302 Found 97 B URL User Request GET HTTP/2 IP
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type HTML document, ASCII text, with no line terminators
Hash 00eefc89282ee1479620b9ba4f250eb2
30148f8ab159f69a97cbe82d4ff9a33843966bb2
b0b9baccc0099ed739e94f4ba22865e28562ee6a3d9b0ae70d31258b7c5e133e
GET / HTTP/1.1
Host: www.trip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: text/html; charset=utf-8
content-length: 97
location: https://us.trip.com/?locale=en-us
server: nginx/1.20.1
date: Mon, 04 Dec 2023 13:27:18 GMT
set-cookie: UBT_VID=1701696438140.f76e6TctnaRh;domain=.trip.com;path=/;expires=Tue, 07 Jan 2025 13:27:18 GMT
kafka_result={"isDirectVisit":"1","hasUrlLocale":"0","hasCookieLocale":"0","isUrlCookieSame":"0","isJump":"1","jumpType":"targetLocale","platform":"online","vid":"1701696438140.f76e6TctnaRh"}; Domain=trip.com; Expires=Tue, 03 Dec 2024 13:27:18 GMT
ibu_online_home_language_match={"isRedirect":false,"isShowSuggestion":true,"lastVisited":true,"region":"no","redirectSymbol":true,"site_url":["us.trip.com"],"suggestion":["en-xx","en-us","ar-xx"]}; Domain=trip.com; Expires=Tue, 03 Dec 2024 13:27:18 GMT
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-download-options: noopen
x-readtime: 19
x-trip-app-name: online-home
x-trip-app-version: 2.36.0
x-trip-app-idc: SIN-AWS
content-security-policy-report-only: default-src * data: blob:; connect-src https://*.tripcdn.com *.c-ctrip.com https://*.trip.com https://*.ctrip.com https://*.doubleclick.net https://*.google.com https://*.tiktok.com https://*.bing.com https://*.mapbox.com https://*.skyscanner.net https://*.tripcdn.cn https://*.google-analytics.com https://*.braze.com https://*.yandex.ru https://*.googleapis.com https://*.facebook.com https://*.googletagmanager.com https://*.gstatic.com https://wcs.naver.com https://wcs.naver.net https://connect.facebook.net https://cdn.2trk.info https://b98.yahoo.co.jp https://widget.trustpilot.com https://s.yimg.jp https://altopd.com wss://im.trip.com;script-src 'unsafe-eval' 'unsafe-inline' https://*.naver.net https://*.trip.com https://*.tripcdn.com https://*.tripcdn.cn https://*.c-ctrip.com https://*.google.com https://*.doubleclick.net https://*.googletagmanager.com https://*.google-analytics.com https://unpkg.com https://altopd.com https://*.tiktok.com https://*.facebook.net https://*.bing.com https://*.googleapis.com https://*.yahoo.co.jp https://*.2trk.info https://*.yimg.jp https://*.trustpilot.com https://appx-t2 https://*.skyscanner.net https://*.alipayobjects.com https://*.rakuten.com https://*.qunarzz.com https://*.googleadservices.com https://*.yandex.ru https://*.qq.com https://*.ctrip.com https://*.innity.net https://*.ucweb.com https://*.baidu.com https://*.googlesyndication.com https://*.jsdelivr.net https://*.tripcdn.com https://hublosk.com https://*.yimg.com https://boxclone.com https://*.hotjar.com https://*.google.ae https://*.valuecommerce.com https://*.google.de https://jullyambery.net https://*.innity.com https://appx https://*.criteo.com https://*.apaylater.com https://*.maynhtml.com https://*.google.com.my https://*.google.com.hk https://*.mapbox.com blob:; style-src 'unsafe-inline' https://*.tripcdn.com https://*.trip.com https://*.tripcdn.cn https://*.google.com https://*.googleapis.com https://*.fontawesome.com https://*.honey.io https://*.gstatic.com https://*.c-ctrip.com https://*.cloudflare.com data: ; child-src 'self' https://*.ctripcorp.com https://*.invol.co https://*.googlesyndication.com https://*.google.com https://*.trustpilot.com https://*.facebook.com https://*.lcmark.net https://*.ubpixel.com https://*.altopd.com https://*.youtube.com https://*.2trk.info https://*.2trck.pro https://*.doubleclick.net https://*.kakao.com https://*.dotomi.com https://*.tkqlhce.com https://*.criteo.com https://*.infobip.com https://*.ucweb.com https://*.moontrkr.com https://*.matterport.com https://*.trckqq.com https://*.trip.com https://altopd.com https://invol.co https://stvkr.com https://redirtrack.tech https://noop.style https://*.admitad.com https://*.kittyswell.one https://*.keloogux.world https://childrenshoppingguide.com https://*.youtube-nocookie.com https://*.factoryhotsales.shop https://*.skillmatrix.live https://shoppingderby.com blob:; object-src https://*.trip.com; report-uri https://www.trip.com/security/csp-report; report-to /security/csp-report;
x-trip-region: sg, de
x-cache: Miss from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 4Zt9Yo-hP58BS32SSDPnF9gt9huUhhKUKlyOnKsyXGy6kixhCm6D0g==
timing-allow-origin: *
X-Firefox-Spdy: h2
aw-s.tripcdn.com/modules/ibu/online-assets/font.8b215ec9f021aea08f190dd0371753f1.css
200 OK 1.3 kB URL GET HTTP/2 aw-s.tripcdn.com/modules/ibu/online-assets/font.8b215ec9f021aea08f190dd0371753f1.css
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type Unicode text, UTF-8 text, with very long lines (5929), with no line terminators
Hash 8b215ec9f021aea08f190dd0371753f1
1f4027532c53240e961f5c504d5d9d617b299b3f
8d33e4dc2163d07f594a97ad4a1daaa0e9c5f4692b7c7cfdcb88629f4d8c4433
GET /modules/ibu/online-assets/font.8b215ec9f021aea08f190dd0371753f1.css HTTP/1.1
Host: aw-s.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
content-length: 1343
server: nginx/1.20.1
date: Sun, 22 Oct 2023 19:23:00 GMT
x-ares-server: r100013666-21038164-rn9lq@FRA-AWS
timing-allow-origin: *
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aws
x-ares-request-id: QCR8BP8RGQ4YER1P
etag: W/"8b215ec9f021aea08f190dd0371753f1"
last-modified: Thu, 25 May 2023 04:02:09 GMT
cache-control: max-age=5184000
expires: Sun, 12 Nov 2023 06:53:24 GMT
content-encoding: gzip
x-varnish: 29993564 7064579
via: 1.1 varnish (Varnish/6.5), 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
x-device: U R iPhone
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: -eGnR2P_xdn0LgIhpAdL0ja0bZBTeIMbMyNtaloflw-pviaAM50iYA==
age: 3693858
X-Firefox-Spdy: h2
aw-s.tripcdn.com/locale/v3/6002/en-US.js?etagc=f0af6dbfe5f7a3d1b3bf7001472deb28
200 OK 4.9 kB URL GET HTTP/2 aw-s.tripcdn.com/locale/v3/6002/en-US.js?etagc=f0af6dbfe5f7a3d1b3bf7001472deb28
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type Unicode text, UTF-8 text, with very long lines (26870)
Hash f0af6dbfe5f7a3d1b3bf7001472deb28
b107100fe3339da8cd9ac2733f84025a9e70438f
212ba020f3624dcebc1d99ef0968d7eac94a85df0a4464b2da27c4c7fdd55f03
GET /locale/v3/6002/en-US.js?etagc=f0af6dbfe5f7a3d1b3bf7001472deb28 HTTP/1.1
Host: aw-s.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 4876
server: nginx/1.20.1
date: Sun, 05 Nov 2023 18:52:19 GMT
x-ares-server: r100013666-21038164-wpn2c@FRA-AWS
timing-allow-origin: *
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aws
x-ares-request-id: FP2HEFHGWAQA77FN
last-modified: Wed, 30 Aug 2023 09:01:16 GMT
cache-control: max-age=5184000
expires: Thu, 28 Dec 2023 09:05:11 GMT
content-encoding: gzip
x-varnish: 37639547 34999322
via: 1.1 varnish (Varnish/6.5), 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
accept-ranges: bytes
etag: W/"f0af6dbfe5f7a3d1b3bf7001472deb28"
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: zT0di06jjYNLVVuGxOSh73KBhGUXmNZzyQ5OPHFy9sevoGKQSKZ8SA==
age: 2486100
X-Firefox-Spdy: h2
aw-s.tripcdn.com/modules/ibu/online-home/onlineHome.3500aaae24f49f225e293315af7647d2.css
200 OK 21 kB URL GET HTTP/2 aw-s.tripcdn.com/modules/ibu/online-home/onlineHome.3500aaae24f49f225e293315af7647d2.css
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 3500aaae24f49f225e293315af7647d2
253e2224487bbb3c79d5e80f10ab784163c839f4
15f8ffa37a01ace9de90a34fcd5c31ae9a5ee9976817da9db34ded5a4c1fe634
GET /modules/ibu/online-home/onlineHome.3500aaae24f49f225e293315af7647d2.css HTTP/1.1
Host: aw-s.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
content-length: 20691
server: nginx/1.20.1
date: Tue, 28 Nov 2023 00:25:36 GMT
x-ares-server: r100013666-21038164-6lnwn@FRA-AWS
timing-allow-origin: *
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aws
x-ares-request-id: PCGEJM6V35T2XP98
etag: W/"3500aaae24f49f225e293315af7647d2"
last-modified: Thu, 23 Nov 2023 06:31:23 GMT
cache-control: max-age=5184000
expires: Mon, 22 Jan 2024 06:38:16 GMT
content-encoding: gzip
x-varnish: 52083469 48462439
via: 1.1 varnish (Varnish/6.5), 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 1OLqpEkcCSHFBBAWYfBEx7R-tOgWu8Uhc89pSgKSFSlQgrTLSXlA_A==
age: 565303
X-Firefox-Spdy: h2
aw-s.tripcdn.com/modules/basebiz/ipoll-online-sdk/index.ebc5d439ea8db69057264a878b3a35a6.js
200 OK 61 kB URL GET HTTP/2 aw-s.tripcdn.com/modules/basebiz/ipoll-online-sdk/index.ebc5d439ea8db69057264a878b3a35a6.js
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type ASCII text, with very long lines (65473)
Hash ebc5d439ea8db69057264a878b3a35a6
707c3eab4dd84c19c60b7057a6dfe793f7f43bba
fddffda12b9a574412160a2c7d33945d2c5eab06f7e6a18aa9b66cfe88a81207
GET /modules/basebiz/ipoll-online-sdk/index.ebc5d439ea8db69057264a878b3a35a6.js HTTP/1.1
Host: aw-s.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
content-length: 61173
server: nginx/1.20.1
date: Mon, 09 Oct 2023 10:15:17 GMT
x-ares-server: r100013666-21038164-sgtc6@FRA-AWS
timing-allow-origin: *
access-control-allow-origin: https://us.trip.com
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aws
x-ares-request-id: 4JWRVD7WNRZ4N36T
etag: W/"ebc5d439ea8db69057264a878b3a35a6"
last-modified: Thu, 12 Jan 2023 03:55:37 GMT
cache-control: max-age=5184000
expires: Fri, 01 Dec 2023 21:01:15 GMT
content-encoding: gzip
x-varnish: 23988741 16692748
via: 1.1 varnish (Varnish/6.5), 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: E8f41ue36clHyioBkbIIFDG61Qt-9WhJ8rIA4QVdHbK5Ar1iek9H-A==
age: 4849922
X-Firefox-Spdy: h2
aw-s.tripcdn.com/polyfill.js
200 OK 72 B URL GET HTTP/2 aw-s.tripcdn.com/polyfill.js
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
Hash 7bf5fb2fd30cea050be6a48b90343984
e3d8fc7eec3e4338218b844d40a1ae86cc8581c6
aaecd144d2b8763b2fa5c91f09778294363cef363c10504205f4203922644d11
GET /polyfill.js HTTP/1.1
Host: aw-s.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
content-length: 72
server: nginx/1.20.1
date: Mon, 04 Dec 2023 13:27:19 GMT
x-ares-server: r100013666-21038164-vllrk@FRA-AWS
timing-allow-origin: *
access-control-allow-origin: *
etag: W/"48-49j8fuw+Qzghi4RNQKGuhsyFgcY"
last-modified: Tue, 24 Oct 2023 18:42:43 GMT
cache-control: max-age=5184000
expires: Sat, 23 Dec 2023 18:42:43 GMT
x-varnish: 55945922 31804410
via: 1.1 varnish (Varnish/6.5), 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: User-Agent,Origin,Accept-Encoding
x-cache: Miss from cloudfront
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: hTJkKMDMFZvwxQ-4C9RAGmmuOAVIVJiZcvaaTBmeLhFcZjwGmPVCFg==
X-Firefox-Spdy: h2
ak-d.tripcdn.com/images/0a15o12000cgpklf2E9DD.png
200 OK 29 kB URL GET HTTP/2 ak-d.tripcdn.com/images/0a15o12000cgpklf2E9DD.png
IP
ASN #20940 Akamai International B.V.
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerDigiCert Inc
Subject*.tripcdn.com
Fingerprint39:6D:BD:C3:37:CE:BB:D7:E0:9C:B9:5D:15:48:7D:02:6D:95:1D:6C
ValidityThu, 06 Apr 2023 00:00:00 GMT - Fri, 05 Apr 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 752x376, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 8c2ea8acbb2185deda64333495476467
522cac59179eb41f293f826b5f297f2b7b1d2efd
531803a8d621a59c1dc2a689a6bda12649fa33ccbb04ceab0258135465c01633
GET /images/0a15o12000cgpklf2E9DD.png HTTP/1.1
Host: ak-d.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/webp
content-length: 29186
access-control-allow-origin: *
etag: sPREpsiFkE,0a1
last-modified: Mon, 30 Oct 2023 23:40:34 GMT
x-edgeconnect-midmile-rtt: 0
x-edgeconnect-origin-mex-latency: 124
cache-control: max-age=7736008
expires: Sun, 03 Mar 2024 02:20:47 GMT
date: Mon, 04 Dec 2023 13:27:19 GMT
alt-svc: h3=":443"; ma=93600
timing-allow-origin: *
X-Firefox-Spdy: h2
ak-d.tripcdn.com/images/0a13x12000cl95ufe7659.png
200 OK 32 kB URL GET HTTP/2 ak-d.tripcdn.com/images/0a13x12000cl95ufe7659.png
IP
ASN #20940 Akamai International B.V.
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerDigiCert Inc
Subject*.tripcdn.com
Fingerprint39:6D:BD:C3:37:CE:BB:D7:E0:9C:B9:5D:15:48:7D:02:6D:95:1D:6C
ValidityThu, 06 Apr 2023 00:00:00 GMT - Fri, 05 Apr 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 752x376, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 563e8a88063b911e9399526894feeb02
65e34b19ce683ee495c7ce2fe24f33f1ecae9906
28a5b44d7715b723d34ee1ec83a61f3ec3e0b6f684a50693ff8263970c78a088
GET /images/0a13x12000cl95ufe7659.png HTTP/1.1
Host: ak-d.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/webp
content-length: 31936
access-control-allow-origin: *
etag: AiccLGFb79,0a1
last-modified: Tue, 21 Nov 2023 05:32:11 GMT
x-edgeconnect-midmile-rtt: 6, 26
x-edgeconnect-origin-mex-latency: 34, 34
cache-control: max-age=6624370
expires: Mon, 19 Feb 2024 05:33:29 GMT
date: Mon, 04 Dec 2023 13:27:19 GMT
alt-svc: h3=":443"; ma=93600
timing-allow-origin: *
X-Firefox-Spdy: h2
ak-d.tripcdn.com/images/0a16x12000cghu40xBE02.jpg
200 OK 194 kB URL GET HTTP/2 ak-d.tripcdn.com/images/0a16x12000cghu40xBE02.jpg
IP
ASN #20940 Akamai International B.V.
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerDigiCert Inc
Subject*.tripcdn.com
Fingerprint39:6D:BD:C3:37:CE:BB:D7:E0:9C:B9:5D:15:48:7D:02:6D:95:1D:6C
ValidityThu, 06 Apr 2023 00:00:00 GMT - Fri, 05 Apr 2024 23:59:59 GMT
File type JPEG image data, progressive, precision 8, 752x376, components 3\012- data
Size 194 kB (193657 bytes)
Hash 39cd060d9c69b86e41efe6d583e8d220
e6ffc7e653470e1a36715e19d39aa5ae4f3a03bc
6172a06ac2093969fa65d704be2c1450b6aab8d6aadb11bba538394090f9c6b7
GET /images/0a16x12000cghu40xBE02.jpg HTTP/1.1
Host: ak-d.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
content-length: 193657
access-control-allow-origin: *
etag: sPREpsiFkE,0a1
last-modified: Thu, 26 Oct 2023 09:15:12 GMT
cache-control: max-age=7635802
expires: Fri, 01 Mar 2024 22:30:41 GMT
date: Mon, 04 Dec 2023 13:27:19 GMT
alt-svc: h3=":443"; ma=93600
timing-allow-origin: *
X-Firefox-Spdy: h2
aw-s.tripcdn.com/modules/ibu/online-assets/TripGeom-Regular.ba9c64b894f5e19551d23b37a07ba0a4.woff2?t=1684398294023
200 OK 44 kB URL GET HTTP/2 aw-s.tripcdn.com/modules/ibu/online-assets/TripGeom-Regular.ba9c64b894f5e19551d23b37a07ba0a4.woff2?t=1684398294023
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type Web Open Font Format (Version 2), TrueType, length 43896, version 1.0\012- data
Hash ba9c64b894f5e19551d23b37a07ba0a4
e092022246001f2ef53b676cfa4cc4983709d1a3
74a9864e6b2492db16ea31cf4099de9979a1de19d9fb1e26e83e4cb9507a1391
GET /modules/ibu/online-assets/TripGeom-Regular.ba9c64b894f5e19551d23b37a07ba0a4.woff2?t=1684398294023 HTTP/1.1
Host: aw-s.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://aw-s.tripcdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: font/woff2
content-length: 43896
server: nginx/1.20.1
date: Mon, 04 Dec 2023 12:12:40 GMT
x-ares-server: r100013666-21038164-fsr9l@FRA-AWS
timing-allow-origin: *
access-control-allow-origin: https://us.trip.com
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aws
x-ares-request-id: 66PKGJ8WKR1TJQ8F
etag: W/"ba9c64b894f5e19551d23b37a07ba0a4"
last-modified: Fri, 19 May 2023 09:28:38 GMT
cache-control: max-age=5184000
expires: Fri, 02 Feb 2024 08:22:39 GMT
x-varnish: 55943800 55980732
via: 1.1 varnish (Varnish/6.5), 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: j3nENxD2nz4JcwFVVRtCqVdM5J9cfg35dVbrX5uTs3L4PTSTYQf9VA==
age: 4479
X-Firefox-Spdy: h2
aw-s.tripcdn.com/modules/ibu/online-assets/TripGeom-Bold.9e9e0eb59209311df954413ff4957cbb.woff2?t=1684398294023
200 OK 43 kB URL GET HTTP/2 aw-s.tripcdn.com/modules/ibu/online-assets/TripGeom-Bold.9e9e0eb59209311df954413ff4957cbb.woff2?t=1684398294023
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type Web Open Font Format (Version 2), TrueType, length 43076, version 1.0\012- data
Hash 9e9e0eb59209311df954413ff4957cbb
395b1abe99c8a8f286e04b1797e33a01b0628f21
695d50b5676e4f85b5c99bae0fec01f77541453d27672c2949c2500941fa3efd
GET /modules/ibu/online-assets/TripGeom-Bold.9e9e0eb59209311df954413ff4957cbb.woff2?t=1684398294023 HTTP/1.1
Host: aw-s.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://aw-s.tripcdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: font/woff2
content-length: 43076
server: nginx/1.20.1
date: Sat, 02 Dec 2023 18:04:01 GMT
x-ares-server: r100013666-21038164-wf48r@FRA-AWS
timing-allow-origin: *
access-control-allow-origin: https://us.trip.com
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aws
x-ares-request-id: 74AKZXASP030KM69
etag: W/"9e9e0eb59209311df954413ff4957cbb"
last-modified: Fri, 19 May 2023 09:28:34 GMT
cache-control: max-age=5184000
expires: Wed, 31 Jan 2024 18:04:01 GMT
x-varnish: 55159269
via: 1.1 varnish (Varnish/6.5), 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: x-PrVfcVGjkEuqXq1dqqFcH6VO_Y5LA8hu6aE_V_3NlIVx_FrJzNTA==
age: 156198
X-Firefox-Spdy: h2
ak-d.tripcdn.com/images/05E3s12000cmarxu50A1C.webp
200 OK 83 kB URL GET HTTP/2 ak-d.tripcdn.com/images/05E3s12000cmarxu50A1C.webp
IP
ASN #20940 Akamai International B.V.
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerDigiCert Inc
Subject*.tripcdn.com
Fingerprint39:6D:BD:C3:37:CE:BB:D7:E0:9C:B9:5D:15:48:7D:02:6D:95:1D:6C
ValidityThu, 06 Apr 2023 00:00:00 GMT - Fri, 05 Apr 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash aa9b38078f716dea12a66dd865d46651
fbf0cc54132ada897b8ed23d347d009054dc291a
6c1e0b9fdd966028c8fa0f244e1f4dfb20cc75947669984eade1708a20724358
GET /images/05E3s12000cmarxu50A1C.webp HTTP/1.1
Host: ak-d.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aw-s.tripcdn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Wed, 22 Nov 2023 10:29:13 GMT
etag: AiccLGFb79,05E
content-type: image/webp
content-length: 82866
access-control-allow-origin: *
x-edgeconnect-midmile-rtt: 0
x-edgeconnect-origin-mex-latency: 588
cache-control: max-age=6989531
expires: Fri, 23 Feb 2024 10:59:30 GMT
date: Mon, 04 Dec 2023 13:27:19 GMT
alt-svc: h3=":443"; ma=93600
timing-allow-origin: *
X-Firefox-Spdy: h2
aw-s.tripcdn.com/modules/ibu/online-home/vendor.3c858daa285728e872a932fcf408e0a5.js
200 OK 38 kB URL GET HTTP/2 aw-s.tripcdn.com/modules/ibu/online-home/vendor.3c858daa285728e872a932fcf408e0a5.js
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type ASCII text, with very long lines (58442)
Hash 3c858daa285728e872a932fcf408e0a5
85dab2c49a9133334e209fc383f4e53a1103a93d
34f7b8802fb295a5acca1e56671afb7f469cdc2276981db1a57a3c615eb139ea
GET /modules/ibu/online-home/vendor.3c858daa285728e872a932fcf408e0a5.js HTTP/1.1
Host: aw-s.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript
content-length: 38414
age: 505706
server: nginx/1.20.1
date: Tue, 28 Nov 2023 16:58:53 GMT
x-ares-server: r100013666-21038164-48hkp@FRA-AWS
timing-allow-origin: *
access-control-allow-origin: https://us.trip.com
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aws
x-ares-request-id: CJJQDB3HSWAZF0YY
etag: W/"3c858daa285728e872a932fcf408e0a5"
last-modified: Thu, 23 Nov 2023 06:31:34 GMT
cache-control: max-age=5184000
expires: Mon, 22 Jan 2024 06:34:26 GMT
content-encoding: gzip
x-varnish: 52797055 48745529
via: 1.1 varnish (Varnish/6.5), 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: TCXHvq2iWs0Xu3tXCgZxMl3ZziMp7s2RohOUrKUrWpsSe9z2dhfTkA==
aw-s.tripcdn.com/modules/ibu/online-home/common.ef71cf82b9b12d5c0e4281b7855bb2bb.js
200 OK 78 kB URL GET HTTP/3 aw-s.tripcdn.com/modules/ibu/online-home/common.ef71cf82b9b12d5c0e4281b7855bb2bb.js
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash ef71cf82b9b12d5c0e4281b7855bb2bb
61496763a8d6273e174bccd6c2ecb2f73c0473d4
f59bb837659663d207a9301a5d17386fa58b5e538b3dde26b254e235009315d9
GET /modules/ibu/online-home/common.ef71cf82b9b12d5c0e4281b7855bb2bb.js HTTP/1.1
Host: aw-s.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript
content-length: 78436
age: 607253
server: nginx/1.20.1
date: Mon, 27 Nov 2023 12:46:26 GMT
x-ares-server: r100013666-21038164-fsr9l@FRA-AWS
timing-allow-origin: *
access-control-allow-origin: https://us.trip.com
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aws
x-ares-request-id: F9QS5QQYMAWT9SC7
etag: W/"ef71cf82b9b12d5c0e4281b7855bb2bb"
last-modified: Mon, 27 Nov 2023 12:44:46 GMT
cache-control: max-age=5184000
expires: Fri, 26 Jan 2024 12:45:56 GMT
content-encoding: gzip
x-varnish: 52045871 51101591
via: 1.1 varnish (Varnish/6.5), 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: Zanc8eXLE_HUeLqgf-VLP1affcRzBtReE4ygqUGJDQM4S1XCzKZMDw==
ak-d.tripcdn.com/images/05E0412000cga1j9t7151.svg
200 OK 851 B URL GET HTTP/2 ak-d.tripcdn.com/images/05E0412000cga1j9t7151.svg
IP
ASN #20940 Akamai International B.V.
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerDigiCert Inc
Subject*.tripcdn.com
Fingerprint39:6D:BD:C3:37:CE:BB:D7:E0:9C:B9:5D:15:48:7D:02:6D:95:1D:6C
ValidityThu, 06 Apr 2023 00:00:00 GMT - Fri, 05 Apr 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (1827), with no line terminators
Hash 192d0a02740d20818b21c2b09c561a14
a8fecd93870582a343a4a0f6c05d9227100c3cb0
3e56c54e35088c279be39ee1226ded32d5c45a7217390375129771a583282dfa
GET /images/05E0412000cga1j9t7151.svg HTTP/1.1
Host: ak-d.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aw-s.tripcdn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
access-control-allow-origin: *
etag: sPREpsiFkE,05E
last-modified: Tue, 07 Nov 2023 12:27:13 GMT
content-encoding: gzip
content-length: 851
cache-control: max-age=7736006
expires: Sun, 03 Mar 2024 02:20:45 GMT
date: Mon, 04 Dec 2023 13:27:19 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=93600
timing-allow-origin: *
X-Firefox-Spdy: h2
aw-s.tripcdn.com/polyfill.js
200 OK 72 B URL GET HTTP/2 aw-s.tripcdn.com/polyfill.js
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
Hash 7bf5fb2fd30cea050be6a48b90343984
e3d8fc7eec3e4338218b844d40a1ae86cc8581c6
aaecd144d2b8763b2fa5c91f09778294363cef363c10504205f4203922644d11
GET /polyfill.js HTTP/1.1
Host: aw-s.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript
content-length: 72
alt-svc: h3=":443"; ma=86400
server: nginx/1.20.1
date: Mon, 04 Dec 2023 13:27:19 GMT
x-ares-server: r100013666-21038164-wf48r@FRA-AWS
timing-allow-origin: *
access-control-allow-origin: *
etag: W/"48-49j8fuw+Qzghi4RNQKGuhsyFgcY"
last-modified: Sat, 25 Nov 2023 09:11:33 GMT
cache-control: max-age=5184000
expires: Wed, 24 Jan 2024 09:11:33 GMT
x-varnish: 55945923 50192721
via: 1.1 varnish (Varnish/6.5), 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: User-Agent,Origin,Accept-Encoding
x-cache: Miss from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: JNvJCQAWuiG5q--8XoHRZF66LrkKypuzckeTFCSSDY7l3NnxRhI2wg==
aw-s.tripcdn.com/locale/v3/100009239/en-US.js?etagc=0d8f72e8b207c872704fb30ca71b814d
200 OK 4.9 kB URL GET HTTP/3 aw-s.tripcdn.com/locale/v3/100009239/en-US.js?etagc=0d8f72e8b207c872704fb30ca71b814d
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type Unicode text, UTF-8 text, with very long lines (9647)
Hash 0d8f72e8b207c872704fb30ca71b814d
d6d4e48d1b3148639c9f33fe3061b79431b4693c
6caaee5560396298af6d7964511087c11cdafc3bdc3ca014a7bd46f74c340104
GET /locale/v3/100009239/en-US.js?etagc=0d8f72e8b207c872704fb30ca71b814d HTTP/1.1
Host: aw-s.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript
content-length: 4938
age: 492955
server: nginx/1.20.1
date: Tue, 28 Nov 2023 20:31:24 GMT
x-ares-server: r100013666-21038164-62zrs@FRA-AWS
timing-allow-origin: *
access-control-allow-origin: https://us.trip.com
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aws
x-ares-request-id: 7RDXJ34XXW18G604
etag: W/"0d8f72e8b207c872704fb30ca71b814d"
last-modified: Mon, 06 Nov 2023 15:01:06 GMT
cache-control: max-age=5184000
expires: Fri, 05 Jan 2024 15:05:05 GMT
content-encoding: gzip
x-varnish: 53053366 38878747
via: 1.1 varnish (Varnish/6.5), 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: j59efEe84TZPDcHxdpl3ziJIQ2DlFdstDgNn8PiWSizQgn4Nw26WAg==
pages.trip.com/images/home-background/head-banner-bg-new-1024.jpg
200 OK 111 kB URL GET HTTP/2 pages.trip.com/images/home-background/head-banner-bg-new-1024.jpg
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1536x1536, components 3\012- data
Size 111 kB (111145 bytes)
Hash 6620ff5c5e4d2e8975b8d3305cd80208
9d7f224ba99669f5def391ae261c30f695d49975
7a253a247aa15325307671159650ce39e3e0e4c1a98acbb4e30105cc83d10cd0
GET /images/home-background/head-banner-bg-new-1024.jpg HTTP/1.1
Host: pages.trip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Cookie: UBT_VID=1701696438140.f76e6TctnaRh; kafka_result={"isDirectVisit":"1","hasUrlLocale":"1","hasCookieLocale":"0","isUrlCookieSame":"0","isJump":"0","jumpType":"targetLocale","platform":"online","vid":"1701696438140.f76e6TctnaRh"}; ibu_online_home_language_match={"isRedirect":false,"isShowSuggestion":true,"lastVisited":true,"region":"no","redirectSymbol":false,"site_url":["us.trip.com"],"suggestion":[]}; ibulanguage=EN; ibulocale=en_us; cookiePricesDisplayed=USD; _abtest_userid=77c3b86c-476f-4ca5-8c73-e743bcffbe04
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
content-length: 111145
x-ares-server: r100013666-91017039-vgd7v@SHAXY
x-ares-source: aliyun
x-ares-request-id: 6568701F7A727D33318590B6
last-modified: Tue, 11 Oct 2022 09:14:38 GMT
timing-allow-origin: *
x-varnish: 492383562 484923999
via: 1.1 varnish (Varnish/6.5), 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
accept-ranges: bytes
date: Sun, 03 Dec 2023 06:17:47 GMT
cache-control: max-age=172800
expires: Tue, 05 Dec 2023 06:17:47 GMT
etag: W/"6620ff5c5e4d2e8975b8d3305cd80208"
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: -Hl3VJA6KEWM_Zw494HlLdyO7yuPkqux99EnBtkVyf6mKarvMPv4gQ==
age: 112171
X-Firefox-Spdy: h2
pages.trip.com/images/components/flags.webp
200 OK 16 kB URL GET HTTP/2 pages.trip.com/images/components/flags.webp
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash b9e94b0cd1a4ea113c64a1d378659d34
2d9c0a014cca51139dad275b82ba7502c9488efd
ce95cafe01b5e6bad798c228b7dd96420c9b7409e3b8f9db1e26779bbb4bea8f
GET /images/components/flags.webp HTTP/1.1
Host: pages.trip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aw-s.tripcdn.com/
Cookie: UBT_VID=1701696438140.f76e6TctnaRh; kafka_result={"isDirectVisit":"1","hasUrlLocale":"1","hasCookieLocale":"0","isUrlCookieSame":"0","isJump":"0","jumpType":"targetLocale","platform":"online","vid":"1701696438140.f76e6TctnaRh"}; ibu_online_home_language_match={"isRedirect":false,"isShowSuggestion":true,"lastVisited":true,"region":"no","redirectSymbol":false,"site_url":["us.trip.com"],"suggestion":[]}; ibulanguage=EN; ibulocale=en_us; cookiePricesDisplayed=USD; _abtest_userid=77c3b86c-476f-4ca5-8c73-e743bcffbe04
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/webp
content-length: 16216
date: Sat, 02 Dec 2023 16:10:27 GMT
x-ares-server: r100013666-91017039-h22m9@SHAXY
x-ares-source: aliyun
x-ares-request-id: 656B56F3B1DB883035416D7E
etag: W/"b9e94b0cd1a4ea113c64a1d378659d34"
last-modified: Wed, 14 Jun 2023 09:00:11 GMT
cache-control: max-age=172800
expires: Mon, 04 Dec 2023 16:10:27 GMT
timing-allow-origin: *
x-varnish: 534717186
via: 1.1 varnish (Varnish/6.5), 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: EhYNZ3R9TN9hw8IW5fBNCFURQRQtrcymcSBgOorJvwGlfib6OR-9Uw==
age: 163012
X-Firefox-Spdy: h2
pages.trip.com/images/home-background/head-banner-bg-new-1920.webp
200 OK 83 kB URL GET HTTP/2 pages.trip.com/images/home-background/head-banner-bg-new-1920.webp
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash aa9b38078f716dea12a66dd865d46651
fbf0cc54132ada897b8ed23d347d009054dc291a
6c1e0b9fdd966028c8fa0f244e1f4dfb20cc75947669984eade1708a20724358
GET /images/home-background/head-banner-bg-new-1920.webp HTTP/1.1
Host: pages.trip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Cookie: UBT_VID=1701696438140.f76e6TctnaRh; kafka_result={"isDirectVisit":"1","hasUrlLocale":"1","hasCookieLocale":"0","isUrlCookieSame":"0","isJump":"0","jumpType":"targetLocale","platform":"online","vid":"1701696438140.f76e6TctnaRh"}; ibu_online_home_language_match={"isRedirect":false,"isShowSuggestion":true,"lastVisited":true,"region":"no","redirectSymbol":false,"site_url":["us.trip.com"],"suggestion":[]}; ibulanguage=EN; ibulocale=en_us; cookiePricesDisplayed=USD; _abtest_userid=77c3b86c-476f-4ca5-8c73-e743bcffbe04
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/webp
content-length: 82866
x-ares-server: r100013666-21027498-lzgxf@SHARB
x-ares-source: aliyun
x-ares-request-id: 656A35457C95963134ED0886
last-modified: Tue, 11 Oct 2022 09:23:31 GMT
timing-allow-origin: *
x-varnish: 117395358
via: 1.1 varnish (Varnish/6.5), 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-device: U R Android
accept-ranges: bytes
date: Sun, 03 Dec 2023 19:34:55 GMT
cache-control: max-age=172800
expires: Tue, 05 Dec 2023 19:34:55 GMT
etag: W/"aa9b38078f716dea12a66dd865d46651"
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: GxR2NkR3feBdYeC5xUa63tMpcMp9LrsScV8z8gZWB7hsyY90vTmhRg==
age: 64343
X-Firefox-Spdy: h2
aw-s.tripcdn.com/locale/v3/6002/en-US.js?etagc=f0af6dbfe5f7a3d1b3bf7001472deb28
200 OK 4.9 kB URL GET HTTP/2 aw-s.tripcdn.com/locale/v3/6002/en-US.js?etagc=f0af6dbfe5f7a3d1b3bf7001472deb28
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type Unicode text, UTF-8 text, with very long lines (26870)
Hash f0af6dbfe5f7a3d1b3bf7001472deb28
b107100fe3339da8cd9ac2733f84025a9e70438f
212ba020f3624dcebc1d99ef0968d7eac94a85df0a4464b2da27c4c7fdd55f03
GET /locale/v3/6002/en-US.js?etagc=f0af6dbfe5f7a3d1b3bf7001472deb28 HTTP/1.1
Host: aw-s.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript
content-length: 4876
age: 1480353
server: nginx/1.20.1
date: Fri, 17 Nov 2023 10:14:46 GMT
x-ares-server: r100013666-21038164-2qznj@FRA-AWS
timing-allow-origin: *
access-control-allow-origin: https://us.trip.com
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aws
x-ares-request-id: AK5C80FSP8MPHJ57
etag: W/"f0af6dbfe5f7a3d1b3bf7001472deb28"
last-modified: Wed, 30 Aug 2023 09:01:16 GMT
cache-control: max-age=5184000
expires: Wed, 27 Dec 2023 14:26:12 GMT
content-encoding: gzip
x-varnish: 46574322 33900949
via: 1.1 varnish (Varnish/6.5), 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: NYSakJTdl1_O9dCzMuDVuL2fotc96HtqtyQ2MBs4NTqgD5AtxPMKrw==
aw-s.tripcdn.com/locale/v3/100014113/en-US.js?etagc=a4b28f7aac396dabbd4faa713ff12a87
200 OK 100 kB URL GET HTTP/2 aw-s.tripcdn.com/locale/v3/100014113/en-US.js?etagc=a4b28f7aac396dabbd4faa713ff12a87
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type Unicode text, UTF-8 text, with very long lines (58536)
Size 100 kB (100524 bytes)
Hash a4b28f7aac396dabbd4faa713ff12a87
1c9fa8c0237b2d14a953cacc9eef75b67a55f722
7b8986b1c1447b5c8b398d9fb5f9dab2ab44746f3f05e48263be112ee7950a64
GET /locale/v3/100014113/en-US.js?etagc=a4b28f7aac396dabbd4faa713ff12a87 HTTP/1.1
Host: aw-s.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript
content-length: 100524
age: 351513
server: nginx/1.20.1
date: Thu, 30 Nov 2023 11:48:46 GMT
x-ares-server: r100013666-21038164-wf48r@FRA-AWS
timing-allow-origin: *
access-control-allow-origin: https://us.trip.com
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aws
x-ares-request-id: P62Q3BVA4PJY8BPS
etag: W/"a4b28f7aac396dabbd4faa713ff12a87"
last-modified: Thu, 30 Nov 2023 10:51:09 GMT
cache-control: max-age=5184000
expires: Mon, 29 Jan 2024 11:18:02 GMT
content-encoding: gzip
x-varnish: 53175547 53047122
via: 1.1 varnish (Varnish/6.5), 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-device: U R iPhone
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: _HJMg1HpzeA1ZjBSsuFfPzwResqJdiiVFtjs2MMChcO1jIU_aiHnPQ==
aw-s.tripcdn.com/modules/ibu/online-home/81abc8852a139d3ac893fdfb3a36eba4.81abc8852a139d3ac893fdfb3a36eba4.svg
200 OK 498 B URL GET HTTP/3 aw-s.tripcdn.com/modules/ibu/online-home/81abc8852a139d3ac893fdfb3a36eba4.81abc8852a139d3ac893fdfb3a36eba4.svg
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (497)
Hash 81abc8852a139d3ac893fdfb3a36eba4
42e97cc24a59060b18a80420ce66609d1717de78
6ac1dc4b9fc7351ee979bc212d4d671837b425fed56eac552f48174a3a71533a
GET /modules/ibu/online-home/81abc8852a139d3ac893fdfb3a36eba4.81abc8852a139d3ac893fdfb3a36eba4.svg HTTP/1.1
Host: aw-s.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aw-s.tripcdn.com/modules/ibu/online-home/onlineHome.3500aaae24f49f225e293315af7647d2.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/svg+xml
content-length: 498
age: 436667
server: nginx/1.20.1
date: Wed, 29 Nov 2023 12:09:32 GMT
x-ares-server: r100013666-21038164-j58zm@FRA-AWS
timing-allow-origin: *
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aws
x-ares-request-id: 46G0932G2W6GBAY2
etag: W/"81abc8852a139d3ac893fdfb3a36eba4"
last-modified: Mon, 29 Aug 2022 09:29:00 GMT
cache-control: max-age=5184000
expires: Fri, 12 Jan 2024 08:58:40 GMT
x-varnish: 53161381 43927273
via: 1.1 varnish (Varnish/6.5), 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 17Yu09u-X6IH5PVGSCMY37H8iK8juArUhvjrMtqWvmkMFkS2NhGsrA==
aw-s.tripcdn.com/modules/ibu/online-home/onlineHome.5c6498d33bc1707b14fd724ebd522f33.js
200 OK 91 kB URL GET HTTP/2 aw-s.tripcdn.com/modules/ibu/online-home/onlineHome.5c6498d33bc1707b14fd724ebd522f33.js
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 5c6498d33bc1707b14fd724ebd522f33
dd250e5ea16edb37c19067f6b5bf74e891c7b582
51902a564aeeaeb1f783274f38f5f02f7b4a4fbffc9dfd9451937f3f0e197871
GET /modules/ibu/online-home/onlineHome.5c6498d33bc1707b14fd724ebd522f33.js HTTP/1.1
Host: aw-s.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript
content-length: 91389
age: 607253
server: nginx/1.20.1
date: Mon, 27 Nov 2023 12:46:26 GMT
x-ares-server: r100013666-21038164-wf48r@FRA-AWS
timing-allow-origin: *
access-control-allow-origin: https://us.trip.com
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aws
x-ares-request-id: F9QXWS9VQW1NACZ1
etag: W/"5c6498d33bc1707b14fd724ebd522f33"
last-modified: Mon, 27 Nov 2023 12:45:19 GMT
cache-control: max-age=5184000
expires: Fri, 26 Jan 2024 12:45:56 GMT
content-encoding: gzip
x-varnish: 52045868 51101588
via: 1.1 varnish (Varnish/6.5), 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: HGlPDjVF7sDVQIZ70KF_E1SZ13iarbDIzcaW1VsicdQMma-8LTrbYQ==
us.trip.com/trip.ico
200 OK 1.2 kB IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash f9ffbb8fb76b6b1f2ac35a2b433513ac
f195b8934521a56cd5dc731d2836fbd9a49aca7d
8d926fd6ffe6db2e9d16c9245c08ea3a8807ccd0471c6438181ec19d2aaea348
GET /trip.ico HTTP/1.1
Host: us.trip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/?locale=en-us
Cookie: UBT_VID=1701696438140.f76e6TctnaRh; kafka_result={"isDirectVisit":"1","hasUrlLocale":"1","hasCookieLocale":"0","isUrlCookieSame":"0","isJump":"0","jumpType":"targetLocale","platform":"online","vid":"1701696438140.f76e6TctnaRh"}; ibu_online_home_language_match={"isRedirect":false,"isShowSuggestion":true,"lastVisited":true,"region":"no","redirectSymbol":false,"site_url":["us.trip.com"],"suggestion":[]}; ibulanguage=EN; ibulocale=en_us; cookiePricesDisplayed=USD; _abtest_userid=77c3b86c-476f-4ca5-8c73-e743bcffbe04
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/x-icon
content-length: 1150
timing-allow-origin: *
server: nginx/1.20.1
date: Mon, 04 Dec 2023 13:27:19 GMT
cache-control: max-age=5184000
etag: "TYQ5cOR6BMCAqRUNK++nT7YGvV8="
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-download-options: noopen
x-readtime: 8
x-trip-app-name: ibu-root-site-application
x-trip-app-version: 1.0.7
x-trip-app-idc: SIN-AWS
x-trip-region: sg, de
content-security-policy-report-only: default-src * data: blob:; connect-src https://*.tripcdn.com *.c-ctrip.com https://*.trip.com https://*.ctrip.com https://*.doubleclick.net https://*.google.com https://*.tiktok.com https://*.bing.com https://*.mapbox.com https://*.skyscanner.net https://*.tripcdn.cn https://*.google-analytics.com https://*.braze.com https://*.yandex.ru https://*.googleapis.com https://*.facebook.com https://*.googletagmanager.com https://*.gstatic.com https://wcs.naver.com https://wcs.naver.net https://connect.facebook.net https://cdn.2trk.info https://b98.yahoo.co.jp https://widget.trustpilot.com https://s.yimg.jp https://altopd.com wss://im.trip.com;script-src 'unsafe-eval' 'unsafe-inline' https://*.naver.net https://*.trip.com https://*.tripcdn.com https://*.tripcdn.cn https://*.c-ctrip.com https://*.google.com https://*.doubleclick.net https://*.googletagmanager.com https://*.google-analytics.com https://unpkg.com https://altopd.com https://*.tiktok.com https://*.facebook.net https://*.bing.com https://*.googleapis.com https://*.yahoo.co.jp https://*.2trk.info https://*.yimg.jp https://*.trustpilot.com https://appx-t2 https://*.skyscanner.net https://*.alipayobjects.com https://*.rakuten.com https://*.qunarzz.com https://*.googleadservices.com https://*.yandex.ru https://*.qq.com https://*.ctrip.com https://*.innity.net https://*.ucweb.com https://*.baidu.com https://*.googlesyndication.com https://*.jsdelivr.net https://*.tripcdn.com https://hublosk.com https://*.yimg.com https://boxclone.com https://*.hotjar.com https://*.google.ae https://*.valuecommerce.com https://*.google.de https://jullyambery.net https://*.innity.com https://appx https://*.criteo.com https://*.apaylater.com https://*.maynhtml.com https://*.google.com.my https://*.google.com.hk https://*.mapbox.com blob:; style-src 'unsafe-inline' https://*.tripcdn.com https://*.trip.com https://*.tripcdn.cn https://*.google.com https://*.googleapis.com https://*.fontawesome.com https://*.honey.io https://*.gstatic.com https://*.c-ctrip.com https://*.cloudflare.com data: ; child-src 'self' https://*.ctripcorp.com https://*.invol.co https://*.googlesyndication.com https://*.google.com https://*.trustpilot.com https://*.facebook.com https://*.lcmark.net https://*.ubpixel.com https://*.altopd.com https://*.youtube.com https://*.2trk.info https://*.2trck.pro https://*.doubleclick.net https://*.kakao.com https://*.dotomi.com https://*.tkqlhce.com https://*.criteo.com https://*.infobip.com https://*.ucweb.com https://*.moontrkr.com https://*.matterport.com https://*.trckqq.com https://*.trip.com https://altopd.com https://invol.co https://stvkr.com https://redirtrack.tech https://noop.style https://*.admitad.com https://*.kittyswell.one https://*.keloogux.world https://childrenshoppingguide.com https://*.youtube-nocookie.com https://*.factoryhotsales.shop https://*.skillmatrix.live https://shoppingderby.com blob:; object-src https://*.trip.com; report-uri https://www.trip.com/security/csp-report; report-to /security/csp-report;
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: EdxLRa0BE0M5U-xfdx38FdTMOJPJYvZCjs7hwIw7w3AcUVbDlyAtvA==
aw-s.tripcdn.com/modules/ibu/online-home/ccca606f14c74b16a6bd51153a95efcb.ccca606f14c74b16a6bd51153a95efcb.woff2
200 OK 4.8 kB URL GET HTTP/3 aw-s.tripcdn.com/modules/ibu/online-home/ccca606f14c74b16a6bd51153a95efcb.ccca606f14c74b16a6bd51153a95efcb.woff2
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type Web Open Font Format (Version 2), TrueType, length 4780, version 1.0\012- data
Hash ccca606f14c74b16a6bd51153a95efcb
06cff919c837a5ac2f63bcd55c6bdefc833aabec
cd8739b7eadbce1e1013c7063c8010603a75911e962c4c8d1b187e5f033c042f
GET /modules/ibu/online-home/ccca606f14c74b16a6bd51153a95efcb.ccca606f14c74b16a6bd51153a95efcb.woff2 HTTP/1.1
Host: aw-s.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://aw-s.tripcdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: font/woff2
content-length: 4780
alt-svc: h3=":443"; ma=86400
server: nginx/1.20.1
date: Mon, 04 Dec 2023 13:27:20 GMT
x-ares-server: r100013666-21038164-wf48r@FRA-AWS
timing-allow-origin: *
access-control-allow-origin: https://us.trip.com
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aws
x-ares-request-id: VPXS2E94GDH73T3M
etag: W/"ccca606f14c74b16a6bd51153a95efcb"
last-modified: Fri, 03 Nov 2023 08:10:43 GMT
cache-control: max-age=5184000
expires: Wed, 31 Jan 2024 18:04:02 GMT
x-varnish: 54138909 55607642
via: 1.1 varnish (Varnish/6.5), 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Miss from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: xt6vnVXVdcME4ULt2uS_FExiXCFE0zwQxuSh2vTNz0uGks1pdqUcnQ==
aw-s.tripcdn.com/modules/ibu/online-home/languageMatch.d41b8eca8b61911bf5ffc67ad8e9d705.css
200 OK 2.2 kB URL GET HTTP/3 aw-s.tripcdn.com/modules/ibu/online-home/languageMatch.d41b8eca8b61911bf5ffc67ad8e9d705.css
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type ASCII text, with very long lines (8840), with no line terminators
Hash d41b8eca8b61911bf5ffc67ad8e9d705
6cea3095bcd89ab0c578872f86907ad7494d457b
c395b94d9a5b88dc932732f065ce03c126a76d52853de58161922e69e893fb82
GET /modules/ibu/online-home/languageMatch.d41b8eca8b61911bf5ffc67ad8e9d705.css HTTP/1.1
Host: aw-s.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/css
content-length: 2229
age: 565298
server: nginx/1.20.1
date: Tue, 28 Nov 2023 00:25:42 GMT
x-ares-server: r100013666-21038164-dqh86@FRA-AWS
timing-allow-origin: *
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aws
x-ares-request-id: M7VV7RW1XYSFXZFS
etag: W/"d41b8eca8b61911bf5ffc67ad8e9d705"
last-modified: Tue, 19 Sep 2023 09:16:12 GMT
cache-control: max-age=5184000
expires: Sun, 24 Dec 2023 00:09:03 GMT
content-encoding: gzip
x-varnish: 52278302 28786319
via: 1.1 varnish (Varnish/6.5), 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: mC8OCfvOTns_MLtBGdQnRVkAMkyz4lRAdsuURvLxbvUSsYmrf28gaA==
aw-s.tripcdn.com/locale/v3/100015463/en-US.js?etagc=e68463a33a41239bdc0787f4e3da03e8
200 OK 25 kB URL GET HTTP/3 aw-s.tripcdn.com/locale/v3/100015463/en-US.js?etagc=e68463a33a41239bdc0787f4e3da03e8
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type Unicode text, UTF-8 text, with very long lines (62412)
Hash e68463a33a41239bdc0787f4e3da03e8
91fb14d87945d141ba27bf4b00c75dfd30fbd8e5
420fdb2253e76215aa239fd15e201174be91fa47ed1124977d1c593e97feb181
GET /locale/v3/100015463/en-US.js?etagc=e68463a33a41239bdc0787f4e3da03e8 HTTP/1.1
Host: aw-s.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript
content-length: 24846
age: 286094
server: nginx/1.20.1
date: Fri, 01 Dec 2023 05:59:06 GMT
x-ares-server: r100013666-21038164-dqh86@FRA-AWS
timing-allow-origin: *
access-control-allow-origin: https://us.trip.com
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aws
x-ares-request-id: M5HSZDMS6Y7VV73N
etag: W/"e68463a33a41239bdc0787f4e3da03e8"
last-modified: Mon, 18 Sep 2023 12:01:03 GMT
cache-control: max-age=5184000
expires: Sat, 23 Dec 2023 15:43:14 GMT
content-encoding: gzip
x-varnish: 53540113 32443148
via: 1.1 varnish (Varnish/6.5), 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 5oMPHPVFQIYvBGEexn-f5VCTcoN_ulGyOFqclLfTn8aoIGkUFNurwA==
aw-s.tripcdn.com/modules/ibu/online-home/poisearch.607e05149a116f60849d92602ed97d31.css
200 OK 5.1 kB URL GET HTTP/3 aw-s.tripcdn.com/modules/ibu/online-home/poisearch.607e05149a116f60849d92602ed97d31.css
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type ASCII text, with very long lines (9856), with no line terminators
Hash 607e05149a116f60849d92602ed97d31
7f602b8b063e7550bf518c94171abb19e292389c
cb1553d06a788854a8b7daeebb8238c7f381b9d93f1f8765aee01ce27ff389d0
GET /modules/ibu/online-home/poisearch.607e05149a116f60849d92602ed97d31.css HTTP/1.1
Host: aw-s.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/css
content-length: 5053
age: 1727078
server: nginx/1.20.1
date: Tue, 14 Nov 2023 13:42:42 GMT
x-ares-server: r100013666-21038164-mf2xc@FRA-AWS
timing-allow-origin: *
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aws
x-ares-request-id: 875GHVKXNGC33FN7
etag: W/"607e05149a116f60849d92602ed97d31"
last-modified: Thu, 05 Jan 2023 09:34:16 GMT
cache-control: max-age=5184000
expires: Tue, 02 Jan 2024 01:34:39 GMT
content-encoding: gzip
x-varnish: 45196152 37202428
via: 1.1 varnish (Varnish/6.5), 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: Z4hPuwpJGDd4diNyS1_B8hzpy_-99mDYCky4xWEUYFLbWIxYiq6DHw==
aw-s.tripcdn.com/modules/ibu/onlinecommon/ibu_gagtag2_online_bundle.a9921d692143e01cab93b113bb9f7871.js
200 OK 1.2 kB URL GET HTTP/3 aw-s.tripcdn.com/modules/ibu/onlinecommon/ibu_gagtag2_online_bundle.a9921d692143e01cab93b113bb9f7871.js
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type ASCII text, with very long lines (2594), with no line terminators
Hash a9921d692143e01cab93b113bb9f7871
6d8b0fcac40469fb1cb7e9548499b995db32d1c4
85aa931c7859c6e3ed6278bd723715e7f542ad442765dd05b0a9672d931db382
GET /modules/ibu/onlinecommon/ibu_gagtag2_online_bundle.a9921d692143e01cab93b113bb9f7871.js HTTP/1.1
Host: aw-s.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript
content-length: 1177
age: 2093946
server: nginx/1.20.1
date: Fri, 10 Nov 2023 07:48:14 GMT
x-ares-server: r100013666-21038164-2qznj@FRA-AWS
timing-allow-origin: *
access-control-allow-origin: https://us.trip.com
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aws
x-ares-request-id: JB0P4Y6WMSB0CNGN
etag: W/"a9921d692143e01cab93b113bb9f7871"
last-modified: Wed, 22 Dec 2021 07:37:20 GMT
cache-control: max-age=5184000
expires: Fri, 29 Dec 2023 02:40:46 GMT
content-encoding: gzip
x-varnish: 42123098 35203833
via: 1.1 varnish (Varnish/6.5), 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: V83Ni9kOBFFYtQiUAvVSn7Aoo5Q4V7DZNMREBPAPBHtoaZaEXjnsUw==
aw-s.tripcdn.com/modules/ibu/online-home/onlineGotop.a12ac49fc406d34d97cbd79b00432982.css
200 OK 9.1 kB URL GET HTTP/3 aw-s.tripcdn.com/modules/ibu/online-home/onlineGotop.a12ac49fc406d34d97cbd79b00432982.css
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type ASCII text, with very long lines (59548), with no line terminators
Hash a12ac49fc406d34d97cbd79b00432982
9baeca15b861d92eb7efcc482dfb5fbffe5a9b56
69ea1bb09c8241cb025ea9588c37434e3eea7afe23e3f5da4a77e55dc20794cf
GET /modules/ibu/online-home/onlineGotop.a12ac49fc406d34d97cbd79b00432982.css HTTP/1.1
Host: aw-s.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/css
content-length: 9096
age: 606774
server: nginx/1.20.1
date: Mon, 27 Nov 2023 12:54:26 GMT
x-ares-server: r100013666-21038164-8986x@FRA-AWS
timing-allow-origin: *
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aws
x-ares-request-id: Z27E1GP2G8D54RTK
etag: W/"a12ac49fc406d34d97cbd79b00432982"
last-modified: Mon, 27 Nov 2023 12:45:19 GMT
cache-control: max-age=5184000
expires: Fri, 26 Jan 2024 12:53:51 GMT
content-encoding: gzip
x-varnish: 52041770 52336122
via: 1.1 varnish (Varnish/6.5), 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: SgBwdYIHaL5CkCYYoiR8kuMjBvNC8JsagtPp2JpL4455tCKQ9EgZXQ==
aw-s.tripcdn.com/modules/ibu/online-home/onlineRecommendAttractions.774483269ad105b3d80afccc77a57c6f.css
200 OK 5.1 kB URL GET HTTP/3 aw-s.tripcdn.com/modules/ibu/online-home/onlineRecommendAttractions.774483269ad105b3d80afccc77a57c6f.css
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type ASCII text, with very long lines (26690), with no line terminators
Hash 774483269ad105b3d80afccc77a57c6f
2d24c0a5033a3b013a15216d9547ef3fdf156248
ece0628b2510b175a9abf473d891a066e77e0747e148c1c7f6f9b9006bfc30db
GET /modules/ibu/online-home/onlineRecommendAttractions.774483269ad105b3d80afccc77a57c6f.css HTTP/1.1
Host: aw-s.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/css
content-length: 5105
age: 557918
server: nginx/1.20.1
date: Tue, 28 Nov 2023 02:28:42 GMT
x-ares-server: r100013666-21038164-wpn2c@FRA-AWS
timing-allow-origin: *
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aws
x-ares-request-id: Q3HV3D2RNHM9ZWHQ
etag: W/"774483269ad105b3d80afccc77a57c6f"
last-modified: Tue, 04 Jul 2023 08:17:27 GMT
cache-control: max-age=5184000
expires: Wed, 27 Dec 2023 01:33:02 GMT
content-encoding: gzip
x-varnish: 51232584 22602455
via: 1.1 varnish (Varnish/6.5), 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: egdFqd7Q2pDtpzMLoAMbstfjO9g-Lj0GEuTQsCj3iTi54Cn4fU0aKQ==
aw-s.tripcdn.com/modules/ibu/online-home/onlineRecommendHotels.b0984f61f602cedd9d3a6933d781cb1b.css
200 OK 5.4 kB URL GET HTTP/3 aw-s.tripcdn.com/modules/ibu/online-home/onlineRecommendHotels.b0984f61f602cedd9d3a6933d781cb1b.css
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type ASCII text, with very long lines (28275), with no line terminators
Hash b0984f61f602cedd9d3a6933d781cb1b
ac625359f11713ea00471a827a8f22d4d59ac3b7
3a2bdfa1f4b97dcdce8e2e7e907d41cf8632c95cee5887548c7c5a0fbfe2c764
GET /modules/ibu/online-home/onlineRecommendHotels.b0984f61f602cedd9d3a6933d781cb1b.css HTTP/1.1
Host: aw-s.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/css
content-length: 5386
age: 565298
server: nginx/1.20.1
date: Tue, 28 Nov 2023 00:25:42 GMT
x-ares-server: r100013666-21038164-llc2g@FRA-AWS
timing-allow-origin: *
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aws
x-ares-request-id: TQ5WYZF86GSE1FMT
etag: W/"b0984f61f602cedd9d3a6933d781cb1b"
last-modified: Tue, 04 Jul 2023 08:17:29 GMT
cache-control: max-age=5184000
expires: Fri, 29 Dec 2023 03:28:48 GMT
content-encoding: gzip
x-varnish: 52121281 35586728
via: 1.1 varnish (Varnish/6.5), 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: Uc_EmRktbVI4nzbQulqO9w2kxLB4D3qKaK6McVTeXNHxu_Hc1hWrEw==
aw-s.tripcdn.com/modules/ibu/online-home/onlineRecommendCars.1bf4103d79c8b7f7f65768862789bb38.css
200 OK 5.3 kB URL GET HTTP/3 aw-s.tripcdn.com/modules/ibu/online-home/onlineRecommendCars.1bf4103d79c8b7f7f65768862789bb38.css
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type ASCII text, with very long lines (27422), with no line terminators
Hash 1bf4103d79c8b7f7f65768862789bb38
4ad1a59e484efaa08ba96a8aa4823758497f0af4
525d2b17832ce97873d57053a6e85120e5ea99744d5875d316c765db3b874b95
GET /modules/ibu/online-home/onlineRecommendCars.1bf4103d79c8b7f7f65768862789bb38.css HTTP/1.1
Host: aw-s.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/css
content-length: 5250
age: 2371455
server: nginx/1.20.1
date: Tue, 07 Nov 2023 02:43:05 GMT
x-ares-server: r100013666-21038164-mf2xc@FRA-AWS
timing-allow-origin: *
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aws
x-ares-request-id: YXXPE7W7BENJ7CBY
etag: W/"1bf4103d79c8b7f7f65768862789bb38"
last-modified: Tue, 04 Jul 2023 08:17:28 GMT
cache-control: max-age=5184000
expires: Tue, 02 Jan 2024 02:49:29 GMT
content-encoding: gzip
x-varnish: 39178691 37426097
via: 1.1 varnish (Varnish/6.5), 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: -4kUAzwEe-R9GTUEbSot1SoJDeJfKR6EonHylG83dY03hEBTw9Ovrw==
aw-s.tripcdn.com/locale/v3/100018131/en-US-15612241554.js?etagc=229646e0129978a34e5ddf7b9555e9cb
200 OK 2.4 kB URL GET HTTP/3 aw-s.tripcdn.com/locale/v3/100018131/en-US-15612241554.js?etagc=229646e0129978a34e5ddf7b9555e9cb
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type ASCII text, with very long lines (3948)
Hash 229646e0129978a34e5ddf7b9555e9cb
cee6803e2643cd092ecc81a8fc7bbd9f62d0c988
f355283b66343b7f6b081d2b4de6440f4858544fd7a7085da3f3136b60e70da4
GET /locale/v3/100018131/en-US-15612241554.js?etagc=229646e0129978a34e5ddf7b9555e9cb HTTP/1.1
Host: aw-s.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript
content-length: 2445
age: 2284769
server: nginx/1.20.1
date: Wed, 08 Nov 2023 02:47:51 GMT
x-ares-server: r100013666-21038164-wrpd2@FRA-AWS
timing-allow-origin: *
access-control-allow-origin: https://us.trip.com
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aws
x-ares-request-id: YX8XESVZRKFYBP9D
etag: W/"229646e0129978a34e5ddf7b9555e9cb"
last-modified: Fri, 27 Oct 2023 10:31:03 GMT
cache-control: max-age=5184000
expires: Tue, 26 Dec 2023 11:15:01 GMT
content-encoding: gzip
x-varnish: 40011824 32853097
via: 1.1 varnish (Varnish/6.5), 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: s9baqrptVp2kR3OceI7o8gLt8Y3U74tjvB_zZOnNLvryzXHU4z0aDw==
aw-s.tripcdn.com/locale/v3/100014416/en-US.js?etagc=348d9700c86d580a4760e2cc92eeec84
200 OK 57 kB URL GET HTTP/2 aw-s.tripcdn.com/locale/v3/100014416/en-US.js?etagc=348d9700c86d580a4760e2cc92eeec84
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type Unicode text, UTF-8 text, with very long lines (37854)
Hash 3db71416fb80480918a5d39bd76b2b5f
649ee6afdb05ab35b4084a6c605ee711f455acc3
9ddeb4fca43f5a957eae5bcb92c064f85cbfb52ec5e4c9634424bf195b3f4422
GET /locale/v3/100014416/en-US.js?etagc=348d9700c86d580a4760e2cc92eeec84 HTTP/1.1
Host: aw-s.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
server: nginx/1.20.1
date: Mon, 06 Nov 2023 12:11:29 GMT
x-ares-server: r100013666-21038164-6xxwt@FRA-AWS
timing-allow-origin: *
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aws
x-ares-request-id: K6Q9GH2M7646QV0N
etag: W/"348d9700c86d580a4760e2cc92eeec84"
last-modified: Mon, 06 Nov 2023 12:11:10 GMT
cache-control: max-age=5184000
expires: Fri, 05 Jan 2024 12:11:29 GMT
content-encoding: gzip
x-varnish: 38294700
via: 1.1 varnish (Varnish/6.5), 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: ekTEGDjTu5LSFkk1rJ8ANOuDvIBaxxxM3h9t5gm7U1iPJlar6RqrOQ==
age: 2423750
X-Firefox-Spdy: h2
aw-s.tripcdn.com/modules/ibu/online-home/l10n.0baac00d001ccf892ca4354d917d133d.js
200 OK 31 kB URL GET HTTP/3 aw-s.tripcdn.com/modules/ibu/online-home/l10n.0baac00d001ccf892ca4354d917d133d.js
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 0baac00d001ccf892ca4354d917d133d
cfef1c1708659e7ada376e6414d8153ff0f3ee74
2706675ec0b4b678e1067174211fc62dfa1ac9e2bc47c3d26037afea1584d412
GET /modules/ibu/online-home/l10n.0baac00d001ccf892ca4354d917d133d.js HTTP/1.1
Host: aw-s.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript
content-length: 30705
age: 492955
server: nginx/1.20.1
date: Tue, 28 Nov 2023 20:31:25 GMT
x-ares-server: r100013666-21038164-xzh54@FRA-AWS
timing-allow-origin: *
access-control-allow-origin: https://us.trip.com
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aws
x-ares-request-id: FR0SFN23DEXV5JDE
etag: W/"0baac00d001ccf892ca4354d917d133d"
last-modified: Thu, 09 Nov 2023 10:20:46 GMT
cache-control: max-age=5184000
expires: Mon, 22 Jan 2024 23:00:31 GMT
content-encoding: gzip
x-varnish: 52900590 44477224
via: 1.1 varnish (Varnish/6.5), 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: N6_CyToRjsoFoav4arZeI4SMZQTQEQIgPIhlDxcfQlRRRRnzmnPC0A==
static.tripcdn.com/packages/ubt/websdk/*/ubt.minh.js?d=2023124
200 OK 25 kB URL GET HTTP/2 static.tripcdn.com/packages/ubt/websdk/*/ubt.minh.js?d=2023124
IP
ASN #20940 Akamai International B.V.
