c8b6849a90f6218c05bd16cec055f787d8d290e5a7b1ee7","ssdeep":"6144:QVQ8ef1J8oh+x2o1pLkhM5zYCmhoAEYIOm9/8cJ/jxWoYUcKr5bvycuN:QVbef1J1cjkCpqZNm9/8cJ/jx/ZcW5bo","tlshash":"85848db2e11925edbb3ac422c290f7ce3d58e033d5924e6df94e652cc5da6d40a60b7c","first_seen":"2025-12-02T12:35:04.350543Z","last_seen":"2025-12-18T09:06:16.382333Z","times_seen":196,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/restapi/soa2/29624/clog","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:36.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"POST /restapi/soa2/29624/clog HTTP/1.1\r\nHost: www.trip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: multipart/form-data; boundary=---------------------------293621645041442851611924991706\r\nContent-Length: 1410\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003\r\nCookie: Union=AllianceID=6015822\u0026SID=168798533\u0026OUID=ctag.hash.ccjJjXXJOpYl\u0026Expires=1767670651990\u0026createtime=1765078651; UBT_VID=1765078651988.0c55yqsxjtpp; ibu_online_jump_site_result={\"isShowSuggestion\":false}; ibusite=EN; ibugroup=trip; ibulanguage=EN; ibulocale=en_xx; cookiePricesDisplayed=USD; ibu_cookie_strict=0; _abtest_userid=e7b40962-e94a-4116-9bcf-af1ceddea7af; _tp_search_latest_channel_name=hotels; _bfa=1.1765078651988.0c55yqsxjtpp.1.1765078653998.1765078653998.1.1.10320668088; _gcl_au=1.1.1944475785.1765078655; GUID=09034023113792808361; _fwb=202fgWTgpaFl4ko2G4nljfO.1765078656039; wcs_bt=s_33fb334966e9:1765078656\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1410,"data":"-----------------------------293621645041442851611924991706\r\nContent-Disposition: form-data; name=\"metric_name\"\r\n\r\nrun\r\n-----------------------------293621645041442851611924991706\r\nContent-Disposition: form-data; name=\"metric_value\"\r\n\r\n{\"status\":\"success\",\"responseHead\":{\"Timestamp\":\"/Date(1765078655667+0800)/\",\"Ack\":\"Success\",\"Errors\":[],\"Extension\":[{\"Id\":\"CLOGGING_TRACE_ID\",\"Value\":\"6b8dc8c6-8ac6-45ba-827e-b94d4a0722a2\"},{\"Id\":\"RootMessageId\",\"Value\":\"100025527-0a982050-490299-2456571\"}]}}\r\n-----------------------------293621645041442851611924991706\r\nContent-Disposition: form-data; name=\"sub_name\"\r\n\r\nH5Gateway Response\r\n-----------------------------293621645041442851611924991706\r\nContent-Disposition: form-data; name=\"page_url\"\r\n\r\nhttps://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003\r\n-----------------------------293621645041442851611924991706\r\nContent-Disposition: form-data; name=\"locale\"\r\n\r\nen_xx\r\n-----------------------------293621645041442851611924991706\r\nContent-Disposition: form-data; name=\"vid\"\r\n\r\n1765078651988.0c55yqsxjtpp\r\n-----------------------------293621645041442851611924991706\r\nContent-Disposition: form-data; name=\"aid\"\r\n\r\n6015822\r\n-----------------------------293621645041442851611924991706\r\nContent-Disposition: form-data; name=\"sid\"\r\n\r\n168798533\r\n-----------------------------293621645041442851611924991706--\r\n"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json\r\ncontent-length: 2\r\nclogging_trace_id: e4ab1a4b-d017-4e97-b919-bf4fedcf7f2e\r\nrootmessageid: 100025527-0a98e054-490299-2458630\r\nx-cat-id: 100025527-0a98e054-490299-2458630\r\nx-cat-parent-id: 100025527-0a98e054-490299-2458625\r\nx-cat-root-id: 100025527-0a98e054-490299-2458625\r\nx-cat-root-url: http://cat.fx.sgp.tripws.com:80/cat/r/m/100025527-0a98e054-490299-2458625\r\nx-cat-server: cat.fx.sgp.tripws.com:80\r\nx-scf-executed-version: flt-es-tools-function-00004\r\nx-scf-request-id: e4ab1a4b-d017-4e97-b919-bf4fedcf7f2e\r\nx-envoy-upstream-service-time: 4\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-gate-root-id: 100025527-0a98e054-490299-2458625\r\nx-gate-region: SGP-ALI\r\nx-service-call: 0.009\r\naccess-control-expose-headers: RootMessageId, x-service-call, x-gate-region\r\nx-gate: ctrip-gate\r\nx-originating-url: https://www.trip.com/restapi/soa2/29624/clog\r\nx-trip-region: de\r\ndate: Sun, 07 Dec 2025 03:37:36 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver-timing: cdn-cache; desc=MISS, edge; dur=11, origin; dur=202\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: MISS\r\nunique-request-id: 361249a1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-04-15T20:36:05.367773Z","times_seen":395948,"resource_available":true,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/locale/v3/100015469/en-XX.js?etagc=ac6182eaf6fe7b9a2c46ecdb63b69612","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:32.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /locale/v3/100015469/en-XX.js?etagc=ac6182eaf6fe7b9a2c46ecdb63b69612 HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nx-ares-server: r100013666-91049052-qrjfn@SGP-ALI\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aliyun\r\nx-ares-request-id: 6923D8ACA646103938A6C610\r\netag: W/\"ac6182eaf6fe7b9a2c46ecdb63b69612\"\r\nlast-modified: Mon, 24 Nov 2025 04:01:48 GMT\r\nx-ares-raw-buffer-size: 107464\r\nx-backend-latency: 0.014\r\ncontent-encoding: br\r\nx-varnish: 110472336\r\naccept-ranges: bytes\r\ncontent-length: 20275\r\ncache-control: max-age=4062256\r\nexpires: Fri, 23 Jan 2026 04:01:48 GMT\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a21a\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":107464,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (62370)","md5":"ac6182eaf6fe7b9a2c46ecdb63b69612","sha1":"d05b235af1472a3a5898819fda2d7f3dac403877","sha256":"16ddb9a49bf6624d8e2514ce2fca4cbc9dde9e4d42b94528916ee594c5c21021","sha512":"0e56e0588ec44ba9128d944d3cf50d698f8b19280055f7e94e580f3700a7fe0426c3985346971a83b17eceeaf4f67b7e67aafaa999f2a80d07d94b20322875b0","ssdeep":"3072:x9nV9NyPoSd2tz/kSVyOckLKnRj4mxKVqJMqb78yzvVOv:xbaui4mktz","tlshash":"d4b3840ea6d425f30fd50521fc5babab32960054af90988d8abcd07d37f2b957fa3560","first_seen":"2025-11-24T06:32:04.064504Z","last_seen":"2025-12-07T23:38:01.311226Z","times_seen":321,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":82,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/restapi/soa2/18814/getRecommendMoments","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:36.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"POST /restapi/soa2/18814/getRecommendMoments HTTP/1.1\r\nHost: www.trip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003\r\ncookieOrigin: https://www.trip.com\r\nx-ctx-Currency: USD\r\nx-ctx-Locale: en-XX\r\nlocale: en-XX\r\ncurrency: USD\r\ncontent-type: application/json\r\nx-ctx-ubt-pageid: 10320668088\r\nx-ctx-ubt-pvid: 1\r\nx-ctx-ubt-sid: 1\r\nx-ctx-ubt-vid: 1765078651988.0c55yqsxjtpp\r\nx-ctx-wclient-req: e035eee738231083c819fd07698815b5\r\nContent-Length: 284\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: Union=AllianceID=6015822\u0026SID=168798533\u0026OUID=ctag.hash.ccjJjXXJOpYl\u0026Expires=1767670651990\u0026createtime=1765078651; UBT_VID=1765078651988.0c55yqsxjtpp; ibu_online_jump_site_result={\"isShowSuggestion\":false}; ibusite=EN; ibugroup=trip; ibulanguage=EN; ibulocale=en_xx; cookiePricesDisplayed=USD; ibu_cookie_strict=0; _abtest_userid=e7b40962-e94a-4116-9bcf-af1ceddea7af; _tp_search_latest_channel_name=hotels; _bfa=1.1765078651988.0c55yqsxjtpp.1.1765078653998.1765078653998.1.1.10320668088; _gcl_au=1.1.1944475785.1765078655; GUID=09034023113792808361; _fwb=202fgWTgpaFl4ko2G4nljfO.1765078656039; wcs_bt=s_33fb334966e9:1765078656\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":284,"data":"{\"head\":{\"cid\":\"\",\"ctok\":\"\",\"cver\":\"1.0\",\"lang\":\"01\",\"sid\":\"8888\",\"syscode\":\"09\",\"auth\":\"\",\"xsid\":\"\",\"extension\":[],\"Locale\":\"en-XX\",\"Language\":\"en\",\"Currency\":\"USD\",\"ClientID\":\"\",\"source\":\"Online\",\"locale\":\"en-XX\",\"currency\":\"USD\",\"vid\":\"1765078651988.0c55yqsxjtpp\"},\"anywhere\":true}"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\nx-cat-server: cat.fx.sgp.tripws.com:80\r\nx-cat-root-id: 100025527-0a9a9d61-490299-2457910\r\nx-cat-parent-id: 100025527-0a9a9d61-490299-2457910\r\nx-cat-id: 100025527-0a9a9d61-490299-2457917\r\nx-cat-root-url: http://cat.fx.sgp.tripws.com:80/cat/r/m/100025527-0a9a9d61-490299-2457910\r\nclogging_trace_id: 7790256552919649016\r\nrootmessageid: 100025527-0a9a9d61-490299-2457910\r\nservermessageid: 100025527-0a9a9d61-490299-2457917\r\nvary: accept-encoding\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-gate-root-id: 100025527-0a9a9d61-490299-2457910\r\nx-gate-region: SGP-ALI\r\nx-service-call: 0.278\r\naccess-control-expose-headers: RootMessageId, x-service-call, x-gate-region\r\nx-gate: ctrip-gate\r\nx-originating-url: https://www.trip.com/restapi/soa2/18814/getRecommendMoments\r\nx-trip-region: de\r\ncontent-length: 1284\r\ndate: Sun, 07 Dec 2025 03:37:36 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: MISS\r\nunique-request-id: 3612492d\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3865,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"e77b525d845ca576b667fbad9c30cff3","sha1":"04a2726ec0e416d864eeec1e6dcb7cb805629f55","sha256":"6adce6bfa132e526fbfad31bf9f1aa1198d9af4176dd6c6260130122d1dcd982","sha512":"4866ee353752f068bb754dc86da49f6e3e77c15ae420ebc1daf1019e267196c7180497f49f3d2191a2c0a0d5da10dc6018f3420824f0c4be7015b803025be6ac","ssdeep":"","tlshash":"3e81f2ab8b98dadd5f8cc2b4215b311ee941397ee7f4c1b0f595c82049b28fbe031649","first_seen":"2025-12-07T03:38:25.928036Z","last_seen":"2025-12-07T03:38:25.928036Z","times_seen":1,"resource_available":false,"data":null}},"time_used":545,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":545,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/online-home/common.dll.71ce7458c2bed5cbbf3cdfbe61f9f196.css","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:32.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /modules/ibu/online-home/common.dll.71ce7458c2bed5cbbf3cdfbe61f9f196.css HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-ares-server: r100013666-21038164-fglz4@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: EYSNRMZQRY8CZVVN\r\netag: W/\"71ce7458c2bed5cbbf3cdfbe61f9f196\"\r\nlast-modified: Thu, 25 Sep 2025 05:57:20 GMT\r\nx-ares-raw-buffer-size: 40224\r\nx-backend-latency: 0.020\r\ncontent-encoding: br\r\nx-varnish: 6647389\r\nx-device: U R Android\r\naccept-ranges: bytes\r\ncontent-length: 6666\r\ncache-control: max-age=2948903\r\nexpires: Sat, 10 Jan 2026 06:45:55 GMT\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a25b\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":40224,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (40224), with no line terminators","md5":"71ce7458c2bed5cbbf3cdfbe61f9f196","sha1":"6e34bb775a802be072e2b0e6ef047b44217a6a4d","sha256":"8acdadb8b2e47045b0c268d24367528e498ccfba47bd4bfbd27d8b3302fd0899","sha512":"5c72e4d3c5a51cd6f3977bcf964d4af78ce4c248dfad1df6f10bf77e52bc419b6032832ea6da8e8d04f6a21bef241ba5c1e60b14d506bf499da45d4d510522cc","ssdeep":"384:7Zyqzz5haRQ8IGDZakX6X+CWtZICt+WwhkkZc3Gz0vd4UqNCM+KKYe4k5KGi1pEe:faRrgO2W6a3x1z5aj7","tlshash":"e00300b05e3438a667ab6f7a839a3da6ff57f35f44a23a480b99146d70c01bd61713c0","first_seen":"2025-09-25T06:10:18.771538Z","last_seen":"2026-04-15T17:38:47.432003Z","times_seen":2838,"resource_available":false,"data":null}},"time_used":409,"timings":{"blocked":177,"dns":103,"connect":5,"send":0,"wait":29,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/locale/v3/100014113/en-XX.js?etagc=bda093f877645492f01846d9368e38df","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:32.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /locale/v3/100014113/en-XX.js?etagc=bda093f877645492f01846d9368e38df HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nx-ares-server: r100013666-91049052-66z5r@SGP-ALI\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aliyun\r\nx-ares-request-id: 6932B7233789B237385861BB\r\netag: W/\"bda093f877645492f01846d9368e38df\"\r\nlast-modified: Fri, 05 Dec 2025 10:42:43 GMT\r\nx-ares-raw-buffer-size: 422219\r\nx-backend-latency: 0.013\r\ncontent-encoding: br\r\nx-varnish: 141188559\r\naccept-ranges: bytes\r\ncontent-length: 96803\r\ncache-control: max-age=5036711\r\nexpires: Tue, 03 Feb 2026 10:42:43 GMT\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a210\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":422219,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (62255)","md5":"bda093f877645492f01846d9368e38df","sha1":"11fa5ffcbfc7851cc293469024e991b065f78768","sha256":"1976339a8987d76ccb6b1058828f77221e2cebbc1249d9cd5f506a16c9c2da47","sha512":"9c30b670e749d11cd96d4b0775210072609aa5b9938ced3d7622b1f235bb6f3730d088037ea7a0b131567095b368390124eecc4c38bf287ec2f78677af74d78c","ssdeep":"6144:GtN2KXFvewHYdFNxdW2qliezIsdRGuE9m075TXAQ5RBz81a+zavR1lKGcV5xn:GttGw4dfRwvVOTwGBz81axblkBn","tlshash":"9f94f91f53b819371e6701a2ec39d59f7b8c100ca31ad962ccbf813d9391599e23ba9d","first_seen":"2025-12-05T11:35:05.490882Z","last_seen":"2025-12-08T09:12:13.043008Z","times_seen":66,"resource_available":true,"data":null}},"time_used":140,"timings":{"blocked":98,"dns":0,"connect":0,"send":0,"wait":39,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/online-assets/homeFont.a43929b5937abefe3d0e34768080ee94.css","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:32.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /modules/ibu/online-assets/homeFont.a43929b5937abefe3d0e34768080ee94.css HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ncontent-length: 1664\r\nx-ares-server: r100013666-91049052-v7v98@SGP-ALI\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aliyun\r\nx-ares-request-id: 690AE88C639D1835353FA8CB\r\netag: W/\"a43929b5937abefe3d0e34768080ee94\"\r\nlast-modified: Wed, 05 Nov 2025 06:02:52 GMT\r\nx-ares-raw-buffer-size: 16676\r\nx-backend-latency: 0.008\r\ncontent-encoding: br\r\nx-varnish: 38957321 41877895\r\nx-device: U R iPhone\r\naccept-ranges: bytes\r\ncache-control: max-age=2427920\r\nexpires: Sun, 04 Jan 2026 06:02:52 GMT\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a259\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":16676,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (16616), with no line terminators","md5":"a43929b5937abefe3d0e34768080ee94","sha1":"e635f8d9c85fd808db4072870f688397c2b79f11","sha256":"8ae731c4be13c6c4a15dad0fdf8cccefa7e0dedaa3e8e24d5f3a8c9d3557d395","sha512":"597c6d11b018065f1a9bc1399f9ba03692a4fb067f9ea45cca27edcd863c11f577df85c54a030c4771121cc82b40cda7f5facd676dc18bdd0fd0125087f4ad53","ssdeep":"192:3mYMl+3Bb+oI/ekyeS72A0nKlteTzqdjzFDPRg8S9+s/I:br","tlshash":"8e72ea48fe5cf972fea2291a730f1d2a7026fd4d75a5c3eda6419e1c2cd3a792394210","first_seen":"2025-11-05T06:37:54.327732Z","last_seen":"2026-04-15T17:38:47.565809Z","times_seen":2123,"resource_available":false,"data":null}},"time_used":417,"timings":{"blocked":178,"dns":110,"connect":1,"send":0,"wait":29,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/locale/v3/330153/en-XX.js?etagc=c00f3a95ed92b69fe7b16389b59faee4","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:32.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /locale/v3/330153/en-XX.js?etagc=c00f3a95ed92b69fe7b16389b59faee4 HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nx-ares-server: r100013666-21038164-4lxdk@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: SK2J03ARWM985AGD\r\netag: W/\"c00f3a95ed92b69fe7b16389b59faee4\"\r\nlast-modified: Tue, 25 Nov 2025 09:21:51 GMT\r\nx-ares-raw-buffer-size: 53332\r\nx-backend-latency: 0.030\r\ncontent-encoding: br\r\nx-varnish: 6936225\r\nx-device: U R iPhone\r\naccept-ranges: bytes\r\ncontent-length: 13781\r\ncache-control: max-age=4167859\r\nexpires: Sat, 24 Jan 2026 09:21:51 GMT\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a21f\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":53332,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (48354)","md5":"c00f3a95ed92b69fe7b16389b59faee4","sha1":"c71f62fa77ac9c7be883da495b8f77dbcdcfc91a","sha256":"066443ee681f3e6c575e9ea9a26671acabd5156043f3d340833e78de09ec18ca","sha512":"37851d09d0ea70ac0bca81f557bd1de5657cf9a4dc19d8ee2f65ff96893541e261b31cdbaadb5a1f3ab1b265848f6b1034cd08bc28a3b0b9d301d5d840601d81","ssdeep":"768:yABQN9ufzLZN6P3f32MXpPrmGbI/fIPhov2NJxZLDiO6s9:fC7ufzla3f2M5PrmGE/gPhFRMC","tlshash":"4033d50ab6f53a321bd11165fcaba80522e0444a1ec55c69e9fcd8bc33d4bddbd2724e","first_seen":"2025-11-25T09:36:21.079853Z","last_seen":"2025-12-11T10:11:07.775138Z","times_seen":318,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":77,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/online-home/d1449144659cec6aa82f06913d545122.d1449144659cec6aa82f06913d545122.woff2","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:35.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /modules/ibu/online-home/d1449144659cec6aa82f06913d545122.d1449144659cec6aa82f06913d545122.woff2 HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ak-s-cw.tripcdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: font/woff2\r\ncontent-length: 41644\r\nx-ares-server: r100013666-21038164-fglz4@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: 6JY2M2XQDCHAYGYW\r\netag: W/\"d1449144659cec6aa82f06913d545122\"\r\nlast-modified: Sun, 10 Aug 2025 20:18:02 GMT\r\nx-ares-raw-buffer-size: 41644\r\nx-backend-latency: 0.020\r\nx-varnish: 161153918\r\naccept-ranges: bytes\r\ncache-control: max-age=2689167\r\nexpires: Wed, 07 Jan 2026 06:37:02 GMT\r\ndate: Sun, 07 Dec 2025 03:37:35 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nquic-version: 0x00000001\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a658\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":41644,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 41644, version 1.0","md5":"d1449144659cec6aa82f06913d545122","sha1":"b6e6338c0b0b7ced91343b0cbb05434e7c943a39","sha256":"4baaee36e79bbbe682208d9a21d48bb00203e1cf82abd48808097fedb28bc619","sha512":"8ab4c90c497658b852b86004612168f2e1a1881ab1ef5509be07a0deb16b6c11c06bb633bbfa351d935926253a3b143dfc1fdb20e7ba7d8a42fa6be26964bd8b","ssdeep":"768:4LULgkl1pyjpGS1YtUbN4CwRNPQ1NxjSAFVGUGPom14sTcOb5IVKLv13imm4:7L3jyFGS1Y8N4NRNPu2AFT/m1xDb5VLj","tlshash":"2013022e0744e79e1d2dbc20f5b290897b918b7bd76462043df4684b53dbe9608c63ac","first_seen":"2024-08-29T17:41:31.000774Z","last_seen":"2026-04-15T17:38:47.520433Z","times_seen":2934,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":4,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-MV95N9D","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:34.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:33:43 GMT","end":"Mon, 19 Jan 2026 08:33:42 GMT"},"fingerprint":{"sha1":"4E:9E:D1:61:E4:7D:C2:8A:B6:AD:D2:31:C7:07:01:E4:DB:A0:A7:A9","sha256":"C5:DD:D4:CA:97:B7:B5:8C:B4:99:E8:56:30:AC:1B:F0:FD:7C:5A:FD:19:ED:13:D0:27:D6:0B:76:C7:C7:A0:66"}}},"request":{"raw":"GET /gtm.js?id=GTM-MV95N9D HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ndate: Sun, 07 Dec 2025 03:37:34 GMT\r\nexpires: Sun, 07 Dec 2025 03:37:34 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sun, 07 Dec 2025 03:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 170722\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":737475,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (50499)","md5":"cbb680a64984bcd60253a39f99a290c6","sha1":"f07c2adabdb84a2a076e0d48bf5b99db2914acfb","sha256":"6e97d4606a181ee646c6f9bf197711edb57338aadab0b70f6a6c4265b0fe6551","sha512":"11d48ebcb10509b46b176641ccc736feb23c9b1587ec8c4e84753881dc3d6c27c0931bb47d16d4f84e98c5450fb73f52f1fd09bc651164cdd91aaf4099c060af","ssdeep":"6144:mO/NwxY1nlNjZwEVKQ2b9WSwVWSayql+VD75U6k/bbqt3H3cfjxvxTHiVdT:r/NwC2BjtSwwVDt3c9xM9","tlshash":"7bf41c8f77c4a47ac3a59520a43f454d2a3d10e2b64c5490f0d98ce42e799ba71a3fef","first_seen":"2025-12-07T03:38:25.940804Z","last_seen":"2025-12-07T03:38:25.940804Z","times_seen":1,"resource_available":true,"data":null}},"time_used":311,"timings":{"blocked":142,"dns":0,"connect":0,"send":0,"wait":40,"receive":24,"ssl":105},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-T2SD","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:34.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:33:43 GMT","end":"Mon, 19 Jan 2026 08:33:42 GMT"},"fingerprint":{"sha1":"4E:9E:D1:61:E4:7D:C2:8A:B6:AD:D2:31:C7:07:01:E4:DB:A0:A7:A9","sha256":"C5:DD:D4:CA:97:B7:B5:8C:B4:99:E8:56:30:AC:1B:F0:FD:7C:5A:FD:19:ED:13:D0:27:D6:0B:76:C7:C7:A0:66"}}},"request":{"raw":"GET /gtm.js?id=GTM-T2SD HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 07 Dec 2025 03:37:34 GMT\r\nexpires: Sun, 07 Dec 2025 03:37:34 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sun, 07 Dec 2025 03:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 153021\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":520814,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (34100)","md5":"d00f01868bdbb63849d02d70661cafea","sha1":"db8e03e6001b8a1b26226605d2bce725fcffb63c","sha256":"a66d52e4525abfe3316875da284e9372ad9c7224ce6ec1168fb1ae52e3c495d8","sha512":"6e981f9f8e04ff6d57bd9b259d0630b9d2ee102c849a4a5de63f90e0c98ccba72ba2355e9f0ed35235cf1b56fe3ab55e9b234fab78eb3fdb8310458883fcd6d6","ssdeep":"6144:wSqgZ+EXUa4wcwT225QpWSwVWSayql+VD75U6k/bbqt3H3cAqIvxT6wVN:BT22ojtSwwVDt3cwxRN","tlshash":"49b42bcdb3c5b4b683a6aa74842f090e613e24b6b48cec50e1e6c8d52e7457d2163f7d","first_seen":"2025-12-06T18:12:40.083491Z","last_seen":"2025-12-07T07:20:29.587132Z","times_seen":4,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":7,"connect":23,"send":0,"wait":42,"receive":26,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/restapi/soa2/29624/clog","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:37.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"POST /restapi/soa2/29624/clog HTTP/1.1\r\nHost: www.trip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: multipart/form-data; boundary=---------------------------33533485121950479342875213080\r\nContent-Length: 1404\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003\r\nCookie: Union=AllianceID=6015822\u0026SID=168798533\u0026OUID=ctag.hash.ccjJjXXJOpYl\u0026Expires=1767670651990\u0026createtime=1765078651; UBT_VID=1765078651988.0c55yqsxjtpp; ibu_online_jump_site_result={\"isShowSuggestion\":false}; ibusite=EN; ibugroup=trip; ibulanguage=EN; ibulocale=en_xx; cookiePricesDisplayed=USD; ibu_cookie_strict=0; _abtest_userid=e7b40962-e94a-4116-9bcf-af1ceddea7af; _tp_search_latest_channel_name=hotels; _bfa=1.1765078651988.0c55yqsxjtpp.1.1765078653998.1765078653998.1.1.10320668088; _gcl_au=1.1.1944475785.1765078655; GUID=09034023113792808361; _fwb=202fgWTgpaFl4ko2G4nljfO.1765078656039; wcs_bt=s_33fb334966e9:1765078656\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1404,"data":"-----------------------------33533485121950479342875213080\r\nContent-Disposition: form-data; name=\"metric_name\"\r\n\r\ngetTripGeniePreferences\r\n-----------------------------33533485121950479342875213080\r\nContent-Disposition: form-data; name=\"metric_value\"\r\n\r\n{\"status\":\"success\",\"responseHead\":{\"Timestamp\":\"/Date(1765078656476+0800)/\",\"Ack\":\"Success\",\"Errors\":[],\"Extension\":[{\"Id\":\"CLOGGING_TRACE_ID\",\"Value\":\"2355593138954457895\"},{\"Id\":\"RootMessageId\",\"Value\":\"100025527-0a9a62a8-490299-2457296\"}]}}\r\n-----------------------------33533485121950479342875213080\r\nContent-Disposition: form-data; name=\"sub_name\"\r\n\r\nH5Gateway Response\r\n-----------------------------33533485121950479342875213080\r\nContent-Disposition: form-data; name=\"page_url\"\r\n\r\nhttps://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003\r\n-----------------------------33533485121950479342875213080\r\nContent-Disposition: form-data; name=\"locale\"\r\n\r\nen_xx\r\n-----------------------------33533485121950479342875213080\r\nContent-Disposition: form-data; name=\"vid\"\r\n\r\n1765078651988.0c55yqsxjtpp\r\n-----------------------------33533485121950479342875213080\r\nContent-Disposition: form-data; name=\"aid\"\r\n\r\n6015822\r\n-----------------------------33533485121950479342875213080\r\nContent-Disposition: form-data; name=\"sid\"\r\n\r\n168798533\r\n-----------------------------33533485121950479342875213080--\r\n"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json\r\ncontent-length: 2\r\nclogging_trace_id: 3856e176-f452-4edb-a7d2-5ea5a0979f88\r\nrootmessageid: 100025527-0a982050-490299-2458485\r\nx-cat-id: 100025527-0a982050-490299-2458485\r\nx-cat-parent-id: 100025527-0a982050-490299-2458481\r\nx-cat-root-id: 100025527-0a982050-490299-2458481\r\nx-cat-root-url: http://cat.fx.sgp.tripws.com:80/cat/r/m/100025527-0a982050-490299-2458481\r\nx-cat-server: cat.fx.sgp.tripws.com:80\r\nx-scf-executed-version: flt-es-tools-function-00004\r\nx-scf-request-id: 3856e176-f452-4edb-a7d2-5ea5a0979f88\r\nx-envoy-upstream-service-time: 3\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-gate-root-id: 100025527-0a982050-490299-2458481\r\nx-gate-region: SGP-ALI\r\nx-service-call: 0.01\r\naccess-control-expose-headers: RootMessageId, x-service-call, x-gate-region\r\nx-gate: ctrip-gate\r\nx-originating-url: https://www.trip.com/restapi/soa2/29624/clog\r\nx-trip-region: de\r\ndate: Sun, 07 Dec 2025 03:37:37 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver-timing: cdn-cache; desc=MISS, edge; dur=11, origin; dur=212\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: MISS\r\nunique-request-id: 36124a65\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-04-15T20:36:05.367773Z","times_seen":395948,"resource_available":true,"data":null}},"time_used":262,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":235,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-d.tripcdn.com/images/0AS6b1200090fx7s7F635.png","fqdn":"ak-d.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:33.852Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /images/0AS6b1200090fx7s7F635.png HTTP/1.1\r\nHost: ak-d.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/png\r\ncontent-length: 14338\r\naccess-control-allow-origin: *\r\netag: Dg0on7fbkA,0AS,0AS6b1200090fx7s7F635\r\nlast-modified: Mon, 01 Apr 2024 00:00:00 GMT\r\ntiming-allow-origin: *\r\ncache-control: max-age=2680215\r\nexpires: Wed, 07 Jan 2026 04:07:49 GMT\r\ndate: Sun, 07 Dec 2025 03:37:34 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a4b8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14338,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, interlaced","md5":"0f4e3cccb20ff1f496e23fdaeb7f0471","sha1":"7e81aec43667000872cf3933b098f910c071f13d","sha256":"c04fca805b58a22a05c8c4d35054758b69d695af870b541020a80f97eccb8fcc","sha512":"b6a3b598ac95e0dc410bb9b22ded17333fab3ec8fc4803a5ea6838eedfbf55b3bb645508936e837f378796641a34de6a894282e2e72d3abc202e31fbf681775d","ssdeep":"192:ciirD+NLZZB3m7LeYNXntEnWuWE5C1BNdqZRzzunASe6IiQUD5cfz0GUYWULmkbS:h4D+NLZZtULHXtQ2BNdqZyAbSc4A32t","tlshash":"7252c0e827e6c70f8a6805dda733737c807da1f5e4bcea9e111863815cd8175f518232","first_seen":"2025-09-16T02:28:07.432925Z","last_seen":"2026-04-15T17:38:47.453039Z","times_seen":2736,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":200,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ubt-sgp.trip.com/bee/collect","fqdn":"ubt-sgp.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:36.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"POST /bee/collect HTTP/1.1\r\nHost: ubt-sgp.trip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 2197\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nCookie: Union=AllianceID=6015822\u0026SID=168798533\u0026OUID=ctag.hash.ccjJjXXJOpYl\u0026Expires=1767670651990\u0026createtime=1765078651; UBT_VID=1765078651988.0c55yqsxjtpp; ibu_online_jump_site_result={\"isShowSuggestion\":false}; ibulanguage=EN; ibulocale=en_xx; cookiePricesDisplayed=USD; _abtest_userid=e7b40962-e94a-4116-9bcf-af1ceddea7af; _bfa=1.1765078651988.0c55yqsxjtpp.1.1765078653998.1765078653998.1.1.10320668088; _gcl_au=1.1.1944475785.1765078655; GUID=09034023113792808361; _fwb=202fgWTgpaFl4ko2G4nljfO.1765078656039\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2197,"data":"{\"d\":\"f001765078656573!m1Legacy!d=E8Z7ImNvbnRleHQiOlsiMTAzMjA2NjgwODgiLCIxNzY1MDc4NjUxOTg4LjBjNTV5cXN4anRwcCIsMSwxAB71LjMuNzIvbmV3L3QAEPMwMDAxNDQxNixudWxsAgD3LCJvbmxpbmUiBAfJaHR0cHM6Ly93d3cudHJpcC5jb20vP0FsbGlhbmNlaWQ9NjAxNTgyMiZTSUQ9MTY4Nzk4NTMzJgEn2l9zdWIxPTAyMGFhNzlhNjBlOTRjZDA5NGJmMDBkNjViNTA5MzQ4BiL2Mz1QMzk0MjAwMwR1B4oB_DEyODAAqgH6MjQsNDgzAAv3LDMsImVuLXVzAPABAAAAAOl7XCJ2ZXJzaW9uXCI6XCJcIixcIm5ldAII_E5vbmUCDPhwbGF0Zm9ybQQc_30BkAIBNvlmZWZfbmFtACIFMwEOAE0HB_5yZwcC_WxhbgMIAIAB_lhYAw37aXphcmQHTvgiU0dQLUFMSQ65AQCpAfx0cnVlAgAHDfpdLCJidXMA8wL-c3MB0AMEzAIBzAMFyQIACepjdGFnLmhhc2guY2NqSmpYWEpPcFlsDlEMAAIA_3sAqAH8dGVyVABbBpkE6jQ2NDUsImluc3RLZXkiOiJjOTE5OUYAZfxucG1WA8UCABP7MS42LjcDD_9FDjL8Mzg5OAC3AflpelRva2VuAbcBAMYBAJEE_iI6A-YB_mZyANIC_HdvcmsARvl3ZWItY29yANUE-SJ0Y3BTZW4AI_tmYWxzZQCBAfJzU3VwcG9ydFdhc20iOgKWAgAS_08BzQP-ZWEAVP8iAQ8BNf9sADIACgOABQGPAvZhcHRhaW5BcHBJARYGxgUAGO9sc1NpemUiOjQwNiwidWJ0XwGyA_11YWcAEACKAgAeARD5Y3VycmVuYwH7Af1VU0QEDv1zaXQBIf5FTgQJ-2xvY2FsAzEA7AMAEv53YweWAvsyLjAuOAFsASb9cmVxAfkBB_wG9zY1NzM1NzU3SQG6AQEe-2JhdGNoDxIAFfpkOF8xIn0AvQL8dXNlcgDHAgO8AuhNOi0xLDIzMDgxNV9JQlVfcHdheWg6QTsFEP03MjACE_wzd1NKCAz9NTI5AhL-T1QJC_wxMjE4AxH-SFMCEfs5NywyNADUBgMQ-0hURzpCABMAKPw1MDYyA2sApgj_VQCOAQIU_jI2ARb_OQQT-05ld1BvAhP-NDgCEwScAfpEZXN0aW4CFP84Akb9OTI0AhT5Y2FtYmFubgBKAXgAyQf-MjUAef8xAhf8UHJvZADpA_5yYwPXAf8yATT9NDA3BaYB_0IATAWJCf8iAaAC-2J0TGlzAfwJ_Fs1MiwHwQL5NDU3LCJtZQCfBP9jBCj-eyIB1QcD-gT_XwH8BPpfZGV0ZWMA-Qn_IgDMBgDZBP57IgLbA_xTdG9yApgEA_gE_mZlAKUDBoIF-m5kZXhEQgeQBfxSZXdyAKIE-0Nvb2tpAVj_VABL_WlzSQLqBQbNBf9zA84F_00B7gP_ZQBmAzcED_xBdmlmBQv5cHVyZVVybABFEtcKG8kF-WZyb21TREsFRAT9CQmNBQD2AQH0Af1JbmkArQL9MjcwAK8HEoMH_30AO_5hbADlBv46MQCEBf5bNQDlCgeZBf80AMIGE8IC_GJiel8B1gX_ZgDfDAbKAgAK9DoiNUUxNzlBLUUxNADQC_otQzFCMDkCrQEDF-0wNyFROFZiaCtReThKclFRUTg4AQHxNVFRSFdZUXZIRkZGRklZABAAAP5ZUQAZ9UoyUUlRSThZSi84BBD8UXB2VQEI_HZzSXYAHgI7ylFRMGszSXJRQVF2UVFveks2b05wTFpVZDBvbU1MOVlNa1p2TWVFbW5MRW1LTDkyUGVCa2lMWgAs6kpYMUdkTHdRby90a1oyM0xFWU1lWlUAOfYzRDZCMnBMZDhEATzsTE9Rd2Vvdk9lT21pUW92dzBvOEsAPfx3ZUgrAQABAONBUUhOYmtNWVFOTlVCbForUTZFS2dOTkxRWjlOaQD3Du0zL0JtUU5ucGI2QjVNL0lRK3MrAckBzDhNWE0vYlhIMjEvNHRkR25pUVVzMndHTXpRTG9ESUxPWUlMZExBTFpMTTBaektMbytPZWQA4QEEhAIGAAwA_CJ9fV0Argb_cwDtCgquCwHyCP99\u0026ac=b\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json\r\ncontent-length: 66\r\ncache-control: private, no-store, no-cache, no-cache=Set-Cookie, proxy-revalidate\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\npragma: no-cache\r\nx-content-type-options: nosniff\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List\r\nx-forwarded-for: 91.90.42.154\r\naccess-control-max-age: 300\r\np3p: CP=CUR ADM OUR NOR STA NID\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\ndate: Sun, 07 Dec 2025 03:37:37 GMT\r\nalt-svc: h3=\":443\"; ma=93600\r\nset-cookie: uid=C679EvARHtNWOn+gZxUeig==; Max-Age=63072000; Expires=Tue, 07 Dec 2027 03:37:36 GMT; Path=/\nsuid=C679EvARHtNWOn+gZxUeig==; Max-Age=63072000; Expires=Tue, 07 Dec 2027 03:37:36 GMT; Path=/; Secure; SameSite=None\r\nquic-version: 0x00000001\r\nserver-timing: cdn-cache; desc=MISS, edge; dur=1, origin; dur=196\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: MISS\r\nunique-request-id: 361249d9\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":66,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a915e0eb6695bdb72c30a6d4572625c2","sha1":"698e5a94fc7995677fea9a34a71102d73879c684","sha256":"31f39aefadc01903fbecb8424bffac342384c6cfc469da61ce7d0544b5c6e4f7","sha512":"6439cb3dc34eb9f9eda380d25e7628353f272bd2336f19284db7334638cd747dfc0e9d9e98542cd6cd03e74112c86f2b7c78649fe5d02ac293614589de045899","ssdeep":"","tlshash":"e3a002411205f97a8bd5166b251add51fff8b78989569141540ec86c4a20c9c569f248","first_seen":"2025-12-07T03:38:25.942926Z","last_seen":"2025-12-07T03:38:25.942926Z","times_seen":1,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pages.trip.com/images/online-adu/filled.png","fqdn":"pages.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:37.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"GET /images/online-adu/filled.png HTTP/1.1\r\nHost: pages.trip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nCookie: Union=AllianceID=6015822\u0026SID=168798533\u0026OUID=ctag.hash.ccjJjXXJOpYl\u0026Expires=1767670651990\u0026createtime=1765078651; UBT_VID=1765078651988.0c55yqsxjtpp; ibu_online_jump_site_result={\"isShowSuggestion\":false}; ibulanguage=EN; ibulocale=en_xx; cookiePricesDisplayed=USD; _abtest_userid=e7b40962-e94a-4116-9bcf-af1ceddea7af; _bfa=1.1765078651988.0c55yqsxjtpp.1.1765078653998.1765078653998.1.1.10320668088; _gcl_au=1.1.1944475785.1765078655; GUID=09034023113792808361; _fwb=202fgWTgpaFl4ko2G4nljfO.1765078656039\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/png\r\ncontent-length: 615\r\nx-ares-server: r100013666-91017039-d2ncj@SHAXY\r\ntiming-allow-origin: *\r\nx-ares-source: aliyun\r\nx-ares-request-id: 6933E7A3D414B23539E4DEB4\r\netag: W/\"f72cfaa947b86dfb544c8344baaf6ba0\"\r\nlast-modified: Sat, 06 Dec 2025 08:21:55 GMT\r\nx-ares-raw-buffer-size: 615\r\nx-backend-latency: 0.018\r\nx-varnish: 560077074 558866519\r\naccept-ranges: bytes\r\ncache-control: max-age=119715\r\nexpires: Mon, 08 Dec 2025 12:52:52 GMT\r\ndate: Sun, 07 Dec 2025 03:37:37 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 36124b4f\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":615,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"f72cfaa947b86dfb544c8344baaf6ba0","sha1":"3cfe4ec6383e8a169848190bbcf586b6f2b172f5","sha256":"a11116e63d603ff9958cd937494d922f8a2bc0904a92801f8ade7413b05a7bd5","sha512":"a13832e5ab0f755929f964952589c1ae7bc38e0e889963855b8acf35cca06b32ba3452dc6e596b335b18c1fdb5227a3369dc678afd0927b1b035e7dea9dcd855","ssdeep":"","tlshash":"d6f00ebbf28449aed3440a69a01a04ccc88abf6a101509ae3950782ac27b11aa0c4b08","first_seen":"2024-05-18T10:55:40Z","last_seen":"2026-04-05T18:06:35.758446Z","times_seen":1642,"resource_available":false,"data":null}},"time_used":700,"timings":{"blocked":660,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-07T03:37:31.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"GET /?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003 HTTP/1.1\r\nHost: www.trip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nvary: Accept-Encoding, User-Agent\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-accel-buffering: no\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-readtime: 67\r\nx-trip-app-name: online-home\r\nx-trip-app-version: 13.204.6\r\nx-trip-app-idc: SGP-ALI\r\nx-backend-latency: 0.068\r\ncontent-encoding: gzip\r\nx-trip-region: de\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\nset-cookie: Union=AllianceID=6015822\u0026SID=168798533\u0026OUID=ctag.hash.ccjJjXXJOpYl\u0026Expires=1767670651988\u0026createtime=1765078651; Max-Age=2592000; Domain=trip.com; Path=/; Expires=Tue, 06 Jan 2026 03:37:31 GMT\nUnion=AllianceID=6015822\u0026SID=168798533\u0026OUID=ctag.hash.ccjJjXXJOpYl\u0026Expires=1767670651990\u0026createtime=1765078651; Max-Age=2592000; Domain=trip.com; Path=/; Expires=Tue, 06 Jan 2026 03:37:31 GMT\nUBT_VID=1765078651988.0c55yqsxjtpp;domain=.trip.com;path=/;expires=Mon, 11 Jan 2027 03:37:31 GMT\nibu_online_jump_site_result={\"isShowSuggestion\":false}; Domain=trip.com; Expires=Mon, 07 Dec 2026 03:37:31 GMT\nibusite=; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT\nibusite=EN; Max-Age=2592000; Path=/\nibugroup=; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT\nibugroup=trip; Max-Age=2592000; Path=/\nibulanguage=; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT\nibulanguage=EN; Max-Age=2592000; Domain=trip.com; Path=/\nibulocale=; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT\nibulocale=en_xx; Max-Age=2592000; Domain=trip.com; Path=/\ncookiePricesDisplayed=; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT\ncookiePricesDisplayed=USD; Max-Age=2592000; Domain=trip.com; Path=/\nibu_cookie_strict=0; Max-Age=2592000; Path=/\n_abtest_userid=e7b40962-e94a-4116-9bcf-af1ceddea7af; domain=.trip.com; max-age=86400000; path=/; SameSite=None; Secure\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver-timing: cdn-cache; desc=MISS, edge; dur=0, origin; dur=316\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: MISS\r\nunique-request-id: 36124408\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":94378,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (45478)","md5":"9d650bc2d74ae736c4fe5bdb9f753d8e","sha1":"2f265f799eebb30ec5f50b2aa0c8562c0df0c951","sha256":"f40bb1e2de939da0e5a3c897065ee79aca9c75213504634143ff30182f065a4e","sha512":"9f16ac333e2ac72b30c32f2af156a4a31676e1a82b1c6d677ccc56a6fc55f9eeb6fdacc5f19cda98dbaea74872c97018581d9ac5025205d69c034766ffd72507","ssdeep":"1536:l2MRn2ldnNDDSYlBhyyyyyyUyyyUyyUyElxK4XVbL2syUnNRUk8r5ovL:oDDSYlBRvUk8+","tlshash":"4293d77662c8d8378f9361d2b565741da886a13bdacbdc60f1ecdf9817d2fea941000b","first_seen":"2025-12-07T03:38:25.945694Z","last_seen":"2025-12-07T03:38:25.945694Z","times_seen":1,"resource_available":false,"data":null}},"time_used":681,"timings":{"blocked":176,"dns":160,"connect":1,"send":0,"wait":329,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/locale/v3/33000034/en-XX.js?etagc=c179f8329f4ac94e4e7c7d414162368a","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:32.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /locale/v3/33000034/en-XX.js?etagc=c179f8329f4ac94e4e7c7d414162368a HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 1519\r\nx-ares-server: r100013666-21038164-wg5bn@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: TT4MFRH31BTFNFKT\r\netag: W/\"c179f8329f4ac94e4e7c7d414162368a\"\r\nlast-modified: Mon, 13 Oct 2025 12:54:53 GMT\r\nx-ares-raw-buffer-size: 5297\r\nx-backend-latency: 0.040\r\ncontent-encoding: br\r\nx-varnish: 15589100\r\naccept-ranges: bytes\r\ncache-control: max-age=3090177\r\nexpires: Sun, 11 Jan 2026 22:00:29 GMT\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a220\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":5297,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (312)","md5":"c179f8329f4ac94e4e7c7d414162368a","sha1":"fdf524cd3bc9c1f847e4e67b24f22f20827dc078","sha256":"4840cada36f84d552842f954861ead7e6a8931a2165e3abd8f6c3e91e4274eef","sha512":"563316eecb211668fab19f240298a6a03ff060cdf09a917626ffb7779768722a0b2341f7f49753e92a092bb1dce915201ccc53c1178f9faeaac39efffdb8831d","ssdeep":"96:A+zQeDOpqdGWZ/a4kEpti+tIGmMGxWlgn3gRs0WsIJIA96cj/bkS3H3zbhX0Dts9:HEe4gfizEuDGK/nUWTq0j4S3HBXoywfG","tlshash":"7ab1838a6971a027d4f3f5fa9a2f4600f070a82314c58a59f75c21ac3f914d7d2f2ee9","first_seen":"2025-10-13T16:34:16.523649Z","last_seen":"2026-04-15T17:38:47.46257Z","times_seen":2354,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":76,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/online-home/onlineSecondEntry.ef96293b184e4ac840928e77c45394da.js","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:36.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /modules/ibu/online-home/onlineSecondEntry.ef96293b184e4ac840928e77c45394da.js HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nx-ares-server: r100013666-91049052-xrhz8@SGP-ALI\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aliyun\r\nx-ares-request-id: 692FE7BECC86F138321E25C6\r\netag: W/\"ef96293b184e4ac840928e77c45394da\"\r\nlast-modified: Wed, 03 Dec 2025 07:33:18 GMT\r\nx-ares-raw-buffer-size: 140819\r\nx-backend-latency: 0.014\r\ncontent-encoding: br\r\nx-varnish: 139035418\r\naccept-ranges: bytes\r\ncontent-length: 40450\r\ncache-control: max-age=4852543\r\nexpires: Sun, 01 Feb 2026 07:33:19 GMT\r\ndate: Sun, 07 Dec 2025 03:37:36 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nquic-version: 0x00000001\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a7ec\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":140819,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ef96293b184e4ac840928e77c45394da","sha1":"2d661492ae0b1299928b451758c81fec3555a9df","sha256":"42c8f828773a36cc2a7d2632b79c0c7a05f546bc399ee69c36ded24ca62b963f","sha512":"4056caef726c4f00b967096362b7776faffaeabf41d33cdc11ae9d74cfb01318e55bbe3983a939479cfed0fbad308a3ba839ed2402c993e6d3f31adcc3cc3c82","ssdeep":"1536:2R6UDqnMBZfBERgvSeN6shpgTdmnVK4v/OsEMP6Kadrm+yXNcvqcYKrCfPg7qeQ:ZUWnozEvdigTkk6OsEMPGdruPE+Hgi","tlshash":"e5d31b89b191f4aa03e350ba403f250af37a2e55781dc820e150d8d97cb9b9f9277f6d","first_seen":"2025-12-03T08:08:10.11161Z","last_seen":"2025-12-08T09:12:13.087402Z","times_seen":101,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-d.tripcdn.com/images/0a21812000jgya8g53B8A.jpg","fqdn":"ak-d.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:37.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /images/0a21812000jgya8g53B8A.jpg HTTP/1.1\r\nHost: ak-d.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 10574\r\naccess-control-allow-origin: *\r\netag: Dg0on7fbkA,0a2,0a21812000jgya8g53B8A\r\nlast-modified: Mon, 01 Apr 2024 00:00:00 GMT\r\ntiming-allow-origin: *\r\ncache-control: max-age=905588\r\nexpires: Wed, 17 Dec 2025 15:10:45 GMT\r\ndate: Sun, 07 Dec 2025 03:37:37 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a99e\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10574,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 400x301, components 3","md5":"7469b130d6c41c022ab641589b4051b9","sha1":"31f2200dc0b26c801f65e3744957717c69df8d23","sha256":"2562b646b3598f5278ad70e1b5a71f7d988934e1023b300aaaa82d404799857d","sha512":"02597391db93e97b3377e1a2c31fca08f227f4f8a09c77c53ce7d248b6aef8f89065c493d7c5dbe7a641c784a54e2a9c4a8a60b7fbcbbf5b8c5c6c5a7d2ab47d","ssdeep":"192:A58xVFNzKBPe90Mth7MatIsc+B/hbCtf3JHJHr7y4jrh:AKVFNz4W+MtF1tr/dC9J1Brh","tlshash":"7a22af25ca352710cb77f7f4ac402b646389b5df97d0553998281cfcbc0225e6c99623","first_seen":"2025-09-27T19:37:36.940315Z","last_seen":"2026-01-20T14:49:04.802298Z","times_seen":503,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-d.tripcdn.com/images/05E5p12000cga1phzA0ED.webp","fqdn":"ak-d.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:33.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /images/05E5p12000cga1phzA0ED.webp HTTP/1.1\r\nHost: ak-d.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ak-s-cw.tripcdn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 01 Apr 2024 00:00:00 GMT\r\netag: Dg0on7fbkA,05E,05E5p12000cga1phzA0ED\r\ncontent-type: image/webp\r\ncontent-length: 2208\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncache-control: max-age=988645\r\nexpires: Thu, 18 Dec 2025 14:14:59 GMT\r\ndate: Sun, 07 Dec 2025 03:37:34 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a4b5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2208,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"18837529dc6e5335263d03560a6b69d5","sha1":"8a0609af1667c60e471cd469f154375d7eeb5e11","sha256":"4c44dd2d4607e09a227d2302fa60b58f598097b6900371f71a97a6d9074750d9","sha512":"69f835c7dffaf9c04e9d8b69f4c874d20afbc07b42d24b04521e41e7052eeaeedd20d65c17e31087653a140d74a13c6c1d50483775749d945922976b17848c31","ssdeep":"","tlshash":"604129c4b79c4634825b7042af0a97102aa5bd27a3005892efa400adea690e132be060","first_seen":"2025-04-25T05:05:03.168578Z","last_seen":"2026-04-15T17:38:47.579403Z","times_seen":2713,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":202,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/online-home/6cb52f89be427ca325d51e507a6a7c2d.6cb52f89be427ca325d51e507a6a7c2d.woff2","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:33.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /modules/ibu/online-home/6cb52f89be427ca325d51e507a6a7c2d.6cb52f89be427ca325d51e507a6a7c2d.woff2 HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ak-s-cw.tripcdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: font/woff2\r\ncontent-length: 7368\r\nx-ares-server: r100013666-21038164-fglz4@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: 3061PQ0E9G8PT1DF\r\netag: W/\"6cb52f89be427ca325d51e507a6a7c2d\"\r\nlast-modified: Wed, 30 Jul 2025 08:35:30 GMT\r\nx-ares-raw-buffer-size: 7368\r\nx-backend-latency: 0.030\r\nx-varnish: 151510471\r\naccept-ranges: bytes\r\ncache-control: max-age=1533511\r\nexpires: Wed, 24 Dec 2025 21:36:04 GMT\r\ndate: Sun, 07 Dec 2025 03:37:33 GMT\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a46d\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":7368,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7368, version 1.0","md5":"6cb52f89be427ca325d51e507a6a7c2d","sha1":"9fc9dfac5a82297a669b2fca11081e0c96aece56","sha256":"934fe2f44894cf3c1f46603774cc1cabb9d5602d48eba6a0b7fee5f5e0e2dfca","sha512":"b2de9d7d61d8860f246ccdfb90cf8cd1ee5d5ce12f3c3624fe36e70d99fa91e811d0ecc88b4ffc4136cd41ff0550a01c6b72ba8d2ce995982ed37b38e6ade70c","ssdeep":"192:IRMrULNShKWgmBLQTNQSvWrV8eJP7o64nP1vueFQ47Ai9RQiEU7DTG:IRM4RStQx1vWrV8aH4nP1GbaoUPy","tlshash":"05e1ae52aa8c4331d06a407c278a9ed66f8db38ae9fdf399527151c248764aa530d3e4","first_seen":"2025-08-07T21:38:54.386567Z","last_seen":"2026-01-26T11:36:33.075992Z","times_seen":1682,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/online-home/onlineGotop.14b5d0d6936deeee4887fd6d0eb37107.css","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:34.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /modules/ibu/online-home/onlineGotop.14b5d0d6936deeee4887fd6d0eb37107.css HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nx-ares-server: r100013666-21038164-fglz4@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: 8PFSSFTHPS9WJ0V1\r\netag: W/\"14b5d0d6936deeee4887fd6d0eb37107\"\r\nlast-modified: Thu, 09 Oct 2025 12:27:54 GMT\r\nx-ares-raw-buffer-size: 71629\r\nx-backend-latency: 0.020\r\ncontent-encoding: gzip\r\nx-varnish: 25433028\r\naccept-ranges: bytes\r\ncontent-length: 10942\r\ncache-control: max-age=4413187\r\nexpires: Tue, 27 Jan 2026 05:30:41 GMT\r\ndate: Sun, 07 Dec 2025 03:37:34 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nquic-version: 0x00000001\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a553\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":71629,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"14b5d0d6936deeee4887fd6d0eb37107","sha1":"fce842950df47ce27cdca11c3257bfbc67df8927","sha256":"1135506b08aae9811f3b5a6a7b8174a7765602202d0c485e6b93fec99f5357b9","sha512":"5210bdda236cc42716335529866a7729cc7c18e24662f7a66977d11c8e1062c771eb4879373abe9524dc0a47820db6c93602189fb2bc59b7ea8126a709c1a44d","ssdeep":"384:INRA7Q0lPJlNZzFLz7rQUcAJdw3L33fepEtI5WU7+Ou9CtGBqul3FGGlp0B3L3aj:IR3x4w3L3veBE+3L3aJ19bNuvXtQzF","tlshash":"2f632165e07600df3536c5261fd9b679302a9923d1a3ad7ee18133aca0db34e39e1e71","first_seen":"2025-10-09T14:38:51.303504Z","last_seen":"2026-02-10T07:39:12.619949Z","times_seen":1592,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/online-home/faa7a0bdf001464ccc48f178870b356f.faa7a0bdf001464ccc48f178870b356f.svg","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:35.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /modules/ibu/online-home/faa7a0bdf001464ccc48f178870b356f.faa7a0bdf001464ccc48f178870b356f.svg HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ak-s-cw.tripcdn.com/modules/ibu/online-home/onlineHome.162f5780f5554634381cffbc399b4ab0.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/svg+xml\r\nx-ares-server: r100013666-21038164-5skh7@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: QPQKMDSVQ29MQW07\r\netag: W/\"faa7a0bdf001464ccc48f178870b356f\"\r\nlast-modified: Sat, 06 Dec 2025 12:54:19 GMT\r\nx-ares-raw-buffer-size: 440\r\nx-backend-latency: 0.020\r\nx-varnish: 24475933\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 307\r\ncache-control: max-age=5131004\r\nexpires: Wed, 04 Feb 2026 12:54:19 GMT\r\ndate: Sun, 07 Dec 2025 03:37:35 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nquic-version: 0x00000001\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a70d\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":440,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"faa7a0bdf001464ccc48f178870b356f","sha1":"6834358b7b6909de04a53eb9643f81d32e0744f2","sha256":"fef5d8abc55d13f65bb2f2f601d3a2912866e87fb1e68c42c2967ae3c6afab26","sha512":"a55bda7d61a5efe4970042ac7bd4ba8dada54ceba5adb68393f1d8e234b6123a3fd23f036c497a2db2e4ce4f9a33d3ea3be03d29cc6dec13dd60d1cc975dd983","ssdeep":"","tlshash":"c0f0231cd148d414a07ed7cce2b88fc0d22920c3d0c2214cc44239a4d8b0cf63f0879d","first_seen":"2025-09-29T05:05:35.918715Z","last_seen":"2026-04-15T17:38:47.528805Z","times_seen":2492,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/online-home/56c5784a51fc5268a38c441c6e81e38c.56c5784a51fc5268a38c441c6e81e38c.svg","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:41.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /modules/ibu/online-home/56c5784a51fc5268a38c441c6e81e38c.56c5784a51fc5268a38c441c6e81e38c.svg HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ak-s-cw.tripcdn.com/modules/ibu/online-home/onlineHome.162f5780f5554634381cffbc399b4ab0.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/svg+xml\r\nx-ares-server: r100013666-21038164-wg5bn@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: VR6DZJGC2HPB6KRN\r\netag: W/\"56c5784a51fc5268a38c441c6e81e38c\"\r\nlast-modified: Mon, 13 Oct 2025 12:54:23 GMT\r\nx-ares-raw-buffer-size: 440\r\nx-backend-latency: 0.020\r\nx-varnish: 27262273\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 308\r\ncache-control: max-age=3266274\r\nexpires: Tue, 13 Jan 2026 22:55:35 GMT\r\ndate: Sun, 07 Dec 2025 03:37:41 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nquic-version: 0x00000001\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57b09c\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":440,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"56c5784a51fc5268a38c441c6e81e38c","sha1":"aab4185907f09e9b42cb6e4c36455bde2c48c58f","sha256":"b19a7be33c2eeadd6374db91a6637b1f55bcba8f03165614de87bd13e8e4d2fa","sha512":"8b81c20c3f06b6945437f79ffcec305d205f742fc92d7e9c1f605561f0a2c9f89d10a3e625ee41fbb57a63908eba108e9c766d4f675a78b6312a3b2638a23765","ssdeep":"","tlshash":"9bf05c4cc5099611a07ad3d8d6b886c2e21650c2d4c2158cd8423925d5a18f67f047ad","first_seen":"2025-10-13T16:34:16.437067Z","last_seen":"2026-04-15T17:38:47.560822Z","times_seen":2107,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nam.veta.naver.com/nac/2","fqdn":"nam.veta.naver.com","domain":"naver.com","tld":"com"},"ip":{"addr":"203.104.162.225","port":443,"asn":23576,"as":"NAVER Cloud Corp.","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:36.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.naver.com","organization":"NAVER Corp."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 05 Mar 2025 00:00:00 GMT","end":"Tue, 17 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DF:B3:02:B8:26:D6:90:49:71:40:F3:8C:B6:B9:2C:4D:13:30:EC:A2","sha256":"DF:1D:9B:40:32:7F:1B:B3:26:CA:00:EE:98:B6:E9:77:2D:FD:1B:4A:4E:BE:45:AF:66:92:5B:4D:3E:AB:E7:3B"}}},"request":{"raw":"GET /nac/2 HTTP/1.1\r\nHost: nam.veta.naver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 07 Dec 2025 03:37:36 GMT\r\ncontent-type: application/json\r\nvary: Origin\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nset-cookie: NAC=gQ0OB4ANQKfMB; max-age=34560000; domain=.naver.com; path=/; secure; SameSite=None\r\ncontent-encoding: gzip\r\nreferrer-policy: unsafe-url\r\nserver: nfront\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e0cf8076190852f563635acc12e3e70b","sha1":"f0b54f2311a3b052a49196cc5015811c9f390141","sha256":"54f819074f3b666923326f35e23aca631542d55728a6f0073356527f5db45eff","sha512":"b20246efd7243d9575d7d6a0ae0b9899c54f2726263706057a1877c7b00d13528894b94dab2ed324e87c76324889e8b1a82fb95e44a25efd047638cb4c3f103e","ssdeep":"","tlshash":"d870000b0eac2a8208020880b088000082c0f88882c080c83a23020000800020000a83","first_seen":"2025-12-07T03:38:25.950542Z","last_seen":"2025-12-07T03:38:25.950542Z","times_seen":1,"resource_available":false,"data":null}},"time_used":668,"timings":{"blocked":321,"dns":214,"connect":26,"send":0,"wait":27,"receive":0,"ssl":77},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/online-home/vendor.dll.9697d1d2a3a0711feab6bdfb80bf32d1.css","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:32.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /modules/ibu/online-home/vendor.dll.9697d1d2a3a0711feab6bdfb80bf32d1.css HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ncontent-length: 1129\r\nx-ares-server: r100013666-21038164-fspll@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: CAQV56Y75MRKFEHR\r\netag: W/\"9697d1d2a3a0711feab6bdfb80bf32d1\"\r\nlast-modified: Tue, 18 Nov 2025 05:57:22 GMT\r\nx-ares-raw-buffer-size: 5327\r\nx-backend-latency: 0.030\r\ncontent-encoding: br\r\nx-varnish: 68922305\r\nx-device: U R iPhone\r\naccept-ranges: bytes\r\ncache-control: max-age=3550790\r\nexpires: Sat, 17 Jan 2026 05:57:22 GMT\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a25a\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":5327,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5327), with no line terminators","md5":"9697d1d2a3a0711feab6bdfb80bf32d1","sha1":"d1d75a237fa51b1384deed14273139ba33a36d3d","sha256":"6c360682ce4726dc163e8496d862295bb5ddecc3813a9779cef8878da6947741","sha512":"3604715ba8ce8ae50841849eeef6dd9f7632d4bc45ee80bbe0aeb117aa3801c898063ba56b1338b0ce63ba759062546cde358361357aa9974a1144bef05a4ee5","ssdeep":"96:zzkOiEk62d6jYH26G6N+zN506M68x6K4f14VCZ99Fnc3w:zzklEkvsjYHHXN+z9Zi6bf14cZ99Fp","tlshash":"f0b134e8e612306d36f3e126a744f5cc6c374023c2935ebce1c4aedda5c579d23a2259","first_seen":"2025-09-25T06:10:18.751291Z","last_seen":"2025-12-17T08:17:11.30526Z","times_seen":1472,"resource_available":false,"data":null}},"time_used":408,"timings":{"blocked":175,"dns":104,"connect":5,"send":0,"wait":29,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ubt-sgp.trip.com/bee/collect","fqdn":"ubt-sgp.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:39.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"OPTIONS /bee/collect HTTP/1.1\r\nHost: ubt-sgp.trip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.trip.com/\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/plain; charset=UTF-8\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List\r\naccess-control-max-age: 300\r\np3p: CP=CUR ADM OUR NOR STA NID\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: Content-Type,content-type\r\ndate: Sun, 07 Dec 2025 03:37:39 GMT\r\nalt-svc: h3=\":443\"; ma=93600\r\nquic-version: 0x00000001\r\nserver-timing: cdn-cache; desc=MISS, edge; dur=1, origin; dur=247\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: MISS\r\nunique-request-id: 36124d58\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T20:38:47.575438Z","times_seen":13797803,"resource_available":true,"data":null}},"time_used":250,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/restapi/soa2/10290/createclientid?systemcode=09\u0026createtype=3\u0026contentType=json","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:35.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"POST /restapi/soa2/10290/createclientid?systemcode=09\u0026createtype=3\u0026contentType=json HTTP/1.1\r\nHost: www.trip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003\r\nCookie: Union=AllianceID=6015822\u0026SID=168798533\u0026OUID=ctag.hash.ccjJjXXJOpYl\u0026Expires=1767670651990\u0026createtime=1765078651; UBT_VID=1765078651988.0c55yqsxjtpp; ibu_online_jump_site_result={\"isShowSuggestion\":false}; ibusite=EN; ibugroup=trip; ibulanguage=EN; ibulocale=en_xx; cookiePricesDisplayed=USD; ibu_cookie_strict=0; _abtest_userid=e7b40962-e94a-4116-9bcf-af1ceddea7af; _tp_search_latest_channel_name=hotels; _bfa=1.1765078651988.0c55yqsxjtpp.1.1765078653998.1765078653998.1.1.10320668088\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\nx-cat-server: cat.fx.sgp.tripws.com:80\r\nx-cat-root-id: 100025527-0a9a62a8-490299-2456003\r\nx-cat-parent-id: 100025527-0a9a62a8-490299-2456003\r\nx-cat-id: 100025527-0a9a62a8-490299-2456013\r\nx-cat-root-url: http://cat.fx.sgp.tripws.com:80/cat/r/m/100025527-0a9a62a8-490299-2456003\r\nclogging_trace_id: 8914376288110726755\r\nrootmessageid: 100025527-0a9a62a8-490299-2456003\r\nservermessageid: 100025527-0a9a62a8-490299-2456013\r\nvary: accept-encoding\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-gate-root-id: 100025527-0a9a62a8-490299-2456003\r\nx-gate-region: SGP-ALI\r\nx-service-call: 0.003\r\naccess-control-expose-headers: RootMessageId, x-service-call, x-gate-region\r\nx-gate: ctrip-gate\r\nx-originating-url: https://www.trip.com/restapi/soa2/10290/createclientid?systemcode=09\u0026createtype=3\u0026contentType=json\r\nx-trip-region: de\r\ncontent-length: 228\r\ndate: Sun, 07 Dec 2025 03:37:35 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: MISS\r\nunique-request-id: 361247b7\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":254,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"8b9463832da6cbc17be51afe0e583de2","sha1":"cc665e683aee700d347f78344ae04086556ec06e","sha256":"7f955f56fd393680beff5d569fbb89897baa0a7c3b1a911374506c4cfeacaa8d","sha512":"6a095aa6095267e9fdd1a257a4da0e91e344f145c703dae2f1fc3d9b4553d11137be6bfb2bb6d4c2d5e71ca962e94a246b58660b39cceec79e677950ac9d9680","ssdeep":"","tlshash":"81d09519dfdc0d351508903c77033c43dc022dc636455d542c4f870a2d896f5c551de0","first_seen":"2025-12-07T03:38:25.952681Z","last_seen":"2025-12-07T03:38:25.952681Z","times_seen":1,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":286,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/restapi/soa2/29624/clog","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:36.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"POST /restapi/soa2/29624/clog HTTP/1.1\r\nHost: www.trip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: multipart/form-data; boundary=---------------------------20762672602366957240599763098\r\nContent-Length: 1401\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003\r\nCookie: Union=AllianceID=6015822\u0026SID=168798533\u0026OUID=ctag.hash.ccjJjXXJOpYl\u0026Expires=1767670651990\u0026createtime=1765078651; UBT_VID=1765078651988.0c55yqsxjtpp; ibu_online_jump_site_result={\"isShowSuggestion\":false}; ibusite=EN; ibugroup=trip; ibulanguage=EN; ibulocale=en_xx; cookiePricesDisplayed=USD; ibu_cookie_strict=0; _abtest_userid=e7b40962-e94a-4116-9bcf-af1ceddea7af; _tp_search_latest_channel_name=hotels; _bfa=1.1765078651988.0c55yqsxjtpp.1.1765078653998.1765078653998.1.1.10320668088; _gcl_au=1.1.1944475785.1765078655; GUID=09034023113792808361; _fwb=202fgWTgpaFl4ko2G4nljfO.1765078656039; wcs_bt=s_33fb334966e9:1765078656\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1401,"data":"-----------------------------20762672602366957240599763098\r\nContent-Disposition: form-data; name=\"metric_name\"\r\n\r\nrun\r\n-----------------------------20762672602366957240599763098\r\nContent-Disposition: form-data; name=\"metric_value\"\r\n\r\n{\"status\":\"success\",\"responseHead\":{\"Timestamp\":\"/Date(1765078655668+0800)/\",\"Ack\":\"Success\",\"Errors\":[],\"Extension\":[{\"Id\":\"CLOGGING_TRACE_ID\",\"Value\":\"19c20150-8a5a-48f1-8c12-a00b19ac3430\"},{\"Id\":\"RootMessageId\",\"Value\":\"100025527-0a9a5011-490299-2457835\"}]}}\r\n-----------------------------20762672602366957240599763098\r\nContent-Disposition: form-data; name=\"sub_name\"\r\n\r\nH5Gateway Response\r\n-----------------------------20762672602366957240599763098\r\nContent-Disposition: form-data; name=\"page_url\"\r\n\r\nhttps://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003\r\n-----------------------------20762672602366957240599763098\r\nContent-Disposition: form-data; name=\"locale\"\r\n\r\nen_xx\r\n-----------------------------20762672602366957240599763098\r\nContent-Disposition: form-data; name=\"vid\"\r\n\r\n1765078651988.0c55yqsxjtpp\r\n-----------------------------20762672602366957240599763098\r\nContent-Disposition: form-data; name=\"aid\"\r\n\r\n6015822\r\n-----------------------------20762672602366957240599763098\r\nContent-Disposition: form-data; name=\"sid\"\r\n\r\n168798533\r\n-----------------------------20762672602366957240599763098--\r\n"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json\r\ncontent-length: 2\r\nclogging_trace_id: d947e206-9a6b-4f0c-97a7-39cf27bfd788\r\nrootmessageid: 100025527-0a9a5103-490299-2458523\r\nx-cat-id: 100025527-0a9a5103-490299-2458523\r\nx-cat-parent-id: 100025527-0a9a5103-490299-2458515\r\nx-cat-root-id: 100025527-0a9a5103-490299-2458515\r\nx-cat-root-url: http://cat.fx.sgp.tripws.com:80/cat/r/m/100025527-0a9a5103-490299-2458515\r\nx-cat-server: cat.fx.sgp.tripws.com:80\r\nx-scf-executed-version: flt-es-tools-function-00004\r\nx-scf-request-id: d947e206-9a6b-4f0c-97a7-39cf27bfd788\r\nx-envoy-upstream-service-time: 2\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-gate-root-id: 100025527-0a9a5103-490299-2458515\r\nx-gate-region: SGP-ALI\r\nx-service-call: 0.009\r\naccess-control-expose-headers: RootMessageId, x-service-call, x-gate-region\r\nx-gate: ctrip-gate\r\nx-originating-url: https://www.trip.com/restapi/soa2/29624/clog\r\nx-trip-region: de\r\ndate: Sun, 07 Dec 2025 03:37:36 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: MISS\r\nunique-request-id: 3612499f\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-04-15T20:36:05.367773Z","times_seen":395948,"resource_available":true,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/i18ntripgeniecomponentsdk/main.e51e127456b27fc89b19aa932812eca3.css","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:32.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /modules/ibu/i18ntripgeniecomponentsdk/main.e51e127456b27fc89b19aa932812eca3.css HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-ares-server: r100013666-21038164-mjtv8@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: BCV31Q5SGNHD1RHZ\r\netag: W/\"e51e127456b27fc89b19aa932812eca3\"\r\nlast-modified: Tue, 02 Dec 2025 11:42:16 GMT\r\nx-ares-raw-buffer-size: 377876\r\nx-backend-latency: 0.030\r\ncontent-encoding: br\r\nx-varnish: 85801420\r\naccept-ranges: bytes\r\ncontent-length: 168532\r\ncache-control: max-age=4781084\r\nexpires: Sat, 31 Jan 2026 11:42:16 GMT\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a24d\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":377876,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65449)","md5":"e51e127456b27fc89b19aa932812eca3","sha1":"689f3aed4052856349c536935655f5c9e7034ca7","sha256":"76c7c4ed36b45f9e4caed775989353ea5e0944b5915928934e24ce0f81077fe0","sha512":"13dc8f024fb7c96a5723113d6185eb8972bba81435781d1462443d2b7c6c110f0b71508653380bf51c8b6849a90f6218c05bd16cec055f787d8d290e5a7b1ee7","ssdeep":"6144:QVQ8ef1J8oh+x2o1pLkhM5zYCmhoAEYIOm9/8cJ/jxWoYUcKr5bvycuN:QVbef1J1cjkCpqZNm9/8cJ/jx/ZcW5bo","tlshash":"85848db2e11925edbb3ac422c290f7ce3d58e033d5924e6df94e652cc5da6d40a60b7c","first_seen":"2025-12-02T12:35:04.350543Z","last_seen":"2025-12-18T09:06:16.382333Z","times_seen":196,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":79,"dns":0,"connect":0,"send":0,"wait":27,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/restapi/soa2/29624/clog","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:36.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"POST /restapi/soa2/29624/clog HTTP/1.1\r\nHost: www.trip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: multipart/form-data; boundary=---------------------------242277788132273008992959567335\r\nContent-Length: 1353\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003\r\nCookie: Union=AllianceID=6015822\u0026SID=168798533\u0026OUID=ctag.hash.ccjJjXXJOpYl\u0026Expires=1767670651990\u0026createtime=1765078651; UBT_VID=1765078651988.0c55yqsxjtpp; ibu_online_jump_site_result={\"isShowSuggestion\":false}; ibusite=EN; ibugroup=trip; ibulanguage=EN; ibulocale=en_xx; cookiePricesDisplayed=USD; ibu_cookie_strict=0; _abtest_userid=e7b40962-e94a-4116-9bcf-af1ceddea7af; _tp_search_latest_channel_name=hotels; _bfa=1.1765078651988.0c55yqsxjtpp.1.1765078653998.1765078653998.1.1.10320668088; _gcl_au=1.1.1944475785.1765078655; GUID=09034023113792808361; _fwb=202fgWTgpaFl4ko2G4nljfO.1765078656039; wcs_bt=s_33fb334966e9:1765078656\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1353,"data":"-----------------------------242277788132273008992959567335\r\nContent-Disposition: form-data; name=\"metric_name\"\r\n\r\nrun\r\n-----------------------------242277788132273008992959567335\r\nContent-Disposition: form-data; name=\"metric_value\"\r\n\r\n{\"name\":\"tg-auto-catgo\",\"Head\":{\"Group\":\"Trip\",\"Source\":\"ONLINE\",\"Version\":\"10000\",\"Locale\":\"en-XX\",\"Currency\":\"USD\",\"VID\":\"1765078651988.0c55yqsxjtpp\",\"SessionId\":\"1\",\"PvId\":\"1\"},\"localTime\":\"2025-12-07\"}\r\n-----------------------------242277788132273008992959567335\r\nContent-Disposition: form-data; name=\"sub_name\"\r\n\r\nH5Gateway Request\r\n-----------------------------242277788132273008992959567335\r\nContent-Disposition: form-data; name=\"page_url\"\r\n\r\nhttps://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003\r\n-----------------------------242277788132273008992959567335\r\nContent-Disposition: form-data; name=\"locale\"\r\n\r\nen_xx\r\n-----------------------------242277788132273008992959567335\r\nContent-Disposition: form-data; name=\"vid\"\r\n\r\n1765078651988.0c55yqsxjtpp\r\n-----------------------------242277788132273008992959567335\r\nContent-Disposition: form-data; name=\"aid\"\r\n\r\n6015822\r\n-----------------------------242277788132273008992959567335\r\nContent-Disposition: form-data; name=\"sid\"\r\n\r\n168798533\r\n-----------------------------242277788132273008992959567335--\r\n"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json\r\ncontent-length: 2\r\nclogging_trace_id: ad3a8d28-a035-46f1-a107-30bd2a5816b3\r\nrootmessageid: 100025527-0a98cc27-490299-2457788\r\nx-cat-id: 100025527-0a98cc27-490299-2457788\r\nx-cat-parent-id: 100025527-0a98cc27-490299-2457785\r\nx-cat-root-id: 100025527-0a98cc27-490299-2457785\r\nx-cat-root-url: http://cat.fx.sgp.tripws.com:80/cat/r/m/100025527-0a98cc27-490299-2457785\r\nx-cat-server: cat.fx.sgp.tripws.com:80\r\nx-scf-executed-version: flt-es-tools-function-00004\r\nx-scf-request-id: ad3a8d28-a035-46f1-a107-30bd2a5816b3\r\nx-envoy-upstream-service-time: 7\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-gate-root-id: 100025527-0a98cc27-490299-2457785\r\nx-gate-region: SGP-ALI\r\nx-service-call: 0.016\r\naccess-control-expose-headers: RootMessageId, x-service-call, x-gate-region\r\nx-gate: ctrip-gate\r\nx-originating-url: https://www.trip.com/restapi/soa2/29624/clog\r\nx-trip-region: de\r\ndate: Sun, 07 Dec 2025 03:37:36 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: MISS\r\nunique-request-id: 36124998\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-04-15T20:36:05.367773Z","times_seen":395948,"resource_available":true,"data":null}},"time_used":266,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/m/i18n/ReportUndefinedKeys.html","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:39.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"POST /m/i18n/ReportUndefinedKeys.html HTTP/1.1\r\nHost: www.trip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json;charset=utf-8\r\nx-shark-url: https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003\r\nx-shark-cookie: Union=AllianceID=6015822\u0026SID=168798533\u0026OUID=ctag.hash.ccjJjXXJOpYl\u0026Expires=1767670651990\u0026createtime=1765078651; ibu_online_jump_site_result={\"isShowSuggestion\":false}; ibusite=EN; ibugroup=trip; ibulanguage=EN; ibulocale=en_xx; cookiePricesDisplayed=USD; ibu_cookie_strict=0; _abtest_userid=e7b40962-e94a-4116-9bcf-af1ceddea7af; _tp_search_latest_channel_name=hotels; _bfa=1.1765078651988.0c55yqsxjtpp.1.1765078653998.1765078653998.1.1.10320668088; UBT_VID=1765078651988.0c55yqsxjtpp; _gcl_au=1.1.1944475785.1765078655; GUID=09034023113792808361; _fwb=202fgWTgpaFl4ko2G4nljfO.1765078656039; wcs_bt=s_33fb334966e9:1765078656\r\nContent-Length: 547\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003\r\nCookie: Union=AllianceID=6015822\u0026SID=168798533\u0026OUID=ctag.hash.ccjJjXXJOpYl\u0026Expires=1767670651990\u0026createtime=1765078651; UBT_VID=1765078651988.0c55yqsxjtpp; ibu_online_jump_site_result={\"isShowSuggestion\":false}; ibusite=EN; ibugroup=trip; ibulanguage=EN; ibulocale=en_xx; cookiePricesDisplayed=USD; ibu_cookie_strict=0; _abtest_userid=e7b40962-e94a-4116-9bcf-af1ceddea7af; _tp_search_latest_channel_name=hotels; _bfa=1.1765078651988.0c55yqsxjtpp.1.1765078653998.1765078653998.1.1.10320668088; _gcl_au=1.1.1944475785.1765078655; GUID=09034023113792808361; _fwb=202fgWTgpaFl4ko2G4nljfO.1765078656039; wcs_bt=s_33fb334966e9:1765078656; _RGUID=922ec99a-94d6-4417-b603-645b05c081ba\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":547,"data":"[\"330153|en-XX|undefined|10320668088\",\"100018131|en-XX|key.hotel.common.night.pluralsuffix.many|10320668088\",\"100018131|en-XX|key.hotel.common.night.pluralsuffix.few|10320668088\",\"100018131|en-XX|key.hotel.searchbox.echo.adult.pluralsuffix.many|10320668088\",\"100018131|en-XX|key.hotel.searchbox.echo.adult.pluralsuffix.few|10320668088\",\"100018131|en-XX|key.hotel.searchbox.echo.child.pluralsuffix.many|10320668088\",\"100018131|en-XX|key.hotel.searchbox.echo.child.pluralsuffix.few|10320668088\",\"330153|en-XX|key_unlogin_popup_subtitle|10320668088\"]"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 2\r\ncache-control: no-store\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-headers: host,connection,content-length,x-real-ip,x-ctrip-isssl,user-agent,accept,accept-language,content-type,x-shark-url,x-shark-cookie,origin,dnt,referer,sec-fetch-dest,sec-fetch-mode,sec-fetch-site,pragma,cookie,cdn-loop,x-akamai-config-log-detail,accept-encoding,akamai-origin-hop,x-forwarded-for,true-client-ip,cache-control,x-via,x-akamai-request-id,x-ctx-externalclientip,x-ctx-ucs-vid,x-ctx-ucs-cid,x-ctx-trace-mark,x-ctx-request-from,access-control-allow-headers,cookieorigin,access-control-request-headers,access-control-request-method,authorization,x-requested-with,x-auth-token,x-ctrip-canary-req,x-ctx-canaryreq,x-ctx-canarysrc,x-ctx-canaryidc,x-cat-trace-mode\r\naccess-control-allow-methods: GET,HEAD,PUT,POST,OPTIONS,DELETE,PATCH\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-readtime: 1\r\nx-backend-latency: 0.001\r\nx-trip-region: de\r\ndate: Sun, 07 Dec 2025 03:37:39 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver-timing: cdn-cache; desc=MISS, edge; dur=7, origin; dur=201\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: MISS\r\nunique-request-id: 36124cbf\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-04-15T20:36:05.367773Z","times_seen":395948,"resource_available":true,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/online-home/onlineHome.bb4c42e44d5f1401242fc99120c633de.js","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:32.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /modules/ibu/online-home/onlineHome.bb4c42e44d5f1401242fc99120c633de.js HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nx-ares-server: r100013666-21038164-5skh7@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: MHDT2XMHYHVHRXA6\r\netag: W/\"bb4c42e44d5f1401242fc99120c633de\"\r\nlast-modified: Wed, 03 Dec 2025 07:34:19 GMT\r\nx-ares-raw-buffer-size: 1041190\r\nx-backend-latency: 0.030\r\ncontent-encoding: br\r\nx-varnish: 1988384\r\naccept-ranges: bytes\r\ncontent-length: 221600\r\ncache-control: max-age=4852607\r\nexpires: Sun, 01 Feb 2026 07:34:19 GMT\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a222\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":1041190,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"bb4c42e44d5f1401242fc99120c633de","sha1":"c6933ea5fe59f824eebd47c81c711e507716bac8","sha256":"370c21607cf9ae006fe6478fa93f61c48ca89c88be53eab1d03d7d8c94554b00","sha512":"a3bd79200e6f1e4746f80f2a44f03fc5002223626ae1d45b46b665fdf8056e437e9f2bdee5e2006cbe31d6ad52e7ad3516873c33094cc541725f5405dc49eb16","ssdeep":"24576:tPR1K/xoKCgwxKIzC0ydE8nJCLPTDUhYwflg8XJ:v1CpwxKIzC0MCLPTAhYwm8XJ","tlshash":"97250988b1a2f4a502a755b6403f660af23a3f5568199c10e265ccd87c74fcf9237f6e","first_seen":"2025-12-03T08:08:10.093201Z","last_seen":"2025-12-08T09:12:13.00581Z","times_seen":101,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":73,"dns":0,"connect":0,"send":0,"wait":56,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/locale/v3/100012276/en-XX.js?etagc=ad42c2c732eda13a1d4f9e5730c6aed5","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:32.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /locale/v3/100012276/en-XX.js?etagc=ad42c2c732eda13a1d4f9e5730c6aed5 HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nx-ares-server: r100013666-91049052-kvs5f@SGP-ALI\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aliyun\r\nx-ares-request-id: 69328A4E9F0012363549380B\r\netag: W/\"ad42c2c732eda13a1d4f9e5730c6aed5\"\r\nlast-modified: Fri, 05 Dec 2025 07:31:26 GMT\r\nx-ares-raw-buffer-size: 212806\r\nx-backend-latency: 0.015\r\ncontent-encoding: br\r\nx-varnish: 144448244\r\naccept-ranges: bytes\r\ncontent-length: 41252\r\ncache-control: max-age=5025235\r\nexpires: Tue, 03 Feb 2026 07:31:27 GMT\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a221\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":212806,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (62368)","md5":"ad42c2c732eda13a1d4f9e5730c6aed5","sha1":"721df810468114a6853bc2b95e02d4d58ed81c7d","sha256":"5d4c97c8ea7fe3f00f32e52ee947270af07332711494feda3bf7da31711dc045","sha512":"e7cac05a7eecf8757b09097d3efd92ef04096ba4d50ad5ac7b1cf79963e42b037cf93449b6726f2b6438583da89c86e1413a4cd53f3711266ebf141f422ea162","ssdeep":"3072:EEf8oifJiAgHEpLoDz10DGOoOQJFLO6u6ENRp:O38iCOovXi6ZGT","tlshash":"3924d56bf3e832761be31251fced97ca77a844085b2949a55c7d80bd13c8a392a3f4c5","first_seen":"2025-12-05T08:32:09.968816Z","last_seen":"2025-12-09T08:31:12.01434Z","times_seen":79,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":74,"dns":0,"connect":0,"send":0,"wait":55,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.pstatic.net/melona/libs/gfp-nac-module/synchronizer.js","fqdn":"ssl.pstatic.net","domain":"pstatic.net","tld":"net"},"ip":{"addr":"23.44.36.65","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:36.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ssl.pstatic.net","organization":"NAVER Cloud Corp."},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 20 May 2025 00:00:00 GMT","end":"Tue, 19 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"26:F8:58:37:D8:DD:75:E0:F5:79:61:27:71:F2:E3:54:4A:06:CA:FB","sha256":"6D:5D:CF:65:81:FE:4E:E0:B3:76:E4:52:60:4E:99:29:26:E8:A0:41:4C:E8:1D:47:D8:D0:63:F1:F9:7A:4B:D6"}}},"request":{"raw":"GET /melona/libs/gfp-nac-module/synchronizer.js HTTP/1.1\r\nHost: ssl.pstatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Testa/6.2.4\r\naccess-control-allow-origin: *\r\nlast-modified: Wed, 11 Dec 2024 05:03:58 GMT\r\netag: \"126b5-628f7867e3d09-gzip\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-methods: GET, POST, OPTIONS, HEAD\r\naccess-control-allow-headers: Range\r\ncontent-length: 27455\r\ncontent-type: application/javascript\r\ncache-control: max-age=3207\r\ndate: Sun, 07 Dec 2025 03:37:36 GMT\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":75445,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65530), with no line terminators","md5":"867952280538f37644afdbfd98a92979","sha1":"3444c40c4610806539c3208dbff646299d33dcc8","sha256":"a071e796adb442dbd8af4e03a0f8b90c6b8b3b5f333bf456a7236099e434ca1a","sha512":"e5f948ce93c06fa76e25d7ec681d9445d79f4dec24886de039dfca7ee8da3e2b4d7f345d31729d4c3868d4d761c79e7d24a0251df9bd0c360b3a87695f91c631","ssdeep":"1536:yAKljBZ08a9zMvD0WCa1451fvfXj63WSXkTN5AaU3/I4iz7w:h8aFMv3W9rpU3oY","tlshash":"eb73744dfed1f0904763f666926fa41ab2bb1a55b40fc8d0926ad1e0dc7898f4133e2d","first_seen":"2024-12-11T11:55:27.291019Z","last_seen":"2026-03-25T21:03:06.748946Z","times_seen":6638,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":43,"dns":32,"connect":1,"send":0,"wait":2,"receive":1,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/locale/v3/3828/en-XX.js?etagc=64c7d15eba4684490ef3af54b5603d4b","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:32.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /locale/v3/3828/en-XX.js?etagc=64c7d15eba4684490ef3af54b5603d4b HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 1904\r\nx-ares-server: r100013666-91049052-t5frk@SGP-ALI\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aliyun\r\nx-ares-request-id: 68FB957BCAEB793932F4FB8D\r\netag: W/\"64c7d15eba4684490ef3af54b5603d4b\"\r\nlast-modified: Fri, 24 Oct 2025 15:04:27 GMT\r\nx-ares-raw-buffer-size: 6656\r\nx-backend-latency: 0.022\r\ncontent-encoding: br\r\nx-varnish: 47267221 12098541\r\nx-device: U R Android\r\naccept-ranges: bytes\r\ncache-control: max-age=5130996\r\nexpires: Wed, 04 Feb 2026 12:54:08 GMT\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a21b\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":6656,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1711)","md5":"64c7d15eba4684490ef3af54b5603d4b","sha1":"d487468b320de9f7fb48acd5230df1619b5991c3","sha256":"b173b60b7c4924cee158006ff275b2269108d8519b0b4b5f5ee062405a160488","sha512":"d0199221254a5929cebfe84d6e7fad3c813cd2d7f486f1b53c51440bb2e6d114e7d7d3311d9e20bbb1377d50f56b07f99a3fdf2ed0f1a8a81985f02b24e5fb1e","ssdeep":"192:HEe4gfizEuDGKR3YiWPqAjES3HhXQmwf07:HEe1aafE+Amb","tlshash":"10d1d94a6932a627e972b2f6895f4600f030883705d54c60b7cca96c3f911aac2f7ff5","first_seen":"2025-10-13T16:34:16.408225Z","last_seen":"2026-04-15T17:38:47.490092Z","times_seen":2354,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":81,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/locale/v3/100052930/en-XX.js?etagc=fd3af4f1930a38efe55f36616e2a80da","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:32.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /locale/v3/100052930/en-XX.js?etagc=fd3af4f1930a38efe55f36616e2a80da HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 9551\r\nx-ares-server: r100013666-91049052-xllk5@SGP-ALI\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aliyun\r\nx-ares-request-id: 691AD026AE0C0D383822D5ED\r\netag: W/\"fd3af4f1930a38efe55f36616e2a80da\"\r\nlast-modified: Mon, 17 Nov 2025 07:35:02 GMT\r\nx-ares-raw-buffer-size: 35778\r\nx-backend-latency: 0.010\r\ncontent-encoding: br\r\nx-varnish: 87608013 86867173\r\naccept-ranges: bytes\r\ncache-control: max-age=3470250\r\nexpires: Fri, 16 Jan 2026 07:35:02 GMT\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a21c\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":35778,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (30771)","md5":"fd3af4f1930a38efe55f36616e2a80da","sha1":"59aea4be33329a77017890bc68d1d2bb70bc4a1e","sha256":"391230908bd2c7a9f89af7722bbac0a4b8290d146b8924f75a33752e1e388b91","sha512":"07490356ef61febbf19ae27edd868c8ba53f75b49f6ef3b04fb49a4acbf89babb8c9eddd728d312b9d7ba957e9cdd6b25599b6632e9f0e39fa36bcf6c9208879","ssdeep":"768:y/n9O0e2VyiduDcIpHfjjw9eVQPYpbjUavwBKhsfR:Infe2VyiduD5pHfjUUSPubQavwchs5","tlshash":"b8f22b0975e01e3adfc203b1f89a178b69b25339329b24fdf9bdd038e6e0658191756c","first_seen":"2025-11-17T08:09:13.112364Z","last_seen":"2025-12-11T00:38:21.127145Z","times_seen":459,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":79,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webresource.tripcdn.com/ares2/train/csec/*/default/sec/c-sec.js?v=2025127","fqdn":"webresource.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:34.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"GET /ares2/train/csec/*/default/sec/c-sec.js?v=2025127 HTTP/1.1\r\nHost: webresource.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 25694\r\nx-ares-server: r100013666-21027498-5nl77@SHARB\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nx-ares-source: aliyun\r\nx-ares-request-id: 6933CD258EC24D3137D5952B\r\netag: W/\"5d6db8a514c5e25ba535e9a4414683ec\"\r\nlast-modified: Sat, 06 Dec 2025 06:28:53 GMT\r\nx-ares-raw-buffer-size: 87754\r\nx-backend-latency: 0.052\r\ncontent-encoding: br\r\nx-varnish: 563852856 560771059\r\naccept-ranges: bytes\r\ncache-control: max-age=5147614\r\nexpires: Wed, 04 Feb 2026 17:31:09 GMT\r\ndate: Sun, 07 Dec 2025 03:37:35 GMT\r\nalt-svc: h3=\":443\"; ma=93600\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 361247a4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":87754,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65524), with no line terminators","md5":"5d6db8a514c5e25ba535e9a4414683ec","sha1":"8a8537119a9f8f6cb01003abf154a69c5c873547","sha256":"e82f00cc1fe69d7ea3e7c976e87a9137dc603536ae0407a6b476468586915a86","sha512":"6da3786efdb55606671a9bf6a39867f41cfdbaddf5c7d93c2fa786492ae6eb423e937afafabe809239686add42b8daebfef8153edbaa089dc795e7a1b067811f","ssdeep":"768:3apMGGXTSFKiVwIlcVik9I29urh/ihhYM8dWFN5KaPF3Z/IeyG7bGJDvT:+wWFK9IU9u5IY1K5B/ICbA","tlshash":"248395deb0d2b115133af075107f704bf6baed94250e4841c429d1eaf8b26aa8637df9","first_seen":"2025-09-13T09:38:08.274511Z","last_seen":"2026-04-15T17:38:47.482629Z","times_seen":2961,"resource_available":true,"data":null}},"time_used":433,"timings":{"blocked":411,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-X437DZ73MR\u0026cx=c\u0026gtm=4e5c31h1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:35.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:33:43 GMT","end":"Mon, 19 Jan 2026 08:33:42 GMT"},"fingerprint":{"sha1":"4E:9E:D1:61:E4:7D:C2:8A:B6:AD:D2:31:C7:07:01:E4:DB:A0:A7:A9","sha256":"C5:DD:D4:CA:97:B7:B5:8C:B4:99:E8:56:30:AC:1B:F0:FD:7C:5A:FD:19:ED:13:D0:27:D6:0B:76:C7:C7:A0:66"}}},"request":{"raw":"GET /gtag/js?id=G-X437DZ73MR\u0026cx=c\u0026gtm=4e5c31h1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 07 Dec 2025 03:37:35 GMT\r\nexpires: Sun, 07 Dec 2025 03:37:35 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 159221\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":509133,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (20295)","md5":"78e3e5e4ed75d9a607c2fa589921b5be","sha1":"e18d823016068f14eade17bd715f271eedcbe7bf","sha256":"64156ee518d7a31f981ed030ecfcdf353828dc124734832af973f1de7b7346c9","sha512":"e092f0ffdf1208fb5017897d17998a8d4bf270b50cd2354f5efc9fa50a6e4901bf084f41db8dbf5048a9e22e5edc34ac8674dba73125f80f3a0e0559ba21e723","ssdeep":"6144:eG7WIGw+WSayqljVD75U6k/bbqt3L3ci17bBvxTkh12rN4:/PGmSwpVDJ3cWxC","tlshash":"5eb40a9e73c6742652daf468502f01cba9bb24e2b45cc8abb1c9cdf02d3459a4167f7c","first_seen":"2025-12-07T03:38:25.962133Z","last_seen":"2025-12-07T03:38:25.962133Z","times_seen":1,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/trip.ico","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:36.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"GET /trip.ico HTTP/1.1\r\nHost: www.trip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003\r\nCookie: Union=AllianceID=6015822\u0026SID=168798533\u0026OUID=ctag.hash.ccjJjXXJOpYl\u0026Expires=1767670651990\u0026createtime=1765078651; UBT_VID=1765078651988.0c55yqsxjtpp; ibu_online_jump_site_result={\"isShowSuggestion\":false}; ibusite=EN; ibugroup=trip; ibulanguage=EN; ibulocale=en_xx; cookiePricesDisplayed=USD; ibu_cookie_strict=0; _abtest_userid=e7b40962-e94a-4116-9bcf-af1ceddea7af; _tp_search_latest_channel_name=hotels; _bfa=1.1765078651988.0c55yqsxjtpp.1.1765078653998.1765078653998.1.1.10320668088; _gcl_au=1.1.1944475785.1765078655; GUID=09034023113792808361; _fwb=202fgWTgpaFl4ko2G4nljfO.1765078656039; wcs_bt=s_33fb334966e9:1765078656\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/x-icon\r\ncontent-length: 1150\r\ncache-control: max-age=5184000\r\netag: \"TYQ5cOR6BMCAqRUNK++nT7YGvV8=\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-readtime: 3\r\nx-trip-app-name: ibu-root-site-application\r\nx-trip-app-version: 1.2.2\r\nx-trip-app-idc: SGP-ALI\r\nx-backend-latency: 0.003\r\nx-trip-region: de\r\ndate: Sun, 07 Dec 2025 03:37:36 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 36124926\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1150,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"f9ffbb8fb76b6b1f2ac35a2b433513ac","sha1":"f195b8934521a56cd5dc731d2836fbd9a49aca7d","sha256":"8d926fd6ffe6db2e9d16c9245c08ea3a8807ccd0471c6438181ec19d2aaea348","sha512":"7f968b4434b1748a8903d93121214d9e5013fb311e7082434fa9ef7490e50ae45b30d68048c792046883f298d31a4531a54f1df22294e6ea12bb8946cfceefc0","ssdeep":"","tlshash":"fc21ecccefee6d98f0a501fc00b1fb2c60446f0d00adb9550b05f85f7db20422494426","first_seen":"2023-05-22T11:20:33Z","last_seen":"2026-04-15T17:38:47.497001Z","times_seen":3106,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"file.tripcdn.com/files/7/ibu_online_assets/lottie/Online-small-AB.json","fqdn":"file.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:36.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"GET /files/7/ibu_online_assets/lottie/Online-small-AB.json HTTP/1.1\r\nHost: file.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\ncontent-type: application/json\r\nlast-modified: Wed, 11 Jun 2025 06:24:25 GMT\r\ncontent-encoding: br\r\ncontent-length: 24666\r\ncache-control: max-age=1611963\r\nexpires: Thu, 25 Dec 2025 19:23:40 GMT\r\ndate: Sun, 07 Dec 2025 03:37:37 GMT\r\nalt-svc: h3=\":443\"; ma=93600\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 36124a18\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":79638,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6e25a835f32ce4bf6fa1f60f1b05f289","sha1":"2cccb7211333e4de1e2ae66fc1577356f0d29e34","sha256":"4b51d8964cbcaa5cbaafeebe748ba33766aca0bea5d2abaf85455d0d79e26af4","sha512":"850e15db04d161f1843fdc5e4d1defe2ed13163adbfd7d1d54493b3ac906f4d2145c7a1fa503aff58e66b2742d7ad6e2db64a00102f7e599b5ba73c8e3d87403","ssdeep":"1536:kkX5UKkONVTPFHxTsVyBY0q0bK50q0X0q0b/YYYXYXVKV+V5VmVDl:klmFsVyBpkgFoXVKV+V5VmVB","tlshash":"04735f2ecab602fceb086dc4cb5370659ee185436edb49fc9aba7c4447b06de1305e25","first_seen":"2025-06-20T19:27:43.38007Z","last_seen":"2026-04-15T17:38:47.556679Z","times_seen":2902,"resource_available":false,"data":null}},"time_used":796,"timings":{"blocked":763,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/restapi/soa2/18814/json/getRecommendedAttraction","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:36.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"POST /restapi/soa2/18814/json/getRecommendedAttraction HTTP/1.1\r\nHost: www.trip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003\r\ncookieOrigin: https://www.trip.com\r\nx-ctx-Currency: USD\r\nx-ctx-Locale: en-XX\r\nlocale: en-XX\r\ncurrency: USD\r\ncontent-type: application/json\r\nx-ctx-ubt-pageid: 10320668088\r\nx-ctx-ubt-pvid: 1\r\nx-ctx-ubt-sid: 1\r\nx-ctx-ubt-vid: 1765078651988.0c55yqsxjtpp\r\nx-ctx-wclient-req: 614f65bb94a5b2f1f25be5a12cbea8e0\r\nContent-Length: 284\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: Union=AllianceID=6015822\u0026SID=168798533\u0026OUID=ctag.hash.ccjJjXXJOpYl\u0026Expires=1767670651990\u0026createtime=1765078651; UBT_VID=1765078651988.0c55yqsxjtpp; ibu_online_jump_site_result={\"isShowSuggestion\":false}; ibusite=EN; ibugroup=trip; ibulanguage=EN; ibulocale=en_xx; cookiePricesDisplayed=USD; ibu_cookie_strict=0; _abtest_userid=e7b40962-e94a-4116-9bcf-af1ceddea7af; _tp_search_latest_channel_name=hotels; _bfa=1.1765078651988.0c55yqsxjtpp.1.1765078653998.1765078653998.1.1.10320668088; _gcl_au=1.1.1944475785.1765078655; GUID=09034023113792808361; _fwb=202fgWTgpaFl4ko2G4nljfO.1765078656039; wcs_bt=s_33fb334966e9:1765078656\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":284,"data":"{\"anywhere\":true,\"head\":{\"cid\":\"\",\"ctok\":\"\",\"cver\":\"1.0\",\"lang\":\"01\",\"sid\":\"8888\",\"syscode\":\"09\",\"auth\":\"\",\"xsid\":\"\",\"extension\":[],\"Locale\":\"en-XX\",\"Language\":\"en\",\"Currency\":\"USD\",\"ClientID\":\"\",\"locale\":\"en_XX\",\"currency\":\"USD\",\"vid\":\"1765078651988.0c55yqsxjtpp\",\"source\":\"Online\"}}"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\nx-cat-server: cat.fx.sgp.tripws.com:80\r\nx-cat-root-id: 100025527-0a9a8644-490299-2457540\r\nx-cat-parent-id: 100025527-0a9a8644-490299-2457540\r\nx-cat-id: 100025527-0a9a8644-490299-2457547\r\nx-cat-root-url: http://cat.fx.sgp.tripws.com:80/cat/r/m/100025527-0a9a8644-490299-2457540\r\nclogging_trace_id: 8336412370322353225\r\nrootmessageid: 100025527-0a9a8644-490299-2457540\r\nservermessageid: 100025527-0a9a8644-490299-2457547\r\nvary: accept-encoding\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-gate-root-id: 100025527-0a9a8644-490299-2457540\r\nx-gate-region: SGP-ALI\r\nx-service-call: 0.162\r\naccess-control-expose-headers: RootMessageId, x-service-call, x-gate-region\r\nx-gate: ctrip-gate\r\nx-originating-url: https://www.trip.com/restapi/soa2/18814/json/getRecommendedAttraction\r\nx-trip-region: de\r\ndate: Sun, 07 Dec 2025 03:37:36 GMT\r\ncontent-length: 1235\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver-timing: cdn-cache; desc=MISS, edge; dur=7, origin; dur=384\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: MISS\r\nunique-request-id: 3612492c\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5677,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"74388a008b7e6c8e69eb64e7999530ca","sha1":"50cae22a26acd79250725bf06304ba160e7fcf1c","sha256":"c320d4dbd2cabac28d73c046db7df5c2a204a686722c7bfebfeaa167f3e89f36","sha512":"2640e2950aa4c346807a54807ce4442664b42256c57319b2bcde40d52cbc0a8dcd9477a1ee5fcace8af4942d4de3d815685b12254a5c0f569c624e5aa46f28d2","ssdeep":"96:ot3LkKA+o2sJoiM8BCeOq04TnFcT8PQ4MvieqkwQTVJia5c:ot7FAwspJCo2TkxeJV95c","tlshash":"74c1232b4b94dab94f4d52e0345f601cec2511f6e2d4c6bcf6ad9a405663fef923020e","first_seen":"2025-12-07T03:38:25.96414Z","last_seen":"2025-12-07T03:38:25.96414Z","times_seen":1,"resource_available":false,"data":null}},"time_used":402,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":402,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/online-home/l10n.3655b329d9dec8fa96837e71abc5f2ac.js","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:32.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /modules/ibu/online-home/l10n.3655b329d9dec8fa96837e71abc5f2ac.js HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nx-ares-server: r100013666-21038164-zctqw@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: 7G9JSHZ28B48DJJW\r\netag: W/\"3655b329d9dec8fa96837e71abc5f2ac\"\r\nlast-modified: Wed, 03 Dec 2025 07:33:44 GMT\r\nx-ares-raw-buffer-size: 66855\r\nx-backend-latency: 0.340\r\ncontent-encoding: br\r\nx-varnish: 91783313\r\nx-device: U R Android\r\naccept-ranges: bytes\r\ncontent-length: 20670\r\ncache-control: max-age=4852572\r\nexpires: Sun, 01 Feb 2026 07:33:44 GMT\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a208\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":66855,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"3655b329d9dec8fa96837e71abc5f2ac","sha1":"a10ecc77e0ed2c507cb75fd4f813ead4ed02d6eb","sha256":"f061db128cf0ffd7aefc34a7f70954c706c3f24929e24bfc5747649f933cc24e","sha512":"a03ef00d17274a111df2200cbee4810fe820635a67198d65b3987ecdfc7257bf5845a7097d07b440186cb839d47b1d4a131a130ac2045691df0ecb3d13d3df97","ssdeep":"768:HGjXOLz0+0yVsab3C59bBOSjL41ZE0mZmDk2sv3WPiEa102A8XJESO:mjs0Gsab3AOSS3jDx2IiEC02AiO","tlshash":"9763d5ce3586b01257b626b5082f050bf33e9995684e4e0cf118d9e9783dc6e917bfb8","first_seen":"2025-12-03T08:08:10.069762Z","last_seen":"2025-12-08T09:12:13.260836Z","times_seen":101,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":109,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/online-home/onlineRecommendCars.5802b281627118fac7c652acb21b2492.js","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:32.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /modules/ibu/online-home/onlineRecommendCars.5802b281627118fac7c652acb21b2492.js HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nx-ares-server: r100013666-21038164-5skh7@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: MHDKQC9PZCNKF838\r\netag: W/\"5802b281627118fac7c652acb21b2492\"\r\nlast-modified: Wed, 03 Dec 2025 07:34:19 GMT\r\nx-ares-raw-buffer-size: 39068\r\nx-backend-latency: 0.030\r\ncontent-encoding: br\r\nx-varnish: 89230621\r\naccept-ranges: bytes\r\ncontent-length: 10556\r\ncache-control: max-age=4852607\r\nexpires: Sun, 01 Feb 2026 07:34:19 GMT\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a23e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":39068,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (38946)","md5":"5802b281627118fac7c652acb21b2492","sha1":"a047884ca012027f4e076452f8abcc86d499eede","sha256":"62c9f5fbcfcc09fe53d0b3f0fc743f397ac2d33bc5ca3e89b831f3b919580ad6","sha512":"6043ce76a935755c03db8def6dd7e0156d7d2575ea51b208753603be9e435ae7e20e14338e226041a5b09a6277aefb58f2c1d417f3bf4035f4365b9db37c9180","ssdeep":"768:tSDccccT+whgfkEH+FU6LYNknjffqcvTvRgzReBRmpAsXO:tMT+whgfkEHsaUjHqIyReBKO","tlshash":"4303f94cb0a1f8ed11bb1097903fa60af3763b5568198c10d262c9cc7d74bde9276b6e","first_seen":"2025-12-03T08:08:10.116922Z","last_seen":"2025-12-08T09:12:13.201835Z","times_seen":101,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":78,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wcs.naver.net/wcslog.js","fqdn":"wcs.naver.net","domain":"naver.net","tld":"net"},"ip":{"addr":"23.36.76.106","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:35.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wcs.naver.net","organization":"NAVER Cloud Corp."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 19 Aug 2025 00:00:00 GMT","end":"Wed, 19 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"20:EE:B0:04:84:AE:81:9A:43:83:4B:BA:7F:00:1B:57:B2:22:BF:81","sha256":"17:93:62:77:08:CE:EC:F3:F9:A4:1B:5C:45:20:A3:F2:6D:40:BB:BA:EB:90:FC:F4:DE:06:DB:8C:61:34:1C:4E"}}},"request":{"raw":"GET /wcslog.js HTTP/1.1\r\nHost: wcs.naver.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Testa/6.2.4\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 09 Jan 2025 05:11:21 GMT\r\nETag: W/\"677f5a79-755c\"\r\nContent-Encoding: gzip\r\nContent-Length: 10434\r\nCache-Control: max-age=65, s-maxage=300\r\nDate: Sun, 07 Dec 2025 03:37:35 GMT\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30044,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (30044), with no line terminators","md5":"c9b9eb9937e6bd4e0f6cca5faabab7a4","sha1":"22f9b44bd2c0d8ff3c17ff33c8b5a35a83ca9bf2","sha256":"f85c25ccd2d895cb838de9fbd7e6a8d7db306a22901a2113cafc22452dae3777","sha512":"66f3be1120228151619cf35efd94da1271b9d32a3d073e8ab9cae0ff52fb29b713eef11b7d3864dbd5469e9ed0003989e1abfb2fd8366822eb5181d8687c3ae6","ssdeep":"384:jb4HoIWdDF+kDW2xR2A0DeTiclCRkoWy0nboOWQSGG4MLRBuiyQmcnS+/PAdwUEu:II5SYnmkyTlGdML+iWc7/PAd84ca","tlshash":"b4d2f99a36125365b6eb20e901ff820b70a196350528c0f4c586e5f1363ce6a53bbffd","first_seen":"2025-01-10T09:36:48.796157Z","last_seen":"2026-04-15T20:15:04.834919Z","times_seen":9070,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":63,"dns":33,"connect":1,"send":0,"wait":2,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pages.trip.com/images/download-button/en-us/ios-en-us.png","fqdn":"pages.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:37.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"GET /images/download-button/en-us/ios-en-us.png HTTP/1.1\r\nHost: pages.trip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nCookie: Union=AllianceID=6015822\u0026SID=168798533\u0026OUID=ctag.hash.ccjJjXXJOpYl\u0026Expires=1767670651990\u0026createtime=1765078651; UBT_VID=1765078651988.0c55yqsxjtpp; ibu_online_jump_site_result={\"isShowSuggestion\":false}; ibulanguage=EN; ibulocale=en_xx; cookiePricesDisplayed=USD; _abtest_userid=e7b40962-e94a-4116-9bcf-af1ceddea7af; _bfa=1.1765078651988.0c55yqsxjtpp.1.1765078653998.1765078653998.1.1.10320668088; _gcl_au=1.1.1944475785.1765078655; GUID=09034023113792808361; _fwb=202fgWTgpaFl4ko2G4nljfO.1765078656039\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/png\r\ncontent-length: 2849\r\nx-ares-server: r100013666-91017039-jc8fk@SHAXY\r\ntiming-allow-origin: *\r\nx-ares-source: aliyun\r\nx-ares-request-id: 69331FC5D877763838105CCC\r\netag: W/\"ce66491bbd178aea5276263fa866a051\"\r\nlast-modified: Fri, 05 Dec 2025 18:09:09 GMT\r\nx-ares-raw-buffer-size: 2849\r\nx-backend-latency: 0.027\r\nx-varnish: 536728736 530567156\r\naccept-ranges: bytes\r\ncache-control: max-age=145392\r\nexpires: Mon, 08 Dec 2025 20:00:49 GMT\r\ndate: Sun, 07 Dec 2025 03:37:37 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 36124b4e\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":2849,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 66, 8-bit colormap, non-interlaced","md5":"ce66491bbd178aea5276263fa866a051","sha1":"ba60546e351357f742ef4005ecb350e8c2661c50","sha256":"ddb57c5f8af7313925c7003ab1305ca1bfe0801007e3ad0d721a73dd544a001d","sha512":"1f4255dd0d96523dab9af7c064afa0fa117669076182d21346ab8058506041a0daf25d094f005a2e5a7d61f96ded59a0f7dad30c0b0d45ecf11a4c512af89fbf","ssdeep":"","tlshash":"81514da12e7417231f7fa1f14a52560e45d07b86ecb043e3e10cedb674c6753544520d","first_seen":"2023-05-22T11:20:34Z","last_seen":"2026-04-05T18:06:35.768968Z","times_seen":1619,"resource_available":false,"data":null}},"time_used":684,"timings":{"blocked":655,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-d.tripcdn.com/images/1mi6l12000c2mv7f5859B.jpg","fqdn":"ak-d.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:37.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /images/1mi6l12000c2mv7f5859B.jpg HTTP/1.1\r\nHost: ak-d.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 01 Apr 2024 00:00:00 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 273889\r\naccess-control-allow-origin: *\r\netag: Dg0on7fbkA,1mi,1mi6l12000c2mv7f5859B\r\ntiming-allow-origin: *\r\ncache-control: max-age=4636942\r\nexpires: Thu, 29 Jan 2026 19:39:59 GMT\r\ndate: Sun, 07 Dec 2025 03:37:37 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a9a8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":273889,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x776, components 3","md5":"7366150f42624dd751fcae1984e235df","sha1":"8f195a1201c3c20b865b79419c8d58e5dffc3cba","sha256":"2b82442c9f213b7c44f8ebfad121c4ae86376cd121c6a14de4c875227fb1670d","sha512":"b1d34b046ddcb245c2d45813ace3604a6094cbc5f8c272da84aa09fb0dec40cb266b75fbda9b3fc76b51e75f64b932fe5616601d802c41d815d3dc66a39ff3dc","ssdeep":"6144:/PBvsY38gRROGq6y2svgMUL8wlR/pQSZpwT:XBfnROGq6mgMUPWM+T","tlshash":"8b4422df388940bac51f79a66a63b35235d92cd38f0320091dda8d87d3795ba6c67b0c","first_seen":"2025-12-02T07:10:06.912384Z","last_seen":"2025-12-07T23:38:01.353248Z","times_seen":107,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/online-home/hotel.236ec2c08555f23d624bba9cfaf7973f.css","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:34.