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerDigiCert Inc
SubjectTrip.com
Fingerprint9D:1E:6A:62:2E:9E:A9:3E:14:AC:D8:20:11:70:06:09:BF:37:4F:C2
ValidityMon, 31 Jul 2023 00:00:00 GMT - Wed, 31 Jul 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Hash bcfca6b99fd07a3235e1a6023725bfb5
2409330284601240bc0cd4056de5746168ebbdfc
d854c24d41036ebbce2b919a6a6490430fe0274bb0f1250d1dad44ea0080d7b8
GET /packages/ubt/websdk/*/ubt.minh.js?d=2023124 HTTP/1.1
Host: static.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.20.1
content-type: application/javascript
content-length: 24829
x-ares-server: r100013666-21038164-xqcks@FRA-AWS
access-control-allow-origin: https://us.trip.com
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aws
x-ares-request-id: 4Y2TA7PD30RMRFER
etag: W/"bcfca6b99fd07a3235e1a6023725bfb5"
last-modified: Fri, 24 Nov 2023 10:07:01 GMT
content-encoding: gzip
x-varnish: 55076119 54950411
accept-ranges: bytes
cache-control: max-age=5097962
expires: Thu, 01 Feb 2024 13:33:22 GMT
date: Mon, 04 Dec 2023 13:27:20 GMT
vary: Origin,Accept-Encoding
timing-allow-origin: *
X-Firefox-Spdy: h2
us.trip.com/m/home/getHeaderInfo?locale=en-US&x-traceID=1289978874-1701696445530-1257053173
200 OK 421 B URL POST HTTP/3 us.trip.com/m/home/getHeaderInfo?locale=en-US&x-traceID=1289978874-1701696445530-1257053173
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type JSON data\012- , ASCII text, with very long lines (421), with no line terminators
Hash 616daac3a593a930116c10ee0f3e65be
6ca9afec56f152367410c6d17653061f96e9a5cb
95be38c95f45f4e40df149a48c60dfba30a0f43535fcdf3c681fb21517e18749
POST /m/home/getHeaderInfo?locale=en-US&x-traceID=1289978874-1701696445530-1257053173 HTTP/1.1
Host: us.trip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
locale: en-US
currency: USD
x-traceID: 1289978874-1701696445530-1257053173
trip-trace-id: 1289978874-1701696445530-1257053173
Content-Type: application/json
Content-Length: 166
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/?locale=en-us
Cookie: UBT_VID=1701696438140.f76e6TctnaRh; kafka_result={"isDirectVisit":"1","hasUrlLocale":"1","hasCookieLocale":"0","isUrlCookieSame":"0","isJump":"0","jumpType":"targetLocale","platform":"online","vid":"1701696438140.f76e6TctnaRh"}; ibu_online_home_language_match={"isRedirect":false,"isShowSuggestion":true,"lastVisited":true,"region":"no","redirectSymbol":false,"site_url":["us.trip.com"],"suggestion":[]}; ibulanguage=EN; ibulocale=en_us; cookiePricesDisplayed=USD; _abtest_userid=77c3b86c-476f-4ca5-8c73-e743bcffbe04
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=utf-8
content-length: 421
timing-allow-origin: *
server: nginx/1.20.1
date: Mon, 04 Dec 2023 13:27:20 GMT
access-control-allow-credentials: true
access-control-allow-headers: content-type,cookieorigin,trip-trace-id,x-traceid,currency,locale
access-control-allow-methods: POST,GET
access-control-allow-origin: https://us.trip.com
x-gate-region: SIN-AWS
access-control-expose-headers: x-originating-url, x-gate-region, x-ibu-trip-region
x-trip-app-name: h5-root
x-trip-app-version: 2.2.0
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-download-options: noopen
x-readtime: 291
x-trip-region: sg, de
content-security-policy-report-only: default-src * data: blob:; connect-src https://*.tripcdn.com *.c-ctrip.com https://*.trip.com https://*.ctrip.com https://*.doubleclick.net https://*.google.com https://*.tiktok.com https://*.bing.com https://*.mapbox.com https://*.skyscanner.net https://*.tripcdn.cn https://*.google-analytics.com https://*.braze.com https://*.yandex.ru https://*.googleapis.com https://*.facebook.com https://*.googletagmanager.com https://*.gstatic.com https://wcs.naver.com https://wcs.naver.net https://connect.facebook.net https://cdn.2trk.info https://b98.yahoo.co.jp https://widget.trustpilot.com https://s.yimg.jp https://altopd.com wss://im.trip.com;script-src 'unsafe-eval' 'unsafe-inline' https://*.naver.net https://*.trip.com https://*.tripcdn.com https://*.tripcdn.cn https://*.c-ctrip.com https://*.google.com https://*.doubleclick.net https://*.googletagmanager.com https://*.google-analytics.com https://unpkg.com https://altopd.com https://*.tiktok.com https://*.facebook.net https://*.bing.com https://*.googleapis.com https://*.yahoo.co.jp https://*.2trk.info https://*.yimg.jp https://*.trustpilot.com https://appx-t2 https://*.skyscanner.net https://*.alipayobjects.com https://*.rakuten.com https://*.qunarzz.com https://*.googleadservices.com https://*.yandex.ru https://*.qq.com https://*.ctrip.com https://*.innity.net https://*.ucweb.com https://*.baidu.com https://*.googlesyndication.com https://*.jsdelivr.net https://*.tripcdn.com https://hublosk.com https://*.yimg.com https://boxclone.com https://*.hotjar.com https://*.google.ae https://*.valuecommerce.com https://*.google.de https://jullyambery.net https://*.innity.com https://appx https://*.criteo.com https://*.apaylater.com https://*.maynhtml.com https://*.google.com.my https://*.google.com.hk https://*.mapbox.com blob:; style-src 'unsafe-inline' https://*.tripcdn.com https://*.trip.com https://*.tripcdn.cn https://*.google.com https://*.googleapis.com https://*.fontawesome.com https://*.honey.io https://*.gstatic.com https://*.c-ctrip.com https://*.cloudflare.com data: ; child-src 'self' https://*.ctripcorp.com https://*.invol.co https://*.googlesyndication.com https://*.google.com https://*.trustpilot.com https://*.facebook.com https://*.lcmark.net https://*.ubpixel.com https://*.altopd.com https://*.youtube.com https://*.2trk.info https://*.2trck.pro https://*.doubleclick.net https://*.kakao.com https://*.dotomi.com https://*.tkqlhce.com https://*.criteo.com https://*.infobip.com https://*.ucweb.com https://*.moontrkr.com https://*.matterport.com https://*.trckqq.com https://*.trip.com https://altopd.com https://invol.co https://stvkr.com https://redirtrack.tech https://noop.style https://*.admitad.com https://*.kittyswell.one https://*.keloogux.world https://childrenshoppingguide.com https://*.youtube-nocookie.com https://*.factoryhotsales.shop https://*.skillmatrix.live https://shoppingderby.com blob:; object-src https://*.trip.com; report-uri https://www.trip.com/security/csp-report; report-to /security/csp-report;
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: Pn-857GBzs8s_rtkurIdAMjHCGYzkYS_EE43p61bdSLRxqULvI4TXA==
aw-s.tripcdn.com/modules/ibu/online-home/442933c39a10b10dce021cb7ab870c64.442933c39a10b10dce021cb7ab870c64.woff2
200 OK 4.6 kB URL GET HTTP/3 aw-s.tripcdn.com/modules/ibu/online-home/442933c39a10b10dce021cb7ab870c64.442933c39a10b10dce021cb7ab870c64.woff2
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type Web Open Font Format (Version 2), TrueType, length 4576, version 1.0\012- data
Hash 442933c39a10b10dce021cb7ab870c64
155f123ab373d9db72116f6b2787fa095ac8072b
ea5f76d35364fcf3b0f77c7d01868062a41a1f344a00af35dd5fd27bd6dd8a1b
GET /modules/ibu/online-home/442933c39a10b10dce021cb7ab870c64.442933c39a10b10dce021cb7ab870c64.woff2 HTTP/1.1
Host: aw-s.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://aw-s.tripcdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: font/woff2
content-length: 4576
alt-svc: h3=":443"; ma=86400
server: nginx/1.20.1
date: Mon, 04 Dec 2023 13:27:20 GMT
x-ares-server: r100013666-21038164-qtsdx@FRA-AWS
timing-allow-origin: *
access-control-allow-origin: https://us.trip.com
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aws
x-ares-request-id: D0KSDE05VF6GCAM5
etag: W/"442933c39a10b10dce021cb7ab870c64"
last-modified: Tue, 23 May 2023 13:01:52 GMT
cache-control: max-age=5184000
expires: Thu, 01 Feb 2024 13:34:32 GMT
x-varnish: 55945931 55460718
via: 1.1 varnish (Varnish/6.5), 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Miss from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ouHBXfHUH-_XoN-1wu6wRh2oXL1S42YwI3rId8IX1hDVV1N9qPk6uQ==
aw-s.tripcdn.com/modules/ibu/online-home/442933c39a10b10dce021cb7ab870c64.442933c39a10b10dce021cb7ab870c64.woff2
200 OK 4.6 kB URL GET HTTP/3 aw-s.tripcdn.com/modules/ibu/online-home/442933c39a10b10dce021cb7ab870c64.442933c39a10b10dce021cb7ab870c64.woff2
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type Web Open Font Format (Version 2), TrueType, length 4576, version 1.0\012- data
Hash 442933c39a10b10dce021cb7ab870c64
155f123ab373d9db72116f6b2787fa095ac8072b
ea5f76d35364fcf3b0f77c7d01868062a41a1f344a00af35dd5fd27bd6dd8a1b
GET /modules/ibu/online-home/442933c39a10b10dce021cb7ab870c64.442933c39a10b10dce021cb7ab870c64.woff2 HTTP/1.1
Host: aw-s.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://aw-s.tripcdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: font/woff2
content-length: 4576
alt-svc: h3=":443"; ma=86400
server: nginx/1.20.1
date: Mon, 04 Dec 2023 13:27:20 GMT
x-ares-server: r100013666-21038164-qtsdx@FRA-AWS
timing-allow-origin: *
access-control-allow-origin: https://us.trip.com
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aws
x-ares-request-id: D0KSDE05VF6GCAM5
etag: W/"442933c39a10b10dce021cb7ab870c64"
last-modified: Tue, 23 May 2023 13:01:52 GMT
cache-control: max-age=5184000
expires: Thu, 01 Feb 2024 13:34:32 GMT
x-varnish: 55945931 55460718
via: 1.1 varnish (Varnish/6.5), 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: bEIweNiBZDafI84Qn47Erl_yKLWibDulWTzHvh1NGEB8gRy3i_L9yw==
aw-s.tripcdn.com/modules/ibu/online-home/442933c39a10b10dce021cb7ab870c64.442933c39a10b10dce021cb7ab870c64.woff2
200 OK 4.6 kB URL GET HTTP/3 aw-s.tripcdn.com/modules/ibu/online-home/442933c39a10b10dce021cb7ab870c64.442933c39a10b10dce021cb7ab870c64.woff2
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type Web Open Font Format (Version 2), TrueType, length 4576, version 1.0\012- data
Hash 442933c39a10b10dce021cb7ab870c64
155f123ab373d9db72116f6b2787fa095ac8072b
ea5f76d35364fcf3b0f77c7d01868062a41a1f344a00af35dd5fd27bd6dd8a1b
GET /modules/ibu/online-home/442933c39a10b10dce021cb7ab870c64.442933c39a10b10dce021cb7ab870c64.woff2 HTTP/1.1
Host: aw-s.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://aw-s.tripcdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: font/woff2
content-length: 4576
alt-svc: h3=":443"; ma=86400
server: nginx/1.20.1
date: Mon, 04 Dec 2023 13:27:20 GMT
x-ares-server: r100013666-21038164-qtsdx@FRA-AWS
timing-allow-origin: *
access-control-allow-origin: https://us.trip.com
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aws
x-ares-request-id: D0KSDE05VF6GCAM5
etag: W/"442933c39a10b10dce021cb7ab870c64"
last-modified: Tue, 23 May 2023 13:01:52 GMT
cache-control: max-age=5184000
expires: Thu, 01 Feb 2024 13:34:32 GMT
x-varnish: 55945931 55460718
via: 1.1 varnish (Varnish/6.5), 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: fVEULe5L8argcN12dKuc1E21Eo9gispA6JvOxPgjsACuHGciJ6JBTQ==
aw-s.tripcdn.com/modules/ibu/online-home/languageMatch.1ad05a4d75272404b31282b8a0b1466c.js
200 OK 31 kB URL GET HTTP/3 aw-s.tripcdn.com/modules/ibu/online-home/languageMatch.1ad05a4d75272404b31282b8a0b1466c.js
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type gzip compressed data, from Unix\012- data
Hash 94a97730787471d8c70906914e3ac863
00926b31677092dc3c62c9d701baf7526340a0d9
1f9500e345c26ec7f3c10631819cb9f5b28595e312df6f7f88f117549883c509
GET /modules/ibu/online-home/languageMatch.1ad05a4d75272404b31282b8a0b1466c.js HTTP/1.1
Host: aw-s.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript
alt-svc: h3=":443"; ma=86400
age: 606722
server: nginx/1.20.1
date: Mon, 27 Nov 2023 12:55:18 GMT
x-ares-server: r100013666-21038164-fsr9l@FRA-AWS
timing-allow-origin: *
access-control-allow-origin: https://us.trip.com
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aws
x-ares-request-id: 3S64BMYH33YSDXC1
etag: W/"1ad05a4d75272404b31282b8a0b1466c"
last-modified: Mon, 27 Nov 2023 12:45:14 GMT
cache-control: max-age=5184000
expires: Fri, 26 Jan 2024 12:55:18 GMT
content-encoding: gzip
x-varnish: 52016104
via: 1.1 varnish (Varnish/6.5), 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: xAIHk2IHX8aWhF9fLPUGYOkQqsl6kQbFSgUTcfGm58j5jr7ZvOCq0g==
aw-s.tripcdn.com/modules/ibu/online-home/onlineRecommendCars.3f85c82954f7b45cd97bbdbf4caf493f.js
200 OK 36 kB URL GET HTTP/3 aw-s.tripcdn.com/modules/ibu/online-home/onlineRecommendCars.3f85c82954f7b45cd97bbdbf4caf493f.js
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 7fc4504c353f047c74d73f9e2fb88935
f5ec5d404904f7255e54f3b4149e9e6eb0a0dc2d
032f48dba2e6524963d76c8d7435ebd8099128120eda69b4874e6caa85e469c0
GET /modules/ibu/online-home/onlineRecommendCars.3f85c82954f7b45cd97bbdbf4caf493f.js HTTP/1.1
Host: aw-s.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript
alt-svc: h3=":443"; ma=86400
age: 606649
server: nginx/1.20.1
date: Mon, 27 Nov 2023 12:56:31 GMT
x-ares-server: r100013666-21038164-8986x@FRA-AWS
timing-allow-origin: *
access-control-allow-origin: https://us.trip.com
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aws
x-ares-request-id: 3MQB8XN97AR4QH36
etag: W/"3f85c82954f7b45cd97bbdbf4caf493f"
last-modified: Mon, 27 Nov 2023 12:45:25 GMT
cache-control: max-age=5184000
expires: Fri, 26 Jan 2024 12:56:31 GMT
content-encoding: gzip
x-varnish: 52079961
via: 1.1 varnish (Varnish/6.5), 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: xkNQroqGn43LIW-lKUXWgk9sLUjFic1XQVg0uRutWXnXGLjCfgfAJw==
aw-s.tripcdn.com/modules/ibu/online-home/442933c39a10b10dce021cb7ab870c64.442933c39a10b10dce021cb7ab870c64.woff2
200 OK 4.6 kB URL GET HTTP/3 aw-s.tripcdn.com/modules/ibu/online-home/442933c39a10b10dce021cb7ab870c64.442933c39a10b10dce021cb7ab870c64.woff2
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type Web Open Font Format (Version 2), TrueType, length 4576, version 1.0\012- data
Hash 442933c39a10b10dce021cb7ab870c64
155f123ab373d9db72116f6b2787fa095ac8072b
ea5f76d35364fcf3b0f77c7d01868062a41a1f344a00af35dd5fd27bd6dd8a1b
GET /modules/ibu/online-home/442933c39a10b10dce021cb7ab870c64.442933c39a10b10dce021cb7ab870c64.woff2 HTTP/1.1
Host: aw-s.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://aw-s.tripcdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: font/woff2
content-length: 4576
alt-svc: h3=":443"; ma=86400
server: nginx/1.20.1
date: Mon, 04 Dec 2023 13:27:20 GMT
x-ares-server: r100013666-21038164-qtsdx@FRA-AWS
timing-allow-origin: *
access-control-allow-origin: https://us.trip.com
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aws
x-ares-request-id: D0KSDE05VF6GCAM5
etag: W/"442933c39a10b10dce021cb7ab870c64"
last-modified: Tue, 23 May 2023 13:01:52 GMT
cache-control: max-age=5184000
expires: Thu, 01 Feb 2024 13:34:32 GMT
x-varnish: 55945931 55460718
via: 1.1 varnish (Varnish/6.5), 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 27aC6bg0k4xV10aFRmN8btORkPaPZlby8HGmddiiBfwlYhAFwnQRRw==
aw-s.tripcdn.com/modules/ibu/online-home/onlineRecommendHotels.67baf343477a002fa3fa4997dc941f6c.js
200 OK 29 kB URL GET HTTP/3 aw-s.tripcdn.com/modules/ibu/online-home/onlineRecommendHotels.67baf343477a002fa3fa4997dc941f6c.js
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Hash 67baf343477a002fa3fa4997dc941f6c
09f014cd3514294a9a71cff5e35209ba31b8d242
e05be9df92a518677f18763e76aa3d1bc42fe683e2b2d14aba2afb87232318f6
GET /modules/ibu/online-home/onlineRecommendHotels.67baf343477a002fa3fa4997dc941f6c.js HTTP/1.1
Host: aw-s.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript
content-length: 28820
age: 184290
server: nginx/1.20.1
date: Sat, 02 Dec 2023 10:15:50 GMT
x-ares-server: r100013666-21038164-8986x@FRA-AWS
timing-allow-origin: *
access-control-allow-origin: https://us.trip.com
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aws
x-ares-request-id: 3S6D4YHCN3PCF338
etag: W/"67baf343477a002fa3fa4997dc941f6c"
last-modified: Mon, 27 Nov 2023 12:45:26 GMT
cache-control: max-age=5184000
expires: Fri, 26 Jan 2024 12:55:18 GMT
content-encoding: gzip
x-varnish: 54900623 52333479
via: 1.1 varnish (Varnish/6.5), 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: FvDnGXeIDBp5RoSLc67GaRt9BJhbG5Q14LY_Sa0Nc-U2yYepPmrliw==
aw-s.tripcdn.com/modules/ibu/online-home/hotel.864b3fda74e5e746b3e9654757d04d53.js
200 OK 100 kB URL GET HTTP/3 aw-s.tripcdn.com/modules/ibu/online-home/hotel.864b3fda74e5e746b3e9654757d04d53.js
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type C source, ASCII text, with very long lines (65536), with no line terminators
Size 100 kB (100080 bytes)
Hash 864b3fda74e5e746b3e9654757d04d53
8e27eb5c0188a803c29cde1a6ae1dc4294b1312d
26111c90c599a34cface05829b0ef94b55f430a714427f2d37572cc4dfd156c2
GET /modules/ibu/online-home/hotel.864b3fda74e5e746b3e9654757d04d53.js HTTP/1.1
Host: aw-s.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript
content-length: 100080
age: 973780
server: nginx/1.20.1
date: Thu, 23 Nov 2023 06:57:40 GMT
x-ares-server: r100013666-21038164-48hkp@FRA-AWS
timing-allow-origin: *
access-control-allow-origin: https://us.trip.com
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aws
x-ares-request-id: 50Y4YPN2AQBEAK5S
etag: W/"864b3fda74e5e746b3e9654757d04d53"
last-modified: Thu, 23 Nov 2023 06:31:18 GMT
cache-control: max-age=5184000
expires: Mon, 22 Jan 2024 06:48:33 GMT
content-encoding: gzip
x-varnish: 49274718 49589654
via: 1.1 varnish (Varnish/6.5), 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 1KOrb2Bk4b-V5q8F8eZf2DzG2gksxLaXdyVQW3WnOYClq1DbEhRq5w==
www.googletagmanager.com/gtm.js?id=GTM-MV95N9D
200 OK 116 kB URL GET HTTP/3 www.googletagmanager.com/gtm.js?id=GTM-MV95N9D
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (43598)
Size 116 kB (116462 bytes)
Hash cdf36f494cdd26188c6025d3ffd51fcc
98d5ae1118222181b10f18e4bc4d444850f05a44
4ca92432cae540fd51d122a1a4406e386600307148b93fb627a9b5b06839b54a
GET /gtm.js?id=GTM-MV95N9D HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: gzip
vary: Accept-Encoding
date: Mon, 04 Dec 2023 13:27:20 GMT
expires: Mon, 04 Dec 2023 13:27:20 GMT
cache-control: private, max-age=900
last-modified: Mon, 04 Dec 2023 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 116462
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-T2SD
200 OK 125 kB URL GET HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-T2SD
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (33371)
Size 125 kB (124570 bytes)
Hash 6eac8d8e78da8e9239e90203da4d87e9
9b747dad2412e35d002289f0815a3607d7b5582a
775a4dd4b753c2ff35a5e60263974ff6943784cba3ef2dcd7d66a1bb85a7b83f
GET /gtm.js?id=GTM-T2SD HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 04 Dec 2023 13:27:20 GMT
expires: Mon, 04 Dec 2023 13:27:20 GMT
cache-control: private, max-age=900
last-modified: Mon, 04 Dec 2023 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 124570
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
us.trip.com/restapi/soa2/24884/json/getConfiguration?x-traceID=1397369281-1701696445754-1665100372
200 OK 785 B URL POST HTTP/3 us.trip.com/restapi/soa2/24884/json/getConfiguration?x-traceID=1397369281-1701696445754-1665100372
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)\012- data
Hash 614201375a6296b1c0c1aeec7f5610cc
e9265d0094ba05a5aa567c8094c33ab07dde58e0
6bd4d2908776fe0153f605f6502c0b25a332a4957bea90239049d28aa642053b
POST /restapi/soa2/24884/json/getConfiguration?x-traceID=1397369281-1701696445754-1665100372 HTTP/1.1
Host: us.trip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
locale: en-US
currency: USD
x-traceID: 1397369281-1701696445754-1665100372
trip-trace-id: 1397369281-1701696445754-1665100372
Content-Type: application/json
Content-Length: 147
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/?locale=en-us
Cookie: UBT_VID=1701696438140.f76e6TctnaRh; kafka_result={"isDirectVisit":"1","hasUrlLocale":"1","hasCookieLocale":"0","isUrlCookieSame":"0","isJump":"0","jumpType":"targetLocale","platform":"online","vid":"1701696438140.f76e6TctnaRh"}; ibu_online_home_language_match={"isRedirect":false,"isShowSuggestion":true,"lastVisited":true,"region":"no","redirectSymbol":false,"site_url":["us.trip.com"],"suggestion":[]}; ibulanguage=EN; ibulocale=en_us; cookiePricesDisplayed=USD; _abtest_userid=77c3b86c-476f-4ca5-8c73-e743bcffbe04; _tp_search_latest_channel_name=hotels
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json;charset=UTF-8
alt-svc: h3=":443"; ma=86400
timing-allow-origin: *
server: nginx/1.20.1
date: Mon, 04 Dec 2023 13:27:20 GMT
clogging_trace_id: 2106025714166948821
rootmessageid: 100025527-0a817ec0-472693-2552250
servermessageid: 100025527-0a6e5f04-472693-894109
content-encoding: gzip
vary: accept-encoding
x-gate-root-id: 100025527-0a817ec0-472693-2552250
x-gate-region: SHAXY
x-service-call: 0.093
access-control-expose-headers: RootMessageId, x-service-call, x-gate-region
x-gate: ctrip-gate
x-originating-url: https://us.trip.com/restapi/soa2/24884/json/getConfiguration?x-traceID=1397369281-1701696445754-1665100372
access-control-allow-origin: https://us.trip.com
access-control-allow-credentials: true
x-trip-region: sg, de
content-security-policy-report-only: default-src * data: blob:; connect-src https://*.tripcdn.com *.c-ctrip.com https://*.trip.com https://*.ctrip.com https://*.doubleclick.net https://*.google.com https://*.tiktok.com https://*.bing.com https://*.mapbox.com https://*.skyscanner.net https://*.tripcdn.cn https://*.google-analytics.com https://*.braze.com https://*.yandex.ru https://*.googleapis.com https://*.facebook.com https://*.googletagmanager.com https://*.gstatic.com https://wcs.naver.com https://wcs.naver.net https://connect.facebook.net https://cdn.2trk.info https://b98.yahoo.co.jp https://widget.trustpilot.com https://s.yimg.jp https://altopd.com wss://im.trip.com;script-src 'unsafe-eval' 'unsafe-inline' https://*.naver.net https://*.trip.com https://*.tripcdn.com https://*.tripcdn.cn https://*.c-ctrip.com https://*.google.com https://*.doubleclick.net https://*.googletagmanager.com https://*.google-analytics.com https://unpkg.com https://altopd.com https://*.tiktok.com https://*.facebook.net https://*.bing.com https://*.googleapis.com https://*.yahoo.co.jp https://*.2trk.info https://*.yimg.jp https://*.trustpilot.com https://appx-t2 https://*.skyscanner.net https://*.alipayobjects.com https://*.rakuten.com https://*.qunarzz.com https://*.googleadservices.com https://*.yandex.ru https://*.qq.com https://*.ctrip.com https://*.innity.net https://*.ucweb.com https://*.baidu.com https://*.googlesyndication.com https://*.jsdelivr.net https://*.tripcdn.com https://hublosk.com https://*.yimg.com https://boxclone.com https://*.hotjar.com https://*.google.ae https://*.valuecommerce.com https://*.google.de https://jullyambery.net https://*.innity.com https://appx https://*.criteo.com https://*.apaylater.com https://*.maynhtml.com https://*.google.com.my https://*.google.com.hk https://*.mapbox.com blob:; style-src 'unsafe-inline' https://*.tripcdn.com https://*.trip.com https://*.tripcdn.cn https://*.google.com https://*.googleapis.com https://*.fontawesome.com https://*.honey.io https://*.gstatic.com https://*.c-ctrip.com https://*.cloudflare.com data: ; child-src 'self' https://*.ctripcorp.com https://*.invol.co https://*.googlesyndication.com https://*.google.com https://*.trustpilot.com https://*.facebook.com https://*.lcmark.net https://*.ubpixel.com https://*.altopd.com https://*.youtube.com https://*.2trk.info https://*.2trck.pro https://*.doubleclick.net https://*.kakao.com https://*.dotomi.com https://*.tkqlhce.com https://*.criteo.com https://*.infobip.com https://*.ucweb.com https://*.moontrkr.com https://*.matterport.com https://*.trckqq.com https://*.trip.com https://altopd.com https://invol.co https://stvkr.com https://redirtrack.tech https://noop.style https://*.admitad.com https://*.kittyswell.one https://*.keloogux.world https://childrenshoppingguide.com https://*.youtube-nocookie.com https://*.factoryhotsales.shop https://*.skillmatrix.live https://shoppingderby.com blob:; object-src https://*.trip.com; report-uri https://www.trip.com/security/csp-report; report-to /security/csp-report;
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 7T21P2yT0TJ3DMWd-oA2GvjOw91XLSXAByH7Tovz14MgclLlg9LazQ==
aw-s.tripcdn.com/modules/ibu/online-home/442933c39a10b10dce021cb7ab870c64.442933c39a10b10dce021cb7ab870c64.woff2
200 OK 4.6 kB URL GET HTTP/3 aw-s.tripcdn.com/modules/ibu/online-home/442933c39a10b10dce021cb7ab870c64.442933c39a10b10dce021cb7ab870c64.woff2
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type Web Open Font Format (Version 2), TrueType, length 4576, version 1.0\012- data
Hash 442933c39a10b10dce021cb7ab870c64
155f123ab373d9db72116f6b2787fa095ac8072b
ea5f76d35364fcf3b0f77c7d01868062a41a1f344a00af35dd5fd27bd6dd8a1b
GET /modules/ibu/online-home/442933c39a10b10dce021cb7ab870c64.442933c39a10b10dce021cb7ab870c64.woff2 HTTP/1.1
Host: aw-s.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://aw-s.tripcdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: font/woff2
content-length: 4576
alt-svc: h3=":443"; ma=86400
server: nginx/1.20.1
date: Mon, 04 Dec 2023 13:27:20 GMT
x-ares-server: r100013666-21038164-qtsdx@FRA-AWS
timing-allow-origin: *
access-control-allow-origin: https://us.trip.com
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aws
x-ares-request-id: D0KSDE05VF6GCAM5
etag: W/"442933c39a10b10dce021cb7ab870c64"
last-modified: Tue, 23 May 2023 13:01:52 GMT
cache-control: max-age=5184000
expires: Thu, 01 Feb 2024 13:34:32 GMT
x-varnish: 55945931 55460718
via: 1.1 varnish (Varnish/6.5), 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: sEtqQNfM9Io4DhlZ1BDAsOBoqT7qoND6U4NihARBKMi_fuZU71i1yQ==
aw-s.tripcdn.com/modules/ibu/online-home/onlineGotop.d85bc6aedd64925a9ec0dc6d2901436d.js
200 OK 110 kB URL GET HTTP/3 aw-s.tripcdn.com/modules/ibu/online-home/onlineGotop.d85bc6aedd64925a9ec0dc6d2901436d.js
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 110 kB (110393 bytes)
Hash 11a38b2dabbd26cb103a3d354f1c27d9
ba0c6e7eebdbb3c47a3c5cbb0fad5061e47de241
3ef3ad7b4d4542dcf05bf19edf47d3b3b0ab2e3df18fedd76c4fc45bd684fd95
GET /modules/ibu/online-home/onlineGotop.d85bc6aedd64925a9ec0dc6d2901436d.js HTTP/1.1
Host: aw-s.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript
alt-svc: h3=":443"; ma=86400
age: 606722
server: nginx/1.20.1
date: Mon, 27 Nov 2023 12:55:18 GMT
x-ares-server: r100013666-21038164-8986x@FRA-AWS
timing-allow-origin: *
access-control-allow-origin: https://us.trip.com
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aws
x-ares-request-id: 3S60P6BKYMH0NJFH
etag: W/"d85bc6aedd64925a9ec0dc6d2901436d"
last-modified: Mon, 27 Nov 2023 12:45:18 GMT
cache-control: max-age=5184000
expires: Fri, 26 Jan 2024 12:55:18 GMT
content-encoding: gzip
x-varnish: 52072477
via: 1.1 varnish (Varnish/6.5), 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ccDlj0S-FhcZoTxyaWF1MqkBitpcilRVZcYKZErO0eMvyeOx_KnGZg==
m.trip.com/restapi/soa2/18088/getAppConfig.json
200 OK 0 B URL POST HTTP/3 m.trip.com/restapi/soa2/18088/getAppConfig.json
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /restapi/soa2/18088/getAppConfig.json HTTP/1.1
Host: m.trip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://us.trip.com/
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/html
content-length: 0
timing-allow-origin: *
server: nginx/1.20.1
date: Mon, 04 Dec 2023 13:27:21 GMT
access-control-allow-origin: https://us.trip.com
access-control-allow-credentials: true
x-gate-root-id: 100025527-0a6e5f31-472693-894364
access-control-allow-headers: content-type
x-gate-region: SHAXY
access-control-allow-methods: POST
access-control-expose-headers: x-service-call, x-gate-region
x-gate: ctrip-gate
x-originating-url: https://m.trip.com/restapi/soa2/18088/getAppConfig.json
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: J5JJnnuEJFmaEkWhwt_WQ6S6lcgIsYcS5vyyCN1SbSGAjvMan0tiuA==
aw-s.tripcdn.com/modules/ibu/online-home/hotelAssociative.9f9b8fde9f293dba7b95198b3a09607f.js
200 OK 54 kB URL GET HTTP/3 aw-s.tripcdn.com/modules/ibu/online-home/hotelAssociative.9f9b8fde9f293dba7b95198b3a09607f.js
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type C source, Unicode text, UTF-8 text, with very long lines (65528), with no line terminators
Hash 9f9b8fde9f293dba7b95198b3a09607f
44fdb27a28ec2f851e069484ac5a423679d5a1ae
279ae9198514441a9fe6438b1178508ddd28662cf8198c9745d6b89f0e7b5cf0
GET /modules/ibu/online-home/hotelAssociative.9f9b8fde9f293dba7b95198b3a09607f.js HTTP/1.1
Host: aw-s.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript
content-length: 53974
age: 286088
server: nginx/1.20.1
date: Fri, 01 Dec 2023 05:59:13 GMT
x-ares-server: r100013666-21038164-vw5sm@FRA-AWS
timing-allow-origin: *
access-control-allow-origin: https://us.trip.com
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aws
x-ares-request-id: A50QBGG4E3TY3Y9T
etag: W/"9f9b8fde9f293dba7b95198b3a09607f"
last-modified: Thu, 23 Nov 2023 02:31:56 GMT
cache-control: max-age=5184000
expires: Mon, 22 Jan 2024 03:14:03 GMT
content-encoding: gzip
x-varnish: 54560716 49460512
via: 1.1 varnish (Varnish/6.5), 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: NrG83a49nTTQ75UDu8p6a5SLk_C2yJujdwbZ4TsBOWcbb9GwRBSUgg==
us.trip.com/restapi/soa2/14239/bjjson/getEdmCars?x-traceID=1593925750-1701696446461-1704079515
200 OK 96 kB URL POST HTTP/3 us.trip.com/restapi/soa2/14239/bjjson/getEdmCars?x-traceID=1593925750-1701696446461-1704079515
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)\012- data
Hash af718c9584ff94450b6c0f47612681a9
0ab38e2d5ac0d5dc1ecc339fedcbbbdf86093fd0
db17ffa28c8c063f8317a949e2d40480bb16020bbcabdf0d94011621ced3a3e0
POST /restapi/soa2/14239/bjjson/getEdmCars?x-traceID=1593925750-1701696446461-1704079515 HTTP/1.1
Host: us.trip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
locale: en-US
currency: USD
x-traceID: 1593925750-1701696446461-1704079515
trip-trace-id: 1593925750-1701696446461-1704079515
Content-Type: application/json
Content-Length: 118
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/?locale=en-us
Cookie: UBT_VID=1701696438140.f76e6TctnaRh; kafka_result={"isDirectVisit":"1","hasUrlLocale":"1","hasCookieLocale":"0","isUrlCookieSame":"0","isJump":"0","jumpType":"targetLocale","platform":"online","vid":"1701696438140.f76e6TctnaRh"}; ibu_online_home_language_match={"isRedirect":false,"isShowSuggestion":true,"lastVisited":true,"region":"no","redirectSymbol":false,"site_url":["us.trip.com"],"suggestion":[]}; ibulanguage=EN; ibulocale=en_us; cookiePricesDisplayed=USD; _abtest_userid=77c3b86c-476f-4ca5-8c73-e743bcffbe04; _tp_search_latest_channel_name=hotels
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json;charset=UTF-8
alt-svc: h3=":443"; ma=86400
timing-allow-origin: *
server: nginx/1.20.1
date: Mon, 04 Dec 2023 13:27:21 GMT
clogging_trace_id: 1253625988756605303
rootmessageid: 100025527-0a8192f0-472693-2554311
servermessageid: 100025527-0a3d52df-472693-963139
content-encoding: gzip
vary: accept-encoding
x-gate-root-id: 100025527-0a8192f0-472693-2554311
x-gate-region: SHARB
x-service-call: 0.122
access-control-expose-headers: RootMessageId, x-service-call, x-gate-region
x-gate: ctrip-gate
x-originating-url: https://us.trip.com/restapi/soa2/14239/bjjson/getEdmCars?x-traceID=1593925750-1701696446461-1704079515
access-control-allow-origin: https://us.trip.com
access-control-allow-credentials: true
x-trip-region: sg, de
content-security-policy-report-only: default-src * data: blob:; connect-src https://*.tripcdn.com *.c-ctrip.com https://*.trip.com https://*.ctrip.com https://*.doubleclick.net https://*.google.com https://*.tiktok.com https://*.bing.com https://*.mapbox.com https://*.skyscanner.net https://*.tripcdn.cn https://*.google-analytics.com https://*.braze.com https://*.yandex.ru https://*.googleapis.com https://*.facebook.com https://*.googletagmanager.com https://*.gstatic.com https://wcs.naver.com https://wcs.naver.net https://connect.facebook.net https://cdn.2trk.info https://b98.yahoo.co.jp https://widget.trustpilot.com https://s.yimg.jp https://altopd.com wss://im.trip.com;script-src 'unsafe-eval' 'unsafe-inline' https://*.naver.net https://*.trip.com https://*.tripcdn.com https://*.tripcdn.cn https://*.c-ctrip.com https://*.google.com https://*.doubleclick.net https://*.googletagmanager.com https://*.google-analytics.com https://unpkg.com https://altopd.com https://*.tiktok.com https://*.facebook.net https://*.bing.com https://*.googleapis.com https://*.yahoo.co.jp https://*.2trk.info https://*.yimg.jp https://*.trustpilot.com https://appx-t2 https://*.skyscanner.net https://*.alipayobjects.com https://*.rakuten.com https://*.qunarzz.com https://*.googleadservices.com https://*.yandex.ru https://*.qq.com https://*.ctrip.com https://*.innity.net https://*.ucweb.com https://*.baidu.com https://*.googlesyndication.com https://*.jsdelivr.net https://*.tripcdn.com https://hublosk.com https://*.yimg.com https://boxclone.com https://*.hotjar.com https://*.google.ae https://*.valuecommerce.com https://*.google.de https://jullyambery.net https://*.innity.com https://appx https://*.criteo.com https://*.apaylater.com https://*.maynhtml.com https://*.google.com.my https://*.google.com.hk https://*.mapbox.com blob:; style-src 'unsafe-inline' https://*.tripcdn.com https://*.trip.com https://*.tripcdn.cn https://*.google.com https://*.googleapis.com https://*.fontawesome.com https://*.honey.io https://*.gstatic.com https://*.c-ctrip.com https://*.cloudflare.com data: ; child-src 'self' https://*.ctripcorp.com https://*.invol.co https://*.googlesyndication.com https://*.google.com https://*.trustpilot.com https://*.facebook.com https://*.lcmark.net https://*.ubpixel.com https://*.altopd.com https://*.youtube.com https://*.2trk.info https://*.2trck.pro https://*.doubleclick.net https://*.kakao.com https://*.dotomi.com https://*.tkqlhce.com https://*.criteo.com https://*.infobip.com https://*.ucweb.com https://*.moontrkr.com https://*.matterport.com https://*.trckqq.com https://*.trip.com https://altopd.com https://invol.co https://stvkr.com https://redirtrack.tech https://noop.style https://*.admitad.com https://*.kittyswell.one https://*.keloogux.world https://childrenshoppingguide.com https://*.youtube-nocookie.com https://*.factoryhotsales.shop https://*.skillmatrix.live https://shoppingderby.com blob:; object-src https://*.trip.com; report-uri https://www.trip.com/security/csp-report; report-to /security/csp-report;
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: fNyy9gmK_exFnOs0hGxvCOoTSENbWMi3rMXX2Sh75Sn50x8OvR65VQ==
us.trip.com/restapi/soa2/14839/json/hotCityRecommend?x-traceID=1728116333-1701696446568-1671270096
200 OK 8.1 kB URL POST HTTP/3 us.trip.com/restapi/soa2/14839/json/hotCityRecommend?x-traceID=1728116333-1701696446568-1671270096
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type JSON data\012- , ASCII text, with very long lines (24219), with no line terminators
Hash dc86c8aefa0e9492284d47ae7625bebf
58730029394b9583b73c2bddd251d3bcea031a06
8c3e50d5c632e5ed0710b3b0e8377caf1e89343d44be32d3ef363b378a586bd4
POST /restapi/soa2/14839/json/hotCityRecommend?x-traceID=1728116333-1701696446568-1671270096 HTTP/1.1
Host: us.trip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
locale: en-US
currency: USD
x-traceID: 1728116333-1701696446568-1671270096
trip-trace-id: 1728116333-1701696446568-1671270096
Content-Type: application/json
Content-Length: 166
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/?locale=en-us
Cookie: UBT_VID=1701696438140.f76e6TctnaRh; kafka_result={"isDirectVisit":"1","hasUrlLocale":"1","hasCookieLocale":"0","isUrlCookieSame":"0","isJump":"0","jumpType":"targetLocale","platform":"online","vid":"1701696438140.f76e6TctnaRh"}; ibu_online_home_language_match={"isRedirect":false,"isShowSuggestion":true,"lastVisited":true,"region":"no","redirectSymbol":false,"site_url":["us.trip.com"],"suggestion":[]}; ibulanguage=EN; ibulocale=en_us; cookiePricesDisplayed=USD; _abtest_userid=77c3b86c-476f-4ca5-8c73-e743bcffbe04; _tp_search_latest_channel_name=hotels
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json;charset=UTF-8
alt-svc: h3=":443"; ma=86400
timing-allow-origin: *
server: nginx/1.20.1
date: Mon, 04 Dec 2023 13:27:21 GMT
clogging_trace_id: 1743336062326013255
rootmessageid: 100025527-0a81b63b-472693-2554347
servermessageid: 100025527-0a3c7ede-472693-963680
content-encoding: gzip
vary: accept-encoding
x-gate-root-id: 100025527-0a81b63b-472693-2554347
x-gate-region: SHARB
x-service-call: 0.086
access-control-expose-headers: RootMessageId, x-service-call, x-gate-region
x-gate: ctrip-gate
x-originating-url: https://us.trip.com/restapi/soa2/14839/json/hotCityRecommend?x-traceID=1728116333-1701696446568-1671270096
access-control-allow-origin: https://us.trip.com
access-control-allow-credentials: true
x-trip-region: sg, de
content-security-policy-report-only: default-src * data: blob:; connect-src https://*.tripcdn.com *.c-ctrip.com https://*.trip.com https://*.ctrip.com https://*.doubleclick.net https://*.google.com https://*.tiktok.com https://*.bing.com https://*.mapbox.com https://*.skyscanner.net https://*.tripcdn.cn https://*.google-analytics.com https://*.braze.com https://*.yandex.ru https://*.googleapis.com https://*.facebook.com https://*.googletagmanager.com https://*.gstatic.com https://wcs.naver.com https://wcs.naver.net https://connect.facebook.net https://cdn.2trk.info https://b98.yahoo.co.jp https://widget.trustpilot.com https://s.yimg.jp https://altopd.com wss://im.trip.com;script-src 'unsafe-eval' 'unsafe-inline' https://*.naver.net https://*.trip.com https://*.tripcdn.com https://*.tripcdn.cn https://*.c-ctrip.com https://*.google.com https://*.doubleclick.net https://*.googletagmanager.com https://*.google-analytics.com https://unpkg.com https://altopd.com https://*.tiktok.com https://*.facebook.net https://*.bing.com https://*.googleapis.com https://*.yahoo.co.jp https://*.2trk.info https://*.yimg.jp https://*.trustpilot.com https://appx-t2 https://*.skyscanner.net https://*.alipayobjects.com https://*.rakuten.com https://*.qunarzz.com https://*.googleadservices.com https://*.yandex.ru https://*.qq.com https://*.ctrip.com https://*.innity.net https://*.ucweb.com https://*.baidu.com https://*.googlesyndication.com https://*.jsdelivr.net https://*.tripcdn.com https://hublosk.com https://*.yimg.com https://boxclone.com https://*.hotjar.com https://*.google.ae https://*.valuecommerce.com https://*.google.de https://jullyambery.net https://*.innity.com https://appx https://*.criteo.com https://*.apaylater.com https://*.maynhtml.com https://*.google.com.my https://*.google.com.hk https://*.mapbox.com blob:; style-src 'unsafe-inline' https://*.tripcdn.com https://*.trip.com https://*.tripcdn.cn https://*.google.com https://*.googleapis.com https://*.fontawesome.com https://*.honey.io https://*.gstatic.com https://*.c-ctrip.com https://*.cloudflare.com data: ; child-src 'self' https://*.ctripcorp.com https://*.invol.co https://*.googlesyndication.com https://*.google.com https://*.trustpilot.com https://*.facebook.com https://*.lcmark.net https://*.ubpixel.com https://*.altopd.com https://*.youtube.com https://*.2trk.info https://*.2trck.pro https://*.doubleclick.net https://*.kakao.com https://*.dotomi.com https://*.tkqlhce.com https://*.criteo.com https://*.infobip.com https://*.ucweb.com https://*.moontrkr.com https://*.matterport.com https://*.trckqq.com https://*.trip.com https://altopd.com https://invol.co https://stvkr.com https://redirtrack.tech https://noop.style https://*.admitad.com https://*.kittyswell.one https://*.keloogux.world https://childrenshoppingguide.com https://*.youtube-nocookie.com https://*.factoryhotsales.shop https://*.skillmatrix.live https://shoppingderby.com blob:; object-src https://*.trip.com; report-uri https://www.trip.com/security/csp-report; report-to /security/csp-report;
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: q36liKuKG8ewfCJG_uhjHnZkPeW6_EZFKPGZ_flUHmfA55qPzBqSuA==
aw-s.tripcdn.com/modules/ibu/online-home/910ee94002659203ba33483d09d64974.910ee94002659203ba33483d09d64974.png
200 OK 1.9 kB URL GET HTTP/3 aw-s.tripcdn.com/modules/ibu/online-home/910ee94002659203ba33483d09d64974.910ee94002659203ba33483d09d64974.png
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type PNG image data, 80 x 80, 8-bit colormap, non-interlaced\012- data
Hash 910ee94002659203ba33483d09d64974
103d960871da63bb39c314599783c4f67a971bb0
0d44351ee5dc55341f18396319a44c58523e3c8fc65ef33b08c5092567e99c5b
GET /modules/ibu/online-home/910ee94002659203ba33483d09d64974.910ee94002659203ba33483d09d64974.png HTTP/1.1
Host: aw-s.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aw-s.tripcdn.com/modules/ibu/online-home/onlineLoginPopup.63c4b7a074ad00eb0dcc68edca02e930.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/png
content-length: 1865
age: 84291
server: nginx/1.20.1
date: Sun, 03 Dec 2023 14:02:30 GMT
x-ares-server: r100013666-21038164-wf48r@FRA-AWS
timing-allow-origin: *
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aws
x-ares-request-id: X75PBG7FPYGFKARK
etag: W/"910ee94002659203ba33483d09d64974"
last-modified: Tue, 28 Dec 2021 12:11:21 GMT
cache-control: max-age=5184000
expires: Sat, 27 Jan 2024 21:36:52 GMT
x-varnish: 55614798 51357145
via: 1.1 varnish (Varnish/6.5), 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: z1MDu3M9oEskbKQoRAOZ898Oxr-CYd9xAbieOIiqwBKVtszm8QqGrw==
wcs.naver.net/wcslog.js
200 OK 7.6 kB IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerDigiCert Inc
Subjectssl.pstatic.net
Fingerprint63:03:70:E5:FC:51:B9:6A:19:E3:32:6E:3D:E5:C2:2C:85:7D:AA:D5
ValidityTue, 01 Aug 2023 00:00:00 GMT - Thu, 01 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (23300), with no line terminators
Hash df131739dbc5aa217d40a77b6437b63a
9d221e0a2e81070185204364541f3cdf0d1bd865
95c2920b3543da452acc134c21064a8e14b5835da67b392ad4ea9b7ebb062ce2
GET /wcslog.js HTTP/1.1
Host: wcs.naver.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Last-Modified: Mon, 04 Dec 2023 07:05:35 GMT
ETag: "656d7a3f-5b04"
Server: nginx
Content-Type: application/javascript
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=653
Expires: Mon, 04 Dec 2023 13:38:14 GMT
Date: Mon, 04 Dec 2023 13:27:21 GMT
Content-Length: 7640
Connection: keep-alive
aw-s.tripcdn.com/locale/v3/330153/en-US.js?etagc=a85051c12fed47db75bf4afb89ffaffb
200 OK 87 kB URL GET HTTP/2 aw-s.tripcdn.com/locale/v3/330153/en-US.js?etagc=a85051c12fed47db75bf4afb89ffaffb
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type gzip compressed data, from Unix\012- data
Hash 8248cb6bc585343f59efdf11134d7fd0
00456aa350025198805015aa9356ea08b41ec73a
9efb4536458bc524b4865d1d935d7a2804888388bcd9d9aa0fe6974adee22b2c
GET /locale/v3/330153/en-US.js?etagc=a85051c12fed47db75bf4afb89ffaffb HTTP/1.1
Host: aw-s.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript
alt-svc: h3=":443"; ma=86400
age: 595524
server: nginx/1.20.1
date: Mon, 27 Nov 2023 16:01:55 GMT
x-ares-server: r100013666-21038164-8986x@FRA-AWS
timing-allow-origin: *
access-control-allow-origin: https://us.trip.com
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aws
x-ares-request-id: 5GREH270FEDMF1NN
etag: W/"a85051c12fed47db75bf4afb89ffaffb"
last-modified: Mon, 27 Nov 2023 16:01:11 GMT
cache-control: max-age=5184000
expires: Fri, 26 Jan 2024 16:01:55 GMT
content-encoding: gzip
x-varnish: 52366556
via: 1.1 varnish (Varnish/6.5), 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-device: U R Android
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: drRts8_yazl9ZJIOBDNefl_oh6AMCYRxGFfbm4XfEa6B-mYEoacEdA==
www.trip.com/m/i18n/100015469/en-US.js
302 Found 215 B URL GET HTTP/3 www.trip.com/m/i18n/100015469/en-US.js
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type HTML document, ASCII text, with no line terminators
Hash a353226a55cb5975c3f1a29380816065
4f31ba24d8f3d13855fbb215a6b7376e54833c9d
e4009be6f9599618cb712a3cef38b53c931258b51424d2dfea4517793b738219
GET /m/i18n/100015469/en-US.js HTTP/1.1