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /modules/ibu/online-home/hotel.236ec2c08555f23d624bba9cfaf7973f.css HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nx-ares-server: r100013666-21038164-fglz4@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: VSD6EK75SGA5YNY2\r\netag: W/\"236ec2c08555f23d624bba9cfaf7973f\"\r\nlast-modified: Thu, 25 Sep 2025 06:09:30 GMT\r\nx-ares-raw-buffer-size: 100043\r\nx-backend-latency: 0.030\r\ncontent-encoding: gzip\r\nx-varnish: 7509297\r\naccept-ranges: bytes\r\ncontent-length: 18195\r\ncache-control: max-age=1531068\r\nexpires: Wed, 24 Dec 2025 20:55:22 GMT\r\ndate: Sun, 07 Dec 2025 03:37:34 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nquic-version: 0x00000001\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a55d\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":100043,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"236ec2c08555f23d624bba9cfaf7973f","sha1":"4386799248f3454a6c27a473e3a9fd091056ea6d","sha256":"dba5f91adc17b7e004b0c326f95c02a1ee16304005f831b53b2f9411df7bbb0b","sha512":"7835571bd35b6b79a030f312fd94c25d0e80eadd9afd8382ed01cf87afc8dfefd092754dbb4b486145b800fcf56529e1a805110904a485774b6db14a0499e96b","ssdeep":"1536:roxig11NyDJUg6UjPfo11tKL6bW35VamZSZ6dT:rox1+L6bw","tlshash":"18a37361d10a15d87f3ec67287c0f6ae2292e037cc821e39f156632c95de2d9176eb78","first_seen":"2025-09-25T06:10:18.68435Z","last_seen":"2026-04-15T17:38:47.441109Z","times_seen":2834,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/restapi/soa2/25019/json/recommendCity?x-traceID=1765078651988.0c55yqsxjtpp-1765078655075-1446060381","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:35.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"POST /restapi/soa2/25019/json/recommendCity?x-traceID=1765078651988.0c55yqsxjtpp-1765078655075-1446060381 HTTP/1.1\r\nHost: www.trip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nx-traceID: 1765078651988.0c55yqsxjtpp-1765078655075-1446060381\r\ntrip-trace-id: 1765078651988.0c55yqsxjtpp-1765078655075-1446060381\r\nContent-Type: application/json\r\nContent-Length: 195\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003\r\nCookie: Union=AllianceID=6015822\u0026SID=168798533\u0026OUID=ctag.hash.ccjJjXXJOpYl\u0026Expires=1767670651990\u0026createtime=1765078651; UBT_VID=1765078651988.0c55yqsxjtpp; ibu_online_jump_site_result={\"isShowSuggestion\":false}; ibusite=EN; ibugroup=trip; ibulanguage=EN; ibulocale=en_xx; cookiePricesDisplayed=USD; ibu_cookie_strict=0; _abtest_userid=e7b40962-e94a-4116-9bcf-af1ceddea7af; _tp_search_latest_channel_name=hotels; _bfa=1.1765078651988.0c55yqsxjtpp.1.1765078653998.1765078653998.1.1.10320668088\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":195,"data":"{\"pageCode\":\"homepagesuggest\",\"locale\":\"en-xx\",\"platform\":\"online\",\"head\":{\"extension\":[{\"name\":\"locale\",\"value\":\"en-xx\"},{\"name\":\"platform\",\"value\":\"Online\"},{\"name\":\"currency\",\"value\":\"USD\"}]}}"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\nx-cat-server: cat.fx.sgp.tripws.com:80\r\nx-cat-root-id: 100025527-0a982789-490299-2456627\r\nx-cat-parent-id: 100025527-0a982789-490299-2456627\r\nx-cat-id: 100025527-0a982789-490299-2456634\r\nx-cat-root-url: http://cat.fx.sgp.tripws.com:80/cat/r/m/100025527-0a982789-490299-2456627\r\nrootmessageid: 100025527-0a982789-490299-2456627\r\nservermessageid: 100025527-0a982789-490299-2456634\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-gate-root-id: 100025527-0a982789-490299-2456627\r\nx-gate-region: SGP-ALI\r\nx-service-call: 0.027\r\naccess-control-expose-headers: RootMessageId, x-service-call, x-gate-region\r\nx-gate: ctrip-gate\r\nx-originating-url: https://www.trip.com/restapi/soa2/25019/json/recommendCity?x-traceID=1765078651988.0c55yqsxjtpp-1765078655075-1446060381\r\nx-trip-region: de\r\ndate: Sun, 07 Dec 2025 03:37:35 GMT\r\ncontent-length: 477\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver-timing: cdn-cache; desc=MISS, edge; dur=6, origin; dur=251\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: MISS\r\nunique-request-id: 361247a5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1506,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"4b9715c73cacb1ebbd2bc46e6406e482","sha1":"47618a0c3dd513573c330d7eb18b08b59c336213","sha256":"fd604dd4c88b6b74e5a7da2e79b1fbb04453344a931ef5dae015bdf5ef341a3c","sha512":"bd875a9819d8d0261219d6fb8af2d8e08645a9c3db86362d105e41545cf0bf7b4f92688a9c79c3d9050b231f0a5eda374c15952e377e5942fbf0c45fff7bb88d","ssdeep":"","tlshash":"48316b7a2e38fdb96fd512e19483660d4d59160de1ec2cb0e4f08a6520ef2db8335ed6","first_seen":"2025-12-07T03:38:25.968435Z","last_seen":"2025-12-07T03:38:25.968435Z","times_seen":1,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webresource.tripcdn.com/resaresenglish/risk/ubtrms/dist/rms.051e0d85.js","fqdn":"webresource.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:36.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"GET /resaresenglish/risk/ubtrms/dist/rms.051e0d85.js HTTP/1.1\r\nHost: webresource.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 3399\r\nx-ares-server: r100013666-21027498-x7p7h@SHARB\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nx-ares-source: aliyun\r\nx-ares-request-id: 69143653FEB49C3037C696EF\r\netag: W/\"051e0d8593307cbb3e56220a460e153f\"\r\nlast-modified: Wed, 12 Nov 2025 07:25:07 GMT\r\nx-ares-raw-buffer-size: 10342\r\nx-backend-latency: 0.025\r\ncontent-encoding: br\r\nx-varnish: 397960417\r\naccept-ranges: bytes\r\ncache-control: max-age=3037651\r\nexpires: Sun, 11 Jan 2026 07:25:07 GMT\r\ndate: Sun, 07 Dec 2025 03:37:36 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 3612494b\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":10342,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10342), with no line terminators","md5":"051e0d8593307cbb3e56220a460e153f","sha1":"11a4867b1adca9d9e2418d1f7f4a20d85b880653","sha256":"3b6dadc4f4a00dd9c3741e94f62efc4782f5d328ccf6efe012a1b9538485bd11","sha512":"e78a0d7804729fd1eeafbf75aa30476fafcf450e215b9abbc7efc1b661b9621db602cc3ec381a8eecff81fa7f066afe34824610c09a279de4b66ec73772332f4","ssdeep":"192:yHY5t4AGHYHMK57xGTV1SSJPv4/8aDT189Nkv9WuAJiVSZ/kXY3:oLYHJRxmb5Pwkav+jkvQu7VSZsw","tlshash":"4222faa4324198f1b8b724b26b7fe601333737a168465464ab1485777c6fb4b8027eec","first_seen":"2025-11-25T14:10:16.302863Z","last_seen":"2025-12-30T10:55:05.269538Z","times_seen":332,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chloro.trip.com/v2/d","fqdn":"chloro.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:38.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"POST /v2/d HTTP/1.1\r\nHost: chloro.trip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nContent-Length: 1078\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nCookie: Union=AllianceID=6015822\u0026SID=168798533\u0026OUID=ctag.hash.ccjJjXXJOpYl\u0026Expires=1767670651990\u0026createtime=1765078651; UBT_VID=1765078651988.0c55yqsxjtpp; ibu_online_jump_site_result={\"isShowSuggestion\":false}; ibulanguage=EN; ibulocale=en_xx; cookiePricesDisplayed=USD; _abtest_userid=e7b40962-e94a-4116-9bcf-af1ceddea7af; _bfa=1.1765078651988.0c55yqsxjtpp.1.1765078653998.1765078653998.1.1.10320668088; _gcl_au=1.1.1944475785.1765078655; GUID=09034023113792808361; _fwb=202fgWTgpaFl4ko2G4nljfO.1765078656039\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1078,"data":"data=AwIwZgHM3Axg7NATGGAWGmvuFVBGYfANgFNgBDMCiKIrfAVhgGZoWIQHoQWATAJwh4jChRADYEMPnh8kpWAPwKIFNHwiNU2XVmbAMwA0ZNEI+KIUJRbuI3EMxCyJ5mvOi8JF8u560B7AYGAODgxo5EQUfLDQzBrEYPAUxALEsBnEKmAsjApsPkha8GlkxGhJ8NUsPpGMaD4s+IWkbCwgPoyl6W3ELGgdPvAQLP2DncDepSwUzSwLjW3ASAJ1pYz9xCBJKLXtLcAHB3XEad7Em2fJEHstiwXsK0hcK3zQAnSUCWiVXWfpbobbyBASJdIsC7JMZgM7wRqGTaVDZdQy-Yj-MpAy4g1yGJIuXQCYDEaqXDGkjK1YCkJC1fIYxDeCiEdpIWRIWCWfDKOLxMm9BbU2BoTK9EQjYajUaXXLjUCVc5IcnXSVHe4DGACPKPIpaUYtFTEiCRHFoeBjMayEnMeF8KqpdKZTKExjdMptBZdc3ksY7VCjOnq9rB9UwNpB+YGkPzI5xmPQO0OsrO7K4LIIM58RDnG1o+3dK35nFFiAZ0rEbMkgQ55hl50Vqu5y7AATuzZIc2ippIR4qdsYruwdaixgDYeIsdNWrLNhYJBXK3lSrpSqySpjuYrdVdBpoZg9+Z0495fZjwbU08bljpEiDfq3e100ZHfJ8Aa1Cpe99lsbjJA-iqZwYjelw3hwwFrgoWSwkuE6ngsLRjhiUzmjW27EGW0LwtkWwkKQFRlGuOGbrUTQqMYvx5Nu+yHKeU4foMFprK+AxgbeX4PgBIEvjq76DMqF4ARBf4DMJZZXMBdKAuBZZnFBBGZLBuHwSx8LwOhPiYVUkIIjhkKoRptZaSQunnGcBh6FgxKEqCVBkAoyi9q8zgCPZtJ8DyRhiD5FBIBQpReFYfjslAvaIL2YXwKysBxCwsDMDqrZRBQpDMBQoDBJlMjMDIwQ+KlnkgPgqCduQaAQLE+DmiApBcCkHSCIQSDVNUvYsARC4tHV8B5cVYCMO8sDUKKOjQLAN5oEAA\u0026version=11\u0026serverName=https://www.trip.com"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 36\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: x-ctrip-canary-req,x-ctx-CanaryReq,x-ctx-CanarySrc,x-ctx-CanaryIdc,x-cat-trace-mode\r\ndate: Sun, 07 Dec 2025 03:37:38 GMT\r\nset-cookie: _RGUID=922ec99a-94d6-4417-b603-645b05c081ba; Expires=Mon, 07-Dec-2026 03:37:38 GMT; Path=/\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver-timing: cdn-cache; desc=MISS, edge; dur=7, origin; dur=306\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: MISS\r\nunique-request-id: 36124bfb\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36,"size_decoded":0,"mime_type":"text/xml","magic":"ASCII text, with no line terminators","md5":"668331c3c6352ae97ae5efe478bba9a8","sha1":"38a2e16bfde0f219720d696f90493eae4a7b007d","sha256":"61703c15f106591b0744deedf3640a9338f7c746dc79d573540a491bccec5a94","sha512":"ed538d6da97c33d7c5714cbee63d70c990c030927fa0277e6d19ff65be43d2da3c0a577f58008325a170d08880a97c1c5bd7dcf7a64cbb3aec789e503594253b","ssdeep":"","tlshash":"f4800400c30550070f71d10504500c13d7cdc13f03114f001df570444c055414500044","first_seen":"2025-12-07T03:38:25.969621Z","last_seen":"2025-12-07T03:38:25.969621Z","times_seen":1,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":323,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aff.trustofferlink.com/2JRNK2B/7JH5N3F/?sub1=2uafUxoTYS1Z9pe3vvAHFR\u0026source_id=e017c010\u0026sub2=PropellerAds1\u0026sub3=3646","fqdn":"aff.trustofferlink.com","domain":"trustofferlink.com","tld":"com"},"ip":{"addr":"54.196.173.211","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-07T03:37:31.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aff.trustofferlink.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Nov 2025 11:58:21 GMT","end":"Tue, 03 Feb 2026 11:58:20 GMT"},"fingerprint":{"sha1":"E5:71:F1:21:F9:E9:4E:8D:20:3F:99:CA:1F:22:BC:4A:74:47:13:56","sha256":"28:E5:8B:6A:76:FA:DF:1B:3D:B7:21:03:9B:32:C2:CD:1F:94:B4:B9:8A:3F:00:16:C9:5D:0C:76:C2:4B:CA:61"}}},"request":{"raw":"GET /2JRNK2B/7JH5N3F/?sub1=2uafUxoTYS1Z9pe3vvAHFR\u0026source_id=e017c010\u0026sub2=PropellerAds1\u0026sub3=3646 HTTP/1.1\r\nHost: aff.trustofferlink.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nserver: nginx\r\ndate: Sun, 07 Dec 2025 03:37:31 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 151\r\naccept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Model\r\nlocation: https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003\r\nset-cookie: uniqueClick_7JH5N3F=3c12f766-b7fd-42fb-bb98-61397bb318ee:1765078651; Path=/; Expires=Mon, 08 Dec 2025 03:37:31 GMT; SameSite=None\ntransaction_id=020aa79a60e94cd094bf00d65b509348; Path=/; Expires=Sat, 07 Mar 2026 03:37:31 GMT; SameSite=None\r\nvary: Origin\r\nx-eflow-request-id: fb29c48e-9a45-4ca4-999c-5709e9ac654a\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":94378,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T20:38:47.575438Z","times_seen":13797803,"resource_available":true,"data":null}},"time_used":566,"timings":{"blocked":216,"dns":21,"connect":94,"send":0,"wait":133,"receive":0,"ssl":100},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/online-home/aidSid.7a94c0dba7b3199ab7fa8a166f0d362a.js","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:32.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /modules/ibu/online-home/aidSid.7a94c0dba7b3199ab7fa8a166f0d362a.js HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nx-ares-server: r100013666-21038164-5skh7@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: MHDVSAVGS7GQ2YRS\r\netag: W/\"7a94c0dba7b3199ab7fa8a166f0d362a\"\r\nlast-modified: Wed, 03 Dec 2025 07:34:19 GMT\r\nx-ares-raw-buffer-size: 22005\r\nx-backend-latency: 0.080\r\ncontent-encoding: br\r\nx-varnish: 91426812\r\naccept-ranges: bytes\r\ncontent-length: 7508\r\ncache-control: max-age=4852607\r\nexpires: Sun, 01 Feb 2026 07:34:19 GMT\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a24a\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":22005,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (21896)","md5":"7a94c0dba7b3199ab7fa8a166f0d362a","sha1":"140d5e0a4f02760218f151ccadab185842a8a96d","sha256":"2c8dbfa8902627b585b93b10456f59ae56db0b54b67378a90f197ad0d8018c78","sha512":"6f2ccb4752016cb6a1e25f1063802d49106f84fa4ac26eeb0f7188d4f4cd7e7bb5f88ab8ace2d5abef68502db113af1cad627f0b7d31c07014cd8bb2d95b625f","ssdeep":"384:B0k1diaQ4yQJhFiFZI/VnRM4qai0pZoo8FIf1r3okSY0zrJsm:H1ca1DjBRM70w5F4+Y0zFsm","tlshash":"3aa2f7ccb5d1f09a13a7a074523f220af2bb78a5640dd840d615daf1be7469f8323e9d","first_seen":"2025-12-03T08:08:10.114228Z","last_seen":"2025-12-08T09:12:13.22189Z","times_seen":101,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":78,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-827436400","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:35.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:33:43 GMT","end":"Mon, 19 Jan 2026 08:33:42 GMT"},"fingerprint":{"sha1":"4E:9E:D1:61:E4:7D:C2:8A:B6:AD:D2:31:C7:07:01:E4:DB:A0:A7:A9","sha256":"C5:DD:D4:CA:97:B7:B5:8C:B4:99:E8:56:30:AC:1B:F0:FD:7C:5A:FD:19:ED:13:D0:27:D6:0B:76:C7:C7:A0:66"}}},"request":{"raw":"GET /gtag/js?id=AW-827436400 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 07 Dec 2025 03:37:35 GMT\r\nexpires: Sun, 07 Dec 2025 03:37:35 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sun, 07 Dec 2025 03:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 123855\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":356062,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5911)","md5":"05df3a848fd34b0c3c2445cce2438c94","sha1":"4e55d0349a494ed6774da56e3de99d24abe02111","sha256":"ab1ba3ceeb30cb453b5417eb81e2de1515806f4ad5153c47ff5f99338f160ef7","sha512":"1f37397da4a46af9fab9333de9cfe75e15bd9165adcb21dc317c8665da7c0a7a87a6add041b540b53bc05e2e4db59267a4f040701a16f5a2b40087b069714d40","ssdeep":"6144:D7WTwVWSayql+VD75U6k/bbqt3D3cY+1vxTvz:v8tSwwVD53cvxP","tlshash":"167429cd73d674264393b478403f008ba17b69a2f84cc895f186c9e52e74aaa4277f7d","first_seen":"2025-12-07T03:38:25.981112Z","last_seen":"2025-12-07T03:38:25.981112Z","times_seen":1,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-d.tripcdn.com/images/1mi4g424x92iqizo08573_D_800_1200_R5.jpg?proc=source/trip\u0026proc=source/trip\u0026proc=namelogo/d_5","fqdn":"ak-d.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:37.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /images/1mi4g424x92iqizo08573_D_800_1200_R5.jpg?proc=source/trip\u0026proc=source/trip\u0026proc=namelogo/d_5 HTTP/1.1\r\nHost: ak-d.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 181599\r\naccess-control-allow-origin: *\r\netag: Dg0on7fbkA,1mi,1mi4g424x92iqizo08573\r\nlast-modified: Mon, 01 Apr 2024 00:00:00 GMT\r\ntiming-allow-origin: *\r\ncache-control: max-age=5104538\r\nexpires: Wed, 04 Feb 2026 05:33:15 GMT\r\ndate: Sun, 07 Dec 2025 03:37:37 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a9a9\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":181599,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x1200, components 3","md5":"11f5f7be9dbae6350c3054dc08e1c4fb","sha1":"d25a966f62b5004ae93ac97d6f03d1423bc6d07f","sha256":"13bf1a5282997eccf045227e3904f9185e53852d092ab67d8f2cf2c701aed23c","sha512":"7c8eaf8576588defc01aeea53bf41ed9f83609e17ebdd12a9e24ce38ab9c39db64505d53a4502550aa265abbdddcf6d9953b084fe74330d8c9c13919d558ba54","ssdeep":"3072:BpPC5HcM6BmassZ1W1uN1IA0lpRxbdfHKhdIfFoGCokN5F6TSa75:BpK5P6BmaFS1uN1IblTxkFG0JCSa75","tlshash":"7e04129eab5df83fd16aec78180b67c231c4a1529e2b90f054183c99d37f229d1cda5b","first_seen":"2025-11-20T08:50:08.183921Z","last_seen":"2025-12-07T03:38:25.981973Z","times_seen":29,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tripcdn.com/packages/ubt/websdk/*/ubt.minh.js?d=2025127","fqdn":"static.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"3.167.2.46","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:33.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trip.com","organization":"TRIP.COM TRAVEL SINGAPORE PTE. LTD."},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 29 Jul 2025 10:01:07 GMT","end":"Sun, 30 Aug 2026 10:01:06 GMT"},"fingerprint":{"sha1":"F7:7C:13:BC:A4:53:3B:74:41:DE:F5:B8:27:54:EB:2E:B4:90:77:ED","sha256":"3D:88:AF:03:3D:64:D8:5C:B9:3A:38:D6:0A:C7:EF:9D:52:3B:EA:29:A3:09:88:34:D3:6A:42:81:BD:FA:D2:ED"}}},"request":{"raw":"GET /packages/ubt/websdk/*/ubt.minh.js?d=2025127 HTTP/1.1\r\nHost: static.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ndate: Sat, 06 Dec 2025 13:00:17 GMT\r\nvia: 1.1 varnish (Varnish/6.0), 1.1 331956c71b3e587b085083fed0bc8c3e.cloudfront.net (CloudFront)\r\naccept-ranges: bytes\r\nx-ares-server: r100013666-21038164-zctqw@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache,cache-control\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: RQPHCC77TS2YVN1R\r\netag: W/\"24392c35be75699f3b42e7b220c25b06\"\r\nlast-modified: Sat, 06 Dec 2025 13:00:17 GMT\r\ncache-control: max-age=5184000\r\nexpires: Wed, 04 Feb 2026 13:00:17 GMT\r\nx-ares-raw-buffer-size: 73857\r\nx-backend-latency: 0.070\r\ncontent-encoding: br\r\nx-varnish: 94286004\r\nvary: Origin,Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: OSL50-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: FaXaq43nGzp3-ALw1B79wgiJpx6IWCGim7nH5oaT_mUzBqZ9DySfYg==\r\nage: 52636\r\nc-via: amazon\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish:6.0","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":73857,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65508), with no line terminators","md5":"24392c35be75699f3b42e7b220c25b06","sha1":"d94ca2fe030e4b3543150573ef77a77f0a0f1fd2","sha256":"018850b11c997ab5611334b2dd4448197af1b90692a9804cb72d25192348b829","sha512":"b7babd7b5d4e8e8a480262549292f72c7147c8721937ad3a3b2d208acbb2b93d762b653795dd8cb89e4ce7d083f966e6c062d0cb35b79278c13316da2304de0e","ssdeep":"1536:VGUhmI7R+vSMo/L/4NK3BsMiWS58XukU/ucMi:VjXMMz6Eukdi","tlshash":"7f733da6b3a7b43107fd1266d0375601f33d17281c09a06cf25a69df7c45ecba2a6b78","first_seen":"2025-11-22T06:08:26.020779Z","last_seen":"2025-12-28T04:37:57.000793Z","times_seen":408,"resource_available":true,"data":null}},"time_used":1050,"timings":{"blocked":529,"dns":489,"connect":3,"send":0,"wait":2,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/restapi/soa2/27147/run?x-traceID=1765078651988.0c55yqsxjtpp-1765078655525-1938587401","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:35.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"POST /restapi/soa2/27147/run?x-traceID=1765078651988.0c55yqsxjtpp-1765078655525-1938587401 HTTP/1.1\r\nHost: www.trip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlocale: en-XX\r\ncurrency: USD\r\nx-traceID: 1765078651988.0c55yqsxjtpp-1765078655525-1938587401\r\ntrip-trace-id: 1765078651988.0c55yqsxjtpp-1765078655525-1938587401\r\nContent-Type: application/json\r\nContent-Length: 207\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003\r\nCookie: Union=AllianceID=6015822\u0026SID=168798533\u0026OUID=ctag.hash.ccjJjXXJOpYl\u0026Expires=1767670651990\u0026createtime=1765078651; UBT_VID=1765078651988.0c55yqsxjtpp; ibu_online_jump_site_result={\"isShowSuggestion\":false}; ibusite=EN; ibugroup=trip; ibulanguage=EN; ibulocale=en_xx; cookiePricesDisplayed=USD; ibu_cookie_strict=0; _abtest_userid=e7b40962-e94a-4116-9bcf-af1ceddea7af; _tp_search_latest_channel_name=hotels; _bfa=1.1765078651988.0c55yqsxjtpp.1.1765078653998.1765078653998.1.1.10320668088; _gcl_au=1.1.1944475785.1765078655\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":207,"data":"{\"name\":\"gotop-tg-config\",\"Head\":{\"Group\":\"Trip\",\"Source\":\"ONLINE\",\"Version\":\"10000\",\"Locale\":\"en-XX\",\"Currency\":\"USD\",\"VID\":\"1765078651988.0c55yqsxjtpp\",\"SessionId\":\"1\",\"PvId\":\"1\"},\"localTime\":\"2025-12-07\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json; charset=utf-8\r\nx-cat-server: cat.fx.sgp.tripws.com:80\r\nx-cat-root-id: 100025527-0a9a5011-490299-2457826\r\nx-cat-parent-id: 100025527-0a9a5011-490299-2457826\r\nx-cat-id: 100025527-0a9a5011-490299-2457835\r\nx-cat-root-url: http://cat.fx.sgp.tripws.com:80/cat/r/m/100025527-0a9a5011-490299-2457826\r\nclogging_trace_id: 19c20150-8a5a-48f1-8c12-a00b19ac3430\r\nrootmessageid: 100025527-0a9a5011-490299-2457835\r\naccess-control-allow-methods: POST,GET\r\naccess-control-expose-headers: x-originating-url, x-gate-region, x-ibu-trip-region, RootMessageId, x-service-call, x-gate-region\r\netag: W/\"5e5-HzbU8YNZ4l/Nt6wa9DBKtxaly+c\"\r\nx-backend-latency: 0.005\r\ncontent-encoding: gzip\r\nx-envoy-upstream-service-time: 5\r\nx-service-appid: 100042569\r\nx-service-idc: sgp-ali\r\nx-service-hostip: 10.154.50.135\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-gate-root-id: 100025527-0a9a5011-490299-2457826\r\nx-gate-region: SGP-ALI\r\nx-service-call: 0.007\r\nx-gate: ctrip-gate\r\nx-originating-url: https://www.trip.com/restapi/soa2/27147/run?x-traceID=1765078651988.0c55yqsxjtpp-1765078655525-1938587401\r\nx-trip-region: de\r\ndate: Sun, 07 Dec 2025 03:37:35 GMT\r\ncontent-length: 716\r\nvary: Origin, Accept-Encoding\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver-timing: cdn-cache; desc=MISS, edge; dur=8, origin; dur=202\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: MISS\r\nunique-request-id: 36124849\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":1509,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e3df476811c43902958bbbc8acbe7d6a","sha1":"1f36d4f18359e25fcdb7ac1af4304ab716a5cbe7","sha256":"fe1a4b58c1684a7501fe60e30817a1ac5b8d9ac4c89b61ab355fd8e27940221c","sha512":"6593deef42e55ae5d2ce614a64c68d5d8e2d47137189d0abb82ebe67939813ee6a2a395a57765b5d4cb932f07400e49c79c5114aeb52416e5a7642690ebb66df","ssdeep":"","tlshash":"7b3157a269d8532fce4123b9800f7481b211917f2b8d9416f1ce86d847cef7db2496da","first_seen":"2025-12-07T03:38:25.983002Z","last_seen":"2025-12-07T03:38:25.983002Z","times_seen":1,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dimg04.tripcdn.com/images/1zp2q12000ez02rk19D95.jpg","fqdn":"dimg04.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:41.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"GET /images/1zp2q12000ez02rk19D95.jpg HTTP/1.1\r\nHost: dimg04.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 01 Apr 2024 00:00:00 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 100852\r\naccess-control-allow-origin: *\r\netag: Dg0on7fbkA,1zp,1zp2q12000ez02rk19D95\r\ntiming-allow-origin: *\r\ncache-control: max-age=3070483\r\nexpires: Sun, 11 Jan 2026 16:32:24 GMT\r\ndate: Sun, 07 Dec 2025 03:37:41 GMT\r\nalt-svc: h3=\":443\"; ma=93600\r\nquic-version: 0x00000001\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 36124f15\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":100852,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 752x376, components 3","md5":"47924ac61d1981cba2e43e8dea7ed0c5","sha1":"d8757fe84e01a001a470b09355e8e07f33c8ffaa","sha256":"732166c2f34c13b68cbcea06e190f2340e23d6d5ee56caf9c7eabf6a1990c588","sha512":"0f1801379de99fce692a60b24740790695c5b86e2e5788491d55b29dcd520d15083dc3b68506af16d5468f2d148a26074a9393c4e97a70a0d33e8466a5fe187e","ssdeep":"3072:ugV+jHO1uNdoSW7GBG1x3xEow4CvEjkqsE:ugV+1djOGs1RxEow4EEI1E","tlshash":"77a3abfca660ff3e3fe503da344ecb3d9d61913079bec89d1024892e9669211056ee5b","first_seen":"2025-06-25T06:07:29.897482Z","last_seen":"2026-04-15T17:38:47.585368Z","times_seen":2088,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/online-assets/TripGeom-Regular.ba9c64b894f5e19551d23b37a07ba0a4.woff2","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:32.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /modules/ibu/online-assets/TripGeom-Regular.ba9c64b894f5e19551d23b37a07ba0a4.woff2 HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.trip.com/\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: font/woff2\r\ncontent-length: 43896\r\nx-ares-server: r100013666-21038164-wg5bn@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: 6N1MEBFYDR7VHGJ3\r\netag: W/\"ba9c64b894f5e19551d23b37a07ba0a4\"\r\nlast-modified: Fri, 22 Aug 2025 02:43:33 GMT\r\nx-ares-raw-buffer-size: 43896\r\nx-backend-latency: 0.020\r\nx-varnish: 168642604\r\naccept-ranges: bytes\r\ncache-control: max-age=3943789\r\nexpires: Wed, 21 Jan 2026 19:07:21 GMT\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a251\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":43896,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43896, version 1.0","md5":"ba9c64b894f5e19551d23b37a07ba0a4","sha1":"e092022246001f2ef53b676cfa4cc4983709d1a3","sha256":"74a9864e6b2492db16ea31cf4099de9979a1de19d9fb1e26e83e4cb9507a1391","sha512":"a35f9c981628e653769cc54d62ea8ab3e37e18f078841f0f049aaa2b5a59aa66e6d928b9ff96b42593ca6ed5cd401d3a0a0f6024a2e73e04feaf8bc7eaee6f90","ssdeep":"768:cv/PgcqOt7TpZorOmWfdcu3Nw2UDD0aftU82VnyQRDgFI:K/Pg27TcOdNNw2U8Gm82tyQR0a","tlshash":"7f13f2b938bfe191c53986e2829b63a67cd0f04ead4fd944e72a18539cc58c4f318dc1","first_seen":"2023-08-13T03:23:56Z","last_seen":"2026-04-15T17:38:47.423224Z","times_seen":3105,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":110,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/online-home/onlineLoginPopup.8e2fbe8654592e59237a532763ef458f.css","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:35.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /modules/ibu/online-home/onlineLoginPopup.8e2fbe8654592e59237a532763ef458f.css HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\ncontent-length: 2320\r\nx-ares-server: r100013666-21038164-wg5bn@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: 74D11JSJHD16JYHC\r\netag: W/\"8e2fbe8654592e59237a532763ef458f\"\r\nlast-modified: Wed, 13 Aug 2025 12:48:56 GMT\r\nx-ares-raw-buffer-size: 11335\r\nx-backend-latency: 0.040\r\ncontent-encoding: br\r\nx-varnish: 163252338\r\naccept-ranges: bytes\r\ncache-control: max-age=3383614\r\nexpires: Thu, 15 Jan 2026 07:31:09 GMT\r\ndate: Sun, 07 Dec 2025 03:37:35 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nquic-version: 0x00000001\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a72b\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":11335,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (11335), with no line terminators","md5":"8e2fbe8654592e59237a532763ef458f","sha1":"75fbf7ed4e68939f629131fd7019f00c881f5160","sha256":"7c5cb98866ee74454a0cd4b5ae84a7e8174c992ab2818a019ede5780d89aacb2","sha512":"a4c1026e07ae8bd8bfb2b06d7d284e880d3817d8eda818751bfca78d9cfb5c2e30118d3769f41d4494b37ef8997dd8ae7bd08cde14f057f576fbc1ad284438b1","ssdeep":"96:DMk91wBXnMSLSIan2CPM9pW2GQKzpfyhIYoFvWv2CNeZ3PPeDS2k6k1nTuaRlfYf:INBfA+82GQ0y4SCP12XlajU","tlshash":"ce320422d286659a3e3bc1239b8071a9617ff123d8514e7cf11a73be6ac13ed21617b4","first_seen":"2024-07-08T23:38:24Z","last_seen":"2026-04-15T17:38:47.436448Z","times_seen":2972,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/online-home/onlineSecondEntry.bfff96baa9a9ddf2cbf1b56977844b55.css","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:35.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /modules/ibu/online-home/onlineSecondEntry.bfff96baa9a9ddf2cbf1b56977844b55.css HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nx-ares-server: r100013666-21038164-zctqw@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: KXW7SWPVD73Z60MS\r\netag: W/\"bfff96baa9a9ddf2cbf1b56977844b55\"\r\nlast-modified: Wed, 03 Dec 2025 07:36:11 GMT\r\nx-ares-raw-buffer-size: 56316\r\nx-backend-latency: 0.020\r\ncontent-encoding: gzip\r\nx-varnish: 92308399\r\naccept-ranges: bytes\r\ncontent-length: 7637\r\ncache-control: max-age=4852716\r\nexpires: Sun, 01 Feb 2026 07:36:11 GMT\r\ndate: Sun, 07 Dec 2025 03:37:35 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nquic-version: 0x00000001\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a66d\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":56316,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (56316), with no line terminators","md5":"bfff96baa9a9ddf2cbf1b56977844b55","sha1":"36737290feb8fb628d447af1f6e5e8206da0ef92","sha256":"63c5352de5ef47c255c54bd2722cbd2b464990f7e14739d12f152e51dbb0dd52","sha512":"987c65a4958c6505e6c9fec5d03dfab3c2c7337421976dd0b07e3a58dda1d879587846df2b87fda0a45d070adcfc799531fcfba1c0b1dadad449734a9d365a00","ssdeep":"384:INRA7Q0lPEw3L33fepEtI5WU7+Ou9CtGBqul3FGGlp0B3L3aTaow5NtT1dRGy1Cb:IR3Dw3L3veBE+3L3aTaYTcGDLYUv","tlshash":"cb43fe22e06710df7532c42b5f9a752c61249e37d1a3a97fe1c2339cb5da34e35e1a22","first_seen":"2025-12-03T08:08:10.017705Z","last_seen":"2025-12-17T08:17:11.25321Z","times_seen":181,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flowtracktrk.com/go/11e047d1-e745-42e9-be38-d08d8027f479?cost=0.008300\u0026visitor_id=1021376245633392641\u0026zoneid=3604848\u0026campaignid=10178647\u0026bannerid=24917602\u0026language=zh\u0026os=ios\u0026browser=firefox\u0026connection.type=broadband\u0026user_activity=medium\u0026subzone_id=1\u0026country=MO","fqdn":"flowtracktrk.com","domain":"flowtracktrk.com","tld":"com"},"ip":{"addr":"3.71.151.17","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-07T03:37:30.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flowtracktrk.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Nov 2025 06:27:45 GMT","end":"Mon, 02 Feb 2026 06:27:44 GMT"},"fingerprint":{"sha1":"63:72:2B:1E:09:48:91:22:20:DE:50:08:1E:F1:60:74:A1:99:F6:54","sha256":"7E:93:D4:9D:F6:E6:76:6F:6B:91:13:8B:02:D4:B5:5E:4F:A4:81:47:22:19:FD:67:EA:21:07:8E:F4:88:58:B5"}}},"request":{"raw":"GET /go/11e047d1-e745-42e9-be38-d08d8027f479?cost=0.008300\u0026visitor_id=1021376245633392641\u0026zoneid=3604848\u0026campaignid=10178647\u0026bannerid=24917602\u0026language=zh\u0026os=ios\u0026browser=firefox\u0026connection.type=broadband\u0026user_activity=medium\u0026subzone_id=1\u0026country=MO HTTP/1.1\r\nHost: flowtracktrk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Sun, 07 Dec 2025 03:37:31 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 404\r\naccess-control-allow-origin: *\r\nlocation: https://best-r3v3nue.com?url=https%3A%2F%2Faff.trustofferlink.com%2F2JRNK2B%2F7JH5N3F%2F%3Fsub1%3D2uafUxoTYS1Z9pe3vvAHFR%26source_id%3De017c010%26sub2%3DPropellerAds1%26sub3%3D3646\r\nset-cookie: bemob-viewer-id=53f6f379-6c6e-453c-9700-b29705927816; Domain=flowtracktrk.com; Path=/; Expires=Mon, 07 Dec 2026 03:37:31 GMT; HttpOnly; Secure; SameSite=None\nbemob-uniq-visit:11e047d1-e745-42e9-be38-d08d8027f479=1; Domain=flowtracktrk.com; Path=/; Expires=Mon, 08 Dec 2025 03:37:31 GMT; HttpOnly; Secure; SameSite=None\nbmb-rotation:11e047d1-e745-42e9-be38-d08d8027f479:random:0c89e3f636b01486f0a16ecedbc7ab09=0-0-0; Domain=flowtracktrk.com; Path=/; Expires=Mon, 08 Dec 2025 03:37:31 GMT; HttpOnly; Secure; SameSite=None\nbemob-click-id=2uafUxoTYS1Z9pe3vvAHFR; Domain=flowtracktrk.com; Path=/; Expires=Tue, 06 Jan 2026 03:37:31 GMT; HttpOnly; Secure; SameSite=None\r\nvary: Accept\r\nx-response-time: 13.257ms\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":652,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T20:38:47.575438Z","times_seen":13797803,"resource_available":true,"data":null}},"time_used":240,"timings":{"blocked":101,"dns":40,"connect":21,"send":0,"wait":37,"receive":1,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/online-home/onlineHome.162f5780f5554634381cffbc399b4ab0.css","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:32.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /modules/ibu/online-home/onlineHome.162f5780f5554634381cffbc399b4ab0.css HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-ares-server: r100013666-21038164-mjtv8@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: MHDZQQ578YGJYFE9\r\netag: W/\"162f5780f5554634381cffbc399b4ab0\"\r\nlast-modified: Wed, 03 Dec 2025 07:34:19 GMT\r\nx-ares-raw-buffer-size: 325523\r\nx-backend-latency: 0.030\r\ncontent-encoding: br\r\nx-varnish: 89588609\r\naccept-ranges: bytes\r\ncontent-length: 45032\r\ncache-control: max-age=4852607\r\nexpires: Sun, 01 Feb 2026 07:34:19 GMT\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a202\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":325523,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"162f5780f5554634381cffbc399b4ab0","sha1":"bffde2510811fe2fb3d7cd70d8c7b83f05df3106","sha256":"2f3ba26804ddd5a83c1e93a0c698554935d485f6429908a4cb36d53d9d4c52cb","sha512":"135a21d452bd4b0fd31127fed331d639019fc0722b4cea0997efd2bb92ffdb62c69a514817c79be308918b4626c91518b1157e733899f06586778976193aef15","ssdeep":"6144:GbDLhpAXHizD0NZxzRGe3uEQ6R4H7uUrYl/UU1/iZ5HkYKuHTkV7O7VYY717Vn7j:5XHg0NZxAgUrYl/UU1/iZ5HkYKuHTkVI","tlshash":"f664f921d651243e793fca366bc1fb8cba26e223e1531efde691662cd1c62dd2271704","first_seen":"2025-12-03T08:08:10.076116Z","last_seen":"2025-12-17T08:17:11.335347Z","times_seen":181,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":124,"dns":107,"connect":1,"send":0,"wait":6,"receive":2,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/ibu-public-component-umd/production.min.ad8f8f8f0b6573ad6946b2b8339633cd.js","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:32.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /modules/ibu/ibu-public-component-umd/production.min.ad8f8f8f0b6573ad6946b2b8339633cd.js HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nx-ares-server: r100013666-21038164-rkhcw@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: 4WK4QWDNW8J6G8RD\r\netag: W/\"ad8f8f8f0b6573ad6946b2b8339633cd\"\r\nlast-modified: Sat, 23 Aug 2025 09:33:01 GMT\r\nx-ares-raw-buffer-size: 98694\r\nx-backend-latency: 0.030\r\ncontent-encoding: br\r\nx-varnish: 287557644\r\naccept-ranges: bytes\r\ncontent-length: 27581\r\ncache-control: max-age=723989\r\nexpires: Mon, 15 Dec 2025 12:44:01 GMT\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a20b\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":98694,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65464), with escape sequences","md5":"ad8f8f8f0b6573ad6946b2b8339633cd","sha1":"812ae0c92d746866a1fff918eb12cc66c2e804c4","sha256":"58227c5a3c03e9fcda77012de872c7ca9624992d53921a4456b1ed9db0e8ba5a","sha512":"30b3132a4e619b90ad0d55b32995edd93144d7a44490b1b5b1169b49a52284846263bfadbbdc4d0d90e14721a3f8216eafa52087a7caedc0199d894ee6861a6d","ssdeep":"768:xBmOE7yU+0SXO/ppSfnGRNfCDF9IHA9BJhhu9CX6p7uVBOGQoTumoH0UhYopnA3F:DmOEeU+QpK80ThqOmd8oVe0WuTuDuA","tlshash":"26a3e688b692f0b596e261e5402f410bf23e193aa45d9490e295d9f17cfcd8f8137f2e","first_seen":"2025-07-01T08:09:14.239788Z","last_seen":"2026-04-15T17:38:47.55025Z","times_seen":2924,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":103,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/restapi/soa2/24884/json/getConfiguration?x-traceID=1280956203-1765078654403-1120325976","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:34.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"POST /restapi/soa2/24884/json/getConfiguration?x-traceID=1280956203-1765078654403-1120325976 HTTP/1.1\r\nHost: www.trip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlocale: en-XX\r\ncurrency: USD\r\nx-traceID: 1280956203-1765078654403-1120325976\r\ntrip-trace-id: 1280956203-1765078654403-1120325976\r\nContent-Type: application/json\r\nContent-Length: 146\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003\r\nCookie: Union=AllianceID=6015822\u0026SID=168798533\u0026OUID=ctag.hash.ccjJjXXJOpYl\u0026Expires=1767670651990\u0026createtime=1765078651; UBT_VID=1765078651988.0c55yqsxjtpp; ibu_online_jump_site_result={\"isShowSuggestion\":false}; ibusite=EN; ibugroup=trip; ibulanguage=EN; ibulocale=en_xx; cookiePricesDisplayed=USD; ibu_cookie_strict=0; _abtest_userid=e7b40962-e94a-4116-9bcf-af1ceddea7af; _tp_search_latest_channel_name=hotels\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":146,"data":"{\"platform\":\"Online\",\"componentType\":\"online-header\",\"version\":\"9.1.1\",\"head\":{\"locale\":\"en-XX\",\"currency\":\"USD\",\"vID\":\"\"},\"pageId\":\"10320668088\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\nx-cat-server: cat.fx.sgp.tripws.com:80\r\nx-cat-root-id: 100025527-0a9a5011-490299-2456657\r\nx-cat-parent-id: 100025527-0a9a5011-490299-2456657\r\nx-cat-id: 100025527-0a9a5011-490299-2456660\r\nx-cat-root-url: http://cat.fx.sgp.tripws.com:80/cat/r/m/100025527-0a9a5011-490299-2456657\r\nclogging_trace_id: 5531088451547530463\r\nrootmessageid: 100025527-0a9a5011-490299-2456657\r\nservermessageid: 100025527-0a9a5011-490299-2456660\r\nvary: accept-encoding\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-gate-root-id: 100025527-0a9a5011-490299-2456657\r\nx-gate-region: SGP-ALI\r\nx-service-call: 0.004\r\naccess-control-expose-headers: RootMessageId, x-service-call, x-gate-region\r\nx-gate: ctrip-gate\r\nx-originating-url: https://www.trip.com/restapi/soa2/24884/json/getConfiguration?x-traceID=1280956203-1765078654403-1120325976\r\nx-trip-region: de\r\ndate: Sun, 07 Dec 2025 03:37:34 GMT\r\ncontent-length: 335\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver-timing: cdn-cache; desc=MISS, edge; dur=5, origin; dur=246\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: MISS\r\nunique-request-id: 361246e3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":573,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"e15e3db8454afc1bf1e29b0a6359651d","sha1":"06d7ac851798b9a5efdcb0f0474bd3981e6e5ce2","sha256":"1beeeaac32ddcf011cae9af99481d39a9346eb1c0a267148f27e30d58bcea594","sha512":"d507a2d324fe5599066466f646003659bc7c1bb820b056078ab938c26e734e75fa272bddfc67447cfa1da2390726d110475786cc938308bb3e5b8cc092a998a6","ssdeep":"","tlshash":"88f020a206cc0e7b8710446cf28b34807f4571d481a70d0c898ec75e4ee0b76c5122ce","first_seen":"2025-12-07T03:38:25.986852Z","last_seen":"2025-12-07T03:38:25.986852Z","times_seen":1,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/restapi/soa2/19816/bjjson/queryAdsDisplayData?x-traceID=1948605783-1765078654319-1717216694","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:34.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"POST /restapi/soa2/19816/bjjson/queryAdsDisplayData?x-traceID=1948605783-1765078654319-1717216694 HTTP/1.1\r\nHost: www.trip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlocale: en-XX\r\ncurrency: USD\r\nx-traceID: 1948605783-1765078654319-1717216694\r\ntrip-trace-id: 1948605783-1765078654319-1717216694\r\nContent-Type: application/json\r\nContent-Length: 225\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003\r\nCookie: Union=AllianceID=6015822\u0026SID=168798533\u0026OUID=ctag.hash.ccjJjXXJOpYl\u0026Expires=1767670651990\u0026createtime=1765078651; UBT_VID=1765078651988.0c55yqsxjtpp; ibu_online_jump_site_result={\"isShowSuggestion\":false}; ibusite=EN; ibugroup=trip; ibulanguage=EN; ibulocale=en_xx; cookiePricesDisplayed=USD; ibu_cookie_strict=0; _abtest_userid=e7b40962-e94a-4116-9bcf-af1ceddea7af\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":225,"data":"{\"head\":{\"group\":\"trip\",\"locale\":\"en-XX\",\"currency\":\"USD\",\"source\":\"online\",\"clientID\":\"\",\"aidCookie\":\"6015822\",\"sidCookie\":\"168798533\",\"aidSession\":\"6015822\",\"sidSession\":\"168798533\"},\"moduleNames\":[\"ONLINE_INDEX_TOP_DEAL\"]}"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\nx-cat-server: cat.fx.sgp.tripws.com:80\r\nx-cat-root-id: 100025527-0a0e03ce-490299-312771\r\nx-cat-parent-id: 100025527-0a0e03ce-490299-312776\r\nx-cat-id: 100025527-0a9821b3-490299-69857\r\nx-cat-root-url: http://cat.fx.sgp.tripws.com:80/cat/r/m/100025527-0a0e03ce-490299-312771\r\nclogging_trace_id: 1694001378124330746\r\nrootmessageid: 100025527-0a0e03ce-490299-312771\r\nservermessageid: 100025527-0a9821b3-490299-69857\r\nvary: accept-encoding\r\ncontent-encoding: gzip\r\nx-gate-root-id: 100025527-0a0e03ce-490299-312771\r\nx-gate-region: SGP-ALI\r\nx-service-call: 0.243\r\naccess-control-expose-headers: RootMessageId, x-service-call, x-gate-region\r\nx-gate: ctrip-gate\r\nx-originating-url: https://www.trip.com/restapi/soa2/19816/bjjson/queryAdsDisplayData?x-traceID=1948605783-1765078654319-1717216694\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-trip-region: de\r\ndate: Sun, 07 Dec 2025 03:37:34 GMT\r\ncontent-length: 1242\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver-timing: cdn-cache; desc=MISS, edge; dur=8, origin; dur=311\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: MISS\r\nunique-request-id: 361246bb\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4629,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"c20ee8ef55bef93b85f4eda5b66c2b2f","sha1":"02453a76fc610c1eb6a24ab75782db5ba423b1d7","sha256":"47090bd5504f6e0352212e6a38c2edece289bb849ee40a082d70a65bbdf62203","sha512":"7924e43ee5da984d8eeb9ead013ef39a176c8d43f5abba1baaaa1ce5210ac7a96fd59941c4af9248eda565829c1a48b4e9b421e4798da51a0a590f0abb2229bc","ssdeep":"96:o901e57M7kgfV62fzGKGFc1+UBqv/g8CxYX0xYXwGJBqt+1LahBqavMcYLHBD:o9L57M7kf2fzGKGFcUbCxYExYgv+1Lgq","tlshash":"29a124e7ab5cd6b78a02d2c620bffbcdfa17505ec9e68ff4a65448494036ebf1410184","first_seen":"2025-12-07T03:38:25.994612Z","last_seen":"2025-12-07T03:38:25.994612Z","times_seen":1,"resource_available":false,"data":null}},"time_used":330,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":330,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/htls/getHotDestination","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:35.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"POST /htls/getHotDestination HTTP/1.1\r\nHost: www.trip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003\r\ncontent-type: application/json\r\ncookieOrigin: https://www.trip.com\r\nContent-Length: 778\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: Union=AllianceID=6015822\u0026SID=168798533\u0026OUID=ctag.hash.ccjJjXXJOpYl\u0026Expires=1767670651990\u0026createtime=1765078651; UBT_VID=1765078651988.0c55yqsxjtpp; ibu_online_jump_site_result={\"isShowSuggestion\":false}; ibusite=EN; ibugroup=trip; ibulanguage=EN; ibulocale=en_xx; cookiePricesDisplayed=USD; ibu_cookie_strict=0; _abtest_userid=e7b40962-e94a-4116-9bcf-af1ceddea7af; _tp_search_latest_channel_name=hotels; _bfa=1.1765078651988.0c55yqsxjtpp.1.1765078653998.1765078653998.1.1.10320668088\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":778,"data":"{\"lastUpdateTime\":0,\"newHotDestinationFlag\":true,\"allDataFlag\":true,\"head\":{\"platform\":\"PC\",\"clientId\":\"1765078651988.0c55yqsxjtpp\",\"bu\":\"ibu\",\"group\":\"TRIP\",\"aid\":\"6015822\",\"sid\":\"168798533\",\"ouid\":\"ctag.hash.ccjJjXXJOpYl\",\"currency\":\"USD\",\"region\":\"XX\",\"locale\":\"en-XX\",\"timeZone\":\"0\",\"device\":\"PC\",\"deviceID\":\"PC\",\"clientVersion\":\"0\",\"frontend\":{\"vid\":\"1765078651988.0c55yqsxjtpp\",\"sessionID\":\"1\",\"pvid\":\"1\"},\"extension\":[{\"name\":\"cityId\",\"value\":\"\"},{\"name\":\"checkIn\",\"value\":\"\"},{\"name\":\"checkOut\",\"value\":\"\"}],\"cid\":\"1765078651988.0c55yqsxjtpp\",\"hotelExtension\":{\"webpSupport\":true},\"traceLogID\":\"9fac84d5c6032\",\"ticket\":\"\",\"hasAidInUrl\":\"true\",\"href\":\"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003\"}}"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json; charset=utf-8\r\nsoa20-service-appid: 100034710\r\nsoa20-service-hostip: 10.154.151.215\r\nsoa20-service-idc: SGP-ALI\r\nclogging_trace_id: 7a09d876-c0db-46e9-a69e-4619610d2757\r\nrootmessageid: 100034710-0a9a97d7-490299-443801\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST,GET,OPTIONS,HEAD\r\netag: W/\"683-GdoOu2c1b5CjEmSPu347bCgXxLA\"\r\nx-trip-region: SGP, de\r\nvary: Origin, Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Sun, 07 Dec 2025 03:37:35 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver-timing: cdn-cache; desc=MISS, edge; dur=9, origin; dur=257\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: MISS\r\nunique-request-id: 361247cb\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1667,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"79a5f249ccbb13a13e7fe509e32fd941","sha1":"19da0ebb67356f90a312648fbb7e3b6c2817c4b0","sha256":"ad2646ef0f35e9925923695d361923c4b98f230395ccd811a7ffb7c2936d22c9","sha512":"73d0a74312507f132ea5b2a9e2f42725fd0354b58b760ea2c8ec10e2e30bf8f7a4827fae9e3f791a4bc6c1d42d1df9025a8cc628d982cdaf95235f3a5a26377f","ssdeep":"","tlshash":"58316a2f74040d4fbb1686646487758bcb7c301aee85ef86c5dfca0c4a5a49a323b15e","first_seen":"2025-12-07T03:38:26.000529Z","last_seen":"2025-12-07T03:38:26.000529Z","times_seen":1,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":282,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dimg04.tripcdn.com/images/05E3f12000o07z29s6EDB.svg","fqdn":"dimg04.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:36.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"GET /images/05E3f12000o07z29s6EDB.svg HTTP/1.1\r\nHost: dimg04.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ak-s-cw.tripcdn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 01 Apr 2024 00:00:00 GMT\r\netag: Dg0on7fbkA,05E,05E3f12000o07z29s6EDB\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncontent-encoding: gzip\r\ncontent-length: 459\r\ncache-control: max-age=3550966\r\nexpires: Sat, 17 Jan 2026 06:00:22 GMT\r\ndate: Sun, 07 Dec 2025 03:37:36 GMT\r\nalt-svc: h3=\":443\"; ma=93600\r\nvary: Accept-Encoding\r\nquic-version: 0x00000001\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 361249ed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":768,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"92694850efaa8d5fce9606d927602e14","sha1":"09acbbeda6b2196d282a825b007972f79ef8bb47","sha256":"efdc6ceae6f6fe42df3ff7e532e74bed8ad4c71c9df4410a90c5a7d8c69382a1","sha512":"0ffe6281436a8258d89fd6cd1b013489a165d2599fda2aae34ec4c471eb5f4ef6c54582b99584290b23ed11b05965507d91e60daa4dcd481e536d2f7259d9a1f","ssdeep":"","tlshash":"9d0120e851dc66c8d107c322d823bcf2611830f01ecbc2c49d85be50ef480fa8c9ae65","first_seen":"2025-09-27T07:02:02.305814Z","last_seen":"2026-04-15T17:38:47.442858Z","times_seen":1921,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/ibu-public-component-umd/style.b7b60106e8e8a07d9ee0e3ec624de507.css","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:32.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /modules/ibu/ibu-public-component-umd/style.b7b60106e8e8a07d9ee0e3ec624de507.css HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ncontent-length: 345\r\nx-ares-server: r100013666-21038164-wg5bn@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: Q2XC1EFGKEWGE69E\r\netag: W/\"b7b60106e8e8a07d9ee0e3ec624de507\"\r\nlast-modified: Thu, 13 Nov 2025 10:59:19 GMT\r\nx-ares-raw-buffer-size: 1563\r\nx-backend-latency: 0.020\r\ncontent-encoding: br\r\nx-varnish: 63304539\r\nx-device: U R Android\r\naccept-ranges: bytes\r\ncache-control: max-age=3136907\r\nexpires: Mon, 12 Jan 2026 10:59:19 GMT\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a252\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":1563,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1563), with no line terminators","md5":"b7b60106e8e8a07d9ee0e3ec624de507","sha1":"e125aaa2618c118678b32797e89dce8fcdcef80d","sha256":"eace7b7982fb4964b3c5d9ef341d995b78b5ab815f96fae503e5b188ca1efa7b","sha512":"369e92413f297d3dda94a61dd7f39792a40f8bd4f6ae943053289b7498ba9ffe6f09899a5946b4c9e5850f0795fd58fd1552179d7933e15324130c487bcdd0cc","ssdeep":"","tlshash":"d831df33d908210c7d57ed4b1b8ca099623ddc32f222086a6ee56150e7f35aab0db34a","first_seen":"2025-06-19T07:14:09.654736Z","last_seen":"2026-04-15T17:38:47.484393Z","times_seen":2954,"resource_available":false,"data":null}},"time_used":403,"timings":{"blocked":176,"dns":112,"connect":1,"send":0,"wait":25,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/online-assets/TripGeom-Medium.c01bb95e18e1b0d0137ff80b79b97a38.woff2","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:32.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /modules/ibu/online-assets/TripGeom-Medium.c01bb95e18e1b0d0137ff80b79b97a38.woff2 HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.trip.com/\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: font/woff2\r\ncontent-length: 42900\r\nx-ares-server: r100013666-21038164-wg5bn@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: 8WHAAC5QKX9GCJG6\r\netag: W/\"c01bb95e18e1b0d0137ff80b79b97a38\"\r\nlast-modified: Thu, 25 Sep 2025 12:59:06 GMT\r\nx-ares-raw-buffer-size: 42900\r\nx-backend-latency: 0.040\r\nx-varnish: 9567193\r\nx-device: U R iPhone\r\naccept-ranges: bytes\r\ncache-control: max-age=3205461\r\nexpires: Tue, 13 Jan 2026 06:01:53 GMT\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a24f\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":42900,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 42900, version 1.0","md5":"c01bb95e18e1b0d0137ff80b79b97a38","sha1":"dcef1b418cdfd6e3b72300d1b1f5e3127c45be06","sha256":"8a37897c5a93ed336aefa44e788ceb7f4674112847aceee67aaa319edf5876ea","sha512":"e29b3f96f946650d8dc4094d5b1a9dc2d1585ec6d109af4fe95d311d09d2f1159bc0a3856bbe041928f590e9193f586191ef43b08e34da47c6ccee502183ff1d","ssdeep":"768:z8595nDuXGmPE4xG9Y6Z6NComs9vutdBvU82GuzYsACTpl3Wb8o5VgS4ek/BIZO2:Q/5kXxkY67ZsZ87c82msteb8cVL+CArC","tlshash":"4d13f11a26502cb6ca1f8317c496b043306f02ed727adf10c1edded969a3970dab96f5","first_seen":"2023-08-13T03:23:56Z","last_seen":"2026-04-15T17:38:47.404154Z","times_seen":3094,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":110,"dns":0,"connect":0,"send":0,"wait":43,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/online-home/onlineSafarionetap.8625e3c7cbc22744e6b1de13671fa5f8.css","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:32.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /modules/ibu/online-home/onlineSafarionetap.8625e3c7cbc22744e6b1de13671fa5f8.css HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ncontent-length: 2419\r\nx-ares-server: r100013666-21038164-gwmmf@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: R7YPYE0PHGMHH0R7\r\netag: W/\"8625e3c7cbc22744e6b1de13671fa5f8\"\r\nlast-modified: Tue, 02 Dec 2025 07:03:44 GMT\r\nx-ares-raw-buffer-size: 11419\r\nx-backend-latency: 0.040\r\ncontent-encoding: br\r\nx-varnish: 85870339\r\naccept-ranges: bytes\r\ncache-control: max-age=4764372\r\nexpires: Sat, 31 Jan 2026 07:03:44 GMT\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a22a\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":11419,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (11419), with no line terminators","md5":"8625e3c7cbc22744e6b1de13671fa5f8","sha1":"f60e260ae0a533d4fcc09c8948765b2e3cc7ff9a","sha256":"539838acd9756b2fa6e2920876ffcfabf97f210bdb2a647af7de7f47cad1e6ab","sha512":"b1780c13dbf41018cb90b915fb1dbbab0deae188e2d9417d93a54573466a2487e931bb246b388c2eb20a85a4ca14cf2a05632c91276f7ce464291c22d87e2add","ssdeep":"96:DMk91wBXn9iVn9KmM9pW2GQhGswt8Upvn7tgfA2SvwyxzpfyhIYoFvWv2CNeZ3P7:INBMv+82GQitxufsy4SCPLKyAL4","tlshash":"f632dc21c58554e63337d4736bc0329c716ef226d0624fb8f28e667d68c13ed12a6bb9","first_seen":"2025-12-02T07:10:06.743081Z","last_seen":"2025-12-25T02:10:33.213284Z","times_seen":232,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":64,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/online-home/poisearch.724f908a362dcbe40b60fa894a2d2473.css","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:34.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /modules/ibu/online-home/poisearch.724f908a362dcbe40b60fa894a2d2473.css HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nx-ares-server: r100013666-21038164-fglz4@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: KE7K847V6Q64EGVG\r\netag: W/\"724f908a362dcbe40b60fa894a2d2473\"\r\nlast-modified: Sun, 12 Oct 2025 10:47:22 GMT\r\nx-ares-raw-buffer-size: 20690\r\nx-backend-latency: 0.020\r\ncontent-encoding: gzip\r\nx-varnish: 25622930\r\naccept-ranges: bytes\r\ncontent-length: 11979\r\ncache-control: max-age=4664505\r\nexpires: Fri, 30 Jan 2026 03:19:19 GMT\r\ndate: Sun, 07 Dec 2025 03:37:34 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nquic-version: 0x00000001\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a546\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":20690,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (20690), with no line terminators","md5":"724f908a362dcbe40b60fa894a2d2473","sha1":"c93c6c4e4caf849779bcac669b8e1a5186cb6afe","sha256":"cd03a9d1e0cba66bcc9ee518ecbfe42e8532291047f9dcc2867b0a0ae9b8fb29","sha512":"18c932e5371d0d80509948eacff971624c6ec3fb1ffa505c18de71ebf7d3c8d50fa5e1d311bdf97167d81723c55e3d22ed4ebe9f507708660bb4a38ad0382df2","ssdeep":"384:/QEI0iNDT84XdX1aD9rJ7BQWZyX2VXkAlCj:YZftlsNTZyX2VU5","tlshash":"3692e8f5a59a84d52b37c872b78077d875c1f021cac54e04fa1e1dac98f1a0865aaf3d","first_seen":"2025-08-26T03:41:13.432472Z","last_seen":"2026-04-15T17:38:47.409616Z","times_seen":2852,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ubt-sgp.trip.com/bee/collect","fqdn":"ubt-sgp.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:36.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"OPTIONS /bee/collect HTTP/1.1\r\nHost: ubt-sgp.trip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.trip.com/\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/plain; charset=UTF-8\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List\r\naccess-control-max-age: 300\r\np3p: CP=CUR ADM OUR NOR STA NID\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: Content-Type,content-type\r\ndate: Sun, 07 Dec 2025 03:37:36 GMT\r\nalt-svc: h3=\":443\"; ma=93600\r\nquic-version: 0x00000001\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: MISS\r\nunique-request-id: 36124956\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T20:38:47.575438Z","times_seen":13797803,"resource_available":true,"data":null}},"time_used":228,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pages.trip.com/images/app-download/qrcode/logo.png","fqdn":"pages.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:37.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"GET /images/app-download/qrcode/logo.png HTTP/1.1\r\nHost: pages.trip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nCookie: Union=AllianceID=6015822\u0026SID=168798533\u0026OUID=ctag.hash.ccjJjXXJOpYl\u0026Expires=1767670651990\u0026createtime=1765078651; UBT_VID=1765078651988.0c55yqsxjtpp; ibu_online_jump_site_result={\"isShowSuggestion\":false}; ibulanguage=EN; ibulocale=en_xx; cookiePricesDisplayed=USD; _abtest_userid=e7b40962-e94a-4116-9bcf-af1ceddea7af; _bfa=1.1765078651988.0c55yqsxjtpp.1.1765078653998.1765078653998.1.1.10320668088; _gcl_au=1.1.1944475785.1765078655; GUID=09034023113792808361; _fwb=202fgWTgpaFl4ko2G4nljfO.1765078656039\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/png\r\ncontent-length: 22905\r\nx-ares-server: r100013666-91017039-tfm9b@SHAXY\r\ntiming-allow-origin: *\r\nx-ares-source: aliyun\r\nx-ares-request-id: 6932FC02846A9339368ABAA1\r\netag: W/\"e0269cdef183f53205e6c95cc3d0b365\"\r\nlast-modified: Fri, 05 Dec 2025 15:36:34 GMT\r\nx-ares-raw-buffer-size: 22905\r\nx-backend-latency: 0.029\r\nx-varnish: 534785673 529690663\r\naccept-ranges: bytes\r\ncache-control: max-age=118795\r\nexpires: Mon, 08 Dec 2025 12:37:32 GMT\r\ndate: Sun, 07 Dec 2025 03:37:37 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 36124b4c\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":22905,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 1920, 8-bit colormap, non-interlaced","md5":"e0269cdef183f53205e6c95cc3d0b365","sha1":"281ae8737953fc0550bd49fc05b53161cad37192","sha256":"fdb922eb85e429c4fef54a426d87675530952ae6fe4fb7ca713df7949710d708","sha512":"6874a5f93ea9f0e30d26c1f96c1d38c18667aa0e9b2dc63571609bbb3a2d3b0c2ad9fddca5a85b458cd86b44bd8ebf4db73d384e190bfcfb327001fed9753b7b","ssdeep":"384:B1UlsNX+HkNTqiPC6w3peifnvtyRLLcxtYVzviQFFF4sKXfmevML:B1XNX5TfIp5fnv0BqWURsKXLg","tlshash":"eea2bfb65d3789e2fe64ac8415177dbb53a15fd98418bc6cd7ec3c4c60c8910f09a936","first_seen":"2023-05-22T11:20:34Z","last_seen":"2026-04-12T05:48:11.977481Z","times_seen":1682,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":0,"dns":38,"connect":14,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/restapi/soa2/18088/getAppConfig.json","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:34.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"POST /restapi/soa2/18088/getAppConfig.json HTTP/1.1\r\nHost: www.trip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003\r\nContent-Type: application/json\r\nContent-Length: 134\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: Union=AllianceID=6015822\u0026SID=168798533\u0026OUID=ctag.hash.ccjJjXXJOpYl\u0026Expires=1767670651990\u0026createtime=1765078651; UBT_VID=1765078651988.0c55yqsxjtpp; ibu_online_jump_site_result={\"isShowSuggestion\":false}; ibusite=EN; ibugroup=trip; ibulanguage=EN; ibulocale=en_xx; cookiePricesDisplayed=USD; ibu_cookie_strict=0; _abtest_userid=e7b40962-e94a-4116-9bcf-af1ceddea7af; _tp_search_latest_channel_name=hotels\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":134,"data":"{\"appId\":\"5278\",\"categoryList\":[\"ubtconfig\"],\"head\":{\"appid\":\"5278\",\"cid\":\"1765078651988.0c55yqsxjtpp\",\"cver\":\"000.001\",\"sid\":\"8892\"}}"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\nx-cat-server: cat.fx.fraaws.tripws.com:80\r\nx-cat-root-id: 100025527-0a0e4bde-490299-312909\r\nx-cat-parent-id: 100025527-0a0e4bde-490299-312909\r\nx-cat-id: 100025527-0a0e4bde-490299-312912\r\nx-cat-root-url: http://cat.fx.fraaws.tripws.com:80/cat/r/m/100025527-0a0e4bde-490299-312909\r\nclogging_trace_id: 5628632810081593225\r\nrootmessageid: 100025527-0a0e4bde-490299-312909\r\nservermessageid: 100025527-0a0e4bde-490299-312912\r\nvary: accept-encoding\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-gate-root-id: 100025527-0a0e4bde-490299-312909\r\nx-gate-region: FRA-AWS\r\nx-service-call: 0.004\r\naccess-control-expose-headers: RootMessageId, x-service-call, x-gate-region\r\nx-gate: ctrip-gate\r\nx-originating-url: https://www.trip.com/restapi/soa2/18088/getAppConfig.json\r\nx-trip-region: de\r\ndate: Sun, 07 Dec 2025 03:37:34 GMT\r\ncontent-length: 775\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver-timing: cdn-cache; desc=MISS, edge; dur=5, origin; dur=28\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: MISS\r\nunique-request-id: 3612472c\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1521,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"e47c0a330219856e12dfd7d5ab171ef9","sha1":"fcfe834c89dda6f7980b0c5b8f92eb85f1b7af96","sha256":"6c9d9fb511125984e18d55b40370b32002c06e1c1d6d89bc23ced982e058b6bc","sha512":"bffd85de2485d85e66e1ac3eb1bfd347651085b62157c417a37715340b7c6e1fa1dcc53e89e3b5dded9e9c0cac97f2b0bb398c366fab22a78d69d36239257db2","ssdeep":"","tlshash":"cd31007f0408dc3795922cb47476ad311d9af3e42348982cd08dce790ab9ab29622982","first_seen":"2025-12-07T03:38:26.011723Z","last_seen":"2025-12-07T03:38:26.011723Z","times_seen":1,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/locale/v3/330151/en-XX.js?etagc=beef432a285d7f438524585a01269b1a","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:32.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /locale/v3/330151/en-XX.js?etagc=beef432a285d7f438524585a01269b1a HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nx-ares-server: r100013666-21038164-zctqw@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: 6KHVKP658ZJJ4GS4\r\netag: W/\"beef432a285d7f438524585a01269b1a\"\r\nlast-modified: Fri, 05 Dec 2025 03:12:19 GMT\r\nx-ares-raw-buffer-size: 81788\r\nx-backend-latency: 0.030\r\ncontent-encoding: br\r\nx-varnish: 93456676\r\naccept-ranges: bytes\r\ncontent-length: 21291\r\ncache-control: max-age=5009687\r\nexpires: Tue, 03 Feb 2026 03:12:19 GMT\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a215\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":81788,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (62349)","md5":"beef432a285d7f438524585a01269b1a","sha1":"66a8ae883adba06fb26587df5356c2163167b023","sha256":"147f019f7de2e021f936a0932e6b055af206a66828ce613856fd112f3f1d233c","sha512":"8de0382034de2f1cfd6c59eba71989078a52e222696036085d60de0ee5381bb7f737cca8ea8b63a5706741655ba66bd7a8e12e39d830ee24a8a58dbc93bbaf69","ssdeep":"768:yLGkjGymnch1UT1dCfIDu0LJfVC7Teo/fsQMiLHTzlHBN9nkZ7H55ZDT4FRFZXvc:aiFS1vQPZ8TtXhMI5HBvmHdDcFn1YF","tlshash":"8883e90a73f13f375be60266fceb594621e801046ed44c399abec87c13d5da99d2728b","first_seen":"2025-12-05T05:02:15.924809Z","last_seen":"2025-12-17T08:17:11.13052Z","times_seen":148,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":89,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/online-home/hotel.d72af2b6e1ab15a14e46422965164fe0.js","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:32.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /modules/ibu/online-home/hotel.d72af2b6e1ab15a14e46422965164fe0.js HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 130472\r\nx-ares-server: r100013666-21038164-5skh7@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: MHDGZATN9X4Q0EEH\r\netag: W/\"d72af2b6e1ab15a14e46422965164fe0\"\r\nlast-modified: Wed, 03 Dec 2025 07:34:19 GMT\r\nx-ares-raw-buffer-size: 650721\r\nx-backend-latency: 0.020\r\ncontent-encoding: br\r\nx-varnish: 87920034 86431227\r\naccept-ranges: bytes\r\ncache-control: max-age=4852631\r\nexpires: Sun, 01 Feb 2026 07:34:43 GMT\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a223\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":650721,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d72af2b6e1ab15a14e46422965164fe0","sha1":"2a8b9b155daaf3dc7dc328c8f29cd54d400523a7","sha256":"d08e1f81d8a0fa3fc556760d70c15b8b32420604b73c03dc072097ad0e57cfda","sha512":"b0d714e440ade8a29bf0a5d742cb3d242fdde3249fe722b2d1a083b44331ab295431ff0234aebdb1ebbcc9877b5ae051751b68f80e682a263cc0617ce0c5c114","ssdeep":"12288:PWcnOG/sww8uwgfAQB96Bx/6+2bPyGPtIpnmuNOIzrYCoLII+:PWcOGv/uwgfAIDPtIpnmuNOIvYCoLII+","tlshash":"8cd429c9b5a1f4a113b354f5803f110af23e3d295409b4a0f3a6ddd57868a8fa227f79","first_seen":"2025-12-03T08:08:10.109713Z","last_seen":"2025-12-08T09:12:13.26141Z","times_seen":101,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":72,"dns":0,"connect":0,"send":0,"wait":61,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/i18ntripgeniecomponentsdk/bundle.c58ee751a5aaa3c21f42d666d3fb37d6.js","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:32.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /modules/ibu/i18ntripgeniecomponentsdk/bundle.c58ee751a5aaa3c21f42d666d3fb37d6.js HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nx-ares-server: r100013666-21038164-mjtv8@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: 081B0SXKVZXSRXMQ\r\netag: W/\"c58ee751a5aaa3c21f42d666d3fb37d6\"\r\nlast-modified: Wed, 03 Dec 2025 12:43:34 GMT\r\nx-ares-raw-buffer-size: 1386393\r\nx-backend-latency: 0.040\r\ncontent-encoding: br\r\nx-varnish: 91674416\r\naccept-ranges: bytes\r\ncontent-length: 312066\r\ncache-control: max-age=4871162\r\nexpires: Sun, 01 Feb 2026 12:43:34 GMT\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a24b\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":1386393,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65381)","md5":"fbdf788005e7d40a9bd3aa5552d16c37","sha1":"166cb707fa34595eb4418c205bfe81663f2e57dc","sha256":"880f25484054d896378b5cccefc94c4d09ae605e2da825d9e191e8f9408a4315","sha512":"405d02b51760d04fc28d0cf6c098583b5d8ea75b0dd69ff25e73db984e388b280ad5132de4527676a0edc858211f1c1e9d1d8a9944a742646223ac47702cd777","ssdeep":"24576:3KraX+op3lbyz+eBzFUiS4iZMgMU5Ncb5T5jEV:Wauop3lbyznBzFRS4iKgMU5Ncb5T5jEV","tlshash":"ff353b89b2d1b47503d210a5803f150bf736291e285dd858b675d8eabc78ece623bf39","first_seen":"2025-12-02T12:35:04.432303Z","last_seen":"2025-12-18T09:06:16.325496Z","times_seen":196,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":78,"dns":0,"connect":0,"send":0,"wait":46,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tripcdn.com/packages/ares/nfes-libs/2.0.86/foundation.js","fqdn":"static.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"3.167.2.46","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:33.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trip.com","organization":"TRIP.COM TRAVEL SINGAPORE PTE. LTD."},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 29 Jul 2025 10:01:07 GMT","end":"Sun, 30 Aug 2026 10:01:06 GMT"},"fingerprint":{"sha1":"F7:7C:13:BC:A4:53:3B:74:41:DE:F5:B8:27:54:EB:2E:B4:90:77:ED","sha256":"3D:88:AF:03:3D:64:D8:5C:B9:3A:38:D6:0A:C7:EF:9D:52:3B:EA:29:A3:09:88:34:D3:6A:42:81:BD:FA:D2:ED"}}},"request":{"raw":"GET /packages/ares/nfes-libs/2.0.86/foundation.js HTTP/1.1\r\nHost: static.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ndate: Wed, 26 Nov 2025 12:35:23 GMT\r\naccept-ranges: bytes\r\nx-device: U R Android\r\nx-ares-server: r100013666-21038164-gwmmf@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache,cache-control\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: PM1Q1NHK7ZE1VKFC\r\netag: W/\"e3a5e26914de15e430604655c89482ee\"\r\nlast-modified: Wed, 26 Nov 2025 12:35:23 GMT\r\ncache-control: max-age=5184000\r\nexpires: Sun, 25 Jan 2026 12:35:23 GMT\r\nx-ares-raw-buffer-size: 55529\r\nx-backend-latency: 0.040\r\ncontent-encoding: br\r\nx-varnish: 78434259\r\nvia: 1.1 varnish (Varnish/6.0), 1.1 331956c71b3e587b085083fed0bc8c3e.cloudfront.net (CloudFront)\r\nvary: Origin,Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: OSL50-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: YSd4qOAwJGOrJ9pyWpFN4oj5_rZfXxIeC1CCgymzECBS8ABcXPxqLw==\r\nage: 918131\r\nc-via: amazon\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish:6.0","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":55529,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (55528)","md5":"e3a5e26914de15e430604655c89482ee","sha1":"766dceca3876b2485fa0af0ac4d728f2b5b37850","sha256":"f39c9140c3a19468b993799846ebaac0bb70c8a7a15b2e70d1f1fd38288d19ec","sha512":"31fc5c20c551c56369286dfa1a619c87179e8ecb507bd23895f1173a2fd2145a38917a2e17ca6d1e29540a209c94f15f36bb3f75ede5c6616112c8140b7dd066","ssdeep":"768:UCjr5C8CZ7zmzonL9mrn8n+Gcjw7IYXxCCZemOkP5KwZ5Wg8dPx34+1:Fq6Awtni9Bb5B5Wg8dPH1","tlshash":"af431addf292b43562f32175a03f630ab23a6b1128499440d16bd9d43c7ce9b923bf6d","first_seen":"2025-11-29T02:09:36.278743Z","last_seen":"2025-12-08T09:12:13.266277Z","times_seen":119,"resource_available":true,"data":null}},"time_used":723,"timings":{"blocked":605,"dns":0,"connect":3,"send":0,"wait":2,"receive":0,"ssl":105},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/restapi/soa2/27147/run","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:34.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"POST /restapi/soa2/27147/run HTTP/1.1\r\nHost: www.trip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003\r\ncookieOrigin: https://www.trip.com\r\nx-ctx-Currency: USD\r\nx-ctx-Locale: en-XX\r\nlocale: en-XX\r\ncurrency: USD\r\ncontent-type: application/json\r\nx-ctx-wclient-req: 30b797d86ce9584e7d8c1fd81e0d6c75\r\nContent-Length: 449\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: Union=AllianceID=6015822\u0026SID=168798533\u0026OUID=ctag.hash.ccjJjXXJOpYl\u0026Expires=1767670651990\u0026createtime=1765078651; UBT_VID=1765078651988.0c55yqsxjtpp; ibu_online_jump_site_result={\"isShowSuggestion\":false}; ibusite=EN; ibugroup=trip; ibulanguage=EN; ibulocale=en_xx; cookiePricesDisplayed=USD; ibu_cookie_strict=0; _abtest_userid=e7b40962-e94a-4116-9bcf-af1ceddea7af; _tp_search_latest_channel_name=hotels\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":449,"data":"{\"name\":\"ibu-pc-header\",\"args\":{\"pageId\":\"10320668088\",\"channel\":\"home\",\"url\":\"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003\",\"locale\":\"en-XX\",\"currency\":\"USD\",\"source\":\"Online\",\"version\":\"10.0.0\"},\"head\":{\"cid\":\"\",\"ctok\":\"\",\"cver\":\"1.0\",\"lang\":\"01\",\"sid\":\"8888\",\"syscode\":\"09\",\"auth\":\"\",\"xsid\":\"\",\"extension\":[],\"Locale\":\"en-XX\",\"Language\":\"en\",\"Currency\":\"USD\",\"ClientID\":\"\"}}"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json; charset=utf-8\r\nx-cat-server: cat.fx.sgp.tripws.com:80\r\nx-cat-root-id: 100025527-0a98cc27-490299-2455349\r\nx-cat-parent-id: 100025527-0a98cc27-490299-2455349\r\nx-cat-id: 100025527-0a98cc27-490299-2455356\r\nx-cat-root-url: http://cat.fx.sgp.tripws.com:80/cat/r/m/100025527-0a98cc27-490299-2455349\r\nclogging_trace_id: 7f524b45-51de-4818-9307-3e82c5a76c73\r\nrootmessageid: 100025527-0a98cc27-490299-2455356\r\naccess-control-allow-methods: POST,GET\r\naccess-control-expose-headers: x-originating-url, x-gate-region, x-ibu-trip-region, RootMessageId, x-service-call, x-gate-region\r\netag: W/\"19a4-9xddEx0jZnNzPEAmro2lqZDYGKA\"\r\nx-backend-latency: 0.032\r\ncontent-encoding: gzip\r\nx-envoy-upstream-service-time: 32\r\nx-service-appid: 100042569\r\nx-service-idc: sgp-ali\r\nx-service-hostip: 10.152.245.245\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-gate-root-id: 100025527-0a98cc27-490299-2455349\r\nx-gate-region: SGP-ALI\r\nx-service-call: 0.034\r\nx-gate: ctrip-gate\r\nx-originating-url: https://www.trip.com/restapi/soa2/27147/run\r\nx-trip-region: de\r\ndate: Sun, 07 Dec 2025 03:37:34 GMT\r\ncontent-length: 1583\r\nvary: Origin, Accept-Encoding\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver-timing: cdn-cache; desc=MISS, edge; dur=6, origin; dur=304\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: MISS\r\nunique-request-id: 361246e0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":6564,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d5e2fe859e034891122d32718b445243","sha1":"f7175d131d236673733c4026ae8da5a990d818a0","sha256":"ce609f0e051857b31350b6027bfbe862aec5690c228bcfb9d517c9c15e55d48b","sha512":"a8fcc31625f75511fd57572b215eb0ceb5daee26fd1b2790f4b60eb412b9905dbefd92155c4fe63eeb42cfbfbfef71d3fa9fc0ca87a58e1603ce3e98f37d509c","ssdeep":"96:mF6sdp7ZjivgqYFzDzH3hLAEtv1KfuILQqkB98vetPB/9fLtd9ucfRlqozoR:mF/bFLqGHzXdAAKfuIQX3cep/t9uOvoR","tlshash":"f2d1ad6809182eff8d05b958405b2f4b97fe606d249d1f9cfd5cdc6690df8650a306a3","first_seen":"2025-12-07T03:38:26.014851Z","last_seen":"2025-12-07T03:38:26.014851Z","times_seen":1,"resource_available":false,"data":null}},"time_used":323,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":322,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tripcdn.com/packages/ares/nfes-libs/2.0.86/screenshot2.js","fqdn":"static.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"3.167.2.46","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:36.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trip.com","organization":"TRIP.COM TRAVEL SINGAPORE PTE. LTD."},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 29 Jul 2025 10:01:07 GMT","end":"Sun, 30 Aug 2026 10:01:06 GMT"},"fingerprint":{"sha1":"F7:7C:13:BC:A4:53:3B:74:41:DE:F5:B8:27:54:EB:2E:B4:90:77:ED","sha256":"3D:88:AF:03:3D:64:D8:5C:B9:3A:38:D6:0A:C7:EF:9D:52:3B:EA:29:A3:09:88:34:D3:6A:42:81:BD:FA:D2:ED"}}},"request":{"raw":"GET /packages/ares/nfes-libs/2.0.86/screenshot2.js HTTP/1.1\r\nHost: static.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ndate: Wed, 26 Nov 2025 10:00:28 GMT\r\nvia: 1.1 varnish (Varnish/6.0), 1.1 331956c71b3e587b085083fed0bc8c3e.cloudfront.net (CloudFront)\r\naccept-ranges: bytes\r\nx-ares-server: r100013666-21038164-gwmmf@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache,cache-control\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: YR123T1T29YQ651F\r\netag: W/\"71ece23f0e2f68c2997de58ae23d3f9f\"\r\nlast-modified: Wed, 26 Nov 2025 10:00:28 GMT\r\ncache-control: max-age=5184000\r\nexpires: Sun, 25 Jan 2026 10:00:28 GMT\r\nx-ares-raw-buffer-size: 50925\r\nx-backend-latency: 0.030\r\ncontent-encoding: br\r\nx-varnish: 77780862\r\nvary: Origin,Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: OSL50-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: yK1jDa98NOOzzxchNdrwzrtuqTWdj77XpFOKz7s8BTeXrxdSvc3h1g==\r\nage: 927428\r\nc-via: amazon\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish:6.0","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":50925,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (48649)","md5":"71ece23f0e2f68c2997de58ae23d3f9f","sha1":"cbea86050daa504903b0d8e54b50f1a99713c431","sha256":"4f4a3c71bcba34726a7d4ac382242466a31590bcf5b1f34a0d07c4f2da7e3170","sha512":"43c468fa73f142f4431de93d62398496841eecc9c5f1f0ee4c0559343b8e8c3ad6e2f1a9268ff8782dc027b192e70cf8238244fac7c693d38bccbd9c1ca459ad","ssdeep":"768:iCM2JwC8V5t/pXVuAnH6jVCYXNOr6sDt+BF94KSQ3SOcLMZ:82JyV5t/pFuAnCXs66tGfIRYZ","tlshash":"203308757192f22512b6605becbb6b0de0b4dc4cc113ee33d86cd4b276145a2a1e3be9","first_seen":"2025-10-07T12:32:07.885013Z","last_seen":"2026-04-15T17:38:47.536494Z","times_seen":2334,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ubt-sgp.trip.com/bee/collect","fqdn":"ubt-sgp.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:36.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"OPTIONS /bee/collect HTTP/1.1\r\nHost: ubt-sgp.trip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.trip.com/\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/plain; charset=UTF-8\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List\r\naccess-control-max-age: 300\r\np3p: CP=CUR ADM OUR NOR STA NID\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: Content-Type,content-type\r\ndate: Sun, 07 Dec 2025 03:37:36 GMT\r\nalt-svc: h3=\":443\"; ma=93600\r\nquic-version: 0x00000001\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: MISS\r\nunique-request-id: 3612497f\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T20:38:47.575438Z","times_seen":13797803,"resource_available":true,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/online-home/910ee94002659203ba33483d09d64974.910ee94002659203ba33483d09d64974.png","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:36.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /modules/ibu/online-home/910ee94002659203ba33483d09d64974.910ee94002659203ba33483d09d64974.png HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ak-s-cw.tripcdn.com/modules/ibu/online-home/onlineLoginPopup.8e2fbe8654592e59237a532763ef458f.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/png\r\ncontent-length: 1865\r\nx-ares-server: r100013666-21038164-qff24@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: 8D0QYAWKR103K4MY\r\netag: W/\"910ee94002659203ba33483d09d64974\"\r\nlast-modified: Thu, 13 Mar 2025 03:21:05 GMT\r\nx-ares-raw-buffer-size: 1865\r\nx-backend-latency: 0.040\r\nx-varnish: 170234482\r\naccept-ranges: bytes\r\nakamai-amd-bc-debug: [a=23.36.76.237,b=873910148,c=p,d=1747234279,h=200,k=1,l=17,n=NO__OSLO,o=20940,r=18,p=1865]\r\ncache-control: max-age=3383613\r\nexpires: Thu, 15 Jan 2026 07:31:09 GMT\r\ndate: Sun, 07 Dec 2025 03:37:36 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nquic-version: 0x00000001\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a88e\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":1865,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"910ee94002659203ba33483d09d64974","sha1":"103d960871da63bb39c314599783c4f67a971bb0","sha256":"0d44351ee5dc55341f18396319a44c58523e3c8fc65ef33b08c5092567e99c5b","sha512":"357a0f76bcf1c628d042cf3b46b0ab6c86d5c48d1ac4f91d6e7aafc08508ee83e51d79919c9e36cc680c90f15e91afb3bd92c7f521be3103cd07624a78e42c8e","ssdeep":"","tlshash":"6531f9ff971cb534d4603838e915a359df77655cbad60c2f23d18438353a14d2586144","first_seen":"2023-05-22T11:20:34Z","last_seen":"2026-04-15T17:38:47.507214Z","times_seen":2951,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/online-home/onlineLoginPopup.8fe5be2797e67f517c2ed8a513e7c7f5.js","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:32.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /modules/ibu/online-home/onlineLoginPopup.8fe5be2797e67f517c2ed8a513e7c7f5.js HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nx-ares-server: r100013666-21038164-zctqw@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: 5M2G7G0NJT1G6NFR\r\netag: W/\"8fe5be2797e67f517c2ed8a513e7c7f5\"\r\nlast-modified: Wed, 03 Dec 2025 07:34:33 GMT\r\nx-ares-raw-buffer-size: 34865\r\nx-backend-latency: 0.020\r\ncontent-encoding: br\r\nx-varnish: 91948821\r\naccept-ranges: bytes\r\ncontent-length: 10206\r\ncache-control: max-age=4852621\r\nexpires: Sun, 01 Feb 2026 07:34:33 GMT\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a231\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":34865,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (34746)","md5":"8fe5be2797e67f517c2ed8a513e7c7f5","sha1":"dae2ba9bbd7f832e2bcbd1e871e642ada6c7837d","sha256":"84725a5466611e222001a45b556660308fe6052004640311ef0c2fd7d8acc145","sha512":"16eb3a7023eec399be6551f5f196981385670ceebed2fe0d3a56141db1de9e956a64aef6d43c9bee015a6ba50ecf698e4e570b071905067f7e3f878f620b0af1","ssdeep":"768:YIFDK7YDYSdd4XIngyhsg4oT0oej1mqTrRqRSw3Y3aKLd:3jyXIgtoIFj1jQSiELd","tlshash":"5df2098db091f49906a7a065513f220af17b6d65680ddc20e212cae17d78bdfd233eed","first_seen":"2025-12-03T08:08:10.054262Z","last_seen":"2025-12-08T09:12:13.19683Z","times_seen":101,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":74,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/online-home/442933c39a10b10dce021cb7ab870c64.442933c39a10b10dce021cb7ab870c64.woff2","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:36.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /modules/ibu/online-home/442933c39a10b10dce021cb7ab870c64.442933c39a10b10dce021cb7ab870c64.woff2 HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ak-s-cw.tripcdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: font/woff2\r\ncontent-length: 4576\r\nx-ares-server: r100013666-91049052-n567s@SGP-ALI\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aliyun\r\nx-ares-request-id: 6860AA90BE1ACD35357C7B60\r\netag: W/\"442933c39a10b10dce021cb7ab870c64\"\r\nlast-modified: Sun, 29 Jun 2025 02:53:04 GMT\r\nx-ares-raw-buffer-size: 4576\r\nx-backend-latency: 0.018\r\nx-varnish: 761386021\r\naccept-ranges: bytes\r\ncache-control: max-age=1436648\r\nexpires: Tue, 23 Dec 2025 18:41:44 GMT\r\ndate: Sun, 07 Dec 2025 03:37:36 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nquic-version: 0x00000001\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a82b\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":4576,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 4576, version 1.0","md5":"442933c39a10b10dce021cb7ab870c64","sha1":"155f123ab373d9db72116f6b2787fa095ac8072b","sha256":"ea5f76d35364fcf3b0f77c7d01868062a41a1f344a00af35dd5fd27bd6dd8a1b","sha512":"4c050a6c69248e043736e6c410a4e8638cc3e76b72c9324f51f253219e2a14a5a3a8c578fa631f062c1a685ae0caaf19b4b159ba0f774dbabc9b783528944c44","ssdeep":"96:X0qE4EgD9JoYyrts97eGIauTuS6Ih+jouW2VF41ihugiHK/6vli/g:5E9gD9JdyBs97nIjTaIGou3VF40huthb","tlshash":"0391ae74279bc2e5cbb5213203c79d4014e9d9a42a1b63681871cf803e9a02ed2ad71c","first_seen":"2023-05-22T11:20:33Z","last_seen":"2026-04-15T17:38:47.549317Z","times_seen":3076,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/restapi/soa2/14877/queryOneLink?x-traceID=1765078651988.0c55yqsxjtpp-1765078657041-1702477195","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:37.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"POST /restapi/soa2/14877/queryOneLink?x-traceID=1765078651988.0c55yqsxjtpp-1765078657041-1702477195 HTTP/1.1\r\nHost: www.trip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlocale: en-XX\r\ncurrency: USD\r\nx-traceID: 1765078651988.0c55yqsxjtpp-1765078657041-1702477195\r\ntrip-trace-id: 1765078651988.0c55yqsxjtpp-1765078657041-1702477195\r\nContent-Type: application/json\r\nContent-Length: 329\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003\r\nCookie: Union=AllianceID=6015822\u0026SID=168798533\u0026OUID=ctag.hash.ccjJjXXJOpYl\u0026Expires=1767670651990\u0026createtime=1765078651; UBT_VID=1765078651988.0c55yqsxjtpp; ibu_online_jump_site_result={\"isShowSuggestion\":false}; ibusite=EN; ibugroup=trip; ibulanguage=EN; ibulocale=en_xx; cookiePricesDisplayed=USD; ibu_cookie_strict=0; _abtest_userid=e7b40962-e94a-4116-9bcf-af1ceddea7af; _tp_search_latest_channel_name=hotels; _bfa=1.1765078651988.0c55yqsxjtpp.1.1765078653998.1765078653998.1.1.10320668088; _gcl_au=1.1.1944475785.1765078655; GUID=09034023113792808361; _fwb=202fgWTgpaFl4ko2G4nljfO.1765078656039; wcs_bt=s_33fb334966e9:1765078656\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":329,"data":"{\"aid\":\"6015822\",\"sid\":\"168798533\",\"downloadConfigId\":\"10260\",\"downloadComponentVersion\":\"4.3.0\",\"mode\":\"default\",\"buType\":\"Public\",\"locale\":\"en-XX\",\"platform\":\"online\",\"pageid\":\"10320668088\",\"ouid\":\"ctag.hash.ccjJjXXJOpYl\",\"position\":\"bottom_qrcode\",\"webVid\":\"1765078651988.0c55yqsxjtpp_1_1\",\"generateQrcode\":true,\"linkId\":4734}"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\nx-cat-server: cat.fx.sgp.tripws.com:80\r\nx-cat-root-id: 100025527-0a9a02e0-490299-2459239\r\nx-cat-parent-id: 100025527-0a9a02e0-490299-2459239\r\nx-cat-id: 100025527-0a9a02e0-490299-2459242\r\nx-cat-root-url: http://cat.fx.sgp.tripws.com:80/cat/r/m/100025527-0a9a02e0-490299-2459239\r\nclogging_trace_id: 2187494472801287983\r\nrootmessageid: 100025527-0a9a02e0-490299-2459239\r\nservermessageid: 100025527-0a9a02e0-490299-2459242\r\nvary: accept-encoding\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-gate-root-id: 100025527-0a9a02e0-490299-2459239\r\nx-gate-region: SGP-ALI\r\nx-service-call: 0.014\r\naccess-control-expose-headers: RootMessageId, x-service-call, x-gate-region\r\nx-gate: ctrip-gate\r\nx-originating-url: https://www.trip.com/restapi/soa2/14877/queryOneLink?x-traceID=1765078651988.0c55yqsxjtpp-1765078657041-1702477195\r\nx-trip-region: de\r\ncontent-length: 263\r\ndate: Sun, 07 Dec 2025 03:37:37 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: MISS\r\nunique-request-id: 36124a3b\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":314,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"28069354a4849008d880a43a5de7a560","sha1":"d5a71866c20075a50fde905d23d7bfe671b049e6","sha256":"3e2a8d59ebc4847d43a3c45a698649d76b5a93f3996d128c0d5cc67254cce825","sha512":"cf8006bbc1218599c5a46c36c94e18be164bade8de74d375a821cb3acaf0f74e2531d0dae0a058f4d82989ff63e6dd69b826a0e947208037ee4be8b445c679d4","ssdeep":"","tlshash":"cde07deec6a84c7a8d00a92c72013c46fd5238c2a9eb6dc2604f45208de15edd021790","first_seen":"2025-12-07T03:38:26.01785Z","last_seen":"2025-12-07T03:38:26.01785Z","times_seen":1,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dimg04.tripcdn.com/images/05E6i12000nn4rqq27CB1.svg","fqdn":"dimg04.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:36.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"GET /images/05E6i12000nn4rqq27CB1.svg HTTP/1.1\r\nHost: dimg04.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 01 Apr 2024 00:00:00 GMT\r\netag: Dg0on7fbkA,05E,05E6i12000nn4rqq27CB1\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncontent-encoding: br\r\ncontent-length: 985\r\ncache-control: max-age=4690992\r\nexpires: Fri, 30 Jan 2026 10:40:48 GMT\r\ndate: Sun, 07 Dec 2025 03:37:36 GMT\r\nalt-svc: h3=\":443\"; ma=93600\r\nquic-version: 0x00000001\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 36124906\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1675,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3de9913e070cace5fbc74c8a2d10b5ce","sha1":"38ba1a87192ddaf61fce70b81384ef273352758a","sha256":"ca15e9e5a6b88de0767eec695dacdf662cfd25c1f56da50152ef0f6fc1a34c53","sha512":"d12119e623549fe3c174e5aa851cccadb2eae3297001cbd25f7ae104bb610864c422d5b597f6aaa1477de62a8be27d9d73053363fba2c143da28c0386682f167","ssdeep":"","tlshash":"5b31a64163b5c8bc12594b299bf06885a866151b93224889faac3593bf218ed0d9d2cb","first_seen":"2025-09-13T09:38:08.228566Z","last_seen":"2026-04-15T17:38:47.445332Z","times_seen":2798,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/locale/v3/33000010/en-XX.js?etagc=5ead18c6229825d328bbfba73ca0197f","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:32.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /locale/v3/33000010/en-XX.js?etagc=5ead18c6229825d328bbfba73ca0197f HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 04 Aug 2025 17:28:52 GMT\r\netag: W/\"5ead18c6229825d328bbfba73ca0197f\"\r\ncontent-type: application/javascript\r\nx-ares-server: r100013666-21038164-rkhcw@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: JG728AEP0M9HT5YN\r\nx-ares-raw-buffer-size: 5613\r\nx-backend-latency: 0.020\r\ncontent-encoding: gzip\r\nx-varnish: 149387299\r\naccept-ranges: bytes\r\ncontent-length: 1960\r\ncache-control: max-age=3146699\r\nexpires: Mon, 12 Jan 2026 13:42:31 GMT\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a213\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":5613,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (628)","md5":"5ead18c6229825d328bbfba73ca0197f","sha1":"48050e10fc7814af2a1a99c04a5ca70c7022d7e7","sha256":"f4f342b2fd8b6351be705cc4b104a7865dd14e30b94a299cfbed394399d87adf","sha512":"ff3294d14c3ae0ea6d563d81b15b0a3104ea31ba6273b715727328110d381e187eb5f095268cdcdd91b893f65f1d2515a5b9502f1aa4be91c9f38c8d3e493d18","ssdeep":"96:A+zQeDOpqdGWZ/a4kEpti+tIGmMGxWl+X6Zy9gR+2WsiJyAH6cjxbkS3HRdbhX0+:HEe4gfizEuDGK5bKWFAijiS3HBXKwwfG","tlshash":"13c1959b7971a417d4b7f4ba8a2f9700f030983308d44959fa4c219c7fd1896c7f2aea","first_seen":"2025-10-13T16:34:16.462463Z","last_seen":"2026-01-28T08:36:29.742017Z","times_seen":1235,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":92,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/restapi/soa2/29624/clog","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:36.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"POST /restapi/soa2/29624/clog HTTP/1.1\r\nHost: www.trip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: multipart/form-data; boundary=---------------------------35683606325619155653917066298\r\nContent-Length: 1341\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003\r\nCookie: Union=AllianceID=6015822\u0026SID=168798533\u0026OUID=ctag.hash.ccjJjXXJOpYl\u0026Expires=1767670651990\u0026createtime=1765078651; UBT_VID=1765078651988.0c55yqsxjtpp; ibu_online_jump_site_result={\"isShowSuggestion\":false}; ibusite=EN; ibugroup=trip; ibulanguage=EN; ibulocale=en_xx; cookiePricesDisplayed=USD; ibu_cookie_strict=0; _abtest_userid=e7b40962-e94a-4116-9bcf-af1ceddea7af; _tp_search_latest_channel_name=hotels; _bfa=1.1765078651988.0c55yqsxjtpp.1.1765078653998.1765078653998.1.1.10320668088; _gcl_au=1.1.1944475785.1765078655; GUID=09034023113792808361; _fwb=202fgWTgpaFl4ko2G4nljfO.1765078656039; wcs_bt=s_33fb334966e9:1765078656\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1341,"data":"-----------------------------35683606325619155653917066298\r\nContent-Disposition: form-data; name=\"metric_name\"\r\n\r\ngetTripGeniePreferences\r\n-----------------------------35683606325619155653917066298\r\nContent-Disposition: form-data; name=\"metric_value\"\r\n\r\n{\"Head\":{\"Group\":\"Trip\",\"Source\":\"ONLINE\",\"Version\":\"10000\",\"Locale\":\"en-XX\",\"Currency\":\"USD\",\"VID\":\"1765078651988.0c55yqsxjtpp\",\"SessionId\":\"1\",\"PvId\":\"1\"},\"localTime\":\"2025-12-07\"}\r\n-----------------------------35683606325619155653917066298\r\nContent-Disposition: form-data; name=\"sub_name\"\r\n\r\nH5Gateway Request\r\n-----------------------------35683606325619155653917066298\r\nContent-Disposition: form-data; name=\"page_url\"\r\n\r\nhttps://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003\r\n-----------------------------35683606325619155653917066298\r\nContent-Disposition: form-data; name=\"locale\"\r\n\r\nen_xx\r\n-----------------------------35683606325619155653917066298\r\nContent-Disposition: form-data; name=\"vid\"\r\n\r\n1765078651988.0c55yqsxjtpp\r\n-----------------------------35683606325619155653917066298\r\nContent-Disposition: form-data; name=\"aid\"\r\n\r\n6015822\r\n-----------------------------35683606325619155653917066298\r\nContent-Disposition: form-data; name=\"sid\"\r\n\r\n168798533\r\n-----------------------------35683606325619155653917066298--\r\n"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json\r\ncontent-length: 2\r\nclogging_trace_id: 74e2d885-de22-4ee4-be01-91c3c6a7a1f0\r\nrootmessageid: 100025527-0a9a62a8-490299-2457948\r\nx-cat-id: 100025527-0a9a62a8-490299-2457948\r\nx-cat-parent-id: 100025527-0a9a62a8-490299-2457942\r\nx-cat-root-id: 100025527-0a9a62a8-490299-2457942\r\nx-cat-root-url: http://cat.fx.sgp.tripws.com:80/cat/r/m/100025527-0a9a62a8-490299-2457942\r\nx-cat-server: cat.fx.sgp.tripws.com:80\r\nx-scf-executed-version: flt-es-tools-function-00004\r\nx-scf-request-id: 74e2d885-de22-4ee4-be01-91c3c6a7a1f0\r\nx-envoy-upstream-service-time: 3\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-gate-root-id: 100025527-0a9a62a8-490299-2457942\r\nx-gate-region: SGP-ALI\r\nx-service-call: 0.011\r\naccess-control-expose-headers: RootMessageId, x-service-call, x-gate-region\r\nx-gate: ctrip-gate\r\nx-originating-url: https://www.trip.com/restapi/soa2/29624/clog\r\nx-trip-region: de\r\ndate: Sun, 07 Dec 2025 03:37:37 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver-timing: cdn-cache; desc=MISS, edge; dur=8, origin; dur=205\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: MISS\r\nunique-request-id: 361249e0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-04-15T20:36:05.367773Z","times_seen":395948,"resource_available":true,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/restapi/soa2/27147/run?x-traceID=1765078651988.0c55yqsxjtpp-1765078655528-1748841284","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:35.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"POST /restapi/soa2/27147/run?x-traceID=1765078651988.0c55yqsxjtpp-1765078655528-1748841284 HTTP/1.1\r\nHost: www.trip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlocale: en-XX\r\ncurrency: USD\r\nx-traceID: 1765078651988.0c55yqsxjtpp-1765078655528-1748841284\r\ntrip-trace-id: 1765078651988.0c55yqsxjtpp-1765078655528-1748841284\r\nContent-Type: application/json\r\nContent-Length: 205\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003\r\nCookie: Union=AllianceID=6015822\u0026SID=168798533\u0026OUID=ctag.hash.ccjJjXXJOpYl\u0026Expires=1767670651990\u0026createtime=1765078651; UBT_VID=1765078651988.0c55yqsxjtpp; ibu_online_jump_site_result={\"isShowSuggestion\":false}; ibusite=EN; ibugroup=trip; ibulanguage=EN; ibulocale=en_xx; cookiePricesDisplayed=USD; ibu_cookie_strict=0; _abtest_userid=e7b40962-e94a-4116-9bcf-af1ceddea7af; _tp_search_latest_channel_name=hotels; _bfa=1.1765078651988.0c55yqsxjtpp.1.1765078653998.1765078653998.1.1.10320668088; _gcl_au=1.1.1944475785.1765078655\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":205,"data":"{\"name\":\"tg-auto-catgo\",\"Head\":{\"Group\":\"Trip\",\"Source\":\"ONLINE\",\"Version\":\"10000\",\"Locale\":\"en-XX\",\"Currency\":\"USD\",\"VID\":\"1765078651988.0c55yqsxjtpp\",\"SessionId\":\"1\",\"PvId\":\"1\"},\"localTime\":\"2025-12-07\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 326\r\nx-cat-server: cat.fx.sgp.tripws.com:80\r\nx-cat-root-id: 100025527-0a982050-490299-2456560\r\nx-cat-parent-id: 100025527-0a982050-490299-2456560\r\nx-cat-id: 100025527-0a982050-490299-2456571\r\nx-cat-root-url: http://cat.fx.sgp.tripws.com:80/cat/r/m/100025527-0a982050-490299-2456560\r\nclogging_trace_id: 6b8dc8c6-8ac6-45ba-827e-b94d4a0722a2\r\nrootmessageid: 100025527-0a982050-490299-2456571\r\naccess-control-allow-methods: POST,GET\r\naccess-control-expose-headers: x-originating-url, x-gate-region, x-ibu-trip-region, RootMessageId, x-service-call, x-gate-region\r\nvary: Origin\r\netag: W/\"146-+GeSL5BJlShW441DrXoDkupNrjI\"\r\nx-backend-latency: 0.005\r\nx-envoy-upstream-service-time: 4\r\nx-service-appid: 100042569\r\nx-service-idc: sgp-ali\r\nx-service-hostip: 10.154.50.135\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-gate-root-id: 100025527-0a982050-490299-2456560\r\nx-gate-region: SGP-ALI\r\nx-service-call: 0.008\r\nx-gate: ctrip-gate\r\nx-originating-url: https://www.trip.com/restapi/soa2/27147/run?x-traceID=1765078651988.0c55yqsxjtpp-1765078655528-1748841284\r\nx-trip-region: de\r\ndate: Sun, 07 Dec 2025 03:37:35 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: MISS\r\nunique-request-id: 3612484a\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":326,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4247941ef2a65b5940534bb9e52a16a9","sha1":"f867922f9049952856e38d43ad7a0392ea4dae32","sha256":"2a4725e973a7062eb738f4ac61675d38323d18dc9716a209a3a10afdf1fd9527","sha512":"c875f573c57466e1309ccd99961d51316ae59c63b0d52815c1ababda04518bff2e8a7ba4468b33dee2bf5e2c9bad53006d83db64f30e9a5f303ca8e7fa09a3f6","ssdeep":"","tlshash":"76e07d289c6c4c7e0b10833cf5433801fe5215ca618a4541584e9f515e86269d49dd8c","first_seen":"2025-12-07T03:38:26.035033Z","last_seen":"2025-12-07T03:38:26.035033Z","times_seen":1,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s.tripcdn.com/modules/ibu/online-assets/pwa-plugin.3604c5b57f580e83dcf1bb65c931c4ba.js?from=plugin\u0026scope=global","fqdn":"ak-s.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:36.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"GET /modules/ibu/online-assets/pwa-plugin.3604c5b57f580e83dcf1bb65c931c4ba.js?from=plugin\u0026scope=global HTTP/1.1\r\nHost: ak-s.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nx-ares-server: r100013666-21038164-fspll@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: 495Q1MX9RFJT24W9\r\netag: W/\"3604c5b57f580e83dcf1bb65c931c4ba\"\r\nlast-modified: Thu, 20 Nov 2025 13:16:54 GMT\r\nx-ares-raw-buffer-size: 22696\r\nx-backend-latency: 0.060\r\ncontent-encoding: br\r\nx-varnish: 64376639\r\nx-device: U R iPhone\r\naccept-ranges: bytes\r\ncontent-length: 7700\r\ncache-control: max-age=3749958\r\nexpires: Mon, 19 Jan 2026 13:16:54 GMT\r\ndate: Sun, 07 Dec 2025 03:37:36 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 36124941\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":22696,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (22563)","md5":"3604c5b57f580e83dcf1bb65c931c4ba","sha1":"25ed52d80ddce7c94d2f9e644721843611b72268","sha256":"48e31ba91a6ec3995bc13777f82e14ebfff46d7bc9d67149d13a850c7d9cc65f","sha512":"8edd16e7e04cddd2d62ca42eb70b1f47686c898683889d9c04f2d2db7f303b609c210a9b144a77816983084cf0e3adffe19f2e7004dbd76900a9430fa95e8123","ssdeep":"384:qjbLk2I/phm6CZPQKQYQgQyQ4Qo31XdMU/sdv0deT+mdyi/zgCCkR/wLC28wrJea:mXO/pc6CJBZd5xZxR/gQeiXiUCCkqC2x","tlshash":"bfa21999b1caf73a83e950a6007f6a06b2bd0916710cc044f18589d67cede0b9173fbe","first_seen":"2024-12-25T08:05:20.301452Z","last_seen":"2026-04-15T17:38:47.515447Z","times_seen":3054,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":47,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pages.trip.com/images/online-adu/showImg.png","fqdn":"pages.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:37.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"GET /images/online-adu/showImg.png HTTP/1.1\r\nHost: pages.trip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nCookie: Union=AllianceID=6015822\u0026SID=168798533\u0026OUID=ctag.hash.ccjJjXXJOpYl\u0026Expires=1767670651990\u0026createtime=1765078651; UBT_VID=1765078651988.0c55yqsxjtpp; ibu_online_jump_site_result={\"isShowSuggestion\":false}; ibulanguage=EN; ibulocale=en_xx; cookiePricesDisplayed=USD; _abtest_userid=e7b40962-e94a-4116-9bcf-af1ceddea7af; _bfa=1.1765078651988.0c55yqsxjtpp.1.1765078653998.1765078653998.1.1.10320668088; _gcl_au=1.1.1944475785.1765078655; GUID=09034023113792808361; _fwb=202fgWTgpaFl4ko2G4nljfO.1765078656039\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/png\r\ncontent-length: 544607\r\nx-ares-server: r100013666-21027498-5nl77@SHARB\r\ntiming-allow-origin: *\r\nx-ares-source: aliyun\r\nx-ares-request-id: 693426D551553A3132371B15\r\netag: W/\"1cf6f4545fe559a541ecc8f15381b8cb\"\r\nlast-modified: Sat, 06 Dec 2025 12:51:33 GMT\r\nx-ares-raw-buffer-size: 544607\r\nx-backend-latency: 0.046\r\nx-varnish: 428103396\r\naccept-ranges: bytes\r\ncache-control: max-age=119637\r\nexpires: Mon, 08 Dec 2025 12:51:34 GMT\r\ndate: Sun, 07 Dec 2025 03:37:37 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 36124b51\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":544607,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1806 x 880, 8-bit colormap, non-interlaced","md5":"1cf6f4545fe559a541ecc8f15381b8cb","sha1":"e0a9dab2ad50d42137d9cae4b2de596691207012","sha256":"e43a770f470360ec633fbc6d19d090844440212d641034cd50a5eba41851a6ee","sha512":"724cc37ba3a69f81658b662d6f326212b8f7d8bdd5673c3655ee84dbe9a6291edbc2876ae6c345c577a2a20a2021428bb4a88314f8e8e834a0ae60b65560842d","ssdeep":"12288:sMgoJ0JMoyqPz/B9A8R2LMl3Y05e38KULM3GgNCx/P:zgJJM7aJ9A8VVY0c38KULMWgc","tlshash":"e9c423d6179fa6b6f14b607c420d0704f0ea13cf1ebe961bbf3b9c405a1b5a4a912ec4","first_seen":"2024-05-18T10:55:40Z","last_seen":"2026-04-05T18:06:35.785203Z","times_seen":1641,"resource_available":false,"data":null}},"time_used":713,"timings":{"blocked":650,"dns":0,"connect":0,"send":0,"wait":25,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/polyfill.js","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:32.