Host: www.trip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Cookie: UBT_VID=1701696438140.f76e6TctnaRh; kafka_result={"isDirectVisit":"1","hasUrlLocale":"1","hasCookieLocale":"0","isUrlCookieSame":"0","isJump":"0","jumpType":"targetLocale","platform":"online","vid":"1701696438140.f76e6TctnaRh"}; ibu_online_home_language_match={"isRedirect":false,"isShowSuggestion":true,"lastVisited":true,"region":"no","redirectSymbol":false,"site_url":["us.trip.com"],"suggestion":[]}; ibulanguage=EN; ibulocale=en_us; cookiePricesDisplayed=USD; _abtest_userid=77c3b86c-476f-4ca5-8c73-e743bcffbe04; _gcl_au=1.1.2020697670.1701696447
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
content-type: text/html; charset=utf-8
content-length: 215
timing-allow-origin: *
server: nginx/1.20.1
date: Mon, 04 Dec 2023 13:27:21 GMT
cache-control: no-store
access-control-allow-origin: *
access-control-allow-headers: host,connection,x-real-ip,x-ctrip-isssl,user-agent,x-amz-cf-id,via,cookie,x-forwarded-for,accept-language,accept,referer,accept-encoding,dnt,sec-fetch-dest,sec-fetch-mode,sec-fetch-site,pragma,cache-control,true-client-ip,x-via,x-ctx-externalclientip,x-ctx-request-from,x-ctx-trace-mark,content-type,access-control-allow-headers,cookieorigin,access-control-request-headers,access-control-request-method,authorization,x-requested-with,origin,x-auth-token,x-ctrip-canary-req,x-ctx-canaryreq,x-ctx-canarysrc,x-ctx-canaryidc,x-cat-trace-mode
access-control-allow-methods: GET,HEAD,PUT,POST,OPTIONS,DELETE,PATCH
location: https://aw-s.tripcdn.com/locale/v3/100015469/en-US.js?etagc=b812ad02f7c34acf7bc3c7176b578760
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-download-options: noopen
x-readtime: 2
x-trip-region: sg, de
content-security-policy-report-only: default-src * data: blob:; connect-src https://*.tripcdn.com *.c-ctrip.com https://*.trip.com https://*.ctrip.com https://*.doubleclick.net https://*.google.com https://*.tiktok.com https://*.bing.com https://*.mapbox.com https://*.skyscanner.net https://*.tripcdn.cn https://*.google-analytics.com https://*.braze.com https://*.yandex.ru https://*.googleapis.com https://*.facebook.com https://*.googletagmanager.com https://*.gstatic.com https://wcs.naver.com https://wcs.naver.net https://connect.facebook.net https://cdn.2trk.info https://b98.yahoo.co.jp https://widget.trustpilot.com https://s.yimg.jp https://altopd.com wss://im.trip.com;script-src 'unsafe-eval' 'unsafe-inline' https://*.naver.net https://*.trip.com https://*.tripcdn.com https://*.tripcdn.cn https://*.c-ctrip.com https://*.google.com https://*.doubleclick.net https://*.googletagmanager.com https://*.google-analytics.com https://unpkg.com https://altopd.com https://*.tiktok.com https://*.facebook.net https://*.bing.com https://*.googleapis.com https://*.yahoo.co.jp https://*.2trk.info https://*.yimg.jp https://*.trustpilot.com https://appx-t2 https://*.skyscanner.net https://*.alipayobjects.com https://*.rakuten.com https://*.qunarzz.com https://*.googleadservices.com https://*.yandex.ru https://*.qq.com https://*.ctrip.com https://*.innity.net https://*.ucweb.com https://*.baidu.com https://*.googlesyndication.com https://*.jsdelivr.net https://*.tripcdn.com https://hublosk.com https://*.yimg.com https://boxclone.com https://*.hotjar.com https://*.google.ae https://*.valuecommerce.com https://*.google.de https://jullyambery.net https://*.innity.com https://appx https://*.criteo.com https://*.apaylater.com https://*.maynhtml.com https://*.google.com.my https://*.google.com.hk https://*.mapbox.com blob:; style-src 'unsafe-inline' https://*.tripcdn.com https://*.trip.com https://*.tripcdn.cn https://*.google.com https://*.googleapis.com https://*.fontawesome.com https://*.honey.io https://*.gstatic.com https://*.c-ctrip.com https://*.cloudflare.com data: ; child-src 'self' https://*.ctripcorp.com https://*.invol.co https://*.googlesyndication.com https://*.google.com https://*.trustpilot.com https://*.facebook.com https://*.lcmark.net https://*.ubpixel.com https://*.altopd.com https://*.youtube.com https://*.2trk.info https://*.2trck.pro https://*.doubleclick.net https://*.kakao.com https://*.dotomi.com https://*.tkqlhce.com https://*.criteo.com https://*.infobip.com https://*.ucweb.com https://*.moontrkr.com https://*.matterport.com https://*.trckqq.com https://*.trip.com https://altopd.com https://invol.co https://stvkr.com https://redirtrack.tech https://noop.style https://*.admitad.com https://*.kittyswell.one https://*.keloogux.world https://childrenshoppingguide.com https://*.youtube-nocookie.com https://*.factoryhotsales.shop https://*.skillmatrix.live https://shoppingderby.com blob:; object-src https://*.trip.com; report-uri https://www.trip.com/security/csp-report; report-to /security/csp-report;
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: -DLtsrnqclClYqSh9te1AO1XTVKxgjXNiIjRIVe6gEcpjv1eNh2Y-g==
aw-s.tripcdn.com/locale/v3/100015469/en-US.js?etagc=b812ad02f7c34acf7bc3c7176b578760
200 OK 12 kB URL GET HTTP/3 aw-s.tripcdn.com/locale/v3/100015469/en-US.js?etagc=b812ad02f7c34acf7bc3c7176b578760
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type Unicode text, UTF-8 text, with very long lines (48775)
Hash b812ad02f7c34acf7bc3c7176b578760
ebd3327a7ef4a7859ac0ca646f03f514ae078236
98d5cf006f48f48c542a955433eb1bab55ca63275cdf7884c62ef41feba41398
GET /locale/v3/100015469/en-US.js?etagc=b812ad02f7c34acf7bc3c7176b578760 HTTP/1.1
Host: aw-s.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://us.trip.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript
content-length: 11955
age: 273054
server: nginx/1.20.1
date: Fri, 01 Dec 2023 09:36:27 GMT
x-ares-server: r100013666-21038164-qtsdx@FRA-AWS
timing-allow-origin: *
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aws
x-ares-request-id: NXGZG17SZ8ND8K73
etag: W/"b812ad02f7c34acf7bc3c7176b578760"
last-modified: Fri, 01 Dec 2023 09:31:10 GMT
cache-control: max-age=5184000
expires: Tue, 30 Jan 2024 09:34:35 GMT
content-encoding: gzip
x-varnish: 54659595 54659512
via: 1.1 varnish (Varnish/6.5), 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: A7QK8GzWbNY0wycJR0tPwVO2NcIy2X06PrvhS08ciaIwI19eyz50zA==
www.trip.com/m/i18n/100015471/en-us.js
302 Found 215 B URL GET HTTP/3 www.trip.com/m/i18n/100015471/en-us.js
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type HTML document, ASCII text, with no line terminators
Hash ac67217e1dceb624d123be0cef5d7588
f5cefe09c1d80a9124dc7c9eb6f563c646d3a201
eb014ef110eb092ff5b4c843ecd7aab0dabc543c487dbf812cd68cfb87607253
GET /m/i18n/100015471/en-us.js HTTP/1.1
Host: www.trip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Cookie: UBT_VID=1701696438140.f76e6TctnaRh; kafka_result={"isDirectVisit":"1","hasUrlLocale":"1","hasCookieLocale":"0","isUrlCookieSame":"0","isJump":"0","jumpType":"targetLocale","platform":"online","vid":"1701696438140.f76e6TctnaRh"}; ibu_online_home_language_match={"isRedirect":false,"isShowSuggestion":true,"lastVisited":true,"region":"no","redirectSymbol":false,"site_url":["us.trip.com"],"suggestion":[]}; ibulanguage=EN; ibulocale=en_us; cookiePricesDisplayed=USD; _abtest_userid=77c3b86c-476f-4ca5-8c73-e743bcffbe04; _gcl_au=1.1.2020697670.1701696447
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
content-type: text/html; charset=utf-8
content-length: 215
timing-allow-origin: *
server: nginx/1.20.1
date: Mon, 04 Dec 2023 13:27:21 GMT
cache-control: no-store
access-control-allow-origin: *
access-control-allow-headers: host,connection,x-real-ip,x-ctrip-isssl,user-agent,via,x-forwarded-for,x-amz-cf-id,accept-language,accept,referer,cookie,accept-encoding,dnt,sec-fetch-dest,sec-fetch-mode,sec-fetch-site,pragma,cache-control,true-client-ip,x-via,x-ctx-externalclientip,x-ctx-request-from,x-ctx-trace-mark,content-type,access-control-allow-headers,cookieorigin,access-control-request-headers,access-control-request-method,authorization,x-requested-with,origin,x-auth-token,x-ctrip-canary-req,x-ctx-canaryreq,x-ctx-canarysrc,x-ctx-canaryidc,x-cat-trace-mode
access-control-allow-methods: GET,HEAD,PUT,POST,OPTIONS,DELETE,PATCH
location: https://aw-s.tripcdn.com/locale/v3/100015471/en-US.js?etagc=9eac65837476c7fc0b5eb1b188a80549
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-download-options: noopen
x-readtime: 1
x-trip-region: sg, de
content-security-policy-report-only: default-src * data: blob:; connect-src https://*.tripcdn.com *.c-ctrip.com https://*.trip.com https://*.ctrip.com https://*.doubleclick.net https://*.google.com https://*.tiktok.com https://*.bing.com https://*.mapbox.com https://*.skyscanner.net https://*.tripcdn.cn https://*.google-analytics.com https://*.braze.com https://*.yandex.ru https://*.googleapis.com https://*.facebook.com https://*.googletagmanager.com https://*.gstatic.com https://wcs.naver.com https://wcs.naver.net https://connect.facebook.net https://cdn.2trk.info https://b98.yahoo.co.jp https://widget.trustpilot.com https://s.yimg.jp https://altopd.com wss://im.trip.com;script-src 'unsafe-eval' 'unsafe-inline' https://*.naver.net https://*.trip.com https://*.tripcdn.com https://*.tripcdn.cn https://*.c-ctrip.com https://*.google.com https://*.doubleclick.net https://*.googletagmanager.com https://*.google-analytics.com https://unpkg.com https://altopd.com https://*.tiktok.com https://*.facebook.net https://*.bing.com https://*.googleapis.com https://*.yahoo.co.jp https://*.2trk.info https://*.yimg.jp https://*.trustpilot.com https://appx-t2 https://*.skyscanner.net https://*.alipayobjects.com https://*.rakuten.com https://*.qunarzz.com https://*.googleadservices.com https://*.yandex.ru https://*.qq.com https://*.ctrip.com https://*.innity.net https://*.ucweb.com https://*.baidu.com https://*.googlesyndication.com https://*.jsdelivr.net https://*.tripcdn.com https://hublosk.com https://*.yimg.com https://boxclone.com https://*.hotjar.com https://*.google.ae https://*.valuecommerce.com https://*.google.de https://jullyambery.net https://*.innity.com https://appx https://*.criteo.com https://*.apaylater.com https://*.maynhtml.com https://*.google.com.my https://*.google.com.hk https://*.mapbox.com blob:; style-src 'unsafe-inline' https://*.tripcdn.com https://*.trip.com https://*.tripcdn.cn https://*.google.com https://*.googleapis.com https://*.fontawesome.com https://*.honey.io https://*.gstatic.com https://*.c-ctrip.com https://*.cloudflare.com data: ; child-src 'self' https://*.ctripcorp.com https://*.invol.co https://*.googlesyndication.com https://*.google.com https://*.trustpilot.com https://*.facebook.com https://*.lcmark.net https://*.ubpixel.com https://*.altopd.com https://*.youtube.com https://*.2trk.info https://*.2trck.pro https://*.doubleclick.net https://*.kakao.com https://*.dotomi.com https://*.tkqlhce.com https://*.criteo.com https://*.infobip.com https://*.ucweb.com https://*.moontrkr.com https://*.matterport.com https://*.trckqq.com https://*.trip.com https://altopd.com https://invol.co https://stvkr.com https://redirtrack.tech https://noop.style https://*.admitad.com https://*.kittyswell.one https://*.keloogux.world https://childrenshoppingguide.com https://*.youtube-nocookie.com https://*.factoryhotsales.shop https://*.skillmatrix.live https://shoppingderby.com blob:; object-src https://*.trip.com; report-uri https://www.trip.com/security/csp-report; report-to /security/csp-report;
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: flzRYe3BdGNnMhsYbxZ2qtCVaXNMpmxTVEQKNFlViPXI39d8sAx4jw==
www.trip.com/m/i18n/100015469/en-us.js
302 Found 215 B URL GET HTTP/3 www.trip.com/m/i18n/100015469/en-us.js
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type HTML document, ASCII text, with no line terminators
Hash a353226a55cb5975c3f1a29380816065
4f31ba24d8f3d13855fbb215a6b7376e54833c9d
e4009be6f9599618cb712a3cef38b53c931258b51424d2dfea4517793b738219
GET /m/i18n/100015469/en-us.js HTTP/1.1
Host: www.trip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Cookie: UBT_VID=1701696438140.f76e6TctnaRh; kafka_result={"isDirectVisit":"1","hasUrlLocale":"1","hasCookieLocale":"0","isUrlCookieSame":"0","isJump":"0","jumpType":"targetLocale","platform":"online","vid":"1701696438140.f76e6TctnaRh"}; ibu_online_home_language_match={"isRedirect":false,"isShowSuggestion":true,"lastVisited":true,"region":"no","redirectSymbol":false,"site_url":["us.trip.com"],"suggestion":[]}; ibulanguage=EN; ibulocale=en_us; cookiePricesDisplayed=USD; _abtest_userid=77c3b86c-476f-4ca5-8c73-e743bcffbe04; _gcl_au=1.1.2020697670.1701696447
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
content-type: text/html; charset=utf-8
content-length: 215
timing-allow-origin: *
server: nginx/1.20.1
date: Mon, 04 Dec 2023 13:27:21 GMT
cache-control: no-store
access-control-allow-origin: *
access-control-allow-headers: host,connection,x-real-ip,x-ctrip-isssl,user-agent,via,x-forwarded-for,x-amz-cf-id,accept-language,accept,referer,cookie,accept-encoding,dnt,sec-fetch-dest,sec-fetch-mode,sec-fetch-site,pragma,cache-control,true-client-ip,x-via,x-ctx-externalclientip,x-ctx-request-from,x-ctx-trace-mark,content-type,access-control-allow-headers,cookieorigin,access-control-request-headers,access-control-request-method,authorization,x-requested-with,origin,x-auth-token,x-ctrip-canary-req,x-ctx-canaryreq,x-ctx-canarysrc,x-ctx-canaryidc,x-cat-trace-mode
access-control-allow-methods: GET,HEAD,PUT,POST,OPTIONS,DELETE,PATCH
location: https://aw-s.tripcdn.com/locale/v3/100015469/en-US.js?etagc=b812ad02f7c34acf7bc3c7176b578760
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-download-options: noopen
x-readtime: 3
x-trip-region: sg, de
content-security-policy-report-only: default-src * data: blob:; connect-src https://*.tripcdn.com *.c-ctrip.com https://*.trip.com https://*.ctrip.com https://*.doubleclick.net https://*.google.com https://*.tiktok.com https://*.bing.com https://*.mapbox.com https://*.skyscanner.net https://*.tripcdn.cn https://*.google-analytics.com https://*.braze.com https://*.yandex.ru https://*.googleapis.com https://*.facebook.com https://*.googletagmanager.com https://*.gstatic.com https://wcs.naver.com https://wcs.naver.net https://connect.facebook.net https://cdn.2trk.info https://b98.yahoo.co.jp https://widget.trustpilot.com https://s.yimg.jp https://altopd.com wss://im.trip.com;script-src 'unsafe-eval' 'unsafe-inline' https://*.naver.net https://*.trip.com https://*.tripcdn.com https://*.tripcdn.cn https://*.c-ctrip.com https://*.google.com https://*.doubleclick.net https://*.googletagmanager.com https://*.google-analytics.com https://unpkg.com https://altopd.com https://*.tiktok.com https://*.facebook.net https://*.bing.com https://*.googleapis.com https://*.yahoo.co.jp https://*.2trk.info https://*.yimg.jp https://*.trustpilot.com https://appx-t2 https://*.skyscanner.net https://*.alipayobjects.com https://*.rakuten.com https://*.qunarzz.com https://*.googleadservices.com https://*.yandex.ru https://*.qq.com https://*.ctrip.com https://*.innity.net https://*.ucweb.com https://*.baidu.com https://*.googlesyndication.com https://*.jsdelivr.net https://*.tripcdn.com https://hublosk.com https://*.yimg.com https://boxclone.com https://*.hotjar.com https://*.google.ae https://*.valuecommerce.com https://*.google.de https://jullyambery.net https://*.innity.com https://appx https://*.criteo.com https://*.apaylater.com https://*.maynhtml.com https://*.google.com.my https://*.google.com.hk https://*.mapbox.com blob:; style-src 'unsafe-inline' https://*.tripcdn.com https://*.trip.com https://*.tripcdn.cn https://*.google.com https://*.googleapis.com https://*.fontawesome.com https://*.honey.io https://*.gstatic.com https://*.c-ctrip.com https://*.cloudflare.com data: ; child-src 'self' https://*.ctripcorp.com https://*.invol.co https://*.googlesyndication.com https://*.google.com https://*.trustpilot.com https://*.facebook.com https://*.lcmark.net https://*.ubpixel.com https://*.altopd.com https://*.youtube.com https://*.2trk.info https://*.2trck.pro https://*.doubleclick.net https://*.kakao.com https://*.dotomi.com https://*.tkqlhce.com https://*.criteo.com https://*.infobip.com https://*.ucweb.com https://*.moontrkr.com https://*.matterport.com https://*.trckqq.com https://*.trip.com https://altopd.com https://invol.co https://stvkr.com https://redirtrack.tech https://noop.style https://*.admitad.com https://*.kittyswell.one https://*.keloogux.world https://childrenshoppingguide.com https://*.youtube-nocookie.com https://*.factoryhotsales.shop https://*.skillmatrix.live https://shoppingderby.com blob:; object-src https://*.trip.com; report-uri https://www.trip.com/security/csp-report; report-to /security/csp-report;
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 6fKpQDoOSUytmealQe_9klD6mdO3QNM63XZLlZT1By9p-2k0UIkFGw==
aw-s.tripcdn.com/locale/v3/100015469/en-US.js?etagc=b812ad02f7c34acf7bc3c7176b578760
200 OK 12 kB URL GET HTTP/3 aw-s.tripcdn.com/locale/v3/100015469/en-US.js?etagc=b812ad02f7c34acf7bc3c7176b578760
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type Unicode text, UTF-8 text, with very long lines (48775)
Hash b812ad02f7c34acf7bc3c7176b578760
ebd3327a7ef4a7859ac0ca646f03f514ae078236
98d5cf006f48f48c542a955433eb1bab55ca63275cdf7884c62ef41feba41398
GET /locale/v3/100015469/en-US.js?etagc=b812ad02f7c34acf7bc3c7176b578760 HTTP/1.1
Host: aw-s.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://us.trip.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript
content-length: 11955
age: 273054
server: nginx/1.20.1
date: Fri, 01 Dec 2023 09:36:27 GMT
x-ares-server: r100013666-21038164-qtsdx@FRA-AWS
timing-allow-origin: *
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aws
x-ares-request-id: NXGZG17SZ8ND8K73
etag: W/"b812ad02f7c34acf7bc3c7176b578760"
last-modified: Fri, 01 Dec 2023 09:31:10 GMT
cache-control: max-age=5184000
expires: Tue, 30 Jan 2024 09:34:35 GMT
content-encoding: gzip
x-varnish: 54659595 54659512
via: 1.1 varnish (Varnish/6.5), 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: ksQLwpDCPku82OeaodQJBvGMbhHh4_CJiw1J8ZNnYzaQCw1wv20llg==
ak-d.tripcdn.com/images/0AS6b1200090fx7s7F635.png
200 OK 4.9 kB URL GET HTTP/3 ak-d.tripcdn.com/images/0AS6b1200090fx7s7F635.png
IP
ASN #20940 Akamai International B.V.
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerDigiCert Inc
Subject*.tripcdn.com
Fingerprint39:6D:BD:C3:37:CE:BB:D7:E0:9C:B9:5D:15:48:7D:02:6D:95:1D:6C
ValidityThu, 06 Apr 2023 00:00:00 GMT - Fri, 05 Apr 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 1839272dfbf68479d6c5b19933a80607
8fc6eade48d69ffadeaa8e104cdee2cec27adbb4
aa278b7b9c3c12e4739588271a133dc6bb9fa2f176dd9e3188a7b93eb367092d
GET /images/0AS6b1200090fx7s7F635.png HTTP/1.1
Host: ak-d.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/webp
content-length: 4862
access-control-allow-origin: *
etag: 198.git8693dbd.el7
last-modified: Mon, 07 Aug 2023 06:48:44 GMT
cache-control: max-age=6060501
expires: Mon, 12 Feb 2024 16:55:42 GMT
date: Mon, 04 Dec 2023 13:27:21 GMT
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
timing-allow-origin: *
ak-d.tripcdn.com/images/0AS5f120008whj34f2145.png
200 OK 4.7 kB URL GET HTTP/3 ak-d.tripcdn.com/images/0AS5f120008whj34f2145.png
IP
ASN #20940 Akamai International B.V.
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerDigiCert Inc
Subject*.tripcdn.com
Fingerprint39:6D:BD:C3:37:CE:BB:D7:E0:9C:B9:5D:15:48:7D:02:6D:95:1D:6C
ValidityThu, 06 Apr 2023 00:00:00 GMT - Fri, 05 Apr 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 1f5ea2b36a7d9a8e2645f75baab898c0
c9f2b9300a0d96b8ded9e0d4a5165bee0a78e701
433a45a554e377acfc5bc069912246c467df26ffec393c8a1045ddfdfa4369af
GET /images/0AS5f120008whj34f2145.png HTTP/1.1
Host: ak-d.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/webp
content-length: 4678
access-control-allow-origin: *
etag: 198.git8693dbd.el7
last-modified: Mon, 07 Aug 2023 06:48:44 GMT
cache-control: max-age=5646133
expires: Wed, 07 Feb 2024 21:49:34 GMT
date: Mon, 04 Dec 2023 13:27:21 GMT
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
timing-allow-origin: *
us.trip.com/restapi/soa2/23044/bjjson/getRecommendDistrict?x-traceID=1761569226-1701696446459-1624255339
200 OK 20 kB URL POST HTTP/3 us.trip.com/restapi/soa2/23044/bjjson/getRecommendDistrict?x-traceID=1761569226-1701696446459-1624255339
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash f4438b5301c8acc915fcee09b01f60ea
d1958a47e375d95bd434a3d16c9b5948b1e73c18
b998a92a3aebcb1f410a56f836f74faaf1b8c7c7daa3ff9ae39162d441d749e0
POST /restapi/soa2/23044/bjjson/getRecommendDistrict?x-traceID=1761569226-1701696446459-1624255339 HTTP/1.1
Host: us.trip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
locale: en-US
currency: USD
x-traceID: 1761569226-1701696446459-1624255339
trip-trace-id: 1761569226-1701696446459-1624255339
SOA20-Client-AppId: 100014416
Content-Type: application/json
Content-Length: 98
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/?locale=en-us
Cookie: UBT_VID=1701696438140.f76e6TctnaRh; kafka_result={"isDirectVisit":"1","hasUrlLocale":"1","hasCookieLocale":"0","isUrlCookieSame":"0","isJump":"0","jumpType":"targetLocale","platform":"online","vid":"1701696438140.f76e6TctnaRh"}; ibu_online_home_language_match={"isRedirect":false,"isShowSuggestion":true,"lastVisited":true,"region":"no","redirectSymbol":false,"site_url":["us.trip.com"],"suggestion":[]}; ibulanguage=EN; ibulocale=en_us; cookiePricesDisplayed=USD; _abtest_userid=77c3b86c-476f-4ca5-8c73-e743bcffbe04; _tp_search_latest_channel_name=hotels
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json;charset=UTF-8
alt-svc: h3=":443"; ma=86400
timing-allow-origin: *
server: nginx/1.20.1
date: Mon, 04 Dec 2023 13:27:21 GMT
clogging_trace_id: 3157281919779510094
rootmessageid: 100025527-0a817cbd-472693-2553255
servermessageid: 100025527-0a70c30b-472693-894056
content-encoding: gzip
vary: Accept-Encoding
x-gate-root-id: 100025527-0a817cbd-472693-2553255
x-gate-region: SHAXY
x-service-call: 0.103
access-control-expose-headers: RootMessageId, x-service-call, x-gate-region
x-gate: ctrip-gate
x-originating-url: https://us.trip.com/restapi/soa2/23044/bjjson/getRecommendDistrict?x-traceID=1761569226-1701696446459-1624255339
access-control-allow-origin: https://us.trip.com
access-control-allow-credentials: true
x-trip-region: sg, de
content-security-policy-report-only: default-src * data: blob:; connect-src https://*.tripcdn.com *.c-ctrip.com https://*.trip.com https://*.ctrip.com https://*.doubleclick.net https://*.google.com https://*.tiktok.com https://*.bing.com https://*.mapbox.com https://*.skyscanner.net https://*.tripcdn.cn https://*.google-analytics.com https://*.braze.com https://*.yandex.ru https://*.googleapis.com https://*.facebook.com https://*.googletagmanager.com https://*.gstatic.com https://wcs.naver.com https://wcs.naver.net https://connect.facebook.net https://cdn.2trk.info https://b98.yahoo.co.jp https://widget.trustpilot.com https://s.yimg.jp https://altopd.com wss://im.trip.com;script-src 'unsafe-eval' 'unsafe-inline' https://*.naver.net https://*.trip.com https://*.tripcdn.com https://*.tripcdn.cn https://*.c-ctrip.com https://*.google.com https://*.doubleclick.net https://*.googletagmanager.com https://*.google-analytics.com https://unpkg.com https://altopd.com https://*.tiktok.com https://*.facebook.net https://*.bing.com https://*.googleapis.com https://*.yahoo.co.jp https://*.2trk.info https://*.yimg.jp https://*.trustpilot.com https://appx-t2 https://*.skyscanner.net https://*.alipayobjects.com https://*.rakuten.com https://*.qunarzz.com https://*.googleadservices.com https://*.yandex.ru https://*.qq.com https://*.ctrip.com https://*.innity.net https://*.ucweb.com https://*.baidu.com https://*.googlesyndication.com https://*.jsdelivr.net https://*.tripcdn.com https://hublosk.com https://*.yimg.com https://boxclone.com https://*.hotjar.com https://*.google.ae https://*.valuecommerce.com https://*.google.de https://jullyambery.net https://*.innity.com https://appx https://*.criteo.com https://*.apaylater.com https://*.maynhtml.com https://*.google.com.my https://*.google.com.hk https://*.mapbox.com blob:; style-src 'unsafe-inline' https://*.tripcdn.com https://*.trip.com https://*.tripcdn.cn https://*.google.com https://*.googleapis.com https://*.fontawesome.com https://*.honey.io https://*.gstatic.com https://*.c-ctrip.com https://*.cloudflare.com data: ; child-src 'self' https://*.ctripcorp.com https://*.invol.co https://*.googlesyndication.com https://*.google.com https://*.trustpilot.com https://*.facebook.com https://*.lcmark.net https://*.ubpixel.com https://*.altopd.com https://*.youtube.com https://*.2trk.info https://*.2trck.pro https://*.doubleclick.net https://*.kakao.com https://*.dotomi.com https://*.tkqlhce.com https://*.criteo.com https://*.infobip.com https://*.ucweb.com https://*.moontrkr.com https://*.matterport.com https://*.trckqq.com https://*.trip.com https://altopd.com https://invol.co https://stvkr.com https://redirtrack.tech https://noop.style https://*.admitad.com https://*.kittyswell.one https://*.keloogux.world https://childrenshoppingguide.com https://*.youtube-nocookie.com https://*.factoryhotsales.shop https://*.skillmatrix.live https://shoppingderby.com blob:; object-src https://*.trip.com; report-uri https://www.trip.com/security/csp-report; report-to /security/csp-report;
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: HznpwABt7j6weT9mSQAhTeI1a8cSQCQUcIbhqWGvYUFkbmz7tYLlwQ==
webresource.tripcdn.com/ares2/basebiz/i18nthirdpartresource/1.0.1/default/sdk/kakao.sdk.v1.43.0.js
200 OK 35 kB URL GET HTTP/3 webresource.tripcdn.com/ares2/basebiz/i18nthirdpartresource/1.0.1/default/sdk/kakao.sdk.v1.43.0.js
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 49c49c2d21fd6792010abbc47c5319f2
c2632fddf8bb7a0eb8657ec7e982840b75fb4b28
538bdf55d598173aad7551f17ae12e1632e34290089aa948dc702a4d482b5c72
GET /ares2/basebiz/i18nthirdpartresource/1.0.1/default/sdk/kakao.sdk.v1.43.0.js HTTP/1.1
Host: webresource.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript
content-length: 34986
age: 2777225
date: Thu, 02 Nov 2023 10:00:16 GMT
x-ares-server: r100013666-21027498-ffv9n@SHARB
timing-allow-origin: *
access-control-allow-origin: *
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aliyun
x-ares-request-id: 654359A525E91A333737BC3A
etag: W/"49c49c2d21fd6792010abbc47c5319f2"
last-modified: Wed, 26 Oct 2022 02:58:57 GMT
cache-control: max-age=5184000
expires: Mon, 01 Jan 2024 08:11:17 GMT
content-encoding: gzip
x-varnish: 916880068 945093964
via: 1.1 varnish (Varnish/6.5), 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: MhB2BrcrQRPwA0H0Q-Yt100d4yDc2bacsjgJ9uBVYRfIjs2QxNZPPg==
webresource.tripcdn.com/ares2/basebiz/i18nthirdpartresource/1.0.1/default/sdk/kakao.sdk.v1.43.0.js
200 OK 35 kB URL GET HTTP/3 webresource.tripcdn.com/ares2/basebiz/i18nthirdpartresource/1.0.1/default/sdk/kakao.sdk.v1.43.0.js
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 49c49c2d21fd6792010abbc47c5319f2
c2632fddf8bb7a0eb8657ec7e982840b75fb4b28
538bdf55d598173aad7551f17ae12e1632e34290089aa948dc702a4d482b5c72
GET /ares2/basebiz/i18nthirdpartresource/1.0.1/default/sdk/kakao.sdk.v1.43.0.js HTTP/1.1
Host: webresource.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript
content-length: 34986
age: 2777225
date: Thu, 02 Nov 2023 10:00:16 GMT
x-ares-server: r100013666-21027498-ffv9n@SHARB
timing-allow-origin: *
access-control-allow-origin: *
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aliyun
x-ares-request-id: 654359A525E91A333737BC3A
etag: W/"49c49c2d21fd6792010abbc47c5319f2"
last-modified: Wed, 26 Oct 2022 02:58:57 GMT
cache-control: max-age=5184000
expires: Mon, 01 Jan 2024 08:11:17 GMT
content-encoding: gzip
x-varnish: 916880068 945093964
via: 1.1 varnish (Varnish/6.5), 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: BSzw6jhCmkkxH-kOi5_8dlcRoXdBmwLp8J11cLl4aM5jcXwxMW63CQ==
www.googletagmanager.com/gtag/js?id=AW-789926500&l=dataLayer&cx=c
200 OK 76 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=AW-789926500&l=dataLayer&cx=c
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (4179)
Hash b9b10c6ecef6595fd9776ef4a13700ca
ec53bfbb15c8173d090332d45ca6279a6ccdc395
0b47a4c71f9599d8425d515ea444941ec89a1a86fe0d513819af0fc1d162291b
GET /gtag/js?id=AW-789926500&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 04 Dec 2023 13:27:22 GMT
expires: Mon, 04 Dec 2023 13:27:22 GMT
cache-control: private, max-age=900
last-modified: Mon, 04 Dec 2023 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 75519
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
m.trip.com/restapi/soa2/18088/getAppConfig.json
200 OK 201 kB URL POST HTTP/3 m.trip.com/restapi/soa2/18088/getAppConfig.json
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Size 201 kB (201216 bytes)
Hash ad8316e1bb307f656d996717bde16114
2bf1259d1ce2306c3ec357fe99a8dc3c669173ca
a88796fa7285514ad3ac522504e96751a9db4630f1859cc9a1bd2a1b33bce28c
POST /restapi/soa2/18088/getAppConfig.json HTTP/1.1
Host: m.trip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 134
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/json;charset=UTF-8
server: nginx/1.20.1
date: Mon, 04 Dec 2023 13:27:20 GMT
clogging_trace_id: 1333426105036998042
rootmessageid: 100025527-0a70c3c6-472693-893974
servermessageid: 100025527-0a70c3c6-472693-893975
content-encoding: gzip
vary: accept-encoding
access-control-allow-origin: https://us.trip.com
access-control-allow-credentials: true
x-gate-root-id: 100025527-0a70c3c6-472693-893974
x-gate-region: SHAXY
x-service-call: 0.003
access-control-expose-headers: RootMessageId, x-service-call, x-gate-region
x-gate: ctrip-gate
x-originating-url: https://m.trip.com/restapi/soa2/18088/getAppConfig.json
x-cache: Miss from cloudfront
via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: NFQYSnc-jpvl67NkbL_8CCyEgiqje0-KMWKXpvEubqxcgUEVutqz-g==
timing-allow-origin: *
X-Firefox-Spdy: h2
us.trip.com/restapi/soa2/24884/json/getConfiguration?x-traceID=1430832055-1701696446496-1380201256
200 OK 18 kB URL POST HTTP/3 us.trip.com/restapi/soa2/24884/json/getConfiguration?x-traceID=1430832055-1701696446496-1380201256
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)\012- data
Hash 76f8c31a35fc26b1f3cd429adde13181
5cc8443d930e8899da0b32f08160b96ef527930d
2ba5214593d8deecf5cc068f31f14d6d4d455344f0d588f42ded366d6d4bc8fe
POST /restapi/soa2/24884/json/getConfiguration?x-traceID=1430832055-1701696446496-1380201256 HTTP/1.1
Host: us.trip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
locale: en-US
currency: USD
x-traceID: 1430832055-1701696446496-1380201256
trip-trace-id: 1430832055-1701696446496-1380201256
Content-Type: application/json
Content-Length: 214
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/?locale=en-us
Cookie: UBT_VID=1701696438140.f76e6TctnaRh; kafka_result={"isDirectVisit":"1","hasUrlLocale":"1","hasCookieLocale":"0","isUrlCookieSame":"0","isJump":"0","jumpType":"targetLocale","platform":"online","vid":"1701696438140.f76e6TctnaRh"}; ibu_online_home_language_match={"isRedirect":false,"isShowSuggestion":true,"lastVisited":true,"region":"no","redirectSymbol":false,"site_url":["us.trip.com"],"suggestion":[]}; ibulanguage=EN; ibulocale=en_us; cookiePricesDisplayed=USD; _abtest_userid=77c3b86c-476f-4ca5-8c73-e743bcffbe04; _tp_search_latest_channel_name=hotels
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json;charset=UTF-8
alt-svc: h3=":443"; ma=86400
timing-allow-origin: *
server: nginx/1.20.1
date: Mon, 04 Dec 2023 13:27:21 GMT
clogging_trace_id: 1870210413121158871
rootmessageid: 100025527-0a8192f0-472693-2554373
servermessageid: 100025527-0a3d52cb-472693-962369
content-encoding: gzip
vary: accept-encoding
x-gate-root-id: 100025527-0a8192f0-472693-2554373
x-gate-region: SHARB
x-service-call: 0.088
access-control-expose-headers: RootMessageId, x-service-call, x-gate-region
x-gate: ctrip-gate
x-originating-url: https://us.trip.com/restapi/soa2/24884/json/getConfiguration?x-traceID=1430832055-1701696446496-1380201256
access-control-allow-origin: https://us.trip.com
access-control-allow-credentials: true
x-trip-region: sg, de
content-security-policy-report-only: default-src * data: blob:; connect-src https://*.tripcdn.com *.c-ctrip.com https://*.trip.com https://*.ctrip.com https://*.doubleclick.net https://*.google.com https://*.tiktok.com https://*.bing.com https://*.mapbox.com https://*.skyscanner.net https://*.tripcdn.cn https://*.google-analytics.com https://*.braze.com https://*.yandex.ru https://*.googleapis.com https://*.facebook.com https://*.googletagmanager.com https://*.gstatic.com https://wcs.naver.com https://wcs.naver.net https://connect.facebook.net https://cdn.2trk.info https://b98.yahoo.co.jp https://widget.trustpilot.com https://s.yimg.jp https://altopd.com wss://im.trip.com;script-src 'unsafe-eval' 'unsafe-inline' https://*.naver.net https://*.trip.com https://*.tripcdn.com https://*.tripcdn.cn https://*.c-ctrip.com https://*.google.com https://*.doubleclick.net https://*.googletagmanager.com https://*.google-analytics.com https://unpkg.com https://altopd.com https://*.tiktok.com https://*.facebook.net https://*.bing.com https://*.googleapis.com https://*.yahoo.co.jp https://*.2trk.info https://*.yimg.jp https://*.trustpilot.com https://appx-t2 https://*.skyscanner.net https://*.alipayobjects.com https://*.rakuten.com https://*.qunarzz.com https://*.googleadservices.com https://*.yandex.ru https://*.qq.com https://*.ctrip.com https://*.innity.net https://*.ucweb.com https://*.baidu.com https://*.googlesyndication.com https://*.jsdelivr.net https://*.tripcdn.com https://hublosk.com https://*.yimg.com https://boxclone.com https://*.hotjar.com https://*.google.ae https://*.valuecommerce.com https://*.google.de https://jullyambery.net https://*.innity.com https://appx https://*.criteo.com https://*.apaylater.com https://*.maynhtml.com https://*.google.com.my https://*.google.com.hk https://*.mapbox.com blob:; style-src 'unsafe-inline' https://*.tripcdn.com https://*.trip.com https://*.tripcdn.cn https://*.google.com https://*.googleapis.com https://*.fontawesome.com https://*.honey.io https://*.gstatic.com https://*.c-ctrip.com https://*.cloudflare.com data: ; child-src 'self' https://*.ctripcorp.com https://*.invol.co https://*.googlesyndication.com https://*.google.com https://*.trustpilot.com https://*.facebook.com https://*.lcmark.net https://*.ubpixel.com https://*.altopd.com https://*.youtube.com https://*.2trk.info https://*.2trck.pro https://*.doubleclick.net https://*.kakao.com https://*.dotomi.com https://*.tkqlhce.com https://*.criteo.com https://*.infobip.com https://*.ucweb.com https://*.moontrkr.com https://*.matterport.com https://*.trckqq.com https://*.trip.com https://altopd.com https://invol.co https://stvkr.com https://redirtrack.tech https://noop.style https://*.admitad.com https://*.kittyswell.one https://*.keloogux.world https://childrenshoppingguide.com https://*.youtube-nocookie.com https://*.factoryhotsales.shop https://*.skillmatrix.live https://shoppingderby.com blob:; object-src https://*.trip.com; report-uri https://www.trip.com/security/csp-report; report-to /security/csp-report;
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: YY_Cg94WL0ULMuZJsb9o-tG2JQST6CYjamYe8FIredI2Uwd1oVF4-g==
aw-s.tripcdn.com/locale/v3/100015471/en-US.js?etagc=9eac65837476c7fc0b5eb1b188a80549
200 OK 14 kB URL GET HTTP/3 aw-s.tripcdn.com/locale/v3/100015471/en-US.js?etagc=9eac65837476c7fc0b5eb1b188a80549
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type gzip compressed data, from Unix\012- data
Hash ad6a85c01ea019210a0ec40d61a87b86
0a335a1af838b2cb15e8bc3bd8b85117c69712fb
5ff5e07307ab7e063e2cbba2e4cb2bc075c18ef4f34cb39a3372799cad3cc7c7
GET /locale/v3/100015471/en-US.js?etagc=9eac65837476c7fc0b5eb1b188a80549 HTTP/1.1
Host: aw-s.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://us.trip.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript
alt-svc: h3=":443"; ma=86400
age: 4269434
server: nginx/1.20.1
date: Mon, 16 Oct 2023 03:30:07 GMT
x-ares-server: r100013666-21038164-tz9fp@FRA-AWS
timing-allow-origin: *
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aws
x-ares-request-id: Z3Q1TKAAANRHRMAZ
etag: W/"9eac65837476c7fc0b5eb1b188a80549"
last-modified: Mon, 16 Oct 2023 03:21:08 GMT
cache-control: max-age=5184000
expires: Fri, 15 Dec 2023 03:30:07 GMT
content-encoding: gzip
x-varnish: 24310125
via: 1.1 varnish (Varnish/6.5), 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: XA5dMWzDndbUxJ-FlRSsH7fXEv0sR3d0xpB0phavkfGc21ILGbYHSQ==
us.trip.com/restapi/soa2/24884/json/getConfiguration?x-traceID=1878113831-1701696446593-1374814282
200 OK 1.9 kB URL POST HTTP/3 us.trip.com/restapi/soa2/24884/json/getConfiguration?x-traceID=1878113831-1701696446593-1374814282
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)\012- data
Hash be2f3fb3ed35632875ee09dff8a74705
564ffe7e43bf519a4344301bfce3e00f81e16885
d6d4cadbc842b6ba74488534b4538d24802c8ff16c1613d44851329b46e5396d
POST /restapi/soa2/24884/json/getConfiguration?x-traceID=1878113831-1701696446593-1374814282 HTTP/1.1
Host: us.trip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
locale: en-US
currency: USD
x-traceID: 1878113831-1701696446593-1374814282
trip-trace-id: 1878113831-1701696446593-1374814282
Content-Type: application/json
Content-Length: 195
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/?locale=en-us
Cookie: UBT_VID=1701696438140.f76e6TctnaRh; kafka_result={"isDirectVisit":"1","hasUrlLocale":"1","hasCookieLocale":"0","isUrlCookieSame":"0","isJump":"0","jumpType":"targetLocale","platform":"online","vid":"1701696438140.f76e6TctnaRh"}; ibu_online_home_language_match={"isRedirect":false,"isShowSuggestion":true,"lastVisited":true,"region":"no","redirectSymbol":false,"site_url":["us.trip.com"],"suggestion":[]}; ibulanguage=EN; ibulocale=en_us; cookiePricesDisplayed=USD; _abtest_userid=77c3b86c-476f-4ca5-8c73-e743bcffbe04; _tp_search_latest_channel_name=hotels
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json;charset=UTF-8
alt-svc: h3=":443"; ma=86400
timing-allow-origin: *
server: nginx/1.20.1
date: Mon, 04 Dec 2023 13:27:21 GMT
clogging_trace_id: 8574346079023029835
rootmessageid: 100025527-0a81b63b-472693-2554391
servermessageid: 100025527-0a3d52cd-472693-962458
content-encoding: gzip
vary: accept-encoding
x-gate-root-id: 100025527-0a81b63b-472693-2554391
x-gate-region: SHARB
x-service-call: 0.089
access-control-expose-headers: RootMessageId, x-service-call, x-gate-region
x-gate: ctrip-gate
x-originating-url: https://us.trip.com/restapi/soa2/24884/json/getConfiguration?x-traceID=1878113831-1701696446593-1374814282
access-control-allow-origin: https://us.trip.com
access-control-allow-credentials: true
x-trip-region: sg, de
content-security-policy-report-only: default-src * data: blob:; connect-src https://*.tripcdn.com *.c-ctrip.com https://*.trip.com https://*.ctrip.com https://*.doubleclick.net https://*.google.com https://*.tiktok.com https://*.bing.com https://*.mapbox.com https://*.skyscanner.net https://*.tripcdn.cn https://*.google-analytics.com https://*.braze.com https://*.yandex.ru https://*.googleapis.com https://*.facebook.com https://*.googletagmanager.com https://*.gstatic.com https://wcs.naver.com https://wcs.naver.net https://connect.facebook.net https://cdn.2trk.info https://b98.yahoo.co.jp https://widget.trustpilot.com https://s.yimg.jp https://altopd.com wss://im.trip.com;script-src 'unsafe-eval' 'unsafe-inline' https://*.naver.net https://*.trip.com https://*.tripcdn.com https://*.tripcdn.cn https://*.c-ctrip.com https://*.google.com https://*.doubleclick.net https://*.googletagmanager.com https://*.google-analytics.com https://unpkg.com https://altopd.com https://*.tiktok.com https://*.facebook.net https://*.bing.com https://*.googleapis.com https://*.yahoo.co.jp https://*.2trk.info https://*.yimg.jp https://*.trustpilot.com https://appx-t2 https://*.skyscanner.net https://*.alipayobjects.com https://*.rakuten.com https://*.qunarzz.com https://*.googleadservices.com https://*.yandex.ru https://*.qq.com https://*.ctrip.com https://*.innity.net https://*.ucweb.com https://*.baidu.com https://*.googlesyndication.com https://*.jsdelivr.net https://*.tripcdn.com https://hublosk.com https://*.yimg.com https://boxclone.com https://*.hotjar.com https://*.google.ae https://*.valuecommerce.com https://*.google.de https://jullyambery.net https://*.innity.com https://appx https://*.criteo.com https://*.apaylater.com https://*.maynhtml.com https://*.google.com.my https://*.google.com.hk https://*.mapbox.com blob:; style-src 'unsafe-inline' https://*.tripcdn.com https://*.trip.com https://*.tripcdn.cn https://*.google.com https://*.googleapis.com https://*.fontawesome.com https://*.honey.io https://*.gstatic.com https://*.c-ctrip.com https://*.cloudflare.com data: ; child-src 'self' https://*.ctripcorp.com https://*.invol.co https://*.googlesyndication.com https://*.google.com https://*.trustpilot.com https://*.facebook.com https://*.lcmark.net https://*.ubpixel.com https://*.altopd.com https://*.youtube.com https://*.2trk.info https://*.2trck.pro https://*.doubleclick.net https://*.kakao.com https://*.dotomi.com https://*.tkqlhce.com https://*.criteo.com https://*.infobip.com https://*.ucweb.com https://*.moontrkr.com https://*.matterport.com https://*.trckqq.com https://*.trip.com https://altopd.com https://invol.co https://stvkr.com https://redirtrack.tech https://noop.style https://*.admitad.com https://*.kittyswell.one https://*.keloogux.world https://childrenshoppingguide.com https://*.youtube-nocookie.com https://*.factoryhotsales.shop https://*.skillmatrix.live https://shoppingderby.com blob:; object-src https://*.trip.com; report-uri https://www.trip.com/security/csp-report; report-to /security/csp-report;
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: nf_BMNp1eKHGpGrikQUQrjLMNhclJlsHBD40nvFuPlcPZH0-xSNn4Q==
pages.trip.com/cars/image/totrip/4ae2bf0c-4480-41f4-b28d-ba827fd120c7.png
200 OK 3.3 kB URL GET HTTP/3 pages.trip.com/cars/image/totrip/4ae2bf0c-4480-41f4-b28d-ba827fd120c7.png
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type PNG image data, 70 x 42, 8-bit/color RGB, non-interlaced\012- data
Hash fe0e748a8cb9608f6a2613cc854d4f28
0f4001fc48c03b6bdcbea8da0b60a2c41865e4f5
42e7cddae839df1a229478c74aef8a70bead3e491cab1fa021bf80074fdf0697
GET /cars/image/totrip/4ae2bf0c-4480-41f4-b28d-ba827fd120c7.png HTTP/1.1
Host: pages.trip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Cookie: UBT_VID=1701696438140.f76e6TctnaRh; kafka_result={"isDirectVisit":"1","hasUrlLocale":"1","hasCookieLocale":"0","isUrlCookieSame":"0","isJump":"0","jumpType":"targetLocale","platform":"online","vid":"1701696438140.f76e6TctnaRh"}; ibu_online_home_language_match={"isRedirect":false,"isShowSuggestion":true,"lastVisited":true,"region":"no","redirectSymbol":false,"site_url":["us.trip.com"],"suggestion":[]}; ibulanguage=EN; ibulocale=en_us; cookiePricesDisplayed=USD; _abtest_userid=77c3b86c-476f-4ca5-8c73-e743bcffbe04; _gcl_au=1.1.2020697670.1701696447
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/png
content-length: 3341
age: 162164
date: Sat, 02 Dec 2023 16:24:38 GMT
x-ares-server: r100013666-21027498-2m5jc@SHARB
x-ares-source: aliyun
x-ares-request-id: 656B5A46A4B7E83436E99E2C
etag: W/"fe0e748a8cb9608f6a2613cc854d4f28"
last-modified: Mon, 28 Sep 2020 09:40:11 GMT
cache-control: max-age=172800
expires: Mon, 04 Dec 2023 16:24:38 GMT
timing-allow-origin: *
x-varnish: 59630522
via: 1.1 varnish (Varnish/6.5), 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: Vp_vtxfvuwP8kFWK84XLxbyPKgQlAbelbjpth64RHr5EriBosUyDPw==
ak-d.tripcdn.com/images/05W2f12000b20ru6w546C.jpg
200 OK 48 kB URL GET HTTP/3 ak-d.tripcdn.com/images/05W2f12000b20ru6w546C.jpg
IP
ASN #20940 Akamai International B.V.