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /polyfill.js HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nx-ares-server: r100013666-21038164-f2m7s@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\netag: W/\"d41d8cd98f00b204e9800998ecf8427e\"\r\nlast-modified: Fri, 10 Oct 2025 19:34:00 GMT\r\nx-ares-raw-buffer-size: 0\r\nx-backend-latency: 5.000\r\nx-varnish: 81588583 25992515\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 20\r\ncache-control: max-age=4481197\r\nexpires: Wed, 28 Jan 2026 00:24:09 GMT\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,User-Agent,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a20d\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T20:38:47.575438Z","times_seen":13797803,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":102,"dns":0,"connect":0,"send":0,"wait":49,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/locale/v3/100018131/en-XX.js?etagc=2c86aeba7610937b17a453ad6da4d7f0","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:32.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /locale/v3/100018131/en-XX.js?etagc=2c86aeba7610937b17a453ad6da4d7f0 HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nx-ares-server: r100013666-21038164-d8knj@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: CHTSHAXCVSN0FR3D\r\netag: W/\"2c86aeba7610937b17a453ad6da4d7f0\"\r\nlast-modified: Mon, 01 Dec 2025 09:33:18 GMT\r\nx-ares-raw-buffer-size: 119474\r\nx-backend-latency: 0.020\r\ncontent-encoding: br\r\nx-varnish: 85373040\r\nx-device: U R Android\r\naccept-ranges: bytes\r\ncontent-length: 27555\r\ncache-control: max-age=4686946\r\nexpires: Fri, 30 Jan 2026 09:33:18 GMT\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a224\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":119474,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (62378)","md5":"2c86aeba7610937b17a453ad6da4d7f0","sha1":"124e0269eec203121a0db858df6110ae23a51e34","sha256":"a11a022db7deb5b27f23f7a2a1d18b54866a7daa978833ad16ba270563d2078d","sha512":"535b3b791ad480caecba08f175914e4d21c01f4f9084faadff9876a4c05f226f9210482b9275e352cc5bcf2371978abbf4145b6d6230a795d9a551fa0dea85a0","ssdeep":"3072:ne49SmXBnCEc/GZlpJYcGMTJmpUryaRfNNX89Jg6:ne49SmRnCL/GZvJYcGMTJmpUryafNX8l","tlshash":"9ac3848fafc4187a07d60953fd8eaf4327e42004f2404b69a57cc6bd36de6d9e9a3644","first_seen":"2025-12-01T11:09:27.911179Z","last_seen":"2025-12-11T07:28:08.571162Z","times_seen":154,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":72,"dns":0,"connect":0,"send":0,"wait":70,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-d.tripcdn.com/images/05E1v12000dgqkhtf5799.png","fqdn":"ak-d.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:33.852Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /images/05E1v12000dgqkhtf5799.png HTTP/1.1\r\nHost: ak-d.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ak-s-cw.tripcdn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/png\r\ncontent-length: 33778\r\naccess-control-allow-origin: *\r\netag: Dg0on7fbkA,05E,05E1v12000dgqkhtf5799\r\nlast-modified: Mon, 01 Apr 2024 00:00:00 GMT\r\ntiming-allow-origin: *\r\ncache-control: max-age=2611907\r\nexpires: Tue, 06 Jan 2026 09:09:21 GMT\r\ndate: Sun, 07 Dec 2025 03:37:34 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a4b7\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":33778,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 1120, 8-bit/color RGBA, non-interlaced","md5":"6e4c64b567031f4fbf75bb5059c8f5e0","sha1":"3423a7902ba74fce75adadd9a744e284a161ba1f","sha256":"13e6d9469ee0ea7eef8a5d1f0472bb1cf289a8259dc40aa9eda03bd2ce3ae308","sha512":"42d676e541fb1505e1839f2cc8dfea9f34198f0e77d5ee5ebe5009029464080a64839a26c1277176072370a2c37bea2e6e19e850a920dd49abea3a3b8830bf46","ssdeep":"768:n7Vk0XnMqi+e4W1+fRdr+FArbDBgKLZyla6N3:7VkaMqV15+GrmQclB3","tlshash":"ede2f1229564346ee7e1fe5177d303c8436d0cfbab269cee77e4026ba0d270a5e22705","first_seen":"2024-08-11T16:24:31Z","last_seen":"2026-04-15T17:38:47.572012Z","times_seen":2805,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":201,"dns":0,"connect":0,"send":0,"wait":23,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ubt-sgp.trip.com/bee/collect","fqdn":"ubt-sgp.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:36.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"OPTIONS /bee/collect HTTP/1.1\r\nHost: ubt-sgp.trip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.trip.com/\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/plain; charset=UTF-8\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List\r\naccess-control-max-age: 300\r\np3p: CP=CUR ADM OUR NOR STA NID\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: Content-Type,content-type\r\ndate: Sun, 07 Dec 2025 03:37:36 GMT\r\nalt-svc: h3=\":443\"; ma=93600\r\nquic-version: 0x00000001\r\nserver-timing: cdn-cache; desc=MISS, edge; dur=2, origin; dur=218\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: MISS\r\nunique-request-id: 361249b3\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T20:38:47.575438Z","times_seen":13797803,"resource_available":true,"data":null}},"time_used":238,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/online-home/languageMatch.a346fe7e3ae48c49957d5e3f98d592bb.js","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:32.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /modules/ibu/online-home/languageMatch.a346fe7e3ae48c49957d5e3f98d592bb.js HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nx-ares-server: r100013666-21038164-mjtv8@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: MHDQVV8KWGA14EJA\r\netag: W/\"a346fe7e3ae48c49957d5e3f98d592bb\"\r\nlast-modified: Wed, 03 Dec 2025 07:34:19 GMT\r\nx-ares-raw-buffer-size: 37890\r\nx-backend-latency: 0.020\r\ncontent-encoding: br\r\nx-varnish: 1925913\r\naccept-ranges: bytes\r\ncontent-length: 10377\r\ncache-control: max-age=4852607\r\nexpires: Sun, 01 Feb 2026 07:34:19 GMT\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a225\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":37890,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (37774)","md5":"a346fe7e3ae48c49957d5e3f98d592bb","sha1":"46907f45c9a7a6c63d77d529009249452b161d85","sha256":"3dac1c95892aa186c27d94767007f87110b1d7f4b4aa0f155accb9b4f8e83b5b","sha512":"4b4edb95ff83de05fc2be50a0c65f4a1622749e64eae04f3b6e93c0141b62bb63d04fe4a567543de9b6d592b958fde6128df7c1f15141266eec6057865b3aa1e","ssdeep":"384:3ev6L9eyfGgJNblnx0HZY2J05tLeeSuP1i3t41g2+1QjvqHLiO2ikZI/VplAOdm6:wpyf9XOYRUKi3Pf2eXqHbrWDGa9","tlshash":"ec03d747b192f09a0b932261453f3306e3b7aeb5ad4e9d04e135c5e43c38e8f5176a5d","first_seen":"2025-12-03T08:08:10.087415Z","last_seen":"2025-12-08T09:12:13.199768Z","times_seen":101,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":67,"dns":0,"connect":0,"send":0,"wait":71,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/restapi/soa2/19816/bjjson/queryAdsDisplayData?x-traceID=1697979085-1765078654323-1873060119","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:34.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"POST /restapi/soa2/19816/bjjson/queryAdsDisplayData?x-traceID=1697979085-1765078654323-1873060119 HTTP/1.1\r\nHost: www.trip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlocale: en-XX\r\ncurrency: USD\r\nx-traceID: 1697979085-1765078654323-1873060119\r\ntrip-trace-id: 1697979085-1765078654323-1873060119\r\nContent-Type: application/json\r\nContent-Length: 228\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003\r\nCookie: Union=AllianceID=6015822\u0026SID=168798533\u0026OUID=ctag.hash.ccjJjXXJOpYl\u0026Expires=1767670651990\u0026createtime=1765078651; UBT_VID=1765078651988.0c55yqsxjtpp; ibu_online_jump_site_result={\"isShowSuggestion\":false}; ibusite=EN; ibugroup=trip; ibulanguage=EN; ibulocale=en_xx; cookiePricesDisplayed=USD; ibu_cookie_strict=0; _abtest_userid=e7b40962-e94a-4116-9bcf-af1ceddea7af\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":228,"data":"{\"head\":{\"group\":\"trip\",\"locale\":\"en-XX\",\"currency\":\"USD\",\"source\":\"online\",\"clientID\":\"\",\"aidCookie\":\"6015822\",\"sidCookie\":\"168798533\",\"aidSession\":\"6015822\",\"sidSession\":\"168798533\"},\"moduleNames\":[\"ONLINE_HOMEPAGE_TOPDEALS\"]}"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\nx-cat-server: cat.fx.sgp.tripws.com:80\r\nx-cat-root-id: 100025527-0a0e1bd1-490299-313066\r\nx-cat-parent-id: 100025527-0a0e1bd1-490299-313069\r\nx-cat-id: 100025527-0a9adb0a-490299-70079\r\nx-cat-root-url: http://cat.fx.sgp.tripws.com:80/cat/r/m/100025527-0a0e1bd1-490299-313066\r\nclogging_trace_id: 7380851062154557672\r\nrootmessageid: 100025527-0a0e1bd1-490299-313066\r\nservermessageid: 100025527-0a9adb0a-490299-70079\r\nvary: accept-encoding\r\ncontent-encoding: gzip\r\nx-gate-root-id: 100025527-0a0e1bd1-490299-313066\r\nx-gate-region: SGP-ALI\r\nx-service-call: 0.795\r\naccess-control-expose-headers: RootMessageId, x-service-call, x-gate-region\r\nx-gate: ctrip-gate\r\nx-originating-url: https://www.trip.com/restapi/soa2/19816/bjjson/queryAdsDisplayData?x-traceID=1697979085-1765078654323-1873060119\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-trip-region: de\r\ndate: Sun, 07 Dec 2025 03:37:35 GMT\r\ncontent-length: 321\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver-timing: cdn-cache; desc=MISS, edge; dur=6, origin; dur=861\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: MISS\r\nunique-request-id: 361246bc\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":400,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"36062c6b30470952a34159fb3fc2e9f8","sha1":"eee091421b97cd9fff3c552e749bed1791ad97c7","sha256":"d3fad32239bb51a5fae315d719764a704f86a0c7a26cdb11cba495dbb2cafbd6","sha512":"363e98bcfb4001dfa867c21f430005f16fbf90474637cfc97ef0dcfc439901d3b1bd990c6ea13710ce58b4248147f1c1f8679632a6c8c385e558c75a3270252a","ssdeep":"","tlshash":"5ce0f1595ebc0cbec716d1bce085bc83de4939c612c65410f85a16954e8119aeea0aec","first_seen":"2025-12-07T03:38:26.040601Z","last_seen":"2025-12-07T03:38:26.040601Z","times_seen":1,"resource_available":false,"data":null}},"time_used":877,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":877,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/online-home/442933c39a10b10dce021cb7ab870c64.442933c39a10b10dce021cb7ab870c64.woff2","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:34.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /modules/ibu/online-home/442933c39a10b10dce021cb7ab870c64.442933c39a10b10dce021cb7ab870c64.woff2 HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ak-s-cw.tripcdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: font/woff2\r\ncontent-length: 4576\r\nx-ares-server: r100013666-91049052-n567s@SGP-ALI\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aliyun\r\nx-ares-request-id: 6860AA90BE1ACD35357C7B60\r\netag: W/\"442933c39a10b10dce021cb7ab870c64\"\r\nlast-modified: Sun, 29 Jun 2025 02:53:04 GMT\r\nx-ares-raw-buffer-size: 4576\r\nx-backend-latency: 0.018\r\nx-varnish: 761386021\r\naccept-ranges: bytes\r\ncache-control: max-age=1436650\r\nexpires: Tue, 23 Dec 2025 18:41:44 GMT\r\ndate: Sun, 07 Dec 2025 03:37:34 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nquic-version: 0x00000001\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a598\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":4576,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 4576, version 1.0","md5":"442933c39a10b10dce021cb7ab870c64","sha1":"155f123ab373d9db72116f6b2787fa095ac8072b","sha256":"ea5f76d35364fcf3b0f77c7d01868062a41a1f344a00af35dd5fd27bd6dd8a1b","sha512":"4c050a6c69248e043736e6c410a4e8638cc3e76b72c9324f51f253219e2a14a5a3a8c578fa631f062c1a685ae0caaf19b4b159ba0f774dbabc9b783528944c44","ssdeep":"96:X0qE4EgD9JoYyrts97eGIauTuS6Ih+jouW2VF41ihugiHK/6vli/g:5E9gD9JdyBs97nIjTaIGou3VF40huthb","tlshash":"0391ae74279bc2e5cbb5213203c79d4014e9d9a42a1b63681871cf803e9a02ed2ad71c","first_seen":"2023-05-22T11:20:33Z","last_seen":"2026-04-15T17:38:47.549317Z","times_seen":3076,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/restapi/soa2/18088/getAppConfig.json","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:35.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"POST /restapi/soa2/18088/getAppConfig.json HTTP/1.1\r\nHost: www.trip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 182\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003\r\nCookie: Union=AllianceID=6015822\u0026SID=168798533\u0026OUID=ctag.hash.ccjJjXXJOpYl\u0026Expires=1767670651990\u0026createtime=1765078651; UBT_VID=1765078651988.0c55yqsxjtpp; ibu_online_jump_site_result={\"isShowSuggestion\":false}; ibusite=EN; ibugroup=trip; ibulanguage=EN; ibulocale=en_xx; cookiePricesDisplayed=USD; ibu_cookie_strict=0; _abtest_userid=e7b40962-e94a-4116-9bcf-af1ceddea7af; _tp_search_latest_channel_name=hotels; _bfa=1.1765078651988.0c55yqsxjtpp.1.1765078653998.1765078653998.1.1.10320668088\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":182,"data":"{\"appId\":\"700273\",\"categoryList\":[\"Core_New\"],\"head\":{\"appid\":\"700273\",\"cid\":\"\",\"ctok\":\"\",\"cver\":\"100000\",\"lang\":\"01\",\"sid\":\"8888\",\"syscode\":\"09\",\"auth\":\"\",\"xsid\":\"\",\"extension\":[]}}"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\nx-cat-server: cat.fx.fraaws.tripws.com:80\r\nx-cat-root-id: 100025527-0a0e1e45-490299-312385\r\nx-cat-parent-id: 100025527-0a0e1e45-490299-312385\r\nx-cat-id: 100025527-0a0e1e45-490299-312398\r\nx-cat-root-url: http://cat.fx.fraaws.tripws.com:80/cat/r/m/100025527-0a0e1e45-490299-312385\r\nclogging_trace_id: 8522199368229610428\r\nrootmessageid: 100025527-0a0e1e45-490299-312385\r\nservermessageid: 100025527-0a0e1e45-490299-312398\r\nvary: accept-encoding\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-gate-root-id: 100025527-0a0e1e45-490299-312385\r\nx-gate-region: FRA-AWS\r\nx-service-call: 0.003\r\naccess-control-expose-headers: RootMessageId, x-service-call, x-gate-region\r\nx-gate: ctrip-gate\r\nx-originating-url: https://www.trip.com/restapi/soa2/18088/getAppConfig.json\r\nx-trip-region: de\r\ncontent-length: 1742\r\ndate: Sun, 07 Dec 2025 03:37:35 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: MISS\r\nunique-request-id: 361247b6\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5441,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"7d04f55d30131575df23b55ce92df5ea","sha1":"02fb35d0b7efabe710f30bbe655af54ca0a2029e","sha256":"6049dbf21cddadfb522916678bd2ccff2a2942e4dfcb48086986c93e5d6cb76d","sha512":"7a96a0efb5cb841d8c4abc77608308e8770d7b4aea98d00ebd018cb1bece9f8632e26a1a13bec25ddf66ec201cf4f4c8cef745a1ed9ef732800d3ae48109e1be","ssdeep":"96:MD5155Hhw/Nz46Z36+W7dbVstq3ieHYffHrGQHdgQHd2QHdKQHdbQHdL7k9LcJDq:O515I/NjZ3HW7xVstq3iqA6wgw2wKwbb","tlshash":"81b1d20b9004d966f5902eedf67e2c37b908f0b985dc591d13ccdda82a349f9a7b2680","first_seen":"2025-12-07T03:38:26.041429Z","last_seen":"2025-12-07T03:38:26.041429Z","times_seen":1,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/restapi/soa2/19816/bjjson/queryAdsDisplayData?x-traceID=1765078651988.0c55yqsxjtpp-1765078655927-1224559334","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:35.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"POST /restapi/soa2/19816/bjjson/queryAdsDisplayData?x-traceID=1765078651988.0c55yqsxjtpp-1765078655927-1224559334 HTTP/1.1\r\nHost: www.trip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlocale: en-XX\r\ncurrency: USD\r\nx-traceID: 1765078651988.0c55yqsxjtpp-1765078655927-1224559334\r\ntrip-trace-id: 1765078651988.0c55yqsxjtpp-1765078655927-1224559334\r\nContent-Type: application/json\r\nContent-Length: 251\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003\r\nCookie: Union=AllianceID=6015822\u0026SID=168798533\u0026OUID=ctag.hash.ccjJjXXJOpYl\u0026Expires=1767670651990\u0026createtime=1765078651; UBT_VID=1765078651988.0c55yqsxjtpp; ibu_online_jump_site_result={\"isShowSuggestion\":false}; ibusite=EN; ibugroup=trip; ibulanguage=EN; ibulocale=en_xx; cookiePricesDisplayed=USD; ibu_cookie_strict=0; _abtest_userid=e7b40962-e94a-4116-9bcf-af1ceddea7af; _tp_search_latest_channel_name=hotels; _bfa=1.1765078651988.0c55yqsxjtpp.1.1765078653998.1765078653998.1.1.10320668088; _gcl_au=1.1.1944475785.1765078655; GUID=09034023113792808361\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":251,"data":"{\"head\":{\"group\":\"trip\",\"locale\":\"en-XX\",\"currency\":\"USD\",\"source\":\"online\",\"clientID\":\"1765078651988.0c55yqsxjtpp\",\"aidCookie\":\"6015822\",\"sidCookie\":\"168798533\",\"aidSession\":\"6015822\",\"sidSession\":\"168798533\"},\"moduleNames\":[\"ONLINE_INDEX_TOP_DEAL\"]}"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\nx-cat-server: cat.fx.sgp.tripws.com:80\r\nx-cat-root-id: 100025527-0a0e1066-490299-313045\r\nx-cat-parent-id: 100025527-0a0e1066-490299-313048\r\nx-cat-id: 100025527-0a9adb0a-490299-70131\r\nx-cat-root-url: http://cat.fx.sgp.tripws.com:80/cat/r/m/100025527-0a0e1066-490299-313045\r\nclogging_trace_id: 2876204930100739694\r\nrootmessageid: 100025527-0a0e1066-490299-313045\r\nservermessageid: 100025527-0a9adb0a-490299-70131\r\nvary: accept-encoding\r\ncontent-encoding: gzip\r\nx-gate-root-id: 100025527-0a0e1066-490299-313045\r\nx-gate-region: SGP-ALI\r\nx-service-call: 0.217\r\naccess-control-expose-headers: RootMessageId, x-service-call, x-gate-region\r\nx-gate: ctrip-gate\r\nx-originating-url: https://www.trip.com/restapi/soa2/19816/bjjson/queryAdsDisplayData?x-traceID=1765078651988.0c55yqsxjtpp-1765078655927-1224559334\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-trip-region: de\r\ndate: Sun, 07 Dec 2025 03:37:36 GMT\r\ncontent-length: 1242\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver-timing: cdn-cache; desc=MISS, edge; dur=8, origin; dur=241\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: MISS\r\nunique-request-id: 361248b8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4629,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"5b00265c259fe6fcc3dea6284cd11782","sha1":"17edd089de4cc53c4c033afd31d51f6d0b5b8a1a","sha256":"b4e548e10bf4e71acdbb79e5006936ec9cdd1909a3e39fffddef5910ee123f39","sha512":"87bba4479826c51a2313c555fbe601b94644d1a8ea1abe45e27573b61b5358cc1c7632847f8cb128621e02a38dfc9b19a09e9a270475b935c7d3789be2a2f2b4","ssdeep":"96:o6lV1e57M7kgfV62fzGKGFc1+UBqv/g8CxYX0xYXwGJBqt+1LahBqavMcYLHBD:o6057M7kf2fzGKGFcUbCxYExYgv+1Lgq","tlshash":"3ea124e7ab5cd6a78a02d2c520bffbcdfa17505ec9e68ff4a76448594036ebf1410144","first_seen":"2025-12-07T03:38:26.048294Z","last_seen":"2025-12-07T03:38:26.048294Z","times_seen":1,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/online-assets/TripGeom-Bold.9e9e0eb59209311df954413ff4957cbb.woff2","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:32.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /modules/ibu/online-assets/TripGeom-Bold.9e9e0eb59209311df954413ff4957cbb.woff2 HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.trip.com/\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: font/woff2\r\ncontent-length: 43076\r\nx-ares-server: r100013666-21038164-wg5bn@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: H9YQKANAP57948P3\r\netag: W/\"9e9e0eb59209311df954413ff4957cbb\"\r\nlast-modified: Tue, 07 Oct 2025 18:29:20 GMT\r\nx-ares-raw-buffer-size: 43076\r\nx-backend-latency: 0.030\r\nx-varnish: 17589136\r\naccept-ranges: bytes\r\ncache-control: max-age=2932598\r\nexpires: Sat, 10 Jan 2026 02:14:10 GMT\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a24e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":43076,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43076, version 1.0","md5":"9e9e0eb59209311df954413ff4957cbb","sha1":"395b1abe99c8a8f286e04b1797e33a01b0628f21","sha256":"695d50b5676e4f85b5c99bae0fec01f77541453d27672c2949c2500941fa3efd","sha512":"511b5f06abf112ffeddb15fd744858eaa700c27da1498d4340b3880e7389ec7eea51be61e2155769ee4632d719abdae098ac37b8abce1a1925c1b3f4a751bcda","ssdeep":"768:yQCN3i2uFp+RrdOc9bYlf1uSpFWaxQARQ72yks/mGIFbKhk+IK4Idv/:yQYGqVdbcP0nXtkN7Fb21IKFV/","tlshash":"341302cba367d14c7950de8027f053f65bc8e1506ee2d731afc68cac2d9953a9cc9a11","first_seen":"2023-08-13T03:23:56Z","last_seen":"2026-04-15T17:38:47.509766Z","times_seen":3101,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":107,"dns":0,"connect":0,"send":0,"wait":46,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/online-home/languageMatch.ac111aa43bc99b3c4be23276448089bc.css","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:32.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /modules/ibu/online-home/languageMatch.ac111aa43bc99b3c4be23276448089bc.css HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-ares-server: r100013666-21038164-wg5bn@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: HBJXP7HNNAJ760MC\r\netag: W/\"ac111aa43bc99b3c4be23276448089bc\"\r\nlast-modified: Sun, 26 Oct 2025 13:45:58 GMT\r\nx-ares-raw-buffer-size: 16036\r\nx-backend-latency: 0.050\r\ncontent-encoding: br\r\nx-varnish: 42158216\r\nx-device: U R iPad\r\naccept-ranges: bytes\r\ncontent-length: 2649\r\ncache-control: max-age=1591706\r\nexpires: Thu, 25 Dec 2025 13:45:58 GMT\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a226\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":16036,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16036), with no line terminators","md5":"ac111aa43bc99b3c4be23276448089bc","sha1":"9215525aef2ddcb6998b17cdc5d70f5889c42b4b","sha256":"11c1be4df51e7613202cb131a33bb1874267b87fe4731357e621a1f8cba0a11f","sha512":"163dab7bac92bb200dbc29ea29329fd2fde5dbb7ae2b876961a20dbfe14b14a96bca4942438ba9392244b3f2d35b5fa5f2eccbf82472b2cb8a077c2ef9fdce39","ssdeep":"192:INBMv+82GQV1cufTSCP3Kr6Rj+QPQJb9v5Mj0LTzCbFj+RvKHjyesjY0b4AeDA8e:INSv7QV1hfjPUOuzvWI","tlshash":"a0723921c4c210b67663d723a6c1769419afb243d251afb8f22a667f39c23f811b5b74","first_seen":"2025-09-04T14:38:39.092706Z","last_seen":"2025-12-25T02:10:33.164462Z","times_seen":1520,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":66,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/online-home/onlineRecommendTrain.3f890110c5440cbb58a024c35a5df561.js","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:32.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /modules/ibu/online-home/onlineRecommendTrain.3f890110c5440cbb58a024c35a5df561.js HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nx-ares-server: r100013666-21038164-5skh7@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: MHDVJJVKB6D8EJCW\r\netag: W/\"3f890110c5440cbb58a024c35a5df561\"\r\nlast-modified: Wed, 03 Dec 2025 07:34:19 GMT\r\nx-ares-raw-buffer-size: 41095\r\nx-backend-latency: 0.040\r\ncontent-encoding: br\r\nx-varnish: 22549024\r\naccept-ranges: bytes\r\ncontent-length: 11433\r\ncache-control: max-age=4852607\r\nexpires: Sun, 01 Feb 2026 07:34:19 GMT\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a242\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":41095,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (40972)","md5":"3f890110c5440cbb58a024c35a5df561","sha1":"7c90dab78c28031a9affa03220a74398f65fe93e","sha256":"679c823d81ceea287427b4057bd7dfb94c401dc4073ea4b4257ec0e3853ff0ca","sha512":"872f9b12d2f94f9f9a8781c04bcd607d8071dabca7715df7a8805b9b8cbd292d123dc4053bc78206f04a6782ca7f094ce7a2daf507a7b847252ec26c9c05384c","ssdeep":"768:i+u434K5guL+96a10XH8M3oF7aSI8YxGZ8RpzFeN6xiuJ8Nf:ig5guL+96a14H+aS1ZCFeNjNf","tlshash":"c603094db091f4ee52bb6067903f661af33a3f5568094c10d162c9c87d78bcea236b6d","first_seen":"2025-12-03T08:08:10.089173Z","last_seen":"2025-12-08T09:12:13.047641Z","times_seen":101,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":78,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/restapi/soa2/18814/getRecommendedDestination","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:34.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"POST /restapi/soa2/18814/getRecommendedDestination HTTP/1.1\r\nHost: www.trip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003\r\ncookieOrigin: https://www.trip.com\r\nx-ctx-Currency: USD\r\nx-ctx-Locale: en-XX\r\nlocale: en-XX\r\ncurrency: USD\r\ncontent-type: application/json\r\nx-ctx-wclient-req: e0b52dc9b8794b63d447963d13f248f6\r\nContent-Length: 268\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: Union=AllianceID=6015822\u0026SID=168798533\u0026OUID=ctag.hash.ccjJjXXJOpYl\u0026Expires=1767670651990\u0026createtime=1765078651; UBT_VID=1765078651988.0c55yqsxjtpp; ibu_online_jump_site_result={\"isShowSuggestion\":false}; ibusite=EN; ibugroup=trip; ibulanguage=EN; ibulocale=en_xx; cookiePricesDisplayed=USD; ibu_cookie_strict=0; _abtest_userid=e7b40962-e94a-4116-9bcf-af1ceddea7af; _tp_search_latest_channel_name=hotels\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":268,"data":"{\"head\":{\"cid\":\"\",\"ctok\":\"\",\"cver\":\"1.0\",\"lang\":\"01\",\"sid\":\"8888\",\"syscode\":\"09\",\"auth\":\"\",\"xsid\":\"\",\"extension\":[],\"Locale\":\"en-XX\",\"Language\":\"en\",\"Currency\":\"USD\",\"ClientID\":\"\",\"source\":\"Online\",\"locale\":\"en-XX\",\"currency\":\"USD\",\"vid\":\"1765078651988.0c55yqsxjtpp\"}}"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\nx-cat-server: cat.fx.sgp.tripws.com:80\r\nx-cat-root-id: 100025527-0a9a9553-490299-2455678\r\nx-cat-parent-id: 100025527-0a9a9553-490299-2455678\r\nx-cat-id: 100025527-0a9a9553-490299-2455682\r\nx-cat-root-url: http://cat.fx.sgp.tripws.com:80/cat/r/m/100025527-0a9a9553-490299-2455678\r\nclogging_trace_id: 1372828072334090813\r\nrootmessageid: 100025527-0a9a9553-490299-2455678\r\nservermessageid: 100025527-0a9a9553-490299-2455682\r\nvary: accept-encoding\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-gate-root-id: 100025527-0a9a9553-490299-2455678\r\nx-gate-region: SGP-ALI\r\nx-service-call: 0.049\r\naccess-control-expose-headers: RootMessageId, x-service-call, x-gate-region\r\nx-gate: ctrip-gate\r\nx-originating-url: https://www.trip.com/restapi/soa2/18814/getRecommendedDestination\r\nx-trip-region: de\r\ncontent-length: 768\r\ndate: Sun, 07 Dec 2025 03:37:34 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: MISS\r\nunique-request-id: 361246dd\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2802,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"fc81de8c7662ad08e61faf4c80434602","sha1":"3288ab528de5ff47213a51c27d85895ccc0a1a44","sha256":"0404a88092a86ffc7b0a637ac801a447bce353331d3f418594f698259a9f38cc","sha512":"81d19e15454a782994f16f7a127f148dc41aa7633fceb8aba9e3e9dfa31b92d96a261747d8578980dedbc2b33d0c64a541c557f2d7e087b0160e5647720214bd","ssdeep":"","tlshash":"4151272f4dacdaea5fd856f03057243eda5439ab73dc90b8f0a9d414292f6e390b7106","first_seen":"2025-12-07T03:38:26.061892Z","last_seen":"2025-12-07T03:38:26.061892Z","times_seen":1,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/restapi/soa2/18417/RecommendPropertyGeneral","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:35.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"POST /restapi/soa2/18417/RecommendPropertyGeneral HTTP/1.1\r\nHost: www.trip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003\r\ncookieOrigin: https://www.trip.com\r\nx-ctx-Currency: USD\r\nx-ctx-Locale: en-XX\r\nlocale: en-XX\r\ncurrency: USD\r\ncontent-type: application/json\r\nx-ctx-ubt-pageid: 10320668088\r\nx-ctx-ubt-pvid: 1\r\nx-ctx-ubt-sid: 1\r\nx-ctx-ubt-vid: 1765078651988.0c55yqsxjtpp\r\nx-ctx-wclient-req: 9f7ceb823fcf3f2b1618101d25f77196\r\nContent-Length: 318\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: Union=AllianceID=6015822\u0026SID=168798533\u0026OUID=ctag.hash.ccjJjXXJOpYl\u0026Expires=1767670651990\u0026createtime=1765078651; UBT_VID=1765078651988.0c55yqsxjtpp; ibu_online_jump_site_result={\"isShowSuggestion\":false}; ibusite=EN; ibugroup=trip; ibulanguage=EN; ibulocale=en_xx; cookiePricesDisplayed=USD; ibu_cookie_strict=0; _abtest_userid=e7b40962-e94a-4116-9bcf-af1ceddea7af; _tp_search_latest_channel_name=hotels; _bfa=1.1765078651988.0c55yqsxjtpp.1.1765078653998.1765078653998.1.1.10320668088; _gcl_au=1.1.1944475785.1765078655\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":318,"data":"{\"head\":{\"cid\":\"\",\"ctok\":\"\",\"cver\":\"1.0\",\"lang\":\"01\",\"sid\":\"8888\",\"syscode\":\"09\",\"auth\":\"\",\"xsid\":\"\",\"extension\":[],\"Locale\":\"en-XX\",\"Language\":\"en\",\"Currency\":\"USD\",\"ClientID\":\"\",\"source\":\"Online\",\"locale\":\"en-XX\",\"currency\":\"USD\",\"group\":\"trip\",\"vid\":\"1765078651988.0c55yqsxjtpp\"},\"requestModule\":\"OnlineHomeBanner\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\nx-cat-server: cat.fx.sgp.tripws.com:80\r\nx-cat-root-id: 100025527-0a9a85d4-490299-2456686\r\nx-cat-parent-id: 100025527-0a9a85d4-490299-2456686\r\nx-cat-id: 100025527-0a9a85d4-490299-2456772\r\nx-cat-root-url: http://cat.fx.sgp.tripws.com:80/cat/r/m/100025527-0a9a85d4-490299-2456686\r\nclogging_trace_id: 2561082045133026548\r\nrootmessageid: 100025527-0a9a85d4-490299-2456686\r\nservermessageid: 100025527-0a9a85d4-490299-2456772\r\nvary: accept-encoding\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-gate-root-id: 100025527-0a9a85d4-490299-2456686\r\nx-gate-region: SGP-ALI\r\nx-service-call: 0.104\r\naccess-control-expose-headers: RootMessageId, x-service-call, x-gate-region\r\nx-gate: ctrip-gate\r\nx-originating-url: https://www.trip.com/restapi/soa2/18417/RecommendPropertyGeneral\r\nx-trip-region: de\r\ndate: Sun, 07 Dec 2025 03:37:35 GMT\r\ncontent-length: 3693\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver-timing: cdn-cache; desc=MISS, edge; dur=6, origin; dur=355\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: MISS\r\nunique-request-id: 3612485e\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14020,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"f5eaee9e86e16721119478a0b95557f5","sha1":"8b63e8fd0d7643def2ebf553c8c53910e639b1a2","sha256":"aa65f45ba08b0d00fe1180e6502f662ded9c662bb6ea7888db3e1f8853e46f89","sha512":"e4ecef39385f423db31924d6f9ca20229ec47b6b7c3a13eb8e8586205398dc7b85326d9c519d564e68ffa2cc81141352a64f93ae4227b2ada0080e9088b76c7b","ssdeep":"384:lwIw8vRvL2vRvaLAs1oGHN0QMjR4VC6+mWzxzN:lw+L0al/t0RjAC6rYxzN","tlshash":"16529306f38836b91a5105263dde67d4b72ea40de375cde4289c823d21c49f6e63f98b","first_seen":"2025-12-07T03:38:26.062983Z","last_seen":"2025-12-07T03:38:26.062983Z","times_seen":1,"resource_available":false,"data":null}},"time_used":394,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":373,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dimg04.tripcdn.com/images/05E4612000nn4rnod1150.svg","fqdn":"dimg04.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:36.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"GET /images/05E4612000nn4rnod1150.svg HTTP/1.1\r\nHost: dimg04.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\netag: Dg0on7fbkA,05E,05E4612000nn4rnod1150\r\nlast-modified: Mon, 01 Apr 2024 00:00:00 GMT\r\ntiming-allow-origin: *\r\ncontent-encoding: gzip\r\ncontent-length: 522\r\ncache-control: max-age=1245675\r\nexpires: Sun, 21 Dec 2025 13:38:51 GMT\r\ndate: Sun, 07 Dec 2025 03:37:36 GMT\r\nalt-svc: h3=\":443\"; ma=93600\r\nvary: Accept-Encoding\r\nquic-version: 0x00000001\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 36124903\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":853,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7098ab034eae61015e10b452174ed117","sha1":"e81c1c4741e96953f55c3b8fbab1e81bfb1c3ce6","sha256":"ff0b60d918ca8cd72514021aac532e4cd245edb5b80c5eae5bf1ddea8cc17c8c","sha512":"6368dfcf71a5c88cb9bd004f8907b9bb40430f2f5c390395c7a1bd6139000def041a912093951b925ffe80abb61002e70b4c3bcf4ce3ed0ec56cd674467fc229","ssdeep":"","tlshash":"3601f15406bc81d51d6842326fee54592e3d10d212480084fd7e17896f264fe0efb3fd","first_seen":"2025-09-13T09:38:08.180309Z","last_seen":"2026-04-15T17:38:47.408029Z","times_seen":2831,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?frm=0\u0026en=page_view\u0026dl=https%3A%2F%2Fwww.trip.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=218761857.1765078655\u0026dt=Trip.com%20Official%20Site%E2%80%8E%E2%80%8E%20%7C%20Travel%20Deals%20and%20Promotions\u0026auid=1944475785.1765078655\u0026navt=n\u0026npa=1\u0026gtm=45He5c31v6109556za200zd6109556xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527907~104528501~104684208~104684211~105391252~115583767~115938466~115938468~116184927~116184929~116217636~116217638~116518834\u0026tft=1765078655338\u0026tfd=4054\u0026apve=1\u0026apvf=f\u0026img=1","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:37.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:33:51 GMT","end":"Mon, 19 Jan 2026 08:33:50 GMT"},"fingerprint":{"sha1":"99:FF:FA:35:E4:FB:4B:28:B0:D5:C1:D4:AD:3F:43:AA:85:22:87:8B","sha256":"30:D1:CE:98:2F:EB:E2:4A:53:22:1C:BF:BB:4E:BC:2C:CA:E1:CE:CF:B7:9D:20:26:F9:55:2A:6B:ED:AD:DA:83"}}},"request":{"raw":"GET /ccm/collect?frm=0\u0026en=page_view\u0026dl=https%3A%2F%2Fwww.trip.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=218761857.1765078655\u0026dt=Trip.com%20Official%20Site%E2%80%8E%E2%80%8E%20%7C%20Travel%20Deals%20and%20Promotions\u0026auid=1944475785.1765078655\u0026navt=n\u0026npa=1\u0026gtm=45He5c31v6109556za200zd6109556xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527907~104528501~104684208~104684211~105391252~115583767~115938466~115938468~116184927~116184929~116217636~116217638~116518834\u0026tft=1765078655338\u0026tfd=4054\u0026apve=1\u0026apvf=f\u0026img=1 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncontent-type: text/plain\r\ncache-control: no-cache, no-store, must-revalidate\r\ndate: Sun, 07 Dec 2025 03:37:38 GMT\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T20:38:47.575438Z","times_seen":13797803,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/online-home/onlineRecommendFlights.af6816e0206a1852627f9af6377ee146.css","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:32.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /modules/ibu/online-home/onlineRecommendFlights.af6816e0206a1852627f9af6377ee146.css HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ncontent-length: 3763\r\nx-ares-server: r100013666-21038164-wg5bn@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: WJ37JM91H6ERMKFR\r\netag: W/\"af6816e0206a1852627f9af6377ee146\"\r\nlast-modified: Fri, 15 Aug 2025 19:02:10 GMT\r\nx-ares-raw-buffer-size: 14227\r\nx-backend-latency: 0.050\r\ncontent-encoding: br\r\nx-varnish: 164471272\r\nx-device: U R iPad\r\naccept-ranges: bytes\r\ncache-control: max-age=3090177\r\nexpires: Sun, 11 Jan 2026 22:00:29 GMT\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a23a\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":14227,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (14227), with no line terminators","md5":"af6816e0206a1852627f9af6377ee146","sha1":"5aa97aa14175012278a0707271ea89e860fd7590","sha256":"a8a07f0c8e339a7b31992028f525028c522dc7b595016ba8ee8a4b0dcf9b2bbf","sha512":"854c6dbb481070b0c95d510e7398417a5693acd98e54e6e66bc9725c57d78474cbf0d138fb6a686f4158b8907ad0545c3441a7fbd1d66ebf8e95637971199ac7","ssdeep":"384:KTs4ai8CjkA3XCsBTPouNWw+s33kEpvpoLa5:KpjkfsBdvQ+","tlshash":"c75253023795385f30151673ace469dcef28b27ae2d1fec7aac8ae608641506977312f","first_seen":"2025-06-03T22:29:37.291815Z","last_seen":"2025-12-17T08:17:11.302431Z","times_seen":1578,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":73,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webresource.tripcdn.com/resaresenglish/risk/ubtrms/dist/d.min.9dc5ef39.js","fqdn":"webresource.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:36.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"GET /resaresenglish/risk/ubtrms/dist/d.min.9dc5ef39.js HTTP/1.1\r\nHost: webresource.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 24203\r\nx-ares-server: r100013666-91017039-4wpxn@SHAXY\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nx-ares-source: aliyun\r\nx-ares-request-id: 69143416B1F0D83734838BFD\r\netag: W/\"9dc5ef394b8a6f3ba7ce96f0f58c315f\"\r\nlast-modified: Wed, 12 Nov 2025 07:15:34 GMT\r\nx-ares-raw-buffer-size: 81791\r\nx-backend-latency: 0.029\r\ncontent-encoding: br\r\nx-varnish: 394719581 398497897\r\naccept-ranges: bytes\r\ncache-control: max-age=3043659\r\nexpires: Sun, 11 Jan 2026 09:05:15 GMT\r\ndate: Sun, 07 Dec 2025 03:37:36 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 361249a2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":81791,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (65165), with no line terminators","md5":"9dc5ef394b8a6f3ba7ce96f0f58c315f","sha1":"9e50b5761a522b9028d9fb895e2b39e5e1316714","sha256":"5f2c53ec2e6d33fa57c7f9123c6aa333fc6cf9801f635d3d4670f47a4b36d9e9","sha512":"ddf6e99e0d424f81d3999f571ae0d38b1d6b418f0886e6b4f8943ca81dbd66b0ce9207d1106588f5ac9d4120c2d5bdaff862929edf2a70bd4b07bdae6e9295c3","ssdeep":"1536:YwvQyq0YSCpnTqxHwmMNegSnZ4A/w223BcH+:YwvQyxFCpTqxnMNegKW3Bce","tlshash":"03834cd5730ba8364ff362e9242b5484307a638f3d4988c9fc55889069b0e6f5267ff9","first_seen":"2025-11-25T14:10:16.26654Z","last_seen":"2026-02-01T16:36:12.288379Z","times_seen":576,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/locale/v3/33000001/en-XX.js?etagc=f6205428e2d9913ae4cfb4be96594b08","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:32.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /locale/v3/33000001/en-XX.js?etagc=f6205428e2d9913ae4cfb4be96594b08 HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 2762\r\nx-ares-server: r100013666-21038164-f2m7s@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: D4XTETW2KGBJY8HM\r\netag: W/\"f6205428e2d9913ae4cfb4be96594b08\"\r\nlast-modified: Tue, 14 Oct 2025 11:22:53 GMT\r\nx-ares-raw-buffer-size: 8820\r\nx-backend-latency: 0.020\r\ncontent-encoding: br\r\nx-varnish: 17094729\r\naccept-ranges: bytes\r\ncache-control: max-age=546322\r\nexpires: Sat, 13 Dec 2025 11:22:54 GMT\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a219\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":8820,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3830)","md5":"f6205428e2d9913ae4cfb4be96594b08","sha1":"eb48a75280ed8b2178728c4b9df7be184754a4ec","sha256":"75605e22ae85ce50b8c4848cada226d8b8ba028cbb9a3ea717d06c5f46a66527","sha512":"2c02904cbb0419c7dd7a43bb4a05e797e7acdd85da9c8c6495549d20b3ad818eb2ca2dd1a6e1192526557cadfcfff5e49f1f7a69a64828279f9cd97cd35823d7","ssdeep":"192:HEe4gfizEuDGKhq8SNojN94dvFlKufw9/44lTFmcPVOWbakjIS3HhXAGwf07:HEe1ab7X41+/TFm4rIWwGb","tlshash":"f402e88a74a1a877cbb5b0e5a81f0d0f60b565a334c18f68f59c91fc2bd3542c2a1db7","first_seen":"2025-10-14T14:36:34.729542Z","last_seen":"2025-12-17T08:17:11.306197Z","times_seen":1019,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":84,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/online-home/poisearch.3516f34ef8dfba711096cd4ea134fd56.js","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:34.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /modules/ibu/online-home/poisearch.3516f34ef8dfba711096cd4ea134fd56.js HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nx-ares-server: r100013666-91049052-ttsnx@SGP-ALI\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aliyun\r\nx-ares-request-id: 692FE7BF04C3EF313313AE24\r\netag: W/\"3516f34ef8dfba711096cd4ea134fd56\"\r\nlast-modified: Wed, 03 Dec 2025 07:33:19 GMT\r\nx-ares-raw-buffer-size: 77743\r\nx-backend-latency: 0.012\r\ncontent-encoding: br\r\nx-varnish: 138222079\r\naccept-ranges: bytes\r\ncontent-length: 18770\r\ncache-control: max-age=4852545\r\nexpires: Sun, 01 Feb 2026 07:33:19 GMT\r\ndate: Sun, 07 Dec 2025 03:37:34 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nquic-version: 0x00000001\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a5a9\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":77743,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (62007)","md5":"3516f34ef8dfba711096cd4ea134fd56","sha1":"43fcf16672add688ce98fd3e30bd860258855a1b","sha256":"66757662122b55f15d2f0bf06a12b5c0fd5faede72cdd068b451acc53ac290c5","sha512":"d02a7906e612610e5c36810f82c2d4fbeb474d8000676b333da852f7c46b3acd852c99f39e5a6119a56c0c8aef6b0d66e349321878ec5ed36016faa7f6d95a62","ssdeep":"1536:N1hB0S8PHrF5sflUkQmtRm7zmTmJeoNqXjxu:38PHLsNURmto7a2","tlshash":"fe73d7cd3ec6f0a542f36163802f5106f2be1a65680d9c51ea11e5e06cb6d8fd23bf99","first_seen":"2025-12-03T08:08:10.064541Z","last_seen":"2025-12-08T09:12:13.175086Z","times_seen":101,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?frm=0\u0026en=page_view\u0026dl=https%3A%2F%2Fwww.trip.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=218761857.1765078655\u0026dt=Trip.com%20Official%20Site%E2%80%8E%E2%80%8E%20%7C%20Travel%20Deals%20and%20Promotions\u0026auid=1944475785.1765078655\u0026navt=n\u0026npa=1\u0026gtm=45He5c31v6109556za200zd6109556xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527907~104528501~104684208~104684211~105391252~115583767~115938466~115938468~116184927~116184929~116217636~116217638~116518834\u0026tft=1765078655338\u0026tfd=4054\u0026apve=1\u0026apvf=f","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:36.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:51 GMT","end":"Mon, 19 Jan 2026 08:35:50 GMT"},"fingerprint":{"sha1":"21:0F:94:6B:44:9F:BB:AA:A3:6F:0D:C4:85:0B:B0:A0:AA:DB:67:72","sha256":"CD:3A:F0:3B:B3:27:BA:BE:E9:D1:21:F1:A4:FB:D8:3F:09:26:AB:58:5C:18:95:13:99:12:2A:8F:9C:0B:F1:C0"}}},"request":{"raw":"POST /ccm/collect?frm=0\u0026en=page_view\u0026dl=https%3A%2F%2Fwww.trip.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=218761857.1765078655\u0026dt=Trip.com%20Official%20Site%E2%80%8E%E2%80%8E%20%7C%20Travel%20Deals%20and%20Promotions\u0026auid=1944475785.1765078655\u0026navt=n\u0026npa=1\u0026gtm=45He5c31v6109556za200zd6109556xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527907~104528501~104684208~104684211~105391252~115583767~115938466~115938468~116184927~116184929~116217636~116217638~116518834\u0026tft=1765078655338\u0026tfd=4054\u0026apve=1\u0026apvf=f HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.trip.com/\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\ncontent-type: text/plain\r\ncache-control: no-cache, no-store, must-revalidate\r\ndate: Sun, 07 Dec 2025 03:37:36 GMT\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T20:38:47.575438Z","times_seen":13797803,"resource_available":true,"data":null}},"time_used":254,"timings":{"blocked":104,"dns":0,"connect":27,"send":0,"wait":45,"receive":0,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images3.c-ctrip.com/risk/logo/a.png","fqdn":"images3.c-ctrip.com","domain":"c-ctrip.com","tld":"com"},"ip":{"addr":"23.36.77.218","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:36.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trip.com","organization":"Shanghai Ctrip Business Co., Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 18 Jun 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2C:F9:BE:FB:12:58:CD:E4:41:34:CF:27:D8:51:CA:A8:00:4D:A2:3F","sha256":"DA:73:EC:D9:E2:E9:5E:BF:9E:32:F7:DB:82:9E:BA:50:D9:78:1A:5C:2B:BB:3E:13:A9:56:56:78:77:92:FE:1C"}}},"request":{"raw":"GET /risk/logo/a.png HTTP/1.1\r\nHost: images3.c-ctrip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 10 Jun 2025 09:14:18 GMT\r\netag: W/\"d73f59dccaaf73ac61aaa2eacc72ab79\"\r\ncontent-type: image/png\r\ncontent-length: 164\r\nx-ares-server: r100013666-21027498-ngq98@SHARB\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nx-ares-source: aliyun\r\nx-ares-request-id: 684FC00E02FE023339657A76\r\nx-ares-raw-buffer-size: 164\r\nx-backend-latency: 0.016\r\ncache-control: max-age=30962\r\nexpires: Sun, 07 Dec 2025 12:13:39 GMT\r\ndate: Sun, 07 Dec 2025 03:37:37 GMT\r\nalt-svc: h3=\":443\"; ma=93600\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 3fbea646\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":164,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 10 x 10, 8-bit/color RGBA, interlaced","md5":"d73f59dccaaf73ac61aaa2eacc72ab79","sha1":"72ac9d7df0e505042aaab56080049a592b2b00e4","sha256":"a32eabd88ebac949e1001b678a444c16632773799811bf1c7947bb9c0bbe664a","sha512":"d763f3c6eb2cb157ee98037e40e721aaaee478ce69fb801a8ef9e4ec0c3aa3a9c81c076f584fee5347e477ec30cc9b0973b884a8baa62835e5466511b52a5fd7","ssdeep":"","tlshash":"c4c02bc3432f7c14c3c0113749034321ce3cd0259002538d8ac080728dd71c41faa106","first_seen":"2025-06-19T07:14:09.713551Z","last_seen":"2026-04-15T17:38:47.472135Z","times_seen":3114,"resource_available":false,"data":null}},"time_used":585,"timings":{"blocked":0,"dns":401,"connect":11,"send":0,"wait":53,"receive":0,"ssl":91},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ubt-sgp.trip.com/bee/collect","fqdn":"ubt-sgp.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:40.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"POST /bee/collect HTTP/1.1\r\nHost: ubt-sgp.trip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 4695\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nCookie: uid=RHMZE/ARHtNWOn+gZxUeig==; suid=RHMZE/ARHtNWOn+gZxUeig==; Union=AllianceID=6015822\u0026SID=168798533\u0026OUID=ctag.hash.ccjJjXXJOpYl\u0026Expires=1767670651990\u0026createtime=1765078651; UBT_VID=1765078651988.0c55yqsxjtpp; ibu_online_jump_site_result={\"isShowSuggestion\":false}; ibulanguage=EN; ibulocale=en_xx; cookiePricesDisplayed=USD; _abtest_userid=e7b40962-e94a-4116-9bcf-af1ceddea7af; _bfa=1.1765078651988.0c55yqsxjtpp.1.1765078653998.1765078653998.1.1.10320668088; _gcl_au=1.1.1944475785.1765078655; GUID=09034023113792808361; _fwb=202fgWTgpaFl4ko2G4nljfO.1765078656039; uid=RHMZE/ARHtNWOn+gZxUeig==; suid=RHMZE/ARHtNWOn+gZxUeig==; _RGUID=922ec99a-94d6-4417-b603-645b05c081ba\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":4695,"data":"{\"d\":\"f001765078659732!m1Legacy!d=E8Z7ImNvbnRleHQiOlsiMTAzMjA2NjgwODgiLCIxNzY1MDc4NjUxOTg4LjBjNTV5cXN4anRwcCIsMSwxAB71LjMuNzIvbmV3L3QAEPMwMDAxNDQxNixudWxsAgD3LCJvbmxpbmUiBAfJaHR0cHM6Ly93d3cudHJpcC5jb20vP0FsbGlhbmNlaWQ9NjAxNTgyMiZTSUQ9MTY4Nzk4NTMzJgEn2l9zdWIxPTAyMGFhNzlhNjBlOTRjZDA5NGJmMDBkNjViNTA5MzQ4BiL2Mz1QMzk0MjAwMwR1B4oB_DEyODAAqgH6MjQsNDgzAAv3LDMsImVuLXVzAPABAAAAAOl7XCJ2ZXJzaW9uXCI6XCJcIixcIm5ldAII_E5vbmUCDPhwbGF0Zm9ybQQc_30BkAIBNvlmZWZfbmFtACIFMwEOAE0HB_5yZwcC_WxhbgMIAIAB_lhYAw37aXphcmQHTvgiU0dQLUFMSQ65AQCpAfx0cnVlAgAHDfpdLCJidXMA8wL-c3MB0AMEzAIBzAMFyQIACepjdGFnLmhhc2guY2NqSmpYWEpPcFlsDlEMAAIA_3sAqAH8dGVyVABbBpkE6jQ2NDUsImluc3RLZXkiOiJjOTE5OUYAZfxucG1WA8UCABP7MS42LjcDD_9FDjL8Mzg5OAC3AflpelRva2VuAbcBAMYBAJEE_iI6A-YB_mZyANIC_HdvcmsARvl3ZWItY29yANUE-SJ0Y3BTZW4AI_tmYWxzZQCBAfJzU3VwcG9ydFdhc20iOgKWAgAS_08BzQP-ZWEAVP8iAQ8BNf9sADIACgOABQGPAvZhcHRhaW5BcHBJARYGxgUAGO9sc1NpemUiOjQwNiwidWJ0XwGyA_11YWcAEACKAgAeARD5Y3VycmVuYwH7Af1VU0QEDv1zaXQBIf5FTgQJ-2xvY2FsAzEA7AMAEv53YweWAvsyLjAuOAFsASb9cmVxAfkBB_wG9jk3MzI1ZjgxRlQEG_tiYXRjaA8S9183ZDI4XzEifQC9Avx1c2VyAMcCA7wC6E06LTEsMjMwODE1X0lCVV9wd2F5aDpBOwUQ_TcyMAIT_DN3U0oIDP01MjkCEv5PVAkL_DEyMTgDEf5IUwIR-zk3LDI0ANQGAxD7SFRHOkIAEwAo_DUwNjIDawCmCP9VAI4BAhT-MjYBFv85BBP7TmV3UG8CE_40OAITBJwB-kRlc3RpbgIU_zgCRv05MjQCFPljYW1iYW5uAEoBeADJB_4yNQB5_zECF_xQcm9kAOkD_nJjA9cB_zIBNP00MDcFpgH_QgBMBYkJ_yIBoAL7YnRMaXMB_An-WzEARgfCAgAF_CwibWUAoAT_YwQp_nsiAdYHAO4C-GJiel9wZXJmAKMD83NvdXJjZV90aW1pbmcB1AT-YWcA4wT-eyIDCwHtBP9bAJMIBokIBfsJ-nN0YXRpYwKBCv1jZG4ChAr8cGFjawDRBP1zL2EAU_UvbmZlcy1saWJzLwORBPsvc2NyZQCWBvlob3QyLmpzAqUI_WRvbQCvBQJTDz4CHfl0b3RhbFRpAnj-MzQADvRpbml0aWF0b3JUeXADjAEAVf5pcADaCQEq-XJhbnNmZXIB6gUAGf0xNjUA8wIDrgH9SG9wANUC-3RvY29sA8IB_zICLf1zd1MAdv91AIwBABH6dW5rbm93AI0BABYAoQj-cnkGWwWfAgMu_HRhcnQEjQH8NDg2MgF1_XRmYgALAQf_ZAA__WxvYQH8CQF4_WRucwQk_zABJP5jcAgD-XJlZGlyZWMFRAEPA9kB_mxQAMUC9lZpc2liaWxpdHkBnwEDggH_dgEQ_2wACf59LBGBA_xhay1kCoYD_mltAowDAIkI_TYwdgCOCAAA72ppZ2xtRUU5OV9EXzYwMF80AAH0UjUuanBnP3Byb2M9A-MB_y8BQv8mAgwBYvhsb2dvL2RfNQ2mAw1hDqMD_zgTngP-Y3MD-wMMogP8NjE0MwHAAhKcA_8zROoC_zcIpgP-MzMLpAP_Nn-wAgOsA_8wAMgR_ngxAP0P_zAAmwL4YjFsYzA4QUFjzAL_OCmGA_s1NjMzOWnGAgD1CgqlAwHcBH-wAgOsA_4yZgKtA_pnMTlzM2IA5BP-QzFizQL-NTcqhQP9MDU0AS1myQL_MQKeA3-UCRGeA_41MAKtA_U4YXhmM242MzI3NmP-BQGAAiaJA_wzMTc0AaQJW9QCAV4F3AYB8AJ_4gUSsw3-NTEArhoB1xX3Z3N1OXhCQTBFf5QJD7YN_TIxMAEtZskC_zMMowN_4gUIvQ3_ZwLfBvVhZG1iaDU3MTQyQ2LNAv83AZMNJ-wJAJYXX5gQCKcD_zEBmwEIpwMChBF_sAIDrAP_YgWqA_g5aDg5M0E5QmPMAv81KYYD_DQyNzMBLVvUAgH3CQWqAwGyDginAwLoF3-wAgKtA_4xbwKtA_VremVhdDJyQkRDRmLNAv85AYACJ-wJ_TkwMl-CBginA_8yf7ACFq8N_TkweQOKG_lseXRxckE1ZKka_zkHywEiow3_OWCXEAinA_8zArQNe5gJ_3MKpQP7bW9kdWwAsAP8aWJ1LwOHLPgtYXNzZXRzLwD8JPMtcGx1Z2luLjM2MDRjAMEr6DdmNTgwZTgzZGNmMWJiNjVjOTMxYzRiYQDtIfo_ZnJvbT0DKvQmc2NvcGU9Z2xvYmEAygIOsgMKdQ-VCgGRAinbIf84APQkW-cCAcMWCJ4KAZMLf4sQEJYK_2EA8icCpAr1amd5YThnNTNCOEEB5gYulgYAgS8pnAb_MQCMFFybCf01NjgB4QME_AL_NAyBFAIKf4ECAPcJ_W1pNQCDDPI0eDk2eHc3d3ExNkRFOAD3Cf84APMJAZYDG90JS74J_zECmwwnmwP_OQDUKwH6IFrpAgKcCwWGCgy6Bn-GGge8A_4zbgLEBvVkaXV6NThmQTQwRDOTBv81Kt4dAJMz_zBc3iALuwb_Ngz0An_HBQi-Bv9yAv4C_3AAzQL6bHp4OUNDAYcectQFFPwMFa0D_zgBtDJq3AUNpSh_5ioHvQP-NGQDwQP2eGprMG5nREZFMnXPAv84AZMCJ50DALEVAi1brwYB5Q4EwAMCzgMJzRB_jAYHvQP-NmwCwgP8YzJtdgGDFP01OUIy3An-MjEq5An_MgCYKP85Xf4S_jY5AZABBf0CDNY1A98af4MCA8YG_mc0AdgQ9TJpcWl6bzA4NTczdNUF_zIs8hP_OACvKF_lAgmZFw6GLwGtAX_GAgOhF_42MgOeFPY2cnZ6MXAwODA2M5cG_zUq2Cf-MjIA7Ahc2SoLiw3_Ng7BCQKSKH-EAgPNCf95A5QN-XV6YW1kdzMA6wt11gUr7Sf7MTY3MTZfuAwInBQA-EcKuwMDpA1_xQIDpRf_NASTDfluN2tnYzRBAIpOMpgGAs4CJ6MGAKZLAvk_ZrEMAugHCcEGAqkbf4QCBMYG_2oCgQP2cTFtYm10ZzVGNAGZPHPXBSu0EP0zMTQC2xdn-A8M9icCjgt_xQIDlA3-NHIDlA3-NzAAqwH7MjdBNjk04wwqzyD_NwCDUl7gI_85CZM1f8MmGN4dA8sJ9nE1b2QwcjBFN0IBzjhx1wX_MwLFQiehBv82AN4vX5cdCroDDdEQAJ9Qf8cCBsADANZXAckG93Y0bWtreDg3NgHlOHLUAgKEEyefA_8wAKVUXqckCqIXDehJAL1Vf8cCB80u_zECxAMA4V7-eWIA-R3-NjEz4An_NAKAGSe-E_8yAN9TYJsdGZsa_zIC5ENqmwID8QL7My5jLWMG_GD7cmlzay8C-gX9YS5wAY5fC-wCECAO7AL_NgLFAQ_rAv5pbQNJDcY0_zYW_A9DlVb_NQCmMAjSEwybUwvTFv80AqoNB-4C_zECxDhqlQX_YwL9BfY3MW1nYTNvQjJBM_wc_zUC4UAo5S3-NjYAhSdq5gsAwWAL9AUC_QZqlQX_ZACRBf4wNAr0BQSDAwGuZv4xNQPUPvV4c2h3aEI3OEZfQwLRPgHaPvpSNV9RNzARhwMPQhC6WSr5C_80AIYKXdUSA40BBehBDKUT_zNuqiYX_wL8MW1jMAPRSPVkMDczZmM5ODdBMEbQAv8wK-sC_zcAliheuAIIxxn_MgyuCQutD_42NgLFIAaRA_4tNALlHkrQAh38Av8xA7VZ9WNtMDFlZm9DRjAxRdQC_zcrtDcB4wFZvAIDujgEkQMMjhb_NgCtZGnGBRr4AgCjPgCNaQLRS_p4dXoxd2cAxHH_NUfLAirrYl60AgLzExX9AgLIXH-TAgLaDPsyMGMxMwPZDPd1d2sycDc3RDZHywIqmjp8lgJqkhgd1A_9MjBnA48D_Dg2aHAAqW7_MUf1CALiFX-TAiLwAgLTYH-TAgS4Cf4zdQPBWPZpeTBtbHo5N0ZCRswCArw_f5MCBowDCIAwDoQDA71Ef5MCA48D_zYD_xL2Y2dyeWcybTczREfLAiuWInuXAgKZYFW9Av9dAol7-3RlZ29yAcp6AOt7BOZ7-XB1cmVVcmwAEQWpFv13d3cCixwCoQMbp3sBvVT9U0RLBYx8BNt_Cet6BGL_SQClAQHjLwDNHxXefPxpc0JvACH-IkYAvwT8InZhbADPfPw6MX1dAMt4_3MAin0Ky30Bj3v_fQ\u0026ac=b\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json\r\ncontent-length: 66\r\ncache-control: private, no-store, no-cache, no-cache=Set-Cookie, proxy-revalidate\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\npragma: no-cache\r\nx-content-type-options: nosniff\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List\r\nx-forwarded-for: 91.90.42.154\r\naccess-control-max-age: 300\r\np3p: CP=CUR ADM OUR NOR STA NID\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\ndate: Sun, 07 Dec 2025 03:37:40 GMT\r\nalt-svc: h3=\":443\"; ma=93600\r\nset-cookie: uid=RHMZE/ARHtNWOn+gZxUeig==; Max-Age=63072000; Expires=Tue, 07 Dec 2027 03:37:40 GMT\nsuid=RHMZE/ARHtNWOn+gZxUeig==; Max-Age=63072000; Expires=Tue, 07 Dec 2027 03:37:40 GMT; Secure; SameSite=None\r\nquic-version: 0x00000001\r\nserver-timing: cdn-cache; desc=MISS, edge; dur=0, origin; dur=200\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: MISS\r\nunique-request-id: 36124da7\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":66,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"fb60a3321354db6b13822a627fd3a664","sha1":"37f2e05f97cea418f79a7791f4d278647f4bd9a3","sha256":"e32050224526c45ec8c7d11693ae8f5b43c22ada7def343a5ec2ec2240822d81","sha512":"306914f93ba7c0513fe656b8baa5da38309c84dff131d4d6934e7050ff031399b48a4e6cecf30de365fd6f43419f5ac49e675d36aa166327acc6e352875fd1bf","ssdeep":"","tlshash":"a6a022002200e8ba0b0822a3200ac808ebf8338888028002000e880c0a30c8c008b000","first_seen":"2025-12-07T03:38:26.067921Z","last_seen":"2025-12-07T03:38:26.067921Z","times_seen":1,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/gtm-loader/gtm-loader.131ef8b57f3d288725f3c2c14517cd74.js","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:32.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /modules/ibu/gtm-loader/gtm-loader.131ef8b57f3d288725f3c2c14517cd74.js HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 1850\r\nx-ares-server: r100013666-21038164-x2gjk@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: ZP7P4VNX4RM1BCVZ\r\netag: W/\"131ef8b57f3d288725f3c2c14517cd74\"\r\nlast-modified: Fri, 28 Nov 2025 06:22:55 GMT\r\nx-ares-raw-buffer-size: 4928\r\nx-backend-latency: 0.020\r\ncontent-encoding: br\r\nx-varnish: 81728199\r\nx-device: U R iPhone\r\naccept-ranges: bytes\r\ncache-control: max-age=4416324\r\nexpires: Tue, 27 Jan 2026 06:22:56 GMT\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a20a\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":4928,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4928), with no line terminators","md5":"131ef8b57f3d288725f3c2c14517cd74","sha1":"9f6f0f257068a15df76bc400ef42aa47a4544913","sha256":"e78b6e011d1a6796557d027206a613af5c59b72e47ae7601e7d4a9fe45054422","sha512":"66f11860c5eadff4711b97a941f42a811d7c0ccf1027d6d239c9f4f788212a2ce75e2192869c1331fe890c6727dff2b9fac1be0072f83a2dbcb889b7ef50a663","ssdeep":"96:gm3DCpHiPs4c4ie+/aWwCpM2q6vI5nOw5twOjjSfzJqnG:vzCpSc4ix0CpMVwUwwjSfVqG","tlshash":"90a1b59ab7c7f0b8c29658d9483f630ad1346a559493e4c6d902dcacace4fa34067f2d","first_seen":"2025-08-15T02:09:37.907417Z","last_seen":"2026-04-15T17:38:47.428497Z","times_seen":2901,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":105,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/locale/v3/33000033/en-XX.js?etagc=a36f81a753aa4e098f16c5d1086f4812","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:32.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /locale/v3/33000033/en-XX.js?etagc=a36f81a753aa4e098f16c5d1086f4812 HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 2032\r\nx-ares-server: r100013666-21038164-gwmmf@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: 248PC28F0TWAKXCB\r\netag: W/\"a36f81a753aa4e098f16c5d1086f4812\"\r\nlast-modified: Wed, 19 Nov 2025 15:01:26 GMT\r\nx-ares-raw-buffer-size: 7091\r\nx-backend-latency: 0.020\r\ncontent-encoding: br\r\nx-varnish: 70832037 71417234\r\nx-device: U R iPad\r\naccept-ranges: bytes\r\ncache-control: max-age=3669834\r\nexpires: Sun, 18 Jan 2026 15:01:26 GMT\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a217\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":7091,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2106)","md5":"a36f81a753aa4e098f16c5d1086f4812","sha1":"0f9821615bdecfe01a723c2e115ca62c15c6408f","sha256":"ec021c286cee266cedec6465661e64dcdc5920136a24efc54f397ec32aba8883","sha512":"eaf27c60c347ca0dbdb0bf970e2d849d9e291827958d2b426538c1dd4e536bed3687191aba90b890226fdc58f78d075d1340f09f105457b60ff0177385d098cb","ssdeep":"192:HEe4gfizEuDGKtnHybKsV2Wo/hjnS3HNXBXwf07:HEe1a1HybKsVdSnCxXb","tlshash":"b1e1a78a69b9e42799b3e5f9dd6f0a0070f0582308814c18fa7c546d3fd1d46b2a7de5","first_seen":"2025-11-19T17:01:49.826454Z","last_seen":"2026-03-02T17:09:43.460355Z","times_seen":1155,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":86,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/locale/v3/100009239/en-XX.js?etagc=91e510d1c5ecce127c4e5f93f55a0d3c","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:32.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /locale/v3/100009239/en-XX.js?etagc=91e510d1c5ecce127c4e5f93f55a0d3c HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nx-ares-server: r100013666-21038164-fglz4@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: JY662AMD5NGSGSCA\r\netag: W/\"91e510d1c5ecce127c4e5f93f55a0d3c\"\r\nlast-modified: Sat, 08 Nov 2025 08:31:13 GMT\r\nx-ares-raw-buffer-size: 15818\r\nx-backend-latency: 0.020\r\ncontent-encoding: br\r\nx-varnish: 56158559\r\nx-device: U R Android\r\naccept-ranges: bytes\r\ncontent-length: 4671\r\ncache-control: max-age=2696021\r\nexpires: Wed, 07 Jan 2026 08:31:13 GMT\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a21e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":15818,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10817)","md5":"91e510d1c5ecce127c4e5f93f55a0d3c","sha1":"f826f161efb412e6986dd80e446467f273fc1281","sha256":"f982fd96153837effaf842c81915edc63d0323e15f9a5a612d65c1eca745bb26","sha512":"081382d03203eac34688b7f4584f864267fa57907bfbf983f4913283a3afb74236bd1d653097f15b44852af626e9359f3e96114f1fe67ca3c0308e4b8edb23c0","ssdeep":"384:HEe1aS4Z1ojIRfCRIH0Ppgnyc3Pm17SJQpDb:yp1ogfYVcwN","tlshash":"bf62c58d64ae7c7bdbb474a0bcab0d0a28b405a170818ebcb5ecd8bc17c7645d522d77","first_seen":"2025-11-08T09:35:25.205372Z","last_seen":"2025-12-12T06:07:22.885804Z","times_seen":629,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":78,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/online-home/onlineGoogleLoginNew.e7316a4a614ae4def329075932a01208.css","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:32.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /modules/ibu/online-home/onlineGoogleLoginNew.e7316a4a614ae4def329075932a01208.css HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-ares-server: r100013666-21038164-fglz4@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: 2S6DMNM07AHTGK2X\r\netag: W/\"e7316a4a614ae4def329075932a01208\"\r\nlast-modified: Sun, 12 Oct 2025 12:46:48 GMT\r\nx-ares-raw-buffer-size: 190837\r\nx-backend-latency: 0.070\r\ncontent-encoding: br\r\nx-varnish: 27637344\r\naccept-ranges: bytes\r\ncontent-length: 75533\r\ncache-control: max-age=3090177\r\nexpires: Sun, 11 Jan 2026 22:00:29 GMT\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a228\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":190837,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65447)","md5":"e7316a4a614ae4def329075932a01208","sha1":"ac513f4907a3152283f28bfeb4ef1e7d07a381eb","sha256":"f60e11784c49cd9f0b7eed6c48d541887e669f39f96ab14f27517e12cc28f619","sha512":"43171fc0323d453429ed1a1e08546c6d69bbe7df5d7c27bfd3b007733daf96ae7bba849995fd716114f3d8967f1b7ff9a70e6425e0b7009ec00dc9ac491f3bfd","ssdeep":"1536:+0ZrxxUxYQi5JPSzJefZUVMkaZd2cT+a8WSNxf+Igt3BT6ahn3lRdvyutSMFDSfv:7xxeY7Oz8ZpZdZAxgH6wn3v1GMuzyV5C","tlshash":"2c1429329061272f393bdf36e5c07959eda9d0a7c9020efcf158176dc6c628217bab64","first_seen":"2025-08-26T03:41:13.519141Z","last_seen":"2025-12-25T02:10:33.204943Z","times_seen":1522,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":64,"dns":0,"connect":0,"send":0,"wait":44,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/restapi/soa2/18088/getAppConfig.json","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:33.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"POST /restapi/soa2/18088/getAppConfig.json HTTP/1.1\r\nHost: www.trip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 134\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003\r\nCookie: Union=AllianceID=6015822\u0026SID=168798533\u0026OUID=ctag.hash.ccjJjXXJOpYl\u0026Expires=1767670651990\u0026createtime=1765078651; UBT_VID=1765078651988.0c55yqsxjtpp; ibu_online_jump_site_result={\"isShowSuggestion\":false}; ibusite=EN; ibugroup=trip; ibulanguage=EN; ibulocale=en_xx; cookiePricesDisplayed=USD; ibu_cookie_strict=0; _abtest_userid=e7b40962-e94a-4116-9bcf-af1ceddea7af\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":134,"data":"{\"appId\":\"5278\",\"categoryList\":[\"ubtconfig\"],\"head\":{\"appid\":\"5278\",\"cid\":\"1765078651988.0c55yqsxjtpp\",\"cver\":\"000.001\",\"sid\":\"8892\"}}"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\nx-cat-server: cat.fx.fraaws.tripws.com:80\r\nx-cat-root-id: 100025527-0a0e4bde-490299-312788\r\nx-cat-parent-id: 100025527-0a0e4bde-490299-312788\r\nx-cat-id: 100025527-0a0e4bde-490299-312791\r\nx-cat-root-url: http://cat.fx.fraaws.tripws.com:80/cat/r/m/100025527-0a0e4bde-490299-312788\r\nclogging_trace_id: 5339243794468060556\r\nrootmessageid: 100025527-0a0e4bde-490299-312788\r\nservermessageid: 100025527-0a0e4bde-490299-312791\r\nvary: accept-encoding\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-gate-root-id: 100025527-0a0e4bde-490299-312788\r\nx-gate-region: FRA-AWS\r\nx-service-call: 0.006\r\naccess-control-expose-headers: RootMessageId, x-service-call, x-gate-region\r\nx-gate: ctrip-gate\r\nx-originating-url: https://www.trip.com/restapi/soa2/18088/getAppConfig.json\r\nx-trip-region: de\r\ncontent-length: 777\r\ndate: Sun, 07 Dec 2025 03:37:33 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: MISS\r\nunique-request-id: 36124637\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1521,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"02078a821149a6b7ae0245a8a28508b8","sha1":"c5e351eacd38c64de24fe5dccb115a2d463b1c8e","sha256":"3844930296b583add656f57510021369e987d89e245a43bb3abdffe121e33edb","sha512":"bd124774e045b5d0a20419beda35d022be230f60ec3f05030c551debe02ca0f8afb3e5bb9bdff39a0cb9af54f60c7b8ec9cba9c6aebfa4752958217b54f1b47b","ssdeep":"","tlshash":"9d31f27f040cdc3795522cb475766d312d9af3e4538cd86dd08dce790eb96b29532982","first_seen":"2025-12-07T03:38:26.071809Z","last_seen":"2025-12-07T03:38:26.071809Z","times_seen":1,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/restapi/soa2/15353/bjjson/getNameAndSpeech?x-traceID=1851525650-1765078654156-1520451763","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:34.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"POST /restapi/soa2/15353/bjjson/getNameAndSpeech?x-traceID=1851525650-1765078654156-1520451763 HTTP/1.1\r\nHost: www.trip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlocale: en-XX\r\ncurrency: USD\r\nx-traceID: 1851525650-1765078654156-1520451763\r\ntrip-trace-id: 1851525650-1765078654156-1520451763\r\nContent-Type: application/json\r\nContent-Length: 43\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003\r\nCookie: Union=AllianceID=6015822\u0026SID=168798533\u0026OUID=ctag.hash.ccjJjXXJOpYl\u0026Expires=1767670651990\u0026createtime=1765078651; UBT_VID=1765078651988.0c55yqsxjtpp; ibu_online_jump_site_result={\"isShowSuggestion\":false}; ibusite=EN; ibugroup=trip; ibulanguage=EN; ibulocale=en_xx; cookiePricesDisplayed=USD; ibu_cookie_strict=0; _abtest_userid=e7b40962-e94a-4116-9bcf-af1ceddea7af\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":43,"data":"{\"locale\":\"en-XX\",\"sceneType\":\"head.sayhi\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\nx-cat-server: cat.fx.sgp.tripws.com:80\r\nx-cat-root-id: 100025527-0a93a541-490299-2455051\r\nx-cat-parent-id: 100025527-0a93a541-490299-2455051\r\nx-cat-id: 100025527-0a93a541-490299-2455061\r\nx-cat-root-url: http://cat.fx.sgp.tripws.com:80/cat/r/m/100025527-0a93a541-490299-2455051\r\nclogging_trace_id: 3838241772718617434\r\nrootmessageid: 100025527-0a93a541-490299-2455051\r\nservermessageid: 100025527-0a93a541-490299-2455061\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-gate-root-id: 100025527-0a93a541-490299-2455051\r\nx-gate-region: SGP-ALI\r\nx-service-call: 0.003\r\naccess-control-expose-headers: RootMessageId, x-service-call, x-gate-region\r\nx-gate: ctrip-gate\r\nx-originating-url: https://www.trip.com/restapi/soa2/15353/bjjson/getNameAndSpeech?x-traceID=1851525650-1765078654156-1520451763\r\nx-trip-region: de\r\ndate: Sun, 07 Dec 2025 03:37:34 GMT\r\ncontent-length: 342\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver-timing: cdn-cache; desc=MISS, edge; dur=7, origin; dur=254\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: MISS\r\nunique-request-id: 36124689\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":452,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"bb9627092a9a73fc5120d6be149ef200","sha1":"4d52d2a786e39b8ffd7c0ad5b9611d19bc8285bd","sha256":"713a1701f5058377996d6a024a84248940ba146b7406e1d05c64bea6a7714400","sha512":"3ba078f55089e10103b934b61f8754a78ec3190e83db2961659603b91f02195884985a5ae54e2dd987328b8a760b844412dc06f17fd3b86460e96a88eb80d89f","ssdeep":"","tlshash":"68f02b86c3cc0cbfd352822cba432dc22a2296c0b3e704918087c0372ec2883c923b09","first_seen":"2025-12-07T03:38:26.072728Z","last_seen":"2025-12-07T03:38:26.072728Z","times_seen":1,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/locale/v3/33000018/en-XX.js?etagc=05878ee507e48a0e965e9edd69be8968","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:32.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /locale/v3/33000018/en-XX.js?etagc=05878ee507e48a0e965e9edd69be8968 HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 1810\r\nx-ares-server: r100013666-21038164-wg5bn@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: TT4HR8Z7WYHFV422\r\netag: W/\"05878ee507e48a0e965e9edd69be8968\"\r\nlast-modified: Mon, 13 Oct 2025 12:54:53 GMT\r\nx-ares-raw-buffer-size: 5959\r\nx-backend-latency: 0.020\r\ncontent-encoding: br\r\nx-varnish: 16311633\r\naccept-ranges: bytes\r\ncache-control: max-age=3090177\r\nexpires: Sun, 11 Jan 2026 22:00:29 GMT\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a218\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":5959,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (974)","md5":"05878ee507e48a0e965e9edd69be8968","sha1":"dfe082b5599e62c055220bc596a75f18bb561de8","sha256":"dbfd757035346997f3fd9917e6e9843037e0cba393c572a17a9dfd72961f4bd2","sha512":"63d6d70a6cce9569e0382f9974a87232a4ad931bda452e3ba3f1de73d4bf156776ed555f4bbc8c11b00a04a16b6c3d3fede2bf56ac3dc9f0afa05429256a9fe7","ssdeep":"96:A+zQeDOpqdGWZ/a4kEpti+tIGmMGxWlhbgRmuWsqJ6Av6cjpbkS3HJk2bhX0Dnsz:HEe4gfizEuDGKhWNoajaS3HOyXiowf07","tlshash":"ecc1b5453971e42b95f3e5f6d61f5601f031a82308884d5af75c91ac3fd04d392b6be9","first_seen":"2025-10-13T16:34:16.439783Z","last_seen":"2026-04-15T17:38:47.542786Z","times_seen":2355,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":85,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/restapi/soa2/19816/bjjson/queryAdsDisplayData?x-traceID=1765078651988.0c55yqsxjtpp-1765078655928-1425514166","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:35.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"POST /restapi/soa2/19816/bjjson/queryAdsDisplayData?x-traceID=1765078651988.0c55yqsxjtpp-1765078655928-1425514166 HTTP/1.1\r\nHost: www.trip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlocale: en-XX\r\ncurrency: USD\r\nx-traceID: 1765078651988.0c55yqsxjtpp-1765078655928-1425514166\r\ntrip-trace-id: 1765078651988.0c55yqsxjtpp-1765078655928-1425514166\r\nContent-Type: application/json\r\nContent-Length: 254\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003\r\nCookie: Union=AllianceID=6015822\u0026SID=168798533\u0026OUID=ctag.hash.ccjJjXXJOpYl\u0026Expires=1767670651990\u0026createtime=1765078651; UBT_VID=1765078651988.0c55yqsxjtpp; ibu_online_jump_site_result={\"isShowSuggestion\":false}; ibusite=EN; ibugroup=trip; ibulanguage=EN; ibulocale=en_xx; cookiePricesDisplayed=USD; ibu_cookie_strict=0; _abtest_userid=e7b40962-e94a-4116-9bcf-af1ceddea7af; _tp_search_latest_channel_name=hotels; _bfa=1.1765078651988.0c55yqsxjtpp.1.1765078653998.1765078653998.1.1.10320668088; _gcl_au=1.1.1944475785.1765078655; GUID=09034023113792808361\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":254,"data":"{\"head\":{\"group\":\"trip\",\"locale\":\"en-XX\",\"currency\":\"USD\",\"source\":\"online\",\"clientID\":\"1765078651988.0c55yqsxjtpp\",\"aidCookie\":\"6015822\",\"sidCookie\":\"168798533\",\"aidSession\":\"6015822\",\"sidSession\":\"168798533\"},\"moduleNames\":[\"ONLINE_HOMEPAGE_TOPDEALS\"]}"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\nx-cat-server: cat.fx.sgp.tripws.com:80\r\nx-cat-root-id: 100025527-0a0e1bd1-490299-313020\r\nx-cat-parent-id: 100025527-0a0e1bd1-490299-313032\r\nx-cat-id: 100025527-0a9ac2bb-490299-69813\r\nx-cat-root-url: http://cat.fx.sgp.tripws.com:80/cat/r/m/100025527-0a0e1bd1-490299-313020\r\nclogging_trace_id: 3396213327529233765\r\nrootmessageid: 100025527-0a0e1bd1-490299-313020\r\nservermessageid: 100025527-0a9ac2bb-490299-69813\r\nvary: accept-encoding\r\ncontent-encoding: gzip\r\nx-gate-root-id: 100025527-0a0e1bd1-490299-313020\r\nx-gate-region: SGP-ALI\r\nx-service-call: 0.21\r\naccess-control-expose-headers: RootMessageId, x-service-call, x-gate-region\r\nx-gate: ctrip-gate\r\nx-originating-url: https://www.trip.com/restapi/soa2/19816/bjjson/queryAdsDisplayData?x-traceID=1765078651988.0c55yqsxjtpp-1765078655928-1425514166\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-trip-region: de\r\ncontent-length: 321\r\ndate: Sun, 07 Dec 2025 03:37:36 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: MISS\r\nunique-request-id: 361248ba\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":400,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"37bdfb7684999db921014a7bf3916ddd","sha1":"77cb147ff095db0735e47f0a6c0963353ac2d783","sha256":"993c524b75cbcb425863a12c4efb0e0c24a51027a3d5aa1bcb41d92247781027","sha512":"b2497d547f1e6b337b6a25932bd13479ad31fd462856be2b09252f8430c9039f120b6a120cf7955bfa21293747ad0e7d9768ccf754a9f80096d3612318abbc1f","ssdeep":"","tlshash":"8ce0f1099abc0cbe430ac16ce046bc879d5638c222d61510b45f12954fc20dee9a0bec","first_seen":"2025-12-07T03:38:26.076738Z","last_seen":"2025-12-07T03:38:26.076738Z","times_seen":1,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/online-home/common.dll.aaca8289553569c27f8bb34343acd8a3.js","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:32.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /modules/ibu/online-home/common.dll.aaca8289553569c27f8bb34343acd8a3.js HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nx-ares-server: r100013666-91049052-qrjfn@SGP-ALI\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aliyun\r\nx-ares-request-id: 6929444C657EC031357874AB\r\netag: W/\"aaca8289553569c27f8bb34343acd8a3\"\r\nlast-modified: Fri, 28 Nov 2025 06:42:20 GMT\r\nx-ares-raw-buffer-size: 93007\r\nx-backend-latency: 0.030\r\ncontent-encoding: br\r\nx-varnish: 124986419\r\nx-device: U R iPhone\r\naccept-ranges: bytes\r\ncontent-length: 29865\r\ncache-control: max-age=4417488\r\nexpires: Tue, 27 Jan 2026 06:42:20 GMT\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a20f\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":93007,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (61438)","md5":"aaca8289553569c27f8bb34343acd8a3","sha1":"5ce707696712c6af3e929301b4c0395491ebbd58","sha256":"59e42344c258b13cd646333a990d7e8bec5480379a516f3e50abe8b6f3f8bd5d","sha512":"e45731c9bd5710a6e6578c611a87c92bee943bd3d31a77faa57dc87bcfc7866c652b7d36f9db52b26012799e5f3afe73a17c6f2cf699081117ed1a184bec5469","ssdeep":"1536:pedhBwiYPXdHpm7NI2rmiJeJs/PB+gFUsEE:yBKpm7NDmiJBceUsEE","tlshash":"1b937fccb6d2f05183a364b941bf004bf33e6ea6748e8114d169e4e9bc7854e9277e2d","first_seen":"2025-12-02T07:10:06.771959Z","last_seen":"2025-12-08T09:12:13.149822Z","times_seen":116,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":99,"dns":0,"connect":0,"send":0,"wait":37,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dimg04.tripcdn.com/images/05E6612000lxkvqh5C339.png","fqdn":"dimg04.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:36.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"GET /images/05E6612000lxkvqh5C339.png HTTP/1.1\r\nHost: dimg04.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ak-s-cw.tripcdn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 01 Apr 2024 00:00:00 GMT\r\netag: Dg0on7fbkA,05E,05E6612000lxkvqh5C339\r\ncontent-type: image/png\r\ncontent-length: 33582\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncache-control: max-age=1568698\r\nexpires: Thu, 25 Dec 2025 07:22:34 GMT\r\ndate: Sun, 07 Dec 2025 03:37:36 GMT\r\nalt-svc: h3=\":443\"; ma=93600\r\nquic-version: 0x00000001\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 36124994\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":33582,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 834 x 462, 8-bit/color RGB, non-interlaced","md5":"ec8b195171fef4422cdf54d66ed2f9a4","sha1":"9dc8c9354f3d4593d8101d517ac599d7ce3f9df5","sha256":"a1d4234c3d7347073d8825ec4e00c1f1ede3988fcccc334a122d8ae08548a84c","sha512":"dbe173a00fa81ea3a91907507542b3c80de266a8f864dbbd43ea20ed2aff37bdc6f24fe477390a7e08869908b3a0543be991b82313323fe9d6df083561fd80c8","ssdeep":"768:vi5IDca5PCi12PFmo3po/m30eSQ0IW/OyD7eShDqYYYYYYYYjn:K5Yca5PyFFu/eSHbx+SoYYYYYYYYD","tlshash":"a3e28b02d60d0239704780eea58710a5ffb26421ba149e77d9dbb86d5a3ef3bec55630","first_seen":"2025-09-06T09:35:54.130732Z","last_seen":"2026-04-15T17:38:47.441902Z","times_seen":1733,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/locale/v3/33000002/en-XX.js?etagc=b3db7d87032826cd676b5a8b7d733a24","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:32.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /locale/v3/33000002/en-XX.js?etagc=b3db7d87032826cd676b5a8b7d733a24 HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 1904\r\nx-ares-server: r100013666-21038164-wg5bn@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: TT4RD1HDE4AH08E3\r\netag: W/\"b3db7d87032826cd676b5a8b7d733a24\"\r\nlast-modified: Mon, 13 Oct 2025 12:54:53 GMT\r\nx-ares-raw-buffer-size: 6400\r\nx-backend-latency: 0.020\r\ncontent-encoding: br\r\nx-varnish: 13974661 27448445\r\naccept-ranges: bytes\r\ncache-control: max-age=3090177\r\nexpires: Sun, 11 Jan 2026 22:00:29 GMT\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a216\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":6400,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1414)","md5":"b3db7d87032826cd676b5a8b7d733a24","sha1":"cab30ad2153b67e099898a3b3f3d477107477669","sha256":"91de51f984622dabb419fd7ffd31a6590375ed2c86939b947cadc298203f0f2a","sha512":"d3dd10b24a25b6e02218c2c0d8d93511c332636bc5d3fac0ef1f2e264a9f42ac79f08ab9f86baf823f0850e7a953038687b3ebf277528bc9fbd8e1e3da0cd3ff","ssdeep":"192:HEe4gfizEuDGK4njE0GyWcTdjTS3HRXFfwf07:HEe1a4n26Tm1fb","tlshash":"3ed195cda8766427d9b6b4ba8d2f5600f460947304d49c74ba8c91ec3fd3495c2b2aea","first_seen":"2025-10-13T16:34:16.30319Z","last_seen":"2025-12-11T00:38:21.255542Z","times_seen":969,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":87,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/online-home/onlineGoogleLoginNew.155ac53d65bc680922f34220028a7939.js","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:32.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /modules/ibu/online-home/onlineGoogleLoginNew.155ac53d65bc680922f34220028a7939.js HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nx-ares-server: r100013666-21038164-mjtv8@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: MHDKD3NH0RDHTXVX\r\netag: W/\"155ac53d65bc680922f34220028a7939\"\r\nlast-modified: Wed, 03 Dec 2025 07:34:19 GMT\r\nx-ares-raw-buffer-size: 727358\r\nx-backend-latency: 0.080\r\ncontent-encoding: br\r\nx-varnish: 92243181\r\naccept-ranges: bytes\r\ncontent-length: 146793\r\ncache-control: max-age=4852607\r\nexpires: Sun, 01 Feb 2026 07:34:19 GMT\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a227\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":727358,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"155ac53d65bc680922f34220028a7939","sha1":"43b0f3f9226d1c84ee8d7e6ce856555a5f55b87a","sha256":"0222d7ddb3bfd06e7f42a7f3c5f5269edbf2f2c8df33453da2cb3dd66b90a1aa","sha512":"eb855aba90973b69aba74562c58ba4d55e4e446e1e58a35b03386ad7fac7f041bdd12e26f69bf88c71e86941e00cd34d87f7f930fe7ca94785c9c08117b5e0fd","ssdeep":"6144:dUJkINe9FQTC/qnRnHA3xRhLtdsAuaPK+u0KURRV1GR4YOh0/oJ3ynMij:CJkIaFdinRgThLHzPKdoRRVFYOK/okj","tlshash":"fcf42a8db1d2f4a217a3a170903f250bf23a2d19581d9850f266d9d4bcb498fe337f69","first_seen":"2025-12-03T08:08:10.068932Z","last_seen":"2025-12-08T09:12:13.027912Z","times_seen":101,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":65,"dns":0,"connect":0,"send":0,"wait":71,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/online-home/onlineRecommendHotels.d3ee7b716216d133e1e986708f342f75.js","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:32.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /modules/ibu/online-home/onlineRecommendHotels.d3ee7b716216d133e1e986708f342f75.js HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nx-ares-server: r100013666-21038164-5skh7@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: MHDQQF3VW9SSM4NX\r\netag: W/\"d3ee7b716216d133e1e986708f342f75\"\r\nlast-modified: Wed, 03 Dec 2025 07:34:19 GMT\r\nx-ares-raw-buffer-size: 47968\r\nx-backend-latency: 0.050\r\ncontent-encoding: br\r\nx-varnish: 22159842\r\naccept-ranges: bytes\r\ncontent-length: 12718\r\ncache-control: max-age=4852607\r\nexpires: Sun, 01 Feb 2026 07:34:19 GMT\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a23b\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":47968,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (47843)","md5":"d3ee7b716216d133e1e986708f342f75","sha1":"eef903029f05541c5e90c5e01109b5f73d583b5b","sha256":"2e795bd17ce40b66c59a5d5852265daf2c0519cd816f72ac03c1b86cbcb82e81","sha512":"e1c18986e0ec3a4a303d69c1054a2a3db01c532dd0f8fb26c4acadebe58f39457e3559007e2ed216828b54080aa53be180c71d553b3bc1189401e31187985d8b","ssdeep":"768:NqgP4t4tT+whgfkEHxo7JphfD3n/CIpg1ylJtkUjuau3ezReBt8YYdXNy:N5T+whgfkEH6JppTnqhySBCReBkNy","tlshash":"b3230948b191f8ed01fb10a3953f660af3363b65a8199c10d261c9dc7d38bcf9176b6a","first_seen":"2025-12-03T08:08:10.042772Z","last_seen":"2025-12-08T09:12:13.227955Z","times_seen":101,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":73,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/online-home/onlineRecommendTrain.583f4544b9d21aa03a95fc8475757a91.css","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:32.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /modules/ibu/online-home/onlineRecommendTrain.583f4544b9d21aa03a95fc8475757a91.css HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ncontent-length: 1832\r\nx-ares-server: r100013666-21038164-wg5bn@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: WD0RMQA2WXCYG3RC\r\netag: W/\"583f4544b9d21aa03a95fc8475757a91\"\r\nlast-modified: Fri, 31 Oct 2025 13:17:51 GMT\r\nx-ares-raw-buffer-size: 10613\r\nx-backend-latency: 0.020\r\ncontent-encoding: br\r\nx-varnish: 47725616\r\naccept-ranges: bytes\r\ncache-control: max-age=4889786\r\nexpires: Sun, 01 Feb 2026 17:53:58 GMT\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a244\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":10613,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (10613), with no line terminators","md5":"583f4544b9d21aa03a95fc8475757a91","sha1":"1d3d1dedcbe01bcc00845ac58946fbbeb9d7cae6","sha256":"22628123a845e62e4bf0e7bc127ef1dc5dd1a7c1894fc58636617d002ee69483","sha512":"00d32143cb97ce9bf65128a60db4691fc4c6eb500ca69ad3289524ef412ba9f581ac4f7d93f30b12c2e81a7b6e1dc2bd7af66a65235dca13d8c0392f70c0272f","ssdeep":"192:3BJpneeq/MwnaZ0Lo28SubUPTJoNOkBXKV/YMtlvSxYKRVwSThee58FOwXNU4Wm9:RJpneecZnaZ0Lo28SubUPtoNOkBXKV/x","tlshash":"1922f701375139afb0252373acf839cc9d79b27be2d2ecc7ea08ad658648107977152e","first_seen":"2025-06-03T22:29:37.220079Z","last_seen":"2025-12-17T08:17:11.297083Z","times_seen":1579,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":78,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dimg04.tripcdn.com/images/05E6812000lgaotd79051.png","fqdn":"dimg04.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:36.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"GET /images/05E6812000lgaotd79051.png HTTP/1.1\r\nHost: dimg04.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T20:38:47.575438Z","times_seen":13797803,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ubt-sgp.trip.com/bee/collect","fqdn":"ubt-sgp.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:37.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"POST /bee/collect HTTP/1.1\r\nHost: ubt-sgp.trip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 3940\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nCookie: Union=AllianceID=6015822\u0026SID=168798533\u0026OUID=ctag.hash.ccjJjXXJOpYl\u0026Expires=1767670651990\u0026createtime=1765078651; UBT_VID=1765078651988.0c55yqsxjtpp; ibu_online_jump_site_result={\"isShowSuggestion\":false}; ibulanguage=EN; ibulocale=en_xx; cookiePricesDisplayed=USD; _abtest_userid=e7b40962-e94a-4116-9bcf-af1ceddea7af; _bfa=1.1765078651988.0c55yqsxjtpp.1.1765078653998.1765078653998.1.1.10320668088; _gcl_au=1.1.1944475785.1765078655; GUID=09034023113792808361; _fwb=202fgWTgpaFl4ko2G4nljfO.1765078656039; uid=RHMZE/ARHtNWOn+gZxUeig==; suid=RHMZE/ARHtNWOn+gZxUeig==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3940,"data":"{\"d\":\"f001765078657732!m1Legacy!d=E8Z7ImNvbnRleHQiOlsiMTAzMjA2NjgwODgiLCIxNzY1MDc4NjUxOTg4LjBjNTV5cXN4anRwcCIsMSwxAB71LjMuNzIvbmV3L3QAEPMwMDAxNDQxNixudWxsAgD3LCJvbmxpbmUiBAfJaHR0cHM6Ly93d3cudHJpcC5jb20vP0FsbGlhbmNlaWQ9NjAxNTgyMiZTSUQ9MTY4Nzk4NTMzJgEn2l9zdWIxPTAyMGFhNzlhNjBlOTRjZDA5NGJmMDBkNjViNTA5MzQ4BiL2Mz1QMzk0MjAwMwR1B4oB_DEyODAAqgH6MjQsNDgzAAv3LDMsImVuLXVzAPABAAAAAOl7XCJ2ZXJzaW9uXCI6XCJcIixcIm5ldAII_E5vbmUCDPhwbGF0Zm9ybQQc_30BkAIBNvlmZWZfbmFtACIFMwEOAE0HB_5yZwcC_WxhbgMIAIAB_lhYAw37aXphcmQHTvgiU0dQLUFMSQ65AQCpAfx0cnVlAgAHDfpdLCJidXMA8wL-c3MB0AMEzAIBzAMFyQIACepjdGFnLmhhc2guY2NqSmpYWEpPcFlsDlEMAAIA_3sAqAH8dGVyVABbBpkE6jQ2NDUsImluc3RLZXkiOiJjOTE5OUYAZfxucG1WA8UCABP7MS42LjcDD_9FDjL8Mzg5OAC3AflpelRva2VuAbcBAMYBAJEE_iI6A-YB_mZyANIC_HdvcmsARvl3ZWItY29yANUE-SJ0Y3BTZW4AI_tmYWxzZQCBAfJzU3VwcG9ydFdhc20iOgKWAgAS_08BzQP-ZWEAVP8iAQ8BNf9sADIACgOABQGPAvZhcHRhaW5BcHBJARYGxgUAGO9sc1NpemUiOjQwNiwidWJ0XwGyA_11YWcAEACKAgAeARD5Y3VycmVuYwH7Af1VU0QEDv1zaXQBIf5FTgQJ-2xvY2FsAzEA7AMAEv53YweWAvsyLjAuOAFsASb9cmVxAfkBB_wG9jc3MzIyN2M4NHkEG_tiYXRjaA8S9180NDQ4XzEifQC9Avx1c2VyAMcCA7wC6E06LTEsMjMwODE1X0lCVV9wd2F5aDpBOwUQ_TcyMAIT_DN3U0oIDP01MjkCEv5PVAkL_DEyMTgDEf5IUwIR-zk3LDI0ANQGAxD7SFRHOkIAEwAo_DUwNjIDawCmCP9VAI4BAhT-MjYBFv85BBP7TmV3UG8CE_40OAITBJwB-kRlc3RpbgIU_zgCRv05MjQCFPljYW1iYW5uAEoBeADJB_4yNQB5_zECF_xQcm9kAOkD_nJjA9cB_zIBNP00MDcFpgH_QgBMBYkJ_yIBoAL7YnRMaXMB_An7WzEwNCwGwwL9NjcxAI4F_HRyYWMCqgT6aWxlZF90AKAG_XsiawLfBfxpYnVfALcE_3AAjgj7bnRfdXMAjAT_XwDsCf1vYWQALPV2YWwiOnsiZGF0YQAoAJQIBooI_kBjAfAE_y8BAQDBBQQ4_y0Fxgj_LQOrCvgtYXBwLWRvdwJK_C11bmkBuwX-YWwCmggJjwn7Ni4yLjICEf51cgAbAA8RzwoDwAgO4AVL-wQh7gQAkAUA4QL_NQ3UAvxkZXZfG8oC-2FqYXhfACQFHgTYAvxzdGVwAB8AqAb_dQCmBPogeGhyIHMBiQgAiwH_cgAeE9oM_3IAKN9hcGkvc29hMi8yNDg4NC9qc29uL2dldENvbmZpZ3VyYXQA3gL9P3gtAmoBhw0W8Q3_LQjAAfowMC0xMjQABf0zNTUB7Ap_7wEE6gL_NgnlAv81AOwNG88C_WhvbQLFBQCFBQCDCf93AIkN8nNtb2R1bGVfZXhwb3N1AvMKBPsC92xvZ2luU3RhdAC8Dvk6InVuTG9nf3gH8AH_NwnuAfo4NywibWUAkwH_YwT4B_97ApEHAED-b18Azwz_XwGqBAC5EP5jYwG2DgDCAf5hZwDRAfR7InJ1bm5pbmdUeXABJ_luZmVzLWg1AB0Axwn5dmljZUNvZAEU-zE4ODE0ABP9b3BlA7kEABEAzwT-UmUA_gH_bQCRBftUcmFmZgF2-iJSb290TQBgAIgCBuAM_zIArwTsNy0wYTk4NjFjYy00OTAyOTktMjQAtw__MwHHBO9DTE9HR0lOR19UUkFDRV9JRAGqDP02NjIAyw_1NDE1MzkwOTk0MzkB2A79Z2F0ALAD_HlSZWcDfgazEAUS_lRpAu4B-zAuMTAxAcIBArcDA78BAKwSArwO_k9BBbEOBNMG_khvAZwK_yIJuwYAOAQW_1UC5gYLyQYCiQIGzgYQ8gEAhQP-aG8B-gH8UE9TVAAN-mVycm9yUgCeDwKwAQAO_mJlAIwK_WVGZQDjAwCiEAGwBQC1Af5vdQCEAf8zAK0CAKUB_GJ1SGUA6AoC2AoDnAQEwBL_XwTAEgXUBAISANsEA7cK_2kD0xIXuAcCIvtzb3VyYwNL_08ChAYDvQoBngT9SG9wAN4M_HRvY28B8wH8dW5rbgCkCwAZ_18BkgX_cAOMBQq6Fv9wAK4GA54CEvoIG9wQ-WZyb21TREsFiAME9QsJoBAAtwUBhxL9SW5pAJkC_TI3MADNChSUEvxpc0JvAcMD_UYifQK7BwCEEgDsDv81A6QG_zgJngYBhhN2sQX8ZWRBdAGdCQIWHJAG-2E4NjQ0CKQG_Dc1NDAUmAb4ODMzNjQxMjMAnAv8MjIzNQACAZcBKIQG_zYBhQdqwgUM-wEshQYAjBl_sgV_sgVP4gX9NTAxA64G_zkIqQb_OAD9FRSdBv5yZQGMGfxfbm9fAPAD_WNrXwKzAwisBv9jAOcE_WdvcgGBDvxXZWJDAHb-LUUEHB90AoUB_zEAzh0IfxalB2AnAJYgBoEB_Tk1MmbYFQGxEQW1FgDkBP1sZWMArR8Mnxb_MQD9A_8xf6wVKpYRAJ0hCcUCHpwTUvwB_HNsaWQD8CENvwL_NH_NASuhAgDvIwfFAv82AKEKdu8M_00A3gL-bnQBVBvFDfw5ZDYxCdcN_jkxFcsN_jc3ACP-NTYANwD8Iv82ADACigonuQ3-MjcB-ApZhw0T6gEsqg0B0QgYvg0Q9QwB0SYJ4w0F4iY2tg1_1wxRhQ0AzhgDnwYI-yEA0x0BxRAa1wj9cHViBagc_2cB_AMAmyP-cmQAogcT4ggA4Cf_dAC3BgLfAv9CAIMN93VwX1NpZ25faQDTCAD8AgYT-3BvcCB1A9UQA_0RAewGCIsqf9EHBMwICMUh_zcA_QZMgSEG9Qh_0SB_8gEG6wIIyCEA8QIAkysTsQsG4wIAgQv_Zgi3C3_KAQCjBARCAaUH_zkBuAoOjwsHqgb9RE5TAaILAPsF_zAAjAb9VENQCAP9U1NMCAMEtQQEC_0yNDICD_9zANIP_nNlBR__fQjpBwB5A8wCCKAiAM8CFrQV_EpTLkwCmzH-LkEA1QIAogv_ZAGLLX_WARa_Av1hay0G0gIVgxz_OQGUJgDiCvo5NzkzMzcA4Q4BliIb-A4AghgJig8Ari0B2wsE8xQEZxDTAgjcHv43MACaA3mAKfoxNDg3Ny8APPdyeU9uZUxpbmsszQIAvwH_MQALAMg2_Dc3MTkB_hF_ngcEmQgIkBv_NwHuLHftEvxIb3RlAM8DHLAE_DAyZTAJ2RP-ODMBywQSmAX6NDY4NDk3AAH-NjMA3AH_NgDzBSq4E_81Aoc4Zf0SBfYBS6Inf-ESf-ESM60T_jgwA-on_zIIpyD_NwB6f6Yef6YeOrUI_zII7iH-NzQAqjl8hxN_2wpXkQIIiCIA6AIAuQVTpxNQ8AEHkhEAtAtVnBP-NTkP4hP_MQnoEwB5A8MCCIIiAMYCFo0OQ64TX-0BIMgTALNB-jc0OTQ0NwCCSACGSADnMQGKRirvDvw5MjM5GNATAtgCANRAAYkTCtRFAcUF_30\u0026ac=b\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json\r\ncontent-length: 66\r\ncache-control: private, no-store, no-cache, no-cache=Set-Cookie, proxy-revalidate\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\npragma: no-cache\r\nx-content-type-options: nosniff\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List\r\nx-forwarded-for: 91.90.42.154\r\naccess-control-max-age: 300\r\np3p: CP=CUR ADM OUR NOR STA NID\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\ndate: Sun, 07 Dec 2025 03:37:38 GMT\r\nalt-svc: h3=\":443\"; ma=93600\r\nset-cookie: uid=RHMZE/ARHtNWOn+gZxUeig==; Max-Age=63072000; Expires=Tue, 07 Dec 2027 03:37:38 GMT\nsuid=RHMZE/ARHtNWOn+gZxUeig==; Max-Age=63072000; Expires=Tue, 07 Dec 2027 03:37:38 GMT; Secure; SameSite=None\r\nquic-version: 0x00000001\r\nserver-timing: cdn-cache; desc=MISS, edge; dur=0, origin; dur=211\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: MISS\r\nunique-request-id: 36124b90\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":66,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1310eda975b24f825709a372a521ce17","sha1":"3d675114d212dbaccaedbc13f871a53a8fc00397","sha256":"52865853aca4336fb1b3f548db8925f43abe1a07cd734c988f0af65665036cbf","sha512":"7b93d6c047797fcf524f74abc2a01d95e16eac2d4ec653e40c7ad64e971f2f7bf660813c2c795faf0b021599dd307d3ae4d45e58640af1012fc19a8c653d2f46","ssdeep":"","tlshash":"b3a002411305e9fb0b651667291ade61ebf8768d88569141540e895c4b20c9c579b284","first_seen":"2025-12-07T03:38:26.093067Z","last_seen":"2025-12-07T03:38:26.093067Z","times_seen":1,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":215,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/online-home/onlineSafarionetap.8d249930fe5532e5834b6f45c826bb20.js","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:32.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /modules/ibu/online-home/onlineSafarionetap.8d249930fe5532e5834b6f45c826bb20.js HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nx-ares-server: r100013666-21038164-zctqw@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: MHDK900W0TPST1PT\r\netag: W/\"8d249930fe5532e5834b6f45c826bb20\"\r\nlast-modified: Wed, 03 Dec 2025 07:34:19 GMT\r\nx-ares-raw-buffer-size: 118057\r\nx-backend-latency: 0.250\r\ncontent-encoding: br\r\nx-varnish: 91655766\r\naccept-ranges: bytes\r\ncontent-length: 28669\r\ncache-control: max-age=4852607\r\nexpires: Sun, 01 Feb 2026 07:34:19 GMT\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a229\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":118057,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (63574)","md5":"8d249930fe5532e5834b6f45c826bb20","sha1":"e98092c814387e661190e8b52f82bb6db1380524","sha256":"7ca209604ee84fded6d4558cd992aedf7de5a21da0e824d2505eae0df1937ef0","sha512":"7e5a9aeaebf449d10ccf98e38dbe7fbd2eb3867dbb97edbc56586ebc02efdb693800b8bbaba892d9b35467c0545558dd8661bb11777672c954d0a083a8532098","ssdeep":"1536:HS5g7nVE47rRVOEXUL5CHrRGPGBd4iLkMIeNWezX:y5g7tzkRPY","tlshash":"1cb33c8871d1f0a24aa761b8503f620bb2771c552c4ddc94e2a1c9e1bdb4b8f9137fad","first_seen":"2025-12-03T08:08:10.10896Z","last_seen":"2025-12-08T09:12:13.212298Z","times_seen":101,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":64,"dns":0,"connect":0,"send":0,"wait":74,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ubt-sgp.trip.com/bee/collect","fqdn":"ubt-sgp.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:37.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"POST /bee/collect HTTP/1.1\r\nHost: ubt-sgp.trip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 6564\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nCookie: Union=AllianceID=6015822\u0026SID=168798533\u0026OUID=ctag.hash.ccjJjXXJOpYl\u0026Expires=1767670651990\u0026createtime=1765078651; UBT_VID=1765078651988.0c55yqsxjtpp; ibu_online_jump_site_result={\"isShowSuggestion\":false}; ibulanguage=EN; ibulocale=en_xx; cookiePricesDisplayed=USD; _abtest_userid=e7b40962-e94a-4116-9bcf-af1ceddea7af; _bfa=1.1765078651988.0c55yqsxjtpp.1.1765078653998.1765078653998.1.1.10320668088; _gcl_au=1.1.1944475785.1765078655; GUID=09034023113792808361; _fwb=202fgWTgpaFl4ko2G4nljfO.1765078656039\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":6564,"data":"{\"d\":\"f001765078656709!m1Legacy!d=E8Z7ImNvbnRleHQiOlsiMTAzMjA2NjgwODgiLCIxNzY1MDc4NjUxOTg4LjBjNTV5cXN4anRwcCIsMSwxAB71LjMuNzIvbmV3L3QAEPMwMDAxNDQxNixudWxsAgD3LCJvbmxpbmUiBAfJaHR0cHM6Ly93d3cudHJpcC5jb20vP0FsbGlhbmNlaWQ9NjAxNTgyMiZTSUQ9MTY4Nzk4NTMzJgEn2l9zdWIxPTAyMGFhNzlhNjBlOTRjZDA5NGJmMDBkNjViNTA5MzQ4BiL2Mz1QMzk0MjAwMwR1B4oB_DEyODAAqgH6MjQsNDgzAAv3LDMsImVuLXVzAPABAAAAAOl7XCJ2ZXJzaW9uXCI6XCJcIixcIm5ldAII_E5vbmUCDPhwbGF0Zm9ybQQc_30BkAIBNvlmZWZfbmFtACIFMwEOAE0HB_5yZwcC_WxhbgMIAIAB_lhYAw37aXphcmQHTvgiU0dQLUFMSQ65AQCpAfx0cnVlAgAHDfpdLCJidXMA8wL-c3MB0AMEzAIBzAMFyQIACepjdGFnLmhhc2guY2NqSmpYWEpPcFlsDlEMAAIA_3sAqAH8dGVyVABbBpkE6jQ2NDUsImluc3RLZXkiOiJjOTE5OUYAZfxucG1WA8UCABP7MS42LjcDD_9FDjL8Mzg5OAC3AflpelRva2VuAbcBAMYBAJEE_iI6A-YB_mZyANIC_HdvcmsARvl3ZWItY29yANUE-SJ0Y3BTZW4AI_tmYWxzZQCBAfJzU3VwcG9ydFdhc20iOgKWAgAS_08BzQP-ZWEAVP8iAQ8BNf9sADIACgOABQGPAvZhcHRhaW5BcHBJARYGxgUAGO9sc1NpemUiOjQwNiwidWJ0XwGyA_11YWcAEACKAgAeARD5Y3VycmVuYwH7Af1VU0QEDv1zaXQBIf5FTgQJ-2xvY2FsAzEA7AMAEv53YweWAvsyLjAuOAFsASb9cmVxAfkBB_wG9DY3MDkyNTQ4ejkifQCYAvx1c2VyAKICA5cC6E06LTEsMjMwODE1X0lCVV9wd2F5aDpBOwUQ_TcyMAIT_DN3U0oIDP01MjkCEv5PVAkL_DEyMTgDEf5IUwIR-zk3LDI0AK8GAxD7SFRHOkIAEwAo_DUwNjIDawCBCP9VAI4BAhT-MjYBFgCpAQIV-05ld1BvAhP-NDgCEwScAfpEZXN0aW4CFP84Akb9OTI0AhT5Y2FtYmFubgBKAXgApAf-MjUAef8xAhf8UHJvZADEA_5yYwPXAf8yATT9NDA3BaYB_0IATAXkCP8iAaAC-2J0TGlzAdcJ_Fs1NCwHwAL5NTc5LCJtZQD6A_9jBCj-eyIBsAcA7AL-b18A2gT_XwGlCQDECP5jYwHBBgCpBP5hZwC3BPR7InJ1bm5pbmdUeXABJ_luZmVzLWg1AB0A9wH5dmljZUNvZAEU_DE4NDEB4wX6b3BlcmF0A9UD_lJlAOIE_20ApgUAvwEAFPx0eUdlAN8B_2EA7wb6IlJvb3RNAGUAzAQG8AToMjU1MjctMGE5ODYxY2MtNDkwMjk5LTI0AMcH_jQ0ADHvQ0xPR0dJTkdfVFJBQ0VfSUQANQDjA_gwNDkyMTE4NwAHAOAB_zcBgQH8Z2F0ZQCKBP1SZWcDgwEGwwgFEv5UaQLzAfswLjA3OQHHAft0YXR1cwPEAQC8CgLMBv5PQQXBBgCSBf91ALUD_khvAdEC_yIJuwsAOAQW_VVybAAZ_i9yAAj3YXBpL3NvYTIvAo4C_y8Y6gEAigP-aG8B-gH8UE9TVAAN-mVycm9yUgCuBwKwAQAO_mJlAOoK92VGZXRjaCI6MwCEB_90ALUB_m91AIQB_zMArQIApQH7YnVIZWEBPgCBC_tzb3VyYwP8Cv9PAvwMA9IKAvcGDN4KBa4HAhIAtQcCEPtncm91cAINAdsBAg7-dmkDjAsX-w0DpgsBtgT9SG9wAN8B_HRvY28BhgL6dW5rbm93AaII_18B1Af_cAPQBwrdDvxwdXJlA7ECEo0OG_8I-WZyb21TREsFmwMEsw0JwwgAzwUBqgr9SW5pAKwC_TI3MADlChS3Cvxpc0JvAdYD_UYifQBH_mFsAKcK_Do2NTIA7Qj9WzU1CbUG_zkA7Av8dHJhYwLFCvppbGVkX3QAxAP9eyJrAvoL7WlidV9vaF9hc3luY19tb2R1bGUA9wn-YWQIyAYAWgHOBv90A8UGBZ8QBf4G_FBvaVMC4gcAEP5kdQPABvtsZW5ndAD6A_43MADmDg6tC0nKCv99AusB_zZ_bgLrAf02MzJiiwH_NwrjAQHeBhrTAftwdWJfcAB6_F90dGkC6AEH2wH8ZGF0YQODBwCuAf5nZwHmB_9wA_IGASQDjhL_YwPaBgCLBf83AwsDCv8wAwf_aQgCAF0CCfwzNjE4A7kS_2UD2gf8Q291bgOPE_85BCP5cmFuc2ZlcgGpDwRX_DcxNzcDF_hyZWRpcmVjdAHsCQhTAPcVAI4JAgz6aG90ZWxzA8EHYI0C_zgN4AL8ZGV2XxvWAgCIAf9wAP0U9250X2FpZHNpZAPfBPxpbmZvB_MC_3UXrgheiRYA4gIA_AL_cgGVEf8iAdMOAdcJB80NCeYJAKMB_0EChAoHlRUAEP9TA5YKCJ0VABL-T3UCEQRJ-mNvb2tpZQ0sAxAPLQMSBDsV3BUA-gwC-Q4AIPxbQUlEAI8C_iBDBeEC910gLSBTZXQgcwAgAJEH_lVuAAL_IAHuCv8gA1VjxQP_OS_5A_thamF4XwAkBR4ElwT8c3RlcAAfBKQP-yB4aHIgB5oJA7UEDKsP-DUzNTMvYmpqAIcP-y9nZXROAK4J9EFuZFNwZWVjaD94LQJbAcAE-zg1MTUyAJwB_jAtB4wY_DE1Ni0AE_0wNDUAEQGMA1_KAf82ANkbCKEC_zcV0BMGmwIAhhH_ZgjYExikBli9AQXsCwCcD_84ANwD_3IPnBMHygr9RE5TBL0J_zAAvQn9VENQCAP9U1NMCAME3wMEC_0yNzgDtwoA1wX-c2UEDv4xfQjfDwB5Ar4CANofIZ8C_EpTLkwCph3-LkEAxgIAqhP-ZHl_xwELuwL9YWstBsMCFZ8W_jgzANIWAKQM_TI3MQDrFv03NDMB3RYa-Bb-M2EAdwiKF_w1MDUxAugI_mxsAN4MBGcPxQL_MgrKAgCCE2jbBvw5ODE2Bd0CADL4cnlBZHNEaXMAwiH-eUQA1wQJ3AL8OTQ4NgC8GP44MwjdAv0zMTkAC_kxNzIxNjY5AZwCYOYGAJkjC6ECVPIGTcsBB_kE_jMzALMBUvcG_jMzAw4XsgcAeQLBAgrqHf85Ft4dRIUHXO0BIKwH_zEANgCZGvozNzgxMjQApAL-NzQB_hkZswf6MGUwM2NlBccHAPshALIUGLMHBdECCYMa_zYB_RxZ8gYf2QL6MjQ4ODQvBb0K-kNvbmZpZwS2AgnqAgD5Kfs5NTYyMAnqAv80AQr_MQAR_zIA6gsBqgJg-gYJ0RoCuQJThwdJygEIgQX_MQCwLFPODgDUBA7HB_8wCssH_jEzArwCCaIbAIUWW_oGWOwBILAH_DU1MzEAsxgA4Q_5NTQ3NTMwNALlDxqFD_xhNTAxCZYP_zYA8CcZuAcEzgIJhxsC0AIf4R0DxB_7X2hvbWUCiR4DwR_6X2V4cG9zANMjB9wHDukrYIMGCawYIK0BE60h_XRhcgDbMxyiIfdMb2dpblBvcHUAmTQC4R8BuAX8U3RhbQDXCQZ7_jUzAIwNYJUB_zcJ-Bf-NjAAvCJKzwoB6zAT0RIAwBT9NDcvAKMsCYoGFpgoB5wGALQF9TUtMTkzODU4NzQwAfoMYMIBCdoX_jYwAIgHf6MBHYUC_zgACwGHCQDnCGOfFP83CagXT9MBRusW_jY5AOwv_TkwOADDBAfDEv8yAPcK_Dg3MzAA9wf_MQHXL2DMAQmoF_42MADqB3-yFiL2AQeLDQDbBFSFD_84EeweCs8PAHkCwQIJqBcYqwJvwhYxmAIgvg_-NzMAkygA4jf-NjIA3w_7NTU3NjcB0Ccblhf9MWJkBtgPALwPANcoGMUPBdECC6YXANAvVJ8UAPsQ_zkDqRIA7ywD7TX8Q2l0eS3BCf4wNwDmAv00NDYA2AL-MzgBkgwE9AQB2gQF8QQCBwTwBAIHCOoEAcwUAskkB-kEAh4ImiL_NxHaJAiwIf83ArYhACMIrgL_NBaWF_1iYnoCrwIAuj0DnS__XwCjNwCuOgi5AgMLAYQ__1sAyQYGoEIFzQIAqwT_ZALRAv1jZG4C1AL-aW0A_QP5cy8wQVM2YgDEFPEwMDkwZng3czdGNjM1LnABuEIA0gb9ZG9tAJo2AkQNMQOTMPxvdGFsBOsGAIoUAA__aQCJNvtpYXRvcgHIOwI0_mNzAPgvD7Mw_DE0ODQBLQzJNwOvAf8zAi3-c3cA5hEAsjoCDwTnNwPWMPxudHJ5BlgFjAIDLgHSEgXtF_4zMwHyF_x0dGZiAQr_MQLMAf53bgOmMgDkPgAM_m5zCMwIAPBBCtgICssxAQ8D1wH-bFAAtwL5VmlzaWJpbAD6BAGgAQODAf92ARABhTr-fSws1AL-NWYC_gL2OHdoajM0ZjIxNDXLAgHsASfZAgCFBv8yapYCAcECeYcCAYE__mljCvgC_HBhY2sCggMA-Q7_LwCvO_tzZGsvKgEJ_y4AzQb4aC5qcz9kPTIAnQoAvCENgAMPPA6BAwD7RhL9Av5zYwAyAOE2D4MD_TI1MgCsGhT-Av8yQ88C_TYzNwiKAxn4AgCGDAqJAwSYJmisAv9hAMQB_y8CjUT7bGlicy8D9j7-L2YAoDkAtxAA3AoAnwMw5QL-NjETlAYX_gL9MTkyALIVXLkC_jQ0B44D_zMLigMCtgYIjQMCvQMGjwP_MQLLATndAv9dAohC-3RlZ29yAZwVBNRBf8JBG6ZC_zECwQ4KpyMA_TsY9B4AuSkA3gYHtBj-Y2gBj0r_bA3uHgffT_YiSE9NRV9QQUdFAcFHAIkEBJ5J_zQB6jpglxcKriIAwyVovhl_9B0o_QEKhiMAwydVqxRGywEIohQA9AdUoCn_MgHCCBn_GQB5AbsCAbZXIZsCRLApVe0BIaQx_TljMgDcQeMwLThhNWEtNDhmMS04YzEyLWEwMGIxOWFjMzQzMC3WKQDqMgGqURaPOQTdAgqMJADiD3_JBn-aIxC4B_84Co8kAOkqf8kGHPUBCPsEAasBU_UG_zUQhzkLvQf-NjkCugIKnyQAsCt_yQYxkQIgqAf4NmI4ZGM4YzYAyAcAAvA0NWJhLTgyN2UtYjk0ZDRhAJlb_jJhHdAh_Dk4MjAAiQgIxjH_NRqIOQXcAgq9JADvK2X8KimpJCHiAgDSFf0tMTIB50L-OTMCm0Ng_AYKoCQA0RZ_ugE1hAIAvwX_NADHBP8xAOkVY_k6APhGCbACALQuWOFVCu40Da1W_jgxANYIYI4BCs4XAL4rZ-MxAOEPAZE7_1QA2wEAzF79aWVQAv9SAMMB_mVzLPsD_DYzMDIApwT_MADuW_0yMjYBrDpg1gEKqxhO6AFGmDJ_owgTqQIKwhgBySt_7zEy9gEJyg4AuhxUhkIBsSQa5FH-NjUB0gIAyiQJygJdoVFs7QEgjxH9Mjg3AMRD_DQ5MzAAghH9NzM5A4dLHPIyAIAzCYUz_zQazhgE4gIK3hgBkWt__AZ_5Q0m1Qf_OQr1GACZHn_8BjP1AWOYBx2TUgWNBQqMGQCLHn_8BkiRAiHuWQDuB_wyMTMzANkQ_jI5AJcyAFku3jr_MgGZIR3eBwqRGQDMHhzfBwCbPADPIg7_EwD9ZQCRKwCjA_5zZwH9B_1tcy4ECmCeBgqXGAHqPUB_AQn6Um1zYmZpY14Knxcb2msAwR7-MDYItQEHjAcDsxcBuF8Cqy__aQHbe_xuYWxfAKgX_2sEzjf-YWIGFv5GZQD9MACDMP4gSAHvav8gA4V4AqEFAyYAuU4AjDAC-n4AnwdioQEKtBcB6lxQswFkZAnHFgKocjPfBP9fAMgGAIIF_y0ExBoAlAsDjwX-OiIDDP89Ad8HYGwJ1xX_N078ThzwKH_cGTmAAgChCwqwAgCGH1XMKFnNAQmkRVfFDx3-SgB5A84CCakVAIcIXdkoaO8BIfcX_zMAkSr_OQDgD_44OQDaWwDQMP85Hf0PAMF0_TJhOAn7MP4yORmRSwbfAgnSFQCkeB2lJAH_WgWHW_1yZXcA9gL8c3BybwDOBf50eRL6WgCzJAOCPgKffwDDJAHBPAQqBLY6-0NPVVBPAd0GBRD9QmFzA9sBAIAC_jgwAM1mAbUrBRUCqj0BoAf5TkNMQUlNRQGmBwD9PvtkdWN0TACSAf9MAPdJAZQ8-0hPVEVMAbEH9XNlZFBsYXRmb3JtARPsNSxPTkxJTkUsQU5EUk9JRCxJT1NkvwcJ5hUC1j1_6AEH4AL7NzEzNDkAm1AvuAIAtAX_SQL0AQ7ZAgjYAgTvAmCHAv9dAJY_AMcn_1QAhAIJ4wL-OX0\u0026ac=b\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json\r\ncontent-length: 66\r\ncache-control: private, no-store, no-cache, no-cache=Set-Cookie, proxy-revalidate\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\npragma: no-cache\r\nx-content-type-options: nosniff\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List\r\nx-forwarded-for: 91.90.42.154\r\naccess-control-max-age: 300\r\np3p: CP=CUR ADM OUR NOR STA NID\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\ndate: Sun, 07 Dec 2025 03:37:37 GMT\r\nalt-svc: h3=\":443\"; ma=93600\r\nset-cookie: uid=RHMZE/ARHtNWOn+gZxUeig==; Max-Age=63072000; Expires=Tue, 07 Dec 2027 03:37:37 GMT; Path=/\nsuid=RHMZE/ARHtNWOn+gZxUeig==; Max-Age=63072000; Expires=Tue, 07 Dec 2027 03:37:37 GMT; Path=/; Secure; SameSite=None\r\nquic-version: 0x00000001\r\nserver-timing: cdn-cache; desc=MISS, edge; dur=1, origin; dur=211\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: MISS\r\nunique-request-id: 36124a04\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":66,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f5b69160d3d7f33861330368a97efebe","sha1":"9b3cbafa5db75b51af48e09df2dafc55e62438f7","sha256":"52eb16de3859c18cf36075d5a6e2971d9dbece2a87c11e1602cf8f6a2ffc9551","sha512":"8e1ce68c7fc007fbbd9378f8e25e2e78e9f1624a46aa6c4a07b68182a5b1162e41a0a4160440246a399d27e59d5e87dceb8dc5e968f3dd7a0dd91ab0c373ef04","ssdeep":"","tlshash":"43a002411205e87a0b651677241ad951ebf877898c56d145540e885c4a21c9c669b244","first_seen":"2025-12-07T03:38:26.094735Z","last_seen":"2025-12-07T03:38:26.094735Z","times_seen":1,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/locale/v3/100014416/en-XX.js?etagc=d93b35114b49c2175189e0778fbdb08d","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:32.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /locale/v3/100014416/en-XX.js?etagc=d93b35114b49c2175189e0778fbdb08d HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nx-ares-server: r100013666-21038164-4lxdk@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: Q1ZEXHFE35SMC2MY\r\netag: W/\"d93b35114b49c2175189e0778fbdb08d\"\r\nlast-modified: Mon, 01 Dec 2025 03:51:48 GMT\r\nx-ares-raw-buffer-size: 33230\r\nx-backend-latency: 0.020\r\ncontent-encoding: br\r\nx-varnish: 83050822\r\naccept-ranges: bytes\r\ncontent-length: 8144\r\ncache-control: max-age=4666456\r\nexpires: Fri, 30 Jan 2026 03:51:48 GMT\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a21d\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":33230,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (28223)","md5":"d93b35114b49c2175189e0778fbdb08d","sha1":"3e13b5f6ce5a0dae1f85699c42d9d30f9fc41568","sha256":"f96343d837290a4cd686396a7ec8449cdff9eb6b69c215d1fa3a14660f80c1c1","sha512":"8496e1334dc067859877e6fb14ae5d585709659719f6edcb9fdfdd59919b70be279a41b971a11af69966e4aec56e239f22d25f7c54bcebd6168486f2079f1ab8","ssdeep":"384:HEe1a79Ui6loJ3KX2inuPv5ZP7hJc6/G0LOcARrdtZhc78DnTn+U6oG4voXbVRCQ:yhUi9dPH8OR6ZTtZq7k6U6uQXbVRz7b","tlshash":"23e2b549ebf82ca77d530592fd35e12e329c286a5254889b7cfec82bd7d034456231de","first_seen":"2025-12-01T06:08:30.087845Z","last_seen":"2025-12-11T10:11:07.83065Z","times_seen":163,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":78,"dns":0,"connect":0,"send":0,"wait":54,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/online-home/onlineRecommendHotels.70dc444a65011c7ca0578712bac02499.css","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:32.