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerDigiCert Inc
Subject*.tripcdn.com
Fingerprint39:6D:BD:C3:37:CE:BB:D7:E0:9C:B9:5D:15:48:7D:02:6D:95:1D:6C
ValidityThu, 06 Apr 2023 00:00:00 GMT - Fri, 05 Apr 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 500x300, components 3\012- data
Hash c5c08afc7a241e0cac192cb76f97cb0e
c9789d0c927d18b9bcfa62ca75192e86ebcc49e0
50edfbbb8990ab3a8a8ecb2d9a0062c3a4fc18eef6f8f1a6f4709decafc404fe
GET /images/05W2f12000b20ru6w546C.jpg HTTP/1.1
Host: ak-d.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/jpeg
content-length: 48285
access-control-allow-origin: *
etag: 198.git8693dbd.el7
last-modified: Tue, 25 Apr 2023 03:01:38 GMT
x-edgeconnect-midmile-rtt: 0
x-edgeconnect-origin-mex-latency: 215
cache-control: max-age=6067854
expires: Mon, 12 Feb 2024 18:58:16 GMT
date: Mon, 04 Dec 2023 13:27:22 GMT
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
timing-allow-origin: *
aw-s.tripcdn.com/modules/ibu/online-home/85603c4150b074807c4d927a7a26ef24.85603c4150b074807c4d927a7a26ef24.png
200 OK 1.2 kB URL GET HTTP/3 aw-s.tripcdn.com/modules/ibu/online-home/85603c4150b074807c4d927a7a26ef24.85603c4150b074807c4d927a7a26ef24.png
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type PNG image data, 192 x 192, 8-bit colormap, non-interlaced\012- data
Hash 85603c4150b074807c4d927a7a26ef24
e0d920fa8c2e698fbb37768484fd32455906e7e0
bb6ec90bddec69031e2a78dc3c78bf34dfbe9a05951fb2e567012933528775f1
GET /modules/ibu/online-home/85603c4150b074807c4d927a7a26ef24.85603c4150b074807c4d927a7a26ef24.png HTTP/1.1
Host: aw-s.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aw-s.tripcdn.com/modules/ibu/online-home/onlineRecommendHotels.b0984f61f602cedd9d3a6933d781cb1b.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/png
content-length: 1166
age: 436668
server: nginx/1.20.1
date: Wed, 29 Nov 2023 12:09:34 GMT
x-ares-server: r100013666-21038164-qtsdx@FRA-AWS
timing-allow-origin: *
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aws
x-ares-request-id: EG8R2J85XAR70MMW
etag: W/"85603c4150b074807c4d927a7a26ef24"
last-modified: Wed, 12 Oct 2022 02:52:07 GMT
cache-control: max-age=5184000
expires: Sun, 28 Jan 2024 12:09:34 GMT
x-varnish: 53161386
via: 1.1 varnish (Varnish/6.5), 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: kmXWr9vmLo9UnAN2Myo_Rn1vyA7DQBpo0ljz2yEvVXc-DCUDWG2Qog==
webresource.tripcdn.com/ares2/infosec/tripCaptcha/~1.0.0/default/js/captcha.min.js
200 OK 67 kB URL GET HTTP/3 webresource.tripcdn.com/ares2/infosec/tripCaptcha/~1.0.0/default/js/captcha.min.js
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type gzip compressed data, from Unix\012- data
Hash 1bfd54a12790b4d0ec84e9a5b539044e
433a8f6d9a846f3f1f4d7f6a9d592c40fec08059
917b224618921c8fb51b66ee3bd21aa850deb997172a5936d566ff4de2e4542d
GET /ares2/infosec/tripCaptcha/~1.0.0/default/js/captcha.min.js HTTP/1.1
Host: webresource.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript
alt-svc: h3=":443"; ma=86400
age: 2779248
date: Thu, 02 Nov 2023 09:26:34 GMT
x-ares-server: r100013666-21027498-ffv9n@SHARB
timing-allow-origin: *
access-control-allow-origin: *
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aliyun
x-ares-request-id: 65436B4A7A727D30360C745A
etag: W/"c884d95d997111c0f3982d6eb2d5ba0a"
last-modified: Fri, 07 Jul 2023 03:15:16 GMT
cache-control: max-age=5184000
expires: Mon, 01 Jan 2024 09:26:34 GMT
content-encoding: gzip
x-varnish: 951424603
via: 1.1 varnish (Varnish/6.5), 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: RLaxMNqNZF0joGX-Jc8Fjjj4yoKErR97vuPxUpK8UNk02c90bXORIg==
pages.trip.com/cars/image/totrip/28ba3ee9-826f-4e90-8a89-c707542beee6.png
200 OK 60 kB URL GET HTTP/3 pages.trip.com/cars/image/totrip/28ba3ee9-826f-4e90-8a89-c707542beee6.png
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type PNG image data, 300 x 200, 8-bit/color RGBA, non-interlaced\012- data
Hash d4c970ff782392e2ec32953bc55a3934
2cdf33f1d9ebac93c433bf86911ff02d667845a7
6ae3eb7619b5608080b799f1c682a988e4b81254ec2f685106f02ed44c337c69
GET /cars/image/totrip/28ba3ee9-826f-4e90-8a89-c707542beee6.png HTTP/1.1
Host: pages.trip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Cookie: UBT_VID=1701696438140.f76e6TctnaRh; kafka_result={"isDirectVisit":"1","hasUrlLocale":"1","hasCookieLocale":"0","isUrlCookieSame":"0","isJump":"0","jumpType":"targetLocale","platform":"online","vid":"1701696438140.f76e6TctnaRh"}; ibu_online_home_language_match={"isRedirect":false,"isShowSuggestion":true,"lastVisited":true,"region":"no","redirectSymbol":false,"site_url":["us.trip.com"],"suggestion":[]}; ibulanguage=EN; ibulocale=en_us; cookiePricesDisplayed=USD; _abtest_userid=77c3b86c-476f-4ca5-8c73-e743bcffbe04; _gcl_au=1.1.2020697670.1701696447
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/png
content-length: 59766
age: 61839
x-ares-server: r100013666-21027498-czld6@SHARB
x-ares-source: aliyun
x-ares-request-id: 6567624CB74048323195B2F7
last-modified: Mon, 28 Sep 2020 09:40:28 GMT
timing-allow-origin: *
x-varnish: 85014181 84839760
via: 1.1 varnish (Varnish/6.5), 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
accept-ranges: bytes
date: Sun, 03 Dec 2023 20:16:42 GMT
cache-control: max-age=172800
expires: Tue, 05 Dec 2023 20:16:42 GMT
etag: W/"d4c970ff782392e2ec32953bc55a3934"
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: rgDdDc4DvLGIsmMtcHhlzFXegovr3oX4xdp38LytXx2lvn7X891Nqg==
pages.trip.com/cars/image/totrip/7b73a674-f8b8-4012-9d6f-1b9c2fbe7d11.png
200 OK 52 kB URL GET HTTP/3 pages.trip.com/cars/image/totrip/7b73a674-f8b8-4012-9d6f-1b9c2fbe7d11.png
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type PNG image data, 300 x 200, 8-bit/color RGBA, non-interlaced\012- data
Hash c174986c61b176a3bd4d7a9ed7f9ce6d
08e882a3534b335b23d8226aed42a495d53fe54d
7fc595f9b377ab5b97f0a7dc09a8b8ea81f6d649a9c795e5131a11575d415778
GET /cars/image/totrip/7b73a674-f8b8-4012-9d6f-1b9c2fbe7d11.png HTTP/1.1
Host: pages.trip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Cookie: UBT_VID=1701696438140.f76e6TctnaRh; kafka_result={"isDirectVisit":"1","hasUrlLocale":"1","hasCookieLocale":"0","isUrlCookieSame":"0","isJump":"0","jumpType":"targetLocale","platform":"online","vid":"1701696438140.f76e6TctnaRh"}; ibu_online_home_language_match={"isRedirect":false,"isShowSuggestion":true,"lastVisited":true,"region":"no","redirectSymbol":false,"site_url":["us.trip.com"],"suggestion":[]}; ibulanguage=EN; ibulocale=en_us; cookiePricesDisplayed=USD; _abtest_userid=77c3b86c-476f-4ca5-8c73-e743bcffbe04; _gcl_au=1.1.2020697670.1701696447
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/png
content-length: 52167
age: 141341
date: Sat, 02 Dec 2023 22:11:41 GMT
x-ares-server: r100013666-21027498-p2fvl@SHARB
x-ares-source: aliyun
x-ares-request-id: 656B55033536F736318599B5
etag: W/"c174986c61b176a3bd4d7a9ed7f9ce6d"
last-modified: Mon, 28 Sep 2020 09:40:18 GMT
cache-control: max-age=172800
expires: Mon, 04 Dec 2023 16:02:11 GMT
timing-allow-origin: *
x-varnish: 126766863 125996722
via: 1.1 varnish (Varnish/6.5), 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-device: U R Android
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: rOILZb3JkuHepNmkk9uiYMSsbwO2bqmToyFvBfqe0GyN8N51xl-c_A==
aw-s.tripcdn.com/modules/ibu/online-home/99668b3667879fa49d3471e763247676.99668b3667879fa49d3471e763247676.png
200 OK 146 kB URL GET HTTP/3 aw-s.tripcdn.com/modules/ibu/online-home/99668b3667879fa49d3471e763247676.99668b3667879fa49d3471e763247676.png
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type PNG image data, 532 x 684, 8-bit colormap, non-interlaced\012- data
Size 146 kB (146476 bytes)
Hash 99668b3667879fa49d3471e763247676
af7c292d5a6ee3dccab58a585d84bdd8ccce4bc0
f239939d62959295d742f2cf032b1d830509faefa251d87a74ff20fe12ee24ed
GET /modules/ibu/online-home/99668b3667879fa49d3471e763247676.99668b3667879fa49d3471e763247676.png HTTP/1.1
Host: aw-s.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aw-s.tripcdn.com/modules/ibu/online-home/onlineRecommendCars.1bf4103d79c8b7f7f65768862789bb38.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/png
content-length: 146476
age: 925897
server: nginx/1.20.1
date: Thu, 23 Nov 2023 20:15:45 GMT
x-ares-server: r100013666-21038164-69ql8@FRA-AWS
timing-allow-origin: *
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aws
x-ares-request-id: GCWHMD2H0PECPRGP
etag: W/"99668b3667879fa49d3471e763247676"
last-modified: Wed, 21 Sep 2022 09:23:02 GMT
cache-control: max-age=5184000
expires: Fri, 05 Jan 2024 08:47:45 GMT
x-varnish: 49858272 37971545
via: 1.1 varnish (Varnish/6.5), 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-device: U R Android
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 8bQBcm9r2Jtpiq0Sy0qNDRplZdy0dLneMxhuABZ61eo_PeRqJ_IG7g==
aw-s.tripcdn.com/modules/ibu/online-assets/TripGeom-Medium.c01bb95e18e1b0d0137ff80b79b97a38.woff2?t=1684398294023
200 OK 43 kB URL GET HTTP/3 aw-s.tripcdn.com/modules/ibu/online-assets/TripGeom-Medium.c01bb95e18e1b0d0137ff80b79b97a38.woff2?t=1684398294023
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type Web Open Font Format (Version 2), TrueType, length 42900, version 1.0\012- data
Hash c01bb95e18e1b0d0137ff80b79b97a38
dcef1b418cdfd6e3b72300d1b1f5e3127c45be06
8a37897c5a93ed336aefa44e788ceb7f4674112847aceee67aaa319edf5876ea
GET /modules/ibu/online-assets/TripGeom-Medium.c01bb95e18e1b0d0137ff80b79b97a38.woff2?t=1684398294023 HTTP/1.1
Host: aw-s.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://aw-s.tripcdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: font/woff2
content-length: 42900
age: 4478
server: nginx/1.20.1
date: Mon, 04 Dec 2023 12:12:44 GMT
x-ares-server: r100013666-21038164-fsr9l@FRA-AWS
timing-allow-origin: *
access-control-allow-origin: https://us.trip.com
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aws
x-ares-request-id: KYT6KNKWTC36KHPX
etag: W/"c01bb95e18e1b0d0137ff80b79b97a38"
last-modified: Fri, 19 May 2023 09:28:34 GMT
cache-control: max-age=5184000
expires: Wed, 31 Jan 2024 18:04:04 GMT
x-varnish: 55943811 55159278
via: 1.1 varnish (Varnish/6.5), 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: -iGTRGvpSNkwmai4cg4zZ4tYEwJn9i2JGe9DvBXwMcppy8_29GCGFw==
aw-s.tripcdn.com/modules/ibu/online-home/onlineSecondEntry.68cb05b4aacab9fd13ff8dca2938cb56.css
200 OK 10 kB URL GET HTTP/3 aw-s.tripcdn.com/modules/ibu/online-home/onlineSecondEntry.68cb05b4aacab9fd13ff8dca2938cb56.css
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type gzip compressed data, from Unix\012- data
Hash 378431c452d69230d192ff979676f507
e7d73171180f91644d7c65bca4a1cb80cbbf0744
cebd24e1daaaebfc651add9a856191f85ffd03c17c26b758f27ebfe1b09f1dcc
GET /modules/ibu/online-home/onlineSecondEntry.68cb05b4aacab9fd13ff8dca2938cb56.css HTTP/1.1
Host: aw-s.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/css
alt-svc: h3=":443"; ma=86400
age: 606722
server: nginx/1.20.1
date: Mon, 27 Nov 2023 12:55:18 GMT
x-ares-server: r100013666-21038164-fsr9l@FRA-AWS
timing-allow-origin: *
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aws
x-ares-request-id: 3S653VZZ8XN7YBZH
etag: W/"68cb05b4aacab9fd13ff8dca2938cb56"
last-modified: Mon, 27 Nov 2023 12:45:28 GMT
cache-control: max-age=5184000
expires: Fri, 26 Jan 2024 12:55:18 GMT
content-encoding: gzip
x-varnish: 52072479
via: 1.1 varnish (Varnish/6.5), 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ff_2RV6w_xzky6cIMJepWvWcKBNqMhdWbijegpc4TFfNCKHFh0WT3A==
aw-s.tripcdn.com/modules/ibu/online-home/poisearch.f8012de31b411457e6d5c50dec839e93.js
200 OK 86 kB URL GET HTTP/3 aw-s.tripcdn.com/modules/ibu/online-home/poisearch.f8012de31b411457e6d5c50dec839e93.js
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type gzip compressed data, from Unix\012- data
Hash eceff68313f37e3e84fa9924520a4b92
9eb08c641aa9925f42d9de292ead28288d39b1f5
b526b0ad67fb1a91ff49316645fdd7bdfd40a273830627ecc0c4e0c3ab663632
GET /modules/ibu/online-home/poisearch.f8012de31b411457e6d5c50dec839e93.js HTTP/1.1
Host: aw-s.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript
alt-svc: h3=":443"; ma=86400
age: 286093
server: nginx/1.20.1
date: Fri, 01 Dec 2023 05:59:07 GMT
x-ares-server: r100013666-21038164-fsr9l@FRA-AWS
timing-allow-origin: *
access-control-allow-origin: https://us.trip.com
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aws
x-ares-request-id: 81WYPG5VZFBX9W62
etag: W/"f8012de31b411457e6d5c50dec839e93"
last-modified: Thu, 23 Nov 2023 02:32:08 GMT
cache-control: max-age=5184000
expires: Tue, 30 Jan 2024 05:59:07 GMT
content-encoding: gzip
x-varnish: 53540117
via: 1.1 varnish (Varnish/6.5), 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: kWYQMncs2kGK-U4qBFEbn3ICgHMEdBG37NLIdoNEFJUE5z2tyiDPdg==
pages.trip.com/images/online-adu/bg_2.webp
200 OK 78 kB URL GET HTTP/3 pages.trip.com/images/online-adu/bg_2.webp
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x550, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 7646257bcc2da5c4842cddc188bf5aa0
7e0aff3b133457337d310d672d4b86aed106e410
61c63c4e8914e25ee42b5f181b1ac935bd516a8e7fe7fdf6ead6763aa8e8850c
GET /images/online-adu/bg_2.webp HTTP/1.1
Host: pages.trip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aw-s.tripcdn.com/
Cookie: UBT_VID=1701696438140.f76e6TctnaRh; kafka_result={"isDirectVisit":"1","hasUrlLocale":"1","hasCookieLocale":"0","isUrlCookieSame":"0","isJump":"0","jumpType":"targetLocale","platform":"online","vid":"1701696438140.f76e6TctnaRh"}; ibu_online_home_language_match={"isRedirect":false,"isShowSuggestion":true,"lastVisited":true,"region":"no","redirectSymbol":false,"site_url":["us.trip.com"],"suggestion":[]}; ibulanguage=EN; ibulocale=en_us; cookiePricesDisplayed=USD; _abtest_userid=77c3b86c-476f-4ca5-8c73-e743bcffbe04; _gcl_au=1.1.2020697670.1701696447; _bfa=1.1701696438140.f76e6TctnaRh.1.1701696445418.1701696448164.1.1.10320668088
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/webp
content-length: 77914
age: 106102
date: Sun, 03 Dec 2023 07:59:00 GMT
x-ares-server: r100013666-21027498-lzgxf@SHARB
x-ares-source: aliyun
x-ares-request-id: 656B3CBAABC04835340E9D6F
etag: W/"7646257bcc2da5c4842cddc188bf5aa0"
last-modified: Tue, 07 Mar 2023 03:33:28 GMT
cache-control: max-age=172800
expires: Mon, 04 Dec 2023 14:18:34 GMT
timing-allow-origin: *
x-varnish: 134867333 129723314
via: 1.1 varnish (Varnish/6.5), 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: vW6ohAngAOjkymByFq2EjjommFClShwHl6_fuPqtR4M-oVgLIjnFTA==
webresource.tripcdn.com/ares2/risk/ubtrms/*/default/rms.js?v=2023124
200 OK 3.3 kB URL GET HTTP/3 webresource.tripcdn.com/ares2/risk/ubtrms/*/default/rms.js?v=2023124
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type ASCII text, with very long lines (8596), with no line terminators
Hash e5eec81820f29c7b95e4aca3c865b981
70e637567d07dbb4ef681d9af2a3ee2495c9274c
e98fc584bf5d3633a3df6f34ab1271570aab8296363c7ccdff0824183a8fecb3
GET /ares2/risk/ubtrms/*/default/rms.js?v=2023124 HTTP/1.1
Host: webresource.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript
content-length: 3323
age: 75282
date: Sun, 03 Dec 2023 16:32:40 GMT
x-ares-server: r100013666-91017039-stk2x@SHAXY
timing-allow-origin: *
access-control-allow-origin: *
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aliyun
x-ares-request-id: 656C9A624DC61B3932A1AEF6
etag: W/"e5eec81820f29c7b95e4aca3c865b981"
last-modified: Mon, 20 Nov 2023 11:18:27 GMT
cache-control: max-age=5184000
expires: Thu, 01 Feb 2024 15:10:26 GMT
content-encoding: gzip
x-varnish: 543522087 498822971
via: 1.1 varnish (Varnish/6.5), 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 5wTx_tzlruG5NsEmmJwmBggM8aoZK9OlJkFqAHtAr73DiQKQGFKZtQ==
webresource.tripcdn.com/ares2/infosec/tripCaptcha/1.0.5/default/img/loading.gif
200 OK 40 kB URL GET HTTP/3 webresource.tripcdn.com/ares2/infosec/tripCaptcha/1.0.5/default/img/loading.gif
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type GIF image data, version 89a, 40 x 40\012- data
Hash 8a085c3a2884e6fa69d90897f44db5cc
fb0afe4e730f132b5c6ebea48dacf6f4d17fb3ec
613d6274a5d3dc62868b09bec5af2e834545c40d7c8fbe6158ff40e4563e7c2f
GET /ares2/infosec/tripCaptcha/1.0.5/default/img/loading.gif HTTP/1.1
Host: webresource.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/gif
content-length: 40128
age: 367078
date: Thu, 30 Nov 2023 07:29:23 GMT
x-ares-server: r100013666-91017039-gqdzc@SHAXY
timing-allow-origin: *
access-control-allow-origin: *
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aliyun
x-ares-request-id: 6564B4E40CEB1C31314A7920
etag: W/"8a085c3a2884e6fa69d90897f44db5cc"
last-modified: Mon, 19 Oct 2020 07:52:45 GMT
cache-control: max-age=5184000
expires: Fri, 26 Jan 2024 15:25:24 GMT
x-varnish: 510053277 486011446
via: 1.1 varnish (Varnish/6.5), 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: cYCRCOA1ywLboZY8o3MUx3GXh2wPJ1p2QWXCWjXrwX-Dm8rMnidh6g==
us.trip.com/m/home/getcountrycode?x-traceID=1421558514-1701696448056-1002797424
200 OK 24 kB URL POST HTTP/3 us.trip.com/m/home/getcountrycode?x-traceID=1421558514-1701696448056-1002797424
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (24098), with no line terminators
Hash 64eb54f8ac876c31bbc6fa9868852da7
d5090716b7be8ad0593c07645ed42fe4b14878ca
76349808e1f64a57bacc260b12cd90cd8af210d8ab7c8c39c9de4dd34de9e843
POST /m/home/getcountrycode?x-traceID=1421558514-1701696448056-1002797424 HTTP/1.1
Host: us.trip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
locale: en-US
currency: USD
x-traceID: 1421558514-1701696448056-1002797424
trip-trace-id: 1421558514-1701696448056-1002797424
Content-Type: application/json
Content-Length: 46
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/?locale=en-us
Cookie: UBT_VID=1701696438140.f76e6TctnaRh; kafka_result={"isDirectVisit":"1","hasUrlLocale":"1","hasCookieLocale":"0","isUrlCookieSame":"0","isJump":"0","jumpType":"targetLocale","platform":"online","vid":"1701696438140.f76e6TctnaRh"}; ibu_online_home_language_match={"isRedirect":false,"isShowSuggestion":true,"lastVisited":true,"region":"no","redirectSymbol":false,"site_url":["us.trip.com"],"suggestion":[]}; ibulanguage=EN; ibulocale=en_us; cookiePricesDisplayed=USD; _abtest_userid=77c3b86c-476f-4ca5-8c73-e743bcffbe04; _tp_search_latest_channel_name=hotels; _gcl_au=1.1.2020697670.1701696447; _fwb=254FjNz9nuUbqsIQWYSUhsh.1701696447115; NA_SAC=dT1odHRwcyUzQSUyRiUyRnVzLnRyaXAuY29tJTJGJTNGbG9jYWxlJTNEZW4tdXN8cj0=; wcs_bt=s_33fb334966e9:1701696447
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=utf-8
content-length: 24106
timing-allow-origin: *
server: nginx/1.20.1
date: Mon, 04 Dec 2023 13:27:22 GMT
access-control-allow-credentials: true
access-control-allow-headers: content-type,cookieorigin,trip-trace-id,x-traceid,currency,locale
access-control-allow-methods: POST,GET
access-control-allow-origin: https://us.trip.com
x-gate-region: SIN-AWS
access-control-expose-headers: x-originating-url, x-gate-region, x-ibu-trip-region
x-trip-app-name: h5-root
x-trip-app-version: 2.2.0
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-download-options: noopen
x-readtime: 11
x-trip-region: sg, de
content-security-policy-report-only: default-src * data: blob:; connect-src https://*.tripcdn.com *.c-ctrip.com https://*.trip.com https://*.ctrip.com https://*.doubleclick.net https://*.google.com https://*.tiktok.com https://*.bing.com https://*.mapbox.com https://*.skyscanner.net https://*.tripcdn.cn https://*.google-analytics.com https://*.braze.com https://*.yandex.ru https://*.googleapis.com https://*.facebook.com https://*.googletagmanager.com https://*.gstatic.com https://wcs.naver.com https://wcs.naver.net https://connect.facebook.net https://cdn.2trk.info https://b98.yahoo.co.jp https://widget.trustpilot.com https://s.yimg.jp https://altopd.com wss://im.trip.com;script-src 'unsafe-eval' 'unsafe-inline' https://*.naver.net https://*.trip.com https://*.tripcdn.com https://*.tripcdn.cn https://*.c-ctrip.com https://*.google.com https://*.doubleclick.net https://*.googletagmanager.com https://*.google-analytics.com https://unpkg.com https://altopd.com https://*.tiktok.com https://*.facebook.net https://*.bing.com https://*.googleapis.com https://*.yahoo.co.jp https://*.2trk.info https://*.yimg.jp https://*.trustpilot.com https://appx-t2 https://*.skyscanner.net https://*.alipayobjects.com https://*.rakuten.com https://*.qunarzz.com https://*.googleadservices.com https://*.yandex.ru https://*.qq.com https://*.ctrip.com https://*.innity.net https://*.ucweb.com https://*.baidu.com https://*.googlesyndication.com https://*.jsdelivr.net https://*.tripcdn.com https://hublosk.com https://*.yimg.com https://boxclone.com https://*.hotjar.com https://*.google.ae https://*.valuecommerce.com https://*.google.de https://jullyambery.net https://*.innity.com https://appx https://*.criteo.com https://*.apaylater.com https://*.maynhtml.com https://*.google.com.my https://*.google.com.hk https://*.mapbox.com blob:; style-src 'unsafe-inline' https://*.tripcdn.com https://*.trip.com https://*.tripcdn.cn https://*.google.com https://*.googleapis.com https://*.fontawesome.com https://*.honey.io https://*.gstatic.com https://*.c-ctrip.com https://*.cloudflare.com data: ; child-src 'self' https://*.ctripcorp.com https://*.invol.co https://*.googlesyndication.com https://*.google.com https://*.trustpilot.com https://*.facebook.com https://*.lcmark.net https://*.ubpixel.com https://*.altopd.com https://*.youtube.com https://*.2trk.info https://*.2trck.pro https://*.doubleclick.net https://*.kakao.com https://*.dotomi.com https://*.tkqlhce.com https://*.criteo.com https://*.infobip.com https://*.ucweb.com https://*.moontrkr.com https://*.matterport.com https://*.trckqq.com https://*.trip.com https://altopd.com https://invol.co https://stvkr.com https://redirtrack.tech https://noop.style https://*.admitad.com https://*.kittyswell.one https://*.keloogux.world https://childrenshoppingguide.com https://*.youtube-nocookie.com https://*.factoryhotsales.shop https://*.skillmatrix.live https://shoppingderby.com blob:; object-src https://*.trip.com; report-uri https://www.trip.com/security/csp-report; report-to /security/csp-report;
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: MlFqGJZBRcNKsZIJG5loefiHkcXi_yPCiTdZ6jQB-gQ11-9pdToAwg==
status.geotrust.com/
471 B IP
Hash 775d0be2bfa73fa76bb20d147467a975
6d776ce7aa04da499072b6491ec0e25159b19b5f
da28d0a97f99f5777e54e0db6a928feb8f1c0b1e97ae4b059a2fd7a9e59613ef
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 795
Cache-Control: max-age=7200
Content-Type: application/ocsp-response
Date: Mon, 04 Dec 2023 13:27:22 GMT
Last-Modified: Mon, 04 Dec 2023 13:14:07 GMT
Server: ECAcc (amb/6BDA)
X-Cache: HIT
Content-Length: 471
ak-d.tripcdn.com/images/0AS3k120009gxejby8010.png
200 OK 3.0 kB URL GET HTTP/3 ak-d.tripcdn.com/images/0AS3k120009gxejby8010.png
IP
ASN #20940 Akamai International B.V.
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerDigiCert Inc
Subject*.tripcdn.com
Fingerprint39:6D:BD:C3:37:CE:BB:D7:E0:9C:B9:5D:15:48:7D:02:6D:95:1D:6C
ValidityThu, 06 Apr 2023 00:00:00 GMT - Fri, 05 Apr 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 3b42b378a40aa457d2eb9fcde5272586
11f0e325ccdce839bc2b066e6897295727c7aaae
4f49480a49ef34335655b040cfbe6b46ceda96f737023da0a638cb38adb9fe9b
GET /images/0AS3k120009gxejby8010.png HTTP/1.1
Host: ak-d.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/webp
content-length: 3026
access-control-allow-origin: *
etag: sPREpsiFkE,0AS
last-modified: Fri, 27 Oct 2023 14:28:55 GMT
cache-control: max-age=7736004
expires: Sun, 03 Mar 2024 02:20:47 GMT
date: Mon, 04 Dec 2023 13:27:23 GMT
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
timing-allow-origin: *
us.trip.com/pages/appdownload/api/queryOneLink?x-traceID=1525339999-1701696448127-1978775741
200 OK 2.5 kB URL POST HTTP/3 us.trip.com/pages/appdownload/api/queryOneLink?x-traceID=1525339999-1701696448127-1978775741
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type JSON data\012- , ASCII text, with very long lines (2542), with no line terminators
Hash 45a326b3558709609ca04337143a2c9b
fdf31fe27934a4f828e2b582a88de0f270dcb547
100008432582f0641bdd7a44e0934139e6309ddddcb76834693969ede93ed1c0
POST /pages/appdownload/api/queryOneLink?x-traceID=1525339999-1701696448127-1978775741 HTTP/1.1
Host: us.trip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
locale: en-US
currency: USD
x-traceID: 1525339999-1701696448127-1978775741
trip-trace-id: 1525339999-1701696448127-1978775741
Content-Type: application/json
Content-Length: 252
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/?locale=en-us
Cookie: UBT_VID=1701696438140.f76e6TctnaRh; kafka_result={"isDirectVisit":"1","hasUrlLocale":"1","hasCookieLocale":"0","isUrlCookieSame":"0","isJump":"0","jumpType":"targetLocale","platform":"online","vid":"1701696438140.f76e6TctnaRh"}; ibu_online_home_language_match={"isRedirect":false,"isShowSuggestion":true,"lastVisited":true,"region":"no","redirectSymbol":false,"site_url":["us.trip.com"],"suggestion":[]}; ibulanguage=EN; ibulocale=en_us; cookiePricesDisplayed=USD; _abtest_userid=77c3b86c-476f-4ca5-8c73-e743bcffbe04; _tp_search_latest_channel_name=hotels; _gcl_au=1.1.2020697670.1701696447; _fwb=254FjNz9nuUbqsIQWYSUhsh.1701696447115; NA_SAC=dT1odHRwcyUzQSUyRiUyRnVzLnRyaXAuY29tJTJGJTNGbG9jYWxlJTNEZW4tdXN8cj0=; wcs_bt=s_33fb334966e9:1701696447; _bfa=1.1701696438140.f76e6TctnaRh.1.1701696445418.1701696448164.1.1.10320668088
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=utf-8
content-length: 2542
timing-allow-origin: *
server: nginx/1.20.1
date: Mon, 04 Dec 2023 13:27:23 GMT
etag: "9ee-/fMf4nk0pPgo4rWCqI3g8nDctUc"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-download-options: noopen
x-readtime: 143
x-trip-app-name: universal-trip-pages
x-trip-app-version: 2.3.12
x-trip-region: sg, de
content-security-policy-report-only: default-src * data: blob:; connect-src https://*.tripcdn.com *.c-ctrip.com https://*.trip.com https://*.ctrip.com https://*.doubleclick.net https://*.google.com https://*.tiktok.com https://*.bing.com https://*.mapbox.com https://*.skyscanner.net https://*.tripcdn.cn https://*.google-analytics.com https://*.braze.com https://*.yandex.ru https://*.googleapis.com https://*.facebook.com https://*.googletagmanager.com https://*.gstatic.com https://wcs.naver.com https://wcs.naver.net https://connect.facebook.net https://cdn.2trk.info https://b98.yahoo.co.jp https://widget.trustpilot.com https://s.yimg.jp https://altopd.com wss://im.trip.com;script-src 'unsafe-eval' 'unsafe-inline' https://*.naver.net https://*.trip.com https://*.tripcdn.com https://*.tripcdn.cn https://*.c-ctrip.com https://*.google.com https://*.doubleclick.net https://*.googletagmanager.com https://*.google-analytics.com https://unpkg.com https://altopd.com https://*.tiktok.com https://*.facebook.net https://*.bing.com https://*.googleapis.com https://*.yahoo.co.jp https://*.2trk.info https://*.yimg.jp https://*.trustpilot.com https://appx-t2 https://*.skyscanner.net https://*.alipayobjects.com https://*.rakuten.com https://*.qunarzz.com https://*.googleadservices.com https://*.yandex.ru https://*.qq.com https://*.ctrip.com https://*.innity.net https://*.ucweb.com https://*.baidu.com https://*.googlesyndication.com https://*.jsdelivr.net https://*.tripcdn.com https://hublosk.com https://*.yimg.com https://boxclone.com https://*.hotjar.com https://*.google.ae https://*.valuecommerce.com https://*.google.de https://jullyambery.net https://*.innity.com https://appx https://*.criteo.com https://*.apaylater.com https://*.maynhtml.com https://*.google.com.my https://*.google.com.hk https://*.mapbox.com blob:; style-src 'unsafe-inline' https://*.tripcdn.com https://*.trip.com https://*.tripcdn.cn https://*.google.com https://*.googleapis.com https://*.fontawesome.com https://*.honey.io https://*.gstatic.com https://*.c-ctrip.com https://*.cloudflare.com data: ; child-src 'self' https://*.ctripcorp.com https://*.invol.co https://*.googlesyndication.com https://*.google.com https://*.trustpilot.com https://*.facebook.com https://*.lcmark.net https://*.ubpixel.com https://*.altopd.com https://*.youtube.com https://*.2trk.info https://*.2trck.pro https://*.doubleclick.net https://*.kakao.com https://*.dotomi.com https://*.tkqlhce.com https://*.criteo.com https://*.infobip.com https://*.ucweb.com https://*.moontrkr.com https://*.matterport.com https://*.trckqq.com https://*.trip.com https://altopd.com https://invol.co https://stvkr.com https://redirtrack.tech https://noop.style https://*.admitad.com https://*.kittyswell.one https://*.keloogux.world https://childrenshoppingguide.com https://*.youtube-nocookie.com https://*.factoryhotsales.shop https://*.skillmatrix.live https://shoppingderby.com blob:; object-src https://*.trip.com; report-uri https://www.trip.com/security/csp-report; report-to /security/csp-report;
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: qgdqKB-5MCK7IKrO8hThL1IeoYWMOkuUKAHB_ezd-sZgb1DkG90oXw==
us.trip.com/restapi/soa2/13909/getUspInfo?x-traceID=1961687699-1701696448102-1430185467
200 OK 52 kB URL POST HTTP/3 us.trip.com/restapi/soa2/13909/getUspInfo?x-traceID=1961687699-1701696448102-1430185467
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)\012- data
Hash e554f551600ccf44b0b6e2a903a98f5d
dee19a9a6f246d0f9db4c96b290b4a90ce8429e2
37a29cb13f5bf2131d261df74dd45dc92891945ddef883812ce1aa8c1407bcab
POST /restapi/soa2/13909/getUspInfo?x-traceID=1961687699-1701696448102-1430185467 HTTP/1.1
Host: us.trip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
locale: en-US
currency: USD
x-traceID: 1961687699-1701696448102-1430185467
trip-trace-id: 1961687699-1701696448102-1430185467
Content-Type: application/json
Content-Length: 85
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/?locale=en-us
Cookie: UBT_VID=1701696438140.f76e6TctnaRh; kafka_result={"isDirectVisit":"1","hasUrlLocale":"1","hasCookieLocale":"0","isUrlCookieSame":"0","isJump":"0","jumpType":"targetLocale","platform":"online","vid":"1701696438140.f76e6TctnaRh"}; ibu_online_home_language_match={"isRedirect":false,"isShowSuggestion":true,"lastVisited":true,"region":"no","redirectSymbol":false,"site_url":["us.trip.com"],"suggestion":[]}; ibulanguage=EN; ibulocale=en_us; cookiePricesDisplayed=USD; _abtest_userid=77c3b86c-476f-4ca5-8c73-e743bcffbe04; _tp_search_latest_channel_name=hotels; _gcl_au=1.1.2020697670.1701696447; _fwb=254FjNz9nuUbqsIQWYSUhsh.1701696447115; NA_SAC=dT1odHRwcyUzQSUyRiUyRnVzLnRyaXAuY29tJTJGJTNGbG9jYWxlJTNEZW4tdXN8cj0=; wcs_bt=s_33fb334966e9:1701696447; _bfa=1.1701696438140.f76e6TctnaRh.1.1701696445418.1701696448164.1.1.10320668088
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json;charset=UTF-8
alt-svc: h3=":443"; ma=86400
timing-allow-origin: *
server: nginx/1.20.1
date: Mon, 04 Dec 2023 13:27:22 GMT
clogging_trace_id: 5658158719867743502
rootmessageid: 100025527-0a817ec0-472693-2555801
servermessageid: 100025527-0a70c3c5-472693-895056
content-encoding: gzip
vary: accept-encoding
x-gate-root-id: 100025527-0a817ec0-472693-2555801
x-gate-region: SHAXY
x-service-call: 0.101
access-control-expose-headers: RootMessageId, x-service-call, x-gate-region
x-gate: ctrip-gate
x-originating-url: https://us.trip.com/restapi/soa2/13909/getUspInfo?x-traceID=1961687699-1701696448102-1430185467
access-control-allow-origin: https://us.trip.com
access-control-allow-credentials: true
x-trip-region: sg, de
content-security-policy-report-only: default-src * data: blob:; connect-src https://*.tripcdn.com *.c-ctrip.com https://*.trip.com https://*.ctrip.com https://*.doubleclick.net https://*.google.com https://*.tiktok.com https://*.bing.com https://*.mapbox.com https://*.skyscanner.net https://*.tripcdn.cn https://*.google-analytics.com https://*.braze.com https://*.yandex.ru https://*.googleapis.com https://*.facebook.com https://*.googletagmanager.com https://*.gstatic.com https://wcs.naver.com https://wcs.naver.net https://connect.facebook.net https://cdn.2trk.info https://b98.yahoo.co.jp https://widget.trustpilot.com https://s.yimg.jp https://altopd.com wss://im.trip.com;script-src 'unsafe-eval' 'unsafe-inline' https://*.naver.net https://*.trip.com https://*.tripcdn.com https://*.tripcdn.cn https://*.c-ctrip.com https://*.google.com https://*.doubleclick.net https://*.googletagmanager.com https://*.google-analytics.com https://unpkg.com https://altopd.com https://*.tiktok.com https://*.facebook.net https://*.bing.com https://*.googleapis.com https://*.yahoo.co.jp https://*.2trk.info https://*.yimg.jp https://*.trustpilot.com https://appx-t2 https://*.skyscanner.net https://*.alipayobjects.com https://*.rakuten.com https://*.qunarzz.com https://*.googleadservices.com https://*.yandex.ru https://*.qq.com https://*.ctrip.com https://*.innity.net https://*.ucweb.com https://*.baidu.com https://*.googlesyndication.com https://*.jsdelivr.net https://*.tripcdn.com https://hublosk.com https://*.yimg.com https://boxclone.com https://*.hotjar.com https://*.google.ae https://*.valuecommerce.com https://*.google.de https://jullyambery.net https://*.innity.com https://appx https://*.criteo.com https://*.apaylater.com https://*.maynhtml.com https://*.google.com.my https://*.google.com.hk https://*.mapbox.com blob:; style-src 'unsafe-inline' https://*.tripcdn.com https://*.trip.com https://*.tripcdn.cn https://*.google.com https://*.googleapis.com https://*.fontawesome.com https://*.honey.io https://*.gstatic.com https://*.c-ctrip.com https://*.cloudflare.com data: ; child-src 'self' https://*.ctripcorp.com https://*.invol.co https://*.googlesyndication.com https://*.google.com https://*.trustpilot.com https://*.facebook.com https://*.lcmark.net https://*.ubpixel.com https://*.altopd.com https://*.youtube.com https://*.2trk.info https://*.2trck.pro https://*.doubleclick.net https://*.kakao.com https://*.dotomi.com https://*.tkqlhce.com https://*.criteo.com https://*.infobip.com https://*.ucweb.com https://*.moontrkr.com https://*.matterport.com https://*.trckqq.com https://*.trip.com https://altopd.com https://invol.co https://stvkr.com https://redirtrack.tech https://noop.style https://*.admitad.com https://*.kittyswell.one https://*.keloogux.world https://childrenshoppingguide.com https://*.youtube-nocookie.com https://*.factoryhotsales.shop https://*.skillmatrix.live https://shoppingderby.com blob:; object-src https://*.trip.com; report-uri https://www.trip.com/security/csp-report; report-to /security/csp-report;
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: a4BgrU7xbburA1uK29UANWps4U72XtXc43YhAoSxdSS4jtarCrAJvg==
ak-d.tripcdn.com/images/1lo0s12000c1dr47nA4DB_C_550_412.jpg
200 OK 56 kB URL GET HTTP/3 ak-d.tripcdn.com/images/1lo0s12000c1dr47nA4DB_C_550_412.jpg
IP
ASN #20940 Akamai International B.V.
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerDigiCert Inc
Subject*.tripcdn.com
Fingerprint39:6D:BD:C3:37:CE:BB:D7:E0:9C:B9:5D:15:48:7D:02:6D:95:1D:6C
ValidityThu, 06 Apr 2023 00:00:00 GMT - Fri, 05 Apr 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 550x412, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash bbf8531a680ae15cc55ca0c1747be698
d52c1fe691c266e39c691a85ff298d8e58cc56d3
e86c597ff28bca029b4b95cb8446e72b89306113906489fb4877c04ec6bb9f92
GET /images/1lo0s12000c1dr47nA4DB_C_550_412.jpg HTTP/1.1
Host: ak-d.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/webp
content-length: 56182
access-control-allow-origin: *
etag: 203.git1c2d8f8.el7
last-modified: Sun, 03 Sep 2023 08:33:56 GMT
x-edgeconnect-midmile-rtt: 0, 3
x-edgeconnect-origin-mex-latency: 91, 91
cache-control: max-age=6345141
expires: Thu, 15 Feb 2024 23:59:44 GMT
date: Mon, 04 Dec 2023 13:27:23 GMT
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
timing-allow-origin: *
aw-s.tripcdn.com/modules/ibu/online-home/vendor.3c858daa285728e872a932fcf408e0a5.js
200 OK 70 kB URL GET HTTP/2 aw-s.tripcdn.com/modules/ibu/online-home/vendor.3c858daa285728e872a932fcf408e0a5.js
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type gzip compressed data, from Unix\012- data
Hash e1674661ba386c9f7e87507d7841b3a0
f93e8a6fb627a1cb0a449b4bd3aba9871ee7afff
8975f4e421bfa742b3faa8f2f9d3b215219089974cf6cba3a14a24f5c160b9c6
GET /modules/ibu/online-home/vendor.3c858daa285728e872a932fcf408e0a5.js HTTP/1.1
Host: aw-s.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
server: nginx/1.20.1
date: Thu, 23 Nov 2023 06:38:17 GMT
x-ares-server: r100013666-21038164-vw5sm@FRA-AWS
timing-allow-origin: *
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aws
x-ares-request-id: PCGA691AZ7KFT3Y4
etag: W/"3c858daa285728e872a932fcf408e0a5"
last-modified: Thu, 23 Nov 2023 06:31:34 GMT
cache-control: max-age=5184000
expires: Mon, 22 Jan 2024 06:38:17 GMT
content-encoding: gzip
x-varnish: 49198813
via: 1.1 varnish (Varnish/6.5), 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 72IHCFNiv5iwedxI80hEF08khbM59zba82rTi5q2P8U4vzAmZX6ByQ==
age: 974942
X-Firefox-Spdy: h2
us.trip.com/m/home/getcountrycode?x-traceID=1164610594-1701696448140-1524859588
200 OK 24 kB URL POST HTTP/3 us.trip.com/m/home/getcountrycode?x-traceID=1164610594-1701696448140-1524859588
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (24098), with no line terminators
Hash 64eb54f8ac876c31bbc6fa9868852da7
d5090716b7be8ad0593c07645ed42fe4b14878ca
76349808e1f64a57bacc260b12cd90cd8af210d8ab7c8c39c9de4dd34de9e843
POST /m/home/getcountrycode?x-traceID=1164610594-1701696448140-1524859588 HTTP/1.1
Host: us.trip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
locale: en-US
currency: USD
x-traceID: 1164610594-1701696448140-1524859588
trip-trace-id: 1164610594-1701696448140-1524859588
Content-Type: application/json
Content-Length: 46
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/?locale=en-us
Cookie: UBT_VID=1701696438140.f76e6TctnaRh; kafka_result={"isDirectVisit":"1","hasUrlLocale":"1","hasCookieLocale":"0","isUrlCookieSame":"0","isJump":"0","jumpType":"targetLocale","platform":"online","vid":"1701696438140.f76e6TctnaRh"}; ibu_online_home_language_match={"isRedirect":false,"isShowSuggestion":true,"lastVisited":true,"region":"no","redirectSymbol":false,"site_url":["us.trip.com"],"suggestion":[]}; ibulanguage=EN; ibulocale=en_us; cookiePricesDisplayed=USD; _abtest_userid=77c3b86c-476f-4ca5-8c73-e743bcffbe04; _tp_search_latest_channel_name=hotels; _gcl_au=1.1.2020697670.1701696447; _fwb=254FjNz9nuUbqsIQWYSUhsh.1701696447115; NA_SAC=dT1odHRwcyUzQSUyRiUyRnVzLnRyaXAuY29tJTJGJTNGbG9jYWxlJTNEZW4tdXN8cj0=; wcs_bt=s_33fb334966e9:1701696447; _bfa=1.1701696438140.f76e6TctnaRh.1.1701696445418.1701696448164.1.1.10320668088
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=utf-8
content-length: 24106
timing-allow-origin: *
server: nginx/1.20.1
date: Mon, 04 Dec 2023 13:27:23 GMT
access-control-allow-credentials: true
access-control-allow-headers: content-type,cookieorigin,trip-trace-id,x-traceid,currency,locale
access-control-allow-methods: POST,GET
access-control-allow-origin: https://us.trip.com
x-gate-region: SHARB
access-control-expose-headers: x-originating-url, x-gate-region, x-ibu-trip-region
x-trip-app-name: h5-root
x-trip-app-version: 2.2.0
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-download-options: noopen
x-readtime: 23
x-trip-region: sg, de
content-security-policy-report-only: default-src * data: blob:; connect-src https://*.tripcdn.com *.c-ctrip.com https://*.trip.com https://*.ctrip.com https://*.doubleclick.net https://*.google.com https://*.tiktok.com https://*.bing.com https://*.mapbox.com https://*.skyscanner.net https://*.tripcdn.cn https://*.google-analytics.com https://*.braze.com https://*.yandex.ru https://*.googleapis.com https://*.facebook.com https://*.googletagmanager.com https://*.gstatic.com https://wcs.naver.com https://wcs.naver.net https://connect.facebook.net https://cdn.2trk.info https://b98.yahoo.co.jp https://widget.trustpilot.com https://s.yimg.jp https://altopd.com wss://im.trip.com;script-src 'unsafe-eval' 'unsafe-inline' https://*.naver.net https://*.trip.com https://*.tripcdn.com https://*.tripcdn.cn https://*.c-ctrip.com https://*.google.com https://*.doubleclick.net https://*.googletagmanager.com https://*.google-analytics.com https://unpkg.com https://altopd.com https://*.tiktok.com https://*.facebook.net https://*.bing.com https://*.googleapis.com https://*.yahoo.co.jp https://*.2trk.info https://*.yimg.jp https://*.trustpilot.com https://appx-t2 https://*.skyscanner.net https://*.alipayobjects.com https://*.rakuten.com https://*.qunarzz.com https://*.googleadservices.com https://*.yandex.ru https://*.qq.com https://*.ctrip.com https://*.innity.net https://*.ucweb.com https://*.baidu.com https://*.googlesyndication.com https://*.jsdelivr.net https://*.tripcdn.com https://hublosk.com https://*.yimg.com https://boxclone.com https://*.hotjar.com https://*.google.ae https://*.valuecommerce.com https://*.google.de https://jullyambery.net https://*.innity.com https://appx https://*.criteo.com https://*.apaylater.com https://*.maynhtml.com https://*.google.com.my https://*.google.com.hk https://*.mapbox.com blob:; style-src 'unsafe-inline' https://*.tripcdn.com https://*.trip.com https://*.tripcdn.cn https://*.google.com https://*.googleapis.com https://*.fontawesome.com https://*.honey.io https://*.gstatic.com https://*.c-ctrip.com https://*.cloudflare.com data: ; child-src 'self' https://*.ctripcorp.com https://*.invol.co https://*.googlesyndication.com https://*.google.com https://*.trustpilot.com https://*.facebook.com https://*.lcmark.net https://*.ubpixel.com https://*.altopd.com https://*.youtube.com https://*.2trk.info https://*.2trck.pro https://*.doubleclick.net https://*.kakao.com https://*.dotomi.com https://*.tkqlhce.com https://*.criteo.com https://*.infobip.com https://*.ucweb.com https://*.moontrkr.com https://*.matterport.com https://*.trckqq.com https://*.trip.com https://altopd.com https://invol.co https://stvkr.com https://redirtrack.tech https://noop.style https://*.admitad.com https://*.kittyswell.one https://*.keloogux.world https://childrenshoppingguide.com https://*.youtube-nocookie.com https://*.factoryhotsales.shop https://*.skillmatrix.live https://shoppingderby.com blob:; object-src https://*.trip.com; report-uri https://www.trip.com/security/csp-report; report-to /security/csp-report;
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: Q4WCH_ulIBwad9rQ5JFwEFayOYPIqdHakgcUcZidor75masVOAUA3A==
aw-s.tripcdn.com/modules/ibu/online-home/21d5d0cbda68ced25672da1ecbad9aac.21d5d0cbda68ced25672da1ecbad9aac.png
200 OK 162 kB URL GET HTTP/3 aw-s.tripcdn.com/modules/ibu/online-home/21d5d0cbda68ced25672da1ecbad9aac.21d5d0cbda68ced25672da1ecbad9aac.png
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type PNG image data, 532 x 612, 8-bit colormap, non-interlaced\012- data
Size 162 kB (162116 bytes)
Hash 21d5d0cbda68ced25672da1ecbad9aac
139032dc46d409cd364080aefb5437f8c4c1db5d
b2b7515c762625caa3fc4392740d8b69066e68e97d5c909f810481ae3b890542
GET /modules/ibu/online-home/21d5d0cbda68ced25672da1ecbad9aac.21d5d0cbda68ced25672da1ecbad9aac.png HTTP/1.1
Host: aw-s.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aw-s.tripcdn.com/modules/ibu/online-home/onlineRecommendCars.1bf4103d79c8b7f7f65768862789bb38.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/png
content-length: 162116
age: 1995529
server: nginx/1.20.1
date: Sat, 11 Nov 2023 11:08:34 GMT
x-ares-server: r100013666-21038164-6xxwt@FRA-AWS
timing-allow-origin: *
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aws
x-ares-request-id: X87YSE29EZQ6028Z
etag: W/"21d5d0cbda68ced25672da1ecbad9aac"
last-modified: Wed, 21 Sep 2022 09:23:00 GMT
cache-control: max-age=5184000
expires: Thu, 04 Jan 2024 02:39:45 GMT
x-varnish: 42885802 37994945
via: 1.1 varnish (Varnish/6.5), 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: E5zAAKpk2lz8xY6qRqWp4wLvNX-X6F32a0FKIUZUqn7zosS1r6O3_w==
file.tripcdn.com/files/7/ibu_online_assets/cache/en-US.json?x-traceID=1655880470-1701696448054-1746716776
200 OK 0 B URL OPTIONS HTTP/2 file.tripcdn.com/files/7/ibu_online_assets/cache/en-US.json?x-traceID=1655880470-1701696448054-1746716776
IP
ASN #20940 Akamai International B.V.
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerDigiCert Inc
SubjectTrip.com
Fingerprint9D:1E:6A:62:2E:9E:A9:3E:14:AC:D8:20:11:70:06:09:BF:37:4F:C2
ValidityMon, 31 Jul 2023 00:00:00 GMT - Wed, 31 Jul 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /files/7/ibu_online_assets/cache/en-US.json?x-traceID=1655880470-1701696448054-1746716776 HTTP/1.1
Host: file.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: currency,locale,trip-trace-id,x-traceid
Referer: https://us.trip.com/
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 0
access-control-allow-credentials: true
access-control-allow-headers: Currency, Locale, Trip-Trace-Id, X-Traceid
access-control-allow-methods: GET
access-control-allow-origin: *
x-edgeconnect-midmile-rtt: 18
x-edgeconnect-origin-mex-latency: 30
cache-control: max-age=0
expires: Mon, 04 Dec 2023 13:27:23 GMT
date: Mon, 04 Dec 2023 13:27:23 GMT
X-Firefox-Spdy: h2
m.trip.com/restapi/soa2/18088/getAppConfig.json
200 OK 3.7 kB URL POST HTTP/3 m.trip.com/restapi/soa2/18088/getAppConfig.json
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)\012- data
Hash ae8b23510d42fb4842a139f1d76027b3
aa63db220d2bee9b804211452656159b347105ca
b960745d5f6cedf329aa499968dca2d9d789a99568b126a3d0a0ce3ddf4a4788
POST /restapi/soa2/18088/getAppConfig.json HTTP/1.1
Host: m.trip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://us.trip.com/
Content-Type: application/json
Content-Length: 134
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json;charset=UTF-8
alt-svc: h3=":443"; ma=86400
timing-allow-origin: *
server: nginx/1.20.1
date: Mon, 04 Dec 2023 13:27:21 GMT
clogging_trace_id: 4616021606741020364
rootmessageid: 100025527-0a71b625-472693-894388
servermessageid: 100025527-0a71b625-472693-894389
content-encoding: gzip
vary: accept-encoding
access-control-allow-origin: https://us.trip.com
access-control-allow-credentials: true
x-gate-root-id: 100025527-0a71b625-472693-894388
x-gate-region: SHAXY
x-service-call: 0.004
access-control-expose-headers: RootMessageId, x-service-call, x-gate-region
x-gate: ctrip-gate
x-originating-url: https://m.trip.com/restapi/soa2/18088/getAppConfig.json
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 5crcmwvxGvgzE-AM5plxgt-olNwmbSujEM-1bqaY67MJXynhjlQvxg==
ak-d.tripcdn.com/images/0AS6o120009gxfriv28B3.png
200 OK 1.2 kB URL GET HTTP/3 ak-d.tripcdn.com/images/0AS6o120009gxfriv28B3.png
IP
ASN #20940 Akamai International B.V.
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerDigiCert Inc
Subject*.tripcdn.com
Fingerprint39:6D:BD:C3:37:CE:BB:D7:E0:9C:B9:5D:15:48:7D:02:6D:95:1D:6C
ValidityThu, 06 Apr 2023 00:00:00 GMT - Fri, 05 Apr 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash c55f04442563cd185050019296fb42e3
4e8dab66ced31d80da7de7ca6ffa9b50957220b3
c03aeac82d0b534c5454827b7395449c25d5d6168824b5cd39d680cc713f4a74
GET /images/0AS6o120009gxfriv28B3.png HTTP/1.1
Host: ak-d.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/webp
content-length: 1164
access-control-allow-origin: *
etag: 198.git8693dbd.el7
last-modified: Mon, 07 Aug 2023 06:48:45 GMT
x-edgeconnect-midmile-rtt: 19
x-edgeconnect-origin-mex-latency: 40
cache-control: max-age=7736010
expires: Sun, 03 Mar 2024 02:20:53 GMT
date: Mon, 04 Dec 2023 13:27:23 GMT
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
timing-allow-origin: *
ak-d.tripcdn.com/images/0AS2j120009gxknwsA052.png
200 OK 1.9 kB URL GET HTTP/3 ak-d.tripcdn.com/images/0AS2j120009gxknwsA052.png
IP
ASN #20940 Akamai International B.V.
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerDigiCert Inc
Subject*.tripcdn.com
Fingerprint39:6D:BD:C3:37:CE:BB:D7:E0:9C:B9:5D:15:48:7D:02:6D:95:1D:6C
ValidityThu, 06 Apr 2023 00:00:00 GMT - Fri, 05 Apr 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 3f44a782bc54f63aeff81e87d04dedce
b97cfff4ea77f02adbff31145852c5fe1a8e0e5d
8ffff04f2244e76ee7dabab269441f0f52721cf809fb308bd933c5460c668b9d
GET /images/0AS2j120009gxknwsA052.png HTTP/1.1
Host: ak-d.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/webp
content-length: 1936
access-control-allow-origin: *
etag: 198.git8693dbd.el7
last-modified: Mon, 07 Aug 2023 06:48:45 GMT
cache-control: max-age=6060451
expires: Mon, 12 Feb 2024 16:54:54 GMT
date: Mon, 04 Dec 2023 13:27:23 GMT
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
timing-allow-origin: *
wcs.naver.com/b
204 No Content 0 B IP
ASN #23576 NAVER Cloud Corp.
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerDigiCert Inc
Subjectwcs.naver.com
Fingerprint48:27:1C:3C:1A:CF:ED:1B:FD:63:04:5B:2B:9A:70:42:99:1F:A2:4F
ValidityTue, 01 Aug 2023 00:00:00 GMT - Wed, 14 Aug 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /b HTTP/1.1
Host: wcs.naver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 463
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Mon, 04 Dec 2023 13:27:23 GMT
set-cookie: NWB=59700b19627a858c140d52b374d7d55e.1701696443147; Expires=Sat, 02-Dec-28 13:27:23 GMT; Domain=wcs.naver.com; Path=/; Secure; SameSite=None
NWB_LEGACY=59700b19627a858c140d52b374d7d55e.1701696443147; Expires=Sat, 02-Dec-28 13:27:23 GMT; Domain=wcs.naver.com; Path=/
p3p: CP = "ALL CURa ADMa DEVa TAIa OUR BUS IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC OTC"
server: wcs
accept-ch: Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform-Version
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: Tue, 01 Jan 1980 09:00:00 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://us.trip.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
us.trip.com/restapi/soa2/19816/bjjson/notifyInfo?x-traceID=1729066703-1701696445537-1142492813
200 OK 1.4 kB URL POST HTTP/3 us.trip.com/restapi/soa2/19816/bjjson/notifyInfo?x-traceID=1729066703-1701696445537-1142492813
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (4473), with no line terminators
Hash f32726d6b44d989daa53ba32f9d666a8
2b39d7addbf179f5f9a131ceef100eb241eee74d
894436c4eaf308f5fe7a8b75456ea3bcd087fdebbda4ee6f0c434069159abf87
POST /restapi/soa2/19816/bjjson/notifyInfo?x-traceID=1729066703-1701696445537-1142492813 HTTP/1.1
Host: us.trip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
locale: en-US
currency: USD
x-traceID: 1729066703-1701696445537-1142492813
trip-trace-id: 1729066703-1701696445537-1142492813
Content-Type: application/json
Content-Length: 60
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/?locale=en-us
Cookie: UBT_VID=1701696438140.f76e6TctnaRh; kafka_result={"isDirectVisit":"1","hasUrlLocale":"1","hasCookieLocale":"0","isUrlCookieSame":"0","isJump":"0","jumpType":"targetLocale","platform":"online","vid":"1701696438140.f76e6TctnaRh"}; ibu_online_home_language_match={"isRedirect":false,"isShowSuggestion":true,"lastVisited":true,"region":"no","redirectSymbol":false,"site_url":["us.trip.com"],"suggestion":[]}; ibulanguage=EN; ibulocale=en_us; cookiePricesDisplayed=USD; _abtest_userid=77c3b86c-476f-4ca5-8c73-e743bcffbe04
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json;charset=UTF-8
alt-svc: h3=":443"; ma=86400
timing-allow-origin: *
server: nginx/1.20.1
date: Mon, 04 Dec 2023 13:27:20 GMT
clogging_trace_id: 7775259641025257142
rootmessageid: 100025527-0a8191d1-472693-2552345
servermessageid: 100025527-0a3d52df-472693-962485
content-encoding: gzip
vary: accept-encoding
x-gate-root-id: 100025527-0a8191d1-472693-2552345
x-gate-region: SHARB
x-service-call: 0.078
access-control-expose-headers: RootMessageId, x-service-call, x-gate-region
x-gate: ctrip-gate
x-originating-url: https://us.trip.com/restapi/soa2/19816/bjjson/notifyInfo?x-traceID=1729066703-1701696445537-1142492813
access-control-allow-origin: https://us.trip.com
access-control-allow-credentials: true
x-trip-region: sg, de
content-security-policy-report-only: default-src * data: blob:; connect-src https://*.tripcdn.com *.c-ctrip.com https://*.trip.com https://*.ctrip.com https://*.doubleclick.net https://*.google.com https://*.tiktok.com https://*.bing.com https://*.mapbox.com https://*.skyscanner.net https://*.tripcdn.cn https://*.google-analytics.com https://*.braze.com https://*.yandex.ru https://*.googleapis.com https://*.facebook.com https://*.googletagmanager.com https://*.gstatic.com https://wcs.naver.com https://wcs.naver.net https://connect.facebook.net https://cdn.2trk.info https://b98.yahoo.co.jp https://widget.trustpilot.com https://s.yimg.jp https://altopd.com wss://im.trip.com;script-src 'unsafe-eval' 'unsafe-inline' https://*.naver.net https://*.trip.com https://*.tripcdn.com https://*.tripcdn.cn https://*.c-ctrip.com https://*.google.com https://*.doubleclick.net https://*.googletagmanager.com https://*.google-analytics.com https://unpkg.com https://altopd.com https://*.tiktok.com https://*.facebook.net https://*.bing.com https://*.googleapis.com https://*.yahoo.co.jp https://*.2trk.info https://*.yimg.jp https://*.trustpilot.com https://appx-t2 https://*.skyscanner.net https://*.alipayobjects.com https://*.rakuten.com https://*.qunarzz.com https://*.googleadservices.com https://*.yandex.ru https://*.qq.com https://*.ctrip.com https://*.innity.net https://*.ucweb.com https://*.baidu.com https://*.googlesyndication.com https://*.jsdelivr.net https://*.tripcdn.com https://hublosk.com https://*.yimg.com https://boxclone.com https://*.hotjar.com https://*.google.ae https://*.valuecommerce.com https://*.google.de https://jullyambery.net https://*.innity.com https://appx https://*.criteo.com https://*.apaylater.com https://*.maynhtml.com https://*.google.com.my https://*.google.com.hk https://*.mapbox.com blob:; style-src 'unsafe-inline' https://*.tripcdn.com https://*.trip.com https://*.tripcdn.cn https://*.google.com https://*.googleapis.com https://*.fontawesome.com https://*.honey.io https://*.gstatic.com https://*.c-ctrip.com https://*.cloudflare.com data: ; child-src 'self' https://*.ctripcorp.com https://*.invol.co https://*.googlesyndication.com https://*.google.com https://*.trustpilot.com https://*.facebook.com https://*.lcmark.net https://*.ubpixel.com https://*.altopd.com https://*.youtube.com https://*.2trk.info https://*.2trck.pro https://*.doubleclick.net https://*.kakao.com https://*.dotomi.com https://*.tkqlhce.com https://*.criteo.com https://*.infobip.com https://*.ucweb.com https://*.moontrkr.com https://*.matterport.com https://*.trckqq.com https://*.trip.com https://altopd.com https://invol.co https://stvkr.com https://redirtrack.tech https://noop.style https://*.admitad.com https://*.kittyswell.one https://*.keloogux.world https://childrenshoppingguide.com https://*.youtube-nocookie.com https://*.factoryhotsales.shop https://*.skillmatrix.live https://shoppingderby.com blob:; object-src https://*.trip.com; report-uri https://www.trip.com/security/csp-report; report-to /security/csp-report;
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: gPLKj9in7VaDlXk1bIloRWLJYJrl0yHd4R_RwbXUV4hTdvG41qyLPg==
pages.trip.com/images/app-download/qrcode/logo.png
200 OK 23 kB URL GET HTTP/3 pages.trip.com/images/app-download/qrcode/logo.png
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type PNG image data, 1920 x 1920, 8-bit colormap, non-interlaced\012- data
Hash e0269cdef183f53205e6c95cc3d0b365
281ae8737953fc0550bd49fc05b53161cad37192
fdb922eb85e429c4fef54a426d87675530952ae6fe4fb7ca713df7949710d708
GET /images/app-download/qrcode/logo.png HTTP/1.1
Host: pages.trip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Cookie: UBT_VID=1701696438140.f76e6TctnaRh; kafka_result={"isDirectVisit":"1","hasUrlLocale":"1","hasCookieLocale":"0","isUrlCookieSame":"0","isJump":"0","jumpType":"targetLocale","platform":"online","vid":"1701696438140.f76e6TctnaRh"}; ibu_online_home_language_match={"isRedirect":false,"isShowSuggestion":true,"lastVisited":true,"region":"no","redirectSymbol":false,"site_url":["us.trip.com"],"suggestion":[]}; ibulanguage=EN; ibulocale=en_us; cookiePricesDisplayed=USD; _abtest_userid=77c3b86c-476f-4ca5-8c73-e743bcffbe04; _gcl_au=1.1.2020697670.1701696447; _bfa=1.1701696438140.f76e6TctnaRh.1.1701696445418.1701696448164.1.1.10320668088; _ga_X437DZ73MR=GS1.1.1701696448.1.0.1701696448.0.0.0; _ga=GA1.1.198944287.1701696449
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/png
content-length: 22905
age: 104997
date: Sun, 03 Dec 2023 08:17:25 GMT
x-ares-server: r100013666-91017039-s2n5r@SHAXY
x-ares-source: aliyun
x-ares-request-id: 656C3995B74048333826F453
etag: W/"e0269cdef183f53205e6c95cc3d0b365"
last-modified: Thu, 23 Dec 2021 14:27:59 GMT
cache-control: max-age=172800
expires: Tue, 05 Dec 2023 08:17:25 GMT
timing-allow-origin: *
x-varnish: 541728928
via: 1.1 varnish (Varnish/6.5), 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: TM2k3A7mmdoZ9gNuTfVDCFLNkNfXZMcaXMkzM-EOKG07LmKJXifntQ==
file.tripcdn.com/files/7/ibu_online_assets/cache/en-US.json?x-traceID=1486191035-1701696448139-1630704880
200 OK 4.6 kB URL OPTIONS HTTP/2 file.tripcdn.com/files/7/ibu_online_assets/cache/en-US.json?x-traceID=1486191035-1701696448139-1630704880
IP
ASN #20940 Akamai International B.V.
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerDigiCert Inc
SubjectTrip.com
Fingerprint9D:1E:6A:62:2E:9E:A9:3E:14:AC:D8:20:11:70:06:09:BF:37:4F:C2
ValidityMon, 31 Jul 2023 00:00:00 GMT - Wed, 31 Jul 2024 23:59:59 GMT
File type JSON data\012- , ASCII text
Hash 661364fed8862ecba040c8a086bef92b
57f0f51dcf5a5996e25120122b227bb65b83800f
2feed01744b2eac973517467754db1baca1156ad71292e71f8eed2b2f1274d19
GET /files/7/ibu_online_assets/cache/en-US.json?x-traceID=1486191035-1701696448139-1630704880 HTTP/1.1
Host: file.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
locale: en-US
currency: USD
x-traceID: 1486191035-1701696448139-1630704880
trip-trace-id: 1486191035-1701696448139-1630704880
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-expose-headers: X-Nep-Download-Id, X-Originating-Url, X-Ibu-Trip-Region, X-Gate-Region
last-modified: Fri, 18 Aug 2023 07:22:40 GMT
content-encoding: gzip
content-length: 4627
x-edgeconnect-midmile-rtt: 6
x-edgeconnect-origin-mex-latency: 55
cache-control: max-age=7775996
expires: Sun, 03 Mar 2024 13:27:19 GMT
date: Mon, 04 Dec 2023 13:27:23 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
cdn.2trk.info/aud/clientjs/1305.js?
3.7 kB URL GET cdn.2trk.info/aud/clientjs/1305.js?
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerLet's Encrypt
Subject2trk.info
Fingerprint4C:FA:AC:06:44:E5:A6:B0:99:3C:03:DE:72:6A:53:DB:06:22:FD:25
ValidityThu, 23 Nov 2023 11:44:03 GMT - Wed, 21 Feb 2024 11:44:02 GMT
File type gzip compressed data, from Unix\012- data
Hash 4a98707ea933cc902ead3770305fe66c
d92dfb5a227f7973bfa909684627b99b22a59c37
418ba35e5821b711de41a1f674f5d09d20d5f8e4eabe147a5b2a702238eb5d53
GET /aud/clientjs/1305.js? HTTP/1.1
Host: cdn.2trk.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 13:27:23 GMT
content-type: text/plain
x-guploader-uploadid: ABPtcPo-mu78Z1tcRMA2rqlm5dAIEGyXEMwMVys1iJprR3mqijavl9giHXJB0_hnXh5jkR_-TGbe2YM_hylXtFPRx2mAxQ
x-goog-generation: 1701267419776427
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 6774
x-goog-hash: crc32c=1WIJBw==, md5=I0Hfl/m0K78AogCxu4E45A==
x-goog-storage-class: STANDARD
expires: Mon, 04 Dec 2023 03:14:26 GMT
cache-control: public, max-age=172800
last-modified: Wed, 29 Nov 2023 14:16:59 GMT
etag: W/"2341df97f9b42bbf00a200b1bb8138e4"
age: 37677
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aAMEHO%2BdL6olijBFxJfdq1b7y2UiiSOVIvDJeqGkGX8isD5Fvg1kZAUugRJtC%2BH3rEitT4JGZnwlgo%2BtU%2BuPF8RUMfH9egt3N0qBvGY3tkTeST1kzYUaNPIlRXHuenrV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830462f288790b61-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
file.tripcdn.com/files/7/ibu_online_assets/cache/en-US.json?x-traceID=1655880470-1701696448054-1746716776
200 OK 4.6 kB URL OPTIONS HTTP/2 file.tripcdn.com/files/7/ibu_online_assets/cache/en-US.json?x-traceID=1655880470-1701696448054-1746716776
IP
ASN #20940 Akamai International B.V.
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerDigiCert Inc
SubjectTrip.com
Fingerprint9D:1E:6A:62:2E:9E:A9:3E:14:AC:D8:20:11:70:06:09:BF:37:4F:C2
ValidityMon, 31 Jul 2023 00:00:00 GMT - Wed, 31 Jul 2024 23:59:59 GMT
File type JSON data\012- , ASCII text
Hash 661364fed8862ecba040c8a086bef92b
57f0f51dcf5a5996e25120122b227bb65b83800f
2feed01744b2eac973517467754db1baca1156ad71292e71f8eed2b2f1274d19
GET /files/7/ibu_online_assets/cache/en-US.json?x-traceID=1655880470-1701696448054-1746716776 HTTP/1.1
Host: file.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
locale: en-US
currency: USD
x-traceID: 1655880470-1701696448054-1746716776
trip-trace-id: 1655880470-1701696448054-1746716776
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-expose-headers: X-Nep-Download-Id, X-Originating-Url, X-Ibu-Trip-Region, X-Gate-Region
last-modified: Fri, 18 Aug 2023 07:22:40 GMT
content-encoding: gzip
content-length: 4551
x-edgeconnect-midmile-rtt: 18
x-edgeconnect-origin-mex-latency: 27
cache-control: max-age=7775974
expires: Sun, 03 Mar 2024 13:26:57 GMT
date: Mon, 04 Dec 2023 13:27:23 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
ak-d.tripcdn.com/images/0222j12000br8e5mhBEEA_R_400_400_R5_D.jpg_.webp
200 OK 33 kB URL GET HTTP/3 ak-d.tripcdn.com/images/0222j12000br8e5mhBEEA_R_400_400_R5_D.jpg_.webp
IP
ASN #20940 Akamai International B.V.
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerDigiCert Inc
Subject*.tripcdn.com
Fingerprint39:6D:BD:C3:37:CE:BB:D7:E0:9C:B9:5D:15:48:7D:02:6D:95:1D:6C
ValidityThu, 06 Apr 2023 00:00:00 GMT - Fri, 05 Apr 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 46284cc0c37eaea75878cf41e0942b5b
1cba0b292f87479de387a9bec5c300ecca28bbc2
d12089d6675ec911b21b9f737ff2ee78162dc2c700e0efe2fbbda99f09461342
GET /images/0222j12000br8e5mhBEEA_R_400_400_R5_D.jpg_.webp HTTP/1.1
Host: ak-d.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/webp
content-length: 33288
access-control-allow-origin: *
etag: 203.git1c2d8f8.el7
last-modified: Wed, 30 Aug 2023 00:30:03 GMT
x-edgeconnect-midmile-rtt: 15
x-edgeconnect-origin-mex-latency: 716
cache-control: max-age=7736066
expires: Sun, 03 Mar 2024 02:21:49 GMT
date: Mon, 04 Dec 2023 13:27:23 GMT
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
timing-allow-origin: *
ak-d.tripcdn.com/images/220j050000000iape685E_R_400_400_R5_D.jpg_.webp
200 OK 38 kB URL GET HTTP/3 ak-d.tripcdn.com/images/220j050000000iape685E_R_400_400_R5_D.jpg_.webp
IP
ASN #20940 Akamai International B.V.
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerDigiCert Inc
Subject*.tripcdn.com
Fingerprint39:6D:BD:C3:37:CE:BB:D7:E0:9C:B9:5D:15:48:7D:02:6D:95:1D:6C
ValidityThu, 06 Apr 2023 00:00:00 GMT - Fri, 05 Apr 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 364af039482e7075a45283ed040c9e4b
73e7eb16560c04a0446347efe5b3743a84cddccc
1ecd8931ac8ae92901c58a71c5a3de608f94d975e589929a2a55ae6efe9d709c
GET /images/220j050000000iape685E_R_400_400_R5_D.jpg_.webp HTTP/1.1
Host: ak-d.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/webp
content-length: 38122
access-control-allow-origin: *
etag: 198.git8693dbd.el7
last-modified: Tue, 08 Aug 2023 17:27:30 GMT
cache-control: max-age=7776000
expires: Sun, 03 Mar 2024 13:27:23 GMT
date: Mon, 04 Dec 2023 13:27:23 GMT
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
timing-allow-origin: *
ak-d.tripcdn.com/images/0221w12000ch9kavr37CF_R_400_400_R5_D.jpg_.webp
200 OK 30 kB URL GET HTTP/3 ak-d.tripcdn.com/images/0221w12000ch9kavr37CF_R_400_400_R5_D.jpg_.webp
IP
ASN #20940 Akamai International B.V.
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerDigiCert Inc
Subject*.tripcdn.com
Fingerprint39:6D:BD:C3:37:CE:BB:D7:E0:9C:B9:5D:15:48:7D:02:6D:95:1D:6C
ValidityThu, 06 Apr 2023 00:00:00 GMT - Fri, 05 Apr 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 400x400, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 07bff8c05e74a5edced988abbb4ad5f0
aa83d5953309675eefbf5a435b48489d053f7f13
bb053c47168b16e984e01709b9fff31dd481e6346298dfc2a15672cc24ee7792
GET /images/0221w12000ch9kavr37CF_R_400_400_R5_D.jpg_.webp HTTP/1.1
Host: ak-d.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/webp
content-length: 30352
access-control-allow-origin: *
etag: sPREpsiFkE,022
last-modified: Thu, 02 Nov 2023 05:51:59 GMT
x-edgeconnect-midmile-rtt: 0, 9
x-edgeconnect-origin-mex-latency: 33, 33
cache-control: max-age=7736110
expires: Sun, 03 Mar 2024 02:22:33 GMT
date: Mon, 04 Dec 2023 13:27:23 GMT
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
timing-allow-origin: *
aw-s.tripcdn.com/modules/ibu/online-home/b0c8dc949e5e03c58041e395601d75a7.b0c8dc949e5e03c58041e395601d75a7.png
200 OK 154 kB URL GET HTTP/3 aw-s.tripcdn.com/modules/ibu/online-home/b0c8dc949e5e03c58041e395601d75a7.b0c8dc949e5e03c58041e395601d75a7.png
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type PNG image data, 532 x 728, 8-bit colormap, non-interlaced\012- data
Size 154 kB (154411 bytes)
Hash b0c8dc949e5e03c58041e395601d75a7
a5a9c5eb838ddba60afdad15f77596a2a3c849ac
09d607f584e12fbb17be9629c7f1d292505c31d6022eb197787d8543eefd78e0
GET /modules/ibu/online-home/b0c8dc949e5e03c58041e395601d75a7.b0c8dc949e5e03c58041e395601d75a7.png HTTP/1.1
Host: aw-s.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aw-s.tripcdn.com/modules/ibu/online-home/onlineRecommendCars.1bf4103d79c8b7f7f65768862789bb38.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/png
content-length: 154411
age: 754707
server: nginx/1.20.1
date: Sat, 25 Nov 2023 19:48:56 GMT
x-ares-server: r100013666-21038164-6rg65@FRA-AWS
timing-allow-origin: *
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aws
x-ares-request-id: K9TEA705PHAYM8EH
etag: W/"b0c8dc949e5e03c58041e395601d75a7"
last-modified: Tue, 19 Sep 2023 09:15:52 GMT
cache-control: max-age=5184000
expires: Fri, 19 Jan 2024 03:01:08 GMT
x-varnish: 51024195 44966623
via: 1.1 varnish (Varnish/6.5), 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: OYiuvCeF4YQGWu1PJ8WvLqCqJ8yB2J_r80VB-Xuf3NkdxKhC7C3VcQ==
us.trip.com/restapi/soa2/19913/bjjson/searchAttractionList?x-traceID=1738833200-1701696448023-1769174951
200 OK 3.4 kB URL POST HTTP/3 us.trip.com/restapi/soa2/19913/bjjson/searchAttractionList?x-traceID=1738833200-1701696448023-1769174951
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (18533), with no line terminators
Hash 1f3612781286eade225b448f456bb357
3aa9f55d79f0e336f7e2d16b102d24c7fe56818a
a18452e567d4937170d91da955bf16bcec4c9051edd752845fd6c507399e6192
POST /restapi/soa2/19913/bjjson/searchAttractionList?x-traceID=1738833200-1701696448023-1769174951 HTTP/1.1
Host: us.trip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
locale: en-US
currency: USD
x-traceID: 1738833200-1701696448023-1769174951
trip-trace-id: 1738833200-1701696448023-1769174951
SOA20-Client-AppId: 100014416
Content-Type: application/json
Content-Length: 327
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/?locale=en-us
Cookie: UBT_VID=1701696438140.f76e6TctnaRh; kafka_result={"isDirectVisit":"1","hasUrlLocale":"1","hasCookieLocale":"0","isUrlCookieSame":"0","isJump":"0","jumpType":"targetLocale","platform":"online","vid":"1701696438140.f76e6TctnaRh"}; ibu_online_home_language_match={"isRedirect":false,"isShowSuggestion":true,"lastVisited":true,"region":"no","redirectSymbol":false,"site_url":["us.trip.com"],"suggestion":[]}; ibulanguage=EN; ibulocale=en_us; cookiePricesDisplayed=USD; _abtest_userid=77c3b86c-476f-4ca5-8c73-e743bcffbe04; _tp_search_latest_channel_name=hotels; _gcl_au=1.1.2020697670.1701696447; _fwb=254FjNz9nuUbqsIQWYSUhsh.1701696447115; NA_SAC=dT1odHRwcyUzQSUyRiUyRnVzLnRyaXAuY29tJTJGJTNGbG9jYWxlJTNEZW4tdXN8cj0=; wcs_bt=s_33fb334966e9:1701696447
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json;charset=UTF-8
alt-svc: h3=":443"; ma=86400
timing-allow-origin: *
server: nginx/1.20.1
date: Mon, 04 Dec 2023 13:27:22 GMT
clogging_trace_id: 7980867881015088802
rootmessageid: 100025527-0a817cbd-472693-2555640
servermessageid: 100025527-0a3d52ce-472693-963940
content-encoding: gzip
vary: accept-encoding
x-gate-root-id: 100025527-0a817cbd-472693-2555640
x-gate-region: SHARB
x-service-call: 0.188
access-control-expose-headers: RootMessageId, x-service-call, x-gate-region
x-gate: ctrip-gate
x-originating-url: https://us.trip.com/restapi/soa2/19913/bjjson/searchAttractionList?x-traceID=1738833200-1701696448023-1769174951
access-control-allow-origin: https://us.trip.com
access-control-allow-credentials: true
x-trip-region: sg, de
content-security-policy-report-only: default-src * data: blob:; connect-src https://*.tripcdn.com *.c-ctrip.com https://*.trip.com https://*.ctrip.com https://*.doubleclick.net https://*.google.com https://*.tiktok.com https://*.bing.com https://*.mapbox.com https://*.skyscanner.net https://*.tripcdn.cn https://*.google-analytics.com https://*.braze.com https://*.yandex.ru https://*.googleapis.com https://*.facebook.com https://*.googletagmanager.com https://*.gstatic.com https://wcs.naver.com https://wcs.naver.net https://connect.facebook.net https://cdn.2trk.info https://b98.yahoo.co.jp https://widget.trustpilot.com https://s.yimg.jp https://altopd.com wss://im.trip.com;script-src 'unsafe-eval' 'unsafe-inline' https://*.naver.net https://*.trip.com https://*.tripcdn.com https://*.tripcdn.cn https://*.c-ctrip.com https://*.google.com https://*.doubleclick.net https://*.googletagmanager.com https://*.google-analytics.com https://unpkg.com https://altopd.com https://*.tiktok.com https://*.facebook.net https://*.bing.com https://*.googleapis.com https://*.yahoo.co.jp https://*.2trk.info https://*.yimg.jp https://*.trustpilot.com https://appx-t2 https://*.skyscanner.net https://*.alipayobjects.com https://*.rakuten.com https://*.qunarzz.com https://*.googleadservices.com https://*.yandex.ru https://*.qq.com https://*.ctrip.com https://*.innity.net https://*.ucweb.com https://*.baidu.com https://*.googlesyndication.com https://*.jsdelivr.net https://*.tripcdn.com https://hublosk.com https://*.yimg.com https://boxclone.com https://*.hotjar.com https://*.google.ae https://*.valuecommerce.com https://*.google.de https://jullyambery.net https://*.innity.com https://appx https://*.criteo.com https://*.apaylater.com https://*.maynhtml.com https://*.google.com.my https://*.google.com.hk https://*.mapbox.com blob:; style-src 'unsafe-inline' https://*.tripcdn.com https://*.trip.com https://*.tripcdn.cn https://*.google.com https://*.googleapis.com https://*.fontawesome.com https://*.honey.io https://*.gstatic.com https://*.c-ctrip.com https://*.cloudflare.com data: ; child-src 'self' https://*.ctripcorp.com https://*.invol.co https://*.googlesyndication.com https://*.google.com https://*.trustpilot.com https://*.facebook.com https://*.lcmark.net https://*.ubpixel.com https://*.altopd.com https://*.youtube.com https://*.2trk.info https://*.2trck.pro https://*.doubleclick.net https://*.kakao.com https://*.dotomi.com https://*.tkqlhce.com https://*.criteo.com https://*.infobip.com https://*.ucweb.com https://*.moontrkr.com https://*.matterport.com https://*.trckqq.com https://*.trip.com https://altopd.com https://invol.co https://stvkr.com https://redirtrack.tech https://noop.style https://*.admitad.com https://*.kittyswell.one https://*.keloogux.world https://childrenshoppingguide.com https://*.youtube-nocookie.com https://*.factoryhotsales.shop https://*.skillmatrix.live https://shoppingderby.com blob:; object-src https://*.trip.com; report-uri https://www.trip.com/security/csp-report; report-to /security/csp-report;
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: azZDyWuk8qQ8V_5tIVjluF4zK6kmRD3GBMrbwhy8CyVSo98zqTws5w==
ubt-sin.tripcdn.com/bee/collect
200 OK 0 B URL POST HTTP/3 ubt-sin.tripcdn.com/bee/collect
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /bee/collect HTTP/1.1
Host: ubt-sin.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://us.trip.com/
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx/1.20.1
date: Mon, 04 Dec 2023 13:27:23 GMT
access-control-max-age: 300
p3p: CP=CUR ADM OUR NOR STA NID
access-control-allow-origin: https://us.trip.com
access-control-allow-credentials: true
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-headers: Content-Type,content-type
x-cache: Miss from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: wIrm3ISDIEtrT9mDYoLaYYu-hN0LSVSoHyYCF3oIMUhslkoy_FMsoQ==
timing-allow-origin: *
X-Firefox-Spdy: h2
ubt-sin.tripcdn.com/bee/collect
200 OK 0 B URL POST HTTP/3 ubt-sin.tripcdn.com/bee/collect
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /bee/collect HTTP/1.1
Host: ubt-sin.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://us.trip.com/
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx/1.20.1
date: Mon, 04 Dec 2023 13:27:24 GMT
access-control-max-age: 300
p3p: CP=CUR ADM OUR NOR STA NID
access-control-allow-origin: https://us.trip.com
access-control-allow-credentials: true
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-headers: Content-Type,content-type
x-cache: Miss from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: PL5CELEjyJdqLKQUhUj__4lKWRuAkbMW3y6VwNxN18QNnRVMpILyww==
timing-allow-origin: *
X-Firefox-Spdy: h2
ubt-sin.tripcdn.com/bee/collect
200 OK 0 B URL POST HTTP/3 ubt-sin.tripcdn.com/bee/collect
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /bee/collect HTTP/1.1
Host: ubt-sin.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://us.trip.com/
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx/1.20.1
date: Mon, 04 Dec 2023 13:27:24 GMT
access-control-max-age: 300
p3p: CP=CUR ADM OUR NOR STA NID
access-control-allow-origin: https://us.trip.com
access-control-allow-credentials: true
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-headers: Content-Type,content-type
x-cache: Miss from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: XalalD89ZfHnmPuMLepMOxx-PLhoMQvZxY9HZ-nqXeMyaSpJlYnxOw==
timing-allow-origin: *
X-Firefox-Spdy: h2
chloro.trip.com/v2/d
200 OK 107 B IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type ASCII text, with no line terminators
Hash 7e7a80581bd18d252aafb0a74c1ccc5d
64bd2642d8d17e9390d1a9fab5d6f8cb8d0f5395
cb5307b5f84a3b2d2fa4f63bca186cb86032059c83528f985d779893a6dff468
POST /v2/d HTTP/1.1
Host: chloro.trip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Content-Length: 866
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Cookie: UBT_VID=1701696438140.f76e6TctnaRh; kafka_result={"isDirectVisit":"1","hasUrlLocale":"1","hasCookieLocale":"0","isUrlCookieSame":"0","isJump":"0","jumpType":"targetLocale","platform":"online","vid":"1701696438140.f76e6TctnaRh"}; ibu_online_home_language_match={"isRedirect":false,"isShowSuggestion":true,"lastVisited":true,"region":"no","redirectSymbol":false,"site_url":["us.trip.com"],"suggestion":[]}; ibulanguage=EN; ibulocale=en_us; cookiePricesDisplayed=USD; _abtest_userid=77c3b86c-476f-4ca5-8c73-e743bcffbe04; _gcl_au=1.1.2020697670.1701696447; _bfa=1.1701696438140.f76e6TctnaRh.1.1701696445418.1701696448164.1.1.10320668088; _ga_X437DZ73MR=GS1.1.1701696448.1.0.1701696448.0.0.0; _ga=GA1.1.198944287.1701696449
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.20.1
date: Mon, 04 Dec 2023 13:27:24 GMT
content-length: 107
access-control-allow-origin: https://us.trip.com
access-control-allow-credentials: true
access-control-allow-headers: x-ctrip-canary-req,x-ctx-CanaryReq,x-ctx-CanarySrc,x-ctx-CanaryIdc,x-cat-trace-mode
set-cookie: _RGUID=fb6399f8-4e62-40aa-b55e-8394d397142f; Expires=Tue, 03-Dec-2024 13:27:24 GMT; Path=/
X-Firefox-Spdy: h2
ubt-sin.tripcdn.com/bee/collect
200 OK 66 B URL POST HTTP/3 ubt-sin.tripcdn.com/bee/collect
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 1fae82b13d0e155b2b88641f59a9036d
65f523b3f3b1f0f63d57e2af78b7354e0f371d41
2a1c7ae3b84c0a49cfb9a116dcbd55783faba812aa0369678437a8c0957eeabf
POST /bee/collect HTTP/1.1
Host: ubt-sin.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 717
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/3 200 OK
content-type: application/json
content-length: 66
timing-allow-origin: *
server: nginx/1.20.1
date: Mon, 04 Dec 2023 13:27:24 GMT
cache-control: private, no-store, no-cache, no-cache=Set-Cookie, proxy-revalidate
expires: Thu, 01 Jan 1970 00:00:00 GMT
pragma: no-cache
x-content-type-options: nosniff
x-forwarded-for: 91.90.42.154
access-control-max-age: 300
p3p: CP=CUR ADM OUR NOR STA NID
access-control-allow-origin: https://us.trip.com
access-control-allow-credentials: true
set-cookie: uid=ElFz3O4RqJJxSh6e/FupbA==; Max-Age=63072000; Expires=Wed, 03 Dec 2025 13:27:24 GMT; Path=/
suid=ElFz3O4RqJJxSh6e/FupbA==; Max-Age=63072000; Expires=Wed, 03 Dec 2025 13:27:24 GMT; Path=/; Secure; SameSite=None
x-cache: Miss from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: msX-s9CeR1nKgEslVDQjTTzqYKl-gAWe2S9QTU6mWo384-QPuVZkVQ==
ubt-sin.tripcdn.com/bee/collect
200 OK 66 B URL POST HTTP/3 ubt-sin.tripcdn.com/bee/collect
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash b0ce2ed45852496345451911020d17f5
17eaf847e7f4043c1c53b1df5923be1682a05923
d4b2fd1364d21e82cdec784d05b1d3e8097d90786b18bf0d630379929825f099
POST /bee/collect HTTP/1.1
Host: ubt-sin.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 4757
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/3 200 OK
content-type: application/json
content-length: 66
timing-allow-origin: *
server: nginx/1.20.1
date: Mon, 04 Dec 2023 13:27:24 GMT
cache-control: private, no-store, no-cache, no-cache=Set-Cookie, proxy-revalidate
expires: Thu, 01 Jan 1970 00:00:00 GMT
pragma: no-cache
x-content-type-options: nosniff
x-forwarded-for: 91.90.42.154
access-control-max-age: 300
p3p: CP=CUR ADM OUR NOR STA NID
access-control-allow-origin: https://us.trip.com
access-control-allow-credentials: true
set-cookie: uid=Op9z3O4RqJJVWquOlCpb9g==; Max-Age=63072000; Expires=Wed, 03 Dec 2025 13:27:24 GMT; Path=/
suid=Op9z3O4RqJJVWquOlCpb9g==; Max-Age=63072000; Expires=Wed, 03 Dec 2025 13:27:24 GMT; Path=/; Secure; SameSite=None
x-cache: Miss from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 4Hcs_iAhwLIntX4iXHsavVPtT20KnxWEV96gt0_NdQ2p_BSrajdHyA==
www.trip.com/m/i18n/ReportRecentUsedKey.html
200 OK 0 B URL POST HTTP/3 www.trip.com/m/i18n/ReportRecentUsedKey.html