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /modules/ibu/online-home/onlineRecommendHotels.70dc444a65011c7ca0578712bac02499.css HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-ares-server: r100013666-21038164-xtkhm@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: 557B8QQE8A48Q2DC\r\netag: W/\"70dc444a65011c7ca0578712bac02499\"\r\nlast-modified: Thu, 22 May 2025 10:57:48 GMT\r\nx-ares-raw-buffer-size: 14040\r\nx-backend-latency: 0.020\r\ncontent-encoding: gzip\r\nx-varnish: 98877605\r\naccept-ranges: bytes\r\ncontent-length: 3720\r\ncache-control: max-age=1541086\r\nexpires: Wed, 24 Dec 2025 23:42:18 GMT\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a23c\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":14040,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (14040), with no line terminators","md5":"70dc444a65011c7ca0578712bac02499","sha1":"7ca5fbd52a15d81c4a60362e25971d86cc08ab62","sha256":"faee68d068be74efd2f027e30c41539ea9c66f6b3dd6b3a9ef987764dae2d49e","sha512":"3c91a3e76072c2b039308ab93812487a59d1af44dada5d257552f793d4986348f5df1a0bf2bc0fd46993c28df27b2a393e84420edefc700a79c8f3e8d782a9c4","ssdeep":"384:3oiy+4mhpXyFiC+Bi3oWw+s33kEpvpoLa5:xpCFizQ+","tlshash":"70524402bb563a5f601011336ce56ecc9a24b37bf3e1edd7f948ee68c644106977262e","first_seen":"2025-06-03T22:29:37.394341Z","last_seen":"2025-12-17T08:17:11.336157Z","times_seen":1579,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":78,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/online-home/onlineGotop.d862412ff5b5e88b8a50c8750bdb34f9.js","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:32.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /modules/ibu/online-home/onlineGotop.d862412ff5b5e88b8a50c8750bdb34f9.js HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 110559\r\nx-ares-server: r100013666-21038164-zctqw@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: MHDKBZGZBPXHSZSE\r\netag: W/\"d862412ff5b5e88b8a50c8750bdb34f9\"\r\nlast-modified: Wed, 03 Dec 2025 07:34:19 GMT\r\nx-ares-raw-buffer-size: 469869\r\nx-backend-latency: 0.080\r\ncontent-encoding: br\r\nx-varnish: 91850345 91623010\r\naccept-ranges: bytes\r\ncache-control: max-age=4852674\r\nexpires: Sun, 01 Feb 2026 07:35:26 GMT\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a248\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":469869,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d862412ff5b5e88b8a50c8750bdb34f9","sha1":"fcec2ef5b26d6c338437ab70ebd986d82b11b4c7","sha256":"a73956cb25c8c11995dd8c72dc767838dd0edace80de2f1e2ea6dbcfd7d33c83","sha512":"533a2bca770bda5a8d533196904710b3c5b30cf9eb2f3f8ddda9897f3e3b3399c298866a3e719899b3846e26f4e3475c648b016d159ef2d152b5bf381b2747b1","ssdeep":"6144:FjrIOnjPYICPoMpVfWBjhizT0fQSwn1zBKTIo5ZEJFvw5:Fjkui30fQln1EhZOvw5","tlshash":"02a41a59b151743906d6406a902f150bf3362a2d346ac45cb368e4efbcbcece317ab79","first_seen":"2025-12-03T08:08:10.027919Z","last_seen":"2025-12-08T09:12:13.10738Z","times_seen":101,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":78,"dns":0,"connect":0,"send":0,"wait":45,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webresource.tripcdn.com/ares2/risk/ubtrms/*/default/rms.js?v=2025127","fqdn":"webresource.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:34.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"GET /ares2/risk/ubtrms/*/default/rms.js?v=2025127 HTTP/1.1\r\nHost: webresource.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 173\r\nx-ares-server: r100013666-21027498-xpfcw@SHARB\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nx-ares-source: aliyun\r\nx-ares-request-id: 69340D949E40DA3037B540EA\r\netag: W/\"a3c4a6905bae26dfa2b9cb3ffea5a86a\"\r\nlast-modified: Sat, 06 Dec 2025 11:03:48 GMT\r\nx-ares-raw-buffer-size: 353\r\nx-backend-latency: 0.015\r\ncontent-encoding: br\r\nx-varnish: 562102199 561974111\r\naccept-ranges: bytes\r\ncache-control: max-age=5135040\r\nexpires: Wed, 04 Feb 2026 14:01:35 GMT\r\ndate: Sun, 07 Dec 2025 03:37:35 GMT\r\nalt-svc: h3=\":443\"; ma=93600\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 361247a0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":353,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (353), with no line terminators","md5":"a3c4a6905bae26dfa2b9cb3ffea5a86a","sha1":"2fda961fa045ce0d40cf4fd3725ed44a6db051a4","sha256":"791d8ce3f0202f65a649c752c9f8e6500df4550306276af72a51d3d5c69e6a14","sha512":"498ad62666616889ffa1197adc61c4313495301350aaf10f61a73d4e7358725f5303085047c30e52d38e66e1db9e5694ffee08d221eb227692d3235eed0ef5dd","ssdeep":"","tlshash":"66e07d0d3c55d8244ba2307aa17fe90872262ab49801c040e0dbccc83d38fc7e80ce8c","first_seen":"2025-11-25T14:10:16.227466Z","last_seen":"2025-12-30T10:55:05.314828Z","times_seen":332,"resource_available":true,"data":null}},"time_used":419,"timings":{"blocked":406,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/locale/v3/6002/en-XX.js?etagc=2a3a8fc84656d6a0da168f4594a80095","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:32.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /locale/v3/6002/en-XX.js?etagc=2a3a8fc84656d6a0da168f4594a80095 HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nx-ares-server: r100013666-91049052-xllk5@SGP-ALI\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aliyun\r\nx-ares-request-id: 691A81F54D7A27333793C2BC\r\netag: W/\"2a3a8fc84656d6a0da168f4594a80095\"\r\nlast-modified: Mon, 17 Nov 2025 02:01:25 GMT\r\nx-ares-raw-buffer-size: 37876\r\nx-backend-latency: 0.018\r\ncontent-encoding: br\r\nx-varnish: 89065906\r\nx-device: U R iPhone\r\naccept-ranges: bytes\r\ncontent-length: 5728\r\ncache-control: max-age=3450233\r\nexpires: Fri, 16 Jan 2026 02:01:25 GMT\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a205\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":37876,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (36763)","md5":"2a3a8fc84656d6a0da168f4594a80095","sha1":"71b8d16fa06812f8c2aeec4fd33cc53f6026d805","sha256":"d04ffbe82103496a8736fd9944c7b24c00984a1efe857c7afcbdcb2cb4676082","sha512":"4b919431d0936b10ac8c55ef7699f7ff0bd1bc797f671ee403fd2d8aae04672c33f9f7be7c11f33114693b67d22a7aed46c9c0e1691a76b4a8ae925070bd2dec","ssdeep":"768:ijYESXJn/fOGelJAACNKNm5k4N/i1yhpc2ULj4TIt+UXT7Vl2qTDL:J2Tmg6/tqXjMs+UXTT","tlshash":"2a03452a72c102f4e3f74215f850984776a16a78bcc9278e663ec47b4fd5a0cbdd8d62","first_seen":"2025-11-17T02:33:01.956042Z","last_seen":"2025-12-15T02:36:48.296325Z","times_seen":504,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":111,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/locale/v3/6001/en-XX.js?etagc=a924a949b52b7efe31fb9abda03c329f","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:32.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /locale/v3/6001/en-XX.js?etagc=a924a949b52b7efe31fb9abda03c329f HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nx-ares-server: r100013666-21038164-fglz4@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: X5VEA5PXMQKGE8MW\r\netag: W/\"a924a949b52b7efe31fb9abda03c329f\"\r\nlast-modified: Fri, 19 Sep 2025 19:11:01 GMT\r\nx-ares-raw-buffer-size: 1322\r\nx-backend-latency: 0.020\r\ncontent-encoding: gzip\r\nx-varnish: 3540030\r\nx-device: U R Android\r\naccept-ranges: bytes\r\ncontent-length: 490\r\ncache-control: max-age=2709376\r\nexpires: Wed, 07 Jan 2026 12:13:48 GMT\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a204\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":1322,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"a924a949b52b7efe31fb9abda03c329f","sha1":"7e5af9abd80efbd7de42d9786575d7b623d67030","sha256":"fc010ed3a9c5ac8707e1ea983af2568c30461bb7943fcc4e243eb8e9f04a3467","sha512":"bfc91d5871a7e3e3e898101ab4057954b048c8af5a0e4301216517da9e0d1b6dc7500a0aeb6cedc385d9da6b8c8c3da820c2fcbc68fa00b866a83a79d5fb00ca","ssdeep":"","tlshash":"2921af18ac322472e8b3e5faa22f575821344b1304950299bac52add79520e760f3ed1","first_seen":"2025-09-04T14:38:39.147525Z","last_seen":"2026-04-15T17:38:47.552084Z","times_seen":2512,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":112,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/online-home/onlineSecondEntry.ef96293b184e4ac840928e77c45394da.js","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:35.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /modules/ibu/online-home/onlineSecondEntry.ef96293b184e4ac840928e77c45394da.js HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nx-ares-server: r100013666-91049052-xrhz8@SGP-ALI\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aliyun\r\nx-ares-request-id: 692FE7BECC86F138321E25C6\r\netag: W/\"ef96293b184e4ac840928e77c45394da\"\r\nlast-modified: Wed, 03 Dec 2025 07:33:18 GMT\r\nx-ares-raw-buffer-size: 140819\r\nx-backend-latency: 0.014\r\ncontent-encoding: br\r\nx-varnish: 139035418\r\naccept-ranges: bytes\r\ncontent-length: 40450\r\ncache-control: max-age=4852544\r\nexpires: Sun, 01 Feb 2026 07:33:19 GMT\r\ndate: Sun, 07 Dec 2025 03:37:35 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nquic-version: 0x00000001\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a66f\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":140819,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ef96293b184e4ac840928e77c45394da","sha1":"2d661492ae0b1299928b451758c81fec3555a9df","sha256":"42c8f828773a36cc2a7d2632b79c0c7a05f546bc399ee69c36ded24ca62b963f","sha512":"4056caef726c4f00b967096362b7776faffaeabf41d33cdc11ae9d74cfb01318e55bbe3983a939479cfed0fbad308a3ba839ed2402c993e6d3f31adcc3cc3c82","ssdeep":"1536:2R6UDqnMBZfBERgvSeN6shpgTdmnVK4v/OsEMP6Kadrm+yXNcvqcYKrCfPg7qeQ:ZUWnozEvdigTkk6OsEMPGdruPE+Hgi","tlshash":"e5d31b89b191f4aa03e350ba403f250af37a2e55781dc820e150d8d97cb9b9f9277f6d","first_seen":"2025-12-03T08:08:10.11161Z","last_seen":"2025-12-08T09:12:13.087402Z","times_seen":101,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/m/i18n/ReportRecentUsedKey.html","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:39.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"POST /m/i18n/ReportRecentUsedKey.html HTTP/1.1\r\nHost: www.trip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json;charset=utf-8\r\nx-shark-url: https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003\r\nx-shark-cookie: Union=AllianceID=6015822\u0026SID=168798533\u0026OUID=ctag.hash.ccjJjXXJOpYl\u0026Expires=1767670651990\u0026createtime=1765078651; ibu_online_jump_site_result={\"isShowSuggestion\":false}; ibusite=EN; ibugroup=trip; ibulanguage=EN; ibulocale=en_xx; cookiePricesDisplayed=USD; ibu_cookie_strict=0; _abtest_userid=e7b40962-e94a-4116-9bcf-af1ceddea7af; _tp_search_latest_channel_name=hotels; _bfa=1.1765078651988.0c55yqsxjtpp.1.1765078653998.1765078653998.1.1.10320668088; UBT_VID=1765078651988.0c55yqsxjtpp; _gcl_au=1.1.1944475785.1765078655; GUID=09034023113792808361; _fwb=202fgWTgpaFl4ko2G4nljfO.1765078656039; wcs_bt=s_33fb334966e9:1765078656\r\nContent-Length: 11515\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003\r\nCookie: Union=AllianceID=6015822\u0026SID=168798533\u0026OUID=ctag.hash.ccjJjXXJOpYl\u0026Expires=1767670651990\u0026createtime=1765078651; UBT_VID=1765078651988.0c55yqsxjtpp; ibu_online_jump_site_result={\"isShowSuggestion\":false}; ibusite=EN; ibugroup=trip; ibulanguage=EN; ibulocale=en_xx; cookiePricesDisplayed=USD; ibu_cookie_strict=0; _abtest_userid=e7b40962-e94a-4116-9bcf-af1ceddea7af; _tp_search_latest_channel_name=hotels; _bfa=1.1765078651988.0c55yqsxjtpp.1.1765078653998.1765078653998.1.1.10320668088; _gcl_au=1.1.1944475785.1765078655; GUID=09034023113792808361; _fwb=202fgWTgpaFl4ko2G4nljfO.1765078656039; wcs_bt=s_33fb334966e9:1765078656; _RGUID=922ec99a-94d6-4417-b603-645b05c081ba\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":11515,"data":"[\"33000032|en-XX|key_a11y_skip_main_content|10320668088\",\"330153|en-XX|key_index_change_language_tip|10320668088\",\"33000032|en-XX|aria_close_modal|10320668088\",\"3828|en-XX|key_online_pwa_guide_subtitle|10320668088\",\"33000001|en-XX|aria_toggle_button|10320668088\",\"33000001|en-XX|aria_selector|10320668088\",\"33000001|en-XX|PageHead_SiteAllTxt|10320668088\",\"33000001|en-XX|PageHead_CurrencyAllTxt|10320668088\",\"33000001|en-XX|aria_close_modal|10320668088\",\"33000001|en-XX|Key_Account_Coins_Tips|10320668088\",\"33000001|en-XX|aria_coins|10320668088\",\"33000001|en-XX|online_header_default_username|10320668088\",\"33000001|en-XX|ButtonText_LoginUser_Signout|10320668088\",\"100014416|en-XX|home.slogon.desc|10320668088\",\"100014416|en-XX|online_home_slogan|10320668088\",\"100014416|en-XX|key.notifyInfo.confirm|10320668088\",\"100014416|en-XX|key_promotion_banner_title_key|10320668088\",\"100014416|en-XX|ads_marketing_image|10320668088\",\"330153|en-XX|ibu_online_homepage_coupon_title1|10320668088\",\"330153|en-XX|ibu_online_homepage_coupon_button1|10320668088\",\"330153|en-XX|ibu_online_homepage_coupon_title2|10320668088\",\"330153|en-XX|ibu_online_homepage_coupon_button2|10320668088\",\"100014113|en-XX|SEO_FlightStatus_Coupon_PromoCodeDescription|10320668088\",\"100014113|en-XX|SEO_FlightStatus_Coupon_Leftnumber|10320668088\",\"100014113|en-XX|SEO_FlightStatus_Coupon_Title|10320668088\",\"100014113|en-XX|SEO_FlightStatus_Coupon_CopyPromoCode|10320668088\",\"100014113|en-XX|SEO_FlightStatus_Coupon_HotelListPage|10320668088\",\"100014113|en-XX|SEO_FlightStatus_Coupon_BookingPage|10320668088\",\"100014113|en-XX|SEO_FlightStatus_Coupon_Description1|10320668088\",\"100014113|en-XX|SEO_FlightStatus_Coupon_Description2|10320668088\",\"100014113|en-XX|SEO_FlightStatus_Coupon_Description3|10320668088\",\"100014113|en-XX|SEO_FlightStatus_Coupon_TC|10320668088\",\"100014113|en-XX|SEO_FlightStatus_Coupon_Toast|10320668088\",\"33000002|en-XX|ButtonText_Right_Reserved|10320668088\",\"33000002|en-XX|ButtonText_CustomerServiceHelp|10320668088\",\"33000002|en-XX|ButtonText_CustomerService|10320668088\",\"33000002|en-XX|ButtonText_ServiceUSP|10320668088\",\"33000002|en-XX|ButtonText_AboutUs|10320668088\",\"33000002|en-XX|ButtonText_NewsRoom|10320668088\",\"33000002|en-XX|ButtonText_Career|10320668088\",\"33000002|en-XX|LinkButtonText_TermsAndCondition|10320668088\",\"33000002|en-XX|ButtonText_PrivacyPolicy|10320668088\",\"33000002|en-XX|ButtonText_Accessibility_Statement|10320668088\",\"33000002|en-XX|ButtonText_TripGroup|10320668088\",\"33000002|en-XX|ButtonText_InvestorRelations|10320668088\",\"33000002|en-XX|ButtonText_TripPlus|10320668088\",\"33000002|en-XX|ButtonText_Affiliate_trip|10320668088\",\"33000002|en-XX|LinkButtonText_Listyourhotel|10320668088\",\"33000002|en-XX|LinkButtonText_ListHotelCities|10320668088\",\"33000002|en-XX|LinkButtonText_VBooking|10320668088\",\"33000002|en-XX|ButtonText_Security|10320668088\",\"33000002|en-XX|ButtonText_Contactus|10320668088\",\"33000002|en-XX|ButtonText_Company|10320668088\",\"33000002|en-XX|ButtonText_More|10320668088\",\"33000002|en-XX|key_online_footer_payment_methods|10320668088\",\"33000002|en-XX|key_online_footer_business_partners|10320668088\",\"330153|en-XX|LabelText_Home_SearchBox_Hotel|10320668088\",\"330153|en-XX|LabelText_Home_SearchBox_Flight|10320668088\",\"330153|en-XX|LabelText_Home_SearchBox_Train|10320668088\",\"330153|en-XX|Car_Hire|10320668088\",\"330153|en-XX|Airport_Transfer|10320668088\",\"330153|en-XX|key_cars|10320668088\",\"330153|en-XX|LabelText_Home_SearchBox_TTD|10320668088\",\"330153|en-XX|LabelText_Home_SearchBox_Bundle|10320668088\",\"100015463|en-XX|key.search_destinations_and_attractions_hotel|10320668088\",\"100018131|en-XX|key.hotel.online.homepage.checkin|10320668088\",\"100018131|en-XX|key.hotel.online.homepage.checkout|10320668088\",\"100018131|en-XX|key.hotel.common.night|10320668088\",\"100018131|en-XX|key.hotel.common.night.pluralsuffix.other|10320668088\",\"100018131|en-XX|key.hotel.detail.nodate.select.date|10320668088\",\"100018131|en-XX|key.hotel.online.homepage.destination|10320668088\",\"100018131|en-XX|key.hotel.online.homepage.destination.input|10320668088\",\"100018131|en-XX|key.hotel.online.homepage.recent.search|10320668088\",\"100018131|en-XX|key.hotel.online.homepage.searchbox.rooms|10320668088\",\"100018131|en-XX|key.hotel.searchbox.echo.adult|10320668088\",\"100018131|en-XX|key.hotel.searchbox.echo.child|10320668088\",\"100018131|en-XX|key.hotel.association.hot_destination|10320668088\",\"100018131|en-XX|key.hotel.online.homepage.recent.search.no.result|10320668088\",\"100018131|en-XX|key.hotel.online.homepage.destination.input.error|10320668088\",\"100018131|en-XX|key.88801001.searchbar.default.content|10320668088\",\"100018131|en-XX|key.hotel.online.homepage.rooms.guests|10320668088\",\"100018131|en-XX|key.88801001.WAP.select.layer.title.room|10320668088\",\"100018131|en-XX|key.88801001.WAP.select.layer.title.guest|10320668088\",\"100018131|en-XX|key.hotel.online.homepage.searchbox.rooms.pluralsuffix.few|10320668088\",\"100018131|en-XX|key.hotel.online.homepage.searchbox.rooms.pluralsuffix.many|10320668088\",\"100018131|en-XX|key.hotel.online.homepage.searchbox.rooms.pluralsuffix.other|10320668088\",\"100018131|en-XX|key.hotel.searchbox.echo.adult.pluralsuffix.other|10320668088\",\"100018131|en-XX|key.hotel.searchbox.echo.child.pluralsuffix.other|10320668088\",\"100018131|en-XX|key.hotel.online.homepage.rooms|10320668088\",\"100018131|en-XX|key.hotel.online.homepage.adult|10320668088\",\"100018131|en-XX|key.hotel.online.homepage.adult.year|10320668088\",\"100018131|en-XX|key.hotel.online.homepage.child|10320668088\",\"100018131|en-XX|key.hotel.online.homepage.child.year|10320668088\",\"100018131|en-XX|key.hotel.metapage.children.most.toast|10320668088\",\"100018131|en-XX|key.hotel.searchpage.child.note|10320668088\",\"100018131|en-XX|key.hotel.online.homepage.child.subtitle|10320668088\",\"100018131|en-XX|key.hotel.online.homepage.rooms.guests.done|10320668088\",\"100018131|en-XX|key.hotel.searchpage.child.age|10320668088\",\"100018131|en-XX|key.hotel.searchpage.child.age.pluralsuffix.other|10320668088\",\"100018131|en-XX|key.88801001.hotel.list.search.box.add.room.tip|10320668088\",\"100018131|en-XX|key.88801001.WAP.select.layer.child.selectage|10320668088\",\"100018131|en-XX|key.88801001.WAP.select.layer.child.ageneed|10320668088\",\"100018131|en-XX|key.hotel.detail.search.button.update|10320668088\",\"100018131|en-XX|key.hotel.detail.search.button.search|10320668088\",\"100018131|en-XX|key.88801001.hotelsearch.change|10320668088\",\"100018131|en-XX|key.88801001.searchbar.search.button.update.search|10320668088\",\"33000018|en-XX|Home_GoTop|10320668088\",\"330153|en-XX|key.calendar.departure.hotel|10320668088\",\"330153|en-XX|key.calender.return.hotel|10320668088\",\"330153|en-XX|night|10320668088\",\"330153|en-XX|overRange|10320668088\",\"330153|en-XX|new_search_local_time_ctrl|10320668088\",\"330153|en-XX|key.calendar.hover|10320668088\",\"33000018|en-XX|Home_Chat|10320668088\",\"100052930|en-XX|key.tripgenie.history.loading|10320668088\",\"100052930|en-XX|key.tripgenie.integrated.history|10320668088\",\"100052930|en-XX|key.tripgenie.saved.title|10320668088\",\"100052930|en-XX|key.tripgen.button.userterms|10320668088\",\"100052930|en-XX|key.tripgen.button.newchat|10320668088\",\"100052930|en-XX|key.tripgenie.personalized.intro1|10320668088\",\"100052930|en-XX|key.tripgenie.eaa.tg|10320668088\",\"100052930|en-XX|key.tripgen.cs.selectbooking|10320668088\",\"100052930|en-XX|key.tripgen.feedbackpage.title|10320668088\",\"100052930|en-XX|key.tripgenie.eaa.moreopt|10320668088\",\"100052930|en-XX|key.tripgenie.eaa.closechat|10320668088\",\"100052930|en-XX|key.tripgen.askmore.inputguide|10320668088\",\"100052930|en-XX|key.tripgen.welcomepage.askanything|10320668088\",\"100052930|en-XX|key.tripgen.wordselect.pagesummary.button|10320668088\",\"100052930|en-XX|key.tripgenie.eaa.sendmsg|10320668088\",\"100052930|en-XX|key.tripgenie.deepthink.modename.deepthink|10320668088\",\"100052930|en-XX|key.tripgenie.deepthink.modename.standard|10320668088\",\"100052930|en-XX|key.tripgenie.deepthink.modedescription.deepthink|10320668088\",\"100052930|en-XX|key.tripgenie.deepthink.modedescription.standard|10320668088\",\"100052930|en-XX|key.tripgenie.deepthink.promptcopy.online|10320668088\",\"33000001|en-XX|ButtonText_Hotel|10320668088\",\"33000001|en-XX|ButtonText_Flights|10320668088\",\"33000001|en-XX|ButtonText_Trains|10320668088\",\"33000001|en-XX|ButtonText_Carhire|10320668088\",\"33000001|en-XX|ButtonText_AirportTransfers|10320668088\",\"33000001|en-XX|ButtonText_Cars|10320668088\",\"33000001|en-XX|ButtonText_TTD|10320668088\",\"33000001|en-XX|ButtonText_eSim|10320668088\",\"33000001|en-XX|ButtonText_Bundle|10320668088\",\"33000001|en-XX|ButtonText_PrivateTours|10320668088\",\"33000001|en-XX|ButtonText_GroupTours|10320668088\",\"33000001|en-XX|ButtonText_TripPlanner|10320668088\",\"33000001|en-XX|ButtonText_TravelGuide|10320668088\",\"33000001|en-XX|ButtonText_TripBest|10320668088\",\"33000001|en-XX|ButtonText_TravelInspiration|10320668088\",\"33000001|en-XX|ButtonText_Map|10320668088\",\"33000001|en-XX|ButtonText_Deals|10320668088\",\"33000001|en-XX|ButtonText_TripRewards|10320668088\",\"33000001|en-XX|key_app|10320668088\",\"33000001|en-XX|V3_Profile_MyOrders|10320668088\",\"33000001|en-XX|V3_Profile_Points|10320668088\",\"33000001|en-XX|V3_Promo_Code|10320668088\",\"33000001|en-XX|V3_Text_MembInfo|10320668088\",\"33000001|en-XX|ButtonText_Hotel_Collection|10320668088\",\"33000001|en-XX|V3_Profile_Moments|10320668088\",\"33000001|en-XX|Key_Flight_Price_Alerts|10320668088\",\"33000001|en-XX|Key_Entrance_Title|10320668088\",\"33000001|en-XX|key_header_entry|10320668088\",\"33000001|en-XX|Help|10320668088\",\"33000001|en-XX|ButtonText_SearchBookings|10320668088\",\"33000001|en-XX|ButtonText_SigninOrRegister|10320668088\",\"33000001|en-XX|Tip_New|10320668088\",\"100014416|en-XX|key.tripui.swiper.nextpage|10320668088\",\"33000033|en-XX|key_new_guest_title|10320668088\",\"33000033|en-XX|key_new_guest_coupon_notice|10320668088\",\"33000033|en-XX|online_home_gift_5|10320668088\",\"33000033|en-XX|ButtonText_Hotel|10320668088\",\"33000033|en-XX|online_home_gift_6|10320668088\",\"33000033|en-XX|key_new_guest_eu_trains|10320668088\",\"33000033|en-XX|ButtonText_TTD|10320668088\",\"33000033|en-XX|ButtonText_AirportTransfers|10320668088\",\"33000033|en-XX|ButtonText_Carhire|10320668088\",\"100052930|en-XX|key.tripgen.icon.guiding.new|10320668088\",\"100014416|en-XX|ibu_pub_online_dp_more|10320668088\",\"100014416|en-XX|ibu_pub_online_dp_poi_review_count.pluralsuffix.other|10320668088\",\"100014416|en-XX|ibu_pub_online_dp_aria_poi_score|10320668088\",\"100014416|en-XX|key_add_collect_list|10320668088\",\"330153|en-XX|key_unlogin_popup_title|10320668088\",\"330153|en-XX|key_unlogin_popup_btn|10320668088\",\"330153|en-XX|key.mkt.agc.online.ad.adu.amount|10320668088\",\"330153|en-XX|key.mkt.agc.online.ad.downloads|10320668088\",\"330153|en-XX|key.mkt.agc.online.ad.downloads.amount|10320668088\",\"330153|en-XX|key.mkt.agc.online.ad.dau|10320668088\",\"330153|en-XX|key.mkt.agc.online.ad.rating.figure|10320668088\",\"330153|en-XX|key.mkt.agc.online.ad.appstore.rating|10320668088\",\"330153|en-XX|key.online.ad.eaa.data.reading|10320668088\",\"330153|en-XX|key.online.ad.eaa.asa.reading|10320668088\",\"330153|en-XX|key.online.ad.eaa.google.reading|10320668088\",\"330153|en-XX|key.mkt.agc.online.qrcode|10320668088\",\"330153|en-XX|key.mkt.agc.online.maintitle.2|10320668088\",\"330153|en-XX|key.mkt.agc.online.usp.short.1|10320668088\",\"330153|en-XX|key.mkt.agc.online.usp.short.2|10320668088\",\"100014416|en-XX|ibu_pub_online_dp_trans_price|10320668088\",\"330153|en-XX|key.online.vertical.eaa.qrcode.reading|10320668088\"]"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 2\r\ncache-control: no-store\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-headers: host,connection,content-length,x-real-ip,x-ctrip-isssl,user-agent,accept,accept-language,content-type,x-shark-url,x-shark-cookie,origin,dnt,referer,sec-fetch-dest,sec-fetch-mode,sec-fetch-site,pragma,cookie,cdn-loop,x-akamai-config-log-detail,accept-encoding,akamai-origin-hop,x-forwarded-for,true-client-ip,cache-control,x-via,x-akamai-request-id,x-ctx-externalclientip,x-ctx-ucs-vid,x-ctx-ucs-cid,x-ctx-trace-mark,x-ctx-request-from,access-control-allow-headers,cookieorigin,access-control-request-headers,access-control-request-method,authorization,x-requested-with,x-auth-token,x-ctrip-canary-req,x-ctx-canaryreq,x-ctx-canarysrc,x-ctx-canaryidc,x-cat-trace-mode\r\naccess-control-allow-methods: GET,HEAD,PUT,POST,OPTIONS,DELETE,PATCH\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-readtime: 1\r\nx-backend-latency: 0.001\r\nx-trip-region: de\r\ndate: Sun, 07 Dec 2025 03:37:39 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver-timing: cdn-cache; desc=MISS, edge; dur=25, origin; dur=263\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: MISS\r\nunique-request-id: 36124cab\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-04-15T20:36:05.367773Z","times_seen":395948,"resource_available":true,"data":null}},"time_used":300,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":300,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/ibu-public-component-umd/style.a1d703e220b8c5084c7e71e5af38b81c.css","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:32.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /modules/ibu/ibu-public-component-umd/style.a1d703e220b8c5084c7e71e5af38b81c.css HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ncontent-length: 318\r\nx-ares-server: r100013666-21038164-f2m7s@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: PF2YBC7GZN686A61\r\netag: W/\"a1d703e220b8c5084c7e71e5af38b81c\"\r\nlast-modified: Thu, 02 Oct 2025 13:27:01 GMT\r\nx-ares-raw-buffer-size: 1384\r\nx-backend-latency: 0.020\r\ncontent-encoding: br\r\nx-varnish: 19055492\r\naccept-ranges: bytes\r\ncache-control: max-age=1937928\r\nexpires: Mon, 29 Dec 2025 13:56:20 GMT\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a254\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":1384,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1384), with no line terminators","md5":"a1d703e220b8c5084c7e71e5af38b81c","sha1":"294b38067cd96101754c1d784877a26876f9e7d9","sha256":"ef155fe607b97e74d9eb33b10aa5c6708c09cde3d7653b257795cfe9037b4881","sha512":"25ade16d2184a5108bdf7507ff8440637b3bb8132362c33b54331f7f06c8bb5c7e60f4c4909d79eb5243374c6f66c6097626557e6c5af37fc60d602ac6bb097e","ssdeep":"","tlshash":"8121ec2db12b291cb3e1c7349769b2566872873340416abdc644f2b893c534b3ede607","first_seen":"2024-05-18T10:55:38Z","last_seen":"2026-04-15T17:38:47.495898Z","times_seen":2972,"resource_available":false,"data":null}},"time_used":398,"timings":{"blocked":175,"dns":106,"connect":1,"send":0,"wait":26,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ubt-sgp.trip.com/bee/collect?metaSender=1.3.72\u0026contextTs=1765078654659\u0026vid=1765078651988.0c55yqsxjtpp\u0026sid=1\u0026pvId=1\u0026appId=100014416","fqdn":"ubt-sgp.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:34.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"OPTIONS /bee/collect?metaSender=1.3.72\u0026contextTs=1765078654659\u0026vid=1765078651988.0c55yqsxjtpp\u0026sid=1\u0026pvId=1\u0026appId=100014416 HTTP/1.1\r\nHost: ubt-sgp.trip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.trip.com/\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ncontent-type: text/plain; charset=UTF-8\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List\r\naccess-control-max-age: 300\r\np3p: CP=CUR ADM OUR NOR STA NID\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: Content-Type,content-type\r\ndate: Sun, 07 Dec 2025 03:37:34 GMT\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver-timing: cdn-cache; desc=MISS, edge; dur=1, origin; dur=245\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: MISS\r\nunique-request-id: 3612474e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T20:38:47.575438Z","times_seen":13797803,"resource_available":true,"data":null}},"time_used":331,"timings":{"blocked":39,"dns":20,"connect":1,"send":0,"wait":249,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/restapi/soa2/29624/clog","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:36.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"POST /restapi/soa2/29624/clog HTTP/1.1\r\nHost: www.trip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: multipart/form-data; boundary=---------------------------816198443900526554909600995\r\nContent-Length: 1328\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003\r\nCookie: Union=AllianceID=6015822\u0026SID=168798533\u0026OUID=ctag.hash.ccjJjXXJOpYl\u0026Expires=1767670651990\u0026createtime=1765078651; UBT_VID=1765078651988.0c55yqsxjtpp; ibu_online_jump_site_result={\"isShowSuggestion\":false}; ibusite=EN; ibugroup=trip; ibulanguage=EN; ibulocale=en_xx; cookiePricesDisplayed=USD; ibu_cookie_strict=0; _abtest_userid=e7b40962-e94a-4116-9bcf-af1ceddea7af; _tp_search_latest_channel_name=hotels; _bfa=1.1765078651988.0c55yqsxjtpp.1.1765078653998.1765078653998.1.1.10320668088; _gcl_au=1.1.1944475785.1765078655; GUID=09034023113792808361; _fwb=202fgWTgpaFl4ko2G4nljfO.1765078656039; wcs_bt=s_33fb334966e9:1765078656\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1328,"data":"-----------------------------816198443900526554909600995\r\nContent-Disposition: form-data; name=\"metric_name\"\r\n\r\nrun\r\n-----------------------------816198443900526554909600995\r\nContent-Disposition: form-data; name=\"metric_value\"\r\n\r\n{\"name\":\"gotop-tg-config\",\"Head\":{\"Group\":\"Trip\",\"Source\":\"ONLINE\",\"Version\":\"10000\",\"Locale\":\"en-XX\",\"Currency\":\"USD\",\"VID\":\"1765078651988.0c55yqsxjtpp\",\"SessionId\":\"1\",\"PvId\":\"1\"},\"localTime\":\"2025-12-07\"}\r\n-----------------------------816198443900526554909600995\r\nContent-Disposition: form-data; name=\"sub_name\"\r\n\r\nH5Gateway Request\r\n-----------------------------816198443900526554909600995\r\nContent-Disposition: form-data; name=\"page_url\"\r\n\r\nhttps://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003\r\n-----------------------------816198443900526554909600995\r\nContent-Disposition: form-data; name=\"locale\"\r\n\r\nen_xx\r\n-----------------------------816198443900526554909600995\r\nContent-Disposition: form-data; name=\"vid\"\r\n\r\n1765078651988.0c55yqsxjtpp\r\n-----------------------------816198443900526554909600995\r\nContent-Disposition: form-data; name=\"aid\"\r\n\r\n6015822\r\n-----------------------------816198443900526554909600995\r\nContent-Disposition: form-data; name=\"sid\"\r\n\r\n168798533\r\n-----------------------------816198443900526554909600995--\r\n"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json\r\ncontent-length: 2\r\nclogging_trace_id: 51623af4-6182-4447-9d0e-eaa4f0e40c1f\r\nrootmessageid: 100025527-0a98e189-490299-2457825\r\nx-cat-id: 100025527-0a98e189-490299-2457825\r\nx-cat-parent-id: 100025527-0a98e189-490299-2457815\r\nx-cat-root-id: 100025527-0a98e189-490299-2457815\r\nx-cat-root-url: http://cat.fx.sgp.tripws.com:80/cat/r/m/100025527-0a98e189-490299-2457815\r\nx-cat-server: cat.fx.sgp.tripws.com:80\r\nx-scf-executed-version: flt-es-tools-function-00004\r\nx-scf-request-id: 51623af4-6182-4447-9d0e-eaa4f0e40c1f\r\nx-envoy-upstream-service-time: 3\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-gate-root-id: 100025527-0a98e189-490299-2457815\r\nx-gate-region: SGP-ALI\r\nx-service-call: 0.01\r\naccess-control-expose-headers: RootMessageId, x-service-call, x-gate-region\r\nx-gate: ctrip-gate\r\nx-originating-url: https://www.trip.com/restapi/soa2/29624/clog\r\nx-trip-region: de\r\ndate: Sun, 07 Dec 2025 03:37:36 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver-timing: cdn-cache; desc=MISS, edge; dur=7, origin; dur=235\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: MISS\r\nunique-request-id: 36124997\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-04-15T20:36:05.367773Z","times_seen":395948,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/restapi/soa2/22015/getSceneConfig","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:35.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"POST /restapi/soa2/22015/getSceneConfig HTTP/1.1\r\nHost: www.trip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 193\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003\r\nCookie: Union=AllianceID=6015822\u0026SID=168798533\u0026OUID=ctag.hash.ccjJjXXJOpYl\u0026Expires=1767670651990\u0026createtime=1765078651; UBT_VID=1765078651988.0c55yqsxjtpp; ibu_online_jump_site_result={\"isShowSuggestion\":false}; ibusite=EN; ibugroup=trip; ibulanguage=EN; ibulocale=en_xx; cookiePricesDisplayed=USD; ibu_cookie_strict=0; _abtest_userid=e7b40962-e94a-4116-9bcf-af1ceddea7af; _tp_search_latest_channel_name=hotels; _bfa=1.1765078651988.0c55yqsxjtpp.1.1765078653998.1765078653998.1.1.10320668088\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":193,"data":"{\"head\":{\"cid\":\"\",\"cver\":\"\",\"extension\":[{\"name\":\"platform\",\"value\":\"online\"},{\"name\":\"vid\",\"value\":\"\"},{\"name\":\"ipollOnlineSdkVer\",\"value\":\"1.0.5\"}],\"appid\":\"37\"},\"locale\":\"en_xx\",\"pageId\":\"\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\nx-cat-server: cat.fx.sgp.tripws.com:80\r\nx-cat-root-id: 100025527-0a9a9553-490299-2456564\r\nx-cat-parent-id: 100025527-0a9a9553-490299-2456569\r\nx-cat-id: 100025527-0a2b640d-490299-1703095\r\nx-cat-root-url: http://cat.fx.sgp.tripws.com:80/cat/r/m/100025527-0a9a9553-490299-2456564\r\nclogging_trace_id: 2061494933545635019\r\nrootmessageid: 100025527-0a9a9553-490299-2456564\r\nservermessageid: 100025527-0a2b640d-490299-1703095\r\nvary: accept-encoding\r\ncontent-encoding: gzip\r\nx-gate-root-id: 100025527-0a9a9553-490299-2456564\r\nx-gate-region: SHARB\r\nx-service-call: 0.149\r\naccess-control-expose-headers: RootMessageId, x-service-call, x-gate-region\r\nx-gate: ctrip-gate\r\nx-originating-url: https://www.trip.com/restapi/soa2/22015/getSceneConfig\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-trip-region: SGP, de\r\ndate: Sun, 07 Dec 2025 03:37:35 GMT\r\ncontent-length: 4192\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver-timing: cdn-cache; desc=MISS, edge; dur=7, origin; dur=402\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: MISS\r\nunique-request-id: 361247b3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19701,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"71eb0befb03c746fe88208d1bd169948","sha1":"ef837f4a1d091a4ad815f13c3a7c38b49546ecfe","sha256":"97e63f61d83821f55675730d1227bc7146f6e1682e1526e7baf3a0b6f9bc7de6","sha512":"8964d30978c32e1d522713e6d518b6a6c9fca8a7bc5b58dac5fe1748b2934a157b19793998766eec806ba18bb638524d049398d5d70d1c3ae4c609718e34721d","ssdeep":"384:RfQmb3ZlU0M2Zf1fAvZL9uCZZV8o5ZycZ7tZk4xwZroURoiPu++ThiLu8swJNEba:9LPf5V0htzX00ihZoRYr87JV5If","tlshash":"8e92512d9225ebeb9f946d6e347a3c120184a0354fd5bf44919aca3f06d8f7c83a9313","first_seen":"2025-12-07T03:38:26.106824Z","last_seen":"2025-12-07T03:38:26.106824Z","times_seen":1,"resource_available":false,"data":null}},"time_used":451,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":451,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/online-home/442933c39a10b10dce021cb7ab870c64.442933c39a10b10dce021cb7ab870c64.woff2","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:36.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /modules/ibu/online-home/442933c39a10b10dce021cb7ab870c64.442933c39a10b10dce021cb7ab870c64.woff2 HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ak-s-cw.tripcdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: font/woff2\r\ncontent-length: 4576\r\nx-ares-server: r100013666-91049052-n567s@SGP-ALI\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aliyun\r\nx-ares-request-id: 6860AA90BE1ACD35357C7B60\r\netag: W/\"442933c39a10b10dce021cb7ab870c64\"\r\nlast-modified: Sun, 29 Jun 2025 02:53:04 GMT\r\nx-ares-raw-buffer-size: 4576\r\nx-backend-latency: 0.018\r\nx-varnish: 761386021\r\naccept-ranges: bytes\r\ncache-control: max-age=1436648\r\nexpires: Tue, 23 Dec 2025 18:41:44 GMT\r\ndate: Sun, 07 Dec 2025 03:37:36 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nquic-version: 0x00000001\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a828\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":4576,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 4576, version 1.0","md5":"442933c39a10b10dce021cb7ab870c64","sha1":"155f123ab373d9db72116f6b2787fa095ac8072b","sha256":"ea5f76d35364fcf3b0f77c7d01868062a41a1f344a00af35dd5fd27bd6dd8a1b","sha512":"4c050a6c69248e043736e6c410a4e8638cc3e76b72c9324f51f253219e2a14a5a3a8c578fa631f062c1a685ae0caaf19b4b159ba0f774dbabc9b783528944c44","ssdeep":"96:X0qE4EgD9JoYyrts97eGIauTuS6Ih+jouW2VF41ihugiHK/6vli/g:5E9gD9JdyBs97nIjTaIGou3VF40huthb","tlshash":"0391ae74279bc2e5cbb5213203c79d4014e9d9a42a1b63681871cf803e9a02ed2ad71c","first_seen":"2023-05-22T11:20:33Z","last_seen":"2026-04-15T17:38:47.549317Z","times_seen":3076,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/restapi/soa2/27501/getTripGeniePreferences?x-traceID=1765078651988.0c55yqsxjtpp-1765078656302-1406522267","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:36.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"POST /restapi/soa2/27501/getTripGeniePreferences?x-traceID=1765078651988.0c55yqsxjtpp-1765078656302-1406522267 HTTP/1.1\r\nHost: www.trip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlocale: en-XX\r\ncurrency: USD\r\nx-traceID: 1765078651988.0c55yqsxjtpp-1765078656302-1406522267\r\ntrip-trace-id: 1765078651988.0c55yqsxjtpp-1765078656302-1406522267\r\nContent-Type: application/json\r\nContent-Length: 182\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003\r\nCookie: Union=AllianceID=6015822\u0026SID=168798533\u0026OUID=ctag.hash.ccjJjXXJOpYl\u0026Expires=1767670651990\u0026createtime=1765078651; UBT_VID=1765078651988.0c55yqsxjtpp; ibu_online_jump_site_result={\"isShowSuggestion\":false}; ibusite=EN; ibugroup=trip; ibulanguage=EN; ibulocale=en_xx; cookiePricesDisplayed=USD; ibu_cookie_strict=0; _abtest_userid=e7b40962-e94a-4116-9bcf-af1ceddea7af; _tp_search_latest_channel_name=hotels; _bfa=1.1765078651988.0c55yqsxjtpp.1.1765078653998.1765078653998.1.1.10320668088; _gcl_au=1.1.1944475785.1765078655; GUID=09034023113792808361; _fwb=202fgWTgpaFl4ko2G4nljfO.1765078656039; wcs_bt=s_33fb334966e9:1765078656\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":182,"data":"{\"Head\":{\"Group\":\"Trip\",\"Source\":\"ONLINE\",\"Version\":\"10000\",\"Locale\":\"en-XX\",\"Currency\":\"USD\",\"VID\":\"1765078651988.0c55yqsxjtpp\",\"SessionId\":\"1\",\"PvId\":\"1\"},\"localTime\":\"2025-12-07\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\nvary: accept-encoding,origin,access-control-request-headers,access-control-request-method,accept-encoding\r\ncontent-encoding: gzip\r\nx-cat-server: cat.fx.sgp.tripws.com:80\r\nx-cat-root-id: 100025527-0a9a62a8-490299-2457296\r\nx-cat-parent-id: 100025527-0a9a62a8-490299-2457296\r\nx-cat-id: 100025527-0a9a62a8-490299-2457323\r\nx-cat-root-url: http://cat.fx.sgp.tripws.com:80/cat/r/m/100025527-0a9a62a8-490299-2457296\r\nclogging_trace_id: 2355593138954457895\r\nrootmessageid: 100025527-0a9a62a8-490299-2457296\r\nservermessageid: 100025527-0a9a62a8-490299-2457323\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-gate-root-id: 100025527-0a9a62a8-490299-2457296\r\nx-gate-region: SGP-ALI\r\nx-service-call: 0.021\r\naccess-control-expose-headers: RootMessageId, x-service-call, x-gate-region\r\nx-gate: ctrip-gate\r\nx-originating-url: https://www.trip.com/restapi/soa2/27501/getTripGeniePreferences?x-traceID=1765078651988.0c55yqsxjtpp-1765078656302-1406522267\r\nx-trip-region: de\r\ncontent-length: 429\r\ndate: Sun, 07 Dec 2025 03:37:36 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: MISS\r\nunique-request-id: 36124928\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":720,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"ebd08b80db7d86e0313690480fba1d14","sha1":"a7f0c51fa4d5f3cc34c10609c554809e8ead0e37","sha256":"664b0dfd1759613b4b6493aab5638cdbe3cbc43b52ae98424d8a935e1f41eaf4","sha512":"5c5adffe0417cb809648da0cd487cb04691c9429f9f2cc85c50203ec105cb0fd68d3a9c386af1ef787c262aabebbe03838654ef0436541ab1aa56ea215916eab","ssdeep":"","tlshash":"f601f497489c06fdc4049c58790fbe18d15a3b7f14c55e011cfe5eec1eb50ab4105720","first_seen":"2025-12-07T03:38:26.11014Z","last_seen":"2025-12-07T03:38:26.11014Z","times_seen":1,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/restapi/soa2/18814/json/getRecommendTraffic","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:36.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"POST /restapi/soa2/18814/json/getRecommendTraffic HTTP/1.1\r\nHost: www.trip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003\r\ncookieOrigin: https://www.trip.com\r\nx-ctx-Currency: USD\r\nx-ctx-Locale: en-XX\r\nlocale: en-XX\r\ncurrency: USD\r\ncontent-type: application/json\r\nx-ctx-ubt-pageid: 10320668088\r\nx-ctx-ubt-pvid: 1\r\nx-ctx-ubt-sid: 1\r\nx-ctx-ubt-vid: 1765078651988.0c55yqsxjtpp\r\nx-ctx-wclient-req: c92650e647ca7ce2fbffd6b1949058e4\r\nContent-Length: 284\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: Union=AllianceID=6015822\u0026SID=168798533\u0026OUID=ctag.hash.ccjJjXXJOpYl\u0026Expires=1767670651990\u0026createtime=1765078651; UBT_VID=1765078651988.0c55yqsxjtpp; ibu_online_jump_site_result={\"isShowSuggestion\":false}; ibusite=EN; ibugroup=trip; ibulanguage=EN; ibulocale=en_xx; cookiePricesDisplayed=USD; ibu_cookie_strict=0; _abtest_userid=e7b40962-e94a-4116-9bcf-af1ceddea7af; _tp_search_latest_channel_name=hotels; _bfa=1.1765078651988.0c55yqsxjtpp.1.1765078653998.1765078653998.1.1.10320668088; _gcl_au=1.1.1944475785.1765078655; GUID=09034023113792808361; _fwb=202fgWTgpaFl4ko2G4nljfO.1765078656039; wcs_bt=s_33fb334966e9:1765078656\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":284,"data":"{\"anywhere\":true,\"head\":{\"cid\":\"\",\"ctok\":\"\",\"cver\":\"1.0\",\"lang\":\"01\",\"sid\":\"8888\",\"syscode\":\"09\",\"auth\":\"\",\"xsid\":\"\",\"extension\":[],\"Locale\":\"en-XX\",\"Language\":\"en\",\"Currency\":\"USD\",\"ClientID\":\"\",\"locale\":\"en_XX\",\"currency\":\"USD\",\"vid\":\"1765078651988.0c55yqsxjtpp\",\"source\":\"Online\"}}"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\nx-cat-server: cat.fx.sgp.tripws.com:80\r\nx-cat-root-id: 100025527-0a9861cc-490299-2458232\r\nx-cat-parent-id: 100025527-0a9861cc-490299-2458232\r\nx-cat-id: 100025527-0a9861cc-490299-2458260\r\nx-cat-root-url: http://cat.fx.sgp.tripws.com:80/cat/r/m/100025527-0a9861cc-490299-2458232\r\nclogging_trace_id: 2662853415390994397\r\nrootmessageid: 100025527-0a9861cc-490299-2458232\r\nservermessageid: 100025527-0a9861cc-490299-2458260\r\nvary: accept-encoding\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-gate-root-id: 100025527-0a9861cc-490299-2458232\r\nx-gate-region: SGP-ALI\r\nx-service-call: 0.101\r\naccess-control-expose-headers: RootMessageId, x-service-call, x-gate-region\r\nx-gate: ctrip-gate\r\nx-originating-url: https://www.trip.com/restapi/soa2/18814/json/getRecommendTraffic\r\nx-trip-region: de\r\ndate: Sun, 07 Dec 2025 03:37:36 GMT\r\ncontent-length: 246\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver-timing: cdn-cache; desc=MISS, edge; dur=7, origin; dur=349\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: MISS\r\nunique-request-id: 36124930\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":277,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"c97141225690609f2bac3a8533a70775","sha1":"d2ed9e4765eeb60442254c12b81aaf10f6ee47dd","sha256":"56c7bea5a7a050099340f00ec343107c4e81249edf8d5f87218c97faf6a26c57","sha512":"efca8800bac08f84d50cf45722f21251687e5923706a035a159403e9b7a4bc92bdf968648dc71a585653931e3070a48bed05bd3723fdc6fac7e8f390106e245b","ssdeep":"","tlshash":"60d02b96c9fc0cb9064b1038b6433841ec4927c663da4a00584b83466e916b5c850d54","first_seen":"2025-12-07T03:38:26.111061Z","last_seen":"2025-12-07T03:38:26.111061Z","times_seen":1,"resource_available":false,"data":null}},"time_used":366,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":366,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/online-home/onlineLoginPopup.8e2fbe8654592e59237a532763ef458f.css","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:32.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /modules/ibu/online-home/onlineLoginPopup.8e2fbe8654592e59237a532763ef458f.css HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Thu, 13 Mar 2025 03:37:27 GMT\r\netag: W/\"8e2fbe8654592e59237a532763ef458f\"\r\ncontent-type: text/css\r\nx-ares-server: r100013666-21038164-kmhbj@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: RAVE04SYG3661RP1\r\nx-ares-raw-buffer-size: 11335\r\nx-backend-latency: 0.200\r\ncontent-encoding: gzip\r\nx-varnish: 168941846\r\naccept-ranges: bytes\r\ncontent-length: 2770\r\nakamai-amd-bc-debug: [a=23.36.76.237,b=289039742,c=p,d=1746867156,h=200,k=1,l=0,n=NO__OSLO,o=20940,r=1,p=2770]\r\ncache-control: max-age=5013706\r\nexpires: Tue, 03 Feb 2026 04:19:18 GMT\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a232\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":11335,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (11335), with no line terminators","md5":"8e2fbe8654592e59237a532763ef458f","sha1":"75fbf7ed4e68939f629131fd7019f00c881f5160","sha256":"7c5cb98866ee74454a0cd4b5ae84a7e8174c992ab2818a019ede5780d89aacb2","sha512":"a4c1026e07ae8bd8bfb2b06d7d284e880d3817d8eda818751bfca78d9cfb5c2e30118d3769f41d4494b37ef8997dd8ae7bd08cde14f057f576fbc1ad284438b1","ssdeep":"96:DMk91wBXnMSLSIan2CPM9pW2GQKzpfyhIYoFvWv2CNeZ3PPeDS2k6k1nTuaRlfYf:INBfA+82GQ0y4SCP12XlajU","tlshash":"ce320422d286659a3e3bc1239b8071a9617ff123d8514e7cf11a73be6ac13ed21617b4","first_seen":"2024-07-08T23:38:24Z","last_seen":"2026-04-15T17:38:47.436448Z","times_seen":2972,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":69,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pages.trip.com/images/online-adu/bg_3.webp","fqdn":"pages.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:37.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"GET /images/online-adu/bg_3.webp HTTP/1.1\r\nHost: pages.trip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ak-s-cw.tripcdn.com/\r\nCookie: Union=AllianceID=6015822\u0026SID=168798533\u0026OUID=ctag.hash.ccjJjXXJOpYl\u0026Expires=1767670651990\u0026createtime=1765078651; UBT_VID=1765078651988.0c55yqsxjtpp; ibu_online_jump_site_result={\"isShowSuggestion\":false}; ibulanguage=EN; ibulocale=en_xx; cookiePricesDisplayed=USD; _abtest_userid=e7b40962-e94a-4116-9bcf-af1ceddea7af; _bfa=1.1765078651988.0c55yqsxjtpp.1.1765078653998.1765078653998.1.1.10320668088; _gcl_au=1.1.1944475785.1765078655; GUID=09034023113792808361; _fwb=202fgWTgpaFl4ko2G4nljfO.1765078656039\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 18750\r\nx-ares-server: r100013666-91017039-d2ncj@SHAXY\r\ntiming-allow-origin: *\r\nx-ares-source: aliyun\r\nx-ares-request-id: 69327025657FE43135669B1A\r\netag: W/\"4c11b7fedb44bccc270e5f8fd77336b0\"\r\nlast-modified: Fri, 05 Dec 2025 05:39:49 GMT\r\nx-ares-raw-buffer-size: 18750\r\nx-backend-latency: 0.106\r\nx-varnish: 552277349\r\naccept-ranges: bytes\r\ncache-control: max-age=7332\r\nexpires: Sun, 07 Dec 2025 05:39:49 GMT\r\ndate: Sun, 07 Dec 2025 03:37:37 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 36124b50\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":18750,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4c11b7fedb44bccc270e5f8fd77336b0","sha1":"230e26f9c90fa8633e7e8578215eb6e67f520aee","sha256":"67e21ab5e7640e74997bc752fce4ff8b7be11cbb64a2542cefcfe1c1ff4fc142","sha512":"6a0ce1fb610a1a93aef6c92608d3c96b8619c18ae4babf8428fa049cce6387e6f1bf4b18721633b9823eb1ddc7c69375ff1e16f35d8f5ce0c01bb1f4ff528812","ssdeep":"384:lwLACLb6d6f74RTORfhzllket+ziAn1NUDzndaHq8TokApqf//417fW:6LA6b6wj4hORfDxMziAn1NKZaHquokAY","tlshash":"5a82b005833247b9e2507a70b5f26ef9f47a3cc54dace05a8bea56bc82423611075cf1","first_seen":"2024-05-18T10:55:40Z","last_seen":"2026-02-07T08:58:16.355391Z","times_seen":1613,"resource_available":false,"data":null}},"time_used":697,"timings":{"blocked":651,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/locale/v3/33000011/en-XX.js?etagc=4d5d09ca1e41fbfd6074c434de291df3","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:32.