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /m/i18n/ReportRecentUsedKey.html HTTP/1.1
Host: www.trip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://us.trip.com/
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
timing-allow-origin: *
server: nginx/1.20.1
date: Mon, 04 Dec 2023 13:27:24 GMT
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,PUT,POST,OPTIONS,DELETE,PATCH
access-control-allow-headers: host,connection,content-length,x-real-ip,x-ctrip-isssl,user-agent,via,x-forwarded-for,x-amz-cf-id,accept-language,accept,referer,priority,accept-encoding,access-control-request-method,access-control-request-headers,origin,dnt,sec-fetch-dest,sec-fetch-mode,sec-fetch-site,pragma,cache-control,true-client-ip,x-via,x-ctx-externalclientip,x-ctx-request-from,x-ctx-trace-mark,content-type,access-control-allow-headers,cookieorigin,authorization,x-requested-with,x-auth-token,x-ctrip-canary-req,x-ctx-canaryreq,x-ctx-canarysrc,x-ctx-canaryidc,x-cat-trace-mode
access-control-max-age: 108000000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-download-options: noopen
x-readtime: 0
x-trip-region: sg, de
content-security-policy-report-only: default-src * data: blob:; connect-src https://*.tripcdn.com *.c-ctrip.com https://*.trip.com https://*.ctrip.com https://*.doubleclick.net https://*.google.com https://*.tiktok.com https://*.bing.com https://*.mapbox.com https://*.skyscanner.net https://*.tripcdn.cn https://*.google-analytics.com https://*.braze.com https://*.yandex.ru https://*.googleapis.com https://*.facebook.com https://*.googletagmanager.com https://*.gstatic.com https://wcs.naver.com https://wcs.naver.net https://connect.facebook.net https://cdn.2trk.info https://b98.yahoo.co.jp https://widget.trustpilot.com https://s.yimg.jp https://altopd.com wss://im.trip.com;script-src 'unsafe-eval' 'unsafe-inline' https://*.naver.net https://*.trip.com https://*.tripcdn.com https://*.tripcdn.cn https://*.c-ctrip.com https://*.google.com https://*.doubleclick.net https://*.googletagmanager.com https://*.google-analytics.com https://unpkg.com https://altopd.com https://*.tiktok.com https://*.facebook.net https://*.bing.com https://*.googleapis.com https://*.yahoo.co.jp https://*.2trk.info https://*.yimg.jp https://*.trustpilot.com https://appx-t2 https://*.skyscanner.net https://*.alipayobjects.com https://*.rakuten.com https://*.qunarzz.com https://*.googleadservices.com https://*.yandex.ru https://*.qq.com https://*.ctrip.com https://*.innity.net https://*.ucweb.com https://*.baidu.com https://*.googlesyndication.com https://*.jsdelivr.net https://*.tripcdn.com https://hublosk.com https://*.yimg.com https://boxclone.com https://*.hotjar.com https://*.google.ae https://*.valuecommerce.com https://*.google.de https://jullyambery.net https://*.innity.com https://appx https://*.criteo.com https://*.apaylater.com https://*.maynhtml.com https://*.google.com.my https://*.google.com.hk https://*.mapbox.com blob:; style-src 'unsafe-inline' https://*.tripcdn.com https://*.trip.com https://*.tripcdn.cn https://*.google.com https://*.googleapis.com https://*.fontawesome.com https://*.honey.io https://*.gstatic.com https://*.c-ctrip.com https://*.cloudflare.com data: ; child-src 'self' https://*.ctripcorp.com https://*.invol.co https://*.googlesyndication.com https://*.google.com https://*.trustpilot.com https://*.facebook.com https://*.lcmark.net https://*.ubpixel.com https://*.altopd.com https://*.youtube.com https://*.2trk.info https://*.2trck.pro https://*.doubleclick.net https://*.kakao.com https://*.dotomi.com https://*.tkqlhce.com https://*.criteo.com https://*.infobip.com https://*.ucweb.com https://*.moontrkr.com https://*.matterport.com https://*.trckqq.com https://*.trip.com https://altopd.com https://invol.co https://stvkr.com https://redirtrack.tech https://noop.style https://*.admitad.com https://*.kittyswell.one https://*.keloogux.world https://childrenshoppingguide.com https://*.youtube-nocookie.com https://*.factoryhotsales.shop https://*.skillmatrix.live https://shoppingderby.com blob:; object-src https://*.trip.com; report-uri https://www.trip.com/security/csp-report; report-to /security/csp-report;
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: LP4kM3zbDlfEqZD5f8Ip4UXgo_OAC82zVOQCjpH9rdKICDvuLA3IBQ==
www.trip.com/m/i18n/ReportUndefinedKeys.html
204 No Content 0 B URL OPTIONS HTTP/3 www.trip.com/m/i18n/ReportUndefinedKeys.html
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /m/i18n/ReportUndefinedKeys.html HTTP/1.1
Host: www.trip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://us.trip.com/
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
timing-allow-origin: *
server: nginx/1.20.1
date: Mon, 04 Dec 2023 13:27:24 GMT
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,PUT,POST,OPTIONS,DELETE,PATCH
access-control-allow-headers: host,connection,content-length,x-real-ip,x-ctrip-isssl,user-agent,via,x-forwarded-for,x-amz-cf-id,accept-language,accept,referer,priority,accept-encoding,access-control-request-method,access-control-request-headers,origin,dnt,sec-fetch-dest,sec-fetch-mode,sec-fetch-site,pragma,cache-control,true-client-ip,x-via,x-ctx-externalclientip,x-ctx-request-from,x-ctx-trace-mark,content-type,access-control-allow-headers,cookieorigin,authorization,x-requested-with,x-auth-token,x-ctrip-canary-req,x-ctx-canaryreq,x-ctx-canarysrc,x-ctx-canaryidc,x-cat-trace-mode
access-control-max-age: 108000000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-download-options: noopen
x-readtime: 0
x-trip-region: sg, de
content-security-policy-report-only: default-src * data: blob:; connect-src https://*.tripcdn.com *.c-ctrip.com https://*.trip.com https://*.ctrip.com https://*.doubleclick.net https://*.google.com https://*.tiktok.com https://*.bing.com https://*.mapbox.com https://*.skyscanner.net https://*.tripcdn.cn https://*.google-analytics.com https://*.braze.com https://*.yandex.ru https://*.googleapis.com https://*.facebook.com https://*.googletagmanager.com https://*.gstatic.com https://wcs.naver.com https://wcs.naver.net https://connect.facebook.net https://cdn.2trk.info https://b98.yahoo.co.jp https://widget.trustpilot.com https://s.yimg.jp https://altopd.com wss://im.trip.com;script-src 'unsafe-eval' 'unsafe-inline' https://*.naver.net https://*.trip.com https://*.tripcdn.com https://*.tripcdn.cn https://*.c-ctrip.com https://*.google.com https://*.doubleclick.net https://*.googletagmanager.com https://*.google-analytics.com https://unpkg.com https://altopd.com https://*.tiktok.com https://*.facebook.net https://*.bing.com https://*.googleapis.com https://*.yahoo.co.jp https://*.2trk.info https://*.yimg.jp https://*.trustpilot.com https://appx-t2 https://*.skyscanner.net https://*.alipayobjects.com https://*.rakuten.com https://*.qunarzz.com https://*.googleadservices.com https://*.yandex.ru https://*.qq.com https://*.ctrip.com https://*.innity.net https://*.ucweb.com https://*.baidu.com https://*.googlesyndication.com https://*.jsdelivr.net https://*.tripcdn.com https://hublosk.com https://*.yimg.com https://boxclone.com https://*.hotjar.com https://*.google.ae https://*.valuecommerce.com https://*.google.de https://jullyambery.net https://*.innity.com https://appx https://*.criteo.com https://*.apaylater.com https://*.maynhtml.com https://*.google.com.my https://*.google.com.hk https://*.mapbox.com blob:; style-src 'unsafe-inline' https://*.tripcdn.com https://*.trip.com https://*.tripcdn.cn https://*.google.com https://*.googleapis.com https://*.fontawesome.com https://*.honey.io https://*.gstatic.com https://*.c-ctrip.com https://*.cloudflare.com data: ; child-src 'self' https://*.ctripcorp.com https://*.invol.co https://*.googlesyndication.com https://*.google.com https://*.trustpilot.com https://*.facebook.com https://*.lcmark.net https://*.ubpixel.com https://*.altopd.com https://*.youtube.com https://*.2trk.info https://*.2trck.pro https://*.doubleclick.net https://*.kakao.com https://*.dotomi.com https://*.tkqlhce.com https://*.criteo.com https://*.infobip.com https://*.ucweb.com https://*.moontrkr.com https://*.matterport.com https://*.trckqq.com https://*.trip.com https://altopd.com https://invol.co https://stvkr.com https://redirtrack.tech https://noop.style https://*.admitad.com https://*.kittyswell.one https://*.keloogux.world https://childrenshoppingguide.com https://*.youtube-nocookie.com https://*.factoryhotsales.shop https://*.skillmatrix.live https://shoppingderby.com blob:; object-src https://*.trip.com; report-uri https://www.trip.com/security/csp-report; report-to /security/csp-report;
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: fNkToDj0GR5usHoALmJJCjbGsseOrk-35yUvcur98HY8gOfNqIQIcQ==
webresource.tripcdn.com/resaresenglish/risk/ubtrms/d.min.ad882159.js
200 OK 26 kB URL GET HTTP/3 webresource.tripcdn.com/resaresenglish/risk/ubtrms/d.min.ad882159.js
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type gzip compressed data, from Unix\012- data
Hash 24dde082915e5cbc89175faf64c8e7f1
e2f9b3fa1cf8d90637bf0cea13a2a7a9e0023578
920cac88f71e45b0210c470538a071eac108fb8f56a51f627adf00de8b668370
GET /resaresenglish/risk/ubtrms/d.min.ad882159.js HTTP/1.1
Host: webresource.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript
alt-svc: h3=":443"; ma=86400
age: 1167445
date: Tue, 21 Nov 2023 01:09:58 GMT
x-ares-server: r100013666-91017039-k7c4t@SHAXY
timing-allow-origin: *
access-control-allow-origin: *
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aliyun
x-ares-request-id: 655C0366B1DB883933FA02AA
etag: W/"ad882159294c75fae847cd97374d7a42"
last-modified: Mon, 20 Nov 2023 11:18:27 GMT
cache-control: max-age=5184000
expires: Sat, 20 Jan 2024 01:09:58 GMT
content-encoding: gzip
x-varnish: 419638170
via: 1.1 varnish (Varnish/6.5), 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: QncDYm2Y7_NsSfu74xHe8_HEmkC-18GGuss2Gea3uNvj0AzKV2MKzQ==
www.trip.com/m/i18n/ReportRecentUsedKey.html
200 OK 2 B URL POST HTTP/3 www.trip.com/m/i18n/ReportRecentUsedKey.html
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
POST /m/i18n/ReportRecentUsedKey.html HTTP/1.1
Host: www.trip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json;charset=utf-8
Content-Length: 9735
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/plain; charset=utf-8
content-length: 2
timing-allow-origin: *
server: nginx/1.20.1
date: Mon, 04 Dec 2023 13:27:25 GMT
cache-control: no-store
access-control-allow-origin: *
access-control-allow-headers: host,connection,content-length,x-real-ip,x-ctrip-isssl,user-agent,via,x-forwarded-for,x-amz-cf-id,accept-language,accept,referer,accept-encoding,content-type,origin,dnt,sec-fetch-dest,sec-fetch-mode,sec-fetch-site,pragma,cache-control,true-client-ip,x-via,x-ctx-externalclientip,x-ctx-request-from,x-ctx-trace-mark,access-control-allow-headers,cookieorigin,access-control-request-headers,access-control-request-method,authorization,x-requested-with,x-auth-token,x-ctrip-canary-req,x-ctx-canaryreq,x-ctx-canarysrc,x-ctx-canaryidc,x-cat-trace-mode
access-control-allow-methods: GET,HEAD,PUT,POST,OPTIONS,DELETE,PATCH
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-download-options: noopen
x-readtime: 2
x-trip-region: sg, de
content-security-policy-report-only: default-src * data: blob:; connect-src https://*.tripcdn.com *.c-ctrip.com https://*.trip.com https://*.ctrip.com https://*.doubleclick.net https://*.google.com https://*.tiktok.com https://*.bing.com https://*.mapbox.com https://*.skyscanner.net https://*.tripcdn.cn https://*.google-analytics.com https://*.braze.com https://*.yandex.ru https://*.googleapis.com https://*.facebook.com https://*.googletagmanager.com https://*.gstatic.com https://wcs.naver.com https://wcs.naver.net https://connect.facebook.net https://cdn.2trk.info https://b98.yahoo.co.jp https://widget.trustpilot.com https://s.yimg.jp https://altopd.com wss://im.trip.com;script-src 'unsafe-eval' 'unsafe-inline' https://*.naver.net https://*.trip.com https://*.tripcdn.com https://*.tripcdn.cn https://*.c-ctrip.com https://*.google.com https://*.doubleclick.net https://*.googletagmanager.com https://*.google-analytics.com https://unpkg.com https://altopd.com https://*.tiktok.com https://*.facebook.net https://*.bing.com https://*.googleapis.com https://*.yahoo.co.jp https://*.2trk.info https://*.yimg.jp https://*.trustpilot.com https://appx-t2 https://*.skyscanner.net https://*.alipayobjects.com https://*.rakuten.com https://*.qunarzz.com https://*.googleadservices.com https://*.yandex.ru https://*.qq.com https://*.ctrip.com https://*.innity.net https://*.ucweb.com https://*.baidu.com https://*.googlesyndication.com https://*.jsdelivr.net https://*.tripcdn.com https://hublosk.com https://*.yimg.com https://boxclone.com https://*.hotjar.com https://*.google.ae https://*.valuecommerce.com https://*.google.de https://jullyambery.net https://*.innity.com https://appx https://*.criteo.com https://*.apaylater.com https://*.maynhtml.com https://*.google.com.my https://*.google.com.hk https://*.mapbox.com blob:; style-src 'unsafe-inline' https://*.tripcdn.com https://*.trip.com https://*.tripcdn.cn https://*.google.com https://*.googleapis.com https://*.fontawesome.com https://*.honey.io https://*.gstatic.com https://*.c-ctrip.com https://*.cloudflare.com data: ; child-src 'self' https://*.ctripcorp.com https://*.invol.co https://*.googlesyndication.com https://*.google.com https://*.trustpilot.com https://*.facebook.com https://*.lcmark.net https://*.ubpixel.com https://*.altopd.com https://*.youtube.com https://*.2trk.info https://*.2trck.pro https://*.doubleclick.net https://*.kakao.com https://*.dotomi.com https://*.tkqlhce.com https://*.criteo.com https://*.infobip.com https://*.ucweb.com https://*.moontrkr.com https://*.matterport.com https://*.trckqq.com https://*.trip.com https://altopd.com https://invol.co https://stvkr.com https://redirtrack.tech https://noop.style https://*.admitad.com https://*.kittyswell.one https://*.keloogux.world https://childrenshoppingguide.com https://*.youtube-nocookie.com https://*.factoryhotsales.shop https://*.skillmatrix.live https://shoppingderby.com blob:; object-src https://*.trip.com; report-uri https://www.trip.com/security/csp-report; report-to /security/csp-report;
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: lFJ9aPhRhymQU0tUgxPLmmTOP6r2jkBLSlqTUsy8deAXhqfVt_AYCw==
www.trip.com/m/i18n/ReportUndefinedKeys.html
204 No Content 2 B URL OPTIONS HTTP/3 www.trip.com/m/i18n/ReportUndefinedKeys.html
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
POST /m/i18n/ReportUndefinedKeys.html HTTP/1.1
Host: www.trip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json;charset=utf-8
Content-Length: 597
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/plain; charset=utf-8
content-length: 2
timing-allow-origin: *
server: nginx/1.20.1
date: Mon, 04 Dec 2023 13:27:25 GMT
cache-control: no-store
access-control-allow-origin: *
access-control-allow-headers: host,connection,content-length,x-real-ip,x-ctrip-isssl,user-agent,via,x-forwarded-for,x-amz-cf-id,accept-language,accept,referer,accept-encoding,content-type,origin,dnt,sec-fetch-dest,sec-fetch-mode,sec-fetch-site,pragma,cache-control,true-client-ip,x-via,x-ctx-externalclientip,x-ctx-request-from,x-ctx-trace-mark,access-control-allow-headers,cookieorigin,access-control-request-headers,access-control-request-method,authorization,x-requested-with,x-auth-token,x-ctrip-canary-req,x-ctx-canaryreq,x-ctx-canarysrc,x-ctx-canaryidc,x-cat-trace-mode
access-control-allow-methods: GET,HEAD,PUT,POST,OPTIONS,DELETE,PATCH
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-download-options: noopen
x-readtime: 1
x-trip-region: sg, de
content-security-policy-report-only: default-src * data: blob:; connect-src https://*.tripcdn.com *.c-ctrip.com https://*.trip.com https://*.ctrip.com https://*.doubleclick.net https://*.google.com https://*.tiktok.com https://*.bing.com https://*.mapbox.com https://*.skyscanner.net https://*.tripcdn.cn https://*.google-analytics.com https://*.braze.com https://*.yandex.ru https://*.googleapis.com https://*.facebook.com https://*.googletagmanager.com https://*.gstatic.com https://wcs.naver.com https://wcs.naver.net https://connect.facebook.net https://cdn.2trk.info https://b98.yahoo.co.jp https://widget.trustpilot.com https://s.yimg.jp https://altopd.com wss://im.trip.com;script-src 'unsafe-eval' 'unsafe-inline' https://*.naver.net https://*.trip.com https://*.tripcdn.com https://*.tripcdn.cn https://*.c-ctrip.com https://*.google.com https://*.doubleclick.net https://*.googletagmanager.com https://*.google-analytics.com https://unpkg.com https://altopd.com https://*.tiktok.com https://*.facebook.net https://*.bing.com https://*.googleapis.com https://*.yahoo.co.jp https://*.2trk.info https://*.yimg.jp https://*.trustpilot.com https://appx-t2 https://*.skyscanner.net https://*.alipayobjects.com https://*.rakuten.com https://*.qunarzz.com https://*.googleadservices.com https://*.yandex.ru https://*.qq.com https://*.ctrip.com https://*.innity.net https://*.ucweb.com https://*.baidu.com https://*.googlesyndication.com https://*.jsdelivr.net https://*.tripcdn.com https://hublosk.com https://*.yimg.com https://boxclone.com https://*.hotjar.com https://*.google.ae https://*.valuecommerce.com https://*.google.de https://jullyambery.net https://*.innity.com https://appx https://*.criteo.com https://*.apaylater.com https://*.maynhtml.com https://*.google.com.my https://*.google.com.hk https://*.mapbox.com blob:; style-src 'unsafe-inline' https://*.tripcdn.com https://*.trip.com https://*.tripcdn.cn https://*.google.com https://*.googleapis.com https://*.fontawesome.com https://*.honey.io https://*.gstatic.com https://*.c-ctrip.com https://*.cloudflare.com data: ; child-src 'self' https://*.ctripcorp.com https://*.invol.co https://*.googlesyndication.com https://*.google.com https://*.trustpilot.com https://*.facebook.com https://*.lcmark.net https://*.ubpixel.com https://*.altopd.com https://*.youtube.com https://*.2trk.info https://*.2trck.pro https://*.doubleclick.net https://*.kakao.com https://*.dotomi.com https://*.tkqlhce.com https://*.criteo.com https://*.infobip.com https://*.ucweb.com https://*.moontrkr.com https://*.matterport.com https://*.trckqq.com https://*.trip.com https://altopd.com https://invol.co https://stvkr.com https://redirtrack.tech https://noop.style https://*.admitad.com https://*.kittyswell.one https://*.keloogux.world https://childrenshoppingguide.com https://*.youtube-nocookie.com https://*.factoryhotsales.shop https://*.skillmatrix.live https://shoppingderby.com blob:; object-src https://*.trip.com; report-uri https://www.trip.com/security/csp-report; report-to /security/csp-report;
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 3hsvzZwVezk74gSqbzv32Y-GyVbNKUhUz49Pd4zu6f80qprXgTv5KQ==
ubt-sin.tripcdn.com/bee/collect
200 OK 66 B URL POST HTTP/3 ubt-sin.tripcdn.com/bee/collect
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 10899037da864f4d8ff85b572b12f5f5
563956de19bfdaf7bdecee0e8c4262ff06e4ea9f
f680f3dc40305eb6b076aff58e0d22bceb047f9b403f2b3d7997d785511b7981
POST /bee/collect HTTP/1.1
Host: ubt-sin.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 4429
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/3 200 OK
content-type: application/json
content-length: 66
timing-allow-origin: *
server: nginx/1.20.1
date: Mon, 04 Dec 2023 13:27:25 GMT
cache-control: private, no-store, no-cache, no-cache=Set-Cookie, proxy-revalidate
expires: Thu, 01 Jan 1970 00:00:00 GMT
pragma: no-cache
x-content-type-options: nosniff
x-forwarded-for: 91.90.42.154
access-control-max-age: 300
p3p: CP=CUR ADM OUR NOR STA NID
access-control-allow-origin: https://us.trip.com
access-control-allow-credentials: true
set-cookie: uid=YmnO3O4RqJI3aiyA8k3KDw==; Max-Age=63072000; Expires=Wed, 03 Dec 2025 13:27:25 GMT; Path=/
suid=YmnO3O4RqJI3aiyA8k3KDw==; Max-Age=63072000; Expires=Wed, 03 Dec 2025 13:27:25 GMT; Path=/; Secure; SameSite=None
x-cache: Miss from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: lkortjD8Ww_N0FlWEOMrJ53DQWRoJuk9s-cDcT6mBS64Gyri8lgSkg==
aus5.mozilla.org/update/3/GMP/111.0a1/20230218104546/Linux_x86_64-gcc3/null/default/Linux%205.15.0-76-generic%20(GTK%203.24.34%2Clibpulse%20not-available)/default/default/update.xml
444 B URL aus5.mozilla.org/update/3/GMP/111.0a1/20230218104546/Linux_x86_64-gcc3/null/default/Linux%205.15.0-76-generic%20(GTK%203.24.34%2Clibpulse%20not-available)/default/default/update.xml
IP
File type XML 1.0 document text\012- XML document, ASCII text, with very long lines (332)
Hash 3b324dec137a87ef7e24a30a65b13dd0
c0faa95b2f1018e264b3a14aaf50d1003e6c27b3
6cd0b591d9239fc8564627e92a804fc261951b1cbaf5fa58a8ada3cc13f51463
GET /update/3/GMP/111.0a1/20230218104546/Linux_x86_64-gcc3/null/default/Linux%205.15.0-76-generic%20(GTK%203.24.34%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1
Host: aus5.mozilla.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
Pragma: no-cache
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
rule-id: unknown
rule-data-version: unknown
content-signature: x5u=https://content-signature-2.cdn.mozilla.net/chains/aus.content-signature.mozilla.org-2024-01-19-16-42-22.chain; p384ecdsa=Nck-hiWWrUr6dEE5DokWNu2zwfeiKFZT-N0LlDF-Pm-V7thFYF9HmYQZbndVgRRmOO6XCKfDQK6DbO8ECdu-mI-rusRuT6VSA4oxzW_HI-9yuJiUnVowUef4a80GbxKk
strict-transport-security: max-age=31536000;
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'none'
x-proxy-cache-status: EXPIRED
content-encoding: gzip
via: 1.1 google
date: Mon, 04 Dec 2023 13:27:07 GMT
content-type: text/xml; charset=utf-8
vary: Accept-Encoding
content-length: 444
age: 30
cache-control: public,max-age=90
alt-svc: clear
X-Firefox-Spdy: h2
ciscobinary.openh264.org/openh264-linux64-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zip
512 kB URL ciscobinary.openh264.org/openh264-linux64-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zip
IP
File type Zip archive data, at least v2.0 to extract, compression method=deflate\012- data
Size 512 kB (511815 bytes)
Hash 152eda253e242e18443ef3282495bc7c
ff0fa85565f21ec4931baad4573b4c0bd08c4019
8e03090fee16f6e0ee2e436af8e51d0c3deed6d9f0db80dec048e668fc009a48
GET /openh264-linux64-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zip HTTP/1.1
Host: ciscobinary.openh264.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Last-Modified: Thu, 16 Nov 2023 07:38:15 GMT
ETag: 152eda253e242e18443ef3282495bc7c
Content-Length: 511815
Accept-Ranges: bytes
X-Timestamp: 1700120294.87662
Content-Type: application/zip
X-Trans-Id: tx8c0ef9e37b1a4ab29193d-0065580fd1dfw1
Cache-Control: public, max-age=207167
Expires: Wed, 06 Dec 2023 23:00:24 GMT
Date: Mon, 04 Dec 2023 13:27:37 GMT
Connection: keep-alive
us.trip.com/restapi/soa2/14839/json/hotelList?x-traceID=1365235424-1701696448103-1211579247
200 OK 8.1 kB URL POST HTTP/3 us.trip.com/restapi/soa2/14839/json/hotelList?x-traceID=1365235424-1701696448103-1211579247
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)\012- data
Hash cbef31826eca9802070e2df07d56514f
a2db5e27e1c4212dcc0bf23215d99876899e715f
3ad490c72524453bf89cf3ee5d709768173ae84b598ee9c98fa1dd3c116f3122
POST /restapi/soa2/14839/json/hotelList?x-traceID=1365235424-1701696448103-1211579247 HTTP/1.1
Host: us.trip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
locale: en-US
currency: USD
x-traceID: 1365235424-1701696448103-1211579247
trip-trace-id: 1365235424-1701696448103-1211579247
Content-Type: application/json
Content-Length: 217
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/?locale=en-us
Cookie: UBT_VID=1701696438140.f76e6TctnaRh; kafka_result={"isDirectVisit":"1","hasUrlLocale":"1","hasCookieLocale":"0","isUrlCookieSame":"0","isJump":"0","jumpType":"targetLocale","platform":"online","vid":"1701696438140.f76e6TctnaRh"}; ibu_online_home_language_match={"isRedirect":false,"isShowSuggestion":true,"lastVisited":true,"region":"no","redirectSymbol":false,"site_url":["us.trip.com"],"suggestion":[]}; ibulanguage=EN; ibulocale=en_us; cookiePricesDisplayed=USD; _abtest_userid=77c3b86c-476f-4ca5-8c73-e743bcffbe04; _tp_search_latest_channel_name=hotels; _gcl_au=1.1.2020697670.1701696447; _fwb=254FjNz9nuUbqsIQWYSUhsh.1701696447115; NA_SAC=dT1odHRwcyUzQSUyRiUyRnVzLnRyaXAuY29tJTJGJTNGbG9jYWxlJTNEZW4tdXN8cj0=; wcs_bt=s_33fb334966e9:1701696447; _bfa=1.1701696438140.f76e6TctnaRh.1.1701696445418.1701696448164.1.1.10320668088
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json;charset=UTF-8
alt-svc: h3=":443"; ma=86400
timing-allow-origin: *
server: nginx/1.20.1
date: Mon, 04 Dec 2023 13:27:23 GMT
clogging_trace_id: 2424762989820861889
rootmessageid: 100025527-0a817ec0-472693-2555813
servermessageid: 100025527-0a70c316-472693-895177
content-encoding: gzip
vary: accept-encoding
x-gate-root-id: 100025527-0a817ec0-472693-2555813
x-gate-region: SHAXY
x-service-call: 0.567
access-control-expose-headers: RootMessageId, x-service-call, x-gate-region
x-gate: ctrip-gate
x-originating-url: https://us.trip.com/restapi/soa2/14839/json/hotelList?x-traceID=1365235424-1701696448103-1211579247
access-control-allow-origin: https://us.trip.com
access-control-allow-credentials: true
x-trip-region: sg, de
content-security-policy-report-only: default-src * data: blob:; connect-src https://*.tripcdn.com *.c-ctrip.com https://*.trip.com https://*.ctrip.com https://*.doubleclick.net https://*.google.com https://*.tiktok.com https://*.bing.com https://*.mapbox.com https://*.skyscanner.net https://*.tripcdn.cn https://*.google-analytics.com https://*.braze.com https://*.yandex.ru https://*.googleapis.com https://*.facebook.com https://*.googletagmanager.com https://*.gstatic.com https://wcs.naver.com https://wcs.naver.net https://connect.facebook.net https://cdn.2trk.info https://b98.yahoo.co.jp https://widget.trustpilot.com https://s.yimg.jp https://altopd.com wss://im.trip.com;script-src 'unsafe-eval' 'unsafe-inline' https://*.naver.net https://*.trip.com https://*.tripcdn.com https://*.tripcdn.cn https://*.c-ctrip.com https://*.google.com https://*.doubleclick.net https://*.googletagmanager.com https://*.google-analytics.com https://unpkg.com https://altopd.com https://*.tiktok.com https://*.facebook.net https://*.bing.com https://*.googleapis.com https://*.yahoo.co.jp https://*.2trk.info https://*.yimg.jp https://*.trustpilot.com https://appx-t2 https://*.skyscanner.net https://*.alipayobjects.com https://*.rakuten.com https://*.qunarzz.com https://*.googleadservices.com https://*.yandex.ru https://*.qq.com https://*.ctrip.com https://*.innity.net https://*.ucweb.com https://*.baidu.com https://*.googlesyndication.com https://*.jsdelivr.net https://*.tripcdn.com https://hublosk.com https://*.yimg.com https://boxclone.com https://*.hotjar.com https://*.google.ae https://*.valuecommerce.com https://*.google.de https://jullyambery.net https://*.innity.com https://appx https://*.criteo.com https://*.apaylater.com https://*.maynhtml.com https://*.google.com.my https://*.google.com.hk https://*.mapbox.com blob:; style-src 'unsafe-inline' https://*.tripcdn.com https://*.trip.com https://*.tripcdn.cn https://*.google.com https://*.googleapis.com https://*.fontawesome.com https://*.honey.io https://*.gstatic.com https://*.c-ctrip.com https://*.cloudflare.com data: ; child-src 'self' https://*.ctripcorp.com https://*.invol.co https://*.googlesyndication.com https://*.google.com https://*.trustpilot.com https://*.facebook.com https://*.lcmark.net https://*.ubpixel.com https://*.altopd.com https://*.youtube.com https://*.2trk.info https://*.2trck.pro https://*.doubleclick.net https://*.kakao.com https://*.dotomi.com https://*.tkqlhce.com https://*.criteo.com https://*.infobip.com https://*.ucweb.com https://*.moontrkr.com https://*.matterport.com https://*.trckqq.com https://*.trip.com https://altopd.com https://invol.co https://stvkr.com https://redirtrack.tech https://noop.style https://*.admitad.com https://*.kittyswell.one https://*.keloogux.world https://childrenshoppingguide.com https://*.youtube-nocookie.com https://*.factoryhotsales.shop https://*.skillmatrix.live https://shoppingderby.com blob:; object-src https://*.trip.com; report-uri https://www.trip.com/security/csp-report; report-to /security/csp-report;
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: wDpyvWeH4zZa-tcPW2rom_1_Zwaw-GZGOWrVWigkGCxkpndkT_vh8w==
webresource.tripcdn.com/ares2/infosec/jigsawCaptcha/~2.0.0/default/js/jigsaw-captcha.min.js
200 OK 70 kB URL GET HTTP/3 webresource.tripcdn.com/ares2/infosec/jigsawCaptcha/~2.0.0/default/js/jigsaw-captcha.min.js
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Hash 80418b5a5417dc4a72cc5a64126288eb
91d1056869c0b83740221068428ef3fbd12157c8
25ff8a0931e2ded3737565ec6779eb9129b0bb8b43b127df9d7ea5fe476118ac
GET /ares2/infosec/jigsawCaptcha/~2.0.0/default/js/jigsaw-captcha.min.js HTTP/1.1
Host: webresource.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript
content-length: 19631
age: 2768527
date: Thu, 02 Nov 2023 12:25:14 GMT
x-ares-server: r100013666-91017039-wpjjn@SHAXY
timing-allow-origin: *
access-control-allow-origin: *
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aliyun
x-ares-request-id: 6543858F7C95963035591CB0
etag: W/"80418b5a5417dc4a72cc5a64126288eb"
last-modified: Tue, 04 Jul 2023 11:57:31 GMT
cache-control: max-age=5184000
expires: Mon, 01 Jan 2024 11:18:39 GMT
content-encoding: gzip
x-varnish: 189537694 188592496
via: 1.1 varnish (Varnish/6.5), 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 0AG701GstBbrT3uARZJpfTR-ofIxRZ3VVy1AQjg56f5_dnJuvSyhSA==
pages.trip.com/cars/image/totrip/18453d76-8020-4bfc-8679-a2193618d9fb.png
200 OK 47 kB URL GET HTTP/3 pages.trip.com/cars/image/totrip/18453d76-8020-4bfc-8679-a2193618d9fb.png
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type PNG image data, 300 x 200, 8-bit/color RGBA, non-interlaced\012- data
Hash 1a45a70cb1c1ec8c39b5751582e0ef8a
ba5ad26deb9bfc72c508e3cc771e029eb9b4a09b
59e0eaae5c5d4a749059b38f3368c879d79f3bdbeaf5c4b2d94c89bb9f254a0a
GET /cars/image/totrip/18453d76-8020-4bfc-8679-a2193618d9fb.png HTTP/1.1
Host: pages.trip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Cookie: UBT_VID=1701696438140.f76e6TctnaRh; kafka_result={"isDirectVisit":"1","hasUrlLocale":"1","hasCookieLocale":"0","isUrlCookieSame":"0","isJump":"0","jumpType":"targetLocale","platform":"online","vid":"1701696438140.f76e6TctnaRh"}; ibu_online_home_language_match={"isRedirect":false,"isShowSuggestion":true,"lastVisited":true,"region":"no","redirectSymbol":false,"site_url":["us.trip.com"],"suggestion":[]}; ibulanguage=EN; ibulocale=en_us; cookiePricesDisplayed=USD; _abtest_userid=77c3b86c-476f-4ca5-8c73-e743bcffbe04; _gcl_au=1.1.2020697670.1701696447
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: image/png
content-length: 46711
age: 28732
date: Mon, 04 Dec 2023 05:28:30 GMT
x-ares-server: r100013666-91017039-s2n5r@SHAXY
x-ares-source: aliyun
x-ares-request-id: 656D38E674A1EC35317485FB
etag: W/"1a45a70cb1c1ec8c39b5751582e0ef8a"
last-modified: Mon, 28 Sep 2020 09:40:53 GMT
cache-control: max-age=172800
expires: Wed, 06 Dec 2023 02:26:46 GMT
timing-allow-origin: *
x-varnish: 520667110 518670769
via: 1.1 varnish (Varnish/6.5), 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: GeqOjKC5cKDt8woTHHCg9hXs0CaXOEJFhVHCx_oiNOvirRZmloX37w==
aw-s.tripcdn.com/locale/v3/330151/en-US.js?etagc=a711cf6d72e6df9fc0c3721bdce477ac
200 OK 67 kB URL GET HTTP/2 aw-s.tripcdn.com/locale/v3/330151/en-US.js?etagc=a711cf6d72e6df9fc0c3721bdce477ac
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /locale/v3/330151/en-US.js?etagc=a711cf6d72e6df9fc0c3721bdce477ac HTTP/1.1
Host: aw-s.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
server: nginx/1.20.1
date: Tue, 28 Nov 2023 07:22:43 GMT
x-ares-server: r100013666-21038164-qtsdx@FRA-AWS
timing-allow-origin: *
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aws
x-ares-request-id: E028G02T7P32TMME
etag: W/"a711cf6d72e6df9fc0c3721bdce477ac"
last-modified: Tue, 28 Nov 2023 07:21:30 GMT
cache-control: max-age=5184000
expires: Sat, 27 Jan 2024 07:22:43 GMT
content-encoding: gzip
x-varnish: 51437684
via: 1.1 varnish (Varnish/6.5), 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: ngq19tzbNC_p2qJmjiTQhFSRBqxj5ckYOM0y_-Z0iCOmy5r-R1aANw==
age: 540276
X-Firefox-Spdy: h2
aw-s.tripcdn.com/modules/ibu/online-home/3a011bd354b26ce01077d8ef71105da5.3a011bd354b26ce01077d8ef71105da5.woff
200 OK 1.2 kB URL GET HTTP/3 aw-s.tripcdn.com/modules/ibu/online-home/3a011bd354b26ce01077d8ef71105da5.3a011bd354b26ce01077d8ef71105da5.woff
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type Web Open Font Format, TrueType, length 1204, version 1.0\012- data
Hash 3a011bd354b26ce01077d8ef71105da5
3fd046efb7143d0ebb8802680ee8f4c2b2a8c70d
a396e29a62f59095cafe1246e712b38f4b64c78c6652a4384d1c9683e3f7d86f
GET /modules/ibu/online-home/3a011bd354b26ce01077d8ef71105da5.3a011bd354b26ce01077d8ef71105da5.woff HTTP/1.1
Host: aw-s.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://aw-s.tripcdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: font/woff
content-length: 1204
age: 156069
server: nginx/1.20.1
date: Sat, 02 Dec 2023 18:06:14 GMT
x-ares-server: r100013666-21038164-qtsdx@FRA-AWS
timing-allow-origin: *
access-control-allow-origin: https://us.trip.com
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aws
x-ares-request-id: CW4ZT38ATRXBN301
etag: W/"3a011bd354b26ce01077d8ef71105da5"
last-modified: Tue, 23 May 2023 13:01:50 GMT
cache-control: max-age=5184000
expires: Wed, 31 Jan 2024 18:06:14 GMT
x-varnish: 54927476
via: 1.1 varnish (Varnish/6.5), 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: T_aIM5Rn1zUUufbdWIW8rND1jiuwT5ZTNfzwhcrvhvvonFnqs5zpAg==
us.trip.com/m/home/getOnlineLocales?x-traceID=1817023235-1701696447712-1284067313
200 OK 5.9 kB URL POST HTTP/3 us.trip.com/m/home/getOnlineLocales?x-traceID=1817023235-1701696447712-1284067313
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type Unicode text, UTF-8 text, with very long lines (6916), with no line terminators
Hash da67fffa3f1ff9eb09717edda07dcbe3
3d3745c28851f9578d3ba1ce4334bb698a62da4c
8f3a12da7d33ed3ccf1142357d11156b292478b27f5a52074a7346b9b50a4652
POST /m/home/getOnlineLocales?x-traceID=1817023235-1701696447712-1284067313 HTTP/1.1
Host: us.trip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/?locale=en-us
Cookie: UBT_VID=1701696438140.f76e6TctnaRh; kafka_result={"isDirectVisit":"1","hasUrlLocale":"1","hasCookieLocale":"0","isUrlCookieSame":"0","isJump":"0","jumpType":"targetLocale","platform":"online","vid":"1701696438140.f76e6TctnaRh"}; ibu_online_home_language_match={"isRedirect":false,"isShowSuggestion":true,"lastVisited":true,"region":"no","redirectSymbol":false,"site_url":["us.trip.com"],"suggestion":[]}; ibulanguage=EN; ibulocale=en_us; cookiePricesDisplayed=USD; _abtest_userid=77c3b86c-476f-4ca5-8c73-e743bcffbe04; _tp_search_latest_channel_name=hotels; _gcl_au=1.1.2020697670.1701696447; _fwb=254FjNz9nuUbqsIQWYSUhsh.1701696447115; NA_SAC=dT1odHRwcyUzQSUyRiUyRnVzLnRyaXAuY29tJTJGJTNGbG9jYWxlJTNEZW4tdXN8cj0=; wcs_bt=s_33fb334966e9:1701696447
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
HTTP/3 200 OK
content-type: application/json; charset=utf-8
content-length: 5868
timing-allow-origin: *
server: nginx/1.20.1
date: Mon, 04 Dec 2023 13:27:22 GMT
access-control-allow-credentials: true
access-control-allow-headers: content-type,cookieorigin,trip-trace-id,x-traceid,currency,locale
access-control-allow-methods: POST,GET
access-control-allow-origin: https://us.trip.com
x-gate-region: SIN-AWS
access-control-expose-headers: x-originating-url, x-gate-region, x-ibu-trip-region
x-trip-app-name: h5-root
x-trip-app-version: 2.2.0
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-download-options: noopen
x-readtime: 137
x-trip-region: sg, de
content-security-policy-report-only: default-src * data: blob:; connect-src https://*.tripcdn.com *.c-ctrip.com https://*.trip.com https://*.ctrip.com https://*.doubleclick.net https://*.google.com https://*.tiktok.com https://*.bing.com https://*.mapbox.com https://*.skyscanner.net https://*.tripcdn.cn https://*.google-analytics.com https://*.braze.com https://*.yandex.ru https://*.googleapis.com https://*.facebook.com https://*.googletagmanager.com https://*.gstatic.com https://wcs.naver.com https://wcs.naver.net https://connect.facebook.net https://cdn.2trk.info https://b98.yahoo.co.jp https://widget.trustpilot.com https://s.yimg.jp https://altopd.com wss://im.trip.com;script-src 'unsafe-eval' 'unsafe-inline' https://*.naver.net https://*.trip.com https://*.tripcdn.com https://*.tripcdn.cn https://*.c-ctrip.com https://*.google.com https://*.doubleclick.net https://*.googletagmanager.com https://*.google-analytics.com https://unpkg.com https://altopd.com https://*.tiktok.com https://*.facebook.net https://*.bing.com https://*.googleapis.com https://*.yahoo.co.jp https://*.2trk.info https://*.yimg.jp https://*.trustpilot.com https://appx-t2 https://*.skyscanner.net https://*.alipayobjects.com https://*.rakuten.com https://*.qunarzz.com https://*.googleadservices.com https://*.yandex.ru https://*.qq.com https://*.ctrip.com https://*.innity.net https://*.ucweb.com https://*.baidu.com https://*.googlesyndication.com https://*.jsdelivr.net https://*.tripcdn.com https://hublosk.com https://*.yimg.com https://boxclone.com https://*.hotjar.com https://*.google.ae https://*.valuecommerce.com https://*.google.de https://jullyambery.net https://*.innity.com https://appx https://*.criteo.com https://*.apaylater.com https://*.maynhtml.com https://*.google.com.my https://*.google.com.hk https://*.mapbox.com blob:; style-src 'unsafe-inline' https://*.tripcdn.com https://*.trip.com https://*.tripcdn.cn https://*.google.com https://*.googleapis.com https://*.fontawesome.com https://*.honey.io https://*.gstatic.com https://*.c-ctrip.com https://*.cloudflare.com data: ; child-src 'self' https://*.ctripcorp.com https://*.invol.co https://*.googlesyndication.com https://*.google.com https://*.trustpilot.com https://*.facebook.com https://*.lcmark.net https://*.ubpixel.com https://*.altopd.com https://*.youtube.com https://*.2trk.info https://*.2trck.pro https://*.doubleclick.net https://*.kakao.com https://*.dotomi.com https://*.tkqlhce.com https://*.criteo.com https://*.infobip.com https://*.ucweb.com https://*.moontrkr.com https://*.matterport.com https://*.trckqq.com https://*.trip.com https://altopd.com https://invol.co https://stvkr.com https://redirtrack.tech https://noop.style https://*.admitad.com https://*.kittyswell.one https://*.keloogux.world https://childrenshoppingguide.com https://*.youtube-nocookie.com https://*.factoryhotsales.shop https://*.skillmatrix.live https://shoppingderby.com blob:; object-src https://*.trip.com; report-uri https://www.trip.com/security/csp-report; report-to /security/csp-report;
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: FgHESw_Jivozan8NG5HgFQwQVcvfKYLstZgR0osrEc6WcPIYIX2rYw==
us.trip.com/restapi/soa2/13909/getUspInfo?x-traceID=1944605127-1701696448047-1231303411
200 OK 1.6 kB URL POST HTTP/3 us.trip.com/restapi/soa2/13909/getUspInfo?x-traceID=1944605127-1701696448047-1231303411
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type troff or preprocessor input, ASCII text, with very long lines (1712), with no line terminators
Hash 39ab6279f7e91ebfea7a57dc67d84789
477d0993a8c5dcc21774eaa3f2432d19d1b60169
323e58c1342e3670b9019e4037d83008be5605ff8c30c820ddf9af57935b5b5c
POST /restapi/soa2/13909/getUspInfo?x-traceID=1944605127-1701696448047-1231303411 HTTP/1.1
Host: us.trip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
locale: en-US
currency: USD
x-traceID: 1944605127-1701696448047-1231303411
trip-trace-id: 1944605127-1701696448047-1231303411
Content-Type: application/json
Content-Length: 85
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/?locale=en-us
Cookie: UBT_VID=1701696438140.f76e6TctnaRh; kafka_result={"isDirectVisit":"1","hasUrlLocale":"1","hasCookieLocale":"0","isUrlCookieSame":"0","isJump":"0","jumpType":"targetLocale","platform":"online","vid":"1701696438140.f76e6TctnaRh"}; ibu_online_home_language_match={"isRedirect":false,"isShowSuggestion":true,"lastVisited":true,"region":"no","redirectSymbol":false,"site_url":["us.trip.com"],"suggestion":[]}; ibulanguage=EN; ibulocale=en_us; cookiePricesDisplayed=USD; _abtest_userid=77c3b86c-476f-4ca5-8c73-e743bcffbe04; _tp_search_latest_channel_name=hotels; _gcl_au=1.1.2020697670.1701696447; _fwb=254FjNz9nuUbqsIQWYSUhsh.1701696447115; NA_SAC=dT1odHRwcyUzQSUyRiUyRnVzLnRyaXAuY29tJTJGJTNGbG9jYWxlJTNEZW4tdXN8cj0=; wcs_bt=s_33fb334966e9:1701696447
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/json;charset=UTF-8
alt-svc: h3=":443"; ma=86400
timing-allow-origin: *
server: nginx/1.20.1
date: Mon, 04 Dec 2023 13:27:22 GMT
clogging_trace_id: 4829913528563554744
rootmessageid: 100025527-0a8191d1-472693-2556328
servermessageid: 100025527-0a6e5cfe-472693-894957
content-encoding: gzip
vary: accept-encoding
x-gate-root-id: 100025527-0a8191d1-472693-2556328
x-gate-region: SHAXY
x-service-call: 0.077
access-control-expose-headers: RootMessageId, x-service-call, x-gate-region
x-gate: ctrip-gate
x-originating-url: https://us.trip.com/restapi/soa2/13909/getUspInfo?x-traceID=1944605127-1701696448047-1231303411
access-control-allow-origin: https://us.trip.com
access-control-allow-credentials: true
x-trip-region: sg, de
content-security-policy-report-only: default-src * data: blob:; connect-src https://*.tripcdn.com *.c-ctrip.com https://*.trip.com https://*.ctrip.com https://*.doubleclick.net https://*.google.com https://*.tiktok.com https://*.bing.com https://*.mapbox.com https://*.skyscanner.net https://*.tripcdn.cn https://*.google-analytics.com https://*.braze.com https://*.yandex.ru https://*.googleapis.com https://*.facebook.com https://*.googletagmanager.com https://*.gstatic.com https://wcs.naver.com https://wcs.naver.net https://connect.facebook.net https://cdn.2trk.info https://b98.yahoo.co.jp https://widget.trustpilot.com https://s.yimg.jp https://altopd.com wss://im.trip.com;script-src 'unsafe-eval' 'unsafe-inline' https://*.naver.net https://*.trip.com https://*.tripcdn.com https://*.tripcdn.cn https://*.c-ctrip.com https://*.google.com https://*.doubleclick.net https://*.googletagmanager.com https://*.google-analytics.com https://unpkg.com https://altopd.com https://*.tiktok.com https://*.facebook.net https://*.bing.com https://*.googleapis.com https://*.yahoo.co.jp https://*.2trk.info https://*.yimg.jp https://*.trustpilot.com https://appx-t2 https://*.skyscanner.net https://*.alipayobjects.com https://*.rakuten.com https://*.qunarzz.com https://*.googleadservices.com https://*.yandex.ru https://*.qq.com https://*.ctrip.com https://*.innity.net https://*.ucweb.com https://*.baidu.com https://*.googlesyndication.com https://*.jsdelivr.net https://*.tripcdn.com https://hublosk.com https://*.yimg.com https://boxclone.com https://*.hotjar.com https://*.google.ae https://*.valuecommerce.com https://*.google.de https://jullyambery.net https://*.innity.com https://appx https://*.criteo.com https://*.apaylater.com https://*.maynhtml.com https://*.google.com.my https://*.google.com.hk https://*.mapbox.com blob:; style-src 'unsafe-inline' https://*.tripcdn.com https://*.trip.com https://*.tripcdn.cn https://*.google.com https://*.googleapis.com https://*.fontawesome.com https://*.honey.io https://*.gstatic.com https://*.c-ctrip.com https://*.cloudflare.com data: ; child-src 'self' https://*.ctripcorp.com https://*.invol.co https://*.googlesyndication.com https://*.google.com https://*.trustpilot.com https://*.facebook.com https://*.lcmark.net https://*.ubpixel.com https://*.altopd.com https://*.youtube.com https://*.2trk.info https://*.2trck.pro https://*.doubleclick.net https://*.kakao.com https://*.dotomi.com https://*.tkqlhce.com https://*.criteo.com https://*.infobip.com https://*.ucweb.com https://*.moontrkr.com https://*.matterport.com https://*.trckqq.com https://*.trip.com https://altopd.com https://invol.co https://stvkr.com https://redirtrack.tech https://noop.style https://*.admitad.com https://*.kittyswell.one https://*.keloogux.world https://childrenshoppingguide.com https://*.youtube-nocookie.com https://*.factoryhotsales.shop https://*.skillmatrix.live https://shoppingderby.com blob:; object-src https://*.trip.com; report-uri https://www.trip.com/security/csp-report; report-to /security/csp-report;
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: L1aMlRyiRbwwt3rImRJDZMlqUJwuz6uMzgsvckFNL97ZQGqP35faYw==
pages.trip.com/images/download-button/en-us/android-en-us.png
200 OK 3.5 kB URL GET HTTP/3 pages.trip.com/images/download-button/en-us/android-en-us.png
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type PNG image data, 220 x 66, 8-bit colormap, non-interlaced\012- data
Hash dd18e643941c542700a68847291970c5
fb37b15e83758a91fc0224b89dbd03670c1559d6
3c645f5b17425446f0f2df9d6534fdc46460b8823145a1a588cf584d093f0a08
GET /images/download-button/en-us/android-en-us.png HTTP/1.1
Host: pages.trip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Cookie: UBT_VID=1701696438140.f76e6TctnaRh; kafka_result={"isDirectVisit":"1","hasUrlLocale":"1","hasCookieLocale":"0","isUrlCookieSame":"0","isJump":"0","jumpType":"targetLocale","platform":"online","vid":"1701696438140.f76e6TctnaRh"}; ibu_online_home_language_match={"isRedirect":false,"isShowSuggestion":true,"lastVisited":true,"region":"no","redirectSymbol":false,"site_url":["us.trip.com"],"suggestion":[]}; ibulanguage=EN; ibulocale=en_us; cookiePricesDisplayed=USD; _abtest_userid=77c3b86c-476f-4ca5-8c73-e743bcffbe04; _gcl_au=1.1.2020697670.1701696447; _bfa=1.1701696438140.f76e6TctnaRh.1.1701696445418.1701696448164.1.1.10320668088
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: image/png
content-length: 3538
age: 26768
x-ares-server: r100013666-21027498-8hkcw@SHARB
x-ares-source: aliyun
x-ares-request-id: 656A973D2E1A793733EC5624
last-modified: Mon, 13 Jan 2020 11:33:31 GMT
timing-allow-origin: *
x-varnish: 120456308 118321067
via: 1.1 varnish (Varnish/6.5), 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
accept-ranges: bytes
date: Mon, 04 Dec 2023 06:01:13 GMT
cache-control: max-age=172800
expires: Wed, 06 Dec 2023 06:01:13 GMT
etag: W/"dd18e643941c542700a68847291970c5"
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: UvzbIzazazKVvQM8zXEMwW9nLFlaHC6GJQfKmb83LRFX6dQUqwB7tw==
aw-s.tripcdn.com/locale/v3/330151/en-US.js?etagc=a711cf6d72e6df9fc0c3721bdce477ac
200 OK 67 kB URL GET HTTP/3 aw-s.tripcdn.com/locale/v3/330151/en-US.js?etagc=a711cf6d72e6df9fc0c3721bdce477ac
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /locale/v3/330151/en-US.js?etagc=a711cf6d72e6df9fc0c3721bdce477ac HTTP/1.1
Host: aw-s.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript
alt-svc: h3=":443"; ma=86400
age: 540178
server: nginx/1.20.1
date: Tue, 28 Nov 2023 07:24:21 GMT
x-ares-server: r100013666-21038164-fsr9l@FRA-AWS
timing-allow-origin: *
access-control-allow-origin: https://us.trip.com
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aws
x-ares-request-id: R26X98S7582KGQ1Q
etag: W/"a711cf6d72e6df9fc0c3721bdce477ac"
last-modified: Tue, 28 Nov 2023 07:21:30 GMT
cache-control: max-age=5184000
expires: Sat, 27 Jan 2024 07:24:21 GMT
content-encoding: gzip
x-varnish: 52089034
via: 1.1 varnish (Varnish/6.5), 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-device: U R Android
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: j-3G1PjrzcPWv4n6ZryVKwPzXWBuoMYJKuKKMrdzrZRPz1Zrsxve5A==
cdn.2trk.info/aud/clientjs/ptag.js?1305
200 OK 1.4 kB URL GET HTTP/2 cdn.2trk.info/aud/clientjs/ptag.js?1305
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerLet's Encrypt
Subject2trk.info
Fingerprint4C:FA:AC:06:44:E5:A6:B0:99:3C:03:DE:72:6A:53:DB:06:22:FD:25
ValidityThu, 23 Nov 2023 11:44:03 GMT - Wed, 21 Feb 2024 11:44:02 GMT
File type ASCII text, with very long lines (1501), with no line terminators
Hash fc5fc10c4df9eeb0e86daa3a6192fee7
a067c5aa8fb85911b9de7091e6c2a2b2d6064afe
d017be5fa2cc627cb1a16f99c6d9172168306759fdfacd275473bf15e6a2fc0e
GET /aud/clientjs/ptag.js?1305 HTTP/1.1
Host: cdn.2trk.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 13:27:22 GMT
content-type: text/javascript
age: 37678
cache-control: public, max-age=172800
cf-bgj: minify
cf-polished: origSize=1725
etag: W/"cf4ceb8555ccd6ab8adbe849b7ccd9fb"
expires: Mon, 04 Dec 2023 03:59:24 GMT
last-modified: Tue, 21 Nov 2023 06:33:19 GMT
x-guploader-uploadid: ABPtcPrTK0I3D4yAy9gzvYJBmHSHugvTyagRe2vw2q7LhwqwUsJXnACBWde7KMcy1mjUPyDFkaUrfA3HH30UdbS0PMNXz-20jM2C
x-goog-generation: 1700548399564649
x-goog-hash: crc32c=8zU1zg==, md5=z0zrhVXM1quK2+hJt8zZ+w==
x-goog-metageneration: 1
x-goog-storage-class: STANDARD
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 1725
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LZKMndbKNLvxel6GcrSfWbNDrcJYJpNU07wqhU8blzAodLu4w8EwWwT9RRkPtUBBJucX0IjPpspJkCSQvGpveD9WOonFpzzqFbAlQPp016bbAQdxLuH2VGAvsJnp3jv7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830462f06f997131-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
us.trip.com/restapi/soa2/25019/json/recommendCity?x-traceID=1376557841-1701696446449-1768702075
200 OK 1.3 kB URL POST HTTP/3 us.trip.com/restapi/soa2/25019/json/recommendCity?x-traceID=1376557841-1701696446449-1768702075
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type troff or preprocessor input, ASCII text, with very long lines (1508), with no line terminators
Hash 606120af35d9b7f9c4e773bdd545d57b
6f794e9a6badcc4da22cd96d7eae4a8c86fa2e85
49a1ac2b204fd5983c690db8dd7d572b1c58ad85a8e2ed6de23685917e73bc9e
POST /restapi/soa2/25019/json/recommendCity?x-traceID=1376557841-1701696446449-1768702075 HTTP/1.1
Host: us.trip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-traceID: 1376557841-1701696446449-1768702075
trip-trace-id: 1376557841-1701696446449-1768702075
Content-Type: application/json
Content-Length: 195
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/?locale=en-us
Cookie: UBT_VID=1701696438140.f76e6TctnaRh; kafka_result={"isDirectVisit":"1","hasUrlLocale":"1","hasCookieLocale":"0","isUrlCookieSame":"0","isJump":"0","jumpType":"targetLocale","platform":"online","vid":"1701696438140.f76e6TctnaRh"}; ibu_online_home_language_match={"isRedirect":false,"isShowSuggestion":true,"lastVisited":true,"region":"no","redirectSymbol":false,"site_url":["us.trip.com"],"suggestion":[]}; ibulanguage=EN; ibulocale=en_us; cookiePricesDisplayed=USD; _abtest_userid=77c3b86c-476f-4ca5-8c73-e743bcffbe04; _tp_search_latest_channel_name=hotels
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/json;charset=UTF-8
alt-svc: h3=":443"; ma=86400
timing-allow-origin: *
server: nginx/1.20.1
date: Mon, 04 Dec 2023 13:27:21 GMT
rootmessageid: 100025527-0a817ec0-472693-2553032
servermessageid: 100025527-0a3d50aa-472693-963515
content-encoding: gzip
vary: accept-encoding
x-gate-root-id: 100025527-0a817ec0-472693-2553032
x-gate-region: SHARB
x-service-call: 0.073
access-control-expose-headers: RootMessageId, x-service-call, x-gate-region
x-gate: ctrip-gate
x-originating-url: https://us.trip.com/restapi/soa2/25019/json/recommendCity?x-traceID=1376557841-1701696446449-1768702075
access-control-allow-origin: https://us.trip.com
access-control-allow-credentials: true
x-trip-region: sg, de
content-security-policy-report-only: default-src * data: blob:; connect-src https://*.tripcdn.com *.c-ctrip.com https://*.trip.com https://*.ctrip.com https://*.doubleclick.net https://*.google.com https://*.tiktok.com https://*.bing.com https://*.mapbox.com https://*.skyscanner.net https://*.tripcdn.cn https://*.google-analytics.com https://*.braze.com https://*.yandex.ru https://*.googleapis.com https://*.facebook.com https://*.googletagmanager.com https://*.gstatic.com https://wcs.naver.com https://wcs.naver.net https://connect.facebook.net https://cdn.2trk.info https://b98.yahoo.co.jp https://widget.trustpilot.com https://s.yimg.jp https://altopd.com wss://im.trip.com;script-src 'unsafe-eval' 'unsafe-inline' https://*.naver.net https://*.trip.com https://*.tripcdn.com https://*.tripcdn.cn https://*.c-ctrip.com https://*.google.com https://*.doubleclick.net https://*.googletagmanager.com https://*.google-analytics.com https://unpkg.com https://altopd.com https://*.tiktok.com https://*.facebook.net https://*.bing.com https://*.googleapis.com https://*.yahoo.co.jp https://*.2trk.info https://*.yimg.jp https://*.trustpilot.com https://appx-t2 https://*.skyscanner.net https://*.alipayobjects.com https://*.rakuten.com https://*.qunarzz.com https://*.googleadservices.com https://*.yandex.ru https://*.qq.com https://*.ctrip.com https://*.innity.net https://*.ucweb.com https://*.baidu.com https://*.googlesyndication.com https://*.jsdelivr.net https://*.tripcdn.com https://hublosk.com https://*.yimg.com https://boxclone.com https://*.hotjar.com https://*.google.ae https://*.valuecommerce.com https://*.google.de https://jullyambery.net https://*.innity.com https://appx https://*.criteo.com https://*.apaylater.com https://*.maynhtml.com https://*.google.com.my https://*.google.com.hk https://*.mapbox.com blob:; style-src 'unsafe-inline' https://*.tripcdn.com https://*.trip.com https://*.tripcdn.cn https://*.google.com https://*.googleapis.com https://*.fontawesome.com https://*.honey.io https://*.gstatic.com https://*.c-ctrip.com https://*.cloudflare.com data: ; child-src 'self' https://*.ctripcorp.com https://*.invol.co https://*.googlesyndication.com https://*.google.com https://*.trustpilot.com https://*.facebook.com https://*.lcmark.net https://*.ubpixel.com https://*.altopd.com https://*.youtube.com https://*.2trk.info https://*.2trck.pro https://*.doubleclick.net https://*.kakao.com https://*.dotomi.com https://*.tkqlhce.com https://*.criteo.com https://*.infobip.com https://*.ucweb.com https://*.moontrkr.com https://*.matterport.com https://*.trckqq.com https://*.trip.com https://altopd.com https://invol.co https://stvkr.com https://redirtrack.tech https://noop.style https://*.admitad.com https://*.kittyswell.one https://*.keloogux.world https://childrenshoppingguide.com https://*.youtube-nocookie.com https://*.factoryhotsales.shop https://*.skillmatrix.live https://shoppingderby.com blob:; object-src https://*.trip.com; report-uri https://www.trip.com/security/csp-report; report-to /security/csp-report;
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: IKhiA0_6QlYjwPsM8lfWqo0bBlntPBUUHFM_oqpHM3NhNIx4IXnnaQ==
webresource.tripcdn.com/ares2/train/csec/5.0.8/default/sec/c-sec.js?v=2023124
200 OK 59 kB URL GET HTTP/3 webresource.tripcdn.com/ares2/train/csec/5.0.8/default/sec/c-sec.js?v=2023124
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ares2/train/csec/5.0.8/default/sec/c-sec.js?v=2023124 HTTP/1.1
Host: webresource.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript
alt-svc: h3=":443"; ma=86400
age: 75282
date: Sun, 03 Dec 2023 16:32:40 GMT
x-ares-server: r100013666-91017039-stk2x@SHAXY
timing-allow-origin: *
access-control-allow-origin: *
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aliyun
x-ares-request-id: 656CADA8646AC93430526A44
etag: W/"1d90e5c4cc023cd805cc718b769c1006"
last-modified: Wed, 15 Nov 2023 08:08:41 GMT
cache-control: max-age=5184000
expires: Thu, 01 Feb 2024 16:32:40 GMT
content-encoding: gzip
x-varnish: 543829385
via: 1.1 varnish (Varnish/6.5), 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: b2hypj106PSCQijo12-X0HdSGzdHNgXFKmlfosiDHF9urV8n6V1XwA==
webresource.tripcdn.com/ares2/infosec/jigsawCaptcha/~2.0.0/default/js/jigsaw-captcha.min.js?expired=1d
200 OK 70 kB URL GET HTTP/3 webresource.tripcdn.com/ares2/infosec/jigsawCaptcha/~2.0.0/default/js/jigsaw-captcha.min.js?expired=1d
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Hash 0f3e0187d11ed44716bb8feae540012c
83dec18406dd74e686126124dff3b5db077f8761
07c15a7bb547acb8d80e2bc7d28ab9821cf1e2355faf877331c0a99d6ab0a886
GET /ares2/infosec/jigsawCaptcha/~2.0.0/default/js/jigsaw-captcha.min.js?expired=1d HTTP/1.1
Host: webresource.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript
alt-svc: h3=":443"; ma=86400
age: 1398490
date: Sat, 18 Nov 2023 08:59:11 GMT
x-ares-server: r100013666-91017039-h22m9@SHAXY
timing-allow-origin: *
access-control-allow-origin: *
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aliyun
x-ares-request-id: 65587CDF16D159303862DFC8
etag: W/"0f3e0187d11ed44716bb8feae540012c"
last-modified: Wed, 08 Nov 2023 03:07:26 GMT
cache-control: max-age=5184000
expires: Wed, 17 Jan 2024 08:59:11 GMT
content-encoding: gzip
x-varnish: 396461375
via: 1.1 varnish (Varnish/6.5), 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: _H91VuuiSphrnb2DxThZGdphW-f-R1T6rEw5YmpaVDmvi-xtyC5srg==
www.googletagmanager.com/gtag/js?id=AW-827436400
200 OK 208 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=AW-827436400
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (4179)
Size 208 kB (207740 bytes)
Hash a8eedbef045efa6127d8ae8d94c9d9ea
a88232185bbeb4965fb357bdb40139e9f2848e5b
7a8905744432e63a66c2f42d2308a6e69fde4b0a630b07ab25e3288a04413ef5
GET /gtag/js?id=AW-827436400 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 04 Dec 2023 13:27:21 GMT
expires: Mon, 04 Dec 2023 13:27:21 GMT
cache-control: private, max-age=900
last-modified: Mon, 04 Dec 2023 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 74577
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
aw-s.tripcdn.com/modules/ibu/online-home/4c9090cb977433ded7dde0efeac9daad.4c9090cb977433ded7dde0efeac9daad.png
200 OK 1.6 kB URL GET HTTP/3 aw-s.tripcdn.com/modules/ibu/online-home/4c9090cb977433ded7dde0efeac9daad.4c9090cb977433ded7dde0efeac9daad.png
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type PNG image data, 192 x 192, 4-bit colormap, non-interlaced\012- data
Hash 4c9090cb977433ded7dde0efeac9daad
92f3184653715a004bcb92ed5e27fe37dd7665cf
ffaa3f982a828407246807f44f3e3138f0c3acb6be3e7806b7fab55da92fbceb
GET /modules/ibu/online-home/4c9090cb977433ded7dde0efeac9daad.4c9090cb977433ded7dde0efeac9daad.png HTTP/1.1
Host: aw-s.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aw-s.tripcdn.com/modules/ibu/online-home/onlineRecommendAttractions.774483269ad105b3d80afccc77a57c6f.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: image/png
content-length: 1592
age: 1145129
server: nginx/1.20.1
date: Tue, 21 Nov 2023 07:21:53 GMT
x-ares-server: r100013666-21038164-4nrfw@FRA-AWS
timing-allow-origin: *
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aws
x-ares-request-id: H8Z1Y6H9DQ93386D
etag: W/"4c9090cb977433ded7dde0efeac9daad"
last-modified: Wed, 12 Oct 2022 02:52:04 GMT
cache-control: max-age=5184000
expires: Sat, 20 Jan 2024 07:21:53 GMT
x-varnish: 45406167
via: 1.1 varnish (Varnish/6.5), 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 4Y7Rs73wX4F7pY54rOt_Jcgx6C4TGTFxZetO6sbILMoh261kieCczw==
aw-s.tripcdn.com/modules/ibu/online-home/hotelAssociative.66bba464260aa7f05b7d04dbc450de68.css
200 OK 79 kB URL GET HTTP/3 aw-s.tripcdn.com/modules/ibu/online-home/hotelAssociative.66bba464260aa7f05b7d04dbc450de68.css
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 66bba464260aa7f05b7d04dbc450de68
69844ef97f320bbb618efcb1c16e505bc610d3fb
c8408be766a996c9cd1f37622e2f25cedb7d5d44cadb3191043119ea03d148ca
GET /modules/ibu/online-home/hotelAssociative.66bba464260aa7f05b7d04dbc450de68.css HTTP/1.1
Host: aw-s.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css
content-length: 45789
age: 492954
server: nginx/1.20.1
date: Tue, 28 Nov 2023 20:31:26 GMT
x-ares-server: r100013666-21038164-2jxpg@FRA-AWS
timing-allow-origin: *
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aws
x-ares-request-id: EDQPVF52R8FD8BG1
etag: W/"66bba464260aa7f05b7d04dbc450de68"
last-modified: Tue, 19 Sep 2023 09:16:10 GMT
cache-control: max-age=5184000
expires: Tue, 19 Dec 2023 06:33:11 GMT
content-encoding: gzip
x-varnish: 52900592 27412020
via: 1.1 varnish (Varnish/6.5), 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: ZcxV6ZdpgAUVnauIP4gCuYaCBgS_OdoG1l6evK8vklwJiwZjsms3ug==
ic.trip.com/captcha/risk_inspect?callback=captcha06669156932866867&extend_param=2V6x7pDkvcrysIz84iab1iKtvBOQwgxW0uvOyJIl51NdP6dBCXpRvmziwdjmlNpLERKh2tM4O3Wg%2B%2BPeOKIWoc9BOpbxiAjsj%2F5rPwSwLHU%3D&appid=100013806&business_site=ibu_apploadsms_online&version=1.0.5&dimensions=NzIjzPHCZM11ArJ3rsSmFAiWL5qDhZwf83Zjw9cnU1JJZjLcX%2F0EwmayvNYLy8BdaVAwHQ%2BkrTVgyN0uOK2zYbSl0RlAexlv8QS0wyu4ZOTjrmy5X%2Fe0JHrLedp8keTxjuCX5MKP3WOaW458kPKPkZLE89yhI5HlIcUQLftRVh%2FD%2Bnggxs6Ys8MifS%2FjqO3W5t8QDmM0ddx0TKOF%2Bhbv8vQRrjW5S2%2FC7E7glR571mGQKC%2BuWxjROjV49JwmRW6MHCCiW%2B4yurLxbJEFzWOdjKKWgDW7iEQLaznsou1GiRqhJjy220rq957pn24qGUKgO8QNrDLvagpxt7NubXcUrt3ONuRU0trt%2BGXNrOD8ZCGbL19BRyhwhbrLQdMhE1EHA%2BS%2FXqLMCb%2Fow4A5Pboms6Mg9x5W4eYYOtRfq%2F9oSM8tM6l58cHLqfrWvu46EqRwI0sxcvn9Yqk3Y7VTmwbJUQ3htg7kgQZYACDDMYa3qrY0QJTv6MZF4DtF7JXtmEoRU2lny3UKT0fKLxLjPfOmwlBbUxhhRDfQ9HNWzDomyafcr0AQDbAF1wHJ0nurznRKwjvwq2EMLITlvgReAMHiW6yxZhg%2FWci6B6D6qsz7J8AMSu7s5qJlRqLICMN5cYvqt0TRwKDZ7%2FYgEqJK1fdw2TKndPssvZ%2FATcELgiKVxOrr27tgfLVxBgWcIO3qm3GgfUo%2BJt8sTKQxhj2sv49k1pBqoBngl13CezQLOLFH0Ah6Tnts2tQE2X2V2k%2Fm%2FT%2B14J6Auj7r2NVTsN9B3Y8fAvJ%2FiVMN0lcAB6E9okYL2NeS5OnzyV7RSLICSg2s%2FzU254ocIcrSwqOqCVYQ2iDszeq5Gr%2BRrYwxR09hNtzwtgzZBgYfLokRi8Szxu5Y9nDxbiVrBekEGI9ykshijOF22BX%2BPR3AqZ7s9GtvgMPwDTiDT6AnPfymFYM8aF7N9aEuDSFNOtk4ZFDbMk9Lwo%2BUlpxXtOOLmf6b2W3nnnldtymu2nrn%2Fi08WRgFwu8cLsmD2WsqIvidfNzWXI%2BtmRnTg1tqeih3fzdzuOevvOJHE%2FUx8sNJdr3ilUjCY5vLZ14BHFNxyhIS97%2BpcgUgXrT%2BY%2FntnxDZcvRyWwKFCsZaVTj8n%2FSn6K2Iues1bbmBKG%2F%2BvLcbLal7bPXBcUSvRhlkRAEl8KznYPxUbBwFXMHQldA%3D&sign=a00fb691d3fdd743d5ed7b79876ad074
200 OK 961 B URL GET HTTP/3 ic.trip.com/captcha/risk_inspect?callback=captcha06669156932866867&extend_param=2V6x7pDkvcrysIz84iab1iKtvBOQwgxW0uvOyJIl51NdP6dBCXpRvmziwdjmlNpLERKh2tM4O3Wg%2B%2BPeOKIWoc9BOpbxiAjsj%2F5rPwSwLHU%3D&appid=100013806&business_site=ibu_apploadsms_online&version=1.0.5&dimensions=NzIjzPHCZM11ArJ3rsSmFAiWL5qDhZwf83Zjw9cnU1JJZjLcX%2F0EwmayvNYLy8BdaVAwHQ%2BkrTVgyN0uOK2zYbSl0RlAexlv8QS0wyu4ZOTjrmy5X%2Fe0JHrLedp8keTxjuCX5MKP3WOaW458kPKPkZLE89yhI5HlIcUQLftRVh%2FD%2Bnggxs6Ys8MifS%2FjqO3W5t8QDmM0ddx0TKOF%2Bhbv8vQRrjW5S2%2FC7E7glR571mGQKC%2BuWxjROjV49JwmRW6MHCCiW%2B4yurLxbJEFzWOdjKKWgDW7iEQLaznsou1GiRqhJjy220rq957pn24qGUKgO8QNrDLvagpxt7NubXcUrt3ONuRU0trt%2BGXNrOD8ZCGbL19BRyhwhbrLQdMhE1EHA%2BS%2FXqLMCb%2Fow4A5Pboms6Mg9x5W4eYYOtRfq%2F9oSM8tM6l58cHLqfrWvu46EqRwI0sxcvn9Yqk3Y7VTmwbJUQ3htg7kgQZYACDDMYa3qrY0QJTv6MZF4DtF7JXtmEoRU2lny3UKT0fKLxLjPfOmwlBbUxhhRDfQ9HNWzDomyafcr0AQDbAF1wHJ0nurznRKwjvwq2EMLITlvgReAMHiW6yxZhg%2FWci6B6D6qsz7J8AMSu7s5qJlRqLICMN5cYvqt0TRwKDZ7%2FYgEqJK1fdw2TKndPssvZ%2FATcELgiKVxOrr27tgfLVxBgWcIO3qm3GgfUo%2BJt8sTKQxhj2sv49k1pBqoBngl13CezQLOLFH0Ah6Tnts2tQE2X2V2k%2Fm%2FT%2B14J6Auj7r2NVTsN9B3Y8fAvJ%2FiVMN0lcAB6E9okYL2NeS5OnzyV7RSLICSg2s%2FzU254ocIcrSwqOqCVYQ2iDszeq5Gr%2BRrYwxR09hNtzwtgzZBgYfLokRi8Szxu5Y9nDxbiVrBekEGI9ykshijOF22BX%2BPR3AqZ7s9GtvgMPwDTiDT6AnPfymFYM8aF7N9aEuDSFNOtk4ZFDbMk9Lwo%2BUlpxXtOOLmf6b2W3nnnldtymu2nrn%2Fi08WRgFwu8cLsmD2WsqIvidfNzWXI%2BtmRnTg1tqeih3fzdzuOevvOJHE%2FUx8sNJdr3ilUjCY5vLZ14BHFNxyhIS97%2BpcgUgXrT%2BY%2FntnxDZcvRyWwKFCsZaVTj8n%2FSn6K2Iues1bbmBKG%2F%2BvLcbLal7bPXBcUSvRhlkRAEl8KznYPxUbBwFXMHQldA%3D&sign=a00fb691d3fdd743d5ed7b79876ad074
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type ASCII text, with very long lines (1077), with no line terminators
Hash 4a52a6b34d19cd14514ff8d783fd1fa5
5b545c112d050e8238b89dccfa195c184e6328c9
b8f79e045323e4f97b402ee045b61391aa5ee0f95e22b5f308107b716448a3b5
GET /captcha/risk_inspect?callback=captcha06669156932866867&extend_param=2V6x7pDkvcrysIz84iab1iKtvBOQwgxW0uvOyJIl51NdP6dBCXpRvmziwdjmlNpLERKh2tM4O3Wg%2B%2BPeOKIWoc9BOpbxiAjsj%2F5rPwSwLHU%3D&appid=100013806&business_site=ibu_apploadsms_online&version=1.0.5&dimensions=NzIjzPHCZM11ArJ3rsSmFAiWL5qDhZwf83Zjw9cnU1JJZjLcX%2F0EwmayvNYLy8BdaVAwHQ%2BkrTVgyN0uOK2zYbSl0RlAexlv8QS0wyu4ZOTjrmy5X%2Fe0JHrLedp8keTxjuCX5MKP3WOaW458kPKPkZLE89yhI5HlIcUQLftRVh%2FD%2Bnggxs6Ys8MifS%2FjqO3W5t8QDmM0ddx0TKOF%2Bhbv8vQRrjW5S2%2FC7E7glR571mGQKC%2BuWxjROjV49JwmRW6MHCCiW%2B4yurLxbJEFzWOdjKKWgDW7iEQLaznsou1GiRqhJjy220rq957pn24qGUKgO8QNrDLvagpxt7NubXcUrt3ONuRU0trt%2BGXNrOD8ZCGbL19BRyhwhbrLQdMhE1EHA%2BS%2FXqLMCb%2Fow4A5Pboms6Mg9x5W4eYYOtRfq%2F9oSM8tM6l58cHLqfrWvu46EqRwI0sxcvn9Yqk3Y7VTmwbJUQ3htg7kgQZYACDDMYa3qrY0QJTv6MZF4DtF7JXtmEoRU2lny3UKT0fKLxLjPfOmwlBbUxhhRDfQ9HNWzDomyafcr0AQDbAF1wHJ0nurznRKwjvwq2EMLITlvgReAMHiW6yxZhg%2FWci6B6D6qsz7J8AMSu7s5qJlRqLICMN5cYvqt0TRwKDZ7%2FYgEqJK1fdw2TKndPssvZ%2FATcELgiKVxOrr27tgfLVxBgWcIO3qm3GgfUo%2BJt8sTKQxhj2sv49k1pBqoBngl13CezQLOLFH0Ah6Tnts2tQE2X2V2k%2Fm%2FT%2B14J6Auj7r2NVTsN9B3Y8fAvJ%2FiVMN0lcAB6E9okYL2NeS5OnzyV7RSLICSg2s%2FzU254ocIcrSwqOqCVYQ2iDszeq5Gr%2BRrYwxR09hNtzwtgzZBgYfLokRi8Szxu5Y9nDxbiVrBekEGI9ykshijOF22BX%2BPR3AqZ7s9GtvgMPwDTiDT6AnPfymFYM8aF7N9aEuDSFNOtk4ZFDbMk9Lwo%2BUlpxXtOOLmf6b2W3nnnldtymu2nrn%2Fi08WRgFwu8cLsmD2WsqIvidfNzWXI%2BtmRnTg1tqeih3fzdzuOevvOJHE%2FUx8sNJdr3ilUjCY5vLZ14BHFNxyhIS97%2BpcgUgXrT%2BY%2FntnxDZcvRyWwKFCsZaVTj8n%2FSn6K2Iues1bbmBKG%2F%2BvLcbLal7bPXBcUSvRhlkRAEl8KznYPxUbBwFXMHQldA%3D&sign=a00fb691d3fdd743d5ed7b79876ad074 HTTP/1.1
Host: ic.trip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Cookie: UBT_VID=1701696438140.f76e6TctnaRh; kafka_result={"isDirectVisit":"1","hasUrlLocale":"1","hasCookieLocale":"0","isUrlCookieSame":"0","isJump":"0","jumpType":"targetLocale","platform":"online","vid":"1701696438140.f76e6TctnaRh"}; ibu_online_home_language_match={"isRedirect":false,"isShowSuggestion":true,"lastVisited":true,"region":"no","redirectSymbol":false,"site_url":["us.trip.com"],"suggestion":[]}; ibulanguage=EN; ibulocale=en_us; cookiePricesDisplayed=USD; _abtest_userid=77c3b86c-476f-4ca5-8c73-e743bcffbe04; _gcl_au=1.1.2020697670.1701696447; _bfa=1.1701696438140.f76e6TctnaRh.1.1701696445418.1701696448164.1.1.10320668088; _ga_X437DZ73MR=GS1.1.1701696448.1.0.1701696448.0.0.0; _ga=GA1.1.198944287.1701696449
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/json;charset=UTF-8
alt-svc: h3=":443"; ma=86400
timing-allow-origin: *
server: nginx/1.20.1
date: Mon, 04 Dec 2023 13:27:24 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, POST, DELETE, PUT, PATCH, OPTIONS
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept,Cache-Control
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: KL_19H1ynnPUpikSbKUy0qIREty2rG_VS6Q0YQ6JtdxQtkk5UVmPtA==
aw-s.tripcdn.com/modules/ibu/online-home/onlineSecondEntry.3b6aa1aae2a8cb0854802a0e5c62b490.js
200 OK 232 kB URL GET HTTP/3 aw-s.tripcdn.com/modules/ibu/online-home/onlineSecondEntry.3b6aa1aae2a8cb0854802a0e5c62b490.js
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 232 kB (231517 bytes)
Hash 3b6aa1aae2a8cb0854802a0e5c62b490
5bc8ade21613d6a0f1790df3e0c6062dd27c4687
9197d279fc04fe43b34ac57235fc7c4f42a340c26956d110daacf70a7d120da5
GET /modules/ibu/online-home/onlineSecondEntry.3b6aa1aae2a8cb0854802a0e5c62b490.js HTTP/1.1
Host: aw-s.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript
alt-svc: h3=":443"; ma=86400
age: 606649
server: nginx/1.20.1
date: Mon, 27 Nov 2023 12:56:31 GMT
x-ares-server: r100013666-21038164-8986x@FRA-AWS
timing-allow-origin: *
access-control-allow-origin: https://us.trip.com
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aws
x-ares-request-id: 3MQ4Z2P1NF52PRAJ
etag: W/"3b6aa1aae2a8cb0854802a0e5c62b490"
last-modified: Mon, 27 Nov 2023 12:45:28 GMT
cache-control: max-age=5184000
expires: Fri, 26 Jan 2024 12:56:31 GMT
content-encoding: gzip
x-varnish: 51565131
via: 1.1 varnish (Varnish/6.5), 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: RWvKDZBRAl-_sL5zZXRF2GCCX83THfliqpyyb7mlKTmcfO5qPOv_zw==
ic.trip.com/captcha/risk_inspect?callback=captcha040169695143164263&extend_param=2V6x7pDkvcrysIz84iab1iKtvBOQwgxW0uvOyJIl51NdP6dBCXpRvmziwdjmlNpLERKh2tM4O3Wg%2B%2BPeOKIWoc9BOpbxiAjsj%2F5rPwSwLHU%3D&appid=100013806&business_site=ibu_apploadsms_online&version=1.0.5&dimensions=NzIjzPHCZM11ArJ3rsSmFAiWL5qDhZwf83Zjw9cnU1JJZjLcX%2F0EwmayvNYLy8BdaVAwHQ%2BkrTVgyN0uOK2zYbSl0RlAexlv8QS0wyu4ZOTjrmy5X%2Fe0JHrLedp8keTxjuCX5MKP3WOaW458kPKPkZLE89yhI5HlIcUQLftRVh%2FD%2Bnggxs6Ys8MifS%2FjqO3W5t8QDmM0ddx0TKOF%2Bhbv8vQRrjW5S2%2FC7E7glR571mGQKC%2BuWxjROjV49JwmRW6MHCCiW%2B4yurLxbJEFzWOdjKKWgDW7iEQLaznsou1GiRqhJjy220rq957pn24qGUKgO8QNrDLvagpxt7NubXcUrt3ONuRU0trt%2BGXNrOD8ZCGbL19BRyhwhbrLQdMhE1EHA%2BS%2FXqLMCb%2Fow4A5Pboms6Mg9x5W4eYYOtRfq%2F9oSM8tM6l58cHLqfrWvu46EqRwI0sxcvn9Yqk3Y7VTmwbJUQ3htg7kgQZYACDDMYa3qrY0QJTv6MZF4DtF7JXtmEoRU2lny3UKT0fKLxLjPfOmwlBbUxhhRDfQ9HNWzDomyafcr0AQDbAF1wHJ0nurznRKwjvwq2EMLITlvgReAMHiW6yxZhg%2FWci6B6D6qsz7J8AMSu7s5qJlRqLICMN5cYvqt0TRwKDZ7%2FYgEqJK1fdw2TKndPssvZ%2FATcELgiKVxOrr27tgfLVxBgWcIO3qm3GgfUo%2BJt8sTKQxhj2sv49k1pBqoBngl13CezQLOLFH0Ah6Tnts2tQE2X2V2k%2Fm%2FT%2B14J6Auj7r2NVTsN9B3Y8fAvJ%2FiVMN0lcAB6E9okYL2NeS5OnzyV7RSLICSg2s%2FzU254ocIcrSwqOqCVYQ2iDszeq5Gr%2BRrYwxR09hNtzwtgzZBgYfLokRi8Szxu5Y9nDxbiVrBekEGI9ykshijOF22BX%2BPR3AqZ7s9GtvgMPwDTiDT6AnPfymFYM8aF7N9aEuJ%2BSHavQRjlZ6eG%2B3bMnQP3kNs8zF5a%2BL%2FEqR00R5L7LUpshOo25yMRbZUd%2B%2F5juT3TaJnKY%2BWs9qCAkAtj%2BSrXUDY0hLC2DH74stoxFbZvxd1Ipu%2BdvMU%2B%2F12R2KnGmytwYSmq%2Fo%2Fays2tDK23urmMSHawGh6bgmYoULiePRpSDUdfbN7LS7tt7iL6N2ttlqmeCsusHNeKVsm%2BraXxJP4sRJb8%2BefM8bhfYrAy8rZKs%3D&sign=a4e29b54bbac10d38c1f8944706f4404
200 OK 962 B URL GET HTTP/3 ic.trip.com/captcha/risk_inspect?callback=captcha040169695143164263&extend_param=2V6x7pDkvcrysIz84iab1iKtvBOQwgxW0uvOyJIl51NdP6dBCXpRvmziwdjmlNpLERKh2tM4O3Wg%2B%2BPeOKIWoc9BOpbxiAjsj%2F5rPwSwLHU%3D&appid=100013806&business_site=ibu_apploadsms_online&version=1.0.5&dimensions=NzIjzPHCZM11ArJ3rsSmFAiWL5qDhZwf83Zjw9cnU1JJZjLcX%2F0EwmayvNYLy8BdaVAwHQ%2BkrTVgyN0uOK2zYbSl0RlAexlv8QS0wyu4ZOTjrmy5X%2Fe0JHrLedp8keTxjuCX5MKP3WOaW458kPKPkZLE89yhI5HlIcUQLftRVh%2FD%2Bnggxs6Ys8MifS%2FjqO3W5t8QDmM0ddx0TKOF%2Bhbv8vQRrjW5S2%2FC7E7glR571mGQKC%2BuWxjROjV49JwmRW6MHCCiW%2B4yurLxbJEFzWOdjKKWgDW7iEQLaznsou1GiRqhJjy220rq957pn24qGUKgO8QNrDLvagpxt7NubXcUrt3ONuRU0trt%2BGXNrOD8ZCGbL19BRyhwhbrLQdMhE1EHA%2BS%2FXqLMCb%2Fow4A5Pboms6Mg9x5W4eYYOtRfq%2F9oSM8tM6l58cHLqfrWvu46EqRwI0sxcvn9Yqk3Y7VTmwbJUQ3htg7kgQZYACDDMYa3qrY0QJTv6MZF4DtF7JXtmEoRU2lny3UKT0fKLxLjPfOmwlBbUxhhRDfQ9HNWzDomyafcr0AQDbAF1wHJ0nurznRKwjvwq2EMLITlvgReAMHiW6yxZhg%2FWci6B6D6qsz7J8AMSu7s5qJlRqLICMN5cYvqt0TRwKDZ7%2FYgEqJK1fdw2TKndPssvZ%2FATcELgiKVxOrr27tgfLVxBgWcIO3qm3GgfUo%2BJt8sTKQxhj2sv49k1pBqoBngl13CezQLOLFH0Ah6Tnts2tQE2X2V2k%2Fm%2FT%2B14J6Auj7r2NVTsN9B3Y8fAvJ%2FiVMN0lcAB6E9okYL2NeS5OnzyV7RSLICSg2s%2FzU254ocIcrSwqOqCVYQ2iDszeq5Gr%2BRrYwxR09hNtzwtgzZBgYfLokRi8Szxu5Y9nDxbiVrBekEGI9ykshijOF22BX%2BPR3AqZ7s9GtvgMPwDTiDT6AnPfymFYM8aF7N9aEuJ%2BSHavQRjlZ6eG%2B3bMnQP3kNs8zF5a%2BL%2FEqR00R5L7LUpshOo25yMRbZUd%2B%2F5juT3TaJnKY%2BWs9qCAkAtj%2BSrXUDY0hLC2DH74stoxFbZvxd1Ipu%2BdvMU%2B%2F12R2KnGmytwYSmq%2Fo%2Fays2tDK23urmMSHawGh6bgmYoULiePRpSDUdfbN7LS7tt7iL6N2ttlqmeCsusHNeKVsm%2BraXxJP4sRJb8%2BefM8bhfYrAy8rZKs%3D&sign=a4e29b54bbac10d38c1f8944706f4404
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type ASCII text, with very long lines (1078), with no line terminators
Hash c23222f97d0b933536051be59d4b71b1
67132d5c1f05980d5d63fd9b56b2a4f8fda0cfb9
ab888fda4df13455321359216318afb02224e866cf1e2605c5c9c142a187cf93
GET /captcha/risk_inspect?callback=captcha040169695143164263&extend_param=2V6x7pDkvcrysIz84iab1iKtvBOQwgxW0uvOyJIl51NdP6dBCXpRvmziwdjmlNpLERKh2tM4O3Wg%2B%2BPeOKIWoc9BOpbxiAjsj%2F5rPwSwLHU%3D&appid=100013806&business_site=ibu_apploadsms_online&version=1.0.5&dimensions=NzIjzPHCZM11ArJ3rsSmFAiWL5qDhZwf83Zjw9cnU1JJZjLcX%2F0EwmayvNYLy8BdaVAwHQ%2BkrTVgyN0uOK2zYbSl0RlAexlv8QS0wyu4ZOTjrmy5X%2Fe0JHrLedp8keTxjuCX5MKP3WOaW458kPKPkZLE89yhI5HlIcUQLftRVh%2FD%2Bnggxs6Ys8MifS%2FjqO3W5t8QDmM0ddx0TKOF%2Bhbv8vQRrjW5S2%2FC7E7glR571mGQKC%2BuWxjROjV49JwmRW6MHCCiW%2B4yurLxbJEFzWOdjKKWgDW7iEQLaznsou1GiRqhJjy220rq957pn24qGUKgO8QNrDLvagpxt7NubXcUrt3ONuRU0trt%2BGXNrOD8ZCGbL19BRyhwhbrLQdMhE1EHA%2BS%2FXqLMCb%2Fow4A5Pboms6Mg9x5W4eYYOtRfq%2F9oSM8tM6l58cHLqfrWvu46EqRwI0sxcvn9Yqk3Y7VTmwbJUQ3htg7kgQZYACDDMYa3qrY0QJTv6MZF4DtF7JXtmEoRU2lny3UKT0fKLxLjPfOmwlBbUxhhRDfQ9HNWzDomyafcr0AQDbAF1wHJ0nurznRKwjvwq2EMLITlvgReAMHiW6yxZhg%2FWci6B6D6qsz7J8AMSu7s5qJlRqLICMN5cYvqt0TRwKDZ7%2FYgEqJK1fdw2TKndPssvZ%2FATcELgiKVxOrr27tgfLVxBgWcIO3qm3GgfUo%2BJt8sTKQxhj2sv49k1pBqoBngl13CezQLOLFH0Ah6Tnts2tQE2X2V2k%2Fm%2FT%2B14J6Auj7r2NVTsN9B3Y8fAvJ%2FiVMN0lcAB6E9okYL2NeS5OnzyV7RSLICSg2s%2FzU254ocIcrSwqOqCVYQ2iDszeq5Gr%2BRrYwxR09hNtzwtgzZBgYfLokRi8Szxu5Y9nDxbiVrBekEGI9ykshijOF22BX%2BPR3AqZ7s9GtvgMPwDTiDT6AnPfymFYM8aF7N9aEuJ%2BSHavQRjlZ6eG%2B3bMnQP3kNs8zF5a%2BL%2FEqR00R5L7LUpshOo25yMRbZUd%2B%2F5juT3TaJnKY%2BWs9qCAkAtj%2BSrXUDY0hLC2DH74stoxFbZvxd1Ipu%2BdvMU%2B%2F12R2KnGmytwYSmq%2Fo%2Fays2tDK23urmMSHawGh6bgmYoULiePRpSDUdfbN7LS7tt7iL6N2ttlqmeCsusHNeKVsm%2BraXxJP4sRJb8%2BefM8bhfYrAy8rZKs%3D&sign=a4e29b54bbac10d38c1f8944706f4404 HTTP/1.1
Host: ic.trip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Cookie: UBT_VID=1701696438140.f76e6TctnaRh; kafka_result={"isDirectVisit":"1","hasUrlLocale":"1","hasCookieLocale":"0","isUrlCookieSame":"0","isJump":"0","jumpType":"targetLocale","platform":"online","vid":"1701696438140.f76e6TctnaRh"}; ibu_online_home_language_match={"isRedirect":false,"isShowSuggestion":true,"lastVisited":true,"region":"no","redirectSymbol":false,"site_url":["us.trip.com"],"suggestion":[]}; ibulanguage=EN; ibulocale=en_us; cookiePricesDisplayed=USD; _abtest_userid=77c3b86c-476f-4ca5-8c73-e743bcffbe04; _gcl_au=1.1.2020697670.1701696447; _bfa=1.1701696438140.f76e6TctnaRh.1.1701696445418.1701696448164.1.1.10320668088; _ga_X437DZ73MR=GS1.1.1701696448.1.0.1701696448.0.0.0; _ga=GA1.1.198944287.1701696449
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/json;charset=UTF-8
alt-svc: h3=":443"; ma=86400
timing-allow-origin: *
server: nginx/1.20.1
date: Mon, 04 Dec 2023 13:27:24 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, POST, DELETE, PUT, PATCH, OPTIONS
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept,Cache-Control
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: fvR3c4GLbY0yNKMKF8JGOCAcCnCyEQ0ndkKswTIzgYHh_irfqhxIwg==
webresource.tripcdn.com/ares2/ibu/trip-component-platform/1.0.48/default/components/web-vitals-metric-0.0.14/index.js
200 OK 38 kB URL GET HTTP/3 webresource.tripcdn.com/ares2/ibu/trip-component-platform/1.0.48/default/components/web-vitals-metric-0.0.14/index.js
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type ASCII text, with very long lines (37512), with no line terminators
Hash c4b9e3eb3813fc5f37627e7a9e215740
c6d1b45c0aa8f47fb1391de48b8aa1bee0e177e7
b8f39517493740ea096761cf0b5dcbfa5151bad1fc12a81411717651b990b064
GET /ares2/ibu/trip-component-platform/1.0.48/default/components/web-vitals-metric-0.0.14/index.js HTTP/1.1
Host: webresource.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript
alt-svc: h3=":443"; ma=86400
age: 2782874
date: Thu, 02 Nov 2023 08:26:07 GMT
x-ares-server: r100013666-21027498-bcw62@SHARB
timing-allow-origin: *
access-control-allow-origin: *
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aliyun
x-ares-request-id: 65435D1F2CA0F93838027551
etag: W/"c4b9e3eb3813fc5f37627e7a9e215740"
last-modified: Mon, 07 Aug 2023 11:46:43 GMT
cache-control: max-age=5184000
expires: Mon, 01 Jan 2024 08:26:07 GMT
content-encoding: gzip
x-varnish: 943925217
via: 1.1 varnish (Varnish/6.5), 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-device: U R Android
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: CclgtX6w_ASad2JAjbU9ifpjD48jgn_bk70GC6TjL2MkYsVfu8YEoQ==
us.trip.com/restapi/soa2/22015/getSceneConfig
200 OK 4.3 kB URL POST HTTP/3 us.trip.com/restapi/soa2/22015/getSceneConfig
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type troff or preprocessor input, Unicode text, UTF-8 text, with very long lines (4572), with no line terminators
Hash 16a15a37d0fb88c47ced42c225286246
c6eedb8eaeb991b23682991e19c55838165139d6
da7da68d17f2db3f6ad6a64d2434652a5ab6a2514a0bed7594a6c7d8cd6e3379
POST /restapi/soa2/22015/getSceneConfig HTTP/1.1
Host: us.trip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 193
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/?locale=en-us
Cookie: UBT_VID=1701696438140.f76e6TctnaRh; kafka_result={"isDirectVisit":"1","hasUrlLocale":"1","hasCookieLocale":"0","isUrlCookieSame":"0","isJump":"0","jumpType":"targetLocale","platform":"online","vid":"1701696438140.f76e6TctnaRh"}; ibu_online_home_language_match={"isRedirect":false,"isShowSuggestion":true,"lastVisited":true,"region":"no","redirectSymbol":false,"site_url":["us.trip.com"],"suggestion":[]}; ibulanguage=EN; ibulocale=en_us; cookiePricesDisplayed=USD; _abtest_userid=77c3b86c-476f-4ca5-8c73-e743bcffbe04; _tp_search_latest_channel_name=hotels; _gcl_au=1.1.2020697670.1701696447; _fwb=254FjNz9nuUbqsIQWYSUhsh.1701696447115; NA_SAC=dT1odHRwcyUzQSUyRiUyRnVzLnRyaXAuY29tJTJGJTNGbG9jYWxlJTNEZW4tdXN8cj0=; wcs_bt=s_33fb334966e9:1701696447
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/json;charset=UTF-8
alt-svc: h3=":443"; ma=86400
timing-allow-origin: *
server: nginx/1.20.1
date: Mon, 04 Dec 2023 13:27:22 GMT
clogging_trace_id: 1287650334538533454
rootmessageid: 100025527-0a817ec0-472693-2555424
servermessageid: 100025527-0a71b620-472693-894902
content-encoding: gzip
vary: Accept-Encoding
x-gate-root-id: 100025527-0a817ec0-472693-2555424
x-gate-region: SHAXY
x-service-call: 0.075
access-control-expose-headers: RootMessageId, x-service-call, x-gate-region
x-gate: ctrip-gate
x-originating-url: https://us.trip.com/restapi/soa2/22015/getSceneConfig
access-control-allow-origin: https://us.trip.com
access-control-allow-credentials: true
x-trip-region: sg, de
content-security-policy-report-only: default-src * data: blob:; connect-src https://*.tripcdn.com *.c-ctrip.com https://*.trip.com https://*.ctrip.com https://*.doubleclick.net https://*.google.com https://*.tiktok.com https://*.bing.com https://*.mapbox.com https://*.skyscanner.net https://*.tripcdn.cn https://*.google-analytics.com https://*.braze.com https://*.yandex.ru https://*.googleapis.com https://*.facebook.com https://*.googletagmanager.com https://*.gstatic.com https://wcs.naver.com https://wcs.naver.net https://connect.facebook.net https://cdn.2trk.info https://b98.yahoo.co.jp https://widget.trustpilot.com https://s.yimg.jp https://altopd.com wss://im.trip.com;script-src 'unsafe-eval' 'unsafe-inline' https://*.naver.net https://*.trip.com https://*.tripcdn.com https://*.tripcdn.cn https://*.c-ctrip.com https://*.google.com https://*.doubleclick.net https://*.googletagmanager.com https://*.google-analytics.com https://unpkg.com https://altopd.com https://*.tiktok.com https://*.facebook.net https://*.bing.com https://*.googleapis.com https://*.yahoo.co.jp https://*.2trk.info https://*.yimg.jp https://*.trustpilot.com https://appx-t2 https://*.skyscanner.net https://*.alipayobjects.com https://*.rakuten.com https://*.qunarzz.com https://*.googleadservices.com https://*.yandex.ru https://*.qq.com https://*.ctrip.com https://*.innity.net https://*.ucweb.com https://*.baidu.com https://*.googlesyndication.com https://*.jsdelivr.net https://*.tripcdn.com https://hublosk.com https://*.yimg.com https://boxclone.com https://*.hotjar.com https://*.google.ae https://*.valuecommerce.com https://*.google.de https://jullyambery.net https://*.innity.com https://appx https://*.criteo.com https://*.apaylater.com https://*.maynhtml.com https://*.google.com.my https://*.google.com.hk https://*.mapbox.com blob:; style-src 'unsafe-inline' https://*.tripcdn.com https://*.trip.com https://*.tripcdn.cn https://*.google.com https://*.googleapis.com https://*.fontawesome.com https://*.honey.io https://*.gstatic.com https://*.c-ctrip.com https://*.cloudflare.com data: ; child-src 'self' https://*.ctripcorp.com https://*.invol.co https://*.googlesyndication.com https://*.google.com https://*.trustpilot.com https://*.facebook.com https://*.lcmark.net https://*.ubpixel.com https://*.altopd.com https://*.youtube.com https://*.2trk.info https://*.2trck.pro https://*.doubleclick.net https://*.kakao.com https://*.dotomi.com https://*.tkqlhce.com https://*.criteo.com https://*.infobip.com https://*.ucweb.com https://*.moontrkr.com https://*.matterport.com https://*.trckqq.com https://*.trip.com https://altopd.com https://invol.co https://stvkr.com https://redirtrack.tech https://noop.style https://*.admitad.com https://*.kittyswell.one https://*.keloogux.world https://childrenshoppingguide.com https://*.youtube-nocookie.com https://*.factoryhotsales.shop https://*.skillmatrix.live https://shoppingderby.com blob:; object-src https://*.trip.com; report-uri https://www.trip.com/security/csp-report; report-to /security/csp-report;
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: JYiSG98aF90hJ-fIAfV3pw_MdwBg_gXL6oxyF2tfTcV6q-OXqPKVrQ==
us.trip.com/restapi/soa2/19816/bjjson/queryAdsDisplayData?x-traceID=1618891846-1701696445539-1000235255
200 OK 352 B URL POST HTTP/3 us.trip.com/restapi/soa2/19816/bjjson/queryAdsDisplayData?x-traceID=1618891846-1701696445539-1000235255
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type troff or preprocessor input, ASCII text, with very long lines (396), with no line terminators
Hash 783b7efced0105f4b7945e400f18db06
d9074795078372b412a42489fa0bbcd1fd884d5c
d0ac53ca15d9d442246b554cb9b5efa5ab70f412a3583e088e9138e01068f87f
POST /restapi/soa2/19816/bjjson/queryAdsDisplayData?x-traceID=1618891846-1701696445539-1000235255 HTTP/1.1
Host: us.trip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
locale: en-US
currency: USD
x-traceID: 1618891846-1701696445539-1000235255
trip-trace-id: 1618891846-1701696445539-1000235255
Content-Type: application/json
Content-Length: 196
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/?locale=en-us
Cookie: UBT_VID=1701696438140.f76e6TctnaRh; kafka_result={"isDirectVisit":"1","hasUrlLocale":"1","hasCookieLocale":"0","isUrlCookieSame":"0","isJump":"0","jumpType":"targetLocale","platform":"online","vid":"1701696438140.f76e6TctnaRh"}; ibu_online_home_language_match={"isRedirect":false,"isShowSuggestion":true,"lastVisited":true,"region":"no","redirectSymbol":false,"site_url":["us.trip.com"],"suggestion":[]}; ibulanguage=EN; ibulocale=en_us; cookiePricesDisplayed=USD; _abtest_userid=77c3b86c-476f-4ca5-8c73-e743bcffbe04
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/json;charset=UTF-8
alt-svc: h3=":443"; ma=86400
timing-allow-origin: *
server: nginx/1.20.1
date: Mon, 04 Dec 2023 13:27:20 GMT
clogging_trace_id: 7791802902048720198
rootmessageid: 100025527-0a0e2e70-472693-300247
servermessageid: 100025527-0a70c3da-472693-893351
content-encoding: gzip
vary: accept-encoding
x-gate-root-id: 100025527-0a0e2e70-472693-300247
x-gate-region: SHAXY
x-service-call: 0.227
access-control-expose-headers: RootMessageId, x-service-call, x-gate-region
x-gate: ctrip-gate
x-originating-url: https://us.trip.com/restapi/soa2/19816/bjjson/queryAdsDisplayData?x-traceID=1618891846-1701696445539-1000235255
access-control-allow-origin: https://us.trip.com
access-control-allow-credentials: true
x-trip-region: de
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: BEeykOfoaafxfy9y80ekC-gqrHgW92Aam-IBcy8HkfGH7T77yB92-A==
aw-s.tripcdn.com/modules/ibu/online-home/aidSid.1e8d88aa2054ee5529a7254fa0a90785.js
200 OK 41 kB URL GET HTTP/3 aw-s.tripcdn.com/modules/ibu/online-home/aidSid.1e8d88aa2054ee5529a7254fa0a90785.js
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type ASCII text, with very long lines (40572), with no line terminators
Hash 1e8d88aa2054ee5529a7254fa0a90785
cee55a3acd49fcb531ae64441d996263509d6aaa
58189b1e3a90f9c1f50b86ad7186ae86b015125ad41fe7d888a50d7175baa7d2
GET /modules/ibu/online-home/aidSid.1e8d88aa2054ee5529a7254fa0a90785.js HTTP/1.1
Host: aw-s.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript
alt-svc: h3=":443"; ma=86400
age: 606722
server: nginx/1.20.1
date: Mon, 27 Nov 2023 12:55:18 GMT
x-ares-server: r100013666-21038164-fsr9l@FRA-AWS
timing-allow-origin: *
access-control-allow-origin: https://us.trip.com
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aws
x-ares-request-id: KRGV84QRGZHGK4NW
etag: W/"1e8d88aa2054ee5529a7254fa0a90785"
last-modified: Mon, 27 Nov 2023 12:44:41 GMT
cache-control: max-age=5184000
expires: Fri, 26 Jan 2024 12:55:18 GMT
content-encoding: gzip
x-varnish: 51102002
via: 1.1 varnish (Varnish/6.5), 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: pRCSCLFKweWzaQExcG0dbw5Rclvwy_c1wQPLpYbvdXUP0vWWM9SnBQ==
aw-s.tripcdn.com/modules/ibu/online-home/onlineLoginPopup.242495cd81b3439addbfbfa6e1e99c8a.js
200 OK 1.5 MB URL GET HTTP/3 aw-s.tripcdn.com/modules/ibu/online-home/onlineLoginPopup.242495cd81b3439addbfbfa6e1e99c8a.js
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
Size 1.5 MB (1468005 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /modules/ibu/online-home/onlineLoginPopup.242495cd81b3439addbfbfa6e1e99c8a.js HTTP/1.1
Host: aw-s.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript
alt-svc: h3=":443"; ma=86400
age: 606649
server: nginx/1.20.1
date: Mon, 27 Nov 2023 12:56:31 GMT
x-ares-server: r100013666-21038164-wf48r@FRA-AWS
timing-allow-origin: *
access-control-allow-origin: https://us.trip.com
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aws
x-ares-request-id: 3MQ4PQFV2PJK264W
etag: W/"242495cd81b3439addbfbfa6e1e99c8a"
last-modified: Mon, 27 Nov 2023 12:45:20 GMT
cache-control: max-age=5184000
expires: Fri, 26 Jan 2024 12:56:31 GMT
content-encoding: gzip
x-varnish: 52041937
via: 1.1 varnish (Varnish/6.5), 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: yFglhJ5Uyp9X8T-wFY35bLnOQBpwU44dNr8CI-EO1anD2qw9VquGyQ==
aw-s.tripcdn.com/modules/ibu/online-home/onlineLoginPopup.63c4b7a074ad00eb0dcc68edca02e930.css
200 OK 59 kB URL GET HTTP/3 aw-s.tripcdn.com/modules/ibu/online-home/onlineLoginPopup.63c4b7a074ad00eb0dcc68edca02e930.css
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /modules/ibu/online-home/onlineLoginPopup.63c4b7a074ad00eb0dcc68edca02e930.css HTTP/1.1
Host: aw-s.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css
content-length: 9864
age: 565297
server: nginx/1.20.1
date: Tue, 28 Nov 2023 00:25:43 GMT
x-ares-server: r100013666-21038164-r7gwc@FRA-AWS
timing-allow-origin: *
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aws
x-ares-request-id: P2YTJDBPNNSECEJN
etag: W/"63c4b7a074ad00eb0dcc68edca02e930"
last-modified: Thu, 19 Oct 2023 12:18:33 GMT
cache-control: max-age=5184000
expires: Fri, 19 Jan 2024 10:01:45 GMT
content-encoding: gzip
x-varnish: 52278305 48300357
via: 1.1 varnish (Varnish/6.5), 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: wDTh3qK5QyuUN3_L9areqJaob-PZVkrCZkon8Pq5S01YslKYFThjgw==
ak-d.tripcdn.com/images/100s0q000000gg1fs4B9F_C_550_412.jpg
200 OK 51 kB URL GET HTTP/3 ak-d.tripcdn.com/images/100s0q000000gg1fs4B9F_C_550_412.jpg
IP
ASN #20940 Akamai International B.V.