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /locale/v3/33000011/en-XX.js?etagc=4d5d09ca1e41fbfd6074c434de291df3 HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nx-ares-server: r100013666-91049052-kvs5f@SGP-ALI\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aliyun\r\nx-ares-request-id: 6934276FCC86F1353366F9D8\r\netag: W/\"4d5d09ca1e41fbfd6074c434de291df3\"\r\nlast-modified: Sat, 06 Dec 2025 12:54:07 GMT\r\nx-ares-raw-buffer-size: 6824\r\nx-backend-latency: 0.010\r\ncontent-encoding: br\r\nx-varnish: 147186310\r\naccept-ranges: bytes\r\ncontent-length: 1725\r\ncache-control: max-age=5130995\r\nexpires: Wed, 04 Feb 2026 12:54:07 GMT\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a212\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":6824,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1837)","md5":"4d5d09ca1e41fbfd6074c434de291df3","sha1":"ab5ad0a025cf17721e98b6ad0bba44cb28d5d4c8","sha256":"decf1150e07fdf678a0703d500b271d2c315e046f1c1c32e7f3743b316e6ec95","sha512":"231afd6c8fe2ff4dabdf6375d365be0f96383faa566ba9183a4606945ec95960fe2ef0d33f58b8440b49a1416b7dd943c93fb69e841d6ee8c28cb712679e5848","ssdeep":"96:A+zQeDOpqdGWZ/a4kEpti+tIGmMGxWlY+zEvyKz+i7gRlnWsrJJA+6cjebkS3HA6:HEe4gfizEuDGK0WMnNjjS3HRXpvwf07","tlshash":"7be1a41eb571641ba873e0f6fa2e8619b020583305c58816b99c11fc3fd259782fadfa","first_seen":"2025-10-13T16:34:16.478955Z","last_seen":"2026-04-15T17:38:47.558702Z","times_seen":2354,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":96,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/online-home/onlineRecommendAttractions.0fcc0614b36825d32cd7b3eb85b2ea2b.css","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:32.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /modules/ibu/online-home/onlineRecommendAttractions.0fcc0614b36825d32cd7b3eb85b2ea2b.css HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-ares-server: r100013666-21038164-wg5bn@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: CPCDFNBCKEFHPPVM\r\netag: W/\"0fcc0614b36825d32cd7b3eb85b2ea2b\"\r\nlast-modified: Sun, 02 Nov 2025 14:30:41 GMT\r\nx-ares-raw-buffer-size: 12385\r\nx-backend-latency: 0.020\r\ncontent-encoding: gzip\r\nx-varnish: 39564678\r\nx-device: U R Android\r\naccept-ranges: bytes\r\ncontent-length: 3840\r\ncache-control: max-age=5022967\r\nexpires: Tue, 03 Feb 2026 06:53:39 GMT\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a247\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":12385,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (12385), with no line terminators","md5":"0fcc0614b36825d32cd7b3eb85b2ea2b","sha1":"a79030979fc8436cc7c5e5c1b05cdcc3bb995918","sha256":"96ba7146d46a5101e4d2276fcc0c7cfc34d4a3aab90b1859caf7f16ae4efc583","sha512":"05189ecf62717c88776218f7c5b55d13cb834819671f61e9ed6eebd0a48162f588051a72ecac7b6dc6c7e6291ab8cd93224adc0bc2b40c5aacd2fe3a1a2dc69f","ssdeep":"384:UHZde0YkCmAX+7IWYnSQsM3s1DWw+s33kEpvpoLa5:U6nkQ+","tlshash":"514256023792387fa0221173a8f52adcde38b67ba3d5ecc7ee08a9559b40506477352e","first_seen":"2025-06-03T22:29:37.364292Z","last_seen":"2025-12-17T08:17:11.430517Z","times_seen":1579,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":79,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-d.tripcdn.com/images/0AS5f120008whj34f2145.png","fqdn":"ak-d.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:33.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /images/0AS5f120008whj34f2145.png HTTP/1.1\r\nHost: ak-d.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 01 Apr 2024 00:00:00 GMT\r\netag: Dg0on7fbkA,0AS,0AS5f120008whj34f2145\r\ncontent-type: image/png\r\ncontent-length: 10245\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncache-control: max-age=738883\r\nexpires: Mon, 15 Dec 2025 16:52:17 GMT\r\ndate: Sun, 07 Dec 2025 03:37:34 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a4b9\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10245,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"2dfde17cb41f41ca3008f601fadf62e2","sha1":"6780233434482e4853d738c6b4fdae08be1d87e4","sha256":"48cee2cb692072d94004e7b05c9eb0188bfb277690233ea4ab404f35f620a5d8","sha512":"bfd8f4730186ea795aabf905c981a5b2eace5f9f308d61cb8299491b0a09b339ea6715ea07a84ee72c9c54d7f40132e0cc7dbf8d5fbe019f5b3660df3235b718","ssdeep":"192:hMk3ifhB4LLuuDAibh04vY5xDYmT7sgTO5ha1FD1hcISnm:6kSfhwu0AgLxmrO5ha70ISm","tlshash":"7f22af805ee8ac97b41ac76310e79fd7533f4366c6bd49eac309a35d08b0e786ac1304","first_seen":"2025-09-16T02:28:07.414109Z","last_seen":"2026-04-15T17:38:47.492028Z","times_seen":2869,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":199,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/restapi/soa2/24884/json/getConfiguration?x-traceID=1765078651988.0c55yqsxjtpp-1765078656700-1246703552","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:36.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"POST /restapi/soa2/24884/json/getConfiguration?x-traceID=1765078651988.0c55yqsxjtpp-1765078656700-1246703552 HTTP/1.1\r\nHost: www.trip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlocale: en-XX\r\ncurrency: USD\r\nx-traceID: 1765078651988.0c55yqsxjtpp-1765078656700-1246703552\r\ntrip-trace-id: 1765078651988.0c55yqsxjtpp-1765078656700-1246703552\r\nContent-Type: application/json\r\nContent-Length: 235\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003\r\nCookie: Union=AllianceID=6015822\u0026SID=168798533\u0026OUID=ctag.hash.ccjJjXXJOpYl\u0026Expires=1767670651990\u0026createtime=1765078651; UBT_VID=1765078651988.0c55yqsxjtpp; ibu_online_jump_site_result={\"isShowSuggestion\":false}; ibusite=EN; ibugroup=trip; ibulanguage=EN; ibulocale=en_xx; cookiePricesDisplayed=USD; ibu_cookie_strict=0; _abtest_userid=e7b40962-e94a-4116-9bcf-af1ceddea7af; _tp_search_latest_channel_name=hotels; _bfa=1.1765078651988.0c55yqsxjtpp.1.1765078653998.1765078653998.1.1.10320668088; _gcl_au=1.1.1944475785.1765078655; GUID=09034023113792808361; _fwb=202fgWTgpaFl4ko2G4nljfO.1765078656039; wcs_bt=s_33fb334966e9:1765078656\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":235,"data":"{\"head\":{\"locale\":\"en-XX\",\"currency\":\"USD\",\"vID\":\"1765078651988.0c55yqsxjtpp\"},\"platform\":\"Online\",\"componentType\":\"online-app-download-universal\",\"version\":\"6.2.2\",\"pageId\":\"10320668088\",\"aid\":6015822,\"sid\":168798533,\"customParam\":{}}"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\nx-cat-server: cat.fx.sgp.tripws.com:80\r\nx-cat-root-id: 100025527-0a9a5011-490299-2459158\r\nx-cat-parent-id: 100025527-0a9a5011-490299-2459158\r\nx-cat-id: 100025527-0a9a5011-490299-2459164\r\nx-cat-root-url: http://cat.fx.sgp.tripws.com:80/cat/r/m/100025527-0a9a5011-490299-2459158\r\nclogging_trace_id: 8956754419793374571\r\nrootmessageid: 100025527-0a9a5011-490299-2459158\r\nservermessageid: 100025527-0a9a5011-490299-2459164\r\nvary: accept-encoding\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-gate-root-id: 100025527-0a9a5011-490299-2459158\r\nx-gate-region: SGP-ALI\r\nx-service-call: 0.004\r\naccess-control-expose-headers: RootMessageId, x-service-call, x-gate-region\r\nx-gate: ctrip-gate\r\nx-originating-url: https://www.trip.com/restapi/soa2/24884/json/getConfiguration?x-traceID=1765078651988.0c55yqsxjtpp-1765078656700-1246703552\r\nx-trip-region: de\r\ndate: Sun, 07 Dec 2025 03:37:36 GMT\r\ncontent-length: 537\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver-timing: cdn-cache; desc=MISS, edge; dur=6, origin; dur=200\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: MISS\r\nunique-request-id: 361249b0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":876,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"7c37ba95c9a535ebd8f5e3fbf174690c","sha1":"aa498617894d5f2ef8b79ea266bdffd7eb831728","sha256":"8f9ca47af35cf725a5aa2f9cffc5837e597ad32824cad4225d4d2f0197b57011","sha512":"98dd3c368f63073743ceb9c70ff36bc771e2cc87c26ba25f1970c245a5c5fe4157342c104abda7ffde471c4d381fdcee8fa65857f03b6dcff361300f145b4387","ssdeep":"","tlshash":"5711ef22c95cdc27c910892c7d647c10fb2255d952d14f098848c23a6fd63bde1499d4","first_seen":"2025-12-07T03:38:26.114638Z","last_seen":"2025-12-07T03:38:26.114638Z","times_seen":1,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wcs.naver.com/b","fqdn":"wcs.naver.com","domain":"naver.com","tld":"com"},"ip":{"addr":"110.93.154.74","port":443,"asn":23576,"as":"NAVER Cloud Corp.","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:36.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.naver.com","organization":"NAVER Corp."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 05 Mar 2025 00:00:00 GMT","end":"Tue, 17 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DF:B3:02:B8:26:D6:90:49:71:40:F3:8C:B6:B9:2C:4D:13:30:EC:A2","sha256":"DF:1D:9B:40:32:7F:1B:B3:26:CA:00:EE:98:B6:E9:77:2D:FD:1B:4A:4E:BE:45:AF:66:92:5B:4D:3E:AB:E7:3B"}}},"request":{"raw":"POST /b HTTP/1.1\r\nHost: wcs.naver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 475\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":475,"data":"{\"wa\":\"s_33fb334966e9\",\"u\":\"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003\",\"e\":\"\",\"bt\":-1,\"os\":\"Win32\",\"ln\":\"en-US\",\"sr\":\"1280x1024\",\"bw\":1280,\"bh\":1024,\"c\":24,\"j\":\"N\",\"jv\":\"1.8\",\"k\":\"Y\",\"ct\":\"\",\"cs\":\"UTF-8\",\"tl\":\"Trip.com%20Official%20Site%E2%80%8E%E2%80%8E%20%7C%20Travel%20Deals%20and%20Promotions\",\"vs\":\"0.8.18\",\"nt\":1765078656042,\"fwb\":\"202fgWTgpaFl4ko2G4nljfO.1765078656039\",\"ext\":\"{\\\"wot\\\":4760}\"}"}},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sun, 07 Dec 2025 03:37:37 GMT\r\nset-cookie: NWB=6a33e21a853700025a7c6e5ebede43dc.1765078657130; Expires=Fri, 06-Dec-30 03:37:37 GMT; Domain=wcs.naver.com; Path=/; Secure; SameSite=None\nNWB_LEGACY=6a33e21a853700025a7c6e5ebede43dc.1765078657130; Expires=Fri, 06-Dec-30 03:37:37 GMT; Domain=wcs.naver.com; Path=/\r\np3p: CP = \"ALL CURa ADMa DEVa TAIa OUR BUS IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC OTC\"\r\naccept-ch: Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform-Version\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: Tue, 01 Jan 1980 09:00:00 GMT\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nreferrer-policy: unsafe-url\r\nserver: nfront\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T20:38:47.575438Z","times_seen":13797803,"resource_available":true,"data":null}},"time_used":2159,"timings":{"blocked":937,"dns":320,"connect":284,"send":0,"wait":288,"receive":0,"ssl":328},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/locale/v3/100015463/en-XX.js?etagc=c5dd9641ab81988eb3968b0aa3022aa6","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:34.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /locale/v3/100015463/en-XX.js?etagc=c5dd9641ab81988eb3968b0aa3022aa6 HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nx-ares-server: r100013666-91049052-6mx22@SGP-ALI\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aliyun\r\nx-ares-request-id: 68A7068880A81D3635AEC661\r\netag: W/\"c5dd9641ab81988eb3968b0aa3022aa6\"\r\nlast-modified: Thu, 21 Aug 2025 11:44:08 GMT\r\nx-ares-raw-buffer-size: 91657\r\nx-backend-latency: 0.011\r\ncontent-encoding: gzip\r\nx-varnish: 917056985\r\nx-device: U R Android\r\naccept-ranges: bytes\r\ncontent-length: 25042\r\ncache-control: max-age=2753647\r\nexpires: Thu, 08 Jan 2026 00:31:41 GMT\r\ndate: Sun, 07 Dec 2025 03:37:34 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nquic-version: 0x00000001\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a545\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":91657,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (62307)","md5":"c5dd9641ab81988eb3968b0aa3022aa6","sha1":"5b9560ccc522d48c6e305ae57731c7b293325d51","sha256":"9eb5e950502c3b5e62d08f05536ba22bfdbf898012b7d931673def26abcd3c2f","sha512":"57f695aa2ae43a93dd96528e8bc1b722d0504afef3c8a439af7a0d266df6216b3c6ea8c741301f92d5759bf104215cde02cc3ab855467cc84dd23ec3ce6cdfcf","ssdeep":"1536:s24xSEU3vSzX5t3YtBbLoApW0xA6zvt2Waxty:Axb0vSzX5t3YtBLoaW0xA6zvt2fQ","tlshash":"1d93830db3d12f708fd702d1fda64a8b26f0a500335588adae7ec07967eb6845e77a44","first_seen":"2025-09-04T14:38:38.982705Z","last_seen":"2025-12-11T07:28:08.582324Z","times_seen":1131,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":4,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/restapi/soa2/18417/RecommendPropertyGeneral","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:35.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"POST /restapi/soa2/18417/RecommendPropertyGeneral HTTP/1.1\r\nHost: www.trip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003\r\ncookieOrigin: https://www.trip.com\r\nx-ctx-Currency: USD\r\nx-ctx-Locale: en-XX\r\nlocale: en-XX\r\ncurrency: USD\r\ncontent-type: application/json\r\nx-ctx-ubt-pageid: 10320668088\r\nx-ctx-ubt-pvid: 1\r\nx-ctx-ubt-sid: 1\r\nx-ctx-ubt-vid: 1765078651988.0c55yqsxjtpp\r\nx-ctx-wclient-req: f8a56bb5f38f55f52ebd50fd504cbb69\r\nContent-Length: 318\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: Union=AllianceID=6015822\u0026SID=168798533\u0026OUID=ctag.hash.ccjJjXXJOpYl\u0026Expires=1767670651990\u0026createtime=1765078651; UBT_VID=1765078651988.0c55yqsxjtpp; ibu_online_jump_site_result={\"isShowSuggestion\":false}; ibusite=EN; ibugroup=trip; ibulanguage=EN; ibulocale=en_xx; cookiePricesDisplayed=USD; ibu_cookie_strict=0; _abtest_userid=e7b40962-e94a-4116-9bcf-af1ceddea7af; _tp_search_latest_channel_name=hotels; _bfa=1.1765078651988.0c55yqsxjtpp.1.1765078653998.1765078653998.1.1.10320668088; _gcl_au=1.1.1944475785.1765078655; GUID=09034023113792808361\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":318,"data":"{\"head\":{\"cid\":\"\",\"ctok\":\"\",\"cver\":\"1.0\",\"lang\":\"01\",\"sid\":\"8888\",\"syscode\":\"09\",\"auth\":\"\",\"xsid\":\"\",\"extension\":[],\"Locale\":\"en-XX\",\"Language\":\"en\",\"Currency\":\"USD\",\"ClientID\":\"\",\"source\":\"Online\",\"locale\":\"en-XX\",\"currency\":\"USD\",\"group\":\"trip\",\"vid\":\"1765078651988.0c55yqsxjtpp\"},\"requestModule\":\"OnlineHomeBanner\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\nx-cat-server: cat.fx.sgp.tripws.com:80\r\nx-cat-root-id: 100025527-0a9861cc-490299-2458244\r\nx-cat-parent-id: 100025527-0a9861cc-490299-2458244\r\nx-cat-id: 100025527-0a9861cc-490299-2458247\r\nx-cat-root-url: http://cat.fx.sgp.tripws.com:80/cat/r/m/100025527-0a9861cc-490299-2458244\r\nclogging_trace_id: 3070492118707057977\r\nrootmessageid: 100025527-0a9861cc-490299-2458244\r\nservermessageid: 100025527-0a9861cc-490299-2458247\r\nvary: accept-encoding\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-gate-root-id: 100025527-0a9861cc-490299-2458244\r\nx-gate-region: SGP-ALI\r\nx-service-call: 0.079\r\naccess-control-expose-headers: RootMessageId, x-service-call, x-gate-region\r\nx-gate: ctrip-gate\r\nx-originating-url: https://www.trip.com/restapi/soa2/18417/RecommendPropertyGeneral\r\nx-trip-region: de\r\ndate: Sun, 07 Dec 2025 03:37:36 GMT\r\ncontent-length: 3690\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver-timing: cdn-cache; desc=MISS, edge; dur=7, origin; dur=307\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: MISS\r\nunique-request-id: 361248bf\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14020,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"bfb664abe62fda385b4ae4e72d8a1809","sha1":"eabe001e5ffa32f2ebd3208f08b76342d44b643c","sha256":"79740777a319cfac0b2823ba3aa012d88b1835f77128cc1fe7954f24813cb13f","sha512":"ae938acf6b0e8e015ad3cce1db45451fcbc04e9ae440016b09b152a3dd6962f2919804d5d5ab11b5a77895c6ca7b71de7bda8e04d3155ff3289b1dbfe0f694c2","ssdeep":"384:ZwIw8vRvL2vRvaLAs1oGHN0QMjR4VC6+mWzxzN:Zw+L0al/t0RjAC6rYxzN","tlshash":"f1529446f38836b91a5101263dde67d4b72ea40de375cde4289c823d21c49f6e63f98b","first_seen":"2025-12-07T03:38:26.115871Z","last_seen":"2025-12-07T03:38:26.115871Z","times_seen":1,"resource_available":false,"data":null}},"time_used":327,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":327,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ubt-sgp.trip.com/bee/collect","fqdn":"ubt-sgp.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:37.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"OPTIONS /bee/collect HTTP/1.1\r\nHost: ubt-sgp.trip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.trip.com/\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/plain; charset=UTF-8\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List\r\naccess-control-max-age: 300\r\np3p: CP=CUR ADM OUR NOR STA NID\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: Content-Type,content-type\r\ndate: Sun, 07 Dec 2025 03:37:37 GMT\r\nalt-svc: h3=\":443\"; ma=93600\r\nquic-version: 0x00000001\r\nserver-timing: cdn-cache; desc=MISS, edge; dur=0, origin; dur=221\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: MISS\r\nunique-request-id: 36124b34\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T20:38:47.575438Z","times_seen":13797803,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/locale/v3/33000032/en-XX.js?etagc=32a4f615eb07e411f879cd8ee1fe04a6","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:32.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /locale/v3/33000032/en-XX.js?etagc=32a4f615eb07e411f879cd8ee1fe04a6 HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 1481\r\nx-ares-server: r100013666-21038164-rkhcw@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: 8VEK95B5G48VNW2T\r\netag: W/\"32a4f615eb07e411f879cd8ee1fe04a6\"\r\nlast-modified: Thu, 11 Sep 2025 06:14:56 GMT\r\nx-ares-raw-buffer-size: 5081\r\nx-backend-latency: 0.020\r\ncontent-encoding: br\r\nx-varnish: 300839084\r\nx-device: U R Android\r\naccept-ranges: bytes\r\ncache-control: max-age=3085476\r\nexpires: Sun, 11 Jan 2026 20:42:08 GMT\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a214\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":5081,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"32a4f615eb07e411f879cd8ee1fe04a6","sha1":"6150559a2aa8c7e1d00d0c11c16029bc0d0c3758","sha256":"95883246c8cd236dc36e25572c42a143dd50bd6b00f9749607df8aaf3b8cefc9","sha512":"2b1a7c560abeb8bddbaee88dda15de843cffb20e8769efca002c68fadb78b5c332aca128285cc2d046c6488c125c7173abd7b0bc6993df0084a7bb06aecdf9b3","ssdeep":"96:A+zQeDOpqdGWZ/a4kEpti+tIGmMGxWlCgRGOWsKJaAP6cjVbkS3HZ1bhX0DLs2Sb:HEe4gfizEuDGKwWRYGj2S3HxXCYwf07","tlshash":"42a1845a68729427d4b3f5fa8a2f9700f070a83304d48d59fa8c129c7fd1496d2f2be9","first_seen":"2025-10-13T16:34:16.589817Z","last_seen":"2026-04-15T17:38:47.518958Z","times_seen":2355,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":91,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/online-home/onlineRecommendCars.f3e6367b3f0de9fcd76d6da2f802e608.css","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:32.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /modules/ibu/online-home/onlineRecommendCars.f3e6367b3f0de9fcd76d6da2f802e608.css HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ncontent-length: 3397\r\nx-ares-server: r100013666-21038164-wg5bn@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: KKTGR23P630EZFCW\r\netag: W/\"f3e6367b3f0de9fcd76d6da2f802e608\"\r\nlast-modified: Fri, 31 Oct 2025 09:30:56 GMT\r\nx-ares-raw-buffer-size: 12943\r\nx-backend-latency: 0.040\r\ncontent-encoding: br\r\nx-varnish: 47437343\r\naccept-ranges: bytes\r\ncache-control: max-age=4286339\r\nexpires: Sun, 25 Jan 2026 18:16:31 GMT\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a240\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":12943,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (12943), with no line terminators","md5":"f3e6367b3f0de9fcd76d6da2f802e608","sha1":"5429797596d7a772b16e2e88abd5500a5e045012","sha256":"7cb1dd433d63a36893bed33a544c95dc108c6223fceeebd5159fa52e92813a31","sha512":"1192516fdc35c04c259e78d3a8ddce29a9686660ccc084e2dbe654ad4a02919fb9a3110cdee0b756966401b09765675b575af0dd19db661ec4f09d0f611f308b","ssdeep":"384:Ulmi5Sss4CiUzafISsrS5qItTJYs2/UWw+s33kEpvpoLa5:UEbOXfQ+","tlshash":"d44244013ba6395fa0151173acf42acced29b27be3e1fdd7fa08a9559640506877332d","first_seen":"2025-06-03T22:29:37.348329Z","last_seen":"2025-12-17T08:17:11.391416Z","times_seen":1579,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":78,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dimg04.tripcdn.com/images/05E2g12000m1ha6n9C3CF.png","fqdn":"dimg04.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:36.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"GET /images/05E2g12000m1ha6n9C3CF.png HTTP/1.1\r\nHost: dimg04.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ak-s-cw.tripcdn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 01 Apr 2024 00:00:00 GMT\r\netag: Dg0on7fbkA,05E,05E2g12000m1ha6n9C3CF\r\ncontent-type: image/png\r\ncontent-length: 2916\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncache-control: max-age=1568698\r\nexpires: Thu, 25 Dec 2025 07:22:34 GMT\r\ndate: Sun, 07 Dec 2025 03:37:36 GMT\r\nalt-svc: h3=\":443\"; ma=93600\r\nquic-version: 0x00000001\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 36124996\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2916,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 308, 8-bit/color RGBA, interlaced","md5":"cd1a4df1d58192c3e1cbf20aa592fb70","sha1":"60c8a822c50a2d95c7477ef4488bf1bd7a0b92e7","sha256":"216c0f8923757bf5b5135f441e9d505dd16b62bbb3be36a8eb065651fda7825b","sha512":"fba2da83f95584f42f521327e581ee5ce1e15bc7a37b7e47354fd6b6dbb1258ed5957cde3af393ea114fdfbb9e235dd867758ced6d6692fffa24a11948e9fe53","ssdeep":"","tlshash":"b4512a9057997772fe75b17529a3673b1c3cd07a83e2a0323460ea8009cfa009ed8a9d","first_seen":"2025-09-06T09:35:54.253518Z","last_seen":"2026-04-15T17:38:47.468583Z","times_seen":1790,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"best-r3v3nue.com/?url=https%3A%2F%2Faff.trustofferlink.com%2F2JRNK2B%2F7JH5N3F%2F%3Fsub1%3D2uafUxoTYS1Z9pe3vvAHFR%26source_id%3De017c010%26sub2%3DPropellerAds1%26sub3%3D3646","fqdn":"best-r3v3nue.com","domain":"best-r3v3nue.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-07T03:37:31.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"best-r3v3nue.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Oct 2025 11:13:30 GMT","end":"Thu, 15 Jan 2026 12:11:12 GMT"},"fingerprint":{"sha1":"C0:5C:F8:70:96:65:CB:1D:C3:D2:FC:D3:A7:05:C7:4E:A3:20:C8:F5","sha256":"50:C3:00:D7:38:52:2E:B8:C5:E3:8A:B3:93:43:4F:B6:8B:75:EF:5A:77:39:24:16:13:19:42:1E:23:92:E7:87"}}},"request":{"raw":"GET /?url=https%3A%2F%2Faff.trustofferlink.com%2F2JRNK2B%2F7JH5N3F%2F%3Fsub1%3D2uafUxoTYS1Z9pe3vvAHFR%26source_id%3De017c010%26sub2%3DPropellerAds1%26sub3%3D3646 HTTP/1.1\r\nHost: best-r3v3nue.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 07 Dec 2025 03:37:31 GMT\r\ncontent-type: text/html\r\nreferrer-policy: no-referrer\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WeBPVRAIJxklve91e4zX5cfPITwezQzou6TWYPM6Y1RGumC2l%2BagZJy8Oeuiq9GoQfmfe%2Be4v8twMHWNaZzLe707hzzbi6azFweEp0Pq4Ns%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9aa0fc2158053181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":652,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"499512126d4801243ae5f0066f569eed","sha1":"dfb080d51d9be063dad840fda766398f468e3c47","sha256":"0b6e3143d8cb51a0131675a1656ba2ab5a2e8160195d19da9b7740d1b7af2185","sha512":"697eb723b319a0cb6987a912577499d14ad19abc43141497d4060e471710a332e151960ba7d0eeaa8b5d2eab84a56cd8a19686d73d5f6116a1864b35daedb3a7","ssdeep":"","tlshash":"d8f0c09ba8f618341372a53815a1f20c0e9741177747980936de17500faeba180c3a1e","first_seen":"2025-12-07T03:38:26.118534Z","last_seen":"2025-12-07T03:38:26.118534Z","times_seen":1,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":60,"dns":41,"connect":1,"send":0,"wait":7,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/m/home/getHeaderInfo?locale=en-XX","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:34.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"POST /m/home/getHeaderInfo?locale=en-XX HTTP/1.1\r\nHost: www.trip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003\r\ncookieOrigin: https://www.trip.com\r\nlocale: en-XX\r\ncurrency: USD\r\ncontent-type: application/json\r\nContent-Length: 433\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: Union=AllianceID=6015822\u0026SID=168798533\u0026OUID=ctag.hash.ccjJjXXJOpYl\u0026Expires=1767670651990\u0026createtime=1765078651; UBT_VID=1765078651988.0c55yqsxjtpp; ibu_online_jump_site_result={\"isShowSuggestion\":false}; ibusite=EN; ibugroup=trip; ibulanguage=EN; ibulocale=en_xx; cookiePricesDisplayed=USD; ibu_cookie_strict=0; _abtest_userid=e7b40962-e94a-4116-9bcf-af1ceddea7af; _tp_search_latest_channel_name=hotels\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":433,"data":"{\"channel\":\"home\",\"pageId\":\"10320668088\",\"currency\":\"USD\",\"locale\":\"en-XX\",\"source\":\"ONLINE\",\"url\":\"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003\",\"version\":\"M:-1,231218_IBU_OHS:A;\",\"head\":{\"cid\":\"\",\"ctok\":\"\",\"cver\":\"1.0\",\"lang\":\"01\",\"sid\":\"8888\",\"syscode\":\"09\",\"auth\":\"\",\"xsid\":\"\",\"extension\":[],\"Locale\":\"en-XX\",\"Language\":\"en\",\"Currency\":\"USD\",\"ClientID\":\"\"}}"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 613\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type,cookieorigin,trip-trace-id,x-traceid,currency,locale,x-ctx-locale,x-ctx-currency,x-ctx-country,x-ctx-unit,x-ctx-temperature,x-ctx-hourclock,x-cat-trace-mode,x-ctrip-canary-req,x-ctx-canaryidc,x-ctx-canaryreq,x-ctx-canarysrc\r\naccess-control-allow-methods: POST,GET\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-expose-headers: x-originating-url, x-gate-region, x-ibu-trip-region\r\nclogging_trace_id: d832cea3-1e00-4983-b729-be2677f1d349\r\nrootmessageid: 310002606-0a935277-490299-776907\r\nsoa20-service-appid: 310002606\r\nsoa20-service-hostip: 10.147.82.119\r\nsoa20-service-idc: SGP-ALI\r\nvary: Origin\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-gate-region: SGP-ALI\r\nx-readtime: 8\r\nx-scf-executed-version: ibu-tripflow-function-00031\r\nx-scf-request-id: d832cea3-1e00-4983-b729-be2677f1d349\r\nx-trip-app-name: h5-root\r\nx-trip-app-version: 2.2.22\r\nx-xss-protection: 1; mode=block\r\nx-envoy-upstream-service-time: 10\r\nx-trip-region: de\r\ndate: Sun, 07 Dec 2025 03:37:34 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver-timing: cdn-cache; desc=MISS, edge; dur=6, origin; dur=272\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: MISS\r\nunique-request-id: 361246de\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":613,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c55050340339393edb597f5a24279836","sha1":"a40a709ce64747d17fc6354eb1d08cc4d8124609","sha256":"d1e09431407be3d46786afa45c057e22e98d36133751869c6d42f544dc2af46c","sha512":"dd88b076126035f77b9ecf17ae5159ef9be9b6521d1c853ef87148c5b96ed63bd77741e396dac2d42a9d8405045094c6abdd61c2c953d7c28637f056aa939f37","ssdeep":"","tlshash":"2ef0d30702904e664fd6d9dc79570055904e03ffc0c4ec98f0b55b442d18beb6303a09","first_seen":"2025-11-27T11:38:44.817435Z","last_seen":"2025-12-21T16:08:55.146597Z","times_seen":335,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":294,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ubt-sgp.trip.com/bee/collect?metaSender=1.3.72\u0026contextTs=1765078654659\u0026vid=1765078651988.0c55yqsxjtpp\u0026sid=1\u0026pvId=1\u0026appId=100014416","fqdn":"ubt-sgp.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:34.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"POST /bee/collect?metaSender=1.3.72\u0026contextTs=1765078654659\u0026vid=1765078651988.0c55yqsxjtpp\u0026sid=1\u0026pvId=1\u0026appId=100014416 HTTP/1.1\r\nHost: ubt-sgp.trip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.trip.com/\r\nContent-Type: application/json\r\nContent-Length: 2080\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2080,"data":"{\"d\":\"f001765078654659!m1Legacy!d=E8Z7ImNvbnRleHQiOlsiMTAzMjA2NjgwODgiLCIxNzY1MDc4NjUxOTg4LjBjNTV5cXN4anRwcCIsMSwxAB71LjMuNzIvbmV3L3QAEPMwMDAxNDQxNixudWxsAgD3LCJvbmxpbmUiBAfJaHR0cHM6Ly93d3cudHJpcC5jb20vP0FsbGlhbmNlaWQ9NjAxNTgyMiZTSUQ9MTY4Nzk4NTMzJgEn2l9zdWIxPTAyMGFhNzlhNjBlOTRjZDA5NGJmMDBkNjViNTA5MzQ4BiL2Mz1QMzk0MjAwMwR1B4oB_DEyODAAqgH6MjQsNDgzAAv3LDMsImVuLXVzAPABAAAAAOl7XCJ2ZXJzaW9uXCI6XCJcIixcIm5ldAII_E5vbmUCDPhwbGF0Zm9ybQQc_30BkAIBNvlmZWZfbmFtACIFMwEOAE0HB_5yZwcC_WxhbgMIAIAB_lhYAw37aXphcmQHTvgiU0dQLUFMSQ65AQCpAfx0cnVlAgAHDfpdLCJidXMA8wL-c3MB0AMEzAIBzAMFyQIACepjdGFnLmhhc2guY2NqSmpYWEpPcFlsDlEMAAIA_3sAqAH8dGVyVABbBpkE6jQ2NDUsImluc3RLZXkiOiJjOTE5OUYAZfxucG1WA8UCABP7MS42LjcDD_9FDjL8Mzg5OAE_-ml0X2NraQArgUUtWlZibWx2YmoxQmJHeHBZVzVqWlVsRVBUWXdNVFU0TWpJbVV3QUo5REUyT0RjNU9EVXpNeVpQVlFBTXlXTjBZV2N1YUdGemFDNWpZMnBLYWxoWVNrOXdXV3dtUlhod2FYSmxjejB4TnpZM05qY3dOalV4T1Rrd0ptTnlaV0aBMFpYUnBiV1VCRmZ3MU1EYzRBQmI1T3lCVlFsUmZWZ0ZYQmd2Wk9UZzRMakJqTlRWNWNYTjRhblJ3Y0RzZ2FXSjFYMjl1YkdsdVpWOXFkVzF3WDNOcGRHVmZBRl90ZFd4MFBYc2lhWE5UYUc5M1UzVm5aMlZ6ZEFDNkFmZ2lPbb1aaGJITmxmUUl6QVNmOVBVVk9BZ2YzWjNKdmRYQTlkSEpwQTAzNWJHRnVaM1ZoWndZVzJXeHZZMkZzWlQxbGJsOTRlAIUB91kyOXZhMmxsVQAt_1kAXdtSR2x6Y0d4aGVXVmtQVlZUUkFPSkFRTVpfbDl6QUV2MlkzUTlNADXIWDJGaWRBQjkxRjkxYzJWeWFXUTlaVGRpTkRBNU5qSXRaVGswWVMwME1URTJMVGxpWTJZdFlXWXgAYcBrWkdWaE4yRm1BRExfZEFES0FmbGxZWEpqYUY5c0FKb0NBRHoyWTJoaGJtNWxiRjl1WVFDbEF2cG9iM1JsYkhNAJ0E-GJpelRva2VuAbwFAMsFAJYI_iI6A-sF_mZyANcG_HdvcmsAnQT5d2ViLWNvcgDaCPkidGNwU2VuACP7ZmFsc2UAwwTyc1N1cHBvcnRXYXNtIjoCmwYAEv9PAdIH_mVhAFT_IgEPATX_bAAyAAoDhQkBlAb2YXB0YWluQXBwSQEWBssJABjvbHNTaXplIjo0MDYsInVidF8Btwf9dWFnABAAjwYAHgEQ-WN1cnJlbmMBgAb9VVNEBA79c2l0ASH-RU4ECftsb2NhbAMxAPEHABL-d2MHmwb7Mi4wLjgBbAEm_XJlcQH5AQeBC_Q0NjU5YTVkY25OIn0AmAL8dXNlcgCiAgOXAuhNOi0xLDIzMDgxNV9JQlVfcHdheWg6QTsFEP03MjACE_wzd1NKCAz9NTI5AhL-T1QJC_wxMjE4AxH-SFMCEfs5NywyNAC0CgMQ-0hURzpCABMAKPw1MDYyA2sAhgz_VQCOAQIU_jI2ARb_OQQT-05ld1BvAhP-NDgCEwScAfpEZXN0aW4CFP84Akb9OTI0AhT5Y2FtYmFubgBKAXgAqQv-MjUAef8xAhf8UHJvZADEA_5yYwPXAf8yATT9NDA3BaYB_0IATAXpDP8iAaAC-2J0TGlzAdwN_1sAsw0G5gj_OQHrCP5wdgjoCf9dACr_cwDEBAzLCf01OX0\u0026ac=b\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 66\r\ncache-control: private, no-store, no-cache, no-cache=Set-Cookie, proxy-revalidate\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\npragma: no-cache\r\nx-content-type-options: nosniff\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List\r\nx-forwarded-for: 91.90.42.154\r\naccess-control-max-age: 300\r\np3p: CP=CUR ADM OUR NOR STA NID\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\ndate: Sun, 07 Dec 2025 03:37:35 GMT\r\nset-cookie: uid=OMzgEfARHtNWOn+gZxUeig==; Max-Age=63072000; Expires=Tue, 07 Dec 2027 03:37:35 GMT; Path=/\nsuid=OMzgEfARHtNWOn+gZxUeig==; Max-Age=63072000; Expires=Tue, 07 Dec 2027 03:37:35 GMT; Path=/; Secure; SameSite=None\r\nserver-timing: cdn-cache; desc=MISS, edge; dur=0, origin; dur=248\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: MISS\r\nunique-request-id: 36124780\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":66,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4e4939efa9b16c153e979131ef6a8947","sha1":"7ea555adc67f82e164df4a860c4610242b067144","sha256":"3b590e330c18acba6a260eb88221c5c10135374fedbc7d88cf41331b00ce2f29","sha512":"6c86ddfdcf1f939aa4fee97a02317b3dbfee93c1f3ba69df6d6f4fde60c11132ddd6c96314d767477f165c88654cca4855996e0b6d9c9e77b558a0752188b3c6","ssdeep":"","tlshash":"9ea002412205e8ba0b555667241ed951ebf8768988969145550e8c6c4e20c9c569b144","first_seen":"2025-12-07T03:38:26.11998Z","last_seen":"2025-12-07T03:38:26.11998Z","times_seen":1,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":1,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dimg04.tripcdn.com/images/05E1712000o6ljnud70A3.svg","fqdn":"dimg04.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:36.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"GET /images/05E1712000o6ljnud70A3.svg HTTP/1.1\r\nHost: dimg04.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 01 Apr 2024 00:00:00 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncontent-encoding: br\r\ncontent-length: 553\r\ncache-control: max-age=2884589\r\nexpires: Fri, 09 Jan 2026 12:54:05 GMT\r\ndate: Sun, 07 Dec 2025 03:37:36 GMT\r\nalt-svc: h3=\":443\"; ma=93600\r\nquic-version: 0x00000001\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 36124907\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1087,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b1e044f28c070dfc56fbaf30d87dbfd9","sha1":"147b0736954eb1af89ab80cd6309af90fcd30a38","sha256":"cd7e92211e070f5e8ed2b4e654f27dde15264828b31234cd2db439e85879105f","sha512":"9f9f8a2eb74d245ba2bfa673eaec8c711c0649e0234feb4800b1f16d9806d3d0b7f931ebd3e520890e3af9ffd75767a318f553f652a4e9fccca07da0f4369d08","ssdeep":"","tlshash":"3111ccfff69092e6d687db48d1075512b2ba60ffbf99cbdc8710ed8068601618c8dca0","first_seen":"2025-09-18T13:40:44.9263Z","last_seen":"2026-02-04T10:37:59.933418Z","times_seen":1720,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/locale/v3/33000016/en-XX.js?etagc=fae519ebbee04d3b85b4f6241bb1dc7e","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:32.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /locale/v3/33000016/en-XX.js?etagc=fae519ebbee04d3b85b4f6241bb1dc7e HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nx-ares-server: r100013666-21038164-fglz4@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: BPWEHA3KZ1FNYAE3\r\netag: W/\"fae519ebbee04d3b85b4f6241bb1dc7e\"\r\nlast-modified: Mon, 13 Oct 2025 12:59:35 GMT\r\nx-ares-raw-buffer-size: 5418\r\nx-backend-latency: 0.030\r\ncontent-encoding: gzip\r\nx-varnish: 27316041\r\naccept-ranges: bytes\r\ncontent-length: 1843\r\ncache-control: max-age=4515047\r\nexpires: Wed, 28 Jan 2026 09:48:19 GMT\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a211\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":5418,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (433)","md5":"fae519ebbee04d3b85b4f6241bb1dc7e","sha1":"4fb7d238814b4fc76106469c80d489391bbb1966","sha256":"01bb0e706e529abbaa66cc9df381cf0d8029807dd9821c005ab4153b1f1f1873","sha512":"b52a324ec20c461ca81041abc9bc769596e4daa93e5e81482bd26445f3e585360b59c832a5bc03e6c320930f38852532e1aeac87afba5e8133a4d9d13fafe399","ssdeep":"96:A+zQeDOpqdGWZ/a4kEpti+tIGmMGxWlJZogRkTkVWsk5JkXAks6cjlhbkS3HAqkc:HEe4gfizEuDGK0WPy4jMS3HhXQqwf07","tlshash":"81b1959a79719427d4f3f5fa8a2f9700f070a82304c48915f68c519c7fd1896c6f2af9","first_seen":"2025-10-13T16:34:16.400436Z","last_seen":"2025-12-11T10:11:07.765074Z","times_seen":974,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":97,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/online-home/onlineRecommendAttractions.0ecfe8db0cd36e3a7174882887a63324.js","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:32.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /modules/ibu/online-home/onlineRecommendAttractions.0ecfe8db0cd36e3a7174882887a63324.js HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nx-ares-server: r100013666-21038164-5skh7@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: MHDK07F40NSN5N8B\r\netag: W/\"0ecfe8db0cd36e3a7174882887a63324\"\r\nlast-modified: Wed, 03 Dec 2025 07:34:19 GMT\r\nx-ares-raw-buffer-size: 39877\r\nx-backend-latency: 0.050\r\ncontent-encoding: br\r\nx-varnish: 20981286\r\naccept-ranges: bytes\r\ncontent-length: 10800\r\ncache-control: max-age=4852607\r\nexpires: Sun, 01 Feb 2026 07:34:19 GMT\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a245\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":39877,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39748)","md5":"0ecfe8db0cd36e3a7174882887a63324","sha1":"c2558a88dafb6ee4c2393be5365eff1d98d8d649","sha256":"2e061f886ac20b114264a322caec4fc017017c211a26f7e8790e6bee953f3c65","sha512":"af422174907515654457ed3be226cc7e1c448551b62ec995bdbd53f5ca2323adedc7d2645e71cb53f1e7f54d64ab76698faaf3b2b93f85617751bec6bc930834","ssdeep":"768:2UAhOhoT+whgfkEHwE7aD915vC7ti+pWJCCr/MSW8yeB6gUndH44:2tT+whgfkEHvaD75v+sJCQ/0eBO44","tlshash":"4b03e74db0a1f8ed12bb1052953f621af3363ea598194c10d262c9cc7e78bcf9276b5d","first_seen":"2025-12-03T08:08:10.063254Z","last_seen":"2025-12-08T09:12:12.979747Z","times_seen":101,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":78,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2025-12-07","alert":"Detects SocGholish obfuscated variant first observed in July 2022","trigger":"ak-s-cw.tripcdn.com/modules/ibu/online-home/onlineRecommendAttractions.0ecfe8db0cd36e3a7174882887a63324.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"Ankit Anubhav -ankitanubhav.info","date":"2022-07-19","description":"Detects SocGholish obfuscated variant first observed in July 2022","malpedia_family":"js.fakeupdates","rule":"SocGholish_Variant_B","yarahub_author_email":"ankit.yara@inbox.ru","yarahub_author_twitter":"@ankit_anubhav","yarahub_license":"CC0 1.0","yarahub_reference_link":"https://twitter.com/ankit_anubhav/status/1549246034831781888","yarahub_reference_md5":"4fcc9569ca63cb2f5777954ac4c9290f","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"df3d194a-c6bc-4440-bad9-461e0e7962fd"}}],"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/online-home/onlineSecondEntry.bfff96baa9a9ddf2cbf1b56977844b55.css","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:35.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /modules/ibu/online-home/onlineSecondEntry.bfff96baa9a9ddf2cbf1b56977844b55.css HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nx-ares-server: r100013666-21038164-mjtv8@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: 5ABA0MP3390GDGE8\r\netag: W/\"bfff96baa9a9ddf2cbf1b56977844b55\"\r\nlast-modified: Wed, 03 Dec 2025 07:34:49 GMT\r\nx-ares-raw-buffer-size: 56316\r\nx-backend-latency: 0.060\r\ncontent-encoding: br\r\nx-varnish: 23037974\r\naccept-ranges: bytes\r\ncontent-length: 6881\r\ncache-control: max-age=4852634\r\nexpires: Sun, 01 Feb 2026 07:34:49 GMT\r\ndate: Sun, 07 Dec 2025 03:37:35 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nquic-version: 0x00000001\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a72c\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":56316,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (56316), with no line terminators","md5":"bfff96baa9a9ddf2cbf1b56977844b55","sha1":"36737290feb8fb628d447af1f6e5e8206da0ef92","sha256":"63c5352de5ef47c255c54bd2722cbd2b464990f7e14739d12f152e51dbb0dd52","sha512":"987c65a4958c6505e6c9fec5d03dfab3c2c7337421976dd0b07e3a58dda1d879587846df2b87fda0a45d070adcfc799531fcfba1c0b1dadad449734a9d365a00","ssdeep":"384:INRA7Q0lPEw3L33fepEtI5WU7+Ou9CtGBqul3FGGlp0B3L3aTaow5NtT1dRGy1Cb:IR3Dw3L3veBE+3L3aTaYTcGDLYUv","tlshash":"cb43fe22e06710df7532c42b5f9a752c61249e37d1a3a97fe1c2339cb5da34e35e1a22","first_seen":"2025-12-03T08:08:10.017705Z","last_seen":"2025-12-17T08:17:11.25321Z","times_seen":181,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pages.trip.com/images/download-button/en-us/android-en-us.png","fqdn":"pages.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:37.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"GET /images/download-button/en-us/android-en-us.png HTTP/1.1\r\nHost: pages.trip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nCookie: Union=AllianceID=6015822\u0026SID=168798533\u0026OUID=ctag.hash.ccjJjXXJOpYl\u0026Expires=1767670651990\u0026createtime=1765078651; UBT_VID=1765078651988.0c55yqsxjtpp; ibu_online_jump_site_result={\"isShowSuggestion\":false}; ibulanguage=EN; ibulocale=en_xx; cookiePricesDisplayed=USD; _abtest_userid=e7b40962-e94a-4116-9bcf-af1ceddea7af; _bfa=1.1765078651988.0c55yqsxjtpp.1.1765078653998.1765078653998.1.1.10320668088; _gcl_au=1.1.1944475785.1765078655; GUID=09034023113792808361; _fwb=202fgWTgpaFl4ko2G4nljfO.1765078656039\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/png\r\ncontent-length: 3538\r\nx-ares-server: r100013666-91017039-d2ncj@SHAXY\r\ntiming-allow-origin: *\r\nx-ares-source: aliyun\r\nx-ares-request-id: 6932770CBF8EA83032EC53F1\r\netag: W/\"dd18e643941c542700a68847291970c5\"\r\nlast-modified: Fri, 05 Dec 2025 06:09:16 GMT\r\nx-ares-raw-buffer-size: 3538\r\nx-backend-latency: 0.056\r\nx-varnish: 556923846 552341081\r\naccept-ranges: bytes\r\ncache-control: max-age=90973\r\nexpires: Mon, 08 Dec 2025 04:53:50 GMT\r\ndate: Sun, 07 Dec 2025 03:37:37 GMT\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 36124b4d\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":3538,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 66, 8-bit colormap, non-interlaced","md5":"dd18e643941c542700a68847291970c5","sha1":"fb37b15e83758a91fc0224b89dbd03670c1559d6","sha256":"3c645f5b17425446f0f2df9d6534fdc46460b8823145a1a588cf584d093f0a08","sha512":"f4f0890318182bfc93e9bab1d30205e60f1e675f7af9d32c5b8d398e3228836e14d991c57a99b3ed261daecea71a2d82c0f033033118a78e4252699d5d7d4baa","ssdeep":"","tlshash":"38715d40a5a751e8ea321faad075797126b3429f371f2c8a6d07f63d0f50921bf0e045","first_seen":"2023-05-22T11:20:34Z","last_seen":"2026-04-05T18:06:35.825538Z","times_seen":1620,"resource_available":false,"data":null}},"time_used":694,"timings":{"blocked":653,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/basebiz/ipoll-online-sdk/index.ebc5d439ea8db69057264a878b3a35a6.js","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:32.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /modules/basebiz/ipoll-online-sdk/index.ebc5d439ea8db69057264a878b3a35a6.js HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nx-ares-server: r100013666-21038164-wg5bn@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: 3H0Y6E2KH5Z2A8F3\r\netag: W/\"ebc5d439ea8db69057264a878b3a35a6\"\r\nlast-modified: Tue, 05 Aug 2025 15:41:37 GMT\r\nx-ares-raw-buffer-size: 207579\r\nx-backend-latency: 0.090\r\ncontent-encoding: gzip\r\nx-varnish: 274616703\r\naccept-ranges: bytes\r\ncontent-length: 61424\r\ncache-control: max-age=1741214\r\nexpires: Sat, 27 Dec 2025 07:17:46 GMT\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a207\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":207579,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65473)","md5":"ebc5d439ea8db69057264a878b3a35a6","sha1":"707c3eab4dd84c19c60b7057a6dfe793f7f43bba","sha256":"fddffda12b9a574412160a2c7d33945d2c5eab06f7e6a18aa9b66cfe88a81207","sha512":"1ac46689ae43154aea928c007d13bb64ac33a8d86faa6bfa13fbb37b1afd6c5d3c747b2debbcca34c59c4d0ae85456ac8c52ebab896fd2125c4a7a027e51b8fa","ssdeep":"3072:POjhKd3tX8o0Tv/ibqlE70iJvZHxcaNgfDTEF:PO0d3tjsimgnN0k","tlshash":"e71429d93992f42157f321b7106f1407b33d291b680c8950e216eddab8f945ea23bfad","first_seen":"2023-05-22T11:20:32Z","last_seen":"2026-04-15T17:38:47.498764Z","times_seen":2996,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":110,"dns":0,"connect":0,"send":0,"wait":18,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-s-cw.tripcdn.com/modules/ibu/online-home/onlineTripSketch.039e5d5bd04fc7a01a77a1930606d40f.css","fqdn":"ak-s-cw.tripcdn.com","domain":"tripcdn.com","tld":"com"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:32.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripcdn.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:4D:BA:37:23:80:59:99:F0:71:74:2C:4B:56:DB:27:D7:46:77:6B","sha256":"CE:02:2B:BC:A9:26:BC:BB:6A:72:2C:ED:F5:1F:51:B3:8F:E4:08:DD:F1:15:C9:C3:69:DC:EB:C7:6F:00:C9:C0"}}},"request":{"raw":"GET /modules/ibu/online-home/onlineTripSketch.039e5d5bd04fc7a01a77a1930606d40f.css HTTP/1.1\r\nHost: ak-s-cw.tripcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trip.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-ares-server: r100013666-21038164-8tr92@FRA-AWS\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-ares-source: aws\r\nx-ares-request-id: 4WB7AKBSGX1NE2SY\r\netag: W/\"039e5d5bd04fc7a01a77a1930606d40f\"\r\nlast-modified: Tue, 06 May 2025 20:03:43 GMT\r\nx-ares-raw-buffer-size: 3742\r\nx-backend-latency: 0.030\r\ncontent-encoding: gzip\r\nx-varnish: 86825538\r\nx-device: U R Android\r\naccept-ranges: bytes\r\ncontent-length: 1101\r\nakamai-amd-bc-debug: [a=2.20.251.134,b=91922759,c=w,d=1746902874,h=200,k=0,l=0,n=ES_MD_MADRID,o=20940,r=0,p=1101]\r\ncache-control: max-age=3090177\r\nexpires: Sun, 11 Jan 2026 22:00:29 GMT\r\ndate: Sun, 07 Dec 2025 03:37:32 GMT\r\naccess-control-expose-headers: c-via,x-cache,x-cdn-cache\r\nvary: Origin,Accept-Encoding\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: Hit\r\nunique-request-id: 6f57a234\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":3742,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3742), with no line terminators","md5":"039e5d5bd04fc7a01a77a1930606d40f","sha1":"4c3b248b92f9e6b005024c015f4fb8d6108d51d3","sha256":"f5d95e7fff724a9aea4c743d1810d326c5988ca8806becb1b8b310dd0ead8b3b","sha512":"4dd940ba2a16ba447c56d37b5c0a96eb4799f8262f3ee0cfc62f20daa3241fa2f14953328e26f73a47a298e1dcae99a3a25dd48640c7d6b927975b0b80b2134d","ssdeep":"","tlshash":"787104b5e18958da3333c43be7c4225c3496f63ad1568c54f38e923c4cc56562aadb3a","first_seen":"2024-07-08T23:38:24Z","last_seen":"2025-12-17T08:17:11.327753Z","times_seen":1605,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":68,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trip.com/restapi/soa2/18814/getRecommendHotel","fqdn":"www.trip.com","domain":"trip.com","tld":"com"},"ip":{"addr":"23.36.77.195","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003","date":"2025-12-07T03:37:36.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"Trip.com","organization":"Trip.com Travel Singapore Pte. Ltd."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:B0:58:44:00:B6:1C:3F:31:F1:13:C6:9E:79:ED:BF:94:E0:ED:3F","sha256":"5C:95:8D:AA:82:28:6A:92:14:4C:FA:D3:2F:2A:E8:CA:05:46:F9:33:D8:79:A6:41:F2:EA:97:9F:D3:D6:10:1F"}}},"request":{"raw":"POST /restapi/soa2/18814/getRecommendHotel HTTP/1.1\r\nHost: www.trip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.trip.com/?Allianceid=6015822\u0026SID=168798533\u0026trip_sub1=020aa79a60e94cd094bf00d65b509348\u0026trip_sub3=P3942003\r\ncookieOrigin: https://www.trip.com\r\nx-ctx-Currency: USD\r\nx-ctx-Locale: en-XX\r\nlocale: en-XX\r\ncurrency: USD\r\ncontent-type: application/json\r\nx-ctx-ubt-pageid: 10320668088\r\nx-ctx-ubt-pvid: 1\r\nx-ctx-ubt-sid: 1\r\nx-ctx-ubt-vid: 1765078651988.0c55yqsxjtpp\r\nx-ctx-wclient-req: 6bff85f2a2a3a3e792abd6c682f002fe\r\nContent-Length: 284\r\nOrigin: https://www.trip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: Union=AllianceID=6015822\u0026SID=168798533\u0026OUID=ctag.hash.ccjJjXXJOpYl\u0026Expires=1767670651990\u0026createtime=1765078651; UBT_VID=1765078651988.0c55yqsxjtpp; ibu_online_jump_site_result={\"isShowSuggestion\":false}; ibusite=EN; ibugroup=trip; ibulanguage=EN; ibulocale=en_xx; cookiePricesDisplayed=USD; ibu_cookie_strict=0; _abtest_userid=e7b40962-e94a-4116-9bcf-af1ceddea7af; _tp_search_latest_channel_name=hotels; _bfa=1.1765078651988.0c55yqsxjtpp.1.1765078653998.1765078653998.1.1.10320668088; _gcl_au=1.1.1944475785.1765078655; GUID=09034023113792808361; _fwb=202fgWTgpaFl4ko2G4nljfO.1765078656039; wcs_bt=s_33fb334966e9:1765078656\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":284,"data":"{\"head\":{\"cid\":\"\",\"ctok\":\"\",\"cver\":\"1.0\",\"lang\":\"01\",\"sid\":\"8888\",\"syscode\":\"09\",\"auth\":\"\",\"xsid\":\"\",\"extension\":[],\"Locale\":\"en-XX\",\"Language\":\"en\",\"Currency\":\"USD\",\"ClientID\":\"\",\"source\":\"Online\",\"locale\":\"en-XX\",\"currency\":\"USD\",\"vid\":\"1765078651988.0c55yqsxjtpp\"},\"anywhere\":true}"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\nx-cat-server: cat.fx.sgp.tripws.com:80\r\nx-cat-root-id: 100025527-0a9a02e0-490299-2457838\r\nx-cat-parent-id: 100025527-0a9a02e0-490299-2457838\r\nx-cat-id: 100025527-0a9a02e0-490299-2457852\r\nx-cat-root-url: http://cat.fx.sgp.tripws.com:80/cat/r/m/100025527-0a9a02e0-490299-2457838\r\nclogging_trace_id: 8468497849637866355\r\nrootmessageid: 100025527-0a9a02e0-490299-2457838\r\nservermessageid: 100025527-0a9a02e0-490299-2457852\r\nvary: accept-encoding\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://www.trip.com\r\naccess-control-allow-credentials: true\r\nx-gate-root-id: 100025527-0a9a02e0-490299-2457838\r\nx-gate-region: SGP-ALI\r\nx-service-call: 0.522\r\naccess-control-expose-headers: RootMessageId, x-service-call, x-gate-region\r\nx-gate: ctrip-gate\r\nx-originating-url: https://www.trip.com/restapi/soa2/18814/getRecommendHotel\r\nx-trip-region: de\r\ndate: Sun, 07 Dec 2025 03:37:37 GMT\r\ncontent-length: 1154\r\nquic-version: 0x00000001\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver-timing: cdn-cache; desc=MISS, edge; dur=6, origin; dur=720\r\nx-cdn-pop: NO\r\nc-via: akamai\r\nx-cdn-cache: MISS\r\nunique-request-id: 3612492f\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3890,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"e78968bd52e9fa1961ca0ae133f21828","sha1":"6f04e68e840c81edda1ae7ddb8c4a71b4ee02429","sha256":"2f4b243370edda597d11d50e83ce479b3d277825048a3be0126b1602b6cfafc7","sha512":"70ae89399decbc5ee1385cfc71576f9d4e69b970af10403c61e7e7d5802659558331f3604052ef222c2c2ff0ef6a1aa418059557a60b010b450d0fe2403fd988","ssdeep":"","tlshash":"078154469bada47cd75da5b1949b6372f4c822c793d44ae638ddcc1844c2fafd03290e","first_seen":"2025-12-07T03:38:26.159824Z","last_seen":"2025-12-07T03:38:26.159824Z","times_seen":1,"resource_available":false,"data":null}},"time_used":743,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":742,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}