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerDigiCert Inc
Subject*.tripcdn.com
Fingerprint39:6D:BD:C3:37:CE:BB:D7:E0:9C:B9:5D:15:48:7D:02:6D:95:1D:6C
ValidityThu, 06 Apr 2023 00:00:00 GMT - Fri, 05 Apr 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 550x412, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash a3a1edd623e5843e6167932fba2eaa31
3d1fabd5123da1a61dea6e2e50918f68e1d5cdf3
698fff1eb275361e0baaf010b9c998d683b86ffb159bba63df86702938767a2c
GET /images/100s0q000000gg1fs4B9F_C_550_412.jpg HTTP/1.1
Host: ak-d.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: image/webp
content-length: 50814
access-control-allow-origin: *
etag: 198.git8693dbd.el7
last-modified: Mon, 07 Aug 2023 06:48:44 GMT
cache-control: max-age=6060534
expires: Mon, 12 Feb 2024 16:56:17 GMT
date: Mon, 04 Dec 2023 13:27:23 GMT
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
timing-allow-origin: *
aw-s.tripcdn.com/locale/v3/6001/en-US.js?etagc=77519d918af0607039db4b87609af23c
200 OK 3.8 kB URL GET HTTP/3 aw-s.tripcdn.com/locale/v3/6001/en-US.js?etagc=77519d918af0607039db4b87609af23c
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type Unicode text, UTF-8 text, with very long lines (4146), with no line terminators
Hash 6e8e2d46f3d11d1da9b0d97c9db7f6dd
8680ef4df14fce00d558222bb6990a0311382bae
cb4296efbb3494fd5c4da4f2e10a29f7dc8094e140bd5c1320f7129cdc226854
GET /locale/v3/6001/en-US.js?etagc=77519d918af0607039db4b87609af23c HTTP/1.1
Host: aw-s.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript
alt-svc: h3=":443"; ma=86400
age: 286094
server: nginx/1.20.1
date: Fri, 01 Dec 2023 05:59:06 GMT
x-ares-server: r100013666-21038164-qtsdx@FRA-AWS
timing-allow-origin: *
access-control-allow-origin: https://us.trip.com
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aws
x-ares-request-id: H12KYRRD94G8NQF2
etag: W/"77519d918af0607039db4b87609af23c"
last-modified: Mon, 24 Jul 2023 10:22:18 GMT
cache-control: max-age=5184000
expires: Tue, 30 Jan 2024 05:59:06 GMT
content-encoding: gzip
x-varnish: 54630258
via: 1.1 varnish (Varnish/6.5), 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: e8RHAeJKMfviDJye8dUxxOWgjy3QihqUYUfij6CB6Ic8tQSjqBEtmA==
www.googletagmanager.com/gtag/js?id=G-X437DZ73MR&l=dataLayer&cx=c
200 OK 286 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-X437DZ73MR&l=dataLayer&cx=c
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (16298)
Size 286 kB (286300 bytes)
Hash 14744c6975c83b844c4f3a77b75cc36f
7ebc934be61d5b1a5fb6f258ef6b902d83b09fc2
01ca70d1c9318e11ee3db579580049c09ef08215e4f148dfcc1eee4023f06f51
GET /gtag/js?id=G-X437DZ73MR&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 04 Dec 2023 13:27:21 GMT
expires: Mon, 04 Dec 2023 13:27:21 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 92268
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
aw-s.tripcdn.com/modules/ibu/online-home/f1996135283eafed3c4a246aef3b1f8b.f1996135283eafed3c4a246aef3b1f8b.png
200 OK 1.4 kB URL GET HTTP/3 aw-s.tripcdn.com/modules/ibu/online-home/f1996135283eafed3c4a246aef3b1f8b.f1996135283eafed3c4a246aef3b1f8b.png
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type PNG image data, 192 x 192, 8-bit colormap, non-interlaced\012- data
Hash f1996135283eafed3c4a246aef3b1f8b
989db2fca8fcc5aff0a941741b358ca48fb9e091
14e4fd070ef82ca70b577c3ec0c4b74740e6b658800c3b4cbc0a3f45913a4e2a
GET /modules/ibu/online-home/f1996135283eafed3c4a246aef3b1f8b.f1996135283eafed3c4a246aef3b1f8b.png HTTP/1.1
Host: aw-s.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aw-s.tripcdn.com/modules/ibu/online-home/onlineRecommendCars.1bf4103d79c8b7f7f65768862789bb38.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: image/png
content-length: 1406
age: 925897
server: nginx/1.20.1
date: Thu, 23 Nov 2023 20:15:45 GMT
x-ares-server: r100013666-21038164-7qv7x@FRA-AWS
timing-allow-origin: *
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aws
x-ares-request-id: XQKND2BAGA8T200A
etag: W/"f1996135283eafed3c4a246aef3b1f8b"
last-modified: Wed, 12 Oct 2022 02:52:14 GMT
cache-control: max-age=5184000
expires: Mon, 22 Jan 2024 20:15:45 GMT
x-varnish: 50266533
via: 1.1 varnish (Varnish/6.5), 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-device: U R Android
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: kJU2EtEJmaW6mdLXHlr0wzzwnIB8hWu5M32PPgx_bpf7YkqLEXTl5w==
us.trip.com/restapi/soa2/15353/bjjson/getNameAndSpeech?x-traceID=1806573857-1701696445431-1850760314
200 OK 461 B URL POST HTTP/3 us.trip.com/restapi/soa2/15353/bjjson/getNameAndSpeech?x-traceID=1806573857-1701696445431-1850760314
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type troff or preprocessor input, ASCII text, with very long lines (509), with no line terminators
Hash 8847b68efe431a74aef095171f179500
fda317c842665cff31e9eb61a43b771359a62ab5
aef9c8483c718d58c010232c2eb48621ebc6e799270a72dc251baa28e6821e74
POST /restapi/soa2/15353/bjjson/getNameAndSpeech?x-traceID=1806573857-1701696445431-1850760314 HTTP/1.1
Host: us.trip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
locale: en-US
currency: USD
x-traceID: 1806573857-1701696445431-1850760314
trip-trace-id: 1806573857-1701696445431-1850760314
Content-Type: application/json
Content-Length: 43
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/?locale=en-us
Cookie: UBT_VID=1701696438140.f76e6TctnaRh; kafka_result={"isDirectVisit":"1","hasUrlLocale":"1","hasCookieLocale":"0","isUrlCookieSame":"0","isJump":"0","jumpType":"targetLocale","platform":"online","vid":"1701696438140.f76e6TctnaRh"}; ibu_online_home_language_match={"isRedirect":false,"isShowSuggestion":true,"lastVisited":true,"region":"no","redirectSymbol":false,"site_url":["us.trip.com"],"suggestion":[]}; ibulanguage=EN; ibulocale=en_us; cookiePricesDisplayed=USD; _abtest_userid=77c3b86c-476f-4ca5-8c73-e743bcffbe04
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/json;charset=UTF-8
alt-svc: h3=":443"; ma=86400
timing-allow-origin: *
server: nginx/1.20.1
date: Mon, 04 Dec 2023 13:27:20 GMT
clogging_trace_id: 6485058593855100859
rootmessageid: 100025527-0a81aca5-472693-2552113
servermessageid: 100025527-0a71b624-472693-893907
content-encoding: gzip
vary: Accept-Encoding
x-gate-root-id: 100025527-0a81aca5-472693-2552113
x-gate-region: SHAXY
x-service-call: 0.077
access-control-expose-headers: RootMessageId, x-service-call, x-gate-region
x-gate: ctrip-gate
x-originating-url: https://us.trip.com/restapi/soa2/15353/bjjson/getNameAndSpeech?x-traceID=1806573857-1701696445431-1850760314
access-control-allow-origin: https://us.trip.com
access-control-allow-credentials: true
x-trip-region: sg, de
content-security-policy-report-only: default-src * data: blob:; connect-src https://*.tripcdn.com *.c-ctrip.com https://*.trip.com https://*.ctrip.com https://*.doubleclick.net https://*.google.com https://*.tiktok.com https://*.bing.com https://*.mapbox.com https://*.skyscanner.net https://*.tripcdn.cn https://*.google-analytics.com https://*.braze.com https://*.yandex.ru https://*.googleapis.com https://*.facebook.com https://*.googletagmanager.com https://*.gstatic.com https://wcs.naver.com https://wcs.naver.net https://connect.facebook.net https://cdn.2trk.info https://b98.yahoo.co.jp https://widget.trustpilot.com https://s.yimg.jp https://altopd.com wss://im.trip.com;script-src 'unsafe-eval' 'unsafe-inline' https://*.naver.net https://*.trip.com https://*.tripcdn.com https://*.tripcdn.cn https://*.c-ctrip.com https://*.google.com https://*.doubleclick.net https://*.googletagmanager.com https://*.google-analytics.com https://unpkg.com https://altopd.com https://*.tiktok.com https://*.facebook.net https://*.bing.com https://*.googleapis.com https://*.yahoo.co.jp https://*.2trk.info https://*.yimg.jp https://*.trustpilot.com https://appx-t2 https://*.skyscanner.net https://*.alipayobjects.com https://*.rakuten.com https://*.qunarzz.com https://*.googleadservices.com https://*.yandex.ru https://*.qq.com https://*.ctrip.com https://*.innity.net https://*.ucweb.com https://*.baidu.com https://*.googlesyndication.com https://*.jsdelivr.net https://*.tripcdn.com https://hublosk.com https://*.yimg.com https://boxclone.com https://*.hotjar.com https://*.google.ae https://*.valuecommerce.com https://*.google.de https://jullyambery.net https://*.innity.com https://appx https://*.criteo.com https://*.apaylater.com https://*.maynhtml.com https://*.google.com.my https://*.google.com.hk https://*.mapbox.com blob:; style-src 'unsafe-inline' https://*.tripcdn.com https://*.trip.com https://*.tripcdn.cn https://*.google.com https://*.googleapis.com https://*.fontawesome.com https://*.honey.io https://*.gstatic.com https://*.c-ctrip.com https://*.cloudflare.com data: ; child-src 'self' https://*.ctripcorp.com https://*.invol.co https://*.googlesyndication.com https://*.google.com https://*.trustpilot.com https://*.facebook.com https://*.lcmark.net https://*.ubpixel.com https://*.altopd.com https://*.youtube.com https://*.2trk.info https://*.2trck.pro https://*.doubleclick.net https://*.kakao.com https://*.dotomi.com https://*.tkqlhce.com https://*.criteo.com https://*.infobip.com https://*.ucweb.com https://*.moontrkr.com https://*.matterport.com https://*.trckqq.com https://*.trip.com https://altopd.com https://invol.co https://stvkr.com https://redirtrack.tech https://noop.style https://*.admitad.com https://*.kittyswell.one https://*.keloogux.world https://childrenshoppingguide.com https://*.youtube-nocookie.com https://*.factoryhotsales.shop https://*.skillmatrix.live https://shoppingderby.com blob:; object-src https://*.trip.com; report-uri https://www.trip.com/security/csp-report; report-to /security/csp-report;
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ivZ_fJ5_mgdB3q44LSIxNP5dtlpMgECiBjZjiFEOPMRCufq50SHj5g==
webresource.tripcdn.com/ares2/basebiz/i18nthirdpartresource/1.0.0/default/sdk/appleid.sdk.v1.5.4.js
200 OK 39 kB URL GET HTTP/3 webresource.tripcdn.com/ares2/basebiz/i18nthirdpartresource/1.0.0/default/sdk/appleid.sdk.v1.5.4.js
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ares2/basebiz/i18nthirdpartresource/1.0.0/default/sdk/appleid.sdk.v1.5.4.js HTTP/1.1
Host: webresource.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript
alt-svc: h3=":443"; ma=86400
age: 2777224
date: Thu, 02 Nov 2023 10:00:16 GMT
x-ares-server: r100013666-91017039-jq8jz@SHAXY
timing-allow-origin: *
access-control-allow-origin: *
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aliyun
x-ares-request-id: 65437330C74658303593A391
etag: W/"4c6815f1caa8becc73a2a4a9eb5ee7aa"
last-modified: Thu, 20 Oct 2022 07:10:01 GMT
cache-control: max-age=5184000
expires: Mon, 01 Jan 2024 10:00:16 GMT
content-encoding: gzip
x-varnish: 217090325
via: 1.1 varnish (Varnish/6.5), 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 11OTR0RcQ-Ds_65Ek9-W_xuVBVr0_Kz4q7k1FSiRVZdsMy94Hu39tg==
pages.trip.com/images/download-button/en-us/ios-en-us.png
200 OK 2.8 kB URL GET HTTP/3 pages.trip.com/images/download-button/en-us/ios-en-us.png
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type PNG image data, 220 x 66, 8-bit colormap, non-interlaced\012- data
Hash ce66491bbd178aea5276263fa866a051
ba60546e351357f742ef4005ecb350e8c2661c50
ddb57c5f8af7313925c7003ab1305ca1bfe0801007e3ad0d721a73dd544a001d
GET /images/download-button/en-us/ios-en-us.png HTTP/1.1
Host: pages.trip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Cookie: UBT_VID=1701696438140.f76e6TctnaRh; kafka_result={"isDirectVisit":"1","hasUrlLocale":"1","hasCookieLocale":"0","isUrlCookieSame":"0","isJump":"0","jumpType":"targetLocale","platform":"online","vid":"1701696438140.f76e6TctnaRh"}; ibu_online_home_language_match={"isRedirect":false,"isShowSuggestion":true,"lastVisited":true,"region":"no","redirectSymbol":false,"site_url":["us.trip.com"],"suggestion":[]}; ibulanguage=EN; ibulocale=en_us; cookiePricesDisplayed=USD; _abtest_userid=77c3b86c-476f-4ca5-8c73-e743bcffbe04; _gcl_au=1.1.2020697670.1701696447; _bfa=1.1701696438140.f76e6TctnaRh.1.1701696445418.1701696448164.1.1.10320668088
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: image/png
content-length: 2849
age: 23461
x-ares-server: r100013666-21027498-p2fvl@SHARB
x-ares-source: aliyun
x-ares-request-id: 6569B34E065CD6303608EF56
last-modified: Mon, 13 Jan 2020 11:33:31 GMT
timing-allow-origin: *
x-varnish: 118283984 112338831
via: 1.1 varnish (Varnish/6.5), 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
accept-ranges: bytes
date: Mon, 04 Dec 2023 06:56:21 GMT
cache-control: max-age=172800
expires: Wed, 06 Dec 2023 06:56:21 GMT
etag: W/"ce66491bbd178aea5276263fa866a051"
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: TdhCbOgjay863Y6Q0YV5aZniziFKLuEkLb3lIus1HRpo8DXVI6yKpQ==
aw-s.tripcdn.com/modules/ibu/online-home/onlineRecommendAttractions.203b44c0a56e81e2ca033066ca402ab7.js
200 OK 92 kB URL GET HTTP/3 aw-s.tripcdn.com/modules/ibu/online-home/onlineRecommendAttractions.203b44c0a56e81e2ca033066ca402ab7.js
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 203b44c0a56e81e2ca033066ca402ab7
9e7642db67675d74e33a173ce564e3019b6e2f36
fd914c16b0aa8b88e29b82d98caf3061a07088092f6e34d6a7d6070748c6e0dc
GET /modules/ibu/online-home/onlineRecommendAttractions.203b44c0a56e81e2ca033066ca402ab7.js HTTP/1.1
Host: aw-s.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript
alt-svc: h3=":443"; ma=86400
age: 606673
server: nginx/1.20.1
date: Mon, 27 Nov 2023 12:56:07 GMT
x-ares-server: r100013666-21038164-wf48r@FRA-AWS
timing-allow-origin: *
access-control-allow-origin: https://us.trip.com
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aws
x-ares-request-id: MAV8BA6QB5QJASDP
etag: W/"203b44c0a56e81e2ca033066ca402ab7"
last-modified: Mon, 27 Nov 2023 12:45:24 GMT
cache-control: max-age=5184000
expires: Fri, 26 Jan 2024 12:56:07 GMT
content-encoding: gzip
x-varnish: 51411252
via: 1.1 varnish (Varnish/6.5), 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: KwhvmSzu7weYib5jH_eqCHgiR77l1kXqlRqHnw2m68nkmZ4AGslzaw==
us.trip.com/?locale=en-us
200 OK 70 kB URL User Request GET HTTP/3 us.trip.com/?locale=en-us
IP
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?locale=en-us HTTP/1.1
Host: us.trip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: UBT_VID=1701696438140.f76e6TctnaRh; kafka_result={"isDirectVisit":"1","hasUrlLocale":"0","hasCookieLocale":"0","isUrlCookieSame":"0","isJump":"1","jumpType":"targetLocale","platform":"online","vid":"1701696438140.f76e6TctnaRh"}; ibu_online_home_language_match={"isRedirect":false,"isShowSuggestion":true,"lastVisited":true,"region":"no","redirectSymbol":true,"site_url":["us.trip.com"],"suggestion":["en-xx","en-us","ar-xx"]}
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/html; charset=utf-8
alt-svc: h3=":443"; ma=86400
timing-allow-origin: *
server: nginx/1.20.1
date: Mon, 04 Dec 2023 13:27:18 GMT
vary: Accept-Encoding, User-Agent
set-cookie: kafka_result={"isDirectVisit":"1","hasUrlLocale":"1","hasCookieLocale":"0","isUrlCookieSame":"0","isJump":"0","jumpType":"targetLocale","platform":"online","vid":"1701696438140.f76e6TctnaRh"}; Domain=trip.com; Expires=Tue, 03 Dec 2024 13:27:18 GMT
ibu_online_home_language_match={"isRedirect":false,"isShowSuggestion":true,"lastVisited":true,"region":"no","redirectSymbol":false,"site_url":["us.trip.com"],"suggestion":[]}; Domain=trip.com; Expires=Tue, 03 Dec 2024 13:27:18 GMT
ibulanguage=; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT
ibulanguage=EN; Max-Age=2592000; Domain=trip.com; Path=/
ibulocale=; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT
ibulocale=en_us; Max-Age=2592000; Domain=trip.com; Path=/
cookiePricesDisplayed=; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT
cookiePricesDisplayed=USD; Max-Age=2592000; Domain=trip.com; Path=/
_abtest_userid=77c3b86c-476f-4ca5-8c73-e743bcffbe04; domain=.trip.com; max-age=86400000; path=/; SameSite=None; Secure
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
etag: W/"10f9c-/XiPiBbJR/mIV7AxH29WHG8Jxqo"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-download-options: noopen
x-readtime: 116
x-trip-app-name: online-home
x-trip-app-version: 2.36.0
x-trip-app-idc: SIN-AWS
content-encoding: gzip
x-trip-region: sg, de
content-security-policy-report-only: default-src * data: blob:; connect-src https://*.tripcdn.com *.c-ctrip.com https://*.trip.com https://*.ctrip.com https://*.doubleclick.net https://*.google.com https://*.tiktok.com https://*.bing.com https://*.mapbox.com https://*.skyscanner.net https://*.tripcdn.cn https://*.google-analytics.com https://*.braze.com https://*.yandex.ru https://*.googleapis.com https://*.facebook.com https://*.googletagmanager.com https://*.gstatic.com https://wcs.naver.com https://wcs.naver.net https://connect.facebook.net https://cdn.2trk.info https://b98.yahoo.co.jp https://widget.trustpilot.com https://s.yimg.jp https://altopd.com wss://im.trip.com;script-src 'unsafe-eval' 'unsafe-inline' https://*.naver.net https://*.trip.com https://*.tripcdn.com https://*.tripcdn.cn https://*.c-ctrip.com https://*.google.com https://*.doubleclick.net https://*.googletagmanager.com https://*.google-analytics.com https://unpkg.com https://altopd.com https://*.tiktok.com https://*.facebook.net https://*.bing.com https://*.googleapis.com https://*.yahoo.co.jp https://*.2trk.info https://*.yimg.jp https://*.trustpilot.com https://appx-t2 https://*.skyscanner.net https://*.alipayobjects.com https://*.rakuten.com https://*.qunarzz.com https://*.googleadservices.com https://*.yandex.ru https://*.qq.com https://*.ctrip.com https://*.innity.net https://*.ucweb.com https://*.baidu.com https://*.googlesyndication.com https://*.jsdelivr.net https://*.tripcdn.com https://hublosk.com https://*.yimg.com https://boxclone.com https://*.hotjar.com https://*.google.ae https://*.valuecommerce.com https://*.google.de https://jullyambery.net https://*.innity.com https://appx https://*.criteo.com https://*.apaylater.com https://*.maynhtml.com https://*.google.com.my https://*.google.com.hk https://*.mapbox.com blob:; style-src 'unsafe-inline' https://*.tripcdn.com https://*.trip.com https://*.tripcdn.cn https://*.google.com https://*.googleapis.com https://*.fontawesome.com https://*.honey.io https://*.gstatic.com https://*.c-ctrip.com https://*.cloudflare.com data: ; child-src 'self' https://*.ctripcorp.com https://*.invol.co https://*.googlesyndication.com https://*.google.com https://*.trustpilot.com https://*.facebook.com https://*.lcmark.net https://*.ubpixel.com https://*.altopd.com https://*.youtube.com https://*.2trk.info https://*.2trck.pro https://*.doubleclick.net https://*.kakao.com https://*.dotomi.com https://*.tkqlhce.com https://*.criteo.com https://*.infobip.com https://*.ucweb.com https://*.moontrkr.com https://*.matterport.com https://*.trckqq.com https://*.trip.com https://altopd.com https://invol.co https://stvkr.com https://redirtrack.tech https://noop.style https://*.admitad.com https://*.kittyswell.one https://*.keloogux.world https://childrenshoppingguide.com https://*.youtube-nocookie.com https://*.factoryhotsales.shop https://*.skillmatrix.live https://shoppingderby.com blob:; object-src https://*.trip.com; report-uri https://www.trip.com/security/csp-report; report-to /security/csp-report;
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: uPH5gNXJx7e2I8KnoyKpIZsC8kGoohLt_6o8eAcjdwbUb77Sax_YXA==
aw-s.tripcdn.com/modules/ibu/online-home/hotel.5ff47e603be7fedab38b803b65c3f333.css
200 OK 100 kB URL GET HTTP/3 aw-s.tripcdn.com/modules/ibu/online-home/hotel.5ff47e603be7fedab38b803b65c3f333.css
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 100 kB (100206 bytes)
Hash 5ff47e603be7fedab38b803b65c3f333
398666fe062eb8322b0a5876d1b30f85b11ed86a
c9601b664cd58615252e544212d5847cc4445fc6b34ceb5a4bd0b68618ccc0af
GET /modules/ibu/online-home/hotel.5ff47e603be7fedab38b803b65c3f333.css HTTP/1.1
Host: aw-s.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css
content-length: 49547
age: 492955
server: nginx/1.20.1
date: Tue, 28 Nov 2023 20:31:25 GMT
x-ares-server: r100013666-21038164-2qznj@FRA-AWS
timing-allow-origin: *
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aws
x-ares-request-id: M7VMQCRMZY7DZZRJ
etag: W/"5ff47e603be7fedab38b803b65c3f333"
last-modified: Tue, 12 Sep 2023 10:42:14 GMT
cache-control: max-age=5184000
expires: Sun, 24 Dec 2023 00:09:03 GMT
content-encoding: gzip
x-varnish: 52127148 32321131
via: 1.1 varnish (Varnish/6.5), 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: cp6A13lQ59aw_X7UQFjsylyEjsF66NxohiZBgKo8sCzsL2PIC_-CJg==
us.trip.com/restapi/soa2/13909/getUspInfo?x-traceID=1825507828-1701696445535-1488456114
200 OK 1.2 kB URL POST HTTP/3 us.trip.com/restapi/soa2/13909/getUspInfo?x-traceID=1825507828-1701696445535-1488456114
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type troff or preprocessor input, ASCII text, with very long lines (1338), with no line terminators
Hash e25e864af12306e48e483dc7fdaa56b1
96f6be3b15e577fa9d62f894b1fb11194a51f04e
9a7207f602d208cafa976981ec601809fff7cc3ffe7d9e628d827fed51cc81bb
POST /restapi/soa2/13909/getUspInfo?x-traceID=1825507828-1701696445535-1488456114 HTTP/1.1
Host: us.trip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
locale: en-US
currency: USD
x-traceID: 1825507828-1701696445535-1488456114
trip-trace-id: 1825507828-1701696445535-1488456114
Content-Type: application/json
Content-Length: 132
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/?locale=en-us
Cookie: UBT_VID=1701696438140.f76e6TctnaRh; kafka_result={"isDirectVisit":"1","hasUrlLocale":"1","hasCookieLocale":"0","isUrlCookieSame":"0","isJump":"0","jumpType":"targetLocale","platform":"online","vid":"1701696438140.f76e6TctnaRh"}; ibu_online_home_language_match={"isRedirect":false,"isShowSuggestion":true,"lastVisited":true,"region":"no","redirectSymbol":false,"site_url":["us.trip.com"],"suggestion":[]}; ibulanguage=EN; ibulocale=en_us; cookiePricesDisplayed=USD; _abtest_userid=77c3b86c-476f-4ca5-8c73-e743bcffbe04
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/json;charset=UTF-8
alt-svc: h3=":443"; ma=86400
timing-allow-origin: *
server: nginx/1.20.1
date: Mon, 04 Dec 2023 13:27:20 GMT
clogging_trace_id: 7326656765793594171
rootmessageid: 100025527-0a8192f0-472693-2552732
servermessageid: 100025527-0a3c7f09-472693-962122
content-encoding: gzip
vary: accept-encoding
x-gate-root-id: 100025527-0a8192f0-472693-2552732
x-gate-region: SHARB
x-service-call: 0.072
access-control-expose-headers: RootMessageId, x-service-call, x-gate-region
x-gate: ctrip-gate
x-originating-url: https://us.trip.com/restapi/soa2/13909/getUspInfo?x-traceID=1825507828-1701696445535-1488456114
access-control-allow-origin: https://us.trip.com
access-control-allow-credentials: true
x-trip-region: sg, de
content-security-policy-report-only: default-src * data: blob:; connect-src https://*.tripcdn.com *.c-ctrip.com https://*.trip.com https://*.ctrip.com https://*.doubleclick.net https://*.google.com https://*.tiktok.com https://*.bing.com https://*.mapbox.com https://*.skyscanner.net https://*.tripcdn.cn https://*.google-analytics.com https://*.braze.com https://*.yandex.ru https://*.googleapis.com https://*.facebook.com https://*.googletagmanager.com https://*.gstatic.com https://wcs.naver.com https://wcs.naver.net https://connect.facebook.net https://cdn.2trk.info https://b98.yahoo.co.jp https://widget.trustpilot.com https://s.yimg.jp https://altopd.com wss://im.trip.com;script-src 'unsafe-eval' 'unsafe-inline' https://*.naver.net https://*.trip.com https://*.tripcdn.com https://*.tripcdn.cn https://*.c-ctrip.com https://*.google.com https://*.doubleclick.net https://*.googletagmanager.com https://*.google-analytics.com https://unpkg.com https://altopd.com https://*.tiktok.com https://*.facebook.net https://*.bing.com https://*.googleapis.com https://*.yahoo.co.jp https://*.2trk.info https://*.yimg.jp https://*.trustpilot.com https://appx-t2 https://*.skyscanner.net https://*.alipayobjects.com https://*.rakuten.com https://*.qunarzz.com https://*.googleadservices.com https://*.yandex.ru https://*.qq.com https://*.ctrip.com https://*.innity.net https://*.ucweb.com https://*.baidu.com https://*.googlesyndication.com https://*.jsdelivr.net https://*.tripcdn.com https://hublosk.com https://*.yimg.com https://boxclone.com https://*.hotjar.com https://*.google.ae https://*.valuecommerce.com https://*.google.de https://jullyambery.net https://*.innity.com https://appx https://*.criteo.com https://*.apaylater.com https://*.maynhtml.com https://*.google.com.my https://*.google.com.hk https://*.mapbox.com blob:; style-src 'unsafe-inline' https://*.tripcdn.com https://*.trip.com https://*.tripcdn.cn https://*.google.com https://*.googleapis.com https://*.fontawesome.com https://*.honey.io https://*.gstatic.com https://*.c-ctrip.com https://*.cloudflare.com data: ; child-src 'self' https://*.ctripcorp.com https://*.invol.co https://*.googlesyndication.com https://*.google.com https://*.trustpilot.com https://*.facebook.com https://*.lcmark.net https://*.ubpixel.com https://*.altopd.com https://*.youtube.com https://*.2trk.info https://*.2trck.pro https://*.doubleclick.net https://*.kakao.com https://*.dotomi.com https://*.tkqlhce.com https://*.criteo.com https://*.infobip.com https://*.ucweb.com https://*.moontrkr.com https://*.matterport.com https://*.trckqq.com https://*.trip.com https://altopd.com https://invol.co https://stvkr.com https://redirtrack.tech https://noop.style https://*.admitad.com https://*.kittyswell.one https://*.keloogux.world https://childrenshoppingguide.com https://*.youtube-nocookie.com https://*.factoryhotsales.shop https://*.skillmatrix.live https://shoppingderby.com blob:; object-src https://*.trip.com; report-uri https://www.trip.com/security/csp-report; report-to /security/csp-report;
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Xj6M_7D_3lraROtaMUAscQMpnsZpaaCoxZ1F_Rjqld_Umgce64C26g==
pages.trip.com/images/app-download/screenshot/en-us-phone.jpg
200 OK 346 kB URL GET HTTP/3 pages.trip.com/images/app-download/screenshot/en-us-phone.jpg
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 750x1624, components 3\012- data
Size 346 kB (346496 bytes)
Hash a71b709316f9e5751e8f198885ec3570
313a4ef260d46bb63b219485463289d7f051702b
3a02e5f0a9145b96ec63a0e27049e117317c12346473ddb252fd5cb95d9d577f
GET /images/app-download/screenshot/en-us-phone.jpg HTTP/1.1
Host: pages.trip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Cookie: UBT_VID=1701696438140.f76e6TctnaRh; kafka_result={"isDirectVisit":"1","hasUrlLocale":"1","hasCookieLocale":"0","isUrlCookieSame":"0","isJump":"0","jumpType":"targetLocale","platform":"online","vid":"1701696438140.f76e6TctnaRh"}; ibu_online_home_language_match={"isRedirect":false,"isShowSuggestion":true,"lastVisited":true,"region":"no","redirectSymbol":false,"site_url":["us.trip.com"],"suggestion":[]}; ibulanguage=EN; ibulocale=en_us; cookiePricesDisplayed=USD; _abtest_userid=77c3b86c-476f-4ca5-8c73-e743bcffbe04; _gcl_au=1.1.2020697670.1701696447; _bfa=1.1701696438140.f76e6TctnaRh.1.1701696445418.1701696448164.1.1.10320668088
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: image/jpeg
content-length: 346496
age: 100046
date: Sun, 03 Dec 2023 09:39:55 GMT
x-ares-server: r100013666-91017039-drnlz@SHAXY
x-ares-source: aliyun
x-ares-request-id: 656C4CEB646AC93234B01EC1
etag: W/"a71b709316f9e5751e8f198885ec3570"
last-modified: Thu, 20 Apr 2023 11:54:48 GMT
cache-control: max-age=172800
expires: Tue, 05 Dec 2023 09:39:55 GMT
timing-allow-origin: *
x-varnish: 542041978
via: 1.1 varnish (Varnish/6.5), 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-device: U R Android
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: LrRGCk-QirEqz0Np03AHoT-iCi3cLqOYOmjK5w9oWXBMOZ97iXdn-g==
ak-d.tripcdn.com/images/0106c120008i7jy6f1840_C_550_412.jpg
200 OK 31 kB URL GET HTTP/3 ak-d.tripcdn.com/images/0106c120008i7jy6f1840_C_550_412.jpg
IP
ASN #20940 Akamai International B.V.
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerDigiCert Inc
Subject*.tripcdn.com
Fingerprint39:6D:BD:C3:37:CE:BB:D7:E0:9C:B9:5D:15:48:7D:02:6D:95:1D:6C
ValidityThu, 06 Apr 2023 00:00:00 GMT - Fri, 05 Apr 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 550x412, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash c1c7ec10859b859554fb4b642e51e9da
7c3a0736bcf6700cdaa267dee40b7df7dfc84397
8a3aebbe4798177242679db10eb29f879ec58b653d99b423960ac1fa74925274
GET /images/0106c120008i7jy6f1840_C_550_412.jpg HTTP/1.1
Host: ak-d.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: image/webp
content-length: 31280
access-control-allow-origin: *
etag: sPREpsiFkE,010
last-modified: Tue, 31 Oct 2023 08:16:43 GMT
cache-control: max-age=7736070
expires: Sun, 03 Mar 2024 02:21:53 GMT
date: Mon, 04 Dec 2023 13:27:23 GMT
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
timing-allow-origin: *
us.trip.com/pages/appdownload/api/queryOneLink?x-traceID=1529504401-1701696448041-1307915725
200 OK 2.6 kB URL POST HTTP/3 us.trip.com/pages/appdownload/api/queryOneLink?x-traceID=1529504401-1701696448041-1307915725
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type troff or preprocessor input, ASCII text, with very long lines (2614), with no line terminators
Hash fd0684d852d2d6ded381633862c1dcbc
4706656e5776a294ecf36d60849bb17a5e1f5e5a
1a1839f0af126d8c96f1f49cb4923c3b4135d69261337c2a532d31eb41d9f17e
POST /pages/appdownload/api/queryOneLink?x-traceID=1529504401-1701696448041-1307915725 HTTP/1.1
Host: us.trip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
locale: en-US
currency: USD
x-traceID: 1529504401-1701696448041-1307915725
trip-trace-id: 1529504401-1701696448041-1307915725
Content-Type: application/json
Content-Length: 250
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/?locale=en-us
Cookie: UBT_VID=1701696438140.f76e6TctnaRh; kafka_result={"isDirectVisit":"1","hasUrlLocale":"1","hasCookieLocale":"0","isUrlCookieSame":"0","isJump":"0","jumpType":"targetLocale","platform":"online","vid":"1701696438140.f76e6TctnaRh"}; ibu_online_home_language_match={"isRedirect":false,"isShowSuggestion":true,"lastVisited":true,"region":"no","redirectSymbol":false,"site_url":["us.trip.com"],"suggestion":[]}; ibulanguage=EN; ibulocale=en_us; cookiePricesDisplayed=USD; _abtest_userid=77c3b86c-476f-4ca5-8c73-e743bcffbe04; _tp_search_latest_channel_name=hotels; _gcl_au=1.1.2020697670.1701696447; _fwb=254FjNz9nuUbqsIQWYSUhsh.1701696447115; NA_SAC=dT1odHRwcyUzQSUyRiUyRnVzLnRyaXAuY29tJTJGJTNGbG9jYWxlJTNEZW4tdXN8cj0=; wcs_bt=s_33fb334966e9:1701696447
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/json; charset=utf-8
content-length: 2586
timing-allow-origin: *
server: nginx/1.20.1
date: Mon, 04 Dec 2023 13:27:23 GMT
etag: "a1a-dHehVSF1QzavBVj7ThduJm/L5+I"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-download-options: noopen
x-readtime: 28
x-trip-app-name: universal-trip-pages
x-trip-app-version: 2.3.12
x-trip-region: sg, de
content-security-policy-report-only: default-src * data: blob:; connect-src https://*.tripcdn.com *.c-ctrip.com https://*.trip.com https://*.ctrip.com https://*.doubleclick.net https://*.google.com https://*.tiktok.com https://*.bing.com https://*.mapbox.com https://*.skyscanner.net https://*.tripcdn.cn https://*.google-analytics.com https://*.braze.com https://*.yandex.ru https://*.googleapis.com https://*.facebook.com https://*.googletagmanager.com https://*.gstatic.com https://wcs.naver.com https://wcs.naver.net https://connect.facebook.net https://cdn.2trk.info https://b98.yahoo.co.jp https://widget.trustpilot.com https://s.yimg.jp https://altopd.com wss://im.trip.com;script-src 'unsafe-eval' 'unsafe-inline' https://*.naver.net https://*.trip.com https://*.tripcdn.com https://*.tripcdn.cn https://*.c-ctrip.com https://*.google.com https://*.doubleclick.net https://*.googletagmanager.com https://*.google-analytics.com https://unpkg.com https://altopd.com https://*.tiktok.com https://*.facebook.net https://*.bing.com https://*.googleapis.com https://*.yahoo.co.jp https://*.2trk.info https://*.yimg.jp https://*.trustpilot.com https://appx-t2 https://*.skyscanner.net https://*.alipayobjects.com https://*.rakuten.com https://*.qunarzz.com https://*.googleadservices.com https://*.yandex.ru https://*.qq.com https://*.ctrip.com https://*.innity.net https://*.ucweb.com https://*.baidu.com https://*.googlesyndication.com https://*.jsdelivr.net https://*.tripcdn.com https://hublosk.com https://*.yimg.com https://boxclone.com https://*.hotjar.com https://*.google.ae https://*.valuecommerce.com https://*.google.de https://jullyambery.net https://*.innity.com https://appx https://*.criteo.com https://*.apaylater.com https://*.maynhtml.com https://*.google.com.my https://*.google.com.hk https://*.mapbox.com blob:; style-src 'unsafe-inline' https://*.tripcdn.com https://*.trip.com https://*.tripcdn.cn https://*.google.com https://*.googleapis.com https://*.fontawesome.com https://*.honey.io https://*.gstatic.com https://*.c-ctrip.com https://*.cloudflare.com data: ; child-src 'self' https://*.ctripcorp.com https://*.invol.co https://*.googlesyndication.com https://*.google.com https://*.trustpilot.com https://*.facebook.com https://*.lcmark.net https://*.ubpixel.com https://*.altopd.com https://*.youtube.com https://*.2trk.info https://*.2trck.pro https://*.doubleclick.net https://*.kakao.com https://*.dotomi.com https://*.tkqlhce.com https://*.criteo.com https://*.infobip.com https://*.ucweb.com https://*.moontrkr.com https://*.matterport.com https://*.trckqq.com https://*.trip.com https://altopd.com https://invol.co https://stvkr.com https://redirtrack.tech https://noop.style https://*.admitad.com https://*.kittyswell.one https://*.keloogux.world https://childrenshoppingguide.com https://*.youtube-nocookie.com https://*.factoryhotsales.shop https://*.skillmatrix.live https://shoppingderby.com blob:; object-src https://*.trip.com; report-uri https://www.trip.com/security/csp-report; report-to /security/csp-report;
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: nWVZ3a_k3vRqS5Zz6xsJ3pyNDkbzmKtcvcKQO0dvVE5MOOpq8gjPXg==
us.trip.com/htls/getHotDestination?x-traceID=1170076499-1701696447320-1247232426
200 OK 2.7 kB URL POST HTTP/3 us.trip.com/htls/getHotDestination?x-traceID=1170076499-1701696447320-1247232426
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
File type troff or preprocessor input, ASCII text, with very long lines (3157), with no line terminators
Hash 7222111379c7b34c03c0bdb3500e8c17
c8238d53ea1096c19e5f64aa8c667d6fa5b4124f
e7074f3d0c91a4d265472777ac081aea7f1708a37e79ef8ea8b1575ff7152ea0
POST /htls/getHotDestination?x-traceID=1170076499-1701696447320-1247232426 HTTP/1.1
Host: us.trip.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
P: 68828788967
PID: 4879ac04-1bb8-4f05-9332-1066cba80bf5
Content-Type: application/json
Content-Length: 642
Origin: https://us.trip.com
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/?locale=en-us
Cookie: UBT_VID=1701696438140.f76e6TctnaRh; kafka_result={"isDirectVisit":"1","hasUrlLocale":"1","hasCookieLocale":"0","isUrlCookieSame":"0","isJump":"0","jumpType":"targetLocale","platform":"online","vid":"1701696438140.f76e6TctnaRh"}; ibu_online_home_language_match={"isRedirect":false,"isShowSuggestion":true,"lastVisited":true,"region":"no","redirectSymbol":false,"site_url":["us.trip.com"],"suggestion":[]}; ibulanguage=EN; ibulocale=en_us; cookiePricesDisplayed=USD; _abtest_userid=77c3b86c-476f-4ca5-8c73-e743bcffbe04; _tp_search_latest_channel_name=hotels; _gcl_au=1.1.2020697670.1701696447; _fwb=254FjNz9nuUbqsIQWYSUhsh.1701696447115; NA_SAC=dT1odHRwcyUzQSUyRiUyRnVzLnRyaXAuY29tJTJGJTNGbG9jYWxlJTNEZW4tdXN8cj0=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/json; charset=utf-8
alt-svc: h3=":443"; ma=86400
timing-allow-origin: *
server: nginx/1.20.1
date: Mon, 04 Dec 2023 13:27:22 GMT
vary: Origin, Accept-Encoding
access-control-allow-origin: https://us.trip.com
access-control-allow-credentials: true
rootmessageid: 100034710-0a7136c6-472693-572524
content-encoding: br
x-trip-region: sg, de
content-security-policy-report-only: default-src * data: blob:; connect-src https://*.tripcdn.com *.c-ctrip.com https://*.trip.com https://*.ctrip.com https://*.doubleclick.net https://*.google.com https://*.tiktok.com https://*.bing.com https://*.mapbox.com https://*.skyscanner.net https://*.tripcdn.cn https://*.google-analytics.com https://*.braze.com https://*.yandex.ru https://*.googleapis.com https://*.facebook.com https://*.googletagmanager.com https://*.gstatic.com https://wcs.naver.com https://wcs.naver.net https://connect.facebook.net https://cdn.2trk.info https://b98.yahoo.co.jp https://widget.trustpilot.com https://s.yimg.jp https://altopd.com wss://im.trip.com;script-src 'unsafe-eval' 'unsafe-inline' https://*.naver.net https://*.trip.com https://*.tripcdn.com https://*.tripcdn.cn https://*.c-ctrip.com https://*.google.com https://*.doubleclick.net https://*.googletagmanager.com https://*.google-analytics.com https://unpkg.com https://altopd.com https://*.tiktok.com https://*.facebook.net https://*.bing.com https://*.googleapis.com https://*.yahoo.co.jp https://*.2trk.info https://*.yimg.jp https://*.trustpilot.com https://appx-t2 https://*.skyscanner.net https://*.alipayobjects.com https://*.rakuten.com https://*.qunarzz.com https://*.googleadservices.com https://*.yandex.ru https://*.qq.com https://*.ctrip.com https://*.innity.net https://*.ucweb.com https://*.baidu.com https://*.googlesyndication.com https://*.jsdelivr.net https://*.tripcdn.com https://hublosk.com https://*.yimg.com https://boxclone.com https://*.hotjar.com https://*.google.ae https://*.valuecommerce.com https://*.google.de https://jullyambery.net https://*.innity.com https://appx https://*.criteo.com https://*.apaylater.com https://*.maynhtml.com https://*.google.com.my https://*.google.com.hk https://*.mapbox.com blob:; style-src 'unsafe-inline' https://*.tripcdn.com https://*.trip.com https://*.tripcdn.cn https://*.google.com https://*.googleapis.com https://*.fontawesome.com https://*.honey.io https://*.gstatic.com https://*.c-ctrip.com https://*.cloudflare.com data: ; child-src 'self' https://*.ctripcorp.com https://*.invol.co https://*.googlesyndication.com https://*.google.com https://*.trustpilot.com https://*.facebook.com https://*.lcmark.net https://*.ubpixel.com https://*.altopd.com https://*.youtube.com https://*.2trk.info https://*.2trck.pro https://*.doubleclick.net https://*.kakao.com https://*.dotomi.com https://*.tkqlhce.com https://*.criteo.com https://*.infobip.com https://*.ucweb.com https://*.moontrkr.com https://*.matterport.com https://*.trckqq.com https://*.trip.com https://altopd.com https://invol.co https://stvkr.com https://redirtrack.tech https://noop.style https://*.admitad.com https://*.kittyswell.one https://*.keloogux.world https://childrenshoppingguide.com https://*.youtube-nocookie.com https://*.factoryhotsales.shop https://*.skillmatrix.live https://shoppingderby.com blob:; object-src https://*.trip.com; report-uri https://www.trip.com/security/csp-report; report-to /security/csp-report;
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: gFhtUX6wnBcpOW1q1SnIXBUdkVcQnY52Ng3hW_2l2rR3E4o3VY4YdQ==
webresource.tripcdn.com/ares2/basebiz/i18nthirdpartresource/1.0.0/default/sdk/facebook.sdk.v1006418595.js
200 OK 300 kB URL GET HTTP/3 webresource.tripcdn.com/ares2/basebiz/i18nthirdpartresource/1.0.0/default/sdk/facebook.sdk.v1006418595.js
IP
Requested by https://us.trip.com/?locale=en-us
Certificate IssuerGlobalSign nv-sa
Subject*.trip.com
Fingerprint03:16:CF:85:EB:99:74:9D:D9:5F:2D:2D:E1:4D:83:B8:9A:3C:73:5A
ValidityFri, 04 Aug 2023 06:31:05 GMT - Wed, 04 Sep 2024 06:31:04 GMT
Size 300 kB (300434 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ares2/basebiz/i18nthirdpartresource/1.0.0/default/sdk/facebook.sdk.v1006418595.js HTTP/1.1
Host: webresource.tripcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us.trip.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript
alt-svc: h3=":443"; ma=86400
age: 2777224
date: Thu, 02 Nov 2023 10:00:16 GMT
x-ares-server: r100013666-91017039-x2zdw@SHAXY
timing-allow-origin: *
access-control-allow-origin: *
access-control-expose-headers: cache-control
access-control-allow-credentials: true
x-ares-source: aliyun
x-ares-request-id: 6543733025DEFD38363672F1
etag: W/"34f3c41aa28f8b2bfb0a25741edeaea7"
last-modified: Thu, 20 Oct 2022 07:10:01 GMT
cache-control: max-age=5184000
expires: Mon, 01 Jan 2024 10:00:16 GMT
content-encoding: gzip
x-varnish: 185666431
via: 1.1 varnish (Varnish/6.5), 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
accept-ranges: bytes
vary: Origin,Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: z-xHBgclt-xMDeB5sDNnRF0K0Byn--2c5eYnd9qN58plG3E2jJuMxA==
54.230.111.128
23.195.255.54
3.123.186.207
110.93.147.30
2.18.121.73
0.0.0.0